wpa_supplicant/ctrl_iface.c

   1 /*
   2  * WPA Supplicant / Control interface (shared code for all backends)
   3  * Copyright (c) 2004-2012, Jouni Malinen <j@w1.fi>
   4  *
   5  * This software may be distributed under the terms of the BSD license.
   6  * See README for more details.
   7  */
   8
   9 #include "utils/includes.h"
  10
  11 #include "utils/common.h"
  12 #include "utils/eloop.h"
  13 #include "common/version.h"
  14 #include "common/ieee802_11_defs.h"
  15 #include "common/ieee802_11_common.h"
  16 #include "common/wpa_ctrl.h"
  17 #include "eap_peer/eap.h"
  18 #include "eapol_supp/eapol_supp_sm.h"
  19 #include "rsn_supp/wpa.h"
  20 #include "rsn_supp/preauth.h"
  21 #include "rsn_supp/pmksa_cache.h"
  22 #include "l2_packet/l2_packet.h"
  23 #include "wps/wps.h"
  24 #include "config.h"
  25 #include "wpa_supplicant_i.h"
  26 #include "driver_i.h"
  27 #include "wps_supplicant.h"
  28 #include "ibss_rsn.h"
  29 #include "ap.h"
  30 #include "p2p_supplicant.h"
  31 #include "p2p/p2p.h"
  32 #include "hs20_supplicant.h"
  33 #include "wifi_display.h"
  34 #include "notify.h"
  35 #include "bss.h"
  36 #include "scan.h"
  37 #include "ctrl_iface.h"
  38 #include "interworking.h"
  39 #include "blacklist.h"
  40 #include "autoscan.h"
  41 #include "wnm_sta.h"
  42
  43 extern struct wpa_driver_ops *wpa_drivers[];
  44
  45 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
  46                                             char *buf, int len);
  47 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
  48                                                   char *buf, int len);
  49
  50
  51 static int pno_start(struct wpa_supplicant *wpa_s)
  52 {
  53         int ret;
  54         size_t i, num_ssid;
  55         struct wpa_ssid *ssid;
  56         struct wpa_driver_scan_params params;
  57
  58         if (wpa_s->pno)
  59                 return 0;
  60
  61         if (wpa_s->wpa_state == WPA_SCANNING) {
  62                 wpa_supplicant_cancel_sched_scan(wpa_s);
  63                 wpa_supplicant_cancel_scan(wpa_s);
  64         }
  65
  66         os_memset(&params, 0, sizeof(params));
  67
  68         num_ssid = 0;
  69         ssid = wpa_s->conf->ssid;
  70         while (ssid) {
  71                 if (!wpas_network_disabled(wpa_s, ssid))
  72                         num_ssid++;
  73                 ssid = ssid->next;
  74         }
  75         if (num_ssid > WPAS_MAX_SCAN_SSIDS) {
  76                 wpa_printf(MSG_DEBUG, "PNO: Use only the first %u SSIDs from "
  77                            "%u", WPAS_MAX_SCAN_SSIDS, (unsigned int) num_ssid);
  78                 num_ssid = WPAS_MAX_SCAN_SSIDS;
  79         }
  80
  81         if (num_ssid == 0) {
  82                 wpa_printf(MSG_DEBUG, "PNO: No configured SSIDs");
  83                 return -1;
  84         }
  85
  86         params.filter_ssids = os_malloc(sizeof(struct wpa_driver_scan_filter) *
  87                                         num_ssid);
  88         if (params.filter_ssids == NULL)
  89                 return -1;
  90         i = 0;
  91         ssid = wpa_s->conf->ssid;
  92         while (ssid) {
  93                 if (!wpas_network_disabled(wpa_s, ssid)) {
  94                         params.ssids[i].ssid = ssid->ssid;
  95                         params.ssids[i].ssid_len = ssid->ssid_len;
  96                         params.num_ssids++;
  97                         os_memcpy(params.filter_ssids[i].ssid, ssid->ssid,
  98                                   ssid->ssid_len);
  99                         params.filter_ssids[i].ssid_len = ssid->ssid_len;
 100                         params.num_filter_ssids++;
 101                         i++;
 102                         if (i == num_ssid)
 103                                 break;
 104                 }
 105                 ssid = ssid->next;
 106         }
 107
 108         if (wpa_s->conf->filter_rssi)
 109                 params.filter_rssi = wpa_s->conf->filter_rssi;
 110
 111         ret = wpa_drv_sched_scan(wpa_s, &params, 10 * 1000);
 112         os_free(params.filter_ssids);
 113         if (ret == 0)
 114                 wpa_s->pno = 1;
 115         return ret;
 116 }
 117
 118
 119 static int pno_stop(struct wpa_supplicant *wpa_s)
 120 {
 121         int ret = 0;
 122
 123         if (wpa_s->pno) {
 124                 wpa_s->pno = 0;
 125                 ret = wpa_drv_stop_sched_scan(wpa_s);
 126         }
 127
 128         if (wpa_s->wpa_state == WPA_SCANNING)
 129                 wpa_supplicant_req_scan(wpa_s, 0, 0);
 130
 131         return ret;
 132 }
 133
 134
 135 static int set_bssid_filter(struct wpa_supplicant *wpa_s, char *val)
 136 {
 137         char *pos;
 138         u8 addr[ETH_ALEN], *filter = NULL, *n;
 139         size_t count = 0;
 140
 141         pos = val;
 142         while (pos) {
 143                 if (*pos == '\0')
 144                         break;
 145                 if (hwaddr_aton(pos, addr)) {
 146                         os_free(filter);
 147                         return -1;
 148                 }
 149                 n = os_realloc_array(filter, count + 1, ETH_ALEN);
 150                 if (n == NULL) {
 151                         os_free(filter);
 152                         return -1;
 153                 }
 154                 filter = n;
 155                 os_memcpy(filter + count * ETH_ALEN, addr, ETH_ALEN);
 156                 count++;
 157
 158                 pos = os_strchr(pos, ' ');
 159                 if (pos)
 160                         pos++;
 161         }
 162
 163         wpa_hexdump(MSG_DEBUG, "bssid_filter", filter, count * ETH_ALEN);
 164         os_free(wpa_s->bssid_filter);
 165         wpa_s->bssid_filter = filter;
 166         wpa_s->bssid_filter_count = count;
 167
 168         return 0;
 169 }
 170
 171
 172 static int set_disallow_aps(struct wpa_supplicant *wpa_s, char *val)
 173 {
 174         char *pos;
 175         u8 addr[ETH_ALEN], *bssid = NULL, *n;
 176         struct wpa_ssid_value *ssid = NULL, *ns;
 177         size_t count = 0, ssid_count = 0;
 178         struct wpa_ssid *c;
 179
 180         /*
 181          * disallow_list ::= <ssid_spec> | <bssid_spec> | <disallow_list> | “”
 182          * SSID_SPEC ::= ssid <SSID_HEX>
 183          * BSSID_SPEC ::= bssid <BSSID_HEX>
 184          */
 185
 186         pos = val;
 187         while (pos) {
 188                 if (*pos == '\0')
 189                         break;
 190                 if (os_strncmp(pos, "bssid ", 6) == 0) {
 191                         int res;
 192                         pos += 6;
 193                         res = hwaddr_aton2(pos, addr);
 194                         if (res < 0) {
 195                                 os_free(ssid);
 196                                 os_free(bssid);
 197                                 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
 198                                            "BSSID value '%s'", pos);
 199                                 return -1;
 200                         }
 201                         pos += res;
 202                         n = os_realloc_array(bssid, count + 1, ETH_ALEN);
 203                         if (n == NULL) {
 204                                 os_free(ssid);
 205                                 os_free(bssid);
 206                                 return -1;
 207                         }
 208                         bssid = n;
 209                         os_memcpy(bssid + count * ETH_ALEN, addr, ETH_ALEN);
 210                         count++;
 211                 } else if (os_strncmp(pos, "ssid ", 5) == 0) {
 212                         char *end;
 213                         pos += 5;
 214
 215                         end = pos;
 216                         while (*end) {
 217                                 if (*end == '\0' || *end == ' ')
 218                                         break;
 219                                 end++;
 220                         }
 221
 222                         ns = os_realloc_array(ssid, ssid_count + 1,
 223                                               sizeof(struct wpa_ssid_value));
 224                         if (ns == NULL) {
 225                                 os_free(ssid);
 226                                 os_free(bssid);
 227                                 return -1;
 228                         }
 229                         ssid = ns;
 230
 231                         if ((end - pos) & 0x01 || end - pos > 2 * 32 ||
 232                             hexstr2bin(pos, ssid[ssid_count].ssid,
 233                                        (end - pos) / 2) < 0) {
 234                                 os_free(ssid);
 235                                 os_free(bssid);
 236                                 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
 237                                            "SSID value '%s'", pos);
 238                                 return -1;
 239                         }
 240                         ssid[ssid_count].ssid_len = (end - pos) / 2;
 241                         wpa_hexdump_ascii(MSG_DEBUG, "disallow_aps SSID",
 242                                           ssid[ssid_count].ssid,
 243                                           ssid[ssid_count].ssid_len);
 244                         ssid_count++;
 245                         pos = end;
 246                 } else {
 247                         wpa_printf(MSG_DEBUG, "Unexpected disallow_aps value "
 248                                    "'%s'", pos);
 249                         os_free(ssid);
 250                         os_free(bssid);
 251                         return -1;
 252                 }
 253
 254                 pos = os_strchr(pos, ' ');
 255                 if (pos)
 256                         pos++;
 257         }
 258
 259         wpa_hexdump(MSG_DEBUG, "disallow_aps_bssid", bssid, count * ETH_ALEN);
 260         os_free(wpa_s->disallow_aps_bssid);
 261         wpa_s->disallow_aps_bssid = bssid;
 262         wpa_s->disallow_aps_bssid_count = count;
 263
 264         wpa_printf(MSG_DEBUG, "disallow_aps_ssid_count %d", (int) ssid_count);
 265         os_free(wpa_s->disallow_aps_ssid);
 266         wpa_s->disallow_aps_ssid = ssid;
 267         wpa_s->disallow_aps_ssid_count = ssid_count;
 268
 269         if (!wpa_s->current_ssid || wpa_s->wpa_state < WPA_AUTHENTICATING)
 270                 return 0;
 271
 272         c = wpa_s->current_ssid;
 273         if (c->mode != WPAS_MODE_INFRA && c->mode != WPAS_MODE_IBSS)
 274                 return 0;
 275
 276         if (!disallowed_bssid(wpa_s, wpa_s->bssid) &&
 277             !disallowed_ssid(wpa_s, c->ssid, c->ssid_len))
 278                 return 0;
 279
 280         wpa_printf(MSG_DEBUG, "Disconnect and try to find another network "
 281                    "because current AP was marked disallowed");
 282
 283 #ifdef CONFIG_SME
 284         wpa_s->sme.prev_bssid_set = 0;
 285 #endif /* CONFIG_SME */
 286         wpa_s->reassociate = 1;
 287         wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
 288         wpa_supplicant_req_scan(wpa_s, 0, 0);
 289
 290         return 0;
 291 }
 292
 293
 294 static int wpa_supplicant_ctrl_iface_set(struct wpa_supplicant *wpa_s,
 295                                          char *cmd)
 296 {
 297         char *value;
 298         int ret = 0;
 299
 300         value = os_strchr(cmd, ' ');
 301         if (value == NULL)
 302                 return -1;
 303         *value++ = '\0';
 304
 305         wpa_printf(MSG_DEBUG, "CTRL_IFACE SET '%s'='%s'", cmd, value);
 306         if (os_strcasecmp(cmd, "EAPOL::heldPeriod") == 0) {
 307                 eapol_sm_configure(wpa_s->eapol,
 308                                    atoi(value), -1, -1, -1);
 309         } else if (os_strcasecmp(cmd, "EAPOL::authPeriod") == 0) {
 310                 eapol_sm_configure(wpa_s->eapol,
 311                                    -1, atoi(value), -1, -1);
 312         } else if (os_strcasecmp(cmd, "EAPOL::startPeriod") == 0) {
 313                 eapol_sm_configure(wpa_s->eapol,
 314                                    -1, -1, atoi(value), -1);
 315         } else if (os_strcasecmp(cmd, "EAPOL::maxStart") == 0) {
 316                 eapol_sm_configure(wpa_s->eapol,
 317                                    -1, -1, -1, atoi(value));
 318         } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKLifetime") == 0) {
 319                 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME,
 320                                      atoi(value)))
 321                         ret = -1;
 322         } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKReauthThreshold") ==
 323                    0) {
 324                 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD,
 325                                      atoi(value)))
 326                         ret = -1;
 327         } else if (os_strcasecmp(cmd, "dot11RSNAConfigSATimeout") == 0) {
 328                 if (wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, atoi(value)))
 329                         ret = -1;
 330         } else if (os_strcasecmp(cmd, "wps_fragment_size") == 0) {
 331                 wpa_s->wps_fragment_size = atoi(value);
 332 #ifdef CONFIG_WPS_TESTING
 333         } else if (os_strcasecmp(cmd, "wps_version_number") == 0) {
 334                 long int val;
 335                 val = strtol(value, NULL, 0);
 336                 if (val < 0 || val > 0xff) {
 337                         ret = -1;
 338                         wpa_printf(MSG_DEBUG, "WPS: Invalid "
 339                                    "wps_version_number %ld", val);
 340                 } else {
 341                         wps_version_number = val;
 342                         wpa_printf(MSG_DEBUG, "WPS: Testing - force WPS "
 343                                    "version %u.%u",
 344                                    (wps_version_number & 0xf0) >> 4,
 345                                    wps_version_number & 0x0f);
 346                 }
 347         } else if (os_strcasecmp(cmd, "wps_testing_dummy_cred") == 0) {
 348                 wps_testing_dummy_cred = atoi(value);
 349                 wpa_printf(MSG_DEBUG, "WPS: Testing - dummy_cred=%d",
 350                            wps_testing_dummy_cred);
 351 #endif /* CONFIG_WPS_TESTING */
 352         } else if (os_strcasecmp(cmd, "ampdu") == 0) {
 353                 if (wpa_drv_ampdu(wpa_s, atoi(value)) < 0)
 354                         ret = -1;
 355 #ifdef CONFIG_TDLS_TESTING
 356         } else if (os_strcasecmp(cmd, "tdls_testing") == 0) {
 357                 extern unsigned int tdls_testing;
 358                 tdls_testing = strtol(value, NULL, 0);
 359                 wpa_printf(MSG_DEBUG, "TDLS: tdls_testing=0x%x", tdls_testing);
 360 #endif /* CONFIG_TDLS_TESTING */
 361 #ifdef CONFIG_TDLS
 362         } else if (os_strcasecmp(cmd, "tdls_disabled") == 0) {
 363                 int disabled = atoi(value);
 364                 wpa_printf(MSG_DEBUG, "TDLS: tdls_disabled=%d", disabled);
 365                 if (disabled) {
 366                         if (wpa_drv_tdls_oper(wpa_s, TDLS_DISABLE, NULL) < 0)
 367                                 ret = -1;
 368                 } else if (wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL) < 0)
 369                         ret = -1;
 370                 wpa_tdls_enable(wpa_s->wpa, !disabled);
 371 #endif /* CONFIG_TDLS */
 372         } else if (os_strcasecmp(cmd, "pno") == 0) {
 373                 if (atoi(value))
 374                         ret = pno_start(wpa_s);
 375                 else
 376                         ret = pno_stop(wpa_s);
 377         } else if (os_strcasecmp(cmd, "radio_disabled") == 0) {
 378                 int disabled = atoi(value);
 379                 if (wpa_drv_radio_disable(wpa_s, disabled) < 0)
 380                         ret = -1;
 381                 else if (disabled)
 382                         wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);
 383         } else if (os_strcasecmp(cmd, "uapsd") == 0) {
 384                 if (os_strcmp(value, "disable") == 0)
 385                         wpa_s->set_sta_uapsd = 0;
 386                 else {
 387                         int be, bk, vi, vo;
 388                         char *pos;
 389                         /* format: BE,BK,VI,VO;max SP Length */
 390                         be = atoi(value);
 391                         pos = os_strchr(value, ',');
 392                         if (pos == NULL)
 393                                 return -1;
 394                         pos++;
 395                         bk = atoi(pos);
 396                         pos = os_strchr(pos, ',');
 397                         if (pos == NULL)
 398                                 return -1;
 399                         pos++;
 400                         vi = atoi(pos);
 401                         pos = os_strchr(pos, ',');
 402                         if (pos == NULL)
 403                                 return -1;
 404                         pos++;
 405                         vo = atoi(pos);
 406                         /* ignore max SP Length for now */
 407
 408                         wpa_s->set_sta_uapsd = 1;
 409                         wpa_s->sta_uapsd = 0;
 410                         if (be)
 411                                 wpa_s->sta_uapsd |= BIT(0);
 412                         if (bk)
 413                                 wpa_s->sta_uapsd |= BIT(1);
 414                         if (vi)
 415                                 wpa_s->sta_uapsd |= BIT(2);
 416                         if (vo)
 417                                 wpa_s->sta_uapsd |= BIT(3);
 418                 }
 419         } else if (os_strcasecmp(cmd, "ps") == 0) {
 420                 ret = wpa_drv_set_p2p_powersave(wpa_s, atoi(value), -1, -1);
 421 #ifdef CONFIG_WIFI_DISPLAY
 422         } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
 423                 wifi_display_enable(wpa_s->global, !!atoi(value));
 424 #endif /* CONFIG_WIFI_DISPLAY */
 425         } else if (os_strcasecmp(cmd, "bssid_filter") == 0) {
 426                 ret = set_bssid_filter(wpa_s, value);
 427         } else if (os_strcasecmp(cmd, "disallow_aps") == 0) {
 428                 ret = set_disallow_aps(wpa_s, value);
 429         } else if (os_strcasecmp(cmd, "no_keep_alive") == 0) {
 430                 wpa_s->no_keep_alive = !!atoi(value);
 431         } else {
 432                 value[-1] = '=';
 433                 ret = wpa_config_process_global(wpa_s->conf, cmd, -1);
 434                 if (ret == 0)
 435                         wpa_supplicant_update_config(wpa_s);
 436         }
 437
 438         return ret;
 439 }
 440
 441
 442 static int wpa_supplicant_ctrl_iface_get(struct wpa_supplicant *wpa_s,
 443                                          char *cmd, char *buf, size_t buflen)
 444 {
 445         int res = -1;
 446
 447         wpa_printf(MSG_DEBUG, "CTRL_IFACE GET '%s'", cmd);
 448
 449         if (os_strcmp(cmd, "version") == 0) {
 450                 res = os_snprintf(buf, buflen, "%s", VERSION_STR);
 451         } else if (os_strcasecmp(cmd, "country") == 0) {
 452                 if (wpa_s->conf->country[0] && wpa_s->conf->country[1])
 453                         res = os_snprintf(buf, buflen, "%c%c",
 454                                           wpa_s->conf->country[0],
 455                                           wpa_s->conf->country[1]);
 456 #ifdef CONFIG_WIFI_DISPLAY
 457         } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
 458                 res = os_snprintf(buf, buflen, "%d",
 459                                   wpa_s->global->wifi_display);
 460                 if (res < 0 || (unsigned int) res >= buflen)
 461                         return -1;
 462                 return res;
 463 #endif /* CONFIG_WIFI_DISPLAY */
 464 #ifdef CONFIG_TESTING_GET_GTK
 465         } else if (os_strcmp(cmd, "gtk") == 0) {
 466                 if (wpa_s->last_gtk_len == 0)
 467                         return -1;
 468                 res = wpa_snprintf_hex(buf, buflen, wpa_s->last_gtk,
 469                                        wpa_s->last_gtk_len);
 470                 return res;
 471 #endif /* CONFIG_TESTING_GET_GTK */
 472         }
 473
 474         if (res < 0 || (unsigned int) res >= buflen)
 475                 return -1;
 476         return res;
 477 }
 478
 479
 480 #ifdef IEEE8021X_EAPOL
 481 static int wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant *wpa_s,
 482                                              char *addr)
 483 {
 484         u8 bssid[ETH_ALEN];
 485         struct wpa_ssid *ssid = wpa_s->current_ssid;
 486
 487         if (hwaddr_aton(addr, bssid)) {
 488                 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH: invalid address "
 489                            "'%s'", addr);
 490                 return -1;
 491         }
 492
 493         wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH " MACSTR, MAC2STR(bssid));
 494         rsn_preauth_deinit(wpa_s->wpa);
 495         if (rsn_preauth_init(wpa_s->wpa, bssid, ssid ? &ssid->eap : NULL))
 496                 return -1;
 497
 498         return 0;
 499 }
 500 #endif /* IEEE8021X_EAPOL */
 501
 502
 503 #ifdef CONFIG_PEERKEY
 504 /* MLME-STKSTART.request(peer) */
 505 static int wpa_supplicant_ctrl_iface_stkstart(
 506         struct wpa_supplicant *wpa_s, char *addr)
 507 {
 508         u8 peer[ETH_ALEN];
 509
 510         if (hwaddr_aton(addr, peer)) {
 511                 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART: invalid "
 512                            "address '%s'", addr);
 513                 return -1;
 514         }
 515
 516         wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART " MACSTR,
 517                    MAC2STR(peer));
 518
 519         return wpa_sm_stkstart(wpa_s->wpa, peer);
 520 }
 521 #endif /* CONFIG_PEERKEY */
 522
 523
 524 #ifdef CONFIG_TDLS
 525
 526 static int wpa_supplicant_ctrl_iface_tdls_discover(
 527         struct wpa_supplicant *wpa_s, char *addr)
 528 {
 529         u8 peer[ETH_ALEN];
 530         int ret;
 531
 532         if (hwaddr_aton(addr, peer)) {
 533                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER: invalid "
 534                            "address '%s'", addr);
 535                 return -1;
 536         }
 537
 538         wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER " MACSTR,
 539                    MAC2STR(peer));
 540
 541         if (wpa_tdls_is_external_setup(wpa_s->wpa))
 542                 ret = wpa_tdls_send_discovery_request(wpa_s->wpa, peer);
 543         else
 544                 ret = wpa_drv_tdls_oper(wpa_s, TDLS_DISCOVERY_REQ, peer);
 545
 546         return ret;
 547 }
 548
 549
 550 static int wpa_supplicant_ctrl_iface_tdls_setup(
 551         struct wpa_supplicant *wpa_s, char *addr)
 552 {
 553         u8 peer[ETH_ALEN];
 554         int ret;
 555
 556         if (hwaddr_aton(addr, peer)) {
 557                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP: invalid "
 558                            "address '%s'", addr);
 559                 return -1;
 560         }
 561
 562         wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP " MACSTR,
 563                    MAC2STR(peer));
 564
 565         wpa_tdls_remove(wpa_s->wpa, peer);
 566
 567         if (wpa_tdls_is_external_setup(wpa_s->wpa))
 568                 ret = wpa_tdls_start(wpa_s->wpa, peer);
 569         else
 570                 ret = wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
 571
 572         return ret;
 573 }
 574
 575
 576 static int wpa_supplicant_ctrl_iface_tdls_teardown(
 577         struct wpa_supplicant *wpa_s, char *addr)
 578 {
 579         u8 peer[ETH_ALEN];
 580
 581         if (hwaddr_aton(addr, peer)) {
 582                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN: invalid "
 583                            "address '%s'", addr);
 584                 return -1;
 585         }
 586
 587         wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN " MACSTR,
 588                    MAC2STR(peer));
 589
 590         return wpa_tdls_teardown_link(wpa_s->wpa, peer,
 591                                       WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED);
 592 }
 593
 594 #endif /* CONFIG_TDLS */
 595
 596
 597 #ifdef CONFIG_IEEE80211R
 598 static int wpa_supplicant_ctrl_iface_ft_ds(
 599         struct wpa_supplicant *wpa_s, char *addr)
 600 {
 601         u8 target_ap[ETH_ALEN];
 602         struct wpa_bss *bss;
 603         const u8 *mdie;
 604
 605         if (hwaddr_aton(addr, target_ap)) {
 606                 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS: invalid "
 607                            "address '%s'", addr);
 608                 return -1;
 609         }
 610
 611         wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS " MACSTR, MAC2STR(target_ap));
 612
 613         bss = wpa_bss_get_bssid(wpa_s, target_ap);
 614         if (bss)
 615                 mdie = wpa_bss_get_ie(bss, WLAN_EID_MOBILITY_DOMAIN);
 616         else
 617                 mdie = NULL;
 618
 619         return wpa_ft_start_over_ds(wpa_s->wpa, target_ap, mdie);
 620 }
 621 #endif /* CONFIG_IEEE80211R */
 622
 623
 624 #ifdef CONFIG_WPS
 625 static int wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant *wpa_s,
 626                                              char *cmd)
 627 {
 628         u8 bssid[ETH_ALEN], *_bssid = bssid;
 629 #ifdef CONFIG_P2P
 630         u8 p2p_dev_addr[ETH_ALEN];
 631 #endif /* CONFIG_P2P */
 632 #ifdef CONFIG_AP
 633         u8 *_p2p_dev_addr = NULL;
 634 #endif /* CONFIG_AP */
 635
 636         if (cmd == NULL || os_strcmp(cmd, "any") == 0) {
 637                 _bssid = NULL;
 638 #ifdef CONFIG_P2P
 639         } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
 640                 if (hwaddr_aton(cmd + 13, p2p_dev_addr)) {
 641                         wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid "
 642                                    "P2P Device Address '%s'",
 643                                    cmd + 13);
 644                         return -1;
 645                 }
 646                 _p2p_dev_addr = p2p_dev_addr;
 647 #endif /* CONFIG_P2P */
 648         } else if (hwaddr_aton(cmd, bssid)) {
 649                 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid BSSID '%s'",
 650                            cmd);
 651                 return -1;
 652         }
 653
 654 #ifdef CONFIG_AP
 655         if (wpa_s->ap_iface)
 656                 return wpa_supplicant_ap_wps_pbc(wpa_s, _bssid, _p2p_dev_addr);
 657 #endif /* CONFIG_AP */
 658
 659         return wpas_wps_start_pbc(wpa_s, _bssid, 0);
 660 }
 661
 662
 663 static int wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant *wpa_s,
 664                                              char *cmd, char *buf,
 665                                              size_t buflen)
 666 {
 667         u8 bssid[ETH_ALEN], *_bssid = bssid;
 668         char *pin;
 669         int ret;
 670
 671         pin = os_strchr(cmd, ' ');
 672         if (pin)
 673                 *pin++ = '\0';
 674
 675         if (os_strcmp(cmd, "any") == 0)
 676                 _bssid = NULL;
 677         else if (os_strcmp(cmd, "get") == 0) {
 678                 ret = wps_generate_pin();
 679                 goto done;
 680         } else if (hwaddr_aton(cmd, bssid)) {
 681                 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PIN: invalid BSSID '%s'",
 682                            cmd);
 683                 return -1;
 684         }
 685
 686 #ifdef CONFIG_AP
 687         if (wpa_s->ap_iface) {
 688                 int timeout = 0;
 689                 char *pos;
 690
 691                 if (pin) {
 692                         pos = os_strchr(pin, ' ');
 693                         if (pos) {
 694                                 *pos++ = '\0';
 695                                 timeout = atoi(pos);
 696                         }
 697                 }
 698
 699                 return wpa_supplicant_ap_wps_pin(wpa_s, _bssid, pin,
 700                                                  buf, buflen, timeout);
 701         }
 702 #endif /* CONFIG_AP */
 703
 704         if (pin) {
 705                 ret = wpas_wps_start_pin(wpa_s, _bssid, pin, 0,
 706                                          DEV_PW_DEFAULT);
 707                 if (ret < 0)
 708                         return -1;
 709                 ret = os_snprintf(buf, buflen, "%s", pin);
 710                 if (ret < 0 || (size_t) ret >= buflen)
 711                         return -1;
 712                 return ret;
 713         }
 714
 715         ret = wpas_wps_start_pin(wpa_s, _bssid, NULL, 0, DEV_PW_DEFAULT);
 716         if (ret < 0)
 717                 return -1;
 718
 719 done:
 720         /* Return the generated PIN */
 721         ret = os_snprintf(buf, buflen, "%08d", ret);
 722         if (ret < 0 || (size_t) ret >= buflen)
 723                 return -1;
 724         return ret;
 725 }
 726
 727
 728 static int wpa_supplicant_ctrl_iface_wps_check_pin(
 729         struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
 730 {
 731         char pin[9];
 732         size_t len;
 733         char *pos;
 734         int ret;
 735
 736         wpa_hexdump_ascii_key(MSG_DEBUG, "WPS_CHECK_PIN",
 737                               (u8 *) cmd, os_strlen(cmd));
 738         for (pos = cmd, len = 0; *pos != '\0'; pos++) {
 739                 if (*pos < '0' || *pos > '9')
 740                         continue;
 741                 pin[len++] = *pos;
 742                 if (len == 9) {
 743                         wpa_printf(MSG_DEBUG, "WPS: Too long PIN");
 744                         return -1;
 745                 }
 746         }
 747         if (len != 4 && len != 8) {
 748                 wpa_printf(MSG_DEBUG, "WPS: Invalid PIN length %d", (int) len);
 749                 return -1;
 750         }
 751         pin[len] = '\0';
 752
 753         if (len == 8) {
 754                 unsigned int pin_val;
 755                 pin_val = atoi(pin);
 756                 if (!wps_pin_valid(pin_val)) {
 757                         wpa_printf(MSG_DEBUG, "WPS: Invalid checksum digit");
 758                         ret = os_snprintf(buf, buflen, "FAIL-CHECKSUM\n");
 759                         if (ret < 0 || (size_t) ret >= buflen)
 760                                 return -1;
 761                         return ret;
 762                 }
 763         }
 764
 765         ret = os_snprintf(buf, buflen, "%s", pin);
 766         if (ret < 0 || (size_t) ret >= buflen)
 767                 return -1;
 768
 769         return ret;
 770 }
 771
 772
 773 #ifdef CONFIG_WPS_NFC
 774
 775 static int wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant *wpa_s,
 776                                              char *cmd)
 777 {
 778         u8 bssid[ETH_ALEN], *_bssid = bssid;
 779
 780         if (cmd == NULL || cmd[0] == '\0')
 781                 _bssid = NULL;
 782         else if (hwaddr_aton(cmd, bssid))
 783                 return -1;
 784
 785         return wpas_wps_start_nfc(wpa_s, _bssid);
 786 }
 787
 788
 789 static int wpa_supplicant_ctrl_iface_wps_nfc_config_token(
 790         struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
 791 {
 792         int ndef;
 793         struct wpabuf *buf;
 794         int res;
 795         char *pos;
 796
 797         pos = os_strchr(cmd, ' ');
 798         if (pos)
 799                 *pos++ = '\0';
 800         if (os_strcmp(cmd, "WPS") == 0)
 801                 ndef = 0;
 802         else if (os_strcmp(cmd, "NDEF") == 0)
 803                 ndef = 1;
 804         else
 805                 return -1;
 806
 807         buf = wpas_wps_nfc_config_token(wpa_s, ndef, pos);
 808         if (buf == NULL)
 809                 return -1;
 810
 811         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
 812                                          wpabuf_len(buf));
 813         reply[res++] = '\n';
 814         reply[res] = '\0';
 815
 816         wpabuf_free(buf);
 817
 818         return res;
 819 }
 820
 821
 822 static int wpa_supplicant_ctrl_iface_wps_nfc_token(
 823         struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
 824 {
 825         int ndef;
 826         struct wpabuf *buf;
 827         int res;
 828
 829         if (os_strcmp(cmd, "WPS") == 0)
 830                 ndef = 0;
 831         else if (os_strcmp(cmd, "NDEF") == 0)
 832                 ndef = 1;
 833         else
 834                 return -1;
 835
 836         buf = wpas_wps_nfc_token(wpa_s, ndef);
 837         if (buf == NULL)
 838                 return -1;
 839
 840         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
 841                                          wpabuf_len(buf));
 842         reply[res++] = '\n';
 843         reply[res] = '\0';
 844
 845         wpabuf_free(buf);
 846
 847         return res;
 848 }
 849
 850
 851 static int wpa_supplicant_ctrl_iface_wps_nfc_tag_read(
 852         struct wpa_supplicant *wpa_s, char *pos)
 853 {
 854         size_t len;
 855         struct wpabuf *buf;
 856         int ret;
 857
 858         len = os_strlen(pos);
 859         if (len & 0x01)
 860                 return -1;
 861         len /= 2;
 862
 863         buf = wpabuf_alloc(len);
 864         if (buf == NULL)
 865                 return -1;
 866         if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
 867                 wpabuf_free(buf);
 868                 return -1;
 869         }
 870
 871         ret = wpas_wps_nfc_tag_read(wpa_s, buf);
 872         wpabuf_free(buf);
 873
 874         return ret;
 875 }
 876
 877
 878 static int wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant *wpa_s,
 879                                               char *reply, size_t max_len,
 880                                               int cr)
 881 {
 882         struct wpabuf *buf;
 883         int res;
 884
 885         buf = wpas_wps_nfc_handover_req(wpa_s, cr);
 886         if (buf == NULL)
 887                 return -1;
 888
 889         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
 890                                          wpabuf_len(buf));
 891         reply[res++] = '\n';
 892         reply[res] = '\0';
 893
 894         wpabuf_free(buf);
 895
 896         return res;
 897 }
 898
 899
 900 static int wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant *wpa_s,
 901                                           char *cmd, char *reply,
 902                                           size_t max_len)
 903 {
 904         char *pos;
 905
 906         pos = os_strchr(cmd, ' ');
 907         if (pos == NULL)
 908                 return -1;
 909         *pos++ = '\0';
 910
 911         if (os_strcmp(cmd, "NDEF") != 0)
 912                 return -1;
 913
 914         if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
 915                 return wpas_ctrl_nfc_get_handover_req_wps(
 916                         wpa_s, reply, max_len, os_strcmp(pos, "WPS-CR") == 0);
 917         }
 918
 919         return -1;
 920 }
 921
 922
 923 static int wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant *wpa_s,
 924                                               char *reply, size_t max_len,
 925                                               int ndef, int cr, char *uuid)
 926 {
 927         struct wpabuf *buf;
 928         int res;
 929
 930         buf = wpas_wps_nfc_handover_sel(wpa_s, ndef, cr, uuid);
 931         if (buf == NULL)
 932                 return -1;
 933
 934         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
 935                                          wpabuf_len(buf));
 936         reply[res++] = '\n';
 937         reply[res] = '\0';
 938
 939         wpabuf_free(buf);
 940
 941         return res;
 942 }
 943
 944
 945 static int wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant *wpa_s,
 946                                           char *cmd, char *reply,
 947                                           size_t max_len)
 948 {
 949         char *pos, *pos2;
 950         int ndef;
 951
 952         pos = os_strchr(cmd, ' ');
 953         if (pos == NULL)
 954                 return -1;
 955         *pos++ = '\0';
 956
 957         if (os_strcmp(cmd, "WPS") == 0)
 958                 ndef = 0;
 959         else if (os_strcmp(cmd, "NDEF") == 0)
 960                 ndef = 1;
 961         else
 962                 return -1;
 963
 964         pos2 = os_strchr(pos, ' ');
 965         if (pos2)
 966                 *pos2++ = '\0';
 967         if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
 968                 return wpas_ctrl_nfc_get_handover_sel_wps(
 969                         wpa_s, reply, max_len, ndef,
 970                         os_strcmp(pos, "WPS-CR") == 0, pos2);
 971         }
 972
 973         return -1;
 974 }
 975
 976
 977 static int wpas_ctrl_nfc_rx_handover_req(struct wpa_supplicant *wpa_s,
 978                                          char *cmd, char *reply,
 979                                          size_t max_len)
 980 {
 981         size_t len;
 982         struct wpabuf *buf;
 983         int ret;
 984
 985         len = os_strlen(cmd);
 986         if (len & 0x01)
 987                 return -1;
 988         len /= 2;
 989
 990         buf = wpabuf_alloc(len);
 991         if (buf == NULL)
 992                 return -1;
 993         if (hexstr2bin(cmd, wpabuf_put(buf, len), len) < 0) {
 994                 wpabuf_free(buf);
 995                 return -1;
 996         }
 997
 998         ret = wpas_wps_nfc_rx_handover_req(wpa_s, buf);
 999         wpabuf_free(buf);
1000
1001         return ret;
1002 }
1003
1004
1005 static int wpas_ctrl_nfc_rx_handover_sel(struct wpa_supplicant *wpa_s,
1006                                          char *cmd)
1007 {
1008         size_t len;
1009         struct wpabuf *buf;
1010         int ret;
1011
1012         len = os_strlen(cmd);
1013         if (len & 0x01)
1014                 return -1;
1015         len /= 2;
1016
1017         buf = wpabuf_alloc(len);
1018         if (buf == NULL)
1019                 return -1;
1020         if (hexstr2bin(cmd, wpabuf_put(buf, len), len) < 0) {
1021                 wpabuf_free(buf);
1022                 return -1;
1023         }
1024
1025         ret = wpas_wps_nfc_rx_handover_sel(wpa_s, buf);
1026         wpabuf_free(buf);
1027
1028         return ret;
1029 }
1030
1031
1032 static int wpas_ctrl_nfc_report_handover(struct wpa_supplicant *wpa_s,
1033                                          char *cmd)
1034 {
1035         size_t len;
1036         struct wpabuf *req, *sel;
1037         int ret;
1038         char *pos, *role, *type, *pos2;
1039
1040         role = cmd;
1041         pos = os_strchr(role, ' ');
1042         if (pos == NULL)
1043                 return -1;
1044         *pos++ = '\0';
1045
1046         type = pos;
1047         pos = os_strchr(type, ' ');
1048         if (pos == NULL)
1049                 return -1;
1050         *pos++ = '\0';
1051
1052         pos2 = os_strchr(pos, ' ');
1053         if (pos2 == NULL)
1054                 return -1;
1055         *pos2++ = '\0';
1056
1057         len = os_strlen(pos);
1058         if (len & 0x01)
1059                 return -1;
1060         len /= 2;
1061
1062         req = wpabuf_alloc(len);
1063         if (req == NULL)
1064                 return -1;
1065         if (hexstr2bin(pos, wpabuf_put(req, len), len) < 0) {
1066                 wpabuf_free(req);
1067                 return -1;
1068         }
1069
1070         len = os_strlen(pos2);
1071         if (len & 0x01) {
1072                 wpabuf_free(req);
1073                 return -1;
1074         }
1075         len /= 2;
1076
1077         sel = wpabuf_alloc(len);
1078         if (sel == NULL) {
1079                 wpabuf_free(req);
1080                 return -1;
1081         }
1082         if (hexstr2bin(pos2, wpabuf_put(sel, len), len) < 0) {
1083                 wpabuf_free(req);
1084                 wpabuf_free(sel);
1085                 return -1;
1086         }
1087
1088         if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "WPS") == 0) {
1089                 ret = wpas_wps_nfc_report_handover(wpa_s, req, sel);
1090         } else {
1091                 wpa_printf(MSG_DEBUG, "NFC: Unsupported connection handover "
1092                            "reported: role=%s type=%s", role, type);
1093                 ret = -1;
1094         }
1095         wpabuf_free(req);
1096         wpabuf_free(sel);
1097
1098         return ret;
1099 }
1100
1101 #endif /* CONFIG_WPS_NFC */
1102
1103
1104 static int wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant *wpa_s,
1105                                              char *cmd)
1106 {
1107         u8 bssid[ETH_ALEN];
1108         char *pin;
1109         char *new_ssid;
1110         char *new_auth;
1111         char *new_encr;
1112         char *new_key;
1113         struct wps_new_ap_settings ap;
1114
1115         pin = os_strchr(cmd, ' ');
1116         if (pin == NULL)
1117                 return -1;
1118         *pin++ = '\0';
1119
1120         if (hwaddr_aton(cmd, bssid)) {
1121                 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_REG: invalid BSSID '%s'",
1122                            cmd);
1123                 return -1;
1124         }
1125
1126         new_ssid = os_strchr(pin, ' ');
1127         if (new_ssid == NULL)
1128                 return wpas_wps_start_reg(wpa_s, bssid, pin, NULL);
1129         *new_ssid++ = '\0';
1130
1131         new_auth = os_strchr(new_ssid, ' ');
1132         if (new_auth == NULL)
1133                 return -1;
1134         *new_auth++ = '\0';
1135
1136         new_encr = os_strchr(new_auth, ' ');
1137         if (new_encr == NULL)
1138                 return -1;
1139         *new_encr++ = '\0';
1140
1141         new_key = os_strchr(new_encr, ' ');
1142         if (new_key == NULL)
1143                 return -1;
1144         *new_key++ = '\0';
1145
1146         os_memset(&ap, 0, sizeof(ap));
1147         ap.ssid_hex = new_ssid;
1148         ap.auth = new_auth;
1149         ap.encr = new_encr;
1150         ap.key_hex = new_key;
1151         return wpas_wps_start_reg(wpa_s, bssid, pin, &ap);
1152 }
1153
1154
1155 #ifdef CONFIG_AP
1156 static int wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant *wpa_s,
1157                                                 char *cmd, char *buf,
1158                                                 size_t buflen)
1159 {
1160         int timeout = 300;
1161         char *pos;
1162         const char *pin_txt;
1163
1164         if (!wpa_s->ap_iface)
1165                 return -1;
1166
1167         pos = os_strchr(cmd, ' ');
1168         if (pos)
1169                 *pos++ = '\0';
1170
1171         if (os_strcmp(cmd, "disable") == 0) {
1172                 wpas_wps_ap_pin_disable(wpa_s);
1173                 return os_snprintf(buf, buflen, "OK\n");
1174         }
1175
1176         if (os_strcmp(cmd, "random") == 0) {
1177                 if (pos)
1178                         timeout = atoi(pos);
1179                 pin_txt = wpas_wps_ap_pin_random(wpa_s, timeout);
1180                 if (pin_txt == NULL)
1181                         return -1;
1182                 return os_snprintf(buf, buflen, "%s", pin_txt);
1183         }
1184
1185         if (os_strcmp(cmd, "get") == 0) {
1186                 pin_txt = wpas_wps_ap_pin_get(wpa_s);
1187                 if (pin_txt == NULL)
1188                         return -1;
1189                 return os_snprintf(buf, buflen, "%s", pin_txt);
1190         }
1191
1192         if (os_strcmp(cmd, "set") == 0) {
1193                 char *pin;
1194                 if (pos == NULL)
1195                         return -1;
1196                 pin = pos;
1197                 pos = os_strchr(pos, ' ');
1198                 if (pos) {
1199                         *pos++ = '\0';
1200                         timeout = atoi(pos);
1201                 }
1202                 if (os_strlen(pin) > buflen)
1203                         return -1;
1204                 if (wpas_wps_ap_pin_set(wpa_s, pin, timeout) < 0)
1205                         return -1;
1206                 return os_snprintf(buf, buflen, "%s", pin);
1207         }
1208
1209         return -1;
1210 }
1211 #endif /* CONFIG_AP */
1212
1213
1214 #ifdef CONFIG_WPS_ER
1215 static int wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant *wpa_s,
1216                                                 char *cmd)
1217 {
1218         char *uuid = cmd, *pin, *pos;
1219         u8 addr_buf[ETH_ALEN], *addr = NULL;
1220         pin = os_strchr(uuid, ' ');
1221         if (pin == NULL)
1222                 return -1;
1223         *pin++ = '\0';
1224         pos = os_strchr(pin, ' ');
1225         if (pos) {
1226                 *pos++ = '\0';
1227                 if (hwaddr_aton(pos, addr_buf) == 0)
1228                         addr = addr_buf;
1229         }
1230         return wpas_wps_er_add_pin(wpa_s, addr, uuid, pin);
1231 }
1232
1233
1234 static int wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant *wpa_s,
1235                                                   char *cmd)
1236 {
1237         char *uuid = cmd, *pin;
1238         pin = os_strchr(uuid, ' ');
1239         if (pin == NULL)
1240                 return -1;
1241         *pin++ = '\0';
1242         return wpas_wps_er_learn(wpa_s, uuid, pin);
1243 }
1244
1245
1246 static int wpa_supplicant_ctrl_iface_wps_er_set_config(
1247         struct wpa_supplicant *wpa_s, char *cmd)
1248 {
1249         char *uuid = cmd, *id;
1250         id = os_strchr(uuid, ' ');
1251         if (id == NULL)
1252                 return -1;
1253         *id++ = '\0';
1254         return wpas_wps_er_set_config(wpa_s, uuid, atoi(id));
1255 }
1256
1257
1258 static int wpa_supplicant_ctrl_iface_wps_er_config(
1259         struct wpa_supplicant *wpa_s, char *cmd)
1260 {
1261         char *pin;
1262         char *new_ssid;
1263         char *new_auth;
1264         char *new_encr;
1265         char *new_key;
1266         struct wps_new_ap_settings ap;
1267
1268         pin = os_strchr(cmd, ' ');
1269         if (pin == NULL)
1270                 return -1;
1271         *pin++ = '\0';
1272
1273         new_ssid = os_strchr(pin, ' ');
1274         if (new_ssid == NULL)
1275                 return -1;
1276         *new_ssid++ = '\0';
1277
1278         new_auth = os_strchr(new_ssid, ' ');
1279         if (new_auth == NULL)
1280                 return -1;
1281         *new_auth++ = '\0';
1282
1283         new_encr = os_strchr(new_auth, ' ');
1284         if (new_encr == NULL)
1285                 return -1;
1286         *new_encr++ = '\0';
1287
1288         new_key = os_strchr(new_encr, ' ');
1289         if (new_key == NULL)
1290                 return -1;
1291         *new_key++ = '\0';
1292
1293         os_memset(&ap, 0, sizeof(ap));
1294         ap.ssid_hex = new_ssid;
1295         ap.auth = new_auth;
1296         ap.encr = new_encr;
1297         ap.key_hex = new_key;
1298         return wpas_wps_er_config(wpa_s, cmd, pin, &ap);
1299 }
1300
1301
1302 #ifdef CONFIG_WPS_NFC
1303 static int wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
1304         struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1305 {
1306         int ndef;
1307         struct wpabuf *buf;
1308         int res;
1309         char *uuid;
1310
1311         uuid = os_strchr(cmd, ' ');
1312         if (uuid == NULL)
1313                 return -1;
1314         *uuid++ = '\0';
1315
1316         if (os_strcmp(cmd, "WPS") == 0)
1317                 ndef = 0;
1318         else if (os_strcmp(cmd, "NDEF") == 0)
1319                 ndef = 1;
1320         else
1321                 return -1;
1322
1323         buf = wpas_wps_er_nfc_config_token(wpa_s, ndef, uuid);
1324         if (buf == NULL)
1325                 return -1;
1326
1327         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1328                                          wpabuf_len(buf));
1329         reply[res++] = '\n';
1330         reply[res] = '\0';
1331
1332         wpabuf_free(buf);
1333
1334         return res;
1335 }
1336 #endif /* CONFIG_WPS_NFC */
1337 #endif /* CONFIG_WPS_ER */
1338
1339 #endif /* CONFIG_WPS */
1340
1341
1342 #ifdef CONFIG_IBSS_RSN
1343 static int wpa_supplicant_ctrl_iface_ibss_rsn(
1344         struct wpa_supplicant *wpa_s, char *addr)
1345 {
1346         u8 peer[ETH_ALEN];
1347
1348         if (hwaddr_aton(addr, peer)) {
1349                 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN: invalid "
1350                            "address '%s'", addr);
1351                 return -1;
1352         }
1353
1354         wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN " MACSTR,
1355                    MAC2STR(peer));
1356
1357         return ibss_rsn_start(wpa_s->ibss_rsn, peer);
1358 }
1359 #endif /* CONFIG_IBSS_RSN */
1360
1361
1362 static int wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant *wpa_s,
1363                                               char *rsp)
1364 {
1365 #ifdef IEEE8021X_EAPOL
1366         char *pos, *id_pos;
1367         int id;
1368         struct wpa_ssid *ssid;
1369
1370         pos = os_strchr(rsp, '-');
1371         if (pos == NULL)
1372                 return -1;
1373         *pos++ = '\0';
1374         id_pos = pos;
1375         pos = os_strchr(pos, ':');
1376         if (pos == NULL)
1377                 return -1;
1378         *pos++ = '\0';
1379         id = atoi(id_pos);
1380         wpa_printf(MSG_DEBUG, "CTRL_IFACE: field=%s id=%d", rsp, id);
1381         wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
1382                               (u8 *) pos, os_strlen(pos));
1383
1384         ssid = wpa_config_get_network(wpa_s->conf, id);
1385         if (ssid == NULL) {
1386                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1387                            "to update", id);
1388                 return -1;
1389         }
1390
1391         return wpa_supplicant_ctrl_iface_ctrl_rsp_handle(wpa_s, ssid, rsp,
1392                                                          pos);
1393 #else /* IEEE8021X_EAPOL */
1394         wpa_printf(MSG_DEBUG, "CTRL_IFACE: 802.1X not included");
1395         return -1;
1396 #endif /* IEEE8021X_EAPOL */
1397 }
1398
1399
1400 static int wpa_supplicant_ctrl_iface_status(struct wpa_supplicant *wpa_s,
1401                                             const char *params,
1402                                             char *buf, size_t buflen)
1403 {
1404         char *pos, *end, tmp[30];
1405         int res, verbose, wps, ret;
1406
1407         verbose = os_strcmp(params, "-VERBOSE") == 0;
1408         wps = os_strcmp(params, "-WPS") == 0;
1409         pos = buf;
1410         end = buf + buflen;
1411         if (wpa_s->wpa_state >= WPA_ASSOCIATED) {
1412                 struct wpa_ssid *ssid = wpa_s->current_ssid;
1413                 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
1414                                   MAC2STR(wpa_s->bssid));
1415                 if (ret < 0 || ret >= end - pos)
1416                         return pos - buf;
1417                 pos += ret;
1418                 if (ssid) {
1419                         u8 *_ssid = ssid->ssid;
1420                         size_t ssid_len = ssid->ssid_len;
1421                         u8 ssid_buf[MAX_SSID_LEN];
1422                         if (ssid_len == 0) {
1423                                 int _res = wpa_drv_get_ssid(wpa_s, ssid_buf);
1424                                 if (_res < 0)
1425                                         ssid_len = 0;
1426                                 else
1427                                         ssid_len = _res;
1428                                 _ssid = ssid_buf;
1429                         }
1430                         ret = os_snprintf(pos, end - pos, "ssid=%s\nid=%d\n",
1431                                           wpa_ssid_txt(_ssid, ssid_len),
1432                                           ssid->id);
1433                         if (ret < 0 || ret >= end - pos)
1434                                 return pos - buf;
1435                         pos += ret;
1436
1437                         if (wps && ssid->passphrase &&
1438                             wpa_key_mgmt_wpa_psk(ssid->key_mgmt) &&
1439                             (ssid->mode == WPAS_MODE_AP ||
1440                              ssid->mode == WPAS_MODE_P2P_GO)) {
1441                                 ret = os_snprintf(pos, end - pos,
1442                                                   "passphrase=%s\n",
1443                                                   ssid->passphrase);
1444                                 if (ret < 0 || ret >= end - pos)
1445                                         return pos - buf;
1446                                 pos += ret;
1447                         }
1448                         if (ssid->id_str) {
1449                                 ret = os_snprintf(pos, end - pos,
1450                                                   "id_str=%s\n",
1451                                                   ssid->id_str);
1452                                 if (ret < 0 || ret >= end - pos)
1453                                         return pos - buf;
1454                                 pos += ret;
1455                         }
1456
1457                         switch (ssid->mode) {
1458                         case WPAS_MODE_INFRA:
1459                                 ret = os_snprintf(pos, end - pos,
1460                                                   "mode=station\n");
1461                                 break;
1462                         case WPAS_MODE_IBSS:
1463                                 ret = os_snprintf(pos, end - pos,
1464                                                   "mode=IBSS\n");
1465                                 break;
1466                         case WPAS_MODE_AP:
1467                                 ret = os_snprintf(pos, end - pos,
1468                                                   "mode=AP\n");
1469                                 break;
1470                         case WPAS_MODE_P2P_GO:
1471                                 ret = os_snprintf(pos, end - pos,
1472                                                   "mode=P2P GO\n");
1473                                 break;
1474                         case WPAS_MODE_P2P_GROUP_FORMATION:
1475                                 ret = os_snprintf(pos, end - pos,
1476                                                   "mode=P2P GO - group "
1477                                                   "formation\n");
1478                                 break;
1479                         default:
1480                                 ret = 0;
1481                                 break;
1482                         }
1483                         if (ret < 0 || ret >= end - pos)
1484                                 return pos - buf;
1485                         pos += ret;
1486                 }
1487
1488 #ifdef CONFIG_AP
1489                 if (wpa_s->ap_iface) {
1490                         pos += ap_ctrl_iface_wpa_get_status(wpa_s, pos,
1491                                                             end - pos,
1492                                                             verbose);
1493                 } else
1494 #endif /* CONFIG_AP */
1495                 pos += wpa_sm_get_status(wpa_s->wpa, pos, end - pos, verbose);
1496         }
1497 #ifdef CONFIG_SAE
1498         if (wpa_s->wpa_state >= WPA_ASSOCIATED &&
1499             wpa_s->sme.sae.state == SAE_ACCEPTED && !wpa_s->ap_iface) {
1500                 ret = os_snprintf(pos, end - pos, "sae_group=%d\n",
1501                                   wpa_s->sme.sae.group);
1502                 if (ret < 0 || ret >= end - pos)
1503                         return pos - buf;
1504                 pos += ret;
1505         }
1506 #endif /* CONFIG_SAE */
1507         ret = os_snprintf(pos, end - pos, "wpa_state=%s\n",
1508                           wpa_supplicant_state_txt(wpa_s->wpa_state));
1509         if (ret < 0 || ret >= end - pos)
1510                 return pos - buf;
1511         pos += ret;
1512
1513         if (wpa_s->l2 &&
1514             l2_packet_get_ip_addr(wpa_s->l2, tmp, sizeof(tmp)) >= 0) {
1515                 ret = os_snprintf(pos, end - pos, "ip_address=%s\n", tmp);
1516                 if (ret < 0 || ret >= end - pos)
1517                         return pos - buf;
1518                 pos += ret;
1519         }
1520
1521 #ifdef CONFIG_P2P
1522         if (wpa_s->global->p2p) {
1523                 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
1524                                   "\n", MAC2STR(wpa_s->global->p2p_dev_addr));
1525                 if (ret < 0 || ret >= end - pos)
1526                         return pos - buf;
1527                 pos += ret;
1528         }
1529 #endif /* CONFIG_P2P */
1530
1531         ret = os_snprintf(pos, end - pos, "address=" MACSTR "\n",
1532                           MAC2STR(wpa_s->own_addr));
1533         if (ret < 0 || ret >= end - pos)
1534                 return pos - buf;
1535         pos += ret;
1536
1537 #ifdef CONFIG_HS20
1538         if (wpa_s->current_bss &&
1539             wpa_bss_get_vendor_ie(wpa_s->current_bss, HS20_IE_VENDOR_TYPE) &&
1540             wpa_s->wpa_proto == WPA_PROTO_RSN &&
1541             wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
1542                 ret = os_snprintf(pos, end - pos, "hs20=1\n");
1543                 if (ret < 0 || ret >= end - pos)
1544                         return pos - buf;
1545                 pos += ret;
1546         }
1547
1548         if (wpa_s->current_ssid) {
1549                 struct wpa_cred *cred;
1550                 char *type;
1551
1552                 for (cred = wpa_s->conf->cred; cred; cred = cred->next) {
1553                         if (wpa_s->current_ssid->parent_cred != cred)
1554                                 continue;
1555                         if (!cred->domain)
1556                                 continue;
1557
1558                         ret = os_snprintf(pos, end - pos, "home_sp=%s\n",
1559                                           cred->domain);
1560                         if (ret < 0 || ret >= end - pos)
1561                                 return pos - buf;
1562                         pos += ret;
1563
1564                         if (wpa_s->current_bss == NULL ||
1565                             wpa_s->current_bss->anqp == NULL)
1566                                 res = -1;
1567                         else
1568                                 res = interworking_home_sp_cred(
1569                                         wpa_s, cred,
1570                                         wpa_s->current_bss->anqp->domain_name);
1571                         if (res > 0)
1572                                 type = "home";
1573                         else if (res == 0)
1574                                 type = "roaming";
1575                         else
1576                                 type = "unknown";
1577
1578                         ret = os_snprintf(pos, end - pos, "sp_type=%s\n", type);
1579                         if (ret < 0 || ret >= end - pos)
1580                                 return pos - buf;
1581                         pos += ret;
1582
1583                         break;
1584                 }
1585         }
1586 #endif /* CONFIG_HS20 */
1587
1588         if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) ||
1589             wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
1590                 res = eapol_sm_get_status(wpa_s->eapol, pos, end - pos,
1591                                           verbose);
1592                 if (res >= 0)
1593                         pos += res;
1594         }
1595
1596         res = rsn_preauth_get_status(wpa_s->wpa, pos, end - pos, verbose);
1597         if (res >= 0)
1598                 pos += res;
1599
1600         return pos - buf;
1601 }
1602
1603
1604 static int wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant *wpa_s,
1605                                            char *cmd)
1606 {
1607         char *pos;
1608         int id;
1609         struct wpa_ssid *ssid;
1610         u8 bssid[ETH_ALEN];
1611
1612         /* cmd: "<network id> <BSSID>" */
1613         pos = os_strchr(cmd, ' ');
1614         if (pos == NULL)
1615                 return -1;
1616         *pos++ = '\0';
1617         id = atoi(cmd);
1618         wpa_printf(MSG_DEBUG, "CTRL_IFACE: id=%d bssid='%s'", id, pos);
1619         if (hwaddr_aton(pos, bssid)) {
1620                 wpa_printf(MSG_DEBUG ,"CTRL_IFACE: invalid BSSID '%s'", pos);
1621                 return -1;
1622         }
1623
1624         ssid = wpa_config_get_network(wpa_s->conf, id);
1625         if (ssid == NULL) {
1626                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1627                            "to update", id);
1628                 return -1;
1629         }
1630
1631         os_memcpy(ssid->bssid, bssid, ETH_ALEN);
1632         ssid->bssid_set = !is_zero_ether_addr(bssid);
1633
1634         return 0;
1635 }
1636
1637
1638 static int wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant *wpa_s,
1639                                                char *cmd, char *buf,
1640                                                size_t buflen)
1641 {
1642         u8 bssid[ETH_ALEN];
1643         struct wpa_blacklist *e;
1644         char *pos, *end;
1645         int ret;
1646
1647         /* cmd: "BLACKLIST [<BSSID>]" */
1648         if (*cmd == '\0') {
1649                 pos = buf;
1650                 end = buf + buflen;
1651                 e = wpa_s->blacklist;
1652                 while (e) {
1653                         ret = os_snprintf(pos, end - pos, MACSTR "\n",
1654                                           MAC2STR(e->bssid));
1655                         if (ret < 0 || ret >= end - pos)
1656                                 return pos - buf;
1657                         pos += ret;
1658                         e = e->next;
1659                 }
1660                 return pos - buf;
1661         }
1662
1663         cmd++;
1664         if (os_strncmp(cmd, "clear", 5) == 0) {
1665                 wpa_blacklist_clear(wpa_s);
1666                 os_memcpy(buf, "OK\n", 3);
1667                 return 3;
1668         }
1669
1670         wpa_printf(MSG_DEBUG, "CTRL_IFACE: BLACKLIST bssid='%s'", cmd);
1671         if (hwaddr_aton(cmd, bssid)) {
1672                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: invalid BSSID '%s'", cmd);
1673                 return -1;
1674         }
1675
1676         /*
1677          * Add the BSSID twice, so its count will be 2, causing it to be
1678          * skipped when processing scan results.
1679          */
1680         ret = wpa_blacklist_add(wpa_s, bssid);
1681         if (ret != 0)
1682                 return -1;
1683         ret = wpa_blacklist_add(wpa_s, bssid);
1684         if (ret != 0)
1685                 return -1;
1686         os_memcpy(buf, "OK\n", 3);
1687         return 3;
1688 }
1689
1690
1691 extern int wpa_debug_level;
1692 extern int wpa_debug_timestamp;
1693
1694 static const char * debug_level_str(int level)
1695 {
1696         switch (level) {
1697         case MSG_EXCESSIVE:
1698                 return "EXCESSIVE";
1699         case MSG_MSGDUMP:
1700                 return "MSGDUMP";
1701         case MSG_DEBUG:
1702                 return "DEBUG";
1703         case MSG_INFO:
1704                 return "INFO";
1705         case MSG_WARNING:
1706                 return "WARNING";
1707         case MSG_ERROR:
1708                 return "ERROR";
1709         default:
1710                 return "?";
1711         }
1712 }
1713
1714
1715 static int str_to_debug_level(const char *s)
1716 {
1717         if (os_strcasecmp(s, "EXCESSIVE") == 0)
1718                 return MSG_EXCESSIVE;
1719         if (os_strcasecmp(s, "MSGDUMP") == 0)
1720                 return MSG_MSGDUMP;
1721         if (os_strcasecmp(s, "DEBUG") == 0)
1722                 return MSG_DEBUG;
1723         if (os_strcasecmp(s, "INFO") == 0)
1724                 return MSG_INFO;
1725         if (os_strcasecmp(s, "WARNING") == 0)
1726                 return MSG_WARNING;
1727         if (os_strcasecmp(s, "ERROR") == 0)
1728                 return MSG_ERROR;
1729         return -1;
1730 }
1731
1732
1733 static int wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant *wpa_s,
1734                                                char *cmd, char *buf,
1735                                                size_t buflen)
1736 {
1737         char *pos, *end, *stamp;
1738         int ret;
1739
1740         if (cmd == NULL) {
1741                 return -1;
1742         }
1743
1744         /* cmd: "LOG_LEVEL [<level>]" */
1745         if (*cmd == '\0') {
1746                 pos = buf;
1747                 end = buf + buflen;
1748                 ret = os_snprintf(pos, end - pos, "Current level: %s\n"
1749                                   "Timestamp: %d\n",
1750                                   debug_level_str(wpa_debug_level),
1751                                   wpa_debug_timestamp);
1752                 if (ret < 0 || ret >= end - pos)
1753                         ret = 0;
1754
1755                 return ret;
1756         }
1757
1758         while (*cmd == ' ')
1759                 cmd++;
1760
1761         stamp = os_strchr(cmd, ' ');
1762         if (stamp) {
1763                 *stamp++ = '\0';
1764                 while (*stamp == ' ') {
1765                         stamp++;
1766                 }
1767         }
1768
1769         if (cmd && os_strlen(cmd)) {
1770                 int level = str_to_debug_level(cmd);
1771                 if (level < 0)
1772                         return -1;
1773                 wpa_debug_level = level;
1774         }
1775
1776         if (stamp && os_strlen(stamp))
1777                 wpa_debug_timestamp = atoi(stamp);
1778
1779         os_memcpy(buf, "OK\n", 3);
1780         return 3;
1781 }
1782
1783
1784 static int wpa_supplicant_ctrl_iface_list_networks(
1785         struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
1786 {
1787         char *pos, *end;
1788         struct wpa_ssid *ssid;
1789         int ret;
1790
1791         pos = buf;
1792         end = buf + buflen;
1793         ret = os_snprintf(pos, end - pos,
1794                           "network id / ssid / bssid / flags\n");
1795         if (ret < 0 || ret >= end - pos)
1796                 return pos - buf;
1797         pos += ret;
1798
1799         ssid = wpa_s->conf->ssid;
1800         while (ssid) {
1801                 ret = os_snprintf(pos, end - pos, "%d\t%s",
1802                                   ssid->id,
1803                                   wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
1804                 if (ret < 0 || ret >= end - pos)
1805                         return pos - buf;
1806                 pos += ret;
1807                 if (ssid->bssid_set) {
1808                         ret = os_snprintf(pos, end - pos, "\t" MACSTR,
1809                                           MAC2STR(ssid->bssid));
1810                 } else {
1811                         ret = os_snprintf(pos, end - pos, "\tany");
1812                 }
1813                 if (ret < 0 || ret >= end - pos)
1814                         return pos - buf;
1815                 pos += ret;
1816                 ret = os_snprintf(pos, end - pos, "\t%s%s%s%s",
1817                                   ssid == wpa_s->current_ssid ?
1818                                   "[CURRENT]" : "",
1819                                   ssid->disabled ? "[DISABLED]" : "",
1820                                   ssid->disabled_until.sec ?
1821                                   "[TEMP-DISABLED]" : "",
1822                                   ssid->disabled == 2 ? "[P2P-PERSISTENT]" :
1823                                   "");
1824                 if (ret < 0 || ret >= end - pos)
1825                         return pos - buf;
1826                 pos += ret;
1827                 ret = os_snprintf(pos, end - pos, "\n");
1828                 if (ret < 0 || ret >= end - pos)
1829                         return pos - buf;
1830                 pos += ret;
1831
1832                 ssid = ssid->next;
1833         }
1834
1835         return pos - buf;
1836 }
1837
1838
1839 static char * wpa_supplicant_cipher_txt(char *pos, char *end, int cipher)
1840 {
1841         int ret;
1842         ret = os_snprintf(pos, end - pos, "-");
1843         if (ret < 0 || ret >= end - pos)
1844                 return pos;
1845         pos += ret;
1846         ret = wpa_write_ciphers(pos, end, cipher, "+");
1847         if (ret < 0)
1848                 return pos;
1849         pos += ret;
1850         return pos;
1851 }
1852
1853
1854 static char * wpa_supplicant_ie_txt(char *pos, char *end, const char *proto,
1855                                     const u8 *ie, size_t ie_len)
1856 {
1857         struct wpa_ie_data data;
1858         int first, ret;
1859
1860         ret = os_snprintf(pos, end - pos, "[%s-", proto);
1861         if (ret < 0 || ret >= end - pos)
1862                 return pos;
1863         pos += ret;
1864
1865         if (wpa_parse_wpa_ie(ie, ie_len, &data) < 0) {
1866                 ret = os_snprintf(pos, end - pos, "?]");
1867                 if (ret < 0 || ret >= end - pos)
1868                         return pos;
1869                 pos += ret;
1870                 return pos;
1871         }
1872
1873         first = 1;
1874         if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
1875                 ret = os_snprintf(pos, end - pos, "%sEAP", first ? "" : "+");
1876                 if (ret < 0 || ret >= end - pos)
1877                         return pos;
1878                 pos += ret;
1879                 first = 0;
1880         }
1881         if (data.key_mgmt & WPA_KEY_MGMT_PSK) {
1882                 ret = os_snprintf(pos, end - pos, "%sPSK", first ? "" : "+");
1883                 if (ret < 0 || ret >= end - pos)
1884                         return pos;
1885                 pos += ret;
1886                 first = 0;
1887         }
1888         if (data.key_mgmt & WPA_KEY_MGMT_WPA_NONE) {
1889                 ret = os_snprintf(pos, end - pos, "%sNone", first ? "" : "+");
1890                 if (ret < 0 || ret >= end - pos)
1891                         return pos;
1892                 pos += ret;
1893                 first = 0;
1894         }
1895 #ifdef CONFIG_IEEE80211R
1896         if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
1897                 ret = os_snprintf(pos, end - pos, "%sFT/EAP",
1898                                   first ? "" : "+");
1899                 if (ret < 0 || ret >= end - pos)
1900                         return pos;
1901                 pos += ret;
1902                 first = 0;
1903         }
1904         if (data.key_mgmt & WPA_KEY_MGMT_FT_PSK) {
1905                 ret = os_snprintf(pos, end - pos, "%sFT/PSK",
1906                                   first ? "" : "+");
1907                 if (ret < 0 || ret >= end - pos)
1908                         return pos;
1909                 pos += ret;
1910                 first = 0;
1911         }
1912 #endif /* CONFIG_IEEE80211R */
1913 #ifdef CONFIG_IEEE80211W
1914         if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
1915                 ret = os_snprintf(pos, end - pos, "%sEAP-SHA256",
1916                                   first ? "" : "+");
1917                 if (ret < 0 || ret >= end - pos)
1918                         return pos;
1919                 pos += ret;
1920                 first = 0;
1921         }
1922         if (data.key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
1923                 ret = os_snprintf(pos, end - pos, "%sPSK-SHA256",
1924                                   first ? "" : "+");
1925                 if (ret < 0 || ret >= end - pos)
1926                         return pos;
1927                 pos += ret;
1928                 first = 0;
1929         }
1930 #endif /* CONFIG_IEEE80211W */
1931
1932         pos = wpa_supplicant_cipher_txt(pos, end, data.pairwise_cipher);
1933
1934         if (data.capabilities & WPA_CAPABILITY_PREAUTH) {
1935                 ret = os_snprintf(pos, end - pos, "-preauth");
1936                 if (ret < 0 || ret >= end - pos)
1937                         return pos;
1938                 pos += ret;
1939         }
1940
1941         ret = os_snprintf(pos, end - pos, "]");
1942         if (ret < 0 || ret >= end - pos)
1943                 return pos;
1944         pos += ret;
1945
1946         return pos;
1947 }
1948
1949
1950 #ifdef CONFIG_WPS
1951 static char * wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant *wpa_s,
1952                                             char *pos, char *end,
1953                                             struct wpabuf *wps_ie)
1954 {
1955         int ret;
1956         const char *txt;
1957
1958         if (wps_ie == NULL)
1959                 return pos;
1960         if (wps_is_selected_pbc_registrar(wps_ie))
1961                 txt = "[WPS-PBC]";
1962 #ifdef CONFIG_WPS2
1963         else if (wps_is_addr_authorized(wps_ie, wpa_s->own_addr, 0))
1964                 txt = "[WPS-AUTH]";
1965 #endif /* CONFIG_WPS2 */
1966         else if (wps_is_selected_pin_registrar(wps_ie))
1967                 txt = "[WPS-PIN]";
1968         else
1969                 txt = "[WPS]";
1970
1971         ret = os_snprintf(pos, end - pos, "%s", txt);
1972         if (ret >= 0 && ret < end - pos)
1973                 pos += ret;
1974         wpabuf_free(wps_ie);
1975         return pos;
1976 }
1977 #endif /* CONFIG_WPS */
1978
1979
1980 static char * wpa_supplicant_wps_ie_txt(struct wpa_supplicant *wpa_s,
1981                                         char *pos, char *end,
1982                                         const struct wpa_bss *bss)
1983 {
1984 #ifdef CONFIG_WPS
1985         struct wpabuf *wps_ie;
1986         wps_ie = wpa_bss_get_vendor_ie_multi(bss, WPS_IE_VENDOR_TYPE);
1987         return wpa_supplicant_wps_ie_txt_buf(wpa_s, pos, end, wps_ie);
1988 #else /* CONFIG_WPS */
1989         return pos;
1990 #endif /* CONFIG_WPS */
1991 }
1992
1993
1994 /* Format one result on one text line into a buffer. */
1995 static int wpa_supplicant_ctrl_iface_scan_result(
1996         struct wpa_supplicant *wpa_s,
1997         const struct wpa_bss *bss, char *buf, size_t buflen)
1998 {
1999         char *pos, *end;
2000         int ret;
2001         const u8 *ie, *ie2, *p2p;
2002
2003         p2p = wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE);
2004         if (p2p && bss->ssid_len == P2P_WILDCARD_SSID_LEN &&
2005             os_memcmp(bss->ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) ==
2006             0)
2007                 return 0; /* Do not show P2P listen discovery results here */
2008
2009         pos = buf;
2010         end = buf + buflen;
2011
2012         ret = os_snprintf(pos, end - pos, MACSTR "\t%d\t%d\t",
2013                           MAC2STR(bss->bssid), bss->freq, bss->level);
2014         if (ret < 0 || ret >= end - pos)
2015                 return -1;
2016         pos += ret;
2017         ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
2018         if (ie)
2019                 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie, 2 + ie[1]);
2020         ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
2021         if (ie2)
2022                 pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2, 2 + ie2[1]);
2023         pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
2024         if (!ie && !ie2 && bss->caps & IEEE80211_CAP_PRIVACY) {
2025                 ret = os_snprintf(pos, end - pos, "[WEP]");
2026                 if (ret < 0 || ret >= end - pos)
2027                         return -1;
2028                 pos += ret;
2029         }
2030         if (bss->caps & IEEE80211_CAP_IBSS) {
2031                 ret = os_snprintf(pos, end - pos, "[IBSS]");
2032                 if (ret < 0 || ret >= end - pos)
2033                         return -1;
2034                 pos += ret;
2035         }
2036         if (bss->caps & IEEE80211_CAP_ESS) {
2037                 ret = os_snprintf(pos, end - pos, "[ESS]");
2038                 if (ret < 0 || ret >= end - pos)
2039                         return -1;
2040                 pos += ret;
2041         }
2042         if (p2p) {
2043                 ret = os_snprintf(pos, end - pos, "[P2P]");
2044                 if (ret < 0 || ret >= end - pos)
2045                         return -1;
2046                 pos += ret;
2047         }
2048 #ifdef CONFIG_HS20
2049         if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE) && ie2) {
2050                 ret = os_snprintf(pos, end - pos, "[HS20]");
2051                 if (ret < 0 || ret >= end - pos)
2052                         return -1;
2053                 pos += ret;
2054         }
2055 #endif /* CONFIG_HS20 */
2056
2057         ret = os_snprintf(pos, end - pos, "\t%s",
2058                           wpa_ssid_txt(bss->ssid, bss->ssid_len));
2059         if (ret < 0 || ret >= end - pos)
2060                 return -1;
2061         pos += ret;
2062
2063         ret = os_snprintf(pos, end - pos, "\n");
2064         if (ret < 0 || ret >= end - pos)
2065                 return -1;
2066         pos += ret;
2067
2068         return pos - buf;
2069 }
2070
2071
2072 static int wpa_supplicant_ctrl_iface_scan_results(
2073         struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2074 {
2075         char *pos, *end;
2076         struct wpa_bss *bss;
2077         int ret;
2078
2079         pos = buf;
2080         end = buf + buflen;
2081         ret = os_snprintf(pos, end - pos, "bssid / frequency / signal level / "
2082                           "flags / ssid\n");
2083         if (ret < 0 || ret >= end - pos)
2084                 return pos - buf;
2085         pos += ret;
2086
2087         dl_list_for_each(bss, &wpa_s->bss_id, struct wpa_bss, list_id) {
2088                 ret = wpa_supplicant_ctrl_iface_scan_result(wpa_s, bss, pos,
2089                                                             end - pos);
2090                 if (ret < 0 || ret >= end - pos)
2091                         return pos - buf;
2092                 pos += ret;
2093         }
2094
2095         return pos - buf;
2096 }
2097
2098
2099 static int wpa_supplicant_ctrl_iface_select_network(
2100         struct wpa_supplicant *wpa_s, char *cmd)
2101 {
2102         int id;
2103         struct wpa_ssid *ssid;
2104
2105         /* cmd: "<network id>" or "any" */
2106         if (os_strcmp(cmd, "any") == 0) {
2107                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK any");
2108                 ssid = NULL;
2109         } else {
2110                 id = atoi(cmd);
2111                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK id=%d", id);
2112
2113                 ssid = wpa_config_get_network(wpa_s->conf, id);
2114                 if (ssid == NULL) {
2115                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2116                                    "network id=%d", id);
2117                         return -1;
2118                 }
2119                 if (ssid->disabled == 2) {
2120                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2121                                    "SELECT_NETWORK with persistent P2P group");
2122                         return -1;
2123                 }
2124         }
2125
2126         wpa_supplicant_select_network(wpa_s, ssid);
2127
2128         return 0;
2129 }
2130
2131
2132 static int wpa_supplicant_ctrl_iface_enable_network(
2133         struct wpa_supplicant *wpa_s, char *cmd)
2134 {
2135         int id;
2136         struct wpa_ssid *ssid;
2137
2138         /* cmd: "<network id>" or "all" */
2139         if (os_strcmp(cmd, "all") == 0) {
2140                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK all");
2141                 ssid = NULL;
2142         } else {
2143                 id = atoi(cmd);
2144                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK id=%d", id);
2145
2146                 ssid = wpa_config_get_network(wpa_s->conf, id);
2147                 if (ssid == NULL) {
2148                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2149                                    "network id=%d", id);
2150                         return -1;
2151                 }
2152                 if (ssid->disabled == 2) {
2153                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2154                                    "ENABLE_NETWORK with persistent P2P group");
2155                         return -1;
2156                 }
2157
2158                 if (os_strstr(cmd, " no-connect")) {
2159                         ssid->disabled = 0;
2160                         return 0;
2161                 }
2162         }
2163         wpa_supplicant_enable_network(wpa_s, ssid);
2164
2165         return 0;
2166 }
2167
2168
2169 static int wpa_supplicant_ctrl_iface_disable_network(
2170         struct wpa_supplicant *wpa_s, char *cmd)
2171 {
2172         int id;
2173         struct wpa_ssid *ssid;
2174
2175         /* cmd: "<network id>" or "all" */
2176         if (os_strcmp(cmd, "all") == 0) {
2177                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK all");
2178                 ssid = NULL;
2179         } else {
2180                 id = atoi(cmd);
2181                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK id=%d", id);
2182
2183                 ssid = wpa_config_get_network(wpa_s->conf, id);
2184                 if (ssid == NULL) {
2185                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2186                                    "network id=%d", id);
2187                         return -1;
2188                 }
2189                 if (ssid->disabled == 2) {
2190                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2191                                    "DISABLE_NETWORK with persistent P2P "
2192                                    "group");
2193                         return -1;
2194                 }
2195         }
2196         wpa_supplicant_disable_network(wpa_s, ssid);
2197
2198         return 0;
2199 }
2200
2201
2202 static int wpa_supplicant_ctrl_iface_add_network(
2203         struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2204 {
2205         struct wpa_ssid *ssid;
2206         int ret;
2207
2208         wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_NETWORK");
2209
2210         ssid = wpa_config_add_network(wpa_s->conf);
2211         if (ssid == NULL)
2212                 return -1;
2213
2214         wpas_notify_network_added(wpa_s, ssid);
2215
2216         ssid->disabled = 1;
2217         wpa_config_set_network_defaults(ssid);
2218
2219         ret = os_snprintf(buf, buflen, "%d\n", ssid->id);
2220         if (ret < 0 || (size_t) ret >= buflen)
2221                 return -1;
2222         return ret;
2223 }
2224
2225
2226 static int wpa_supplicant_ctrl_iface_remove_network(
2227         struct wpa_supplicant *wpa_s, char *cmd)
2228 {
2229         int id;
2230         struct wpa_ssid *ssid;
2231         int was_disabled;
2232
2233         /* cmd: "<network id>" or "all" */
2234         if (os_strcmp(cmd, "all") == 0) {
2235                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK all");
2236                 if (wpa_s->sched_scanning)
2237                         wpa_supplicant_cancel_sched_scan(wpa_s);
2238
2239                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2240                 if (wpa_s->current_ssid) {
2241 #ifdef CONFIG_SME
2242                         wpa_s->sme.prev_bssid_set = 0;
2243 #endif /* CONFIG_SME */
2244                         wpa_sm_set_config(wpa_s->wpa, NULL);
2245                         eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2246                         wpa_supplicant_deauthenticate(
2247                                 wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2248                 }
2249                 ssid = wpa_s->conf->ssid;
2250                 while (ssid) {
2251                         struct wpa_ssid *remove_ssid = ssid;
2252                         id = ssid->id;
2253                         ssid = ssid->next;
2254                         wpas_notify_network_removed(wpa_s, remove_ssid);
2255                         wpa_config_remove_network(wpa_s->conf, id);
2256                 }
2257                 return 0;
2258         }
2259
2260         id = atoi(cmd);
2261         wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK id=%d", id);
2262
2263         ssid = wpa_config_get_network(wpa_s->conf, id);
2264         if (ssid)
2265                 wpas_notify_network_removed(wpa_s, ssid);
2266         if (ssid == NULL) {
2267                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2268                            "id=%d", id);
2269                 return -1;
2270         }
2271
2272         if (ssid == wpa_s->current_ssid || wpa_s->current_ssid == NULL) {
2273 #ifdef CONFIG_SME
2274                 wpa_s->sme.prev_bssid_set = 0;
2275 #endif /* CONFIG_SME */
2276                 /*
2277                  * Invalidate the EAP session cache if the current or
2278                  * previously used network is removed.
2279                  */
2280                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2281         }
2282
2283         if (ssid == wpa_s->current_ssid) {
2284                 wpa_sm_set_config(wpa_s->wpa, NULL);
2285                 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2286
2287                 wpa_supplicant_deauthenticate(wpa_s,
2288                                               WLAN_REASON_DEAUTH_LEAVING);
2289         }
2290
2291         was_disabled = ssid->disabled;
2292
2293         if (wpa_config_remove_network(wpa_s->conf, id) < 0) {
2294                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Not able to remove the "
2295                            "network id=%d", id);
2296                 return -1;
2297         }
2298
2299         if (!was_disabled && wpa_s->sched_scanning) {
2300                 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to remove "
2301                            "network from filters");
2302                 wpa_supplicant_cancel_sched_scan(wpa_s);
2303                 wpa_supplicant_req_scan(wpa_s, 0, 0);
2304         }
2305
2306         return 0;
2307 }
2308
2309
2310 static int wpa_supplicant_ctrl_iface_set_network(
2311         struct wpa_supplicant *wpa_s, char *cmd)
2312 {
2313         int id;
2314         struct wpa_ssid *ssid;
2315         char *name, *value;
2316
2317         /* cmd: "<network id> <variable name> <value>" */
2318         name = os_strchr(cmd, ' ');
2319         if (name == NULL)
2320                 return -1;
2321         *name++ = '\0';
2322
2323         value = os_strchr(name, ' ');
2324         if (value == NULL)
2325                 return -1;
2326         *value++ = '\0';
2327
2328         id = atoi(cmd);
2329         wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_NETWORK id=%d name='%s'",
2330                    id, name);
2331         wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
2332                               (u8 *) value, os_strlen(value));
2333
2334         ssid = wpa_config_get_network(wpa_s->conf, id);
2335         if (ssid == NULL) {
2336                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2337                            "id=%d", id);
2338                 return -1;
2339         }
2340
2341         if (wpa_config_set(ssid, name, value, 0) < 0) {
2342                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set network "
2343                            "variable '%s'", name);
2344                 return -1;
2345         }
2346
2347         if (os_strcmp(name, "bssid") != 0 &&
2348             os_strcmp(name, "priority") != 0)
2349                 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid);
2350
2351         if (wpa_s->current_ssid == ssid || wpa_s->current_ssid == NULL) {
2352                 /*
2353                  * Invalidate the EAP session cache if anything in the current
2354                  * or previously used configuration changes.
2355                  */
2356                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2357         }
2358
2359         if ((os_strcmp(name, "psk") == 0 &&
2360              value[0] == '"' && ssid->ssid_len) ||
2361             (os_strcmp(name, "ssid") == 0 && ssid->passphrase))
2362                 wpa_config_update_psk(ssid);
2363         else if (os_strcmp(name, "priority") == 0)
2364                 wpa_config_update_prio_list(wpa_s->conf);
2365
2366         return 0;
2367 }
2368
2369
2370 static int wpa_supplicant_ctrl_iface_get_network(
2371         struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
2372 {
2373         int id;
2374         size_t res;
2375         struct wpa_ssid *ssid;
2376         char *name, *value;
2377
2378         /* cmd: "<network id> <variable name>" */
2379         name = os_strchr(cmd, ' ');
2380         if (name == NULL || buflen == 0)
2381                 return -1;
2382         *name++ = '\0';
2383
2384         id = atoi(cmd);
2385         wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_NETWORK id=%d name='%s'",
2386                    id, name);
2387
2388         ssid = wpa_config_get_network(wpa_s->conf, id);
2389         if (ssid == NULL) {
2390                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2391                            "id=%d", id);
2392                 return -1;
2393         }
2394
2395         value = wpa_config_get_no_key(ssid, name);
2396         if (value == NULL) {
2397                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
2398                            "variable '%s'", name);
2399                 return -1;
2400         }
2401
2402         res = os_strlcpy(buf, value, buflen);
2403         if (res >= buflen) {
2404                 os_free(value);
2405                 return -1;
2406         }
2407
2408         os_free(value);
2409
2410         return res;
2411 }
2412
2413
2414 static int wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant *wpa_s,
2415                                                 char *buf, size_t buflen)
2416 {
2417         char *pos, *end;
2418         struct wpa_cred *cred;
2419         int ret;
2420
2421         pos = buf;
2422         end = buf + buflen;
2423         ret = os_snprintf(pos, end - pos,
2424                           "cred id / realm / username / domain / imsi\n");
2425         if (ret < 0 || ret >= end - pos)
2426                 return pos - buf;
2427         pos += ret;
2428
2429         cred = wpa_s->conf->cred;
2430         while (cred) {
2431                 ret = os_snprintf(pos, end - pos, "%d\t%s\t%s\t%s\t%s\n",
2432                                   cred->id, cred->realm ? cred->realm : "",
2433                                   cred->username ? cred->username : "",
2434                                   cred->domain ? cred->domain : "",
2435                                   cred->imsi ? cred->imsi : "");
2436                 if (ret < 0 || ret >= end - pos)
2437                         return pos - buf;
2438                 pos += ret;
2439
2440                 cred = cred->next;
2441         }
2442
2443         return pos - buf;
2444 }
2445
2446
2447 static int wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant *wpa_s,
2448                                               char *buf, size_t buflen)
2449 {
2450         struct wpa_cred *cred;
2451         int ret;
2452
2453         wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_CRED");
2454
2455         cred = wpa_config_add_cred(wpa_s->conf);
2456         if (cred == NULL)
2457                 return -1;
2458
2459         ret = os_snprintf(buf, buflen, "%d\n", cred->id);
2460         if (ret < 0 || (size_t) ret >= buflen)
2461                 return -1;
2462         return ret;
2463 }
2464
2465
2466 static int wpas_ctrl_remove_cred(struct wpa_supplicant *wpa_s,
2467                                  struct wpa_cred *cred)
2468 {
2469         struct wpa_ssid *ssid;
2470         char str[20];
2471
2472         if (cred == NULL || wpa_config_remove_cred(wpa_s->conf, cred->id) < 0) {
2473                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
2474                 return -1;
2475         }
2476
2477         /* Remove any network entry created based on the removed credential */
2478         ssid = wpa_s->conf->ssid;
2479         while (ssid) {
2480                 if (ssid->parent_cred == cred) {
2481                         wpa_printf(MSG_DEBUG, "Remove network id %d since it "
2482                                    "used the removed credential", ssid->id);
2483                         os_snprintf(str, sizeof(str), "%d", ssid->id);
2484                         ssid = ssid->next;
2485                         wpa_supplicant_ctrl_iface_remove_network(wpa_s, str);
2486                 } else
2487                         ssid = ssid->next;
2488         }
2489
2490         return 0;
2491 }
2492
2493
2494 static int wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant *wpa_s,
2495                                                  char *cmd)
2496 {
2497         int id;
2498         struct wpa_cred *cred, *prev;
2499
2500         /* cmd: "<cred id>", "all", or "sp_fqdn=<FQDN>" */
2501         if (os_strcmp(cmd, "all") == 0) {
2502                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED all");
2503                 cred = wpa_s->conf->cred;
2504                 while (cred) {
2505                         prev = cred;
2506                         cred = cred->next;
2507                         wpas_ctrl_remove_cred(wpa_s, prev);
2508                 }
2509                 return 0;
2510         }
2511
2512         if (os_strncmp(cmd, "sp_fqdn=", 8) == 0) {
2513                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED SP FQDN '%s'",
2514                            cmd + 8);
2515                 cred = wpa_s->conf->cred;
2516                 while (cred) {
2517                         prev = cred;
2518                         cred = cred->next;
2519                         if (prev->domain &&
2520                             os_strcmp(prev->domain, cmd + 8) == 0)
2521                                 wpas_ctrl_remove_cred(wpa_s, prev);
2522                 }
2523                 return 0;
2524         }
2525
2526         id = atoi(cmd);
2527         wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED id=%d", id);
2528
2529         cred = wpa_config_get_cred(wpa_s->conf, id);
2530         return wpas_ctrl_remove_cred(wpa_s, cred);
2531 }
2532
2533
2534 static int wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant *wpa_s,
2535                                               char *cmd)
2536 {
2537         int id;
2538         struct wpa_cred *cred;
2539         char *name, *value;
2540
2541         /* cmd: "<cred id> <variable name> <value>" */
2542         name = os_strchr(cmd, ' ');
2543         if (name == NULL)
2544                 return -1;
2545         *name++ = '\0';
2546
2547         value = os_strchr(name, ' ');
2548         if (value == NULL)
2549                 return -1;
2550         *value++ = '\0';
2551
2552         id = atoi(cmd);
2553         wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_CRED id=%d name='%s'",
2554                    id, name);
2555         wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
2556                               (u8 *) value, os_strlen(value));
2557
2558         cred = wpa_config_get_cred(wpa_s->conf, id);
2559         if (cred == NULL) {
2560                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
2561                            id);
2562                 return -1;
2563         }
2564
2565         if (wpa_config_set_cred(cred, name, value, 0) < 0) {
2566                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set cred "
2567                            "variable '%s'", name);
2568                 return -1;
2569         }
2570
2571         return 0;
2572 }
2573
2574
2575 #ifndef CONFIG_NO_CONFIG_WRITE
2576 static int wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant *wpa_s)
2577 {
2578         int ret;
2579
2580         if (!wpa_s->conf->update_config) {
2581                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed "
2582                            "to update configuration (update_config=0)");
2583                 return -1;
2584         }
2585
2586         ret = wpa_config_write(wpa_s->confname, wpa_s->conf);
2587         if (ret) {
2588                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to "
2589                            "update configuration");
2590         } else {
2591                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration"
2592                            " updated");
2593         }
2594
2595         return ret;
2596 }
2597 #endif /* CONFIG_NO_CONFIG_WRITE */
2598
2599
2600 static int ctrl_iface_get_capability_pairwise(int res, char *strict,
2601                                               struct wpa_driver_capa *capa,
2602                                               char *buf, size_t buflen)
2603 {
2604         int ret, first = 1;
2605         char *pos, *end;
2606         size_t len;
2607
2608         pos = buf;
2609         end = pos + buflen;
2610
2611         if (res < 0) {
2612                 if (strict)
2613                         return 0;
2614                 len = os_strlcpy(buf, "CCMP TKIP NONE", buflen);
2615                 if (len >= buflen)
2616                         return -1;
2617                 return len;
2618         }
2619
2620         if (capa->enc & WPA_DRIVER_CAPA_ENC_CCMP) {
2621                 ret = os_snprintf(pos, end - pos, "%sCCMP", first ? "" : " ");
2622                 if (ret < 0 || ret >= end - pos)
2623                         return pos - buf;
2624                 pos += ret;
2625                 first = 0;
2626         }
2627
2628         if (capa->enc & WPA_DRIVER_CAPA_ENC_GCMP) {
2629                 ret = os_snprintf(pos, end - pos, "%sGCMP", first ? "" : " ");
2630                 if (ret < 0 || ret >= end - pos)
2631                         return pos - buf;
2632                 pos += ret;
2633                 first = 0;
2634         }
2635
2636         if (capa->enc & WPA_DRIVER_CAPA_ENC_TKIP) {
2637                 ret = os_snprintf(pos, end - pos, "%sTKIP", first ? "" : " ");
2638                 if (ret < 0 || ret >= end - pos)
2639                         return pos - buf;
2640                 pos += ret;
2641                 first = 0;
2642         }
2643
2644         if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE) {
2645                 ret = os_snprintf(pos, end - pos, "%sNONE", first ? "" : " ");
2646                 if (ret < 0 || ret >= end - pos)
2647                         return pos - buf;
2648                 pos += ret;
2649                 first = 0;
2650         }
2651
2652         return pos - buf;
2653 }
2654
2655
2656 static int ctrl_iface_get_capability_group(int res, char *strict,
2657                                            struct wpa_driver_capa *capa,
2658                                            char *buf, size_t buflen)
2659 {
2660         int ret, first = 1;
2661         char *pos, *end;
2662         size_t len;
2663
2664         pos = buf;
2665         end = pos + buflen;
2666
2667         if (res < 0) {
2668                 if (strict)
2669                         return 0;
2670                 len = os_strlcpy(buf, "CCMP TKIP WEP104 WEP40", buflen);
2671                 if (len >= buflen)
2672                         return -1;
2673                 return len;
2674         }
2675
2676         if (capa->enc & WPA_DRIVER_CAPA_ENC_CCMP) {
2677                 ret = os_snprintf(pos, end - pos, "%sCCMP", first ? "" : " ");
2678                 if (ret < 0 || ret >= end - pos)
2679                         return pos - buf;
2680                 pos += ret;
2681                 first = 0;
2682         }
2683
2684         if (capa->enc & WPA_DRIVER_CAPA_ENC_GCMP) {
2685                 ret = os_snprintf(pos, end - pos, "%sGCMP", first ? "" : " ");
2686                 if (ret < 0 || ret >= end - pos)
2687                         return pos - buf;
2688                 pos += ret;
2689                 first = 0;
2690         }
2691
2692         if (capa->enc & WPA_DRIVER_CAPA_ENC_TKIP) {
2693                 ret = os_snprintf(pos, end - pos, "%sTKIP", first ? "" : " ");
2694                 if (ret < 0 || ret >= end - pos)
2695                         return pos - buf;
2696                 pos += ret;
2697                 first = 0;
2698         }
2699
2700         if (capa->enc & WPA_DRIVER_CAPA_ENC_WEP104) {
2701                 ret = os_snprintf(pos, end - pos, "%sWEP104",
2702                                   first ? "" : " ");
2703                 if (ret < 0 || ret >= end - pos)
2704                         return pos - buf;
2705                 pos += ret;
2706                 first = 0;
2707         }
2708
2709         if (capa->enc & WPA_DRIVER_CAPA_ENC_WEP40) {
2710                 ret = os_snprintf(pos, end - pos, "%sWEP40", first ? "" : " ");
2711                 if (ret < 0 || ret >= end - pos)
2712                         return pos - buf;
2713                 pos += ret;
2714                 first = 0;
2715         }
2716
2717         return pos - buf;
2718 }
2719
2720
2721 static int ctrl_iface_get_capability_key_mgmt(int res, char *strict,
2722                                               struct wpa_driver_capa *capa,
2723                                               char *buf, size_t buflen)
2724 {
2725         int ret;
2726         char *pos, *end;
2727         size_t len;
2728
2729         pos = buf;
2730         end = pos + buflen;
2731
2732         if (res < 0) {
2733                 if (strict)
2734                         return 0;
2735                 len = os_strlcpy(buf, "WPA-PSK WPA-EAP IEEE8021X WPA-NONE "
2736                                  "NONE", buflen);
2737                 if (len >= buflen)
2738                         return -1;
2739                 return len;
2740         }
2741
2742         ret = os_snprintf(pos, end - pos, "NONE IEEE8021X");
2743         if (ret < 0 || ret >= end - pos)
2744                 return pos - buf;
2745         pos += ret;
2746
2747         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
2748                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2)) {
2749                 ret = os_snprintf(pos, end - pos, " WPA-EAP");
2750                 if (ret < 0 || ret >= end - pos)
2751                         return pos - buf;
2752                 pos += ret;
2753         }
2754
2755         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
2756                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
2757                 ret = os_snprintf(pos, end - pos, " WPA-PSK");
2758                 if (ret < 0 || ret >= end - pos)
2759                         return pos - buf;
2760                 pos += ret;
2761         }
2762
2763         if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE) {
2764                 ret = os_snprintf(pos, end - pos, " WPA-NONE");
2765                 if (ret < 0 || ret >= end - pos)
2766                         return pos - buf;
2767                 pos += ret;
2768         }
2769
2770         return pos - buf;
2771 }
2772
2773
2774 static int ctrl_iface_get_capability_proto(int res, char *strict,
2775                                            struct wpa_driver_capa *capa,
2776                                            char *buf, size_t buflen)
2777 {
2778         int ret, first = 1;
2779         char *pos, *end;
2780         size_t len;
2781
2782         pos = buf;
2783         end = pos + buflen;
2784
2785         if (res < 0) {
2786                 if (strict)
2787                         return 0;
2788                 len = os_strlcpy(buf, "RSN WPA", buflen);
2789                 if (len >= buflen)
2790                         return -1;
2791                 return len;
2792         }
2793
2794         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
2795                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
2796                 ret = os_snprintf(pos, end - pos, "%sRSN", first ? "" : " ");
2797                 if (ret < 0 || ret >= end - pos)
2798                         return pos - buf;
2799                 pos += ret;
2800                 first = 0;
2801         }
2802
2803         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
2804                               WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK)) {
2805                 ret = os_snprintf(pos, end - pos, "%sWPA", first ? "" : " ");
2806                 if (ret < 0 || ret >= end - pos)
2807                         return pos - buf;
2808                 pos += ret;
2809                 first = 0;
2810         }
2811
2812         return pos - buf;
2813 }
2814
2815
2816 static int ctrl_iface_get_capability_auth_alg(int res, char *strict,
2817                                               struct wpa_driver_capa *capa,
2818                                               char *buf, size_t buflen)
2819 {
2820         int ret, first = 1;
2821         char *pos, *end;
2822         size_t len;
2823
2824         pos = buf;
2825         end = pos + buflen;
2826
2827         if (res < 0) {
2828                 if (strict)
2829                         return 0;
2830                 len = os_strlcpy(buf, "OPEN SHARED LEAP", buflen);
2831                 if (len >= buflen)
2832                         return -1;
2833                 return len;
2834         }
2835
2836         if (capa->auth & (WPA_DRIVER_AUTH_OPEN)) {
2837                 ret = os_snprintf(pos, end - pos, "%sOPEN", first ? "" : " ");
2838                 if (ret < 0 || ret >= end - pos)
2839                         return pos - buf;
2840                 pos += ret;
2841                 first = 0;
2842         }
2843
2844         if (capa->auth & (WPA_DRIVER_AUTH_SHARED)) {
2845                 ret = os_snprintf(pos, end - pos, "%sSHARED",
2846                                   first ? "" : " ");
2847                 if (ret < 0 || ret >= end - pos)
2848                         return pos - buf;
2849                 pos += ret;
2850                 first = 0;
2851         }
2852
2853         if (capa->auth & (WPA_DRIVER_AUTH_LEAP)) {
2854                 ret = os_snprintf(pos, end - pos, "%sLEAP", first ? "" : " ");
2855                 if (ret < 0 || ret >= end - pos)
2856                         return pos - buf;
2857                 pos += ret;
2858                 first = 0;
2859         }
2860
2861         return pos - buf;
2862 }
2863
2864
2865 static int ctrl_iface_get_capability_modes(int res, char *strict,
2866                                            struct wpa_driver_capa *capa,
2867                                            char *buf, size_t buflen)
2868 {
2869         int ret, first = 1;
2870         char *pos, *end;
2871         size_t len;
2872
2873         pos = buf;
2874         end = pos + buflen;
2875
2876         if (res < 0) {
2877                 if (strict)
2878                         return 0;
2879                 len = os_strlcpy(buf, "IBSS AP", buflen);
2880                 if (len >= buflen)
2881                         return -1;
2882                 return len;
2883         }
2884
2885         if (capa->flags & WPA_DRIVER_FLAGS_IBSS) {
2886                 ret = os_snprintf(pos, end - pos, "%sIBSS", first ? "" : " ");
2887                 if (ret < 0 || ret >= end - pos)
2888                         return pos - buf;
2889                 pos += ret;
2890                 first = 0;
2891         }
2892
2893         if (capa->flags & WPA_DRIVER_FLAGS_AP) {
2894                 ret = os_snprintf(pos, end - pos, "%sAP", first ? "" : " ");
2895                 if (ret < 0 || ret >= end - pos)
2896                         return pos - buf;
2897                 pos += ret;
2898                 first = 0;
2899         }
2900
2901         return pos - buf;
2902 }
2903
2904
2905 static int ctrl_iface_get_capability_channels(struct wpa_supplicant *wpa_s,
2906                                               char *buf, size_t buflen)
2907 {
2908         struct hostapd_channel_data *chnl;
2909         int ret, i, j;
2910         char *pos, *end, *hmode;
2911
2912         pos = buf;
2913         end = pos + buflen;
2914
2915         for (j = 0; j < wpa_s->hw.num_modes; j++) {
2916                 switch (wpa_s->hw.modes[j].mode) {
2917                 case HOSTAPD_MODE_IEEE80211B:
2918                         hmode = "B";
2919                         break;
2920                 case HOSTAPD_MODE_IEEE80211G:
2921                         hmode = "G";
2922                         break;
2923                 case HOSTAPD_MODE_IEEE80211A:
2924                         hmode = "A";
2925                         break;
2926                 case HOSTAPD_MODE_IEEE80211AD:
2927                         hmode = "AD";
2928                         break;
2929                 default:
2930                         continue;
2931                 }
2932                 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:", hmode);
2933                 if (ret < 0 || ret >= end - pos)
2934                         return pos - buf;
2935                 pos += ret;
2936                 chnl = wpa_s->hw.modes[j].channels;
2937                 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
2938                         if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
2939                                 continue;
2940                         ret = os_snprintf(pos, end - pos, " %d", chnl[i].chan);
2941                         if (ret < 0 || ret >= end - pos)
2942                                 return pos - buf;
2943                         pos += ret;
2944                 }
2945                 ret = os_snprintf(pos, end - pos, "\n");
2946                 if (ret < 0 || ret >= end - pos)
2947                         return pos - buf;
2948                 pos += ret;
2949         }
2950
2951         return pos - buf;
2952 }
2953
2954
2955 static int ctrl_iface_get_capability_freq(struct wpa_supplicant *wpa_s,
2956                                           char *buf, size_t buflen)
2957 {
2958         struct hostapd_channel_data *chnl;
2959         int ret, i, j;
2960         char *pos, *end, *hmode;
2961
2962         pos = buf;
2963         end = pos + buflen;
2964
2965         for (j = 0; j < wpa_s->hw.num_modes; j++) {
2966                 switch (wpa_s->hw.modes[j].mode) {
2967                 case HOSTAPD_MODE_IEEE80211B:
2968                         hmode = "B";
2969                         break;
2970                 case HOSTAPD_MODE_IEEE80211G:
2971                         hmode = "G";
2972                         break;
2973                 case HOSTAPD_MODE_IEEE80211A:
2974                         hmode = "A";
2975                         break;
2976                 case HOSTAPD_MODE_IEEE80211AD:
2977                         hmode = "AD";
2978                         break;
2979                 default:
2980                         continue;
2981                 }
2982                 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:\n",
2983                                   hmode);
2984                 if (ret < 0 || ret >= end - pos)
2985                         return pos - buf;
2986                 pos += ret;
2987                 chnl = wpa_s->hw.modes[j].channels;
2988                 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
2989                         if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
2990                                 continue;
2991                         ret = os_snprintf(pos, end - pos, " %d = %d MHz%s\n",
2992                                           chnl[i].chan, chnl[i].freq,
2993                                           chnl[i].flag & HOSTAPD_CHAN_NO_IBSS ?
2994                                           " (NO_IBSS)" : "");
2995                         if (ret < 0 || ret >= end - pos)
2996                                 return pos - buf;
2997                         pos += ret;
2998                 }
2999                 ret = os_snprintf(pos, end - pos, "\n");
3000                 if (ret < 0 || ret >= end - pos)
3001                         return pos - buf;
3002                 pos += ret;
3003         }
3004
3005         return pos - buf;
3006 }
3007
3008
3009 static int wpa_supplicant_ctrl_iface_get_capability(
3010         struct wpa_supplicant *wpa_s, const char *_field, char *buf,
3011         size_t buflen)
3012 {
3013         struct wpa_driver_capa capa;
3014         int res;
3015         char *strict;
3016         char field[30];
3017         size_t len;
3018
3019         /* Determine whether or not strict checking was requested */
3020         len = os_strlcpy(field, _field, sizeof(field));
3021         if (len >= sizeof(field))
3022                 return -1;
3023         strict = os_strchr(field, ' ');
3024         if (strict != NULL) {
3025                 *strict++ = '\0';
3026                 if (os_strcmp(strict, "strict") != 0)
3027                         return -1;
3028         }
3029
3030         wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CAPABILITY '%s' %s",
3031                 field, strict ? strict : "");
3032
3033         if (os_strcmp(field, "eap") == 0) {
3034                 return eap_get_names(buf, buflen);
3035         }
3036
3037         res = wpa_drv_get_capa(wpa_s, &capa);
3038
3039         if (os_strcmp(field, "pairwise") == 0)
3040                 return ctrl_iface_get_capability_pairwise(res, strict, &capa,
3041                                                           buf, buflen);
3042
3043         if (os_strcmp(field, "group") == 0)
3044                 return ctrl_iface_get_capability_group(res, strict, &capa,
3045                                                        buf, buflen);
3046
3047         if (os_strcmp(field, "key_mgmt") == 0)
3048                 return ctrl_iface_get_capability_key_mgmt(res, strict, &capa,
3049                                                           buf, buflen);
3050
3051         if (os_strcmp(field, "proto") == 0)
3052                 return ctrl_iface_get_capability_proto(res, strict, &capa,
3053                                                        buf, buflen);
3054
3055         if (os_strcmp(field, "auth_alg") == 0)
3056                 return ctrl_iface_get_capability_auth_alg(res, strict, &capa,
3057                                                           buf, buflen);
3058
3059         if (os_strcmp(field, "modes") == 0)
3060                 return ctrl_iface_get_capability_modes(res, strict, &capa,
3061                                                        buf, buflen);
3062
3063         if (os_strcmp(field, "channels") == 0)
3064                 return ctrl_iface_get_capability_channels(wpa_s, buf, buflen);
3065
3066         if (os_strcmp(field, "freq") == 0)
3067                 return ctrl_iface_get_capability_freq(wpa_s, buf, buflen);
3068
3069         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown GET_CAPABILITY field '%s'",
3070                    field);
3071
3072         return -1;
3073 }
3074
3075
3076 #ifdef CONFIG_INTERWORKING
3077 static char * anqp_add_hex(char *pos, char *end, const char *title,
3078                            struct wpabuf *data)
3079 {
3080         char *start = pos;
3081         size_t i;
3082         int ret;
3083         const u8 *d;
3084
3085         if (data == NULL)
3086                 return start;
3087
3088         ret = os_snprintf(pos, end - pos, "%s=", title);
3089         if (ret < 0 || ret >= end - pos)
3090                 return start;
3091         pos += ret;
3092
3093         d = wpabuf_head_u8(data);
3094         for (i = 0; i < wpabuf_len(data); i++) {
3095                 ret = os_snprintf(pos, end - pos, "%02x", *d++);
3096                 if (ret < 0 || ret >= end - pos)
3097                         return start;
3098                 pos += ret;
3099         }
3100
3101         ret = os_snprintf(pos, end - pos, "\n");
3102         if (ret < 0 || ret >= end - pos)
3103                 return start;
3104         pos += ret;
3105
3106         return pos;
3107 }
3108 #endif /* CONFIG_INTERWORKING */
3109
3110
3111 static int print_bss_info(struct wpa_supplicant *wpa_s, struct wpa_bss *bss,
3112                           unsigned long mask, char *buf, size_t buflen)
3113 {
3114         size_t i;
3115         int ret;
3116         char *pos, *end;
3117         const u8 *ie, *ie2;
3118
3119         pos = buf;
3120         end = buf + buflen;
3121
3122         if (mask & WPA_BSS_MASK_ID) {
3123                 ret = os_snprintf(pos, end - pos, "id=%u\n", bss->id);
3124                 if (ret < 0 || ret >= end - pos)
3125                         return 0;
3126                 pos += ret;
3127         }
3128
3129         if (mask & WPA_BSS_MASK_BSSID) {
3130                 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
3131                                   MAC2STR(bss->bssid));
3132                 if (ret < 0 || ret >= end - pos)
3133                         return 0;
3134                 pos += ret;
3135         }
3136
3137         if (mask & WPA_BSS_MASK_FREQ) {
3138                 ret = os_snprintf(pos, end - pos, "freq=%d\n", bss->freq);
3139                 if (ret < 0 || ret >= end - pos)
3140                         return 0;
3141                 pos += ret;
3142         }
3143
3144         if (mask & WPA_BSS_MASK_BEACON_INT) {
3145                 ret = os_snprintf(pos, end - pos, "beacon_int=%d\n",
3146                                   bss->beacon_int);
3147                 if (ret < 0 || ret >= end - pos)
3148                         return 0;
3149                 pos += ret;
3150         }
3151
3152         if (mask & WPA_BSS_MASK_CAPABILITIES) {
3153                 ret = os_snprintf(pos, end - pos, "capabilities=0x%04x\n",
3154                                   bss->caps);
3155                 if (ret < 0 || ret >= end - pos)
3156                         return 0;
3157                 pos += ret;
3158         }
3159
3160         if (mask & WPA_BSS_MASK_QUAL) {
3161                 ret = os_snprintf(pos, end - pos, "qual=%d\n", bss->qual);
3162                 if (ret < 0 || ret >= end - pos)
3163                         return 0;
3164                 pos += ret;
3165         }
3166
3167         if (mask & WPA_BSS_MASK_NOISE) {
3168                 ret = os_snprintf(pos, end - pos, "noise=%d\n", bss->noise);
3169                 if (ret < 0 || ret >= end - pos)
3170                         return 0;
3171                 pos += ret;
3172         }
3173
3174         if (mask & WPA_BSS_MASK_LEVEL) {
3175                 ret = os_snprintf(pos, end - pos, "level=%d\n", bss->level);
3176                 if (ret < 0 || ret >= end - pos)
3177                         return 0;
3178                 pos += ret;
3179         }
3180
3181         if (mask & WPA_BSS_MASK_TSF) {
3182                 ret = os_snprintf(pos, end - pos, "tsf=%016llu\n",
3183                                   (unsigned long long) bss->tsf);
3184                 if (ret < 0 || ret >= end - pos)
3185                         return 0;
3186                 pos += ret;
3187         }
3188
3189         if (mask & WPA_BSS_MASK_AGE) {
3190                 struct os_time now;
3191
3192                 os_get_time(&now);
3193                 ret = os_snprintf(pos, end - pos, "age=%d\n",
3194                                   (int) (now.sec - bss->last_update.sec));
3195                 if (ret < 0 || ret >= end - pos)
3196                         return 0;
3197                 pos += ret;
3198         }
3199
3200         if (mask & WPA_BSS_MASK_IE) {
3201                 ret = os_snprintf(pos, end - pos, "ie=");
3202                 if (ret < 0 || ret >= end - pos)
3203                         return 0;
3204                 pos += ret;
3205
3206                 ie = (const u8 *) (bss + 1);
3207                 for (i = 0; i < bss->ie_len; i++) {
3208                         ret = os_snprintf(pos, end - pos, "%02x", *ie++);
3209                         if (ret < 0 || ret >= end - pos)
3210                                 return 0;
3211                         pos += ret;
3212                 }
3213
3214                 ret = os_snprintf(pos, end - pos, "\n");
3215                 if (ret < 0 || ret >= end - pos)
3216                         return 0;
3217                 pos += ret;
3218         }
3219
3220         if (mask & WPA_BSS_MASK_FLAGS) {
3221                 ret = os_snprintf(pos, end - pos, "flags=");
3222                 if (ret < 0 || ret >= end - pos)
3223                         return 0;
3224                 pos += ret;
3225
3226                 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
3227                 if (ie)
3228                         pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie,
3229                                                     2 + ie[1]);
3230                 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
3231                 if (ie2)
3232                         pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2,
3233                                                     2 + ie2[1]);
3234                 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
3235                 if (!ie && !ie2 && bss->caps & IEEE80211_CAP_PRIVACY) {
3236                         ret = os_snprintf(pos, end - pos, "[WEP]");
3237                         if (ret < 0 || ret >= end - pos)
3238                                 return 0;
3239                         pos += ret;
3240                 }
3241                 if (bss->caps & IEEE80211_CAP_IBSS) {
3242                         ret = os_snprintf(pos, end - pos, "[IBSS]");
3243                         if (ret < 0 || ret >= end - pos)
3244                                 return 0;
3245                         pos += ret;
3246                 }
3247                 if (bss->caps & IEEE80211_CAP_ESS) {
3248                         ret = os_snprintf(pos, end - pos, "[ESS]");
3249                         if (ret < 0 || ret >= end - pos)
3250                                 return 0;
3251                         pos += ret;
3252                 }
3253                 if (wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE)) {
3254                         ret = os_snprintf(pos, end - pos, "[P2P]");
3255                         if (ret < 0 || ret >= end - pos)
3256                                 return 0;
3257                         pos += ret;
3258                 }
3259 #ifdef CONFIG_HS20
3260                 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE)) {
3261                         ret = os_snprintf(pos, end - pos, "[HS20]");
3262                         if (ret < 0 || ret >= end - pos)
3263                                 return 0;
3264                         pos += ret;
3265                 }
3266 #endif /* CONFIG_HS20 */
3267
3268                 ret = os_snprintf(pos, end - pos, "\n");
3269                 if (ret < 0 || ret >= end - pos)
3270                         return 0;
3271                 pos += ret;
3272         }
3273
3274         if (mask & WPA_BSS_MASK_SSID) {
3275                 ret = os_snprintf(pos, end - pos, "ssid=%s\n",
3276                                   wpa_ssid_txt(bss->ssid, bss->ssid_len));
3277                 if (ret < 0 || ret >= end - pos)
3278                         return 0;
3279                 pos += ret;
3280         }
3281
3282 #ifdef CONFIG_WPS
3283         if (mask & WPA_BSS_MASK_WPS_SCAN) {
3284                 ie = (const u8 *) (bss + 1);
3285                 ret = wpas_wps_scan_result_text(ie, bss->ie_len, pos, end);
3286                 if (ret < 0 || ret >= end - pos)
3287                         return 0;
3288                 pos += ret;
3289         }
3290 #endif /* CONFIG_WPS */
3291
3292 #ifdef CONFIG_P2P
3293         if (mask & WPA_BSS_MASK_P2P_SCAN) {
3294                 ie = (const u8 *) (bss + 1);
3295                 ret = wpas_p2p_scan_result_text(ie, bss->ie_len, pos, end);
3296                 if (ret < 0 || ret >= end - pos)
3297                         return 0;
3298                 pos += ret;
3299         }
3300 #endif /* CONFIG_P2P */
3301
3302 #ifdef CONFIG_WIFI_DISPLAY
3303         if (mask & WPA_BSS_MASK_WIFI_DISPLAY) {
3304                 struct wpabuf *wfd;
3305                 ie = (const u8 *) (bss + 1);
3306                 wfd = ieee802_11_vendor_ie_concat(ie, bss->ie_len,
3307                                                   WFD_IE_VENDOR_TYPE);
3308                 if (wfd) {
3309                         ret = os_snprintf(pos, end - pos, "wfd_subelems=");
3310                         if (ret < 0 || ret >= end - pos)
3311                                 return 0;
3312                         pos += ret;
3313
3314                         pos += wpa_snprintf_hex(pos, end - pos,
3315                                                 wpabuf_head(wfd),
3316                                                 wpabuf_len(wfd));
3317                         wpabuf_free(wfd);
3318
3319                         ret = os_snprintf(pos, end - pos, "\n");
3320                         if (ret < 0 || ret >= end - pos)
3321                                 return 0;
3322                         pos += ret;
3323                 }
3324         }
3325 #endif /* CONFIG_WIFI_DISPLAY */
3326
3327 #ifdef CONFIG_INTERWORKING
3328         if ((mask & WPA_BSS_MASK_INTERNETW) && bss->anqp) {
3329                 struct wpa_bss_anqp *anqp = bss->anqp;
3330                 pos = anqp_add_hex(pos, end, "anqp_venue_name",
3331                                    anqp->venue_name);
3332                 pos = anqp_add_hex(pos, end, "anqp_network_auth_type",
3333                                    anqp->network_auth_type);
3334                 pos = anqp_add_hex(pos, end, "anqp_roaming_consortium",
3335                                    anqp->roaming_consortium);
3336                 pos = anqp_add_hex(pos, end, "anqp_ip_addr_type_availability",
3337                                    anqp->ip_addr_type_availability);
3338                 pos = anqp_add_hex(pos, end, "anqp_nai_realm",
3339                                    anqp->nai_realm);
3340                 pos = anqp_add_hex(pos, end, "anqp_3gpp", anqp->anqp_3gpp);
3341                 pos = anqp_add_hex(pos, end, "anqp_domain_name",
3342                                    anqp->domain_name);
3343 #ifdef CONFIG_HS20
3344                 pos = anqp_add_hex(pos, end, "hs20_operator_friendly_name",
3345                                    anqp->hs20_operator_friendly_name);
3346                 pos = anqp_add_hex(pos, end, "hs20_wan_metrics",
3347                                    anqp->hs20_wan_metrics);
3348                 pos = anqp_add_hex(pos, end, "hs20_connection_capability",
3349                                    anqp->hs20_connection_capability);
3350 #endif /* CONFIG_HS20 */
3351         }
3352 #endif /* CONFIG_INTERWORKING */
3353
3354         if (mask & WPA_BSS_MASK_DELIM) {
3355                 ret = os_snprintf(pos, end - pos, "====\n");
3356                 if (ret < 0 || ret >= end - pos)
3357                         return 0;
3358                 pos += ret;
3359         }
3360
3361         return pos - buf;
3362 }
3363
3364
3365 static int wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant *wpa_s,
3366                                          const char *cmd, char *buf,
3367                                          size_t buflen)
3368 {
3369         u8 bssid[ETH_ALEN];
3370         size_t i;
3371         struct wpa_bss *bss;
3372         struct wpa_bss *bsslast = NULL;
3373         struct dl_list *next;
3374         int ret = 0;
3375         int len;
3376         char *ctmp;
3377         unsigned long mask = WPA_BSS_MASK_ALL;
3378
3379         if (os_strncmp(cmd, "RANGE=", 6) == 0) {
3380                 if (os_strncmp(cmd + 6, "ALL", 3) == 0) {
3381                         bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss,
3382                                             list_id);
3383                         bsslast = dl_list_last(&wpa_s->bss_id, struct wpa_bss,
3384                                                list_id);
3385                 } else { /* N1-N2 */
3386                         unsigned int id1, id2;
3387
3388                         if ((ctmp = os_strchr(cmd + 6, '-')) == NULL) {
3389                                 wpa_printf(MSG_INFO, "Wrong BSS range "
3390                                            "format");
3391                                 return 0;
3392                         }
3393
3394                         if (*(cmd + 6) == '-')
3395                                 id1 = 0;
3396                         else
3397                                 id1 = atoi(cmd + 6);
3398                         ctmp++;
3399                         if (*ctmp >= '0' && *ctmp <= '9')
3400                                 id2 = atoi(ctmp);
3401                         else
3402                                 id2 = (unsigned int) -1;
3403                         bss = wpa_bss_get_id_range(wpa_s, id1, id2);
3404                         if (id2 == (unsigned int) -1)
3405                                 bsslast = dl_list_last(&wpa_s->bss_id,
3406                                                        struct wpa_bss,
3407                                                        list_id);
3408                         else {
3409                                 bsslast = wpa_bss_get_id(wpa_s, id2);
3410                                 if (bsslast == NULL && bss && id2 > id1) {
3411                                         struct wpa_bss *tmp = bss;
3412                                         for (;;) {
3413                                                 next = tmp->list_id.next;
3414                                                 if (next == &wpa_s->bss_id)
3415                                                         break;
3416                                                 tmp = dl_list_entry(
3417                                                         next, struct wpa_bss,
3418                                                         list_id);
3419                                                 if (tmp->id > id2)
3420                                                         break;
3421                                                 bsslast = tmp;
3422                                         }
3423                                 }
3424                         }
3425                 }
3426         } else if (os_strncmp(cmd, "FIRST", 5) == 0)
3427                 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss, list_id);
3428         else if (os_strncmp(cmd, "LAST", 4) == 0)
3429                 bss = dl_list_last(&wpa_s->bss_id, struct wpa_bss, list_id);
3430         else if (os_strncmp(cmd, "ID-", 3) == 0) {
3431                 i = atoi(cmd + 3);
3432                 bss = wpa_bss_get_id(wpa_s, i);
3433         } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
3434                 i = atoi(cmd + 5);
3435                 bss = wpa_bss_get_id(wpa_s, i);
3436                 if (bss) {
3437                         next = bss->list_id.next;
3438                         if (next == &wpa_s->bss_id)
3439                                 bss = NULL;
3440                         else
3441                                 bss = dl_list_entry(next, struct wpa_bss,
3442                                                     list_id);
3443                 }
3444 #ifdef CONFIG_P2P
3445         } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
3446                 if (hwaddr_aton(cmd + 13, bssid) == 0)
3447                         bss = wpa_bss_get_p2p_dev_addr(wpa_s, bssid);
3448                 else
3449                         bss = NULL;
3450 #endif /* CONFIG_P2P */
3451         } else if (hwaddr_aton(cmd, bssid) == 0)
3452                 bss = wpa_bss_get_bssid(wpa_s, bssid);
3453         else {
3454                 struct wpa_bss *tmp;
3455                 i = atoi(cmd);
3456                 bss = NULL;
3457                 dl_list_for_each(tmp, &wpa_s->bss_id, struct wpa_bss, list_id)
3458                 {
3459                         if (i-- == 0) {
3460                                 bss = tmp;
3461                                 break;
3462                         }
3463                 }
3464         }
3465
3466         if ((ctmp = os_strstr(cmd, "MASK=")) != NULL) {
3467                 mask = strtoul(ctmp + 5, NULL, 0x10);
3468                 if (mask == 0)
3469                         mask = WPA_BSS_MASK_ALL;
3470         }
3471
3472         if (bss == NULL)
3473                 return 0;
3474
3475         if (bsslast == NULL)
3476                 bsslast = bss;
3477         do {
3478                 len = print_bss_info(wpa_s, bss, mask, buf, buflen);
3479                 ret += len;
3480                 buf += len;
3481                 buflen -= len;
3482                 if (bss == bsslast) {
3483                         if ((mask & WPA_BSS_MASK_DELIM) && len &&
3484                             (bss == dl_list_last(&wpa_s->bss_id,
3485                                                  struct wpa_bss, list_id)))
3486                                 os_snprintf(buf - 5, 5, "####\n");
3487                         break;
3488                 }
3489                 next = bss->list_id.next;
3490                 if (next == &wpa_s->bss_id)
3491                         break;
3492                 bss = dl_list_entry(next, struct wpa_bss, list_id);
3493         } while (bss && len);
3494
3495         return ret;
3496 }
3497
3498
3499 static int wpa_supplicant_ctrl_iface_ap_scan(
3500         struct wpa_supplicant *wpa_s, char *cmd)
3501 {
3502         int ap_scan = atoi(cmd);
3503         return wpa_supplicant_set_ap_scan(wpa_s, ap_scan);
3504 }
3505
3506
3507 static int wpa_supplicant_ctrl_iface_scan_interval(
3508         struct wpa_supplicant *wpa_s, char *cmd)
3509 {
3510         int scan_int = atoi(cmd);
3511         return wpa_supplicant_set_scan_interval(wpa_s, scan_int);
3512 }
3513
3514
3515 static int wpa_supplicant_ctrl_iface_bss_expire_age(
3516         struct wpa_supplicant *wpa_s, char *cmd)
3517 {
3518         int expire_age = atoi(cmd);
3519         return wpa_supplicant_set_bss_expiration_age(wpa_s, expire_age);
3520 }
3521
3522
3523 static int wpa_supplicant_ctrl_iface_bss_expire_count(
3524         struct wpa_supplicant *wpa_s, char *cmd)
3525 {
3526         int expire_count = atoi(cmd);
3527         return wpa_supplicant_set_bss_expiration_count(wpa_s, expire_count);
3528 }
3529
3530
3531 static int wpa_supplicant_ctrl_iface_bss_flush(
3532         struct wpa_supplicant *wpa_s, char *cmd)
3533 {
3534         int flush_age = atoi(cmd);
3535
3536         if (flush_age == 0)
3537                 wpa_bss_flush(wpa_s);
3538         else
3539                 wpa_bss_flush_by_age(wpa_s, flush_age);
3540         return 0;
3541 }
3542
3543
3544 static void wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant *wpa_s)
3545 {
3546         wpa_printf(MSG_DEBUG, "Dropping SA without deauthentication");
3547         /* MLME-DELETEKEYS.request */
3548         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 0, 0, NULL, 0, NULL, 0);
3549         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 1, 0, NULL, 0, NULL, 0);
3550         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 2, 0, NULL, 0, NULL, 0);
3551         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 3, 0, NULL, 0, NULL, 0);
3552 #ifdef CONFIG_IEEE80211W
3553         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 4, 0, NULL, 0, NULL, 0);
3554         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 5, 0, NULL, 0, NULL, 0);
3555 #endif /* CONFIG_IEEE80211W */
3556
3557         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, wpa_s->bssid, 0, 0, NULL, 0, NULL,
3558                         0);
3559         /* MLME-SETPROTECTION.request(None) */
3560         wpa_drv_mlme_setprotection(wpa_s, wpa_s->bssid,
3561                                    MLME_SETPROTECTION_PROTECT_TYPE_NONE,
3562                                    MLME_SETPROTECTION_KEY_TYPE_PAIRWISE);
3563         wpa_sm_drop_sa(wpa_s->wpa);
3564 }
3565
3566
3567 static int wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant *wpa_s,
3568                                           char *addr)
3569 {
3570 #ifdef CONFIG_NO_SCAN_PROCESSING
3571         return -1;
3572 #else /* CONFIG_NO_SCAN_PROCESSING */
3573         u8 bssid[ETH_ALEN];
3574         struct wpa_bss *bss;
3575         struct wpa_ssid *ssid = wpa_s->current_ssid;
3576
3577         if (hwaddr_aton(addr, bssid)) {
3578                 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: invalid "
3579                            "address '%s'", addr);
3580                 return -1;
3581         }
3582
3583         wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM " MACSTR, MAC2STR(bssid));
3584
3585         if (!ssid) {
3586                 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: No network "
3587                            "configuration known for the target AP");
3588                 return -1;
3589         }
3590
3591         bss = wpa_bss_get(wpa_s, bssid, ssid->ssid, ssid->ssid_len);
3592         if (!bss) {
3593                 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: Target AP not found "
3594                            "from BSS table");
3595                 return -1;
3596         }
3597
3598         /*
3599          * TODO: Find best network configuration block from configuration to
3600          * allow roaming to other networks
3601          */
3602
3603         wpa_s->reassociate = 1;
3604         wpa_supplicant_connect(wpa_s, bss, ssid);
3605
3606         return 0;
3607 #endif /* CONFIG_NO_SCAN_PROCESSING */
3608 }
3609
3610
3611 #ifdef CONFIG_P2P
3612 static int p2p_ctrl_find(struct wpa_supplicant *wpa_s, char *cmd)
3613 {
3614         unsigned int timeout = atoi(cmd);
3615         enum p2p_discovery_type type = P2P_FIND_START_WITH_FULL;
3616         u8 dev_id[ETH_ALEN], *_dev_id = NULL;
3617         char *pos;
3618         unsigned int search_delay;
3619
3620         if (os_strstr(cmd, "type=social"))
3621                 type = P2P_FIND_ONLY_SOCIAL;
3622         else if (os_strstr(cmd, "type=progressive"))
3623                 type = P2P_FIND_PROGRESSIVE;
3624
3625         pos = os_strstr(cmd, "dev_id=");
3626         if (pos) {
3627                 pos += 7;
3628                 if (hwaddr_aton(pos, dev_id))
3629                         return -1;
3630                 _dev_id = dev_id;
3631         }
3632
3633         pos = os_strstr(cmd, "delay=");
3634         if (pos) {
3635                 pos += 6;
3636                 search_delay = atoi(pos);
3637         } else
3638                 search_delay = wpas_p2p_search_delay(wpa_s);
3639
3640         return wpas_p2p_find(wpa_s, timeout, type, 0, NULL, _dev_id,
3641                              search_delay);
3642 }
3643
3644
3645 static int p2p_ctrl_connect(struct wpa_supplicant *wpa_s, char *cmd,
3646                             char *buf, size_t buflen)
3647 {
3648         u8 addr[ETH_ALEN];
3649         char *pos, *pos2;
3650         char *pin = NULL;
3651         enum p2p_wps_method wps_method;
3652         int new_pin;
3653         int ret;
3654         int persistent_group, persistent_id = -1;
3655         int join;
3656         int auth;
3657         int automatic;
3658         int go_intent = -1;
3659         int freq = 0;
3660         int pd;
3661         int ht40;
3662
3663         /* <addr> <"pbc" | "pin" | PIN> [label|display|keypad]
3664          * [persistent|persistent=<network id>]
3665          * [join] [auth] [go_intent=<0..15>] [freq=<in MHz>] [provdisc]
3666          * [ht40] */
3667
3668         if (hwaddr_aton(cmd, addr))
3669                 return -1;
3670
3671         pos = cmd + 17;
3672         if (*pos != ' ')
3673                 return -1;
3674         pos++;
3675
3676         persistent_group = os_strstr(pos, " persistent") != NULL;
3677         pos2 = os_strstr(pos, " persistent=");
3678         if (pos2) {
3679                 struct wpa_ssid *ssid;
3680                 persistent_id = atoi(pos2 + 12);
3681                 ssid = wpa_config_get_network(wpa_s->conf, persistent_id);
3682                 if (ssid == NULL || ssid->disabled != 2 ||
3683                     ssid->mode != WPAS_MODE_P2P_GO) {
3684                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
3685                                    "SSID id=%d for persistent P2P group (GO)",
3686                                    persistent_id);
3687                         return -1;
3688                 }
3689         }
3690         join = os_strstr(pos, " join") != NULL;
3691         auth = os_strstr(pos, " auth") != NULL;
3692         automatic = os_strstr(pos, " auto") != NULL;
3693         pd = os_strstr(pos, " provdisc") != NULL;
3694         ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40;
3695
3696         pos2 = os_strstr(pos, " go_intent=");
3697         if (pos2) {
3698                 pos2 += 11;
3699                 go_intent = atoi(pos2);
3700                 if (go_intent < 0 || go_intent > 15)
3701                         return -1;
3702         }
3703
3704         pos2 = os_strstr(pos, " freq=");
3705         if (pos2) {
3706                 pos2 += 6;
3707                 freq = atoi(pos2);
3708                 if (freq <= 0)
3709                         return -1;
3710         }
3711
3712         if (os_strncmp(pos, "pin", 3) == 0) {
3713                 /* Request random PIN (to be displayed) and enable the PIN */
3714                 wps_method = WPS_PIN_DISPLAY;
3715         } else if (os_strncmp(pos, "pbc", 3) == 0) {
3716                 wps_method = WPS_PBC;
3717         } else {
3718                 pin = pos;
3719                 pos = os_strchr(pin, ' ');
3720                 wps_method = WPS_PIN_KEYPAD;
3721                 if (pos) {
3722                         *pos++ = '\0';
3723                         if (os_strncmp(pos, "display", 7) == 0)
3724                                 wps_method = WPS_PIN_DISPLAY;
3725                 }
3726                 if (!wps_pin_str_valid(pin)) {
3727                         os_memcpy(buf, "FAIL-INVALID-PIN\n", 17);
3728                         return 17;
3729                 }
3730         }
3731
3732         new_pin = wpas_p2p_connect(wpa_s, addr, pin, wps_method,
3733                                    persistent_group, automatic, join,
3734                                    auth, go_intent, freq, persistent_id, pd,
3735                                    ht40);
3736         if (new_pin == -2) {
3737                 os_memcpy(buf, "FAIL-CHANNEL-UNAVAILABLE\n", 25);
3738                 return 25;
3739         }
3740         if (new_pin == -3) {
3741                 os_memcpy(buf, "FAIL-CHANNEL-UNSUPPORTED\n", 25);
3742                 return 25;
3743         }
3744         if (new_pin < 0)
3745                 return -1;
3746         if (wps_method == WPS_PIN_DISPLAY && pin == NULL) {
3747                 ret = os_snprintf(buf, buflen, "%08d", new_pin);
3748                 if (ret < 0 || (size_t) ret >= buflen)
3749                         return -1;
3750                 return ret;
3751         }
3752
3753         os_memcpy(buf, "OK\n", 3);
3754         return 3;
3755 }
3756
3757
3758 static int p2p_ctrl_listen(struct wpa_supplicant *wpa_s, char *cmd)
3759 {
3760         unsigned int timeout = atoi(cmd);
3761         return wpas_p2p_listen(wpa_s, timeout);
3762 }
3763
3764
3765 static int p2p_ctrl_prov_disc(struct wpa_supplicant *wpa_s, char *cmd)
3766 {
3767         u8 addr[ETH_ALEN];
3768         char *pos;
3769         enum wpas_p2p_prov_disc_use use = WPAS_P2P_PD_FOR_GO_NEG;
3770
3771         /* <addr> <config method> [join|auto] */
3772
3773         if (hwaddr_aton(cmd, addr))
3774                 return -1;
3775
3776         pos = cmd + 17;
3777         if (*pos != ' ')
3778                 return -1;
3779         pos++;
3780
3781         if (os_strstr(pos, " join") != NULL)
3782                 use = WPAS_P2P_PD_FOR_JOIN;
3783         else if (os_strstr(pos, " auto") != NULL)
3784                 use = WPAS_P2P_PD_AUTO;
3785
3786         return wpas_p2p_prov_disc(wpa_s, addr, pos, use);
3787 }
3788
3789
3790 static int p2p_get_passphrase(struct wpa_supplicant *wpa_s, char *buf,
3791                               size_t buflen)
3792 {
3793         struct wpa_ssid *ssid = wpa_s->current_ssid;
3794
3795         if (ssid == NULL || ssid->mode != WPAS_MODE_P2P_GO ||
3796             ssid->passphrase == NULL)
3797                 return -1;
3798
3799         os_strlcpy(buf, ssid->passphrase, buflen);
3800         return os_strlen(buf);
3801 }
3802
3803
3804 static int p2p_ctrl_serv_disc_req(struct wpa_supplicant *wpa_s, char *cmd,
3805                                   char *buf, size_t buflen)
3806 {
3807         u64 ref;
3808         int res;
3809         u8 dst_buf[ETH_ALEN], *dst;
3810         struct wpabuf *tlvs;
3811         char *pos;
3812         size_t len;
3813
3814         if (hwaddr_aton(cmd, dst_buf))
3815                 return -1;
3816         dst = dst_buf;
3817         if (dst[0] == 0 && dst[1] == 0 && dst[2] == 0 &&
3818             dst[3] == 0 && dst[4] == 0 && dst[5] == 0)
3819                 dst = NULL;
3820         pos = cmd + 17;
3821         if (*pos != ' ')
3822                 return -1;
3823         pos++;
3824
3825         if (os_strncmp(pos, "upnp ", 5) == 0) {
3826                 u8 version;
3827                 pos += 5;
3828                 if (hexstr2bin(pos, &version, 1) < 0)
3829                         return -1;
3830                 pos += 2;
3831                 if (*pos != ' ')
3832                         return -1;
3833                 pos++;
3834                 ref = wpas_p2p_sd_request_upnp(wpa_s, dst, version, pos);
3835 #ifdef CONFIG_WIFI_DISPLAY
3836         } else if (os_strncmp(pos, "wifi-display ", 13) == 0) {
3837                 ref = wpas_p2p_sd_request_wifi_display(wpa_s, dst, pos + 13);
3838 #endif /* CONFIG_WIFI_DISPLAY */
3839         } else {
3840                 len = os_strlen(pos);
3841                 if (len & 1)
3842                         return -1;
3843                 len /= 2;
3844                 tlvs = wpabuf_alloc(len);
3845                 if (tlvs == NULL)
3846                         return -1;
3847                 if (hexstr2bin(pos, wpabuf_put(tlvs, len), len) < 0) {
3848                         wpabuf_free(tlvs);
3849                         return -1;
3850                 }
3851
3852                 ref = wpas_p2p_sd_request(wpa_s, dst, tlvs);
3853                 wpabuf_free(tlvs);
3854         }
3855         if (ref == 0)
3856                 return -1;
3857         res = os_snprintf(buf, buflen, "%llx", (long long unsigned) ref);
3858         if (res < 0 || (unsigned) res >= buflen)
3859                 return -1;
3860         return res;
3861 }
3862
3863
3864 static int p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant *wpa_s,
3865                                          char *cmd)
3866 {
3867         long long unsigned val;
3868         u64 req;
3869         if (sscanf(cmd, "%llx", &val) != 1)
3870                 return -1;
3871         req = val;
3872         return wpas_p2p_sd_cancel_request(wpa_s, req);
3873 }
3874
3875
3876 static int p2p_ctrl_serv_disc_resp(struct wpa_supplicant *wpa_s, char *cmd)
3877 {
3878         int freq;
3879         u8 dst[ETH_ALEN];
3880         u8 dialog_token;
3881         struct wpabuf *resp_tlvs;
3882         char *pos, *pos2;
3883         size_t len;
3884
3885         pos = os_strchr(cmd, ' ');
3886         if (pos == NULL)
3887                 return -1;
3888         *pos++ = '\0';
3889         freq = atoi(cmd);
3890         if (freq == 0)
3891                 return -1;
3892
3893         if (hwaddr_aton(pos, dst))
3894                 return -1;
3895         pos += 17;
3896         if (*pos != ' ')
3897                 return -1;
3898         pos++;
3899
3900         pos2 = os_strchr(pos, ' ');
3901         if (pos2 == NULL)
3902                 return -1;
3903         *pos2++ = '\0';
3904         dialog_token = atoi(pos);
3905
3906         len = os_strlen(pos2);
3907         if (len & 1)
3908                 return -1;
3909         len /= 2;
3910         resp_tlvs = wpabuf_alloc(len);
3911         if (resp_tlvs == NULL)
3912                 return -1;
3913         if (hexstr2bin(pos2, wpabuf_put(resp_tlvs, len), len) < 0) {
3914                 wpabuf_free(resp_tlvs);
3915                 return -1;
3916         }
3917
3918         wpas_p2p_sd_response(wpa_s, freq, dst, dialog_token, resp_tlvs);
3919         wpabuf_free(resp_tlvs);
3920         return 0;
3921 }
3922
3923
3924 static int p2p_ctrl_serv_disc_external(struct wpa_supplicant *wpa_s,
3925                                        char *cmd)
3926 {
3927         if (os_strcmp(cmd, "0") && os_strcmp(cmd, "1"))
3928                 return -1;
3929         wpa_s->p2p_sd_over_ctrl_iface = atoi(cmd);
3930         return 0;
3931 }
3932
3933
3934 static int p2p_ctrl_service_add_bonjour(struct wpa_supplicant *wpa_s,
3935                                         char *cmd)
3936 {
3937         char *pos;
3938         size_t len;
3939         struct wpabuf *query, *resp;
3940
3941         pos = os_strchr(cmd, ' ');
3942         if (pos == NULL)
3943                 return -1;
3944         *pos++ = '\0';
3945
3946         len = os_strlen(cmd);
3947         if (len & 1)
3948                 return -1;
3949         len /= 2;
3950         query = wpabuf_alloc(len);
3951         if (query == NULL)
3952                 return -1;
3953         if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
3954                 wpabuf_free(query);
3955                 return -1;
3956         }
3957
3958         len = os_strlen(pos);
3959         if (len & 1) {
3960                 wpabuf_free(query);
3961                 return -1;
3962         }
3963         len /= 2;
3964         resp = wpabuf_alloc(len);
3965         if (resp == NULL) {
3966                 wpabuf_free(query);
3967                 return -1;
3968         }
3969         if (hexstr2bin(pos, wpabuf_put(resp, len), len) < 0) {
3970                 wpabuf_free(query);
3971                 wpabuf_free(resp);
3972                 return -1;
3973         }
3974
3975         if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0) {
3976                 wpabuf_free(query);
3977                 wpabuf_free(resp);
3978                 return -1;
3979         }
3980         return 0;
3981 }
3982
3983
3984 static int p2p_ctrl_service_add_upnp(struct wpa_supplicant *wpa_s, char *cmd)
3985 {
3986         char *pos;
3987         u8 version;
3988
3989         pos = os_strchr(cmd, ' ');
3990         if (pos == NULL)
3991                 return -1;
3992         *pos++ = '\0';
3993
3994         if (hexstr2bin(cmd, &version, 1) < 0)
3995                 return -1;
3996
3997         return wpas_p2p_service_add_upnp(wpa_s, version, pos);
3998 }
3999
4000
4001 static int p2p_ctrl_service_add(struct wpa_supplicant *wpa_s, char *cmd)
4002 {
4003         char *pos;
4004
4005         pos = os_strchr(cmd, ' ');
4006         if (pos == NULL)
4007                 return -1;
4008         *pos++ = '\0';
4009
4010         if (os_strcmp(cmd, "bonjour") == 0)
4011                 return p2p_ctrl_service_add_bonjour(wpa_s, pos);
4012         if (os_strcmp(cmd, "upnp") == 0)
4013                 return p2p_ctrl_service_add_upnp(wpa_s, pos);
4014         wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
4015         return -1;
4016 }
4017
4018
4019 static int p2p_ctrl_service_del_bonjour(struct wpa_supplicant *wpa_s,
4020                                         char *cmd)
4021 {
4022         size_t len;
4023         struct wpabuf *query;
4024         int ret;
4025
4026         len = os_strlen(cmd);
4027         if (len & 1)
4028                 return -1;
4029         len /= 2;
4030         query = wpabuf_alloc(len);
4031         if (query == NULL)
4032                 return -1;
4033         if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
4034                 wpabuf_free(query);
4035                 return -1;
4036         }
4037
4038         ret = wpas_p2p_service_del_bonjour(wpa_s, query);
4039         wpabuf_free(query);
4040         return ret;
4041 }
4042
4043
4044 static int p2p_ctrl_service_del_upnp(struct wpa_supplicant *wpa_s, char *cmd)
4045 {
4046         char *pos;
4047         u8 version;
4048
4049         pos = os_strchr(cmd, ' ');
4050         if (pos == NULL)
4051                 return -1;
4052         *pos++ = '\0';
4053
4054         if (hexstr2bin(cmd, &version, 1) < 0)
4055                 return -1;
4056
4057         return wpas_p2p_service_del_upnp(wpa_s, version, pos);
4058 }
4059
4060
4061 static int p2p_ctrl_service_del(struct wpa_supplicant *wpa_s, char *cmd)
4062 {
4063         char *pos;
4064
4065         pos = os_strchr(cmd, ' ');
4066         if (pos == NULL)
4067                 return -1;
4068         *pos++ = '\0';
4069
4070         if (os_strcmp(cmd, "bonjour") == 0)
4071                 return p2p_ctrl_service_del_bonjour(wpa_s, pos);
4072         if (os_strcmp(cmd, "upnp") == 0)
4073                 return p2p_ctrl_service_del_upnp(wpa_s, pos);
4074         wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
4075         return -1;
4076 }
4077
4078
4079 static int p2p_ctrl_reject(struct wpa_supplicant *wpa_s, char *cmd)
4080 {
4081         u8 addr[ETH_ALEN];
4082
4083         /* <addr> */
4084
4085         if (hwaddr_aton(cmd, addr))
4086                 return -1;
4087
4088         return wpas_p2p_reject(wpa_s, addr);
4089 }
4090
4091
4092 static int p2p_ctrl_invite_persistent(struct wpa_supplicant *wpa_s, char *cmd)
4093 {
4094         char *pos;
4095         int id;
4096         struct wpa_ssid *ssid;
4097         u8 *_peer = NULL, peer[ETH_ALEN];
4098         int freq = 0, pref_freq = 0;
4099         int ht40;
4100
4101         id = atoi(cmd);
4102         pos = os_strstr(cmd, " peer=");
4103         if (pos) {
4104                 pos += 6;
4105                 if (hwaddr_aton(pos, peer))
4106                         return -1;
4107                 _peer = peer;
4108         }
4109         ssid = wpa_config_get_network(wpa_s->conf, id);
4110         if (ssid == NULL || ssid->disabled != 2) {
4111                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
4112                            "for persistent P2P group",
4113                            id);
4114                 return -1;
4115         }
4116
4117         pos = os_strstr(cmd, " freq=");
4118         if (pos) {
4119                 pos += 6;
4120                 freq = atoi(pos);
4121                 if (freq <= 0)
4122                         return -1;
4123         }
4124
4125         pos = os_strstr(cmd, " pref=");
4126         if (pos) {
4127                 pos += 6;
4128                 pref_freq = atoi(pos);
4129                 if (pref_freq <= 0)
4130                         return -1;
4131         }
4132
4133         ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40;
4134
4135         return wpas_p2p_invite(wpa_s, _peer, ssid, NULL, freq, ht40, pref_freq);
4136 }
4137
4138
4139 static int p2p_ctrl_invite_group(struct wpa_supplicant *wpa_s, char *cmd)
4140 {
4141         char *pos;
4142         u8 peer[ETH_ALEN], go_dev_addr[ETH_ALEN], *go_dev = NULL;
4143
4144         pos = os_strstr(cmd, " peer=");
4145         if (!pos)
4146                 return -1;
4147
4148         *pos = '\0';
4149         pos += 6;
4150         if (hwaddr_aton(pos, peer)) {
4151                 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'", pos);
4152                 return -1;
4153         }
4154
4155         pos = os_strstr(pos, " go_dev_addr=");
4156         if (pos) {
4157                 pos += 13;
4158                 if (hwaddr_aton(pos, go_dev_addr)) {
4159                         wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'",
4160                                    pos);
4161                         return -1;
4162                 }
4163                 go_dev = go_dev_addr;
4164         }
4165
4166         return wpas_p2p_invite_group(wpa_s, cmd, peer, go_dev);
4167 }
4168
4169
4170 static int p2p_ctrl_invite(struct wpa_supplicant *wpa_s, char *cmd)
4171 {
4172         if (os_strncmp(cmd, "persistent=", 11) == 0)
4173                 return p2p_ctrl_invite_persistent(wpa_s, cmd + 11);
4174         if (os_strncmp(cmd, "group=", 6) == 0)
4175                 return p2p_ctrl_invite_group(wpa_s, cmd + 6);
4176
4177         return -1;
4178 }
4179
4180
4181 static int p2p_ctrl_group_add_persistent(struct wpa_supplicant *wpa_s,
4182                                          char *cmd, int freq, int ht40)
4183 {
4184         int id;
4185         struct wpa_ssid *ssid;
4186
4187         id = atoi(cmd);
4188         ssid = wpa_config_get_network(wpa_s->conf, id);
4189         if (ssid == NULL || ssid->disabled != 2) {
4190                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
4191                            "for persistent P2P group",
4192                            id);
4193                 return -1;
4194         }
4195
4196         return wpas_p2p_group_add_persistent(wpa_s, ssid, 0, freq, ht40, NULL);
4197 }
4198
4199
4200 static int p2p_ctrl_group_add(struct wpa_supplicant *wpa_s, char *cmd)
4201 {
4202         int freq = 0, ht40;
4203         char *pos;
4204
4205         pos = os_strstr(cmd, "freq=");
4206         if (pos)
4207                 freq = atoi(pos + 5);
4208
4209         ht40 = (os_strstr(cmd, "ht40") != NULL) || wpa_s->conf->p2p_go_ht40;
4210
4211         if (os_strncmp(cmd, "persistent=", 11) == 0)
4212                 return p2p_ctrl_group_add_persistent(wpa_s, cmd + 11, freq,
4213                                                      ht40);
4214         if (os_strcmp(cmd, "persistent") == 0 ||
4215             os_strncmp(cmd, "persistent ", 11) == 0)
4216                 return wpas_p2p_group_add(wpa_s, 1, freq, ht40);
4217         if (os_strncmp(cmd, "freq=", 5) == 0)
4218                 return wpas_p2p_group_add(wpa_s, 0, freq, ht40);
4219         if (ht40)
4220                 return wpas_p2p_group_add(wpa_s, 0, freq, ht40);
4221
4222         wpa_printf(MSG_DEBUG, "CTRL: Invalid P2P_GROUP_ADD parameters '%s'",
4223                    cmd);
4224         return -1;
4225 }
4226
4227
4228 static int p2p_ctrl_peer(struct wpa_supplicant *wpa_s, char *cmd,
4229                          char *buf, size_t buflen)
4230 {
4231         u8 addr[ETH_ALEN], *addr_ptr;
4232         int next, res;
4233         const struct p2p_peer_info *info;
4234         char *pos, *end;
4235         char devtype[WPS_DEV_TYPE_BUFSIZE];
4236         struct wpa_ssid *ssid;
4237         size_t i;
4238
4239         if (!wpa_s->global->p2p)
4240                 return -1;
4241
4242         if (os_strcmp(cmd, "FIRST") == 0) {
4243                 addr_ptr = NULL;
4244                 next = 0;
4245         } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
4246                 if (hwaddr_aton(cmd + 5, addr) < 0)
4247                         return -1;
4248                 addr_ptr = addr;
4249                 next = 1;
4250         } else {
4251                 if (hwaddr_aton(cmd, addr) < 0)
4252                         return -1;
4253                 addr_ptr = addr;
4254                 next = 0;
4255         }
4256
4257         info = p2p_get_peer_info(wpa_s->global->p2p, addr_ptr, next);
4258         if (info == NULL)
4259                 return -1;
4260
4261         pos = buf;
4262         end = buf + buflen;
4263
4264         res = os_snprintf(pos, end - pos, MACSTR "\n"
4265                           "pri_dev_type=%s\n"
4266                           "device_name=%s\n"
4267                           "manufacturer=%s\n"
4268                           "model_name=%s\n"
4269                           "model_number=%s\n"
4270                           "serial_number=%s\n"
4271                           "config_methods=0x%x\n"
4272                           "dev_capab=0x%x\n"
4273                           "group_capab=0x%x\n"
4274                           "level=%d\n",
4275                           MAC2STR(info->p2p_device_addr),
4276                           wps_dev_type_bin2str(info->pri_dev_type,
4277                                                devtype, sizeof(devtype)),
4278                           info->device_name,
4279                           info->manufacturer,
4280                           info->model_name,
4281                           info->model_number,
4282                           info->serial_number,
4283                           info->config_methods,
4284                           info->dev_capab,
4285                           info->group_capab,
4286                           info->level);
4287         if (res < 0 || res >= end - pos)
4288                 return pos - buf;
4289         pos += res;
4290
4291         for (i = 0; i < info->wps_sec_dev_type_list_len / WPS_DEV_TYPE_LEN; i++)
4292         {
4293                 const u8 *t;
4294                 t = &info->wps_sec_dev_type_list[i * WPS_DEV_TYPE_LEN];
4295                 res = os_snprintf(pos, end - pos, "sec_dev_type=%s\n",
4296                                   wps_dev_type_bin2str(t, devtype,
4297                                                        sizeof(devtype)));
4298                 if (res < 0 || res >= end - pos)
4299                         return pos - buf;
4300                 pos += res;
4301         }
4302
4303         ssid = wpas_p2p_get_persistent(wpa_s, info->p2p_device_addr, NULL, 0);
4304         if (ssid) {
4305                 res = os_snprintf(pos, end - pos, "persistent=%d\n", ssid->id);
4306                 if (res < 0 || res >= end - pos)
4307                         return pos - buf;
4308                 pos += res;
4309         }
4310
4311         res = p2p_get_peer_info_txt(info, pos, end - pos);
4312         if (res < 0)
4313                 return pos - buf;
4314         pos += res;
4315
4316         return pos - buf;
4317 }
4318
4319
4320 static int p2p_ctrl_disallow_freq(struct wpa_supplicant *wpa_s,
4321                                   const char *param)
4322 {
4323         struct wpa_freq_range *freq = NULL, *n;
4324         unsigned int count = 0, i;
4325         const char *pos, *pos2, *pos3;
4326
4327         if (wpa_s->global->p2p == NULL)
4328                 return -1;
4329
4330         /*
4331          * param includes comma separated frequency range.
4332          * For example: 2412-2432,2462,5000-6000
4333          */
4334         pos = param;
4335         while (pos && pos[0]) {
4336                 n = os_realloc_array(freq, count + 1,
4337                                      sizeof(struct wpa_freq_range));
4338                 if (n == NULL) {
4339                         os_free(freq);
4340                         return -1;
4341                 }
4342                 freq = n;
4343                 freq[count].min = atoi(pos);
4344                 pos2 = os_strchr(pos, '-');
4345                 pos3 = os_strchr(pos, ',');
4346                 if (pos2 && (!pos3 || pos2 < pos3)) {
4347                         pos2++;
4348                         freq[count].max = atoi(pos2);
4349                 } else
4350                         freq[count].max = freq[count].min;
4351                 pos = pos3;
4352                 if (pos)
4353                         pos++;
4354                 count++;
4355         }
4356
4357         for (i = 0; i < count; i++) {
4358                 wpa_printf(MSG_DEBUG, "P2P: Disallowed frequency range %u-%u",
4359                            freq[i].min, freq[i].max);
4360         }
4361
4362         os_free(wpa_s->global->p2p_disallow_freq);
4363         wpa_s->global->p2p_disallow_freq = freq;
4364         wpa_s->global->num_p2p_disallow_freq = count;
4365         wpas_p2p_update_channel_list(wpa_s);
4366         return 0;
4367 }
4368
4369
4370 static int p2p_ctrl_set(struct wpa_supplicant *wpa_s, char *cmd)
4371 {
4372         char *param;
4373
4374         if (wpa_s->global->p2p == NULL)
4375                 return -1;
4376
4377         param = os_strchr(cmd, ' ');
4378         if (param == NULL)
4379                 return -1;
4380         *param++ = '\0';
4381
4382         if (os_strcmp(cmd, "discoverability") == 0) {
4383                 p2p_set_client_discoverability(wpa_s->global->p2p,
4384                                                atoi(param));
4385                 return 0;
4386         }
4387
4388         if (os_strcmp(cmd, "managed") == 0) {
4389                 p2p_set_managed_oper(wpa_s->global->p2p, atoi(param));
4390                 return 0;
4391         }
4392
4393         if (os_strcmp(cmd, "listen_channel") == 0) {
4394                 return p2p_set_listen_channel(wpa_s->global->p2p, 81,
4395                                               atoi(param));
4396         }
4397
4398         if (os_strcmp(cmd, "ssid_postfix") == 0) {
4399                 return p2p_set_ssid_postfix(wpa_s->global->p2p, (u8 *) param,
4400                                             os_strlen(param));
4401         }
4402
4403         if (os_strcmp(cmd, "noa") == 0) {
4404                 char *pos;
4405                 int count, start, duration;
4406                 /* GO NoA parameters: count,start_offset(ms),duration(ms) */
4407                 count = atoi(param);
4408                 pos = os_strchr(param, ',');
4409                 if (pos == NULL)
4410                         return -1;
4411                 pos++;
4412                 start = atoi(pos);
4413                 pos = os_strchr(pos, ',');
4414                 if (pos == NULL)
4415                         return -1;
4416                 pos++;
4417                 duration = atoi(pos);
4418                 if (count < 0 || count > 255 || start < 0 || duration < 0)
4419                         return -1;
4420                 if (count == 0 && duration > 0)
4421                         return -1;
4422                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: P2P_SET GO NoA: count=%d "
4423                            "start=%d duration=%d", count, start, duration);
4424                 return wpas_p2p_set_noa(wpa_s, count, start, duration);
4425         }
4426
4427         if (os_strcmp(cmd, "ps") == 0)
4428                 return wpa_drv_set_p2p_powersave(wpa_s, atoi(param), -1, -1);
4429
4430         if (os_strcmp(cmd, "oppps") == 0)
4431                 return wpa_drv_set_p2p_powersave(wpa_s, -1, atoi(param), -1);
4432
4433         if (os_strcmp(cmd, "ctwindow") == 0)
4434                 return wpa_drv_set_p2p_powersave(wpa_s, -1, -1, atoi(param));
4435
4436         if (os_strcmp(cmd, "disabled") == 0) {
4437                 wpa_s->global->p2p_disabled = atoi(param);
4438                 wpa_printf(MSG_DEBUG, "P2P functionality %s",
4439                            wpa_s->global->p2p_disabled ?
4440                            "disabled" : "enabled");
4441                 if (wpa_s->global->p2p_disabled) {
4442                         wpas_p2p_stop_find(wpa_s);
4443                         os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
4444                         p2p_flush(wpa_s->global->p2p);
4445                 }
4446                 return 0;
4447         }
4448
4449         if (os_strcmp(cmd, "conc_pref") == 0) {
4450                 if (os_strcmp(param, "sta") == 0)
4451                         wpa_s->global->conc_pref = WPA_CONC_PREF_STA;
4452                 else if (os_strcmp(param, "p2p") == 0)
4453                         wpa_s->global->conc_pref = WPA_CONC_PREF_P2P;
4454                 else {
4455                         wpa_printf(MSG_INFO, "Invalid conc_pref value");
4456                         return -1;
4457                 }
4458                 wpa_printf(MSG_DEBUG, "Single channel concurrency preference: "
4459                            "%s", param);
4460                 return 0;
4461         }
4462
4463         if (os_strcmp(cmd, "force_long_sd") == 0) {
4464                 wpa_s->force_long_sd = atoi(param);
4465                 return 0;
4466         }
4467
4468         if (os_strcmp(cmd, "peer_filter") == 0) {
4469                 u8 addr[ETH_ALEN];
4470                 if (hwaddr_aton(param, addr))
4471                         return -1;
4472                 p2p_set_peer_filter(wpa_s->global->p2p, addr);
4473                 return 0;
4474         }
4475
4476         if (os_strcmp(cmd, "cross_connect") == 0)
4477                 return wpas_p2p_set_cross_connect(wpa_s, atoi(param));
4478
4479         if (os_strcmp(cmd, "go_apsd") == 0) {
4480                 if (os_strcmp(param, "disable") == 0)
4481                         wpa_s->set_ap_uapsd = 0;
4482                 else {
4483                         wpa_s->set_ap_uapsd = 1;
4484                         wpa_s->ap_uapsd = atoi(param);
4485                 }
4486                 return 0;
4487         }
4488
4489         if (os_strcmp(cmd, "client_apsd") == 0) {
4490                 if (os_strcmp(param, "disable") == 0)
4491                         wpa_s->set_sta_uapsd = 0;
4492                 else {
4493                         int be, bk, vi, vo;
4494                         char *pos;
4495                         /* format: BE,BK,VI,VO;max SP Length */
4496                         be = atoi(param);
4497                         pos = os_strchr(param, ',');
4498                         if (pos == NULL)
4499                                 return -1;
4500                         pos++;
4501                         bk = atoi(pos);
4502                         pos = os_strchr(pos, ',');
4503                         if (pos == NULL)
4504                                 return -1;
4505                         pos++;
4506                         vi = atoi(pos);
4507                         pos = os_strchr(pos, ',');
4508                         if (pos == NULL)
4509                                 return -1;
4510                         pos++;
4511                         vo = atoi(pos);
4512                         /* ignore max SP Length for now */
4513
4514                         wpa_s->set_sta_uapsd = 1;
4515                         wpa_s->sta_uapsd = 0;
4516                         if (be)
4517                                 wpa_s->sta_uapsd |= BIT(0);
4518                         if (bk)
4519                                 wpa_s->sta_uapsd |= BIT(1);
4520                         if (vi)
4521                                 wpa_s->sta_uapsd |= BIT(2);
4522                         if (vo)
4523                                 wpa_s->sta_uapsd |= BIT(3);
4524                 }
4525                 return 0;
4526         }
4527
4528         if (os_strcmp(cmd, "disallow_freq") == 0)
4529                 return p2p_ctrl_disallow_freq(wpa_s, param);
4530
4531         if (os_strcmp(cmd, "disc_int") == 0) {
4532                 int min_disc_int, max_disc_int, max_disc_tu;
4533                 char *pos;
4534
4535                 pos = param;
4536
4537                 min_disc_int = atoi(pos);
4538                 pos = os_strchr(pos, ' ');
4539                 if (pos == NULL)
4540                         return -1;
4541                 *pos++ = '\0';
4542
4543                 max_disc_int = atoi(pos);
4544                 pos = os_strchr(pos, ' ');
4545                 if (pos == NULL)
4546                         return -1;
4547                 *pos++ = '\0';
4548
4549                 max_disc_tu = atoi(pos);
4550
4551                 return p2p_set_disc_int(wpa_s->global->p2p, min_disc_int,
4552                                         max_disc_int, max_disc_tu);
4553         }
4554
4555         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown P2P_SET field value '%s'",
4556                    cmd);
4557
4558         return -1;
4559 }
4560
4561
4562 static void p2p_ctrl_flush(struct wpa_supplicant *wpa_s)
4563 {
4564         os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
4565         wpa_s->force_long_sd = 0;
4566         if (wpa_s->global->p2p)
4567                 p2p_flush(wpa_s->global->p2p);
4568 }
4569
4570
4571 static int p2p_ctrl_presence_req(struct wpa_supplicant *wpa_s, char *cmd)
4572 {
4573         char *pos, *pos2;
4574         unsigned int dur1 = 0, int1 = 0, dur2 = 0, int2 = 0;
4575
4576         if (cmd[0]) {
4577                 pos = os_strchr(cmd, ' ');
4578                 if (pos == NULL)
4579                         return -1;
4580                 *pos++ = '\0';
4581                 dur1 = atoi(cmd);
4582
4583                 pos2 = os_strchr(pos, ' ');
4584                 if (pos2)
4585                         *pos2++ = '\0';
4586                 int1 = atoi(pos);
4587         } else
4588                 pos2 = NULL;
4589
4590         if (pos2) {
4591                 pos = os_strchr(pos2, ' ');
4592                 if (pos == NULL)
4593                         return -1;
4594                 *pos++ = '\0';
4595                 dur2 = atoi(pos2);
4596                 int2 = atoi(pos);
4597         }
4598
4599         return wpas_p2p_presence_req(wpa_s, dur1, int1, dur2, int2);
4600 }
4601
4602
4603 static int p2p_ctrl_ext_listen(struct wpa_supplicant *wpa_s, char *cmd)
4604 {
4605         char *pos;
4606         unsigned int period = 0, interval = 0;
4607
4608         if (cmd[0]) {
4609                 pos = os_strchr(cmd, ' ');
4610                 if (pos == NULL)
4611                         return -1;
4612                 *pos++ = '\0';
4613                 period = atoi(cmd);
4614                 interval = atoi(pos);
4615         }
4616
4617         return wpas_p2p_ext_listen(wpa_s, period, interval);
4618 }
4619
4620 #endif /* CONFIG_P2P */
4621
4622
4623 #ifdef CONFIG_INTERWORKING
4624 static int ctrl_interworking_connect(struct wpa_supplicant *wpa_s, char *dst)
4625 {
4626         u8 bssid[ETH_ALEN];
4627         struct wpa_bss *bss;
4628
4629         if (hwaddr_aton(dst, bssid)) {
4630                 wpa_printf(MSG_DEBUG, "Invalid BSSID '%s'", dst);
4631                 return -1;
4632         }
4633
4634         bss = wpa_bss_get_bssid(wpa_s, bssid);
4635         if (bss == NULL) {
4636                 wpa_printf(MSG_DEBUG, "Could not find BSS " MACSTR,
4637                            MAC2STR(bssid));
4638                 return -1;
4639         }
4640
4641         return interworking_connect(wpa_s, bss);
4642 }
4643
4644
4645 static int get_anqp(struct wpa_supplicant *wpa_s, char *dst)
4646 {
4647         u8 dst_addr[ETH_ALEN];
4648         int used;
4649         char *pos;
4650 #define MAX_ANQP_INFO_ID 100
4651         u16 id[MAX_ANQP_INFO_ID];
4652         size_t num_id = 0;
4653
4654         used = hwaddr_aton2(dst, dst_addr);
4655         if (used < 0)
4656                 return -1;
4657         pos = dst + used;
4658         while (num_id < MAX_ANQP_INFO_ID) {
4659                 id[num_id] = atoi(pos);
4660                 if (id[num_id])
4661                         num_id++;
4662                 pos = os_strchr(pos + 1, ',');
4663                 if (pos == NULL)
4664                         break;
4665                 pos++;
4666         }
4667
4668         if (num_id == 0)
4669                 return -1;
4670
4671         return anqp_send_req(wpa_s, dst_addr, id, num_id);
4672 }
4673
4674
4675 static int gas_request(struct wpa_supplicant *wpa_s, char *cmd)
4676 {
4677         u8 dst_addr[ETH_ALEN];
4678         struct wpabuf *advproto, *query = NULL;
4679         int used, ret = -1;
4680         char *pos, *end;
4681         size_t len;
4682
4683         used = hwaddr_aton2(cmd, dst_addr);
4684         if (used < 0)
4685                 return -1;
4686
4687         pos = cmd + used;
4688         while (*pos == ' ')
4689                 pos++;
4690
4691         /* Advertisement Protocol ID */
4692         end = os_strchr(pos, ' ');
4693         if (end)
4694                 len = end - pos;
4695         else
4696                 len = os_strlen(pos);
4697         if (len & 0x01)
4698                 return -1;
4699         len /= 2;
4700         if (len == 0)
4701                 return -1;
4702         advproto = wpabuf_alloc(len);
4703         if (advproto == NULL)
4704                 return -1;
4705         if (hexstr2bin(pos, wpabuf_put(advproto, len), len) < 0)
4706                 goto fail;
4707
4708         if (end) {
4709                 /* Optional Query Request */
4710                 pos = end + 1;
4711                 while (*pos == ' ')
4712                         pos++;
4713
4714                 len = os_strlen(pos);
4715                 if (len) {
4716                         if (len & 0x01)
4717                                 goto fail;
4718                         len /= 2;
4719                         if (len == 0)
4720                                 goto fail;
4721                         query = wpabuf_alloc(len);
4722                         if (query == NULL)
4723                                 goto fail;
4724                         if (hexstr2bin(pos, wpabuf_put(query, len), len) < 0)
4725                                 goto fail;
4726                 }
4727         }
4728
4729         ret = gas_send_request(wpa_s, dst_addr, advproto, query);
4730
4731 fail:
4732         wpabuf_free(advproto);
4733         wpabuf_free(query);
4734
4735         return ret;
4736 }
4737
4738
4739 static int gas_response_get(struct wpa_supplicant *wpa_s, char *cmd, char *buf,
4740                             size_t buflen)
4741 {
4742         u8 addr[ETH_ALEN];
4743         int dialog_token;
4744         int used;
4745         char *pos;
4746         size_t resp_len, start, requested_len;
4747
4748         if (!wpa_s->last_gas_resp)
4749                 return -1;
4750
4751         used = hwaddr_aton2(cmd, addr);
4752         if (used < 0)
4753                 return -1;
4754
4755         pos = cmd + used;
4756         while (*pos == ' ')
4757                 pos++;
4758         dialog_token = atoi(pos);
4759
4760         if (os_memcmp(addr, wpa_s->last_gas_addr, ETH_ALEN) != 0 ||
4761             dialog_token != wpa_s->last_gas_dialog_token)
4762                 return -1;
4763
4764         resp_len = wpabuf_len(wpa_s->last_gas_resp);
4765         start = 0;
4766         requested_len = resp_len;
4767
4768         pos = os_strchr(pos, ' ');
4769         if (pos) {
4770                 start = atoi(pos);
4771                 if (start > resp_len)
4772                         return os_snprintf(buf, buflen, "FAIL-Invalid range");
4773                 pos = os_strchr(pos, ',');
4774                 if (pos == NULL)
4775                         return -1;
4776                 pos++;
4777                 requested_len = atoi(pos);
4778                 if (start + requested_len > resp_len)
4779                         return os_snprintf(buf, buflen, "FAIL-Invalid range");
4780         }
4781
4782         if (requested_len * 2 + 1 > buflen)
4783                 return os_snprintf(buf, buflen, "FAIL-Too long response");
4784
4785         return wpa_snprintf_hex(buf, buflen,
4786                                 wpabuf_head_u8(wpa_s->last_gas_resp) + start,
4787                                 requested_len);
4788 }
4789 #endif /* CONFIG_INTERWORKING */
4790
4791
4792 #ifdef CONFIG_HS20
4793
4794 static int get_hs20_anqp(struct wpa_supplicant *wpa_s, char *dst)
4795 {
4796         u8 dst_addr[ETH_ALEN];
4797         int used;
4798         char *pos;
4799         u32 subtypes = 0;
4800
4801         used = hwaddr_aton2(dst, dst_addr);
4802         if (used < 0)
4803                 return -1;
4804         pos = dst + used;
4805         for (;;) {
4806                 int num = atoi(pos);
4807                 if (num <= 0 || num > 31)
4808                         return -1;
4809                 subtypes |= BIT(num);
4810                 pos = os_strchr(pos + 1, ',');
4811                 if (pos == NULL)
4812                         break;
4813                 pos++;
4814         }
4815
4816         if (subtypes == 0)
4817                 return -1;
4818
4819         return hs20_anqp_send_req(wpa_s, dst_addr, subtypes, NULL, 0);
4820 }
4821
4822
4823 static int hs20_nai_home_realm_list(struct wpa_supplicant *wpa_s,
4824                                     const u8 *addr, const char *realm)
4825 {
4826         u8 *buf;
4827         size_t rlen, len;
4828         int ret;
4829
4830         rlen = os_strlen(realm);
4831         len = 3 + rlen;
4832         buf = os_malloc(len);
4833         if (buf == NULL)
4834                 return -1;
4835         buf[0] = 1; /* NAI Home Realm Count */
4836         buf[1] = 0; /* Formatted in accordance with RFC 4282 */
4837         buf[2] = rlen;
4838         os_memcpy(buf + 3, realm, rlen);
4839
4840         ret = hs20_anqp_send_req(wpa_s, addr,
4841                                  BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
4842                                  buf, len);
4843
4844         os_free(buf);
4845
4846         return ret;
4847 }
4848
4849
4850 static int hs20_get_nai_home_realm_list(struct wpa_supplicant *wpa_s,
4851                                         char *dst)
4852 {
4853         struct wpa_cred *cred = wpa_s->conf->cred;
4854         u8 dst_addr[ETH_ALEN];
4855         int used;
4856         u8 *buf;
4857         size_t len;
4858         int ret;
4859
4860         used = hwaddr_aton2(dst, dst_addr);
4861         if (used < 0)
4862                 return -1;
4863
4864         while (dst[used] == ' ')
4865                 used++;
4866         if (os_strncmp(dst + used, "realm=", 6) == 0)
4867                 return hs20_nai_home_realm_list(wpa_s, dst_addr,
4868                                                 dst + used + 6);
4869
4870         len = os_strlen(dst + used);
4871
4872         if (len == 0 && cred && cred->realm)
4873                 return hs20_nai_home_realm_list(wpa_s, dst_addr, cred->realm);
4874
4875         if (len % 1)
4876                 return -1;
4877         len /= 2;
4878         buf = os_malloc(len);
4879         if (buf == NULL)
4880                 return -1;
4881         if (hexstr2bin(dst + used, buf, len) < 0) {
4882                 os_free(buf);
4883                 return -1;
4884         }
4885
4886         ret = hs20_anqp_send_req(wpa_s, dst_addr,
4887                                  BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
4888                                  buf, len);
4889         os_free(buf);
4890
4891         return ret;
4892 }
4893
4894 #endif /* CONFIG_HS20 */
4895
4896
4897 static int wpa_supplicant_ctrl_iface_sta_autoconnect(
4898         struct wpa_supplicant *wpa_s, char *cmd)
4899 {
4900         wpa_s->auto_reconnect_disabled = atoi(cmd) == 0 ? 1 : 0;
4901         return 0;
4902 }
4903
4904
4905 #ifdef CONFIG_AUTOSCAN
4906
4907 static int wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant *wpa_s,
4908                                               char *cmd)
4909 {
4910         enum wpa_states state = wpa_s->wpa_state;
4911         char *new_params = NULL;
4912
4913         if (os_strlen(cmd) > 0) {
4914                 new_params = os_strdup(cmd);
4915                 if (new_params == NULL)
4916                         return -1;
4917         }
4918
4919         os_free(wpa_s->conf->autoscan);
4920         wpa_s->conf->autoscan = new_params;
4921
4922         if (wpa_s->conf->autoscan == NULL)
4923                 autoscan_deinit(wpa_s);
4924         else if (state == WPA_DISCONNECTED || state == WPA_INACTIVE)
4925                 autoscan_init(wpa_s, 1);
4926         else if (state == WPA_SCANNING)
4927                 wpa_supplicant_reinit_autoscan(wpa_s);
4928
4929         return 0;
4930 }
4931
4932 #endif /* CONFIG_AUTOSCAN */
4933
4934
4935 #ifdef CONFIG_WNM
4936
4937 static int wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant *wpa_s, char *cmd)
4938 {
4939         int enter;
4940         int intval = 0;
4941         char *pos;
4942         int ret;
4943         struct wpabuf *tfs_req = NULL;
4944
4945         if (os_strncmp(cmd, "enter", 5) == 0)
4946                 enter = 1;
4947         else if (os_strncmp(cmd, "exit", 4) == 0)
4948                 enter = 0;
4949         else
4950                 return -1;
4951
4952         pos = os_strstr(cmd, " interval=");
4953         if (pos)
4954                 intval = atoi(pos + 10);
4955
4956         pos = os_strstr(cmd, " tfs_req=");
4957         if (pos) {
4958                 char *end;
4959                 size_t len;
4960                 pos += 9;
4961                 end = os_strchr(pos, ' ');
4962                 if (end)
4963                         len = end - pos;
4964                 else
4965                         len = os_strlen(pos);
4966                 if (len & 1)
4967                         return -1;
4968                 len /= 2;
4969                 tfs_req = wpabuf_alloc(len);
4970                 if (tfs_req == NULL)
4971                         return -1;
4972                 if (hexstr2bin(pos, wpabuf_put(tfs_req, len), len) < 0) {
4973                         wpabuf_free(tfs_req);
4974                         return -1;
4975                 }
4976         }
4977
4978         ret = ieee802_11_send_wnmsleep_req(wpa_s, enter ? WNM_SLEEP_MODE_ENTER :
4979                                            WNM_SLEEP_MODE_EXIT, intval,
4980                                            tfs_req);
4981         wpabuf_free(tfs_req);
4982
4983         return ret;
4984 }
4985
4986
4987 static int wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant *wpa_s, char *cmd)
4988 {
4989         int query_reason;
4990
4991         query_reason = atoi(cmd);
4992
4993         wpa_printf(MSG_DEBUG, "CTRL_IFACE: WNM_BSS_QUERY query_reason=%d",
4994                    query_reason);
4995
4996         return wnm_send_bss_transition_mgmt_query(wpa_s, query_reason);
4997 }
4998
4999 #endif /* CONFIG_WNM */
5000
5001
5002 /* Get string representation of channel width */
5003 static const char * channel_width_name(enum chan_width width)
5004 {
5005         switch (width) {
5006         case CHAN_WIDTH_20_NOHT:
5007                 return "20 MHz (no HT)";
5008         case CHAN_WIDTH_20:
5009                 return "20 MHz";
5010         case CHAN_WIDTH_40:
5011                 return "40 MHz";
5012         case CHAN_WIDTH_80:
5013                 return "80 MHz";
5014         case CHAN_WIDTH_80P80:
5015                 return "80+80 MHz";
5016         case CHAN_WIDTH_160:
5017                 return "160 MHz";
5018         default:
5019                 return "unknown";
5020         }
5021 }
5022
5023
5024 static int wpa_supplicant_signal_poll(struct wpa_supplicant *wpa_s, char *buf,
5025                                       size_t buflen)
5026 {
5027         struct wpa_signal_info si;
5028         int ret;
5029         char *pos, *end;
5030
5031         ret = wpa_drv_signal_poll(wpa_s, &si);
5032         if (ret)
5033                 return -1;
5034
5035         pos = buf;
5036         end = buf + buflen;
5037
5038         ret = os_snprintf(pos, end - pos, "RSSI=%d\nLINKSPEED=%d\n"
5039                           "NOISE=%d\nFREQUENCY=%u\n",
5040                           si.current_signal, si.current_txrate / 1000,
5041                           si.current_noise, si.frequency);
5042         if (ret < 0 || ret > end - pos)
5043                 return -1;
5044         pos += ret;
5045
5046         if (si.chanwidth != CHAN_WIDTH_UNKNOWN) {
5047                 ret = os_snprintf(pos, end - pos, "WIDTH=%s\n",
5048                                   channel_width_name(si.chanwidth));
5049                 if (ret < 0 || ret > end - pos)
5050                         return -1;
5051                 pos += ret;
5052         }
5053
5054         if (si.center_frq1 > 0 && si.center_frq2 > 0) {
5055                 ret = os_snprintf(pos, end - pos,
5056                                   "CENTER_FRQ1=%d\nCENTER_FRQ2=%d\n",
5057                                   si.center_frq1, si.center_frq2);
5058                 if (ret < 0 || ret > end - pos)
5059                         return -1;
5060                 pos += ret;
5061         }
5062
5063         if (si.avg_signal) {
5064                 ret = os_snprintf(pos, end - pos,
5065                                   "AVG_RSSI=%d\n", si.avg_signal);
5066                 if (ret < 0 || ret >= end - pos)
5067                         return -1;
5068                 pos += ret;
5069         }
5070
5071         return pos - buf;
5072 }
5073
5074
5075 static int wpa_supplicant_pktcnt_poll(struct wpa_supplicant *wpa_s, char *buf,
5076                                       size_t buflen)
5077 {
5078         struct hostap_sta_driver_data sta;
5079         int ret;
5080
5081         ret = wpa_drv_pktcnt_poll(wpa_s, &sta);
5082         if (ret)
5083                 return -1;
5084
5085         ret = os_snprintf(buf, buflen, "TXGOOD=%lu\nTXBAD=%lu\nRXGOOD=%lu\n",
5086                           sta.tx_packets, sta.tx_retry_failed, sta.rx_packets);
5087         if (ret < 0 || (size_t) ret > buflen)
5088                 return -1;
5089         return ret;
5090 }
5091
5092
5093 static void wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant *wpa_s)
5094 {
5095         wpa_dbg(wpa_s, MSG_DEBUG, "Flush all wpa_supplicant state");
5096
5097 #ifdef CONFIG_P2P
5098         wpas_p2p_stop_find(wpa_s);
5099         p2p_ctrl_flush(wpa_s);
5100         wpas_p2p_group_remove(wpa_s, "*");
5101 #endif /* CONFIG_P2P */
5102
5103 #ifdef CONFIG_WPS_TESTING
5104         wps_version_number = 0x20;
5105         wps_testing_dummy_cred = 0;
5106 #endif /* CONFIG_WPS_TESTING */
5107 #ifdef CONFIG_WPS
5108         wpas_wps_cancel(wpa_s);
5109 #endif /* CONFIG_WPS */
5110
5111 #ifdef CONFIG_TDLS_TESTING
5112         extern unsigned int tdls_testing;
5113         tdls_testing = 0;
5114 #endif /* CONFIG_TDLS_TESTING */
5115 #ifdef CONFIG_TDLS
5116         wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL);
5117         wpa_tdls_enable(wpa_s->wpa, 1);
5118 #endif /* CONFIG_TDLS */
5119
5120         eloop_cancel_timeout(wpa_supplicant_stop_countermeasures, wpa_s, NULL);
5121         wpa_supplicant_stop_countermeasures(wpa_s, NULL);
5122
5123         wpa_s->no_keep_alive = 0;
5124
5125         os_free(wpa_s->disallow_aps_bssid);
5126         wpa_s->disallow_aps_bssid = NULL;
5127         wpa_s->disallow_aps_bssid_count = 0;
5128         os_free(wpa_s->disallow_aps_ssid);
5129         wpa_s->disallow_aps_ssid = NULL;
5130         wpa_s->disallow_aps_ssid_count = 0;
5131
5132         wpa_s->set_sta_uapsd = 0;
5133         wpa_s->sta_uapsd = 0;
5134
5135         wpa_drv_radio_disable(wpa_s, 0);
5136
5137         wpa_bss_flush(wpa_s);
5138         wpa_blacklist_clear(wpa_s);
5139         wpa_s->extra_blacklist_count = 0;
5140         wpa_supplicant_ctrl_iface_remove_network(wpa_s, "all");
5141         wpa_supplicant_ctrl_iface_remove_cred(wpa_s, "all");
5142 }
5143
5144
5145 char * wpa_supplicant_ctrl_iface_process(struct wpa_supplicant *wpa_s,
5146                                          char *buf, size_t *resp_len)
5147 {
5148         char *reply;
5149         const int reply_size = 4096;
5150         int ctrl_rsp = 0;
5151         int reply_len;
5152
5153         if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0 ||
5154             os_strncmp(buf, "SET_NETWORK ", 12) == 0 ||
5155             os_strncmp(buf, "WPS_NFC_TAG_READ", 16) == 0 ||
5156             os_strncmp(buf, "NFC_REPORT_HANDOVER", 19) == 0 ||
5157             os_strncmp(buf, "NFC_RX_HANDOVER_SEL", 19) == 0) {
5158                 wpa_hexdump_ascii_key(MSG_DEBUG, "RX ctrl_iface",
5159                                       (const u8 *) buf, os_strlen(buf));
5160         } else {
5161                 int level = MSG_DEBUG;
5162                 if (os_strcmp(buf, "PING") == 0)
5163                         level = MSG_EXCESSIVE;
5164                 wpa_hexdump_ascii(level, "RX ctrl_iface",
5165                                   (const u8 *) buf, os_strlen(buf));
5166                 wpa_dbg(wpa_s, level, "Control interface command '%s'", buf);
5167         }
5168
5169         reply = os_malloc(reply_size);
5170         if (reply == NULL) {
5171                 *resp_len = 1;
5172                 return NULL;
5173         }
5174
5175         os_memcpy(reply, "OK\n", 3);
5176         reply_len = 3;
5177
5178         if (os_strcmp(buf, "PING") == 0) {
5179                 os_memcpy(reply, "PONG\n", 5);
5180                 reply_len = 5;
5181         } else if (os_strcmp(buf, "IFNAME") == 0) {
5182                 reply_len = os_strlen(wpa_s->ifname);
5183                 os_memcpy(reply, wpa_s->ifname, reply_len);
5184         } else if (os_strncmp(buf, "RELOG", 5) == 0) {
5185                 if (wpa_debug_reopen_file() < 0)
5186                         reply_len = -1;
5187         } else if (os_strncmp(buf, "NOTE ", 5) == 0) {
5188                 wpa_printf(MSG_INFO, "NOTE: %s", buf + 5);
5189         } else if (os_strcmp(buf, "MIB") == 0) {
5190                 reply_len = wpa_sm_get_mib(wpa_s->wpa, reply, reply_size);
5191                 if (reply_len >= 0) {
5192                         int res;
5193                         res = eapol_sm_get_mib(wpa_s->eapol, reply + reply_len,
5194                                                reply_size - reply_len);
5195                         if (res < 0)
5196                                 reply_len = -1;
5197                         else
5198                                 reply_len += res;
5199                 }
5200         } else if (os_strncmp(buf, "STATUS", 6) == 0) {
5201                 reply_len = wpa_supplicant_ctrl_iface_status(
5202                         wpa_s, buf + 6, reply, reply_size);
5203         } else if (os_strcmp(buf, "PMKSA") == 0) {
5204                 reply_len = wpa_sm_pmksa_cache_list(wpa_s->wpa, reply,
5205                                                     reply_size);
5206         } else if (os_strncmp(buf, "SET ", 4) == 0) {
5207                 if (wpa_supplicant_ctrl_iface_set(wpa_s, buf + 4))
5208                         reply_len = -1;
5209         } else if (os_strncmp(buf, "GET ", 4) == 0) {
5210                 reply_len = wpa_supplicant_ctrl_iface_get(wpa_s, buf + 4,
5211                                                           reply, reply_size);
5212         } else if (os_strcmp(buf, "LOGON") == 0) {
5213                 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
5214         } else if (os_strcmp(buf, "LOGOFF") == 0) {
5215                 eapol_sm_notify_logoff(wpa_s->eapol, TRUE);
5216         } else if (os_strcmp(buf, "REASSOCIATE") == 0) {
5217                 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
5218                         reply_len = -1;
5219                 else
5220                         wpas_request_connection(wpa_s);
5221         } else if (os_strcmp(buf, "RECONNECT") == 0) {
5222                 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
5223                         reply_len = -1;
5224                 else if (wpa_s->disconnected)
5225                         wpas_request_connection(wpa_s);
5226 #ifdef IEEE8021X_EAPOL
5227         } else if (os_strncmp(buf, "PREAUTH ", 8) == 0) {
5228                 if (wpa_supplicant_ctrl_iface_preauth(wpa_s, buf + 8))
5229                         reply_len = -1;
5230 #endif /* IEEE8021X_EAPOL */
5231 #ifdef CONFIG_PEERKEY
5232         } else if (os_strncmp(buf, "STKSTART ", 9) == 0) {
5233                 if (wpa_supplicant_ctrl_iface_stkstart(wpa_s, buf + 9))
5234                         reply_len = -1;
5235 #endif /* CONFIG_PEERKEY */
5236 #ifdef CONFIG_IEEE80211R
5237         } else if (os_strncmp(buf, "FT_DS ", 6) == 0) {
5238                 if (wpa_supplicant_ctrl_iface_ft_ds(wpa_s, buf + 6))
5239                         reply_len = -1;
5240 #endif /* CONFIG_IEEE80211R */
5241 #ifdef CONFIG_WPS
5242         } else if (os_strcmp(buf, "WPS_PBC") == 0) {
5243                 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, NULL);
5244                 if (res == -2) {
5245                         os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
5246                         reply_len = 17;
5247                 } else if (res)
5248                         reply_len = -1;
5249         } else if (os_strncmp(buf, "WPS_PBC ", 8) == 0) {
5250                 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, buf + 8);
5251                 if (res == -2) {
5252                         os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
5253                         reply_len = 17;
5254                 } else if (res)
5255                         reply_len = -1;
5256         } else if (os_strncmp(buf, "WPS_PIN ", 8) == 0) {
5257                 reply_len = wpa_supplicant_ctrl_iface_wps_pin(wpa_s, buf + 8,
5258                                                               reply,
5259                                                               reply_size);
5260         } else if (os_strncmp(buf, "WPS_CHECK_PIN ", 14) == 0) {
5261                 reply_len = wpa_supplicant_ctrl_iface_wps_check_pin(
5262                         wpa_s, buf + 14, reply, reply_size);
5263         } else if (os_strcmp(buf, "WPS_CANCEL") == 0) {
5264                 if (wpas_wps_cancel(wpa_s))
5265                         reply_len = -1;
5266 #ifdef CONFIG_WPS_NFC
5267         } else if (os_strcmp(buf, "WPS_NFC") == 0) {
5268                 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, NULL))
5269                         reply_len = -1;
5270         } else if (os_strncmp(buf, "WPS_NFC ", 8) == 0) {
5271                 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, buf + 8))
5272                         reply_len = -1;
5273         } else if (os_strncmp(buf, "WPS_NFC_CONFIG_TOKEN ", 21) == 0) {
5274                 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_config_token(
5275                         wpa_s, buf + 21, reply, reply_size);
5276         } else if (os_strncmp(buf, "WPS_NFC_TOKEN ", 14) == 0) {
5277                 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_token(
5278                         wpa_s, buf + 14, reply, reply_size);
5279         } else if (os_strncmp(buf, "WPS_NFC_TAG_READ ", 17) == 0) {
5280                 if (wpa_supplicant_ctrl_iface_wps_nfc_tag_read(wpa_s,
5281                                                                buf + 17))
5282                         reply_len = -1;
5283         } else if (os_strncmp(buf, "NFC_GET_HANDOVER_REQ ", 21) == 0) {
5284                 reply_len = wpas_ctrl_nfc_get_handover_req(
5285                         wpa_s, buf + 21, reply, reply_size);
5286         } else if (os_strncmp(buf, "NFC_GET_HANDOVER_SEL ", 21) == 0) {
5287                 reply_len = wpas_ctrl_nfc_get_handover_sel(
5288                         wpa_s, buf + 21, reply, reply_size);
5289         } else if (os_strncmp(buf, "NFC_RX_HANDOVER_REQ ", 20) == 0) {
5290                 reply_len = wpas_ctrl_nfc_rx_handover_req(
5291                         wpa_s, buf + 20, reply, reply_size);
5292         } else if (os_strncmp(buf, "NFC_RX_HANDOVER_SEL ", 20) == 0) {
5293                 if (wpas_ctrl_nfc_rx_handover_sel(wpa_s, buf + 20))
5294                         reply_len = -1;
5295         } else if (os_strncmp(buf, "NFC_REPORT_HANDOVER ", 20) == 0) {
5296                 if (wpas_ctrl_nfc_report_handover(wpa_s, buf + 20))
5297                         reply_len = -1;
5298 #endif /* CONFIG_WPS_NFC */
5299         } else if (os_strncmp(buf, "WPS_REG ", 8) == 0) {
5300                 if (wpa_supplicant_ctrl_iface_wps_reg(wpa_s, buf + 8))
5301                         reply_len = -1;
5302 #ifdef CONFIG_AP
5303         } else if (os_strncmp(buf, "WPS_AP_PIN ", 11) == 0) {
5304                 reply_len = wpa_supplicant_ctrl_iface_wps_ap_pin(
5305                         wpa_s, buf + 11, reply, reply_size);
5306 #endif /* CONFIG_AP */
5307 #ifdef CONFIG_WPS_ER
5308         } else if (os_strcmp(buf, "WPS_ER_START") == 0) {
5309                 if (wpas_wps_er_start(wpa_s, NULL))
5310                         reply_len = -1;
5311         } else if (os_strncmp(buf, "WPS_ER_START ", 13) == 0) {
5312                 if (wpas_wps_er_start(wpa_s, buf + 13))
5313                         reply_len = -1;
5314         } else if (os_strcmp(buf, "WPS_ER_STOP") == 0) {
5315                 if (wpas_wps_er_stop(wpa_s))
5316                         reply_len = -1;
5317         } else if (os_strncmp(buf, "WPS_ER_PIN ", 11) == 0) {
5318                 if (wpa_supplicant_ctrl_iface_wps_er_pin(wpa_s, buf + 11))
5319                         reply_len = -1;
5320         } else if (os_strncmp(buf, "WPS_ER_PBC ", 11) == 0) {
5321                 int ret = wpas_wps_er_pbc(wpa_s, buf + 11);
5322                 if (ret == -2) {
5323                         os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
5324                         reply_len = 17;
5325                 } else if (ret == -3) {
5326                         os_memcpy(reply, "FAIL-UNKNOWN-UUID\n", 18);
5327                         reply_len = 18;
5328                 } else if (ret == -4) {
5329                         os_memcpy(reply, "FAIL-NO-AP-SETTINGS\n", 20);
5330                         reply_len = 20;
5331                 } else if (ret)
5332                         reply_len = -1;
5333         } else if (os_strncmp(buf, "WPS_ER_LEARN ", 13) == 0) {
5334                 if (wpa_supplicant_ctrl_iface_wps_er_learn(wpa_s, buf + 13))
5335                         reply_len = -1;
5336         } else if (os_strncmp(buf, "WPS_ER_SET_CONFIG ", 18) == 0) {
5337                 if (wpa_supplicant_ctrl_iface_wps_er_set_config(wpa_s,
5338                                                                 buf + 18))
5339                         reply_len = -1;
5340         } else if (os_strncmp(buf, "WPS_ER_CONFIG ", 14) == 0) {
5341                 if (wpa_supplicant_ctrl_iface_wps_er_config(wpa_s, buf + 14))
5342                         reply_len = -1;
5343 #ifdef CONFIG_WPS_NFC
5344         } else if (os_strncmp(buf, "WPS_ER_NFC_CONFIG_TOKEN ", 24) == 0) {
5345                 reply_len = wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
5346                         wpa_s, buf + 24, reply, reply_size);
5347 #endif /* CONFIG_WPS_NFC */
5348 #endif /* CONFIG_WPS_ER */
5349 #endif /* CONFIG_WPS */
5350 #ifdef CONFIG_IBSS_RSN
5351         } else if (os_strncmp(buf, "IBSS_RSN ", 9) == 0) {
5352                 if (wpa_supplicant_ctrl_iface_ibss_rsn(wpa_s, buf + 9))
5353                         reply_len = -1;
5354 #endif /* CONFIG_IBSS_RSN */
5355 #ifdef CONFIG_P2P
5356         } else if (os_strncmp(buf, "P2P_FIND ", 9) == 0) {
5357                 if (p2p_ctrl_find(wpa_s, buf + 9))
5358                         reply_len = -1;
5359         } else if (os_strcmp(buf, "P2P_FIND") == 0) {
5360                 if (p2p_ctrl_find(wpa_s, ""))
5361                         reply_len = -1;
5362         } else if (os_strcmp(buf, "P2P_STOP_FIND") == 0) {
5363                 wpas_p2p_stop_find(wpa_s);
5364         } else if (os_strncmp(buf, "P2P_CONNECT ", 12) == 0) {
5365                 reply_len = p2p_ctrl_connect(wpa_s, buf + 12, reply,
5366                                              reply_size);
5367         } else if (os_strncmp(buf, "P2P_LISTEN ", 11) == 0) {
5368                 if (p2p_ctrl_listen(wpa_s, buf + 11))
5369                         reply_len = -1;
5370         } else if (os_strcmp(buf, "P2P_LISTEN") == 0) {
5371                 if (p2p_ctrl_listen(wpa_s, ""))
5372                         reply_len = -1;
5373         } else if (os_strncmp(buf, "P2P_GROUP_REMOVE ", 17) == 0) {
5374                 if (wpas_p2p_group_remove(wpa_s, buf + 17))
5375                         reply_len = -1;
5376         } else if (os_strcmp(buf, "P2P_GROUP_ADD") == 0) {
5377                 if (wpas_p2p_group_add(wpa_s, 0, 0, 0))
5378                         reply_len = -1;
5379         } else if (os_strncmp(buf, "P2P_GROUP_ADD ", 14) == 0) {
5380                 if (p2p_ctrl_group_add(wpa_s, buf + 14))
5381                         reply_len = -1;
5382         } else if (os_strncmp(buf, "P2P_PROV_DISC ", 14) == 0) {
5383                 if (p2p_ctrl_prov_disc(wpa_s, buf + 14))
5384                         reply_len = -1;
5385         } else if (os_strcmp(buf, "P2P_GET_PASSPHRASE") == 0) {
5386                 reply_len = p2p_get_passphrase(wpa_s, reply, reply_size);
5387         } else if (os_strncmp(buf, "P2P_SERV_DISC_REQ ", 18) == 0) {
5388                 reply_len = p2p_ctrl_serv_disc_req(wpa_s, buf + 18, reply,
5389                                                    reply_size);
5390         } else if (os_strncmp(buf, "P2P_SERV_DISC_CANCEL_REQ ", 25) == 0) {
5391                 if (p2p_ctrl_serv_disc_cancel_req(wpa_s, buf + 25) < 0)
5392                         reply_len = -1;
5393         } else if (os_strncmp(buf, "P2P_SERV_DISC_RESP ", 19) == 0) {
5394                 if (p2p_ctrl_serv_disc_resp(wpa_s, buf + 19) < 0)
5395                         reply_len = -1;
5396         } else if (os_strcmp(buf, "P2P_SERVICE_UPDATE") == 0) {
5397                 wpas_p2p_sd_service_update(wpa_s);
5398         } else if (os_strncmp(buf, "P2P_SERV_DISC_EXTERNAL ", 23) == 0) {
5399                 if (p2p_ctrl_serv_disc_external(wpa_s, buf + 23) < 0)
5400                         reply_len = -1;
5401         } else if (os_strcmp(buf, "P2P_SERVICE_FLUSH") == 0) {
5402                 wpas_p2p_service_flush(wpa_s);
5403         } else if (os_strncmp(buf, "P2P_SERVICE_ADD ", 16) == 0) {
5404                 if (p2p_ctrl_service_add(wpa_s, buf + 16) < 0)
5405                         reply_len = -1;
5406         } else if (os_strncmp(buf, "P2P_SERVICE_DEL ", 16) == 0) {
5407                 if (p2p_ctrl_service_del(wpa_s, buf + 16) < 0)
5408                         reply_len = -1;
5409         } else if (os_strncmp(buf, "P2P_REJECT ", 11) == 0) {
5410                 if (p2p_ctrl_reject(wpa_s, buf + 11) < 0)
5411                         reply_len = -1;
5412         } else if (os_strncmp(buf, "P2P_INVITE ", 11) == 0) {
5413                 if (p2p_ctrl_invite(wpa_s, buf + 11) < 0)
5414                         reply_len = -1;
5415         } else if (os_strncmp(buf, "P2P_PEER ", 9) == 0) {
5416                 reply_len = p2p_ctrl_peer(wpa_s, buf + 9, reply,
5417                                               reply_size);
5418         } else if (os_strncmp(buf, "P2P_SET ", 8) == 0) {
5419                 if (p2p_ctrl_set(wpa_s, buf + 8) < 0)
5420                         reply_len = -1;
5421         } else if (os_strcmp(buf, "P2P_FLUSH") == 0) {
5422                 p2p_ctrl_flush(wpa_s);
5423         } else if (os_strncmp(buf, "P2P_UNAUTHORIZE ", 16) == 0) {
5424                 if (wpas_p2p_unauthorize(wpa_s, buf + 16) < 0)
5425                         reply_len = -1;
5426         } else if (os_strcmp(buf, "P2P_CANCEL") == 0) {
5427                 if (wpas_p2p_cancel(wpa_s))
5428                         reply_len = -1;
5429         } else if (os_strncmp(buf, "P2P_PRESENCE_REQ ", 17) == 0) {
5430                 if (p2p_ctrl_presence_req(wpa_s, buf + 17) < 0)
5431                         reply_len = -1;
5432         } else if (os_strcmp(buf, "P2P_PRESENCE_REQ") == 0) {
5433                 if (p2p_ctrl_presence_req(wpa_s, "") < 0)
5434                         reply_len = -1;
5435         } else if (os_strncmp(buf, "P2P_EXT_LISTEN ", 15) == 0) {
5436                 if (p2p_ctrl_ext_listen(wpa_s, buf + 15) < 0)
5437                         reply_len = -1;
5438         } else if (os_strcmp(buf, "P2P_EXT_LISTEN") == 0) {
5439                 if (p2p_ctrl_ext_listen(wpa_s, "") < 0)
5440                         reply_len = -1;
5441 #endif /* CONFIG_P2P */
5442 #ifdef CONFIG_WIFI_DISPLAY
5443         } else if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0) {
5444                 if (wifi_display_subelem_set(wpa_s->global, buf + 16) < 0)
5445                         reply_len = -1;
5446         } else if (os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0) {
5447                 reply_len = wifi_display_subelem_get(wpa_s->global, buf + 16,
5448                                                      reply, reply_size);
5449 #endif /* CONFIG_WIFI_DISPLAY */
5450 #ifdef CONFIG_INTERWORKING
5451         } else if (os_strcmp(buf, "FETCH_ANQP") == 0) {
5452                 if (interworking_fetch_anqp(wpa_s) < 0)
5453                         reply_len = -1;
5454         } else if (os_strcmp(buf, "STOP_FETCH_ANQP") == 0) {
5455                 interworking_stop_fetch_anqp(wpa_s);
5456         } else if (os_strncmp(buf, "INTERWORKING_SELECT", 19) == 0) {
5457                 if (interworking_select(wpa_s, os_strstr(buf + 19, "auto") !=
5458                                         NULL) < 0)
5459                         reply_len = -1;
5460         } else if (os_strncmp(buf, "INTERWORKING_CONNECT ", 21) == 0) {
5461                 if (ctrl_interworking_connect(wpa_s, buf + 21) < 0)
5462                         reply_len = -1;
5463         } else if (os_strncmp(buf, "ANQP_GET ", 9) == 0) {
5464                 if (get_anqp(wpa_s, buf + 9) < 0)
5465                         reply_len = -1;
5466         } else if (os_strncmp(buf, "GAS_REQUEST ", 12) == 0) {
5467                 if (gas_request(wpa_s, buf + 12) < 0)
5468                         reply_len = -1;
5469         } else if (os_strncmp(buf, "GAS_RESPONSE_GET ", 17) == 0) {
5470                 reply_len = gas_response_get(wpa_s, buf + 17, reply,
5471                                              reply_size);
5472 #endif /* CONFIG_INTERWORKING */
5473 #ifdef CONFIG_HS20
5474         } else if (os_strncmp(buf, "HS20_ANQP_GET ", 14) == 0) {
5475                 if (get_hs20_anqp(wpa_s, buf + 14) < 0)
5476                         reply_len = -1;
5477         } else if (os_strncmp(buf, "HS20_GET_NAI_HOME_REALM_LIST ", 29) == 0) {
5478                 if (hs20_get_nai_home_realm_list(wpa_s, buf + 29) < 0)
5479                         reply_len = -1;
5480 #endif /* CONFIG_HS20 */
5481         } else if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0)
5482         {
5483                 if (wpa_supplicant_ctrl_iface_ctrl_rsp(
5484                             wpa_s, buf + os_strlen(WPA_CTRL_RSP)))
5485                         reply_len = -1;
5486                 else
5487                         ctrl_rsp = 1;
5488         } else if (os_strcmp(buf, "RECONFIGURE") == 0) {
5489                 if (wpa_supplicant_reload_configuration(wpa_s))
5490                         reply_len = -1;
5491         } else if (os_strcmp(buf, "TERMINATE") == 0) {
5492                 wpa_supplicant_terminate_proc(wpa_s->global);
5493         } else if (os_strncmp(buf, "BSSID ", 6) == 0) {
5494                 if (wpa_supplicant_ctrl_iface_bssid(wpa_s, buf + 6))
5495                         reply_len = -1;
5496         } else if (os_strncmp(buf, "BLACKLIST", 9) == 0) {
5497                 reply_len = wpa_supplicant_ctrl_iface_blacklist(
5498                         wpa_s, buf + 9, reply, reply_size);
5499         } else if (os_strncmp(buf, "LOG_LEVEL", 9) == 0) {
5500                 reply_len = wpa_supplicant_ctrl_iface_log_level(
5501                         wpa_s, buf + 9, reply, reply_size);
5502         } else if (os_strcmp(buf, "LIST_NETWORKS") == 0) {
5503                 reply_len = wpa_supplicant_ctrl_iface_list_networks(
5504                         wpa_s, reply, reply_size);
5505         } else if (os_strcmp(buf, "DISCONNECT") == 0) {
5506 #ifdef CONFIG_SME
5507                 wpa_s->sme.prev_bssid_set = 0;
5508 #endif /* CONFIG_SME */
5509                 wpa_s->reassociate = 0;
5510                 wpa_s->disconnected = 1;
5511                 wpa_supplicant_cancel_sched_scan(wpa_s);
5512                 wpa_supplicant_cancel_scan(wpa_s);
5513                 wpa_supplicant_deauthenticate(wpa_s,
5514                                               WLAN_REASON_DEAUTH_LEAVING);
5515         } else if (os_strcmp(buf, "SCAN") == 0 ||
5516                    os_strncmp(buf, "SCAN ", 5) == 0) {
5517                 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
5518                         reply_len = -1;
5519                 else {
5520                         if (os_strlen(buf) > 4 &&
5521                             os_strncasecmp(buf + 5, "TYPE=ONLY", 9) == 0)
5522                                 wpa_s->scan_res_handler = scan_only_handler;
5523                         if (!wpa_s->sched_scanning && !wpa_s->scanning &&
5524                             ((wpa_s->wpa_state <= WPA_SCANNING) ||
5525                              (wpa_s->wpa_state == WPA_COMPLETED))) {
5526                                 wpa_s->normal_scans = 0;
5527                                 wpa_s->scan_req = MANUAL_SCAN_REQ;
5528                                 wpa_supplicant_req_scan(wpa_s, 0, 0);
5529                         } else if (wpa_s->sched_scanning) {
5530                                 wpa_printf(MSG_DEBUG, "Stop ongoing "
5531                                            "sched_scan to allow requested "
5532                                            "full scan to proceed");
5533                                 wpa_supplicant_cancel_sched_scan(wpa_s);
5534                                 wpa_s->scan_req = MANUAL_SCAN_REQ;
5535                                 wpa_supplicant_req_scan(wpa_s, 0, 0);
5536                         } else {
5537                                 wpa_printf(MSG_DEBUG, "Ongoing scan action - "
5538                                            "reject new request");
5539                                 reply_len = os_snprintf(reply, reply_size,
5540                                                         "FAIL-BUSY\n");
5541                         }
5542                 }
5543         } else if (os_strcmp(buf, "SCAN_RESULTS") == 0) {
5544                 reply_len = wpa_supplicant_ctrl_iface_scan_results(
5545                         wpa_s, reply, reply_size);
5546         } else if (os_strncmp(buf, "SELECT_NETWORK ", 15) == 0) {
5547                 if (wpa_supplicant_ctrl_iface_select_network(wpa_s, buf + 15))
5548                         reply_len = -1;
5549         } else if (os_strncmp(buf, "ENABLE_NETWORK ", 15) == 0) {
5550                 if (wpa_supplicant_ctrl_iface_enable_network(wpa_s, buf + 15))
5551                         reply_len = -1;
5552         } else if (os_strncmp(buf, "DISABLE_NETWORK ", 16) == 0) {
5553                 if (wpa_supplicant_ctrl_iface_disable_network(wpa_s, buf + 16))
5554                         reply_len = -1;
5555         } else if (os_strcmp(buf, "ADD_NETWORK") == 0) {
5556                 reply_len = wpa_supplicant_ctrl_iface_add_network(
5557                         wpa_s, reply, reply_size);
5558         } else if (os_strncmp(buf, "REMOVE_NETWORK ", 15) == 0) {
5559                 if (wpa_supplicant_ctrl_iface_remove_network(wpa_s, buf + 15))
5560                         reply_len = -1;
5561         } else if (os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
5562                 if (wpa_supplicant_ctrl_iface_set_network(wpa_s, buf + 12))
5563                         reply_len = -1;
5564         } else if (os_strncmp(buf, "GET_NETWORK ", 12) == 0) {
5565                 reply_len = wpa_supplicant_ctrl_iface_get_network(
5566                         wpa_s, buf + 12, reply, reply_size);
5567         } else if (os_strcmp(buf, "LIST_CREDS") == 0) {
5568                 reply_len = wpa_supplicant_ctrl_iface_list_creds(
5569                         wpa_s, reply, reply_size);
5570         } else if (os_strcmp(buf, "ADD_CRED") == 0) {
5571                 reply_len = wpa_supplicant_ctrl_iface_add_cred(
5572                         wpa_s, reply, reply_size);
5573         } else if (os_strncmp(buf, "REMOVE_CRED ", 12) == 0) {
5574                 if (wpa_supplicant_ctrl_iface_remove_cred(wpa_s, buf + 12))
5575                         reply_len = -1;
5576         } else if (os_strncmp(buf, "SET_CRED ", 9) == 0) {
5577                 if (wpa_supplicant_ctrl_iface_set_cred(wpa_s, buf + 9))
5578                         reply_len = -1;
5579 #ifndef CONFIG_NO_CONFIG_WRITE
5580         } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
5581                 if (wpa_supplicant_ctrl_iface_save_config(wpa_s))
5582                         reply_len = -1;
5583 #endif /* CONFIG_NO_CONFIG_WRITE */
5584         } else if (os_strncmp(buf, "GET_CAPABILITY ", 15) == 0) {
5585                 reply_len = wpa_supplicant_ctrl_iface_get_capability(
5586                         wpa_s, buf + 15, reply, reply_size);
5587         } else if (os_strncmp(buf, "AP_SCAN ", 8) == 0) {
5588                 if (wpa_supplicant_ctrl_iface_ap_scan(wpa_s, buf + 8))
5589                         reply_len = -1;
5590         } else if (os_strncmp(buf, "SCAN_INTERVAL ", 14) == 0) {
5591                 if (wpa_supplicant_ctrl_iface_scan_interval(wpa_s, buf + 14))
5592                         reply_len = -1;
5593         } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
5594                 reply_len = wpa_supplicant_global_iface_list(
5595                         wpa_s->global, reply, reply_size);
5596         } else if (os_strcmp(buf, "INTERFACES") == 0) {
5597                 reply_len = wpa_supplicant_global_iface_interfaces(
5598                         wpa_s->global, reply, reply_size);
5599         } else if (os_strncmp(buf, "BSS ", 4) == 0) {
5600                 reply_len = wpa_supplicant_ctrl_iface_bss(
5601                         wpa_s, buf + 4, reply, reply_size);
5602 #ifdef CONFIG_AP
5603         } else if (os_strcmp(buf, "STA-FIRST") == 0) {
5604                 reply_len = ap_ctrl_iface_sta_first(wpa_s, reply, reply_size);
5605         } else if (os_strncmp(buf, "STA ", 4) == 0) {
5606                 reply_len = ap_ctrl_iface_sta(wpa_s, buf + 4, reply,
5607                                               reply_size);
5608         } else if (os_strncmp(buf, "STA-NEXT ", 9) == 0) {
5609                 reply_len = ap_ctrl_iface_sta_next(wpa_s, buf + 9, reply,
5610                                                    reply_size);
5611         } else if (os_strncmp(buf, "DEAUTHENTICATE ", 15) == 0) {
5612                 if (ap_ctrl_iface_sta_deauthenticate(wpa_s, buf + 15))
5613                         reply_len = -1;
5614         } else if (os_strncmp(buf, "DISASSOCIATE ", 13) == 0) {
5615                 if (ap_ctrl_iface_sta_disassociate(wpa_s, buf + 13))
5616                         reply_len = -1;
5617 #endif /* CONFIG_AP */
5618         } else if (os_strcmp(buf, "SUSPEND") == 0) {
5619                 wpas_notify_suspend(wpa_s->global);
5620         } else if (os_strcmp(buf, "RESUME") == 0) {
5621                 wpas_notify_resume(wpa_s->global);
5622         } else if (os_strcmp(buf, "DROP_SA") == 0) {
5623                 wpa_supplicant_ctrl_iface_drop_sa(wpa_s);
5624         } else if (os_strncmp(buf, "ROAM ", 5) == 0) {
5625                 if (wpa_supplicant_ctrl_iface_roam(wpa_s, buf + 5))
5626                         reply_len = -1;
5627         } else if (os_strncmp(buf, "STA_AUTOCONNECT ", 16) == 0) {
5628                 if (wpa_supplicant_ctrl_iface_sta_autoconnect(wpa_s, buf + 16))
5629                         reply_len = -1;
5630         } else if (os_strncmp(buf, "BSS_EXPIRE_AGE ", 15) == 0) {
5631                 if (wpa_supplicant_ctrl_iface_bss_expire_age(wpa_s, buf + 15))
5632                         reply_len = -1;
5633         } else if (os_strncmp(buf, "BSS_EXPIRE_COUNT ", 17) == 0) {
5634                 if (wpa_supplicant_ctrl_iface_bss_expire_count(wpa_s,
5635                                                                buf + 17))
5636                         reply_len = -1;
5637         } else if (os_strncmp(buf, "BSS_FLUSH ", 10) == 0) {
5638                 if (wpa_supplicant_ctrl_iface_bss_flush(wpa_s, buf + 10))
5639                         reply_len = -1;
5640 #ifdef CONFIG_TDLS
5641         } else if (os_strncmp(buf, "TDLS_DISCOVER ", 14) == 0) {
5642                 if (wpa_supplicant_ctrl_iface_tdls_discover(wpa_s, buf + 14))
5643                         reply_len = -1;
5644         } else if (os_strncmp(buf, "TDLS_SETUP ", 11) == 0) {
5645                 if (wpa_supplicant_ctrl_iface_tdls_setup(wpa_s, buf + 11))
5646                         reply_len = -1;
5647         } else if (os_strncmp(buf, "TDLS_TEARDOWN ", 14) == 0) {
5648                 if (wpa_supplicant_ctrl_iface_tdls_teardown(wpa_s, buf + 14))
5649                         reply_len = -1;
5650 #endif /* CONFIG_TDLS */
5651         } else if (os_strncmp(buf, "SIGNAL_POLL", 11) == 0) {
5652                 reply_len = wpa_supplicant_signal_poll(wpa_s, reply,
5653                                                        reply_size);
5654         } else if (os_strncmp(buf, "PKTCNT_POLL", 11) == 0) {
5655                 reply_len = wpa_supplicant_pktcnt_poll(wpa_s, reply,
5656                                                        reply_size);
5657 #ifdef CONFIG_AUTOSCAN
5658         } else if (os_strncmp(buf, "AUTOSCAN ", 9) == 0) {
5659                 if (wpa_supplicant_ctrl_iface_autoscan(wpa_s, buf + 9))
5660                         reply_len = -1;
5661 #endif /* CONFIG_AUTOSCAN */
5662         } else if (os_strcmp(buf, "REAUTHENTICATE") == 0) {
5663                 pmksa_cache_clear_current(wpa_s->wpa);
5664                 eapol_sm_request_reauth(wpa_s->eapol);
5665 #ifdef CONFIG_WNM
5666         } else if (os_strncmp(buf, "WNM_SLEEP ", 10) == 0) {
5667                 if (wpas_ctrl_iface_wnm_sleep(wpa_s, buf + 10))
5668                         reply_len = -1;
5669         } else if (os_strncmp(buf, "WNM_BSS_QUERY ", 10) == 0) {
5670                 if (wpas_ctrl_iface_wnm_bss_query(wpa_s, buf + 10))
5671                                 reply_len = -1;
5672 #endif /* CONFIG_WNM */
5673         } else if (os_strcmp(buf, "FLUSH") == 0) {
5674                 wpa_supplicant_ctrl_iface_flush(wpa_s);
5675         } else {
5676                 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
5677                 reply_len = 16;
5678         }
5679
5680         if (reply_len < 0) {
5681                 os_memcpy(reply, "FAIL\n", 5);
5682                 reply_len = 5;
5683         }
5684
5685         if (ctrl_rsp)
5686                 eapol_sm_notify_ctrl_response(wpa_s->eapol);
5687
5688         *resp_len = reply_len;
5689         return reply;
5690 }
5691
5692
5693 static int wpa_supplicant_global_iface_add(struct wpa_global *global,
5694                                            char *cmd)
5695 {
5696         struct wpa_interface iface;
5697         char *pos;
5698
5699         /*
5700          * <ifname>TAB<confname>TAB<driver>TAB<ctrl_interface>TAB<driver_param>
5701          * TAB<bridge_ifname>
5702          */
5703         wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_ADD '%s'", cmd);
5704
5705         os_memset(&iface, 0, sizeof(iface));
5706
5707         do {
5708                 iface.ifname = pos = cmd;
5709                 pos = os_strchr(pos, '\t');
5710                 if (pos)
5711                         *pos++ = '\0';
5712                 if (iface.ifname[0] == '\0')
5713                         return -1;
5714                 if (pos == NULL)
5715                         break;
5716
5717                 iface.confname = pos;
5718                 pos = os_strchr(pos, '\t');
5719                 if (pos)
5720                         *pos++ = '\0';
5721                 if (iface.confname[0] == '\0')
5722                         iface.confname = NULL;
5723                 if (pos == NULL)
5724                         break;
5725
5726                 iface.driver = pos;
5727                 pos = os_strchr(pos, '\t');
5728                 if (pos)
5729                         *pos++ = '\0';
5730                 if (iface.driver[0] == '\0')
5731                         iface.driver = NULL;
5732                 if (pos == NULL)
5733                         break;
5734
5735                 iface.ctrl_interface = pos;
5736                 pos = os_strchr(pos, '\t');
5737                 if (pos)
5738                         *pos++ = '\0';
5739                 if (iface.ctrl_interface[0] == '\0')
5740                         iface.ctrl_interface = NULL;
5741                 if (pos == NULL)
5742                         break;
5743
5744                 iface.driver_param = pos;
5745                 pos = os_strchr(pos, '\t');
5746                 if (pos)
5747                         *pos++ = '\0';
5748                 if (iface.driver_param[0] == '\0')
5749                         iface.driver_param = NULL;
5750                 if (pos == NULL)
5751                         break;
5752
5753                 iface.bridge_ifname = pos;
5754                 pos = os_strchr(pos, '\t');
5755                 if (pos)
5756                         *pos++ = '\0';
5757                 if (iface.bridge_ifname[0] == '\0')
5758                         iface.bridge_ifname = NULL;
5759                 if (pos == NULL)
5760                         break;
5761         } while (0);
5762
5763         if (wpa_supplicant_get_iface(global, iface.ifname))
5764                 return -1;
5765
5766         return wpa_supplicant_add_iface(global, &iface) ? 0 : -1;
5767 }
5768
5769
5770 static int wpa_supplicant_global_iface_remove(struct wpa_global *global,
5771                                               char *cmd)
5772 {
5773         struct wpa_supplicant *wpa_s;
5774
5775         wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_REMOVE '%s'", cmd);
5776
5777         wpa_s = wpa_supplicant_get_iface(global, cmd);
5778         if (wpa_s == NULL)
5779                 return -1;
5780         return wpa_supplicant_remove_iface(global, wpa_s, 0);
5781 }
5782
5783
5784 static void wpa_free_iface_info(struct wpa_interface_info *iface)
5785 {
5786         struct wpa_interface_info *prev;
5787
5788         while (iface) {
5789                 prev = iface;
5790                 iface = iface->next;
5791
5792                 os_free(prev->ifname);
5793                 os_free(prev->desc);
5794                 os_free(prev);
5795         }
5796 }
5797
5798
5799 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
5800                                             char *buf, int len)
5801 {
5802         int i, res;
5803         struct wpa_interface_info *iface = NULL, *last = NULL, *tmp;
5804         char *pos, *end;
5805
5806         for (i = 0; wpa_drivers[i]; i++) {
5807                 struct wpa_driver_ops *drv = wpa_drivers[i];
5808                 if (drv->get_interfaces == NULL)
5809                         continue;
5810                 tmp = drv->get_interfaces(global->drv_priv[i]);
5811                 if (tmp == NULL)
5812                         continue;
5813
5814                 if (last == NULL)
5815                         iface = last = tmp;
5816                 else
5817                         last->next = tmp;
5818                 while (last->next)
5819                         last = last->next;
5820         }
5821
5822         pos = buf;
5823         end = buf + len;
5824         for (tmp = iface; tmp; tmp = tmp->next) {
5825                 res = os_snprintf(pos, end - pos, "%s\t%s\t%s\n",
5826                                   tmp->drv_name, tmp->ifname,
5827                                   tmp->desc ? tmp->desc : "");
5828                 if (res < 0 || res >= end - pos) {
5829                         *pos = '\0';
5830                         break;
5831                 }
5832                 pos += res;
5833         }
5834
5835         wpa_free_iface_info(iface);
5836
5837         return pos - buf;
5838 }
5839
5840
5841 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
5842                                                   char *buf, int len)
5843 {
5844         int res;
5845         char *pos, *end;
5846         struct wpa_supplicant *wpa_s;
5847
5848         wpa_s = global->ifaces;
5849         pos = buf;
5850         end = buf + len;
5851
5852         while (wpa_s) {
5853                 res = os_snprintf(pos, end - pos, "%s\n", wpa_s->ifname);
5854                 if (res < 0 || res >= end - pos) {
5855                         *pos = '\0';
5856                         break;
5857                 }
5858                 pos += res;
5859                 wpa_s = wpa_s->next;
5860         }
5861         return pos - buf;
5862 }
5863
5864
5865 static char * wpas_global_ctrl_iface_ifname(struct wpa_global *global,
5866                                             const char *ifname,
5867                                             char *cmd, size_t *resp_len)
5868 {
5869         struct wpa_supplicant *wpa_s;
5870
5871         for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
5872                 if (os_strcmp(ifname, wpa_s->ifname) == 0)
5873                         break;
5874         }
5875
5876         if (wpa_s == NULL) {
5877                 char *resp = os_strdup("FAIL-NO-IFNAME-MATCH\n");
5878                 if (resp)
5879                         *resp_len = os_strlen(resp);
5880                 else
5881                         *resp_len = 1;
5882                 return resp;
5883         }
5884
5885         return wpa_supplicant_ctrl_iface_process(wpa_s, cmd, resp_len);
5886 }
5887
5888
5889 static char * wpas_global_ctrl_iface_redir_p2p(struct wpa_global *global,
5890                                                char *buf, size_t *resp_len)
5891 {
5892 #ifdef CONFIG_P2P
5893         static const char * cmd[] = {
5894                 "P2P_FIND",
5895                 "P2P_STOP_FIND",
5896                 "P2P_LISTEN",
5897                 "P2P_GROUP_ADD",
5898                 "P2P_GET_PASSPHRASE",
5899                 "P2P_SERVICE_UPDATE",
5900                 "P2P_SERVICE_FLUSH",
5901                 "P2P_FLUSH",
5902                 "P2P_CANCEL",
5903                 "P2P_PRESENCE_REQ",
5904                 "P2P_EXT_LISTEN",
5905                 NULL
5906         };
5907         static const char * prefix[] = {
5908                 "P2P_FIND ",
5909                 "P2P_CONNECT ",
5910                 "P2P_LISTEN ",
5911                 "P2P_GROUP_REMOVE ",
5912                 "P2P_GROUP_ADD ",
5913                 "P2P_PROV_DISC ",
5914                 "P2P_SERV_DISC_REQ ",
5915                 "P2P_SERV_DISC_CANCEL_REQ ",
5916                 "P2P_SERV_DISC_RESP ",
5917                 "P2P_SERV_DISC_EXTERNAL ",
5918                 "P2P_SERVICE_ADD ",
5919                 "P2P_SERVICE_DEL ",
5920                 "P2P_REJECT ",
5921                 "P2P_INVITE ",
5922                 "P2P_PEER ",
5923                 "P2P_SET ",
5924                 "P2P_UNAUTHORIZE ",
5925                 "P2P_PRESENCE_REQ ",
5926                 "P2P_EXT_LISTEN ",
5927                 NULL
5928         };
5929         int found = 0;
5930         int i;
5931
5932         if (global->p2p_init_wpa_s == NULL)
5933                 return NULL;
5934
5935         for (i = 0; !found && cmd[i]; i++) {
5936                 if (os_strcmp(buf, cmd[i]) == 0)
5937                         found = 1;
5938         }
5939
5940         for (i = 0; !found && prefix[i]; i++) {
5941                 if (os_strncmp(buf, prefix[i], os_strlen(prefix[i])) == 0)
5942                         found = 1;
5943         }
5944
5945         if (found)
5946                 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
5947                                                          buf, resp_len);
5948 #endif /* CONFIG_P2P */
5949         return NULL;
5950 }
5951
5952
5953 static char * wpas_global_ctrl_iface_redir_wfd(struct wpa_global *global,
5954                                                char *buf, size_t *resp_len)
5955 {
5956 #ifdef CONFIG_WIFI_DISPLAY
5957         if (global->p2p_init_wpa_s == NULL)
5958                 return NULL;
5959         if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0 ||
5960             os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0)
5961                 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
5962                                                          buf, resp_len);
5963 #endif /* CONFIG_WIFI_DISPLAY */
5964         return NULL;
5965 }
5966
5967
5968 static char * wpas_global_ctrl_iface_redir(struct wpa_global *global,
5969                                            char *buf, size_t *resp_len)
5970 {
5971         char *ret;
5972
5973         ret = wpas_global_ctrl_iface_redir_p2p(global, buf, resp_len);
5974         if (ret)
5975                 return ret;
5976
5977         ret = wpas_global_ctrl_iface_redir_wfd(global, buf, resp_len);
5978         if (ret)
5979                 return ret;
5980
5981         return NULL;
5982 }
5983
5984
5985 char * wpa_supplicant_global_ctrl_iface_process(struct wpa_global *global,
5986                                                 char *buf, size_t *resp_len)
5987 {
5988         char *reply;
5989         const int reply_size = 2048;
5990         int reply_len;
5991         int level = MSG_DEBUG;
5992
5993         if (os_strncmp(buf, "IFNAME=", 7) == 0) {
5994                 char *pos = os_strchr(buf + 7, ' ');
5995                 if (pos) {
5996                         *pos++ = '\0';
5997                         return wpas_global_ctrl_iface_ifname(global,
5998                                                              buf + 7, pos,
5999                                                              resp_len);
6000                 }
6001         }
6002
6003         reply = wpas_global_ctrl_iface_redir(global, buf, resp_len);
6004         if (reply)
6005                 return reply;
6006
6007         if (os_strcmp(buf, "PING") == 0)
6008                 level = MSG_EXCESSIVE;
6009         wpa_hexdump_ascii(level, "RX global ctrl_iface",
6010                           (const u8 *) buf, os_strlen(buf));
6011
6012         reply = os_malloc(reply_size);
6013         if (reply == NULL) {
6014                 *resp_len = 1;
6015                 return NULL;
6016         }
6017
6018         os_memcpy(reply, "OK\n", 3);
6019         reply_len = 3;
6020
6021         if (os_strcmp(buf, "PING") == 0) {
6022                 os_memcpy(reply, "PONG\n", 5);
6023                 reply_len = 5;
6024         } else if (os_strncmp(buf, "INTERFACE_ADD ", 14) == 0) {
6025                 if (wpa_supplicant_global_iface_add(global, buf + 14))
6026                         reply_len = -1;
6027         } else if (os_strncmp(buf, "INTERFACE_REMOVE ", 17) == 0) {
6028                 if (wpa_supplicant_global_iface_remove(global, buf + 17))
6029                         reply_len = -1;
6030         } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
6031                 reply_len = wpa_supplicant_global_iface_list(
6032                         global, reply, reply_size);
6033         } else if (os_strcmp(buf, "INTERFACES") == 0) {
6034                 reply_len = wpa_supplicant_global_iface_interfaces(
6035                         global, reply, reply_size);
6036         } else if (os_strcmp(buf, "TERMINATE") == 0) {
6037                 wpa_supplicant_terminate_proc(global);
6038         } else if (os_strcmp(buf, "SUSPEND") == 0) {
6039                 wpas_notify_suspend(global);
6040         } else if (os_strcmp(buf, "RESUME") == 0) {
6041                 wpas_notify_resume(global);
6042         } else {
6043                 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
6044                 reply_len = 16;
6045         }
6046
6047         if (reply_len < 0) {
6048                 os_memcpy(reply, "FAIL\n", 5);
6049                 reply_len = 5;
6050         }
6051
6052         *resp_len = reply_len;
6053         return reply;
6054 }