wlantest: Fix handling of PTK rekeying
[mech_eap.git] / wlantest / rx_mgmt.c
index bf9750e..c7a9390 100644 (file)
@@ -156,12 +156,41 @@ static void rx_mgmt_auth(struct wlantest *wt, const u8 *data, size_t len)
 }
 
 
+static void deauth_all_stas(struct wlantest_bss *bss)
+{
+       struct wlantest_sta *sta;
+       dl_list_for_each(sta, &bss->sta, struct wlantest_sta, list) {
+               if (sta->state == STATE1)
+                       continue;
+               wpa_printf(MSG_DEBUG, "STA " MACSTR
+                          " moved to State 1 with " MACSTR,
+                          MAC2STR(sta->addr), MAC2STR(bss->bssid));
+               sta->state = STATE1;
+       }
+}
+
+
+static void tdls_link_down(struct wlantest_bss *bss, struct wlantest_sta *sta)
+{
+       struct wlantest_tdls *tdls;
+       dl_list_for_each(tdls, &bss->tdls, struct wlantest_tdls, list) {
+               if ((tdls->init == sta || tdls->resp == sta) && tdls->link_up)
+               {
+                       wpa_printf(MSG_DEBUG, "TDLS: Set link down based on "
+                                  "STA deauth/disassoc");
+                       tdls->link_up = 0;
+               }
+       }
+}
+
+
 static void rx_mgmt_deauth(struct wlantest *wt, const u8 *data, size_t len,
                           int valid)
 {
        const struct ieee80211_mgmt *mgmt;
        struct wlantest_bss *bss;
        struct wlantest_sta *sta;
+       u16 fc, reason;
 
        mgmt = (const struct ieee80211_mgmt *) data;
        bss = bss_get(wt, mgmt->bssid);
@@ -178,19 +207,33 @@ static void rx_mgmt_deauth(struct wlantest *wt, const u8 *data, size_t len,
                return;
        }
 
+       reason = le_to_host16(mgmt->u.deauth.reason_code);
        wpa_printf(MSG_DEBUG, "DEAUTH " MACSTR " -> " MACSTR
                   " (reason=%u) (valid=%d)",
                   MAC2STR(mgmt->sa), MAC2STR(mgmt->da),
-                  le_to_host16(mgmt->u.deauth.reason_code), valid);
+                  reason, valid);
        wpa_hexdump(MSG_MSGDUMP, "DEAUTH payload", data + 24, len - 24);
 
-       if (sta == NULL)
+       if (sta == NULL) {
+               if (valid && mgmt->da[0] == 0xff)
+                       deauth_all_stas(bss);
                return;
+       }
 
-       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0)
+       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0) {
                sta->counters[valid ? WLANTEST_STA_COUNTER_VALID_DEAUTH_RX :
                              WLANTEST_STA_COUNTER_INVALID_DEAUTH_RX]++;
-       else
+               if (sta->pwrmgt && !sta->pspoll)
+                       sta->counters[WLANTEST_STA_COUNTER_DEAUTH_RX_ASLEEP]++;
+               else
+                       sta->counters[WLANTEST_STA_COUNTER_DEAUTH_RX_AWAKE]++;
+
+               fc = le_to_host16(mgmt->frame_control);
+               if (!(fc & WLAN_FC_ISWEP) && reason == 6)
+                       sta->counters[WLANTEST_STA_COUNTER_DEAUTH_RX_RC6]++;
+               else if (!(fc & WLAN_FC_ISWEP) && reason == 7)
+                       sta->counters[WLANTEST_STA_COUNTER_DEAUTH_RX_RC7]++;
+       } else
                sta->counters[valid ? WLANTEST_STA_COUNTER_VALID_DEAUTH_TX :
                              WLANTEST_STA_COUNTER_INVALID_DEAUTH_TX]++;
 
@@ -207,6 +250,7 @@ static void rx_mgmt_deauth(struct wlantest *wt, const u8 *data, size_t len,
                           MAC2STR(sta->addr), MAC2STR(bss->bssid));
                sta->state = STATE1;
        }
+       tdls_link_down(bss, sta);
 }
 
 
@@ -300,10 +344,13 @@ static void rx_mgmt_assoc_resp(struct wlantest *wt, const u8 *data, size_t len)
                        wpa_printf(MSG_INFO, "Failed to parse IEs in "
                                   "AssocResp from " MACSTR,
                                   MAC2STR(mgmt->sa));
-               } else if (elems.timeout_int == 0 ||
-                          elems.timeout_int_len != 5) {
-                       wpa_printf(MSG_INFO, "No valid Timeout Interval IE in "
-                                  "AssocResp (status=30) from " MACSTR,
+               } else if (elems.timeout_int == NULL ||
+                          elems.timeout_int_len != 5 ||
+                          elems.timeout_int[0] !=
+                          WLAN_TIMEOUT_ASSOC_COMEBACK) {
+                       wpa_printf(MSG_INFO, "No valid Timeout Interval IE "
+                                  "with Assoc Comeback time in AssocResp "
+                                  "(status=30) from " MACSTR,
                                   MAC2STR(mgmt->sa));
                } else {
                        sta->counters[
@@ -429,10 +476,13 @@ static void rx_mgmt_reassoc_resp(struct wlantest *wt, const u8 *data,
                        wpa_printf(MSG_INFO, "Failed to parse IEs in "
                                   "ReassocResp from " MACSTR,
                                   MAC2STR(mgmt->sa));
-               } else if (elems.timeout_int == 0 ||
-                          elems.timeout_int_len != 5) {
-                       wpa_printf(MSG_INFO, "No valid Timeout Interval IE in "
-                                  "ReassocResp (status=30) from " MACSTR,
+               } else if (elems.timeout_int == NULL ||
+                          elems.timeout_int_len != 5 ||
+                          elems.timeout_int[0] !=
+                          WLAN_TIMEOUT_ASSOC_COMEBACK) {
+                       wpa_printf(MSG_INFO, "No valid Timeout Interval IE "
+                                  "with Assoc Comeback time in ReassocResp "
+                                  "(status=30) from " MACSTR,
                                   MAC2STR(mgmt->sa));
                } else {
                        sta->counters[
@@ -464,12 +514,27 @@ static void rx_mgmt_reassoc_resp(struct wlantest *wt, const u8 *data,
 }
 
 
+static void disassoc_all_stas(struct wlantest_bss *bss)
+{
+       struct wlantest_sta *sta;
+       dl_list_for_each(sta, &bss->sta, struct wlantest_sta, list) {
+               if (sta->state <= STATE2)
+                       continue;
+               wpa_printf(MSG_DEBUG, "STA " MACSTR
+                          " moved to State 2 with " MACSTR,
+                          MAC2STR(sta->addr), MAC2STR(bss->bssid));
+               sta->state = STATE2;
+       }
+}
+
+
 static void rx_mgmt_disassoc(struct wlantest *wt, const u8 *data, size_t len,
                             int valid)
 {
        const struct ieee80211_mgmt *mgmt;
        struct wlantest_bss *bss;
        struct wlantest_sta *sta;
+       u16 fc, reason;
 
        mgmt = (const struct ieee80211_mgmt *) data;
        bss = bss_get(wt, mgmt->bssid);
@@ -486,19 +551,35 @@ static void rx_mgmt_disassoc(struct wlantest *wt, const u8 *data, size_t len,
                return;
        }
 
+       reason = le_to_host16(mgmt->u.disassoc.reason_code);
        wpa_printf(MSG_DEBUG, "DISASSOC " MACSTR " -> " MACSTR
                   " (reason=%u) (valid=%d)",
                   MAC2STR(mgmt->sa), MAC2STR(mgmt->da),
-                  le_to_host16(mgmt->u.disassoc.reason_code), valid);
+                  reason, valid);
        wpa_hexdump(MSG_MSGDUMP, "DISASSOC payload", data + 24, len - 24);
 
-       if (sta == NULL)
+       if (sta == NULL) {
+               if (valid && mgmt->da[0] == 0xff)
+                       disassoc_all_stas(bss);
                return;
+       }
 
-       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0)
+       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0) {
                sta->counters[valid ? WLANTEST_STA_COUNTER_VALID_DISASSOC_RX :
                              WLANTEST_STA_COUNTER_INVALID_DISASSOC_RX]++;
-       else
+               if (sta->pwrmgt && !sta->pspoll)
+                       sta->counters[
+                               WLANTEST_STA_COUNTER_DISASSOC_RX_ASLEEP]++;
+               else
+                       sta->counters[
+                               WLANTEST_STA_COUNTER_DISASSOC_RX_AWAKE]++;
+
+               fc = le_to_host16(mgmt->frame_control);
+               if (!(fc & WLAN_FC_ISWEP) && reason == 6)
+                       sta->counters[WLANTEST_STA_COUNTER_DISASSOC_RX_RC6]++;
+               else if (!(fc & WLAN_FC_ISWEP) && reason == 7)
+                       sta->counters[WLANTEST_STA_COUNTER_DISASSOC_RX_RC7]++;
+       } else
                sta->counters[valid ? WLANTEST_STA_COUNTER_VALID_DISASSOC_TX :
                              WLANTEST_STA_COUNTER_INVALID_DISASSOC_TX]++;
 
@@ -520,6 +601,7 @@ static void rx_mgmt_disassoc(struct wlantest *wt, const u8 *data, size_t len,
                           MAC2STR(sta->addr), MAC2STR(bss->bssid));
                sta->state = STATE2;
        }
+       tdls_link_down(bss, sta);
 }
 
 
@@ -847,8 +929,13 @@ static u8 * mgmt_ccmp_decrypt(struct wlantest *wt, const u8 *data, size_t len,
 
        ccmp_get_pn(pn, data + 24);
        if (os_memcmp(pn, rsc, 6) <= 0) {
-               wpa_printf(MSG_INFO, "CCMP/TKIP replay detected: SA=" MACSTR,
-                          MAC2STR(hdr->addr2));
+               u16 seq_ctrl = le_to_host16(hdr->seq_ctrl);
+               wpa_printf(MSG_INFO, "CCMP/TKIP replay detected: A1=" MACSTR
+                          " A2=" MACSTR " A3=" MACSTR " seq=%u frag=%u",
+                          MAC2STR(hdr->addr1), MAC2STR(hdr->addr2),
+                          MAC2STR(hdr->addr3),
+                          WLAN_GET_SEQ_SEQ(seq_ctrl),
+                          WLAN_GET_SEQ_FRAG(seq_ctrl));
                wpa_hexdump(MSG_INFO, "RX PN", pn, 6);
                wpa_hexdump(MSG_INFO, "RSC", rsc, 6);
        }
@@ -1001,4 +1088,88 @@ void rx_mgmt(struct wlantest *wt, const u8 *data, size_t len)
        }
 
        os_free(decrypted);
+
+       wt->last_mgmt_valid = valid;
+}
+
+
+static void rx_mgmt_deauth_ack(struct wlantest *wt,
+                              const struct ieee80211_hdr *hdr)
+{
+       const struct ieee80211_mgmt *mgmt;
+       struct wlantest_bss *bss;
+       struct wlantest_sta *sta;
+
+       mgmt = (const struct ieee80211_mgmt *) hdr;
+       bss = bss_get(wt, mgmt->bssid);
+       if (bss == NULL)
+               return;
+       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0)
+               sta = sta_get(bss, mgmt->da);
+       else
+               sta = sta_get(bss, mgmt->sa);
+       if (sta == NULL)
+               return;
+
+       wpa_printf(MSG_DEBUG, "DEAUTH from " MACSTR " acknowledged by " MACSTR,
+                  MAC2STR(mgmt->sa), MAC2STR(mgmt->da));
+       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0) {
+               int c;
+               c = wt->last_mgmt_valid ?
+                       WLANTEST_STA_COUNTER_VALID_DEAUTH_RX_ACK :
+                       WLANTEST_STA_COUNTER_INVALID_DEAUTH_RX_ACK;
+               sta->counters[c]++;
+       }
+}
+
+
+static void rx_mgmt_disassoc_ack(struct wlantest *wt,
+                                const struct ieee80211_hdr *hdr)
+{
+       const struct ieee80211_mgmt *mgmt;
+       struct wlantest_bss *bss;
+       struct wlantest_sta *sta;
+
+       mgmt = (const struct ieee80211_mgmt *) hdr;
+       bss = bss_get(wt, mgmt->bssid);
+       if (bss == NULL)
+               return;
+       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0)
+               sta = sta_get(bss, mgmt->da);
+       else
+               sta = sta_get(bss, mgmt->sa);
+       if (sta == NULL)
+               return;
+
+       wpa_printf(MSG_DEBUG, "DISASSOC from " MACSTR " acknowledged by "
+                  MACSTR, MAC2STR(mgmt->sa), MAC2STR(mgmt->da));
+       if (os_memcmp(mgmt->sa, mgmt->bssid, ETH_ALEN) == 0) {
+               int c;
+               c = wt->last_mgmt_valid ?
+                       WLANTEST_STA_COUNTER_VALID_DISASSOC_RX_ACK :
+                       WLANTEST_STA_COUNTER_INVALID_DISASSOC_RX_ACK;
+               sta->counters[c]++;
+       }
+}
+
+
+void rx_mgmt_ack(struct wlantest *wt, const struct ieee80211_hdr *hdr)
+{
+       u16 fc, stype;
+       fc = le_to_host16(hdr->frame_control);
+       stype = WLAN_FC_GET_STYPE(fc);
+
+       wpa_printf(MSG_MSGDUMP, "MGMT ACK: stype=%u a1=" MACSTR " a2=" MACSTR
+                  " a3=" MACSTR,
+                  stype, MAC2STR(hdr->addr1), MAC2STR(hdr->addr2),
+                  MAC2STR(hdr->addr3));
+
+       switch (stype) {
+       case WLAN_FC_STYPE_DEAUTH:
+               rx_mgmt_deauth_ack(wt, hdr);
+               break;
+       case WLAN_FC_STYPE_DISASSOC:
+               rx_mgmt_disassoc_ack(wt, hdr);
+               break;
+       }
 }