src/drivers/driver_test.c

   1 /*
   2  * Testing driver interface for a simulated network driver
   3  * Copyright (c) 2004-2009, Jouni Malinen <j@w1.fi>
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License version 2 as
   7  * published by the Free Software Foundation.
   8  *
   9  * Alternatively, this software may be distributed under the terms of BSD
  10  * license.
  11  *
  12  * See README and COPYING for more details.
  13  */
  14
  15 /* Make sure we get winsock2.h for Windows build to get sockaddr_storage */
  16 #include "build_config.h"
  17 #ifdef CONFIG_NATIVE_WINDOWS
  18 #include <winsock2.h>
  19 #endif /* CONFIG_NATIVE_WINDOWS */
  20
  21 #include "utils/includes.h"
  22
  23 #ifndef CONFIG_NATIVE_WINDOWS
  24 #include <sys/un.h>
  25 #include <dirent.h>
  26 #include <sys/stat.h>
  27 #define DRIVER_TEST_UNIX
  28 #endif /* CONFIG_NATIVE_WINDOWS */
  29
  30 #include "utils/common.h"
  31 #include "utils/eloop.h"
  32 #include "utils/trace.h"
  33 #include "common/ieee802_11_defs.h"
  34 #include "crypto/sha1.h"
  35 #include "l2_packet/l2_packet.h"
  36 #include "driver.h"
  37
  38
  39 struct test_client_socket {
  40         struct test_client_socket *next;
  41         u8 addr[ETH_ALEN];
  42         struct sockaddr_un un;
  43         socklen_t unlen;
  44         struct test_driver_bss *bss;
  45 };
  46
  47 struct test_driver_bss {
  48         struct test_driver_bss *next;
  49         void *bss_ctx;
  50         char ifname[IFNAMSIZ + 1];
  51         u8 bssid[ETH_ALEN];
  52         u8 *ie;
  53         size_t ielen;
  54         u8 *wps_beacon_ie;
  55         size_t wps_beacon_ie_len;
  56         u8 *wps_probe_resp_ie;
  57         size_t wps_probe_resp_ie_len;
  58         u8 ssid[32];
  59         size_t ssid_len;
  60         int privacy;
  61 };
  62
  63 struct wpa_driver_test_global {
  64         int bss_add_used;
  65         u8 req_addr[ETH_ALEN];
  66 };
  67
  68 struct wpa_driver_test_data {
  69         struct wpa_driver_test_global *global;
  70         void *ctx;
  71         WPA_TRACE_REF(ctx);
  72         char ifname[IFNAMSIZ + 1];
  73         u8 own_addr[ETH_ALEN];
  74         int test_socket;
  75 #ifdef DRIVER_TEST_UNIX
  76         struct sockaddr_un hostapd_addr;
  77 #endif /* DRIVER_TEST_UNIX */
  78         int hostapd_addr_set;
  79         struct sockaddr_in hostapd_addr_udp;
  80         int hostapd_addr_udp_set;
  81         char *own_socket_path;
  82         char *test_dir;
  83         u8 bssid[ETH_ALEN];
  84         u8 ssid[32];
  85         size_t ssid_len;
  86 #define MAX_SCAN_RESULTS 30
  87         struct wpa_scan_res *scanres[MAX_SCAN_RESULTS];
  88         size_t num_scanres;
  89         int use_associnfo;
  90         u8 assoc_wpa_ie[80];
  91         size_t assoc_wpa_ie_len;
  92         int use_mlme;
  93         int associated;
  94         u8 *probe_req_ie;
  95         size_t probe_req_ie_len;
  96         int ibss;
  97         int privacy;
  98         int ap;
  99
 100         struct test_client_socket *cli;
 101         struct test_driver_bss *bss;
 102         int udp_port;
 103
 104         int alloc_iface_idx;
 105
 106         int probe_req_report;
 107 };
 108
 109
 110 static void wpa_driver_test_deinit(void *priv);
 111 static int wpa_driver_test_attach(struct wpa_driver_test_data *drv,
 112                                   const char *dir, int ap);
 113 static void wpa_driver_test_close_test_socket(
 114         struct wpa_driver_test_data *drv);
 115
 116
 117 static void test_driver_free_bss(struct test_driver_bss *bss)
 118 {
 119         os_free(bss->ie);
 120         os_free(bss->wps_beacon_ie);
 121         os_free(bss->wps_probe_resp_ie);
 122         os_free(bss);
 123 }
 124
 125
 126 static void test_driver_free_bsses(struct wpa_driver_test_data *drv)
 127 {
 128         struct test_driver_bss *bss, *prev_bss;
 129
 130         bss = drv->bss;
 131         while (bss) {
 132                 prev_bss = bss;
 133                 bss = bss->next;
 134                 test_driver_free_bss(prev_bss);
 135         }
 136
 137         drv->bss = NULL;
 138 }
 139
 140
 141 static struct test_client_socket *
 142 test_driver_get_cli(struct wpa_driver_test_data *drv, struct sockaddr_un *from,
 143                     socklen_t fromlen)
 144 {
 145         struct test_client_socket *cli = drv->cli;
 146
 147         while (cli) {
 148                 if (cli->unlen == fromlen &&
 149                     strncmp(cli->un.sun_path, from->sun_path,
 150                             fromlen - sizeof(cli->un.sun_family)) == 0)
 151                         return cli;
 152                 cli = cli->next;
 153         }
 154
 155         return NULL;
 156 }
 157
 158
 159 static int test_driver_send_eapol(void *priv, const u8 *addr, const u8 *data,
 160                                   size_t data_len, int encrypt,
 161                                   const u8 *own_addr)
 162 {
 163         struct wpa_driver_test_data *drv = priv;
 164         struct test_client_socket *cli;
 165         struct msghdr msg;
 166         struct iovec io[3];
 167         struct l2_ethhdr eth;
 168
 169         if (drv->test_socket < 0)
 170                 return -1;
 171
 172         cli = drv->cli;
 173         while (cli) {
 174                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
 175                         break;
 176                 cli = cli->next;
 177         }
 178
 179         if (!cli) {
 180                 wpa_printf(MSG_DEBUG, "%s: no destination client entry",
 181                            __func__);
 182                 return -1;
 183         }
 184
 185         memcpy(eth.h_dest, addr, ETH_ALEN);
 186         memcpy(eth.h_source, own_addr, ETH_ALEN);
 187         eth.h_proto = host_to_be16(ETH_P_EAPOL);
 188
 189         io[0].iov_base = "EAPOL ";
 190         io[0].iov_len = 6;
 191         io[1].iov_base = &eth;
 192         io[1].iov_len = sizeof(eth);
 193         io[2].iov_base = (u8 *) data;
 194         io[2].iov_len = data_len;
 195
 196         memset(&msg, 0, sizeof(msg));
 197         msg.msg_iov = io;
 198         msg.msg_iovlen = 3;
 199         msg.msg_name = &cli->un;
 200         msg.msg_namelen = cli->unlen;
 201         return sendmsg(drv->test_socket, &msg, 0);
 202 }
 203
 204
 205 static int test_driver_send_ether(void *priv, const u8 *dst, const u8 *src,
 206                                   u16 proto, const u8 *data, size_t data_len)
 207 {
 208         struct wpa_driver_test_data *drv = priv;
 209         struct msghdr msg;
 210         struct iovec io[3];
 211         struct l2_ethhdr eth;
 212         char desttxt[30];
 213         struct sockaddr_un addr;
 214         struct dirent *dent;
 215         DIR *dir;
 216         int ret = 0, broadcast = 0, count = 0;
 217
 218         if (drv->test_socket < 0 || drv->test_dir == NULL) {
 219                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d "
 220                            "test_dir=%p)",
 221                            __func__, drv->test_socket, drv->test_dir);
 222                 return -1;
 223         }
 224
 225         broadcast = memcmp(dst, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
 226         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dst));
 227
 228         memcpy(eth.h_dest, dst, ETH_ALEN);
 229         memcpy(eth.h_source, src, ETH_ALEN);
 230         eth.h_proto = host_to_be16(proto);
 231
 232         io[0].iov_base = "ETHER ";
 233         io[0].iov_len = 6;
 234         io[1].iov_base = &eth;
 235         io[1].iov_len = sizeof(eth);
 236         io[2].iov_base = (u8 *) data;
 237         io[2].iov_len = data_len;
 238
 239         memset(&msg, 0, sizeof(msg));
 240         msg.msg_iov = io;
 241         msg.msg_iovlen = 3;
 242
 243         dir = opendir(drv->test_dir);
 244         if (dir == NULL) {
 245                 perror("test_driver: opendir");
 246                 return -1;
 247         }
 248         while ((dent = readdir(dir))) {
 249 #ifdef _DIRENT_HAVE_D_TYPE
 250                 /* Skip the file if it is not a socket. Also accept
 251                  * DT_UNKNOWN (0) in case the C library or underlying file
 252                  * system does not support d_type. */
 253                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
 254                         continue;
 255 #endif /* _DIRENT_HAVE_D_TYPE */
 256                 if (strcmp(dent->d_name, ".") == 0 ||
 257                     strcmp(dent->d_name, "..") == 0)
 258                         continue;
 259
 260                 memset(&addr, 0, sizeof(addr));
 261                 addr.sun_family = AF_UNIX;
 262                 snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
 263                          drv->test_dir, dent->d_name);
 264
 265                 if (strcmp(addr.sun_path, drv->own_socket_path) == 0)
 266                         continue;
 267                 if (!broadcast && strstr(dent->d_name, desttxt) == NULL)
 268                         continue;
 269
 270                 wpa_printf(MSG_DEBUG, "%s: Send ether frame to %s",
 271                            __func__, dent->d_name);
 272
 273                 msg.msg_name = &addr;
 274                 msg.msg_namelen = sizeof(addr);
 275                 ret = sendmsg(drv->test_socket, &msg, 0);
 276                 if (ret < 0)
 277                         perror("driver_test: sendmsg");
 278                 count++;
 279         }
 280         closedir(dir);
 281
 282         if (!broadcast && count == 0) {
 283                 wpa_printf(MSG_DEBUG, "%s: Destination " MACSTR " not found",
 284                            __func__, MAC2STR(dst));
 285                 return -1;
 286         }
 287
 288         return ret;
 289 }
 290
 291
 292 static int wpa_driver_test_send_mlme(void *priv, const u8 *data,
 293                                      size_t data_len)
 294 {
 295         struct wpa_driver_test_data *drv = priv;
 296         struct msghdr msg;
 297         struct iovec io[2];
 298         const u8 *dest;
 299         struct sockaddr_un addr;
 300         struct dirent *dent;
 301         DIR *dir;
 302         int broadcast;
 303         int ret = 0;
 304         struct ieee80211_hdr *hdr;
 305         u16 fc;
 306 #ifdef HOSTAPD
 307         char desttxt[30];
 308 #endif /* HOSTAPD */
 309         union wpa_event_data event;
 310
 311         wpa_hexdump(MSG_MSGDUMP, "test_send_mlme", data, data_len);
 312         if (drv->test_socket < 0 || data_len < 10) {
 313                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d len=%lu"
 314                            " test_dir=%p)",
 315                            __func__, drv->test_socket,
 316                            (unsigned long) data_len,
 317                            drv->test_dir);
 318                 return -1;
 319         }
 320
 321         dest = data + 4;
 322         broadcast = os_memcmp(dest, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
 323
 324 #ifdef HOSTAPD
 325         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dest));
 326 #endif /* HOSTAPD */
 327
 328         io[0].iov_base = "MLME ";
 329         io[0].iov_len = 5;
 330         io[1].iov_base = (void *) data;
 331         io[1].iov_len = data_len;
 332
 333         os_memset(&msg, 0, sizeof(msg));
 334         msg.msg_iov = io;
 335         msg.msg_iovlen = 2;
 336
 337 #ifdef HOSTAPD
 338         if (drv->test_dir == NULL) {
 339                 wpa_printf(MSG_DEBUG, "%s: test_dir == NULL", __func__);
 340                 return -1;
 341         }
 342
 343         dir = opendir(drv->test_dir);
 344         if (dir == NULL) {
 345                 perror("test_driver: opendir");
 346                 return -1;
 347         }
 348         while ((dent = readdir(dir))) {
 349 #ifdef _DIRENT_HAVE_D_TYPE
 350                 /* Skip the file if it is not a socket. Also accept
 351                  * DT_UNKNOWN (0) in case the C library or underlying file
 352                  * system does not support d_type. */
 353                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
 354                         continue;
 355 #endif /* _DIRENT_HAVE_D_TYPE */
 356                 if (os_strcmp(dent->d_name, ".") == 0 ||
 357                     os_strcmp(dent->d_name, "..") == 0)
 358                         continue;
 359
 360                 os_memset(&addr, 0, sizeof(addr));
 361                 addr.sun_family = AF_UNIX;
 362                 os_snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
 363                             drv->test_dir, dent->d_name);
 364
 365                 if (os_strcmp(addr.sun_path, drv->own_socket_path) == 0)
 366                         continue;
 367                 if (!broadcast && os_strstr(dent->d_name, desttxt) == NULL)
 368                         continue;
 369
 370                 wpa_printf(MSG_DEBUG, "%s: Send management frame to %s",
 371                            __func__, dent->d_name);
 372
 373                 msg.msg_name = &addr;
 374                 msg.msg_namelen = sizeof(addr);
 375                 ret = sendmsg(drv->test_socket, &msg, 0);
 376                 if (ret < 0)
 377                         perror("driver_test: sendmsg(test_socket)");
 378         }
 379         closedir(dir);
 380 #else /* HOSTAPD */
 381
 382         if (os_memcmp(dest, drv->bssid, ETH_ALEN) == 0 ||
 383             drv->test_dir == NULL) {
 384                 if (drv->hostapd_addr_udp_set) {
 385                         msg.msg_name = &drv->hostapd_addr_udp;
 386                         msg.msg_namelen = sizeof(drv->hostapd_addr_udp);
 387                 } else {
 388 #ifdef DRIVER_TEST_UNIX
 389                         msg.msg_name = &drv->hostapd_addr;
 390                         msg.msg_namelen = sizeof(drv->hostapd_addr);
 391 #endif /* DRIVER_TEST_UNIX */
 392                 }
 393         } else if (broadcast) {
 394                 dir = opendir(drv->test_dir);
 395                 if (dir == NULL)
 396                         return -1;
 397                 while ((dent = readdir(dir))) {
 398 #ifdef _DIRENT_HAVE_D_TYPE
 399                         /* Skip the file if it is not a socket.
 400                          * Also accept DT_UNKNOWN (0) in case
 401                          * the C library or underlying file
 402                          * system does not support d_type. */
 403                         if (dent->d_type != DT_SOCK &&
 404                             dent->d_type != DT_UNKNOWN)
 405                                 continue;
 406 #endif /* _DIRENT_HAVE_D_TYPE */
 407                         if (os_strcmp(dent->d_name, ".") == 0 ||
 408                             os_strcmp(dent->d_name, "..") == 0)
 409                                 continue;
 410                         wpa_printf(MSG_DEBUG, "%s: Send broadcast MLME to %s",
 411                                    __func__, dent->d_name);
 412                         os_memset(&addr, 0, sizeof(addr));
 413                         addr.sun_family = AF_UNIX;
 414                         os_snprintf(addr.sun_path, sizeof(addr.sun_path),
 415                                     "%s/%s", drv->test_dir, dent->d_name);
 416
 417                         msg.msg_name = &addr;
 418                         msg.msg_namelen = sizeof(addr);
 419
 420                         ret = sendmsg(drv->test_socket, &msg, 0);
 421                         if (ret < 0)
 422                                 perror("driver_test: sendmsg(test_socket)");
 423                 }
 424                 closedir(dir);
 425                 return ret;
 426         } else {
 427                 struct stat st;
 428                 os_memset(&addr, 0, sizeof(addr));
 429                 addr.sun_family = AF_UNIX;
 430                 os_snprintf(addr.sun_path, sizeof(addr.sun_path),
 431                             "%s/AP-" MACSTR, drv->test_dir, MAC2STR(dest));
 432                 if (stat(addr.sun_path, &st) < 0) {
 433                         os_snprintf(addr.sun_path, sizeof(addr.sun_path),
 434                                     "%s/STA-" MACSTR,
 435                                     drv->test_dir, MAC2STR(dest));
 436                 }
 437                 msg.msg_name = &addr;
 438                 msg.msg_namelen = sizeof(addr);
 439         }
 440
 441         if (sendmsg(drv->test_socket, &msg, 0) < 0) {
 442                 perror("sendmsg(test_socket)");
 443                 return -1;
 444         }
 445 #endif /* HOSTAPD */
 446
 447         hdr = (struct ieee80211_hdr *) data;
 448         fc = le_to_host16(hdr->frame_control);
 449
 450         os_memset(&event, 0, sizeof(event));
 451         event.tx_status.type = WLAN_FC_GET_TYPE(fc);
 452         event.tx_status.stype = WLAN_FC_GET_STYPE(fc);
 453         event.tx_status.dst = hdr->addr1;
 454         event.tx_status.data = data;
 455         event.tx_status.data_len = data_len;
 456         event.tx_status.ack = ret >= 0;
 457         wpa_supplicant_event(drv->ctx, EVENT_TX_STATUS, &event);
 458
 459         return ret;
 460 }
 461
 462
 463 static void test_driver_scan(struct wpa_driver_test_data *drv,
 464                              struct sockaddr_un *from, socklen_t fromlen,
 465                              char *data)
 466 {
 467         char buf[512], *pos, *end;
 468         int ret;
 469         struct test_driver_bss *bss;
 470         u8 sa[ETH_ALEN];
 471         u8 ie[512];
 472         size_t ielen;
 473         union wpa_event_data event;
 474
 475         /* data: optional [ ' ' | STA-addr | ' ' | IEs(hex) ] */
 476
 477         wpa_printf(MSG_DEBUG, "test_driver: SCAN");
 478
 479         if (*data) {
 480                 if (*data != ' ' ||
 481                     hwaddr_aton(data + 1, sa)) {
 482                         wpa_printf(MSG_DEBUG, "test_driver: Unexpected SCAN "
 483                                    "command format");
 484                         return;
 485                 }
 486
 487                 data += 18;
 488                 while (*data == ' ')
 489                         data++;
 490                 ielen = os_strlen(data) / 2;
 491                 if (ielen > sizeof(ie))
 492                         ielen = sizeof(ie);
 493                 if (hexstr2bin(data, ie, ielen) < 0)
 494                         ielen = 0;
 495
 496                 wpa_printf(MSG_DEBUG, "test_driver: Scan from " MACSTR,
 497                            MAC2STR(sa));
 498                 wpa_hexdump(MSG_MSGDUMP, "test_driver: scan IEs", ie, ielen);
 499
 500                 os_memset(&event, 0, sizeof(event));
 501                 event.rx_probe_req.sa = sa;
 502                 event.rx_probe_req.ie = ie;
 503                 event.rx_probe_req.ie_len = ielen;
 504                 wpa_supplicant_event(drv->ctx, EVENT_RX_PROBE_REQ, &event);
 505         }
 506
 507         for (bss = drv->bss; bss; bss = bss->next) {
 508                 pos = buf;
 509                 end = buf + sizeof(buf);
 510
 511                 /* reply: SCANRESP BSSID SSID IEs */
 512                 ret = snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
 513                                MAC2STR(bss->bssid));
 514                 if (ret < 0 || ret >= end - pos)
 515                         return;
 516                 pos += ret;
 517                 pos += wpa_snprintf_hex(pos, end - pos,
 518                                         bss->ssid, bss->ssid_len);
 519                 ret = snprintf(pos, end - pos, " ");
 520                 if (ret < 0 || ret >= end - pos)
 521                         return;
 522                 pos += ret;
 523                 pos += wpa_snprintf_hex(pos, end - pos, bss->ie, bss->ielen);
 524                 pos += wpa_snprintf_hex(pos, end - pos, bss->wps_probe_resp_ie,
 525                                         bss->wps_probe_resp_ie_len);
 526
 527                 if (bss->privacy) {
 528                         ret = snprintf(pos, end - pos, " PRIVACY");
 529                         if (ret < 0 || ret >= end - pos)
 530                                 return;
 531                         pos += ret;
 532                 }
 533
 534                 sendto(drv->test_socket, buf, pos - buf, 0,
 535                        (struct sockaddr *) from, fromlen);
 536         }
 537 }
 538
 539
 540 static void test_driver_assoc(struct wpa_driver_test_data *drv,
 541                               struct sockaddr_un *from, socklen_t fromlen,
 542                               char *data)
 543 {
 544         struct test_client_socket *cli;
 545         u8 ie[256], ssid[32];
 546         size_t ielen, ssid_len = 0;
 547         char *pos, *pos2, cmd[50];
 548         struct test_driver_bss *bss;
 549
 550         /* data: STA-addr SSID(hex) IEs(hex) */
 551
 552         cli = os_zalloc(sizeof(*cli));
 553         if (cli == NULL)
 554                 return;
 555
 556         if (hwaddr_aton(data, cli->addr)) {
 557                 printf("test_socket: Invalid MAC address '%s' in ASSOC\n",
 558                        data);
 559                 os_free(cli);
 560                 return;
 561         }
 562         pos = data + 17;
 563         while (*pos == ' ')
 564                 pos++;
 565         pos2 = strchr(pos, ' ');
 566         ielen = 0;
 567         if (pos2) {
 568                 ssid_len = (pos2 - pos) / 2;
 569                 if (hexstr2bin(pos, ssid, ssid_len) < 0) {
 570                         wpa_printf(MSG_DEBUG, "%s: Invalid SSID", __func__);
 571                         os_free(cli);
 572                         return;
 573                 }
 574                 wpa_hexdump_ascii(MSG_DEBUG, "test_driver_assoc: SSID",
 575                                   ssid, ssid_len);
 576
 577                 pos = pos2 + 1;
 578                 ielen = strlen(pos) / 2;
 579                 if (ielen > sizeof(ie))
 580                         ielen = sizeof(ie);
 581                 if (hexstr2bin(pos, ie, ielen) < 0)
 582                         ielen = 0;
 583         }
 584
 585         for (bss = drv->bss; bss; bss = bss->next) {
 586                 if (bss->ssid_len == ssid_len &&
 587                     memcmp(bss->ssid, ssid, ssid_len) == 0)
 588                         break;
 589         }
 590         if (bss == NULL) {
 591                 wpa_printf(MSG_DEBUG, "%s: No matching SSID found from "
 592                            "configured BSSes", __func__);
 593                 os_free(cli);
 594                 return;
 595         }
 596
 597         cli->bss = bss;
 598         memcpy(&cli->un, from, sizeof(cli->un));
 599         cli->unlen = fromlen;
 600         cli->next = drv->cli;
 601         drv->cli = cli;
 602         wpa_hexdump_ascii(MSG_DEBUG, "test_socket: ASSOC sun_path",
 603                           (const u8 *) cli->un.sun_path,
 604                           cli->unlen - sizeof(cli->un.sun_family));
 605
 606         snprintf(cmd, sizeof(cmd), "ASSOCRESP " MACSTR " 0",
 607                  MAC2STR(bss->bssid));
 608         sendto(drv->test_socket, cmd, strlen(cmd), 0,
 609                (struct sockaddr *) from, fromlen);
 610
 611 #ifdef HOSTAPD
 612         if (hostapd_notif_assoc(bss->bss_ctx, cli->addr, ie, ielen) < 0)
 613                 wpa_printf(MSG_DEBUG, "test_driver: failed to add new STA");
 614 #endif /* HOSTAPD */
 615 }
 616
 617
 618 static void test_driver_disassoc(struct wpa_driver_test_data *drv,
 619                                  struct sockaddr_un *from, socklen_t fromlen)
 620 {
 621         struct test_client_socket *cli;
 622
 623         cli = test_driver_get_cli(drv, from, fromlen);
 624         if (!cli)
 625                 return;
 626
 627 #ifdef HOSTAPD
 628         hostapd_notif_disassoc(drv->ctx, cli->addr);
 629 #endif /* HOSTAPD */
 630 }
 631
 632
 633 static void test_driver_eapol(struct wpa_driver_test_data *drv,
 634                               struct sockaddr_un *from, socklen_t fromlen,
 635                               u8 *data, size_t datalen)
 636 {
 637 #ifdef HOSTAPD
 638         struct test_client_socket *cli;
 639 #endif /* HOSTAPD */
 640         const u8 *src = NULL;
 641
 642         if (datalen > 14) {
 643                 /* Skip Ethernet header */
 644                 src = data + ETH_ALEN;
 645                 wpa_printf(MSG_DEBUG, "test_driver: dst=" MACSTR " src="
 646                            MACSTR " proto=%04x",
 647                            MAC2STR(data), MAC2STR(src),
 648                            WPA_GET_BE16(data + 2 * ETH_ALEN));
 649                 data += 14;
 650                 datalen -= 14;
 651         }
 652 #ifdef HOSTAPD
 653         cli = test_driver_get_cli(drv, from, fromlen);
 654         if (cli) {
 655                 hostapd_eapol_receive(cli->bss->bss_ctx, cli->addr, data,
 656                                       datalen);
 657         } else {
 658                 wpa_printf(MSG_DEBUG, "test_socket: EAPOL from unknown "
 659                            "client");
 660         }
 661 #else /* HOSTAPD */
 662         if (src)
 663                 wpa_supplicant_rx_eapol(drv->ctx, src, data, datalen);
 664 #endif /* HOSTAPD */
 665 }
 666
 667
 668 static void test_driver_ether(struct wpa_driver_test_data *drv,
 669                               struct sockaddr_un *from, socklen_t fromlen,
 670                               u8 *data, size_t datalen)
 671 {
 672         struct l2_ethhdr *eth;
 673
 674         if (datalen < sizeof(*eth))
 675                 return;
 676
 677         eth = (struct l2_ethhdr *) data;
 678         wpa_printf(MSG_DEBUG, "test_driver: RX ETHER dst=" MACSTR " src="
 679                    MACSTR " proto=%04x",
 680                    MAC2STR(eth->h_dest), MAC2STR(eth->h_source),
 681                    be_to_host16(eth->h_proto));
 682
 683 #ifdef CONFIG_IEEE80211R
 684         if (be_to_host16(eth->h_proto) == ETH_P_RRB) {
 685                 union wpa_event_data ev;
 686                 os_memset(&ev, 0, sizeof(ev));
 687                 ev.ft_rrb_rx.src = eth->h_source;
 688                 ev.ft_rrb_rx.data = data + sizeof(*eth);
 689                 ev.ft_rrb_rx.data_len = datalen - sizeof(*eth);
 690         }
 691 #endif /* CONFIG_IEEE80211R */
 692 }
 693
 694
 695 static void test_driver_mlme(struct wpa_driver_test_data *drv,
 696                              struct sockaddr_un *from, socklen_t fromlen,
 697                              u8 *data, size_t datalen)
 698 {
 699         struct ieee80211_hdr *hdr;
 700         u16 fc;
 701         union wpa_event_data event;
 702
 703         hdr = (struct ieee80211_hdr *) data;
 704
 705         if (test_driver_get_cli(drv, from, fromlen) == NULL && datalen >= 16) {
 706                 struct test_client_socket *cli;
 707                 cli = os_zalloc(sizeof(*cli));
 708                 if (cli == NULL)
 709                         return;
 710                 wpa_printf(MSG_DEBUG, "Adding client entry for " MACSTR,
 711                            MAC2STR(hdr->addr2));
 712                 memcpy(cli->addr, hdr->addr2, ETH_ALEN);
 713                 memcpy(&cli->un, from, sizeof(cli->un));
 714                 cli->unlen = fromlen;
 715                 cli->next = drv->cli;
 716                 drv->cli = cli;
 717         }
 718
 719         wpa_hexdump(MSG_MSGDUMP, "test_driver_mlme: received frame",
 720                     data, datalen);
 721         fc = le_to_host16(hdr->frame_control);
 722         if (WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT) {
 723                 wpa_printf(MSG_ERROR, "%s: received non-mgmt frame",
 724                            __func__);
 725                 return;
 726         }
 727
 728         os_memset(&event, 0, sizeof(event));
 729         event.rx_mgmt.frame = data;
 730         event.rx_mgmt.frame_len = datalen;
 731         wpa_supplicant_event(drv->ctx, EVENT_RX_MGMT, &event);
 732 }
 733
 734
 735 static void test_driver_receive_unix(int sock, void *eloop_ctx, void *sock_ctx)
 736 {
 737         struct wpa_driver_test_data *drv = eloop_ctx;
 738         char buf[2000];
 739         int res;
 740         struct sockaddr_un from;
 741         socklen_t fromlen = sizeof(from);
 742
 743         res = recvfrom(sock, buf, sizeof(buf) - 1, 0,
 744                        (struct sockaddr *) &from, &fromlen);
 745         if (res < 0) {
 746                 perror("recvfrom(test_socket)");
 747                 return;
 748         }
 749         buf[res] = '\0';
 750
 751         wpa_printf(MSG_DEBUG, "test_driver: received %u bytes", res);
 752
 753         if (strncmp(buf, "SCAN", 4) == 0) {
 754                 test_driver_scan(drv, &from, fromlen, buf + 4);
 755         } else if (strncmp(buf, "ASSOC ", 6) == 0) {
 756                 test_driver_assoc(drv, &from, fromlen, buf + 6);
 757         } else if (strcmp(buf, "DISASSOC") == 0) {
 758                 test_driver_disassoc(drv, &from, fromlen);
 759         } else if (strncmp(buf, "EAPOL ", 6) == 0) {
 760                 test_driver_eapol(drv, &from, fromlen, (u8 *) buf + 6,
 761                                   res - 6);
 762         } else if (strncmp(buf, "ETHER ", 6) == 0) {
 763                 test_driver_ether(drv, &from, fromlen, (u8 *) buf + 6,
 764                                   res - 6);
 765         } else if (strncmp(buf, "MLME ", 5) == 0) {
 766                 test_driver_mlme(drv, &from, fromlen, (u8 *) buf + 5, res - 5);
 767         } else {
 768                 wpa_hexdump_ascii(MSG_DEBUG, "Unknown test_socket command",
 769                                   (u8 *) buf, res);
 770         }
 771 }
 772
 773
 774 static struct test_driver_bss *
 775 test_driver_get_bss(struct wpa_driver_test_data *drv, const char *ifname)
 776 {
 777         struct test_driver_bss *bss;
 778
 779         for (bss = drv->bss; bss; bss = bss->next) {
 780                 if (os_strcmp(bss->ifname, ifname) == 0)
 781                         return bss;
 782         }
 783         return NULL;
 784 }
 785
 786
 787 static int test_driver_set_generic_elem(const char *ifname, void *priv,
 788                                         const u8 *elem, size_t elem_len)
 789 {
 790         struct wpa_driver_test_data *drv = priv;
 791         struct test_driver_bss *bss;
 792
 793         bss = test_driver_get_bss(drv, ifname);
 794         if (bss == NULL)
 795                 return -1;
 796
 797         os_free(bss->ie);
 798
 799         if (elem == NULL) {
 800                 bss->ie = NULL;
 801                 bss->ielen = 0;
 802                 return 0;
 803         }
 804
 805         bss->ie = os_malloc(elem_len);
 806         if (bss->ie == NULL) {
 807                 bss->ielen = 0;
 808                 return -1;
 809         }
 810
 811         memcpy(bss->ie, elem, elem_len);
 812         bss->ielen = elem_len;
 813         return 0;
 814 }
 815
 816
 817 static int test_driver_set_ap_wps_ie(const char *ifname, void *priv,
 818                                      const struct wpabuf *beacon,
 819                                      const struct wpabuf *proberesp)
 820 {
 821         struct wpa_driver_test_data *drv = priv;
 822         struct test_driver_bss *bss;
 823
 824         bss = test_driver_get_bss(drv, ifname);
 825         if (bss == NULL)
 826                 return -1;
 827
 828         if (beacon == NULL)
 829                 wpa_printf(MSG_DEBUG, "test_driver: Clear Beacon WPS IE");
 830         else
 831                 wpa_hexdump_buf(MSG_DEBUG, "test_driver: Beacon WPS IE",
 832                                 beacon);
 833
 834         os_free(bss->wps_beacon_ie);
 835
 836         if (beacon == NULL) {
 837                 bss->wps_beacon_ie = NULL;
 838                 bss->wps_beacon_ie_len = 0;
 839         } else {
 840                 bss->wps_beacon_ie = os_malloc(wpabuf_len(beacon));
 841                 if (bss->wps_beacon_ie == NULL) {
 842                         bss->wps_beacon_ie_len = 0;
 843                         return -1;
 844                 }
 845
 846                 os_memcpy(bss->wps_beacon_ie, wpabuf_head(beacon),
 847                           wpabuf_len(beacon));
 848                 bss->wps_beacon_ie_len = wpabuf_len(beacon);
 849         }
 850
 851         if (proberesp == NULL)
 852                 wpa_printf(MSG_DEBUG, "test_driver: Clear Probe Response WPS "
 853                            "IE");
 854         else
 855                 wpa_hexdump_buf(MSG_DEBUG, "test_driver: Probe Response WPS "
 856                                 "IE", proberesp);
 857
 858         os_free(bss->wps_probe_resp_ie);
 859
 860         if (proberesp == NULL) {
 861                 bss->wps_probe_resp_ie = NULL;
 862                 bss->wps_probe_resp_ie_len = 0;
 863         } else {
 864                 bss->wps_probe_resp_ie = os_malloc(wpabuf_len(proberesp));
 865                 if (bss->wps_probe_resp_ie == NULL) {
 866                         bss->wps_probe_resp_ie_len = 0;
 867                         return -1;
 868                 }
 869
 870                 os_memcpy(bss->wps_probe_resp_ie, wpabuf_head(proberesp),
 871                           wpabuf_len(proberesp));
 872                 bss->wps_probe_resp_ie_len = wpabuf_len(proberesp);
 873         }
 874
 875         return 0;
 876 }
 877
 878
 879 static int test_driver_sta_deauth(void *priv, const u8 *own_addr,
 880                                   const u8 *addr, int reason)
 881 {
 882         struct wpa_driver_test_data *drv = priv;
 883         struct test_client_socket *cli;
 884
 885         if (drv->test_socket < 0)
 886                 return -1;
 887
 888         cli = drv->cli;
 889         while (cli) {
 890                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
 891                         break;
 892                 cli = cli->next;
 893         }
 894
 895         if (!cli)
 896                 return -1;
 897
 898         return sendto(drv->test_socket, "DEAUTH", 6, 0,
 899                       (struct sockaddr *) &cli->un, cli->unlen);
 900 }
 901
 902
 903 static int test_driver_sta_disassoc(void *priv, const u8 *own_addr,
 904                                     const u8 *addr, int reason)
 905 {
 906         struct wpa_driver_test_data *drv = priv;
 907         struct test_client_socket *cli;
 908
 909         if (drv->test_socket < 0)
 910                 return -1;
 911
 912         cli = drv->cli;
 913         while (cli) {
 914                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
 915                         break;
 916                 cli = cli->next;
 917         }
 918
 919         if (!cli)
 920                 return -1;
 921
 922         return sendto(drv->test_socket, "DISASSOC", 8, 0,
 923                       (struct sockaddr *) &cli->un, cli->unlen);
 924 }
 925
 926
 927 static int test_driver_bss_add(void *priv, const char *ifname, const u8 *bssid,
 928                                void *bss_ctx)
 929 {
 930         struct wpa_driver_test_data *drv = priv;
 931         struct test_driver_bss *bss;
 932
 933         wpa_printf(MSG_DEBUG, "%s(ifname=%s bssid=" MACSTR ")",
 934                    __func__, ifname, MAC2STR(bssid));
 935
 936         bss = os_zalloc(sizeof(*bss));
 937         if (bss == NULL)
 938                 return -1;
 939
 940         bss->bss_ctx = bss_ctx;
 941         os_strlcpy(bss->ifname, ifname, IFNAMSIZ);
 942         memcpy(bss->bssid, bssid, ETH_ALEN);
 943
 944         bss->next = drv->bss;
 945         drv->bss = bss;
 946         drv->global->bss_add_used = 1;
 947         os_memcpy(drv->global->req_addr, bssid, ETH_ALEN);
 948
 949         return 0;
 950 }
 951
 952
 953 static int test_driver_bss_remove(void *priv, const char *ifname)
 954 {
 955         struct wpa_driver_test_data *drv = priv;
 956         struct test_driver_bss *bss, *prev;
 957         struct test_client_socket *cli, *prev_c;
 958
 959         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
 960
 961         for (prev = NULL, bss = drv->bss; bss; prev = bss, bss = bss->next) {
 962                 if (strcmp(bss->ifname, ifname) != 0)
 963                         continue;
 964
 965                 if (prev)
 966                         prev->next = bss->next;
 967                 else
 968                         drv->bss = bss->next;
 969
 970                 for (prev_c = NULL, cli = drv->cli; cli;
 971                      prev_c = cli, cli = cli->next) {
 972                         if (cli->bss != bss)
 973                                 continue;
 974                         if (prev_c)
 975                                 prev_c->next = cli->next;
 976                         else
 977                                 drv->cli = cli->next;
 978                         os_free(cli);
 979                         break;
 980                 }
 981
 982                 test_driver_free_bss(bss);
 983                 return 0;
 984         }
 985
 986         return -1;
 987 }
 988
 989
 990 static int test_driver_if_add(const char *iface, void *priv,
 991                               enum wpa_driver_if_type type, const char *ifname,
 992                               const u8 *addr, void *bss_ctx)
 993 {
 994         wpa_printf(MSG_DEBUG, "%s(iface=%s type=%d ifname=%s bss_ctx=%p)",
 995                    __func__, iface, type, ifname, bss_ctx);
 996         if (type == WPA_IF_AP_BSS)
 997                 return test_driver_bss_add(priv, ifname, addr, bss_ctx);
 998         return 0;
 999 }
1000
1001
1002 static int test_driver_if_remove(void *priv, enum wpa_driver_if_type type,
1003                                  const char *ifname)
1004 {
1005         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s)", __func__, type, ifname);
1006         if (type == WPA_IF_AP_BSS)
1007                 return test_driver_bss_remove(priv, ifname);
1008         return 0;
1009 }
1010
1011
1012 static int test_driver_valid_bss_mask(void *priv, const u8 *addr,
1013                                       const u8 *mask)
1014 {
1015         return 0;
1016 }
1017
1018
1019 static int test_driver_set_ssid(const char *ifname, void *priv, const u8 *buf,
1020                                 int len)
1021 {
1022         struct wpa_driver_test_data *drv = priv;
1023         struct test_driver_bss *bss;
1024
1025         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
1026         wpa_hexdump_ascii(MSG_DEBUG, "test_driver_set_ssid: SSID", buf, len);
1027
1028         bss = test_driver_get_bss(drv, ifname);
1029         if (bss == NULL) {
1030                 wpa_printf(MSG_DEBUG, "%s(ifname=%s): failed to find BSS data",
1031                            __func__, ifname);
1032                 return -1;
1033         }
1034
1035         if (len < 0 || (size_t) len > sizeof(bss->ssid))
1036                 return -1;
1037
1038         os_memcpy(bss->ssid, buf, len);
1039         bss->ssid_len = len;
1040
1041         return 0;
1042 }
1043
1044
1045 static int test_driver_set_privacy(const char *ifname, void *priv, int enabled)
1046 {
1047         struct wpa_driver_test_data *drv = priv;
1048         struct test_driver_bss *bss;
1049
1050         wpa_printf(MSG_DEBUG, "%s(ifname=%s enabled=%d)",
1051                    __func__, ifname, enabled);
1052
1053         bss = test_driver_get_bss(drv, ifname);
1054         if (bss == NULL)
1055                 return -1;
1056
1057         bss->privacy = enabled;
1058
1059         return 0;
1060 }
1061
1062
1063 static int test_driver_set_sta_vlan(void *priv, const u8 *addr,
1064                                     const char *ifname, int vlan_id)
1065 {
1066         wpa_printf(MSG_DEBUG, "%s(addr=" MACSTR " ifname=%s vlan_id=%d)",
1067                    __func__, MAC2STR(addr), ifname, vlan_id);
1068         return 0;
1069 }
1070
1071
1072 static int test_driver_sta_add(const char *ifname, void *priv,
1073                                struct hostapd_sta_add_params *params)
1074 {
1075         struct wpa_driver_test_data *drv = priv;
1076         struct test_client_socket *cli;
1077         struct test_driver_bss *bss;
1078
1079         wpa_printf(MSG_DEBUG, "%s(ifname=%s addr=" MACSTR " aid=%d "
1080                    "capability=0x%x listen_interval=%d)",
1081                    __func__, ifname, MAC2STR(params->addr), params->aid,
1082                    params->capability, params->listen_interval);
1083         wpa_hexdump(MSG_DEBUG, "test_driver_sta_add - supp_rates",
1084                     params->supp_rates, params->supp_rates_len);
1085
1086         cli = drv->cli;
1087         while (cli) {
1088                 if (os_memcmp(cli->addr, params->addr, ETH_ALEN) == 0)
1089                         break;
1090                 cli = cli->next;
1091         }
1092         if (!cli) {
1093                 wpa_printf(MSG_DEBUG, "%s: no matching client entry",
1094                            __func__);
1095                 return -1;
1096         }
1097
1098         bss = test_driver_get_bss(drv, ifname);
1099         if (bss == NULL) {
1100                 wpa_printf(MSG_DEBUG, "%s: No matching interface found from "
1101                            "configured BSSes", __func__);
1102                 return -1;
1103         }
1104
1105         cli->bss = bss;
1106
1107         return 0;
1108 }
1109
1110
1111 static struct wpa_driver_test_data * test_alloc_data(void *ctx,
1112                                                      const char *ifname)
1113 {
1114         struct wpa_driver_test_data *drv;
1115
1116         drv = os_zalloc(sizeof(struct wpa_driver_test_data));
1117         if (drv == NULL) {
1118                 wpa_printf(MSG_ERROR, "Could not allocate memory for test "
1119                            "driver data");
1120                 return NULL;
1121         }
1122
1123         drv->ctx = ctx;
1124         wpa_trace_add_ref(drv, ctx, ctx);
1125         os_strlcpy(drv->ifname, ifname, IFNAMSIZ);
1126
1127         /* Generate a MAC address to help testing with multiple STAs */
1128         drv->own_addr[0] = 0x02; /* locally administered */
1129         sha1_prf((const u8 *) ifname, os_strlen(ifname),
1130                  "test mac addr generation",
1131                  NULL, 0, drv->own_addr + 1, ETH_ALEN - 1);
1132
1133         return drv;
1134 }
1135
1136
1137 static void * test_driver_init(struct hostapd_data *hapd,
1138                                struct wpa_init_params *params)
1139 {
1140         struct wpa_driver_test_data *drv;
1141         struct sockaddr_un addr_un;
1142         struct sockaddr_in addr_in;
1143         struct sockaddr *addr;
1144         socklen_t alen;
1145
1146         drv = test_alloc_data(hapd, params->ifname);
1147         if (drv == NULL)
1148                 return NULL;
1149         drv->ap = 1;
1150         drv->bss = os_zalloc(sizeof(*drv->bss));
1151         if (drv->bss == NULL) {
1152                 wpa_printf(MSG_ERROR, "Could not allocate memory for test "
1153                            "driver BSS data");
1154                 os_free(drv);
1155                 return NULL;
1156         }
1157
1158         drv->bss->bss_ctx = hapd;
1159         os_strlcpy(drv->bss->ifname, params->ifname, IFNAMSIZ);
1160         os_memcpy(drv->bss->bssid, drv->own_addr, ETH_ALEN);
1161         os_memcpy(params->own_addr, drv->own_addr, ETH_ALEN);
1162
1163         if (params->test_socket) {
1164                 if (os_strlen(params->test_socket) >=
1165                     sizeof(addr_un.sun_path)) {
1166                         printf("Too long test_socket path\n");
1167                         wpa_driver_test_deinit(drv);
1168                         return NULL;
1169                 }
1170                 if (strncmp(params->test_socket, "DIR:", 4) == 0) {
1171                         size_t len = strlen(params->test_socket) + 30;
1172                         drv->test_dir = os_strdup(params->test_socket + 4);
1173                         drv->own_socket_path = os_malloc(len);
1174                         if (drv->own_socket_path) {
1175                                 snprintf(drv->own_socket_path, len,
1176                                          "%s/AP-" MACSTR,
1177                                          params->test_socket + 4,
1178                                          MAC2STR(params->own_addr));
1179                         }
1180                 } else if (strncmp(params->test_socket, "UDP:", 4) == 0) {
1181                         drv->udp_port = atoi(params->test_socket + 4);
1182                 } else {
1183                         drv->own_socket_path = os_strdup(params->test_socket);
1184                 }
1185                 if (drv->own_socket_path == NULL && drv->udp_port == 0) {
1186                         wpa_driver_test_deinit(drv);
1187                         return NULL;
1188                 }
1189
1190                 drv->test_socket = socket(drv->udp_port ? PF_INET : PF_UNIX,
1191                                           SOCK_DGRAM, 0);
1192                 if (drv->test_socket < 0) {
1193                         perror("socket");
1194                         wpa_driver_test_deinit(drv);
1195                         return NULL;
1196                 }
1197
1198                 if (drv->udp_port) {
1199                         os_memset(&addr_in, 0, sizeof(addr_in));
1200                         addr_in.sin_family = AF_INET;
1201                         addr_in.sin_port = htons(drv->udp_port);
1202                         addr = (struct sockaddr *) &addr_in;
1203                         alen = sizeof(addr_in);
1204                 } else {
1205                         os_memset(&addr_un, 0, sizeof(addr_un));
1206                         addr_un.sun_family = AF_UNIX;
1207                         os_strlcpy(addr_un.sun_path, drv->own_socket_path,
1208                                    sizeof(addr_un.sun_path));
1209                         addr = (struct sockaddr *) &addr_un;
1210                         alen = sizeof(addr_un);
1211                 }
1212                 if (bind(drv->test_socket, addr, alen) < 0) {
1213                         perror("bind(PF_UNIX)");
1214                         close(drv->test_socket);
1215                         if (drv->own_socket_path)
1216                                 unlink(drv->own_socket_path);
1217                         wpa_driver_test_deinit(drv);
1218                         return NULL;
1219                 }
1220                 eloop_register_read_sock(drv->test_socket,
1221                                          test_driver_receive_unix, drv, NULL);
1222         } else
1223                 drv->test_socket = -1;
1224
1225         return drv;
1226 }
1227
1228
1229 static void wpa_driver_test_poll(void *eloop_ctx, void *timeout_ctx)
1230 {
1231         struct wpa_driver_test_data *drv = eloop_ctx;
1232
1233 #ifdef DRIVER_TEST_UNIX
1234         if (drv->associated && drv->hostapd_addr_set) {
1235                 struct stat st;
1236                 if (stat(drv->hostapd_addr.sun_path, &st) < 0) {
1237                         wpa_printf(MSG_DEBUG, "%s: lost connection to AP: %s",
1238                                    __func__, strerror(errno));
1239                         drv->associated = 0;
1240                         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1241                 }
1242         }
1243 #endif /* DRIVER_TEST_UNIX */
1244
1245         eloop_register_timeout(1, 0, wpa_driver_test_poll, drv, NULL);
1246 }
1247
1248
1249 static void wpa_driver_test_scan_timeout(void *eloop_ctx, void *timeout_ctx)
1250 {
1251         wpa_printf(MSG_DEBUG, "Scan timeout - try to get results");
1252         wpa_supplicant_event(timeout_ctx, EVENT_SCAN_RESULTS, NULL);
1253 }
1254
1255
1256 #ifdef DRIVER_TEST_UNIX
1257 static void wpa_driver_scan_dir(struct wpa_driver_test_data *drv,
1258                                 const char *path)
1259 {
1260         struct dirent *dent;
1261         DIR *dir;
1262         struct sockaddr_un addr;
1263         char cmd[512], *pos, *end;
1264         int ret;
1265
1266         dir = opendir(path);
1267         if (dir == NULL)
1268                 return;
1269
1270         end = cmd + sizeof(cmd);
1271         pos = cmd;
1272         ret = os_snprintf(pos, end - pos, "SCAN " MACSTR,
1273                           MAC2STR(drv->own_addr));
1274         if (ret >= 0 && ret < end - pos)
1275                 pos += ret;
1276         if (drv->probe_req_ie) {
1277                 ret = os_snprintf(pos, end - pos, " ");
1278                 if (ret >= 0 && ret < end - pos)
1279                         pos += ret;
1280                 pos += wpa_snprintf_hex(pos, end - pos, drv->probe_req_ie,
1281                                         drv->probe_req_ie_len);
1282         }
1283         end[-1] = '\0';
1284
1285         while ((dent = readdir(dir))) {
1286                 if (os_strncmp(dent->d_name, "AP-", 3) != 0 &&
1287                     os_strncmp(dent->d_name, "STA-", 4) != 0)
1288                         continue;
1289                 if (drv->own_socket_path) {
1290                         size_t olen, dlen;
1291                         olen = os_strlen(drv->own_socket_path);
1292                         dlen = os_strlen(dent->d_name);
1293                         if (olen >= dlen &&
1294                             os_strcmp(dent->d_name,
1295                                       drv->own_socket_path + olen - dlen) == 0)
1296                                 continue;
1297                 }
1298                 wpa_printf(MSG_DEBUG, "%s: SCAN %s", __func__, dent->d_name);
1299
1300                 os_memset(&addr, 0, sizeof(addr));
1301                 addr.sun_family = AF_UNIX;
1302                 os_snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
1303                             path, dent->d_name);
1304
1305                 if (sendto(drv->test_socket, cmd, os_strlen(cmd), 0,
1306                            (struct sockaddr *) &addr, sizeof(addr)) < 0) {
1307                         perror("sendto(test_socket)");
1308                 }
1309         }
1310         closedir(dir);
1311 }
1312 #endif /* DRIVER_TEST_UNIX */
1313
1314
1315 static int wpa_driver_test_scan(void *priv,
1316                                 struct wpa_driver_scan_params *params)
1317 {
1318         struct wpa_driver_test_data *drv = priv;
1319         size_t i;
1320
1321         wpa_printf(MSG_DEBUG, "%s: priv=%p", __func__, priv);
1322
1323         os_free(drv->probe_req_ie);
1324         if (params->extra_ies) {
1325                 drv->probe_req_ie = os_malloc(params->extra_ies_len);
1326                 if (drv->probe_req_ie == NULL) {
1327                         drv->probe_req_ie_len = 0;
1328                         return -1;
1329                 }
1330                 os_memcpy(drv->probe_req_ie, params->extra_ies,
1331                           params->extra_ies_len);
1332                 drv->probe_req_ie_len = params->extra_ies_len;
1333         } else {
1334                 drv->probe_req_ie = NULL;
1335                 drv->probe_req_ie_len = 0;
1336         }
1337
1338         for (i = 0; i < params->num_ssids; i++)
1339                 wpa_hexdump(MSG_DEBUG, "Scan SSID",
1340                             params->ssids[i].ssid, params->ssids[i].ssid_len);
1341         wpa_hexdump(MSG_DEBUG, "Scan extra IE(s)",
1342                     params->extra_ies, params->extra_ies_len);
1343
1344         drv->num_scanres = 0;
1345
1346 #ifdef DRIVER_TEST_UNIX
1347         if (drv->test_socket >= 0 && drv->test_dir)
1348                 wpa_driver_scan_dir(drv, drv->test_dir);
1349
1350         if (drv->test_socket >= 0 && drv->hostapd_addr_set &&
1351             sendto(drv->test_socket, "SCAN", 4, 0,
1352                    (struct sockaddr *) &drv->hostapd_addr,
1353                    sizeof(drv->hostapd_addr)) < 0) {
1354                 perror("sendto(test_socket)");
1355         }
1356 #endif /* DRIVER_TEST_UNIX */
1357
1358         if (drv->test_socket >= 0 && drv->hostapd_addr_udp_set &&
1359             sendto(drv->test_socket, "SCAN", 4, 0,
1360                    (struct sockaddr *) &drv->hostapd_addr_udp,
1361                    sizeof(drv->hostapd_addr_udp)) < 0) {
1362                 perror("sendto(test_socket)");
1363         }
1364
1365         eloop_cancel_timeout(wpa_driver_test_scan_timeout, drv, drv->ctx);
1366         eloop_register_timeout(1, 0, wpa_driver_test_scan_timeout, drv,
1367                                drv->ctx);
1368         return 0;
1369 }
1370
1371
1372 static struct wpa_scan_results * wpa_driver_test_get_scan_results2(void *priv)
1373 {
1374         struct wpa_driver_test_data *drv = priv;
1375         struct wpa_scan_results *res;
1376         size_t i;
1377
1378         res = os_zalloc(sizeof(*res));
1379         if (res == NULL)
1380                 return NULL;
1381
1382         res->res = os_zalloc(drv->num_scanres * sizeof(struct wpa_scan_res *));
1383         if (res->res == NULL) {
1384                 os_free(res);
1385                 return NULL;
1386         }
1387
1388         for (i = 0; i < drv->num_scanres; i++) {
1389                 struct wpa_scan_res *r;
1390                 if (drv->scanres[i] == NULL)
1391                         continue;
1392                 r = os_malloc(sizeof(*r) + drv->scanres[i]->ie_len);
1393                 if (r == NULL)
1394                         break;
1395                 os_memcpy(r, drv->scanres[i],
1396                           sizeof(*r) + drv->scanres[i]->ie_len);
1397                 res->res[res->num++] = r;
1398         }
1399
1400         return res;
1401 }
1402
1403
1404 static int wpa_driver_test_set_key(const char *ifname, void *priv,
1405                                    enum wpa_alg alg, const u8 *addr,
1406                                    int key_idx, int set_tx,
1407                                    const u8 *seq, size_t seq_len,
1408                                    const u8 *key, size_t key_len)
1409 {
1410         wpa_printf(MSG_DEBUG, "%s: ifname=%s priv=%p alg=%d key_idx=%d "
1411                    "set_tx=%d",
1412                    __func__, ifname, priv, alg, key_idx, set_tx);
1413         if (addr)
1414                 wpa_printf(MSG_DEBUG, "   addr=" MACSTR, MAC2STR(addr));
1415         if (seq)
1416                 wpa_hexdump(MSG_DEBUG, "   seq", seq, seq_len);
1417         if (key)
1418                 wpa_hexdump_key(MSG_DEBUG, "   key", key, key_len);
1419         return 0;
1420 }
1421
1422
1423 static int wpa_driver_update_mode(struct wpa_driver_test_data *drv, int ap)
1424 {
1425         if (ap && !drv->ap) {
1426                 wpa_driver_test_close_test_socket(drv);
1427                 wpa_driver_test_attach(drv, drv->test_dir, 1);
1428                 drv->ap = 1;
1429         } else if (!ap && drv->ap) {
1430                 wpa_driver_test_close_test_socket(drv);
1431                 wpa_driver_test_attach(drv, drv->test_dir, 0);
1432                 drv->ap = 0;
1433         }
1434
1435         return 0;
1436 }
1437
1438
1439 static int wpa_driver_test_associate(
1440         void *priv, struct wpa_driver_associate_params *params)
1441 {
1442         struct wpa_driver_test_data *drv = priv;
1443         wpa_printf(MSG_DEBUG, "%s: priv=%p freq=%d pairwise_suite=%d "
1444                    "group_suite=%d key_mgmt_suite=%d auth_alg=%d mode=%d",
1445                    __func__, priv, params->freq, params->pairwise_suite,
1446                    params->group_suite, params->key_mgmt_suite,
1447                    params->auth_alg, params->mode);
1448         if (params->bssid) {
1449                 wpa_printf(MSG_DEBUG, "   bssid=" MACSTR,
1450                            MAC2STR(params->bssid));
1451         }
1452         if (params->ssid) {
1453                 wpa_hexdump_ascii(MSG_DEBUG, "   ssid",
1454                                   params->ssid, params->ssid_len);
1455         }
1456         if (params->wpa_ie) {
1457                 wpa_hexdump(MSG_DEBUG, "   wpa_ie",
1458                             params->wpa_ie, params->wpa_ie_len);
1459                 drv->assoc_wpa_ie_len = params->wpa_ie_len;
1460                 if (drv->assoc_wpa_ie_len > sizeof(drv->assoc_wpa_ie))
1461                         drv->assoc_wpa_ie_len = sizeof(drv->assoc_wpa_ie);
1462                 os_memcpy(drv->assoc_wpa_ie, params->wpa_ie,
1463                           drv->assoc_wpa_ie_len);
1464         } else
1465                 drv->assoc_wpa_ie_len = 0;
1466
1467         wpa_driver_update_mode(drv, params->mode == IEEE80211_MODE_AP);
1468
1469         drv->ibss = params->mode == IEEE80211_MODE_IBSS;
1470         drv->privacy = params->key_mgmt_suite &
1471                 (WPA_KEY_MGMT_IEEE8021X |
1472                  WPA_KEY_MGMT_PSK |
1473                  WPA_KEY_MGMT_WPA_NONE |
1474                  WPA_KEY_MGMT_FT_IEEE8021X |
1475                  WPA_KEY_MGMT_FT_PSK |
1476                  WPA_KEY_MGMT_IEEE8021X_SHA256 |
1477                  WPA_KEY_MGMT_PSK_SHA256);
1478         if (params->wep_key_len[params->wep_tx_keyidx])
1479                 drv->privacy = 1;
1480
1481 #ifdef DRIVER_TEST_UNIX
1482         if (drv->test_dir && params->bssid &&
1483             params->mode != IEEE80211_MODE_IBSS) {
1484                 os_memset(&drv->hostapd_addr, 0, sizeof(drv->hostapd_addr));
1485                 drv->hostapd_addr.sun_family = AF_UNIX;
1486                 os_snprintf(drv->hostapd_addr.sun_path,
1487                             sizeof(drv->hostapd_addr.sun_path),
1488                             "%s/AP-" MACSTR,
1489                             drv->test_dir, MAC2STR(params->bssid));
1490                 drv->hostapd_addr_set = 1;
1491         }
1492 #endif /* DRIVER_TEST_UNIX */
1493
1494         if (params->mode == IEEE80211_MODE_AP) {
1495                 struct test_driver_bss *bss;
1496                 os_memcpy(drv->ssid, params->ssid, params->ssid_len);
1497                 drv->ssid_len = params->ssid_len;
1498
1499                 test_driver_free_bsses(drv);
1500                 bss = drv->bss = os_zalloc(sizeof(*drv->bss));
1501                 if (bss == NULL)
1502                         return -1;
1503                 os_strlcpy(bss->ifname, drv->ifname, IFNAMSIZ);
1504                 os_memcpy(bss->bssid, drv->own_addr, ETH_ALEN);
1505                 os_memcpy(bss->ssid, params->ssid, params->ssid_len);
1506                 bss->ssid_len = params->ssid_len;
1507                 bss->privacy = drv->privacy;
1508                 if (params->wpa_ie && params->wpa_ie_len) {
1509                         bss->ie = os_malloc(params->wpa_ie_len);
1510                         if (bss->ie) {
1511                                 os_memcpy(bss->ie, params->wpa_ie,
1512                                           params->wpa_ie_len);
1513                                 bss->ielen = params->wpa_ie_len;
1514                         }
1515                 }
1516         } else if (drv->test_socket >= 0 &&
1517                    (drv->hostapd_addr_set || drv->hostapd_addr_udp_set)) {
1518                 char cmd[200], *pos, *end;
1519                 int ret;
1520                 end = cmd + sizeof(cmd);
1521                 pos = cmd;
1522                 ret = os_snprintf(pos, end - pos, "ASSOC " MACSTR " ",
1523                                   MAC2STR(drv->own_addr));
1524                 if (ret >= 0 && ret < end - pos)
1525                         pos += ret;
1526                 pos += wpa_snprintf_hex(pos, end - pos, params->ssid,
1527                                         params->ssid_len);
1528                 ret = os_snprintf(pos, end - pos, " ");
1529                 if (ret >= 0 && ret < end - pos)
1530                         pos += ret;
1531                 pos += wpa_snprintf_hex(pos, end - pos, params->wpa_ie,
1532                                         params->wpa_ie_len);
1533                 end[-1] = '\0';
1534 #ifdef DRIVER_TEST_UNIX
1535                 if (drv->hostapd_addr_set &&
1536                     sendto(drv->test_socket, cmd, os_strlen(cmd), 0,
1537                            (struct sockaddr *) &drv->hostapd_addr,
1538                            sizeof(drv->hostapd_addr)) < 0) {
1539                         perror("sendto(test_socket)");
1540                         return -1;
1541                 }
1542 #endif /* DRIVER_TEST_UNIX */
1543                 if (drv->hostapd_addr_udp_set &&
1544                     sendto(drv->test_socket, cmd, os_strlen(cmd), 0,
1545                            (struct sockaddr *) &drv->hostapd_addr_udp,
1546                            sizeof(drv->hostapd_addr_udp)) < 0) {
1547                         perror("sendto(test_socket)");
1548                         return -1;
1549                 }
1550
1551                 os_memcpy(drv->ssid, params->ssid, params->ssid_len);
1552                 drv->ssid_len = params->ssid_len;
1553         } else {
1554                 drv->associated = 1;
1555                 if (params->mode == IEEE80211_MODE_IBSS) {
1556                         os_memcpy(drv->ssid, params->ssid, params->ssid_len);
1557                         drv->ssid_len = params->ssid_len;
1558                         if (params->bssid)
1559                                 os_memcpy(drv->bssid, params->bssid, ETH_ALEN);
1560                         else {
1561                                 os_get_random(drv->bssid, ETH_ALEN);
1562                                 drv->bssid[0] &= ~0x01;
1563                                 drv->bssid[0] |= 0x02;
1564                         }
1565                 }
1566                 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1567         }
1568
1569         return 0;
1570 }
1571
1572
1573 static int wpa_driver_test_get_bssid(void *priv, u8 *bssid)
1574 {
1575         struct wpa_driver_test_data *drv = priv;
1576         os_memcpy(bssid, drv->bssid, ETH_ALEN);
1577         return 0;
1578 }
1579
1580
1581 static int wpa_driver_test_get_ssid(void *priv, u8 *ssid)
1582 {
1583         struct wpa_driver_test_data *drv = priv;
1584         os_memcpy(ssid, drv->ssid, 32);
1585         return drv->ssid_len;
1586 }
1587
1588
1589 static int wpa_driver_test_send_disassoc(struct wpa_driver_test_data *drv)
1590 {
1591 #ifdef DRIVER_TEST_UNIX
1592         if (drv->test_socket >= 0 &&
1593             sendto(drv->test_socket, "DISASSOC", 8, 0,
1594                    (struct sockaddr *) &drv->hostapd_addr,
1595                    sizeof(drv->hostapd_addr)) < 0) {
1596                 perror("sendto(test_socket)");
1597                 return -1;
1598         }
1599 #endif /* DRIVER_TEST_UNIX */
1600         if (drv->test_socket >= 0 && drv->hostapd_addr_udp_set &&
1601             sendto(drv->test_socket, "DISASSOC", 8, 0,
1602                    (struct sockaddr *) &drv->hostapd_addr_udp,
1603                    sizeof(drv->hostapd_addr_udp)) < 0) {
1604                 perror("sendto(test_socket)");
1605                 return -1;
1606         }
1607         return 0;
1608 }
1609
1610
1611 static int wpa_driver_test_deauthenticate(void *priv, const u8 *addr,
1612                                           int reason_code)
1613 {
1614         struct wpa_driver_test_data *drv = priv;
1615         wpa_printf(MSG_DEBUG, "%s addr=" MACSTR " reason_code=%d",
1616                    __func__, MAC2STR(addr), reason_code);
1617         os_memset(drv->bssid, 0, ETH_ALEN);
1618         drv->associated = 0;
1619         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1620         return wpa_driver_test_send_disassoc(drv);
1621 }
1622
1623
1624 static int wpa_driver_test_disassociate(void *priv, const u8 *addr,
1625                                         int reason_code)
1626 {
1627         struct wpa_driver_test_data *drv = priv;
1628         wpa_printf(MSG_DEBUG, "%s addr=" MACSTR " reason_code=%d",
1629                    __func__, MAC2STR(addr), reason_code);
1630         os_memset(drv->bssid, 0, ETH_ALEN);
1631         drv->associated = 0;
1632         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1633         return wpa_driver_test_send_disassoc(drv);
1634 }
1635
1636
1637 static void wpa_driver_test_scanresp(struct wpa_driver_test_data *drv,
1638                                      struct sockaddr *from,
1639                                      socklen_t fromlen,
1640                                      const char *data)
1641 {
1642         struct wpa_scan_res *res;
1643         const char *pos, *pos2;
1644         size_t len;
1645         u8 *ie_pos, *ie_start, *ie_end;
1646 #define MAX_IE_LEN 1000
1647
1648         wpa_printf(MSG_DEBUG, "test_driver: SCANRESP %s", data);
1649         if (drv->num_scanres >= MAX_SCAN_RESULTS) {
1650                 wpa_printf(MSG_DEBUG, "test_driver: No room for the new scan "
1651                            "result");
1652                 return;
1653         }
1654
1655         /* SCANRESP BSSID SSID IEs */
1656
1657         res = os_zalloc(sizeof(*res) + MAX_IE_LEN);
1658         if (res == NULL)
1659                 return;
1660         ie_start = ie_pos = (u8 *) (res + 1);
1661         ie_end = ie_pos + MAX_IE_LEN;
1662
1663         if (hwaddr_aton(data, res->bssid)) {
1664                 wpa_printf(MSG_DEBUG, "test_driver: invalid BSSID in scanres");
1665                 os_free(res);
1666                 return;
1667         }
1668
1669         pos = data + 17;
1670         while (*pos == ' ')
1671                 pos++;
1672         pos2 = os_strchr(pos, ' ');
1673         if (pos2 == NULL) {
1674                 wpa_printf(MSG_DEBUG, "test_driver: invalid SSID termination "
1675                            "in scanres");
1676                 os_free(res);
1677                 return;
1678         }
1679         len = (pos2 - pos) / 2;
1680         if (len > 32)
1681                 len = 32;
1682         /*
1683          * Generate SSID IE from the SSID field since this IE is not included
1684          * in the main IE field.
1685          */
1686         *ie_pos++ = WLAN_EID_SSID;
1687         *ie_pos++ = len;
1688         if (hexstr2bin(pos, ie_pos, len) < 0) {
1689                 wpa_printf(MSG_DEBUG, "test_driver: invalid SSID in scanres");
1690                 os_free(res);
1691                 return;
1692         }
1693         ie_pos += len;
1694
1695         pos = pos2 + 1;
1696         pos2 = os_strchr(pos, ' ');
1697         if (pos2 == NULL)
1698                 len = os_strlen(pos) / 2;
1699         else
1700                 len = (pos2 - pos) / 2;
1701         if ((int) len > ie_end - ie_pos)
1702                 len = ie_end - ie_pos;
1703         if (hexstr2bin(pos, ie_pos, len) < 0) {
1704                 wpa_printf(MSG_DEBUG, "test_driver: invalid IEs in scanres");
1705                 os_free(res);
1706                 return;
1707         }
1708         ie_pos += len;
1709         res->ie_len = ie_pos - ie_start;
1710
1711         if (pos2) {
1712                 pos = pos2 + 1;
1713                 while (*pos == ' ')
1714                         pos++;
1715                 if (os_strstr(pos, "PRIVACY"))
1716                         res->caps |= IEEE80211_CAP_PRIVACY;
1717                 if (os_strstr(pos, "IBSS"))
1718                         res->caps |= IEEE80211_CAP_IBSS;
1719         }
1720
1721         os_free(drv->scanres[drv->num_scanres]);
1722         drv->scanres[drv->num_scanres++] = res;
1723 }
1724
1725
1726 static void wpa_driver_test_assocresp(struct wpa_driver_test_data *drv,
1727                                       struct sockaddr *from,
1728                                       socklen_t fromlen,
1729                                       const char *data)
1730 {
1731         /* ASSOCRESP BSSID <res> */
1732         if (hwaddr_aton(data, drv->bssid)) {
1733                 wpa_printf(MSG_DEBUG, "test_driver: invalid BSSID in "
1734                            "assocresp");
1735         }
1736         if (drv->use_associnfo) {
1737                 union wpa_event_data event;
1738                 os_memset(&event, 0, sizeof(event));
1739                 event.assoc_info.req_ies = drv->assoc_wpa_ie;
1740                 event.assoc_info.req_ies_len = drv->assoc_wpa_ie_len;
1741                 wpa_supplicant_event(drv->ctx, EVENT_ASSOCINFO, &event);
1742         }
1743         drv->associated = 1;
1744         wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1745 }
1746
1747
1748 static void wpa_driver_test_disassoc(struct wpa_driver_test_data *drv,
1749                                      struct sockaddr *from,
1750                                      socklen_t fromlen)
1751 {
1752         drv->associated = 0;
1753         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1754 }
1755
1756
1757 static void wpa_driver_test_eapol(struct wpa_driver_test_data *drv,
1758                                   struct sockaddr *from,
1759                                   socklen_t fromlen,
1760                                   const u8 *data, size_t data_len)
1761 {
1762         const u8 *src = drv->bssid;
1763
1764         if (data_len > 14) {
1765                 /* Skip Ethernet header */
1766                 src = data + ETH_ALEN;
1767                 data += 14;
1768                 data_len -= 14;
1769         }
1770 #ifndef HOSTAPD
1771         wpa_supplicant_rx_eapol(drv->ctx, src, data, data_len);
1772 #endif /* HOSTAPD */
1773 }
1774
1775
1776 static void wpa_driver_test_mlme(struct wpa_driver_test_data *drv,
1777                                  struct sockaddr *from,
1778                                  socklen_t fromlen,
1779                                  const u8 *data, size_t data_len)
1780 {
1781         union wpa_event_data event;
1782         os_memset(&event, 0, sizeof(event));
1783         event.mlme_rx.buf = data;
1784         event.mlme_rx.len = data_len;
1785         wpa_supplicant_event(drv->ctx, EVENT_MLME_RX, &event);
1786
1787         if (drv->probe_req_report && data_len >= 24) {
1788                 const struct ieee80211_mgmt *mgmt;
1789                 u16 fc;
1790
1791                 mgmt = (const struct ieee80211_mgmt *) data;
1792                 fc = le_to_host16(mgmt->frame_control);
1793                 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1794                     WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ) {
1795                         os_memset(&event, 0, sizeof(event));
1796                         event.rx_probe_req.sa = mgmt->sa;
1797                         event.rx_probe_req.ie = mgmt->u.probe_req.variable;
1798                         event.rx_probe_req.ie_len =
1799                                 data_len - (mgmt->u.probe_req.variable - data);
1800                         wpa_supplicant_event(drv->ctx, EVENT_RX_PROBE_REQ,
1801                                              &event);
1802                 }
1803         }
1804 }
1805
1806
1807 static void wpa_driver_test_scan_cmd(struct wpa_driver_test_data *drv,
1808                                      struct sockaddr *from,
1809                                      socklen_t fromlen,
1810                                      const u8 *data, size_t data_len)
1811 {
1812         char buf[512], *pos, *end;
1813         int ret;
1814
1815         /* data: optional [ STA-addr | ' ' | IEs(hex) ] */
1816
1817         if (!drv->ibss)
1818                 return;
1819
1820         pos = buf;
1821         end = buf + sizeof(buf);
1822
1823         /* reply: SCANRESP BSSID SSID IEs */
1824         ret = snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
1825                        MAC2STR(drv->bssid));
1826         if (ret < 0 || ret >= end - pos)
1827                 return;
1828         pos += ret;
1829         pos += wpa_snprintf_hex(pos, end - pos,
1830                                 drv->ssid, drv->ssid_len);
1831         ret = snprintf(pos, end - pos, " ");
1832         if (ret < 0 || ret >= end - pos)
1833                 return;
1834         pos += ret;
1835         pos += wpa_snprintf_hex(pos, end - pos, drv->assoc_wpa_ie,
1836                                 drv->assoc_wpa_ie_len);
1837
1838         if (drv->privacy) {
1839                 ret = snprintf(pos, end - pos, " PRIVACY");
1840                 if (ret < 0 || ret >= end - pos)
1841                         return;
1842                 pos += ret;
1843         }
1844
1845         ret = snprintf(pos, end - pos, " IBSS");
1846         if (ret < 0 || ret >= end - pos)
1847                 return;
1848         pos += ret;
1849
1850         sendto(drv->test_socket, buf, pos - buf, 0,
1851                (struct sockaddr *) from, fromlen);
1852 }
1853
1854
1855 static void wpa_driver_test_receive_unix(int sock, void *eloop_ctx,
1856                                          void *sock_ctx)
1857 {
1858         struct wpa_driver_test_data *drv = eloop_ctx;
1859         char *buf;
1860         int res;
1861         struct sockaddr_storage from;
1862         socklen_t fromlen = sizeof(from);
1863         const size_t buflen = 2000;
1864
1865         if (drv->ap) {
1866                 test_driver_receive_unix(sock, eloop_ctx, sock_ctx);
1867                 return;
1868         }
1869
1870         buf = os_malloc(buflen);
1871         if (buf == NULL)
1872                 return;
1873         res = recvfrom(sock, buf, buflen - 1, 0,
1874                        (struct sockaddr *) &from, &fromlen);
1875         if (res < 0) {
1876                 perror("recvfrom(test_socket)");
1877                 os_free(buf);
1878                 return;
1879         }
1880         buf[res] = '\0';
1881
1882         wpa_printf(MSG_DEBUG, "test_driver: received %u bytes", res);
1883
1884         if (os_strncmp(buf, "SCANRESP ", 9) == 0) {
1885                 wpa_driver_test_scanresp(drv, (struct sockaddr *) &from,
1886                                          fromlen, buf + 9);
1887         } else if (os_strncmp(buf, "ASSOCRESP ", 10) == 0) {
1888                 wpa_driver_test_assocresp(drv, (struct sockaddr *) &from,
1889                                           fromlen, buf + 10);
1890         } else if (os_strcmp(buf, "DISASSOC") == 0) {
1891                 wpa_driver_test_disassoc(drv, (struct sockaddr *) &from,
1892                                          fromlen);
1893         } else if (os_strcmp(buf, "DEAUTH") == 0) {
1894                 wpa_driver_test_disassoc(drv, (struct sockaddr *) &from,
1895                                          fromlen);
1896         } else if (os_strncmp(buf, "EAPOL ", 6) == 0) {
1897                 wpa_driver_test_eapol(drv, (struct sockaddr *) &from, fromlen,
1898                                       (const u8 *) buf + 6, res - 6);
1899         } else if (os_strncmp(buf, "MLME ", 5) == 0) {
1900                 wpa_driver_test_mlme(drv, (struct sockaddr *) &from, fromlen,
1901                                      (const u8 *) buf + 5, res - 5);
1902         } else if (os_strncmp(buf, "SCAN ", 5) == 0) {
1903                 wpa_driver_test_scan_cmd(drv, (struct sockaddr *) &from,
1904                                          fromlen,
1905                                          (const u8 *) buf + 5, res - 5);
1906         } else {
1907                 wpa_hexdump_ascii(MSG_DEBUG, "Unknown test_socket command",
1908                                   (u8 *) buf, res);
1909         }
1910         os_free(buf);
1911 }
1912
1913
1914 static void * wpa_driver_test_init2(void *ctx, const char *ifname,
1915                                     void *global_priv)
1916 {
1917         struct wpa_driver_test_data *drv;
1918         struct wpa_driver_test_global *global = global_priv;
1919
1920         drv = test_alloc_data(ctx, ifname);
1921         if (drv == NULL)
1922                 return NULL;
1923         drv->global = global_priv;
1924         drv->test_socket = -1;
1925
1926         /* Set dummy BSSID and SSID for testing. */
1927         drv->bssid[0] = 0x02;
1928         drv->bssid[1] = 0x00;
1929         drv->bssid[2] = 0x00;
1930         drv->bssid[3] = 0x00;
1931         drv->bssid[4] = 0x00;
1932         drv->bssid[5] = 0x01;
1933         os_memcpy(drv->ssid, "test", 5);
1934         drv->ssid_len = 4;
1935
1936         if (global->bss_add_used) {
1937                 os_memcpy(drv->own_addr, global->req_addr, ETH_ALEN);
1938                 global->bss_add_used = 0;
1939         }
1940
1941         eloop_register_timeout(1, 0, wpa_driver_test_poll, drv, NULL);
1942
1943         return drv;
1944 }
1945
1946
1947 static void wpa_driver_test_close_test_socket(struct wpa_driver_test_data *drv)
1948 {
1949         if (drv->test_socket >= 0) {
1950                 eloop_unregister_read_sock(drv->test_socket);
1951                 close(drv->test_socket);
1952                 drv->test_socket = -1;
1953         }
1954
1955         if (drv->own_socket_path) {
1956                 unlink(drv->own_socket_path);
1957                 os_free(drv->own_socket_path);
1958                 drv->own_socket_path = NULL;
1959         }
1960 }
1961
1962
1963 static void wpa_driver_test_deinit(void *priv)
1964 {
1965         struct wpa_driver_test_data *drv = priv;
1966         struct test_client_socket *cli, *prev;
1967         int i;
1968
1969         cli = drv->cli;
1970         while (cli) {
1971                 prev = cli;
1972                 cli = cli->next;
1973                 os_free(prev);
1974         }
1975
1976 #ifdef HOSTAPD
1977         /* There should be only one BSS remaining at this point. */
1978         if (drv->bss == NULL)
1979                 wpa_printf(MSG_ERROR, "%s: drv->bss == NULL", __func__);
1980         else if (drv->bss->next)
1981                 wpa_printf(MSG_ERROR, "%s: drv->bss->next != NULL", __func__);
1982 #endif /* HOSTAPD */
1983
1984         test_driver_free_bsses(drv);
1985
1986         wpa_driver_test_close_test_socket(drv);
1987         eloop_cancel_timeout(wpa_driver_test_scan_timeout, drv, drv->ctx);
1988         eloop_cancel_timeout(wpa_driver_test_poll, drv, NULL);
1989         os_free(drv->test_dir);
1990         for (i = 0; i < MAX_SCAN_RESULTS; i++)
1991                 os_free(drv->scanres[i]);
1992         os_free(drv->probe_req_ie);
1993         wpa_trace_remove_ref(drv, ctx, drv->ctx);
1994         os_free(drv);
1995 }
1996
1997
1998 static int wpa_driver_test_attach(struct wpa_driver_test_data *drv,
1999                                   const char *dir, int ap)
2000 {
2001 #ifdef DRIVER_TEST_UNIX
2002         static unsigned int counter = 0;
2003         struct sockaddr_un addr;
2004         size_t len;
2005
2006         os_free(drv->own_socket_path);
2007         if (dir) {
2008                 len = os_strlen(dir) + 30;
2009                 drv->own_socket_path = os_malloc(len);
2010                 if (drv->own_socket_path == NULL)
2011                         return -1;
2012                 os_snprintf(drv->own_socket_path, len, "%s/%s-" MACSTR,
2013                             dir, ap ? "AP" : "STA", MAC2STR(drv->own_addr));
2014         } else {
2015                 drv->own_socket_path = os_malloc(100);
2016                 if (drv->own_socket_path == NULL)
2017                         return -1;
2018                 os_snprintf(drv->own_socket_path, 100,
2019                             "/tmp/wpa_supplicant_test-%d-%d",
2020                             getpid(), counter++);
2021         }
2022
2023         drv->test_socket = socket(PF_UNIX, SOCK_DGRAM, 0);
2024         if (drv->test_socket < 0) {
2025                 perror("socket(PF_UNIX)");
2026                 os_free(drv->own_socket_path);
2027                 drv->own_socket_path = NULL;
2028                 return -1;
2029         }
2030
2031         os_memset(&addr, 0, sizeof(addr));
2032         addr.sun_family = AF_UNIX;
2033         os_strlcpy(addr.sun_path, drv->own_socket_path, sizeof(addr.sun_path));
2034         if (bind(drv->test_socket, (struct sockaddr *) &addr,
2035                  sizeof(addr)) < 0) {
2036                 perror("bind(PF_UNIX)");
2037                 close(drv->test_socket);
2038                 unlink(drv->own_socket_path);
2039                 os_free(drv->own_socket_path);
2040                 drv->own_socket_path = NULL;
2041                 return -1;
2042         }
2043
2044         eloop_register_read_sock(drv->test_socket,
2045                                  wpa_driver_test_receive_unix, drv, NULL);
2046
2047         return 0;
2048 #else /* DRIVER_TEST_UNIX */
2049         return -1;
2050 #endif /* DRIVER_TEST_UNIX */
2051 }
2052
2053
2054 static int wpa_driver_test_attach_udp(struct wpa_driver_test_data *drv,
2055                                       char *dst)
2056 {
2057         char *pos;
2058
2059         pos = os_strchr(dst, ':');
2060         if (pos == NULL)
2061                 return -1;
2062         *pos++ = '\0';
2063         wpa_printf(MSG_DEBUG, "%s: addr=%s port=%s", __func__, dst, pos);
2064
2065         drv->test_socket = socket(PF_INET, SOCK_DGRAM, 0);
2066         if (drv->test_socket < 0) {
2067                 perror("socket(PF_INET)");
2068                 return -1;
2069         }
2070
2071         os_memset(&drv->hostapd_addr_udp, 0, sizeof(drv->hostapd_addr_udp));
2072         drv->hostapd_addr_udp.sin_family = AF_INET;
2073 #if defined(CONFIG_NATIVE_WINDOWS) || defined(CONFIG_ANSI_C_EXTRA)
2074         {
2075                 int a[4];
2076                 u8 *pos;
2077                 sscanf(dst, "%d.%d.%d.%d", &a[0], &a[1], &a[2], &a[3]);
2078                 pos = (u8 *) &drv->hostapd_addr_udp.sin_addr;
2079                 *pos++ = a[0];
2080                 *pos++ = a[1];
2081                 *pos++ = a[2];
2082                 *pos++ = a[3];
2083         }
2084 #else /* CONFIG_NATIVE_WINDOWS or CONFIG_ANSI_C_EXTRA */
2085         inet_aton(dst, &drv->hostapd_addr_udp.sin_addr);
2086 #endif /* CONFIG_NATIVE_WINDOWS or CONFIG_ANSI_C_EXTRA */
2087         drv->hostapd_addr_udp.sin_port = htons(atoi(pos));
2088
2089         drv->hostapd_addr_udp_set = 1;
2090
2091         eloop_register_read_sock(drv->test_socket,
2092                                  wpa_driver_test_receive_unix, drv, NULL);
2093
2094         return 0;
2095 }
2096
2097
2098 static int wpa_driver_test_set_param(void *priv, const char *param)
2099 {
2100         struct wpa_driver_test_data *drv = priv;
2101         const char *pos;
2102
2103         wpa_printf(MSG_DEBUG, "%s: param='%s'", __func__, param);
2104         if (param == NULL)
2105                 return 0;
2106
2107         wpa_driver_test_close_test_socket(drv);
2108
2109 #ifdef DRIVER_TEST_UNIX
2110         pos = os_strstr(param, "test_socket=");
2111         if (pos) {
2112                 const char *pos2;
2113                 size_t len;
2114
2115                 pos += 12;
2116                 pos2 = os_strchr(pos, ' ');
2117                 if (pos2)
2118                         len = pos2 - pos;
2119                 else
2120                         len = os_strlen(pos);
2121                 if (len > sizeof(drv->hostapd_addr.sun_path))
2122                         return -1;
2123                 os_memset(&drv->hostapd_addr, 0, sizeof(drv->hostapd_addr));
2124                 drv->hostapd_addr.sun_family = AF_UNIX;
2125                 os_memcpy(drv->hostapd_addr.sun_path, pos, len);
2126                 drv->hostapd_addr_set = 1;
2127         }
2128 #endif /* DRIVER_TEST_UNIX */
2129
2130         pos = os_strstr(param, "test_dir=");
2131         if (pos) {
2132                 char *end;
2133                 os_free(drv->test_dir);
2134                 drv->test_dir = os_strdup(pos + 9);
2135                 if (drv->test_dir == NULL)
2136                         return -1;
2137                 end = os_strchr(drv->test_dir, ' ');
2138                 if (end)
2139                         *end = '\0';
2140                 if (wpa_driver_test_attach(drv, drv->test_dir, 0))
2141                         return -1;
2142         } else {
2143                 pos = os_strstr(param, "test_udp=");
2144                 if (pos) {
2145                         char *dst, *epos;
2146                         dst = os_strdup(pos + 9);
2147                         if (dst == NULL)
2148                                 return -1;
2149                         epos = os_strchr(dst, ' ');
2150                         if (epos)
2151                                 *epos = '\0';
2152                         if (wpa_driver_test_attach_udp(drv, dst))
2153                                 return -1;
2154                         os_free(dst);
2155                 } else if (wpa_driver_test_attach(drv, NULL, 0))
2156                         return -1;
2157         }
2158
2159         if (os_strstr(param, "use_associnfo=1")) {
2160                 wpa_printf(MSG_DEBUG, "test_driver: Use AssocInfo events");
2161                 drv->use_associnfo = 1;
2162         }
2163
2164 #ifdef CONFIG_CLIENT_MLME
2165         if (os_strstr(param, "use_mlme=1")) {
2166                 wpa_printf(MSG_DEBUG, "test_driver: Use internal MLME");
2167                 drv->use_mlme = 1;
2168         }
2169 #endif /* CONFIG_CLIENT_MLME */
2170
2171         return 0;
2172 }
2173
2174
2175 static const u8 * wpa_driver_test_get_mac_addr(void *priv)
2176 {
2177         struct wpa_driver_test_data *drv = priv;
2178         wpa_printf(MSG_DEBUG, "%s", __func__);
2179         return drv->own_addr;
2180 }
2181
2182
2183 static int wpa_driver_test_send_eapol(void *priv, const u8 *dest, u16 proto,
2184                                       const u8 *data, size_t data_len)
2185 {
2186         struct wpa_driver_test_data *drv = priv;
2187         char *msg;
2188         size_t msg_len;
2189         struct l2_ethhdr eth;
2190         struct sockaddr *addr;
2191         socklen_t alen;
2192 #ifdef DRIVER_TEST_UNIX
2193         struct sockaddr_un addr_un;
2194 #endif /* DRIVER_TEST_UNIX */
2195
2196         wpa_hexdump(MSG_MSGDUMP, "test_send_eapol TX frame", data, data_len);
2197
2198         os_memset(&eth, 0, sizeof(eth));
2199         os_memcpy(eth.h_dest, dest, ETH_ALEN);
2200         os_memcpy(eth.h_source, drv->own_addr, ETH_ALEN);
2201         eth.h_proto = host_to_be16(proto);
2202
2203         msg_len = 6 + sizeof(eth) + data_len;
2204         msg = os_malloc(msg_len);
2205         if (msg == NULL)
2206                 return -1;
2207         os_memcpy(msg, "EAPOL ", 6);
2208         os_memcpy(msg + 6, &eth, sizeof(eth));
2209         os_memcpy(msg + 6 + sizeof(eth), data, data_len);
2210
2211         if (os_memcmp(dest, drv->bssid, ETH_ALEN) == 0 ||
2212             drv->test_dir == NULL) {
2213                 if (drv->hostapd_addr_udp_set) {
2214                         addr = (struct sockaddr *) &drv->hostapd_addr_udp;
2215                         alen = sizeof(drv->hostapd_addr_udp);
2216                 } else {
2217 #ifdef DRIVER_TEST_UNIX
2218                         addr = (struct sockaddr *) &drv->hostapd_addr;
2219                         alen = sizeof(drv->hostapd_addr);
2220 #else /* DRIVER_TEST_UNIX */
2221                         os_free(msg);
2222                         return -1;
2223 #endif /* DRIVER_TEST_UNIX */
2224                 }
2225         } else {
2226 #ifdef DRIVER_TEST_UNIX
2227                 struct stat st;
2228                 os_memset(&addr_un, 0, sizeof(addr_un));
2229                 addr_un.sun_family = AF_UNIX;
2230                 os_snprintf(addr_un.sun_path, sizeof(addr_un.sun_path),
2231                             "%s/STA-" MACSTR, drv->test_dir, MAC2STR(dest));
2232                 if (stat(addr_un.sun_path, &st) < 0) {
2233                         os_snprintf(addr_un.sun_path, sizeof(addr_un.sun_path),
2234                                     "%s/AP-" MACSTR,
2235                                     drv->test_dir, MAC2STR(dest));
2236                 }
2237                 addr = (struct sockaddr *) &addr_un;
2238                 alen = sizeof(addr_un);
2239 #else /* DRIVER_TEST_UNIX */
2240                 os_free(msg);
2241                 return -1;
2242 #endif /* DRIVER_TEST_UNIX */
2243         }
2244
2245         if (sendto(drv->test_socket, msg, msg_len, 0, addr, alen) < 0) {
2246                 perror("sendmsg(test_socket)");
2247                 os_free(msg);
2248                 return -1;
2249         }
2250
2251         os_free(msg);
2252         return 0;
2253 }
2254
2255
2256 static int wpa_driver_test_get_capa(void *priv, struct wpa_driver_capa *capa)
2257 {
2258         struct wpa_driver_test_data *drv = priv;
2259         os_memset(capa, 0, sizeof(*capa));
2260         capa->key_mgmt = WPA_DRIVER_CAPA_KEY_MGMT_WPA |
2261                 WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
2262                 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
2263                 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK |
2264                 WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE |
2265                 WPA_DRIVER_CAPA_KEY_MGMT_FT |
2266                 WPA_DRIVER_CAPA_KEY_MGMT_FT_PSK;
2267         capa->enc = WPA_DRIVER_CAPA_ENC_WEP40 |
2268                 WPA_DRIVER_CAPA_ENC_WEP104 |
2269                 WPA_DRIVER_CAPA_ENC_TKIP |
2270                 WPA_DRIVER_CAPA_ENC_CCMP;
2271         capa->auth = WPA_DRIVER_AUTH_OPEN |
2272                 WPA_DRIVER_AUTH_SHARED |
2273                 WPA_DRIVER_AUTH_LEAP;
2274         if (drv->use_mlme)
2275                 capa->flags |= WPA_DRIVER_FLAGS_USER_SPACE_MLME;
2276         capa->flags |= WPA_DRIVER_FLAGS_AP;
2277         capa->max_scan_ssids = 2;
2278
2279         return 0;
2280 }
2281
2282
2283 static int wpa_driver_test_mlme_setprotection(void *priv, const u8 *addr,
2284                                               int protect_type,
2285                                               int key_type)
2286 {
2287         wpa_printf(MSG_DEBUG, "%s: protect_type=%d key_type=%d",
2288                    __func__, protect_type, key_type);
2289
2290         if (addr) {
2291                 wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR,
2292                            __func__, MAC2STR(addr));
2293         }
2294
2295         return 0;
2296 }
2297
2298
2299 static int wpa_driver_test_set_channel(void *priv,
2300                                        enum hostapd_hw_mode phymode,
2301                                        int chan, int freq)
2302 {
2303         wpa_printf(MSG_DEBUG, "%s: phymode=%d chan=%d freq=%d",
2304                    __func__, phymode, chan, freq);
2305         return 0;
2306 }
2307
2308
2309 static int wpa_driver_test_mlme_add_sta(void *priv, const u8 *addr,
2310                                         const u8 *supp_rates,
2311                                         size_t supp_rates_len)
2312 {
2313         wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR, __func__, MAC2STR(addr));
2314         return 0;
2315 }
2316
2317
2318 static int wpa_driver_test_mlme_remove_sta(void *priv, const u8 *addr)
2319 {
2320         wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR, __func__, MAC2STR(addr));
2321         return 0;
2322 }
2323
2324
2325 static int wpa_driver_test_set_ssid(void *priv, const u8 *ssid,
2326                                     size_t ssid_len)
2327 {
2328         wpa_printf(MSG_DEBUG, "%s", __func__);
2329         return 0;
2330 }
2331
2332
2333 static int wpa_driver_test_set_bssid(void *priv, const u8 *bssid)
2334 {
2335         wpa_printf(MSG_DEBUG, "%s: bssid=" MACSTR, __func__, MAC2STR(bssid));
2336         return 0;
2337 }
2338
2339
2340 static void * wpa_driver_test_global_init(void)
2341 {
2342         struct wpa_driver_test_global *global;
2343
2344         global = os_zalloc(sizeof(*global));
2345         return global;
2346 }
2347
2348
2349 static void wpa_driver_test_global_deinit(void *priv)
2350 {
2351         struct wpa_driver_test_global *global = priv;
2352         os_free(global);
2353 }
2354
2355
2356 static struct wpa_interface_info *
2357 wpa_driver_test_get_interfaces(void *global_priv)
2358 {
2359         /* struct wpa_driver_test_global *global = priv; */
2360         struct wpa_interface_info *iface;
2361
2362         iface = os_zalloc(sizeof(*iface));
2363         if (iface == NULL)
2364                 return iface;
2365         iface->ifname = os_strdup("sta0");
2366         iface->desc = os_strdup("test interface 0");
2367         iface->drv_name = "test";
2368         iface->next = os_zalloc(sizeof(*iface));
2369         if (iface->next) {
2370                 iface->next->ifname = os_strdup("sta1");
2371                 iface->next->desc = os_strdup("test interface 1");
2372                 iface->next->drv_name = "test";
2373         }
2374
2375         return iface;
2376 }
2377
2378
2379 static struct hostapd_hw_modes *
2380 wpa_driver_test_get_hw_feature_data(void *priv, u16 *num_modes, u16 *flags)
2381 {
2382         struct hostapd_hw_modes *modes;
2383         size_t i;
2384
2385         *num_modes = 3;
2386         *flags = 0;
2387         modes = os_zalloc(*num_modes * sizeof(struct hostapd_hw_modes));
2388         if (modes == NULL)
2389                 return NULL;
2390         modes[0].mode = HOSTAPD_MODE_IEEE80211G;
2391         modes[0].num_channels = 11;
2392         modes[0].num_rates = 12;
2393         modes[0].channels =
2394                 os_zalloc(11 * sizeof(struct hostapd_channel_data));
2395         modes[0].rates = os_zalloc(modes[0].num_rates * sizeof(int));
2396         if (modes[0].channels == NULL || modes[0].rates == NULL)
2397                 goto fail;
2398         for (i = 0; i < 11; i++) {
2399                 modes[0].channels[i].chan = i + 1;
2400                 modes[0].channels[i].freq = 2412 + 5 * i;
2401                 modes[0].channels[i].flag = 0;
2402         }
2403         modes[0].rates[0] = 10;
2404         modes[0].rates[1] = 20;
2405         modes[0].rates[2] = 55;
2406         modes[0].rates[3] = 110;
2407         modes[0].rates[4] = 60;
2408         modes[0].rates[5] = 90;
2409         modes[0].rates[6] = 120;
2410         modes[0].rates[7] = 180;
2411         modes[0].rates[8] = 240;
2412         modes[0].rates[9] = 360;
2413         modes[0].rates[10] = 480;
2414         modes[0].rates[11] = 540;
2415
2416         modes[1].mode = HOSTAPD_MODE_IEEE80211B;
2417         modes[1].num_channels = 11;
2418         modes[1].num_rates = 4;
2419         modes[1].channels =
2420                 os_zalloc(11 * sizeof(struct hostapd_channel_data));
2421         modes[1].rates = os_zalloc(modes[1].num_rates * sizeof(int));
2422         if (modes[1].channels == NULL || modes[1].rates == NULL)
2423                 goto fail;
2424         for (i = 0; i < 11; i++) {
2425                 modes[1].channels[i].chan = i + 1;
2426                 modes[1].channels[i].freq = 2412 + 5 * i;
2427                 modes[1].channels[i].flag = 0;
2428         }
2429         modes[1].rates[0] = 10;
2430         modes[1].rates[1] = 20;
2431         modes[1].rates[2] = 55;
2432         modes[1].rates[3] = 110;
2433
2434         modes[2].mode = HOSTAPD_MODE_IEEE80211A;
2435         modes[2].num_channels = 1;
2436         modes[2].num_rates = 8;
2437         modes[2].channels = os_zalloc(sizeof(struct hostapd_channel_data));
2438         modes[2].rates = os_zalloc(modes[2].num_rates * sizeof(int));
2439         if (modes[2].channels == NULL || modes[2].rates == NULL)
2440                 goto fail;
2441         modes[2].channels[0].chan = 60;
2442         modes[2].channels[0].freq = 5300;
2443         modes[2].channels[0].flag = 0;
2444         modes[2].rates[0] = 60;
2445         modes[2].rates[1] = 90;
2446         modes[2].rates[2] = 120;
2447         modes[2].rates[3] = 180;
2448         modes[2].rates[4] = 240;
2449         modes[2].rates[5] = 360;
2450         modes[2].rates[6] = 480;
2451         modes[2].rates[7] = 540;
2452
2453         return modes;
2454
2455 fail:
2456         if (modes) {
2457                 for (i = 0; i < *num_modes; i++) {
2458                         os_free(modes[i].channels);
2459                         os_free(modes[i].rates);
2460                 }
2461                 os_free(modes);
2462         }
2463         return NULL;
2464 }
2465
2466
2467 static int wpa_driver_test_alloc_interface_addr(void *priv, u8 *addr)
2468 {
2469         struct wpa_driver_test_data *drv = priv;
2470         drv->alloc_iface_idx++;
2471         addr[0] = 0x02; /* locally administered */
2472         sha1_prf(drv->own_addr, ETH_ALEN, "hostapd test addr generation",
2473                  (const u8 *) &drv->alloc_iface_idx,
2474                  sizeof(drv->alloc_iface_idx),
2475                  addr + 1, ETH_ALEN - 1);
2476         return 0;
2477 }
2478
2479
2480 static void wpa_driver_test_release_interface_addr(void *priv, const u8 *addr)
2481 {
2482 }
2483
2484
2485 static int wpa_driver_test_probe_req_report(void *priv, int report)
2486 {
2487         struct wpa_driver_test_data *drv = priv;
2488         wpa_printf(MSG_DEBUG, "%s(report=%d)", __func__, report);
2489         drv->probe_req_report = report;
2490         return 0;
2491 }
2492
2493
2494 const struct wpa_driver_ops wpa_driver_test_ops = {
2495         "test",
2496         "wpa_supplicant test driver",
2497         .hapd_init = test_driver_init,
2498         .hapd_deinit = wpa_driver_test_deinit,
2499         .hapd_send_eapol = test_driver_send_eapol,
2500         .send_mlme = wpa_driver_test_send_mlme,
2501         .set_generic_elem = test_driver_set_generic_elem,
2502         .sta_deauth = test_driver_sta_deauth,
2503         .sta_disassoc = test_driver_sta_disassoc,
2504         .get_hw_feature_data = wpa_driver_test_get_hw_feature_data,
2505         .if_add = test_driver_if_add,
2506         .if_remove = test_driver_if_remove,
2507         .valid_bss_mask = test_driver_valid_bss_mask,
2508         .hapd_set_ssid = test_driver_set_ssid,
2509         .set_privacy = test_driver_set_privacy,
2510         .set_sta_vlan = test_driver_set_sta_vlan,
2511         .sta_add = test_driver_sta_add,
2512         .send_ether = test_driver_send_ether,
2513         .set_ap_wps_ie = test_driver_set_ap_wps_ie,
2514         .get_bssid = wpa_driver_test_get_bssid,
2515         .get_ssid = wpa_driver_test_get_ssid,
2516         .set_key = wpa_driver_test_set_key,
2517         .deinit = wpa_driver_test_deinit,
2518         .set_param = wpa_driver_test_set_param,
2519         .deauthenticate = wpa_driver_test_deauthenticate,
2520         .disassociate = wpa_driver_test_disassociate,
2521         .associate = wpa_driver_test_associate,
2522         .get_capa = wpa_driver_test_get_capa,
2523         .get_mac_addr = wpa_driver_test_get_mac_addr,
2524         .send_eapol = wpa_driver_test_send_eapol,
2525         .mlme_setprotection = wpa_driver_test_mlme_setprotection,
2526         .set_channel = wpa_driver_test_set_channel,
2527         .set_ssid = wpa_driver_test_set_ssid,
2528         .set_bssid = wpa_driver_test_set_bssid,
2529         .mlme_add_sta = wpa_driver_test_mlme_add_sta,
2530         .mlme_remove_sta = wpa_driver_test_mlme_remove_sta,
2531         .get_scan_results2 = wpa_driver_test_get_scan_results2,
2532         .global_init = wpa_driver_test_global_init,
2533         .global_deinit = wpa_driver_test_global_deinit,
2534         .init2 = wpa_driver_test_init2,
2535         .get_interfaces = wpa_driver_test_get_interfaces,
2536         .scan2 = wpa_driver_test_scan,
2537         .alloc_interface_addr = wpa_driver_test_alloc_interface_addr,
2538         .release_interface_addr = wpa_driver_test_release_interface_addr,
2539         .probe_req_report = wpa_driver_test_probe_req_report,
2540 };