Split wpa_supplicant_event_scan_results() into helper functions
[libeap.git] / wpa_supplicant / events.c
1 /*
2  * WPA Supplicant - Driver event processing
3  * Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi>
4  *
5  * This program is free software; you can redistribute it and/or modify
6  * it under the terms of the GNU General Public License version 2 as
7  * published by the Free Software Foundation.
8  *
9  * Alternatively, this software may be distributed under the terms of BSD
10  * license.
11  *
12  * See README and COPYING for more details.
13  */
14
15 #include "includes.h"
16
17 #include "common.h"
18 #include "eapol_supp/eapol_supp_sm.h"
19 #include "wpa.h"
20 #include "eloop.h"
21 #include "config.h"
22 #include "l2_packet/l2_packet.h"
23 #include "wpa_supplicant_i.h"
24 #include "driver_i.h"
25 #include "pcsc_funcs.h"
26 #include "preauth.h"
27 #include "pmksa_cache.h"
28 #include "wpa_ctrl.h"
29 #include "eap_peer/eap.h"
30 #include "notify.h"
31 #include "ieee802_11_defs.h"
32 #include "blacklist.h"
33 #include "wpas_glue.h"
34 #include "wps_supplicant.h"
35 #include "ibss_rsn.h"
36 #include "sme.h"
37 #include "bgscan.h"
38
39
40 static int wpa_supplicant_select_config(struct wpa_supplicant *wpa_s)
41 {
42         struct wpa_ssid *ssid, *old_ssid;
43
44         if (wpa_s->conf->ap_scan == 1 && wpa_s->current_ssid)
45                 return 0;
46
47         wpa_printf(MSG_DEBUG, "Select network based on association "
48                    "information");
49         ssid = wpa_supplicant_get_ssid(wpa_s);
50         if (ssid == NULL) {
51                 wpa_printf(MSG_INFO, "No network configuration found for the "
52                            "current AP");
53                 return -1;
54         }
55
56         if (ssid->disabled) {
57                 wpa_printf(MSG_DEBUG, "Selected network is disabled");
58                 return -1;
59         }
60
61         wpa_printf(MSG_DEBUG, "Network configuration found for the current "
62                    "AP");
63         if (ssid->key_mgmt & (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_IEEE8021X |
64                               WPA_KEY_MGMT_WPA_NONE |
65                               WPA_KEY_MGMT_FT_PSK | WPA_KEY_MGMT_FT_IEEE8021X |
66                               WPA_KEY_MGMT_PSK_SHA256 |
67                               WPA_KEY_MGMT_IEEE8021X_SHA256)) {
68                 u8 wpa_ie[80];
69                 size_t wpa_ie_len = sizeof(wpa_ie);
70                 wpa_supplicant_set_suites(wpa_s, NULL, ssid,
71                                           wpa_ie, &wpa_ie_len);
72         } else {
73                 wpa_supplicant_set_non_wpa_policy(wpa_s, ssid);
74         }
75
76         if (wpa_s->current_ssid && wpa_s->current_ssid != ssid)
77                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
78         old_ssid = wpa_s->current_ssid;
79         wpa_s->current_ssid = ssid;
80         wpa_supplicant_rsn_supp_set_config(wpa_s, wpa_s->current_ssid);
81         wpa_supplicant_initiate_eapol(wpa_s);
82         if (old_ssid != wpa_s->current_ssid)
83                 wpas_notify_network_changed(wpa_s);
84
85         return 0;
86 }
87
88
89 static void wpa_supplicant_stop_countermeasures(void *eloop_ctx,
90                                                 void *sock_ctx)
91 {
92         struct wpa_supplicant *wpa_s = eloop_ctx;
93
94         if (wpa_s->countermeasures) {
95                 wpa_s->countermeasures = 0;
96                 wpa_drv_set_countermeasures(wpa_s, 0);
97                 wpa_msg(wpa_s, MSG_INFO, "WPA: TKIP countermeasures stopped");
98                 wpa_supplicant_req_scan(wpa_s, 0, 0);
99         }
100 }
101
102
103 void wpa_supplicant_mark_disassoc(struct wpa_supplicant *wpa_s)
104 {
105         int bssid_changed;
106
107         wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED);
108         bssid_changed = !is_zero_ether_addr(wpa_s->bssid);
109         os_memset(wpa_s->bssid, 0, ETH_ALEN);
110         os_memset(wpa_s->pending_bssid, 0, ETH_ALEN);
111         if (bssid_changed)
112                 wpas_notify_bssid_changed(wpa_s);
113
114         eapol_sm_notify_portEnabled(wpa_s->eapol, FALSE);
115         eapol_sm_notify_portValid(wpa_s->eapol, FALSE);
116         if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt))
117                 eapol_sm_notify_eap_success(wpa_s->eapol, FALSE);
118         wpa_s->ap_ies_from_associnfo = 0;
119 }
120
121
122 static void wpa_find_assoc_pmkid(struct wpa_supplicant *wpa_s)
123 {
124         struct wpa_ie_data ie;
125         int pmksa_set = -1;
126         size_t i;
127
128         if (wpa_sm_parse_own_wpa_ie(wpa_s->wpa, &ie) < 0 ||
129             ie.pmkid == NULL)
130                 return;
131
132         for (i = 0; i < ie.num_pmkid; i++) {
133                 pmksa_set = pmksa_cache_set_current(wpa_s->wpa,
134                                                     ie.pmkid + i * PMKID_LEN,
135                                                     NULL, NULL, 0);
136                 if (pmksa_set == 0) {
137                         eapol_sm_notify_pmkid_attempt(wpa_s->eapol, 1);
138                         break;
139                 }
140         }
141
142         wpa_printf(MSG_DEBUG, "RSN: PMKID from assoc IE %sfound from PMKSA "
143                    "cache", pmksa_set == 0 ? "" : "not ");
144 }
145
146
147 static void wpa_supplicant_event_pmkid_candidate(struct wpa_supplicant *wpa_s,
148                                                  union wpa_event_data *data)
149 {
150         if (data == NULL) {
151                 wpa_printf(MSG_DEBUG, "RSN: No data in PMKID candidate event");
152                 return;
153         }
154         wpa_printf(MSG_DEBUG, "RSN: PMKID candidate event - bssid=" MACSTR
155                    " index=%d preauth=%d",
156                    MAC2STR(data->pmkid_candidate.bssid),
157                    data->pmkid_candidate.index,
158                    data->pmkid_candidate.preauth);
159
160         pmksa_candidate_add(wpa_s->wpa, data->pmkid_candidate.bssid,
161                             data->pmkid_candidate.index,
162                             data->pmkid_candidate.preauth);
163 }
164
165
166 static int wpa_supplicant_dynamic_keys(struct wpa_supplicant *wpa_s)
167 {
168         if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
169             wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE)
170                 return 0;
171
172 #ifdef IEEE8021X_EAPOL
173         if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA &&
174             wpa_s->current_ssid &&
175             !(wpa_s->current_ssid->eapol_flags &
176               (EAPOL_FLAG_REQUIRE_KEY_UNICAST |
177                EAPOL_FLAG_REQUIRE_KEY_BROADCAST))) {
178                 /* IEEE 802.1X, but not using dynamic WEP keys (i.e., either
179                  * plaintext or static WEP keys). */
180                 return 0;
181         }
182 #endif /* IEEE8021X_EAPOL */
183
184         return 1;
185 }
186
187
188 /**
189  * wpa_supplicant_scard_init - Initialize SIM/USIM access with PC/SC
190  * @wpa_s: pointer to wpa_supplicant data
191  * @ssid: Configuration data for the network
192  * Returns: 0 on success, -1 on failure
193  *
194  * This function is called when starting authentication with a network that is
195  * configured to use PC/SC for SIM/USIM access (EAP-SIM or EAP-AKA).
196  */
197 int wpa_supplicant_scard_init(struct wpa_supplicant *wpa_s,
198                               struct wpa_ssid *ssid)
199 {
200 #ifdef IEEE8021X_EAPOL
201         int aka = 0, sim = 0, type;
202
203         if (ssid->eap.pcsc == NULL || wpa_s->scard != NULL)
204                 return 0;
205
206         if (ssid->eap.eap_methods == NULL) {
207                 sim = 1;
208                 aka = 1;
209         } else {
210                 struct eap_method_type *eap = ssid->eap.eap_methods;
211                 while (eap->vendor != EAP_VENDOR_IETF ||
212                        eap->method != EAP_TYPE_NONE) {
213                         if (eap->vendor == EAP_VENDOR_IETF) {
214                                 if (eap->method == EAP_TYPE_SIM)
215                                         sim = 1;
216                                 else if (eap->method == EAP_TYPE_AKA)
217                                         aka = 1;
218                         }
219                         eap++;
220                 }
221         }
222
223         if (eap_peer_get_eap_method(EAP_VENDOR_IETF, EAP_TYPE_SIM) == NULL)
224                 sim = 0;
225         if (eap_peer_get_eap_method(EAP_VENDOR_IETF, EAP_TYPE_AKA) == NULL)
226                 aka = 0;
227
228         if (!sim && !aka) {
229                 wpa_printf(MSG_DEBUG, "Selected network is configured to use "
230                            "SIM, but neither EAP-SIM nor EAP-AKA are enabled");
231                 return 0;
232         }
233
234         wpa_printf(MSG_DEBUG, "Selected network is configured to use SIM "
235                    "(sim=%d aka=%d) - initialize PCSC", sim, aka);
236         if (sim && aka)
237                 type = SCARD_TRY_BOTH;
238         else if (aka)
239                 type = SCARD_USIM_ONLY;
240         else
241                 type = SCARD_GSM_SIM_ONLY;
242
243         wpa_s->scard = scard_init(type);
244         if (wpa_s->scard == NULL) {
245                 wpa_printf(MSG_WARNING, "Failed to initialize SIM "
246                            "(pcsc-lite)");
247                 return -1;
248         }
249         wpa_sm_set_scard_ctx(wpa_s->wpa, wpa_s->scard);
250         eapol_sm_register_scard_ctx(wpa_s->eapol, wpa_s->scard);
251 #endif /* IEEE8021X_EAPOL */
252
253         return 0;
254 }
255
256
257 #ifndef CONFIG_NO_SCAN_PROCESSING
258 static int wpa_supplicant_match_privacy(struct wpa_scan_res *bss,
259                                         struct wpa_ssid *ssid)
260 {
261         int i, privacy = 0;
262
263         if (ssid->mixed_cell)
264                 return 1;
265
266 #ifdef CONFIG_WPS
267         if (ssid->key_mgmt & WPA_KEY_MGMT_WPS)
268                 return 1;
269 #endif /* CONFIG_WPS */
270
271         for (i = 0; i < NUM_WEP_KEYS; i++) {
272                 if (ssid->wep_key_len[i]) {
273                         privacy = 1;
274                         break;
275                 }
276         }
277 #ifdef IEEE8021X_EAPOL
278         if ((ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA) &&
279             ssid->eapol_flags & (EAPOL_FLAG_REQUIRE_KEY_UNICAST |
280                                  EAPOL_FLAG_REQUIRE_KEY_BROADCAST))
281                 privacy = 1;
282 #endif /* IEEE8021X_EAPOL */
283
284         if (bss->caps & IEEE80211_CAP_PRIVACY)
285                 return privacy;
286         return !privacy;
287 }
288
289
290 static int wpa_supplicant_ssid_bss_match(struct wpa_supplicant *wpa_s,
291                                          struct wpa_ssid *ssid,
292                                          struct wpa_scan_res *bss)
293 {
294         struct wpa_ie_data ie;
295         int proto_match = 0;
296         const u8 *rsn_ie, *wpa_ie;
297         int ret;
298
299         ret = wpas_wps_ssid_bss_match(wpa_s, ssid, bss);
300         if (ret >= 0)
301                 return ret;
302
303         rsn_ie = wpa_scan_get_ie(bss, WLAN_EID_RSN);
304         while ((ssid->proto & WPA_PROTO_RSN) && rsn_ie) {
305                 proto_match++;
306
307                 if (wpa_parse_wpa_ie(rsn_ie, 2 + rsn_ie[1], &ie)) {
308                         wpa_printf(MSG_DEBUG, "   skip RSN IE - parse failed");
309                         break;
310                 }
311                 if (!(ie.proto & ssid->proto)) {
312                         wpa_printf(MSG_DEBUG, "   skip RSN IE - proto "
313                                    "mismatch");
314                         break;
315                 }
316
317                 if (!(ie.pairwise_cipher & ssid->pairwise_cipher)) {
318                         wpa_printf(MSG_DEBUG, "   skip RSN IE - PTK cipher "
319                                    "mismatch");
320                         break;
321                 }
322
323                 if (!(ie.group_cipher & ssid->group_cipher)) {
324                         wpa_printf(MSG_DEBUG, "   skip RSN IE - GTK cipher "
325                                    "mismatch");
326                         break;
327                 }
328
329                 if (!(ie.key_mgmt & ssid->key_mgmt)) {
330                         wpa_printf(MSG_DEBUG, "   skip RSN IE - key mgmt "
331                                    "mismatch");
332                         break;
333                 }
334
335 #ifdef CONFIG_IEEE80211W
336                 if (!(ie.capabilities & WPA_CAPABILITY_MFPC) &&
337                     ssid->ieee80211w == IEEE80211W_REQUIRED) {
338                         wpa_printf(MSG_DEBUG, "   skip RSN IE - no mgmt frame "
339                                    "protection");
340                         break;
341                 }
342 #endif /* CONFIG_IEEE80211W */
343
344                 wpa_printf(MSG_DEBUG, "   selected based on RSN IE");
345                 return 1;
346         }
347
348         wpa_ie = wpa_scan_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
349         while ((ssid->proto & WPA_PROTO_WPA) && wpa_ie) {
350                 proto_match++;
351
352                 if (wpa_parse_wpa_ie(wpa_ie, 2 + wpa_ie[1], &ie)) {
353                         wpa_printf(MSG_DEBUG, "   skip WPA IE - parse failed");
354                         break;
355                 }
356                 if (!(ie.proto & ssid->proto)) {
357                         wpa_printf(MSG_DEBUG, "   skip WPA IE - proto "
358                                    "mismatch");
359                         break;
360                 }
361
362                 if (!(ie.pairwise_cipher & ssid->pairwise_cipher)) {
363                         wpa_printf(MSG_DEBUG, "   skip WPA IE - PTK cipher "
364                                    "mismatch");
365                         break;
366                 }
367
368                 if (!(ie.group_cipher & ssid->group_cipher)) {
369                         wpa_printf(MSG_DEBUG, "   skip WPA IE - GTK cipher "
370                                    "mismatch");
371                         break;
372                 }
373
374                 if (!(ie.key_mgmt & ssid->key_mgmt)) {
375                         wpa_printf(MSG_DEBUG, "   skip WPA IE - key mgmt "
376                                    "mismatch");
377                         break;
378                 }
379
380                 wpa_printf(MSG_DEBUG, "   selected based on WPA IE");
381                 return 1;
382         }
383
384         if (proto_match == 0)
385                 wpa_printf(MSG_DEBUG, "   skip - no WPA/RSN proto match");
386
387         return 0;
388 }
389
390
391 static struct wpa_scan_res *
392 wpa_supplicant_select_bss_wpa(struct wpa_supplicant *wpa_s,
393                               struct wpa_ssid *group,
394                               struct wpa_ssid **selected_ssid)
395 {
396         struct wpa_ssid *ssid;
397         struct wpa_scan_res *bss;
398         size_t i;
399         struct wpa_blacklist *e;
400         const u8 *ie;
401
402         wpa_printf(MSG_DEBUG, "Try to find WPA-enabled AP");
403         for (i = 0; i < wpa_s->scan_res->num; i++) {
404                 const u8 *ssid_;
405                 u8 wpa_ie_len, rsn_ie_len, ssid_len;
406                 bss = wpa_s->scan_res->res[i];
407
408                 ie = wpa_scan_get_ie(bss, WLAN_EID_SSID);
409                 ssid_ = ie ? ie + 2 : (u8 *) "";
410                 ssid_len = ie ? ie[1] : 0;
411
412                 ie = wpa_scan_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
413                 wpa_ie_len = ie ? ie[1] : 0;
414
415                 ie = wpa_scan_get_ie(bss, WLAN_EID_RSN);
416                 rsn_ie_len = ie ? ie[1] : 0;
417
418                 wpa_printf(MSG_DEBUG, "%d: " MACSTR " ssid='%s' "
419                            "wpa_ie_len=%u rsn_ie_len=%u caps=0x%x",
420                            (int) i, MAC2STR(bss->bssid),
421                            wpa_ssid_txt(ssid_, ssid_len),
422                            wpa_ie_len, rsn_ie_len, bss->caps);
423
424                 e = wpa_blacklist_get(wpa_s, bss->bssid);
425                 if (e && e->count > 1) {
426                         wpa_printf(MSG_DEBUG, "   skip - blacklisted");
427                         continue;
428                 }
429
430                 if (wpa_ie_len == 0 && rsn_ie_len == 0) {
431                         wpa_printf(MSG_DEBUG, "   skip - no WPA/RSN IE");
432                         continue;
433                 }
434
435                 for (ssid = group; ssid; ssid = ssid->pnext) {
436                         int check_ssid = 1;
437
438                         if (ssid->disabled) {
439                                 wpa_printf(MSG_DEBUG, "   skip - disabled");
440                                 continue;
441                         }
442
443 #ifdef CONFIG_WPS
444                         if (ssid->ssid_len == 0 &&
445                             wpas_wps_ssid_wildcard_ok(wpa_s, ssid, bss))
446                                 check_ssid = 0;
447 #endif /* CONFIG_WPS */
448
449                         if (check_ssid &&
450                             (ssid_len != ssid->ssid_len ||
451                              os_memcmp(ssid_, ssid->ssid, ssid_len) != 0)) {
452                                 wpa_printf(MSG_DEBUG, "   skip - "
453                                            "SSID mismatch");
454                                 continue;
455                         }
456
457                         if (ssid->bssid_set &&
458                             os_memcmp(bss->bssid, ssid->bssid, ETH_ALEN) != 0)
459                         {
460                                 wpa_printf(MSG_DEBUG, "   skip - "
461                                            "BSSID mismatch");
462                                 continue;
463                         }
464
465                         if (!wpa_supplicant_ssid_bss_match(wpa_s, ssid, bss))
466                                 continue;
467
468                         wpa_printf(MSG_DEBUG, "   selected WPA AP "
469                                    MACSTR " ssid='%s'",
470                                    MAC2STR(bss->bssid),
471                                    wpa_ssid_txt(ssid_, ssid_len));
472                         *selected_ssid = ssid;
473                         return bss;
474                 }
475         }
476
477         return NULL;
478 }
479
480
481 static struct wpa_scan_res *
482 wpa_supplicant_select_bss_non_wpa(struct wpa_supplicant *wpa_s,
483                                   struct wpa_ssid *group,
484                                   struct wpa_ssid **selected_ssid)
485 {
486         struct wpa_ssid *ssid;
487         struct wpa_scan_res *bss;
488         size_t i;
489         struct wpa_blacklist *e;
490         const u8 *ie;
491
492         wpa_printf(MSG_DEBUG, "Try to find non-WPA AP");
493         for (i = 0; i < wpa_s->scan_res->num; i++) {
494                 const u8 *ssid_;
495                 u8 wpa_ie_len, rsn_ie_len, ssid_len;
496                 bss = wpa_s->scan_res->res[i];
497
498                 ie = wpa_scan_get_ie(bss, WLAN_EID_SSID);
499                 ssid_ = ie ? ie + 2 : (u8 *) "";
500                 ssid_len = ie ? ie[1] : 0;
501
502                 ie = wpa_scan_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
503                 wpa_ie_len = ie ? ie[1] : 0;
504
505                 ie = wpa_scan_get_ie(bss, WLAN_EID_RSN);
506                 rsn_ie_len = ie ? ie[1] : 0;
507
508                 wpa_printf(MSG_DEBUG, "%d: " MACSTR " ssid='%s' "
509                            "wpa_ie_len=%u rsn_ie_len=%u caps=0x%x",
510                            (int) i, MAC2STR(bss->bssid),
511                            wpa_ssid_txt(ssid_, ssid_len),
512                            wpa_ie_len, rsn_ie_len, bss->caps);
513
514                 e = wpa_blacklist_get(wpa_s, bss->bssid);
515                 if (e && e->count > 1) {
516                         wpa_printf(MSG_DEBUG, "   skip - blacklisted");
517                         continue;
518                 }
519
520                 for (ssid = group; ssid; ssid = ssid->pnext) {
521                         int check_ssid = ssid->ssid_len != 0;
522
523                         if (ssid->disabled) {
524                                 wpa_printf(MSG_DEBUG, "   skip - disabled");
525                                 continue;
526                         }
527
528 #ifdef CONFIG_WPS
529                         if (ssid->key_mgmt & WPA_KEY_MGMT_WPS) {
530                                 /* Only allow wildcard SSID match if an AP
531                                  * advertises active WPS operation that matches
532                                  * with our mode. */
533                                 check_ssid = 1;
534                                 if (ssid->ssid_len == 0 &&
535                                     wpas_wps_ssid_wildcard_ok(wpa_s, ssid,
536                                                               bss))
537                                         check_ssid = 0;
538                         }
539 #endif /* CONFIG_WPS */
540
541                         if (check_ssid &&
542                             (ssid_len != ssid->ssid_len ||
543                              os_memcmp(ssid_, ssid->ssid, ssid_len) != 0)) {
544                                 wpa_printf(MSG_DEBUG, "   skip - "
545                                            "SSID mismatch");
546                                 continue;
547                         }
548
549                         if (ssid->bssid_set &&
550                             os_memcmp(bss->bssid, ssid->bssid, ETH_ALEN) != 0)
551                         {
552                                 wpa_printf(MSG_DEBUG, "   skip - "
553                                            "BSSID mismatch");
554                                 continue;
555                         }
556
557                         if (!(ssid->key_mgmt & WPA_KEY_MGMT_NONE) &&
558                             !(ssid->key_mgmt & WPA_KEY_MGMT_WPS) &&
559                             !(ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA))
560                         {
561                                 wpa_printf(MSG_DEBUG, "   skip - "
562                                            "non-WPA network not allowed");
563                                 continue;
564                         }
565
566                         if ((ssid->key_mgmt &
567                              (WPA_KEY_MGMT_IEEE8021X | WPA_KEY_MGMT_PSK |
568                               WPA_KEY_MGMT_FT_IEEE8021X | WPA_KEY_MGMT_FT_PSK |
569                               WPA_KEY_MGMT_IEEE8021X_SHA256 |
570                               WPA_KEY_MGMT_PSK_SHA256)) &&
571                             (wpa_ie_len != 0 || rsn_ie_len != 0)) {
572                                 wpa_printf(MSG_DEBUG, "   skip - "
573                                            "WPA network");
574                                 continue;
575                         }
576
577                         if (!wpa_supplicant_match_privacy(bss, ssid)) {
578                                 wpa_printf(MSG_DEBUG, "   skip - "
579                                            "privacy mismatch");
580                                 continue;
581                         }
582
583                         if (bss->caps & IEEE80211_CAP_IBSS) {
584                                 wpa_printf(MSG_DEBUG, "   skip - "
585                                            "IBSS (adhoc) network");
586                                 continue;
587                         }
588
589                         wpa_printf(MSG_DEBUG, "   selected non-WPA AP "
590                                    MACSTR " ssid='%s'",
591                                    MAC2STR(bss->bssid),
592                                    wpa_ssid_txt(ssid_, ssid_len));
593                         *selected_ssid = ssid;
594                         return bss;
595                 }
596         }
597
598         return NULL;
599 }
600
601
602 static struct wpa_scan_res *
603 wpa_supplicant_select_bss(struct wpa_supplicant *wpa_s, struct wpa_ssid *group,
604                           struct wpa_ssid **selected_ssid)
605 {
606         struct wpa_scan_res *selected;
607
608         wpa_printf(MSG_DEBUG, "Selecting BSS from priority group %d",
609                    group->priority);
610
611         /* First, try to find WPA-enabled AP */
612         selected = wpa_supplicant_select_bss_wpa(wpa_s, group, selected_ssid);
613         if (selected)
614                 return selected;
615
616         /* If no WPA-enabled AP found, try to find non-WPA AP, if configuration
617          * allows this. */
618         return wpa_supplicant_select_bss_non_wpa(wpa_s, group, selected_ssid);
619 }
620
621
622 static struct wpa_scan_res *
623 wpa_supplicant_pick_network(struct wpa_supplicant *wpa_s,
624                             struct wpa_ssid **selected_ssid)
625 {
626         struct wpa_scan_res *selected = NULL;
627         int prio;
628
629         while (selected == NULL) {
630                 for (prio = 0; prio < wpa_s->conf->num_prio; prio++) {
631                         selected = wpa_supplicant_select_bss(
632                                 wpa_s, wpa_s->conf->pssid[prio],
633                                 selected_ssid);
634                         if (selected)
635                                 break;
636                 }
637
638                 if (selected == NULL && wpa_s->blacklist) {
639                         wpa_printf(MSG_DEBUG, "No APs found - clear blacklist "
640                                    "and try again");
641                         wpa_blacklist_clear(wpa_s);
642                         wpa_s->blacklist_cleared++;
643                 } else if (selected == NULL)
644                         break;
645         }
646
647         return selected;
648 }
649
650
651 static void wpa_supplicant_req_new_scan(struct wpa_supplicant *wpa_s,
652                                         int timeout)
653 {
654         if (wpa_s->scan_res_tried == 1 && wpa_s->conf->ap_scan == 1) {
655                 /*
656                  * Quick recovery if the initial scan results were not
657                  * complete when fetched before the first scan request.
658                  */
659                 wpa_s->scan_res_tried++;
660                 timeout = 0;
661         }
662         wpa_supplicant_req_scan(wpa_s, timeout, 0);
663 }
664
665
666 static void wpa_supplicant_connect(struct wpa_supplicant *wpa_s,
667                                    struct wpa_scan_res *selected,
668                                    struct wpa_ssid *ssid)
669 {
670         if (wpas_wps_scan_pbc_overlap(wpa_s, selected, ssid)) {
671                 wpa_msg(wpa_s, MSG_INFO, WPS_EVENT_OVERLAP
672                         "PBC session overlap");
673                 wpa_supplicant_req_new_scan(wpa_s, 10);
674                 return;
675         }
676
677         /*
678          * Do not trigger new association unless the BSSID has changed or if
679          * reassociation is requested. If we are in process of associating with
680          * the selected BSSID, do not trigger new attempt.
681          */
682         if (wpa_s->reassociate ||
683             (os_memcmp(selected->bssid, wpa_s->bssid, ETH_ALEN) != 0 &&
684              (wpa_s->wpa_state != WPA_ASSOCIATING ||
685               os_memcmp(selected->bssid, wpa_s->pending_bssid, ETH_ALEN) !=
686               0))) {
687                 if (wpa_supplicant_scard_init(wpa_s, ssid)) {
688                         wpa_supplicant_req_new_scan(wpa_s, 10);
689                         return;
690                 }
691                 wpa_supplicant_associate(wpa_s, selected, ssid);
692         } else {
693                 wpa_printf(MSG_DEBUG, "Already associated with the selected "
694                            "AP");
695         }
696         rsn_preauth_scan_results(wpa_s->wpa, wpa_s->scan_res);
697 }
698
699
700 static void wpa_supplicant_event_scan_results(struct wpa_supplicant *wpa_s)
701 {
702         struct wpa_scan_res *selected;
703         struct wpa_ssid *ssid = NULL;
704
705         wpa_supplicant_notify_scanning(wpa_s, 0);
706
707         if (wpa_supplicant_get_scan_results(wpa_s) < 0) {
708                 if (wpa_s->conf->ap_scan == 2)
709                         return;
710                 wpa_printf(MSG_DEBUG, "Failed to get scan results - try "
711                            "scanning again");
712                 wpa_supplicant_req_new_scan(wpa_s, 1);
713                 return;
714         }
715
716         /*
717          * Don't post the results if this was the initial cached
718          * and there were no results.
719          */
720         if (wpa_s->scan_res_tried == 1 && wpa_s->conf->ap_scan == 1 &&
721             wpa_s->scan_res->num == 0) {
722                 wpa_msg(wpa_s, MSG_DEBUG, "Cached scan results are "
723                         "empty - not posting");
724         } else {
725                 wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_SCAN_RESULTS);
726                 wpas_notify_scan_results(wpa_s);
727         }
728
729         wpas_notify_scan_done(wpa_s, 1);
730
731         if ((wpa_s->conf->ap_scan == 2 && !wpas_wps_searching(wpa_s)))
732                 return;
733
734         if (wpa_s->disconnected) {
735                 wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED);
736                 return;
737         }
738
739         if (bgscan_notify_scan(wpa_s) == 1)
740                 return;
741
742         selected = wpa_supplicant_pick_network(wpa_s, &ssid);
743         if (selected) {
744                 wpa_supplicant_connect(wpa_s, selected, ssid);
745         } else {
746                 wpa_printf(MSG_DEBUG, "No suitable network found");
747                 wpa_supplicant_req_new_scan(wpa_s, 5);
748         }
749 }
750 #endif /* CONFIG_NO_SCAN_PROCESSING */
751
752
753 #ifdef CONFIG_IEEE80211R
754 static void wpa_assoc_set_ft_params(struct wpa_supplicant *wpa_s,
755                                     const u8 *ftie, const u8 *mdie)
756 {
757         const u8 *mobility_domain = NULL;
758         const u8 *r0kh_id = NULL;
759         size_t r0kh_id_len = 0;
760         const u8 *r1kh_id = NULL;
761         struct rsn_ftie *hdr;
762         const u8 *pos, *end;
763
764         if (mdie == NULL || ftie == NULL)
765                 return;
766
767         if (mdie[1] >= MOBILITY_DOMAIN_ID_LEN) {
768                 mobility_domain = mdie + 2;
769 #ifdef CONFIG_SME
770                 wpa_s->sme.ft_used = 1;
771                 os_memcpy(wpa_s->sme.mobility_domain, mobility_domain, 2);
772 #endif /* CONFIG_SME */
773         }
774         if (ftie[1] >= sizeof(struct rsn_ftie)) {
775                 end = ftie + 2 + ftie[1];
776                 hdr = (struct rsn_ftie *) (ftie + 2);
777                 pos = (const u8 *) (hdr + 1);
778                 while (pos + 1 < end) {
779                         if (pos + 2 + pos[1] > end)
780                                 break;
781                         if (pos[0] == FTIE_SUBELEM_R1KH_ID &&
782                             pos[1] == FT_R1KH_ID_LEN)
783                                 r1kh_id = pos + 2;
784                         else if (pos[0] == FTIE_SUBELEM_R0KH_ID &&
785                                  pos[1] >= 1 && pos[1] <= FT_R0KH_ID_MAX_LEN) {
786                                 r0kh_id = pos + 2;
787                                 r0kh_id_len = pos[1];
788                         }
789                         pos += 2 + pos[1];
790                 }
791         }
792         wpa_sm_set_ft_params(wpa_s->wpa, mobility_domain, r0kh_id,
793                              r0kh_id_len, r1kh_id);
794 }
795 #endif /* CONFIG_IEEE80211R */
796
797 static void wpa_supplicant_event_associnfo(struct wpa_supplicant *wpa_s,
798                                            union wpa_event_data *data)
799 {
800         int l, len, found = 0, wpa_found, rsn_found;
801         const u8 *p;
802 #ifdef CONFIG_IEEE80211R
803         const u8 *mdie = NULL, *ftie = NULL;
804 #endif /* CONFIG_IEEE80211R */
805
806         wpa_printf(MSG_DEBUG, "Association info event");
807         if (data->assoc_info.req_ies)
808                 wpa_hexdump(MSG_DEBUG, "req_ies", data->assoc_info.req_ies,
809                             data->assoc_info.req_ies_len);
810         if (data->assoc_info.resp_ies)
811                 wpa_hexdump(MSG_DEBUG, "resp_ies", data->assoc_info.resp_ies,
812                             data->assoc_info.resp_ies_len);
813         if (data->assoc_info.beacon_ies)
814                 wpa_hexdump(MSG_DEBUG, "beacon_ies",
815                             data->assoc_info.beacon_ies,
816                             data->assoc_info.beacon_ies_len);
817
818         p = data->assoc_info.req_ies;
819         l = data->assoc_info.req_ies_len;
820
821         /* Go through the IEs and make a copy of the WPA/RSN IE, if present. */
822         while (p && l >= 2) {
823                 len = p[1] + 2;
824                 if (len > l) {
825                         wpa_hexdump(MSG_DEBUG, "Truncated IE in assoc_info",
826                                     p, l);
827                         break;
828                 }
829                 if ((p[0] == WLAN_EID_VENDOR_SPECIFIC && p[1] >= 6 &&
830                      (os_memcmp(&p[2], "\x00\x50\xF2\x01\x01\x00", 6) == 0)) ||
831                     (p[0] == WLAN_EID_RSN && p[1] >= 2)) {
832                         if (wpa_sm_set_assoc_wpa_ie(wpa_s->wpa, p, len))
833                                 break;
834                         found = 1;
835                         wpa_find_assoc_pmkid(wpa_s);
836                         break;
837                 }
838                 l -= len;
839                 p += len;
840         }
841         if (!found && data->assoc_info.req_ies)
842                 wpa_sm_set_assoc_wpa_ie(wpa_s->wpa, NULL, 0);
843
844 #ifdef CONFIG_IEEE80211R
845         p = data->assoc_info.resp_ies;
846         l = data->assoc_info.resp_ies_len;
847
848         /* Go through the IEs and make a copy of the FT/MD IE, if present. */
849         while (p && l >= 2) {
850                 len = p[1] + 2;
851                 if (len > l) {
852                         wpa_hexdump(MSG_DEBUG, "Truncated IE in assoc_info",
853                                     p, l);
854                         break;
855                 }
856                 if (p[0] == WLAN_EID_FAST_BSS_TRANSITION)
857                         ftie = p;
858                 else if (p[0] == WLAN_EID_MOBILITY_DOMAIN)
859                         mdie = p;
860                 l -= len;
861                 p += len;
862         }
863
864         wpa_assoc_set_ft_params(wpa_s, ftie, mdie);
865 #endif /* CONFIG_IEEE80211R */
866
867         /* WPA/RSN IE from Beacon/ProbeResp */
868         p = data->assoc_info.beacon_ies;
869         l = data->assoc_info.beacon_ies_len;
870
871         /* Go through the IEs and make a copy of the WPA/RSN IEs, if present.
872          */
873         wpa_found = rsn_found = 0;
874         while (p && l >= 2) {
875                 len = p[1] + 2;
876                 if (len > l) {
877                         wpa_hexdump(MSG_DEBUG, "Truncated IE in beacon_ies",
878                                     p, l);
879                         break;
880                 }
881                 if (!wpa_found &&
882                     p[0] == WLAN_EID_VENDOR_SPECIFIC && p[1] >= 6 &&
883                     os_memcmp(&p[2], "\x00\x50\xF2\x01\x01\x00", 6) == 0) {
884                         wpa_found = 1;
885                         wpa_sm_set_ap_wpa_ie(wpa_s->wpa, p, len);
886                 }
887
888                 if (!rsn_found &&
889                     p[0] == WLAN_EID_RSN && p[1] >= 2) {
890                         rsn_found = 1;
891                         wpa_sm_set_ap_rsn_ie(wpa_s->wpa, p, len);
892                 }
893
894                 l -= len;
895                 p += len;
896         }
897
898         if (!wpa_found && data->assoc_info.beacon_ies)
899                 wpa_sm_set_ap_wpa_ie(wpa_s->wpa, NULL, 0);
900         if (!rsn_found && data->assoc_info.beacon_ies)
901                 wpa_sm_set_ap_rsn_ie(wpa_s->wpa, NULL, 0);
902         if (wpa_found || rsn_found)
903                 wpa_s->ap_ies_from_associnfo = 1;
904 }
905
906
907 static void wpa_supplicant_event_assoc(struct wpa_supplicant *wpa_s,
908                                        union wpa_event_data *data)
909 {
910         u8 bssid[ETH_ALEN];
911         int ft_completed = wpa_ft_is_completed(wpa_s->wpa);
912         int bssid_changed;
913         struct wpa_driver_capa capa;
914
915         if (data)
916                 wpa_supplicant_event_associnfo(wpa_s, data);
917
918         wpa_supplicant_set_state(wpa_s, WPA_ASSOCIATED);
919         if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
920                 os_memcpy(bssid, wpa_s->bssid, ETH_ALEN);
921         if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) ||
922             (wpa_drv_get_bssid(wpa_s, bssid) >= 0 &&
923              os_memcmp(bssid, wpa_s->bssid, ETH_ALEN) != 0)) {
924                 wpa_msg(wpa_s, MSG_DEBUG, "Associated to a new BSS: BSSID="
925                         MACSTR, MAC2STR(bssid));
926                 bssid_changed = os_memcmp(wpa_s->bssid, bssid, ETH_ALEN);
927                 os_memcpy(wpa_s->bssid, bssid, ETH_ALEN);
928                 os_memset(wpa_s->pending_bssid, 0, ETH_ALEN);
929                 if (bssid_changed)
930                         wpas_notify_bssid_changed(wpa_s);
931
932                 if (wpa_supplicant_dynamic_keys(wpa_s) && !ft_completed) {
933                         wpa_clear_keys(wpa_s, bssid);
934                 }
935                 if (wpa_supplicant_select_config(wpa_s) < 0) {
936                         wpa_supplicant_disassociate(
937                                 wpa_s, WLAN_REASON_DEAUTH_LEAVING);
938                         return;
939                 }
940         }
941
942         wpa_msg(wpa_s, MSG_INFO, "Associated with " MACSTR, MAC2STR(bssid));
943         if (wpa_s->current_ssid) {
944                 /* When using scanning (ap_scan=1), SIM PC/SC interface can be
945                  * initialized before association, but for other modes,
946                  * initialize PC/SC here, if the current configuration needs
947                  * smartcard or SIM/USIM. */
948                 wpa_supplicant_scard_init(wpa_s, wpa_s->current_ssid);
949         }
950         wpa_sm_notify_assoc(wpa_s->wpa, bssid);
951         l2_packet_notify_auth_start(wpa_s->l2);
952
953         /*
954          * Set portEnabled first to FALSE in order to get EAP state machine out
955          * of the SUCCESS state and eapSuccess cleared. Without this, EAPOL PAE
956          * state machine may transit to AUTHENTICATING state based on obsolete
957          * eapSuccess and then trigger BE_AUTH to SUCCESS and PAE to
958          * AUTHENTICATED without ever giving chance to EAP state machine to
959          * reset the state.
960          */
961         if (!ft_completed) {
962                 eapol_sm_notify_portEnabled(wpa_s->eapol, FALSE);
963                 eapol_sm_notify_portValid(wpa_s->eapol, FALSE);
964         }
965         if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) || ft_completed)
966                 eapol_sm_notify_eap_success(wpa_s->eapol, FALSE);
967         /* 802.1X::portControl = Auto */
968         eapol_sm_notify_portEnabled(wpa_s->eapol, TRUE);
969         wpa_s->eapol_received = 0;
970         if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
971             wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE) {
972                 wpa_supplicant_cancel_auth_timeout(wpa_s);
973                 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
974         } else if (!ft_completed) {
975                 /* Timeout for receiving the first EAPOL packet */
976                 wpa_supplicant_req_auth_timeout(wpa_s, 10, 0);
977         }
978         wpa_supplicant_cancel_scan(wpa_s);
979
980         if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE) &&
981             wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt)) {
982                 /*
983                  * We are done; the driver will take care of RSN 4-way
984                  * handshake.
985                  */
986                 wpa_supplicant_cancel_auth_timeout(wpa_s);
987                 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
988                 eapol_sm_notify_portValid(wpa_s->eapol, TRUE);
989                 eapol_sm_notify_eap_success(wpa_s->eapol, TRUE);
990         }
991
992         if (wpa_s->pending_eapol_rx) {
993                 struct os_time now, age;
994                 os_get_time(&now);
995                 os_time_sub(&now, &wpa_s->pending_eapol_rx_time, &age);
996                 if (age.sec == 0 && age.usec < 100000 &&
997                     os_memcmp(wpa_s->pending_eapol_rx_src, bssid, ETH_ALEN) ==
998                     0) {
999                         wpa_printf(MSG_DEBUG, "Process pending EAPOL frame "
1000                                    "that was received just before association "
1001                                    "notification");
1002                         wpa_supplicant_rx_eapol(
1003                                 wpa_s, wpa_s->pending_eapol_rx_src,
1004                                 wpabuf_head(wpa_s->pending_eapol_rx),
1005                                 wpabuf_len(wpa_s->pending_eapol_rx));
1006                 }
1007                 wpabuf_free(wpa_s->pending_eapol_rx);
1008                 wpa_s->pending_eapol_rx = NULL;
1009         }
1010
1011 #ifdef CONFIG_BGSCAN
1012         if (wpa_s->current_ssid != wpa_s->bgscan_ssid) {
1013                 bgscan_deinit(wpa_s);
1014                 if (wpa_s->current_ssid && wpa_s->current_ssid->bgscan) {
1015                         if (bgscan_init(wpa_s, wpa_s->current_ssid)) {
1016                                 wpa_printf(MSG_DEBUG, "Failed to initialize "
1017                                            "bgscan");
1018                                 /*
1019                                  * Live without bgscan; it is only used as a
1020                                  * roaming optimization, so the initial
1021                                  * connection is not affected.
1022                                  */
1023                         } else
1024                                 wpa_s->bgscan_ssid = wpa_s->current_ssid;
1025                 } else
1026                         wpa_s->bgscan_ssid = NULL;
1027         }
1028 #endif /* CONFIG_BGSCAN */
1029
1030         if ((wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
1031              wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) &&
1032             wpa_s->current_ssid && wpa_drv_get_capa(wpa_s, &capa) == 0 &&
1033             capa.flags & WPA_DRIVER_FLAGS_SET_KEYS_AFTER_ASSOC_DONE) {
1034                 /* Set static WEP keys again */
1035                 wpa_set_wep_keys(wpa_s, wpa_s->current_ssid);
1036         }
1037 }
1038
1039
1040 static void wpa_supplicant_event_disassoc(struct wpa_supplicant *wpa_s)
1041 {
1042         const u8 *bssid;
1043
1044         if (wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE) {
1045                 /*
1046                  * At least Host AP driver and a Prism3 card seemed to be
1047                  * generating streams of disconnected events when configuring
1048                  * IBSS for WPA-None. Ignore them for now.
1049                  */
1050                 wpa_printf(MSG_DEBUG, "Disconnect event - ignore in "
1051                            "IBSS/WPA-None mode");
1052                 return;
1053         }
1054
1055         if (wpa_s->wpa_state == WPA_4WAY_HANDSHAKE &&
1056             wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt)) {
1057                 wpa_msg(wpa_s, MSG_INFO, "WPA: 4-Way Handshake failed - "
1058                         "pre-shared key may be incorrect");
1059         }
1060         if (wpa_s->wpa_state >= WPA_ASSOCIATED)
1061                 wpa_supplicant_req_scan(wpa_s, 0, 100000);
1062         bssid = wpa_s->bssid;
1063         if (is_zero_ether_addr(bssid))
1064                 bssid = wpa_s->pending_bssid;
1065         wpa_blacklist_add(wpa_s, bssid);
1066         wpa_sm_notify_disassoc(wpa_s->wpa);
1067         wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_DISCONNECTED "- Disconnect event - "
1068                 "remove keys");
1069         if (wpa_supplicant_dynamic_keys(wpa_s)) {
1070                 wpa_s->keys_cleared = 0;
1071                 wpa_clear_keys(wpa_s, wpa_s->bssid);
1072         }
1073         wpa_supplicant_mark_disassoc(wpa_s);
1074         bgscan_deinit(wpa_s);
1075 }
1076
1077
1078 #ifdef CONFIG_DELAYED_MIC_ERROR_REPORT
1079 static void wpa_supplicant_delayed_mic_error_report(void *eloop_ctx,
1080                                                     void *sock_ctx)
1081 {
1082         struct wpa_supplicant *wpa_s = eloop_ctx;
1083
1084         if (!wpa_s->pending_mic_error_report)
1085                 return;
1086
1087         wpa_printf(MSG_DEBUG, "WPA: Sending pending MIC error report");
1088         wpa_sm_key_request(wpa_s->wpa, 1, wpa_s->pending_mic_error_pairwise);
1089         wpa_s->pending_mic_error_report = 0;
1090 }
1091 #endif /* CONFIG_DELAYED_MIC_ERROR_REPORT */
1092
1093
1094 static void
1095 wpa_supplicant_event_michael_mic_failure(struct wpa_supplicant *wpa_s,
1096                                          union wpa_event_data *data)
1097 {
1098         int pairwise;
1099         struct os_time t;
1100
1101         wpa_msg(wpa_s, MSG_WARNING, "Michael MIC failure detected");
1102         pairwise = (data && data->michael_mic_failure.unicast);
1103         os_get_time(&t);
1104         if ((wpa_s->last_michael_mic_error &&
1105              t.sec - wpa_s->last_michael_mic_error <= 60) ||
1106             wpa_s->pending_mic_error_report) {
1107                 if (wpa_s->pending_mic_error_report) {
1108                         /*
1109                          * Send the pending MIC error report immediately since
1110                          * we are going to start countermeasures and AP better
1111                          * do the same.
1112                          */
1113                         wpa_sm_key_request(wpa_s->wpa, 1,
1114                                            wpa_s->pending_mic_error_pairwise);
1115                 }
1116
1117                 /* Send the new MIC error report immediately since we are going
1118                  * to start countermeasures and AP better do the same.
1119                  */
1120                 wpa_sm_key_request(wpa_s->wpa, 1, pairwise);
1121
1122                 /* initialize countermeasures */
1123                 wpa_s->countermeasures = 1;
1124                 wpa_msg(wpa_s, MSG_WARNING, "TKIP countermeasures started");
1125
1126                 /*
1127                  * Need to wait for completion of request frame. We do not get
1128                  * any callback for the message completion, so just wait a
1129                  * short while and hope for the best. */
1130                 os_sleep(0, 10000);
1131
1132                 wpa_drv_set_countermeasures(wpa_s, 1);
1133                 wpa_supplicant_deauthenticate(wpa_s,
1134                                               WLAN_REASON_MICHAEL_MIC_FAILURE);
1135                 eloop_cancel_timeout(wpa_supplicant_stop_countermeasures,
1136                                      wpa_s, NULL);
1137                 eloop_register_timeout(60, 0,
1138                                        wpa_supplicant_stop_countermeasures,
1139                                        wpa_s, NULL);
1140                 /* TODO: mark the AP rejected for 60 second. STA is
1141                  * allowed to associate with another AP.. */
1142         } else {
1143 #ifdef CONFIG_DELAYED_MIC_ERROR_REPORT
1144                 if (wpa_s->mic_errors_seen) {
1145                         /*
1146                          * Reduce the effectiveness of Michael MIC error
1147                          * reports as a means for attacking against TKIP if
1148                          * more than one MIC failure is noticed with the same
1149                          * PTK. We delay the transmission of the reports by a
1150                          * random time between 0 and 60 seconds in order to
1151                          * force the attacker wait 60 seconds before getting
1152                          * the information on whether a frame resulted in a MIC
1153                          * failure.
1154                          */
1155                         u8 rval[4];
1156                         int sec;
1157
1158                         if (os_get_random(rval, sizeof(rval)) < 0)
1159                                 sec = os_random() % 60;
1160                         else
1161                                 sec = WPA_GET_BE32(rval) % 60;
1162                         wpa_printf(MSG_DEBUG, "WPA: Delay MIC error report %d "
1163                                    "seconds", sec);
1164                         wpa_s->pending_mic_error_report = 1;
1165                         wpa_s->pending_mic_error_pairwise = pairwise;
1166                         eloop_cancel_timeout(
1167                                 wpa_supplicant_delayed_mic_error_report,
1168                                 wpa_s, NULL);
1169                         eloop_register_timeout(
1170                                 sec, os_random() % 1000000,
1171                                 wpa_supplicant_delayed_mic_error_report,
1172                                 wpa_s, NULL);
1173                 } else {
1174                         wpa_sm_key_request(wpa_s->wpa, 1, pairwise);
1175                 }
1176 #else /* CONFIG_DELAYED_MIC_ERROR_REPORT */
1177                 wpa_sm_key_request(wpa_s->wpa, 1, pairwise);
1178 #endif /* CONFIG_DELAYED_MIC_ERROR_REPORT */
1179         }
1180         wpa_s->last_michael_mic_error = t.sec;
1181         wpa_s->mic_errors_seen++;
1182 }
1183
1184
1185 #ifdef CONFIG_TERMINATE_ONLASTIF
1186 static int any_interfaces(struct wpa_supplicant *head)
1187 {
1188         struct wpa_supplicant *wpa_s;
1189
1190         for (wpa_s = head; wpa_s != NULL; wpa_s = wpa_s->next)
1191                 if (!wpa_s->interface_removed)
1192                         return 1;
1193         return 0;
1194 }
1195 #endif /* CONFIG_TERMINATE_ONLASTIF */
1196
1197
1198 static void
1199 wpa_supplicant_event_interface_status(struct wpa_supplicant *wpa_s,
1200                                       union wpa_event_data *data)
1201 {
1202         if (os_strcmp(wpa_s->ifname, data->interface_status.ifname) != 0)
1203                 return;
1204
1205         switch (data->interface_status.ievent) {
1206         case EVENT_INTERFACE_ADDED:
1207                 if (!wpa_s->interface_removed)
1208                         break;
1209                 wpa_s->interface_removed = 0;
1210                 wpa_printf(MSG_DEBUG, "Configured interface was added.");
1211                 if (wpa_supplicant_driver_init(wpa_s) < 0) {
1212                         wpa_printf(MSG_INFO, "Failed to initialize the driver "
1213                                    "after interface was added.");
1214                 }
1215                 break;
1216         case EVENT_INTERFACE_REMOVED:
1217                 wpa_printf(MSG_DEBUG, "Configured interface was removed.");
1218                 wpa_s->interface_removed = 1;
1219                 wpa_supplicant_mark_disassoc(wpa_s);
1220                 l2_packet_deinit(wpa_s->l2);
1221                 wpa_s->l2 = NULL;
1222 #ifdef CONFIG_TERMINATE_ONLASTIF
1223                 /* check if last interface */
1224                 if (!any_interfaces(wpa_s->global->ifaces))
1225                         eloop_terminate();
1226 #endif /* CONFIG_TERMINATE_ONLASTIF */
1227                 break;
1228         }
1229 }
1230
1231
1232 #ifdef CONFIG_PEERKEY
1233 static void
1234 wpa_supplicant_event_stkstart(struct wpa_supplicant *wpa_s,
1235                               union wpa_event_data *data)
1236 {
1237         if (data == NULL)
1238                 return;
1239         wpa_sm_stkstart(wpa_s->wpa, data->stkstart.peer);
1240 }
1241 #endif /* CONFIG_PEERKEY */
1242
1243
1244 #ifdef CONFIG_IEEE80211R
1245 static void
1246 wpa_supplicant_event_ft_response(struct wpa_supplicant *wpa_s,
1247                                  union wpa_event_data *data)
1248 {
1249         if (data == NULL)
1250                 return;
1251
1252         if (wpa_ft_process_response(wpa_s->wpa, data->ft_ies.ies,
1253                                     data->ft_ies.ies_len,
1254                                     data->ft_ies.ft_action,
1255                                     data->ft_ies.target_ap,
1256                                     data->ft_ies.ric_ies,
1257                                     data->ft_ies.ric_ies_len) < 0) {
1258                 /* TODO: prevent MLME/driver from trying to associate? */
1259         }
1260 }
1261 #endif /* CONFIG_IEEE80211R */
1262
1263
1264 #ifdef CONFIG_IBSS_RSN
1265 static void wpa_supplicant_event_ibss_rsn_start(struct wpa_supplicant *wpa_s,
1266                                                 union wpa_event_data *data)
1267 {
1268         if (data == NULL)
1269                 return;
1270         ibss_rsn_start(wpa_s->ibss_rsn, data->ibss_rsn_start.peer);
1271 }
1272 #endif /* CONFIG_IBSS_RSN */
1273
1274
1275 void wpa_supplicant_event(void *ctx, wpa_event_type event,
1276                           union wpa_event_data *data)
1277 {
1278         struct wpa_supplicant *wpa_s = ctx;
1279
1280         switch (event) {
1281         case EVENT_AUTH:
1282                 sme_event_auth(wpa_s, data);
1283                 break;
1284         case EVENT_ASSOC:
1285                 wpa_supplicant_event_assoc(wpa_s, data);
1286                 break;
1287         case EVENT_DEAUTH:
1288         case EVENT_DISASSOC:
1289                 wpa_supplicant_event_disassoc(wpa_s);
1290                 break;
1291         case EVENT_MICHAEL_MIC_FAILURE:
1292                 wpa_supplicant_event_michael_mic_failure(wpa_s, data);
1293                 break;
1294 #ifndef CONFIG_NO_SCAN_PROCESSING
1295         case EVENT_SCAN_RESULTS:
1296                 wpa_supplicant_event_scan_results(wpa_s);
1297                 break;
1298 #endif /* CONFIG_NO_SCAN_PROCESSING */
1299         case EVENT_ASSOCINFO:
1300                 wpa_supplicant_event_associnfo(wpa_s, data);
1301                 break;
1302         case EVENT_INTERFACE_STATUS:
1303                 wpa_supplicant_event_interface_status(wpa_s, data);
1304                 break;
1305         case EVENT_PMKID_CANDIDATE:
1306                 wpa_supplicant_event_pmkid_candidate(wpa_s, data);
1307                 break;
1308 #ifdef CONFIG_PEERKEY
1309         case EVENT_STKSTART:
1310                 wpa_supplicant_event_stkstart(wpa_s, data);
1311                 break;
1312 #endif /* CONFIG_PEERKEY */
1313 #ifdef CONFIG_IEEE80211R
1314         case EVENT_FT_RESPONSE:
1315                 wpa_supplicant_event_ft_response(wpa_s, data);
1316                 break;
1317 #endif /* CONFIG_IEEE80211R */
1318 #ifdef CONFIG_IBSS_RSN
1319         case EVENT_IBSS_RSN_START:
1320                 wpa_supplicant_event_ibss_rsn_start(wpa_s, data);
1321                 break;
1322 #endif /* CONFIG_IBSS_RSN */
1323         case EVENT_ASSOC_REJECT:
1324                 sme_event_assoc_reject(wpa_s, data);
1325                 break;
1326         case EVENT_AUTH_TIMED_OUT:
1327                 sme_event_auth_timed_out(wpa_s, data);
1328                 break;
1329         case EVENT_ASSOC_TIMED_OUT:
1330                 sme_event_assoc_timed_out(wpa_s, data);
1331                 break;
1332         default:
1333                 wpa_printf(MSG_INFO, "Unknown event %d", event);
1334                 break;
1335         }
1336 }