2 * hostapd / Callback functions for driver wrappers
3 * Copyright (c) 2002-2013, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
9 #include "utils/includes.h"
11 #include "utils/common.h"
12 #include "utils/eloop.h"
13 #include "radius/radius.h"
14 #include "drivers/driver.h"
15 #include "common/ieee802_11_defs.h"
16 #include "common/ieee802_11_common.h"
17 #include "common/wpa_ctrl.h"
18 #include "crypto/random.h"
24 #include "ieee802_11.h"
25 #include "ieee802_11_auth.h"
27 #include "accounting.h"
28 #include "tkip_countermeasures.h"
29 #include "ieee802_1x.h"
31 #include "wps_hostapd.h"
32 #include "ap_drv_ops.h"
33 #include "ap_config.h"
34 #include "hw_features.h"
40 int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
41 const u8 *req_ies, size_t req_ies_len, int reassoc)
45 struct ieee802_11_elems elems;
48 #if defined(CONFIG_IEEE80211R) || defined(CONFIG_IEEE80211W)
49 u8 buf[sizeof(struct ieee80211_mgmt) + 1024];
51 #endif /* CONFIG_IEEE80211R || CONFIG_IEEE80211W */
52 u16 reason = WLAN_REASON_UNSPECIFIED;
53 u16 status = WLAN_STATUS_SUCCESS;
54 const u8 *p2p_dev_addr = NULL;
58 * This could potentially happen with unexpected event from the
59 * driver wrapper. This was seen at least in one case where the
60 * driver ended up being set to station mode while hostapd was
61 * running, so better make sure we stop processing such an
65 "hostapd_notif_assoc: Skip event with no address");
68 random_add_randomness(addr, ETH_ALEN);
70 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
71 HOSTAPD_LEVEL_INFO, "associated");
73 ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0);
75 ie = elems.wps_ie - 2;
76 ielen = elems.wps_ie_len + 2;
77 wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq");
78 } else if (elems.rsn_ie) {
79 ie = elems.rsn_ie - 2;
80 ielen = elems.rsn_ie_len + 2;
81 wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq");
82 } else if (elems.wpa_ie) {
83 ie = elems.wpa_ie - 2;
84 ielen = elems.wpa_ie_len + 2;
85 wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq");
87 } else if (elems.osen) {
89 ielen = elems.osen_len + 2;
90 wpa_printf(MSG_DEBUG, "STA included OSEN IE in (Re)AssocReq");
91 #endif /* CONFIG_HS20 */
96 "STA did not include WPS/RSN/WPA IE in (Re)AssocReq");
99 sta = ap_get_sta(hapd, addr);
101 ap_sta_no_session_timeout(hapd, sta);
102 accounting_sta_stop(hapd, sta);
105 * Make sure that the previously registered inactivity timer
106 * will not remove the STA immediately.
108 sta->timeout_next = STA_NULLFUNC;
110 sta = ap_sta_add(hapd, addr);
112 hostapd_drv_sta_disassoc(hapd, addr,
113 WLAN_REASON_DISASSOC_AP_BUSY);
117 sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
120 * ACL configurations to the drivers (implementing AP SME and ACL
121 * offload) without hostapd's knowledge, can result in a disconnection
122 * though the driver accepts the connection. Skip the hostapd check for
123 * ACL if the driver supports ACL offload to avoid potentially
124 * conflicting ACL rules.
126 if (hapd->iface->drv_max_acl_mac_addrs == 0 &&
127 hostapd_check_acl(hapd, addr, NULL) != HOSTAPD_ACL_ACCEPT) {
128 wpa_printf(MSG_INFO, "STA " MACSTR " not allowed to connect",
130 reason = WLAN_REASON_UNSPECIFIED;
136 wpabuf_free(sta->p2p_ie);
137 sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
140 p2p_dev_addr = p2p_get_go_dev_addr(sta->p2p_ie);
142 #endif /* CONFIG_P2P */
144 #ifdef CONFIG_IEEE80211N
146 if (elems.ht_capabilities &&
147 (hapd->iface->conf->ht_capab &
148 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET)) {
149 struct ieee80211_ht_capabilities *ht_cap =
150 (struct ieee80211_ht_capabilities *)
151 elems.ht_capabilities;
153 if (le_to_host16(ht_cap->ht_capabilities_info) &
154 HT_CAP_INFO_40MHZ_INTOLERANT)
155 ht40_intolerant_add(hapd->iface, sta);
157 #endif /* NEED_AP_MLME */
158 #endif /* CONFIG_IEEE80211N */
160 #ifdef CONFIG_INTERWORKING
161 if (elems.ext_capab && elems.ext_capab_len > 4) {
162 if (elems.ext_capab[4] & 0x01)
163 sta->qos_map_enabled = 1;
165 #endif /* CONFIG_INTERWORKING */
168 wpabuf_free(sta->hs20_ie);
169 if (elems.hs20 && elems.hs20_len > 4) {
170 sta->hs20_ie = wpabuf_alloc_copy(elems.hs20 + 4,
174 #endif /* CONFIG_HS20 */
177 wpabuf_free(sta->mb_ies);
178 if (hapd->iface->fst)
179 sta->mb_ies = mb_ies_by_info(&elems.mb_ies);
182 #endif /* CONFIG_FST */
184 mbo_ap_check_sta_assoc(hapd, sta, &elems);
186 ap_copy_sta_supp_op_classes(sta, elems.supp_op_classes,
187 elems.supp_op_classes_len);
189 if (hapd->conf->wpa) {
190 if (ie == NULL || ielen == 0) {
192 if (hapd->conf->wps_state) {
193 wpa_printf(MSG_DEBUG,
194 "STA did not include WPA/RSN IE in (Re)Association Request - possible WPS use");
195 sta->flags |= WLAN_STA_MAYBE_WPS;
198 #endif /* CONFIG_WPS */
200 wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
204 if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
205 os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
208 sta->flags |= WLAN_STA_WPS;
209 wps = ieee802_11_vendor_ie_concat(ie, ielen,
212 if (wps_is_20(wps)) {
213 wpa_printf(MSG_DEBUG,
214 "WPS: STA supports WPS 2.0");
215 sta->flags |= WLAN_STA_WPS2;
221 #endif /* CONFIG_WPS */
223 if (sta->wpa_sm == NULL)
224 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
227 if (sta->wpa_sm == NULL) {
228 wpa_printf(MSG_ERROR,
229 "Failed to initialize WPA state machine");
232 res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
234 elems.mdie, elems.mdie_len);
235 if (res != WPA_IE_OK) {
236 wpa_printf(MSG_DEBUG,
237 "WPA/RSN information element rejected? (res %u)",
239 wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
240 if (res == WPA_INVALID_GROUP) {
241 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
242 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
243 } else if (res == WPA_INVALID_PAIRWISE) {
244 reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
245 status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
246 } else if (res == WPA_INVALID_AKMP) {
247 reason = WLAN_REASON_AKMP_NOT_VALID;
248 status = WLAN_STATUS_AKMP_NOT_VALID;
250 #ifdef CONFIG_IEEE80211W
251 else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION) {
252 reason = WLAN_REASON_INVALID_IE;
253 status = WLAN_STATUS_INVALID_IE;
254 } else if (res == WPA_INVALID_MGMT_GROUP_CIPHER) {
255 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
256 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
258 #endif /* CONFIG_IEEE80211W */
260 reason = WLAN_REASON_INVALID_IE;
261 status = WLAN_STATUS_INVALID_IE;
265 #ifdef CONFIG_IEEE80211W
266 if ((sta->flags & WLAN_STA_MFP) && !sta->sa_query_timed_out &&
267 sta->sa_query_count > 0)
268 ap_check_sa_query_timeout(hapd, sta);
269 if ((sta->flags & WLAN_STA_MFP) && !sta->sa_query_timed_out &&
270 (sta->auth_alg != WLAN_AUTH_FT)) {
272 * STA has already been associated with MFP and SA
273 * Query timeout has not been reached. Reject the
274 * association attempt temporarily and start SA Query,
275 * if one is not pending.
278 if (sta->sa_query_count == 0)
279 ap_sta_start_sa_query(hapd, sta);
281 status = WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY;
283 p = hostapd_eid_assoc_comeback_time(hapd, sta, p);
285 hostapd_sta_assoc(hapd, addr, reassoc, status, buf,
290 if (wpa_auth_uses_mfp(sta->wpa_sm))
291 sta->flags |= WLAN_STA_MFP;
293 sta->flags &= ~WLAN_STA_MFP;
294 #endif /* CONFIG_IEEE80211W */
296 #ifdef CONFIG_IEEE80211R
297 if (sta->auth_alg == WLAN_AUTH_FT) {
298 status = wpa_ft_validate_reassoc(sta->wpa_sm, req_ies,
300 if (status != WLAN_STATUS_SUCCESS) {
301 if (status == WLAN_STATUS_INVALID_PMKID)
302 reason = WLAN_REASON_INVALID_IE;
303 if (status == WLAN_STATUS_INVALID_MDIE)
304 reason = WLAN_REASON_INVALID_IE;
305 if (status == WLAN_STATUS_INVALID_FTIE)
306 reason = WLAN_REASON_INVALID_IE;
310 #endif /* CONFIG_IEEE80211R */
311 } else if (hapd->conf->wps_state) {
316 wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
320 #ifdef CONFIG_WPS_STRICT
321 if (wps && wps_validate_assoc_req(wps) < 0) {
322 reason = WLAN_REASON_INVALID_IE;
323 status = WLAN_STATUS_INVALID_IE;
327 #endif /* CONFIG_WPS_STRICT */
329 sta->flags |= WLAN_STA_WPS;
330 if (wps_is_20(wps)) {
331 wpa_printf(MSG_DEBUG,
332 "WPS: STA supports WPS 2.0");
333 sta->flags |= WLAN_STA_WPS2;
336 sta->flags |= WLAN_STA_MAYBE_WPS;
338 #endif /* CONFIG_WPS */
340 } else if (hapd->conf->osen) {
341 if (elems.osen == NULL) {
343 hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
345 "No HS 2.0 OSEN element in association request");
346 return WLAN_STATUS_INVALID_IE;
349 wpa_printf(MSG_DEBUG, "HS 2.0: OSEN association");
350 if (sta->wpa_sm == NULL)
351 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
353 if (sta->wpa_sm == NULL) {
354 wpa_printf(MSG_WARNING,
355 "Failed to initialize WPA state machine");
356 return WLAN_STATUS_UNSPECIFIED_FAILURE;
358 if (wpa_validate_osen(hapd->wpa_auth, sta->wpa_sm,
359 elems.osen - 2, elems.osen_len + 2) < 0)
360 return WLAN_STATUS_INVALID_IE;
361 #endif /* CONFIG_HS20 */
365 if (hapd->conf->mbo_enabled && (hapd->conf->wpa & 2) &&
366 elems.mbo && sta->cell_capa && !(sta->flags & WLAN_STA_MFP) &&
367 hapd->conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) {
369 "MBO: Reject WPA2 association without PMF");
370 return WLAN_STATUS_UNSPECIFIED_FAILURE;
372 #endif /* CONFIG_MBO */
376 #endif /* CONFIG_WPS */
378 #ifdef CONFIG_IEEE80211R
379 p = wpa_sm_write_assoc_resp_ies(sta->wpa_sm, buf, sizeof(buf),
380 sta->auth_alg, req_ies, req_ies_len);
382 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
384 if (sta->auth_alg == WLAN_AUTH_FT)
385 ap_sta_set_authorized(hapd, sta, 1);
386 #else /* CONFIG_IEEE80211R */
387 /* Keep compiler silent about unused variables */
390 #endif /* CONFIG_IEEE80211R */
392 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
393 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
394 sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE;
396 hostapd_set_sta_flags(hapd, sta);
398 if (reassoc && (sta->auth_alg == WLAN_AUTH_FT))
399 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FT);
401 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
403 hostapd_new_assoc_sta(hapd, sta, !new_assoc);
405 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
409 p2p_group_notif_assoc(hapd->p2p_group, sta->addr,
410 req_ies, req_ies_len);
412 #endif /* CONFIG_P2P */
417 #ifdef CONFIG_IEEE80211R
418 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
419 #endif /* CONFIG_IEEE80211R */
420 hostapd_drv_sta_disassoc(hapd, sta->addr, reason);
421 ap_free_sta(hapd, sta);
426 void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
428 struct sta_info *sta;
432 * This could potentially happen with unexpected event from the
433 * driver wrapper. This was seen at least in one case where the
434 * driver ended up reporting a station mode event while hostapd
435 * was running, so better make sure we stop processing such an
438 wpa_printf(MSG_DEBUG,
439 "hostapd_notif_disassoc: Skip event with no address");
443 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
444 HOSTAPD_LEVEL_INFO, "disassociated");
446 sta = ap_get_sta(hapd, addr);
448 wpa_printf(MSG_DEBUG,
449 "Disassociation notification for unknown STA "
450 MACSTR, MAC2STR(addr));
454 ap_sta_set_authorized(hapd, sta, 0);
455 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
456 wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
457 sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
458 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
459 ap_free_sta(hapd, sta);
463 void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr)
465 struct sta_info *sta = ap_get_sta(hapd, addr);
467 if (!sta || !hapd->conf->disassoc_low_ack)
470 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
472 "disconnected due to excessive missing ACKs");
473 hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK);
475 ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK);
479 void hostapd_event_ch_switch(struct hostapd_data *hapd, int freq, int ht,
480 int offset, int width, int cf1, int cf2)
483 int channel, chwidth, is_dfs;
484 u8 seg0_idx = 0, seg1_idx = 0;
486 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
488 "driver had channel switch: freq=%d, ht=%d, offset=%d, width=%d (%s), cf1=%d, cf2=%d",
489 freq, ht, offset, width, channel_width_to_string(width),
492 hapd->iface->freq = freq;
494 channel = hostapd_hw_get_channel(hapd, freq);
496 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
497 HOSTAPD_LEVEL_WARNING,
498 "driver switched to bad channel!");
504 chwidth = VHT_CHANWIDTH_80MHZ;
506 case CHAN_WIDTH_80P80:
507 chwidth = VHT_CHANWIDTH_80P80MHZ;
510 chwidth = VHT_CHANWIDTH_160MHZ;
512 case CHAN_WIDTH_20_NOHT:
516 chwidth = VHT_CHANWIDTH_USE_HT;
520 switch (hapd->iface->current_mode->mode) {
521 case HOSTAPD_MODE_IEEE80211A:
523 seg0_idx = (cf1 - 5000) / 5;
525 seg1_idx = (cf2 - 5000) / 5;
528 ieee80211_freq_to_chan(cf1, &seg0_idx);
529 ieee80211_freq_to_chan(cf2, &seg1_idx);
533 hapd->iconf->channel = channel;
534 hapd->iconf->ieee80211n = ht;
536 hapd->iconf->ieee80211ac = 0;
537 hapd->iconf->secondary_channel = offset;
538 hapd->iconf->vht_oper_chwidth = chwidth;
539 hapd->iconf->vht_oper_centr_freq_seg0_idx = seg0_idx;
540 hapd->iconf->vht_oper_centr_freq_seg1_idx = seg1_idx;
542 is_dfs = ieee80211_is_dfs(freq);
544 if (hapd->csa_in_progress &&
545 freq == hapd->cs_freq_params.freq) {
546 hostapd_cleanup_cs_params(hapd);
547 ieee802_11_set_beacon(hapd);
549 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED
550 "freq=%d dfs=%d", freq, is_dfs);
551 } else if (hapd->iface->drv_flags & WPA_DRIVER_FLAGS_DFS_OFFLOAD) {
552 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED
553 "freq=%d dfs=%d", freq, is_dfs);
555 #endif /* NEED_AP_MLME */
559 void hostapd_event_connect_failed_reason(struct hostapd_data *hapd,
560 const u8 *addr, int reason_code)
562 switch (reason_code) {
563 case MAX_CLIENT_REACHED:
564 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_MAX_STA MACSTR,
568 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_BLOCKED_STA MACSTR,
576 void hostapd_acs_channel_selected(struct hostapd_data *hapd,
577 struct acs_selected_channels *acs_res)
582 if (hapd->iconf->channel) {
583 wpa_printf(MSG_INFO, "ACS: Channel was already set to %d",
584 hapd->iconf->channel);
588 if (!hapd->iface->current_mode) {
589 for (i = 0; i < hapd->iface->num_hw_features; i++) {
590 struct hostapd_hw_modes *mode =
591 &hapd->iface->hw_features[i];
593 if (mode->mode == acs_res->hw_mode) {
594 hapd->iface->current_mode = mode;
598 if (!hapd->iface->current_mode) {
599 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
600 HOSTAPD_LEVEL_WARNING,
601 "driver selected to bad hw_mode");
607 hapd->iface->freq = hostapd_hw_get_freq(hapd, acs_res->pri_channel);
609 if (!acs_res->pri_channel) {
610 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
611 HOSTAPD_LEVEL_WARNING,
612 "driver switched to bad channel");
617 hapd->iconf->channel = acs_res->pri_channel;
618 hapd->iconf->acs = 1;
620 if (acs_res->sec_channel == 0)
621 hapd->iconf->secondary_channel = 0;
622 else if (acs_res->sec_channel < acs_res->pri_channel)
623 hapd->iconf->secondary_channel = -1;
624 else if (acs_res->sec_channel > acs_res->pri_channel)
625 hapd->iconf->secondary_channel = 1;
627 wpa_printf(MSG_ERROR, "Invalid secondary channel!");
632 if (hapd->iface->conf->ieee80211ac) {
633 /* set defaults for backwards compatibility */
634 hapd->iconf->vht_oper_centr_freq_seg1_idx = 0;
635 hapd->iconf->vht_oper_centr_freq_seg0_idx = 0;
636 hapd->iconf->vht_oper_chwidth = VHT_CHANWIDTH_USE_HT;
637 if (acs_res->ch_width == 80) {
638 hapd->iconf->vht_oper_centr_freq_seg0_idx =
639 acs_res->vht_seg0_center_ch;
640 hapd->iconf->vht_oper_chwidth = VHT_CHANWIDTH_80MHZ;
641 } else if (acs_res->ch_width == 160) {
642 if (acs_res->vht_seg1_center_ch == 0) {
643 hapd->iconf->vht_oper_centr_freq_seg0_idx =
644 acs_res->vht_seg0_center_ch;
645 hapd->iconf->vht_oper_chwidth =
646 VHT_CHANWIDTH_160MHZ;
648 hapd->iconf->vht_oper_centr_freq_seg0_idx =
649 acs_res->vht_seg0_center_ch;
650 hapd->iconf->vht_oper_centr_freq_seg1_idx =
651 acs_res->vht_seg1_center_ch;
652 hapd->iconf->vht_oper_chwidth =
653 VHT_CHANWIDTH_80P80MHZ;
659 ret = hostapd_acs_completed(hapd->iface, err);
661 wpa_printf(MSG_ERROR,
662 "ACS: Possibly channel configuration is invalid");
665 #endif /* CONFIG_ACS */
668 int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da,
669 const u8 *bssid, const u8 *ie, size_t ie_len,
675 if (sa == NULL || ie == NULL)
678 random_add_randomness(sa, ETH_ALEN);
679 for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) {
680 if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
681 sa, da, bssid, ie, ie_len,
693 #ifdef CONFIG_IEEE80211R
694 static void hostapd_notify_auth_ft_finish(void *ctx, const u8 *dst,
696 u16 auth_transaction, u16 status,
697 const u8 *ies, size_t ies_len)
699 struct hostapd_data *hapd = ctx;
700 struct sta_info *sta;
702 sta = ap_get_sta(hapd, dst);
706 hostapd_logger(hapd, dst, HOSTAPD_MODULE_IEEE80211,
707 HOSTAPD_LEVEL_DEBUG, "authentication OK (FT)");
708 sta->flags |= WLAN_STA_AUTH;
710 hostapd_sta_auth(hapd, dst, auth_transaction, status, ies, ies_len);
712 #endif /* CONFIG_IEEE80211R */
715 static void hostapd_notif_auth(struct hostapd_data *hapd,
716 struct auth_info *rx_auth)
718 struct sta_info *sta;
719 u16 status = WLAN_STATUS_SUCCESS;
720 u8 resp_ies[2 + WLAN_AUTH_CHALLENGE_LEN];
721 size_t resp_ies_len = 0;
723 sta = ap_get_sta(hapd, rx_auth->peer);
725 sta = ap_sta_add(hapd, rx_auth->peer);
727 status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
731 sta->flags &= ~WLAN_STA_PREAUTH;
732 ieee802_1x_notify_pre_auth(sta->eapol_sm, 0);
733 #ifdef CONFIG_IEEE80211R
734 if (rx_auth->auth_type == WLAN_AUTH_FT && hapd->wpa_auth) {
735 sta->auth_alg = WLAN_AUTH_FT;
736 if (sta->wpa_sm == NULL)
737 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
739 if (sta->wpa_sm == NULL) {
740 wpa_printf(MSG_DEBUG,
741 "FT: Failed to initialize WPA state machine");
742 status = WLAN_STATUS_UNSPECIFIED_FAILURE;
745 wpa_ft_process_auth(sta->wpa_sm, rx_auth->bssid,
746 rx_auth->auth_transaction, rx_auth->ies,
748 hostapd_notify_auth_ft_finish, hapd);
751 #endif /* CONFIG_IEEE80211R */
753 hostapd_sta_auth(hapd, rx_auth->peer, rx_auth->auth_transaction + 1,
754 status, resp_ies, resp_ies_len);
758 static void hostapd_action_rx(struct hostapd_data *hapd,
759 struct rx_mgmt *drv_mgmt)
761 struct ieee80211_mgmt *mgmt;
762 struct sta_info *sta;
763 size_t plen __maybe_unused;
766 if (drv_mgmt->frame_len < 24 + 1)
769 plen = drv_mgmt->frame_len - 24 - 1;
771 mgmt = (struct ieee80211_mgmt *) drv_mgmt->frame;
772 fc = le_to_host16(mgmt->frame_control);
773 if (WLAN_FC_GET_STYPE(fc) != WLAN_FC_STYPE_ACTION)
774 return; /* handled by the driver */
776 wpa_printf(MSG_DEBUG, "RX_ACTION cat %d action plen %d",
777 mgmt->u.action.category, (int) plen);
779 sta = ap_get_sta(hapd, mgmt->sa);
781 wpa_printf(MSG_DEBUG, "%s: station not found", __func__);
784 #ifdef CONFIG_IEEE80211R
785 if (mgmt->u.action.category == WLAN_ACTION_FT) {
786 const u8 *payload = drv_mgmt->frame + 24 + 1;
788 wpa_ft_action_rx(sta->wpa_sm, payload, plen);
790 #endif /* CONFIG_IEEE80211R */
791 #ifdef CONFIG_IEEE80211W
792 if (mgmt->u.action.category == WLAN_ACTION_SA_QUERY && plen >= 4) {
793 ieee802_11_sa_query_action(
795 mgmt->u.action.u.sa_query_resp.action,
796 mgmt->u.action.u.sa_query_resp.trans_id);
798 #endif /* CONFIG_IEEE80211W */
800 if (mgmt->u.action.category == WLAN_ACTION_WNM) {
801 ieee802_11_rx_wnm_action_ap(hapd, mgmt, drv_mgmt->frame_len);
803 #endif /* CONFIG_WNM */
805 if (mgmt->u.action.category == WLAN_ACTION_FST && hapd->iface->fst) {
806 fst_rx_action(hapd->iface->fst, mgmt, drv_mgmt->frame_len);
809 #endif /* CONFIG_FST */
816 #define HAPD_BROADCAST ((struct hostapd_data *) -1)
818 static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
825 if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
826 bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
827 return HAPD_BROADCAST;
829 for (i = 0; i < iface->num_bss; i++) {
830 if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
831 return iface->bss[i];
838 static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
839 const u8 *bssid, const u8 *addr,
842 hapd = get_hapd_bssid(hapd->iface, bssid);
843 if (hapd == NULL || hapd == HAPD_BROADCAST)
846 ieee802_11_rx_from_unknown(hapd, addr, wds);
850 static int hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt)
852 struct hostapd_iface *iface = hapd->iface;
853 const struct ieee80211_hdr *hdr;
855 struct hostapd_frame_info fi;
858 #ifdef CONFIG_TESTING_OPTIONS
859 if (hapd->ext_mgmt_frame_handling) {
860 size_t hex_len = 2 * rx_mgmt->frame_len + 1;
861 char *hex = os_malloc(hex_len);
864 wpa_snprintf_hex(hex, hex_len, rx_mgmt->frame,
866 wpa_msg(hapd->msg_ctx, MSG_INFO, "MGMT-RX %s", hex);
871 #endif /* CONFIG_TESTING_OPTIONS */
873 hdr = (const struct ieee80211_hdr *) rx_mgmt->frame;
874 bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len);
878 hapd = get_hapd_bssid(iface, bssid);
880 u16 fc = le_to_host16(hdr->frame_control);
883 * Drop frames to unknown BSSIDs except for Beacon frames which
884 * could be used to update neighbor information.
886 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
887 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
888 hapd = iface->bss[0];
893 os_memset(&fi, 0, sizeof(fi));
894 fi.datarate = rx_mgmt->datarate;
895 fi.ssi_signal = rx_mgmt->ssi_signal;
897 if (hapd == HAPD_BROADCAST) {
901 for (i = 0; i < iface->num_bss; i++) {
902 /* if bss is set, driver will call this function for
903 * each bss individually. */
904 if (rx_mgmt->drv_priv &&
905 (iface->bss[i]->drv_priv != rx_mgmt->drv_priv))
908 if (ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame,
909 rx_mgmt->frame_len, &fi) > 0)
913 ret = ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len,
916 random_add_randomness(&fi, sizeof(fi));
922 static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf,
923 size_t len, u16 stype, int ok)
925 struct ieee80211_hdr *hdr;
926 struct hostapd_data *orig_hapd = hapd;
928 hdr = (struct ieee80211_hdr *) buf;
929 hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
932 if (hapd == HAPD_BROADCAST) {
933 if (stype != WLAN_FC_STYPE_ACTION || len <= 25 ||
934 buf[24] != WLAN_ACTION_PUBLIC)
936 hapd = get_hapd_bssid(orig_hapd->iface, hdr->addr2);
937 if (!hapd || hapd == HAPD_BROADCAST)
940 * Allow processing of TX status for a Public Action frame that
941 * used wildcard BBSID.
944 ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
947 #endif /* NEED_AP_MLME */
950 static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr)
952 struct sta_info *sta = ap_get_sta(hapd, addr);
957 wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR
958 " - adding a new STA", MAC2STR(addr));
959 sta = ap_sta_add(hapd, addr);
961 hostapd_new_assoc_sta(hapd, sta, 0);
963 wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR,
972 static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src,
973 const u8 *data, size_t data_len)
975 struct hostapd_iface *iface = hapd->iface;
976 struct sta_info *sta;
979 for (j = 0; j < iface->num_bss; j++) {
980 sta = ap_get_sta(iface->bss[j], src);
981 if (sta && sta->flags & WLAN_STA_ASSOC) {
982 hapd = iface->bss[j];
987 ieee802_1x_receive(hapd, src, data, data_len);
993 static struct hostapd_channel_data * hostapd_get_mode_channel(
994 struct hostapd_iface *iface, unsigned int freq)
997 struct hostapd_channel_data *chan;
999 for (i = 0; i < iface->current_mode->num_channels; i++) {
1000 chan = &iface->current_mode->channels[i];
1001 if ((unsigned int) chan->freq == freq)
1009 static void hostapd_update_nf(struct hostapd_iface *iface,
1010 struct hostapd_channel_data *chan,
1011 struct freq_survey *survey)
1013 if (!iface->chans_surveyed) {
1014 chan->min_nf = survey->nf;
1015 iface->lowest_nf = survey->nf;
1017 if (dl_list_empty(&chan->survey_list))
1018 chan->min_nf = survey->nf;
1019 else if (survey->nf < chan->min_nf)
1020 chan->min_nf = survey->nf;
1021 if (survey->nf < iface->lowest_nf)
1022 iface->lowest_nf = survey->nf;
1027 static void hostapd_single_channel_get_survey(struct hostapd_iface *iface,
1028 struct survey_results *survey_res)
1030 struct hostapd_channel_data *chan;
1031 struct freq_survey *survey;
1032 u64 divisor, dividend;
1034 survey = dl_list_first(&survey_res->survey_list, struct freq_survey,
1036 if (!survey || !survey->freq)
1039 chan = hostapd_get_mode_channel(iface, survey->freq);
1040 if (!chan || chan->flag & HOSTAPD_CHAN_DISABLED)
1043 wpa_printf(MSG_DEBUG,
1044 "Single Channel Survey: (freq=%d channel_time=%ld channel_time_busy=%ld)",
1046 (unsigned long int) survey->channel_time,
1047 (unsigned long int) survey->channel_time_busy);
1049 if (survey->channel_time > iface->last_channel_time &&
1050 survey->channel_time > survey->channel_time_busy) {
1051 dividend = survey->channel_time_busy -
1052 iface->last_channel_time_busy;
1053 divisor = survey->channel_time - iface->last_channel_time;
1055 iface->channel_utilization = dividend * 255 / divisor;
1056 wpa_printf(MSG_DEBUG, "Channel Utilization: %d",
1057 iface->channel_utilization);
1059 iface->last_channel_time = survey->channel_time;
1060 iface->last_channel_time_busy = survey->channel_time_busy;
1064 void hostapd_event_get_survey(struct hostapd_iface *iface,
1065 struct survey_results *survey_results)
1067 struct freq_survey *survey, *tmp;
1068 struct hostapd_channel_data *chan;
1070 if (dl_list_empty(&survey_results->survey_list)) {
1071 wpa_printf(MSG_DEBUG, "No survey data received");
1075 if (survey_results->freq_filter) {
1076 hostapd_single_channel_get_survey(iface, survey_results);
1080 dl_list_for_each_safe(survey, tmp, &survey_results->survey_list,
1081 struct freq_survey, list) {
1082 chan = hostapd_get_mode_channel(iface, survey->freq);
1085 if (chan->flag & HOSTAPD_CHAN_DISABLED)
1088 dl_list_del(&survey->list);
1089 dl_list_add_tail(&chan->survey_list, &survey->list);
1091 hostapd_update_nf(iface, chan, survey);
1093 iface->chans_surveyed++;
1101 static void hostapd_event_iface_unavailable(struct hostapd_data *hapd)
1103 wpa_printf(MSG_DEBUG, "Interface %s is unavailable -- stopped",
1106 if (hapd->csa_in_progress) {
1107 wpa_printf(MSG_INFO, "CSA failed (%s was stopped)",
1109 hostapd_switch_channel_fallback(hapd->iface,
1110 &hapd->cs_freq_params);
1115 static void hostapd_event_dfs_radar_detected(struct hostapd_data *hapd,
1116 struct dfs_event *radar)
1118 wpa_printf(MSG_DEBUG, "DFS radar detected on %d MHz", radar->freq);
1119 hostapd_dfs_radar_detected(hapd->iface, radar->freq, radar->ht_enabled,
1120 radar->chan_offset, radar->chan_width,
1121 radar->cf1, radar->cf2);
1125 static void hostapd_event_dfs_cac_finished(struct hostapd_data *hapd,
1126 struct dfs_event *radar)
1128 wpa_printf(MSG_DEBUG, "DFS CAC finished on %d MHz", radar->freq);
1129 hostapd_dfs_complete_cac(hapd->iface, 1, radar->freq, radar->ht_enabled,
1130 radar->chan_offset, radar->chan_width,
1131 radar->cf1, radar->cf2);
1135 static void hostapd_event_dfs_cac_aborted(struct hostapd_data *hapd,
1136 struct dfs_event *radar)
1138 wpa_printf(MSG_DEBUG, "DFS CAC aborted on %d MHz", radar->freq);
1139 hostapd_dfs_complete_cac(hapd->iface, 0, radar->freq, radar->ht_enabled,
1140 radar->chan_offset, radar->chan_width,
1141 radar->cf1, radar->cf2);
1145 static void hostapd_event_dfs_nop_finished(struct hostapd_data *hapd,
1146 struct dfs_event *radar)
1148 wpa_printf(MSG_DEBUG, "DFS NOP finished on %d MHz", radar->freq);
1149 hostapd_dfs_nop_finished(hapd->iface, radar->freq, radar->ht_enabled,
1150 radar->chan_offset, radar->chan_width,
1151 radar->cf1, radar->cf2);
1155 static void hostapd_event_dfs_cac_started(struct hostapd_data *hapd,
1156 struct dfs_event *radar)
1158 wpa_printf(MSG_DEBUG, "DFS offload CAC started on %d MHz", radar->freq);
1159 hostapd_dfs_start_cac(hapd->iface, radar->freq, radar->ht_enabled,
1160 radar->chan_offset, radar->chan_width,
1161 radar->cf1, radar->cf2);
1164 #endif /* NEED_AP_MLME */
1167 void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
1168 union wpa_event_data *data)
1170 struct hostapd_data *hapd = ctx;
1171 #ifndef CONFIG_NO_STDOUT_DEBUG
1172 int level = MSG_DEBUG;
1174 if (event == EVENT_RX_MGMT && data->rx_mgmt.frame &&
1175 data->rx_mgmt.frame_len >= 24) {
1176 const struct ieee80211_hdr *hdr;
1179 hdr = (const struct ieee80211_hdr *) data->rx_mgmt.frame;
1180 fc = le_to_host16(hdr->frame_control);
1181 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1182 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
1183 level = MSG_EXCESSIVE;
1184 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1185 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ)
1186 level = MSG_EXCESSIVE;
1189 wpa_dbg(hapd->msg_ctx, level, "Event %s (%d) received",
1190 event_to_string(event), event);
1191 #endif /* CONFIG_NO_STDOUT_DEBUG */
1194 case EVENT_MICHAEL_MIC_FAILURE:
1195 michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
1197 case EVENT_SCAN_RESULTS:
1198 if (hapd->iface->scan_cb)
1199 hapd->iface->scan_cb(hapd->iface);
1201 case EVENT_WPS_BUTTON_PUSHED:
1202 hostapd_wps_button_pushed(hapd, NULL);
1205 case EVENT_TX_STATUS:
1206 switch (data->tx_status.type) {
1207 case WLAN_FC_TYPE_MGMT:
1208 hostapd_mgmt_tx_cb(hapd, data->tx_status.data,
1209 data->tx_status.data_len,
1210 data->tx_status.stype,
1211 data->tx_status.ack);
1213 case WLAN_FC_TYPE_DATA:
1214 hostapd_tx_status(hapd, data->tx_status.dst,
1215 data->tx_status.data,
1216 data->tx_status.data_len,
1217 data->tx_status.ack);
1221 case EVENT_EAPOL_TX_STATUS:
1222 hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst,
1223 data->eapol_tx_status.data,
1224 data->eapol_tx_status.data_len,
1225 data->eapol_tx_status.ack);
1227 case EVENT_DRIVER_CLIENT_POLL_OK:
1228 hostapd_client_poll_ok(hapd, data->client_poll.addr);
1230 case EVENT_RX_FROM_UNKNOWN:
1231 hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid,
1232 data->rx_from_unknown.addr,
1233 data->rx_from_unknown.wds);
1235 #endif /* NEED_AP_MLME */
1237 if (!data->rx_mgmt.frame)
1240 if (hostapd_mgmt_rx(hapd, &data->rx_mgmt) > 0)
1242 #endif /* NEED_AP_MLME */
1243 hostapd_action_rx(hapd, &data->rx_mgmt);
1245 case EVENT_RX_PROBE_REQ:
1246 if (data->rx_probe_req.sa == NULL ||
1247 data->rx_probe_req.ie == NULL)
1249 hostapd_probe_req_rx(hapd, data->rx_probe_req.sa,
1250 data->rx_probe_req.da,
1251 data->rx_probe_req.bssid,
1252 data->rx_probe_req.ie,
1253 data->rx_probe_req.ie_len,
1254 data->rx_probe_req.ssi_signal);
1257 hostapd_event_new_sta(hapd, data->new_sta.addr);
1259 case EVENT_EAPOL_RX:
1260 hostapd_event_eapol_rx(hapd, data->eapol_rx.src,
1261 data->eapol_rx.data,
1262 data->eapol_rx.data_len);
1267 hostapd_notif_assoc(hapd, data->assoc_info.addr,
1268 data->assoc_info.req_ies,
1269 data->assoc_info.req_ies_len,
1270 data->assoc_info.reassoc);
1272 case EVENT_DISASSOC:
1274 hostapd_notif_disassoc(hapd, data->disassoc_info.addr);
1278 hostapd_notif_disassoc(hapd, data->deauth_info.addr);
1280 case EVENT_STATION_LOW_ACK:
1283 hostapd_event_sta_low_ack(hapd, data->low_ack.addr);
1286 hostapd_notif_auth(hapd, &data->auth);
1288 case EVENT_CH_SWITCH:
1291 hostapd_event_ch_switch(hapd, data->ch_switch.freq,
1292 data->ch_switch.ht_enabled,
1293 data->ch_switch.ch_offset,
1294 data->ch_switch.ch_width,
1295 data->ch_switch.cf1,
1296 data->ch_switch.cf2);
1298 case EVENT_CONNECT_FAILED_REASON:
1301 hostapd_event_connect_failed_reason(
1302 hapd, data->connect_failed_reason.addr,
1303 data->connect_failed_reason.code);
1306 hostapd_event_get_survey(hapd->iface, &data->survey_results);
1309 case EVENT_INTERFACE_UNAVAILABLE:
1310 hostapd_event_iface_unavailable(hapd);
1312 case EVENT_DFS_RADAR_DETECTED:
1315 hostapd_event_dfs_radar_detected(hapd, &data->dfs_event);
1317 case EVENT_DFS_CAC_FINISHED:
1320 hostapd_event_dfs_cac_finished(hapd, &data->dfs_event);
1322 case EVENT_DFS_CAC_ABORTED:
1325 hostapd_event_dfs_cac_aborted(hapd, &data->dfs_event);
1327 case EVENT_DFS_NOP_FINISHED:
1330 hostapd_event_dfs_nop_finished(hapd, &data->dfs_event);
1332 case EVENT_CHANNEL_LIST_CHANGED:
1333 /* channel list changed (regulatory?), update channel list */
1334 /* TODO: check this. hostapd_get_hw_features() initializes
1335 * too much stuff. */
1336 /* hostapd_get_hw_features(hapd->iface); */
1337 hostapd_channel_list_updated(
1338 hapd->iface, data->channel_list_changed.initiator);
1340 case EVENT_DFS_CAC_STARTED:
1343 hostapd_event_dfs_cac_started(hapd, &data->dfs_event);
1345 #endif /* NEED_AP_MLME */
1346 case EVENT_INTERFACE_ENABLED:
1347 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_ENABLED);
1348 if (hapd->disabled && hapd->started) {
1351 * Try to re-enable interface if the driver stopped it
1352 * when the interface got disabled.
1354 wpa_auth_reconfig_group_keys(hapd->wpa_auth);
1355 hapd->reenable_beacon = 1;
1356 ieee802_11_set_beacon(hapd);
1359 case EVENT_INTERFACE_DISABLED:
1360 hostapd_free_stas(hapd);
1361 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_DISABLED);
1365 case EVENT_ACS_CHANNEL_SELECTED:
1366 hostapd_acs_channel_selected(hapd,
1367 &data->acs_selected_channels);
1369 #endif /* CONFIG_ACS */
1371 wpa_printf(MSG_DEBUG, "Unknown event %d", event);
1377 void wpa_supplicant_event_global(void *ctx, enum wpa_event_type event,
1378 union wpa_event_data *data)
1380 struct hapd_interfaces *interfaces = ctx;
1381 struct hostapd_data *hapd;
1383 if (event != EVENT_INTERFACE_STATUS)
1386 hapd = hostapd_get_iface(interfaces, data->interface_status.ifname);
1387 if (hapd && hapd->driver && hapd->driver->get_ifindex &&
1389 unsigned int ifindex;
1391 ifindex = hapd->driver->get_ifindex(hapd->drv_priv);
1392 if (ifindex != data->interface_status.ifindex) {
1393 wpa_dbg(hapd->msg_ctx, MSG_DEBUG,
1394 "interface status ifindex %d mismatch (%d)",
1395 ifindex, data->interface_status.ifindex);
1400 wpa_supplicant_event(hapd, event, data);
1403 #endif /* HOSTAPD */