2 * hostapd / Callback functions for driver wrappers
3 * Copyright (c) 2002-2013, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
9 #include "utils/includes.h"
11 #include "utils/common.h"
12 #include "utils/eloop.h"
13 #include "radius/radius.h"
14 #include "drivers/driver.h"
15 #include "common/ieee802_11_defs.h"
16 #include "common/ieee802_11_common.h"
17 #include "common/wpa_ctrl.h"
18 #include "crypto/random.h"
23 #include "ieee802_11.h"
25 #include "accounting.h"
26 #include "tkip_countermeasures.h"
27 #include "ieee802_1x.h"
29 #include "wps_hostapd.h"
30 #include "ap_drv_ops.h"
31 #include "ap_config.h"
32 #include "hw_features.h"
37 int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
38 const u8 *req_ies, size_t req_ies_len, int reassoc)
42 struct ieee802_11_elems elems;
45 #ifdef CONFIG_IEEE80211R
46 u8 buf[sizeof(struct ieee80211_mgmt) + 1024];
48 #endif /* CONFIG_IEEE80211R */
49 u16 reason = WLAN_REASON_UNSPECIFIED;
50 u16 status = WLAN_STATUS_SUCCESS;
51 const u8 *p2p_dev_addr = NULL;
55 * This could potentially happen with unexpected event from the
56 * driver wrapper. This was seen at least in one case where the
57 * driver ended up being set to station mode while hostapd was
58 * running, so better make sure we stop processing such an
61 wpa_printf(MSG_DEBUG, "hostapd_notif_assoc: Skip event with "
65 random_add_randomness(addr, ETH_ALEN);
67 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
68 HOSTAPD_LEVEL_INFO, "associated");
70 ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0);
72 ie = elems.wps_ie - 2;
73 ielen = elems.wps_ie_len + 2;
74 wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq");
75 } else if (elems.rsn_ie) {
76 ie = elems.rsn_ie - 2;
77 ielen = elems.rsn_ie_len + 2;
78 wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq");
79 } else if (elems.wpa_ie) {
80 ie = elems.wpa_ie - 2;
81 ielen = elems.wpa_ie_len + 2;
82 wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq");
84 } else if (elems.osen) {
86 ielen = elems.osen_len + 2;
87 wpa_printf(MSG_DEBUG, "STA included OSEN IE in (Re)AssocReq");
88 #endif /* CONFIG_HS20 */
92 wpa_printf(MSG_DEBUG, "STA did not include WPS/RSN/WPA IE in "
96 sta = ap_get_sta(hapd, addr);
98 ap_sta_no_session_timeout(hapd, sta);
99 accounting_sta_stop(hapd, sta);
102 * Make sure that the previously registered inactivity timer
103 * will not remove the STA immediately.
105 sta->timeout_next = STA_NULLFUNC;
107 sta = ap_sta_add(hapd, addr);
109 hostapd_drv_sta_disassoc(hapd, addr,
110 WLAN_REASON_DISASSOC_AP_BUSY);
114 sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
118 wpabuf_free(sta->p2p_ie);
119 sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
122 p2p_dev_addr = p2p_get_go_dev_addr(sta->p2p_ie);
124 #endif /* CONFIG_P2P */
126 #ifdef CONFIG_IEEE80211N
128 if (elems.ht_capabilities &&
129 elems.ht_capabilities_len >=
130 sizeof(struct ieee80211_ht_capabilities) &&
131 (hapd->iface->conf->ht_capab &
132 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET)) {
133 struct ieee80211_ht_capabilities *ht_cap =
134 (struct ieee80211_ht_capabilities *)
135 elems.ht_capabilities;
137 if (le_to_host16(ht_cap->ht_capabilities_info) &
138 HT_CAP_INFO_40MHZ_INTOLERANT)
139 ht40_intolerant_add(hapd->iface, sta);
141 #endif /* NEED_AP_MLME */
142 #endif /* CONFIG_IEEE80211N */
144 #ifdef CONFIG_INTERWORKING
145 if (elems.ext_capab && elems.ext_capab_len > 4) {
146 if (elems.ext_capab[4] & 0x01)
147 sta->qos_map_enabled = 1;
149 #endif /* CONFIG_INTERWORKING */
152 wpabuf_free(sta->hs20_ie);
153 if (elems.hs20 && elems.hs20_len > 4) {
154 sta->hs20_ie = wpabuf_alloc_copy(elems.hs20 + 4,
158 #endif /* CONFIG_HS20 */
160 if (hapd->conf->wpa) {
161 if (ie == NULL || ielen == 0) {
163 if (hapd->conf->wps_state) {
164 wpa_printf(MSG_DEBUG, "STA did not include "
165 "WPA/RSN IE in (Re)Association "
166 "Request - possible WPS use");
167 sta->flags |= WLAN_STA_MAYBE_WPS;
170 #endif /* CONFIG_WPS */
172 wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
176 if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
177 os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
179 sta->flags |= WLAN_STA_WPS;
180 wps = ieee802_11_vendor_ie_concat(ie, ielen,
183 if (wps_is_20(wps)) {
184 wpa_printf(MSG_DEBUG, "WPS: STA "
186 sta->flags |= WLAN_STA_WPS2;
192 #endif /* CONFIG_WPS */
194 if (sta->wpa_sm == NULL)
195 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
198 if (sta->wpa_sm == NULL) {
199 wpa_printf(MSG_ERROR, "Failed to initialize WPA state "
203 res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
205 elems.mdie, elems.mdie_len);
206 if (res != WPA_IE_OK) {
207 wpa_printf(MSG_DEBUG, "WPA/RSN information element "
208 "rejected? (res %u)", res);
209 wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
210 if (res == WPA_INVALID_GROUP) {
211 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
212 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
213 } else if (res == WPA_INVALID_PAIRWISE) {
214 reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
215 status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
216 } else if (res == WPA_INVALID_AKMP) {
217 reason = WLAN_REASON_AKMP_NOT_VALID;
218 status = WLAN_STATUS_AKMP_NOT_VALID;
220 #ifdef CONFIG_IEEE80211W
221 else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION) {
222 reason = WLAN_REASON_INVALID_IE;
223 status = WLAN_STATUS_INVALID_IE;
224 } else if (res == WPA_INVALID_MGMT_GROUP_CIPHER) {
225 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
226 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
228 #endif /* CONFIG_IEEE80211W */
230 reason = WLAN_REASON_INVALID_IE;
231 status = WLAN_STATUS_INVALID_IE;
235 #ifdef CONFIG_IEEE80211W
236 if ((sta->flags & WLAN_STA_MFP) && !sta->sa_query_timed_out &&
237 sta->sa_query_count > 0)
238 ap_check_sa_query_timeout(hapd, sta);
239 if ((sta->flags & WLAN_STA_MFP) && !sta->sa_query_timed_out &&
240 (sta->auth_alg != WLAN_AUTH_FT)) {
242 * STA has already been associated with MFP and SA
243 * Query timeout has not been reached. Reject the
244 * association attempt temporarily and start SA Query,
245 * if one is not pending.
248 if (sta->sa_query_count == 0)
249 ap_sta_start_sa_query(hapd, sta);
251 #ifdef CONFIG_IEEE80211R
252 status = WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY;
254 p = hostapd_eid_assoc_comeback_time(hapd, sta, p);
256 hostapd_sta_assoc(hapd, addr, reassoc, status, buf,
258 #endif /* CONFIG_IEEE80211R */
262 if (wpa_auth_uses_mfp(sta->wpa_sm))
263 sta->flags |= WLAN_STA_MFP;
265 sta->flags &= ~WLAN_STA_MFP;
266 #endif /* CONFIG_IEEE80211W */
268 #ifdef CONFIG_IEEE80211R
269 if (sta->auth_alg == WLAN_AUTH_FT) {
270 status = wpa_ft_validate_reassoc(sta->wpa_sm, req_ies,
272 if (status != WLAN_STATUS_SUCCESS) {
273 if (status == WLAN_STATUS_INVALID_PMKID)
274 reason = WLAN_REASON_INVALID_IE;
275 if (status == WLAN_STATUS_INVALID_MDIE)
276 reason = WLAN_REASON_INVALID_IE;
277 if (status == WLAN_STATUS_INVALID_FTIE)
278 reason = WLAN_REASON_INVALID_IE;
282 #endif /* CONFIG_IEEE80211R */
283 } else if (hapd->conf->wps_state) {
287 wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
291 #ifdef CONFIG_WPS_STRICT
292 if (wps && wps_validate_assoc_req(wps) < 0) {
293 reason = WLAN_REASON_INVALID_IE;
294 status = WLAN_STATUS_INVALID_IE;
298 #endif /* CONFIG_WPS_STRICT */
300 sta->flags |= WLAN_STA_WPS;
301 if (wps_is_20(wps)) {
302 wpa_printf(MSG_DEBUG, "WPS: STA supports "
304 sta->flags |= WLAN_STA_WPS2;
307 sta->flags |= WLAN_STA_MAYBE_WPS;
309 #endif /* CONFIG_WPS */
311 } else if (hapd->conf->osen) {
312 if (elems.osen == NULL) {
314 hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
316 "No HS 2.0 OSEN element in association request");
317 return WLAN_STATUS_INVALID_IE;
320 wpa_printf(MSG_DEBUG, "HS 2.0: OSEN association");
321 if (sta->wpa_sm == NULL)
322 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
324 if (sta->wpa_sm == NULL) {
325 wpa_printf(MSG_WARNING, "Failed to initialize WPA "
327 return WLAN_STATUS_UNSPECIFIED_FAILURE;
329 if (wpa_validate_osen(hapd->wpa_auth, sta->wpa_sm,
330 elems.osen - 2, elems.osen_len + 2) < 0)
331 return WLAN_STATUS_INVALID_IE;
332 #endif /* CONFIG_HS20 */
336 #endif /* CONFIG_WPS */
338 #ifdef CONFIG_IEEE80211R
339 p = wpa_sm_write_assoc_resp_ies(sta->wpa_sm, buf, sizeof(buf),
340 sta->auth_alg, req_ies, req_ies_len);
342 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
344 if (sta->auth_alg == WLAN_AUTH_FT)
345 ap_sta_set_authorized(hapd, sta, 1);
346 #else /* CONFIG_IEEE80211R */
347 /* Keep compiler silent about unused variables */
350 #endif /* CONFIG_IEEE80211R */
352 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
353 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
354 sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE;
356 hostapd_set_sta_flags(hapd, sta);
358 if (reassoc && (sta->auth_alg == WLAN_AUTH_FT))
359 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FT);
361 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
363 hostapd_new_assoc_sta(hapd, sta, !new_assoc);
365 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
369 p2p_group_notif_assoc(hapd->p2p_group, sta->addr,
370 req_ies, req_ies_len);
372 #endif /* CONFIG_P2P */
377 #ifdef CONFIG_IEEE80211R
378 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
379 #endif /* CONFIG_IEEE80211R */
380 hostapd_drv_sta_disassoc(hapd, sta->addr, reason);
381 ap_free_sta(hapd, sta);
386 void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
388 struct sta_info *sta;
392 * This could potentially happen with unexpected event from the
393 * driver wrapper. This was seen at least in one case where the
394 * driver ended up reporting a station mode event while hostapd
395 * was running, so better make sure we stop processing such an
398 wpa_printf(MSG_DEBUG, "hostapd_notif_disassoc: Skip event "
403 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
404 HOSTAPD_LEVEL_INFO, "disassociated");
406 sta = ap_get_sta(hapd, addr);
408 wpa_printf(MSG_DEBUG, "Disassociation notification for "
409 "unknown STA " MACSTR, MAC2STR(addr));
413 ap_sta_set_authorized(hapd, sta, 0);
414 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
415 wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
416 sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
417 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
418 ap_free_sta(hapd, sta);
422 void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr)
424 struct sta_info *sta = ap_get_sta(hapd, addr);
426 if (!sta || !hapd->conf->disassoc_low_ack)
429 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
430 HOSTAPD_LEVEL_INFO, "disconnected due to excessive "
432 hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK);
434 ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK);
438 void hostapd_event_ch_switch(struct hostapd_data *hapd, int freq, int ht,
439 int offset, int width, int cf1, int cf2)
442 int channel, chwidth, seg0_idx = 0, seg1_idx = 0;
444 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
446 "driver had channel switch: freq=%d, ht=%d, offset=%d, width=%d (%s), cf1=%d, cf2=%d",
447 freq, ht, offset, width, channel_width_to_string(width),
450 hapd->iface->freq = freq;
452 channel = hostapd_hw_get_channel(hapd, freq);
454 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
455 HOSTAPD_LEVEL_WARNING, "driver switched to "
462 chwidth = VHT_CHANWIDTH_80MHZ;
464 case CHAN_WIDTH_80P80:
465 chwidth = VHT_CHANWIDTH_80P80MHZ;
468 chwidth = VHT_CHANWIDTH_160MHZ;
470 case CHAN_WIDTH_20_NOHT:
474 chwidth = VHT_CHANWIDTH_USE_HT;
478 switch (hapd->iface->current_mode->mode) {
479 case HOSTAPD_MODE_IEEE80211A:
481 seg0_idx = (cf1 - 5000) / 5;
483 seg1_idx = (cf2 - 5000) / 5;
486 seg0_idx = hostapd_hw_get_channel(hapd, cf1);
487 seg1_idx = hostapd_hw_get_channel(hapd, cf2);
491 hapd->iconf->channel = channel;
492 hapd->iconf->ieee80211n = ht;
494 hapd->iconf->ieee80211ac = 0;
495 hapd->iconf->secondary_channel = offset;
496 hapd->iconf->vht_oper_chwidth = chwidth;
497 hapd->iconf->vht_oper_centr_freq_seg0_idx = seg0_idx;
498 hapd->iconf->vht_oper_centr_freq_seg1_idx = seg1_idx;
500 if (hapd->csa_in_progress &&
501 freq == hapd->cs_freq_params.freq) {
502 hostapd_cleanup_cs_params(hapd);
503 ieee802_11_set_beacon(hapd);
505 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED "freq=%d",
508 #endif /* NEED_AP_MLME */
512 void hostapd_event_connect_failed_reason(struct hostapd_data *hapd,
513 const u8 *addr, int reason_code)
515 switch (reason_code) {
516 case MAX_CLIENT_REACHED:
517 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_MAX_STA MACSTR,
521 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_BLOCKED_STA MACSTR,
529 static void hostapd_acs_channel_selected(struct hostapd_data *hapd,
530 u8 pri_channel, u8 sec_channel)
535 if (hapd->iconf->channel) {
536 wpa_printf(MSG_INFO, "ACS: Channel was already set to %d",
537 hapd->iconf->channel);
541 hapd->iface->freq = hostapd_hw_get_freq(hapd, pri_channel);
543 channel = pri_channel;
545 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
546 HOSTAPD_LEVEL_WARNING,
547 "driver switched to bad channel");
551 hapd->iconf->channel = channel;
553 if (sec_channel == 0)
554 hapd->iconf->secondary_channel = 0;
555 else if (sec_channel < pri_channel)
556 hapd->iconf->secondary_channel = -1;
557 else if (sec_channel > pri_channel)
558 hapd->iconf->secondary_channel = 1;
560 wpa_printf(MSG_ERROR, "Invalid secondary channel!");
564 ret = hostapd_acs_completed(hapd->iface, 0);
566 wpa_printf(MSG_ERROR,
567 "ACS: Possibly channel configuration is invalid");
570 #endif /* CONFIG_ACS */
573 int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da,
574 const u8 *bssid, const u8 *ie, size_t ie_len,
580 if (sa == NULL || ie == NULL)
583 random_add_randomness(sa, ETH_ALEN);
584 for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) {
585 if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
586 sa, da, bssid, ie, ie_len,
598 #ifdef CONFIG_IEEE80211R
599 static void hostapd_notify_auth_ft_finish(void *ctx, const u8 *dst,
601 u16 auth_transaction, u16 status,
602 const u8 *ies, size_t ies_len)
604 struct hostapd_data *hapd = ctx;
605 struct sta_info *sta;
607 sta = ap_get_sta(hapd, dst);
611 hostapd_logger(hapd, dst, HOSTAPD_MODULE_IEEE80211,
612 HOSTAPD_LEVEL_DEBUG, "authentication OK (FT)");
613 sta->flags |= WLAN_STA_AUTH;
615 hostapd_sta_auth(hapd, dst, auth_transaction, status, ies, ies_len);
617 #endif /* CONFIG_IEEE80211R */
620 static void hostapd_notif_auth(struct hostapd_data *hapd,
621 struct auth_info *rx_auth)
623 struct sta_info *sta;
624 u16 status = WLAN_STATUS_SUCCESS;
625 u8 resp_ies[2 + WLAN_AUTH_CHALLENGE_LEN];
626 size_t resp_ies_len = 0;
628 sta = ap_get_sta(hapd, rx_auth->peer);
630 sta = ap_sta_add(hapd, rx_auth->peer);
632 status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
636 sta->flags &= ~WLAN_STA_PREAUTH;
637 ieee802_1x_notify_pre_auth(sta->eapol_sm, 0);
638 #ifdef CONFIG_IEEE80211R
639 if (rx_auth->auth_type == WLAN_AUTH_FT && hapd->wpa_auth) {
640 sta->auth_alg = WLAN_AUTH_FT;
641 if (sta->wpa_sm == NULL)
642 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
644 if (sta->wpa_sm == NULL) {
645 wpa_printf(MSG_DEBUG, "FT: Failed to initialize WPA "
647 status = WLAN_STATUS_UNSPECIFIED_FAILURE;
650 wpa_ft_process_auth(sta->wpa_sm, rx_auth->bssid,
651 rx_auth->auth_transaction, rx_auth->ies,
653 hostapd_notify_auth_ft_finish, hapd);
656 #endif /* CONFIG_IEEE80211R */
658 hostapd_sta_auth(hapd, rx_auth->peer, rx_auth->auth_transaction + 1,
659 status, resp_ies, resp_ies_len);
663 static void hostapd_action_rx(struct hostapd_data *hapd,
664 struct rx_mgmt *drv_mgmt)
666 struct ieee80211_mgmt *mgmt;
667 struct sta_info *sta;
668 size_t plen __maybe_unused;
671 if (drv_mgmt->frame_len < 24 + 1)
674 plen = drv_mgmt->frame_len - 24 - 1;
676 mgmt = (struct ieee80211_mgmt *) drv_mgmt->frame;
677 fc = le_to_host16(mgmt->frame_control);
678 if (WLAN_FC_GET_STYPE(fc) != WLAN_FC_STYPE_ACTION)
679 return; /* handled by the driver */
681 wpa_printf(MSG_DEBUG, "RX_ACTION cat %d action plen %d",
682 mgmt->u.action.category, (int) plen);
684 sta = ap_get_sta(hapd, mgmt->sa);
686 wpa_printf(MSG_DEBUG, "%s: station not found", __func__);
689 #ifdef CONFIG_IEEE80211R
690 if (mgmt->u.action.category == WLAN_ACTION_FT) {
691 const u8 *payload = drv_mgmt->frame + 24 + 1;
692 wpa_ft_action_rx(sta->wpa_sm, payload, plen);
694 #endif /* CONFIG_IEEE80211R */
695 #ifdef CONFIG_IEEE80211W
696 if (mgmt->u.action.category == WLAN_ACTION_SA_QUERY && plen >= 4) {
697 ieee802_11_sa_query_action(
699 mgmt->u.action.u.sa_query_resp.action,
700 mgmt->u.action.u.sa_query_resp.trans_id);
702 #endif /* CONFIG_IEEE80211W */
704 if (mgmt->u.action.category == WLAN_ACTION_WNM) {
705 ieee802_11_rx_wnm_action_ap(hapd, mgmt, drv_mgmt->frame_len);
707 #endif /* CONFIG_WNM */
713 #define HAPD_BROADCAST ((struct hostapd_data *) -1)
715 static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
722 if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
723 bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
724 return HAPD_BROADCAST;
726 for (i = 0; i < iface->num_bss; i++) {
727 if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
728 return iface->bss[i];
735 static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
736 const u8 *bssid, const u8 *addr,
739 hapd = get_hapd_bssid(hapd->iface, bssid);
740 if (hapd == NULL || hapd == HAPD_BROADCAST)
743 ieee802_11_rx_from_unknown(hapd, addr, wds);
747 static int hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt)
749 struct hostapd_iface *iface = hapd->iface;
750 const struct ieee80211_hdr *hdr;
752 struct hostapd_frame_info fi;
755 #ifdef CONFIG_TESTING_OPTIONS
756 if (hapd->ext_mgmt_frame_handling) {
757 size_t hex_len = 2 * rx_mgmt->frame_len + 1;
758 char *hex = os_malloc(hex_len);
760 wpa_snprintf_hex(hex, hex_len, rx_mgmt->frame,
762 wpa_msg(hapd->msg_ctx, MSG_INFO, "MGMT-RX %s", hex);
767 #endif /* CONFIG_TESTING_OPTIONS */
769 hdr = (const struct ieee80211_hdr *) rx_mgmt->frame;
770 bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len);
774 hapd = get_hapd_bssid(iface, bssid);
777 fc = le_to_host16(hdr->frame_control);
780 * Drop frames to unknown BSSIDs except for Beacon frames which
781 * could be used to update neighbor information.
783 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
784 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
785 hapd = iface->bss[0];
790 os_memset(&fi, 0, sizeof(fi));
791 fi.datarate = rx_mgmt->datarate;
792 fi.ssi_signal = rx_mgmt->ssi_signal;
794 if (hapd == HAPD_BROADCAST) {
797 for (i = 0; i < iface->num_bss; i++) {
798 /* if bss is set, driver will call this function for
799 * each bss individually. */
800 if (rx_mgmt->drv_priv &&
801 (iface->bss[i]->drv_priv != rx_mgmt->drv_priv))
804 if (ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame,
805 rx_mgmt->frame_len, &fi) > 0)
809 ret = ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len,
812 random_add_randomness(&fi, sizeof(fi));
818 static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf,
819 size_t len, u16 stype, int ok)
821 struct ieee80211_hdr *hdr;
822 hdr = (struct ieee80211_hdr *) buf;
823 hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
824 if (hapd == NULL || hapd == HAPD_BROADCAST)
826 ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
829 #endif /* NEED_AP_MLME */
832 static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr)
834 struct sta_info *sta = ap_get_sta(hapd, addr);
838 wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR
839 " - adding a new STA", MAC2STR(addr));
840 sta = ap_sta_add(hapd, addr);
842 hostapd_new_assoc_sta(hapd, sta, 0);
844 wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR,
853 static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src,
854 const u8 *data, size_t data_len)
856 struct hostapd_iface *iface = hapd->iface;
857 struct sta_info *sta;
860 for (j = 0; j < iface->num_bss; j++) {
861 if ((sta = ap_get_sta(iface->bss[j], src))) {
862 if (sta->flags & WLAN_STA_ASSOC) {
863 hapd = iface->bss[j];
869 ieee802_1x_receive(hapd, src, data, data_len);
873 static struct hostapd_channel_data * hostapd_get_mode_channel(
874 struct hostapd_iface *iface, unsigned int freq)
877 struct hostapd_channel_data *chan;
879 for (i = 0; i < iface->current_mode->num_channels; i++) {
880 chan = &iface->current_mode->channels[i];
883 if ((unsigned int) chan->freq == freq)
891 static void hostapd_update_nf(struct hostapd_iface *iface,
892 struct hostapd_channel_data *chan,
893 struct freq_survey *survey)
895 if (!iface->chans_surveyed) {
896 chan->min_nf = survey->nf;
897 iface->lowest_nf = survey->nf;
899 if (dl_list_empty(&chan->survey_list))
900 chan->min_nf = survey->nf;
901 else if (survey->nf < chan->min_nf)
902 chan->min_nf = survey->nf;
903 if (survey->nf < iface->lowest_nf)
904 iface->lowest_nf = survey->nf;
909 static void hostapd_single_channel_get_survey(struct hostapd_iface *iface,
910 struct survey_results *survey_res)
912 struct hostapd_channel_data *chan;
913 struct freq_survey *survey;
914 u64 divisor, dividend;
916 survey = dl_list_first(&survey_res->survey_list, struct freq_survey,
918 if (!survey || !survey->freq)
921 chan = hostapd_get_mode_channel(iface, survey->freq);
922 if (!chan || chan->flag & HOSTAPD_CHAN_DISABLED)
925 wpa_printf(MSG_DEBUG, "Single Channel Survey: (freq=%d channel_time=%ld channel_time_busy=%ld)",
927 (unsigned long int) survey->channel_time,
928 (unsigned long int) survey->channel_time_busy);
930 if (survey->channel_time > iface->last_channel_time &&
931 survey->channel_time > survey->channel_time_busy) {
932 dividend = survey->channel_time_busy -
933 iface->last_channel_time_busy;
934 divisor = survey->channel_time - iface->last_channel_time;
936 iface->channel_utilization = dividend * 255 / divisor;
937 wpa_printf(MSG_DEBUG, "Channel Utilization: %d",
938 iface->channel_utilization);
940 iface->last_channel_time = survey->channel_time;
941 iface->last_channel_time_busy = survey->channel_time_busy;
945 static void hostapd_event_get_survey(struct hostapd_data *hapd,
946 struct survey_results *survey_results)
948 struct hostapd_iface *iface = hapd->iface;
949 struct freq_survey *survey, *tmp;
950 struct hostapd_channel_data *chan;
952 if (dl_list_empty(&survey_results->survey_list)) {
953 wpa_printf(MSG_DEBUG, "No survey data received");
957 if (survey_results->freq_filter) {
958 hostapd_single_channel_get_survey(iface, survey_results);
962 dl_list_for_each_safe(survey, tmp, &survey_results->survey_list,
963 struct freq_survey, list) {
964 chan = hostapd_get_mode_channel(iface, survey->freq);
967 if (chan->flag & HOSTAPD_CHAN_DISABLED)
970 dl_list_del(&survey->list);
971 dl_list_add_tail(&chan->survey_list, &survey->list);
973 hostapd_update_nf(iface, chan, survey);
975 iface->chans_surveyed++;
982 static void hostapd_event_iface_unavailable(struct hostapd_data *hapd)
984 wpa_printf(MSG_DEBUG, "Interface %s is unavailable -- stopped",
987 if (hapd->csa_in_progress) {
988 wpa_printf(MSG_INFO, "CSA failed (%s was stopped)",
990 hostapd_switch_channel_fallback(hapd->iface,
991 &hapd->cs_freq_params);
996 static void hostapd_event_dfs_radar_detected(struct hostapd_data *hapd,
997 struct dfs_event *radar)
999 wpa_printf(MSG_DEBUG, "DFS radar detected on %d MHz", radar->freq);
1000 hostapd_dfs_radar_detected(hapd->iface, radar->freq, radar->ht_enabled,
1001 radar->chan_offset, radar->chan_width,
1002 radar->cf1, radar->cf2);
1006 static void hostapd_event_dfs_cac_finished(struct hostapd_data *hapd,
1007 struct dfs_event *radar)
1009 wpa_printf(MSG_DEBUG, "DFS CAC finished on %d MHz", radar->freq);
1010 hostapd_dfs_complete_cac(hapd->iface, 1, radar->freq, radar->ht_enabled,
1011 radar->chan_offset, radar->chan_width,
1012 radar->cf1, radar->cf2);
1016 static void hostapd_event_dfs_cac_aborted(struct hostapd_data *hapd,
1017 struct dfs_event *radar)
1019 wpa_printf(MSG_DEBUG, "DFS CAC aborted on %d MHz", radar->freq);
1020 hostapd_dfs_complete_cac(hapd->iface, 0, radar->freq, radar->ht_enabled,
1021 radar->chan_offset, radar->chan_width,
1022 radar->cf1, radar->cf2);
1026 static void hostapd_event_dfs_nop_finished(struct hostapd_data *hapd,
1027 struct dfs_event *radar)
1029 wpa_printf(MSG_DEBUG, "DFS NOP finished on %d MHz", radar->freq);
1030 hostapd_dfs_nop_finished(hapd->iface, radar->freq, radar->ht_enabled,
1031 radar->chan_offset, radar->chan_width,
1032 radar->cf1, radar->cf2);
1035 #endif /* NEED_AP_MLME */
1038 void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
1039 union wpa_event_data *data)
1041 struct hostapd_data *hapd = ctx;
1042 #ifndef CONFIG_NO_STDOUT_DEBUG
1043 int level = MSG_DEBUG;
1045 if (event == EVENT_RX_MGMT && data->rx_mgmt.frame &&
1046 data->rx_mgmt.frame_len >= 24) {
1047 const struct ieee80211_hdr *hdr;
1049 hdr = (const struct ieee80211_hdr *) data->rx_mgmt.frame;
1050 fc = le_to_host16(hdr->frame_control);
1051 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1052 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
1053 level = MSG_EXCESSIVE;
1054 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1055 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ)
1056 level = MSG_EXCESSIVE;
1059 wpa_dbg(hapd->msg_ctx, level, "Event %s (%d) received",
1060 event_to_string(event), event);
1061 #endif /* CONFIG_NO_STDOUT_DEBUG */
1064 case EVENT_MICHAEL_MIC_FAILURE:
1065 michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
1067 case EVENT_SCAN_RESULTS:
1068 if (hapd->iface->scan_cb)
1069 hapd->iface->scan_cb(hapd->iface);
1071 case EVENT_WPS_BUTTON_PUSHED:
1072 hostapd_wps_button_pushed(hapd, NULL);
1075 case EVENT_TX_STATUS:
1076 switch (data->tx_status.type) {
1077 case WLAN_FC_TYPE_MGMT:
1078 hostapd_mgmt_tx_cb(hapd, data->tx_status.data,
1079 data->tx_status.data_len,
1080 data->tx_status.stype,
1081 data->tx_status.ack);
1083 case WLAN_FC_TYPE_DATA:
1084 hostapd_tx_status(hapd, data->tx_status.dst,
1085 data->tx_status.data,
1086 data->tx_status.data_len,
1087 data->tx_status.ack);
1091 case EVENT_EAPOL_TX_STATUS:
1092 hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst,
1093 data->eapol_tx_status.data,
1094 data->eapol_tx_status.data_len,
1095 data->eapol_tx_status.ack);
1097 case EVENT_DRIVER_CLIENT_POLL_OK:
1098 hostapd_client_poll_ok(hapd, data->client_poll.addr);
1100 case EVENT_RX_FROM_UNKNOWN:
1101 hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid,
1102 data->rx_from_unknown.addr,
1103 data->rx_from_unknown.wds);
1105 #endif /* NEED_AP_MLME */
1107 if (!data->rx_mgmt.frame)
1110 if (hostapd_mgmt_rx(hapd, &data->rx_mgmt) > 0)
1112 #endif /* NEED_AP_MLME */
1113 hostapd_action_rx(hapd, &data->rx_mgmt);
1115 case EVENT_RX_PROBE_REQ:
1116 if (data->rx_probe_req.sa == NULL ||
1117 data->rx_probe_req.ie == NULL)
1119 hostapd_probe_req_rx(hapd, data->rx_probe_req.sa,
1120 data->rx_probe_req.da,
1121 data->rx_probe_req.bssid,
1122 data->rx_probe_req.ie,
1123 data->rx_probe_req.ie_len,
1124 data->rx_probe_req.ssi_signal);
1127 hostapd_event_new_sta(hapd, data->new_sta.addr);
1129 case EVENT_EAPOL_RX:
1130 hostapd_event_eapol_rx(hapd, data->eapol_rx.src,
1131 data->eapol_rx.data,
1132 data->eapol_rx.data_len);
1137 hostapd_notif_assoc(hapd, data->assoc_info.addr,
1138 data->assoc_info.req_ies,
1139 data->assoc_info.req_ies_len,
1140 data->assoc_info.reassoc);
1142 case EVENT_DISASSOC:
1144 hostapd_notif_disassoc(hapd, data->disassoc_info.addr);
1148 hostapd_notif_disassoc(hapd, data->deauth_info.addr);
1150 case EVENT_STATION_LOW_ACK:
1153 hostapd_event_sta_low_ack(hapd, data->low_ack.addr);
1156 hostapd_notif_auth(hapd, &data->auth);
1158 case EVENT_CH_SWITCH:
1161 hostapd_event_ch_switch(hapd, data->ch_switch.freq,
1162 data->ch_switch.ht_enabled,
1163 data->ch_switch.ch_offset,
1164 data->ch_switch.ch_width,
1165 data->ch_switch.cf1,
1166 data->ch_switch.cf2);
1168 case EVENT_CONNECT_FAILED_REASON:
1171 hostapd_event_connect_failed_reason(
1172 hapd, data->connect_failed_reason.addr,
1173 data->connect_failed_reason.code);
1176 hostapd_event_get_survey(hapd, &data->survey_results);
1179 case EVENT_INTERFACE_UNAVAILABLE:
1180 hostapd_event_iface_unavailable(hapd);
1182 case EVENT_DFS_RADAR_DETECTED:
1185 hostapd_event_dfs_radar_detected(hapd, &data->dfs_event);
1187 case EVENT_DFS_CAC_FINISHED:
1190 hostapd_event_dfs_cac_finished(hapd, &data->dfs_event);
1192 case EVENT_DFS_CAC_ABORTED:
1195 hostapd_event_dfs_cac_aborted(hapd, &data->dfs_event);
1197 case EVENT_DFS_NOP_FINISHED:
1200 hostapd_event_dfs_nop_finished(hapd, &data->dfs_event);
1202 case EVENT_CHANNEL_LIST_CHANGED:
1203 /* channel list changed (regulatory?), update channel list */
1204 /* TODO: check this. hostapd_get_hw_features() initializes
1205 * too much stuff. */
1206 /* hostapd_get_hw_features(hapd->iface); */
1207 hostapd_channel_list_updated(
1208 hapd->iface, data->channel_list_changed.initiator);
1210 #endif /* NEED_AP_MLME */
1211 case EVENT_INTERFACE_ENABLED:
1212 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_ENABLED);
1214 case EVENT_INTERFACE_DISABLED:
1215 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_DISABLED);
1218 case EVENT_ACS_CHANNEL_SELECTED:
1219 hostapd_acs_channel_selected(
1220 hapd, data->acs_selected_channels.pri_channel,
1221 data->acs_selected_channels.sec_channel);
1223 #endif /* CONFIG_ACS */
1225 wpa_printf(MSG_DEBUG, "Unknown event %d", event);
1230 #endif /* HOSTAPD */