src/ap/ieee802_11_shared.c

   1 /*
   2  * hostapd / IEEE 802.11 Management
   3  * Copyright (c) 2002-2012, Jouni Malinen <j@w1.fi>
   4  *
   5  * This software may be distributed under the terms of the BSD license.
   6  * See README for more details.
   7  */
   8
   9 #include "utils/includes.h"
  10
  11 #include "utils/common.h"
  12 #include "common/ieee802_11_defs.h"
  13 #include "hostapd.h"
  14 #include "sta_info.h"
  15 #include "ap_config.h"
  16 #include "ap_drv_ops.h"
  17 #include "ieee802_11.h"
  18
  19
  20 #ifdef CONFIG_IEEE80211W
  21
  22 u8 * hostapd_eid_assoc_comeback_time(struct hostapd_data *hapd,
  23                                      struct sta_info *sta, u8 *eid)
  24 {
  25         u8 *pos = eid;
  26         u32 timeout, tu;
  27         struct os_reltime now, passed;
  28
  29         *pos++ = WLAN_EID_TIMEOUT_INTERVAL;
  30         *pos++ = 5;
  31         *pos++ = WLAN_TIMEOUT_ASSOC_COMEBACK;
  32         os_get_reltime(&now);
  33         os_reltime_sub(&now, &sta->sa_query_start, &passed);
  34         tu = (passed.sec * 1000000 + passed.usec) / 1024;
  35         if (hapd->conf->assoc_sa_query_max_timeout > tu)
  36                 timeout = hapd->conf->assoc_sa_query_max_timeout - tu;
  37         else
  38                 timeout = 0;
  39         if (timeout < hapd->conf->assoc_sa_query_max_timeout)
  40                 timeout++; /* add some extra time for local timers */
  41         WPA_PUT_LE32(pos, timeout);
  42         pos += 4;
  43
  44         return pos;
  45 }
  46
  47
  48 /* MLME-SAQuery.request */
  49 void ieee802_11_send_sa_query_req(struct hostapd_data *hapd,
  50                                   const u8 *addr, const u8 *trans_id)
  51 {
  52         struct ieee80211_mgmt mgmt;
  53         u8 *end;
  54
  55         wpa_printf(MSG_DEBUG, "IEEE 802.11: Sending SA Query Request to "
  56                    MACSTR, MAC2STR(addr));
  57         wpa_hexdump(MSG_DEBUG, "IEEE 802.11: SA Query Transaction ID",
  58                     trans_id, WLAN_SA_QUERY_TR_ID_LEN);
  59
  60         os_memset(&mgmt, 0, sizeof(mgmt));
  61         mgmt.frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT,
  62                                           WLAN_FC_STYPE_ACTION);
  63         os_memcpy(mgmt.da, addr, ETH_ALEN);
  64         os_memcpy(mgmt.sa, hapd->own_addr, ETH_ALEN);
  65         os_memcpy(mgmt.bssid, hapd->own_addr, ETH_ALEN);
  66         mgmt.u.action.category = WLAN_ACTION_SA_QUERY;
  67         mgmt.u.action.u.sa_query_req.action = WLAN_SA_QUERY_REQUEST;
  68         os_memcpy(mgmt.u.action.u.sa_query_req.trans_id, trans_id,
  69                   WLAN_SA_QUERY_TR_ID_LEN);
  70         end = mgmt.u.action.u.sa_query_req.trans_id + WLAN_SA_QUERY_TR_ID_LEN;
  71         if (hostapd_drv_send_mlme(hapd, &mgmt, end - (u8 *) &mgmt, 0) < 0)
  72                 wpa_printf(MSG_INFO, "ieee802_11_send_sa_query_req: send failed");
  73 }
  74
  75
  76 static void ieee802_11_send_sa_query_resp(struct hostapd_data *hapd,
  77                                           const u8 *sa, const u8 *trans_id)
  78 {
  79         struct sta_info *sta;
  80         struct ieee80211_mgmt resp;
  81         u8 *end;
  82
  83         wpa_printf(MSG_DEBUG, "IEEE 802.11: Received SA Query Request from "
  84                    MACSTR, MAC2STR(sa));
  85         wpa_hexdump(MSG_DEBUG, "IEEE 802.11: SA Query Transaction ID",
  86                     trans_id, WLAN_SA_QUERY_TR_ID_LEN);
  87
  88         sta = ap_get_sta(hapd, sa);
  89         if (sta == NULL || !(sta->flags & WLAN_STA_ASSOC)) {
  90                 wpa_printf(MSG_DEBUG, "IEEE 802.11: Ignore SA Query Request "
  91                            "from unassociated STA " MACSTR, MAC2STR(sa));
  92                 return;
  93         }
  94
  95         wpa_printf(MSG_DEBUG, "IEEE 802.11: Sending SA Query Response to "
  96                    MACSTR, MAC2STR(sa));
  97
  98         os_memset(&resp, 0, sizeof(resp));
  99         resp.frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT,
 100                                           WLAN_FC_STYPE_ACTION);
 101         os_memcpy(resp.da, sa, ETH_ALEN);
 102         os_memcpy(resp.sa, hapd->own_addr, ETH_ALEN);
 103         os_memcpy(resp.bssid, hapd->own_addr, ETH_ALEN);
 104         resp.u.action.category = WLAN_ACTION_SA_QUERY;
 105         resp.u.action.u.sa_query_req.action = WLAN_SA_QUERY_RESPONSE;
 106         os_memcpy(resp.u.action.u.sa_query_req.trans_id, trans_id,
 107                   WLAN_SA_QUERY_TR_ID_LEN);
 108         end = resp.u.action.u.sa_query_req.trans_id + WLAN_SA_QUERY_TR_ID_LEN;
 109         if (hostapd_drv_send_mlme(hapd, &resp, end - (u8 *) &resp, 0) < 0)
 110                 wpa_printf(MSG_INFO, "ieee80211_mgmt_sa_query_request: send failed");
 111 }
 112
 113
 114 void ieee802_11_sa_query_action(struct hostapd_data *hapd, const u8 *sa,
 115                                 const u8 action_type, const u8 *trans_id)
 116 {
 117         struct sta_info *sta;
 118         int i;
 119
 120         if (action_type == WLAN_SA_QUERY_REQUEST) {
 121                 ieee802_11_send_sa_query_resp(hapd, sa, trans_id);
 122                 return;
 123         }
 124
 125         if (action_type != WLAN_SA_QUERY_RESPONSE) {
 126                 wpa_printf(MSG_DEBUG, "IEEE 802.11: Unexpected SA Query "
 127                            "Action %d", action_type);
 128                 return;
 129         }
 130
 131         wpa_printf(MSG_DEBUG, "IEEE 802.11: Received SA Query Response from "
 132                    MACSTR, MAC2STR(sa));
 133         wpa_hexdump(MSG_DEBUG, "IEEE 802.11: SA Query Transaction ID",
 134                     trans_id, WLAN_SA_QUERY_TR_ID_LEN);
 135
 136         /* MLME-SAQuery.confirm */
 137
 138         sta = ap_get_sta(hapd, sa);
 139         if (sta == NULL || sta->sa_query_trans_id == NULL) {
 140                 wpa_printf(MSG_DEBUG, "IEEE 802.11: No matching STA with "
 141                            "pending SA Query request found");
 142                 return;
 143         }
 144
 145         for (i = 0; i < sta->sa_query_count; i++) {
 146                 if (os_memcmp(sta->sa_query_trans_id +
 147                               i * WLAN_SA_QUERY_TR_ID_LEN,
 148                               trans_id, WLAN_SA_QUERY_TR_ID_LEN) == 0)
 149                         break;
 150         }
 151
 152         if (i >= sta->sa_query_count) {
 153                 wpa_printf(MSG_DEBUG, "IEEE 802.11: No matching SA Query "
 154                            "transaction identifier found");
 155                 return;
 156         }
 157
 158         hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
 159                        HOSTAPD_LEVEL_DEBUG,
 160                        "Reply to pending SA Query received");
 161         ap_sta_stop_sa_query(hapd, sta);
 162 }
 163
 164 #endif /* CONFIG_IEEE80211W */
 165
 166
 167 static void hostapd_ext_capab_byte(struct hostapd_data *hapd, u8 *pos, int idx)
 168 {
 169         *pos = 0x00;
 170
 171         switch (idx) {
 172         case 0: /* Bits 0-7 */
 173                 if (hapd->iconf->obss_interval)
 174                         *pos |= 0x01; /* Bit 0 - Coexistence management */
 175                 if (hapd->iface->drv_flags & WPA_DRIVER_FLAGS_AP_CSA)
 176                         *pos |= 0x04; /* Bit 2 - Extended Channel Switching */
 177                 break;
 178         case 1: /* Bits 8-15 */
 179                 if (hapd->conf->proxy_arp)
 180                         *pos |= 0x10; /* Bit 12 - Proxy ARP */
 181                 break;
 182         case 2: /* Bits 16-23 */
 183                 if (hapd->conf->wnm_sleep_mode)
 184                         *pos |= 0x02; /* Bit 17 - WNM-Sleep Mode */
 185                 if (hapd->conf->bss_transition)
 186                         *pos |= 0x08; /* Bit 19 - BSS Transition */
 187                 break;
 188         case 3: /* Bits 24-31 */
 189 #ifdef CONFIG_WNM
 190                 *pos |= 0x02; /* Bit 25 - SSID List */
 191 #endif /* CONFIG_WNM */
 192                 if (hapd->conf->time_advertisement == 2)
 193                         *pos |= 0x08; /* Bit 27 - UTC TSF Offset */
 194                 if (hapd->conf->interworking)
 195                         *pos |= 0x80; /* Bit 31 - Interworking */
 196                 break;
 197         case 4: /* Bits 32-39 */
 198                 if (hapd->conf->qos_map_set_len)
 199                         *pos |= 0x01; /* Bit 32 - QoS Map */
 200                 if (hapd->conf->tdls & TDLS_PROHIBIT)
 201                         *pos |= 0x40; /* Bit 38 - TDLS Prohibited */
 202                 if (hapd->conf->tdls & TDLS_PROHIBIT_CHAN_SWITCH) {
 203                         /* Bit 39 - TDLS Channel Switching Prohibited */
 204                         *pos |= 0x80;
 205                 }
 206                 break;
 207         case 5: /* Bits 40-47 */
 208 #ifdef CONFIG_HS20
 209                 if (hapd->conf->hs20)
 210                         *pos |= 0x40; /* Bit 46 - WNM-Notification */
 211 #endif /* CONFIG_HS20 */
 212 #ifdef CONFIG_MBO
 213                 if (hapd->conf->mbo_enabled)
 214                         *pos |= 0x40; /* Bit 46 - WNM-Notification */
 215 #endif /* CONFIG_MBO */
 216                 break;
 217         case 6: /* Bits 48-55 */
 218                 if (hapd->conf->ssid.utf8_ssid)
 219                         *pos |= 0x01; /* Bit 48 - UTF-8 SSID */
 220                 break;
 221         case 8: /* Bits 64-71 */
 222                 if (hapd->conf->ftm_responder)
 223                         *pos |= 0x40; /* Bit 70 - FTM responder */
 224                 if (hapd->conf->ftm_initiator)
 225                         *pos |= 0x80; /* Bit 71 - FTM initiator */
 226                 break;
 227         }
 228 }
 229
 230
 231 u8 * hostapd_eid_ext_capab(struct hostapd_data *hapd, u8 *eid)
 232 {
 233         u8 *pos = eid;
 234         u8 len = 0, i;
 235
 236         if (hapd->conf->tdls & (TDLS_PROHIBIT | TDLS_PROHIBIT_CHAN_SWITCH))
 237                 len = 5;
 238         if (len < 4 && hapd->conf->interworking)
 239                 len = 4;
 240         if (len < 3 && hapd->conf->wnm_sleep_mode)
 241                 len = 3;
 242         if (len < 1 && hapd->iconf->obss_interval)
 243                 len = 1;
 244         if (len < 7 && hapd->conf->ssid.utf8_ssid)
 245                 len = 7;
 246         if (len < 9 &&
 247             (hapd->conf->ftm_initiator || hapd->conf->ftm_responder))
 248                 len = 9;
 249 #ifdef CONFIG_WNM
 250         if (len < 4)
 251                 len = 4;
 252 #endif /* CONFIG_WNM */
 253 #ifdef CONFIG_HS20
 254         if (hapd->conf->hs20 && len < 6)
 255                 len = 6;
 256 #endif /* CONFIG_HS20 */
 257 #ifdef CONFIG_MBO
 258         if (hapd->conf->mbo_enabled && len < 6)
 259                 len = 6;
 260 #endif /* CONFIG_MBO */
 261         if (len < hapd->iface->extended_capa_len)
 262                 len = hapd->iface->extended_capa_len;
 263         if (len == 0)
 264                 return eid;
 265
 266         *pos++ = WLAN_EID_EXT_CAPAB;
 267         *pos++ = len;
 268         for (i = 0; i < len; i++, pos++) {
 269                 hostapd_ext_capab_byte(hapd, pos, i);
 270
 271                 if (i < hapd->iface->extended_capa_len) {
 272                         *pos &= ~hapd->iface->extended_capa_mask[i];
 273                         *pos |= hapd->iface->extended_capa[i];
 274                 }
 275         }
 276
 277         while (len > 0 && eid[1 + len] == 0) {
 278                 len--;
 279                 eid[1] = len;
 280         }
 281         if (len == 0)
 282                 return eid;
 283
 284         return eid + 2 + len;
 285 }
 286
 287
 288 u8 * hostapd_eid_qos_map_set(struct hostapd_data *hapd, u8 *eid)
 289 {
 290         u8 *pos = eid;
 291         u8 len = hapd->conf->qos_map_set_len;
 292
 293         if (!len)
 294                 return eid;
 295
 296         *pos++ = WLAN_EID_QOS_MAP_SET;
 297         *pos++ = len;
 298         os_memcpy(pos, hapd->conf->qos_map_set, len);
 299         pos += len;
 300
 301         return pos;
 302 }
 303
 304
 305 u8 * hostapd_eid_interworking(struct hostapd_data *hapd, u8 *eid)
 306 {
 307         u8 *pos = eid;
 308 #ifdef CONFIG_INTERWORKING
 309         u8 *len;
 310
 311         if (!hapd->conf->interworking)
 312                 return eid;
 313
 314         *pos++ = WLAN_EID_INTERWORKING;
 315         len = pos++;
 316
 317         *pos = hapd->conf->access_network_type;
 318         if (hapd->conf->internet)
 319                 *pos |= INTERWORKING_ANO_INTERNET;
 320         if (hapd->conf->asra)
 321                 *pos |= INTERWORKING_ANO_ASRA;
 322         if (hapd->conf->esr)
 323                 *pos |= INTERWORKING_ANO_ESR;
 324         if (hapd->conf->uesa)
 325                 *pos |= INTERWORKING_ANO_UESA;
 326         pos++;
 327
 328         if (hapd->conf->venue_info_set) {
 329                 *pos++ = hapd->conf->venue_group;
 330                 *pos++ = hapd->conf->venue_type;
 331         }
 332
 333         if (!is_zero_ether_addr(hapd->conf->hessid)) {
 334                 os_memcpy(pos, hapd->conf->hessid, ETH_ALEN);
 335                 pos += ETH_ALEN;
 336         }
 337
 338         *len = pos - len - 1;
 339 #endif /* CONFIG_INTERWORKING */
 340
 341         return pos;
 342 }
 343
 344
 345 u8 * hostapd_eid_adv_proto(struct hostapd_data *hapd, u8 *eid)
 346 {
 347         u8 *pos = eid;
 348 #ifdef CONFIG_INTERWORKING
 349
 350         /* TODO: Separate configuration for ANQP? */
 351         if (!hapd->conf->interworking)
 352                 return eid;
 353
 354         *pos++ = WLAN_EID_ADV_PROTO;
 355         *pos++ = 2;
 356         *pos++ = 0x7F; /* Query Response Length Limit | PAME-BI */
 357         *pos++ = ACCESS_NETWORK_QUERY_PROTOCOL;
 358 #endif /* CONFIG_INTERWORKING */
 359
 360         return pos;
 361 }
 362
 363
 364 u8 * hostapd_eid_roaming_consortium(struct hostapd_data *hapd, u8 *eid)
 365 {
 366         u8 *pos = eid;
 367 #ifdef CONFIG_INTERWORKING
 368         u8 *len;
 369         unsigned int i, count;
 370
 371         if (!hapd->conf->interworking ||
 372             hapd->conf->roaming_consortium == NULL ||
 373             hapd->conf->roaming_consortium_count == 0)
 374                 return eid;
 375
 376         *pos++ = WLAN_EID_ROAMING_CONSORTIUM;
 377         len = pos++;
 378
 379         /* Number of ANQP OIs (in addition to the max 3 listed here) */
 380         if (hapd->conf->roaming_consortium_count > 3 + 255)
 381                 *pos++ = 255;
 382         else if (hapd->conf->roaming_consortium_count > 3)
 383                 *pos++ = hapd->conf->roaming_consortium_count - 3;
 384         else
 385                 *pos++ = 0;
 386
 387         /* OU #1 and #2 Lengths */
 388         *pos = hapd->conf->roaming_consortium[0].len;
 389         if (hapd->conf->roaming_consortium_count > 1)
 390                 *pos |= hapd->conf->roaming_consortium[1].len << 4;
 391         pos++;
 392
 393         if (hapd->conf->roaming_consortium_count > 3)
 394                 count = 3;
 395         else
 396                 count = hapd->conf->roaming_consortium_count;
 397
 398         for (i = 0; i < count; i++) {
 399                 os_memcpy(pos, hapd->conf->roaming_consortium[i].oi,
 400                           hapd->conf->roaming_consortium[i].len);
 401                 pos += hapd->conf->roaming_consortium[i].len;
 402         }
 403
 404         *len = pos - len - 1;
 405 #endif /* CONFIG_INTERWORKING */
 406
 407         return pos;
 408 }
 409
 410
 411 u8 * hostapd_eid_time_adv(struct hostapd_data *hapd, u8 *eid)
 412 {
 413         if (hapd->conf->time_advertisement != 2)
 414                 return eid;
 415
 416         if (hapd->time_adv == NULL &&
 417             hostapd_update_time_adv(hapd) < 0)
 418                 return eid;
 419
 420         if (hapd->time_adv == NULL)
 421                 return eid;
 422
 423         os_memcpy(eid, wpabuf_head(hapd->time_adv),
 424                   wpabuf_len(hapd->time_adv));
 425         eid += wpabuf_len(hapd->time_adv);
 426
 427         return eid;
 428 }
 429
 430
 431 u8 * hostapd_eid_time_zone(struct hostapd_data *hapd, u8 *eid)
 432 {
 433         size_t len;
 434
 435         if (hapd->conf->time_advertisement != 2)
 436                 return eid;
 437
 438         len = os_strlen(hapd->conf->time_zone);
 439
 440         *eid++ = WLAN_EID_TIME_ZONE;
 441         *eid++ = len;
 442         os_memcpy(eid, hapd->conf->time_zone, len);
 443         eid += len;
 444
 445         return eid;
 446 }
 447
 448
 449 int hostapd_update_time_adv(struct hostapd_data *hapd)
 450 {
 451         const int elen = 2 + 1 + 10 + 5 + 1;
 452         struct os_time t;
 453         struct os_tm tm;
 454         u8 *pos;
 455
 456         if (hapd->conf->time_advertisement != 2)
 457                 return 0;
 458
 459         if (os_get_time(&t) < 0 || os_gmtime(t.sec, &tm) < 0)
 460                 return -1;
 461
 462         if (!hapd->time_adv) {
 463                 hapd->time_adv = wpabuf_alloc(elen);
 464                 if (hapd->time_adv == NULL)
 465                         return -1;
 466                 pos = wpabuf_put(hapd->time_adv, elen);
 467         } else
 468                 pos = wpabuf_mhead_u8(hapd->time_adv);
 469
 470         *pos++ = WLAN_EID_TIME_ADVERTISEMENT;
 471         *pos++ = 1 + 10 + 5 + 1;
 472
 473         *pos++ = 2; /* UTC time at which the TSF timer is 0 */
 474
 475         /* Time Value at TSF 0 */
 476         /* FIX: need to calculate this based on the current TSF value */
 477         WPA_PUT_LE16(pos, tm.year); /* Year */
 478         pos += 2;
 479         *pos++ = tm.month; /* Month */
 480         *pos++ = tm.day; /* Day of month */
 481         *pos++ = tm.hour; /* Hours */
 482         *pos++ = tm.min; /* Minutes */
 483         *pos++ = tm.sec; /* Seconds */
 484         WPA_PUT_LE16(pos, 0); /* Milliseconds (not used) */
 485         pos += 2;
 486         *pos++ = 0; /* Reserved */
 487
 488         /* Time Error */
 489         /* TODO: fill in an estimate on the error */
 490         *pos++ = 0;
 491         *pos++ = 0;
 492         *pos++ = 0;
 493         *pos++ = 0;
 494         *pos++ = 0;
 495
 496         *pos++ = hapd->time_update_counter++;
 497
 498         return 0;
 499 }
 500
 501
 502 u8 * hostapd_eid_bss_max_idle_period(struct hostapd_data *hapd, u8 *eid)
 503 {
 504         u8 *pos = eid;
 505
 506 #ifdef CONFIG_WNM
 507         if (hapd->conf->ap_max_inactivity > 0) {
 508                 unsigned int val;
 509                 *pos++ = WLAN_EID_BSS_MAX_IDLE_PERIOD;
 510                 *pos++ = 3;
 511                 val = hapd->conf->ap_max_inactivity;
 512                 if (val > 68000)
 513                         val = 68000;
 514                 val *= 1000;
 515                 val /= 1024;
 516                 if (val == 0)
 517                         val = 1;
 518                 if (val > 65535)
 519                         val = 65535;
 520                 WPA_PUT_LE16(pos, val);
 521                 pos += 2;
 522                 *pos++ = 0x00; /* TODO: Protected Keep-Alive Required */
 523         }
 524 #endif /* CONFIG_WNM */
 525
 526         return pos;
 527 }
 528
 529
 530 #ifdef CONFIG_MBO
 531
 532 u8 * hostapd_eid_mbo(struct hostapd_data *hapd, u8 *eid, size_t len)
 533 {
 534         u8 mbo[6], *mbo_pos = mbo;
 535         u8 *pos = eid;
 536
 537         if (!hapd->conf->mbo_enabled)
 538                 return eid;
 539
 540         *mbo_pos++ = MBO_ATTR_ID_AP_CAPA_IND;
 541         *mbo_pos++ = 1;
 542         /* Not Cellular aware */
 543         *mbo_pos++ = 0;
 544
 545         if (hapd->mbo_assoc_disallow) {
 546                 *mbo_pos++ = MBO_ATTR_ID_ASSOC_DISALLOW;
 547                 *mbo_pos++ = 1;
 548                 *mbo_pos++ = hapd->mbo_assoc_disallow;
 549         }
 550
 551         pos += mbo_add_ie(pos, len, mbo, mbo_pos - mbo);
 552
 553         return pos;
 554 }
 555
 556
 557 u8 hostapd_mbo_ie_len(struct hostapd_data *hapd)
 558 {
 559         if (!hapd->conf->mbo_enabled)
 560                 return 0;
 561
 562         /*
 563          * MBO IE header (6) + Capability Indication attribute (3) +
 564          * Association Disallowed attribute (3) = 12
 565          */
 566         return 6 + 3 + (hapd->mbo_assoc_disallow ? 3 : 0);
 567 }
 568
 569 #endif /* CONFIG_MBO */
 570
 571
 572 void ap_copy_sta_supp_op_classes(struct sta_info *sta,
 573                                  const u8 *supp_op_classes,
 574                                  size_t supp_op_classes_len)
 575 {
 576         if (!supp_op_classes)
 577                 return;
 578         os_free(sta->supp_op_classes);
 579         sta->supp_op_classes = os_malloc(1 + supp_op_classes_len);
 580         if (!sta->supp_op_classes)
 581                 return;
 582
 583         sta->supp_op_classes[0] = supp_op_classes_len;
 584         os_memcpy(sta->supp_op_classes + 1, supp_op_classes,
 585                   supp_op_classes_len);
 586 }