wpa_supplicant/ctrl_iface.c

   1 /*
   2  * WPA Supplicant / Control interface (shared code for all backends)
   3  * Copyright (c) 2004-2014, Jouni Malinen <j@w1.fi>
   4  *
   5  * This software may be distributed under the terms of the BSD license.
   6  * See README for more details.
   7  */
   8
   9 #include "utils/includes.h"
  10 #ifdef CONFIG_TESTING_OPTIONS
  11 #include <net/ethernet.h>
  12 #include <netinet/ip.h>
  13 #endif /* CONFIG_TESTING_OPTIONS */
  14
  15 #include "utils/common.h"
  16 #include "utils/eloop.h"
  17 #include "utils/uuid.h"
  18 #include "common/version.h"
  19 #include "common/ieee802_11_defs.h"
  20 #include "common/ieee802_11_common.h"
  21 #include "common/wpa_ctrl.h"
  22 #include "ap/hostapd.h"
  23 #include "eap_peer/eap.h"
  24 #include "eapol_supp/eapol_supp_sm.h"
  25 #include "rsn_supp/wpa.h"
  26 #include "rsn_supp/preauth.h"
  27 #include "rsn_supp/pmksa_cache.h"
  28 #include "l2_packet/l2_packet.h"
  29 #include "wps/wps.h"
  30 #include "config.h"
  31 #include "wpa_supplicant_i.h"
  32 #include "driver_i.h"
  33 #include "wps_supplicant.h"
  34 #include "ibss_rsn.h"
  35 #include "ap.h"
  36 #include "p2p_supplicant.h"
  37 #include "p2p/p2p.h"
  38 #include "hs20_supplicant.h"
  39 #include "wifi_display.h"
  40 #include "notify.h"
  41 #include "bss.h"
  42 #include "scan.h"
  43 #include "ctrl_iface.h"
  44 #include "interworking.h"
  45 #include "blacklist.h"
  46 #include "autoscan.h"
  47 #include "wnm_sta.h"
  48 #include "offchannel.h"
  49 #include "drivers/driver.h"
  50 #include "mesh.h"
  51
  52 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
  53                                             char *buf, int len);
  54 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
  55                                                   char *buf, int len);
  56 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s,
  57                                         char *val);
  58
  59 static int set_bssid_filter(struct wpa_supplicant *wpa_s, char *val)
  60 {
  61         char *pos;
  62         u8 addr[ETH_ALEN], *filter = NULL, *n;
  63         size_t count = 0;
  64
  65         pos = val;
  66         while (pos) {
  67                 if (*pos == '\0')
  68                         break;
  69                 if (hwaddr_aton(pos, addr)) {
  70                         os_free(filter);
  71                         return -1;
  72                 }
  73                 n = os_realloc_array(filter, count + 1, ETH_ALEN);
  74                 if (n == NULL) {
  75                         os_free(filter);
  76                         return -1;
  77                 }
  78                 filter = n;
  79                 os_memcpy(filter + count * ETH_ALEN, addr, ETH_ALEN);
  80                 count++;
  81
  82                 pos = os_strchr(pos, ' ');
  83                 if (pos)
  84                         pos++;
  85         }
  86
  87         wpa_hexdump(MSG_DEBUG, "bssid_filter", filter, count * ETH_ALEN);
  88         os_free(wpa_s->bssid_filter);
  89         wpa_s->bssid_filter = filter;
  90         wpa_s->bssid_filter_count = count;
  91
  92         return 0;
  93 }
  94
  95
  96 static int set_disallow_aps(struct wpa_supplicant *wpa_s, char *val)
  97 {
  98         char *pos;
  99         u8 addr[ETH_ALEN], *bssid = NULL, *n;
 100         struct wpa_ssid_value *ssid = NULL, *ns;
 101         size_t count = 0, ssid_count = 0;
 102         struct wpa_ssid *c;
 103
 104         /*
 105          * disallow_list ::= <ssid_spec> | <bssid_spec> | <disallow_list> | ""
 106          * SSID_SPEC ::= ssid <SSID_HEX>
 107          * BSSID_SPEC ::= bssid <BSSID_HEX>
 108          */
 109
 110         pos = val;
 111         while (pos) {
 112                 if (*pos == '\0')
 113                         break;
 114                 if (os_strncmp(pos, "bssid ", 6) == 0) {
 115                         int res;
 116                         pos += 6;
 117                         res = hwaddr_aton2(pos, addr);
 118                         if (res < 0) {
 119                                 os_free(ssid);
 120                                 os_free(bssid);
 121                                 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
 122                                            "BSSID value '%s'", pos);
 123                                 return -1;
 124                         }
 125                         pos += res;
 126                         n = os_realloc_array(bssid, count + 1, ETH_ALEN);
 127                         if (n == NULL) {
 128                                 os_free(ssid);
 129                                 os_free(bssid);
 130                                 return -1;
 131                         }
 132                         bssid = n;
 133                         os_memcpy(bssid + count * ETH_ALEN, addr, ETH_ALEN);
 134                         count++;
 135                 } else if (os_strncmp(pos, "ssid ", 5) == 0) {
 136                         char *end;
 137                         pos += 5;
 138
 139                         end = pos;
 140                         while (*end) {
 141                                 if (*end == '\0' || *end == ' ')
 142                                         break;
 143                                 end++;
 144                         }
 145
 146                         ns = os_realloc_array(ssid, ssid_count + 1,
 147                                               sizeof(struct wpa_ssid_value));
 148                         if (ns == NULL) {
 149                                 os_free(ssid);
 150                                 os_free(bssid);
 151                                 return -1;
 152                         }
 153                         ssid = ns;
 154
 155                         if ((end - pos) & 0x01 || end - pos > 2 * 32 ||
 156                             hexstr2bin(pos, ssid[ssid_count].ssid,
 157                                        (end - pos) / 2) < 0) {
 158                                 os_free(ssid);
 159                                 os_free(bssid);
 160                                 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
 161                                            "SSID value '%s'", pos);
 162                                 return -1;
 163                         }
 164                         ssid[ssid_count].ssid_len = (end - pos) / 2;
 165                         wpa_hexdump_ascii(MSG_DEBUG, "disallow_aps SSID",
 166                                           ssid[ssid_count].ssid,
 167                                           ssid[ssid_count].ssid_len);
 168                         ssid_count++;
 169                         pos = end;
 170                 } else {
 171                         wpa_printf(MSG_DEBUG, "Unexpected disallow_aps value "
 172                                    "'%s'", pos);
 173                         os_free(ssid);
 174                         os_free(bssid);
 175                         return -1;
 176                 }
 177
 178                 pos = os_strchr(pos, ' ');
 179                 if (pos)
 180                         pos++;
 181         }
 182
 183         wpa_hexdump(MSG_DEBUG, "disallow_aps_bssid", bssid, count * ETH_ALEN);
 184         os_free(wpa_s->disallow_aps_bssid);
 185         wpa_s->disallow_aps_bssid = bssid;
 186         wpa_s->disallow_aps_bssid_count = count;
 187
 188         wpa_printf(MSG_DEBUG, "disallow_aps_ssid_count %d", (int) ssid_count);
 189         os_free(wpa_s->disallow_aps_ssid);
 190         wpa_s->disallow_aps_ssid = ssid;
 191         wpa_s->disallow_aps_ssid_count = ssid_count;
 192
 193         if (!wpa_s->current_ssid || wpa_s->wpa_state < WPA_AUTHENTICATING)
 194                 return 0;
 195
 196         c = wpa_s->current_ssid;
 197         if (c->mode != WPAS_MODE_INFRA && c->mode != WPAS_MODE_IBSS)
 198                 return 0;
 199
 200         if (!disallowed_bssid(wpa_s, wpa_s->bssid) &&
 201             !disallowed_ssid(wpa_s, c->ssid, c->ssid_len))
 202                 return 0;
 203
 204         wpa_printf(MSG_DEBUG, "Disconnect and try to find another network "
 205                    "because current AP was marked disallowed");
 206
 207 #ifdef CONFIG_SME
 208         wpa_s->sme.prev_bssid_set = 0;
 209 #endif /* CONFIG_SME */
 210         wpa_s->reassociate = 1;
 211         wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
 212         wpa_supplicant_req_scan(wpa_s, 0, 0);
 213
 214         return 0;
 215 }
 216
 217
 218 #ifndef CONFIG_NO_CONFIG_BLOBS
 219 static int wpas_ctrl_set_blob(struct wpa_supplicant *wpa_s, char *pos)
 220 {
 221         char *name = pos;
 222         struct wpa_config_blob *blob;
 223         size_t len;
 224
 225         pos = os_strchr(pos, ' ');
 226         if (pos == NULL)
 227                 return -1;
 228         *pos++ = '\0';
 229         len = os_strlen(pos);
 230         if (len & 1)
 231                 return -1;
 232
 233         wpa_printf(MSG_DEBUG, "CTRL: Set blob '%s'", name);
 234         blob = os_zalloc(sizeof(*blob));
 235         if (blob == NULL)
 236                 return -1;
 237         blob->name = os_strdup(name);
 238         blob->data = os_malloc(len / 2);
 239         if (blob->name == NULL || blob->data == NULL) {
 240                 wpa_config_free_blob(blob);
 241                 return -1;
 242         }
 243
 244         if (hexstr2bin(pos, blob->data, len / 2) < 0) {
 245                 wpa_printf(MSG_DEBUG, "CTRL: Invalid blob hex data");
 246                 wpa_config_free_blob(blob);
 247                 return -1;
 248         }
 249         blob->len = len / 2;
 250
 251         wpa_config_set_blob(wpa_s->conf, blob);
 252
 253         return 0;
 254 }
 255 #endif /* CONFIG_NO_CONFIG_BLOBS */
 256
 257
 258 static int wpas_ctrl_pno(struct wpa_supplicant *wpa_s, char *cmd)
 259 {
 260         char *params;
 261         char *pos;
 262         int *freqs = NULL;
 263         int ret;
 264
 265         if (atoi(cmd)) {
 266                 params = os_strchr(cmd, ' ');
 267                 os_free(wpa_s->manual_sched_scan_freqs);
 268                 if (params) {
 269                         params++;
 270                         pos = os_strstr(params, "freq=");
 271                         if (pos)
 272                                 freqs = freq_range_to_channel_list(wpa_s,
 273                                                                    pos + 5);
 274                 }
 275                 wpa_s->manual_sched_scan_freqs = freqs;
 276                 ret = wpas_start_pno(wpa_s);
 277         } else {
 278                 ret = wpas_stop_pno(wpa_s);
 279         }
 280         return ret;
 281 }
 282
 283
 284 static int wpa_supplicant_ctrl_iface_set(struct wpa_supplicant *wpa_s,
 285                                          char *cmd)
 286 {
 287         char *value;
 288         int ret = 0;
 289
 290         value = os_strchr(cmd, ' ');
 291         if (value == NULL)
 292                 return -1;
 293         *value++ = '\0';
 294
 295         wpa_printf(MSG_DEBUG, "CTRL_IFACE SET '%s'='%s'", cmd, value);
 296         if (os_strcasecmp(cmd, "EAPOL::heldPeriod") == 0) {
 297                 eapol_sm_configure(wpa_s->eapol,
 298                                    atoi(value), -1, -1, -1);
 299         } else if (os_strcasecmp(cmd, "EAPOL::authPeriod") == 0) {
 300                 eapol_sm_configure(wpa_s->eapol,
 301                                    -1, atoi(value), -1, -1);
 302         } else if (os_strcasecmp(cmd, "EAPOL::startPeriod") == 0) {
 303                 eapol_sm_configure(wpa_s->eapol,
 304                                    -1, -1, atoi(value), -1);
 305         } else if (os_strcasecmp(cmd, "EAPOL::maxStart") == 0) {
 306                 eapol_sm_configure(wpa_s->eapol,
 307                                    -1, -1, -1, atoi(value));
 308         } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKLifetime") == 0) {
 309                 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME,
 310                                      atoi(value)))
 311                         ret = -1;
 312         } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKReauthThreshold") ==
 313                    0) {
 314                 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD,
 315                                      atoi(value)))
 316                         ret = -1;
 317         } else if (os_strcasecmp(cmd, "dot11RSNAConfigSATimeout") == 0) {
 318                 if (wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, atoi(value)))
 319                         ret = -1;
 320         } else if (os_strcasecmp(cmd, "wps_fragment_size") == 0) {
 321                 wpa_s->wps_fragment_size = atoi(value);
 322 #ifdef CONFIG_WPS_TESTING
 323         } else if (os_strcasecmp(cmd, "wps_version_number") == 0) {
 324                 long int val;
 325                 val = strtol(value, NULL, 0);
 326                 if (val < 0 || val > 0xff) {
 327                         ret = -1;
 328                         wpa_printf(MSG_DEBUG, "WPS: Invalid "
 329                                    "wps_version_number %ld", val);
 330                 } else {
 331                         wps_version_number = val;
 332                         wpa_printf(MSG_DEBUG, "WPS: Testing - force WPS "
 333                                    "version %u.%u",
 334                                    (wps_version_number & 0xf0) >> 4,
 335                                    wps_version_number & 0x0f);
 336                 }
 337         } else if (os_strcasecmp(cmd, "wps_testing_dummy_cred") == 0) {
 338                 wps_testing_dummy_cred = atoi(value);
 339                 wpa_printf(MSG_DEBUG, "WPS: Testing - dummy_cred=%d",
 340                            wps_testing_dummy_cred);
 341         } else if (os_strcasecmp(cmd, "wps_corrupt_pkhash") == 0) {
 342                 wps_corrupt_pkhash = atoi(value);
 343                 wpa_printf(MSG_DEBUG, "WPS: Testing - wps_corrupt_pkhash=%d",
 344                            wps_corrupt_pkhash);
 345 #endif /* CONFIG_WPS_TESTING */
 346         } else if (os_strcasecmp(cmd, "ampdu") == 0) {
 347                 if (wpa_drv_ampdu(wpa_s, atoi(value)) < 0)
 348                         ret = -1;
 349 #ifdef CONFIG_TDLS
 350 #ifdef CONFIG_TDLS_TESTING
 351         } else if (os_strcasecmp(cmd, "tdls_testing") == 0) {
 352                 extern unsigned int tdls_testing;
 353                 tdls_testing = strtol(value, NULL, 0);
 354                 wpa_printf(MSG_DEBUG, "TDLS: tdls_testing=0x%x", tdls_testing);
 355 #endif /* CONFIG_TDLS_TESTING */
 356         } else if (os_strcasecmp(cmd, "tdls_disabled") == 0) {
 357                 int disabled = atoi(value);
 358                 wpa_printf(MSG_DEBUG, "TDLS: tdls_disabled=%d", disabled);
 359                 if (disabled) {
 360                         if (wpa_drv_tdls_oper(wpa_s, TDLS_DISABLE, NULL) < 0)
 361                                 ret = -1;
 362                 } else if (wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL) < 0)
 363                         ret = -1;
 364                 wpa_tdls_enable(wpa_s->wpa, !disabled);
 365 #endif /* CONFIG_TDLS */
 366         } else if (os_strcasecmp(cmd, "pno") == 0) {
 367                 ret = wpas_ctrl_pno(wpa_s, value);
 368         } else if (os_strcasecmp(cmd, "radio_disabled") == 0) {
 369                 int disabled = atoi(value);
 370                 if (wpa_drv_radio_disable(wpa_s, disabled) < 0)
 371                         ret = -1;
 372                 else if (disabled)
 373                         wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);
 374         } else if (os_strcasecmp(cmd, "uapsd") == 0) {
 375                 if (os_strcmp(value, "disable") == 0)
 376                         wpa_s->set_sta_uapsd = 0;
 377                 else {
 378                         int be, bk, vi, vo;
 379                         char *pos;
 380                         /* format: BE,BK,VI,VO;max SP Length */
 381                         be = atoi(value);
 382                         pos = os_strchr(value, ',');
 383                         if (pos == NULL)
 384                                 return -1;
 385                         pos++;
 386                         bk = atoi(pos);
 387                         pos = os_strchr(pos, ',');
 388                         if (pos == NULL)
 389                                 return -1;
 390                         pos++;
 391                         vi = atoi(pos);
 392                         pos = os_strchr(pos, ',');
 393                         if (pos == NULL)
 394                                 return -1;
 395                         pos++;
 396                         vo = atoi(pos);
 397                         /* ignore max SP Length for now */
 398
 399                         wpa_s->set_sta_uapsd = 1;
 400                         wpa_s->sta_uapsd = 0;
 401                         if (be)
 402                                 wpa_s->sta_uapsd |= BIT(0);
 403                         if (bk)
 404                                 wpa_s->sta_uapsd |= BIT(1);
 405                         if (vi)
 406                                 wpa_s->sta_uapsd |= BIT(2);
 407                         if (vo)
 408                                 wpa_s->sta_uapsd |= BIT(3);
 409                 }
 410         } else if (os_strcasecmp(cmd, "ps") == 0) {
 411                 ret = wpa_drv_set_p2p_powersave(wpa_s, atoi(value), -1, -1);
 412 #ifdef CONFIG_WIFI_DISPLAY
 413         } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
 414                 int enabled = !!atoi(value);
 415                 if (enabled && !wpa_s->global->p2p)
 416                         ret = -1;
 417                 else
 418                         wifi_display_enable(wpa_s->global, enabled);
 419 #endif /* CONFIG_WIFI_DISPLAY */
 420         } else if (os_strcasecmp(cmd, "bssid_filter") == 0) {
 421                 ret = set_bssid_filter(wpa_s, value);
 422         } else if (os_strcasecmp(cmd, "disallow_aps") == 0) {
 423                 ret = set_disallow_aps(wpa_s, value);
 424         } else if (os_strcasecmp(cmd, "no_keep_alive") == 0) {
 425                 wpa_s->no_keep_alive = !!atoi(value);
 426 #ifdef CONFIG_TESTING_OPTIONS
 427         } else if (os_strcasecmp(cmd, "ext_mgmt_frame_handling") == 0) {
 428                 wpa_s->ext_mgmt_frame_handling = !!atoi(value);
 429         } else if (os_strcasecmp(cmd, "ext_eapol_frame_io") == 0) {
 430                 wpa_s->ext_eapol_frame_io = !!atoi(value);
 431 #ifdef CONFIG_AP
 432                 if (wpa_s->ap_iface) {
 433                         wpa_s->ap_iface->bss[0]->ext_eapol_frame_io =
 434                                 wpa_s->ext_eapol_frame_io;
 435                 }
 436 #endif /* CONFIG_AP */
 437         } else if (os_strcasecmp(cmd, "extra_roc_dur") == 0) {
 438                 wpa_s->extra_roc_dur = atoi(value);
 439 #endif /* CONFIG_TESTING_OPTIONS */
 440 #ifndef CONFIG_NO_CONFIG_BLOBS
 441         } else if (os_strcmp(cmd, "blob") == 0) {
 442                 ret = wpas_ctrl_set_blob(wpa_s, value);
 443 #endif /* CONFIG_NO_CONFIG_BLOBS */
 444         } else {
 445                 value[-1] = '=';
 446                 ret = wpa_config_process_global(wpa_s->conf, cmd, -1);
 447                 if (ret == 0)
 448                         wpa_supplicant_update_config(wpa_s);
 449         }
 450
 451         return ret;
 452 }
 453
 454
 455 static int wpa_supplicant_ctrl_iface_get(struct wpa_supplicant *wpa_s,
 456                                          char *cmd, char *buf, size_t buflen)
 457 {
 458         int res = -1;
 459
 460         wpa_printf(MSG_DEBUG, "CTRL_IFACE GET '%s'", cmd);
 461
 462         if (os_strcmp(cmd, "version") == 0) {
 463                 res = os_snprintf(buf, buflen, "%s", VERSION_STR);
 464         } else if (os_strcasecmp(cmd, "country") == 0) {
 465                 if (wpa_s->conf->country[0] && wpa_s->conf->country[1])
 466                         res = os_snprintf(buf, buflen, "%c%c",
 467                                           wpa_s->conf->country[0],
 468                                           wpa_s->conf->country[1]);
 469 #ifdef CONFIG_WIFI_DISPLAY
 470         } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
 471                 int enabled;
 472                 if (wpa_s->global->p2p == NULL ||
 473                     wpa_s->global->p2p_disabled)
 474                         enabled = 0;
 475                 else
 476                         enabled = wpa_s->global->wifi_display;
 477                 res = os_snprintf(buf, buflen, "%d", enabled);
 478                 if (os_snprintf_error(buflen, res))
 479                         return -1;
 480                 return res;
 481 #endif /* CONFIG_WIFI_DISPLAY */
 482 #ifdef CONFIG_TESTING_GET_GTK
 483         } else if (os_strcmp(cmd, "gtk") == 0) {
 484                 if (wpa_s->last_gtk_len == 0)
 485                         return -1;
 486                 res = wpa_snprintf_hex(buf, buflen, wpa_s->last_gtk,
 487                                        wpa_s->last_gtk_len);
 488                 return res;
 489 #endif /* CONFIG_TESTING_GET_GTK */
 490         }
 491
 492         if (res < 0 || (unsigned int) res >= buflen)
 493                 return -1;
 494         return res;
 495 }
 496
 497
 498 #ifdef IEEE8021X_EAPOL
 499 static int wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant *wpa_s,
 500                                              char *addr)
 501 {
 502         u8 bssid[ETH_ALEN];
 503         struct wpa_ssid *ssid = wpa_s->current_ssid;
 504
 505         if (hwaddr_aton(addr, bssid)) {
 506                 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH: invalid address "
 507                            "'%s'", addr);
 508                 return -1;
 509         }
 510
 511         wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH " MACSTR, MAC2STR(bssid));
 512         rsn_preauth_deinit(wpa_s->wpa);
 513         if (rsn_preauth_init(wpa_s->wpa, bssid, ssid ? &ssid->eap : NULL))
 514                 return -1;
 515
 516         return 0;
 517 }
 518 #endif /* IEEE8021X_EAPOL */
 519
 520
 521 #ifdef CONFIG_PEERKEY
 522 /* MLME-STKSTART.request(peer) */
 523 static int wpa_supplicant_ctrl_iface_stkstart(
 524         struct wpa_supplicant *wpa_s, char *addr)
 525 {
 526         u8 peer[ETH_ALEN];
 527
 528         if (hwaddr_aton(addr, peer)) {
 529                 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART: invalid "
 530                            "address '%s'", addr);
 531                 return -1;
 532         }
 533
 534         wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART " MACSTR,
 535                    MAC2STR(peer));
 536
 537         return wpa_sm_stkstart(wpa_s->wpa, peer);
 538 }
 539 #endif /* CONFIG_PEERKEY */
 540
 541
 542 #ifdef CONFIG_TDLS
 543
 544 static int wpa_supplicant_ctrl_iface_tdls_discover(
 545         struct wpa_supplicant *wpa_s, char *addr)
 546 {
 547         u8 peer[ETH_ALEN];
 548         int ret;
 549
 550         if (hwaddr_aton(addr, peer)) {
 551                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER: invalid "
 552                            "address '%s'", addr);
 553                 return -1;
 554         }
 555
 556         wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER " MACSTR,
 557                    MAC2STR(peer));
 558
 559         if (wpa_tdls_is_external_setup(wpa_s->wpa))
 560                 ret = wpa_tdls_send_discovery_request(wpa_s->wpa, peer);
 561         else
 562                 ret = wpa_drv_tdls_oper(wpa_s, TDLS_DISCOVERY_REQ, peer);
 563
 564         return ret;
 565 }
 566
 567
 568 static int wpa_supplicant_ctrl_iface_tdls_setup(
 569         struct wpa_supplicant *wpa_s, char *addr)
 570 {
 571         u8 peer[ETH_ALEN];
 572         int ret;
 573
 574         if (hwaddr_aton(addr, peer)) {
 575                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP: invalid "
 576                            "address '%s'", addr);
 577                 return -1;
 578         }
 579
 580         wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP " MACSTR,
 581                    MAC2STR(peer));
 582
 583         if ((wpa_s->conf->tdls_external_control) &&
 584             wpa_tdls_is_external_setup(wpa_s->wpa))
 585                 return wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
 586
 587         wpa_tdls_remove(wpa_s->wpa, peer);
 588
 589         if (wpa_tdls_is_external_setup(wpa_s->wpa))
 590                 ret = wpa_tdls_start(wpa_s->wpa, peer);
 591         else
 592                 ret = wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
 593
 594         return ret;
 595 }
 596
 597
 598 static int wpa_supplicant_ctrl_iface_tdls_teardown(
 599         struct wpa_supplicant *wpa_s, char *addr)
 600 {
 601         u8 peer[ETH_ALEN];
 602         int ret;
 603
 604         if (os_strcmp(addr, "*") == 0) {
 605                 /* remove everyone */
 606                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN *");
 607                 wpa_tdls_teardown_peers(wpa_s->wpa);
 608                 return 0;
 609         }
 610
 611         if (hwaddr_aton(addr, peer)) {
 612                 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN: invalid "
 613                            "address '%s'", addr);
 614                 return -1;
 615         }
 616
 617         wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN " MACSTR,
 618                    MAC2STR(peer));
 619
 620         if ((wpa_s->conf->tdls_external_control) &&
 621             wpa_tdls_is_external_setup(wpa_s->wpa))
 622                 return wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
 623
 624         if (wpa_tdls_is_external_setup(wpa_s->wpa))
 625                 ret = wpa_tdls_teardown_link(
 626                         wpa_s->wpa, peer,
 627                         WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED);
 628         else
 629                 ret = wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
 630
 631         return ret;
 632 }
 633
 634
 635 static int ctrl_iface_get_capability_tdls(
 636         struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
 637 {
 638         int ret;
 639
 640         ret = os_snprintf(buf, buflen, "%s\n",
 641                           wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_SUPPORT ?
 642                           (wpa_s->drv_flags &
 643                            WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP ?
 644                            "EXTERNAL" : "INTERNAL") : "UNSUPPORTED");
 645         if (os_snprintf_error(buflen, ret))
 646                 return -1;
 647         return ret;
 648 }
 649
 650 #endif /* CONFIG_TDLS */
 651
 652
 653 static int wmm_ac_ctrl_addts(struct wpa_supplicant *wpa_s, char *cmd)
 654 {
 655         char *token, *context = NULL;
 656         struct wmm_ac_ts_setup_params params = {
 657                 .tsid = 0xff,
 658                 .direction = 0xff,
 659         };
 660
 661         while ((token = str_token(cmd, " ", &context))) {
 662                 if (sscanf(token, "tsid=%i", &params.tsid) == 1 ||
 663                     sscanf(token, "up=%i", &params.user_priority) == 1 ||
 664                     sscanf(token, "nominal_msdu_size=%i",
 665                            &params.nominal_msdu_size) == 1 ||
 666                     sscanf(token, "mean_data_rate=%i",
 667                            &params.mean_data_rate) == 1 ||
 668                     sscanf(token, "min_phy_rate=%i",
 669                            &params.minimum_phy_rate) == 1 ||
 670                     sscanf(token, "sba=%i",
 671                            &params.surplus_bandwidth_allowance) == 1)
 672                         continue;
 673
 674                 if (os_strcasecmp(token, "downlink") == 0) {
 675                         params.direction = WMM_TSPEC_DIRECTION_DOWNLINK;
 676                 } else if (os_strcasecmp(token, "uplink") == 0) {
 677                         params.direction = WMM_TSPEC_DIRECTION_UPLINK;
 678                 } else if (os_strcasecmp(token, "bidi") == 0) {
 679                         params.direction = WMM_TSPEC_DIRECTION_BI_DIRECTIONAL;
 680                 } else if (os_strcasecmp(token, "fixed_nominal_msdu") == 0) {
 681                         params.fixed_nominal_msdu = 1;
 682                 } else {
 683                         wpa_printf(MSG_DEBUG,
 684                                    "CTRL: Invalid WMM_AC_ADDTS parameter: '%s'",
 685                                    token);
 686                         return -1;
 687                 }
 688
 689         }
 690
 691         return wpas_wmm_ac_addts(wpa_s, &params);
 692 }
 693
 694
 695 static int wmm_ac_ctrl_delts(struct wpa_supplicant *wpa_s, char *cmd)
 696 {
 697         u8 tsid = atoi(cmd);
 698
 699         return wpas_wmm_ac_delts(wpa_s, tsid);
 700 }
 701
 702
 703 #ifdef CONFIG_IEEE80211R
 704 static int wpa_supplicant_ctrl_iface_ft_ds(
 705         struct wpa_supplicant *wpa_s, char *addr)
 706 {
 707         u8 target_ap[ETH_ALEN];
 708         struct wpa_bss *bss;
 709         const u8 *mdie;
 710
 711         if (hwaddr_aton(addr, target_ap)) {
 712                 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS: invalid "
 713                            "address '%s'", addr);
 714                 return -1;
 715         }
 716
 717         wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS " MACSTR, MAC2STR(target_ap));
 718
 719         bss = wpa_bss_get_bssid(wpa_s, target_ap);
 720         if (bss)
 721                 mdie = wpa_bss_get_ie(bss, WLAN_EID_MOBILITY_DOMAIN);
 722         else
 723                 mdie = NULL;
 724
 725         return wpa_ft_start_over_ds(wpa_s->wpa, target_ap, mdie);
 726 }
 727 #endif /* CONFIG_IEEE80211R */
 728
 729
 730 #ifdef CONFIG_WPS
 731 static int wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant *wpa_s,
 732                                              char *cmd)
 733 {
 734         u8 bssid[ETH_ALEN], *_bssid = bssid;
 735 #ifdef CONFIG_P2P
 736         u8 p2p_dev_addr[ETH_ALEN];
 737 #endif /* CONFIG_P2P */
 738 #ifdef CONFIG_AP
 739         u8 *_p2p_dev_addr = NULL;
 740 #endif /* CONFIG_AP */
 741
 742         if (cmd == NULL || os_strcmp(cmd, "any") == 0) {
 743                 _bssid = NULL;
 744 #ifdef CONFIG_P2P
 745         } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
 746                 if (hwaddr_aton(cmd + 13, p2p_dev_addr)) {
 747                         wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid "
 748                                    "P2P Device Address '%s'",
 749                                    cmd + 13);
 750                         return -1;
 751                 }
 752                 _p2p_dev_addr = p2p_dev_addr;
 753 #endif /* CONFIG_P2P */
 754         } else if (hwaddr_aton(cmd, bssid)) {
 755                 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid BSSID '%s'",
 756                            cmd);
 757                 return -1;
 758         }
 759
 760 #ifdef CONFIG_AP
 761         if (wpa_s->ap_iface)
 762                 return wpa_supplicant_ap_wps_pbc(wpa_s, _bssid, _p2p_dev_addr);
 763 #endif /* CONFIG_AP */
 764
 765         return wpas_wps_start_pbc(wpa_s, _bssid, 0);
 766 }
 767
 768
 769 static int wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant *wpa_s,
 770                                              char *cmd, char *buf,
 771                                              size_t buflen)
 772 {
 773         u8 bssid[ETH_ALEN], *_bssid = bssid;
 774         char *pin;
 775         int ret;
 776
 777         pin = os_strchr(cmd, ' ');
 778         if (pin)
 779                 *pin++ = '\0';
 780
 781         if (os_strcmp(cmd, "any") == 0)
 782                 _bssid = NULL;
 783         else if (os_strcmp(cmd, "get") == 0) {
 784                 ret = wps_generate_pin();
 785                 goto done;
 786         } else if (hwaddr_aton(cmd, bssid)) {
 787                 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PIN: invalid BSSID '%s'",
 788                            cmd);
 789                 return -1;
 790         }
 791
 792 #ifdef CONFIG_AP
 793         if (wpa_s->ap_iface) {
 794                 int timeout = 0;
 795                 char *pos;
 796
 797                 if (pin) {
 798                         pos = os_strchr(pin, ' ');
 799                         if (pos) {
 800                                 *pos++ = '\0';
 801                                 timeout = atoi(pos);
 802                         }
 803                 }
 804
 805                 return wpa_supplicant_ap_wps_pin(wpa_s, _bssid, pin,
 806                                                  buf, buflen, timeout);
 807         }
 808 #endif /* CONFIG_AP */
 809
 810         if (pin) {
 811                 ret = wpas_wps_start_pin(wpa_s, _bssid, pin, 0,
 812                                          DEV_PW_DEFAULT);
 813                 if (ret < 0)
 814                         return -1;
 815                 ret = os_snprintf(buf, buflen, "%s", pin);
 816                 if (os_snprintf_error(buflen, ret))
 817                         return -1;
 818                 return ret;
 819         }
 820
 821         ret = wpas_wps_start_pin(wpa_s, _bssid, NULL, 0, DEV_PW_DEFAULT);
 822         if (ret < 0)
 823                 return -1;
 824
 825 done:
 826         /* Return the generated PIN */
 827         ret = os_snprintf(buf, buflen, "%08d", ret);
 828         if (os_snprintf_error(buflen, ret))
 829                 return -1;
 830         return ret;
 831 }
 832
 833
 834 static int wpa_supplicant_ctrl_iface_wps_check_pin(
 835         struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
 836 {
 837         char pin[9];
 838         size_t len;
 839         char *pos;
 840         int ret;
 841
 842         wpa_hexdump_ascii_key(MSG_DEBUG, "WPS_CHECK_PIN",
 843                               (u8 *) cmd, os_strlen(cmd));
 844         for (pos = cmd, len = 0; *pos != '\0'; pos++) {
 845                 if (*pos < '0' || *pos > '9')
 846                         continue;
 847                 pin[len++] = *pos;
 848                 if (len == 9) {
 849                         wpa_printf(MSG_DEBUG, "WPS: Too long PIN");
 850                         return -1;
 851                 }
 852         }
 853         if (len != 4 && len != 8) {
 854                 wpa_printf(MSG_DEBUG, "WPS: Invalid PIN length %d", (int) len);
 855                 return -1;
 856         }
 857         pin[len] = '\0';
 858
 859         if (len == 8) {
 860                 unsigned int pin_val;
 861                 pin_val = atoi(pin);
 862                 if (!wps_pin_valid(pin_val)) {
 863                         wpa_printf(MSG_DEBUG, "WPS: Invalid checksum digit");
 864                         ret = os_snprintf(buf, buflen, "FAIL-CHECKSUM\n");
 865                         if (os_snprintf_error(buflen, ret))
 866                                 return -1;
 867                         return ret;
 868                 }
 869         }
 870
 871         ret = os_snprintf(buf, buflen, "%s", pin);
 872         if (os_snprintf_error(buflen, ret))
 873                 return -1;
 874
 875         return ret;
 876 }
 877
 878
 879 #ifdef CONFIG_WPS_NFC
 880
 881 static int wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant *wpa_s,
 882                                              char *cmd)
 883 {
 884         u8 bssid[ETH_ALEN], *_bssid = bssid;
 885
 886         if (cmd == NULL || cmd[0] == '\0')
 887                 _bssid = NULL;
 888         else if (hwaddr_aton(cmd, bssid))
 889                 return -1;
 890
 891         return wpas_wps_start_nfc(wpa_s, NULL, _bssid, NULL, 0, 0, NULL, NULL,
 892                                   0, 0);
 893 }
 894
 895
 896 static int wpa_supplicant_ctrl_iface_wps_nfc_config_token(
 897         struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
 898 {
 899         int ndef;
 900         struct wpabuf *buf;
 901         int res;
 902         char *pos;
 903
 904         pos = os_strchr(cmd, ' ');
 905         if (pos)
 906                 *pos++ = '\0';
 907         if (os_strcmp(cmd, "WPS") == 0)
 908                 ndef = 0;
 909         else if (os_strcmp(cmd, "NDEF") == 0)
 910                 ndef = 1;
 911         else
 912                 return -1;
 913
 914         buf = wpas_wps_nfc_config_token(wpa_s, ndef, pos);
 915         if (buf == NULL)
 916                 return -1;
 917
 918         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
 919                                          wpabuf_len(buf));
 920         reply[res++] = '\n';
 921         reply[res] = '\0';
 922
 923         wpabuf_free(buf);
 924
 925         return res;
 926 }
 927
 928
 929 static int wpa_supplicant_ctrl_iface_wps_nfc_token(
 930         struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
 931 {
 932         int ndef;
 933         struct wpabuf *buf;
 934         int res;
 935
 936         if (os_strcmp(cmd, "WPS") == 0)
 937                 ndef = 0;
 938         else if (os_strcmp(cmd, "NDEF") == 0)
 939                 ndef = 1;
 940         else
 941                 return -1;
 942
 943         buf = wpas_wps_nfc_token(wpa_s, ndef);
 944         if (buf == NULL)
 945                 return -1;
 946
 947         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
 948                                          wpabuf_len(buf));
 949         reply[res++] = '\n';
 950         reply[res] = '\0';
 951
 952         wpabuf_free(buf);
 953
 954         return res;
 955 }
 956
 957
 958 static int wpa_supplicant_ctrl_iface_wps_nfc_tag_read(
 959         struct wpa_supplicant *wpa_s, char *pos)
 960 {
 961         size_t len;
 962         struct wpabuf *buf;
 963         int ret;
 964         char *freq;
 965         int forced_freq = 0;
 966
 967         freq = strstr(pos, " freq=");
 968         if (freq) {
 969                 *freq = '\0';
 970                 freq += 6;
 971                 forced_freq = atoi(freq);
 972         }
 973
 974         len = os_strlen(pos);
 975         if (len & 0x01)
 976                 return -1;
 977         len /= 2;
 978
 979         buf = wpabuf_alloc(len);
 980         if (buf == NULL)
 981                 return -1;
 982         if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
 983                 wpabuf_free(buf);
 984                 return -1;
 985         }
 986
 987         ret = wpas_wps_nfc_tag_read(wpa_s, buf, forced_freq);
 988         wpabuf_free(buf);
 989
 990         return ret;
 991 }
 992
 993
 994 static int wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant *wpa_s,
 995                                               char *reply, size_t max_len,
 996                                               int ndef)
 997 {
 998         struct wpabuf *buf;
 999         int res;
1000
1001         buf = wpas_wps_nfc_handover_req(wpa_s, ndef);
1002         if (buf == NULL)
1003                 return -1;
1004
1005         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1006                                          wpabuf_len(buf));
1007         reply[res++] = '\n';
1008         reply[res] = '\0';
1009
1010         wpabuf_free(buf);
1011
1012         return res;
1013 }
1014
1015
1016 #ifdef CONFIG_P2P
1017 static int wpas_ctrl_nfc_get_handover_req_p2p(struct wpa_supplicant *wpa_s,
1018                                               char *reply, size_t max_len,
1019                                               int ndef)
1020 {
1021         struct wpabuf *buf;
1022         int res;
1023
1024         buf = wpas_p2p_nfc_handover_req(wpa_s, ndef);
1025         if (buf == NULL) {
1026                 wpa_printf(MSG_DEBUG, "P2P: Could not generate NFC handover request");
1027                 return -1;
1028         }
1029
1030         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1031                                          wpabuf_len(buf));
1032         reply[res++] = '\n';
1033         reply[res] = '\0';
1034
1035         wpabuf_free(buf);
1036
1037         return res;
1038 }
1039 #endif /* CONFIG_P2P */
1040
1041
1042 static int wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant *wpa_s,
1043                                           char *cmd, char *reply,
1044                                           size_t max_len)
1045 {
1046         char *pos;
1047         int ndef;
1048
1049         pos = os_strchr(cmd, ' ');
1050         if (pos == NULL)
1051                 return -1;
1052         *pos++ = '\0';
1053
1054         if (os_strcmp(cmd, "WPS") == 0)
1055                 ndef = 0;
1056         else if (os_strcmp(cmd, "NDEF") == 0)
1057                 ndef = 1;
1058         else
1059                 return -1;
1060
1061         if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1062                 if (!ndef)
1063                         return -1;
1064                 return wpas_ctrl_nfc_get_handover_req_wps(
1065                         wpa_s, reply, max_len, ndef);
1066         }
1067
1068 #ifdef CONFIG_P2P
1069         if (os_strcmp(pos, "P2P-CR") == 0) {
1070                 return wpas_ctrl_nfc_get_handover_req_p2p(
1071                         wpa_s, reply, max_len, ndef);
1072         }
1073 #endif /* CONFIG_P2P */
1074
1075         return -1;
1076 }
1077
1078
1079 static int wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant *wpa_s,
1080                                               char *reply, size_t max_len,
1081                                               int ndef, int cr, char *uuid)
1082 {
1083         struct wpabuf *buf;
1084         int res;
1085
1086         buf = wpas_wps_nfc_handover_sel(wpa_s, ndef, cr, uuid);
1087         if (buf == NULL)
1088                 return -1;
1089
1090         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1091                                          wpabuf_len(buf));
1092         reply[res++] = '\n';
1093         reply[res] = '\0';
1094
1095         wpabuf_free(buf);
1096
1097         return res;
1098 }
1099
1100
1101 #ifdef CONFIG_P2P
1102 static int wpas_ctrl_nfc_get_handover_sel_p2p(struct wpa_supplicant *wpa_s,
1103                                               char *reply, size_t max_len,
1104                                               int ndef, int tag)
1105 {
1106         struct wpabuf *buf;
1107         int res;
1108
1109         buf = wpas_p2p_nfc_handover_sel(wpa_s, ndef, tag);
1110         if (buf == NULL)
1111                 return -1;
1112
1113         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1114                                          wpabuf_len(buf));
1115         reply[res++] = '\n';
1116         reply[res] = '\0';
1117
1118         wpabuf_free(buf);
1119
1120         return res;
1121 }
1122 #endif /* CONFIG_P2P */
1123
1124
1125 static int wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant *wpa_s,
1126                                           char *cmd, char *reply,
1127                                           size_t max_len)
1128 {
1129         char *pos, *pos2;
1130         int ndef;
1131
1132         pos = os_strchr(cmd, ' ');
1133         if (pos == NULL)
1134                 return -1;
1135         *pos++ = '\0';
1136
1137         if (os_strcmp(cmd, "WPS") == 0)
1138                 ndef = 0;
1139         else if (os_strcmp(cmd, "NDEF") == 0)
1140                 ndef = 1;
1141         else
1142                 return -1;
1143
1144         pos2 = os_strchr(pos, ' ');
1145         if (pos2)
1146                 *pos2++ = '\0';
1147         if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1148                 if (!ndef)
1149                         return -1;
1150                 return wpas_ctrl_nfc_get_handover_sel_wps(
1151                         wpa_s, reply, max_len, ndef,
1152                         os_strcmp(pos, "WPS-CR") == 0, pos2);
1153         }
1154
1155 #ifdef CONFIG_P2P
1156         if (os_strcmp(pos, "P2P-CR") == 0) {
1157                 return wpas_ctrl_nfc_get_handover_sel_p2p(
1158                         wpa_s, reply, max_len, ndef, 0);
1159         }
1160
1161         if (os_strcmp(pos, "P2P-CR-TAG") == 0) {
1162                 return wpas_ctrl_nfc_get_handover_sel_p2p(
1163                         wpa_s, reply, max_len, ndef, 1);
1164         }
1165 #endif /* CONFIG_P2P */
1166
1167         return -1;
1168 }
1169
1170
1171 static int wpas_ctrl_nfc_report_handover(struct wpa_supplicant *wpa_s,
1172                                          char *cmd)
1173 {
1174         size_t len;
1175         struct wpabuf *req, *sel;
1176         int ret;
1177         char *pos, *role, *type, *pos2;
1178 #ifdef CONFIG_P2P
1179         char *freq;
1180         int forced_freq = 0;
1181
1182         freq = strstr(cmd, " freq=");
1183         if (freq) {
1184                 *freq = '\0';
1185                 freq += 6;
1186                 forced_freq = atoi(freq);
1187         }
1188 #endif /* CONFIG_P2P */
1189
1190         role = cmd;
1191         pos = os_strchr(role, ' ');
1192         if (pos == NULL) {
1193                 wpa_printf(MSG_DEBUG, "NFC: Missing type in handover report");
1194                 return -1;
1195         }
1196         *pos++ = '\0';
1197
1198         type = pos;
1199         pos = os_strchr(type, ' ');
1200         if (pos == NULL) {
1201                 wpa_printf(MSG_DEBUG, "NFC: Missing request message in handover report");
1202                 return -1;
1203         }
1204         *pos++ = '\0';
1205
1206         pos2 = os_strchr(pos, ' ');
1207         if (pos2 == NULL) {
1208                 wpa_printf(MSG_DEBUG, "NFC: Missing select message in handover report");
1209                 return -1;
1210         }
1211         *pos2++ = '\0';
1212
1213         len = os_strlen(pos);
1214         if (len & 0x01) {
1215                 wpa_printf(MSG_DEBUG, "NFC: Invalid request message length in handover report");
1216                 return -1;
1217         }
1218         len /= 2;
1219
1220         req = wpabuf_alloc(len);
1221         if (req == NULL) {
1222                 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for request message");
1223                 return -1;
1224         }
1225         if (hexstr2bin(pos, wpabuf_put(req, len), len) < 0) {
1226                 wpa_printf(MSG_DEBUG, "NFC: Invalid request message hexdump in handover report");
1227                 wpabuf_free(req);
1228                 return -1;
1229         }
1230
1231         len = os_strlen(pos2);
1232         if (len & 0x01) {
1233                 wpa_printf(MSG_DEBUG, "NFC: Invalid select message length in handover report");
1234                 wpabuf_free(req);
1235                 return -1;
1236         }
1237         len /= 2;
1238
1239         sel = wpabuf_alloc(len);
1240         if (sel == NULL) {
1241                 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for select message");
1242                 wpabuf_free(req);
1243                 return -1;
1244         }
1245         if (hexstr2bin(pos2, wpabuf_put(sel, len), len) < 0) {
1246                 wpa_printf(MSG_DEBUG, "NFC: Invalid select message hexdump in handover report");
1247                 wpabuf_free(req);
1248                 wpabuf_free(sel);
1249                 return -1;
1250         }
1251
1252         wpa_printf(MSG_DEBUG, "NFC: Connection handover reported - role=%s type=%s req_len=%d sel_len=%d",
1253                    role, type, (int) wpabuf_len(req), (int) wpabuf_len(sel));
1254
1255         if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "WPS") == 0) {
1256                 ret = wpas_wps_nfc_report_handover(wpa_s, req, sel);
1257 #ifdef CONFIG_AP
1258         } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "WPS") == 0)
1259         {
1260                 ret = wpas_ap_wps_nfc_report_handover(wpa_s, req, sel);
1261                 if (ret < 0)
1262                         ret = wpas_er_wps_nfc_report_handover(wpa_s, req, sel);
1263 #endif /* CONFIG_AP */
1264 #ifdef CONFIG_P2P
1265         } else if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "P2P") == 0)
1266         {
1267                 ret = wpas_p2p_nfc_report_handover(wpa_s, 1, req, sel, 0);
1268         } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "P2P") == 0)
1269         {
1270                 ret = wpas_p2p_nfc_report_handover(wpa_s, 0, req, sel,
1271                                                    forced_freq);
1272 #endif /* CONFIG_P2P */
1273         } else {
1274                 wpa_printf(MSG_DEBUG, "NFC: Unsupported connection handover "
1275                            "reported: role=%s type=%s", role, type);
1276                 ret = -1;
1277         }
1278         wpabuf_free(req);
1279         wpabuf_free(sel);
1280
1281         if (ret)
1282                 wpa_printf(MSG_DEBUG, "NFC: Failed to process reported handover messages");
1283
1284         return ret;
1285 }
1286
1287 #endif /* CONFIG_WPS_NFC */
1288
1289
1290 static int wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant *wpa_s,
1291                                              char *cmd)
1292 {
1293         u8 bssid[ETH_ALEN];
1294         char *pin;
1295         char *new_ssid;
1296         char *new_auth;
1297         char *new_encr;
1298         char *new_key;
1299         struct wps_new_ap_settings ap;
1300
1301         pin = os_strchr(cmd, ' ');
1302         if (pin == NULL)
1303                 return -1;
1304         *pin++ = '\0';
1305
1306         if (hwaddr_aton(cmd, bssid)) {
1307                 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_REG: invalid BSSID '%s'",
1308                            cmd);
1309                 return -1;
1310         }
1311
1312         new_ssid = os_strchr(pin, ' ');
1313         if (new_ssid == NULL)
1314                 return wpas_wps_start_reg(wpa_s, bssid, pin, NULL);
1315         *new_ssid++ = '\0';
1316
1317         new_auth = os_strchr(new_ssid, ' ');
1318         if (new_auth == NULL)
1319                 return -1;
1320         *new_auth++ = '\0';
1321
1322         new_encr = os_strchr(new_auth, ' ');
1323         if (new_encr == NULL)
1324                 return -1;
1325         *new_encr++ = '\0';
1326
1327         new_key = os_strchr(new_encr, ' ');
1328         if (new_key == NULL)
1329                 return -1;
1330         *new_key++ = '\0';
1331
1332         os_memset(&ap, 0, sizeof(ap));
1333         ap.ssid_hex = new_ssid;
1334         ap.auth = new_auth;
1335         ap.encr = new_encr;
1336         ap.key_hex = new_key;
1337         return wpas_wps_start_reg(wpa_s, bssid, pin, &ap);
1338 }
1339
1340
1341 #ifdef CONFIG_AP
1342 static int wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant *wpa_s,
1343                                                 char *cmd, char *buf,
1344                                                 size_t buflen)
1345 {
1346         int timeout = 300;
1347         char *pos;
1348         const char *pin_txt;
1349
1350         if (!wpa_s->ap_iface)
1351                 return -1;
1352
1353         pos = os_strchr(cmd, ' ');
1354         if (pos)
1355                 *pos++ = '\0';
1356
1357         if (os_strcmp(cmd, "disable") == 0) {
1358                 wpas_wps_ap_pin_disable(wpa_s);
1359                 return os_snprintf(buf, buflen, "OK\n");
1360         }
1361
1362         if (os_strcmp(cmd, "random") == 0) {
1363                 if (pos)
1364                         timeout = atoi(pos);
1365                 pin_txt = wpas_wps_ap_pin_random(wpa_s, timeout);
1366                 if (pin_txt == NULL)
1367                         return -1;
1368                 return os_snprintf(buf, buflen, "%s", pin_txt);
1369         }
1370
1371         if (os_strcmp(cmd, "get") == 0) {
1372                 pin_txt = wpas_wps_ap_pin_get(wpa_s);
1373                 if (pin_txt == NULL)
1374                         return -1;
1375                 return os_snprintf(buf, buflen, "%s", pin_txt);
1376         }
1377
1378         if (os_strcmp(cmd, "set") == 0) {
1379                 char *pin;
1380                 if (pos == NULL)
1381                         return -1;
1382                 pin = pos;
1383                 pos = os_strchr(pos, ' ');
1384                 if (pos) {
1385                         *pos++ = '\0';
1386                         timeout = atoi(pos);
1387                 }
1388                 if (os_strlen(pin) > buflen)
1389                         return -1;
1390                 if (wpas_wps_ap_pin_set(wpa_s, pin, timeout) < 0)
1391                         return -1;
1392                 return os_snprintf(buf, buflen, "%s", pin);
1393         }
1394
1395         return -1;
1396 }
1397 #endif /* CONFIG_AP */
1398
1399
1400 #ifdef CONFIG_WPS_ER
1401 static int wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant *wpa_s,
1402                                                 char *cmd)
1403 {
1404         char *uuid = cmd, *pin, *pos;
1405         u8 addr_buf[ETH_ALEN], *addr = NULL;
1406         pin = os_strchr(uuid, ' ');
1407         if (pin == NULL)
1408                 return -1;
1409         *pin++ = '\0';
1410         pos = os_strchr(pin, ' ');
1411         if (pos) {
1412                 *pos++ = '\0';
1413                 if (hwaddr_aton(pos, addr_buf) == 0)
1414                         addr = addr_buf;
1415         }
1416         return wpas_wps_er_add_pin(wpa_s, addr, uuid, pin);
1417 }
1418
1419
1420 static int wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant *wpa_s,
1421                                                   char *cmd)
1422 {
1423         char *uuid = cmd, *pin;
1424         pin = os_strchr(uuid, ' ');
1425         if (pin == NULL)
1426                 return -1;
1427         *pin++ = '\0';
1428         return wpas_wps_er_learn(wpa_s, uuid, pin);
1429 }
1430
1431
1432 static int wpa_supplicant_ctrl_iface_wps_er_set_config(
1433         struct wpa_supplicant *wpa_s, char *cmd)
1434 {
1435         char *uuid = cmd, *id;
1436         id = os_strchr(uuid, ' ');
1437         if (id == NULL)
1438                 return -1;
1439         *id++ = '\0';
1440         return wpas_wps_er_set_config(wpa_s, uuid, atoi(id));
1441 }
1442
1443
1444 static int wpa_supplicant_ctrl_iface_wps_er_config(
1445         struct wpa_supplicant *wpa_s, char *cmd)
1446 {
1447         char *pin;
1448         char *new_ssid;
1449         char *new_auth;
1450         char *new_encr;
1451         char *new_key;
1452         struct wps_new_ap_settings ap;
1453
1454         pin = os_strchr(cmd, ' ');
1455         if (pin == NULL)
1456                 return -1;
1457         *pin++ = '\0';
1458
1459         new_ssid = os_strchr(pin, ' ');
1460         if (new_ssid == NULL)
1461                 return -1;
1462         *new_ssid++ = '\0';
1463
1464         new_auth = os_strchr(new_ssid, ' ');
1465         if (new_auth == NULL)
1466                 return -1;
1467         *new_auth++ = '\0';
1468
1469         new_encr = os_strchr(new_auth, ' ');
1470         if (new_encr == NULL)
1471                 return -1;
1472         *new_encr++ = '\0';
1473
1474         new_key = os_strchr(new_encr, ' ');
1475         if (new_key == NULL)
1476                 return -1;
1477         *new_key++ = '\0';
1478
1479         os_memset(&ap, 0, sizeof(ap));
1480         ap.ssid_hex = new_ssid;
1481         ap.auth = new_auth;
1482         ap.encr = new_encr;
1483         ap.key_hex = new_key;
1484         return wpas_wps_er_config(wpa_s, cmd, pin, &ap);
1485 }
1486
1487
1488 #ifdef CONFIG_WPS_NFC
1489 static int wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
1490         struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1491 {
1492         int ndef;
1493         struct wpabuf *buf;
1494         int res;
1495         char *uuid;
1496
1497         uuid = os_strchr(cmd, ' ');
1498         if (uuid == NULL)
1499                 return -1;
1500         *uuid++ = '\0';
1501
1502         if (os_strcmp(cmd, "WPS") == 0)
1503                 ndef = 0;
1504         else if (os_strcmp(cmd, "NDEF") == 0)
1505                 ndef = 1;
1506         else
1507                 return -1;
1508
1509         buf = wpas_wps_er_nfc_config_token(wpa_s, ndef, uuid);
1510         if (buf == NULL)
1511                 return -1;
1512
1513         res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1514                                          wpabuf_len(buf));
1515         reply[res++] = '\n';
1516         reply[res] = '\0';
1517
1518         wpabuf_free(buf);
1519
1520         return res;
1521 }
1522 #endif /* CONFIG_WPS_NFC */
1523 #endif /* CONFIG_WPS_ER */
1524
1525 #endif /* CONFIG_WPS */
1526
1527
1528 #ifdef CONFIG_IBSS_RSN
1529 static int wpa_supplicant_ctrl_iface_ibss_rsn(
1530         struct wpa_supplicant *wpa_s, char *addr)
1531 {
1532         u8 peer[ETH_ALEN];
1533
1534         if (hwaddr_aton(addr, peer)) {
1535                 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN: invalid "
1536                            "address '%s'", addr);
1537                 return -1;
1538         }
1539
1540         wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN " MACSTR,
1541                    MAC2STR(peer));
1542
1543         return ibss_rsn_start(wpa_s->ibss_rsn, peer);
1544 }
1545 #endif /* CONFIG_IBSS_RSN */
1546
1547
1548 static int wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant *wpa_s,
1549                                               char *rsp)
1550 {
1551 #ifdef IEEE8021X_EAPOL
1552         char *pos, *id_pos;
1553         int id;
1554         struct wpa_ssid *ssid;
1555
1556         pos = os_strchr(rsp, '-');
1557         if (pos == NULL)
1558                 return -1;
1559         *pos++ = '\0';
1560         id_pos = pos;
1561         pos = os_strchr(pos, ':');
1562         if (pos == NULL)
1563                 return -1;
1564         *pos++ = '\0';
1565         id = atoi(id_pos);
1566         wpa_printf(MSG_DEBUG, "CTRL_IFACE: field=%s id=%d", rsp, id);
1567         wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
1568                               (u8 *) pos, os_strlen(pos));
1569
1570         ssid = wpa_config_get_network(wpa_s->conf, id);
1571         if (ssid == NULL) {
1572                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1573                            "to update", id);
1574                 return -1;
1575         }
1576
1577         return wpa_supplicant_ctrl_iface_ctrl_rsp_handle(wpa_s, ssid, rsp,
1578                                                          pos);
1579 #else /* IEEE8021X_EAPOL */
1580         wpa_printf(MSG_DEBUG, "CTRL_IFACE: 802.1X not included");
1581         return -1;
1582 #endif /* IEEE8021X_EAPOL */
1583 }
1584
1585
1586 static int wpa_supplicant_ctrl_iface_status(struct wpa_supplicant *wpa_s,
1587                                             const char *params,
1588                                             char *buf, size_t buflen)
1589 {
1590         char *pos, *end, tmp[30];
1591         int res, verbose, wps, ret;
1592 #ifdef CONFIG_HS20
1593         const u8 *hs20;
1594 #endif /* CONFIG_HS20 */
1595
1596         if (os_strcmp(params, "-DRIVER") == 0)
1597                 return wpa_drv_status(wpa_s, buf, buflen);
1598         verbose = os_strcmp(params, "-VERBOSE") == 0;
1599         wps = os_strcmp(params, "-WPS") == 0;
1600         pos = buf;
1601         end = buf + buflen;
1602         if (wpa_s->wpa_state >= WPA_ASSOCIATED) {
1603                 struct wpa_ssid *ssid = wpa_s->current_ssid;
1604                 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
1605                                   MAC2STR(wpa_s->bssid));
1606                 if (os_snprintf_error(end - pos, ret))
1607                         return pos - buf;
1608                 pos += ret;
1609                 ret = os_snprintf(pos, end - pos, "freq=%u\n",
1610                                   wpa_s->assoc_freq);
1611                 if (os_snprintf_error(end - pos, ret))
1612                         return pos - buf;
1613                 pos += ret;
1614                 if (ssid) {
1615                         u8 *_ssid = ssid->ssid;
1616                         size_t ssid_len = ssid->ssid_len;
1617                         u8 ssid_buf[MAX_SSID_LEN];
1618                         if (ssid_len == 0) {
1619                                 int _res = wpa_drv_get_ssid(wpa_s, ssid_buf);
1620                                 if (_res < 0)
1621                                         ssid_len = 0;
1622                                 else
1623                                         ssid_len = _res;
1624                                 _ssid = ssid_buf;
1625                         }
1626                         ret = os_snprintf(pos, end - pos, "ssid=%s\nid=%d\n",
1627                                           wpa_ssid_txt(_ssid, ssid_len),
1628                                           ssid->id);
1629                         if (os_snprintf_error(end - pos, ret))
1630                                 return pos - buf;
1631                         pos += ret;
1632
1633                         if (wps && ssid->passphrase &&
1634                             wpa_key_mgmt_wpa_psk(ssid->key_mgmt) &&
1635                             (ssid->mode == WPAS_MODE_AP ||
1636                              ssid->mode == WPAS_MODE_P2P_GO)) {
1637                                 ret = os_snprintf(pos, end - pos,
1638                                                   "passphrase=%s\n",
1639                                                   ssid->passphrase);
1640                                 if (os_snprintf_error(end - pos, ret))
1641                                         return pos - buf;
1642                                 pos += ret;
1643                         }
1644                         if (ssid->id_str) {
1645                                 ret = os_snprintf(pos, end - pos,
1646                                                   "id_str=%s\n",
1647                                                   ssid->id_str);
1648                                 if (os_snprintf_error(end - pos, ret))
1649                                         return pos - buf;
1650                                 pos += ret;
1651                         }
1652
1653                         switch (ssid->mode) {
1654                         case WPAS_MODE_INFRA:
1655                                 ret = os_snprintf(pos, end - pos,
1656                                                   "mode=station\n");
1657                                 break;
1658                         case WPAS_MODE_IBSS:
1659                                 ret = os_snprintf(pos, end - pos,
1660                                                   "mode=IBSS\n");
1661                                 break;
1662                         case WPAS_MODE_AP:
1663                                 ret = os_snprintf(pos, end - pos,
1664                                                   "mode=AP\n");
1665                                 break;
1666                         case WPAS_MODE_P2P_GO:
1667                                 ret = os_snprintf(pos, end - pos,
1668                                                   "mode=P2P GO\n");
1669                                 break;
1670                         case WPAS_MODE_P2P_GROUP_FORMATION:
1671                                 ret = os_snprintf(pos, end - pos,
1672                                                   "mode=P2P GO - group "
1673                                                   "formation\n");
1674                                 break;
1675                         default:
1676                                 ret = 0;
1677                                 break;
1678                         }
1679                         if (ret < 0 || ret >= end - pos)
1680                                 return pos - buf;
1681                         pos += ret;
1682                 }
1683
1684 #ifdef CONFIG_AP
1685                 if (wpa_s->ap_iface) {
1686                         pos += ap_ctrl_iface_wpa_get_status(wpa_s, pos,
1687                                                             end - pos,
1688                                                             verbose);
1689                 } else
1690 #endif /* CONFIG_AP */
1691                 pos += wpa_sm_get_status(wpa_s->wpa, pos, end - pos, verbose);
1692         }
1693 #ifdef CONFIG_SAE
1694         if (wpa_s->wpa_state >= WPA_ASSOCIATED &&
1695 #ifdef CONFIG_AP
1696             !wpa_s->ap_iface &&
1697 #endif /* CONFIG_AP */
1698             wpa_s->sme.sae.state == SAE_ACCEPTED) {
1699                 ret = os_snprintf(pos, end - pos, "sae_group=%d\n",
1700                                   wpa_s->sme.sae.group);
1701                 if (os_snprintf_error(end - pos, ret))
1702                         return pos - buf;
1703                 pos += ret;
1704         }
1705 #endif /* CONFIG_SAE */
1706         ret = os_snprintf(pos, end - pos, "wpa_state=%s\n",
1707                           wpa_supplicant_state_txt(wpa_s->wpa_state));
1708         if (os_snprintf_error(end - pos, ret))
1709                 return pos - buf;
1710         pos += ret;
1711
1712         if (wpa_s->l2 &&
1713             l2_packet_get_ip_addr(wpa_s->l2, tmp, sizeof(tmp)) >= 0) {
1714                 ret = os_snprintf(pos, end - pos, "ip_address=%s\n", tmp);
1715                 if (os_snprintf_error(end - pos, ret))
1716                         return pos - buf;
1717                 pos += ret;
1718         }
1719
1720 #ifdef CONFIG_P2P
1721         if (wpa_s->global->p2p) {
1722                 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
1723                                   "\n", MAC2STR(wpa_s->global->p2p_dev_addr));
1724                 if (os_snprintf_error(end - pos, ret))
1725                         return pos - buf;
1726                 pos += ret;
1727         }
1728 #endif /* CONFIG_P2P */
1729
1730         ret = os_snprintf(pos, end - pos, "address=" MACSTR "\n",
1731                           MAC2STR(wpa_s->own_addr));
1732         if (os_snprintf_error(end - pos, ret))
1733                 return pos - buf;
1734         pos += ret;
1735
1736 #ifdef CONFIG_HS20
1737         if (wpa_s->current_bss &&
1738             (hs20 = wpa_bss_get_vendor_ie(wpa_s->current_bss,
1739                                           HS20_IE_VENDOR_TYPE)) &&
1740             wpa_s->wpa_proto == WPA_PROTO_RSN &&
1741             wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
1742                 int release = 1;
1743                 if (hs20[1] >= 5) {
1744                         u8 rel_num = (hs20[6] & 0xf0) >> 4;
1745                         release = rel_num + 1;
1746                 }
1747                 ret = os_snprintf(pos, end - pos, "hs20=%d\n", release);
1748                 if (os_snprintf_error(end - pos, ret))
1749                         return pos - buf;
1750                 pos += ret;
1751         }
1752
1753         if (wpa_s->current_ssid) {
1754                 struct wpa_cred *cred;
1755                 char *type;
1756
1757                 for (cred = wpa_s->conf->cred; cred; cred = cred->next) {
1758                         size_t i;
1759
1760                         if (wpa_s->current_ssid->parent_cred != cred)
1761                                 continue;
1762
1763                         if (cred->provisioning_sp) {
1764                                 ret = os_snprintf(pos, end - pos,
1765                                                   "provisioning_sp=%s\n",
1766                                                   cred->provisioning_sp);
1767                                 if (os_snprintf_error(end - pos, ret))
1768                                         return pos - buf;
1769                                 pos += ret;
1770                         }
1771
1772                         if (!cred->domain)
1773                                 goto no_domain;
1774
1775                         i = 0;
1776                         if (wpa_s->current_bss && wpa_s->current_bss->anqp) {
1777                                 struct wpabuf *names =
1778                                         wpa_s->current_bss->anqp->domain_name;
1779                                 for (i = 0; names && i < cred->num_domain; i++)
1780                                 {
1781                                         if (domain_name_list_contains(
1782                                                     names, cred->domain[i], 1))
1783                                                 break;
1784                                 }
1785                                 if (i == cred->num_domain)
1786                                         i = 0; /* show first entry by default */
1787                         }
1788                         ret = os_snprintf(pos, end - pos, "home_sp=%s\n",
1789                                           cred->domain[i]);
1790                         if (os_snprintf_error(end - pos, ret))
1791                                 return pos - buf;
1792                         pos += ret;
1793
1794                 no_domain:
1795                         if (wpa_s->current_bss == NULL ||
1796                             wpa_s->current_bss->anqp == NULL)
1797                                 res = -1;
1798                         else
1799                                 res = interworking_home_sp_cred(
1800                                         wpa_s, cred,
1801                                         wpa_s->current_bss->anqp->domain_name);
1802                         if (res > 0)
1803                                 type = "home";
1804                         else if (res == 0)
1805                                 type = "roaming";
1806                         else
1807                                 type = "unknown";
1808
1809                         ret = os_snprintf(pos, end - pos, "sp_type=%s\n", type);
1810                         if (os_snprintf_error(end - pos, ret))
1811                                 return pos - buf;
1812                         pos += ret;
1813
1814                         break;
1815                 }
1816         }
1817 #endif /* CONFIG_HS20 */
1818
1819         if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) ||
1820             wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
1821                 res = eapol_sm_get_status(wpa_s->eapol, pos, end - pos,
1822                                           verbose);
1823                 if (res >= 0)
1824                         pos += res;
1825         }
1826
1827         res = rsn_preauth_get_status(wpa_s->wpa, pos, end - pos, verbose);
1828         if (res >= 0)
1829                 pos += res;
1830
1831 #ifdef CONFIG_WPS
1832         {
1833                 char uuid_str[100];
1834                 uuid_bin2str(wpa_s->wps->uuid, uuid_str, sizeof(uuid_str));
1835                 ret = os_snprintf(pos, end - pos, "uuid=%s\n", uuid_str);
1836                 if (os_snprintf_error(end - pos, ret))
1837                         return pos - buf;
1838                 pos += ret;
1839         }
1840 #endif /* CONFIG_WPS */
1841
1842 #ifdef ANDROID
1843         /*
1844          * Allow using the STATUS command with default behavior, say for debug,
1845          * i.e., don't generate a "fake" CONNECTION and SUPPLICANT_STATE_CHANGE
1846          * events with STATUS-NO_EVENTS.
1847          */
1848         if (os_strcmp(params, "-NO_EVENTS")) {
1849                 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_STATE_CHANGE
1850                              "id=%d state=%d BSSID=" MACSTR " SSID=%s",
1851                              wpa_s->current_ssid ? wpa_s->current_ssid->id : -1,
1852                              wpa_s->wpa_state,
1853                              MAC2STR(wpa_s->bssid),
1854                              wpa_s->current_ssid && wpa_s->current_ssid->ssid ?
1855                              wpa_ssid_txt(wpa_s->current_ssid->ssid,
1856                                           wpa_s->current_ssid->ssid_len) : "");
1857                 if (wpa_s->wpa_state == WPA_COMPLETED) {
1858                         struct wpa_ssid *ssid = wpa_s->current_ssid;
1859                         wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_CONNECTED
1860                                      "- connection to " MACSTR
1861                                      " completed %s [id=%d id_str=%s]",
1862                                      MAC2STR(wpa_s->bssid), "(auth)",
1863                                      ssid ? ssid->id : -1,
1864                                      ssid && ssid->id_str ? ssid->id_str : "");
1865                 }
1866         }
1867 #endif /* ANDROID */
1868
1869         return pos - buf;
1870 }
1871
1872
1873 static int wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant *wpa_s,
1874                                            char *cmd)
1875 {
1876         char *pos;
1877         int id;
1878         struct wpa_ssid *ssid;
1879         u8 bssid[ETH_ALEN];
1880
1881         /* cmd: "<network id> <BSSID>" */
1882         pos = os_strchr(cmd, ' ');
1883         if (pos == NULL)
1884                 return -1;
1885         *pos++ = '\0';
1886         id = atoi(cmd);
1887         wpa_printf(MSG_DEBUG, "CTRL_IFACE: id=%d bssid='%s'", id, pos);
1888         if (hwaddr_aton(pos, bssid)) {
1889                 wpa_printf(MSG_DEBUG ,"CTRL_IFACE: invalid BSSID '%s'", pos);
1890                 return -1;
1891         }
1892
1893         ssid = wpa_config_get_network(wpa_s->conf, id);
1894         if (ssid == NULL) {
1895                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1896                            "to update", id);
1897                 return -1;
1898         }
1899
1900         os_memcpy(ssid->bssid, bssid, ETH_ALEN);
1901         ssid->bssid_set = !is_zero_ether_addr(bssid);
1902
1903         return 0;
1904 }
1905
1906
1907 static int wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant *wpa_s,
1908                                                char *cmd, char *buf,
1909                                                size_t buflen)
1910 {
1911         u8 bssid[ETH_ALEN];
1912         struct wpa_blacklist *e;
1913         char *pos, *end;
1914         int ret;
1915
1916         /* cmd: "BLACKLIST [<BSSID>]" */
1917         if (*cmd == '\0') {
1918                 pos = buf;
1919                 end = buf + buflen;
1920                 e = wpa_s->blacklist;
1921                 while (e) {
1922                         ret = os_snprintf(pos, end - pos, MACSTR "\n",
1923                                           MAC2STR(e->bssid));
1924                         if (os_snprintf_error(end - pos, ret))
1925                                 return pos - buf;
1926                         pos += ret;
1927                         e = e->next;
1928                 }
1929                 return pos - buf;
1930         }
1931
1932         cmd++;
1933         if (os_strncmp(cmd, "clear", 5) == 0) {
1934                 wpa_blacklist_clear(wpa_s);
1935                 os_memcpy(buf, "OK\n", 3);
1936                 return 3;
1937         }
1938
1939         wpa_printf(MSG_DEBUG, "CTRL_IFACE: BLACKLIST bssid='%s'", cmd);
1940         if (hwaddr_aton(cmd, bssid)) {
1941                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: invalid BSSID '%s'", cmd);
1942                 return -1;
1943         }
1944
1945         /*
1946          * Add the BSSID twice, so its count will be 2, causing it to be
1947          * skipped when processing scan results.
1948          */
1949         ret = wpa_blacklist_add(wpa_s, bssid);
1950         if (ret < 0)
1951                 return -1;
1952         ret = wpa_blacklist_add(wpa_s, bssid);
1953         if (ret < 0)
1954                 return -1;
1955         os_memcpy(buf, "OK\n", 3);
1956         return 3;
1957 }
1958
1959
1960 static const char * debug_level_str(int level)
1961 {
1962         switch (level) {
1963         case MSG_EXCESSIVE:
1964                 return "EXCESSIVE";
1965         case MSG_MSGDUMP:
1966                 return "MSGDUMP";
1967         case MSG_DEBUG:
1968                 return "DEBUG";
1969         case MSG_INFO:
1970                 return "INFO";
1971         case MSG_WARNING:
1972                 return "WARNING";
1973         case MSG_ERROR:
1974                 return "ERROR";
1975         default:
1976                 return "?";
1977         }
1978 }
1979
1980
1981 static int str_to_debug_level(const char *s)
1982 {
1983         if (os_strcasecmp(s, "EXCESSIVE") == 0)
1984                 return MSG_EXCESSIVE;
1985         if (os_strcasecmp(s, "MSGDUMP") == 0)
1986                 return MSG_MSGDUMP;
1987         if (os_strcasecmp(s, "DEBUG") == 0)
1988                 return MSG_DEBUG;
1989         if (os_strcasecmp(s, "INFO") == 0)
1990                 return MSG_INFO;
1991         if (os_strcasecmp(s, "WARNING") == 0)
1992                 return MSG_WARNING;
1993         if (os_strcasecmp(s, "ERROR") == 0)
1994                 return MSG_ERROR;
1995         return -1;
1996 }
1997
1998
1999 static int wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant *wpa_s,
2000                                                char *cmd, char *buf,
2001                                                size_t buflen)
2002 {
2003         char *pos, *end, *stamp;
2004         int ret;
2005
2006         /* cmd: "LOG_LEVEL [<level>]" */
2007         if (*cmd == '\0') {
2008                 pos = buf;
2009                 end = buf + buflen;
2010                 ret = os_snprintf(pos, end - pos, "Current level: %s\n"
2011                                   "Timestamp: %d\n",
2012                                   debug_level_str(wpa_debug_level),
2013                                   wpa_debug_timestamp);
2014                 if (os_snprintf_error(end - pos, ret))
2015                         ret = 0;
2016
2017                 return ret;
2018         }
2019
2020         while (*cmd == ' ')
2021                 cmd++;
2022
2023         stamp = os_strchr(cmd, ' ');
2024         if (stamp) {
2025                 *stamp++ = '\0';
2026                 while (*stamp == ' ') {
2027                         stamp++;
2028                 }
2029         }
2030
2031         if (cmd && os_strlen(cmd)) {
2032                 int level = str_to_debug_level(cmd);
2033                 if (level < 0)
2034                         return -1;
2035                 wpa_debug_level = level;
2036         }
2037
2038         if (stamp && os_strlen(stamp))
2039                 wpa_debug_timestamp = atoi(stamp);
2040
2041         os_memcpy(buf, "OK\n", 3);
2042         return 3;
2043 }
2044
2045
2046 static int wpa_supplicant_ctrl_iface_list_networks(
2047         struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
2048 {
2049         char *pos, *end, *prev;
2050         struct wpa_ssid *ssid;
2051         int ret;
2052
2053         pos = buf;
2054         end = buf + buflen;
2055         ret = os_snprintf(pos, end - pos,
2056                           "network id / ssid / bssid / flags\n");
2057         if (os_snprintf_error(end - pos, ret))
2058                 return pos - buf;
2059         pos += ret;
2060
2061         ssid = wpa_s->conf->ssid;
2062
2063         /* skip over ssids until we find next one */
2064         if (cmd != NULL && os_strncmp(cmd, "LAST_ID=", 8) == 0) {
2065                 int last_id = atoi(cmd + 8);
2066                 if (last_id != -1) {
2067                         while (ssid != NULL && ssid->id <= last_id) {
2068                                 ssid = ssid->next;
2069                         }
2070                 }
2071         }
2072
2073         while (ssid) {
2074                 prev = pos;
2075                 ret = os_snprintf(pos, end - pos, "%d\t%s",
2076                                   ssid->id,
2077                                   wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
2078                 if (os_snprintf_error(end - pos, ret))
2079                         return prev - buf;
2080                 pos += ret;
2081                 if (ssid->bssid_set) {
2082                         ret = os_snprintf(pos, end - pos, "\t" MACSTR,
2083                                           MAC2STR(ssid->bssid));
2084                 } else {
2085                         ret = os_snprintf(pos, end - pos, "\tany");
2086                 }
2087                 if (os_snprintf_error(end - pos, ret))
2088                         return prev - buf;
2089                 pos += ret;
2090                 ret = os_snprintf(pos, end - pos, "\t%s%s%s%s",
2091                                   ssid == wpa_s->current_ssid ?
2092                                   "[CURRENT]" : "",
2093                                   ssid->disabled ? "[DISABLED]" : "",
2094                                   ssid->disabled_until.sec ?
2095                                   "[TEMP-DISABLED]" : "",
2096                                   ssid->disabled == 2 ? "[P2P-PERSISTENT]" :
2097                                   "");
2098                 if (os_snprintf_error(end - pos, ret))
2099                         return prev - buf;
2100                 pos += ret;
2101                 ret = os_snprintf(pos, end - pos, "\n");
2102                 if (os_snprintf_error(end - pos, ret))
2103                         return prev - buf;
2104                 pos += ret;
2105
2106                 ssid = ssid->next;
2107         }
2108
2109         return pos - buf;
2110 }
2111
2112
2113 static char * wpa_supplicant_cipher_txt(char *pos, char *end, int cipher)
2114 {
2115         int ret;
2116         ret = os_snprintf(pos, end - pos, "-");
2117         if (os_snprintf_error(end - pos, ret))
2118                 return pos;
2119         pos += ret;
2120         ret = wpa_write_ciphers(pos, end, cipher, "+");
2121         if (ret < 0)
2122                 return pos;
2123         pos += ret;
2124         return pos;
2125 }
2126
2127
2128 static char * wpa_supplicant_ie_txt(char *pos, char *end, const char *proto,
2129                                     const u8 *ie, size_t ie_len)
2130 {
2131         struct wpa_ie_data data;
2132         char *start;
2133         int ret;
2134
2135         ret = os_snprintf(pos, end - pos, "[%s-", proto);
2136         if (os_snprintf_error(end - pos, ret))
2137                 return pos;
2138         pos += ret;
2139
2140         if (wpa_parse_wpa_ie(ie, ie_len, &data) < 0) {
2141                 ret = os_snprintf(pos, end - pos, "?]");
2142                 if (os_snprintf_error(end - pos, ret))
2143                         return pos;
2144                 pos += ret;
2145                 return pos;
2146         }
2147
2148         start = pos;
2149         if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
2150                 ret = os_snprintf(pos, end - pos, "%sEAP",
2151                                   pos == start ? "" : "+");
2152                 if (os_snprintf_error(end - pos, ret))
2153                         return pos;
2154                 pos += ret;
2155         }
2156         if (data.key_mgmt & WPA_KEY_MGMT_PSK) {
2157                 ret = os_snprintf(pos, end - pos, "%sPSK",
2158                                   pos == start ? "" : "+");
2159                 if (os_snprintf_error(end - pos, ret))
2160                         return pos;
2161                 pos += ret;
2162         }
2163         if (data.key_mgmt & WPA_KEY_MGMT_WPA_NONE) {
2164                 ret = os_snprintf(pos, end - pos, "%sNone",
2165                                   pos == start ? "" : "+");
2166                 if (os_snprintf_error(end - pos, ret))
2167                         return pos;
2168                 pos += ret;
2169         }
2170         if (data.key_mgmt & WPA_KEY_MGMT_SAE) {
2171                 ret = os_snprintf(pos, end - pos, "%sSAE",
2172                                   pos == start ? "" : "+");
2173                 if (os_snprintf_error(end - pos, ret))
2174                         return pos;
2175                 pos += ret;
2176         }
2177 #ifdef CONFIG_IEEE80211R
2178         if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
2179                 ret = os_snprintf(pos, end - pos, "%sFT/EAP",
2180                                   pos == start ? "" : "+");
2181                 if (os_snprintf_error(end - pos, ret))
2182                         return pos;
2183                 pos += ret;
2184         }
2185         if (data.key_mgmt & WPA_KEY_MGMT_FT_PSK) {
2186                 ret = os_snprintf(pos, end - pos, "%sFT/PSK",
2187                                   pos == start ? "" : "+");
2188                 if (os_snprintf_error(end - pos, ret))
2189                         return pos;
2190                 pos += ret;
2191         }
2192         if (data.key_mgmt & WPA_KEY_MGMT_FT_SAE) {
2193                 ret = os_snprintf(pos, end - pos, "%sFT/SAE",
2194                                   pos == start ? "" : "+");
2195                 if (os_snprintf_error(end - pos, ret))
2196                         return pos;
2197                 pos += ret;
2198         }
2199 #endif /* CONFIG_IEEE80211R */
2200 #ifdef CONFIG_IEEE80211W
2201         if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
2202                 ret = os_snprintf(pos, end - pos, "%sEAP-SHA256",
2203                                   pos == start ? "" : "+");
2204                 if (os_snprintf_error(end - pos, ret))
2205                         return pos;
2206                 pos += ret;
2207         }
2208         if (data.key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
2209                 ret = os_snprintf(pos, end - pos, "%sPSK-SHA256",
2210                                   pos == start ? "" : "+");
2211                 if (os_snprintf_error(end - pos, ret))
2212                         return pos;
2213                 pos += ret;
2214         }
2215 #endif /* CONFIG_IEEE80211W */
2216
2217         if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) {
2218                 ret = os_snprintf(pos, end - pos, "%sEAP-SUITE-B",
2219                                   pos == start ? "" : "+");
2220                 if (os_snprintf_error(end - pos, ret))
2221                         return pos;
2222                 pos += ret;
2223         }
2224
2225         pos = wpa_supplicant_cipher_txt(pos, end, data.pairwise_cipher);
2226
2227         if (data.capabilities & WPA_CAPABILITY_PREAUTH) {
2228                 ret = os_snprintf(pos, end - pos, "-preauth");
2229                 if (os_snprintf_error(end - pos, ret))
2230                         return pos;
2231                 pos += ret;
2232         }
2233
2234         ret = os_snprintf(pos, end - pos, "]");
2235         if (os_snprintf_error(end - pos, ret))
2236                 return pos;
2237         pos += ret;
2238
2239         return pos;
2240 }
2241
2242
2243 #ifdef CONFIG_WPS
2244 static char * wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant *wpa_s,
2245                                             char *pos, char *end,
2246                                             struct wpabuf *wps_ie)
2247 {
2248         int ret;
2249         const char *txt;
2250
2251         if (wps_ie == NULL)
2252                 return pos;
2253         if (wps_is_selected_pbc_registrar(wps_ie))
2254                 txt = "[WPS-PBC]";
2255         else if (wps_is_addr_authorized(wps_ie, wpa_s->own_addr, 0))
2256                 txt = "[WPS-AUTH]";
2257         else if (wps_is_selected_pin_registrar(wps_ie))
2258                 txt = "[WPS-PIN]";
2259         else
2260                 txt = "[WPS]";
2261
2262         ret = os_snprintf(pos, end - pos, "%s", txt);
2263         if (!os_snprintf_error(end - pos, ret))
2264                 pos += ret;
2265         wpabuf_free(wps_ie);
2266         return pos;
2267 }
2268 #endif /* CONFIG_WPS */
2269
2270
2271 static char * wpa_supplicant_wps_ie_txt(struct wpa_supplicant *wpa_s,
2272                                         char *pos, char *end,
2273                                         const struct wpa_bss *bss)
2274 {
2275 #ifdef CONFIG_WPS
2276         struct wpabuf *wps_ie;
2277         wps_ie = wpa_bss_get_vendor_ie_multi(bss, WPS_IE_VENDOR_TYPE);
2278         return wpa_supplicant_wps_ie_txt_buf(wpa_s, pos, end, wps_ie);
2279 #else /* CONFIG_WPS */
2280         return pos;
2281 #endif /* CONFIG_WPS */
2282 }
2283
2284
2285 /* Format one result on one text line into a buffer. */
2286 static int wpa_supplicant_ctrl_iface_scan_result(
2287         struct wpa_supplicant *wpa_s,
2288         const struct wpa_bss *bss, char *buf, size_t buflen)
2289 {
2290         char *pos, *end;
2291         int ret;
2292         const u8 *ie, *ie2, *p2p, *mesh;
2293
2294         mesh = wpa_bss_get_ie(bss, WLAN_EID_MESH_ID);
2295         p2p = wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE);
2296         if (!p2p)
2297                 p2p = wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE);
2298         if (p2p && bss->ssid_len == P2P_WILDCARD_SSID_LEN &&
2299             os_memcmp(bss->ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) ==
2300             0)
2301                 return 0; /* Do not show P2P listen discovery results here */
2302
2303         pos = buf;
2304         end = buf + buflen;
2305
2306         ret = os_snprintf(pos, end - pos, MACSTR "\t%d\t%d\t",
2307                           MAC2STR(bss->bssid), bss->freq, bss->level);
2308         if (os_snprintf_error(end - pos, ret))
2309                 return -1;
2310         pos += ret;
2311         ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
2312         if (ie)
2313                 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie, 2 + ie[1]);
2314         ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
2315         if (ie2) {
2316                 pos = wpa_supplicant_ie_txt(pos, end, mesh ? "RSN" : "WPA2",
2317                                             ie2, 2 + ie2[1]);
2318         }
2319         pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
2320         if (!ie && !ie2 && bss->caps & IEEE80211_CAP_PRIVACY) {
2321                 ret = os_snprintf(pos, end - pos, "[WEP]");
2322                 if (os_snprintf_error(end - pos, ret))
2323                         return -1;
2324                 pos += ret;
2325         }
2326         if (mesh) {
2327                 ret = os_snprintf(pos, end - pos, "[MESH]");
2328                 if (os_snprintf_error(end - pos, ret))
2329                         return -1;
2330                 pos += ret;
2331         }
2332         if (bss_is_dmg(bss)) {
2333                 const char *s;
2334                 ret = os_snprintf(pos, end - pos, "[DMG]");
2335                 if (os_snprintf_error(end - pos, ret))
2336                         return -1;
2337                 pos += ret;
2338                 switch (bss->caps & IEEE80211_CAP_DMG_MASK) {
2339                 case IEEE80211_CAP_DMG_IBSS:
2340                         s = "[IBSS]";
2341                         break;
2342                 case IEEE80211_CAP_DMG_AP:
2343                         s = "[ESS]";
2344                         break;
2345                 case IEEE80211_CAP_DMG_PBSS:
2346                         s = "[PBSS]";
2347                         break;
2348                 default:
2349                         s = "";
2350                         break;
2351                 }
2352                 ret = os_snprintf(pos, end - pos, "%s", s);
2353                 if (os_snprintf_error(end - pos, ret))
2354                         return -1;
2355                 pos += ret;
2356         } else {
2357                 if (bss->caps & IEEE80211_CAP_IBSS) {
2358                         ret = os_snprintf(pos, end - pos, "[IBSS]");
2359                         if (os_snprintf_error(end - pos, ret))
2360                                 return -1;
2361                         pos += ret;
2362                 }
2363                 if (bss->caps & IEEE80211_CAP_ESS) {
2364                         ret = os_snprintf(pos, end - pos, "[ESS]");
2365                         if (os_snprintf_error(end - pos, ret))
2366                                 return -1;
2367                         pos += ret;
2368                 }
2369         }
2370         if (p2p) {
2371                 ret = os_snprintf(pos, end - pos, "[P2P]");
2372                 if (os_snprintf_error(end - pos, ret))
2373                         return -1;
2374                 pos += ret;
2375         }
2376 #ifdef CONFIG_HS20
2377         if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE) && ie2) {
2378                 ret = os_snprintf(pos, end - pos, "[HS20]");
2379                 if (os_snprintf_error(end - pos, ret))
2380                         return -1;
2381                 pos += ret;
2382         }
2383 #endif /* CONFIG_HS20 */
2384
2385         ret = os_snprintf(pos, end - pos, "\t%s",
2386                           wpa_ssid_txt(bss->ssid, bss->ssid_len));
2387         if (os_snprintf_error(end - pos, ret))
2388                 return -1;
2389         pos += ret;
2390
2391         ret = os_snprintf(pos, end - pos, "\n");
2392         if (os_snprintf_error(end - pos, ret))
2393                 return -1;
2394         pos += ret;
2395
2396         return pos - buf;
2397 }
2398
2399
2400 static int wpa_supplicant_ctrl_iface_scan_results(
2401         struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2402 {
2403         char *pos, *end;
2404         struct wpa_bss *bss;
2405         int ret;
2406
2407         pos = buf;
2408         end = buf + buflen;
2409         ret = os_snprintf(pos, end - pos, "bssid / frequency / signal level / "
2410                           "flags / ssid\n");
2411         if (os_snprintf_error(end - pos, ret))
2412                 return pos - buf;
2413         pos += ret;
2414
2415         dl_list_for_each(bss, &wpa_s->bss_id, struct wpa_bss, list_id) {
2416                 ret = wpa_supplicant_ctrl_iface_scan_result(wpa_s, bss, pos,
2417                                                             end - pos);
2418                 if (ret < 0 || ret >= end - pos)
2419                         return pos - buf;
2420                 pos += ret;
2421         }
2422
2423         return pos - buf;
2424 }
2425
2426
2427 #ifdef CONFIG_MESH
2428
2429 static int wpa_supplicant_ctrl_iface_mesh_group_add(
2430         struct wpa_supplicant *wpa_s, char *cmd)
2431 {
2432         int id;
2433         struct wpa_ssid *ssid;
2434
2435         id = atoi(cmd);
2436         wpa_printf(MSG_DEBUG, "CTRL_IFACE: MESH_GROUP_ADD id=%d", id);
2437
2438         ssid = wpa_config_get_network(wpa_s->conf, id);
2439         if (ssid == NULL) {
2440                 wpa_printf(MSG_DEBUG,
2441                            "CTRL_IFACE: Could not find network id=%d", id);
2442                 return -1;
2443         }
2444         if (ssid->mode != WPAS_MODE_MESH) {
2445                 wpa_printf(MSG_DEBUG,
2446                            "CTRL_IFACE: Cannot use MESH_GROUP_ADD on a non mesh network");
2447                 return -1;
2448         }
2449         if (ssid->key_mgmt != WPA_KEY_MGMT_NONE &&
2450             ssid->key_mgmt != WPA_KEY_MGMT_SAE) {
2451                 wpa_printf(MSG_ERROR,
2452                            "CTRL_IFACE: key_mgmt for mesh network should be open or SAE");
2453                 return -1;
2454         }
2455
2456         /*
2457          * TODO: If necessary write our own group_add function,
2458          * for now we can reuse select_network
2459          */
2460         wpa_supplicant_select_network(wpa_s, ssid);
2461
2462         return 0;
2463 }
2464
2465
2466 static int wpa_supplicant_ctrl_iface_mesh_group_remove(
2467         struct wpa_supplicant *wpa_s, char *cmd)
2468 {
2469         /*
2470          * TODO: Support a multiple mesh and other iface type combinations
2471          */
2472         if (os_strcmp(cmd, wpa_s->ifname) != 0) {
2473                 wpa_printf(MSG_DEBUG,
2474                            "CTRL_IFACE: MESH_GROUP_REMOVE unknown interface name: %s",
2475                            cmd);
2476                 return -1;
2477         }
2478
2479         wpa_printf(MSG_DEBUG, "CTRL_IFACE: MESH_GROUP_REMOVE ifname=%s", cmd);
2480
2481         wpa_s->reassociate = 0;
2482         wpa_s->disconnected = 1;
2483         wpa_supplicant_cancel_sched_scan(wpa_s);
2484         wpa_supplicant_cancel_scan(wpa_s);
2485
2486         /*
2487          * TODO: If necessary write our own group_remove function,
2488          * for now we can reuse deauthenticate
2489          */
2490         wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2491
2492         return 0;
2493 }
2494
2495 #endif /* CONFIG_MESH */
2496
2497
2498 static int wpa_supplicant_ctrl_iface_select_network(
2499         struct wpa_supplicant *wpa_s, char *cmd)
2500 {
2501         int id;
2502         struct wpa_ssid *ssid;
2503         char *pos;
2504
2505         /* cmd: "<network id>" or "any" */
2506         if (os_strncmp(cmd, "any", 3) == 0) {
2507                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK any");
2508                 ssid = NULL;
2509         } else {
2510                 id = atoi(cmd);
2511                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK id=%d", id);
2512
2513                 ssid = wpa_config_get_network(wpa_s->conf, id);
2514                 if (ssid == NULL) {
2515                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2516                                    "network id=%d", id);
2517                         return -1;
2518                 }
2519                 if (ssid->disabled == 2) {
2520                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2521                                    "SELECT_NETWORK with persistent P2P group");
2522                         return -1;
2523                 }
2524         }
2525
2526         pos = os_strstr(cmd, " freq=");
2527         if (pos) {
2528                 int *freqs = freq_range_to_channel_list(wpa_s, pos + 6);
2529                 if (freqs) {
2530                         wpa_s->scan_req = MANUAL_SCAN_REQ;
2531                         os_free(wpa_s->manual_scan_freqs);
2532                         wpa_s->manual_scan_freqs = freqs;
2533                 }
2534         }
2535
2536         wpa_supplicant_select_network(wpa_s, ssid);
2537
2538         return 0;
2539 }
2540
2541
2542 static int wpa_supplicant_ctrl_iface_enable_network(
2543         struct wpa_supplicant *wpa_s, char *cmd)
2544 {
2545         int id;
2546         struct wpa_ssid *ssid;
2547
2548         /* cmd: "<network id>" or "all" */
2549         if (os_strcmp(cmd, "all") == 0) {
2550                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK all");
2551                 ssid = NULL;
2552         } else {
2553                 id = atoi(cmd);
2554                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK id=%d", id);
2555
2556                 ssid = wpa_config_get_network(wpa_s->conf, id);
2557                 if (ssid == NULL) {
2558                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2559                                    "network id=%d", id);
2560                         return -1;
2561                 }
2562                 if (ssid->disabled == 2) {
2563                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2564                                    "ENABLE_NETWORK with persistent P2P group");
2565                         return -1;
2566                 }
2567
2568                 if (os_strstr(cmd, " no-connect")) {
2569                         ssid->disabled = 0;
2570                         return 0;
2571                 }
2572         }
2573         wpa_supplicant_enable_network(wpa_s, ssid);
2574
2575         return 0;
2576 }
2577
2578
2579 static int wpa_supplicant_ctrl_iface_disable_network(
2580         struct wpa_supplicant *wpa_s, char *cmd)
2581 {
2582         int id;
2583         struct wpa_ssid *ssid;
2584
2585         /* cmd: "<network id>" or "all" */
2586         if (os_strcmp(cmd, "all") == 0) {
2587                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK all");
2588                 ssid = NULL;
2589         } else {
2590                 id = atoi(cmd);
2591                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK id=%d", id);
2592
2593                 ssid = wpa_config_get_network(wpa_s->conf, id);
2594                 if (ssid == NULL) {
2595                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2596                                    "network id=%d", id);
2597                         return -1;
2598                 }
2599                 if (ssid->disabled == 2) {
2600                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2601                                    "DISABLE_NETWORK with persistent P2P "
2602                                    "group");
2603                         return -1;
2604                 }
2605         }
2606         wpa_supplicant_disable_network(wpa_s, ssid);
2607
2608         return 0;
2609 }
2610
2611
2612 static int wpa_supplicant_ctrl_iface_add_network(
2613         struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2614 {
2615         struct wpa_ssid *ssid;
2616         int ret;
2617
2618         wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_NETWORK");
2619
2620         ssid = wpa_config_add_network(wpa_s->conf);
2621         if (ssid == NULL)
2622                 return -1;
2623
2624         wpas_notify_network_added(wpa_s, ssid);
2625
2626         ssid->disabled = 1;
2627         wpa_config_set_network_defaults(ssid);
2628
2629         ret = os_snprintf(buf, buflen, "%d\n", ssid->id);
2630         if (os_snprintf_error(buflen, ret))
2631                 return -1;
2632         return ret;
2633 }
2634
2635
2636 static int wpa_supplicant_ctrl_iface_remove_network(
2637         struct wpa_supplicant *wpa_s, char *cmd)
2638 {
2639         int id;
2640         struct wpa_ssid *ssid;
2641         int was_disabled;
2642
2643         /* cmd: "<network id>" or "all" */
2644         if (os_strcmp(cmd, "all") == 0) {
2645                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK all");
2646                 if (wpa_s->sched_scanning)
2647                         wpa_supplicant_cancel_sched_scan(wpa_s);
2648
2649                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2650                 if (wpa_s->current_ssid) {
2651 #ifdef CONFIG_SME
2652                         wpa_s->sme.prev_bssid_set = 0;
2653 #endif /* CONFIG_SME */
2654                         wpa_sm_set_config(wpa_s->wpa, NULL);
2655                         eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2656                         wpa_supplicant_deauthenticate(
2657                                 wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2658                 }
2659                 ssid = wpa_s->conf->ssid;
2660                 while (ssid) {
2661                         struct wpa_ssid *remove_ssid = ssid;
2662                         id = ssid->id;
2663                         ssid = ssid->next;
2664                         if (wpa_s->last_ssid == remove_ssid)
2665                                 wpa_s->last_ssid = NULL;
2666                         wpas_notify_network_removed(wpa_s, remove_ssid);
2667                         wpa_config_remove_network(wpa_s->conf, id);
2668                 }
2669                 return 0;
2670         }
2671
2672         id = atoi(cmd);
2673         wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK id=%d", id);
2674
2675         ssid = wpa_config_get_network(wpa_s->conf, id);
2676         if (ssid)
2677                 wpas_notify_network_removed(wpa_s, ssid);
2678         if (ssid == NULL) {
2679                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2680                            "id=%d", id);
2681                 return -1;
2682         }
2683
2684         if (wpa_s->last_ssid == ssid)
2685                 wpa_s->last_ssid = NULL;
2686
2687         if (ssid == wpa_s->current_ssid || wpa_s->current_ssid == NULL) {
2688 #ifdef CONFIG_SME
2689                 wpa_s->sme.prev_bssid_set = 0;
2690 #endif /* CONFIG_SME */
2691                 /*
2692                  * Invalidate the EAP session cache if the current or
2693                  * previously used network is removed.
2694                  */
2695                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2696         }
2697
2698         if (ssid == wpa_s->current_ssid) {
2699                 wpa_sm_set_config(wpa_s->wpa, NULL);
2700                 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2701
2702                 wpa_supplicant_deauthenticate(wpa_s,
2703                                               WLAN_REASON_DEAUTH_LEAVING);
2704         }
2705
2706         was_disabled = ssid->disabled;
2707
2708         if (wpa_config_remove_network(wpa_s->conf, id) < 0) {
2709                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Not able to remove the "
2710                            "network id=%d", id);
2711                 return -1;
2712         }
2713
2714         if (!was_disabled && wpa_s->sched_scanning) {
2715                 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to remove "
2716                            "network from filters");
2717                 wpa_supplicant_cancel_sched_scan(wpa_s);
2718                 wpa_supplicant_req_scan(wpa_s, 0, 0);
2719         }
2720
2721         return 0;
2722 }
2723
2724
2725 static int wpa_supplicant_ctrl_iface_update_network(
2726         struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid,
2727         char *name, char *value)
2728 {
2729         if (wpa_config_set(ssid, name, value, 0) < 0) {
2730                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set network "
2731                            "variable '%s'", name);
2732                 return -1;
2733         }
2734
2735         if (os_strcmp(name, "bssid") != 0 &&
2736             os_strcmp(name, "priority") != 0)
2737                 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid);
2738
2739         if (wpa_s->current_ssid == ssid || wpa_s->current_ssid == NULL) {
2740                 /*
2741                  * Invalidate the EAP session cache if anything in the current
2742                  * or previously used configuration changes.
2743                  */
2744                 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2745         }
2746
2747         if ((os_strcmp(name, "psk") == 0 &&
2748              value[0] == '"' && ssid->ssid_len) ||
2749             (os_strcmp(name, "ssid") == 0 && ssid->passphrase))
2750                 wpa_config_update_psk(ssid);
2751         else if (os_strcmp(name, "priority") == 0)
2752                 wpa_config_update_prio_list(wpa_s->conf);
2753         else if (os_strcmp(name, "no_auto_peer") == 0)
2754                 ssid->no_auto_peer = atoi(value);
2755
2756         return 0;
2757 }
2758
2759
2760 static int wpa_supplicant_ctrl_iface_set_network(
2761         struct wpa_supplicant *wpa_s, char *cmd)
2762 {
2763         int id, ret, prev_bssid_set;
2764         struct wpa_ssid *ssid;
2765         char *name, *value;
2766         u8 prev_bssid[ETH_ALEN];
2767
2768         /* cmd: "<network id> <variable name> <value>" */
2769         name = os_strchr(cmd, ' ');
2770         if (name == NULL)
2771                 return -1;
2772         *name++ = '\0';
2773
2774         value = os_strchr(name, ' ');
2775         if (value == NULL)
2776                 return -1;
2777         *value++ = '\0';
2778
2779         id = atoi(cmd);
2780         wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_NETWORK id=%d name='%s'",
2781                    id, name);
2782         wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
2783                               (u8 *) value, os_strlen(value));
2784
2785         ssid = wpa_config_get_network(wpa_s->conf, id);
2786         if (ssid == NULL) {
2787                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2788                            "id=%d", id);
2789                 return -1;
2790         }
2791
2792         prev_bssid_set = ssid->bssid_set;
2793         os_memcpy(prev_bssid, ssid->bssid, ETH_ALEN);
2794         ret = wpa_supplicant_ctrl_iface_update_network(wpa_s, ssid, name,
2795                                                        value);
2796         if (ret == 0 &&
2797             (ssid->bssid_set != prev_bssid_set ||
2798              os_memcmp(ssid->bssid, prev_bssid, ETH_ALEN) != 0))
2799                 wpas_notify_network_bssid_set_changed(wpa_s, ssid);
2800         return ret;
2801 }
2802
2803
2804 static int wpa_supplicant_ctrl_iface_get_network(
2805         struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
2806 {
2807         int id;
2808         size_t res;
2809         struct wpa_ssid *ssid;
2810         char *name, *value;
2811
2812         /* cmd: "<network id> <variable name>" */
2813         name = os_strchr(cmd, ' ');
2814         if (name == NULL || buflen == 0)
2815                 return -1;
2816         *name++ = '\0';
2817
2818         id = atoi(cmd);
2819         wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_NETWORK id=%d name='%s'",
2820                    id, name);
2821
2822         ssid = wpa_config_get_network(wpa_s->conf, id);
2823         if (ssid == NULL) {
2824                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2825                            "id=%d", id);
2826                 return -1;
2827         }
2828
2829         value = wpa_config_get_no_key(ssid, name);
2830         if (value == NULL) {
2831                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
2832                            "variable '%s'", name);
2833                 return -1;
2834         }
2835
2836         res = os_strlcpy(buf, value, buflen);
2837         if (res >= buflen) {
2838                 os_free(value);
2839                 return -1;
2840         }
2841
2842         os_free(value);
2843
2844         return res;
2845 }
2846
2847
2848 static int wpa_supplicant_ctrl_iface_dup_network(
2849         struct wpa_supplicant *wpa_s, char *cmd)
2850 {
2851         struct wpa_ssid *ssid_s, *ssid_d;
2852         char *name, *id, *value;
2853         int id_s, id_d, ret;
2854
2855         /* cmd: "<src network id> <dst network id> <variable name>" */
2856         id = os_strchr(cmd, ' ');
2857         if (id == NULL)
2858                 return -1;
2859         *id++ = '\0';
2860
2861         name = os_strchr(id, ' ');
2862         if (name == NULL)
2863                 return -1;
2864         *name++ = '\0';
2865
2866         id_s = atoi(cmd);
2867         id_d = atoi(id);
2868         wpa_printf(MSG_DEBUG, "CTRL_IFACE: DUP_NETWORK id=%d -> %d name='%s'",
2869                    id_s, id_d, name);
2870
2871         ssid_s = wpa_config_get_network(wpa_s->conf, id_s);
2872         if (ssid_s == NULL) {
2873                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2874                            "network id=%d", id_s);
2875                 return -1;
2876         }
2877
2878         ssid_d = wpa_config_get_network(wpa_s->conf, id_d);
2879         if (ssid_d == NULL) {
2880                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2881                            "network id=%d", id_d);
2882                 return -1;
2883         }
2884
2885         value = wpa_config_get(ssid_s, name);
2886         if (value == NULL) {
2887                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
2888                            "variable '%s'", name);
2889                 return -1;
2890         }
2891
2892         ret = wpa_supplicant_ctrl_iface_update_network(wpa_s, ssid_d, name,
2893                                                        value);
2894
2895         os_free(value);
2896
2897         return ret;
2898 }
2899
2900
2901 static int wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant *wpa_s,
2902                                                 char *buf, size_t buflen)
2903 {
2904         char *pos, *end;
2905         struct wpa_cred *cred;
2906         int ret;
2907
2908         pos = buf;
2909         end = buf + buflen;
2910         ret = os_snprintf(pos, end - pos,
2911                           "cred id / realm / username / domain / imsi\n");
2912         if (os_snprintf_error(end - pos, ret))
2913                 return pos - buf;
2914         pos += ret;
2915
2916         cred = wpa_s->conf->cred;
2917         while (cred) {
2918                 ret = os_snprintf(pos, end - pos, "%d\t%s\t%s\t%s\t%s\n",
2919                                   cred->id, cred->realm ? cred->realm : "",
2920                                   cred->username ? cred->username : "",
2921                                   cred->domain ? cred->domain[0] : "",
2922                                   cred->imsi ? cred->imsi : "");
2923                 if (os_snprintf_error(end - pos, ret))
2924                         return pos - buf;
2925                 pos += ret;
2926
2927                 cred = cred->next;
2928         }
2929
2930         return pos - buf;
2931 }
2932
2933
2934 static int wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant *wpa_s,
2935                                               char *buf, size_t buflen)
2936 {
2937         struct wpa_cred *cred;
2938         int ret;
2939
2940         wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_CRED");
2941
2942         cred = wpa_config_add_cred(wpa_s->conf);
2943         if (cred == NULL)
2944                 return -1;
2945
2946         wpa_msg(wpa_s, MSG_INFO, CRED_ADDED "%d", cred->id);
2947
2948         ret = os_snprintf(buf, buflen, "%d\n", cred->id);
2949         if (os_snprintf_error(buflen, ret))
2950                 return -1;
2951         return ret;
2952 }
2953
2954
2955 static int wpas_ctrl_remove_cred(struct wpa_supplicant *wpa_s,
2956                                  struct wpa_cred *cred)
2957 {
2958         struct wpa_ssid *ssid;
2959         char str[20];
2960         int id;
2961
2962         if (cred == NULL) {
2963                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
2964                 return -1;
2965         }
2966
2967         id = cred->id;
2968         if (wpa_config_remove_cred(wpa_s->conf, id) < 0) {
2969                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
2970                 return -1;
2971         }
2972
2973         wpa_msg(wpa_s, MSG_INFO, CRED_REMOVED "%d", id);
2974
2975         /* Remove any network entry created based on the removed credential */
2976         ssid = wpa_s->conf->ssid;
2977         while (ssid) {
2978                 if (ssid->parent_cred == cred) {
2979                         wpa_printf(MSG_DEBUG, "Remove network id %d since it "
2980                                    "used the removed credential", ssid->id);
2981                         os_snprintf(str, sizeof(str), "%d", ssid->id);
2982                         ssid = ssid->next;
2983                         wpa_supplicant_ctrl_iface_remove_network(wpa_s, str);
2984                 } else
2985                         ssid = ssid->next;
2986         }
2987
2988         return 0;
2989 }
2990
2991
2992 static int wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant *wpa_s,
2993                                                  char *cmd)
2994 {
2995         int id;
2996         struct wpa_cred *cred, *prev;
2997
2998         /* cmd: "<cred id>", "all", "sp_fqdn=<FQDN>", or
2999          * "provisioning_sp=<FQDN> */
3000         if (os_strcmp(cmd, "all") == 0) {
3001                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED all");
3002                 cred = wpa_s->conf->cred;
3003                 while (cred) {
3004                         prev = cred;
3005                         cred = cred->next;
3006                         wpas_ctrl_remove_cred(wpa_s, prev);
3007                 }
3008                 return 0;
3009         }
3010
3011         if (os_strncmp(cmd, "sp_fqdn=", 8) == 0) {
3012                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED SP FQDN '%s'",
3013                            cmd + 8);
3014                 cred = wpa_s->conf->cred;
3015                 while (cred) {
3016                         prev = cred;
3017                         cred = cred->next;
3018                         if (prev->domain) {
3019                                 size_t i;
3020                                 for (i = 0; i < prev->num_domain; i++) {
3021                                         if (os_strcmp(prev->domain[i], cmd + 8)
3022                                             != 0)
3023                                                 continue;
3024                                         wpas_ctrl_remove_cred(wpa_s, prev);
3025                                         break;
3026                                 }
3027                         }
3028                 }
3029                 return 0;
3030         }
3031
3032         if (os_strncmp(cmd, "provisioning_sp=", 16) == 0) {
3033                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED provisioning SP FQDN '%s'",
3034                            cmd + 16);
3035                 cred = wpa_s->conf->cred;
3036                 while (cred) {
3037                         prev = cred;
3038                         cred = cred->next;
3039                         if (prev->provisioning_sp &&
3040                             os_strcmp(prev->provisioning_sp, cmd + 16) == 0)
3041                                 wpas_ctrl_remove_cred(wpa_s, prev);
3042                 }
3043                 return 0;
3044         }
3045
3046         id = atoi(cmd);
3047         wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED id=%d", id);
3048
3049         cred = wpa_config_get_cred(wpa_s->conf, id);
3050         return wpas_ctrl_remove_cred(wpa_s, cred);
3051 }
3052
3053
3054 static int wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant *wpa_s,
3055                                               char *cmd)
3056 {
3057         int id;
3058         struct wpa_cred *cred;
3059         char *name, *value;
3060
3061         /* cmd: "<cred id> <variable name> <value>" */
3062         name = os_strchr(cmd, ' ');
3063         if (name == NULL)
3064                 return -1;
3065         *name++ = '\0';
3066
3067         value = os_strchr(name, ' ');
3068         if (value == NULL)
3069                 return -1;
3070         *value++ = '\0';
3071
3072         id = atoi(cmd);
3073         wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_CRED id=%d name='%s'",
3074                    id, name);
3075         wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
3076                               (u8 *) value, os_strlen(value));
3077
3078         cred = wpa_config_get_cred(wpa_s->conf, id);
3079         if (cred == NULL) {
3080                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
3081                            id);
3082                 return -1;
3083         }
3084
3085         if (wpa_config_set_cred(cred, name, value, 0) < 0) {
3086                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set cred "
3087                            "variable '%s'", name);
3088                 return -1;
3089         }
3090
3091         wpa_msg(wpa_s, MSG_INFO, CRED_MODIFIED "%d %s", cred->id, name);
3092
3093         return 0;
3094 }
3095
3096
3097 static int wpa_supplicant_ctrl_iface_get_cred(struct wpa_supplicant *wpa_s,
3098                                               char *cmd, char *buf,
3099                                               size_t buflen)
3100 {
3101         int id;
3102         size_t res;
3103         struct wpa_cred *cred;
3104         char *name, *value;
3105
3106         /* cmd: "<cred id> <variable name>" */
3107         name = os_strchr(cmd, ' ');
3108         if (name == NULL)
3109                 return -1;
3110         *name++ = '\0';
3111
3112         id = atoi(cmd);
3113         wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CRED id=%d name='%s'",
3114                    id, name);
3115
3116         cred = wpa_config_get_cred(wpa_s->conf, id);
3117         if (cred == NULL) {
3118                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
3119                            id);
3120                 return -1;
3121         }
3122
3123         value = wpa_config_get_cred_no_key(cred, name);
3124         if (value == NULL) {
3125                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get cred variable '%s'",
3126                            name);
3127                 return -1;
3128         }
3129
3130         res = os_strlcpy(buf, value, buflen);
3131         if (res >= buflen) {
3132                 os_free(value);
3133                 return -1;
3134         }
3135
3136         os_free(value);
3137
3138         return res;
3139 }
3140
3141
3142 #ifndef CONFIG_NO_CONFIG_WRITE
3143 static int wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant *wpa_s)
3144 {
3145         int ret;
3146
3147         if (!wpa_s->conf->update_config) {
3148                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed "
3149                            "to update configuration (update_config=0)");
3150                 return -1;
3151         }
3152
3153         ret = wpa_config_write(wpa_s->confname, wpa_s->conf);
3154         if (ret) {
3155                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to "
3156                            "update configuration");
3157         } else {
3158                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration"
3159                            " updated");
3160         }
3161
3162         return ret;
3163 }
3164 #endif /* CONFIG_NO_CONFIG_WRITE */
3165
3166
3167 struct cipher_info {
3168         unsigned int capa;
3169         const char *name;
3170         int group_only;
3171 };
3172
3173 static const struct cipher_info ciphers[] = {
3174         { WPA_DRIVER_CAPA_ENC_CCMP_256, "CCMP-256", 0 },
3175         { WPA_DRIVER_CAPA_ENC_GCMP_256, "GCMP-256", 0 },
3176         { WPA_DRIVER_CAPA_ENC_CCMP, "CCMP", 0 },
3177         { WPA_DRIVER_CAPA_ENC_GCMP, "GCMP", 0 },
3178         { WPA_DRIVER_CAPA_ENC_TKIP, "TKIP", 0 },
3179         { WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE, "NONE", 0 },
3180         { WPA_DRIVER_CAPA_ENC_WEP104, "WEP104", 1 },
3181         { WPA_DRIVER_CAPA_ENC_WEP40, "WEP40", 1 }
3182 };
3183
3184
3185 static int ctrl_iface_get_capability_pairwise(int res, char *strict,
3186                                               struct wpa_driver_capa *capa,
3187                                               char *buf, size_t buflen)
3188 {
3189         int ret;
3190         char *pos, *end;
3191         size_t len;
3192         unsigned int i;
3193
3194         pos = buf;
3195         end = pos + buflen;
3196
3197         if (res < 0) {
3198                 if (strict)
3199                         return 0;
3200                 len = os_strlcpy(buf, "CCMP TKIP NONE", buflen);
3201                 if (len >= buflen)
3202                         return -1;
3203                 return len;
3204         }
3205
3206         for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
3207                 if (!ciphers[i].group_only && capa->enc & ciphers[i].capa) {
3208                         ret = os_snprintf(pos, end - pos, "%s%s",
3209                                           pos == buf ? "" : " ",
3210                                           ciphers[i].name);
3211                         if (os_snprintf_error(end - pos, ret))
3212                                 return pos - buf;
3213                         pos += ret;
3214                 }
3215         }
3216
3217         return pos - buf;
3218 }
3219
3220
3221 static int ctrl_iface_get_capability_group(int res, char *strict,
3222                                            struct wpa_driver_capa *capa,
3223                                            char *buf, size_t buflen)
3224 {
3225         int ret;
3226         char *pos, *end;
3227         size_t len;
3228         unsigned int i;
3229
3230         pos = buf;
3231         end = pos + buflen;
3232
3233         if (res < 0) {
3234                 if (strict)
3235                         return 0;
3236                 len = os_strlcpy(buf, "CCMP TKIP WEP104 WEP40", buflen);
3237                 if (len >= buflen)
3238                         return -1;
3239                 return len;
3240         }
3241
3242         for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
3243                 if (capa->enc & ciphers[i].capa) {
3244                         ret = os_snprintf(pos, end - pos, "%s%s",
3245                                           pos == buf ? "" : " ",
3246                                           ciphers[i].name);
3247                         if (os_snprintf_error(end - pos, ret))
3248                                 return pos - buf;
3249                         pos += ret;
3250                 }
3251         }
3252
3253         return pos - buf;
3254 }
3255
3256
3257 static int ctrl_iface_get_capability_key_mgmt(int res, char *strict,
3258                                               struct wpa_driver_capa *capa,
3259                                               char *buf, size_t buflen)
3260 {
3261         int ret;
3262         char *pos, *end;
3263         size_t len;
3264
3265         pos = buf;
3266         end = pos + buflen;
3267
3268         if (res < 0) {
3269                 if (strict)
3270                         return 0;
3271                 len = os_strlcpy(buf, "WPA-PSK WPA-EAP IEEE8021X WPA-NONE "
3272                                  "NONE", buflen);
3273                 if (len >= buflen)
3274                         return -1;
3275                 return len;
3276         }
3277
3278         ret = os_snprintf(pos, end - pos, "NONE IEEE8021X");
3279         if (os_snprintf_error(end - pos, ret))
3280                 return pos - buf;
3281         pos += ret;
3282
3283         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
3284                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2)) {
3285                 ret = os_snprintf(pos, end - pos, " WPA-EAP");
3286                 if (os_snprintf_error(end - pos, ret))
3287                         return pos - buf;
3288                 pos += ret;
3289         }
3290
3291         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
3292                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
3293                 ret = os_snprintf(pos, end - pos, " WPA-PSK");
3294                 if (os_snprintf_error(end - pos, ret))
3295                         return pos - buf;
3296                 pos += ret;
3297         }
3298
3299         if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE) {
3300                 ret = os_snprintf(pos, end - pos, " WPA-NONE");
3301                 if (os_snprintf_error(end - pos, ret))
3302                         return pos - buf;
3303                 pos += ret;
3304         }
3305
3306         return pos - buf;
3307 }
3308
3309
3310 static int ctrl_iface_get_capability_proto(int res, char *strict,
3311                                            struct wpa_driver_capa *capa,
3312                                            char *buf, size_t buflen)
3313 {
3314         int ret;
3315         char *pos, *end;
3316         size_t len;
3317
3318         pos = buf;
3319         end = pos + buflen;
3320
3321         if (res < 0) {
3322                 if (strict)
3323                         return 0;
3324                 len = os_strlcpy(buf, "RSN WPA", buflen);
3325                 if (len >= buflen)
3326                         return -1;
3327                 return len;
3328         }
3329
3330         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
3331                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
3332                 ret = os_snprintf(pos, end - pos, "%sRSN",
3333                                   pos == buf ? "" : " ");
3334                 if (os_snprintf_error(end - pos, ret))
3335                         return pos - buf;
3336                 pos += ret;
3337         }
3338
3339         if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
3340                               WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK)) {
3341                 ret = os_snprintf(pos, end - pos, "%sWPA",
3342                                   pos == buf ? "" : " ");
3343                 if (os_snprintf_error(end - pos, ret))
3344                         return pos - buf;
3345                 pos += ret;
3346         }
3347
3348         return pos - buf;
3349 }
3350
3351
3352 static int ctrl_iface_get_capability_auth_alg(int res, char *strict,
3353                                               struct wpa_driver_capa *capa,
3354                                               char *buf, size_t buflen)
3355 {
3356         int ret;
3357         char *pos, *end;
3358         size_t len;
3359
3360         pos = buf;
3361         end = pos + buflen;
3362
3363         if (res < 0) {
3364                 if (strict)
3365                         return 0;
3366                 len = os_strlcpy(buf, "OPEN SHARED LEAP", buflen);
3367                 if (len >= buflen)
3368                         return -1;
3369                 return len;
3370         }
3371
3372         if (capa->auth & (WPA_DRIVER_AUTH_OPEN)) {
3373                 ret = os_snprintf(pos, end - pos, "%sOPEN",
3374                                   pos == buf ? "" : " ");
3375                 if (os_snprintf_error(end - pos, ret))
3376                         return pos - buf;
3377                 pos += ret;
3378         }
3379
3380         if (capa->auth & (WPA_DRIVER_AUTH_SHARED)) {
3381                 ret = os_snprintf(pos, end - pos, "%sSHARED",
3382                                   pos == buf ? "" : " ");
3383                 if (os_snprintf_error(end - pos, ret))
3384                         return pos - buf;
3385                 pos += ret;
3386         }
3387
3388         if (capa->auth & (WPA_DRIVER_AUTH_LEAP)) {
3389                 ret = os_snprintf(pos, end - pos, "%sLEAP",
3390                                   pos == buf ? "" : " ");
3391                 if (os_snprintf_error(end - pos, ret))
3392                         return pos - buf;
3393                 pos += ret;
3394         }
3395
3396         return pos - buf;
3397 }
3398
3399
3400 static int ctrl_iface_get_capability_modes(int res, char *strict,
3401                                            struct wpa_driver_capa *capa,
3402                                            char *buf, size_t buflen)
3403 {
3404         int ret;
3405         char *pos, *end;
3406         size_t len;
3407
3408         pos = buf;
3409         end = pos + buflen;
3410
3411         if (res < 0) {
3412                 if (strict)
3413                         return 0;
3414                 len = os_strlcpy(buf, "IBSS AP", buflen);
3415                 if (len >= buflen)
3416                         return -1;
3417                 return len;
3418         }
3419
3420         if (capa->flags & WPA_DRIVER_FLAGS_IBSS) {
3421                 ret = os_snprintf(pos, end - pos, "%sIBSS",
3422                                   pos == buf ? "" : " ");
3423                 if (os_snprintf_error(end - pos, ret))
3424                         return pos - buf;
3425                 pos += ret;
3426         }
3427
3428         if (capa->flags & WPA_DRIVER_FLAGS_AP) {
3429                 ret = os_snprintf(pos, end - pos, "%sAP",
3430                                   pos == buf ? "" : " ");
3431                 if (os_snprintf_error(end - pos, ret))
3432                         return pos - buf;
3433                 pos += ret;
3434         }
3435
3436         return pos - buf;
3437 }
3438
3439
3440 static int ctrl_iface_get_capability_channels(struct wpa_supplicant *wpa_s,
3441                                               char *buf, size_t buflen)
3442 {
3443         struct hostapd_channel_data *chnl;
3444         int ret, i, j;
3445         char *pos, *end, *hmode;
3446
3447         pos = buf;
3448         end = pos + buflen;
3449
3450         for (j = 0; j < wpa_s->hw.num_modes; j++) {
3451                 switch (wpa_s->hw.modes[j].mode) {
3452                 case HOSTAPD_MODE_IEEE80211B:
3453                         hmode = "B";
3454                         break;
3455                 case HOSTAPD_MODE_IEEE80211G:
3456                         hmode = "G";
3457                         break;
3458                 case HOSTAPD_MODE_IEEE80211A:
3459                         hmode = "A";
3460                         break;
3461                 case HOSTAPD_MODE_IEEE80211AD:
3462                         hmode = "AD";
3463                         break;
3464                 default:
3465                         continue;
3466                 }
3467                 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:", hmode);
3468                 if (os_snprintf_error(end - pos, ret))
3469                         return pos - buf;
3470                 pos += ret;
3471                 chnl = wpa_s->hw.modes[j].channels;
3472                 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3473                         if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3474                                 continue;
3475                         ret = os_snprintf(pos, end - pos, " %d", chnl[i].chan);
3476                         if (os_snprintf_error(end - pos, ret))
3477                                 return pos - buf;
3478                         pos += ret;
3479                 }
3480                 ret = os_snprintf(pos, end - pos, "\n");
3481                 if (os_snprintf_error(end - pos, ret))
3482                         return pos - buf;
3483                 pos += ret;
3484         }
3485
3486         return pos - buf;
3487 }
3488
3489
3490 static int ctrl_iface_get_capability_freq(struct wpa_supplicant *wpa_s,
3491                                           char *buf, size_t buflen)
3492 {
3493         struct hostapd_channel_data *chnl;
3494         int ret, i, j;
3495         char *pos, *end, *hmode;
3496
3497         pos = buf;
3498         end = pos + buflen;
3499
3500         for (j = 0; j < wpa_s->hw.num_modes; j++) {
3501                 switch (wpa_s->hw.modes[j].mode) {
3502                 case HOSTAPD_MODE_IEEE80211B:
3503                         hmode = "B";
3504                         break;
3505                 case HOSTAPD_MODE_IEEE80211G:
3506                         hmode = "G";
3507                         break;
3508                 case HOSTAPD_MODE_IEEE80211A:
3509                         hmode = "A";
3510                         break;
3511                 case HOSTAPD_MODE_IEEE80211AD:
3512                         hmode = "AD";
3513                         break;
3514                 default:
3515                         continue;
3516                 }
3517                 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:\n",
3518                                   hmode);
3519                 if (os_snprintf_error(end - pos, ret))
3520                         return pos - buf;
3521                 pos += ret;
3522                 chnl = wpa_s->hw.modes[j].channels;
3523                 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3524                         if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3525                                 continue;
3526                         ret = os_snprintf(pos, end - pos, " %d = %d MHz%s%s\n",
3527                                           chnl[i].chan, chnl[i].freq,
3528                                           chnl[i].flag & HOSTAPD_CHAN_NO_IR ?
3529                                           " (NO_IR)" : "",
3530                                           chnl[i].flag & HOSTAPD_CHAN_RADAR ?
3531                                           " (DFS)" : "");
3532
3533                         if (os_snprintf_error(end - pos, ret))
3534                                 return pos - buf;
3535                         pos += ret;
3536                 }
3537                 ret = os_snprintf(pos, end - pos, "\n");
3538                 if (os_snprintf_error(end - pos, ret))
3539                         return pos - buf;
3540                 pos += ret;
3541         }
3542
3543         return pos - buf;
3544 }
3545
3546
3547 static int wpa_supplicant_ctrl_iface_get_capability(
3548         struct wpa_supplicant *wpa_s, const char *_field, char *buf,
3549         size_t buflen)
3550 {
3551         struct wpa_driver_capa capa;
3552         int res;
3553         char *strict;
3554         char field[30];
3555         size_t len;
3556
3557         /* Determine whether or not strict checking was requested */
3558         len = os_strlcpy(field, _field, sizeof(field));
3559         if (len >= sizeof(field))
3560                 return -1;
3561         strict = os_strchr(field, ' ');
3562         if (strict != NULL) {
3563                 *strict++ = '\0';
3564                 if (os_strcmp(strict, "strict") != 0)
3565                         return -1;
3566         }
3567
3568         wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CAPABILITY '%s' %s",
3569                 field, strict ? strict : "");
3570
3571         if (os_strcmp(field, "eap") == 0) {
3572                 return eap_get_names(buf, buflen);
3573         }
3574
3575         res = wpa_drv_get_capa(wpa_s, &capa);
3576
3577         if (os_strcmp(field, "pairwise") == 0)
3578                 return ctrl_iface_get_capability_pairwise(res, strict, &capa,
3579                                                           buf, buflen);
3580
3581         if (os_strcmp(field, "group") == 0)
3582                 return ctrl_iface_get_capability_group(res, strict, &capa,
3583                                                        buf, buflen);
3584
3585         if (os_strcmp(field, "key_mgmt") == 0)
3586                 return ctrl_iface_get_capability_key_mgmt(res, strict, &capa,
3587                                                           buf, buflen);
3588
3589         if (os_strcmp(field, "proto") == 0)
3590                 return ctrl_iface_get_capability_proto(res, strict, &capa,
3591                                                        buf, buflen);
3592
3593         if (os_strcmp(field, "auth_alg") == 0)
3594                 return ctrl_iface_get_capability_auth_alg(res, strict, &capa,
3595                                                           buf, buflen);
3596
3597         if (os_strcmp(field, "modes") == 0)
3598                 return ctrl_iface_get_capability_modes(res, strict, &capa,
3599                                                        buf, buflen);
3600
3601         if (os_strcmp(field, "channels") == 0)
3602                 return ctrl_iface_get_capability_channels(wpa_s, buf, buflen);
3603
3604         if (os_strcmp(field, "freq") == 0)
3605                 return ctrl_iface_get_capability_freq(wpa_s, buf, buflen);
3606
3607 #ifdef CONFIG_TDLS
3608         if (os_strcmp(field, "tdls") == 0)
3609                 return ctrl_iface_get_capability_tdls(wpa_s, buf, buflen);
3610 #endif /* CONFIG_TDLS */
3611
3612 #ifdef CONFIG_ERP
3613         if (os_strcmp(field, "erp") == 0) {
3614                 res = os_snprintf(buf, buflen, "ERP");
3615                 if (os_snprintf_error(buflen, res))
3616                         return -1;
3617                 return res;
3618         }
3619 #endif /* CONFIG_EPR */
3620
3621         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown GET_CAPABILITY field '%s'",
3622                    field);
3623
3624         return -1;
3625 }
3626
3627
3628 #ifdef CONFIG_INTERWORKING
3629 static char * anqp_add_hex(char *pos, char *end, const char *title,
3630                            struct wpabuf *data)
3631 {
3632         char *start = pos;
3633         size_t i;
3634         int ret;
3635         const u8 *d;
3636
3637         if (data == NULL)
3638                 return start;
3639
3640         ret = os_snprintf(pos, end - pos, "%s=", title);
3641         if (os_snprintf_error(end - pos, ret))
3642                 return start;
3643         pos += ret;
3644
3645         d = wpabuf_head_u8(data);
3646         for (i = 0; i < wpabuf_len(data); i++) {
3647                 ret = os_snprintf(pos, end - pos, "%02x", *d++);
3648                 if (os_snprintf_error(end - pos, ret))
3649                         return start;
3650                 pos += ret;
3651         }
3652
3653         ret = os_snprintf(pos, end - pos, "\n");
3654         if (os_snprintf_error(end - pos, ret))
3655                 return start;
3656         pos += ret;
3657
3658         return pos;
3659 }
3660 #endif /* CONFIG_INTERWORKING */
3661
3662
3663 static int print_bss_info(struct wpa_supplicant *wpa_s, struct wpa_bss *bss,
3664                           unsigned long mask, char *buf, size_t buflen)
3665 {
3666         size_t i;
3667         int ret;
3668         char *pos, *end;
3669         const u8 *ie, *ie2;
3670
3671         pos = buf;
3672         end = buf + buflen;
3673
3674         if (mask & WPA_BSS_MASK_ID) {
3675                 ret = os_snprintf(pos, end - pos, "id=%u\n", bss->id);
3676                 if (os_snprintf_error(end - pos, ret))
3677                         return 0;
3678                 pos += ret;
3679         }
3680
3681         if (mask & WPA_BSS_MASK_BSSID) {
3682                 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
3683                                   MAC2STR(bss->bssid));
3684                 if (os_snprintf_error(end - pos, ret))
3685                         return 0;
3686                 pos += ret;
3687         }
3688
3689         if (mask & WPA_BSS_MASK_FREQ) {
3690                 ret = os_snprintf(pos, end - pos, "freq=%d\n", bss->freq);
3691                 if (os_snprintf_error(end - pos, ret))
3692                         return 0;
3693                 pos += ret;
3694         }
3695
3696         if (mask & WPA_BSS_MASK_BEACON_INT) {
3697                 ret = os_snprintf(pos, end - pos, "beacon_int=%d\n",
3698                                   bss->beacon_int);
3699                 if (os_snprintf_error(end - pos, ret))
3700                         return 0;
3701                 pos += ret;
3702         }
3703
3704         if (mask & WPA_BSS_MASK_CAPABILITIES) {
3705                 ret = os_snprintf(pos, end - pos, "capabilities=0x%04x\n",
3706                                   bss->caps);
3707                 if (os_snprintf_error(end - pos, ret))
3708                         return 0;
3709                 pos += ret;
3710         }
3711
3712         if (mask & WPA_BSS_MASK_QUAL) {
3713                 ret = os_snprintf(pos, end - pos, "qual=%d\n", bss->qual);
3714                 if (os_snprintf_error(end - pos, ret))
3715                         return 0;
3716                 pos += ret;
3717         }
3718
3719         if (mask & WPA_BSS_MASK_NOISE) {
3720                 ret = os_snprintf(pos, end - pos, "noise=%d\n", bss->noise);
3721                 if (os_snprintf_error(end - pos, ret))
3722                         return 0;
3723                 pos += ret;
3724         }
3725
3726         if (mask & WPA_BSS_MASK_LEVEL) {
3727                 ret = os_snprintf(pos, end - pos, "level=%d\n", bss->level);
3728                 if (os_snprintf_error(end - pos, ret))
3729                         return 0;
3730                 pos += ret;
3731         }
3732
3733         if (mask & WPA_BSS_MASK_TSF) {
3734                 ret = os_snprintf(pos, end - pos, "tsf=%016llu\n",
3735                                   (unsigned long long) bss->tsf);
3736                 if (os_snprintf_error(end - pos, ret))
3737                         return 0;
3738                 pos += ret;
3739         }
3740
3741         if (mask & WPA_BSS_MASK_AGE) {
3742                 struct os_reltime now;
3743
3744                 os_get_reltime(&now);
3745                 ret = os_snprintf(pos, end - pos, "age=%d\n",
3746                                   (int) (now.sec - bss->last_update.sec));
3747                 if (os_snprintf_error(end - pos, ret))
3748                         return 0;
3749                 pos += ret;
3750         }
3751
3752         if (mask & WPA_BSS_MASK_IE) {
3753                 ret = os_snprintf(pos, end - pos, "ie=");
3754                 if (os_snprintf_error(end - pos, ret))
3755                         return 0;
3756                 pos += ret;
3757
3758                 ie = (const u8 *) (bss + 1);
3759                 for (i = 0; i < bss->ie_len; i++) {
3760                         ret = os_snprintf(pos, end - pos, "%02x", *ie++);
3761                         if (os_snprintf_error(end - pos, ret))
3762                                 return 0;
3763                         pos += ret;
3764                 }
3765
3766                 ret = os_snprintf(pos, end - pos, "\n");
3767                 if (os_snprintf_error(end - pos, ret))
3768                         return 0;
3769                 pos += ret;
3770         }
3771
3772         if (mask & WPA_BSS_MASK_FLAGS) {
3773                 ret = os_snprintf(pos, end - pos, "flags=");
3774                 if (os_snprintf_error(end - pos, ret))
3775                         return 0;
3776                 pos += ret;
3777
3778                 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
3779                 if (ie)
3780                         pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie,
3781                                                     2 + ie[1]);
3782                 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
3783                 if (ie2)
3784                         pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2,
3785                                                     2 + ie2[1]);
3786                 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
3787                 if (!ie && !ie2 && bss->caps & IEEE80211_CAP_PRIVACY) {
3788                         ret = os_snprintf(pos, end - pos, "[WEP]");
3789                         if (os_snprintf_error(end - pos, ret))
3790                                 return 0;
3791                         pos += ret;
3792                 }
3793                 if (bss_is_dmg(bss)) {
3794                         const char *s;
3795                         ret = os_snprintf(pos, end - pos, "[DMG]");
3796                         if (os_snprintf_error(end - pos, ret))
3797                                 return 0;
3798                         pos += ret;
3799                         switch (bss->caps & IEEE80211_CAP_DMG_MASK) {
3800                         case IEEE80211_CAP_DMG_IBSS:
3801                                 s = "[IBSS]";
3802                                 break;
3803                         case IEEE80211_CAP_DMG_AP:
3804                                 s = "[ESS]";
3805                                 break;
3806                         case IEEE80211_CAP_DMG_PBSS:
3807                                 s = "[PBSS]";
3808                                 break;
3809                         default:
3810                                 s = "";
3811                                 break;
3812                         }
3813                         ret = os_snprintf(pos, end - pos, "%s", s);
3814                         if (os_snprintf_error(end - pos, ret))
3815                                 return 0;
3816                         pos += ret;
3817                 } else {
3818                         if (bss->caps & IEEE80211_CAP_IBSS) {
3819                                 ret = os_snprintf(pos, end - pos, "[IBSS]");
3820                                 if (os_snprintf_error(end - pos, ret))
3821                                         return 0;
3822                                 pos += ret;
3823                         }
3824                         if (bss->caps & IEEE80211_CAP_ESS) {
3825                                 ret = os_snprintf(pos, end - pos, "[ESS]");
3826                                 if (os_snprintf_error(end - pos, ret))
3827                                         return 0;
3828                                 pos += ret;
3829                         }
3830                 }
3831                 if (wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE) ||
3832                     wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE)) {
3833                         ret = os_snprintf(pos, end - pos, "[P2P]");
3834                         if (os_snprintf_error(end - pos, ret))
3835                                 return 0;
3836                         pos += ret;
3837                 }
3838 #ifdef CONFIG_HS20
3839                 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE)) {
3840                         ret = os_snprintf(pos, end - pos, "[HS20]");
3841                         if (os_snprintf_error(end - pos, ret))
3842                                 return 0;
3843                         pos += ret;
3844                 }
3845 #endif /* CONFIG_HS20 */
3846
3847                 ret = os_snprintf(pos, end - pos, "\n");
3848                 if (os_snprintf_error(end - pos, ret))
3849                         return 0;
3850                 pos += ret;
3851         }
3852
3853         if (mask & WPA_BSS_MASK_SSID) {
3854                 ret = os_snprintf(pos, end - pos, "ssid=%s\n",
3855                                   wpa_ssid_txt(bss->ssid, bss->ssid_len));
3856                 if (os_snprintf_error(end - pos, ret))
3857                         return 0;
3858                 pos += ret;
3859         }
3860
3861 #ifdef CONFIG_WPS
3862         if (mask & WPA_BSS_MASK_WPS_SCAN) {
3863                 ie = (const u8 *) (bss + 1);
3864                 ret = wpas_wps_scan_result_text(ie, bss->ie_len, pos, end);
3865                 if (ret < 0 || ret >= end - pos)
3866                         return 0;
3867                 pos += ret;
3868         }
3869 #endif /* CONFIG_WPS */
3870
3871 #ifdef CONFIG_P2P
3872         if (mask & WPA_BSS_MASK_P2P_SCAN) {
3873                 ie = (const u8 *) (bss + 1);
3874                 ret = wpas_p2p_scan_result_text(ie, bss->ie_len, pos, end);
3875                 if (ret < 0 || ret >= end - pos)
3876                         return 0;
3877                 pos += ret;
3878         }
3879 #endif /* CONFIG_P2P */
3880
3881 #ifdef CONFIG_WIFI_DISPLAY
3882         if (mask & WPA_BSS_MASK_WIFI_DISPLAY) {
3883                 struct wpabuf *wfd;
3884                 ie = (const u8 *) (bss + 1);
3885                 wfd = ieee802_11_vendor_ie_concat(ie, bss->ie_len,
3886                                                   WFD_IE_VENDOR_TYPE);
3887                 if (wfd) {
3888                         ret = os_snprintf(pos, end - pos, "wfd_subelems=");
3889                         if (os_snprintf_error(end - pos, ret)) {
3890                                 wpabuf_free(wfd);
3891                                 return 0;
3892                         }
3893                         pos += ret;
3894
3895                         pos += wpa_snprintf_hex(pos, end - pos,
3896                                                 wpabuf_head(wfd),
3897                                                 wpabuf_len(wfd));
3898                         wpabuf_free(wfd);
3899
3900                         ret = os_snprintf(pos, end - pos, "\n");
3901                         if (os_snprintf_error(end - pos, ret))
3902                                 return 0;
3903                         pos += ret;
3904                 }
3905         }
3906 #endif /* CONFIG_WIFI_DISPLAY */
3907
3908 #ifdef CONFIG_INTERWORKING
3909         if ((mask & WPA_BSS_MASK_INTERNETW) && bss->anqp) {
3910                 struct wpa_bss_anqp *anqp = bss->anqp;
3911                 pos = anqp_add_hex(pos, end, "anqp_venue_name",
3912                                    anqp->venue_name);
3913                 pos = anqp_add_hex(pos, end, "anqp_network_auth_type",
3914                                    anqp->network_auth_type);
3915                 pos = anqp_add_hex(pos, end, "anqp_roaming_consortium",
3916                                    anqp->roaming_consortium);
3917                 pos = anqp_add_hex(pos, end, "anqp_ip_addr_type_availability",
3918                                    anqp->ip_addr_type_availability);
3919                 pos = anqp_add_hex(pos, end, "anqp_nai_realm",
3920                                    anqp->nai_realm);
3921                 pos = anqp_add_hex(pos, end, "anqp_3gpp", anqp->anqp_3gpp);
3922                 pos = anqp_add_hex(pos, end, "anqp_domain_name",
3923                                    anqp->domain_name);
3924 #ifdef CONFIG_HS20
3925                 pos = anqp_add_hex(pos, end, "hs20_operator_friendly_name",
3926                                    anqp->hs20_operator_friendly_name);
3927                 pos = anqp_add_hex(pos, end, "hs20_wan_metrics",
3928                                    anqp->hs20_wan_metrics);
3929                 pos = anqp_add_hex(pos, end, "hs20_connection_capability",
3930                                    anqp->hs20_connection_capability);
3931                 pos = anqp_add_hex(pos, end, "hs20_operating_class",
3932                                    anqp->hs20_operating_class);
3933                 pos = anqp_add_hex(pos, end, "hs20_osu_providers_list",
3934                                    anqp->hs20_osu_providers_list);
3935 #endif /* CONFIG_HS20 */
3936         }
3937 #endif /* CONFIG_INTERWORKING */
3938
3939 #ifdef CONFIG_MESH
3940         if (mask & WPA_BSS_MASK_MESH_SCAN) {
3941                 ie = (const u8 *) (bss + 1);
3942                 ret = wpas_mesh_scan_result_text(ie, bss->ie_len, pos, end);
3943                 if (ret < 0 || ret >= end - pos)
3944                         return 0;
3945                 pos += ret;
3946         }
3947 #endif /* CONFIG_MESH */
3948
3949         if (mask & WPA_BSS_MASK_DELIM) {
3950                 ret = os_snprintf(pos, end - pos, "====\n");
3951                 if (os_snprintf_error(end - pos, ret))
3952                         return 0;
3953                 pos += ret;
3954         }
3955
3956         return pos - buf;
3957 }
3958
3959
3960 static int wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant *wpa_s,
3961                                          const char *cmd, char *buf,
3962                                          size_t buflen)
3963 {
3964         u8 bssid[ETH_ALEN];
3965         size_t i;
3966         struct wpa_bss *bss;
3967         struct wpa_bss *bsslast = NULL;
3968         struct dl_list *next;
3969         int ret = 0;
3970         int len;
3971         char *ctmp;
3972         unsigned long mask = WPA_BSS_MASK_ALL;
3973
3974         if (os_strncmp(cmd, "RANGE=", 6) == 0) {
3975                 if (os_strncmp(cmd + 6, "ALL", 3) == 0) {
3976                         bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss,
3977                                             list_id);
3978                         bsslast = dl_list_last(&wpa_s->bss_id, struct wpa_bss,
3979                                                list_id);
3980                 } else { /* N1-N2 */
3981                         unsigned int id1, id2;
3982
3983                         if ((ctmp = os_strchr(cmd + 6, '-')) == NULL) {
3984                                 wpa_printf(MSG_INFO, "Wrong BSS range "
3985                                            "format");
3986                                 return 0;
3987                         }
3988
3989                         if (*(cmd + 6) == '-')
3990                                 id1 = 0;
3991                         else
3992                                 id1 = atoi(cmd + 6);
3993                         ctmp++;
3994                         if (*ctmp >= '0' && *ctmp <= '9')
3995                                 id2 = atoi(ctmp);
3996                         else
3997                                 id2 = (unsigned int) -1;
3998                         bss = wpa_bss_get_id_range(wpa_s, id1, id2);
3999                         if (id2 == (unsigned int) -1)
4000                                 bsslast = dl_list_last(&wpa_s->bss_id,
4001                                                        struct wpa_bss,
4002                                                        list_id);
4003                         else {
4004                                 bsslast = wpa_bss_get_id(wpa_s, id2);
4005                                 if (bsslast == NULL && bss && id2 > id1) {
4006                                         struct wpa_bss *tmp = bss;
4007                                         for (;;) {
4008                                                 next = tmp->list_id.next;
4009                                                 if (next == &wpa_s->bss_id)
4010                                                         break;
4011                                                 tmp = dl_list_entry(
4012                                                         next, struct wpa_bss,
4013                                                         list_id);
4014                                                 if (tmp->id > id2)
4015                                                         break;
4016                                                 bsslast = tmp;
4017                                         }
4018                                 }
4019                         }
4020                 }
4021         } else if (os_strncmp(cmd, "FIRST", 5) == 0)
4022                 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss, list_id);
4023         else if (os_strncmp(cmd, "LAST", 4) == 0)
4024                 bss = dl_list_last(&wpa_s->bss_id, struct wpa_bss, list_id);
4025         else if (os_strncmp(cmd, "ID-", 3) == 0) {
4026                 i = atoi(cmd + 3);
4027                 bss = wpa_bss_get_id(wpa_s, i);
4028         } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
4029                 i = atoi(cmd + 5);
4030                 bss = wpa_bss_get_id(wpa_s, i);
4031                 if (bss) {
4032                         next = bss->list_id.next;
4033                         if (next == &wpa_s->bss_id)
4034                                 bss = NULL;
4035                         else
4036                                 bss = dl_list_entry(next, struct wpa_bss,
4037                                                     list_id);
4038                 }
4039 #ifdef CONFIG_P2P
4040         } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
4041                 if (hwaddr_aton(cmd + 13, bssid) == 0)
4042                         bss = wpa_bss_get_p2p_dev_addr(wpa_s, bssid);
4043                 else
4044                         bss = NULL;
4045 #endif /* CONFIG_P2P */
4046         } else if (hwaddr_aton(cmd, bssid) == 0)
4047                 bss = wpa_bss_get_bssid(wpa_s, bssid);
4048         else {
4049                 struct wpa_bss *tmp;
4050                 i = atoi(cmd);
4051                 bss = NULL;
4052                 dl_list_for_each(tmp, &wpa_s->bss_id, struct wpa_bss, list_id)
4053                 {
4054                         if (i-- == 0) {
4055                                 bss = tmp;
4056                                 break;
4057                         }
4058                 }
4059         }
4060
4061         if ((ctmp = os_strstr(cmd, "MASK=")) != NULL) {
4062                 mask = strtoul(ctmp + 5, NULL, 0x10);
4063                 if (mask == 0)
4064                         mask = WPA_BSS_MASK_ALL;
4065         }
4066
4067         if (bss == NULL)
4068                 return 0;
4069
4070         if (bsslast == NULL)
4071                 bsslast = bss;
4072         do {
4073                 len = print_bss_info(wpa_s, bss, mask, buf, buflen);
4074                 ret += len;
4075                 buf += len;
4076                 buflen -= len;
4077                 if (bss == bsslast) {
4078                         if ((mask & WPA_BSS_MASK_DELIM) && len &&
4079                             (bss == dl_list_last(&wpa_s->bss_id,
4080                                                  struct wpa_bss, list_id)))
4081                                 os_snprintf(buf - 5, 5, "####\n");
4082                         break;
4083                 }
4084                 next = bss->list_id.next;
4085                 if (next == &wpa_s->bss_id)
4086                         break;
4087                 bss = dl_list_entry(next, struct wpa_bss, list_id);
4088         } while (bss && len);
4089
4090         return ret;
4091 }
4092
4093
4094 static int wpa_supplicant_ctrl_iface_ap_scan(
4095         struct wpa_supplicant *wpa_s, char *cmd)
4096 {
4097         int ap_scan = atoi(cmd);
4098         return wpa_supplicant_set_ap_scan(wpa_s, ap_scan);
4099 }
4100
4101
4102 static int wpa_supplicant_ctrl_iface_scan_interval(
4103         struct wpa_supplicant *wpa_s, char *cmd)
4104 {
4105         int scan_int = atoi(cmd);
4106         return wpa_supplicant_set_scan_interval(wpa_s, scan_int);
4107 }
4108
4109
4110 static int wpa_supplicant_ctrl_iface_bss_expire_age(
4111         struct wpa_supplicant *wpa_s, char *cmd)
4112 {
4113         int expire_age = atoi(cmd);
4114         return wpa_supplicant_set_bss_expiration_age(wpa_s, expire_age);
4115 }
4116
4117
4118 static int wpa_supplicant_ctrl_iface_bss_expire_count(
4119         struct wpa_supplicant *wpa_s, char *cmd)
4120 {
4121         int expire_count = atoi(cmd);
4122         return wpa_supplicant_set_bss_expiration_count(wpa_s, expire_count);
4123 }
4124
4125
4126 static int wpa_supplicant_ctrl_iface_bss_flush(
4127         struct wpa_supplicant *wpa_s, char *cmd)
4128 {
4129         int flush_age = atoi(cmd);
4130
4131         if (flush_age == 0)
4132                 wpa_bss_flush(wpa_s);
4133         else
4134                 wpa_bss_flush_by_age(wpa_s, flush_age);
4135         return 0;
4136 }
4137
4138
4139 #ifdef CONFIG_TESTING_OPTIONS
4140 static void wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant *wpa_s)
4141 {
4142         wpa_printf(MSG_DEBUG, "Dropping SA without deauthentication");
4143         /* MLME-DELETEKEYS.request */
4144         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 0, 0, NULL, 0, NULL, 0);
4145         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 1, 0, NULL, 0, NULL, 0);
4146         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 2, 0, NULL, 0, NULL, 0);
4147         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 3, 0, NULL, 0, NULL, 0);
4148 #ifdef CONFIG_IEEE80211W
4149         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 4, 0, NULL, 0, NULL, 0);
4150         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 5, 0, NULL, 0, NULL, 0);
4151 #endif /* CONFIG_IEEE80211W */
4152
4153         wpa_drv_set_key(wpa_s, WPA_ALG_NONE, wpa_s->bssid, 0, 0, NULL, 0, NULL,
4154                         0);
4155         /* MLME-SETPROTECTION.request(None) */
4156         wpa_drv_mlme_setprotection(wpa_s, wpa_s->bssid,
4157                                    MLME_SETPROTECTION_PROTECT_TYPE_NONE,
4158                                    MLME_SETPROTECTION_KEY_TYPE_PAIRWISE);
4159         wpa_sm_drop_sa(wpa_s->wpa);
4160 }
4161 #endif /* CONFIG_TESTING_OPTIONS */
4162
4163
4164 static int wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant *wpa_s,
4165                                           char *addr)
4166 {
4167 #ifdef CONFIG_NO_SCAN_PROCESSING
4168         return -1;
4169 #else /* CONFIG_NO_SCAN_PROCESSING */
4170         u8 bssid[ETH_ALEN];
4171         struct wpa_bss *bss;
4172         struct wpa_ssid *ssid = wpa_s->current_ssid;
4173
4174         if (hwaddr_aton(addr, bssid)) {
4175                 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: invalid "
4176                            "address '%s'", addr);
4177                 return -1;
4178         }
4179
4180         wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM " MACSTR, MAC2STR(bssid));
4181
4182         if (!ssid) {
4183                 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: No network "
4184                            "configuration known for the target AP");
4185                 return -1;
4186         }
4187
4188         bss = wpa_bss_get(wpa_s, bssid, ssid->ssid, ssid->ssid_len);
4189         if (!bss) {
4190                 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: Target AP not found "
4191                            "from BSS table");
4192                 return -1;
4193         }
4194
4195         /*
4196          * TODO: Find best network configuration block from configuration to
4197          * allow roaming to other networks
4198          */
4199
4200         wpa_s->reassociate = 1;
4201         wpa_supplicant_connect(wpa_s, bss, ssid);
4202
4203         return 0;
4204 #endif /* CONFIG_NO_SCAN_PROCESSING */
4205 }
4206
4207
4208 #ifdef CONFIG_P2P
4209 static int p2p_ctrl_find(struct wpa_supplicant *wpa_s, char *cmd)
4210 {
4211         unsigned int timeout = atoi(cmd);
4212         enum p2p_discovery_type type = P2P_FIND_START_WITH_FULL;
4213         u8 dev_id[ETH_ALEN], *_dev_id = NULL;
4214         u8 dev_type[WPS_DEV_TYPE_LEN], *_dev_type = NULL;
4215         char *pos;
4216         unsigned int search_delay;
4217
4218         if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
4219                 wpa_dbg(wpa_s, MSG_INFO,
4220                         "Reject P2P_FIND since interface is disabled");
4221                 return -1;
4222         }
4223         if (os_strstr(cmd, "type=social"))
4224                 type = P2P_FIND_ONLY_SOCIAL;
4225         else if (os_strstr(cmd, "type=progressive"))
4226                 type = P2P_FIND_PROGRESSIVE;
4227
4228         pos = os_strstr(cmd, "dev_id=");
4229         if (pos) {
4230                 pos += 7;
4231                 if (hwaddr_aton(pos, dev_id))
4232                         return -1;
4233                 _dev_id = dev_id;
4234         }
4235
4236         pos = os_strstr(cmd, "dev_type=");
4237         if (pos) {
4238                 pos += 9;
4239                 if (wps_dev_type_str2bin(pos, dev_type) < 0)
4240                         return -1;
4241                 _dev_type = dev_type;
4242         }
4243
4244         pos = os_strstr(cmd, "delay=");
4245         if (pos) {
4246                 pos += 6;
4247                 search_delay = atoi(pos);
4248         } else
4249                 search_delay = wpas_p2p_search_delay(wpa_s);
4250
4251         return wpas_p2p_find(wpa_s, timeout, type, _dev_type != NULL, _dev_type,
4252                              _dev_id, search_delay);
4253 }
4254
4255
4256 static int p2p_ctrl_connect(struct wpa_supplicant *wpa_s, char *cmd,
4257                             char *buf, size_t buflen)
4258 {
4259         u8 addr[ETH_ALEN];
4260         char *pos, *pos2;
4261         char *pin = NULL;
4262         enum p2p_wps_method wps_method;
4263         int new_pin;
4264         int ret;
4265         int persistent_group, persistent_id = -1;
4266         int join;
4267         int auth;
4268         int automatic;
4269         int go_intent = -1;
4270         int freq = 0;
4271         int pd;
4272         int ht40, vht;
4273
4274         /* <addr> <"pbc" | "pin" | PIN> [label|display|keypad]
4275          * [persistent|persistent=<network id>]
4276          * [join] [auth] [go_intent=<0..15>] [freq=<in MHz>] [provdisc]
4277          * [ht40] [vht] */
4278
4279         if (hwaddr_aton(cmd, addr))
4280                 return -1;
4281
4282         pos = cmd + 17;
4283         if (*pos != ' ')
4284                 return -1;
4285         pos++;
4286
4287         persistent_group = os_strstr(pos, " persistent") != NULL;
4288         pos2 = os_strstr(pos, " persistent=");
4289         if (pos2) {
4290                 struct wpa_ssid *ssid;
4291                 persistent_id = atoi(pos2 + 12);
4292                 ssid = wpa_config_get_network(wpa_s->conf, persistent_id);
4293                 if (ssid == NULL || ssid->disabled != 2 ||
4294                     ssid->mode != WPAS_MODE_P2P_GO) {
4295                         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
4296                                    "SSID id=%d for persistent P2P group (GO)",
4297                                    persistent_id);
4298                         return -1;
4299                 }
4300         }
4301         join = os_strstr(pos, " join") != NULL;
4302         auth = os_strstr(pos, " auth") != NULL;
4303         automatic = os_strstr(pos, " auto") != NULL;
4304         pd = os_strstr(pos, " provdisc") != NULL;
4305         vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
4306         ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
4307                 vht;
4308
4309         pos2 = os_strstr(pos, " go_intent=");
4310         if (pos2) {
4311                 pos2 += 11;
4312                 go_intent = atoi(pos2);
4313                 if (go_intent < 0 || go_intent > 15)
4314                         return -1;
4315         }
4316
4317         pos2 = os_strstr(pos, " freq=");
4318         if (pos2) {
4319                 pos2 += 6;
4320                 freq = atoi(pos2);
4321                 if (freq <= 0)
4322                         return -1;
4323         }
4324
4325         if (os_strncmp(pos, "pin", 3) == 0) {
4326                 /* Request random PIN (to be displayed) and enable the PIN */
4327                 wps_method = WPS_PIN_DISPLAY;
4328         } else if (os_strncmp(pos, "pbc", 3) == 0) {
4329                 wps_method = WPS_PBC;
4330         } else {
4331                 pin = pos;
4332                 pos = os_strchr(pin, ' ');
4333                 wps_method = WPS_PIN_KEYPAD;
4334                 if (pos) {
4335                         *pos++ = '\0';
4336                         if (os_strncmp(pos, "display", 7) == 0)
4337                                 wps_method = WPS_PIN_DISPLAY;
4338                 }
4339                 if (!wps_pin_str_valid(pin)) {
4340                         os_memcpy(buf, "FAIL-INVALID-PIN\n", 17);
4341                         return 17;
4342                 }
4343         }
4344
4345         new_pin = wpas_p2p_connect(wpa_s, addr, pin, wps_method,
4346                                    persistent_group, automatic, join,
4347                                    auth, go_intent, freq, persistent_id, pd,
4348                                    ht40, vht);
4349         if (new_pin == -2) {
4350                 os_memcpy(buf, "FAIL-CHANNEL-UNAVAILABLE\n", 25);
4351                 return 25;
4352         }
4353         if (new_pin == -3) {
4354                 os_memcpy(buf, "FAIL-CHANNEL-UNSUPPORTED\n", 25);
4355                 return 25;
4356         }
4357         if (new_pin < 0)
4358                 return -1;
4359         if (wps_method == WPS_PIN_DISPLAY && pin == NULL) {
4360                 ret = os_snprintf(buf, buflen, "%08d", new_pin);
4361                 if (os_snprintf_error(buflen, ret))
4362                         return -1;
4363                 return ret;
4364         }
4365
4366         os_memcpy(buf, "OK\n", 3);
4367         return 3;
4368 }
4369
4370
4371 static int p2p_ctrl_listen(struct wpa_supplicant *wpa_s, char *cmd)
4372 {
4373         unsigned int timeout = atoi(cmd);
4374         if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
4375                 wpa_dbg(wpa_s, MSG_INFO,
4376                         "Reject P2P_LISTEN since interface is disabled");
4377                 return -1;
4378         }
4379         return wpas_p2p_listen(wpa_s, timeout);
4380 }
4381
4382
4383 static int p2p_ctrl_prov_disc(struct wpa_supplicant *wpa_s, char *cmd)
4384 {
4385         u8 addr[ETH_ALEN];
4386         char *pos;
4387         enum wpas_p2p_prov_disc_use use = WPAS_P2P_PD_FOR_GO_NEG;
4388
4389         /* <addr> <config method> [join|auto] */
4390
4391         if (hwaddr_aton(cmd, addr))
4392                 return -1;
4393
4394         pos = cmd + 17;
4395         if (*pos != ' ')
4396                 return -1;
4397         pos++;
4398
4399         if (os_strstr(pos, " join") != NULL)
4400                 use = WPAS_P2P_PD_FOR_JOIN;
4401         else if (os_strstr(pos, " auto") != NULL)
4402                 use = WPAS_P2P_PD_AUTO;
4403
4404         return wpas_p2p_prov_disc(wpa_s, addr, pos, use);
4405 }
4406
4407
4408 static int p2p_get_passphrase(struct wpa_supplicant *wpa_s, char *buf,
4409                               size_t buflen)
4410 {
4411         struct wpa_ssid *ssid = wpa_s->current_ssid;
4412
4413         if (ssid == NULL || ssid->mode != WPAS_MODE_P2P_GO ||
4414             ssid->passphrase == NULL)
4415                 return -1;
4416
4417         os_strlcpy(buf, ssid->passphrase, buflen);
4418         return os_strlen(buf);
4419 }
4420
4421
4422 static int p2p_ctrl_serv_disc_req(struct wpa_supplicant *wpa_s, char *cmd,
4423                                   char *buf, size_t buflen)
4424 {
4425         u64 ref;
4426         int res;
4427         u8 dst_buf[ETH_ALEN], *dst;
4428         struct wpabuf *tlvs;
4429         char *pos;
4430         size_t len;
4431
4432         if (hwaddr_aton(cmd, dst_buf))
4433                 return -1;
4434         dst = dst_buf;
4435         if (dst[0] == 0 && dst[1] == 0 && dst[2] == 0 &&
4436             dst[3] == 0 && dst[4] == 0 && dst[5] == 0)
4437                 dst = NULL;
4438         pos = cmd + 17;
4439         if (*pos != ' ')
4440                 return -1;
4441         pos++;
4442
4443         if (os_strncmp(pos, "upnp ", 5) == 0) {
4444                 u8 version;
4445                 pos += 5;
4446                 if (hexstr2bin(pos, &version, 1) < 0)
4447                         return -1;
4448                 pos += 2;
4449                 if (*pos != ' ')
4450                         return -1;
4451                 pos++;
4452                 ref = wpas_p2p_sd_request_upnp(wpa_s, dst, version, pos);
4453 #ifdef CONFIG_WIFI_DISPLAY
4454         } else if (os_strncmp(pos, "wifi-display ", 13) == 0) {
4455                 ref = wpas_p2p_sd_request_wifi_display(wpa_s, dst, pos + 13);
4456 #endif /* CONFIG_WIFI_DISPLAY */
4457         } else {
4458                 len = os_strlen(pos);
4459                 if (len & 1)
4460                         return -1;
4461                 len /= 2;
4462                 tlvs = wpabuf_alloc(len);
4463                 if (tlvs == NULL)
4464                         return -1;
4465                 if (hexstr2bin(pos, wpabuf_put(tlvs, len), len) < 0) {
4466                         wpabuf_free(tlvs);
4467                         return -1;
4468                 }
4469
4470                 ref = wpas_p2p_sd_request(wpa_s, dst, tlvs);
4471                 wpabuf_free(tlvs);
4472         }
4473         if (ref == 0)
4474                 return -1;
4475         res = os_snprintf(buf, buflen, "%llx", (long long unsigned) ref);
4476         if (os_snprintf_error(buflen, res))
4477                 return -1;
4478         return res;
4479 }
4480
4481
4482 static int p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant *wpa_s,
4483                                          char *cmd)
4484 {
4485         long long unsigned val;
4486         u64 req;
4487         if (sscanf(cmd, "%llx", &val) != 1)
4488                 return -1;
4489         req = val;
4490         return wpas_p2p_sd_cancel_request(wpa_s, req);
4491 }
4492
4493
4494 static int p2p_ctrl_serv_disc_resp(struct wpa_supplicant *wpa_s, char *cmd)
4495 {
4496         int freq;
4497         u8 dst[ETH_ALEN];
4498         u8 dialog_token;
4499         struct wpabuf *resp_tlvs;
4500         char *pos, *pos2;
4501         size_t len;
4502
4503         pos = os_strchr(cmd, ' ');
4504         if (pos == NULL)
4505                 return -1;
4506         *pos++ = '\0';
4507         freq = atoi(cmd);
4508         if (freq == 0)
4509                 return -1;
4510
4511         if (hwaddr_aton(pos, dst))
4512                 return -1;
4513         pos += 17;
4514         if (*pos != ' ')
4515                 return -1;
4516         pos++;
4517
4518         pos2 = os_strchr(pos, ' ');
4519         if (pos2 == NULL)
4520                 return -1;
4521         *pos2++ = '\0';
4522         dialog_token = atoi(pos);
4523
4524         len = os_strlen(pos2);
4525         if (len & 1)
4526                 return -1;
4527         len /= 2;
4528         resp_tlvs = wpabuf_alloc(len);
4529         if (resp_tlvs == NULL)
4530                 return -1;
4531         if (hexstr2bin(pos2, wpabuf_put(resp_tlvs, len), len) < 0) {
4532                 wpabuf_free(resp_tlvs);
4533                 return -1;
4534         }
4535
4536         wpas_p2p_sd_response(wpa_s, freq, dst, dialog_token, resp_tlvs);
4537         wpabuf_free(resp_tlvs);
4538         return 0;
4539 }
4540
4541
4542 static int p2p_ctrl_serv_disc_external(struct wpa_supplicant *wpa_s,
4543                                        char *cmd)
4544 {
4545         if (os_strcmp(cmd, "0") && os_strcmp(cmd, "1"))
4546                 return -1;
4547         wpa_s->p2p_sd_over_ctrl_iface = atoi(cmd);
4548         return 0;
4549 }
4550
4551
4552 static int p2p_ctrl_service_add_bonjour(struct wpa_supplicant *wpa_s,
4553                                         char *cmd)
4554 {
4555         char *pos;
4556         size_t len;
4557         struct wpabuf *query, *resp;
4558
4559         pos = os_strchr(cmd, ' ');
4560         if (pos == NULL)
4561                 return -1;
4562         *pos++ = '\0';
4563
4564         len = os_strlen(cmd);
4565         if (len & 1)
4566                 return -1;
4567         len /= 2;
4568         query = wpabuf_alloc(len);
4569         if (query == NULL)
4570                 return -1;
4571         if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
4572                 wpabuf_free(query);
4573                 return -1;
4574         }
4575
4576         len = os_strlen(pos);
4577         if (len & 1) {
4578                 wpabuf_free(query);
4579                 return -1;
4580         }
4581         len /= 2;
4582         resp = wpabuf_alloc(len);
4583         if (resp == NULL) {
4584                 wpabuf_free(query);
4585                 return -1;
4586         }
4587         if (hexstr2bin(pos, wpabuf_put(resp, len), len) < 0) {
4588                 wpabuf_free(query);
4589                 wpabuf_free(resp);
4590                 return -1;
4591         }
4592
4593         if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0) {
4594                 wpabuf_free(query);
4595                 wpabuf_free(resp);
4596                 return -1;
4597         }
4598         return 0;
4599 }
4600
4601
4602 static int p2p_ctrl_service_add_upnp(struct wpa_supplicant *wpa_s, char *cmd)
4603 {
4604         char *pos;
4605         u8 version;
4606
4607         pos = os_strchr(cmd, ' ');
4608         if (pos == NULL)
4609                 return -1;
4610         *pos++ = '\0';
4611
4612         if (hexstr2bin(cmd, &version, 1) < 0)
4613                 return -1;
4614
4615         return wpas_p2p_service_add_upnp(wpa_s, version, pos);
4616 }
4617
4618
4619 static int p2p_ctrl_service_add(struct wpa_supplicant *wpa_s, char *cmd)
4620 {
4621         char *pos;
4622
4623         pos = os_strchr(cmd, ' ');
4624         if (pos == NULL)
4625                 return -1;
4626         *pos++ = '\0';
4627
4628         if (os_strcmp(cmd, "bonjour") == 0)
4629                 return p2p_ctrl_service_add_bonjour(wpa_s, pos);
4630         if (os_strcmp(cmd, "upnp") == 0)
4631                 return p2p_ctrl_service_add_upnp(wpa_s, pos);
4632         wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
4633         return -1;
4634 }
4635
4636
4637 static int p2p_ctrl_service_del_bonjour(struct wpa_supplicant *wpa_s,
4638                                         char *cmd)
4639 {
4640         size_t len;
4641         struct wpabuf *query;
4642         int ret;
4643
4644         len = os_strlen(cmd);
4645         if (len & 1)
4646                 return -1;
4647         len /= 2;
4648         query = wpabuf_alloc(len);
4649         if (query == NULL)
4650                 return -1;
4651         if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
4652                 wpabuf_free(query);
4653                 return -1;
4654         }
4655
4656         ret = wpas_p2p_service_del_bonjour(wpa_s, query);
4657         wpabuf_free(query);
4658         return ret;
4659 }
4660
4661
4662 static int p2p_ctrl_service_del_upnp(struct wpa_supplicant *wpa_s, char *cmd)
4663 {
4664         char *pos;
4665         u8 version;
4666
4667         pos = os_strchr(cmd, ' ');
4668         if (pos == NULL)
4669                 return -1;
4670         *pos++ = '\0';
4671
4672         if (hexstr2bin(cmd, &version, 1) < 0)
4673                 return -1;
4674
4675         return wpas_p2p_service_del_upnp(wpa_s, version, pos);
4676 }
4677
4678
4679 static int p2p_ctrl_service_del(struct wpa_supplicant *wpa_s, char *cmd)
4680 {
4681         char *pos;
4682
4683         pos = os_strchr(cmd, ' ');
4684         if (pos == NULL)
4685                 return -1;
4686         *pos++ = '\0';
4687
4688         if (os_strcmp(cmd, "bonjour") == 0)
4689                 return p2p_ctrl_service_del_bonjour(wpa_s, pos);
4690         if (os_strcmp(cmd, "upnp") == 0)
4691                 return p2p_ctrl_service_del_upnp(wpa_s, pos);
4692         wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
4693         return -1;
4694 }
4695
4696
4697 static int p2p_ctrl_reject(struct wpa_supplicant *wpa_s, char *cmd)
4698 {
4699         u8 addr[ETH_ALEN];
4700
4701         /* <addr> */
4702
4703         if (hwaddr_aton(cmd, addr))
4704                 return -1;
4705
4706         return wpas_p2p_reject(wpa_s, addr);
4707 }
4708
4709
4710 static int p2p_ctrl_invite_persistent(struct wpa_supplicant *wpa_s, char *cmd)
4711 {
4712         char *pos;
4713         int id;
4714         struct wpa_ssid *ssid;
4715         u8 *_peer = NULL, peer[ETH_ALEN];
4716         int freq = 0, pref_freq = 0;
4717         int ht40, vht;
4718
4719         id = atoi(cmd);
4720         pos = os_strstr(cmd, " peer=");
4721         if (pos) {
4722                 pos += 6;
4723                 if (hwaddr_aton(pos, peer))
4724                         return -1;
4725                 _peer = peer;
4726         }
4727         ssid = wpa_config_get_network(wpa_s->conf, id);
4728         if (ssid == NULL || ssid->disabled != 2) {
4729                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
4730                            "for persistent P2P group",
4731                            id);
4732                 return -1;
4733         }
4734
4735         pos = os_strstr(cmd, " freq=");
4736         if (pos) {
4737                 pos += 6;
4738                 freq = atoi(pos);
4739                 if (freq <= 0)
4740                         return -1;
4741         }
4742
4743         pos = os_strstr(cmd, " pref=");
4744         if (pos) {
4745                 pos += 6;
4746                 pref_freq = atoi(pos);
4747                 if (pref_freq <= 0)
4748                         return -1;
4749         }
4750
4751         vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
4752         ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
4753                 vht;
4754
4755         return wpas_p2p_invite(wpa_s, _peer, ssid, NULL, freq, ht40, vht,
4756                                pref_freq);
4757 }
4758
4759
4760 static int p2p_ctrl_invite_group(struct wpa_supplicant *wpa_s, char *cmd)
4761 {
4762         char *pos;
4763         u8 peer[ETH_ALEN], go_dev_addr[ETH_ALEN], *go_dev = NULL;
4764
4765         pos = os_strstr(cmd, " peer=");
4766         if (!pos)
4767                 return -1;
4768
4769         *pos = '\0';
4770         pos += 6;
4771         if (hwaddr_aton(pos, peer)) {
4772                 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'", pos);
4773                 return -1;
4774         }
4775
4776         pos = os_strstr(pos, " go_dev_addr=");
4777         if (pos) {
4778                 pos += 13;
4779                 if (hwaddr_aton(pos, go_dev_addr)) {
4780                         wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'",
4781                                    pos);
4782                         return -1;
4783                 }
4784                 go_dev = go_dev_addr;
4785         }
4786
4787         return wpas_p2p_invite_group(wpa_s, cmd, peer, go_dev);
4788 }
4789
4790
4791 static int p2p_ctrl_invite(struct wpa_supplicant *wpa_s, char *cmd)
4792 {
4793         if (os_strncmp(cmd, "persistent=", 11) == 0)
4794                 return p2p_ctrl_invite_persistent(wpa_s, cmd + 11);
4795         if (os_strncmp(cmd, "group=", 6) == 0)
4796                 return p2p_ctrl_invite_group(wpa_s, cmd + 6);
4797
4798         return -1;
4799 }
4800
4801
4802 static int p2p_ctrl_group_add_persistent(struct wpa_supplicant *wpa_s,
4803                                          char *cmd, int freq, int ht40,
4804                                          int vht)
4805 {
4806         int id;
4807         struct wpa_ssid *ssid;
4808
4809         id = atoi(cmd);
4810         ssid = wpa_config_get_network(wpa_s->conf, id);
4811         if (ssid == NULL || ssid->disabled != 2) {
4812                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
4813                            "for persistent P2P group",
4814                            id);
4815                 return -1;
4816         }
4817
4818         return wpas_p2p_group_add_persistent(wpa_s, ssid, 0, freq, 0, ht40, vht,
4819                                              NULL, 0);
4820 }
4821
4822
4823 static int p2p_ctrl_group_add(struct wpa_supplicant *wpa_s, char *cmd)
4824 {
4825         int freq = 0, ht40, vht;
4826         char *pos;
4827
4828         pos = os_strstr(cmd, "freq=");
4829         if (pos)
4830                 freq = atoi(pos + 5);
4831
4832         vht = (os_strstr(cmd, "vht") != NULL) || wpa_s->conf->p2p_go_vht;
4833         ht40 = (os_strstr(cmd, "ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
4834                 vht;
4835
4836         if (os_strncmp(cmd, "persistent=", 11) == 0)
4837                 return p2p_ctrl_group_add_persistent(wpa_s, cmd + 11, freq,
4838                                                      ht40, vht);
4839         if (os_strcmp(cmd, "persistent") == 0 ||
4840             os_strncmp(cmd, "persistent ", 11) == 0)
4841                 return wpas_p2p_group_add(wpa_s, 1, freq, ht40, vht);
4842         if (os_strncmp(cmd, "freq=", 5) == 0)
4843                 return wpas_p2p_group_add(wpa_s, 0, freq, ht40, vht);
4844         if (ht40)
4845                 return wpas_p2p_group_add(wpa_s, 0, freq, ht40, vht);
4846
4847         wpa_printf(MSG_DEBUG, "CTRL: Invalid P2P_GROUP_ADD parameters '%s'",
4848                    cmd);
4849         return -1;
4850 }
4851
4852
4853 static int p2p_ctrl_peer(struct wpa_supplicant *wpa_s, char *cmd,
4854                          char *buf, size_t buflen)
4855 {
4856         u8 addr[ETH_ALEN], *addr_ptr;
4857         int next, res;
4858         const struct p2p_peer_info *info;
4859         char *pos, *end;
4860         char devtype[WPS_DEV_TYPE_BUFSIZE];
4861         struct wpa_ssid *ssid;
4862         size_t i;
4863
4864         if (!wpa_s->global->p2p)
4865                 return -1;
4866
4867         if (os_strcmp(cmd, "FIRST") == 0) {
4868                 addr_ptr = NULL;
4869                 next = 0;
4870         } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
4871                 if (hwaddr_aton(cmd + 5, addr) < 0)
4872                         return -1;
4873                 addr_ptr = addr;
4874                 next = 1;
4875         } else {
4876                 if (hwaddr_aton(cmd, addr) < 0)
4877                         return -1;
4878                 addr_ptr = addr;
4879                 next = 0;
4880         }
4881
4882         info = p2p_get_peer_info(wpa_s->global->p2p, addr_ptr, next);
4883         if (info == NULL)
4884                 return -1;
4885
4886         pos = buf;
4887         end = buf + buflen;
4888
4889         res = os_snprintf(pos, end - pos, MACSTR "\n"
4890                           "pri_dev_type=%s\n"
4891                           "device_name=%s\n"
4892                           "manufacturer=%s\n"
4893                           "model_name=%s\n"
4894                           "model_number=%s\n"
4895                           "serial_number=%s\n"
4896                           "config_methods=0x%x\n"
4897                           "dev_capab=0x%x\n"
4898                           "group_capab=0x%x\n"
4899                           "level=%d\n",
4900                           MAC2STR(info->p2p_device_addr),
4901                           wps_dev_type_bin2str(info->pri_dev_type,
4902                                                devtype, sizeof(devtype)),
4903                           info->device_name,
4904                           info->manufacturer,
4905                           info->model_name,
4906                           info->model_number,
4907                           info->serial_number,
4908                           info->config_methods,
4909                           info->dev_capab,
4910                           info->group_capab,
4911                           info->level);
4912         if (os_snprintf_error(end - pos, res))
4913                 return pos - buf;
4914         pos += res;
4915
4916         for (i = 0; i < info->wps_sec_dev_type_list_len / WPS_DEV_TYPE_LEN; i++)
4917         {
4918                 const u8 *t;
4919                 t = &info->wps_sec_dev_type_list[i * WPS_DEV_TYPE_LEN];
4920                 res = os_snprintf(pos, end - pos, "sec_dev_type=%s\n",
4921                                   wps_dev_type_bin2str(t, devtype,
4922                                                        sizeof(devtype)));
4923                 if (os_snprintf_error(end - pos, res))
4924                         return pos - buf;
4925                 pos += res;
4926         }
4927
4928         ssid = wpas_p2p_get_persistent(wpa_s, info->p2p_device_addr, NULL, 0);
4929         if (ssid) {
4930                 res = os_snprintf(pos, end - pos, "persistent=%d\n", ssid->id);
4931                 if (os_snprintf_error(end - pos, res))
4932                         return pos - buf;
4933                 pos += res;
4934         }
4935
4936         res = p2p_get_peer_info_txt(info, pos, end - pos);
4937         if (res < 0)
4938                 return pos - buf;
4939         pos += res;
4940
4941         if (info->vendor_elems) {
4942                 res = os_snprintf(pos, end - pos, "vendor_elems=");
4943                 if (os_snprintf_error(end - pos, res))
4944                         return pos - buf;
4945                 pos += res;
4946
4947                 pos += wpa_snprintf_hex(pos, end - pos,
4948                                         wpabuf_head(info->vendor_elems),
4949                                         wpabuf_len(info->vendor_elems));
4950
4951                 res = os_snprintf(pos, end - pos, "\n");
4952                 if (os_snprintf_error(end - pos, res))
4953                         return pos - buf;
4954                 pos += res;
4955         }
4956
4957         return pos - buf;
4958 }
4959
4960
4961 static int p2p_ctrl_disallow_freq(struct wpa_supplicant *wpa_s,
4962                                   const char *param)
4963 {
4964         unsigned int i;
4965
4966         if (wpa_s->global->p2p == NULL)
4967                 return -1;
4968
4969         if (freq_range_list_parse(&wpa_s->global->p2p_disallow_freq, param) < 0)
4970                 return -1;
4971
4972         for (i = 0; i < wpa_s->global->p2p_disallow_freq.num; i++) {
4973                 struct wpa_freq_range *freq;
4974                 freq = &wpa_s->global->p2p_disallow_freq.range[i];
4975                 wpa_printf(MSG_DEBUG, "P2P: Disallowed frequency range %u-%u",
4976                            freq->min, freq->max);
4977         }
4978
4979         wpas_p2p_update_channel_list(wpa_s);
4980         return 0;
4981 }
4982
4983
4984 static int p2p_ctrl_set(struct wpa_supplicant *wpa_s, char *cmd)
4985 {
4986         char *param;
4987
4988         if (wpa_s->global->p2p == NULL)
4989                 return -1;
4990
4991         param = os_strchr(cmd, ' ');
4992         if (param == NULL)
4993                 return -1;
4994         *param++ = '\0';
4995
4996         if (os_strcmp(cmd, "discoverability") == 0) {
4997                 p2p_set_client_discoverability(wpa_s->global->p2p,
4998                                                atoi(param));
4999                 return 0;
5000         }
5001
5002         if (os_strcmp(cmd, "managed") == 0) {
5003                 p2p_set_managed_oper(wpa_s->global->p2p, atoi(param));
5004                 return 0;
5005         }
5006
5007         if (os_strcmp(cmd, "listen_channel") == 0) {
5008                 return p2p_set_listen_channel(wpa_s->global->p2p, 81,
5009                                               atoi(param), 1);
5010         }
5011
5012         if (os_strcmp(cmd, "ssid_postfix") == 0) {
5013                 return p2p_set_ssid_postfix(wpa_s->global->p2p, (u8 *) param,
5014                                             os_strlen(param));
5015         }
5016
5017         if (os_strcmp(cmd, "noa") == 0) {
5018                 char *pos;
5019                 int count, start, duration;
5020                 /* GO NoA parameters: count,start_offset(ms),duration(ms) */
5021                 count = atoi(param);
5022                 pos = os_strchr(param, ',');
5023                 if (pos == NULL)
5024                         return -1;
5025                 pos++;
5026                 start = atoi(pos);
5027                 pos = os_strchr(pos, ',');
5028                 if (pos == NULL)
5029                         return -1;
5030                 pos++;
5031                 duration = atoi(pos);
5032                 if (count < 0 || count > 255 || start < 0 || duration < 0)
5033                         return -1;
5034                 if (count == 0 && duration > 0)
5035                         return -1;
5036                 wpa_printf(MSG_DEBUG, "CTRL_IFACE: P2P_SET GO NoA: count=%d "
5037                            "start=%d duration=%d", count, start, duration);
5038                 return wpas_p2p_set_noa(wpa_s, count, start, duration);
5039         }
5040
5041         if (os_strcmp(cmd, "ps") == 0)
5042                 return wpa_drv_set_p2p_powersave(wpa_s, atoi(param), -1, -1);
5043
5044         if (os_strcmp(cmd, "oppps") == 0)
5045                 return wpa_drv_set_p2p_powersave(wpa_s, -1, atoi(param), -1);
5046
5047         if (os_strcmp(cmd, "ctwindow") == 0)
5048                 return wpa_drv_set_p2p_powersave(wpa_s, -1, -1, atoi(param));
5049
5050         if (os_strcmp(cmd, "disabled") == 0) {
5051                 wpa_s->global->p2p_disabled = atoi(param);
5052                 wpa_printf(MSG_DEBUG, "P2P functionality %s",
5053                            wpa_s->global->p2p_disabled ?
5054                            "disabled" : "enabled");
5055                 if (wpa_s->global->p2p_disabled) {
5056                         wpas_p2p_stop_find(wpa_s);
5057                         os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
5058                         p2p_flush(wpa_s->global->p2p);
5059                 }
5060                 return 0;
5061         }
5062
5063         if (os_strcmp(cmd, "conc_pref") == 0) {
5064                 if (os_strcmp(param, "sta") == 0)
5065                         wpa_s->global->conc_pref = WPA_CONC_PREF_STA;
5066                 else if (os_strcmp(param, "p2p") == 0)
5067                         wpa_s->global->conc_pref = WPA_CONC_PREF_P2P;
5068                 else {
5069                         wpa_printf(MSG_INFO, "Invalid conc_pref value");
5070                         return -1;
5071                 }
5072                 wpa_printf(MSG_DEBUG, "Single channel concurrency preference: "
5073                            "%s", param);
5074                 return 0;
5075         }
5076
5077         if (os_strcmp(cmd, "force_long_sd") == 0) {
5078                 wpa_s->force_long_sd = atoi(param);
5079                 return 0;
5080         }
5081
5082         if (os_strcmp(cmd, "peer_filter") == 0) {
5083                 u8 addr[ETH_ALEN];
5084                 if (hwaddr_aton(param, addr))
5085                         return -1;
5086                 p2p_set_peer_filter(wpa_s->global->p2p, addr);
5087                 return 0;
5088         }
5089
5090         if (os_strcmp(cmd, "cross_connect") == 0)
5091                 return wpas_p2p_set_cross_connect(wpa_s, atoi(param));
5092
5093         if (os_strcmp(cmd, "go_apsd") == 0) {
5094                 if (os_strcmp(param, "disable") == 0)
5095                         wpa_s->set_ap_uapsd = 0;
5096                 else {
5097                         wpa_s->set_ap_uapsd = 1;
5098                         wpa_s->ap_uapsd = atoi(param);
5099                 }
5100                 return 0;
5101         }
5102
5103         if (os_strcmp(cmd, "client_apsd") == 0) {
5104                 if (os_strcmp(param, "disable") == 0)
5105                         wpa_s->set_sta_uapsd = 0;
5106                 else {
5107                         int be, bk, vi, vo;
5108                         char *pos;
5109                         /* format: BE,BK,VI,VO;max SP Length */
5110                         be = atoi(param);
5111                         pos = os_strchr(param, ',');
5112                         if (pos == NULL)
5113                                 return -1;
5114                         pos++;
5115                         bk = atoi(pos);
5116                         pos = os_strchr(pos, ',');
5117                         if (pos == NULL)
5118                                 return -1;
5119                         pos++;
5120                         vi = atoi(pos);
5121                         pos = os_strchr(pos, ',');
5122                         if (pos == NULL)
5123                                 return -1;
5124                         pos++;
5125                         vo = atoi(pos);
5126                         /* ignore max SP Length for now */
5127
5128                         wpa_s->set_sta_uapsd = 1;
5129                         wpa_s->sta_uapsd = 0;
5130                         if (be)
5131                                 wpa_s->sta_uapsd |= BIT(0);
5132                         if (bk)
5133                                 wpa_s->sta_uapsd |= BIT(1);
5134                         if (vi)
5135                                 wpa_s->sta_uapsd |= BIT(2);
5136                         if (vo)
5137                                 wpa_s->sta_uapsd |= BIT(3);
5138                 }
5139                 return 0;
5140         }
5141
5142         if (os_strcmp(cmd, "disallow_freq") == 0)
5143                 return p2p_ctrl_disallow_freq(wpa_s, param);
5144
5145         if (os_strcmp(cmd, "disc_int") == 0) {
5146                 int min_disc_int, max_disc_int, max_disc_tu;
5147                 char *pos;
5148
5149                 pos = param;
5150
5151                 min_disc_int = atoi(pos);
5152                 pos = os_strchr(pos, ' ');
5153                 if (pos == NULL)
5154                         return -1;
5155                 *pos++ = '\0';
5156
5157                 max_disc_int = atoi(pos);
5158                 pos = os_strchr(pos, ' ');
5159                 if (pos == NULL)
5160                         return -1;
5161                 *pos++ = '\0';
5162
5163                 max_disc_tu = atoi(pos);
5164
5165                 return p2p_set_disc_int(wpa_s->global->p2p, min_disc_int,
5166                                         max_disc_int, max_disc_tu);
5167         }
5168
5169         if (os_strcmp(cmd, "per_sta_psk") == 0) {
5170                 wpa_s->global->p2p_per_sta_psk = !!atoi(param);
5171                 return 0;
5172         }
5173
5174 #ifdef CONFIG_WPS_NFC
5175         if (os_strcmp(cmd, "nfc_tag") == 0)
5176                 return wpas_p2p_nfc_tag_enabled(wpa_s, !!atoi(param));
5177 #endif /* CONFIG_WPS_NFC */
5178
5179         if (os_strcmp(cmd, "disable_ip_addr_req") == 0) {
5180                 wpa_s->p2p_disable_ip_addr_req = !!atoi(param);
5181                 return 0;
5182         }
5183
5184         wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown P2P_SET field value '%s'",
5185                    cmd);
5186
5187         return -1;
5188 }
5189
5190
5191 static void p2p_ctrl_flush(struct wpa_supplicant *wpa_s)
5192 {
5193         os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
5194         wpa_s->force_long_sd = 0;
5195         wpas_p2p_stop_find(wpa_s);
5196         if (wpa_s->global->p2p)
5197                 p2p_flush(wpa_s->global->p2p);
5198 }
5199
5200
5201 static int p2p_ctrl_presence_req(struct wpa_supplicant *wpa_s, char *cmd)
5202 {
5203         char *pos, *pos2;
5204         unsigned int dur1 = 0, int1 = 0, dur2 = 0, int2 = 0;
5205
5206         if (cmd[0]) {
5207                 pos = os_strchr(cmd, ' ');
5208                 if (pos == NULL)
5209                         return -1;
5210                 *pos++ = '\0';
5211                 dur1 = atoi(cmd);
5212
5213                 pos2 = os_strchr(pos, ' ');
5214                 if (pos2)
5215                         *pos2++ = '\0';
5216                 int1 = atoi(pos);
5217         } else
5218                 pos2 = NULL;
5219
5220         if (pos2) {
5221                 pos = os_strchr(pos2, ' ');
5222                 if (pos == NULL)
5223                         return -1;
5224                 *pos++ = '\0';
5225                 dur2 = atoi(pos2);
5226                 int2 = atoi(pos);
5227         }
5228
5229         return wpas_p2p_presence_req(wpa_s, dur1, int1, dur2, int2);
5230 }
5231
5232
5233 static int p2p_ctrl_ext_listen(struct wpa_supplicant *wpa_s, char *cmd)
5234 {
5235         char *pos;
5236         unsigned int period = 0, interval = 0;
5237
5238         if (cmd[0]) {
5239                 pos = os_strchr(cmd, ' ');
5240                 if (pos == NULL)
5241                         return -1;
5242                 *pos++ = '\0';
5243                 period = atoi(cmd);
5244                 interval = atoi(pos);
5245         }
5246
5247         return wpas_p2p_ext_listen(wpa_s, period, interval);
5248 }
5249
5250
5251 static int p2p_ctrl_remove_client(struct wpa_supplicant *wpa_s, const char *cmd)
5252 {
5253         const char *pos;
5254         u8 peer[ETH_ALEN];
5255         int iface_addr = 0;
5256
5257         pos = cmd;
5258         if (os_strncmp(pos, "iface=", 6) == 0) {
5259                 iface_addr = 1;
5260                 pos += 6;
5261         }
5262         if (hwaddr_aton(pos, peer))
5263                 return -1;
5264
5265         wpas_p2p_remove_client(wpa_s, peer, iface_addr);
5266         return 0;
5267 }
5268
5269 #endif /* CONFIG_P2P */
5270
5271
5272 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s, char *val)
5273 {
5274         struct wpa_freq_range_list ranges;
5275         int *freqs = NULL;
5276         struct hostapd_hw_modes *mode;
5277         u16 i;
5278
5279         if (wpa_s->hw.modes == NULL)
5280                 return NULL;
5281
5282         os_memset(&ranges, 0, sizeof(ranges));
5283         if (freq_range_list_parse(&ranges, val) < 0)
5284                 return NULL;
5285
5286         for (i = 0; i < wpa_s->hw.num_modes; i++) {
5287                 int j;
5288
5289                 mode = &wpa_s->hw.modes[i];
5290                 for (j = 0; j < mode->num_channels; j++) {
5291                         unsigned int freq;
5292
5293                         if (mode->channels[j].flag & HOSTAPD_CHAN_DISABLED)
5294                                 continue;
5295
5296                         freq = mode->channels[j].freq;
5297                         if (!freq_range_list_includes(&ranges, freq))
5298                                 continue;
5299
5300                         int_array_add_unique(&freqs, freq);
5301                 }
5302         }
5303
5304         os_free(ranges.range);
5305         return freqs;
5306 }
5307
5308
5309 #ifdef CONFIG_INTERWORKING
5310
5311 static int ctrl_interworking_select(struct wpa_supplicant *wpa_s, char *param)
5312 {
5313         int auto_sel = 0;
5314         int *freqs = NULL;
5315
5316         if (param) {
5317                 char *pos;
5318
5319                 auto_sel = os_strstr(param, "auto") != NULL;
5320
5321                 pos = os_strstr(param, "freq=");
5322                 if (pos) {
5323                         freqs = freq_range_to_channel_list(wpa_s, pos + 5);
5324                         if (freqs == NULL)
5325                                 return -1;
5326                 }
5327
5328         }
5329
5330         return interworking_select(wpa_s, auto_sel, freqs);
5331 }
5332
5333
5334 static int ctrl_interworking_connect(struct wpa_supplicant *wpa_s, char *dst)
5335 {
5336         u8 bssid[ETH_ALEN];
5337         struct wpa_bss *bss;
5338
5339         if (hwaddr_aton(dst, bssid)) {
5340                 wpa_printf(MSG_DEBUG, "Invalid BSSID '%s'", dst);
5341                 return -1;
5342         }
5343
5344         bss = wpa_bss_get_bssid(wpa_s, bssid);
5345         if (bss == NULL) {
5346                 wpa_printf(MSG_DEBUG, "Could not find BSS " MACSTR,
5347                            MAC2STR(bssid));
5348                 return -1;
5349         }
5350
5351         return interworking_connect(wpa_s, bss);
5352 }
5353
5354
5355 static int get_anqp(struct wpa_supplicant *wpa_s, char *dst)
5356 {
5357         u8 dst_addr[ETH_ALEN];
5358         int used;
5359         char *pos;
5360 #define MAX_ANQP_INFO_ID 100
5361         u16 id[MAX_ANQP_INFO_ID];
5362         size_t num_id = 0;
5363         u32 subtypes = 0;
5364
5365         used = hwaddr_aton2(dst, dst_addr);
5366         if (used < 0)
5367                 return -1;
5368         pos = dst + used;
5369         while (num_id < MAX_ANQP_INFO_ID) {
5370                 if (os_strncmp(pos, "hs20:", 5) == 0) {
5371 #ifdef CONFIG_HS20
5372                         int num = atoi(pos + 5);
5373                         if (num <= 0 || num > 31)
5374                                 return -1;
5375                         subtypes |= BIT(num);
5376 #else /* CONFIG_HS20 */
5377                         return -1;
5378 #endif /* CONFIG_HS20 */
5379                 } else {
5380                         id[num_id] = atoi(pos);
5381                         if (id[num_id])
5382                                 num_id++;
5383                 }
5384                 pos = os_strchr(pos + 1, ',');
5385                 if (pos == NULL)
5386                         break;
5387                 pos++;
5388         }
5389
5390         if (num_id == 0)
5391                 return -1;
5392
5393         return anqp_send_req(wpa_s, dst_addr, id, num_id, subtypes);
5394 }
5395
5396
5397 static int gas_request(struct wpa_supplicant *wpa_s, char *cmd)
5398 {
5399         u8 dst_addr[ETH_ALEN];
5400         struct wpabuf *advproto, *query = NULL;
5401         int used, ret = -1;
5402         char *pos, *end;
5403         size_t len;
5404
5405         used = hwaddr_aton2(cmd, dst_addr);
5406         if (used < 0)
5407                 return -1;
5408
5409         pos = cmd + used;
5410         while (*pos == ' ')
5411                 pos++;
5412
5413         /* Advertisement Protocol ID */
5414         end = os_strchr(pos, ' ');
5415         if (end)
5416                 len = end - pos;
5417         else
5418                 len = os_strlen(pos);
5419         if (len & 0x01)
5420                 return -1;
5421         len /= 2;
5422         if (len == 0)
5423                 return -1;
5424         advproto = wpabuf_alloc(len);
5425         if (advproto == NULL)
5426                 return -1;
5427         if (hexstr2bin(pos, wpabuf_put(advproto, len), len) < 0)
5428                 goto fail;
5429
5430         if (end) {
5431                 /* Optional Query Request */
5432                 pos = end + 1;
5433                 while (*pos == ' ')
5434                         pos++;
5435
5436                 len = os_strlen(pos);
5437                 if (len) {
5438                         if (len & 0x01)
5439                                 goto fail;
5440                         len /= 2;
5441                         if (len == 0)
5442                                 goto fail;
5443                         query = wpabuf_alloc(len);
5444                         if (query == NULL)
5445                                 goto fail;
5446                         if (hexstr2bin(pos, wpabuf_put(query, len), len) < 0)
5447                                 goto fail;
5448                 }
5449         }
5450
5451         ret = gas_send_request(wpa_s, dst_addr, advproto, query);
5452
5453 fail:
5454         wpabuf_free(advproto);
5455         wpabuf_free(query);
5456
5457         return ret;
5458 }
5459
5460
5461 static int gas_response_get(struct wpa_supplicant *wpa_s, char *cmd, char *buf,
5462                             size_t buflen)
5463 {
5464         u8 addr[ETH_ALEN];
5465         int dialog_token;
5466         int used;
5467         char *pos;
5468         size_t resp_len, start, requested_len;
5469         struct wpabuf *resp;
5470         int ret;
5471
5472         used = hwaddr_aton2(cmd, addr);
5473         if (used < 0)
5474                 return -1;
5475
5476         pos = cmd + used;
5477         while (*pos == ' ')
5478                 pos++;
5479         dialog_token = atoi(pos);
5480
5481         if (wpa_s->last_gas_resp &&
5482             os_memcmp(addr, wpa_s->last_gas_addr, ETH_ALEN) == 0 &&
5483             dialog_token == wpa_s->last_gas_dialog_token)
5484                 resp = wpa_s->last_gas_resp;
5485         else if (wpa_s->prev_gas_resp &&
5486                  os_memcmp(addr, wpa_s->prev_gas_addr, ETH_ALEN) == 0 &&
5487                  dialog_token == wpa_s->prev_gas_dialog_token)
5488                 resp = wpa_s->prev_gas_resp;
5489         else
5490                 return -1;
5491
5492         resp_len = wpabuf_len(resp);
5493         start = 0;
5494         requested_len = resp_len;
5495
5496         pos = os_strchr(pos, ' ');
5497         if (pos) {
5498                 start = atoi(pos);
5499                 if (start > resp_len)
5500                         return os_snprintf(buf, buflen, "FAIL-Invalid range");
5501                 pos = os_strchr(pos, ',');
5502                 if (pos == NULL)
5503                         return -1;
5504                 pos++;
5505                 requested_len = atoi(pos);
5506                 if (start + requested_len > resp_len)
5507                         return os_snprintf(buf, buflen, "FAIL-Invalid range");
5508         }
5509
5510         if (requested_len * 2 + 1 > buflen)
5511                 return os_snprintf(buf, buflen, "FAIL-Too long response");
5512
5513         ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(resp) + start,
5514                                requested_len);
5515
5516         if (start + requested_len == resp_len) {
5517                 /*
5518                  * Free memory by dropping the response after it has been
5519                  * fetched.
5520                  */
5521                 if (resp == wpa_s->prev_gas_resp) {
5522                         wpabuf_free(wpa_s->prev_gas_resp);
5523                         wpa_s->prev_gas_resp = NULL;
5524                 } else {
5525                         wpabuf_free(wpa_s->last_gas_resp);
5526                         wpa_s->last_gas_resp = NULL;
5527                 }
5528         }
5529
5530         return ret;
5531 }
5532 #endif /* CONFIG_INTERWORKING */
5533
5534
5535 #ifdef CONFIG_HS20
5536
5537 static int get_hs20_anqp(struct wpa_supplicant *wpa_s, char *dst)
5538 {
5539         u8 dst_addr[ETH_ALEN];
5540         int used;
5541         char *pos;
5542         u32 subtypes = 0;
5543
5544         used = hwaddr_aton2(dst, dst_addr);
5545         if (used < 0)
5546                 return -1;
5547         pos = dst + used;
5548         for (;;) {
5549                 int num = atoi(pos);
5550                 if (num <= 0 || num > 31)
5551                         return -1;
5552                 subtypes |= BIT(num);
5553                 pos = os_strchr(pos + 1, ',');
5554                 if (pos == NULL)
5555                         break;
5556                 pos++;
5557         }
5558
5559         if (subtypes == 0)
5560                 return -1;
5561
5562         return hs20_anqp_send_req(wpa_s, dst_addr, subtypes, NULL, 0);
5563 }
5564
5565
5566 static int hs20_nai_home_realm_list(struct wpa_supplicant *wpa_s,
5567                                     const u8 *addr, const char *realm)
5568 {
5569         u8 *buf;
5570         size_t rlen, len;
5571         int ret;
5572
5573         rlen = os_strlen(realm);
5574         len = 3 + rlen;
5575         buf = os_malloc(len);
5576         if (buf == NULL)
5577                 return -1;
5578         buf[0] = 1; /* NAI Home Realm Count */
5579         buf[1] = 0; /* Formatted in accordance with RFC 4282 */
5580         buf[2] = rlen;
5581         os_memcpy(buf + 3, realm, rlen);
5582
5583         ret = hs20_anqp_send_req(wpa_s, addr,
5584                                  BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
5585                                  buf, len);
5586
5587         os_free(buf);
5588
5589         return ret;
5590 }
5591
5592
5593 static int hs20_get_nai_home_realm_list(struct wpa_supplicant *wpa_s,
5594                                         char *dst)
5595 {
5596         struct wpa_cred *cred = wpa_s->conf->cred;
5597         u8 dst_addr[ETH_ALEN];
5598         int used;
5599         u8 *buf;
5600         size_t len;
5601         int ret;
5602
5603         used = hwaddr_aton2(dst, dst_addr);
5604         if (used < 0)
5605                 return -1;
5606
5607         while (dst[used] == ' ')
5608                 used++;
5609         if (os_strncmp(dst + used, "realm=", 6) == 0)
5610                 return hs20_nai_home_realm_list(wpa_s, dst_addr,
5611                                                 dst + used + 6);
5612
5613         len = os_strlen(dst + used);
5614
5615         if (len == 0 && cred && cred->realm)
5616                 return hs20_nai_home_realm_list(wpa_s, dst_addr, cred->realm);
5617
5618         if (len & 1)
5619                 return -1;
5620         len /= 2;
5621         buf = os_malloc(len);
5622         if (buf == NULL)
5623                 return -1;
5624         if (hexstr2bin(dst + used, buf, len) < 0) {
5625                 os_free(buf);
5626                 return -1;
5627         }
5628
5629         ret = hs20_anqp_send_req(wpa_s, dst_addr,
5630                                  BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
5631                                  buf, len);
5632         os_free(buf);
5633
5634         return ret;
5635 }
5636
5637
5638 static int hs20_icon_request(struct wpa_supplicant *wpa_s, char *cmd)
5639 {
5640         u8 dst_addr[ETH_ALEN];
5641         int used;
5642         char *icon;
5643
5644         used = hwaddr_aton2(cmd, dst_addr);
5645         if (used < 0)
5646                 return -1;
5647
5648         while (cmd[used] == ' ')
5649                 used++;
5650         icon = &cmd[used];
5651
5652         wpa_s->fetch_osu_icon_in_progress = 0;
5653         return hs20_anqp_send_req(wpa_s, dst_addr, BIT(HS20_STYPE_ICON_REQUEST),
5654                                   (u8 *) icon, os_strlen(icon));
5655 }
5656
5657 #endif /* CONFIG_HS20 */
5658
5659
5660 static int wpa_supplicant_ctrl_iface_sta_autoconnect(
5661         struct wpa_supplicant *wpa_s, char *cmd)
5662 {
5663         wpa_s->auto_reconnect_disabled = atoi(cmd) == 0 ? 1 : 0;
5664         return 0;
5665 }
5666
5667
5668 #ifdef CONFIG_AUTOSCAN
5669
5670 static int wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant *wpa_s,
5671                                               char *cmd)
5672 {
5673         enum wpa_states state = wpa_s->wpa_state;
5674         char *new_params = NULL;
5675
5676         if (os_strlen(cmd) > 0) {
5677                 new_params = os_strdup(cmd);
5678                 if (new_params == NULL)
5679                         return -1;
5680         }
5681
5682         os_free(wpa_s->conf->autoscan);
5683         wpa_s->conf->autoscan = new_params;
5684
5685         if (wpa_s->conf->autoscan == NULL)
5686                 autoscan_deinit(wpa_s);
5687         else if (state == WPA_DISCONNECTED || state == WPA_INACTIVE)
5688                 autoscan_init(wpa_s, 1);
5689         else if (state == WPA_SCANNING)
5690                 wpa_supplicant_reinit_autoscan(wpa_s);
5691
5692         return 0;
5693 }
5694
5695 #endif /* CONFIG_AUTOSCAN */
5696
5697
5698 #ifdef CONFIG_WNM
5699
5700 static int wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant *wpa_s, char *cmd)
5701 {
5702         int enter;
5703         int intval = 0;
5704         char *pos;
5705         int ret;
5706         struct wpabuf *tfs_req = NULL;
5707
5708         if (os_strncmp(cmd, "enter", 5) == 0)
5709                 enter = 1;
5710         else if (os_strncmp(cmd, "exit", 4) == 0)
5711                 enter = 0;
5712         else
5713                 return -1;
5714
5715         pos = os_strstr(cmd, " interval=");
5716         if (pos)
5717                 intval = atoi(pos + 10);
5718
5719         pos = os_strstr(cmd, " tfs_req=");
5720         if (pos) {
5721                 char *end;
5722                 size_t len;
5723                 pos += 9;
5724                 end = os_strchr(pos, ' ');
5725                 if (end)
5726                         len = end - pos;
5727                 else
5728                         len = os_strlen(pos);
5729                 if (len & 1)
5730                         return -1;
5731                 len /= 2;
5732                 tfs_req = wpabuf_alloc(len);
5733                 if (tfs_req == NULL)
5734                         return -1;
5735                 if (hexstr2bin(pos, wpabuf_put(tfs_req, len), len) < 0) {
5736                         wpabuf_free(tfs_req);
5737                         return -1;
5738                 }
5739         }
5740
5741         ret = ieee802_11_send_wnmsleep_req(wpa_s, enter ? WNM_SLEEP_MODE_ENTER :
5742                                            WNM_SLEEP_MODE_EXIT, intval,
5743                                            tfs_req);
5744         wpabuf_free(tfs_req);
5745
5746         return ret;
5747 }
5748
5749
5750 static int wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant *wpa_s, char *cmd)
5751 {
5752         int query_reason;
5753
5754         query_reason = atoi(cmd);
5755
5756         wpa_printf(MSG_DEBUG, "CTRL_IFACE: WNM_BSS_QUERY query_reason=%d",
5757                    query_reason);
5758
5759         return wnm_send_bss_transition_mgmt_query(wpa_s, query_reason);
5760 }
5761
5762 #endif /* CONFIG_WNM */
5763
5764
5765 static int wpa_supplicant_signal_poll(struct wpa_supplicant *wpa_s, char *buf,
5766                                       size_t buflen)
5767 {
5768         struct wpa_signal_info si;
5769         int ret;
5770         char *pos, *end;
5771
5772         ret = wpa_drv_signal_poll(wpa_s, &si);
5773         if (ret)
5774                 return -1;
5775
5776         pos = buf;
5777         end = buf + buflen;
5778
5779         ret = os_snprintf(pos, end - pos, "RSSI=%d\nLINKSPEED=%d\n"
5780                           "NOISE=%d\nFREQUENCY=%u\n",
5781                           si.current_signal, si.current_txrate / 1000,
5782                           si.current_noise, si.frequency);
5783         if (os_snprintf_error(end - pos, ret))
5784                 return -1;
5785         pos += ret;
5786
5787         if (si.chanwidth != CHAN_WIDTH_UNKNOWN) {
5788                 ret = os_snprintf(pos, end - pos, "WIDTH=%s\n",
5789                                   channel_width_to_string(si.chanwidth));
5790                 if (os_snprintf_error(end - pos, ret))
5791                         return -1;
5792                 pos += ret;
5793         }
5794
5795         if (si.center_frq1 > 0 && si.center_frq2 > 0) {
5796                 ret = os_snprintf(pos, end - pos,
5797                                   "CENTER_FRQ1=%d\nCENTER_FRQ2=%d\n",
5798                                   si.center_frq1, si.center_frq2);
5799                 if (os_snprintf_error(end - pos, ret))
5800                         return -1;
5801                 pos += ret;
5802         }
5803
5804         if (si.avg_signal) {
5805                 ret = os_snprintf(pos, end - pos,
5806                                   "AVG_RSSI=%d\n", si.avg_signal);
5807                 if (os_snprintf_error(end - pos, ret))
5808                         return -1;
5809                 pos += ret;
5810         }
5811
5812         return pos - buf;
5813 }
5814
5815
5816 static int wpa_supplicant_pktcnt_poll(struct wpa_supplicant *wpa_s, char *buf,
5817                                       size_t buflen)
5818 {
5819         struct hostap_sta_driver_data sta;
5820         int ret;
5821
5822         ret = wpa_drv_pktcnt_poll(wpa_s, &sta);
5823         if (ret)
5824                 return -1;
5825
5826         ret = os_snprintf(buf, buflen, "TXGOOD=%lu\nTXBAD=%lu\nRXGOOD=%lu\n",
5827                           sta.tx_packets, sta.tx_retry_failed, sta.rx_packets);
5828         if (os_snprintf_error(buflen, ret))
5829                 return -1;
5830         return ret;
5831 }
5832
5833
5834 #ifdef ANDROID
5835 static int wpa_supplicant_driver_cmd(struct wpa_supplicant *wpa_s, char *cmd,
5836                                      char *buf, size_t buflen)
5837 {
5838         int ret;
5839
5840         ret = wpa_drv_driver_cmd(wpa_s, cmd, buf, buflen);
5841         if (ret == 0) {
5842                 if (os_strncasecmp(cmd, "COUNTRY", 7) == 0) {
5843                         struct p2p_data *p2p = wpa_s->global->p2p;
5844                         if (p2p) {
5845                                 char country[3];
5846                                 country[0] = cmd[8];
5847                                 country[1] = cmd[9];
5848                                 country[2] = 0x04;
5849                                 p2p_set_country(p2p, country);
5850                         }
5851                 }
5852                 ret = os_snprintf(buf, buflen, "%s\n", "OK");
5853         }
5854         return ret;
5855 }
5856 #endif /* ANDROID */
5857
5858
5859 static int wpa_supplicant_vendor_cmd(struct wpa_supplicant *wpa_s, char *cmd,
5860                                      char *buf, size_t buflen)
5861 {
5862         int ret;
5863         char *pos;
5864         u8 *data = NULL;
5865         unsigned int vendor_id, subcmd;
5866         struct wpabuf *reply;
5867         size_t data_len = 0;
5868
5869         /* cmd: <vendor id> <subcommand id> [<hex formatted data>] */
5870         vendor_id = strtoul(cmd, &pos, 16);
5871         if (!isblank(*pos))
5872                 return -EINVAL;
5873
5874         subcmd = strtoul(pos, &pos, 10);
5875
5876         if (*pos != '\0') {
5877                 if (!isblank(*pos++))
5878                         return -EINVAL;
5879                 data_len = os_strlen(pos);
5880         }
5881
5882         if (data_len) {
5883                 data_len /= 2;
5884                 data = os_malloc(data_len);
5885                 if (!data)
5886                         return -1;
5887
5888                 if (hexstr2bin(pos, data, data_len)) {
5889                         wpa_printf(MSG_DEBUG,
5890                                    "Vendor command: wrong parameter format");
5891                         os_free(data);
5892                         return -EINVAL;
5893                 }
5894         }
5895
5896         reply = wpabuf_alloc((buflen - 1) / 2);
5897         if (!reply) {
5898                 os_free(data);
5899                 return -1;
5900         }
5901
5902         ret = wpa_drv_vendor_cmd(wpa_s, vendor_id, subcmd, data, data_len,
5903                                  reply);
5904
5905         if (ret == 0)
5906                 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(reply),
5907                                        wpabuf_len(reply));
5908
5909         wpabuf_free(reply);
5910         os_free(data);
5911
5912         return ret;
5913 }
5914
5915
5916 static void wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant *wpa_s)
5917 {
5918         wpa_dbg(wpa_s, MSG_DEBUG, "Flush all wpa_supplicant state");
5919
5920 #ifdef CONFIG_P2P
5921         wpas_p2p_cancel(wpa_s);
5922         wpas_p2p_stop_find(wpa_s);
5923         p2p_ctrl_flush(wpa_s);
5924         wpas_p2p_group_remove(wpa_s, "*");
5925         wpas_p2p_service_flush(wpa_s);
5926         wpa_s->global->p2p_disabled = 0;
5927         wpa_s->global->p2p_per_sta_psk = 0;
5928         wpa_s->conf->num_sec_device_types = 0;
5929         wpa_s->p2p_disable_ip_addr_req = 0;
5930         os_free(wpa_s->global->p2p_go_avoid_freq.range);
5931         wpa_s->global->p2p_go_avoid_freq.range = NULL;
5932 #endif /* CONFIG_P2P */
5933
5934 #ifdef CONFIG_WPS_TESTING
5935         wps_version_number = 0x20;
5936         wps_testing_dummy_cred = 0;
5937         wps_corrupt_pkhash = 0;
5938 #endif /* CONFIG_WPS_TESTING */
5939 #ifdef CONFIG_WPS
5940         wpa_s->wps_fragment_size = 0;
5941         wpas_wps_cancel(wpa_s);
5942 #endif /* CONFIG_WPS */
5943         wpa_s->after_wps = 0;
5944         wpa_s->known_wps_freq = 0;
5945
5946 #ifdef CONFIG_TDLS
5947 #ifdef CONFIG_TDLS_TESTING
5948         extern unsigned int tdls_testing;
5949         tdls_testing = 0;
5950 #endif /* CONFIG_TDLS_TESTING */
5951         wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL);
5952         wpa_tdls_enable(wpa_s->wpa, 1);
5953 #endif /* CONFIG_TDLS */
5954
5955         eloop_cancel_timeout(wpa_supplicant_stop_countermeasures, wpa_s, NULL);
5956         wpa_supplicant_stop_countermeasures(wpa_s, NULL);
5957
5958         wpa_s->no_keep_alive = 0;
5959
5960         os_free(wpa_s->disallow_aps_bssid);
5961         wpa_s->disallow_aps_bssid = NULL;
5962         wpa_s->disallow_aps_bssid_count = 0;
5963         os_free(wpa_s->disallow_aps_ssid);
5964         wpa_s->disallow_aps_ssid = NULL;
5965         wpa_s->disallow_aps_ssid_count = 0;
5966
5967         wpa_s->set_sta_uapsd = 0;
5968         wpa_s->sta_uapsd = 0;
5969
5970         wpa_drv_radio_disable(wpa_s, 0);
5971
5972         wpa_bss_flush(wpa_s);
5973         wpa_blacklist_clear(wpa_s);
5974         wpa_s->extra_blacklist_count = 0;
5975         wpa_supplicant_ctrl_iface_remove_network(wpa_s, "all");
5976         wpa_supplicant_ctrl_iface_remove_cred(wpa_s, "all");
5977         wpa_config_flush_blobs(wpa_s->conf);
5978         wpa_s->conf->auto_interworking = 0;
5979         wpa_s->conf->okc = 0;
5980
5981         wpa_sm_pmksa_cache_flush(wpa_s->wpa, NULL);
5982         rsn_preauth_deinit(wpa_s->wpa);
5983
5984         wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME, 43200);
5985         wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD, 70);
5986         wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, 60);
5987         eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
5988
5989         radio_remove_works(wpa_s, NULL, 1);
5990         wpa_s->ext_work_in_progress = 0;
5991
5992         wpa_s->next_ssid = NULL;
5993
5994 #ifdef CONFIG_INTERWORKING
5995         hs20_cancel_fetch_osu(wpa_s);
5996 #endif /* CONFIG_INTERWORKING */
5997
5998         wpa_s->ext_mgmt_frame_handling = 0;
5999         wpa_s->ext_eapol_frame_io = 0;
6000 #ifdef CONFIG_TESTING_OPTIONS
6001         wpa_s->extra_roc_dur = 0;
6002 #endif /* CONFIG_TESTING_OPTIONS */
6003 }
6004
6005
6006 static int wpas_ctrl_radio_work_show(struct wpa_supplicant *wpa_s,
6007                                      char *buf, size_t buflen)
6008 {
6009         struct wpa_radio_work *work;
6010         char *pos, *end;
6011         struct os_reltime now, diff;
6012
6013         pos = buf;
6014         end = buf + buflen;
6015
6016         os_get_reltime(&now);
6017
6018         dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
6019         {
6020                 int ret;
6021
6022                 os_reltime_sub(&now, &work->time, &diff);
6023                 ret = os_snprintf(pos, end - pos, "%s@%s:%u:%u:%ld.%06ld\n",
6024                                   work->type, work->wpa_s->ifname, work->freq,
6025                                   work->started, diff.sec, diff.usec);
6026                 if (os_snprintf_error(end - pos, ret))
6027                         break;
6028                 pos += ret;
6029         }
6030
6031         return pos - buf;
6032 }
6033
6034
6035 static void wpas_ctrl_radio_work_timeout(void *eloop_ctx, void *timeout_ctx)
6036 {
6037         struct wpa_radio_work *work = eloop_ctx;
6038         struct wpa_external_work *ework = work->ctx;
6039
6040         wpa_dbg(work->wpa_s, MSG_DEBUG,
6041                 "Timing out external radio work %u (%s)",
6042                 ework->id, work->type);
6043         wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_TIMEOUT "%u", ework->id);
6044         work->wpa_s->ext_work_in_progress = 0;
6045         radio_work_done(work);
6046         os_free(ework);
6047 }
6048
6049
6050 static void wpas_ctrl_radio_work_cb(struct wpa_radio_work *work, int deinit)
6051 {
6052         struct wpa_external_work *ework = work->ctx;
6053
6054         if (deinit) {
6055                 if (work->started)
6056                         eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
6057                                              work, NULL);
6058
6059                 os_free(ework);
6060                 return;
6061         }
6062
6063         wpa_dbg(work->wpa_s, MSG_DEBUG, "Starting external radio work %u (%s)",
6064                 ework->id, ework->type);
6065         wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_START "%u", ework->id);
6066         work->wpa_s->ext_work_in_progress = 1;
6067         if (!ework->timeout)
6068                 ework->timeout = 10;
6069         eloop_register_timeout(ework->timeout, 0, wpas_ctrl_radio_work_timeout,
6070                                work, NULL);
6071 }
6072
6073
6074 static int wpas_ctrl_radio_work_add(struct wpa_supplicant *wpa_s, char *cmd,
6075                                     char *buf, size_t buflen)
6076 {
6077         struct wpa_external_work *ework;
6078         char *pos, *pos2;
6079         size_t type_len;
6080         int ret;
6081         unsigned int freq = 0;
6082
6083         /* format: <name> [freq=<MHz>] [timeout=<seconds>] */
6084
6085         ework = os_zalloc(sizeof(*ework));
6086         if (ework == NULL)
6087                 return -1;
6088
6089         pos = os_strchr(cmd, ' ');
6090         if (pos) {
6091                 type_len = pos - cmd;
6092                 pos++;
6093
6094                 pos2 = os_strstr(pos, "freq=");
6095                 if (pos2)
6096                         freq = atoi(pos2 + 5);
6097
6098                 pos2 = os_strstr(pos, "timeout=");
6099                 if (pos2)
6100                         ework->timeout = atoi(pos2 + 8);
6101         } else {
6102                 type_len = os_strlen(cmd);
6103         }
6104         if (4 + type_len >= sizeof(ework->type))
6105                 type_len = sizeof(ework->type) - 4 - 1;
6106         os_strlcpy(ework->type, "ext:", sizeof(ework->type));
6107         os_memcpy(ework->type + 4, cmd, type_len);
6108         ework->type[4 + type_len] = '\0';
6109
6110         wpa_s->ext_work_id++;
6111         if (wpa_s->ext_work_id == 0)
6112                 wpa_s->ext_work_id++;
6113         ework->id = wpa_s->ext_work_id;
6114
6115         if (radio_add_work(wpa_s, freq, ework->type, 0, wpas_ctrl_radio_work_cb,
6116                            ework) < 0) {
6117                 os_free(ework);
6118                 return -1;
6119         }
6120
6121         ret = os_snprintf(buf, buflen, "%u", ework->id);
6122         if (os_snprintf_error(buflen, ret))
6123                 return -1;
6124         return ret;
6125 }
6126
6127
6128 static int wpas_ctrl_radio_work_done(struct wpa_supplicant *wpa_s, char *cmd)
6129 {
6130         struct wpa_radio_work *work;
6131         unsigned int id = atoi(cmd);
6132
6133         dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
6134         {
6135                 struct wpa_external_work *ework;
6136
6137                 if (os_strncmp(work->type, "ext:", 4) != 0)
6138                         continue;
6139                 ework = work->ctx;
6140                 if (id && ework->id != id)
6141                         continue;
6142                 wpa_dbg(wpa_s, MSG_DEBUG,
6143                         "Completed external radio work %u (%s)",
6144                         ework->id, ework->type);
6145                 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout, work, NULL);
6146                 wpa_s->ext_work_in_progress = 0;
6147                 radio_work_done(work);
6148                 os_free(ework);
6149                 return 3; /* "OK\n" */
6150         }
6151
6152         return -1;
6153 }
6154
6155
6156 static int wpas_ctrl_radio_work(struct wpa_supplicant *wpa_s, char *cmd,
6157                                 char *buf, size_t buflen)
6158 {
6159         if (os_strcmp(cmd, "show") == 0)
6160                 return wpas_ctrl_radio_work_show(wpa_s, buf, buflen);
6161         if (os_strncmp(cmd, "add ", 4) == 0)
6162                 return wpas_ctrl_radio_work_add(wpa_s, cmd + 4, buf, buflen);
6163         if (os_strncmp(cmd, "done ", 5) == 0)
6164                 return wpas_ctrl_radio_work_done(wpa_s, cmd + 4);
6165         return -1;
6166 }
6167
6168
6169 void wpas_ctrl_radio_work_flush(struct wpa_supplicant *wpa_s)
6170 {
6171         struct wpa_radio_work *work, *tmp;
6172
6173         if (!wpa_s || !wpa_s->radio)
6174                 return;
6175
6176         dl_list_for_each_safe(work, tmp, &wpa_s->radio->work,
6177                               struct wpa_radio_work, list) {
6178                 struct wpa_external_work *ework;
6179
6180                 if (os_strncmp(work->type, "ext:", 4) != 0)
6181                         continue;
6182                 ework = work->ctx;
6183                 wpa_dbg(wpa_s, MSG_DEBUG,
6184                         "Flushing%s external radio work %u (%s)",
6185                         work->started ? " started" : "", ework->id,
6186                         ework->type);
6187                 if (work->started)
6188                         eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
6189                                              work, NULL);
6190                 radio_work_done(work);
6191                 os_free(ework);
6192         }
6193 }
6194
6195
6196 static void wpas_ctrl_eapol_response(void *eloop_ctx, void *timeout_ctx)
6197 {
6198         struct wpa_supplicant *wpa_s = eloop_ctx;
6199         eapol_sm_notify_ctrl_response(wpa_s->eapol);
6200 }
6201
6202
6203 static int set_scan_freqs(struct wpa_supplicant *wpa_s, char *val)
6204 {
6205         int *freqs = NULL;
6206
6207         freqs = freq_range_to_channel_list(wpa_s, val);
6208         if (freqs == NULL)
6209                 return -1;
6210
6211         os_free(wpa_s->manual_scan_freqs);
6212         wpa_s->manual_scan_freqs = freqs;
6213
6214         return 0;
6215 }
6216
6217
6218 static int scan_id_list_parse(struct wpa_supplicant *wpa_s, const char *value)
6219 {
6220         const char *pos = value;
6221
6222         while (pos) {
6223                 if (*pos == ' ' || *pos == '\0')
6224                         break;
6225                 if (wpa_s->scan_id_count == MAX_SCAN_ID)
6226                         return -1;
6227                 wpa_s->scan_id[wpa_s->scan_id_count++] = atoi(pos);
6228                 pos = os_strchr(pos, ',');
6229                 if (pos)
6230                         pos++;
6231         }
6232
6233         return 0;
6234 }
6235
6236
6237 static void wpas_ctrl_scan(struct wpa_supplicant *wpa_s, char *params,
6238                            char *reply, int reply_size, int *reply_len)
6239 {
6240         char *pos;
6241
6242         if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
6243                 *reply_len = -1;
6244                 return;
6245         }
6246
6247         wpa_s->manual_scan_passive = 0;
6248         wpa_s->manual_scan_use_id = 0;
6249         wpa_s->manual_scan_only_new = 0;
6250         wpa_s->scan_id_count = 0;
6251
6252         if (params) {
6253                 if (os_strncasecmp(params, "TYPE=ONLY", 9) == 0)
6254                         wpa_s->scan_res_handler = scan_only_handler;
6255
6256                 pos = os_strstr(params, "freq=");
6257                 if (pos && set_scan_freqs(wpa_s, pos + 5) < 0) {
6258                         *reply_len = -1;
6259                         return;
6260                 }
6261
6262                 pos = os_strstr(params, "passive=");
6263                 if (pos)
6264                         wpa_s->manual_scan_passive = !!atoi(pos + 8);
6265
6266                 pos = os_strstr(params, "use_id=");
6267                 if (pos)
6268                         wpa_s->manual_scan_use_id = atoi(pos + 7);
6269
6270                 pos = os_strstr(params, "only_new=1");
6271                 if (pos)
6272                         wpa_s->manual_scan_only_new = 1;
6273
6274                 pos = os_strstr(params, "scan_id=");
6275                 if (pos && scan_id_list_parse(wpa_s, pos + 8) < 0) {
6276                         *reply_len = -1;
6277                         return;
6278                 }
6279         } else {
6280                 os_free(wpa_s->manual_scan_freqs);
6281                 wpa_s->manual_scan_freqs = NULL;
6282                 if (wpa_s->scan_res_handler == scan_only_handler)
6283                         wpa_s->scan_res_handler = NULL;
6284         }
6285
6286         if (!wpa_s->sched_scanning && !wpa_s->scanning &&
6287             ((wpa_s->wpa_state <= WPA_SCANNING) ||
6288              (wpa_s->wpa_state == WPA_COMPLETED))) {
6289                 wpa_s->normal_scans = 0;
6290                 wpa_s->scan_req = MANUAL_SCAN_REQ;
6291                 wpa_s->after_wps = 0;
6292                 wpa_s->known_wps_freq = 0;
6293                 wpa_supplicant_req_scan(wpa_s, 0, 0);
6294                 if (wpa_s->manual_scan_use_id) {
6295                         wpa_s->manual_scan_id++;
6296                         wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
6297                                 wpa_s->manual_scan_id);
6298                         *reply_len = os_snprintf(reply, reply_size, "%u\n",
6299                                                  wpa_s->manual_scan_id);
6300                 }
6301         } else if (wpa_s->sched_scanning) {
6302                 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to allow requested full scan to proceed");
6303                 wpa_supplicant_cancel_sched_scan(wpa_s);
6304                 wpa_s->scan_req = MANUAL_SCAN_REQ;
6305                 wpa_supplicant_req_scan(wpa_s, 0, 0);
6306                 if (wpa_s->manual_scan_use_id) {
6307                         wpa_s->manual_scan_id++;
6308                         *reply_len = os_snprintf(reply, reply_size, "%u\n",
6309                                                  wpa_s->manual_scan_id);
6310                         wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
6311                                 wpa_s->manual_scan_id);
6312                 }
6313         } else {
6314                 wpa_printf(MSG_DEBUG, "Ongoing scan action - reject new request");
6315                 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
6316         }
6317 }
6318
6319
6320 #ifdef CONFIG_TESTING_OPTIONS
6321
6322 static void wpas_ctrl_iface_mgmt_tx_cb(struct wpa_supplicant *wpa_s,
6323                                        unsigned int freq, const u8 *dst,
6324                                        const u8 *src, const u8 *bssid,
6325                                        const u8 *data, size_t data_len,
6326                                        enum offchannel_send_action_result
6327                                        result)
6328 {
6329         wpa_msg(wpa_s, MSG_INFO, "MGMT-TX-STATUS freq=%u dst=" MACSTR
6330                 " src=" MACSTR " bssid=" MACSTR " result=%s",
6331                 freq, MAC2STR(dst), MAC2STR(src), MAC2STR(bssid),
6332                 result == OFFCHANNEL_SEND_ACTION_SUCCESS ?
6333                 "SUCCESS" : (result == OFFCHANNEL_SEND_ACTION_NO_ACK ?
6334                              "NO_ACK" : "FAILED"));
6335 }
6336
6337
6338 static int wpas_ctrl_iface_mgmt_tx(struct wpa_supplicant *wpa_s, char *cmd)
6339 {
6340         char *pos, *param;
6341         size_t len;
6342         u8 *buf, da[ETH_ALEN], bssid[ETH_ALEN];
6343         int res, used;
6344         int freq = 0, no_cck = 0, wait_time = 0;
6345
6346         /* <DA> <BSSID> [freq=<MHz>] [wait_time=<ms>] [no_cck=1]
6347          *    <action=Action frame payload> */
6348
6349         wpa_printf(MSG_DEBUG, "External MGMT TX: %s", cmd);
6350
6351         pos = cmd;
6352         used = hwaddr_aton2(pos, da);
6353         if (used < 0)
6354                 return -1;
6355         pos += used;
6356         while (*pos == ' ')
6357                 pos++;
6358         used = hwaddr_aton2(pos, bssid);
6359         if (used < 0)
6360                 return -1;
6361         pos += used;
6362
6363         param = os_strstr(pos, " freq=");
6364         if (param) {
6365                 param += 6;
6366                 freq = atoi(param);
6367         }
6368
6369         param = os_strstr(pos, " no_cck=");
6370         if (param) {
6371                 param += 8;
6372                 no_cck = atoi(param);
6373         }
6374
6375         param = os_strstr(pos, " wait_time=");
6376         if (param) {
6377                 param += 11;
6378                 wait_time = atoi(param);
6379         }
6380
6381         param = os_strstr(pos, " action=");
6382         if (param == NULL)
6383                 return -1;
6384         param += 8;
6385
6386         len = os_strlen(param);
6387         if (len & 1)
6388                 return -1;
6389         len /= 2;
6390
6391         buf = os_malloc(len);
6392         if (buf == NULL)
6393                 return -1;
6394
6395         if (hexstr2bin(param, buf, len) < 0) {
6396                 os_free(buf);
6397                 return -1;
6398         }
6399
6400         res = offchannel_send_action(wpa_s, freq, da, wpa_s->own_addr, bssid,
6401                                      buf, len, wait_time,
6402                                      wpas_ctrl_iface_mgmt_tx_cb, no_cck);
6403         os_free(buf);
6404         return res;
6405 }
6406
6407
6408 static void wpas_ctrl_iface_mgmt_tx_done(struct wpa_supplicant *wpa_s)
6409 {
6410         wpa_printf(MSG_DEBUG, "External MGMT TX - done waiting");
6411         offchannel_send_action_done(wpa_s);
6412 }
6413
6414
6415 static int wpas_ctrl_iface_driver_event(struct wpa_supplicant *wpa_s, char *cmd)
6416 {
6417         char *pos, *param;
6418         union wpa_event_data event;
6419         enum wpa_event_type ev;
6420
6421         /* <event name> [parameters..] */
6422
6423         wpa_dbg(wpa_s, MSG_DEBUG, "Testing - external driver event: %s", cmd);
6424
6425         pos = cmd;
6426         param = os_strchr(pos, ' ');
6427         if (param)
6428                 *param++ = '\0';
6429
6430         os_memset(&event, 0, sizeof(event));
6431
6432         if (os_strcmp(cmd, "INTERFACE_ENABLED") == 0) {
6433                 ev = EVENT_INTERFACE_ENABLED;
6434         } else if (os_strcmp(cmd, "INTERFACE_DISABLED") == 0) {
6435                 ev = EVENT_INTERFACE_DISABLED;
6436         } else if (os_strcmp(cmd, "AVOID_FREQUENCIES") == 0) {
6437                 ev = EVENT_AVOID_FREQUENCIES;
6438                 if (param == NULL)
6439                         param = "";
6440                 if (freq_range_list_parse(&event.freq_range, param) < 0)
6441                         return -1;
6442                 wpa_supplicant_event(wpa_s, ev, &event);
6443                 os_free(event.freq_range.range);
6444                 return 0;
6445         } else {
6446                 wpa_dbg(wpa_s, MSG_DEBUG, "Testing - unknown driver event: %s",
6447                         cmd);
6448                 return -1;
6449         }
6450
6451         wpa_supplicant_event(wpa_s, ev, &event);
6452
6453         return 0;
6454 }
6455
6456
6457 static int wpas_ctrl_iface_eapol_rx(struct wpa_supplicant *wpa_s, char *cmd)
6458 {
6459         char *pos;
6460         u8 src[ETH_ALEN], *buf;
6461         int used;
6462         size_t len;
6463
6464         wpa_printf(MSG_DEBUG, "External EAPOL RX: %s", cmd);
6465
6466         pos = cmd;
6467         used = hwaddr_aton2(pos, src);
6468         if (used < 0)
6469                 return -1;
6470         pos += used;
6471         while (*pos == ' ')
6472                 pos++;
6473
6474         len = os_strlen(pos);
6475         if (len & 1)
6476                 return -1;
6477         len /= 2;
6478
6479         buf = os_malloc(len);
6480         if (buf == NULL)
6481                 return -1;
6482
6483         if (hexstr2bin(pos, buf, len) < 0) {
6484                 os_free(buf);
6485                 return -1;
6486         }
6487
6488         wpa_supplicant_rx_eapol(wpa_s, src, buf, len);
6489         os_free(buf);
6490
6491         return 0;
6492 }
6493
6494
6495 static u16 ipv4_hdr_checksum(const void *buf, size_t len)
6496 {
6497         size_t i;
6498         u32 sum = 0;
6499         const u16 *pos = buf;
6500
6501         for (i = 0; i < len / 2; i++)
6502                 sum += *pos++;
6503
6504         while (sum >> 16)
6505                 sum = (sum & 0xffff) + (sum >> 16);
6506
6507         return sum ^ 0xffff;
6508 }
6509
6510
6511 #define HWSIM_PACKETLEN 1500
6512 #define HWSIM_IP_LEN (HWSIM_PACKETLEN - sizeof(struct ether_header))
6513
6514 void wpas_data_test_rx(void *ctx, const u8 *src_addr, const u8 *buf, size_t len)
6515 {
6516         struct wpa_supplicant *wpa_s = ctx;
6517         const struct ether_header *eth;
6518         const struct iphdr *ip;
6519         const u8 *pos;
6520         unsigned int i;
6521
6522         if (len != HWSIM_PACKETLEN)
6523                 return;
6524
6525         eth = (const struct ether_header *) buf;
6526         ip = (const struct iphdr *) (eth + 1);
6527         pos = (const u8 *) (ip + 1);
6528
6529         if (ip->ihl != 5 || ip->version != 4 ||
6530             ntohs(ip->tot_len) != HWSIM_IP_LEN)
6531                 return;
6532
6533         for (i = 0; i < HWSIM_IP_LEN - sizeof(*ip); i++) {
6534                 if (*pos != (u8) i)
6535                         return;
6536                 pos++;
6537         }
6538
6539         wpa_msg(wpa_s, MSG_INFO, "DATA-TEST-RX " MACSTR " " MACSTR,
6540                 MAC2STR(eth->ether_dhost), MAC2STR(eth->ether_shost));
6541 }
6542
6543
6544 static int wpas_ctrl_iface_data_test_config(struct wpa_supplicant *wpa_s,
6545                                             char *cmd)
6546 {
6547         int enabled = atoi(cmd);
6548
6549         if (!enabled) {
6550                 if (wpa_s->l2_test) {
6551                         l2_packet_deinit(wpa_s->l2_test);
6552                         wpa_s->l2_test = NULL;
6553                         wpa_dbg(wpa_s, MSG_DEBUG, "test data: Disabled");
6554                 }
6555                 return 0;
6556         }
6557
6558         if (wpa_s->l2_test)
6559                 return 0;
6560
6561         wpa_s->l2_test = l2_packet_init(wpa_s->ifname, wpa_s->own_addr,
6562                                         ETHERTYPE_IP, wpas_data_test_rx,
6563                                         wpa_s, 1);
6564         if (wpa_s->l2_test == NULL)
6565                 return -1;
6566
6567         wpa_dbg(wpa_s, MSG_DEBUG, "test data: Enabled");
6568
6569         return 0;
6570 }
6571
6572
6573 static int wpas_ctrl_iface_data_test_tx(struct wpa_supplicant *wpa_s, char *cmd)
6574 {
6575         u8 dst[ETH_ALEN], src[ETH_ALEN];
6576         char *pos;
6577         int used;
6578         long int val;
6579         u8 tos;
6580         u8 buf[HWSIM_PACKETLEN];
6581         struct ether_header *eth;
6582         struct iphdr *ip;
6583         u8 *dpos;
6584         unsigned int i;
6585
6586         if (wpa_s->l2_test == NULL)
6587                 return -1;
6588
6589         /* format: <dst> <src> <tos> */
6590
6591         pos = cmd;
6592         used = hwaddr_aton2(pos, dst);
6593         if (used < 0)
6594                 return -1;
6595         pos += used;
6596         while (*pos == ' ')
6597                 pos++;
6598         used = hwaddr_aton2(pos, src);
6599         if (used < 0)
6600                 return -1;
6601         pos += used;
6602
6603         val = strtol(pos, NULL, 0);
6604         if (val < 0 || val > 0xff)
6605                 return -1;
6606         tos = val;
6607
6608         eth = (struct ether_header *) buf;
6609         os_memcpy(eth->ether_dhost, dst, ETH_ALEN);
6610         os_memcpy(eth->ether_shost, src, ETH_ALEN);
6611         eth->ether_type = htons(ETHERTYPE_IP);
6612         ip = (struct iphdr *) (eth + 1);
6613         os_memset(ip, 0, sizeof(*ip));
6614         ip->ihl = 5;
6615         ip->version = 4;
6616         ip->ttl = 64;
6617         ip->tos = tos;
6618         ip->tot_len = htons(HWSIM_IP_LEN);
6619         ip->protocol = 1;
6620         ip->saddr = htonl(192 << 24 | 168 << 16 | 1 << 8 | 1);
6621         ip->daddr = htonl(192 << 24 | 168 << 16 | 1 << 8 | 2);
6622         ip->check = ipv4_hdr_checksum(ip, sizeof(*ip));
6623         dpos = (u8 *) (ip + 1);
6624         for (i = 0; i < HWSIM_IP_LEN - sizeof(*ip); i++)
6625                 *dpos++ = i;
6626
6627         if (l2_packet_send(wpa_s->l2_test, dst, ETHERTYPE_IP, buf,
6628                            HWSIM_PACKETLEN) < 0)
6629                 return -1;
6630
6631         wpa_dbg(wpa_s, MSG_DEBUG, "test data: TX dst=" MACSTR " src=" MACSTR
6632                 " tos=0x%x", MAC2STR(dst), MAC2STR(src), tos);
6633
6634         return 0;
6635 }
6636
6637
6638 static int wpas_ctrl_iface_data_test_frame(struct wpa_supplicant *wpa_s,
6639                                            char *cmd)
6640 {
6641         u8 *buf;
6642         struct ether_header *eth;
6643         struct l2_packet_data *l2 = NULL;
6644         size_t len;
6645         u16 ethertype;
6646         int res = -1;
6647
6648         len = os_strlen(cmd);
6649         if (len & 1 || len < ETH_HLEN * 2)
6650                 return -1;
6651         len /= 2;
6652
6653         buf = os_malloc(len);
6654         if (buf == NULL)
6655                 return -1;
6656
6657         if (hexstr2bin(cmd, buf, len) < 0)
6658                 goto done;
6659
6660         eth = (struct ether_header *) buf;
6661         ethertype = ntohs(eth->ether_type);
6662
6663         l2 = l2_packet_init(wpa_s->ifname, wpa_s->own_addr, ethertype,
6664                             wpas_data_test_rx, wpa_s, 1);
6665         if (l2 == NULL)
6666                 goto done;
6667
6668         res = l2_packet_send(l2, eth->ether_dhost, ethertype, buf, len);
6669         wpa_dbg(wpa_s, MSG_DEBUG, "test data: TX frame res=%d", res);
6670 done:
6671         if (l2)
6672                 l2_packet_deinit(l2);
6673         os_free(buf);
6674
6675         return res < 0 ? -1 : 0;
6676 }
6677
6678 #endif /* CONFIG_TESTING_OPTIONS */
6679
6680
6681 static void wpas_ctrl_vendor_elem_update(struct wpa_supplicant *wpa_s)
6682 {
6683         unsigned int i;
6684         char buf[30];
6685
6686         wpa_printf(MSG_DEBUG, "Update vendor elements");
6687
6688         for (i = 0; i < NUM_VENDOR_ELEM_FRAMES; i++) {
6689                 if (wpa_s->vendor_elem[i]) {
6690                         os_snprintf(buf, sizeof(buf), "frame[%u]", i);
6691                         wpa_hexdump_buf(MSG_DEBUG, buf, wpa_s->vendor_elem[i]);
6692                 }
6693         }
6694
6695 #ifdef CONFIG_P2P
6696         if (wpa_s->parent == wpa_s &&
6697             wpa_s->global->p2p &&
6698             !wpa_s->global->p2p_disabled)
6699                 p2p_set_vendor_elems(wpa_s->global->p2p, wpa_s->vendor_elem);
6700 #endif /* CONFIG_P2P */
6701 }
6702
6703
6704 static struct wpa_supplicant *
6705 wpas_ctrl_vendor_elem_iface(struct wpa_supplicant *wpa_s,
6706                             enum wpa_vendor_elem_frame frame)
6707 {
6708         switch (frame) {
6709 #ifdef CONFIG_P2P
6710         case VENDOR_ELEM_PROBE_REQ_P2P:
6711         case VENDOR_ELEM_PROBE_RESP_P2P:
6712         case VENDOR_ELEM_PROBE_RESP_P2P_GO:
6713         case VENDOR_ELEM_BEACON_P2P_GO:
6714         case VENDOR_ELEM_P2P_PD_REQ:
6715         case VENDOR_ELEM_P2P_PD_RESP:
6716         case VENDOR_ELEM_P2P_GO_NEG_REQ:
6717         case VENDOR_ELEM_P2P_GO_NEG_RESP:
6718         case VENDOR_ELEM_P2P_GO_NEG_CONF:
6719         case VENDOR_ELEM_P2P_INV_REQ:
6720         case VENDOR_ELEM_P2P_INV_RESP:
6721         case VENDOR_ELEM_P2P_ASSOC_REQ:
6722                 return wpa_s->parent;
6723 #endif /* CONFIG_P2P */
6724         default:
6725                 return wpa_s;
6726         }
6727 }
6728
6729
6730 static int wpas_ctrl_vendor_elem_add(struct wpa_supplicant *wpa_s, char *cmd)
6731 {
6732         char *pos = cmd;
6733         int frame;
6734         size_t len;
6735         struct wpabuf *buf;
6736         struct ieee802_11_elems elems;
6737
6738         frame = atoi(pos);
6739         if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
6740                 return -1;
6741         wpa_s = wpas_ctrl_vendor_elem_iface(wpa_s, frame);
6742
6743         pos = os_strchr(pos, ' ');
6744         if (pos == NULL)
6745                 return -1;
6746         pos++;
6747
6748         len = os_strlen(pos);
6749         if (len == 0)
6750                 return 0;
6751         if (len & 1)
6752                 return -1;
6753         len /= 2;
6754
6755         buf = wpabuf_alloc(len);
6756         if (buf == NULL)
6757                 return -1;
6758
6759         if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
6760                 wpabuf_free(buf);
6761                 return -1;
6762         }
6763
6764         if (ieee802_11_parse_elems(wpabuf_head_u8(buf), len, &elems, 0) ==
6765             ParseFailed) {
6766                 wpabuf_free(buf);
6767                 return -1;
6768         }
6769
6770         if (wpa_s->vendor_elem[frame] == NULL) {
6771                 wpa_s->vendor_elem[frame] = buf;
6772                 wpas_ctrl_vendor_elem_update(wpa_s);
6773                 return 0;
6774         }
6775
6776         if (wpabuf_resize(&wpa_s->vendor_elem[frame], len) < 0) {
6777                 wpabuf_free(buf);
6778                 return -1;
6779         }
6780
6781         wpabuf_put_buf(wpa_s->vendor_elem[frame], buf);
6782         wpabuf_free(buf);
6783         wpas_ctrl_vendor_elem_update(wpa_s);
6784
6785         return 0;
6786 }
6787
6788
6789 static int wpas_ctrl_vendor_elem_get(struct wpa_supplicant *wpa_s, char *cmd,
6790                                      char *buf, size_t buflen)
6791 {
6792         int frame = atoi(cmd);
6793
6794         if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
6795                 return -1;
6796         wpa_s = wpas_ctrl_vendor_elem_iface(wpa_s, frame);
6797
6798         if (wpa_s->vendor_elem[frame] == NULL)
6799                 return 0;
6800
6801         return wpa_snprintf_hex(buf, buflen,
6802                                 wpabuf_head_u8(wpa_s->vendor_elem[frame]),
6803                                 wpabuf_len(wpa_s->vendor_elem[frame]));
6804 }
6805
6806
6807 static int wpas_ctrl_vendor_elem_remove(struct wpa_supplicant *wpa_s, char *cmd)
6808 {
6809         char *pos = cmd;
6810         int frame;
6811         size_t len;
6812         u8 *buf;
6813         struct ieee802_11_elems elems;
6814         u8 *ie, *end;
6815
6816         frame = atoi(pos);
6817         if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
6818                 return -1;
6819         wpa_s = wpas_ctrl_vendor_elem_iface(wpa_s, frame);
6820
6821         pos = os_strchr(pos, ' ');
6822         if (pos == NULL)
6823                 return -1;
6824         pos++;
6825
6826         if (*pos == '*') {
6827                 wpabuf_free(wpa_s->vendor_elem[frame]);
6828                 wpa_s->vendor_elem[frame] = NULL;
6829                 wpas_ctrl_vendor_elem_update(wpa_s);
6830                 return 0;
6831         }
6832
6833         if (wpa_s->vendor_elem[frame] == NULL)
6834                 return -1;
6835
6836         len = os_strlen(pos);
6837         if (len == 0)
6838                 return 0;
6839         if (len & 1)
6840                 return -1;
6841         len /= 2;
6842
6843         buf = os_malloc(len);
6844         if (buf == NULL)
6845                 return -1;
6846
6847         if (hexstr2bin(pos, buf, len) < 0) {
6848                 os_free(buf);
6849                 return -1;
6850         }
6851
6852         if (ieee802_11_parse_elems(buf, len, &elems, 0) == ParseFailed) {
6853                 os_free(buf);
6854                 return -1;
6855         }
6856
6857         ie = wpabuf_mhead_u8(wpa_s->vendor_elem[frame]);
6858         end = ie + wpabuf_len(wpa_s->vendor_elem[frame]);
6859
6860         for (; ie + 1 < end; ie += 2 + ie[1]) {
6861                 if (ie + len > end)
6862                         break;
6863                 if (os_memcmp(ie, buf, len) != 0)
6864                         continue;
6865
6866                 if (wpabuf_len(wpa_s->vendor_elem[frame]) == len) {
6867                         wpabuf_free(wpa_s->vendor_elem[frame]);
6868                         wpa_s->vendor_elem[frame] = NULL;
6869                 } else {
6870                         os_memmove(ie, ie + len,
6871                                    end - (ie + len));
6872                         wpa_s->vendor_elem[frame]->used -= len;
6873                 }
6874                 os_free(buf);
6875                 wpas_ctrl_vendor_elem_update(wpa_s);
6876                 return 0;
6877         }
6878
6879         os_free(buf);
6880
6881         return -1;
6882 }
6883
6884
6885 static void wpas_ctrl_neighbor_rep_cb(void *ctx, struct wpabuf *neighbor_rep)
6886 {
6887         struct wpa_supplicant *wpa_s = ctx;
6888
6889         if (neighbor_rep) {
6890                 wpa_msg_ctrl(wpa_s, MSG_INFO, RRM_EVENT_NEIGHBOR_REP_RXED
6891                              "length=%u",
6892                              (unsigned int) wpabuf_len(neighbor_rep));
6893                 wpabuf_free(neighbor_rep);
6894         } else {
6895                 wpa_msg_ctrl(wpa_s, MSG_INFO, RRM_EVENT_NEIGHBOR_REP_FAILED);
6896         }
6897 }
6898
6899
6900 static int wpas_ctrl_iface_send_neigbor_rep(struct wpa_supplicant *wpa_s,
6901                                             char *cmd)
6902 {
6903         struct wpa_ssid ssid;
6904         struct wpa_ssid *ssid_p = NULL;
6905         int ret = 0;
6906
6907         if (os_strncmp(cmd, " ssid=", 6) == 0) {
6908                 ssid.ssid_len = os_strlen(cmd + 6);
6909                 if (ssid.ssid_len > 32)
6910                         return -1;
6911                 ssid.ssid = (u8 *) (cmd + 6);
6912                 ssid_p = &ssid;
6913         }
6914
6915         ret = wpas_rrm_send_neighbor_rep_request(wpa_s, ssid_p,
6916                                                  wpas_ctrl_neighbor_rep_cb,
6917                                                  wpa_s);
6918
6919         return ret;
6920 }
6921
6922
6923 static int wpas_ctrl_iface_erp_flush(struct wpa_supplicant *wpa_s)
6924 {
6925         eapol_sm_erp_flush(wpa_s->eapol);
6926         return 0;
6927 }
6928
6929
6930 char * wpa_supplicant_ctrl_iface_process(struct wpa_supplicant *wpa_s,
6931                                          char *buf, size_t *resp_len)
6932 {
6933         char *reply;
6934         const int reply_size = 4096;
6935         int reply_len;
6936
6937         if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0 ||
6938             os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
6939                 if (wpa_debug_show_keys)
6940                         wpa_dbg(wpa_s, MSG_DEBUG,
6941                                 "Control interface command '%s'", buf);
6942                 else
6943                         wpa_dbg(wpa_s, MSG_DEBUG,
6944                                 "Control interface command '%s [REMOVED]'",
6945                                 os_strncmp(buf, WPA_CTRL_RSP,
6946                                            os_strlen(WPA_CTRL_RSP)) == 0 ?
6947                                 WPA_CTRL_RSP : "SET_NETWORK");
6948         } else if (os_strncmp(buf, "WPS_NFC_TAG_READ", 16) == 0 ||
6949                    os_strncmp(buf, "NFC_REPORT_HANDOVER", 19) == 0) {
6950                 wpa_hexdump_ascii_key(MSG_DEBUG, "RX ctrl_iface",
6951                                       (const u8 *) buf, os_strlen(buf));
6952         } else {
6953                 int level = MSG_DEBUG;
6954                 if (os_strcmp(buf, "PING") == 0)
6955                         level = MSG_EXCESSIVE;
6956                 wpa_dbg(wpa_s, level, "Control interface command '%s'", buf);
6957         }
6958
6959         reply = os_malloc(reply_size);
6960         if (reply == NULL) {
6961                 *resp_len = 1;
6962                 return NULL;
6963         }
6964
6965         os_memcpy(reply, "OK\n", 3);
6966         reply_len = 3;
6967
6968         if (os_strcmp(buf, "PING") == 0) {
6969                 os_memcpy(reply, "PONG\n", 5);
6970                 reply_len = 5;
6971         } else if (os_strcmp(buf, "IFNAME") == 0) {
6972                 reply_len = os_strlen(wpa_s->ifname);
6973                 os_memcpy(reply, wpa_s->ifname, reply_len);
6974         } else if (os_strncmp(buf, "RELOG", 5) == 0) {
6975                 if (wpa_debug_reopen_file() < 0)
6976                         reply_len = -1;
6977         } else if (os_strncmp(buf, "NOTE ", 5) == 0) {
6978                 wpa_printf(MSG_INFO, "NOTE: %s", buf + 5);
6979         } else if (os_strcmp(buf, "MIB") == 0) {
6980                 reply_len = wpa_sm_get_mib(wpa_s->wpa, reply, reply_size);
6981                 if (reply_len >= 0) {
6982                         int res;
6983                         res = eapol_sm_get_mib(wpa_s->eapol, reply + reply_len,
6984                                                reply_size - reply_len);
6985                         if (res < 0)
6986                                 reply_len = -1;
6987                         else
6988                                 reply_len += res;
6989                 }
6990         } else if (os_strncmp(buf, "STATUS", 6) == 0) {
6991                 reply_len = wpa_supplicant_ctrl_iface_status(
6992                         wpa_s, buf + 6, reply, reply_size);
6993         } else if (os_strcmp(buf, "PMKSA") == 0) {
6994                 reply_len = wpa_sm_pmksa_cache_list(wpa_s->wpa, reply,
6995                                                     reply_size);
6996         } else if (os_strcmp(buf, "PMKSA_FLUSH") == 0) {
6997                 wpa_sm_pmksa_cache_flush(wpa_s->wpa, NULL);
6998         } else if (os_strncmp(buf, "SET ", 4) == 0) {
6999                 if (wpa_supplicant_ctrl_iface_set(wpa_s, buf + 4))
7000                         reply_len = -1;
7001         } else if (os_strncmp(buf, "GET ", 4) == 0) {
7002                 reply_len = wpa_supplicant_ctrl_iface_get(wpa_s, buf + 4,
7003                                                           reply, reply_size);
7004         } else if (os_strcmp(buf, "LOGON") == 0) {
7005                 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
7006         } else if (os_strcmp(buf, "LOGOFF") == 0) {
7007                 eapol_sm_notify_logoff(wpa_s->eapol, TRUE);
7008         } else if (os_strcmp(buf, "REASSOCIATE") == 0) {
7009                 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
7010                         reply_len = -1;
7011                 else
7012                         wpas_request_connection(wpa_s);
7013         } else if (os_strcmp(buf, "REATTACH") == 0) {
7014                 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED ||
7015                     !wpa_s->current_ssid)
7016                         reply_len = -1;
7017                 else {
7018                         wpa_s->reattach = 1;
7019                         wpas_request_connection(wpa_s);
7020                 }
7021         } else if (os_strcmp(buf, "RECONNECT") == 0) {
7022                 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
7023                         reply_len = -1;
7024                 else if (wpa_s->disconnected)
7025                         wpas_request_connection(wpa_s);
7026 #ifdef IEEE8021X_EAPOL
7027         } else if (os_strncmp(buf, "PREAUTH ", 8) == 0) {
7028                 if (wpa_supplicant_ctrl_iface_preauth(wpa_s, buf + 8))
7029                         reply_len = -1;
7030 #endif /* IEEE8021X_EAPOL */
7031 #ifdef CONFIG_PEERKEY
7032         } else if (os_strncmp(buf, "STKSTART ", 9) == 0) {
7033                 if (wpa_supplicant_ctrl_iface_stkstart(wpa_s, buf + 9))
7034                         reply_len = -1;
7035 #endif /* CONFIG_PEERKEY */
7036 #ifdef CONFIG_IEEE80211R
7037         } else if (os_strncmp(buf, "FT_DS ", 6) == 0) {
7038                 if (wpa_supplicant_ctrl_iface_ft_ds(wpa_s, buf + 6))
7039                         reply_len = -1;
7040 #endif /* CONFIG_IEEE80211R */
7041 #ifdef CONFIG_WPS
7042         } else if (os_strcmp(buf, "WPS_PBC") == 0) {
7043                 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, NULL);
7044                 if (res == -2) {
7045                         os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
7046                         reply_len = 17;
7047                 } else if (res)
7048                         reply_len = -1;
7049         } else if (os_strncmp(buf, "WPS_PBC ", 8) == 0) {
7050                 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, buf + 8);
7051                 if (res == -2) {
7052                         os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
7053                         reply_len = 17;
7054                 } else if (res)
7055                         reply_len = -1;
7056         } else if (os_strncmp(buf, "WPS_PIN ", 8) == 0) {
7057                 reply_len = wpa_supplicant_ctrl_iface_wps_pin(wpa_s, buf + 8,
7058                                                               reply,
7059                                                               reply_size);
7060         } else if (os_strncmp(buf, "WPS_CHECK_PIN ", 14) == 0) {
7061                 reply_len = wpa_supplicant_ctrl_iface_wps_check_pin(
7062                         wpa_s, buf + 14, reply, reply_size);
7063         } else if (os_strcmp(buf, "WPS_CANCEL") == 0) {
7064                 if (wpas_wps_cancel(wpa_s))
7065                         reply_len = -1;
7066 #ifdef CONFIG_WPS_NFC
7067         } else if (os_strcmp(buf, "WPS_NFC") == 0) {
7068                 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, NULL))
7069                         reply_len = -1;
7070         } else if (os_strncmp(buf, "WPS_NFC ", 8) == 0) {
7071                 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, buf + 8))
7072                         reply_len = -1;
7073         } else if (os_strncmp(buf, "WPS_NFC_CONFIG_TOKEN ", 21) == 0) {
7074                 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_config_token(
7075                         wpa_s, buf + 21, reply, reply_size);
7076         } else if (os_strncmp(buf, "WPS_NFC_TOKEN ", 14) == 0) {
7077                 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_token(
7078                         wpa_s, buf + 14, reply, reply_size);
7079         } else if (os_strncmp(buf, "WPS_NFC_TAG_READ ", 17) == 0) {
7080                 if (wpa_supplicant_ctrl_iface_wps_nfc_tag_read(wpa_s,
7081                                                                buf + 17))
7082                         reply_len = -1;
7083         } else if (os_strncmp(buf, "NFC_GET_HANDOVER_REQ ", 21) == 0) {
7084                 reply_len = wpas_ctrl_nfc_get_handover_req(
7085                         wpa_s, buf + 21, reply, reply_size);
7086         } else if (os_strncmp(buf, "NFC_GET_HANDOVER_SEL ", 21) == 0) {
7087                 reply_len = wpas_ctrl_nfc_get_handover_sel(
7088                         wpa_s, buf + 21, reply, reply_size);
7089         } else if (os_strncmp(buf, "NFC_REPORT_HANDOVER ", 20) == 0) {
7090                 if (wpas_ctrl_nfc_report_handover(wpa_s, buf + 20))
7091                         reply_len = -1;
7092 #endif /* CONFIG_WPS_NFC */
7093         } else if (os_strncmp(buf, "WPS_REG ", 8) == 0) {
7094                 if (wpa_supplicant_ctrl_iface_wps_reg(wpa_s, buf + 8))
7095                         reply_len = -1;
7096 #ifdef CONFIG_AP
7097         } else if (os_strncmp(buf, "WPS_AP_PIN ", 11) == 0) {
7098                 reply_len = wpa_supplicant_ctrl_iface_wps_ap_pin(
7099                         wpa_s, buf + 11, reply, reply_size);
7100 #endif /* CONFIG_AP */
7101 #ifdef CONFIG_WPS_ER
7102         } else if (os_strcmp(buf, "WPS_ER_START") == 0) {
7103                 if (wpas_wps_er_start(wpa_s, NULL))
7104                         reply_len = -1;
7105         } else if (os_strncmp(buf, "WPS_ER_START ", 13) == 0) {
7106                 if (wpas_wps_er_start(wpa_s, buf + 13))
7107                         reply_len = -1;
7108         } else if (os_strcmp(buf, "WPS_ER_STOP") == 0) {
7109                 if (wpas_wps_er_stop(wpa_s))
7110                         reply_len = -1;
7111         } else if (os_strncmp(buf, "WPS_ER_PIN ", 11) == 0) {
7112                 if (wpa_supplicant_ctrl_iface_wps_er_pin(wpa_s, buf + 11))
7113                         reply_len = -1;
7114         } else if (os_strncmp(buf, "WPS_ER_PBC ", 11) == 0) {
7115                 int ret = wpas_wps_er_pbc(wpa_s, buf + 11);
7116                 if (ret == -2) {
7117                         os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
7118                         reply_len = 17;
7119                 } else if (ret == -3) {
7120                         os_memcpy(reply, "FAIL-UNKNOWN-UUID\n", 18);
7121                         reply_len = 18;
7122                 } else if (ret == -4) {
7123                         os_memcpy(reply, "FAIL-NO-AP-SETTINGS\n", 20);
7124                         reply_len = 20;
7125                 } else if (ret)
7126                         reply_len = -1;
7127         } else if (os_strncmp(buf, "WPS_ER_LEARN ", 13) == 0) {
7128                 if (wpa_supplicant_ctrl_iface_wps_er_learn(wpa_s, buf + 13))
7129                         reply_len = -1;
7130         } else if (os_strncmp(buf, "WPS_ER_SET_CONFIG ", 18) == 0) {
7131                 if (wpa_supplicant_ctrl_iface_wps_er_set_config(wpa_s,
7132                                                                 buf + 18))
7133                         reply_len = -1;
7134         } else if (os_strncmp(buf, "WPS_ER_CONFIG ", 14) == 0) {
7135                 if (wpa_supplicant_ctrl_iface_wps_er_config(wpa_s, buf + 14))
7136                         reply_len = -1;
7137 #ifdef CONFIG_WPS_NFC
7138         } else if (os_strncmp(buf, "WPS_ER_NFC_CONFIG_TOKEN ", 24) == 0) {
7139                 reply_len = wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
7140                         wpa_s, buf + 24, reply, reply_size);
7141 #endif /* CONFIG_WPS_NFC */
7142 #endif /* CONFIG_WPS_ER */
7143 #endif /* CONFIG_WPS */
7144 #ifdef CONFIG_IBSS_RSN
7145         } else if (os_strncmp(buf, "IBSS_RSN ", 9) == 0) {
7146                 if (wpa_supplicant_ctrl_iface_ibss_rsn(wpa_s, buf + 9))
7147                         reply_len = -1;
7148 #endif /* CONFIG_IBSS_RSN */
7149 #ifdef CONFIG_MESH
7150         } else if (os_strncmp(buf, "MESH_GROUP_ADD ", 15) == 0) {
7151                 if (wpa_supplicant_ctrl_iface_mesh_group_add(wpa_s, buf + 15))
7152                         reply_len = -1;
7153         } else if (os_strncmp(buf, "MESH_GROUP_REMOVE ", 18) == 0) {
7154                 if (wpa_supplicant_ctrl_iface_mesh_group_remove(wpa_s,
7155                                                                 buf + 18))
7156                         reply_len = -1;
7157 #endif /* CONFIG_MESH */
7158 #ifdef CONFIG_P2P
7159         } else if (os_strncmp(buf, "P2P_FIND ", 9) == 0) {
7160                 if (p2p_ctrl_find(wpa_s, buf + 9))
7161                         reply_len = -1;
7162         } else if (os_strcmp(buf, "P2P_FIND") == 0) {
7163                 if (p2p_ctrl_find(wpa_s, ""))
7164                         reply_len = -1;
7165         } else if (os_strcmp(buf, "P2P_STOP_FIND") == 0) {
7166                 wpas_p2p_stop_find(wpa_s);
7167         } else if (os_strncmp(buf, "P2P_CONNECT ", 12) == 0) {
7168                 reply_len = p2p_ctrl_connect(wpa_s, buf + 12, reply,
7169                                              reply_size);
7170         } else if (os_strncmp(buf, "P2P_LISTEN ", 11) == 0) {
7171                 if (p2p_ctrl_listen(wpa_s, buf + 11))
7172                         reply_len = -1;
7173         } else if (os_strcmp(buf, "P2P_LISTEN") == 0) {
7174                 if (p2p_ctrl_listen(wpa_s, ""))
7175                         reply_len = -1;
7176         } else if (os_strncmp(buf, "P2P_GROUP_REMOVE ", 17) == 0) {
7177                 if (wpas_p2p_group_remove(wpa_s, buf + 17))
7178                         reply_len = -1;
7179         } else if (os_strcmp(buf, "P2P_GROUP_ADD") == 0) {
7180                 if (wpas_p2p_group_add(wpa_s, 0, 0, 0, 0))
7181                         reply_len = -1;
7182         } else if (os_strncmp(buf, "P2P_GROUP_ADD ", 14) == 0) {
7183                 if (p2p_ctrl_group_add(wpa_s, buf + 14))
7184                         reply_len = -1;
7185         } else if (os_strncmp(buf, "P2P_PROV_DISC ", 14) == 0) {
7186                 if (p2p_ctrl_prov_disc(wpa_s, buf + 14))
7187                         reply_len = -1;
7188         } else if (os_strcmp(buf, "P2P_GET_PASSPHRASE") == 0) {
7189                 reply_len = p2p_get_passphrase(wpa_s, reply, reply_size);
7190         } else if (os_strncmp(buf, "P2P_SERV_DISC_REQ ", 18) == 0) {
7191                 reply_len = p2p_ctrl_serv_disc_req(wpa_s, buf + 18, reply,
7192                                                    reply_size);
7193         } else if (os_strncmp(buf, "P2P_SERV_DISC_CANCEL_REQ ", 25) == 0) {
7194                 if (p2p_ctrl_serv_disc_cancel_req(wpa_s, buf + 25) < 0)
7195                         reply_len = -1;
7196         } else if (os_strncmp(buf, "P2P_SERV_DISC_RESP ", 19) == 0) {
7197                 if (p2p_ctrl_serv_disc_resp(wpa_s, buf + 19) < 0)
7198                         reply_len = -1;
7199         } else if (os_strcmp(buf, "P2P_SERVICE_UPDATE") == 0) {
7200                 wpas_p2p_sd_service_update(wpa_s);
7201         } else if (os_strncmp(buf, "P2P_SERV_DISC_EXTERNAL ", 23) == 0) {
7202                 if (p2p_ctrl_serv_disc_external(wpa_s, buf + 23) < 0)
7203                         reply_len = -1;
7204         } else if (os_strcmp(buf, "P2P_SERVICE_FLUSH") == 0) {
7205                 wpas_p2p_service_flush(wpa_s);
7206         } else if (os_strncmp(buf, "P2P_SERVICE_ADD ", 16) == 0) {
7207                 if (p2p_ctrl_service_add(wpa_s, buf + 16) < 0)
7208                         reply_len = -1;
7209         } else if (os_strncmp(buf, "P2P_SERVICE_DEL ", 16) == 0) {
7210                 if (p2p_ctrl_service_del(wpa_s, buf + 16) < 0)
7211                         reply_len = -1;
7212         } else if (os_strncmp(buf, "P2P_REJECT ", 11) == 0) {
7213                 if (p2p_ctrl_reject(wpa_s, buf + 11) < 0)
7214                         reply_len = -1;
7215         } else if (os_strncmp(buf, "P2P_INVITE ", 11) == 0) {
7216                 if (p2p_ctrl_invite(wpa_s, buf + 11) < 0)
7217                         reply_len = -1;
7218         } else if (os_strncmp(buf, "P2P_PEER ", 9) == 0) {
7219                 reply_len = p2p_ctrl_peer(wpa_s, buf + 9, reply,
7220                                               reply_size);
7221         } else if (os_strncmp(buf, "P2P_SET ", 8) == 0) {
7222                 if (p2p_ctrl_set(wpa_s, buf + 8) < 0)
7223                         reply_len = -1;
7224         } else if (os_strcmp(buf, "P2P_FLUSH") == 0) {
7225                 p2p_ctrl_flush(wpa_s);
7226         } else if (os_strncmp(buf, "P2P_UNAUTHORIZE ", 16) == 0) {
7227                 if (wpas_p2p_unauthorize(wpa_s, buf + 16) < 0)
7228                         reply_len = -1;
7229         } else if (os_strcmp(buf, "P2P_CANCEL") == 0) {
7230                 if (wpas_p2p_cancel(wpa_s))
7231                         reply_len = -1;
7232         } else if (os_strncmp(buf, "P2P_PRESENCE_REQ ", 17) == 0) {
7233                 if (p2p_ctrl_presence_req(wpa_s, buf + 17) < 0)
7234                         reply_len = -1;
7235         } else if (os_strcmp(buf, "P2P_PRESENCE_REQ") == 0) {
7236                 if (p2p_ctrl_presence_req(wpa_s, "") < 0)
7237                         reply_len = -1;
7238         } else if (os_strncmp(buf, "P2P_EXT_LISTEN ", 15) == 0) {
7239                 if (p2p_ctrl_ext_listen(wpa_s, buf + 15) < 0)
7240                         reply_len = -1;
7241         } else if (os_strcmp(buf, "P2P_EXT_LISTEN") == 0) {
7242                 if (p2p_ctrl_ext_listen(wpa_s, "") < 0)
7243                         reply_len = -1;
7244         } else if (os_strncmp(buf, "P2P_REMOVE_CLIENT ", 18) == 0) {
7245                 if (p2p_ctrl_remove_client(wpa_s, buf + 18) < 0)
7246                         reply_len = -1;
7247 #endif /* CONFIG_P2P */
7248 #ifdef CONFIG_WIFI_DISPLAY
7249         } else if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0) {
7250                 if (wifi_display_subelem_set(wpa_s->global, buf + 16) < 0)
7251                         reply_len = -1;
7252         } else if (os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0) {
7253                 reply_len = wifi_display_subelem_get(wpa_s->global, buf + 16,
7254                                                      reply, reply_size);
7255 #endif /* CONFIG_WIFI_DISPLAY */
7256 #ifdef CONFIG_INTERWORKING
7257         } else if (os_strcmp(buf, "FETCH_ANQP") == 0) {
7258                 if (interworking_fetch_anqp(wpa_s) < 0)
7259                         reply_len = -1;
7260         } else if (os_strcmp(buf, "STOP_FETCH_ANQP") == 0) {
7261                 interworking_stop_fetch_anqp(wpa_s);
7262         } else if (os_strcmp(buf, "INTERWORKING_SELECT") == 0) {
7263                 if (ctrl_interworking_select(wpa_s, NULL) < 0)
7264                         reply_len = -1;
7265         } else if (os_strncmp(buf, "INTERWORKING_SELECT ", 20) == 0) {
7266                 if (ctrl_interworking_select(wpa_s, buf + 20) < 0)
7267                         reply_len = -1;
7268         } else if (os_strncmp(buf, "INTERWORKING_CONNECT ", 21) == 0) {
7269                 if (ctrl_interworking_connect(wpa_s, buf + 21) < 0)
7270                         reply_len = -1;
7271         } else if (os_strncmp(buf, "ANQP_GET ", 9) == 0) {
7272                 if (get_anqp(wpa_s, buf + 9) < 0)
7273                         reply_len = -1;
7274         } else if (os_strncmp(buf, "GAS_REQUEST ", 12) == 0) {
7275                 if (gas_request(wpa_s, buf + 12) < 0)
7276                         reply_len = -1;
7277         } else if (os_strncmp(buf, "GAS_RESPONSE_GET ", 17) == 0) {
7278                 reply_len = gas_response_get(wpa_s, buf + 17, reply,
7279                                              reply_size);
7280 #endif /* CONFIG_INTERWORKING */
7281 #ifdef CONFIG_HS20
7282         } else if (os_strncmp(buf, "HS20_ANQP_GET ", 14) == 0) {
7283                 if (get_hs20_anqp(wpa_s, buf + 14) < 0)
7284                         reply_len = -1;
7285         } else if (os_strncmp(buf, "HS20_GET_NAI_HOME_REALM_LIST ", 29) == 0) {
7286                 if (hs20_get_nai_home_realm_list(wpa_s, buf + 29) < 0)
7287                         reply_len = -1;
7288         } else if (os_strncmp(buf, "HS20_ICON_REQUEST ", 18) == 0) {
7289                 if (hs20_icon_request(wpa_s, buf + 18) < 0)
7290                         reply_len = -1;
7291         } else if (os_strcmp(buf, "FETCH_OSU") == 0) {
7292                 if (hs20_fetch_osu(wpa_s) < 0)
7293                         reply_len = -1;
7294         } else if (os_strcmp(buf, "CANCEL_FETCH_OSU") == 0) {
7295                 hs20_cancel_fetch_osu(wpa_s);
7296 #endif /* CONFIG_HS20 */
7297         } else if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0)
7298         {
7299                 if (wpa_supplicant_ctrl_iface_ctrl_rsp(
7300                             wpa_s, buf + os_strlen(WPA_CTRL_RSP)))
7301                         reply_len = -1;
7302                 else {
7303                         /*
7304                          * Notify response from timeout to allow the control
7305                          * interface response to be sent first.
7306                          */
7307                         eloop_register_timeout(0, 0, wpas_ctrl_eapol_response,
7308                                                wpa_s, NULL);
7309                 }
7310         } else if (os_strcmp(buf, "RECONFIGURE") == 0) {
7311                 if (wpa_supplicant_reload_configuration(wpa_s))
7312                         reply_len = -1;
7313         } else if (os_strcmp(buf, "TERMINATE") == 0) {
7314                 wpa_supplicant_terminate_proc(wpa_s->global);
7315         } else if (os_strncmp(buf, "BSSID ", 6) == 0) {
7316                 if (wpa_supplicant_ctrl_iface_bssid(wpa_s, buf + 6))
7317                         reply_len = -1;
7318         } else if (os_strncmp(buf, "BLACKLIST", 9) == 0) {
7319                 reply_len = wpa_supplicant_ctrl_iface_blacklist(
7320                         wpa_s, buf + 9, reply, reply_size);
7321         } else if (os_strncmp(buf, "LOG_LEVEL", 9) == 0) {
7322                 reply_len = wpa_supplicant_ctrl_iface_log_level(
7323                         wpa_s, buf + 9, reply, reply_size);
7324         } else if (os_strncmp(buf, "LIST_NETWORKS ", 14) == 0) {
7325                 reply_len = wpa_supplicant_ctrl_iface_list_networks(
7326                         wpa_s, buf + 14, reply, reply_size);
7327         } else if (os_strcmp(buf, "LIST_NETWORKS") == 0) {
7328                 reply_len = wpa_supplicant_ctrl_iface_list_networks(
7329                         wpa_s, NULL, reply, reply_size);
7330         } else if (os_strcmp(buf, "DISCONNECT") == 0) {
7331 #ifdef CONFIG_SME
7332                 wpa_s->sme.prev_bssid_set = 0;
7333 #endif /* CONFIG_SME */
7334                 wpa_s->reassociate = 0;
7335                 wpa_s->disconnected = 1;
7336                 wpa_supplicant_cancel_sched_scan(wpa_s);
7337                 wpa_supplicant_cancel_scan(wpa_s);
7338                 wpa_supplicant_deauthenticate(wpa_s,
7339                                               WLAN_REASON_DEAUTH_LEAVING);
7340         } else if (os_strcmp(buf, "SCAN") == 0) {
7341                 wpas_ctrl_scan(wpa_s, NULL, reply, reply_size, &reply_len);
7342         } else if (os_strncmp(buf, "SCAN ", 5) == 0) {
7343                 wpas_ctrl_scan(wpa_s, buf + 5, reply, reply_size, &reply_len);
7344         } else if (os_strcmp(buf, "SCAN_RESULTS") == 0) {
7345                 reply_len = wpa_supplicant_ctrl_iface_scan_results(
7346                         wpa_s, reply, reply_size);
7347         } else if (os_strncmp(buf, "SELECT_NETWORK ", 15) == 0) {
7348                 if (wpa_supplicant_ctrl_iface_select_network(wpa_s, buf + 15))
7349                         reply_len = -1;
7350         } else if (os_strncmp(buf, "ENABLE_NETWORK ", 15) == 0) {
7351                 if (wpa_supplicant_ctrl_iface_enable_network(wpa_s, buf + 15))
7352                         reply_len = -1;
7353         } else if (os_strncmp(buf, "DISABLE_NETWORK ", 16) == 0) {
7354                 if (wpa_supplicant_ctrl_iface_disable_network(wpa_s, buf + 16))
7355                         reply_len = -1;
7356         } else if (os_strcmp(buf, "ADD_NETWORK") == 0) {
7357                 reply_len = wpa_supplicant_ctrl_iface_add_network(
7358                         wpa_s, reply, reply_size);
7359         } else if (os_strncmp(buf, "REMOVE_NETWORK ", 15) == 0) {
7360                 if (wpa_supplicant_ctrl_iface_remove_network(wpa_s, buf + 15))
7361                         reply_len = -1;
7362         } else if (os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
7363                 if (wpa_supplicant_ctrl_iface_set_network(wpa_s, buf + 12))
7364                         reply_len = -1;
7365         } else if (os_strncmp(buf, "GET_NETWORK ", 12) == 0) {
7366                 reply_len = wpa_supplicant_ctrl_iface_get_network(
7367                         wpa_s, buf + 12, reply, reply_size);
7368         } else if (os_strncmp(buf, "DUP_NETWORK ", 12) == 0) {
7369                 if (wpa_supplicant_ctrl_iface_dup_network(wpa_s, buf + 12))
7370                         reply_len = -1;
7371         } else if (os_strcmp(buf, "LIST_CREDS") == 0) {
7372                 reply_len = wpa_supplicant_ctrl_iface_list_creds(
7373                         wpa_s, reply, reply_size);
7374         } else if (os_strcmp(buf, "ADD_CRED") == 0) {
7375                 reply_len = wpa_supplicant_ctrl_iface_add_cred(
7376                         wpa_s, reply, reply_size);
7377         } else if (os_strncmp(buf, "REMOVE_CRED ", 12) == 0) {
7378                 if (wpa_supplicant_ctrl_iface_remove_cred(wpa_s, buf + 12))
7379                         reply_len = -1;
7380         } else if (os_strncmp(buf, "SET_CRED ", 9) == 0) {
7381                 if (wpa_supplicant_ctrl_iface_set_cred(wpa_s, buf + 9))
7382                         reply_len = -1;
7383         } else if (os_strncmp(buf, "GET_CRED ", 9) == 0) {
7384                 reply_len = wpa_supplicant_ctrl_iface_get_cred(wpa_s, buf + 9,
7385                                                                reply,
7386                                                                reply_size);
7387 #ifndef CONFIG_NO_CONFIG_WRITE
7388         } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
7389                 if (wpa_supplicant_ctrl_iface_save_config(wpa_s))
7390                         reply_len = -1;
7391 #endif /* CONFIG_NO_CONFIG_WRITE */
7392         } else if (os_strncmp(buf, "GET_CAPABILITY ", 15) == 0) {
7393                 reply_len = wpa_supplicant_ctrl_iface_get_capability(
7394                         wpa_s, buf + 15, reply, reply_size);
7395         } else if (os_strncmp(buf, "AP_SCAN ", 8) == 0) {
7396                 if (wpa_supplicant_ctrl_iface_ap_scan(wpa_s, buf + 8))
7397                         reply_len = -1;
7398         } else if (os_strncmp(buf, "SCAN_INTERVAL ", 14) == 0) {
7399                 if (wpa_supplicant_ctrl_iface_scan_interval(wpa_s, buf + 14))
7400                         reply_len = -1;
7401         } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
7402                 reply_len = wpa_supplicant_global_iface_list(
7403                         wpa_s->global, reply, reply_size);
7404         } else if (os_strcmp(buf, "INTERFACES") == 0) {
7405                 reply_len = wpa_supplicant_global_iface_interfaces(
7406                         wpa_s->global, reply, reply_size);
7407         } else if (os_strncmp(buf, "BSS ", 4) == 0) {
7408                 reply_len = wpa_supplicant_ctrl_iface_bss(
7409                         wpa_s, buf + 4, reply, reply_size);
7410 #ifdef CONFIG_AP
7411         } else if (os_strcmp(buf, "STA-FIRST") == 0) {
7412                 reply_len = ap_ctrl_iface_sta_first(wpa_s, reply, reply_size);
7413         } else if (os_strncmp(buf, "STA ", 4) == 0) {
7414                 reply_len = ap_ctrl_iface_sta(wpa_s, buf + 4, reply,
7415                                               reply_size);
7416         } else if (os_strncmp(buf, "STA-NEXT ", 9) == 0) {
7417                 reply_len = ap_ctrl_iface_sta_next(wpa_s, buf + 9, reply,
7418                                                    reply_size);
7419         } else if (os_strncmp(buf, "DEAUTHENTICATE ", 15) == 0) {
7420                 if (ap_ctrl_iface_sta_deauthenticate(wpa_s, buf + 15))
7421                         reply_len = -1;
7422         } else if (os_strncmp(buf, "DISASSOCIATE ", 13) == 0) {
7423                 if (ap_ctrl_iface_sta_disassociate(wpa_s, buf + 13))
7424                         reply_len = -1;
7425         } else if (os_strncmp(buf, "CHAN_SWITCH ", 12) == 0) {
7426                 if (ap_ctrl_iface_chanswitch(wpa_s, buf + 12))
7427                         reply_len = -1;
7428 #endif /* CONFIG_AP */
7429         } else if (os_strcmp(buf, "SUSPEND") == 0) {
7430                 wpas_notify_suspend(wpa_s->global);
7431         } else if (os_strcmp(buf, "RESUME") == 0) {
7432                 wpas_notify_resume(wpa_s->global);
7433 #ifdef CONFIG_TESTING_OPTIONS
7434         } else if (os_strcmp(buf, "DROP_SA") == 0) {
7435                 wpa_supplicant_ctrl_iface_drop_sa(wpa_s);
7436 #endif /* CONFIG_TESTING_OPTIONS */
7437         } else if (os_strncmp(buf, "ROAM ", 5) == 0) {
7438                 if (wpa_supplicant_ctrl_iface_roam(wpa_s, buf + 5))
7439                         reply_len = -1;
7440         } else if (os_strncmp(buf, "STA_AUTOCONNECT ", 16) == 0) {
7441                 if (wpa_supplicant_ctrl_iface_sta_autoconnect(wpa_s, buf + 16))
7442                         reply_len = -1;
7443         } else if (os_strncmp(buf, "BSS_EXPIRE_AGE ", 15) == 0) {
7444                 if (wpa_supplicant_ctrl_iface_bss_expire_age(wpa_s, buf + 15))
7445                         reply_len = -1;
7446         } else if (os_strncmp(buf, "BSS_EXPIRE_COUNT ", 17) == 0) {
7447                 if (wpa_supplicant_ctrl_iface_bss_expire_count(wpa_s,
7448                                                                buf + 17))
7449                         reply_len = -1;
7450         } else if (os_strncmp(buf, "BSS_FLUSH ", 10) == 0) {
7451                 if (wpa_supplicant_ctrl_iface_bss_flush(wpa_s, buf + 10))
7452                         reply_len = -1;
7453 #ifdef CONFIG_TDLS
7454         } else if (os_strncmp(buf, "TDLS_DISCOVER ", 14) == 0) {
7455                 if (wpa_supplicant_ctrl_iface_tdls_discover(wpa_s, buf + 14))
7456                         reply_len = -1;
7457         } else if (os_strncmp(buf, "TDLS_SETUP ", 11) == 0) {
7458                 if (wpa_supplicant_ctrl_iface_tdls_setup(wpa_s, buf + 11))
7459                         reply_len = -1;
7460         } else if (os_strncmp(buf, "TDLS_TEARDOWN ", 14) == 0) {
7461                 if (wpa_supplicant_ctrl_iface_tdls_teardown(wpa_s, buf + 14))
7462                         reply_len = -1;
7463 #endif /* CONFIG_TDLS */
7464         } else if (os_strcmp(buf, "WMM_AC_STATUS") == 0) {
7465                 reply_len = wpas_wmm_ac_status(wpa_s, reply, reply_size);
7466         } else if (os_strncmp(buf, "WMM_AC_ADDTS ", 13) == 0) {
7467                 if (wmm_ac_ctrl_addts(wpa_s, buf + 13))
7468                         reply_len = -1;
7469         } else if (os_strncmp(buf, "WMM_AC_DELTS ", 13) == 0) {
7470                 if (wmm_ac_ctrl_delts(wpa_s, buf + 13))
7471                         reply_len = -1;
7472         } else if (os_strncmp(buf, "SIGNAL_POLL", 11) == 0) {
7473                 reply_len = wpa_supplicant_signal_poll(wpa_s, reply,
7474                                                        reply_size);
7475         } else if (os_strncmp(buf, "PKTCNT_POLL", 11) == 0) {
7476                 reply_len = wpa_supplicant_pktcnt_poll(wpa_s, reply,
7477                                                        reply_size);
7478 #ifdef CONFIG_AUTOSCAN
7479         } else if (os_strncmp(buf, "AUTOSCAN ", 9) == 0) {
7480                 if (wpa_supplicant_ctrl_iface_autoscan(wpa_s, buf + 9))
7481                         reply_len = -1;
7482 #endif /* CONFIG_AUTOSCAN */
7483 #ifdef ANDROID
7484         } else if (os_strncmp(buf, "DRIVER ", 7) == 0) {
7485                 reply_len = wpa_supplicant_driver_cmd(wpa_s, buf + 7, reply,
7486                                                       reply_size);
7487 #endif /* ANDROID */
7488         } else if (os_strncmp(buf, "VENDOR ", 7) == 0) {
7489                 reply_len = wpa_supplicant_vendor_cmd(wpa_s, buf + 7, reply,
7490                                                       reply_size);
7491         } else if (os_strcmp(buf, "REAUTHENTICATE") == 0) {
7492                 pmksa_cache_clear_current(wpa_s->wpa);
7493                 eapol_sm_request_reauth(wpa_s->eapol);
7494 #ifdef CONFIG_WNM
7495         } else if (os_strncmp(buf, "WNM_SLEEP ", 10) == 0) {
7496                 if (wpas_ctrl_iface_wnm_sleep(wpa_s, buf + 10))
7497                         reply_len = -1;
7498         } else if (os_strncmp(buf, "WNM_BSS_QUERY ", 10) == 0) {
7499                 if (wpas_ctrl_iface_wnm_bss_query(wpa_s, buf + 10))
7500                                 reply_len = -1;
7501 #endif /* CONFIG_WNM */
7502         } else if (os_strcmp(buf, "FLUSH") == 0) {
7503                 wpa_supplicant_ctrl_iface_flush(wpa_s);
7504         } else if (os_strncmp(buf, "RADIO_WORK ", 11) == 0) {
7505                 reply_len = wpas_ctrl_radio_work(wpa_s, buf + 11, reply,
7506                                                  reply_size);
7507 #ifdef CONFIG_TESTING_OPTIONS
7508         } else if (os_strncmp(buf, "MGMT_TX ", 8) == 0) {
7509                 if (wpas_ctrl_iface_mgmt_tx(wpa_s, buf + 8) < 0)
7510                         reply_len = -1;
7511         } else if (os_strcmp(buf, "MGMT_TX_DONE") == 0) {
7512                 wpas_ctrl_iface_mgmt_tx_done(wpa_s);
7513         } else if (os_strncmp(buf, "DRIVER_EVENT ", 13) == 0) {
7514                 if (wpas_ctrl_iface_driver_event(wpa_s, buf + 13) < 0)
7515                         reply_len = -1;
7516         } else if (os_strncmp(buf, "EAPOL_RX ", 9) == 0) {
7517                 if (wpas_ctrl_iface_eapol_rx(wpa_s, buf + 9) < 0)
7518                         reply_len = -1;
7519         } else if (os_strncmp(buf, "DATA_TEST_CONFIG ", 17) == 0) {
7520                 if (wpas_ctrl_iface_data_test_config(wpa_s, buf + 17) < 0)
7521                         reply_len = -1;
7522         } else if (os_strncmp(buf, "DATA_TEST_TX ", 13) == 0) {
7523                 if (wpas_ctrl_iface_data_test_tx(wpa_s, buf + 13) < 0)
7524                         reply_len = -1;
7525         } else if (os_strncmp(buf, "DATA_TEST_FRAME ", 16) == 0) {
7526                 if (wpas_ctrl_iface_data_test_frame(wpa_s, buf + 16) < 0)
7527                         reply_len = -1;
7528 #endif /* CONFIG_TESTING_OPTIONS */
7529         } else if (os_strncmp(buf, "VENDOR_ELEM_ADD ", 16) == 0) {
7530                 if (wpas_ctrl_vendor_elem_add(wpa_s, buf + 16) < 0)
7531                         reply_len = -1;
7532         } else if (os_strncmp(buf, "VENDOR_ELEM_GET ", 16) == 0) {
7533                 reply_len = wpas_ctrl_vendor_elem_get(wpa_s, buf + 16, reply,
7534                                                       reply_size);
7535         } else if (os_strncmp(buf, "VENDOR_ELEM_REMOVE ", 19) == 0) {
7536                 if (wpas_ctrl_vendor_elem_remove(wpa_s, buf + 19) < 0)
7537                         reply_len = -1;
7538         } else if (os_strncmp(buf, "NEIGHBOR_REP_REQUEST", 20) == 0) {
7539                 if (wpas_ctrl_iface_send_neigbor_rep(wpa_s, buf + 20))
7540                         reply_len = -1;
7541         } else if (os_strcmp(buf, "ERP_FLUSH") == 0) {
7542                 wpas_ctrl_iface_erp_flush(wpa_s);
7543         } else {
7544                 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
7545                 reply_len = 16;
7546         }
7547
7548         if (reply_len < 0) {
7549                 os_memcpy(reply, "FAIL\n", 5);
7550                 reply_len = 5;
7551         }
7552
7553         *resp_len = reply_len;
7554         return reply;
7555 }
7556
7557
7558 static int wpa_supplicant_global_iface_add(struct wpa_global *global,
7559                                            char *cmd)
7560 {
7561         struct wpa_interface iface;
7562         char *pos;
7563
7564         /*
7565          * <ifname>TAB<confname>TAB<driver>TAB<ctrl_interface>TAB<driver_param>
7566          * TAB<bridge_ifname>
7567          */
7568         wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_ADD '%s'", cmd);
7569
7570         os_memset(&iface, 0, sizeof(iface));
7571
7572         do {
7573                 iface.ifname = pos = cmd;
7574                 pos = os_strchr(pos, '\t');
7575                 if (pos)
7576                         *pos++ = '\0';
7577                 if (iface.ifname[0] == '\0')
7578                         return -1;
7579                 if (pos == NULL)
7580                         break;
7581
7582                 iface.confname = pos;
7583                 pos = os_strchr(pos, '\t');
7584                 if (pos)
7585                         *pos++ = '\0';
7586                 if (iface.confname[0] == '\0')
7587                         iface.confname = NULL;
7588                 if (pos == NULL)
7589                         break;
7590
7591                 iface.driver = pos;
7592                 pos = os_strchr(pos, '\t');
7593                 if (pos)
7594                         *pos++ = '\0';
7595                 if (iface.driver[0] == '\0')
7596                         iface.driver = NULL;
7597                 if (pos == NULL)
7598                         break;
7599
7600                 iface.ctrl_interface = pos;
7601                 pos = os_strchr(pos, '\t');
7602                 if (pos)
7603                         *pos++ = '\0';
7604                 if (iface.ctrl_interface[0] == '\0')
7605                         iface.ctrl_interface = NULL;
7606                 if (pos == NULL)
7607                         break;
7608
7609                 iface.driver_param = pos;
7610                 pos = os_strchr(pos, '\t');
7611                 if (pos)
7612                         *pos++ = '\0';
7613                 if (iface.driver_param[0] == '\0')
7614                         iface.driver_param = NULL;
7615                 if (pos == NULL)
7616                         break;
7617
7618                 iface.bridge_ifname = pos;
7619                 pos = os_strchr(pos, '\t');
7620                 if (pos)
7621                         *pos++ = '\0';
7622                 if (iface.bridge_ifname[0] == '\0')
7623                         iface.bridge_ifname = NULL;
7624                 if (pos == NULL)
7625                         break;
7626         } while (0);
7627
7628         if (wpa_supplicant_get_iface(global, iface.ifname))
7629                 return -1;
7630
7631         return wpa_supplicant_add_iface(global, &iface) ? 0 : -1;
7632 }
7633
7634
7635 static int wpa_supplicant_global_iface_remove(struct wpa_global *global,
7636                                               char *cmd)
7637 {
7638         struct wpa_supplicant *wpa_s;
7639
7640         wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_REMOVE '%s'", cmd);
7641
7642         wpa_s = wpa_supplicant_get_iface(global, cmd);
7643         if (wpa_s == NULL)
7644                 return -1;
7645         return wpa_supplicant_remove_iface(global, wpa_s, 0);
7646 }
7647
7648
7649 static void wpa_free_iface_info(struct wpa_interface_info *iface)
7650 {
7651         struct wpa_interface_info *prev;
7652
7653         while (iface) {
7654                 prev = iface;
7655                 iface = iface->next;
7656
7657                 os_free(prev->ifname);
7658                 os_free(prev->desc);
7659                 os_free(prev);
7660         }
7661 }
7662
7663
7664 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
7665                                             char *buf, int len)
7666 {
7667         int i, res;
7668         struct wpa_interface_info *iface = NULL, *last = NULL, *tmp;
7669         char *pos, *end;
7670
7671         for (i = 0; wpa_drivers[i]; i++) {
7672                 struct wpa_driver_ops *drv = wpa_drivers[i];
7673                 if (drv->get_interfaces == NULL)
7674                         continue;
7675                 tmp = drv->get_interfaces(global->drv_priv[i]);
7676                 if (tmp == NULL)
7677                         continue;
7678
7679                 if (last == NULL)
7680                         iface = last = tmp;
7681                 else
7682                         last->next = tmp;
7683                 while (last->next)
7684                         last = last->next;
7685         }
7686
7687         pos = buf;
7688         end = buf + len;
7689         for (tmp = iface; tmp; tmp = tmp->next) {
7690                 res = os_snprintf(pos, end - pos, "%s\t%s\t%s\n",
7691                                   tmp->drv_name, tmp->ifname,
7692                                   tmp->desc ? tmp->desc : "");
7693                 if (os_snprintf_error(end - pos, res)) {
7694                         *pos = '\0';
7695                         break;
7696                 }
7697                 pos += res;
7698         }
7699
7700         wpa_free_iface_info(iface);
7701
7702         return pos - buf;
7703 }
7704
7705
7706 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
7707                                                   char *buf, int len)
7708 {
7709         int res;
7710         char *pos, *end;
7711         struct wpa_supplicant *wpa_s;
7712
7713         wpa_s = global->ifaces;
7714         pos = buf;
7715         end = buf + len;
7716
7717         while (wpa_s) {
7718                 res = os_snprintf(pos, end - pos, "%s\n", wpa_s->ifname);
7719                 if (os_snprintf_error(end - pos, res)) {
7720                         *pos = '\0';
7721                         break;
7722                 }
7723                 pos += res;
7724                 wpa_s = wpa_s->next;
7725         }
7726         return pos - buf;
7727 }
7728
7729
7730 static char * wpas_global_ctrl_iface_ifname(struct wpa_global *global,
7731                                             const char *ifname,
7732                                             char *cmd, size_t *resp_len)
7733 {
7734         struct wpa_supplicant *wpa_s;
7735
7736         for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
7737                 if (os_strcmp(ifname, wpa_s->ifname) == 0)
7738                         break;
7739         }
7740
7741         if (wpa_s == NULL) {
7742                 char *resp = os_strdup("FAIL-NO-IFNAME-MATCH\n");
7743                 if (resp)
7744                         *resp_len = os_strlen(resp);
7745                 else
7746                         *resp_len = 1;
7747                 return resp;
7748         }
7749
7750         return wpa_supplicant_ctrl_iface_process(wpa_s, cmd, resp_len);
7751 }
7752
7753
7754 static char * wpas_global_ctrl_iface_redir_p2p(struct wpa_global *global,
7755                                                char *buf, size_t *resp_len)
7756 {
7757 #ifdef CONFIG_P2P
7758         static const char * cmd[] = {
7759                 "LIST_NETWORKS",
7760                 "P2P_FIND",
7761                 "P2P_STOP_FIND",
7762                 "P2P_LISTEN",
7763                 "P2P_GROUP_ADD",
7764                 "P2P_GET_PASSPHRASE",
7765                 "P2P_SERVICE_UPDATE",
7766                 "P2P_SERVICE_FLUSH",
7767                 "P2P_FLUSH",
7768                 "P2P_CANCEL",
7769                 "P2P_PRESENCE_REQ",
7770                 "P2P_EXT_LISTEN",
7771                 NULL
7772         };
7773         static const char * prefix[] = {
7774 #ifdef ANDROID
7775                 "DRIVER ",
7776 #endif /* ANDROID */
7777                 "GET_NETWORK ",
7778                 "REMOVE_NETWORK ",
7779                 "P2P_FIND ",
7780                 "P2P_CONNECT ",
7781                 "P2P_LISTEN ",
7782                 "P2P_GROUP_REMOVE ",
7783                 "P2P_GROUP_ADD ",
7784                 "P2P_PROV_DISC ",
7785                 "P2P_SERV_DISC_REQ ",
7786                 "P2P_SERV_DISC_CANCEL_REQ ",
7787                 "P2P_SERV_DISC_RESP ",
7788                 "P2P_SERV_DISC_EXTERNAL ",
7789                 "P2P_SERVICE_ADD ",
7790                 "P2P_SERVICE_DEL ",
7791                 "P2P_REJECT ",
7792                 "P2P_INVITE ",
7793                 "P2P_PEER ",
7794                 "P2P_SET ",
7795                 "P2P_UNAUTHORIZE ",
7796                 "P2P_PRESENCE_REQ ",
7797                 "P2P_EXT_LISTEN ",
7798                 "P2P_REMOVE_CLIENT ",
7799                 "NFC_GET_HANDOVER_SEL ",
7800                 "NFC_GET_HANDOVER_REQ ",
7801                 "NFC_REPORT_HANDOVER ",
7802                 NULL
7803         };
7804         int found = 0;
7805         int i;
7806
7807         if (global->p2p_init_wpa_s == NULL)
7808                 return NULL;
7809
7810         for (i = 0; !found && cmd[i]; i++) {
7811                 if (os_strcmp(buf, cmd[i]) == 0)
7812                         found = 1;
7813         }
7814
7815         for (i = 0; !found && prefix[i]; i++) {
7816                 if (os_strncmp(buf, prefix[i], os_strlen(prefix[i])) == 0)
7817                         found = 1;
7818         }
7819
7820         if (found)
7821                 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
7822                                                          buf, resp_len);
7823 #endif /* CONFIG_P2P */
7824         return NULL;
7825 }
7826
7827
7828 static char * wpas_global_ctrl_iface_redir_wfd(struct wpa_global *global,
7829                                                char *buf, size_t *resp_len)
7830 {
7831 #ifdef CONFIG_WIFI_DISPLAY
7832         if (global->p2p_init_wpa_s == NULL)
7833                 return NULL;
7834         if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0 ||
7835             os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0)
7836                 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
7837                                                          buf, resp_len);
7838 #endif /* CONFIG_WIFI_DISPLAY */
7839         return NULL;
7840 }
7841
7842
7843 static char * wpas_global_ctrl_iface_redir(struct wpa_global *global,
7844                                            char *buf, size_t *resp_len)
7845 {
7846         char *ret;
7847
7848         ret = wpas_global_ctrl_iface_redir_p2p(global, buf, resp_len);
7849         if (ret)
7850                 return ret;
7851
7852         ret = wpas_global_ctrl_iface_redir_wfd(global, buf, resp_len);
7853         if (ret)
7854                 return ret;
7855
7856         return NULL;
7857 }
7858
7859
7860 static int wpas_global_ctrl_iface_set(struct wpa_global *global, char *cmd)
7861 {
7862         char *value;
7863
7864         value = os_strchr(cmd, ' ');
7865         if (value == NULL)
7866                 return -1;
7867         *value++ = '\0';
7868
7869         wpa_printf(MSG_DEBUG, "GLOBAL_CTRL_IFACE SET '%s'='%s'", cmd, value);
7870
7871 #ifdef CONFIG_WIFI_DISPLAY
7872         if (os_strcasecmp(cmd, "wifi_display") == 0) {
7873                 wifi_display_enable(global, !!atoi(value));
7874                 return 0;
7875         }
7876 #endif /* CONFIG_WIFI_DISPLAY */
7877
7878         /* Restore cmd to its original value to allow redirection */
7879         value[-1] = ' ';
7880
7881         return -1;
7882 }
7883
7884
7885 #ifndef CONFIG_NO_CONFIG_WRITE
7886 static int wpas_global_ctrl_iface_save_config(struct wpa_global *global)
7887 {
7888         int ret = 0, saved = 0;
7889         struct wpa_supplicant *wpa_s;
7890
7891         for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
7892                 if (!wpa_s->conf->update_config) {
7893                         wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed to update configuration (update_config=0)");
7894                         continue;
7895                 }
7896
7897                 if (wpa_config_write(wpa_s->confname, wpa_s->conf)) {
7898                         wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to update configuration");
7899                         ret = 1;
7900                 } else {
7901                         wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration updated");
7902                         saved++;
7903                 }
7904         }
7905
7906         if (!saved && !ret) {
7907                 wpa_dbg(wpa_s, MSG_DEBUG,
7908                         "CTRL_IFACE: SAVE_CONFIG - No configuration files could be updated");
7909                 ret = 1;
7910         }
7911
7912         return ret;
7913 }
7914 #endif /* CONFIG_NO_CONFIG_WRITE */
7915
7916
7917 static int wpas_global_ctrl_iface_status(struct wpa_global *global,
7918                                          char *buf, size_t buflen)
7919 {
7920         char *pos, *end;
7921         int ret;
7922         struct wpa_supplicant *wpa_s;
7923
7924         pos = buf;
7925         end = buf + buflen;
7926
7927 #ifdef CONFIG_P2P
7928         if (global->p2p && !global->p2p_disabled) {
7929                 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
7930                                   "\n"
7931                                   "p2p_state=%s\n",
7932                                   MAC2STR(global->p2p_dev_addr),
7933                                   p2p_get_state_txt(global->p2p));
7934                 if (os_snprintf_error(end - pos, ret))
7935                         return pos - buf;
7936                 pos += ret;
7937         } else if (global->p2p) {
7938                 ret = os_snprintf(pos, end - pos, "p2p_state=DISABLED\n");
7939                 if (os_snprintf_error(end - pos, ret))
7940                         return pos - buf;
7941                 pos += ret;
7942         }
7943 #endif /* CONFIG_P2P */
7944
7945 #ifdef CONFIG_WIFI_DISPLAY
7946         ret = os_snprintf(pos, end - pos, "wifi_display=%d\n",
7947                           !!global->wifi_display);
7948         if (os_snprintf_error(end - pos, ret))
7949                 return pos - buf;
7950         pos += ret;
7951 #endif /* CONFIG_WIFI_DISPLAY */
7952
7953         for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
7954                 ret = os_snprintf(pos, end - pos, "ifname=%s\n"
7955                                   "address=" MACSTR "\n",
7956                                   wpa_s->ifname, MAC2STR(wpa_s->own_addr));
7957                 if (os_snprintf_error(end - pos, ret))
7958                         return pos - buf;
7959                 pos += ret;
7960         }
7961
7962         return pos - buf;
7963 }
7964
7965
7966 char * wpa_supplicant_global_ctrl_iface_process(struct wpa_global *global,
7967                                                 char *buf, size_t *resp_len)
7968 {
7969         char *reply;
7970         const int reply_size = 2048;
7971         int reply_len;
7972         int level = MSG_DEBUG;
7973
7974         if (os_strncmp(buf, "IFNAME=", 7) == 0) {
7975                 char *pos = os_strchr(buf + 7, ' ');
7976                 if (pos) {
7977                         *pos++ = '\0';
7978                         return wpas_global_ctrl_iface_ifname(global,
7979                                                              buf + 7, pos,
7980                                                              resp_len);
7981                 }
7982         }
7983
7984         reply = wpas_global_ctrl_iface_redir(global, buf, resp_len);
7985         if (reply)
7986                 return reply;
7987
7988         if (os_strcmp(buf, "PING") == 0)
7989                 level = MSG_EXCESSIVE;
7990         wpa_hexdump_ascii(level, "RX global ctrl_iface",
7991                           (const u8 *) buf, os_strlen(buf));
7992
7993         reply = os_malloc(reply_size);
7994         if (reply == NULL) {
7995                 *resp_len = 1;
7996                 return NULL;
7997         }
7998
7999         os_memcpy(reply, "OK\n", 3);
8000         reply_len = 3;
8001
8002         if (os_strcmp(buf, "PING") == 0) {
8003                 os_memcpy(reply, "PONG\n", 5);
8004                 reply_len = 5;
8005         } else if (os_strncmp(buf, "INTERFACE_ADD ", 14) == 0) {
8006                 if (wpa_supplicant_global_iface_add(global, buf + 14))
8007                         reply_len = -1;
8008         } else if (os_strncmp(buf, "INTERFACE_REMOVE ", 17) == 0) {
8009                 if (wpa_supplicant_global_iface_remove(global, buf + 17))
8010                         reply_len = -1;
8011         } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
8012                 reply_len = wpa_supplicant_global_iface_list(
8013                         global, reply, reply_size);
8014         } else if (os_strcmp(buf, "INTERFACES") == 0) {
8015                 reply_len = wpa_supplicant_global_iface_interfaces(
8016                         global, reply, reply_size);
8017         } else if (os_strcmp(buf, "TERMINATE") == 0) {
8018                 wpa_supplicant_terminate_proc(global);
8019         } else if (os_strcmp(buf, "SUSPEND") == 0) {
8020                 wpas_notify_suspend(global);
8021         } else if (os_strcmp(buf, "RESUME") == 0) {
8022                 wpas_notify_resume(global);
8023         } else if (os_strncmp(buf, "SET ", 4) == 0) {
8024                 if (wpas_global_ctrl_iface_set(global, buf + 4)) {
8025 #ifdef CONFIG_P2P
8026                         if (global->p2p_init_wpa_s) {
8027                                 os_free(reply);
8028                                 /* Check if P2P redirection would work for this
8029                                  * command. */
8030                                 return wpa_supplicant_ctrl_iface_process(
8031                                         global->p2p_init_wpa_s,
8032                                         buf, resp_len);
8033                         }
8034 #endif /* CONFIG_P2P */
8035                         reply_len = -1;
8036                 }
8037 #ifndef CONFIG_NO_CONFIG_WRITE
8038         } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
8039                 if (wpas_global_ctrl_iface_save_config(global))
8040                         reply_len = -1;
8041 #endif /* CONFIG_NO_CONFIG_WRITE */
8042         } else if (os_strcmp(buf, "STATUS") == 0) {
8043                 reply_len = wpas_global_ctrl_iface_status(global, reply,
8044                                                           reply_size);
8045 #ifdef CONFIG_MODULE_TESTS
8046         } else if (os_strcmp(buf, "MODULE_TESTS") == 0) {
8047                 int wpas_module_tests(void);
8048                 if (wpas_module_tests() < 0)
8049                         reply_len = -1;
8050 #endif /* CONFIG_MODULE_TESTS */
8051         } else if (os_strncmp(buf, "RELOG", 5) == 0) {
8052                 if (wpa_debug_reopen_file() < 0)
8053                         reply_len = -1;
8054         } else {
8055                 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
8056                 reply_len = 16;
8057         }
8058
8059         if (reply_len < 0) {
8060                 os_memcpy(reply, "FAIL\n", 5);
8061                 reply_len = 5;
8062         }
8063
8064         *resp_len = reply_len;
8065         return reply;
8066 }