4 * Copyright(c) 2015 Intel Deutschland GmbH
6 * Intel Linux Wireless <ilw@linux.intel.com>
7 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
9 * This software may be distributed under the terms of the BSD license.
10 * See README for more details.
13 #include "utils/includes.h"
15 #include "utils/common.h"
16 #include "common/ieee802_11_defs.h"
18 #include "wpa_supplicant_i.h"
23 /* type + length + oui + oui type */
24 #define MBO_IE_HEADER 6
27 static int wpas_mbo_validate_non_pref_chan(u8 oper_class, u8 chan, u8 reason)
29 if (reason > MBO_NON_PREF_CHAN_REASON_INT_INTERFERENCE)
32 /* Only checking the validity of the channel and oper_class */
33 if (ieee80211_chan_to_freq(NULL, oper_class, chan) == -1)
40 const u8 * wpas_mbo_get_bss_attr(struct wpa_bss *bss, enum mbo_attr_id attr)
47 mbo = wpa_bss_get_vendor_ie(bss, MBO_IE_VENDOR_TYPE);
51 end = mbo + 2 + mbo[1];
54 return get_ie(mbo, end - mbo, attr);
58 static void wpas_mbo_non_pref_chan_attr_body(struct wpa_supplicant *wpa_s,
64 wpabuf_put_u8(mbo, wpa_s->non_pref_chan[start].oper_class);
66 for (i = start; i < end; i++)
67 wpabuf_put_u8(mbo, wpa_s->non_pref_chan[i].chan);
69 wpabuf_put_u8(mbo, wpa_s->non_pref_chan[start].preference);
70 wpabuf_put_u8(mbo, wpa_s->non_pref_chan[start].reason);
74 static void wpas_mbo_non_pref_chan_attr(struct wpa_supplicant *wpa_s,
75 struct wpabuf *mbo, u8 start, u8 end)
77 size_t size = end - start + 3;
79 if (size + 2 > wpabuf_tailroom(mbo))
82 wpabuf_put_u8(mbo, MBO_ATTR_ID_NON_PREF_CHAN_REPORT);
83 wpabuf_put_u8(mbo, size); /* Length */
85 wpas_mbo_non_pref_chan_attr_body(wpa_s, mbo, start, end);
89 static void wpas_mbo_non_pref_chan_subelem_hdr(struct wpabuf *mbo, u8 len)
91 wpabuf_put_u8(mbo, WLAN_EID_VENDOR_SPECIFIC);
92 wpabuf_put_u8(mbo, len); /* Length */
93 wpabuf_put_be24(mbo, OUI_WFA);
94 wpabuf_put_u8(mbo, MBO_ATTR_ID_NON_PREF_CHAN_REPORT);
98 static void wpas_mbo_non_pref_chan_subelement(struct wpa_supplicant *wpa_s,
99 struct wpabuf *mbo, u8 start,
102 size_t size = end - start + 7;
104 if (size + 2 > wpabuf_tailroom(mbo))
107 wpas_mbo_non_pref_chan_subelem_hdr(mbo, size);
108 wpas_mbo_non_pref_chan_attr_body(wpa_s, mbo, start, end);
112 static void wpas_mbo_non_pref_chan_attrs(struct wpa_supplicant *wpa_s,
113 struct wpabuf *mbo, int subelement)
116 struct wpa_mbo_non_pref_channel *start_pref;
118 if (!wpa_s->non_pref_chan || !wpa_s->non_pref_chan_num) {
120 wpas_mbo_non_pref_chan_subelem_hdr(mbo, 4);
123 start_pref = &wpa_s->non_pref_chan[0];
125 for (i = 1; i <= wpa_s->non_pref_chan_num; i++) {
126 struct wpa_mbo_non_pref_channel *non_pref = NULL;
128 if (i < wpa_s->non_pref_chan_num)
129 non_pref = &wpa_s->non_pref_chan[i];
131 non_pref->oper_class != start_pref->oper_class ||
132 non_pref->reason != start_pref->reason ||
133 non_pref->preference != start_pref->preference) {
135 wpas_mbo_non_pref_chan_subelement(wpa_s, mbo,
138 wpas_mbo_non_pref_chan_attr(wpa_s, mbo, start,
145 start_pref = non_pref;
151 int wpas_mbo_ie(struct wpa_supplicant *wpa_s, u8 *buf, size_t len)
156 if (len < MBO_IE_HEADER + 3 + 7)
159 /* Leave room for the MBO IE header */
160 mbo = wpabuf_alloc(len - MBO_IE_HEADER);
164 /* Add non-preferred channels attribute */
165 wpas_mbo_non_pref_chan_attrs(wpa_s, mbo, 0);
168 * Send cellular capabilities attribute even if AP does not advertise
169 * cellular capabilities.
171 wpabuf_put_u8(mbo, MBO_ATTR_ID_CELL_DATA_CAPA);
172 wpabuf_put_u8(mbo, 1);
173 wpabuf_put_u8(mbo, wpa_s->conf->mbo_cell_capa);
175 res = mbo_add_ie(buf, len, wpabuf_head_u8(mbo), wpabuf_len(mbo));
177 wpa_printf(MSG_ERROR, "Failed to add MBO IE");
184 static void wpas_mbo_send_wnm_notification(struct wpa_supplicant *wpa_s,
185 const u8 *data, size_t len)
191 * Send WNM-Notification Request frame only in case of a change in
192 * non-preferred channels list during association, if the AP supports
195 if (wpa_s->wpa_state != WPA_COMPLETED || !wpa_s->current_bss ||
196 !wpa_bss_get_vendor_ie(wpa_s->current_bss, MBO_IE_VENDOR_TYPE))
199 buf = wpabuf_alloc(4 + len);
203 wpabuf_put_u8(buf, WLAN_ACTION_WNM);
204 wpabuf_put_u8(buf, WNM_NOTIFICATION_REQ);
205 wpa_s->mbo_wnm_token++;
206 if (wpa_s->mbo_wnm_token == 0)
207 wpa_s->mbo_wnm_token++;
208 wpabuf_put_u8(buf, wpa_s->mbo_wnm_token);
209 wpabuf_put_u8(buf, WLAN_EID_VENDOR_SPECIFIC); /* Type */
211 wpabuf_put_data(buf, data, len);
213 res = wpa_drv_send_action(wpa_s, wpa_s->assoc_freq, 0, wpa_s->bssid,
214 wpa_s->own_addr, wpa_s->bssid,
215 wpabuf_head(buf), wpabuf_len(buf), 0);
217 wpa_printf(MSG_DEBUG,
218 "Failed to send WNM-Notification Request frame with non-preferred channel list");
224 static void wpas_mbo_non_pref_chan_changed(struct wpa_supplicant *wpa_s)
228 buf = wpabuf_alloc(512);
232 wpas_mbo_non_pref_chan_attrs(wpa_s, buf, 1);
233 wpas_mbo_send_wnm_notification(wpa_s, wpabuf_head_u8(buf),
239 static int wpa_non_pref_chan_is_eq(struct wpa_mbo_non_pref_channel *a,
240 struct wpa_mbo_non_pref_channel *b)
242 return a->oper_class == b->oper_class && a->chan == b->chan;
247 * wpa_non_pref_chan_cmp - Compare two channels for sorting
249 * In MBO IE non-preferred channel subelement we can put many channels in an
250 * attribute if they are in the same operating class and have the same
251 * preference and reason. To make it easy for the functions that build
252 * the IE attributes and WNM Request subelements, save the channels sorted
253 * by their oper_class and reason.
255 static int wpa_non_pref_chan_cmp(const void *_a, const void *_b)
257 const struct wpa_mbo_non_pref_channel *a = _a, *b = _b;
259 if (a->oper_class != b->oper_class)
260 return a->oper_class - b->oper_class;
261 if (a->reason != b->reason)
262 return a->reason - b->reason;
263 return a->preference - b->preference;
267 int wpas_mbo_update_non_pref_chan(struct wpa_supplicant *wpa_s,
268 const char *non_pref_chan)
270 char *cmd, *token, *context = NULL;
271 struct wpa_mbo_non_pref_channel *chans = NULL, *tmp_chans;
272 size_t num = 0, size = 0;
275 wpa_printf(MSG_DEBUG, "MBO: Update non-preferred channels, non_pref_chan=%s",
276 non_pref_chan ? non_pref_chan : "N/A");
279 * The shortest channel configuration is 10 characters - commas, 3
280 * colons, and 4 values that one of them (oper_class) is 2 digits or
283 if (!non_pref_chan || os_strlen(non_pref_chan) < 10)
286 cmd = os_strdup(non_pref_chan);
290 while ((token = str_token(cmd, " ", &context))) {
291 struct wpa_mbo_non_pref_channel *chan;
293 unsigned int _oper_class;
295 unsigned int _preference;
296 unsigned int _reason;
299 size = size ? size * 2 : 1;
300 tmp_chans = os_realloc_array(chans, size,
303 wpa_printf(MSG_ERROR,
304 "Couldn't reallocate non_pref_chan");
312 ret = sscanf(token, "%u:%u:%u:%u", &_oper_class,
313 &_chan, &_preference, &_reason);
315 _oper_class > 255 || _chan > 255 ||
316 _preference > 255 || _reason > 65535 ) {
317 wpa_printf(MSG_ERROR, "Invalid non-pref chan input %s",
321 chan->oper_class = _oper_class;
323 chan->preference = _preference;
324 chan->reason = _reason;
326 if (wpas_mbo_validate_non_pref_chan(chan->oper_class,
327 chan->chan, chan->reason)) {
328 wpa_printf(MSG_ERROR,
329 "Invalid non_pref_chan: oper class %d chan %d reason %d",
330 chan->oper_class, chan->chan, chan->reason);
334 for (i = 0; i < num; i++)
335 if (wpa_non_pref_chan_is_eq(chan, &chans[i]))
338 wpa_printf(MSG_ERROR,
339 "oper class %d chan %d is duplicated",
340 chan->oper_class, chan->chan);
350 qsort(chans, num, sizeof(struct wpa_mbo_non_pref_channel),
351 wpa_non_pref_chan_cmp);
355 os_free(wpa_s->non_pref_chan);
356 wpa_s->non_pref_chan = chans;
357 wpa_s->non_pref_chan_num = num;
358 wpas_mbo_non_pref_chan_changed(wpa_s);
369 void wpas_mbo_scan_ie(struct wpa_supplicant *wpa_s, struct wpabuf *ie)
371 wpabuf_put_u8(ie, WLAN_EID_VENDOR_SPECIFIC);
372 wpabuf_put_u8(ie, 7);
373 wpabuf_put_be24(ie, OUI_WFA);
374 wpabuf_put_u8(ie, MBO_OUI_TYPE);
376 wpabuf_put_u8(ie, MBO_ATTR_ID_CELL_DATA_CAPA);
377 wpabuf_put_u8(ie, 1);
378 wpabuf_put_u8(ie, wpa_s->conf->mbo_cell_capa);
386 static enum chan_allowed allow_channel(struct hostapd_hw_modes *mode, u8 chan,
391 for (i = 0; i < mode->num_channels; i++) {
392 if (mode->channels[i].chan == chan)
396 if (i == mode->num_channels ||
397 (mode->channels[i].flag & HOSTAPD_CHAN_DISABLED))
401 *flags = mode->channels[i].flag;
407 static int get_center_80mhz(struct hostapd_hw_modes *mode, u8 channel)
409 u8 center_channels[] = {42, 58, 106, 122, 138, 155};
412 if (mode->mode != HOSTAPD_MODE_IEEE80211A)
415 for (i = 0; i < ARRAY_SIZE(center_channels); i++) {
417 * In 80 MHz, the bandwidth "spans" 12 channels (e.g., 36-48),
418 * so the center channel is 6 channels away from the start/end.
420 if (channel >= center_channels[i] - 6 &&
421 channel <= center_channels[i] + 6)
422 return center_channels[i];
429 static enum chan_allowed verify_80mhz(struct hostapd_hw_modes *mode, u8 channel)
434 center_chan = get_center_80mhz(mode, channel);
438 /* check all the channels are available */
439 for (i = 0; i < 4; i++) {
441 u8 adj_chan = center_chan - 6 + i * 4;
443 if (allow_channel(mode, adj_chan, &flags) == NOT_ALLOWED)
446 if ((i == 0 && !(flags & HOSTAPD_CHAN_VHT_10_70)) ||
447 (i == 1 && !(flags & HOSTAPD_CHAN_VHT_30_50)) ||
448 (i == 2 && !(flags & HOSTAPD_CHAN_VHT_50_30)) ||
449 (i == 3 && !(flags & HOSTAPD_CHAN_VHT_70_10)))
457 static int get_center_160mhz(struct hostapd_hw_modes *mode, u8 channel)
459 u8 center_channels[] = { 50, 114 };
462 if (mode->mode != HOSTAPD_MODE_IEEE80211A)
465 for (i = 0; i < ARRAY_SIZE(center_channels); i++) {
467 * In 160 MHz, the bandwidth "spans" 28 channels (e.g., 36-64),
468 * so the center channel is 14 channels away from the start/end.
470 if (channel >= center_channels[i] - 14 &&
471 channel <= center_channels[i] + 14)
472 return center_channels[i];
479 static enum chan_allowed verify_160mhz(struct hostapd_hw_modes *mode,
485 center_chan = get_center_160mhz(mode, channel);
489 /* Check all the channels are available */
490 for (i = 0; i < 8; i++) {
492 u8 adj_chan = center_chan - 14 + i * 4;
494 if (allow_channel(mode, adj_chan, &flags) == NOT_ALLOWED)
497 if ((i == 0 && !(flags & HOSTAPD_CHAN_VHT_10_150)) ||
498 (i == 1 && !(flags & HOSTAPD_CHAN_VHT_30_130)) ||
499 (i == 2 && !(flags & HOSTAPD_CHAN_VHT_50_110)) ||
500 (i == 3 && !(flags & HOSTAPD_CHAN_VHT_70_90)) ||
501 (i == 4 && !(flags & HOSTAPD_CHAN_VHT_90_70)) ||
502 (i == 5 && !(flags & HOSTAPD_CHAN_VHT_110_50)) ||
503 (i == 6 && !(flags & HOSTAPD_CHAN_VHT_130_30)) ||
504 (i == 7 && !(flags & HOSTAPD_CHAN_VHT_150_10)))
512 static enum chan_allowed verify_channel(struct hostapd_hw_modes *mode,
515 unsigned int flag = 0;
516 enum chan_allowed res, res2;
518 res2 = res = allow_channel(mode, channel, &flag);
519 if (bw == BW40MINUS) {
520 if (!(flag & HOSTAPD_CHAN_HT40MINUS))
522 res2 = allow_channel(mode, channel - 4, NULL);
523 } else if (bw == BW40PLUS) {
524 if (!(flag & HOSTAPD_CHAN_HT40PLUS))
526 res2 = allow_channel(mode, channel + 4, NULL);
527 } else if (bw == BW80) {
529 * channel is a center channel and as such, not necessarily a
530 * valid 20 MHz channels. Override earlier allow_channel()
531 * result and use only the 80 MHz specific version.
533 res2 = res = verify_80mhz(mode, channel);
534 } else if (bw == BW160) {
536 * channel is a center channel and as such, not necessarily a
537 * valid 20 MHz channels. Override earlier allow_channel()
538 * result and use only the 160 MHz specific version.
540 res2 = res = verify_160mhz(mode, channel);
541 } else if (bw == BW80P80) {
543 * channel is a center channel and as such, not necessarily a
544 * valid 20 MHz channels. Override earlier allow_channel()
545 * result and use only the 80 MHz specific version.
547 res2 = res = verify_80mhz(mode, channel);
550 if (res == NOT_ALLOWED || res2 == NOT_ALLOWED)
557 static int wpas_op_class_supported(struct wpa_supplicant *wpa_s,
558 const struct oper_class_map *op_class)
562 struct hostapd_hw_modes *mode;
565 mode = get_mode(wpa_s->hw.modes, wpa_s->hw.num_modes, op_class->mode);
569 if (op_class->op_class == 128) {
570 u8 channels[] = { 42, 58, 106, 122, 138, 155 };
572 for (i = 0; i < ARRAY_SIZE(channels); i++) {
573 if (verify_channel(mode, channels[i], op_class->bw) ==
581 if (op_class->op_class == 129) {
582 /* Check if either 160 MHz channels is allowed */
583 return verify_channel(mode, 50, op_class->bw) == ALLOWED ||
584 verify_channel(mode, 114, op_class->bw) == ALLOWED;
587 if (op_class->op_class == 130) {
588 /* Need at least two non-contiguous 80 MHz segments */
591 if (verify_channel(mode, 42, op_class->bw) == ALLOWED ||
592 verify_channel(mode, 58, op_class->bw) == ALLOWED)
594 if (verify_channel(mode, 106, op_class->bw) == ALLOWED ||
595 verify_channel(mode, 122, op_class->bw) == ALLOWED ||
596 verify_channel(mode, 138, op_class->bw) == ALLOWED)
598 if (verify_channel(mode, 106, op_class->bw) == ALLOWED &&
599 verify_channel(mode, 138, op_class->bw) == ALLOWED)
601 if (verify_channel(mode, 155, op_class->bw) == ALLOWED)
611 for (chan = op_class->min_chan; chan <= op_class->max_chan;
612 chan += op_class->inc) {
613 if (verify_channel(mode, chan, op_class->bw) == ALLOWED) {
623 int wpas_mbo_supp_op_class_ie(struct wpa_supplicant *wpa_s, int freq, u8 *pos,
627 u8 op, current, chan;
632 * Assume 20 MHz channel for now.
633 * TODO: Use the secondary channel and VHT channel width that will be
634 * used after association.
636 if (ieee80211_freq_to_channel_ext(freq, 0, VHT_CHANWIDTH_USE_HT,
637 ¤t, &chan) == NUM_HOSTAPD_MODES)
641 * Need 3 bytes for EID, length, and current operating class, plus
642 * 1 byte for every other supported operating class.
644 buf = wpabuf_alloc(global_op_class_size + 3);
648 wpabuf_put_u8(buf, WLAN_EID_SUPPORTED_OPERATING_CLASSES);
649 /* Will set the length later, putting a placeholder */
650 ie_len = wpabuf_put(buf, 1);
651 wpabuf_put_u8(buf, current);
653 for (op = 0; global_op_class[op].op_class; op++) {
654 if (wpas_op_class_supported(wpa_s, &global_op_class[op]))
655 wpabuf_put_u8(buf, global_op_class[op].op_class);
658 *ie_len = wpabuf_len(buf) - 2;
659 if (*ie_len < 2 || wpabuf_len(buf) > len) {
660 wpa_printf(MSG_ERROR,
661 "Failed to add supported operating classes IE");
664 os_memcpy(pos, wpabuf_head(buf), wpabuf_len(buf));
665 res = wpabuf_len(buf);
666 wpa_hexdump_buf(MSG_DEBUG,
667 "MBO: Added supported operating classes IE",
676 void wpas_mbo_ie_trans_req(struct wpa_supplicant *wpa_s, const u8 *mbo_ie,
679 const u8 *pos, *cell_pref = NULL, *reason = NULL;
681 u16 disallowed_sec = 0;
683 if (len <= 4 || WPA_GET_BE24(mbo_ie) != OUI_WFA ||
684 mbo_ie[3] != MBO_OUI_TYPE)
699 case MBO_ATTR_ID_CELL_DATA_PREF:
703 if (wpa_s->conf->mbo_cell_capa ==
704 MBO_CELL_CAPA_AVAILABLE)
707 wpa_printf(MSG_DEBUG,
708 "MBO: Station does not support Cellular data connection");
710 case MBO_ATTR_ID_TRANSITION_REASON:
716 case MBO_ATTR_ID_ASSOC_RETRY_DELAY:
720 if (wpa_s->wnm_mode &
721 WNM_BSS_TM_REQ_BSS_TERMINATION_INCLUDED) {
722 wpa_printf(MSG_DEBUG,
723 "MBO: Unexpected association retry delay, BSS is terminating");
725 } else if (wpa_s->wnm_mode &
726 WNM_BSS_TM_REQ_DISASSOC_IMMINENT) {
727 disallowed_sec = WPA_GET_LE16(pos);
729 wpa_printf(MSG_DEBUG,
730 "MBO: Association retry delay attribute not in disassoc imminent mode");
734 case MBO_ATTR_ID_AP_CAPA_IND:
735 case MBO_ATTR_ID_NON_PREF_CHAN_REPORT:
736 case MBO_ATTR_ID_CELL_DATA_CAPA:
737 case MBO_ATTR_ID_ASSOC_DISALLOW:
738 case MBO_ATTR_ID_TRANSITION_REJECT_REASON:
739 wpa_printf(MSG_DEBUG,
740 "MBO: Attribute %d should not be included in BTM Request frame",
744 wpa_printf(MSG_DEBUG, "MBO: Unknown attribute id %u",
754 wpa_msg(wpa_s, MSG_INFO, MBO_CELL_PREFERENCE "preference=%u",
758 wpa_msg(wpa_s, MSG_INFO, MBO_TRANSITION_REASON "reason=%u",
761 if (disallowed_sec && wpa_s->current_bss)
762 wpa_bss_tmp_disallow(wpa_s, wpa_s->current_bss->bssid,
767 wpa_printf(MSG_DEBUG, "MBO IE parsing failed (id=%u len=%u left=%zu)",
772 size_t wpas_mbo_ie_bss_trans_reject(struct wpa_supplicant *wpa_s, u8 *pos,
774 enum mbo_transition_reject_reason reason)
778 reject_attr[0] = MBO_ATTR_ID_TRANSITION_REJECT_REASON;
780 reject_attr[2] = reason;
782 return mbo_add_ie(pos, len, reject_attr, sizeof(reject_attr));
786 void wpas_mbo_update_cell_capa(struct wpa_supplicant *wpa_s, u8 mbo_cell_capa)
790 if (wpa_s->conf->mbo_cell_capa == mbo_cell_capa) {
791 wpa_printf(MSG_DEBUG,
792 "MBO: Cellular capability already set to %u",
797 wpa_s->conf->mbo_cell_capa = mbo_cell_capa;
799 cell_capa[0] = WLAN_EID_VENDOR_SPECIFIC;
800 cell_capa[1] = 5; /* Length */
801 WPA_PUT_BE24(cell_capa + 2, OUI_WFA);
802 cell_capa[5] = MBO_ATTR_ID_CELL_DATA_CAPA;
803 cell_capa[6] = mbo_cell_capa;
805 wpas_mbo_send_wnm_notification(wpa_s, cell_capa, 7);
806 wpa_supplicant_set_default_scan_ies(wpa_s);