1 /*
2 * Driver interaction with Linux nl80211/cfg80211 - Event processing
3 * Copyright (c) 2002-2017, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2007, Johannes Berg <johannes@sipsolutions.net>
5 * Copyright (c) 2009-2010, Atheros Communications
6 *
7 * This software may be distributed under the terms of the BSD license.
8 * See README for more details.
9 */
10
11 #include "includes.h"
12 #include <netlink/genl/genl.h>
13
14 #include "utils/common.h"
15 #include "utils/eloop.h"
16 #include "common/qca-vendor.h"
17 #include "common/qca-vendor-attr.h"
18 #include "common/brcm_vendor.h"
19 #include "common/ieee802_11_defs.h"
20 #include "common/ieee802_11_common.h"
21 #include "driver_nl80211.h"
22 #ifdef CONFIG_VENDOR_EXT
23 #include "vendor_ext.h"
24 #endif
25
26 #if defined(CONFIG_OPEN_HARMONY_PATCH) && defined(CONFIG_MIRACAST_SINK_OPT)
27 #include "hm_miracast_sink.h"
28 #endif
29
30 #ifdef CONFIG_P2P_CHR
31 #include "wpa_hw_p2p_chr.h"
32 #endif
33
34 static void
35 nl80211_control_port_frame_tx_status(struct i802_bss *bss,
36 const u8 *frame, size_t len,
37 struct nlattr *ack, struct nlattr *cookie);
38
39
nl80211_command_to_string(enum nl80211_commands cmd)40 const char * nl80211_command_to_string(enum nl80211_commands cmd)
41 {
42 #define C2S(x) case x: return #x;
43 switch (cmd) {
44 C2S(NL80211_CMD_UNSPEC)
45 C2S(NL80211_CMD_GET_WIPHY)
46 C2S(NL80211_CMD_SET_WIPHY)
47 C2S(NL80211_CMD_NEW_WIPHY)
48 C2S(NL80211_CMD_DEL_WIPHY)
49 C2S(NL80211_CMD_GET_INTERFACE)
50 C2S(NL80211_CMD_SET_INTERFACE)
51 C2S(NL80211_CMD_NEW_INTERFACE)
52 C2S(NL80211_CMD_DEL_INTERFACE)
53 C2S(NL80211_CMD_GET_KEY)
54 C2S(NL80211_CMD_SET_KEY)
55 C2S(NL80211_CMD_NEW_KEY)
56 C2S(NL80211_CMD_DEL_KEY)
57 C2S(NL80211_CMD_GET_BEACON)
58 C2S(NL80211_CMD_SET_BEACON)
59 C2S(NL80211_CMD_START_AP)
60 C2S(NL80211_CMD_STOP_AP)
61 C2S(NL80211_CMD_GET_STATION)
62 C2S(NL80211_CMD_SET_STATION)
63 C2S(NL80211_CMD_NEW_STATION)
64 C2S(NL80211_CMD_DEL_STATION)
65 C2S(NL80211_CMD_GET_MPATH)
66 C2S(NL80211_CMD_SET_MPATH)
67 C2S(NL80211_CMD_NEW_MPATH)
68 C2S(NL80211_CMD_DEL_MPATH)
69 C2S(NL80211_CMD_SET_BSS)
70 C2S(NL80211_CMD_SET_REG)
71 C2S(NL80211_CMD_REQ_SET_REG)
72 C2S(NL80211_CMD_GET_MESH_CONFIG)
73 C2S(NL80211_CMD_SET_MESH_CONFIG)
74 C2S(NL80211_CMD_SET_MGMT_EXTRA_IE)
75 C2S(NL80211_CMD_GET_REG)
76 C2S(NL80211_CMD_GET_SCAN)
77 C2S(NL80211_CMD_TRIGGER_SCAN)
78 C2S(NL80211_CMD_NEW_SCAN_RESULTS)
79 C2S(NL80211_CMD_SCAN_ABORTED)
80 C2S(NL80211_CMD_REG_CHANGE)
81 C2S(NL80211_CMD_AUTHENTICATE)
82 C2S(NL80211_CMD_ASSOCIATE)
83 C2S(NL80211_CMD_DEAUTHENTICATE)
84 C2S(NL80211_CMD_DISASSOCIATE)
85 C2S(NL80211_CMD_MICHAEL_MIC_FAILURE)
86 C2S(NL80211_CMD_REG_BEACON_HINT)
87 C2S(NL80211_CMD_JOIN_IBSS)
88 C2S(NL80211_CMD_LEAVE_IBSS)
89 C2S(NL80211_CMD_TESTMODE)
90 C2S(NL80211_CMD_CONNECT)
91 C2S(NL80211_CMD_ROAM)
92 C2S(NL80211_CMD_DISCONNECT)
93 C2S(NL80211_CMD_SET_WIPHY_NETNS)
94 C2S(NL80211_CMD_GET_SURVEY)
95 C2S(NL80211_CMD_NEW_SURVEY_RESULTS)
96 C2S(NL80211_CMD_SET_PMKSA)
97 C2S(NL80211_CMD_DEL_PMKSA)
98 C2S(NL80211_CMD_FLUSH_PMKSA)
99 C2S(NL80211_CMD_REMAIN_ON_CHANNEL)
100 C2S(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL)
101 C2S(NL80211_CMD_SET_TX_BITRATE_MASK)
102 C2S(NL80211_CMD_REGISTER_FRAME)
103 C2S(NL80211_CMD_FRAME)
104 C2S(NL80211_CMD_FRAME_TX_STATUS)
105 C2S(NL80211_CMD_SET_POWER_SAVE)
106 C2S(NL80211_CMD_GET_POWER_SAVE)
107 C2S(NL80211_CMD_SET_CQM)
108 C2S(NL80211_CMD_NOTIFY_CQM)
109 C2S(NL80211_CMD_SET_CHANNEL)
110 C2S(NL80211_CMD_SET_WDS_PEER)
111 C2S(NL80211_CMD_FRAME_WAIT_CANCEL)
112 C2S(NL80211_CMD_JOIN_MESH)
113 C2S(NL80211_CMD_LEAVE_MESH)
114 C2S(NL80211_CMD_UNPROT_DEAUTHENTICATE)
115 C2S(NL80211_CMD_UNPROT_DISASSOCIATE)
116 C2S(NL80211_CMD_NEW_PEER_CANDIDATE)
117 C2S(NL80211_CMD_GET_WOWLAN)
118 C2S(NL80211_CMD_SET_WOWLAN)
119 C2S(NL80211_CMD_START_SCHED_SCAN)
120 C2S(NL80211_CMD_STOP_SCHED_SCAN)
121 C2S(NL80211_CMD_SCHED_SCAN_RESULTS)
122 C2S(NL80211_CMD_SCHED_SCAN_STOPPED)
123 C2S(NL80211_CMD_SET_REKEY_OFFLOAD)
124 C2S(NL80211_CMD_PMKSA_CANDIDATE)
125 C2S(NL80211_CMD_TDLS_OPER)
126 C2S(NL80211_CMD_TDLS_MGMT)
127 C2S(NL80211_CMD_UNEXPECTED_FRAME)
128 C2S(NL80211_CMD_PROBE_CLIENT)
129 C2S(NL80211_CMD_REGISTER_BEACONS)
130 C2S(NL80211_CMD_UNEXPECTED_4ADDR_FRAME)
131 C2S(NL80211_CMD_SET_NOACK_MAP)
132 C2S(NL80211_CMD_CH_SWITCH_NOTIFY)
133 C2S(NL80211_CMD_START_P2P_DEVICE)
134 C2S(NL80211_CMD_STOP_P2P_DEVICE)
135 C2S(NL80211_CMD_CONN_FAILED)
136 C2S(NL80211_CMD_SET_MCAST_RATE)
137 C2S(NL80211_CMD_SET_MAC_ACL)
138 C2S(NL80211_CMD_RADAR_DETECT)
139 C2S(NL80211_CMD_GET_PROTOCOL_FEATURES)
140 C2S(NL80211_CMD_UPDATE_FT_IES)
141 C2S(NL80211_CMD_FT_EVENT)
142 C2S(NL80211_CMD_CRIT_PROTOCOL_START)
143 C2S(NL80211_CMD_CRIT_PROTOCOL_STOP)
144 C2S(NL80211_CMD_GET_COALESCE)
145 C2S(NL80211_CMD_SET_COALESCE)
146 C2S(NL80211_CMD_CHANNEL_SWITCH)
147 C2S(NL80211_CMD_VENDOR)
148 C2S(NL80211_CMD_SET_QOS_MAP)
149 C2S(NL80211_CMD_ADD_TX_TS)
150 C2S(NL80211_CMD_DEL_TX_TS)
151 C2S(NL80211_CMD_GET_MPP)
152 C2S(NL80211_CMD_JOIN_OCB)
153 C2S(NL80211_CMD_LEAVE_OCB)
154 C2S(NL80211_CMD_CH_SWITCH_STARTED_NOTIFY)
155 C2S(NL80211_CMD_TDLS_CHANNEL_SWITCH)
156 C2S(NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH)
157 C2S(NL80211_CMD_WIPHY_REG_CHANGE)
158 C2S(NL80211_CMD_ABORT_SCAN)
159 C2S(NL80211_CMD_START_NAN)
160 C2S(NL80211_CMD_STOP_NAN)
161 C2S(NL80211_CMD_ADD_NAN_FUNCTION)
162 C2S(NL80211_CMD_DEL_NAN_FUNCTION)
163 C2S(NL80211_CMD_CHANGE_NAN_CONFIG)
164 C2S(NL80211_CMD_NAN_MATCH)
165 C2S(NL80211_CMD_SET_MULTICAST_TO_UNICAST)
166 C2S(NL80211_CMD_UPDATE_CONNECT_PARAMS)
167 C2S(NL80211_CMD_SET_PMK)
168 C2S(NL80211_CMD_DEL_PMK)
169 C2S(NL80211_CMD_PORT_AUTHORIZED)
170 C2S(NL80211_CMD_RELOAD_REGDB)
171 C2S(NL80211_CMD_EXTERNAL_AUTH)
172 C2S(NL80211_CMD_STA_OPMODE_CHANGED)
173 C2S(NL80211_CMD_CONTROL_PORT_FRAME)
174 C2S(NL80211_CMD_GET_FTM_RESPONDER_STATS)
175 C2S(NL80211_CMD_PEER_MEASUREMENT_START)
176 C2S(NL80211_CMD_PEER_MEASUREMENT_RESULT)
177 C2S(NL80211_CMD_PEER_MEASUREMENT_COMPLETE)
178 C2S(NL80211_CMD_NOTIFY_RADAR)
179 C2S(NL80211_CMD_UPDATE_OWE_INFO)
180 C2S(NL80211_CMD_PROBE_MESH_LINK)
181 C2S(NL80211_CMD_SET_TID_CONFIG)
182 C2S(NL80211_CMD_UNPROT_BEACON)
183 C2S(NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS)
184 C2S(NL80211_CMD_SET_SAR_SPECS)
185 C2S(NL80211_CMD_OBSS_COLOR_COLLISION)
186 C2S(NL80211_CMD_COLOR_CHANGE_REQUEST)
187 C2S(NL80211_CMD_COLOR_CHANGE_STARTED)
188 C2S(NL80211_CMD_COLOR_CHANGE_ABORTED)
189 C2S(NL80211_CMD_COLOR_CHANGE_COMPLETED)
190 C2S(NL80211_CMD_SET_FILS_AAD)
191 C2S(NL80211_CMD_ASSOC_COMEBACK)
192 C2S(NL80211_CMD_ADD_LINK)
193 C2S(NL80211_CMD_REMOVE_LINK)
194 C2S(NL80211_CMD_ADD_LINK_STA)
195 C2S(NL80211_CMD_MODIFY_LINK_STA)
196 C2S(NL80211_CMD_REMOVE_LINK_STA)
197 C2S(NL80211_CMD_SET_HW_TIMESTAMP)
198 C2S(NL80211_CMD_LINKS_REMOVED)
199 #ifdef CONFIG_MLD_PATCH
200 C2S(NL80211_CMD_LINK_SWITCH_EVENT)
201 #endif
202 C2S(NL80211_CMD_MLO_WORK_STATE_EVENT)
203 C2S(__NL80211_CMD_AFTER_LAST)
204 }
205 #undef C2S
206
207 return "NL80211_CMD_UNKNOWN";
208 }
209
210
mlme_event_auth(struct wpa_driver_nl80211_data * drv,const u8 * frame,size_t len)211 static void mlme_event_auth(struct wpa_driver_nl80211_data *drv,
212 const u8 *frame, size_t len)
213 {
214 const struct ieee80211_mgmt *mgmt;
215 union wpa_event_data event;
216
217 if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
218 drv->force_connect_cmd) {
219 /*
220 * Avoid reporting two association events that would confuse
221 * the core code.
222 */
223 wpa_printf(MSG_DEBUG,
224 "nl80211: Ignore auth event when using driver SME");
225 return;
226 }
227
228 wpa_printf(MSG_DEBUG, "nl80211: Authenticate event");
229 mgmt = (const struct ieee80211_mgmt *) frame;
230 if (len < 24 + sizeof(mgmt->u.auth)) {
231 wpa_printf(MSG_DEBUG, "nl80211: Too short association event "
232 "frame");
233 return;
234 }
235
236 os_memcpy(drv->auth_bssid, mgmt->sa, ETH_ALEN);
237 os_memset(drv->auth_attempt_bssid, 0, ETH_ALEN);
238 os_memset(&event, 0, sizeof(event));
239 os_memcpy(event.auth.peer, mgmt->sa, ETH_ALEN);
240 event.auth.auth_type = le_to_host16(mgmt->u.auth.auth_alg);
241 event.auth.auth_transaction =
242 le_to_host16(mgmt->u.auth.auth_transaction);
243 event.auth.status_code = le_to_host16(mgmt->u.auth.status_code);
244 if (len > 24 + sizeof(mgmt->u.auth)) {
245 event.auth.ies = mgmt->u.auth.variable;
246 event.auth.ies_len = len - 24 - sizeof(mgmt->u.auth);
247 }
248
249 wpa_supplicant_event(drv->ctx, EVENT_AUTH, &event);
250 }
251
252
nl80211_parse_wmm_params(struct nlattr * wmm_attr,struct wmm_params * wmm_params)253 static void nl80211_parse_wmm_params(struct nlattr *wmm_attr,
254 struct wmm_params *wmm_params)
255 {
256 struct nlattr *wmm_info[NL80211_STA_WME_MAX + 1];
257 static struct nla_policy wme_policy[NL80211_STA_WME_MAX + 1] = {
258 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
259 };
260
261 if (!wmm_attr ||
262 nla_parse_nested(wmm_info, NL80211_STA_WME_MAX, wmm_attr,
263 wme_policy) ||
264 !wmm_info[NL80211_STA_WME_UAPSD_QUEUES])
265 return;
266
267 wmm_params->uapsd_queues =
268 nla_get_u8(wmm_info[NL80211_STA_WME_UAPSD_QUEUES]);
269 wmm_params->info_bitmap |= WMM_PARAMS_UAPSD_QUEUES_INFO;
270 }
271
272
mlme_event_assoc(struct wpa_driver_nl80211_data * drv,const u8 * frame,size_t len,struct nlattr * wmm,struct nlattr * req_ie)273 static void mlme_event_assoc(struct wpa_driver_nl80211_data *drv,
274 const u8 *frame, size_t len, struct nlattr *wmm,
275 struct nlattr *req_ie)
276 {
277 const struct ieee80211_mgmt *mgmt;
278 union wpa_event_data event;
279 u16 status;
280 int ssid_len;
281
282 if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
283 drv->force_connect_cmd) {
284 /*
285 * Avoid reporting two association events that would confuse
286 * the core code.
287 */
288 wpa_printf(MSG_DEBUG,
289 "nl80211: Ignore assoc event when using driver SME");
290 return;
291 }
292
293 wpa_printf(MSG_DEBUG, "nl80211: Associate event");
294 mgmt = (const struct ieee80211_mgmt *) frame;
295 if (len < 24 + sizeof(mgmt->u.assoc_resp)) {
296 wpa_printf(MSG_DEBUG, "nl80211: Too short association event "
297 "frame");
298 return;
299 }
300
301 status = le_to_host16(mgmt->u.assoc_resp.status_code);
302 if (status != WLAN_STATUS_SUCCESS) {
303 os_memset(&event, 0, sizeof(event));
304 event.assoc_reject.bssid = mgmt->bssid;
305 if (len > 24 + sizeof(mgmt->u.assoc_resp)) {
306 event.assoc_reject.resp_ies =
307 (u8 *) mgmt->u.assoc_resp.variable;
308 event.assoc_reject.resp_ies_len =
309 len - 24 - sizeof(mgmt->u.assoc_resp);
310 }
311 event.assoc_reject.status_code = status;
312
313 wpa_supplicant_event(drv->ctx, EVENT_ASSOC_REJECT, &event);
314 return;
315 }
316
317 drv->associated = 1;
318 os_memcpy(drv->bssid, mgmt->sa, ETH_ALEN);
319 os_memcpy(drv->prev_bssid, mgmt->sa, ETH_ALEN);
320
321 os_memset(&event, 0, sizeof(event));
322 event.assoc_info.resp_frame = frame;
323 event.assoc_info.resp_frame_len = len;
324 if (len > 24 + sizeof(mgmt->u.assoc_resp)) {
325 event.assoc_info.resp_ies = (u8 *) mgmt->u.assoc_resp.variable;
326 event.assoc_info.resp_ies_len =
327 len - 24 - sizeof(mgmt->u.assoc_resp);
328 }
329
330 if (req_ie) {
331 event.assoc_info.req_ies = nla_data(req_ie);
332 event.assoc_info.req_ies_len = nla_len(req_ie);
333 }
334
335 /* When this association was initiated outside of wpa_supplicant,
336 * drv->ssid needs to be set here to satisfy later checking. */
337 ssid_len = nl80211_get_assoc_ssid(drv, drv->ssid);
338 if (ssid_len > 0) {
339 drv->ssid_len = ssid_len;
340 wpa_printf(MSG_INFO,
341 "nl80211: Set drv->ssid based on scan res info to '%s'",
342 anonymize_ssid(wpa_ssid_txt(drv->ssid, drv->ssid_len)));
343 }
344
345 event.assoc_info.freq = drv->assoc_freq;
346 drv->first_bss->flink->freq = drv->assoc_freq;
347
348 nl80211_parse_wmm_params(wmm, &event.assoc_info.wmm_params);
349
350 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, &event);
351 }
352
353
354 #ifdef CONFIG_DRIVER_NL80211_QCA
355
qca_drv_connect_fail_reason_code_handler(struct nl_msg * msg,void * arg)356 static int qca_drv_connect_fail_reason_code_handler(struct nl_msg *msg,
357 void *arg)
358 {
359 struct nlattr *tb[NL80211_ATTR_MAX + 1];
360 struct nlattr *tb_sta_info[QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_MAX + 1];
361 struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
362 u32 *reason_code = arg;
363
364 *reason_code = 0;
365 nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
366 genlmsg_attrlen(gnlh, 0), NULL);
367
368 if (!tb[NL80211_ATTR_VENDOR_DATA]) {
369 wpa_printf(MSG_ERROR, "%s: Vendor data not found", __func__);
370 return NL_SKIP;
371 }
372
373 nla_parse(tb_sta_info, QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_MAX,
374 nla_data(tb[NL80211_ATTR_VENDOR_DATA]),
375 nla_len(tb[NL80211_ATTR_VENDOR_DATA]), NULL);
376
377 if (!tb_sta_info[QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_CONNECT_FAIL_REASON_CODE]) {
378 wpa_printf(MSG_INFO, "%s: Vendor attr not found", __func__);
379 return NL_SKIP;
380 }
381
382 *reason_code = nla_get_u32(tb_sta_info[QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_CONNECT_FAIL_REASON_CODE]);
383
384 return NL_SKIP;
385 }
386
387
388 static enum qca_sta_connect_fail_reason_codes
drv_get_connect_fail_reason_code(struct wpa_driver_nl80211_data * drv)389 drv_get_connect_fail_reason_code(struct wpa_driver_nl80211_data *drv)
390 {
391 enum qca_sta_connect_fail_reason_codes reason_code;
392 struct nl_msg *msg;
393 int ret;
394
395 msg = nl80211_drv_msg(drv, 0, NL80211_CMD_VENDOR);
396 if (!msg || nla_put_u32(msg, NL80211_ATTR_VENDOR_ID, OUI_QCA) ||
397 nla_put_u32(msg, NL80211_ATTR_VENDOR_SUBCMD,
398 QCA_NL80211_VENDOR_SUBCMD_GET_STA_INFO)) {
399 nlmsg_free(msg);
400 return 0;
401 }
402
403 ret = send_and_recv_resp(drv, msg,
404 qca_drv_connect_fail_reason_code_handler,
405 &reason_code);
406 if (ret)
407 wpa_printf(MSG_DEBUG,
408 "nl80211: Get connect fail reason_code failed: ret=%d (%s)",
409 ret, strerror(-ret));
410
411 return reason_code;
412 }
413
414
415 static enum sta_connect_fail_reason_codes
convert_connect_fail_reason_codes(enum qca_sta_connect_fail_reason_codes reason_code)416 convert_connect_fail_reason_codes(enum qca_sta_connect_fail_reason_codes
417 reason_code)
418 {
419 switch (reason_code) {
420 case QCA_STA_CONNECT_FAIL_REASON_NO_BSS_FOUND:
421 return STA_CONNECT_FAIL_REASON_NO_BSS_FOUND;
422 case QCA_STA_CONNECT_FAIL_REASON_AUTH_TX_FAIL:
423 return STA_CONNECT_FAIL_REASON_AUTH_TX_FAIL;
424 case QCA_STA_CONNECT_FAIL_REASON_AUTH_NO_ACK_RECEIVED:
425 return STA_CONNECT_FAIL_REASON_AUTH_NO_ACK_RECEIVED;
426 case QCA_STA_CONNECT_FAIL_REASON_AUTH_NO_RESP_RECEIVED:
427 return STA_CONNECT_FAIL_REASON_AUTH_NO_RESP_RECEIVED;
428 case QCA_STA_CONNECT_FAIL_REASON_ASSOC_REQ_TX_FAIL:
429 return STA_CONNECT_FAIL_REASON_ASSOC_REQ_TX_FAIL;
430 case QCA_STA_CONNECT_FAIL_REASON_ASSOC_NO_ACK_RECEIVED:
431 return STA_CONNECT_FAIL_REASON_ASSOC_NO_ACK_RECEIVED;
432 case QCA_STA_CONNECT_FAIL_REASON_ASSOC_NO_RESP_RECEIVED:
433 return STA_CONNECT_FAIL_REASON_ASSOC_NO_RESP_RECEIVED;
434 default:
435 return STA_CONNECT_FAIL_REASON_UNSPECIFIED;
436 }
437 }
438
439
qca_nl80211_link_reconfig_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)440 static void qca_nl80211_link_reconfig_event(struct wpa_driver_nl80211_data *drv,
441 u8 *data, size_t len)
442 {
443 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_MAX + 1];
444 u16 removed_links;
445 u8 *ap_mld;
446 int i;
447
448 if (!data)
449 return;
450
451 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_MAX,
452 (struct nlattr *) data, len, NULL) ||
453 !tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_AP_MLD_ADDR])
454 return;
455
456 ap_mld = nla_data(tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_AP_MLD_ADDR]);
457 wpa_printf(MSG_DEBUG, "nl80211: AP MLD address " MACSTR
458 " received in link reconfig event", MAC2STR(ap_mld));
459 if (!drv->sta_mlo_info.valid_links ||
460 !ether_addr_equal(drv->sta_mlo_info.ap_mld_addr, ap_mld)) {
461 if (drv->pending_link_reconfig_data == data) {
462 wpa_printf(MSG_DEBUG,
463 "nl80211: Drop pending link reconfig event since AP MLD not matched even after new connect/roam event");
464 os_free(drv->pending_link_reconfig_data);
465 drv->pending_link_reconfig_data = NULL;
466 return;
467 }
468
469 wpa_printf(MSG_DEBUG,
470 "nl80211: Cache new link reconfig event till next connect/roam event");
471 if (drv->pending_link_reconfig_data) {
472 wpa_printf(MSG_DEBUG, "nl80211: Override old link reconfig event data");
473 os_free(drv->pending_link_reconfig_data);
474 }
475 drv->pending_link_reconfig_data = os_memdup(data, len);
476 if (!drv->pending_link_reconfig_data)
477 return;
478 drv->pending_link_reconfig_data_len = len;
479 return;
480 }
481
482 if (!tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_REMOVED_LINKS])
483 return;
484 removed_links = nla_get_u16(
485 tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_REMOVED_LINKS]);
486
487 drv->sta_mlo_info.valid_links &= ~removed_links;
488
489 /*
490 * Set default BSSID to the BSSID of the lowest link ID of remaining
491 * links when the link used for (re)association is removed.
492 */
493 if (removed_links & BIT(drv->sta_mlo_info.assoc_link_id)) {
494 for_each_link(drv->sta_mlo_info.valid_links, i) {
495 os_memcpy(drv->bssid, drv->sta_mlo_info.links[i].bssid,
496 ETH_ALEN);
497 drv->sta_mlo_info.assoc_link_id = i;
498 break;
499 }
500 }
501
502 wpa_printf(MSG_DEBUG, "nl80211: Removed MLO links bitmap: 0x%x",
503 removed_links);
504
505 wpa_supplicant_event(drv->ctx, EVENT_LINK_RECONFIG, NULL);
506 }
507
508
509 static void
nl80211_parse_qca_vendor_mlo_link_info(struct driver_sta_mlo_info * mlo,struct nlattr * mlo_links)510 nl80211_parse_qca_vendor_mlo_link_info(struct driver_sta_mlo_info *mlo,
511 struct nlattr *mlo_links)
512 {
513 struct nlattr *link;
514 int rem_links;
515
516 nla_for_each_nested(link, mlo_links, rem_links) {
517 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAX + 1];
518 int link_id;
519
520 nla_parse(tb,QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAX, nla_data(link),
521 nla_len(link), NULL);
522
523 if (!tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_ID] ||
524 !tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAC_ADDR] ||
525 !tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_BSSID])
526 continue;
527
528 link_id = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_ID]);
529 if (link_id >= MAX_NUM_MLD_LINKS)
530 continue;
531
532 mlo->valid_links |= BIT(link_id);
533 os_memcpy(mlo->links[link_id].addr,
534 nla_data(tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAC_ADDR]),
535 ETH_ALEN);
536 os_memcpy(mlo->links[link_id].bssid,
537 nla_data(tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_BSSID]),
538 ETH_ALEN);
539 wpa_printf(MSG_DEBUG, "nl80211: MLO link[%u] addr " MACSTR
540 " bssid " MACSTR,
541 link_id, MAC2STR(mlo->links[link_id].addr),
542 MAC2STR(mlo->links[link_id].bssid));
543 }
544 }
545
546 #endif /* CONFIG_DRIVER_NL80211_QCA */
547
548
nl80211_parse_mlo_link_info(struct driver_sta_mlo_info * mlo,struct nlattr * mlo_links)549 static void nl80211_parse_mlo_link_info(struct driver_sta_mlo_info *mlo,
550 struct nlattr *mlo_links)
551 {
552 struct nlattr *link;
553 int rem_links;
554
555 nla_for_each_nested(link, mlo_links, rem_links) {
556 struct nlattr *tb[NL80211_ATTR_MAX + 1];
557 int link_id;
558
559 nla_parse(tb, NL80211_ATTR_MAX, nla_data(link), nla_len(link),
560 NULL);
561
562 if (!tb[NL80211_ATTR_MLO_LINK_ID] || !tb[NL80211_ATTR_MAC] ||
563 !tb[NL80211_ATTR_BSSID])
564 continue;
565
566 link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
567 if (link_id >= MAX_NUM_MLD_LINKS)
568 continue;
569
570 if (tb[NL80211_ATTR_STATUS_CODE]) {
571 /* Set requested links only when status indicated */
572 mlo->req_links |= BIT(link_id);
573 if (nla_get_u16(tb[NL80211_ATTR_STATUS_CODE]) ==
574 WLAN_STATUS_SUCCESS)
575 mlo->valid_links |= BIT(link_id);
576 } else {
577 mlo->valid_links |= BIT(link_id);
578 }
579
580 os_memcpy(mlo->links[link_id].addr,
581 nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
582 os_memcpy(mlo->links[link_id].bssid,
583 nla_data(tb[NL80211_ATTR_BSSID]), ETH_ALEN);
584 wpa_printf(MSG_DEBUG, "nl80211: MLO link[%u] addr " MACSTR_SEC
585 " bssid " MACSTR_SEC,
586 link_id, MAC2STR_SEC(mlo->links[link_id].addr),
587 MAC2STR_SEC(mlo->links[link_id].bssid));
588 }
589 }
590
591
592 struct links_info {
593 /* bitmap of link IDs in Per-STA profile subelements */
594 u16 non_assoc_links;
595 u8 addr[MAX_NUM_MLD_LINKS][ETH_ALEN];
596 };
597
598
nl80211_get_basic_mle_links_info(const u8 * mle,size_t mle_len,struct links_info * info)599 static void nl80211_get_basic_mle_links_info(const u8 *mle, size_t mle_len,
600 struct links_info *info)
601 {
602 size_t rem_len;
603 const u8 *pos;
604
605 if (mle_len < MULTI_LINK_CONTROL_LEN + 1 ||
606 mle_len - MULTI_LINK_CONTROL_LEN < mle[MULTI_LINK_CONTROL_LEN])
607 return;
608
609 /* Skip Common Info */
610 pos = mle + MULTI_LINK_CONTROL_LEN + mle[MULTI_LINK_CONTROL_LEN];
611 rem_len = mle_len -
612 (MULTI_LINK_CONTROL_LEN + mle[MULTI_LINK_CONTROL_LEN]);
613
614 /* Parse Subelements */
615 while (rem_len > 2) {
616 size_t ie_len = 2 + pos[1];
617
618 if (rem_len < ie_len)
619 break;
620
621 if (pos[0] == MULTI_LINK_SUB_ELEM_ID_PER_STA_PROFILE) {
622 u8 link_id;
623 const u8 *sta_profile;
624 u16 sta_ctrl;
625
626 if (pos[1] < BASIC_MLE_STA_PROF_STA_MAC_IDX + ETH_ALEN)
627 goto next_subelem;
628
629 sta_profile = &pos[2];
630 sta_ctrl = WPA_GET_LE16(sta_profile);
631 link_id = sta_ctrl & BASIC_MLE_STA_CTRL_LINK_ID_MASK;
632 if (link_id >= MAX_NUM_MLD_LINKS)
633 goto next_subelem;
634
635 if (!(sta_ctrl & BASIC_MLE_STA_CTRL_PRES_STA_MAC))
636 goto next_subelem;
637
638 info->non_assoc_links |= BIT(link_id);
639 os_memcpy(info->addr[link_id],
640 &sta_profile[BASIC_MLE_STA_PROF_STA_MAC_IDX],
641 ETH_ALEN);
642 }
643 next_subelem:
644 pos += ie_len;
645 rem_len -= ie_len;
646 }
647 }
648
649
nl80211_update_rejected_links_info(struct driver_sta_mlo_info * mlo,struct nlattr * req_ie,struct nlattr * resp_ie)650 static int nl80211_update_rejected_links_info(struct driver_sta_mlo_info *mlo,
651 struct nlattr *req_ie,
652 struct nlattr *resp_ie)
653 {
654 int i;
655 struct wpabuf *mle;
656 struct ieee802_11_elems req_elems, resp_elems;
657 struct links_info req_info, resp_info;
658
659 if (!req_ie || !resp_ie) {
660 wpa_printf(MSG_INFO,
661 "nl80211: MLO: (Re)Association Request/Response frame elements not available");
662 return -1;
663 }
664
665 if (ieee802_11_parse_elems(nla_data(req_ie), nla_len(req_ie),
666 &req_elems, 0) == ParseFailed ||
667 ieee802_11_parse_elems(nla_data(resp_ie), nla_len(resp_ie),
668 &resp_elems, 0) == ParseFailed) {
669 wpa_printf(MSG_INFO,
670 "nl80211: MLO: Failed to parse (Re)Association Request/Response elements");
671 return -1;
672 }
673
674 mle = ieee802_11_defrag(req_elems.basic_mle, req_elems.basic_mle_len,
675 true);
676 if (!mle) {
677 wpa_printf(MSG_INFO,
678 "nl80211: MLO: Basic Multi-Link element not found in Association Request");
679 return -1;
680 }
681 os_memset(&req_info, 0, sizeof(req_info));
682 nl80211_get_basic_mle_links_info(wpabuf_head(mle), wpabuf_len(mle),
683 &req_info);
684 wpabuf_free(mle);
685
686 mle = ieee802_11_defrag(resp_elems.basic_mle, resp_elems.basic_mle_len,
687 true);
688 if (!mle) {
689 wpa_printf(MSG_ERROR,
690 "nl80211: MLO: Basic Multi-Link element not found in Association Response");
691 return -1;
692 }
693 os_memset(&resp_info, 0, sizeof(resp_info));
694 nl80211_get_basic_mle_links_info(wpabuf_head(mle), wpabuf_len(mle),
695 &resp_info);
696 wpabuf_free(mle);
697
698 if (req_info.non_assoc_links != resp_info.non_assoc_links) {
699 wpa_printf(MSG_ERROR,
700 "nl80211: MLO: Association Request and Response links bitmaps not equal (0x%x != 0x%x)",
701 req_info.non_assoc_links,
702 resp_info.non_assoc_links);
703 return -1;
704 }
705
706 mlo->req_links = BIT(mlo->assoc_link_id) | req_info.non_assoc_links;
707 if ((mlo->req_links & mlo->valid_links) != mlo->valid_links) {
708 wpa_printf(MSG_ERROR,
709 "nl80211: MLO: Accepted links are not a subset of requested links (req_links=0x%x valid_links=0x%x non_assoc_links=0x%x assoc_link_id=0x%x)",
710 mlo->req_links, mlo->valid_links,
711 req_info.non_assoc_links, BIT(mlo->assoc_link_id));
712 return -1;
713 }
714
715 /* Get MLO links info for rejected links */
716 for_each_link((mlo->req_links & ~mlo->valid_links), i) {
717 os_memcpy(mlo->links[i].bssid, resp_info.addr[i], ETH_ALEN);
718 os_memcpy(mlo->links[i].addr, req_info.addr[i], ETH_ALEN);
719 }
720
721 return 0;
722 }
723
724
nl80211_get_assoc_link_id(const u8 * data,u8 len)725 static int nl80211_get_assoc_link_id(const u8 *data, u8 len)
726 {
727 u16 control;
728
729 if (len < 2)
730 return -1;
731
732 control = WPA_GET_LE16(data);
733 if (!(control & BASIC_MULTI_LINK_CTRL_PRES_LINK_ID))
734 return -1;
735
736 #define BASIC_ML_IE_COMMON_INFO_LINK_ID_IDX \
737 (2 + /* Multi-Link Control field */ \
738 1 + /* Common Info Length field (Basic) */ \
739 ETH_ALEN) /* MLD MAC Address field (Basic) */
740 if (len <= BASIC_ML_IE_COMMON_INFO_LINK_ID_IDX)
741 return -1;
742
743 return data[BASIC_ML_IE_COMMON_INFO_LINK_ID_IDX] & 0x0F;
744 }
745
746
nl80211_parse_mlo_info(struct wpa_driver_nl80211_data * drv,bool qca_roam_auth,struct nlattr * addr,struct nlattr * mlo_links,struct nlattr * req_ie,struct nlattr * resp_ie)747 static void nl80211_parse_mlo_info(struct wpa_driver_nl80211_data *drv,
748 bool qca_roam_auth,
749 struct nlattr *addr,
750 struct nlattr *mlo_links,
751 struct nlattr *req_ie,
752 struct nlattr *resp_ie)
753 {
754 const u8 *ml_ie;
755 struct driver_sta_mlo_info *mlo = &drv->sta_mlo_info;
756 int res;
757
758 if (!addr || !mlo_links || !resp_ie)
759 return;
760
761 ml_ie = get_ml_ie(nla_data(resp_ie), nla_len(resp_ie),
762 MULTI_LINK_CONTROL_TYPE_BASIC);
763 if (!ml_ie)
764 return;
765
766 res = nl80211_get_assoc_link_id(&ml_ie[3], ml_ie[1] - 1);
767 if (res < 0 || res >= MAX_NUM_MLD_LINKS) {
768 wpa_printf(MSG_DEBUG,
769 "nl80211: Could not find a valid association Link ID (res=%d)",
770 res);
771 return;
772 }
773 drv->sta_mlo_info.assoc_link_id = res;
774
775 os_memcpy(mlo->ap_mld_addr, nla_data(addr), ETH_ALEN);
776 wpa_printf(MSG_DEBUG, "nl80211: AP MLD MAC Address " MACSTR_SEC,
777 MAC2STR_SEC(mlo->ap_mld_addr));
778
779 if (!qca_roam_auth)
780 nl80211_parse_mlo_link_info(mlo, mlo_links);
781 #ifdef CONFIG_DRIVER_NL80211_QCA
782 if (qca_roam_auth)
783 nl80211_parse_qca_vendor_mlo_link_info(mlo, mlo_links);
784 #endif /* CONFIG_DRIVER_NL80211_QCA */
785
786 if (!(mlo->valid_links & BIT(mlo->assoc_link_id)) ||
787 (!mlo->req_links &&
788 nl80211_update_rejected_links_info(mlo, req_ie, resp_ie))) {
789 wpa_printf(MSG_INFO, "nl80211: Invalid MLO connection info");
790 mlo->valid_links = 0;
791 return;
792 }
793
794 os_memcpy(drv->bssid, mlo->links[drv->sta_mlo_info.assoc_link_id].bssid,
795 ETH_ALEN);
796 os_memcpy(drv->prev_bssid, drv->bssid, ETH_ALEN);
797 }
798
799
800 #ifdef CONFIG_DRIVER_NL80211_QCA
801 static void
qca_nl80211_tid_to_link_map_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)802 qca_nl80211_tid_to_link_map_event(struct wpa_driver_nl80211_data *drv,
803 u8 *data, size_t len)
804 {
805 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_MAX + 1];
806 struct nlattr *tids;
807 union wpa_event_data event;
808 u8 *ap_mld;
809 int i, rem, tidnum = 0;
810
811 os_memset(&event, 0, sizeof(event));
812
813 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_MAX,
814 (struct nlattr *) data, len, NULL) ||
815 !tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_AP_MLD_ADDR])
816 return;
817
818 ap_mld = nla_data(tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_AP_MLD_ADDR]);
819
820 wpa_printf(MSG_DEBUG, "nl80211: AP MLD address " MACSTR
821 " received in TID to link mapping event", MAC2STR(ap_mld));
822 if (!drv->sta_mlo_info.valid_links ||
823 !ether_addr_equal(drv->sta_mlo_info.ap_mld_addr, ap_mld)) {
824 if (drv->pending_t2lm_data == data) {
825 wpa_printf(MSG_DEBUG,
826 "nl80211: Drop pending TID-to-link mapping event since AP MLD not matched even after new connect/roam event");
827 os_free(drv->pending_t2lm_data);
828 drv->pending_t2lm_data = NULL;
829 return;
830 }
831 wpa_printf(MSG_DEBUG,
832 "nl80211: Cache new TID-to-link map event until the next connect/roam event");
833 if (drv->pending_t2lm_data) {
834 wpa_printf(MSG_DEBUG,
835 "nl80211: Override old TID-to-link map event data");
836 os_free(drv->pending_t2lm_data);
837 }
838 drv->pending_t2lm_data = os_memdup(data, len);
839 if (!drv->pending_t2lm_data)
840 return;
841 drv->pending_t2lm_data_len = len;
842 return;
843 }
844
845 if (!tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_STATUS]) {
846 wpa_printf(MSG_DEBUG, "nl80211: Default TID-to-link map");
847 event.t2l_map_info.default_map = true;
848 goto out;
849 }
850
851 event.t2l_map_info.default_map = false;
852
853 nla_for_each_nested(tids,
854 tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_STATUS],
855 rem) {
856 u16 uplink, downlink;
857 struct nlattr *tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_MAX + 1];
858
859 if (nla_parse_nested(
860 tid, QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_MAX,
861 tids, NULL)) {
862 wpa_printf(MSG_DEBUG,
863 "nl80211: TID-to-link: nla_parse_nested() failed");
864 return;
865 }
866
867 if (!tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_UPLINK]) {
868 wpa_printf(MSG_DEBUG,
869 "nl80211: TID-to-link: uplink not present for tid: %d",
870 tidnum);
871 return;
872 }
873 uplink = nla_get_u16(tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_UPLINK]);
874
875 if (!tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_DOWNLINK]) {
876 wpa_printf(MSG_DEBUG,
877 "nl80211: TID-to-link: downlink not present for tid: %d",
878 tidnum);
879 return;
880 }
881 downlink = nla_get_u16(tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_DOWNLINK]);
882
883 wpa_printf(MSG_DEBUG,
884 "nl80211: TID-to-link: Received uplink %x downlink %x",
885 uplink, downlink);
886 for_each_link(drv->sta_mlo_info.valid_links, i) {
887 if (uplink & BIT(i))
888 event.t2l_map_info.t2lmap[i].uplink |=
889 BIT(tidnum);
890 if (downlink & BIT(i))
891 event.t2l_map_info.t2lmap[i].downlink |=
892 BIT(tidnum);
893 }
894
895 tidnum++;
896 }
897
898 out:
899 drv->sta_mlo_info.default_map = event.t2l_map_info.default_map;
900
901 event.t2l_map_info.valid_links = drv->sta_mlo_info.valid_links;
902 for (i = 0; i < MAX_NUM_MLD_LINKS && !drv->sta_mlo_info.default_map;
903 i++) {
904 if (!(drv->sta_mlo_info.valid_links & BIT(i)))
905 continue;
906
907 drv->sta_mlo_info.links[i].t2lmap.uplink =
908 event.t2l_map_info.t2lmap[i].uplink;
909 drv->sta_mlo_info.links[i].t2lmap.downlink =
910 event.t2l_map_info.t2lmap[i].downlink;
911 }
912
913 wpa_supplicant_event(drv->ctx, EVENT_TID_LINK_MAP, &event);
914 }
915 #endif /* CONFIG_DRIVER_NL80211_QCA */
916
917
mlme_event_connect(struct wpa_driver_nl80211_data * drv,enum nl80211_commands cmd,bool qca_roam_auth,struct nlattr * status,struct nlattr * addr,struct nlattr * req_ie,struct nlattr * resp_ie,struct nlattr * timed_out,struct nlattr * timeout_reason,struct nlattr * authorized,struct nlattr * key_replay_ctr,struct nlattr * ptk_kck,struct nlattr * ptk_kek,struct nlattr * subnet_status,struct nlattr * fils_erp_next_seq_num,struct nlattr * fils_pmk,struct nlattr * fils_pmkid,struct nlattr * mlo_links)918 static void mlme_event_connect(struct wpa_driver_nl80211_data *drv,
919 enum nl80211_commands cmd, bool qca_roam_auth,
920 struct nlattr *status,
921 struct nlattr *addr, struct nlattr *req_ie,
922 struct nlattr *resp_ie,
923 struct nlattr *timed_out,
924 struct nlattr *timeout_reason,
925 struct nlattr *authorized,
926 struct nlattr *key_replay_ctr,
927 struct nlattr *ptk_kck,
928 struct nlattr *ptk_kek,
929 struct nlattr *subnet_status,
930 struct nlattr *fils_erp_next_seq_num,
931 struct nlattr *fils_pmk,
932 struct nlattr *fils_pmkid,
933 struct nlattr *mlo_links)
934 {
935 union wpa_event_data event;
936 const u8 *ssid = NULL;
937 u16 status_code;
938 int ssid_len;
939
940 if (drv->capa.flags & WPA_DRIVER_FLAGS_SME) {
941 /*
942 * Avoid reporting two association events that would confuse
943 * the core code.
944 */
945 wpa_printf(MSG_DEBUG, "nl80211: Ignore connect event (cmd=%d) "
946 "when using userspace SME", cmd);
947 return;
948 }
949
950 drv->connect_reassoc = 0;
951
952 status_code = status ? nla_get_u16(status) : WLAN_STATUS_SUCCESS;
953
954 if (cmd == NL80211_CMD_CONNECT) {
955 wpa_printf(MSG_EXCESSIVE,
956 "nl80211: Connect event (status=%u ignore_next_local_disconnect=%d)",
957 status_code, drv->ignore_next_local_disconnect);
958 } else if (cmd == NL80211_CMD_ROAM) {
959 wpa_printf(MSG_DEBUG, "nl80211: Roam event");
960 }
961
962 os_memset(&event, 0, sizeof(event));
963 if (cmd == NL80211_CMD_CONNECT && status_code != WLAN_STATUS_SUCCESS) {
964 if (addr)
965 event.assoc_reject.bssid = nla_data(addr);
966 if (drv->ignore_next_local_disconnect) {
967 drv->ignore_next_local_disconnect = 0;
968 if (!event.assoc_reject.bssid ||
969 !ether_addr_equal(event.assoc_reject.bssid,
970 drv->auth_attempt_bssid)) {
971 /*
972 * Ignore the event that came without a BSSID or
973 * for the old connection since this is likely
974 * not relevant to the new Connect command.
975 */
976 wpa_printf(MSG_DEBUG,
977 "nl80211: Ignore connection failure event triggered during reassociation");
978 return;
979 }
980 }
981 if (resp_ie) {
982 event.assoc_reject.resp_ies = nla_data(resp_ie);
983 event.assoc_reject.resp_ies_len = nla_len(resp_ie);
984 }
985 event.assoc_reject.status_code = status_code;
986 event.assoc_reject.timed_out = timed_out != NULL;
987 if (timed_out && timeout_reason) {
988 enum nl80211_timeout_reason reason;
989
990 reason = nla_get_u32(timeout_reason);
991 switch (reason) {
992 case NL80211_TIMEOUT_SCAN:
993 event.assoc_reject.timeout_reason = "scan";
994 break;
995 case NL80211_TIMEOUT_AUTH:
996 event.assoc_reject.timeout_reason = "auth";
997 break;
998 case NL80211_TIMEOUT_ASSOC:
999 event.assoc_reject.timeout_reason = "assoc";
1000 break;
1001 default:
1002 break;
1003 }
1004 }
1005 if (fils_erp_next_seq_num)
1006 event.assoc_reject.fils_erp_next_seq_num =
1007 nla_get_u16(fils_erp_next_seq_num);
1008
1009 #ifdef CONFIG_DRIVER_NL80211_QCA
1010 if (drv->get_sta_info_vendor_cmd_avail) {
1011 enum qca_sta_connect_fail_reason_codes reason_code;
1012
1013 reason_code = drv_get_connect_fail_reason_code(drv);
1014 event.assoc_reject.reason_code =
1015 convert_connect_fail_reason_codes(reason_code);
1016 }
1017 #endif /* CONFIG_DRIVER_NL80211_QCA */
1018
1019 wpa_supplicant_event(drv->ctx, EVENT_ASSOC_REJECT, &event);
1020 return;
1021 }
1022
1023 drv->associated = 1;
1024 os_memset(&drv->sta_mlo_info, 0, sizeof(drv->sta_mlo_info));
1025 nl80211_parse_mlo_info(drv, qca_roam_auth, addr, mlo_links, req_ie,
1026 resp_ie);
1027 if (!drv->sta_mlo_info.valid_links && addr) {
1028 os_memcpy(drv->bssid, nla_data(addr), ETH_ALEN);
1029 os_memcpy(drv->prev_bssid, drv->bssid, ETH_ALEN);
1030 }
1031
1032 if (req_ie) {
1033 event.assoc_info.req_ies = nla_data(req_ie);
1034 event.assoc_info.req_ies_len = nla_len(req_ie);
1035
1036 if (cmd == NL80211_CMD_ROAM) {
1037 ssid = get_ie(event.assoc_info.req_ies,
1038 event.assoc_info.req_ies_len,
1039 WLAN_EID_SSID);
1040 if (ssid && ssid[1] > 0 && ssid[1] <= 32) {
1041 drv->ssid_len = ssid[1];
1042 os_memcpy(drv->ssid, ssid + 2, ssid[1]);
1043 wpa_printf(MSG_DEBUG,
1044 "nl80211: Set drv->ssid based on req_ie to '%s'",
1045 anonymize_ssid(wpa_ssid_txt(drv->ssid,
1046 drv->ssid_len)));
1047 }
1048 }
1049 }
1050 if (resp_ie) {
1051 event.assoc_info.resp_ies = nla_data(resp_ie);
1052 event.assoc_info.resp_ies_len = nla_len(resp_ie);
1053 }
1054
1055 event.assoc_info.freq = nl80211_get_assoc_freq(drv);
1056 drv->first_bss->flink->freq = drv->assoc_freq;
1057
1058 if ((!ssid || ssid[1] == 0 || ssid[1] > 32) &&
1059 (ssid_len = nl80211_get_assoc_ssid(drv, drv->ssid)) > 0) {
1060 /* When this connection was initiated outside of wpa_supplicant,
1061 * drv->ssid needs to be set here to satisfy later checking. */
1062 drv->ssid_len = ssid_len;
1063 wpa_printf(MSG_INFO,
1064 "nl80211: Set drv->ssid based on scan res info to '%s'",
1065 anonymize_ssid(wpa_ssid_txt(drv->ssid, drv->ssid_len)));
1066 }
1067
1068 if (authorized && nla_get_u8(authorized)) {
1069 event.assoc_info.authorized = 1;
1070 wpa_printf(MSG_DEBUG, "nl80211: connection authorized");
1071 }
1072 if (key_replay_ctr) {
1073 event.assoc_info.key_replay_ctr = nla_data(key_replay_ctr);
1074 event.assoc_info.key_replay_ctr_len = nla_len(key_replay_ctr);
1075 }
1076 if (ptk_kck) {
1077 event.assoc_info.ptk_kck = nla_data(ptk_kck);
1078 event.assoc_info.ptk_kck_len = nla_len(ptk_kck);
1079 }
1080 if (ptk_kek) {
1081 event.assoc_info.ptk_kek = nla_data(ptk_kek);
1082 event.assoc_info.ptk_kek_len = nla_len(ptk_kek);
1083 }
1084
1085 if (subnet_status) {
1086 /*
1087 * At least for now, this is only available from
1088 * QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_SUBNET_STATUS and that
1089 * attribute has the same values 0, 1, 2 as are used in the
1090 * variable here, so no mapping between different values are
1091 * needed.
1092 */
1093 event.assoc_info.subnet_status = nla_get_u8(subnet_status);
1094 }
1095
1096 if (fils_erp_next_seq_num)
1097 event.assoc_info.fils_erp_next_seq_num =
1098 nla_get_u16(fils_erp_next_seq_num);
1099
1100 if (fils_pmk) {
1101 event.assoc_info.fils_pmk = nla_data(fils_pmk);
1102 event.assoc_info.fils_pmk_len = nla_len(fils_pmk);
1103 }
1104
1105 if (fils_pmkid)
1106 event.assoc_info.fils_pmkid = nla_data(fils_pmkid);
1107
1108 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, &event);
1109
1110 /* Avoid a race condition by stopping to ignore any following
1111 * disconnection events now that the driver has indicated it is
1112 * connected since that connection could have been triggered by a roam
1113 * operation that happened in parallel with the disconnection request.
1114 */
1115 drv->ignore_next_local_disconnect = 0;
1116
1117 #ifdef CONFIG_DRIVER_NL80211_QCA
1118 if (drv->pending_t2lm_data)
1119 qca_nl80211_tid_to_link_map_event(drv, drv->pending_t2lm_data,
1120 drv->pending_t2lm_data_len);
1121 else
1122 drv->sta_mlo_info.default_map = true;
1123
1124 if (drv->pending_link_reconfig_data)
1125 qca_nl80211_link_reconfig_event(
1126 drv, drv->pending_link_reconfig_data,
1127 drv->pending_link_reconfig_data_len);
1128 #endif /* CONFIG_DRIVER_NL80211_QCA */
1129 }
1130
1131
mlme_event_disconnect(struct wpa_driver_nl80211_data * drv,struct nlattr * reason,struct nlattr * addr,struct nlattr * by_ap)1132 void mlme_event_disconnect(struct wpa_driver_nl80211_data *drv,
1133 struct nlattr *reason, struct nlattr *addr,
1134 struct nlattr *by_ap)
1135 {
1136 union wpa_event_data data;
1137 unsigned int locally_generated = by_ap == NULL;
1138
1139 if (drv->capa.flags & WPA_DRIVER_FLAGS_SME) {
1140 /*
1141 * Avoid reporting two disassociation events that could
1142 * confuse the core code.
1143 */
1144 wpa_printf(MSG_DEBUG, "nl80211: Ignore disconnect "
1145 "event when using userspace SME");
1146 return;
1147 }
1148
1149 if (drv->ignore_next_local_disconnect) {
1150 drv->ignore_next_local_disconnect = 0;
1151 if (locally_generated) {
1152 wpa_printf(MSG_DEBUG, "nl80211: Ignore disconnect "
1153 "event triggered during reassociation");
1154 return;
1155 }
1156 wpa_printf(MSG_WARNING, "nl80211: Was expecting local "
1157 "disconnect but got another disconnect "
1158 "event first");
1159 }
1160
1161 wpa_printf(MSG_DEBUG, "nl80211: Disconnect event");
1162 nl80211_mark_disconnected(drv);
1163 os_memset(&data, 0, sizeof(data));
1164 if (reason)
1165 data.deauth_info.reason_code = nla_get_u16(reason);
1166 data.deauth_info.locally_generated = by_ap == NULL;
1167
1168 #ifdef CONFIG_VENDOR_EXT
1169 wpa_vendor_ext_p2p_enhance_set_reason(drv->ctx, drv->first_bss, &data);
1170 #endif
1171
1172 wpa_supplicant_event(drv->ctx, EVENT_DEAUTH, &data);
1173 }
1174
1175
calculate_chan_offset(int width,int freq,int cf1,int cf2)1176 static int calculate_chan_offset(int width, int freq, int cf1, int cf2)
1177 {
1178 int freq1 = 0;
1179
1180 switch (convert2width(width)) {
1181 case CHAN_WIDTH_20_NOHT:
1182 case CHAN_WIDTH_20:
1183 return 0;
1184 case CHAN_WIDTH_40:
1185 freq1 = cf1 - 10;
1186 break;
1187 case CHAN_WIDTH_80:
1188 freq1 = cf1 - 30;
1189 break;
1190 case CHAN_WIDTH_160:
1191 freq1 = cf1 - 70;
1192 break;
1193 case CHAN_WIDTH_80P80:
1194 freq1 = cf1 - 30;
1195 break;
1196 case CHAN_WIDTH_320:
1197 freq1 = cf1 - 150;
1198 break;
1199 case CHAN_WIDTH_UNKNOWN:
1200 case CHAN_WIDTH_2160:
1201 case CHAN_WIDTH_4320:
1202 case CHAN_WIDTH_6480:
1203 case CHAN_WIDTH_8640:
1204 /* FIXME: implement this */
1205 return 0;
1206 }
1207
1208 return (abs(freq - freq1) / 20) % 2 == 0 ? 1 : -1;
1209 }
1210
1211
mlme_event_ch_switch(struct wpa_driver_nl80211_data * drv,struct nlattr * ifindex,struct nlattr * link,struct nlattr * freq,struct nlattr * type,struct nlattr * bw,struct nlattr * cf1,struct nlattr * cf2,struct nlattr * punct_bitmap,int finished)1212 static void mlme_event_ch_switch(struct wpa_driver_nl80211_data *drv,
1213 struct nlattr *ifindex, struct nlattr *link,
1214 struct nlattr *freq, struct nlattr *type,
1215 struct nlattr *bw, struct nlattr *cf1,
1216 struct nlattr *cf2,
1217 struct nlattr *punct_bitmap,
1218 int finished)
1219 {
1220 struct i802_bss *bss;
1221 union wpa_event_data data;
1222 int ht_enabled = 1;
1223 int chan_offset = 0;
1224 int ifidx;
1225
1226 wpa_printf(MSG_DEBUG, "nl80211: Channel switch%s event",
1227 finished ? "" : " started");
1228
1229 if (!freq)
1230 return;
1231
1232 ifidx = nla_get_u32(ifindex);
1233 bss = get_bss_ifindex(drv, ifidx);
1234 if (bss == NULL) {
1235 wpa_printf(MSG_WARNING, "nl80211: Unknown ifindex (%d) for channel switch, ignoring",
1236 ifidx);
1237 return;
1238 }
1239
1240 if (type) {
1241 enum nl80211_channel_type ch_type = nla_get_u32(type);
1242
1243 wpa_printf(MSG_DEBUG, "nl80211: Channel type: %d", ch_type);
1244 switch (ch_type) {
1245 case NL80211_CHAN_NO_HT:
1246 ht_enabled = 0;
1247 break;
1248 case NL80211_CHAN_HT20:
1249 break;
1250 case NL80211_CHAN_HT40PLUS:
1251 chan_offset = 1;
1252 break;
1253 case NL80211_CHAN_HT40MINUS:
1254 chan_offset = -1;
1255 break;
1256 }
1257 } else if (bw && cf1) {
1258 /* This can happen for example with VHT80 ch switch */
1259 chan_offset = calculate_chan_offset(nla_get_u32(bw),
1260 nla_get_u32(freq),
1261 nla_get_u32(cf1),
1262 cf2 ? nla_get_u32(cf2) : 0);
1263 wpa_printf(MSG_DEBUG, "nl80211: Calculated channel offset: %d",
1264 chan_offset);
1265 } else {
1266 wpa_printf(MSG_WARNING, "nl80211: Unknown secondary channel information - following channel definition calculations may fail");
1267 }
1268
1269 os_memset(&data, 0, sizeof(data));
1270 data.ch_switch.freq = nla_get_u32(freq);
1271 data.ch_switch.ht_enabled = ht_enabled;
1272 data.ch_switch.ch_offset = chan_offset;
1273 if (punct_bitmap)
1274 data.ch_switch.punct_bitmap = (u16) nla_get_u32(punct_bitmap);
1275 if (bw)
1276 data.ch_switch.ch_width = convert2width(nla_get_u32(bw));
1277 if (cf1)
1278 data.ch_switch.cf1 = nla_get_u32(cf1);
1279 if (cf2)
1280 data.ch_switch.cf2 = nla_get_u32(cf2);
1281
1282 if (link)
1283 data.ch_switch.link_id = nla_get_u8(link);
1284 else
1285 data.ch_switch.link_id = NL80211_DRV_LINK_ID_NA;
1286
1287 if (finished) {
1288 if (data.ch_switch.link_id != NL80211_DRV_LINK_ID_NA) {
1289 struct i802_link *mld_link;
1290
1291 mld_link = nl80211_get_link(bss,
1292 data.ch_switch.link_id);
1293 mld_link->freq = data.ch_switch.freq;
1294 if (bw)
1295 mld_link->bandwidth = channel_width_to_int(
1296 data.ch_switch.ch_width);
1297 } else {
1298 bss->flink->freq = data.ch_switch.freq;
1299 if (bw)
1300 bss->flink->bandwidth = channel_width_to_int(
1301 data.ch_switch.ch_width);
1302 }
1303 }
1304
1305 if (link && is_sta_interface(drv->nlmode)) {
1306 u8 link_id = data.ch_switch.link_id;
1307
1308 if (link_id < MAX_NUM_MLD_LINKS &&
1309 drv->sta_mlo_info.valid_links & BIT(link_id)) {
1310 drv->sta_mlo_info.links[link_id].freq =
1311 data.ch_switch.freq;
1312 wpa_supplicant_event(
1313 bss->ctx,
1314 finished ? EVENT_LINK_CH_SWITCH :
1315 EVENT_LINK_CH_SWITCH_STARTED, &data);
1316 }
1317
1318 if (link_id != drv->sta_mlo_info.assoc_link_id)
1319 return;
1320 }
1321
1322 drv->assoc_freq = data.ch_switch.freq;
1323
1324 wpa_supplicant_event(bss->ctx, finished ?
1325 EVENT_CH_SWITCH : EVENT_CH_SWITCH_STARTED, &data);
1326 }
1327
1328
mlme_timeout_event(struct wpa_driver_nl80211_data * drv,enum nl80211_commands cmd,struct nlattr * addr)1329 static void mlme_timeout_event(struct wpa_driver_nl80211_data *drv,
1330 enum nl80211_commands cmd, struct nlattr *addr)
1331 {
1332 union wpa_event_data event;
1333 enum wpa_event_type ev;
1334
1335 if (nla_len(addr) != ETH_ALEN)
1336 return;
1337
1338 wpa_printf(MSG_DEBUG, "nl80211: MLME event %d; timeout with " MACSTR_SEC,
1339 cmd, MAC2STR_SEC((u8 *) nla_data(addr)));
1340
1341 if (cmd == NL80211_CMD_AUTHENTICATE)
1342 ev = EVENT_AUTH_TIMED_OUT;
1343 else if (cmd == NL80211_CMD_ASSOCIATE)
1344 ev = EVENT_ASSOC_TIMED_OUT;
1345 else
1346 return;
1347
1348 os_memset(&event, 0, sizeof(event));
1349 os_memcpy(event.timeout_event.addr, nla_data(addr), ETH_ALEN);
1350 wpa_supplicant_event(drv->ctx, ev, &event);
1351 }
1352
1353
mlme_event_mgmt(struct i802_bss * bss,struct nlattr * freq,struct nlattr * sig,const u8 * frame,size_t len,int link_id)1354 static void mlme_event_mgmt(struct i802_bss *bss,
1355 struct nlattr *freq, struct nlattr *sig,
1356 const u8 *frame, size_t len,
1357 int link_id)
1358 {
1359 struct wpa_driver_nl80211_data *drv = bss->drv;
1360 const struct ieee80211_mgmt *mgmt;
1361 union wpa_event_data event;
1362 u16 fc, stype;
1363 int ssi_signal = 0;
1364 int rx_freq = 0;
1365
1366 wpa_printf(MSG_MSGDUMP, "nl80211: Frame event");
1367 mgmt = (const struct ieee80211_mgmt *) frame;
1368 if (len < 24) {
1369 wpa_printf(MSG_DEBUG, "nl80211: Too short management frame");
1370 return;
1371 }
1372
1373 fc = le_to_host16(mgmt->frame_control);
1374 stype = WLAN_FC_GET_STYPE(fc);
1375
1376 if (sig)
1377 ssi_signal = (s32) nla_get_u32(sig);
1378
1379 os_memset(&event, 0, sizeof(event));
1380 if (freq) {
1381 event.rx_mgmt.freq = nla_get_u32(freq);
1382 rx_freq = drv->last_mgmt_freq = event.rx_mgmt.freq;
1383 }
1384 wpa_printf(MSG_DEBUG,
1385 "nl80211: RX frame da=" MACSTR_SEC " sa=" MACSTR_SEC " bssid=" MACSTR_SEC
1386 " freq=%d ssi_signal=%d fc=0x%x seq_ctrl=0x%x stype=%u (%s) len=%u",
1387 MAC2STR_SEC(mgmt->da), MAC2STR_SEC(mgmt->sa), MAC2STR_SEC(mgmt->bssid),
1388 rx_freq, ssi_signal, fc,
1389 le_to_host16(mgmt->seq_ctrl), stype, fc2str(fc),
1390 (unsigned int) len);
1391 event.rx_mgmt.frame = frame;
1392 event.rx_mgmt.frame_len = len;
1393 event.rx_mgmt.ssi_signal = ssi_signal;
1394 event.rx_mgmt.drv_priv = bss;
1395 event.rx_mgmt.ctx = bss->ctx;
1396 event.rx_mgmt.link_id = link_id;
1397
1398 wpa_supplicant_event(drv->ctx, EVENT_RX_MGMT, &event);
1399 }
1400
1401
mlme_event_mgmt_tx_status(struct i802_bss * bss,struct nlattr * cookie,const u8 * frame,size_t len,struct nlattr * ack)1402 static void mlme_event_mgmt_tx_status(struct i802_bss *bss,
1403 struct nlattr *cookie, const u8 *frame,
1404 size_t len, struct nlattr *ack)
1405 {
1406 union wpa_event_data event;
1407 const struct ieee80211_hdr *hdr = (const struct ieee80211_hdr *) frame;
1408 struct wpa_driver_nl80211_data *drv = bss->drv;
1409 u16 fc = le_to_host16(hdr->frame_control);
1410 u64 cookie_val = 0;
1411
1412 if (cookie)
1413 cookie_val = nla_get_u64(cookie);
1414 wpa_printf(MSG_DEBUG,
1415 "nl80211: Frame TX status event A1=" MACSTR_SEC
1416 " %sstype=%d cookie=0x%llx%s ack=%d",
1417 MAC2STR_SEC(hdr->addr1),
1418 WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT ? "not-mgmt " : "",
1419 WLAN_FC_GET_STYPE(fc), (long long unsigned int) cookie_val,
1420 cookie ? "" : "(N/A)", ack != NULL);
1421
1422 if (cookie_val && cookie_val == drv->eapol_tx_cookie &&
1423 len >= ETH_HLEN &&
1424 WPA_GET_BE16(frame + 2 * ETH_ALEN) == ETH_P_PAE) {
1425 wpa_printf(MSG_DEBUG,
1426 "nl80211: Work around misdelivered control port TX status for EAPOL");
1427 nl80211_control_port_frame_tx_status(bss, frame, len, ack,
1428 cookie);
1429 return;
1430 }
1431
1432 if (WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT)
1433 return;
1434
1435 if (!is_ap_interface(drv->nlmode) &&
1436 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_ACTION) {
1437 if (!cookie)
1438 return;
1439
1440 wpa_printf(MSG_DEBUG,
1441 "nl80211: Frame TX status: cookie=0x%llx%s (ack=%d)",
1442 (long long unsigned int) cookie_val,
1443 cookie_val == drv->send_frame_cookie ?
1444 " (match)" : " (unknown)", ack != NULL);
1445 if (cookie_val != drv->send_frame_cookie)
1446 return;
1447 } else if (!is_ap_interface(drv->nlmode) &&
1448 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_AUTH) {
1449 wpa_printf(MSG_DEBUG,
1450 "nl80211: Authentication frame TX status: ack=%d",
1451 !!ack);
1452 }
1453
1454 os_memset(&event, 0, sizeof(event));
1455 event.tx_status.type = WLAN_FC_GET_TYPE(fc);
1456 event.tx_status.stype = WLAN_FC_GET_STYPE(fc);
1457 event.tx_status.dst = hdr->addr1;
1458 event.tx_status.data = frame;
1459 event.tx_status.data_len = len;
1460 event.tx_status.ack = ack != NULL;
1461 event.tx_status.link_id = cookie_val == drv->send_frame_cookie ?
1462 drv->send_frame_link_id : NL80211_DRV_LINK_ID_NA;
1463 wpa_supplicant_event(bss->ctx, EVENT_TX_STATUS, &event);
1464 }
1465
1466
mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data * drv,enum wpa_event_type type,const u8 * frame,size_t len)1467 static void mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data *drv,
1468 enum wpa_event_type type,
1469 const u8 *frame, size_t len)
1470 {
1471 const struct ieee80211_mgmt *mgmt;
1472 union wpa_event_data event;
1473 const u8 *bssid = NULL;
1474 u16 reason_code = 0;
1475
1476 if (type == EVENT_DEAUTH)
1477 wpa_printf(MSG_DEBUG, "nl80211: Deauthenticate event");
1478 else
1479 wpa_printf(MSG_DEBUG, "nl80211: Disassociate event");
1480
1481 mgmt = (const struct ieee80211_mgmt *) frame;
1482 if (len >= 24) {
1483 bssid = mgmt->bssid;
1484
1485 if ((drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
1486 !drv->associated &&
1487 !ether_addr_equal(bssid, drv->auth_bssid) &&
1488 !ether_addr_equal(bssid, drv->auth_attempt_bssid) &&
1489 ether_addr_equal(bssid, drv->prev_bssid)) {
1490 /*
1491 * Avoid issues with some roaming cases where
1492 * disconnection event for the old AP may show up after
1493 * we have started connection with the new AP.
1494 * In case of locally generated event clear
1495 * ignore_next_local_deauth as well, to avoid next local
1496 * deauth event be wrongly ignored.
1497 */
1498 if (ether_addr_equal(mgmt->sa, drv->first_bss->addr) ||
1499 (!is_zero_ether_addr(drv->first_bss->prev_addr) &&
1500 ether_addr_equal(mgmt->sa,
1501 drv->first_bss->prev_addr))) {
1502 wpa_printf(MSG_DEBUG,
1503 "nl80211: Received a locally generated deauth event. Clear ignore_next_local_deauth flag");
1504 drv->ignore_next_local_deauth = 0;
1505 } else {
1506 wpa_printf(MSG_DEBUG,
1507 "nl80211: Ignore deauth/disassoc event from old AP " MACSTR_SEC
1508 " when already authenticating with " MACSTR_SEC,
1509 MAC2STR_SEC(bssid),
1510 MAC2STR_SEC(drv->auth_attempt_bssid));
1511 }
1512 return;
1513 }
1514
1515 if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
1516 drv->connect_reassoc && drv->associated &&
1517 ether_addr_equal(bssid, drv->prev_bssid) &&
1518 !ether_addr_equal(bssid, drv->auth_attempt_bssid)) {
1519 /*
1520 * Avoid issues with some roaming cases where
1521 * disconnection event for the old AP may show up after
1522 * we have started connection with the new AP.
1523 */
1524 wpa_printf(MSG_DEBUG,
1525 "nl80211: Ignore deauth/disassoc event from old AP "
1526 MACSTR_SEC
1527 " when already connecting with " MACSTR_SEC,
1528 MAC2STR_SEC(bssid),
1529 MAC2STR_SEC(drv->auth_attempt_bssid));
1530 return;
1531 }
1532
1533 if (drv->associated != 0 &&
1534 !ether_addr_equal(bssid, drv->bssid) &&
1535 !ether_addr_equal(bssid, drv->auth_bssid)) {
1536 /*
1537 * We have presumably received this deauth as a
1538 * response to a clear_state_mismatch() outgoing
1539 * deauth. Don't let it take us offline!
1540 */
1541 wpa_printf(MSG_DEBUG, "nl80211: Deauth received "
1542 "from Unknown BSSID " MACSTR_SEC " -- ignoring",
1543 MAC2STR_SEC(bssid));
1544 return;
1545 }
1546 }
1547
1548 nl80211_mark_disconnected(drv);
1549 os_memset(&event, 0, sizeof(event));
1550
1551 /* Note: Same offset for Reason Code in both frame subtypes */
1552 if (len >= 24 + sizeof(mgmt->u.deauth))
1553 reason_code = le_to_host16(mgmt->u.deauth.reason_code);
1554
1555 if (type == EVENT_DISASSOC) {
1556 event.disassoc_info.locally_generated =
1557 ether_addr_equal(mgmt->sa, drv->first_bss->addr);
1558 event.disassoc_info.addr = bssid;
1559 event.disassoc_info.reason_code = reason_code;
1560 if (frame + len > mgmt->u.disassoc.variable) {
1561 event.disassoc_info.ie = mgmt->u.disassoc.variable;
1562 event.disassoc_info.ie_len = frame + len -
1563 mgmt->u.disassoc.variable;
1564 }
1565 } else {
1566 event.deauth_info.locally_generated =
1567 ether_addr_equal(mgmt->sa, drv->first_bss->addr);
1568 if (drv->ignore_deauth_event) {
1569 wpa_printf(MSG_DEBUG, "nl80211: Ignore deauth event due to previous forced deauth-during-auth");
1570 drv->ignore_deauth_event = 0;
1571 if (event.deauth_info.locally_generated)
1572 drv->ignore_next_local_deauth = 0;
1573 return;
1574 }
1575 if (drv->ignore_next_local_deauth) {
1576 drv->ignore_next_local_deauth = 0;
1577 if (event.deauth_info.locally_generated) {
1578 wpa_printf(MSG_DEBUG, "nl80211: Ignore deauth event triggered due to own deauth request");
1579 return;
1580 }
1581 wpa_printf(MSG_WARNING, "nl80211: Was expecting local deauth but got another disconnect event first");
1582 }
1583 event.deauth_info.addr = bssid;
1584 event.deauth_info.reason_code = reason_code;
1585 if (frame + len > mgmt->u.deauth.variable) {
1586 event.deauth_info.ie = mgmt->u.deauth.variable;
1587 event.deauth_info.ie_len = frame + len -
1588 mgmt->u.deauth.variable;
1589 }
1590 }
1591
1592 wpa_supplicant_event(drv->ctx, type, &event);
1593 }
1594
1595
mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data * drv,enum wpa_event_type type,const u8 * frame,size_t len)1596 static void mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data *drv,
1597 enum wpa_event_type type,
1598 const u8 *frame, size_t len)
1599 {
1600 const struct ieee80211_mgmt *mgmt;
1601 union wpa_event_data event;
1602 u16 reason_code = 0;
1603
1604 if (type == EVENT_UNPROT_DEAUTH)
1605 wpa_printf(MSG_DEBUG, "nl80211: Unprot Deauthenticate event");
1606 else
1607 wpa_printf(MSG_DEBUG, "nl80211: Unprot Disassociate event");
1608
1609 if (len < 24)
1610 return;
1611
1612 mgmt = (const struct ieee80211_mgmt *) frame;
1613
1614 os_memset(&event, 0, sizeof(event));
1615 /* Note: Same offset for Reason Code in both frame subtypes */
1616 if (len >= 24 + sizeof(mgmt->u.deauth))
1617 reason_code = le_to_host16(mgmt->u.deauth.reason_code);
1618
1619 if (type == EVENT_UNPROT_DISASSOC) {
1620 event.unprot_disassoc.sa = mgmt->sa;
1621 event.unprot_disassoc.da = mgmt->da;
1622 event.unprot_disassoc.reason_code = reason_code;
1623 } else {
1624 event.unprot_deauth.sa = mgmt->sa;
1625 event.unprot_deauth.da = mgmt->da;
1626 event.unprot_deauth.reason_code = reason_code;
1627 }
1628
1629 wpa_supplicant_event(drv->ctx, type, &event);
1630 }
1631
1632
mlme_event_unprot_beacon(struct wpa_driver_nl80211_data * drv,const u8 * frame,size_t len)1633 static void mlme_event_unprot_beacon(struct wpa_driver_nl80211_data *drv,
1634 const u8 *frame, size_t len)
1635 {
1636 const struct ieee80211_mgmt *mgmt;
1637 union wpa_event_data event;
1638
1639 if (len < 24)
1640 return;
1641
1642 mgmt = (const struct ieee80211_mgmt *) frame;
1643
1644 os_memset(&event, 0, sizeof(event));
1645 event.unprot_beacon.sa = mgmt->sa;
1646 wpa_supplicant_event(drv->ctx, EVENT_UNPROT_BEACON, &event);
1647 }
1648
1649
1650 static s8
nl80211_get_link_id_by_freq(struct i802_bss * bss,unsigned int freq)1651 nl80211_get_link_id_by_freq(struct i802_bss *bss, unsigned int freq)
1652 {
1653 unsigned int i;
1654
1655 for_each_link(bss->valid_links, i) {
1656 if ((unsigned int) bss->links[i].freq == freq)
1657 return i;
1658 }
1659
1660 return NL80211_DRV_LINK_ID_NA;
1661 }
1662
1663
mlme_event(struct i802_bss * bss,enum nl80211_commands cmd,struct nlattr * frame,struct nlattr * addr,struct nlattr * timed_out,struct nlattr * freq,struct nlattr * ack,struct nlattr * cookie,struct nlattr * sig,struct nlattr * wmm,struct nlattr * req_ie,struct nlattr * link)1664 static void mlme_event(struct i802_bss *bss,
1665 enum nl80211_commands cmd, struct nlattr *frame,
1666 struct nlattr *addr, struct nlattr *timed_out,
1667 struct nlattr *freq, struct nlattr *ack,
1668 struct nlattr *cookie, struct nlattr *sig,
1669 struct nlattr *wmm, struct nlattr *req_ie,
1670 struct nlattr *link)
1671 {
1672 struct wpa_driver_nl80211_data *drv = bss->drv;
1673 u16 stype = 0, auth_type = 0;
1674 const u8 *data;
1675 size_t len;
1676 int link_id = -1;
1677 struct i802_link *mld_link = NULL;
1678
1679 if (timed_out && addr) {
1680 mlme_timeout_event(drv, cmd, addr);
1681 return;
1682 }
1683
1684 if (frame == NULL) {
1685 wpa_printf(MSG_DEBUG,
1686 "nl80211: MLME event %d (%s) without frame data",
1687 cmd, nl80211_command_to_string(cmd));
1688 return;
1689 }
1690
1691 /* Determine the MLD link either by an explicitly provided link id or
1692 * finding a match based on the frequency. */
1693 if (link)
1694 link_id = nla_get_u8(link);
1695 else if (freq)
1696 link_id = nl80211_get_link_id_by_freq(bss, nla_get_u32(freq));
1697
1698 if (nl80211_link_valid(bss->valid_links, link_id))
1699 mld_link = nl80211_get_link(bss, link_id);
1700
1701 data = nla_data(frame);
1702 len = nla_len(frame);
1703 if (len < 4 + 2 * ETH_ALEN) {
1704 wpa_printf(MSG_MSGDUMP, "nl80211: MLME event %d (%s) on %s("
1705 MACSTR_SEC ") - too short",
1706 cmd, nl80211_command_to_string(cmd), bss->ifname,
1707 MAC2STR_SEC(bss->addr));
1708 return;
1709 }
1710 wpa_printf(MSG_MSGDUMP, "nl80211: MLME event %d (%s) on %s(" MACSTR
1711 ") A1=" MACSTR " A2=" MACSTR " on link_id=%d", cmd,
1712 nl80211_command_to_string(cmd), bss->ifname,
1713 MAC2STR(bss->addr), MAC2STR(data + 4),
1714 MAC2STR(data + 4 + ETH_ALEN), link_id);
1715
1716 /* PASN Authentication frame can be received with a different source MAC
1717 * address. Allow NL80211_CMD_FRAME event with foreign addresses also.
1718 */
1719 if (cmd == NL80211_CMD_FRAME && len >= 24) {
1720 const struct ieee80211_mgmt *mgmt;
1721 u16 fc;
1722
1723 mgmt = (const struct ieee80211_mgmt *) data;
1724 fc = le_to_host16(mgmt->frame_control);
1725 stype = WLAN_FC_GET_STYPE(fc);
1726 auth_type = le_to_host16(mgmt->u.auth.auth_alg);
1727 }
1728
1729 if (cmd == NL80211_CMD_FRAME && stype == WLAN_FC_STYPE_AUTH &&
1730 auth_type == host_to_le16(WLAN_AUTH_PASN)) {
1731 wpa_printf(MSG_DEBUG,
1732 "nl80211: %s: Allow PASN frame for foreign address",
1733 bss->ifname);
1734 } else if (cmd != NL80211_CMD_FRAME_TX_STATUS &&
1735 !(data[4] & 0x01) &&
1736 !ether_addr_equal(bss->addr, data + 4) &&
1737 (is_zero_ether_addr(bss->rand_addr) ||
1738 !ether_addr_equal(bss->rand_addr, data + 4)) &&
1739 !ether_addr_equal(bss->addr, data + 4 + ETH_ALEN) &&
1740 (is_zero_ether_addr(drv->first_bss->prev_addr) ||
1741 !ether_addr_equal(bss->prev_addr, data + 4 + ETH_ALEN)) &&
1742 (!mld_link ||
1743 !ether_addr_equal(mld_link->addr, data + 4))) {
1744 wpa_printf(MSG_MSGDUMP, "nl80211: %s: Ignore MLME frame event "
1745 "for foreign address", bss->ifname);
1746 return;
1747 }
1748 wpa_hexdump(MSG_MSGDUMP, "nl80211: MLME event frame",
1749 nla_data(frame), nla_len(frame));
1750
1751 switch (cmd) {
1752 case NL80211_CMD_AUTHENTICATE:
1753 mlme_event_auth(drv, nla_data(frame), nla_len(frame));
1754 break;
1755 case NL80211_CMD_ASSOCIATE:
1756 mlme_event_assoc(drv, nla_data(frame), nla_len(frame), wmm,
1757 req_ie);
1758 break;
1759 case NL80211_CMD_DEAUTHENTICATE:
1760 mlme_event_deauth_disassoc(drv, EVENT_DEAUTH,
1761 nla_data(frame), nla_len(frame));
1762 break;
1763 case NL80211_CMD_DISASSOCIATE:
1764 mlme_event_deauth_disassoc(drv, EVENT_DISASSOC,
1765 nla_data(frame), nla_len(frame));
1766 break;
1767 case NL80211_CMD_FRAME:
1768 mlme_event_mgmt(bss, freq, sig, nla_data(frame),
1769 nla_len(frame), link_id);
1770 break;
1771 case NL80211_CMD_FRAME_TX_STATUS:
1772 mlme_event_mgmt_tx_status(bss, cookie, nla_data(frame),
1773 nla_len(frame), ack);
1774 break;
1775 case NL80211_CMD_UNPROT_DEAUTHENTICATE:
1776 mlme_event_unprot_disconnect(drv, EVENT_UNPROT_DEAUTH,
1777 nla_data(frame), nla_len(frame));
1778 break;
1779 case NL80211_CMD_UNPROT_DISASSOCIATE:
1780 mlme_event_unprot_disconnect(drv, EVENT_UNPROT_DISASSOC,
1781 nla_data(frame), nla_len(frame));
1782 break;
1783 case NL80211_CMD_UNPROT_BEACON:
1784 mlme_event_unprot_beacon(drv, nla_data(frame), nla_len(frame));
1785 break;
1786 default:
1787 break;
1788 }
1789 }
1790
1791
mlme_event_michael_mic_failure(struct i802_bss * bss,struct nlattr * tb[])1792 static void mlme_event_michael_mic_failure(struct i802_bss *bss,
1793 struct nlattr *tb[])
1794 {
1795 union wpa_event_data data;
1796
1797 wpa_printf(MSG_DEBUG, "nl80211: MLME event Michael MIC failure");
1798 os_memset(&data, 0, sizeof(data));
1799 if (tb[NL80211_ATTR_MAC]) {
1800 wpa_hexdump(MSG_DEBUG, "nl80211: Source MAC address",
1801 nla_data(tb[NL80211_ATTR_MAC]),
1802 nla_len(tb[NL80211_ATTR_MAC]));
1803 data.michael_mic_failure.src = nla_data(tb[NL80211_ATTR_MAC]);
1804 }
1805 if (tb[NL80211_ATTR_KEY_SEQ]) {
1806 wpa_hexdump(MSG_DEBUG, "nl80211: TSC",
1807 nla_data(tb[NL80211_ATTR_KEY_SEQ]),
1808 nla_len(tb[NL80211_ATTR_KEY_SEQ]));
1809 }
1810 if (tb[NL80211_ATTR_KEY_TYPE]) {
1811 enum nl80211_key_type key_type =
1812 nla_get_u32(tb[NL80211_ATTR_KEY_TYPE]);
1813 wpa_printf(MSG_DEBUG, "nl80211: Key Type %d", key_type);
1814 if (key_type == NL80211_KEYTYPE_PAIRWISE)
1815 data.michael_mic_failure.unicast = 1;
1816 } else
1817 data.michael_mic_failure.unicast = 1;
1818
1819 if (tb[NL80211_ATTR_KEY_IDX]) {
1820 u8 key_id = nla_get_u8(tb[NL80211_ATTR_KEY_IDX]);
1821 wpa_printf(MSG_DEBUG, "nl80211: Key Id %d", key_id);
1822 }
1823
1824 wpa_supplicant_event(bss->ctx, EVENT_MICHAEL_MIC_FAILURE, &data);
1825 }
1826
1827
mlme_event_join_ibss(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])1828 static void mlme_event_join_ibss(struct wpa_driver_nl80211_data *drv,
1829 struct nlattr *tb[])
1830 {
1831 unsigned int freq;
1832 union wpa_event_data event;
1833
1834 if (tb[NL80211_ATTR_MAC] == NULL) {
1835 wpa_printf(MSG_DEBUG, "nl80211: No address in IBSS joined "
1836 "event");
1837 return;
1838 }
1839 os_memcpy(drv->bssid, nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
1840
1841 drv->associated = 1;
1842 wpa_printf(MSG_DEBUG, "nl80211: IBSS " MACSTR_SEC " joined",
1843 MAC2STR_SEC(drv->bssid));
1844
1845 freq = nl80211_get_assoc_freq(drv);
1846 if (freq) {
1847 wpa_printf(MSG_DEBUG, "nl80211: IBSS on frequency %u MHz",
1848 freq);
1849 drv->first_bss->flink->freq = freq;
1850 }
1851
1852 os_memset(&event, 0, sizeof(event));
1853 event.assoc_info.freq = freq;
1854
1855 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, &event);
1856 }
1857
1858
mlme_event_remain_on_channel(struct wpa_driver_nl80211_data * drv,int cancel_event,struct nlattr * tb[])1859 static void mlme_event_remain_on_channel(struct wpa_driver_nl80211_data *drv,
1860 int cancel_event, struct nlattr *tb[])
1861 {
1862 unsigned int freq, chan_type, duration;
1863 union wpa_event_data data;
1864 u64 cookie;
1865
1866 if (tb[NL80211_ATTR_WIPHY_FREQ])
1867 freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
1868 else
1869 freq = 0;
1870
1871 if (tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE])
1872 chan_type = nla_get_u32(tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1873 else
1874 chan_type = 0;
1875
1876 if (tb[NL80211_ATTR_DURATION])
1877 duration = nla_get_u32(tb[NL80211_ATTR_DURATION]);
1878 else
1879 duration = 0;
1880
1881 if (tb[NL80211_ATTR_COOKIE])
1882 cookie = nla_get_u64(tb[NL80211_ATTR_COOKIE]);
1883 else
1884 cookie = 0;
1885
1886 #if defined(CONFIG_OPEN_HARMONY_PATCH) && defined(CONFIG_MIRACAST_SINK_OPT)
1887 miracast_sink_log("nl80211: Remain-on-channel event (cancel=%d "
1888 "freq=%u channel_type=%u duration=%u cookie=0x%llx (%s))",
1889 cancel_event, freq, chan_type, duration,
1890 (long long unsigned int) cookie,
1891 cookie == drv->remain_on_chan_cookie ? "match" : "unknown");
1892 #else
1893 wpa_printf(MSG_EXCESSIVE, "nl80211: Remain-on-channel event (cancel=%d "
1894 "freq=%u channel_type=%u duration=%u cookie=0x%llx (%s))",
1895 cancel_event, freq, chan_type, duration,
1896 (long long unsigned int) cookie,
1897 cookie == drv->remain_on_chan_cookie ? "match" : "unknown");
1898 #endif
1899
1900 if (cookie != drv->remain_on_chan_cookie)
1901 return; /* not for us */
1902
1903 if (cancel_event)
1904 drv->pending_remain_on_chan = 0;
1905
1906 os_memset(&data, 0, sizeof(data));
1907 data.remain_on_channel.freq = freq;
1908 data.remain_on_channel.duration = duration;
1909 wpa_supplicant_event(drv->ctx, cancel_event ?
1910 EVENT_CANCEL_REMAIN_ON_CHANNEL :
1911 EVENT_REMAIN_ON_CHANNEL, &data);
1912 }
1913
1914
mlme_event_ft_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])1915 static void mlme_event_ft_event(struct wpa_driver_nl80211_data *drv,
1916 struct nlattr *tb[])
1917 {
1918 union wpa_event_data data;
1919
1920 os_memset(&data, 0, sizeof(data));
1921
1922 if (tb[NL80211_ATTR_IE]) {
1923 data.ft_ies.ies = nla_data(tb[NL80211_ATTR_IE]);
1924 data.ft_ies.ies_len = nla_len(tb[NL80211_ATTR_IE]);
1925 }
1926
1927 if (tb[NL80211_ATTR_IE_RIC]) {
1928 data.ft_ies.ric_ies = nla_data(tb[NL80211_ATTR_IE_RIC]);
1929 data.ft_ies.ric_ies_len = nla_len(tb[NL80211_ATTR_IE_RIC]);
1930 }
1931
1932 if (tb[NL80211_ATTR_MAC])
1933 os_memcpy(data.ft_ies.target_ap,
1934 nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
1935
1936 wpa_printf(MSG_DEBUG, "nl80211: FT event target_ap " MACSTR_SEC,
1937 MAC2STR_SEC(data.ft_ies.target_ap));
1938
1939 wpa_supplicant_event(drv->ctx, EVENT_FT_RESPONSE, &data);
1940 }
1941
1942
mlme_event_dh_event(struct wpa_driver_nl80211_data * drv,struct i802_bss * bss,struct nlattr * tb[])1943 static void mlme_event_dh_event(struct wpa_driver_nl80211_data *drv,
1944 struct i802_bss *bss,
1945 struct nlattr *tb[])
1946 {
1947 union wpa_event_data data;
1948 u8 *addr, *link_addr = NULL;
1949 int assoc_link_id = -1;
1950
1951 if (!is_ap_interface(drv->nlmode))
1952 return;
1953 if (!tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_IE])
1954 return;
1955
1956 os_memset(&data, 0, sizeof(data));
1957 addr = nla_data(tb[NL80211_ATTR_MAC]);
1958
1959 if (!bss->valid_links &&
1960 (tb[NL80211_ATTR_MLO_LINK_ID] ||
1961 tb[NL80211_ATTR_MLD_ADDR])) {
1962 wpa_printf(MSG_ERROR,
1963 "nl80211: Link info not expected for DH event for non-MLD AP");
1964 return;
1965 }
1966
1967 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
1968 assoc_link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
1969 wpa_printf(MSG_DEBUG,
1970 "nl80211: STA assoc link ID %d in UPDATE_OWE_INFO event",
1971 assoc_link_id);
1972
1973 if (assoc_link_id != NL80211_DRV_LINK_ID_NA &&
1974 tb[NL80211_ATTR_MLD_ADDR]) {
1975 link_addr = addr;
1976 addr = nla_data(tb[NL80211_ATTR_MLD_ADDR]);
1977 wpa_printf(MSG_DEBUG,
1978 "nl80211: STA assoc link addr " MACSTR,
1979 MAC2STR(link_addr));
1980 }
1981 }
1982
1983 data.update_dh.peer = addr;
1984 data.update_dh.ie = nla_data(tb[NL80211_ATTR_IE]);
1985 data.update_dh.ie_len = nla_len(tb[NL80211_ATTR_IE]);
1986 data.update_dh.assoc_link_id = assoc_link_id;
1987 data.update_dh.link_addr = link_addr;
1988
1989 wpa_printf(MSG_DEBUG, "nl80211: DH event - peer " MACSTR_SEC,
1990 MAC2STR_SEC(data.update_dh.peer));
1991
1992 wpa_supplicant_event(bss->ctx, EVENT_UPDATE_DH, &data);
1993 }
1994
1995
send_scan_event(struct wpa_driver_nl80211_data * drv,int aborted,struct nlattr * tb[],int external_scan)1996 static void send_scan_event(struct wpa_driver_nl80211_data *drv, int aborted,
1997 struct nlattr *tb[], int external_scan)
1998 {
1999 union wpa_event_data event;
2000 struct nlattr *nl;
2001 int rem;
2002 struct scan_info *info;
2003 #define MAX_REPORT_FREQS 110
2004 int freqs[MAX_REPORT_FREQS];
2005 int num_freqs = 0;
2006
2007 if (!external_scan && drv->scan_for_auth) {
2008 drv->scan_for_auth = 0;
2009 wpa_printf(MSG_DEBUG, "nl80211: Scan results for missing "
2010 "cfg80211 BSS entry");
2011 wpa_driver_nl80211_authenticate_retry(drv);
2012 return;
2013 }
2014
2015 os_memset(&event, 0, sizeof(event));
2016 info = &event.scan_info;
2017 info->aborted = aborted;
2018 info->external_scan = external_scan;
2019 info->nl_scan_event = 1;
2020
2021 if (tb[NL80211_ATTR_SCAN_SSIDS]) {
2022 nla_for_each_nested(nl, tb[NL80211_ATTR_SCAN_SSIDS], rem) {
2023 struct wpa_driver_scan_ssid *s =
2024 &info->ssids[info->num_ssids];
2025 s->ssid = nla_data(nl);
2026 s->ssid_len = nla_len(nl);
2027 wpa_printf(MSG_INFO, "nl80211: Scan probed for SSID '%s'",
2028 anonymize_ssid(wpa_ssid_txt(s->ssid, s->ssid_len)));
2029 info->num_ssids++;
2030 if (info->num_ssids == WPAS_MAX_SCAN_SSIDS)
2031 break;
2032 }
2033 }
2034 if (tb[NL80211_ATTR_SCAN_FREQUENCIES]) {
2035 char msg[MAX_REPORT_FREQS * 5 + 1], *pos, *end;
2036 int res;
2037
2038 pos = msg;
2039 end = pos + sizeof(msg);
2040 *pos = '\0';
2041
2042 nla_for_each_nested(nl, tb[NL80211_ATTR_SCAN_FREQUENCIES], rem)
2043 {
2044 freqs[num_freqs] = nla_get_u32(nl);
2045 res = os_snprintf(pos, end - pos, " %d",
2046 freqs[num_freqs]);
2047 if (!os_snprintf_error(end - pos, res))
2048 pos += res;
2049 num_freqs++;
2050 if (num_freqs == MAX_REPORT_FREQS)
2051 break;
2052 }
2053 info->freqs = freqs;
2054 info->num_freqs = num_freqs;
2055 msg[sizeof(msg) - 1] = '\0';
2056 wpa_printf(MSG_INFO, "nl80211: Scan included frequencies:%s",
2057 msg);
2058 }
2059
2060 if (tb[NL80211_ATTR_SCAN_START_TIME_TSF] &&
2061 tb[NL80211_ATTR_SCAN_START_TIME_TSF_BSSID]) {
2062 info->scan_start_tsf =
2063 nla_get_u64(tb[NL80211_ATTR_SCAN_START_TIME_TSF]);
2064 os_memcpy(info->scan_start_tsf_bssid,
2065 nla_data(tb[NL80211_ATTR_SCAN_START_TIME_TSF_BSSID]),
2066 ETH_ALEN);
2067 }
2068
2069 wpa_supplicant_event(drv->ctx, EVENT_SCAN_RESULTS, &event);
2070 }
2071
2072
nl80211_cqm_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])2073 static void nl80211_cqm_event(struct wpa_driver_nl80211_data *drv,
2074 struct nlattr *tb[])
2075 {
2076 static struct nla_policy cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
2077 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
2078 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U8 },
2079 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
2080 [NL80211_ATTR_CQM_PKT_LOSS_EVENT] = { .type = NLA_U32 },
2081 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
2082 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
2083 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
2084 [NL80211_ATTR_CQM_BEACON_LOSS_EVENT] = { .type = NLA_FLAG },
2085 };
2086 struct nlattr *cqm[NL80211_ATTR_CQM_MAX + 1];
2087 enum nl80211_cqm_rssi_threshold_event event;
2088 union wpa_event_data ed;
2089 int res;
2090
2091 if (tb[NL80211_ATTR_CQM] == NULL ||
2092 nla_parse_nested(cqm, NL80211_ATTR_CQM_MAX, tb[NL80211_ATTR_CQM],
2093 cqm_policy)) {
2094 wpa_printf(MSG_DEBUG, "nl80211: Ignore invalid CQM event");
2095 return;
2096 }
2097
2098 os_memset(&ed, 0, sizeof(ed));
2099
2100 if (cqm[NL80211_ATTR_CQM_PKT_LOSS_EVENT]) {
2101 if (!tb[NL80211_ATTR_MAC])
2102 return;
2103 os_memcpy(ed.low_ack.addr, nla_data(tb[NL80211_ATTR_MAC]),
2104 ETH_ALEN);
2105 ed.low_ack.num_packets =
2106 nla_get_u32(cqm[NL80211_ATTR_CQM_PKT_LOSS_EVENT]);
2107 wpa_printf(MSG_DEBUG, "nl80211: Packet loss event for " MACSTR_SEC
2108 " (num_packets %u)",
2109 MAC2STR_SEC(ed.low_ack.addr), ed.low_ack.num_packets);
2110 wpa_supplicant_event(drv->ctx, EVENT_STATION_LOW_ACK, &ed);
2111 return;
2112 }
2113
2114 if (cqm[NL80211_ATTR_CQM_BEACON_LOSS_EVENT]) {
2115 wpa_printf(MSG_DEBUG, "nl80211: Beacon loss event");
2116 wpa_supplicant_event(drv->ctx, EVENT_BEACON_LOSS, NULL);
2117 return;
2118 }
2119
2120 if (cqm[NL80211_ATTR_CQM_TXE_RATE] &&
2121 cqm[NL80211_ATTR_CQM_TXE_PKTS] &&
2122 cqm[NL80211_ATTR_CQM_TXE_INTVL] &&
2123 cqm[NL80211_ATTR_MAC]) {
2124 wpa_printf(MSG_DEBUG, "nl80211: CQM TXE event for " MACSTR_SEC
2125 " (rate: %u pkts: %u interval: %u)",
2126 MAC2STR_SEC((u8 *) nla_data(cqm[NL80211_ATTR_MAC])),
2127 nla_get_u32(cqm[NL80211_ATTR_CQM_TXE_RATE]),
2128 nla_get_u32(cqm[NL80211_ATTR_CQM_TXE_PKTS]),
2129 nla_get_u32(cqm[NL80211_ATTR_CQM_TXE_INTVL]));
2130 return;
2131 }
2132
2133 if (cqm[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] == NULL) {
2134 wpa_printf(MSG_DEBUG,
2135 "nl80211: Not a CQM RSSI threshold event");
2136 return;
2137 }
2138 event = nla_get_u32(cqm[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT]);
2139
2140 if (event == NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH) {
2141 wpa_printf(MSG_DEBUG, "nl80211: Connection quality monitor "
2142 "event: RSSI high");
2143 ed.signal_change.above_threshold = 1;
2144 } else if (event == NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW) {
2145 wpa_printf(MSG_DEBUG, "nl80211: Connection quality monitor "
2146 "event: RSSI low");
2147 ed.signal_change.above_threshold = 0;
2148 } else {
2149 wpa_printf(MSG_DEBUG,
2150 "nl80211: Unknown CQM RSSI threshold event: %d",
2151 event);
2152 return;
2153 }
2154
2155 /*
2156 * nl80211_get_link_signal() and nl80211_get_link_noise() set default
2157 * values in case querying the driver fails.
2158 */
2159 res = nl80211_get_link_signal(drv, drv->bssid, &ed.signal_change.data);
2160 if (res == 0) {
2161 wpa_printf(MSG_DEBUG, "nl80211: Signal: %d dBm txrate: %lu",
2162 ed.signal_change.data.signal,
2163 ed.signal_change.data.current_tx_rate);
2164 } else {
2165 wpa_printf(MSG_DEBUG,
2166 "nl80211: Querying the driver for signal info failed");
2167 }
2168
2169 res = nl80211_get_link_noise(drv, &ed.signal_change);
2170 if (res == 0) {
2171 wpa_printf(MSG_DEBUG, "nl80211: Noise: %d dBm",
2172 ed.signal_change.current_noise);
2173 } else {
2174 wpa_printf(MSG_DEBUG,
2175 "nl80211: Querying the driver for noise info failed");
2176 }
2177
2178 wpa_supplicant_event(drv->ctx, EVENT_SIGNAL_CHANGE, &ed);
2179 }
2180
2181
nl80211_new_peer_candidate(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2182 static void nl80211_new_peer_candidate(struct wpa_driver_nl80211_data *drv,
2183 struct nlattr **tb)
2184 {
2185 const u8 *addr;
2186 union wpa_event_data data;
2187
2188 if (drv->nlmode != NL80211_IFTYPE_MESH_POINT ||
2189 !tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_IE])
2190 return;
2191
2192 addr = nla_data(tb[NL80211_ATTR_MAC]);
2193 wpa_printf(MSG_DEBUG, "nl80211: New peer candidate " MACSTR_SEC,
2194 MAC2STR_SEC(addr));
2195
2196 os_memset(&data, 0, sizeof(data));
2197 data.mesh_peer.peer = addr;
2198 data.mesh_peer.ies = nla_data(tb[NL80211_ATTR_IE]);
2199 data.mesh_peer.ie_len = nla_len(tb[NL80211_ATTR_IE]);
2200 wpa_supplicant_event(drv->ctx, EVENT_NEW_PEER_CANDIDATE, &data);
2201 }
2202
2203
nl80211_new_station_event(struct wpa_driver_nl80211_data * drv,struct i802_bss * bss,struct nlattr ** tb)2204 static void nl80211_new_station_event(struct wpa_driver_nl80211_data *drv,
2205 struct i802_bss *bss,
2206 struct nlattr **tb)
2207 {
2208 u8 *peer_addr;
2209 union wpa_event_data data;
2210
2211 if (tb[NL80211_ATTR_MAC] == NULL)
2212 return;
2213 peer_addr = nla_data(tb[NL80211_ATTR_MAC]);
2214 wpa_printf(MSG_DEBUG, "nl80211: New station " MACSTR_SEC,
2215 MAC2STR_SEC(peer_addr));
2216
2217 if (is_ap_interface(drv->nlmode) && drv->device_ap_sme) {
2218 u8 *link_addr = NULL;
2219 int assoc_link_id = -1;
2220 u8 *req_ies = NULL, *resp_ies = NULL;
2221 size_t req_ies_len = 0, resp_ies_len = 0;
2222
2223 if (!bss->valid_links &&
2224 (tb[NL80211_ATTR_MLO_LINK_ID] ||
2225 tb[NL80211_ATTR_MLD_ADDR])) {
2226 wpa_printf(MSG_ERROR,
2227 "nl80211: MLO info not expected for new station event for non-MLD AP");
2228 return;
2229 }
2230
2231 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2232 assoc_link_id =
2233 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2234 wpa_printf(MSG_DEBUG, "nl80211: STA assoc link ID %d",
2235 assoc_link_id);
2236 if (tb[NL80211_ATTR_MLD_ADDR]) {
2237 peer_addr = nla_data(tb[NL80211_ATTR_MLD_ADDR]);
2238 link_addr = nla_data(tb[NL80211_ATTR_MAC]);
2239 wpa_printf(MSG_DEBUG,
2240 "nl80211: STA MLD address " MACSTR_SEC,
2241 MAC2STR_SEC(peer_addr));
2242 }
2243 }
2244
2245 if (tb[NL80211_ATTR_IE]) {
2246 req_ies = nla_data(tb[NL80211_ATTR_IE]);
2247 req_ies_len = nla_len(tb[NL80211_ATTR_IE]);
2248 wpa_hexdump(MSG_DEBUG, "nl80211: Assoc Req IEs",
2249 req_ies, req_ies_len);
2250 }
2251
2252 if (tb[NL80211_ATTR_RESP_IE]) {
2253 resp_ies = nla_data(tb[NL80211_ATTR_RESP_IE]);
2254 resp_ies_len = nla_len(tb[NL80211_ATTR_RESP_IE]);
2255 wpa_hexdump(MSG_DEBUG, "nl80211: Assoc Resp IEs",
2256 resp_ies, resp_ies_len);
2257 }
2258
2259 drv_event_assoc(bss->ctx, peer_addr, req_ies, req_ies_len,
2260 resp_ies, resp_ies_len, link_addr,
2261 assoc_link_id, 0);
2262 return;
2263 }
2264
2265 if (drv->nlmode != NL80211_IFTYPE_ADHOC)
2266 return;
2267
2268 os_memset(&data, 0, sizeof(data));
2269 os_memcpy(data.ibss_rsn_start.peer, peer_addr, ETH_ALEN);
2270 wpa_supplicant_event(bss->ctx, EVENT_IBSS_RSN_START, &data);
2271 }
2272
2273
nl80211_del_station_event(struct wpa_driver_nl80211_data * drv,struct i802_bss * bss,struct nlattr ** tb)2274 void nl80211_del_station_event(struct wpa_driver_nl80211_data *drv,
2275 struct i802_bss *bss,
2276 struct nlattr **tb)
2277 {
2278 u8 *addr;
2279 union wpa_event_data data;
2280
2281 if (tb[NL80211_ATTR_MAC] == NULL)
2282 return;
2283 addr = nla_data(tb[NL80211_ATTR_MAC]);
2284 wpa_printf(MSG_DEBUG, "nl80211: Delete station " MACSTR_SEC,
2285 MAC2STR_SEC(addr));
2286
2287 #ifdef CONFIG_VENDOR_EXT
2288 struct wpa_supplicant *wpa_s = drv->ctx;
2289 if (tb[NL80211_ATTR_REASON_CODE]) {
2290 wpa_vendor_ext_nl80211_set_disconnect_reason(drv, nla_get_u16(tb[NL80211_ATTR_REASON_CODE]));
2291 #ifdef CONFIG_P2P_CHR
2292 if (drv->nlmode == NL80211_IFTYPE_P2P_GO) {
2293 wpa_supplicant_upload_del_station(wpa_s, addr);
2294 }
2295 #endif
2296 }
2297 #endif
2298
2299 if (is_ap_interface(drv->nlmode) && drv->device_ap_sme) {
2300 drv_event_disassoc(bss->ctx, addr);
2301 return;
2302 }
2303
2304 if (drv->nlmode != NL80211_IFTYPE_ADHOC)
2305 return;
2306
2307 os_memset(&data, 0, sizeof(data));
2308 os_memcpy(data.ibss_peer_lost.peer, addr, ETH_ALEN);
2309 wpa_supplicant_event(bss->ctx, EVENT_IBSS_PEER_LOST, &data);
2310 }
2311
2312
nl80211_rekey_offload_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2313 static void nl80211_rekey_offload_event(struct wpa_driver_nl80211_data *drv,
2314 struct nlattr **tb)
2315 {
2316 struct nlattr *rekey_info[NUM_NL80211_REKEY_DATA];
2317 static struct nla_policy rekey_policy[NUM_NL80211_REKEY_DATA] = {
2318 [NL80211_REKEY_DATA_KEK] = {
2319 .minlen = NL80211_KEK_LEN,
2320 .maxlen = NL80211_KEK_LEN,
2321 },
2322 [NL80211_REKEY_DATA_KCK] = {
2323 .minlen = NL80211_KCK_LEN,
2324 .maxlen = NL80211_KCK_LEN,
2325 },
2326 [NL80211_REKEY_DATA_REPLAY_CTR] = {
2327 .minlen = NL80211_REPLAY_CTR_LEN,
2328 .maxlen = NL80211_REPLAY_CTR_LEN,
2329 },
2330 };
2331 union wpa_event_data data;
2332
2333 if (!tb[NL80211_ATTR_MAC] ||
2334 !tb[NL80211_ATTR_REKEY_DATA] ||
2335 nla_parse_nested(rekey_info, MAX_NL80211_REKEY_DATA,
2336 tb[NL80211_ATTR_REKEY_DATA], rekey_policy) ||
2337 !rekey_info[NL80211_REKEY_DATA_REPLAY_CTR])
2338 return;
2339
2340 os_memset(&data, 0, sizeof(data));
2341 data.driver_gtk_rekey.bssid = nla_data(tb[NL80211_ATTR_MAC]);
2342 wpa_printf(MSG_DEBUG, "nl80211: Rekey offload event for BSSID " MACSTR_SEC,
2343 MAC2STR_SEC(data.driver_gtk_rekey.bssid));
2344 data.driver_gtk_rekey.replay_ctr =
2345 nla_data(rekey_info[NL80211_REKEY_DATA_REPLAY_CTR]);
2346 wpa_hexdump(MSG_DEBUG, "nl80211: Rekey offload - Replay Counter",
2347 data.driver_gtk_rekey.replay_ctr, NL80211_REPLAY_CTR_LEN);
2348 wpa_supplicant_event(drv->ctx, EVENT_DRIVER_GTK_REKEY, &data);
2349 }
2350
2351
nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2352 static void nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data *drv,
2353 struct nlattr **tb)
2354 {
2355 struct nlattr *cand[NUM_NL80211_PMKSA_CANDIDATE];
2356 static struct nla_policy cand_policy[NUM_NL80211_PMKSA_CANDIDATE] = {
2357 [NL80211_PMKSA_CANDIDATE_INDEX] = { .type = NLA_U32 },
2358 [NL80211_PMKSA_CANDIDATE_BSSID] = {
2359 .minlen = ETH_ALEN,
2360 .maxlen = ETH_ALEN,
2361 },
2362 [NL80211_PMKSA_CANDIDATE_PREAUTH] = { .type = NLA_FLAG },
2363 };
2364 union wpa_event_data data;
2365
2366 wpa_printf(MSG_DEBUG, "nl80211: PMKSA candidate event");
2367
2368 if (!tb[NL80211_ATTR_PMKSA_CANDIDATE] ||
2369 nla_parse_nested(cand, MAX_NL80211_PMKSA_CANDIDATE,
2370 tb[NL80211_ATTR_PMKSA_CANDIDATE], cand_policy) ||
2371 !cand[NL80211_PMKSA_CANDIDATE_INDEX] ||
2372 !cand[NL80211_PMKSA_CANDIDATE_BSSID])
2373 return;
2374
2375 os_memset(&data, 0, sizeof(data));
2376 os_memcpy(data.pmkid_candidate.bssid,
2377 nla_data(cand[NL80211_PMKSA_CANDIDATE_BSSID]), ETH_ALEN);
2378 data.pmkid_candidate.index =
2379 nla_get_u32(cand[NL80211_PMKSA_CANDIDATE_INDEX]);
2380 data.pmkid_candidate.preauth =
2381 cand[NL80211_PMKSA_CANDIDATE_PREAUTH] != NULL;
2382 wpa_supplicant_event(drv->ctx, EVENT_PMKID_CANDIDATE, &data);
2383 }
2384
2385
nl80211_client_probe_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2386 static void nl80211_client_probe_event(struct wpa_driver_nl80211_data *drv,
2387 struct nlattr **tb)
2388 {
2389 union wpa_event_data data;
2390 const u8 *addr;
2391 u64 cookie = 0;
2392
2393 addr = nla_data(tb[NL80211_ATTR_MAC]);
2394 if (!addr)
2395 return;
2396 if (tb[NL80211_ATTR_COOKIE])
2397 cookie = nla_get_u64(tb[NL80211_ATTR_COOKIE]);
2398 wpa_printf(MSG_DEBUG, "nl80211: Probe client event (addr=" MACSTR_SEC
2399 " ack=%d cookie=%llu)", MAC2STR_SEC(addr),
2400 tb[NL80211_ATTR_ACK] != NULL,
2401 (long long unsigned int) cookie);
2402 if (!tb[NL80211_ATTR_ACK])
2403 return;
2404
2405 os_memset(&data, 0, sizeof(data));
2406 os_memcpy(data.client_poll.addr, addr, ETH_ALEN);
2407 wpa_supplicant_event(drv->ctx, EVENT_DRIVER_CLIENT_POLL_OK, &data);
2408 }
2409
2410
nl80211_tdls_oper_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2411 static void nl80211_tdls_oper_event(struct wpa_driver_nl80211_data *drv,
2412 struct nlattr **tb)
2413 {
2414 union wpa_event_data data;
2415
2416 wpa_printf(MSG_DEBUG, "nl80211: TDLS operation event");
2417
2418 if (!tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_TDLS_OPERATION])
2419 return;
2420
2421 os_memset(&data, 0, sizeof(data));
2422 os_memcpy(data.tdls.peer, nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
2423 switch (nla_get_u8(tb[NL80211_ATTR_TDLS_OPERATION])) {
2424 case NL80211_TDLS_SETUP:
2425 wpa_printf(MSG_DEBUG, "nl80211: TDLS setup request for peer "
2426 MACSTR_SEC, MAC2STR_SEC(data.tdls.peer));
2427 data.tdls.oper = TDLS_REQUEST_SETUP;
2428 break;
2429 case NL80211_TDLS_TEARDOWN:
2430 wpa_printf(MSG_DEBUG, "nl80211: TDLS teardown request for peer "
2431 MACSTR_SEC, MAC2STR_SEC(data.tdls.peer));
2432 data.tdls.oper = TDLS_REQUEST_TEARDOWN;
2433 break;
2434 case NL80211_TDLS_DISCOVERY_REQ:
2435 wpa_printf(MSG_DEBUG,
2436 "nl80211: TDLS discovery request for peer " MACSTR_SEC,
2437 MAC2STR_SEC(data.tdls.peer));
2438 data.tdls.oper = TDLS_REQUEST_DISCOVER;
2439 break;
2440 default:
2441 wpa_printf(MSG_DEBUG, "nl80211: Unsupported TDLS operatione "
2442 "event");
2443 return;
2444 }
2445 if (tb[NL80211_ATTR_REASON_CODE]) {
2446 data.tdls.reason_code =
2447 nla_get_u16(tb[NL80211_ATTR_REASON_CODE]);
2448 }
2449
2450 wpa_supplicant_event(drv->ctx, EVENT_TDLS, &data);
2451 }
2452
2453
nl80211_stop_ap(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2454 static void nl80211_stop_ap(struct wpa_driver_nl80211_data *drv,
2455 struct nlattr **tb)
2456 {
2457 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_UNAVAILABLE, NULL);
2458 }
2459
2460
nl80211_connect_failed_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2461 static void nl80211_connect_failed_event(struct wpa_driver_nl80211_data *drv,
2462 struct nlattr **tb)
2463 {
2464 union wpa_event_data data;
2465 u32 reason;
2466
2467 wpa_printf(MSG_DEBUG, "nl80211: Connect failed event");
2468
2469 if (!tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_CONN_FAILED_REASON])
2470 return;
2471
2472 os_memset(&data, 0, sizeof(data));
2473 os_memcpy(data.connect_failed_reason.addr,
2474 nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
2475
2476 reason = nla_get_u32(tb[NL80211_ATTR_CONN_FAILED_REASON]);
2477 switch (reason) {
2478 case NL80211_CONN_FAIL_MAX_CLIENTS:
2479 wpa_printf(MSG_DEBUG, "nl80211: Max client reached");
2480 data.connect_failed_reason.code = MAX_CLIENT_REACHED;
2481 break;
2482 case NL80211_CONN_FAIL_BLOCKED_CLIENT:
2483 wpa_printf(MSG_DEBUG, "nl80211: Blocked client " MACSTR_SEC
2484 " tried to connect",
2485 MAC2STR_SEC(data.connect_failed_reason.addr));
2486 data.connect_failed_reason.code = BLOCKED_CLIENT;
2487 break;
2488 default:
2489 wpa_printf(MSG_DEBUG, "nl8021l: Unknown connect failed reason "
2490 "%u", reason);
2491 return;
2492 }
2493
2494 wpa_supplicant_event(drv->ctx, EVENT_CONNECT_FAILED_REASON, &data);
2495 }
2496
2497
nl80211_radar_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2498 static void nl80211_radar_event(struct wpa_driver_nl80211_data *drv,
2499 struct nlattr **tb)
2500 {
2501 union wpa_event_data data;
2502 enum nl80211_radar_event event_type;
2503
2504 if (!tb[NL80211_ATTR_WIPHY_FREQ] || !tb[NL80211_ATTR_RADAR_EVENT])
2505 return;
2506
2507 os_memset(&data, 0, sizeof(data));
2508 data.dfs_event.link_id = NL80211_DRV_LINK_ID_NA;
2509 data.dfs_event.freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
2510 event_type = nla_get_u32(tb[NL80211_ATTR_RADAR_EVENT]);
2511
2512 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2513 data.dfs_event.link_id =
2514 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2515 } else if (data.dfs_event.freq) {
2516 data.dfs_event.link_id =
2517 nl80211_get_link_id_by_freq(drv->first_bss,
2518 data.dfs_event.freq);
2519 }
2520
2521 /* Check HT params */
2522 if (tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
2523 data.dfs_event.ht_enabled = 1;
2524 data.dfs_event.chan_offset = 0;
2525
2526 switch (nla_get_u32(tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE])) {
2527 case NL80211_CHAN_NO_HT:
2528 data.dfs_event.ht_enabled = 0;
2529 break;
2530 case NL80211_CHAN_HT20:
2531 break;
2532 case NL80211_CHAN_HT40PLUS:
2533 data.dfs_event.chan_offset = 1;
2534 break;
2535 case NL80211_CHAN_HT40MINUS:
2536 data.dfs_event.chan_offset = -1;
2537 break;
2538 }
2539 }
2540
2541 /* Get VHT params */
2542 if (tb[NL80211_ATTR_CHANNEL_WIDTH])
2543 data.dfs_event.chan_width =
2544 convert2width(nla_get_u32(
2545 tb[NL80211_ATTR_CHANNEL_WIDTH]));
2546 if (tb[NL80211_ATTR_CENTER_FREQ1])
2547 data.dfs_event.cf1 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ1]);
2548 if (tb[NL80211_ATTR_CENTER_FREQ2])
2549 data.dfs_event.cf2 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ2]);
2550
2551 wpa_printf(MSG_DEBUG,
2552 "nl80211: DFS event on freq %d MHz, ht: %d, offset: %d, width: %d, cf1: %dMHz, cf2: %dMHz, link_id=%d",
2553 data.dfs_event.freq, data.dfs_event.ht_enabled,
2554 data.dfs_event.chan_offset, data.dfs_event.chan_width,
2555 data.dfs_event.cf1, data.dfs_event.cf2,
2556 data.dfs_event.link_id);
2557
2558 switch (event_type) {
2559 case NL80211_RADAR_DETECTED:
2560 wpa_supplicant_event(drv->ctx, EVENT_DFS_RADAR_DETECTED, &data);
2561 break;
2562 case NL80211_RADAR_CAC_FINISHED:
2563 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_FINISHED, &data);
2564 break;
2565 case NL80211_RADAR_CAC_ABORTED:
2566 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_ABORTED, &data);
2567 break;
2568 case NL80211_RADAR_NOP_FINISHED:
2569 wpa_supplicant_event(drv->ctx, EVENT_DFS_NOP_FINISHED, &data);
2570 break;
2571 case NL80211_RADAR_PRE_CAC_EXPIRED:
2572 wpa_supplicant_event(drv->ctx, EVENT_DFS_PRE_CAC_EXPIRED,
2573 &data);
2574 break;
2575 case NL80211_RADAR_CAC_STARTED:
2576 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_STARTED, &data);
2577 break;
2578 default:
2579 wpa_printf(MSG_DEBUG, "nl80211: Unknown radar event %d "
2580 "received", event_type);
2581 break;
2582 }
2583 }
2584
2585
nl80211_spurious_frame(struct i802_bss * bss,struct nlattr ** tb,int wds)2586 static void nl80211_spurious_frame(struct i802_bss *bss, struct nlattr **tb,
2587 int wds)
2588 {
2589 struct wpa_driver_nl80211_data *drv = bss->drv;
2590 union wpa_event_data event;
2591
2592 if (!tb[NL80211_ATTR_MAC])
2593 return;
2594
2595 os_memset(&event, 0, sizeof(event));
2596 event.rx_from_unknown.bssid = bss->addr;
2597 event.rx_from_unknown.addr = nla_data(tb[NL80211_ATTR_MAC]);
2598 event.rx_from_unknown.wds = wds;
2599
2600 wpa_supplicant_event(drv->ctx, EVENT_RX_FROM_UNKNOWN, &event);
2601 }
2602
2603
2604 #ifdef CONFIG_DRIVER_NL80211_QCA
2605
qca_nl80211_avoid_freq(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2606 static void qca_nl80211_avoid_freq(struct wpa_driver_nl80211_data *drv,
2607 const u8 *data, size_t len)
2608 {
2609 u32 i, count;
2610 union wpa_event_data event;
2611 struct wpa_freq_range *range = NULL;
2612 const struct qca_avoid_freq_list *freq_range;
2613
2614 freq_range = (const struct qca_avoid_freq_list *) data;
2615 if (len < sizeof(freq_range->count))
2616 return;
2617
2618 count = freq_range->count;
2619 if (len < sizeof(freq_range->count) +
2620 count * sizeof(struct qca_avoid_freq_range)) {
2621 wpa_printf(MSG_DEBUG, "nl80211: Ignored too short avoid frequency list (len=%u)",
2622 (unsigned int) len);
2623 return;
2624 }
2625
2626 if (count > 0) {
2627 range = os_calloc(count, sizeof(struct wpa_freq_range));
2628 if (range == NULL)
2629 return;
2630 }
2631
2632 os_memset(&event, 0, sizeof(event));
2633 for (i = 0; i < count; i++) {
2634 unsigned int idx = event.freq_range.num;
2635 range[idx].min = freq_range->range[i].start_freq;
2636 range[idx].max = freq_range->range[i].end_freq;
2637 wpa_printf(MSG_DEBUG, "nl80211: Avoid frequency range: %u-%u",
2638 range[idx].min, range[idx].max);
2639 if (range[idx].min > range[idx].max) {
2640 wpa_printf(MSG_DEBUG, "nl80211: Ignore invalid frequency range");
2641 continue;
2642 }
2643 event.freq_range.num++;
2644 }
2645 event.freq_range.range = range;
2646
2647 wpa_supplicant_event(drv->ctx, EVENT_AVOID_FREQUENCIES, &event);
2648
2649 os_free(range);
2650 }
2651
2652
get_qca_hw_mode(u8 hw_mode)2653 static enum hostapd_hw_mode get_qca_hw_mode(u8 hw_mode)
2654 {
2655 switch (hw_mode) {
2656 case QCA_ACS_MODE_IEEE80211B:
2657 return HOSTAPD_MODE_IEEE80211B;
2658 case QCA_ACS_MODE_IEEE80211G:
2659 return HOSTAPD_MODE_IEEE80211G;
2660 case QCA_ACS_MODE_IEEE80211A:
2661 return HOSTAPD_MODE_IEEE80211A;
2662 case QCA_ACS_MODE_IEEE80211AD:
2663 return HOSTAPD_MODE_IEEE80211AD;
2664 case QCA_ACS_MODE_IEEE80211ANY:
2665 return HOSTAPD_MODE_IEEE80211ANY;
2666 default:
2667 return NUM_HOSTAPD_MODES;
2668 }
2669 }
2670
2671
chan_to_freq(struct wpa_driver_nl80211_data * drv,u8 chan,enum hostapd_hw_mode hw_mode)2672 static unsigned int chan_to_freq(struct wpa_driver_nl80211_data *drv,
2673 u8 chan, enum hostapd_hw_mode hw_mode)
2674 {
2675 if (hw_mode == NUM_HOSTAPD_MODES) {
2676 /* For drivers that do not report ACS_HW_MODE */
2677 u16 num_modes, flags;
2678 struct hostapd_hw_modes *modes;
2679 u8 dfs_domain;
2680 int i;
2681
2682 modes = nl80211_get_hw_feature_data(drv->first_bss, &num_modes,
2683 &flags, &dfs_domain);
2684 if (!modes) {
2685 wpa_printf(MSG_DEBUG,
2686 "nl80211: Fetching hardware mode failed");
2687 goto try_2_4_or_5;
2688 }
2689 if (num_modes == 1)
2690 hw_mode = modes[0].mode;
2691
2692 for (i = 0; i < num_modes; i++) {
2693 os_free(modes[i].channels);
2694 os_free(modes[i].rates);
2695 }
2696
2697 os_free(modes);
2698 }
2699
2700 if (hw_mode == HOSTAPD_MODE_IEEE80211AD) {
2701 if (chan >= 1 && chan <= 6)
2702 return 56160 + (2160 * chan);
2703 return 0;
2704 }
2705
2706 try_2_4_or_5:
2707 if (chan >= 1 && chan <= 13)
2708 return 2407 + 5 * chan;
2709 if (chan == 14)
2710 return 2484;
2711 if (chan >= 36 && chan <= 177)
2712 return 5000 + 5 * chan;
2713
2714 return 0;
2715 }
2716
2717
qca_nl80211_acs_select_ch(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2718 static void qca_nl80211_acs_select_ch(struct wpa_driver_nl80211_data *drv,
2719 const u8 *data, size_t len)
2720 {
2721 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_ACS_MAX + 1];
2722 union wpa_event_data event;
2723 u8 chan;
2724
2725 wpa_printf(MSG_DEBUG,
2726 "nl80211: ACS channel selection vendor event received");
2727
2728 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_ACS_MAX,
2729 (struct nlattr *) data, len, NULL) ||
2730 (!tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_FREQUENCY] &&
2731 !tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_CHANNEL]) ||
2732 (!tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_FREQUENCY] &&
2733 !tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_CHANNEL]))
2734 return;
2735
2736 os_memset(&event, 0, sizeof(event));
2737 event.acs_selected_channels.hw_mode = NUM_HOSTAPD_MODES;
2738
2739 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_HW_MODE]) {
2740 u8 hw_mode = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_HW_MODE]);
2741
2742 event.acs_selected_channels.hw_mode = get_qca_hw_mode(hw_mode);
2743 if (event.acs_selected_channels.hw_mode == NUM_HOSTAPD_MODES ||
2744 event.acs_selected_channels.hw_mode ==
2745 HOSTAPD_MODE_IEEE80211ANY) {
2746 wpa_printf(MSG_DEBUG,
2747 "nl80211: Invalid hw_mode %d in ACS selection event",
2748 hw_mode);
2749 return;
2750 }
2751 }
2752
2753 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_FREQUENCY]) {
2754 event.acs_selected_channels.pri_freq = nla_get_u32(
2755 tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_FREQUENCY]);
2756 } else {
2757 chan = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_CHANNEL]);
2758 event.acs_selected_channels.pri_freq =
2759 chan_to_freq(drv, chan,
2760 event.acs_selected_channels.hw_mode);
2761 }
2762
2763 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_FREQUENCY]) {
2764 event.acs_selected_channels.sec_freq = nla_get_u32(
2765 tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_FREQUENCY]);
2766 } else {
2767 chan = nla_get_u8(
2768 tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_CHANNEL]);
2769 event.acs_selected_channels.sec_freq =
2770 chan_to_freq(drv, chan,
2771 event.acs_selected_channels.hw_mode);
2772 }
2773
2774 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_EDMG_CHANNEL])
2775 event.acs_selected_channels.edmg_channel =
2776 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_EDMG_CHANNEL]);
2777 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL])
2778 event.acs_selected_channels.vht_seg0_center_ch =
2779 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL]);
2780 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG1_CENTER_CHANNEL])
2781 event.acs_selected_channels.vht_seg1_center_ch =
2782 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG1_CENTER_CHANNEL]);
2783 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_CHWIDTH])
2784 event.acs_selected_channels.ch_width =
2785 nla_get_u16(tb[QCA_WLAN_VENDOR_ATTR_ACS_CHWIDTH]);
2786 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_PUNCTURE_BITMAP])
2787 event.acs_selected_channels.puncture_bitmap =
2788 nla_get_u16(tb[QCA_WLAN_VENDOR_ATTR_ACS_PUNCTURE_BITMAP]);
2789 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_LINK_ID])
2790 event.acs_selected_channels.link_id =
2791 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_LINK_ID]);
2792 else
2793 event.acs_selected_channels.link_id = -1;
2794
2795 wpa_printf(MSG_INFO,
2796 "nl80211: ACS Results: PFreq: %d SFreq: %d BW: %d VHT0: %d VHT1: %d HW_MODE: %d EDMGCH: %d PUNCBITMAP: 0x%x, LinkId: %d",
2797 event.acs_selected_channels.pri_freq,
2798 event.acs_selected_channels.sec_freq,
2799 event.acs_selected_channels.ch_width,
2800 event.acs_selected_channels.vht_seg0_center_ch,
2801 event.acs_selected_channels.vht_seg1_center_ch,
2802 event.acs_selected_channels.hw_mode,
2803 event.acs_selected_channels.edmg_channel,
2804 event.acs_selected_channels.puncture_bitmap,
2805 event.acs_selected_channels.link_id);
2806
2807 /* Ignore ACS channel list check for backwards compatibility */
2808
2809 wpa_supplicant_event(drv->ctx, EVENT_ACS_CHANNEL_SELECTED, &event);
2810 }
2811
2812
qca_nl80211_key_mgmt_auth(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2813 static void qca_nl80211_key_mgmt_auth(struct wpa_driver_nl80211_data *drv,
2814 const u8 *data, size_t len)
2815 {
2816 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_MAX + 1];
2817 u8 *bssid;
2818
2819 wpa_printf(MSG_DEBUG,
2820 "nl80211: Key management roam+auth vendor event received");
2821
2822 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_MAX,
2823 (struct nlattr *) data, len, NULL) ||
2824 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID] ||
2825 nla_len(tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID]) != ETH_ALEN ||
2826 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_REQ_IE] ||
2827 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_RESP_IE] ||
2828 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_AUTHORIZED])
2829 return;
2830
2831 bssid = nla_data(tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID]);
2832 wpa_printf(MSG_DEBUG, " * roam BSSID " MACSTR_SEC, MAC2STR_SEC(bssid));
2833
2834 mlme_event_connect(drv, NL80211_CMD_ROAM, true, NULL,
2835 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID],
2836 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_REQ_IE],
2837 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_RESP_IE],
2838 NULL, NULL,
2839 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_AUTHORIZED],
2840 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_KEY_REPLAY_CTR],
2841 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PTK_KCK],
2842 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PTK_KEK],
2843 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_SUBNET_STATUS],
2844 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_FILS_ERP_NEXT_SEQ_NUM],
2845 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PMK],
2846 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PMKID],
2847 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_MLO_LINKS]);
2848
2849 #ifdef ANDROID
2850 #ifdef ANDROID_LIB_EVENT
2851 wpa_driver_nl80211_driver_event(
2852 drv, OUI_QCA, QCA_NL80211_VENDOR_SUBCMD_KEY_MGMT_ROAM_AUTH,
2853 data, len);
2854 #endif /* ANDROID_LIB_EVENT */
2855 #endif /* ANDROID */
2856 }
2857
2858
2859 static void
qca_nl80211_key_mgmt_auth_handler(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2860 qca_nl80211_key_mgmt_auth_handler(struct wpa_driver_nl80211_data *drv,
2861 const u8 *data, size_t len)
2862 {
2863 if (!drv->roam_indication_done) {
2864 wpa_printf(MSG_DEBUG,
2865 "nl80211: Pending roam indication, delay processing roam+auth vendor event");
2866
2867 os_free(drv->pending_roam_data);
2868 drv->pending_roam_data = os_memdup(data, len);
2869 if (!drv->pending_roam_data)
2870 return;
2871 drv->pending_roam_data_len = len;
2872 return;
2873 }
2874 drv->roam_indication_done = false;
2875 qca_nl80211_key_mgmt_auth(drv, data, len);
2876 }
2877
2878
qca_nl80211_dfs_offload_radar_event(struct wpa_driver_nl80211_data * drv,u32 subcmd,u8 * msg,int length)2879 static void qca_nl80211_dfs_offload_radar_event(
2880 struct wpa_driver_nl80211_data *drv, u32 subcmd, u8 *msg, int length)
2881 {
2882 union wpa_event_data data;
2883 struct nlattr *tb[NL80211_ATTR_MAX + 1];
2884
2885 wpa_printf(MSG_DEBUG,
2886 "nl80211: DFS offload radar vendor event received");
2887
2888 if (nla_parse(tb, NL80211_ATTR_MAX,
2889 (struct nlattr *) msg, length, NULL))
2890 return;
2891
2892 if (!tb[NL80211_ATTR_WIPHY_FREQ]) {
2893 wpa_printf(MSG_INFO,
2894 "nl80211: Error parsing WIPHY_FREQ in FS offload radar vendor event");
2895 return;
2896 }
2897
2898 os_memset(&data, 0, sizeof(data));
2899 data.dfs_event.freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
2900 data.dfs_event.link_id = NL80211_DRV_LINK_ID_NA;
2901
2902 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2903 data.dfs_event.link_id =
2904 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2905 } else if (data.dfs_event.freq) {
2906 data.dfs_event.link_id =
2907 nl80211_get_link_id_by_freq(drv->first_bss,
2908 data.dfs_event.freq);
2909 }
2910
2911 wpa_printf(MSG_DEBUG, "nl80211: DFS event on freq %d MHz, link=%d",
2912 data.dfs_event.freq, data.dfs_event.link_id);
2913
2914 /* Check HT params */
2915 if (tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
2916 data.dfs_event.ht_enabled = 1;
2917 data.dfs_event.chan_offset = 0;
2918
2919 switch (nla_get_u32(tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE])) {
2920 case NL80211_CHAN_NO_HT:
2921 data.dfs_event.ht_enabled = 0;
2922 break;
2923 case NL80211_CHAN_HT20:
2924 break;
2925 case NL80211_CHAN_HT40PLUS:
2926 data.dfs_event.chan_offset = 1;
2927 break;
2928 case NL80211_CHAN_HT40MINUS:
2929 data.dfs_event.chan_offset = -1;
2930 break;
2931 }
2932 }
2933
2934 /* Get VHT params */
2935 if (tb[NL80211_ATTR_CHANNEL_WIDTH])
2936 data.dfs_event.chan_width =
2937 convert2width(nla_get_u32(
2938 tb[NL80211_ATTR_CHANNEL_WIDTH]));
2939 if (tb[NL80211_ATTR_CENTER_FREQ1])
2940 data.dfs_event.cf1 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ1]);
2941 if (tb[NL80211_ATTR_CENTER_FREQ2])
2942 data.dfs_event.cf2 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ2]);
2943
2944 wpa_printf(MSG_DEBUG, "nl80211: DFS event on freq %d MHz, ht: %d, "
2945 "offset: %d, width: %d, cf1: %dMHz, cf2: %dMHz",
2946 data.dfs_event.freq, data.dfs_event.ht_enabled,
2947 data.dfs_event.chan_offset, data.dfs_event.chan_width,
2948 data.dfs_event.cf1, data.dfs_event.cf2);
2949
2950 switch (subcmd) {
2951 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_RADAR_DETECTED:
2952 wpa_supplicant_event(drv->ctx, EVENT_DFS_RADAR_DETECTED, &data);
2953 break;
2954 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_STARTED:
2955 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_STARTED, &data);
2956 break;
2957 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_FINISHED:
2958 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_FINISHED, &data);
2959 break;
2960 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_ABORTED:
2961 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_ABORTED, &data);
2962 break;
2963 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_NOP_FINISHED:
2964 wpa_supplicant_event(drv->ctx, EVENT_DFS_NOP_FINISHED, &data);
2965 break;
2966 default:
2967 wpa_printf(MSG_DEBUG,
2968 "nl80211: Unknown DFS offload radar event %d received",
2969 subcmd);
2970 break;
2971 }
2972 }
2973
2974
qca_nl80211_scan_trigger_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)2975 static void qca_nl80211_scan_trigger_event(struct wpa_driver_nl80211_data *drv,
2976 u8 *data, size_t len)
2977 {
2978 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_SCAN_MAX + 1];
2979 u64 cookie = 0;
2980 union wpa_event_data event;
2981 struct scan_info *info;
2982
2983 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_SCAN_MAX,
2984 (struct nlattr *) data, len, NULL) ||
2985 !tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE])
2986 return;
2987
2988 cookie = nla_get_u64(tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE]);
2989 if (cookie != drv->vendor_scan_cookie) {
2990 /* External scan trigger event, ignore */
2991 return;
2992 }
2993
2994 /* Cookie match, own scan */
2995 os_memset(&event, 0, sizeof(event));
2996 info = &event.scan_info;
2997 info->external_scan = 0;
2998 info->nl_scan_event = 0;
2999
3000 drv->scan_state = SCAN_STARTED;
3001 wpa_supplicant_event(drv->ctx, EVENT_SCAN_STARTED, &event);
3002 }
3003
3004
send_vendor_scan_event(struct wpa_driver_nl80211_data * drv,int aborted,struct nlattr * tb[],int external_scan)3005 static void send_vendor_scan_event(struct wpa_driver_nl80211_data *drv,
3006 int aborted, struct nlattr *tb[],
3007 int external_scan)
3008 {
3009 union wpa_event_data event;
3010 struct nlattr *nl;
3011 int rem;
3012 struct scan_info *info;
3013 int freqs[MAX_REPORT_FREQS];
3014 int num_freqs = 0;
3015
3016 os_memset(&event, 0, sizeof(event));
3017 info = &event.scan_info;
3018 info->aborted = aborted;
3019 info->external_scan = external_scan;
3020 info->scan_cookie = nla_get_u64(tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE]);
3021
3022 if (tb[QCA_WLAN_VENDOR_ATTR_SCAN_SSIDS]) {
3023 nla_for_each_nested(nl,
3024 tb[QCA_WLAN_VENDOR_ATTR_SCAN_SSIDS], rem) {
3025 struct wpa_driver_scan_ssid *s =
3026 &info->ssids[info->num_ssids];
3027 s->ssid = nla_data(nl);
3028 s->ssid_len = nla_len(nl);
3029 wpa_printf(MSG_INFO,
3030 "nl80211: Scan probed for SSID '%s'",
3031 anonymize_ssid(wpa_ssid_txt(s->ssid, s->ssid_len)));
3032 info->num_ssids++;
3033 if (info->num_ssids == WPAS_MAX_SCAN_SSIDS)
3034 break;
3035 }
3036 }
3037
3038 if (tb[QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES]) {
3039 char msg[500], *pos, *end;
3040 int res;
3041
3042 pos = msg;
3043 end = pos + sizeof(msg);
3044 *pos = '\0';
3045
3046 nla_for_each_nested(nl,
3047 tb[QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES],
3048 rem) {
3049 freqs[num_freqs] = nla_get_u32(nl);
3050 res = os_snprintf(pos, end - pos, " %d",
3051 freqs[num_freqs]);
3052 if (!os_snprintf_error(end - pos, res))
3053 pos += res;
3054 num_freqs++;
3055 if (num_freqs == MAX_REPORT_FREQS - 1)
3056 break;
3057 }
3058
3059 info->freqs = freqs;
3060 info->num_freqs = num_freqs;
3061 wpa_printf(MSG_EXCESSIVE, "nl80211: Scan included frequencies:%s",
3062 msg);
3063 }
3064 wpa_supplicant_event(drv->ctx, EVENT_SCAN_RESULTS, &event);
3065 }
3066
3067
qca_nl80211_scan_done_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)3068 static void qca_nl80211_scan_done_event(struct wpa_driver_nl80211_data *drv,
3069 u8 *data, size_t len)
3070 {
3071 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_SCAN_MAX + 1];
3072 u64 cookie = 0;
3073 enum scan_status status;
3074 int external_scan;
3075
3076 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_SCAN_MAX,
3077 (struct nlattr *) data, len, NULL) ||
3078 !tb[QCA_WLAN_VENDOR_ATTR_SCAN_STATUS] ||
3079 !tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE])
3080 return;
3081
3082 status = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_SCAN_STATUS]);
3083 if (status >= VENDOR_SCAN_STATUS_MAX)
3084 return; /* invalid status */
3085
3086 cookie = nla_get_u64(tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE]);
3087 if (cookie != drv->vendor_scan_cookie) {
3088 /* Event from an external scan, get scan results */
3089 external_scan = 1;
3090 } else {
3091 external_scan = 0;
3092 if (status == VENDOR_SCAN_STATUS_NEW_RESULTS)
3093 drv->scan_state = SCAN_COMPLETED;
3094 else
3095 drv->scan_state = SCAN_ABORTED;
3096
3097 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout, drv,
3098 drv->ctx);
3099 drv->vendor_scan_cookie = 0;
3100 drv->last_scan_cmd = 0;
3101 }
3102
3103 send_vendor_scan_event(drv, (status == VENDOR_SCAN_STATUS_ABORTED), tb,
3104 external_scan);
3105 }
3106
3107
qca_nl80211_p2p_lo_stop_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)3108 static void qca_nl80211_p2p_lo_stop_event(struct wpa_driver_nl80211_data *drv,
3109 u8 *data, size_t len)
3110 {
3111 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_MAX + 1];
3112 union wpa_event_data event;
3113
3114 wpa_printf(MSG_DEBUG,
3115 "nl80211: P2P listen offload stop vendor event received");
3116
3117 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_MAX,
3118 (struct nlattr *) data, len, NULL) ||
3119 !tb[QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_STOP_REASON])
3120 return;
3121
3122 os_memset(&event, 0, sizeof(event));
3123 event.p2p_lo_stop.reason_code =
3124 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_STOP_REASON]);
3125
3126 wpa_printf(MSG_DEBUG,
3127 "nl80211: P2P Listen offload stop reason: %d",
3128 event.p2p_lo_stop.reason_code);
3129 wpa_supplicant_event(drv->ctx, EVENT_P2P_LO_STOP, &event);
3130 }
3131
3132
3133 #ifdef CONFIG_PASN
3134
qca_nl80211_pasn_auth(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)3135 static void qca_nl80211_pasn_auth(struct wpa_driver_nl80211_data *drv,
3136 u8 *data, size_t len)
3137 {
3138 int ret = -EINVAL;
3139 struct nlattr *attr;
3140 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MAX + 1];
3141 struct nlattr *cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_MAX + 1];
3142 unsigned int n_peers = 0, idx = 0;
3143 int rem_conf;
3144 enum qca_wlan_vendor_pasn_action action;
3145 union wpa_event_data event;
3146
3147 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_PASN_MAX,
3148 (struct nlattr *) data, len, NULL) ||
3149 !tb[QCA_WLAN_VENDOR_ATTR_PASN_PEERS] ||
3150 !tb[QCA_WLAN_VENDOR_ATTR_PASN_ACTION]) {
3151 return;
3152 }
3153
3154 os_memset(&event, 0, sizeof(event));
3155 action = nla_get_u32(tb[QCA_WLAN_VENDOR_ATTR_PASN_ACTION]);
3156 switch (action) {
3157 case QCA_WLAN_VENDOR_PASN_ACTION_AUTH:
3158 event.pasn_auth.action = PASN_ACTION_AUTH;
3159 break;
3160 case QCA_WLAN_VENDOR_PASN_ACTION_DELETE_SECURE_RANGING_CONTEXT:
3161 event.pasn_auth.action =
3162 PASN_ACTION_DELETE_SECURE_RANGING_CONTEXT;
3163 break;
3164 default:
3165 return;
3166 }
3167
3168 nla_for_each_nested(attr, tb[QCA_WLAN_VENDOR_ATTR_PASN_PEERS], rem_conf)
3169 n_peers++;
3170
3171 if (n_peers > WPAS_MAX_PASN_PEERS) {
3172 wpa_printf(MSG_DEBUG, "nl80211: PASN auth: too many peers (%d)",
3173 n_peers);
3174 return;
3175 }
3176
3177 nla_for_each_nested(attr, tb[QCA_WLAN_VENDOR_ATTR_PASN_PEERS],
3178 rem_conf) {
3179 struct nlattr *nl_src, *nl_peer;
3180
3181 ret = nla_parse_nested(cfg, QCA_WLAN_VENDOR_ATTR_PASN_PEER_MAX,
3182 attr, NULL);
3183 if (ret)
3184 return;
3185 nl_src = cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_SRC_ADDR];
3186 nl_peer = cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_MAC_ADDR];
3187 if (nl_src)
3188 os_memcpy(event.pasn_auth.peer[idx].own_addr,
3189 nla_data(nl_src), ETH_ALEN);
3190 if (nl_peer)
3191 os_memcpy(event.pasn_auth.peer[idx].peer_addr,
3192 nla_data(nl_peer), ETH_ALEN);
3193 if (cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_LTF_KEYSEED_REQUIRED])
3194 event.pasn_auth.peer[idx].ltf_keyseed_required = true;
3195 idx++;
3196 }
3197 event.pasn_auth.num_peers = n_peers;
3198
3199 wpa_printf(MSG_DEBUG,
3200 "nl80211: PASN auth action: %u, num_bssids: %d",
3201 event.pasn_auth.action,
3202 event.pasn_auth.num_peers);
3203 wpa_supplicant_event(drv->ctx, EVENT_PASN_AUTH, &event);
3204 }
3205
3206 #endif /* CONFIG_PASN */
3207
3208 #endif /* CONFIG_DRIVER_NL80211_QCA */
3209
3210
nl80211_vendor_event_qca(struct wpa_driver_nl80211_data * drv,u32 subcmd,u8 * data,size_t len)3211 static void nl80211_vendor_event_qca(struct wpa_driver_nl80211_data *drv,
3212 u32 subcmd, u8 *data, size_t len)
3213 {
3214 switch (subcmd) {
3215 case QCA_NL80211_VENDOR_SUBCMD_TEST:
3216 wpa_hexdump(MSG_DEBUG, "nl80211: QCA test event", data, len);
3217 break;
3218 #ifdef CONFIG_DRIVER_NL80211_QCA
3219 case QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY:
3220 qca_nl80211_avoid_freq(drv, data, len);
3221 break;
3222 case QCA_NL80211_VENDOR_SUBCMD_KEY_MGMT_ROAM_AUTH:
3223 qca_nl80211_key_mgmt_auth_handler(drv, data, len);
3224 break;
3225 case QCA_NL80211_VENDOR_SUBCMD_DO_ACS:
3226 qca_nl80211_acs_select_ch(drv, data, len);
3227 break;
3228 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_STARTED:
3229 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_FINISHED:
3230 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_ABORTED:
3231 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_NOP_FINISHED:
3232 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_RADAR_DETECTED:
3233 qca_nl80211_dfs_offload_radar_event(drv, subcmd, data, len);
3234 break;
3235 case QCA_NL80211_VENDOR_SUBCMD_TRIGGER_SCAN:
3236 qca_nl80211_scan_trigger_event(drv, data, len);
3237 break;
3238 case QCA_NL80211_VENDOR_SUBCMD_SCAN_DONE:
3239 qca_nl80211_scan_done_event(drv, data, len);
3240 break;
3241 case QCA_NL80211_VENDOR_SUBCMD_P2P_LISTEN_OFFLOAD_STOP:
3242 qca_nl80211_p2p_lo_stop_event(drv, data, len);
3243 break;
3244 #ifdef CONFIG_PASN
3245 case QCA_NL80211_VENDOR_SUBCMD_PASN:
3246 qca_nl80211_pasn_auth(drv, data, len);
3247 break;
3248 #endif /* CONFIG_PASN */
3249 case QCA_NL80211_VENDOR_SUBCMD_TID_TO_LINK_MAP:
3250 qca_nl80211_tid_to_link_map_event(drv, data, len);
3251 break;
3252 case QCA_NL80211_VENDOR_SUBCMD_LINK_RECONFIG:
3253 qca_nl80211_link_reconfig_event(drv, data, len);
3254 break;
3255 #endif /* CONFIG_DRIVER_NL80211_QCA */
3256 default:
3257 wpa_printf(MSG_DEBUG,
3258 "nl80211: Ignore unsupported QCA vendor event %u",
3259 subcmd);
3260 break;
3261 }
3262 }
3263
3264
3265 #ifdef CONFIG_DRIVER_NL80211_BRCM
3266
brcm_nl80211_acs_select_ch(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)3267 static void brcm_nl80211_acs_select_ch(struct wpa_driver_nl80211_data *drv,
3268 const u8 *data, size_t len)
3269 {
3270 struct nlattr *tb[BRCM_VENDOR_ATTR_ACS_LAST + 1];
3271 union wpa_event_data event;
3272
3273 wpa_printf(MSG_DEBUG,
3274 "nl80211: BRCM ACS channel selection vendor event received");
3275
3276 if (nla_parse(tb, BRCM_VENDOR_ATTR_ACS_LAST, (struct nlattr *) data,
3277 len, NULL) ||
3278 !tb[BRCM_VENDOR_ATTR_ACS_PRIMARY_FREQ] ||
3279 !tb[BRCM_VENDOR_ATTR_ACS_SECONDARY_FREQ])
3280 return;
3281
3282 os_memset(&event, 0, sizeof(event));
3283 if (tb[BRCM_VENDOR_ATTR_ACS_PRIMARY_FREQ])
3284 event.acs_selected_channels.pri_freq =
3285 nla_get_u32(tb[BRCM_VENDOR_ATTR_ACS_PRIMARY_FREQ]);
3286 if (tb[BRCM_VENDOR_ATTR_ACS_SECONDARY_FREQ])
3287 event.acs_selected_channels.sec_freq =
3288 nla_get_u32(tb[BRCM_VENDOR_ATTR_ACS_SECONDARY_FREQ]);
3289 if (tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL])
3290 event.acs_selected_channels.vht_seg0_center_ch =
3291 nla_get_u8(tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL]);
3292 if (tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL])
3293 event.acs_selected_channels.vht_seg1_center_ch =
3294 nla_get_u8(tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG1_CENTER_CHANNEL]);
3295 if (tb[BRCM_VENDOR_ATTR_ACS_CHWIDTH])
3296 event.acs_selected_channels.ch_width =
3297 nla_get_u16(tb[BRCM_VENDOR_ATTR_ACS_CHWIDTH]);
3298 if (tb[BRCM_VENDOR_ATTR_ACS_HW_MODE]) {
3299 event.acs_selected_channels.hw_mode = nla_get_u8(tb[BRCM_VENDOR_ATTR_ACS_HW_MODE]);
3300 if (event.acs_selected_channels.hw_mode == NUM_HOSTAPD_MODES ||
3301 event.acs_selected_channels.hw_mode ==
3302 HOSTAPD_MODE_IEEE80211ANY) {
3303 wpa_printf(MSG_DEBUG,
3304 "nl80211: Invalid hw_mode %d in ACS selection event",
3305 event.acs_selected_channels.hw_mode);
3306 return;
3307 }
3308 }
3309
3310 wpa_printf(MSG_DEBUG,
3311 "nl80211: ACS Results: PCH: %d SCH: %d BW: %d VHT0: %d VHT1: %d HW_MODE: %d",
3312 event.acs_selected_channels.pri_freq,
3313 event.acs_selected_channels.sec_freq,
3314 event.acs_selected_channels.ch_width,
3315 event.acs_selected_channels.vht_seg0_center_ch,
3316 event.acs_selected_channels.vht_seg1_center_ch,
3317 event.acs_selected_channels.hw_mode);
3318 wpa_supplicant_event(drv->ctx, EVENT_ACS_CHANNEL_SELECTED, &event);
3319 }
3320
3321
nl80211_vendor_event_brcm(struct wpa_driver_nl80211_data * drv,u32 subcmd,u8 * data,size_t len)3322 static void nl80211_vendor_event_brcm(struct wpa_driver_nl80211_data *drv,
3323 u32 subcmd, u8 *data, size_t len)
3324 {
3325 wpa_printf(MSG_DEBUG, "nl80211: Got BRCM vendor event %u", subcmd);
3326 switch (subcmd) {
3327 case BRCM_VENDOR_EVENT_PRIV_STR:
3328 case BRCM_VENDOR_EVENT_HANGED:
3329 /* Dump the event on to the console */
3330 wpa_msg(NULL, MSG_INFO, "%s", data);
3331 break;
3332 case BRCM_VENDOR_EVENT_ACS:
3333 brcm_nl80211_acs_select_ch(drv, data, len);
3334 break;
3335 default:
3336 wpa_printf(MSG_DEBUG,
3337 "%s: Ignore unsupported BRCM vendor event %u",
3338 __func__, subcmd);
3339 break;
3340 }
3341 }
3342
3343 #endif /* CONFIG_DRIVER_NL80211_BRCM */
3344
3345
nl80211_vendor_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3346 static void nl80211_vendor_event(struct wpa_driver_nl80211_data *drv,
3347 struct nlattr **tb)
3348 {
3349 u32 vendor_id, subcmd, wiphy = 0;
3350 int wiphy_idx;
3351 u8 *data = NULL;
3352 size_t len = 0;
3353
3354 if (!tb[NL80211_ATTR_VENDOR_ID] ||
3355 !tb[NL80211_ATTR_VENDOR_SUBCMD])
3356 return;
3357
3358 vendor_id = nla_get_u32(tb[NL80211_ATTR_VENDOR_ID]);
3359 subcmd = nla_get_u32(tb[NL80211_ATTR_VENDOR_SUBCMD]);
3360
3361 if (tb[NL80211_ATTR_WIPHY])
3362 wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
3363
3364 wpa_printf(MSG_EXCESSIVE, "nl80211: Vendor event: wiphy=%u vendor_id=0x%x subcmd=%u",
3365 wiphy, vendor_id, subcmd);
3366
3367 if (tb[NL80211_ATTR_VENDOR_DATA]) {
3368 data = nla_data(tb[NL80211_ATTR_VENDOR_DATA]);
3369 len = nla_len(tb[NL80211_ATTR_VENDOR_DATA]);
3370 wpa_hexdump(MSG_MSGDUMP, "nl80211: Vendor data", data, len);
3371 }
3372
3373 wiphy_idx = nl80211_get_wiphy_index(drv->first_bss);
3374 if (wiphy_idx >= 0 && wiphy_idx != (int) wiphy) {
3375 wpa_printf(MSG_EXCESSIVE, "nl80211: Ignore vendor event for foreign wiphy %u (own: %d)",
3376 wiphy, wiphy_idx);
3377 return;
3378 }
3379
3380 #ifdef ANDROID
3381 #ifdef ANDROID_LIB_EVENT
3382 /* Postpone QCA roam+auth event indication to the point when both that
3383 * and the NL80211_CMD_ROAM event have been received (see calls to
3384 * qca_nl80211_key_mgmt_auth() and drv->pending_roam_data). */
3385 if (!(vendor_id == OUI_QCA &&
3386 subcmd == QCA_NL80211_VENDOR_SUBCMD_KEY_MGMT_ROAM_AUTH))
3387 wpa_driver_nl80211_driver_event(drv, vendor_id, subcmd, data,
3388 len);
3389 #endif /* ANDROID_LIB_EVENT */
3390 #endif /* ANDROID */
3391
3392 switch (vendor_id) {
3393 case OUI_QCA:
3394 nl80211_vendor_event_qca(drv, subcmd, data, len);
3395 break;
3396 #ifdef CONFIG_DRIVER_NL80211_BRCM
3397 case OUI_BRCM:
3398 nl80211_vendor_event_brcm(drv, subcmd, data, len);
3399 break;
3400 #endif /* CONFIG_DRIVER_NL80211_BRCM */
3401 default:
3402 #ifdef CONFIG_VENDOR_EXT
3403 if (wpa_vendor_ext_nl80211_process_vendor_event(drv, vendor_id, subcmd, data, len)) {
3404 break;
3405 }
3406 #endif
3407 wpa_printf(MSG_DEBUG, "nl80211: Ignore unsupported vendor event");
3408 break;
3409 }
3410 }
3411
nl80211_reg_change_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])3412 static void nl80211_reg_change_event(struct wpa_driver_nl80211_data *drv,
3413 struct nlattr *tb[])
3414 {
3415 union wpa_event_data data;
3416 enum nl80211_reg_initiator init;
3417
3418 wpa_printf(MSG_DEBUG, "nl80211: Regulatory domain change");
3419
3420 if (tb[NL80211_ATTR_REG_INITIATOR] == NULL)
3421 return;
3422
3423 os_memset(&data, 0, sizeof(data));
3424 init = nla_get_u8(tb[NL80211_ATTR_REG_INITIATOR]);
3425 wpa_printf(MSG_DEBUG, " * initiator=%d", init);
3426 switch (init) {
3427 case NL80211_REGDOM_SET_BY_CORE:
3428 data.channel_list_changed.initiator = REGDOM_SET_BY_CORE;
3429 break;
3430 case NL80211_REGDOM_SET_BY_USER:
3431 data.channel_list_changed.initiator = REGDOM_SET_BY_USER;
3432 break;
3433 case NL80211_REGDOM_SET_BY_DRIVER:
3434 data.channel_list_changed.initiator = REGDOM_SET_BY_DRIVER;
3435 break;
3436 case NL80211_REGDOM_SET_BY_COUNTRY_IE:
3437 data.channel_list_changed.initiator = REGDOM_SET_BY_COUNTRY_IE;
3438 break;
3439 }
3440
3441 if (tb[NL80211_ATTR_REG_TYPE]) {
3442 enum nl80211_reg_type type;
3443 type = nla_get_u8(tb[NL80211_ATTR_REG_TYPE]);
3444 wpa_printf(MSG_DEBUG, " * type=%d", type);
3445 switch (type) {
3446 case NL80211_REGDOM_TYPE_COUNTRY:
3447 data.channel_list_changed.type = REGDOM_TYPE_COUNTRY;
3448 break;
3449 case NL80211_REGDOM_TYPE_WORLD:
3450 data.channel_list_changed.type = REGDOM_TYPE_WORLD;
3451 break;
3452 case NL80211_REGDOM_TYPE_CUSTOM_WORLD:
3453 data.channel_list_changed.type =
3454 REGDOM_TYPE_CUSTOM_WORLD;
3455 break;
3456 case NL80211_REGDOM_TYPE_INTERSECTION:
3457 data.channel_list_changed.type =
3458 REGDOM_TYPE_INTERSECTION;
3459 break;
3460 }
3461 }
3462
3463 if (tb[NL80211_ATTR_REG_ALPHA2]) {
3464 os_strlcpy(data.channel_list_changed.alpha2,
3465 nla_get_string(tb[NL80211_ATTR_REG_ALPHA2]),
3466 sizeof(data.channel_list_changed.alpha2));
3467 wpa_printf(MSG_DEBUG, " * alpha2=%s",
3468 data.channel_list_changed.alpha2);
3469 }
3470
3471 wpa_supplicant_event(drv->ctx, EVENT_CHANNEL_LIST_CHANGED, &data);
3472 }
3473
3474
nl80211_parse_freq_attrs(const char * title,struct nlattr * nl_freq,struct frequency_attrs * attrs)3475 static void nl80211_parse_freq_attrs(const char *title, struct nlattr *nl_freq,
3476 struct frequency_attrs *attrs)
3477 {
3478 static struct nla_policy freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1] = {
3479 [NL80211_FREQUENCY_ATTR_FREQ] = { .type = NLA_U32 },
3480 [NL80211_FREQUENCY_ATTR_DISABLED] = { .type = NLA_FLAG },
3481 [NL80211_FREQUENCY_ATTR_NO_IR] = { .type = NLA_FLAG },
3482 [NL80211_FREQUENCY_ATTR_RADAR] = { .type = NLA_FLAG },
3483 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER] = { .type = NLA_U32 },
3484 };
3485 struct nlattr *tb[NL80211_FREQUENCY_ATTR_MAX + 1];
3486 u32 freq = 0, max_tx_power = 0;
3487
3488 nla_parse(tb, NL80211_FREQUENCY_ATTR_MAX,
3489 nla_data(nl_freq), nla_len(nl_freq), freq_policy);
3490
3491 if (tb[NL80211_FREQUENCY_ATTR_FREQ])
3492 freq = nla_get_u32(tb[NL80211_FREQUENCY_ATTR_FREQ]);
3493 if (tb[NL80211_FREQUENCY_ATTR_MAX_TX_POWER])
3494 max_tx_power =
3495 nla_get_u32(tb[NL80211_FREQUENCY_ATTR_MAX_TX_POWER]);
3496
3497 wpa_printf(MSG_DEBUG,
3498 "nl80211: Channel (%s): freq=%u max_tx_power=%u%s%s%s",
3499 title, freq, max_tx_power,
3500 tb[NL80211_FREQUENCY_ATTR_DISABLED] ? " disabled" : "",
3501 tb[NL80211_FREQUENCY_ATTR_NO_IR] ? " no-IR" : "",
3502 tb[NL80211_FREQUENCY_ATTR_RADAR] ? " radar" : "");
3503
3504 attrs->freq = freq;
3505 attrs->max_tx_power = max_tx_power;
3506 if (tb[NL80211_FREQUENCY_ATTR_DISABLED])
3507 attrs->disabled = true;
3508 if (tb[NL80211_FREQUENCY_ATTR_NO_IR])
3509 attrs->no_ir = true;
3510 if (tb[NL80211_FREQUENCY_ATTR_RADAR])
3511 attrs->radar = true;
3512 }
3513
3514
nl80211_reg_beacon_hint_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])3515 static void nl80211_reg_beacon_hint_event(struct wpa_driver_nl80211_data *drv,
3516 struct nlattr *tb[])
3517 {
3518 union wpa_event_data data;
3519
3520 wpa_printf(MSG_DEBUG, "nl80211: Regulatory beacon hint");
3521 os_memset(&data, 0, sizeof(data));
3522 data.channel_list_changed.initiator = REGDOM_BEACON_HINT;
3523
3524 if (tb[NL80211_ATTR_FREQ_BEFORE])
3525 nl80211_parse_freq_attrs(
3526 "before", tb[NL80211_ATTR_FREQ_BEFORE],
3527 &data.channel_list_changed.beacon_hint_before);
3528 if (tb[NL80211_ATTR_FREQ_AFTER])
3529 nl80211_parse_freq_attrs(
3530 "after", tb[NL80211_ATTR_FREQ_AFTER],
3531 &data.channel_list_changed.beacon_hint_after);
3532
3533 wpa_supplicant_event(drv->ctx, EVENT_CHANNEL_LIST_CHANGED, &data);
3534 }
3535
3536
nl80211_external_auth(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3537 static void nl80211_external_auth(struct wpa_driver_nl80211_data *drv,
3538 struct nlattr **tb)
3539 {
3540 union wpa_event_data event;
3541 enum nl80211_external_auth_action act;
3542 char mld_addr[50];
3543
3544 if (!tb[NL80211_ATTR_AKM_SUITES] ||
3545 !tb[NL80211_ATTR_EXTERNAL_AUTH_ACTION] ||
3546 !tb[NL80211_ATTR_BSSID] ||
3547 !tb[NL80211_ATTR_SSID])
3548 return;
3549
3550 os_memset(&event, 0, sizeof(event));
3551 act = nla_get_u32(tb[NL80211_ATTR_EXTERNAL_AUTH_ACTION]);
3552 switch (act) {
3553 case NL80211_EXTERNAL_AUTH_START:
3554 event.external_auth.action = EXT_AUTH_START;
3555 break;
3556 case NL80211_EXTERNAL_AUTH_ABORT:
3557 event.external_auth.action = EXT_AUTH_ABORT;
3558 break;
3559 default:
3560 return;
3561 }
3562
3563 event.external_auth.key_mgmt_suite =
3564 nla_get_u32(tb[NL80211_ATTR_AKM_SUITES]);
3565
3566 event.external_auth.ssid_len = nla_len(tb[NL80211_ATTR_SSID]);
3567 if (event.external_auth.ssid_len > SSID_MAX_LEN)
3568 return;
3569 event.external_auth.ssid = nla_data(tb[NL80211_ATTR_SSID]);
3570
3571 event.external_auth.bssid = nla_data(tb[NL80211_ATTR_BSSID]);
3572
3573 mld_addr[0] = '\0';
3574 if (tb[NL80211_ATTR_MLD_ADDR]) {
3575 event.external_auth.mld_addr =
3576 nla_data(tb[NL80211_ATTR_MLD_ADDR]);
3577 os_snprintf(mld_addr, sizeof(mld_addr), ", MLD ADDR: " MACSTR,
3578 MAC2STR(event.external_auth.mld_addr));
3579 }
3580
3581 wpa_printf(MSG_DEBUG,
3582 "nl80211: External auth action: %u, AKM: 0x%x, SSID: %s, BSSID: " MACSTR_SEC "%s",
3583 event.external_auth.action,
3584 event.external_auth.key_mgmt_suite,
3585 anonymize_ssid(wpa_ssid_txt(event.external_auth.ssid,
3586 event.external_auth.ssid_len)),
3587 MAC2STR_SEC(event.external_auth.bssid), mld_addr);
3588 wpa_supplicant_event(drv->ctx, EVENT_EXTERNAL_AUTH, &event);
3589 }
3590
3591
nl80211_port_authorized(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3592 static void nl80211_port_authorized(struct wpa_driver_nl80211_data *drv,
3593 struct nlattr **tb)
3594 {
3595 const u8 *addr;
3596 union wpa_event_data event;
3597
3598 os_memset(&event, 0, sizeof(event));
3599
3600 if (!tb[NL80211_ATTR_MAC] ||
3601 nla_len(tb[NL80211_ATTR_MAC]) != ETH_ALEN) {
3602 wpa_printf(MSG_DEBUG,
3603 "nl80211: Ignore port authorized event without BSSID");
3604 return;
3605 }
3606
3607 addr = nla_data(tb[NL80211_ATTR_MAC]);
3608 if (is_ap_interface(drv->nlmode) && drv->device_ap_sme) {
3609 event.port_authorized.sta_addr = addr;
3610 wpa_printf(MSG_DEBUG,
3611 "nl80211: Port authorized for STA addr " MACSTR,
3612 MAC2STR(addr));
3613 } else if (is_sta_interface(drv->nlmode)) {
3614 const u8 *connected_addr;
3615
3616 connected_addr = drv->sta_mlo_info.valid_links ?
3617 drv->sta_mlo_info.ap_mld_addr : drv->bssid;
3618 if (!ether_addr_equal(addr, connected_addr)) {
3619 wpa_printf(MSG_DEBUG,
3620 "nl80211: Ignore port authorized event for "
3621 MACSTR_SEC " (not the currently connected BSSID "
3622 MACSTR_SEC ")",
3623 MAC2STR_SEC(addr), MAC2STR_SEC(connected_addr));
3624 return;
3625 }
3626 }
3627
3628 if (tb[NL80211_ATTR_TD_BITMAP]) {
3629 event.port_authorized.td_bitmap_len =
3630 nla_len(tb[NL80211_ATTR_TD_BITMAP]);
3631 if (event.port_authorized.td_bitmap_len > 0)
3632 event.port_authorized.td_bitmap =
3633 nla_data(tb[NL80211_ATTR_TD_BITMAP]);
3634 }
3635
3636 wpa_supplicant_event(drv->ctx, EVENT_PORT_AUTHORIZED, &event);
3637 }
3638
3639
nl80211_sta_opmode_change_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3640 static void nl80211_sta_opmode_change_event(struct wpa_driver_nl80211_data *drv,
3641 struct nlattr **tb)
3642 {
3643 union wpa_event_data ed;
3644 u8 smps_mode, max_bw;
3645
3646 if (!tb[NL80211_ATTR_MAC] ||
3647 (!tb[NL80211_ATTR_CHANNEL_WIDTH] &&
3648 !tb[NL80211_ATTR_SMPS_MODE] &&
3649 !tb[NL80211_ATTR_NSS]))
3650 return;
3651
3652 ed.sta_opmode.smps_mode = SMPS_INVALID;
3653 ed.sta_opmode.chan_width = CHAN_WIDTH_UNKNOWN;
3654 ed.sta_opmode.rx_nss = 0xff;
3655 ed.sta_opmode.addr = nla_data(tb[NL80211_ATTR_MAC]);
3656
3657 if (tb[NL80211_ATTR_SMPS_MODE]) {
3658 smps_mode = nla_get_u8(tb[NL80211_ATTR_SMPS_MODE]);
3659 switch (smps_mode) {
3660 case NL80211_SMPS_OFF:
3661 ed.sta_opmode.smps_mode = SMPS_OFF;
3662 break;
3663 case NL80211_SMPS_STATIC:
3664 ed.sta_opmode.smps_mode = SMPS_STATIC;
3665 break;
3666 case NL80211_SMPS_DYNAMIC:
3667 ed.sta_opmode.smps_mode = SMPS_DYNAMIC;
3668 break;
3669 default:
3670 ed.sta_opmode.smps_mode = SMPS_INVALID;
3671 break;
3672 }
3673 }
3674
3675 if (tb[NL80211_ATTR_CHANNEL_WIDTH]) {
3676 max_bw = nla_get_u32(tb[NL80211_ATTR_CHANNEL_WIDTH]);
3677 switch (max_bw) {
3678 case NL80211_CHAN_WIDTH_20_NOHT:
3679 ed.sta_opmode.chan_width = CHAN_WIDTH_20_NOHT;
3680 break;
3681 case NL80211_CHAN_WIDTH_20:
3682 ed.sta_opmode.chan_width = CHAN_WIDTH_20;
3683 break;
3684 case NL80211_CHAN_WIDTH_40:
3685 ed.sta_opmode.chan_width = CHAN_WIDTH_40;
3686 break;
3687 case NL80211_CHAN_WIDTH_80:
3688 ed.sta_opmode.chan_width = CHAN_WIDTH_80;
3689 break;
3690 case NL80211_CHAN_WIDTH_80P80:
3691 ed.sta_opmode.chan_width = CHAN_WIDTH_80P80;
3692 break;
3693 case NL80211_CHAN_WIDTH_160:
3694 ed.sta_opmode.chan_width = CHAN_WIDTH_160;
3695 break;
3696 case NL80211_CHAN_WIDTH_320:
3697 ed.sta_opmode.chan_width = CHAN_WIDTH_320;
3698 break;
3699 default:
3700 ed.sta_opmode.chan_width = CHAN_WIDTH_UNKNOWN;
3701 break;
3702
3703 }
3704 }
3705
3706 if (tb[NL80211_ATTR_NSS])
3707 ed.sta_opmode.rx_nss = nla_get_u8(tb[NL80211_ATTR_NSS]);
3708
3709 wpa_supplicant_event(drv->ctx, EVENT_STATION_OPMODE_CHANGED, &ed);
3710 }
3711
3712
nl80211_control_port_frame(struct i802_bss * bss,struct nlattr ** tb)3713 static void nl80211_control_port_frame(struct i802_bss *bss, struct nlattr **tb)
3714 {
3715 u8 *src_addr;
3716 u16 ethertype;
3717 enum frame_encryption encrypted;
3718 int link_id;
3719
3720 if (!tb[NL80211_ATTR_MAC] ||
3721 !tb[NL80211_ATTR_FRAME] ||
3722 !tb[NL80211_ATTR_CONTROL_PORT_ETHERTYPE])
3723 return;
3724
3725 src_addr = nla_data(tb[NL80211_ATTR_MAC]);
3726 ethertype = nla_get_u16(tb[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
3727 encrypted = nla_get_flag(tb[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]) ?
3728 FRAME_NOT_ENCRYPTED : FRAME_ENCRYPTED;
3729
3730 if (tb[NL80211_ATTR_MLO_LINK_ID])
3731 link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
3732 else
3733 link_id = -1;
3734
3735 switch (ethertype) {
3736 case ETH_P_RSN_PREAUTH:
3737 wpa_printf(MSG_INFO, "nl80211: Got pre-auth frame from "
3738 MACSTR_SEC " over control port unexpectedly",
3739 MAC2STR_SEC(src_addr));
3740 break;
3741 case ETH_P_PAE:
3742 drv_event_eapol_rx2(bss->ctx, src_addr,
3743 nla_data(tb[NL80211_ATTR_FRAME]),
3744 nla_len(tb[NL80211_ATTR_FRAME]),
3745 encrypted, link_id);
3746 break;
3747 default:
3748 wpa_printf(MSG_INFO,
3749 "nl80211: Unexpected ethertype 0x%04x from "
3750 MACSTR_SEC " over control port",
3751 ethertype, MAC2STR_SEC(src_addr));
3752 break;
3753 }
3754 }
3755
3756
3757 static void
nl80211_control_port_frame_tx_status(struct i802_bss * bss,const u8 * frame,size_t len,struct nlattr * ack,struct nlattr * cookie)3758 nl80211_control_port_frame_tx_status(struct i802_bss *bss,
3759 const u8 *frame, size_t len,
3760 struct nlattr *ack, struct nlattr *cookie)
3761 {
3762 struct wpa_driver_nl80211_data *drv = bss->drv;
3763 union wpa_event_data event;
3764
3765 if (!cookie || len < ETH_HLEN)
3766 return;
3767
3768 wpa_printf(MSG_DEBUG,
3769 "nl80211: Control port TX status (ack=%d), cookie=%llu",
3770 ack != NULL, (long long unsigned int) nla_get_u64(cookie));
3771
3772 os_memset(&event, 0, sizeof(event));
3773 event.eapol_tx_status.dst = frame;
3774 event.eapol_tx_status.data = frame + ETH_HLEN;
3775 event.eapol_tx_status.data_len = len - ETH_HLEN;
3776 event.eapol_tx_status.ack = ack != NULL;
3777 event.eapol_tx_status.link_id =
3778 nla_get_u64(cookie) == drv->eapol_tx_cookie ?
3779 drv->eapol_tx_link_id : NL80211_DRV_LINK_ID_NA;
3780
3781 wpa_supplicant_event(bss->ctx, EVENT_EAPOL_TX_STATUS, &event);
3782 }
3783
3784 #ifdef CONFIG_MLD_PATCH
nl80211_mlo_link_switch_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3785 static void nl80211_mlo_link_switch_event(struct wpa_driver_nl80211_data *drv, struct nlattr **tb)
3786 {
3787 union wpa_event_data event;
3788 u8 assoc_link_id;
3789 u8 *mlo_bssid;
3790 if (!tb[NL80211_ATTR_MLO_LINK_SWITCH_LINK_ID] || !tb[NL80211_ATTR_MLO_LINK_SWITCH_WORK_BSSID]) {
3791 return;
3792 }
3793 assoc_link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_SWITCH_LINK_ID]);
3794 mlo_bssid = nla_data(tb[NL80211_ATTR_MLO_LINK_SWITCH_WORK_BSSID]);
3795
3796 os_memset(&event, 0, sizeof(event));
3797 event.mlo_link_switch_event.link_id = assoc_link_id;
3798 os_memcpy(event.mlo_link_switch_event.addr, mlo_bssid, ETH_ALEN);
3799 wpa_supplicant_event(drv->ctx, EVENT_MLO_LINK_SWITCH, &event);
3800 }
3801 #endif
3802
3803
nl80211_frame_wait_cancel(struct wpa_driver_nl80211_data * drv,struct nlattr * cookie_attr)3804 static void nl80211_frame_wait_cancel(struct wpa_driver_nl80211_data *drv,
3805 struct nlattr *cookie_attr)
3806 {
3807 unsigned int i;
3808 u64 cookie;
3809 bool match = false;
3810
3811 if (!cookie_attr)
3812 return;
3813 cookie = nla_get_u64(cookie_attr);
3814
3815 for (i = 0; i < drv->num_send_frame_cookies; i++) {
3816 if (cookie == drv->send_frame_cookies[i]) {
3817 match = true;
3818 break;
3819 }
3820 }
3821 wpa_printf(MSG_DEBUG,
3822 "nl80211: TX frame wait expired for cookie 0x%llx%s%s",
3823 (long long unsigned int) cookie,
3824 match ? " (match)" : "",
3825 drv->send_frame_cookie == cookie ? " (match-saved)" : "");
3826 if (drv->send_frame_cookie == cookie) {
3827 drv->send_frame_cookie = (u64) -1;
3828 if (!match)
3829 goto send_event;
3830 }
3831 if (!match)
3832 return;
3833
3834 if (i < drv->num_send_frame_cookies - 1)
3835 os_memmove(&drv->send_frame_cookies[i],
3836 &drv->send_frame_cookies[i + 1],
3837 (drv->num_send_frame_cookies - i - 1) * sizeof(u64));
3838 drv->num_send_frame_cookies--;
3839
3840 send_event:
3841 wpa_supplicant_event(drv->ctx, EVENT_TX_WAIT_EXPIRE, NULL);
3842 }
3843
3844
nl80211_assoc_comeback(struct wpa_driver_nl80211_data * drv,struct nlattr * mac,struct nlattr * timeout)3845 static void nl80211_assoc_comeback(struct wpa_driver_nl80211_data *drv,
3846 struct nlattr *mac, struct nlattr *timeout)
3847 {
3848 if (!mac || !timeout)
3849 return;
3850 wpa_printf(MSG_DEBUG, "nl80211: Association comeback requested by "
3851 MACSTR " (timeout: %u ms)",
3852 MAC2STR((u8 *) nla_data(mac)), nla_get_u32(timeout));
3853 }
3854
3855
3856 #ifdef CONFIG_IEEE80211AX
3857
nl80211_obss_color_event(struct i802_bss * bss,enum nl80211_commands cmd,struct nlattr * tb[])3858 static void nl80211_obss_color_event(struct i802_bss *bss,
3859 enum nl80211_commands cmd,
3860 struct nlattr *tb[])
3861 {
3862 union wpa_event_data data;
3863 enum wpa_event_type event_type;
3864
3865 os_memset(&data, 0, sizeof(data));
3866 data.bss_color_collision.link_id = NL80211_DRV_LINK_ID_NA;
3867
3868 switch (cmd) {
3869 case NL80211_CMD_OBSS_COLOR_COLLISION:
3870 event_type = EVENT_BSS_COLOR_COLLISION;
3871 if (!tb[NL80211_ATTR_OBSS_COLOR_BITMAP])
3872 return;
3873 data.bss_color_collision.bitmap =
3874 nla_get_u64(tb[NL80211_ATTR_OBSS_COLOR_BITMAP]);
3875 wpa_printf(MSG_DEBUG,
3876 "nl80211: BSS color collision - bitmap %08llx",
3877 (long long unsigned int)
3878 data.bss_color_collision.bitmap);
3879 break;
3880 case NL80211_CMD_COLOR_CHANGE_STARTED:
3881 event_type = EVENT_CCA_STARTED_NOTIFY;
3882 wpa_printf(MSG_DEBUG, "nl80211: CCA started");
3883 break;
3884 case NL80211_CMD_COLOR_CHANGE_ABORTED:
3885 event_type = EVENT_CCA_ABORTED_NOTIFY;
3886 wpa_printf(MSG_DEBUG, "nl80211: CCA aborted");
3887 break;
3888 case NL80211_CMD_COLOR_CHANGE_COMPLETED:
3889 event_type = EVENT_CCA_NOTIFY;
3890 wpa_printf(MSG_DEBUG, "nl80211: CCA completed");
3891 break;
3892 default:
3893 wpa_printf(MSG_DEBUG, "nl80211: Unknown CCA command %d", cmd);
3894 return;
3895 }
3896
3897 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
3898 data.bss_color_collision.link_id =
3899 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
3900
3901 if (!nl80211_link_valid(bss->valid_links,
3902 data.bss_color_collision.link_id)) {
3903 wpa_printf(MSG_DEBUG,
3904 "nl80211: Invalid BSS color event link ID %d",
3905 data.bss_color_collision.link_id);
3906 return;
3907 }
3908
3909 wpa_printf(MSG_DEBUG, "nl80211: BSS color event - Link ID %d",
3910 data.bss_color_collision.link_id);
3911 }
3912
3913 wpa_supplicant_event(bss->ctx, event_type, &data);
3914 }
3915
3916 #endif /* CONFIG_IEEE80211AX */
3917
nl80211_mlo_working_state_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3918 static void nl80211_mlo_working_state_event(struct wpa_driver_nl80211_data *drv, struct nlattr **tb)
3919 {
3920 union wpa_event_data event;
3921 u8 feature;
3922 u8 state;
3923 u16 reason_code;
3924 if (!tb[NL80211_ATTR_COFEATURE] || !tb[NL80211_ATTR_COFEATURE_STATE]
3925 || !tb[NL80211_ATTR_COFEATURE_SWITCH_REASON]) {
3926 return;
3927 }
3928 feature = nla_get_u8(tb[NL80211_ATTR_COFEATURE]);
3929 state = nla_get_u8(tb[NL80211_ATTR_COFEATURE_STATE]);
3930 reason_code = nla_get_u16(tb[NL80211_ATTR_COFEATURE_SWITCH_REASON]);
3931
3932 os_memset(&event, 0, sizeof(event));
3933 event.mlo_work_state_event.feature = feature;
3934 event.mlo_work_state_event.state = state;
3935 event.mlo_work_state_event.reason_code = reason_code;
3936 wpa_supplicant_event(drv->ctx, EVENT_MLO_WORK_STATE, &event);
3937 if (feature == 0 && (state == WIFI7_MLO_COFEATURE_STATE_MLSR || state == WIFI7_MLO_COFEATURE_STATE_EMLSR)) {
3938 wpa_printf(MSG_INFO, "nl80211: reflash assoc freq for emlsr");
3939 nl80211_get_assoc_freq(drv);
3940 }
3941 }
3942
do_process_drv_event(struct i802_bss * bss,int cmd,struct nlattr ** tb)3943 static void do_process_drv_event(struct i802_bss *bss, int cmd,
3944 struct nlattr **tb)
3945 {
3946 struct wpa_driver_nl80211_data *drv = bss->drv;
3947 int external_scan_event = 0;
3948 struct nlattr *frame = tb[NL80211_ATTR_FRAME];
3949
3950 wpa_printf(MSG_INFO, "nl80211: Drv Event %d (%s) received for %s",
3951 cmd, nl80211_command_to_string(cmd), bss->ifname);
3952
3953 #ifdef CONFIG_DRIVER_NL80211_QCA
3954 if (cmd == NL80211_CMD_ROAM &&
3955 (drv->capa.flags & WPA_DRIVER_FLAGS_KEY_MGMT_OFFLOAD)) {
3956 if (drv->pending_roam_data) {
3957 wpa_printf(MSG_DEBUG,
3958 "nl80211: Process pending roam+auth vendor event");
3959 qca_nl80211_key_mgmt_auth(drv, drv->pending_roam_data,
3960 drv->pending_roam_data_len);
3961 os_free(drv->pending_roam_data);
3962 drv->pending_roam_data = NULL;
3963 return;
3964 }
3965 /*
3966 * Device will use roam+auth vendor event to indicate
3967 * roaming, so ignore the regular roam event.
3968 */
3969 drv->roam_indication_done = true;
3970 wpa_printf(MSG_DEBUG,
3971 "nl80211: Ignore roam event (cmd=%d), device will use vendor event roam+auth",
3972 cmd);
3973 return;
3974 }
3975 #endif /* CONFIG_DRIVER_NL80211_QCA */
3976
3977 if (drv->ap_scan_as_station != NL80211_IFTYPE_UNSPECIFIED &&
3978 (cmd == NL80211_CMD_NEW_SCAN_RESULTS ||
3979 cmd == NL80211_CMD_SCAN_ABORTED))
3980 nl80211_restore_ap_mode(bss);
3981
3982 switch (cmd) {
3983 case NL80211_CMD_TRIGGER_SCAN:
3984 wpa_dbg(drv->ctx, MSG_EXCESSIVE, "nl80211: Scan trigger");
3985 drv->scan_state = SCAN_STARTED;
3986 if (drv->scan_for_auth) {
3987 /*
3988 * Cannot indicate EVENT_SCAN_STARTED here since we skip
3989 * EVENT_SCAN_RESULTS in scan_for_auth case and the
3990 * upper layer implementation could get confused about
3991 * scanning state.
3992 */
3993 wpa_printf(MSG_EXCESSIVE, "nl80211: Do not indicate scan-start event due to internal scan_for_auth");
3994 break;
3995 }
3996 wpa_supplicant_event(drv->ctx, EVENT_SCAN_STARTED, NULL);
3997 break;
3998 case NL80211_CMD_START_SCHED_SCAN:
3999 wpa_dbg(drv->ctx, MSG_EXCESSIVE, "nl80211: Sched scan started");
4000 drv->scan_state = SCHED_SCAN_STARTED;
4001 break;
4002 case NL80211_CMD_SCHED_SCAN_STOPPED:
4003 wpa_dbg(drv->ctx, MSG_EXCESSIVE, "nl80211: Sched scan stopped");
4004 drv->scan_state = SCHED_SCAN_STOPPED;
4005 wpa_supplicant_event(drv->ctx, EVENT_SCHED_SCAN_STOPPED, NULL);
4006 break;
4007 case NL80211_CMD_NEW_SCAN_RESULTS:
4008 wpa_dbg(drv->ctx, MSG_EXCESSIVE,
4009 "nl80211: New scan results available");
4010 if (drv->last_scan_cmd != NL80211_CMD_VENDOR)
4011 drv->scan_state = SCAN_COMPLETED;
4012 drv->scan_complete_events = 1;
4013 if (drv->last_scan_cmd == NL80211_CMD_TRIGGER_SCAN) {
4014 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout,
4015 drv, drv->ctx);
4016 drv->last_scan_cmd = 0;
4017 } else {
4018 external_scan_event = 1;
4019 }
4020 send_scan_event(drv, 0, tb, external_scan_event);
4021 break;
4022 case NL80211_CMD_SCHED_SCAN_RESULTS:
4023 wpa_dbg(drv->ctx, MSG_INFO,
4024 "nl80211: New sched scan results available");
4025 drv->scan_state = SCHED_SCAN_RESULTS;
4026 send_scan_event(drv, 0, tb, 0);
4027 break;
4028 case NL80211_CMD_SCAN_ABORTED:
4029 wpa_dbg(drv->ctx, MSG_INFO, "nl80211: Scan aborted");
4030 if (drv->last_scan_cmd != NL80211_CMD_VENDOR)
4031 drv->scan_state = SCAN_ABORTED;
4032 if (drv->last_scan_cmd == NL80211_CMD_TRIGGER_SCAN) {
4033 /*
4034 * Need to indicate that scan results are available in
4035 * order not to make wpa_supplicant stop its scanning.
4036 */
4037 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout,
4038 drv, drv->ctx);
4039 drv->last_scan_cmd = 0;
4040 } else {
4041 external_scan_event = 1;
4042 }
4043 send_scan_event(drv, 1, tb, external_scan_event);
4044 break;
4045 case NL80211_CMD_AUTHENTICATE:
4046 case NL80211_CMD_ASSOCIATE:
4047 case NL80211_CMD_DEAUTHENTICATE:
4048 case NL80211_CMD_DISASSOCIATE:
4049 case NL80211_CMD_FRAME:
4050 case NL80211_CMD_FRAME_TX_STATUS:
4051 case NL80211_CMD_UNPROT_DEAUTHENTICATE:
4052 case NL80211_CMD_UNPROT_DISASSOCIATE:
4053 mlme_event(bss, cmd, tb[NL80211_ATTR_FRAME],
4054 tb[NL80211_ATTR_MAC], tb[NL80211_ATTR_TIMED_OUT],
4055 tb[NL80211_ATTR_WIPHY_FREQ], tb[NL80211_ATTR_ACK],
4056 tb[NL80211_ATTR_COOKIE],
4057 tb[NL80211_ATTR_RX_SIGNAL_DBM],
4058 tb[NL80211_ATTR_STA_WME],
4059 tb[NL80211_ATTR_REQ_IE],
4060 tb[NL80211_ATTR_MLO_LINK_ID]);
4061 break;
4062 case NL80211_CMD_CONNECT:
4063 case NL80211_CMD_ROAM:
4064 #ifdef CONFIG_VENDOR_EXT
4065 if (wpa_vendor_ext_nl80211_filter_connect_msg(drv->ctx, cmd)) {
4066 break;
4067 }
4068 #endif
4069 mlme_event_connect(drv, cmd, false,
4070 tb[NL80211_ATTR_STATUS_CODE],
4071 tb[NL80211_ATTR_MAC],
4072 tb[NL80211_ATTR_REQ_IE],
4073 tb[NL80211_ATTR_RESP_IE],
4074 tb[NL80211_ATTR_TIMED_OUT],
4075 tb[NL80211_ATTR_TIMEOUT_REASON],
4076 NULL, NULL, NULL,
4077 tb[NL80211_ATTR_FILS_KEK],
4078 NULL,
4079 tb[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM],
4080 tb[NL80211_ATTR_PMK],
4081 tb[NL80211_ATTR_PMKID],
4082 tb[NL80211_ATTR_MLO_LINKS]);
4083 break;
4084 case NL80211_CMD_CH_SWITCH_STARTED_NOTIFY:
4085 mlme_event_ch_switch(drv,
4086 tb[NL80211_ATTR_IFINDEX],
4087 tb[NL80211_ATTR_MLO_LINK_ID],
4088 tb[NL80211_ATTR_WIPHY_FREQ],
4089 tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
4090 tb[NL80211_ATTR_CHANNEL_WIDTH],
4091 tb[NL80211_ATTR_CENTER_FREQ1],
4092 tb[NL80211_ATTR_CENTER_FREQ2],
4093 tb[NL80211_ATTR_PUNCT_BITMAP],
4094 0);
4095 break;
4096 case NL80211_CMD_CH_SWITCH_NOTIFY:
4097 mlme_event_ch_switch(drv,
4098 tb[NL80211_ATTR_IFINDEX],
4099 tb[NL80211_ATTR_MLO_LINK_ID],
4100 tb[NL80211_ATTR_WIPHY_FREQ],
4101 tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
4102 tb[NL80211_ATTR_CHANNEL_WIDTH],
4103 tb[NL80211_ATTR_CENTER_FREQ1],
4104 tb[NL80211_ATTR_CENTER_FREQ2],
4105 tb[NL80211_ATTR_PUNCT_BITMAP],
4106 1);
4107 break;
4108 case NL80211_CMD_DISCONNECT:
4109 mlme_event_disconnect(drv, tb[NL80211_ATTR_REASON_CODE],
4110 tb[NL80211_ATTR_MAC],
4111 tb[NL80211_ATTR_DISCONNECTED_BY_AP]);
4112 break;
4113 case NL80211_CMD_MICHAEL_MIC_FAILURE:
4114 mlme_event_michael_mic_failure(bss, tb);
4115 break;
4116 case NL80211_CMD_JOIN_IBSS:
4117 mlme_event_join_ibss(drv, tb);
4118 break;
4119 case NL80211_CMD_REMAIN_ON_CHANNEL:
4120 mlme_event_remain_on_channel(drv, 0, tb);
4121 break;
4122 case NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL:
4123 mlme_event_remain_on_channel(drv, 1, tb);
4124 break;
4125 case NL80211_CMD_NOTIFY_CQM:
4126 nl80211_cqm_event(drv, tb);
4127 break;
4128 case NL80211_CMD_REG_CHANGE:
4129 case NL80211_CMD_WIPHY_REG_CHANGE:
4130 nl80211_reg_change_event(drv, tb);
4131 break;
4132 case NL80211_CMD_REG_BEACON_HINT:
4133 nl80211_reg_beacon_hint_event(drv, tb);
4134 break;
4135 case NL80211_CMD_NEW_STATION:
4136 nl80211_new_station_event(drv, bss, tb);
4137 break;
4138 case NL80211_CMD_DEL_STATION:
4139 #ifdef CONFIG_VENDOR_EXT
4140 wpa_vendor_ext_nl80211_del_station_event(drv, bss, tb);
4141 #else
4142 nl80211_del_station_event(drv, bss, tb);
4143 #endif
4144 break;
4145 case NL80211_CMD_SET_REKEY_OFFLOAD:
4146 nl80211_rekey_offload_event(drv, tb);
4147 break;
4148 case NL80211_CMD_PMKSA_CANDIDATE:
4149 nl80211_pmksa_candidate_event(drv, tb);
4150 break;
4151 case NL80211_CMD_PROBE_CLIENT:
4152 nl80211_client_probe_event(drv, tb);
4153 break;
4154 case NL80211_CMD_TDLS_OPER:
4155 nl80211_tdls_oper_event(drv, tb);
4156 break;
4157 case NL80211_CMD_CONN_FAILED:
4158 nl80211_connect_failed_event(drv, tb);
4159 break;
4160 case NL80211_CMD_FT_EVENT:
4161 mlme_event_ft_event(drv, tb);
4162 break;
4163 case NL80211_CMD_RADAR_DETECT:
4164 nl80211_radar_event(drv, tb);
4165 break;
4166 case NL80211_CMD_STOP_AP:
4167 nl80211_stop_ap(drv, tb);
4168 break;
4169 case NL80211_CMD_VENDOR:
4170 nl80211_vendor_event(drv, tb);
4171 break;
4172 case NL80211_CMD_NEW_PEER_CANDIDATE:
4173 nl80211_new_peer_candidate(drv, tb);
4174 break;
4175 case NL80211_CMD_PORT_AUTHORIZED:
4176 nl80211_port_authorized(drv, tb);
4177 break;
4178 case NL80211_CMD_STA_OPMODE_CHANGED:
4179 nl80211_sta_opmode_change_event(drv, tb);
4180 break;
4181 case NL80211_CMD_UPDATE_OWE_INFO:
4182 mlme_event_dh_event(drv, bss, tb);
4183 break;
4184 case NL80211_CMD_UNPROT_BEACON:
4185 if (frame)
4186 mlme_event_unprot_beacon(drv, nla_data(frame),
4187 nla_len(frame));
4188 break;
4189 case NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS:
4190 if (!frame)
4191 break;
4192 nl80211_control_port_frame_tx_status(bss,
4193 nla_data(frame),
4194 nla_len(frame),
4195 tb[NL80211_ATTR_ACK],
4196 tb[NL80211_ATTR_COOKIE]);
4197 break;
4198 case NL80211_CMD_FRAME_WAIT_CANCEL:
4199 nl80211_frame_wait_cancel(drv, tb[NL80211_ATTR_COOKIE]);
4200 break;
4201 case NL80211_CMD_ASSOC_COMEBACK:
4202 nl80211_assoc_comeback(drv, tb[NL80211_ATTR_MAC],
4203 tb[NL80211_ATTR_TIMEOUT]);
4204 break;
4205 #ifdef CONFIG_IEEE80211AX
4206 case NL80211_CMD_OBSS_COLOR_COLLISION:
4207 case NL80211_CMD_COLOR_CHANGE_STARTED:
4208 case NL80211_CMD_COLOR_CHANGE_ABORTED:
4209 case NL80211_CMD_COLOR_CHANGE_COMPLETED:
4210 nl80211_obss_color_event(bss, cmd, tb);
4211 break;
4212 #endif /* CONFIG_IEEE80211AX */
4213 case NL80211_CMD_LINKS_REMOVED:
4214 wpa_supplicant_event(drv->ctx, EVENT_LINK_RECONFIG, NULL);
4215 break;
4216 #ifdef CONFIG_MLD_PATCH
4217 case NL80211_CMD_LINK_SWITCH_EVENT:
4218 nl80211_mlo_link_switch_event(drv, tb);
4219 break;
4220 #endif
4221 case NL80211_CMD_MLO_WORK_STATE_EVENT:
4222 nl80211_mlo_working_state_event(drv, tb);
4223 break;
4224 default:
4225 wpa_dbg(drv->ctx, MSG_DEBUG, "nl80211: Ignored unknown event "
4226 "(cmd=%d)", cmd);
4227 break;
4228 }
4229 }
4230
4231
nl80211_drv_in_list(struct nl80211_global * global,struct wpa_driver_nl80211_data * drv)4232 static bool nl80211_drv_in_list(struct nl80211_global *global,
4233 struct wpa_driver_nl80211_data *drv)
4234 {
4235 struct wpa_driver_nl80211_data *tmp;
4236
4237 dl_list_for_each(tmp, &global->interfaces,
4238 struct wpa_driver_nl80211_data, list) {
4239 if (drv == tmp)
4240 return true;
4241 }
4242
4243 return false;
4244 }
4245
4246
process_global_event(struct nl_msg * msg,void * arg)4247 int process_global_event(struct nl_msg *msg, void *arg)
4248 {
4249 struct nl80211_global *global = arg;
4250 struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
4251 struct nlattr *tb[NL80211_ATTR_MAX + 1];
4252 struct wpa_driver_nl80211_data *drv, *tmp;
4253 int ifidx = -1, wiphy_idx = -1, wiphy_idx_rx = -1;
4254 struct i802_bss *bss;
4255 u64 wdev_id = 0;
4256 int wdev_id_set = 0;
4257 int wiphy_idx_set = 0;
4258 bool processed = false;
4259
4260 /* Event marker, all prior events have been processed */
4261 if (gnlh->cmd == NL80211_CMD_GET_PROTOCOL_FEATURES) {
4262 u32 seq = nlmsg_hdr(msg)->nlmsg_seq;
4263
4264 dl_list_for_each_safe(drv, tmp, &global->interfaces,
4265 struct wpa_driver_nl80211_data, list) {
4266 if (drv->ignore_next_local_deauth > 0 &&
4267 drv->ignore_next_local_deauth <= seq) {
4268 wpa_printf(MSG_DEBUG,
4269 "nl80211: No DEAUTHENTICATE event was ignored");
4270 drv->ignore_next_local_deauth = 0;
4271 }
4272
4273 if (drv->ignore_next_local_disconnect > 0 &&
4274 drv->ignore_next_local_disconnect <= seq) {
4275 wpa_printf(MSG_DEBUG,
4276 "nl80211: No DISCONNECT event was ignored");
4277 drv->ignore_next_local_disconnect = 0;
4278 }
4279 }
4280
4281 return NL_SKIP;
4282 }
4283
4284 nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
4285 genlmsg_attrlen(gnlh, 0), NULL);
4286
4287 if (tb[NL80211_ATTR_IFINDEX])
4288 ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
4289 else if (tb[NL80211_ATTR_WDEV]) {
4290 wdev_id = nla_get_u64(tb[NL80211_ATTR_WDEV]);
4291 wdev_id_set = 1;
4292 } else if (tb[NL80211_ATTR_WIPHY]) {
4293 wiphy_idx_rx = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
4294 wiphy_idx_set = 1;
4295 }
4296
4297 dl_list_for_each_safe(drv, tmp, &global->interfaces,
4298 struct wpa_driver_nl80211_data, list) {
4299 for (bss = drv->first_bss; bss; bss = bss->next) {
4300 if (wiphy_idx_set)
4301 wiphy_idx = nl80211_get_wiphy_index(bss);
4302 if ((ifidx == -1 && !wiphy_idx_set && !wdev_id_set) ||
4303 ifidx == bss->ifindex ||
4304 (wiphy_idx_set && wiphy_idx == wiphy_idx_rx) ||
4305 (wdev_id_set && bss->wdev_id_set &&
4306 wdev_id == bss->wdev_id)) {
4307 #ifdef CONFIG_VENDOR_EXT
4308 if (wpa_vendor_ext_nl80211_is_match_iface(bss, gnlh->cmd, tb)) {
4309 processed = true;
4310 do_process_drv_event(bss, gnlh->cmd, tb);
4311 if (!wiphy_idx_set)
4312 return NL_SKIP;
4313 /* The driver instance could have been removed,
4314 * e.g., due to NL80211_CMD_RADAR_DETECT event,
4315 * so need to stop the loop if that has
4316 * happened. */
4317 if (!nl80211_drv_in_list(global, drv))
4318 break;
4319 }
4320 #else
4321 processed = true;
4322 do_process_drv_event(bss, gnlh->cmd, tb);
4323 if (!wiphy_idx_set)
4324 return NL_SKIP;
4325 /* The driver instance could have been removed,
4326 * e.g., due to NL80211_CMD_RADAR_DETECT event,
4327 * so need to stop the loop if that has
4328 * happened. */
4329 if (!nl80211_drv_in_list(global, drv))
4330 break;
4331 #endif
4332 }
4333 }
4334 }
4335
4336 if (processed)
4337 return NL_SKIP;
4338
4339 wpa_printf(MSG_EXCESSIVE,
4340 "nl80211: Ignored event %d (%s) for foreign interface (ifindex %d wdev 0x%llx wiphy %d)",
4341 gnlh->cmd, nl80211_command_to_string(gnlh->cmd),
4342 ifidx, (long long unsigned int) wdev_id, wiphy_idx_rx);
4343
4344 return NL_SKIP;
4345 }
4346
4347
process_bss_event(struct nl_msg * msg,void * arg)4348 int process_bss_event(struct nl_msg *msg, void *arg)
4349 {
4350 struct i802_bss *bss = arg;
4351 struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
4352 struct nlattr *tb[NL80211_ATTR_MAX + 1];
4353
4354 nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
4355 genlmsg_attrlen(gnlh, 0), NULL);
4356
4357 wpa_printf(MSG_DEBUG, "nl80211: BSS Event %d (%s) received for %s",
4358 gnlh->cmd, nl80211_command_to_string(gnlh->cmd),
4359 bss->ifname);
4360
4361 #ifdef CONFIG_VENDOR_EXT
4362 bss = wpa_vendor_nl80211_get_processing_bss(bss, gnlh->cmd, tb);
4363 #endif
4364
4365 switch (gnlh->cmd) {
4366 case NL80211_CMD_FRAME:
4367 case NL80211_CMD_FRAME_TX_STATUS:
4368 mlme_event(bss, gnlh->cmd, tb[NL80211_ATTR_FRAME],
4369 tb[NL80211_ATTR_MAC], tb[NL80211_ATTR_TIMED_OUT],
4370 tb[NL80211_ATTR_WIPHY_FREQ], tb[NL80211_ATTR_ACK],
4371 tb[NL80211_ATTR_COOKIE],
4372 tb[NL80211_ATTR_RX_SIGNAL_DBM],
4373 tb[NL80211_ATTR_STA_WME], NULL,
4374 tb[NL80211_ATTR_MLO_LINK_ID]);
4375 break;
4376 case NL80211_CMD_UNEXPECTED_FRAME:
4377 nl80211_spurious_frame(bss, tb, 0);
4378 break;
4379 case NL80211_CMD_UNEXPECTED_4ADDR_FRAME:
4380 nl80211_spurious_frame(bss, tb, 1);
4381 break;
4382 case NL80211_CMD_EXTERNAL_AUTH:
4383 nl80211_external_auth(bss->drv, tb);
4384 break;
4385 case NL80211_CMD_CONTROL_PORT_FRAME:
4386 nl80211_control_port_frame(bss, tb);
4387 break;
4388 default:
4389 wpa_printf(MSG_DEBUG, "nl80211: Ignored unknown event "
4390 "(cmd=%d)", gnlh->cmd);
4391 break;
4392 }
4393
4394 return NL_SKIP;
4395 }
4396