1 /*
2 * Wi-Fi Direct - P2P module
3 * Copyright (c) 2009-2010, Atheros Communications
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include "includes.h"
10
11 #include <log/log.h>
12 #include "common.h"
13 #include "eloop.h"
14 #include "common/defs.h"
15 #include "common/ieee802_11_defs.h"
16 #include "common/ieee802_11_common.h"
17 #include "common/wpa_ctrl.h"
18 #include "crypto/sha256.h"
19 #include "crypto/crypto.h"
20 #include "wps/wps_i.h"
21 #include "p2p_i.h"
22 #include "p2p.h"
23
24
25 static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx);
26 static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev);
27 static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
28 const u8 *sa, const u8 *data, size_t len,
29 int rx_freq);
30 static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
31 const u8 *sa, const u8 *data,
32 size_t len);
33 static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx);
34 static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx);
35
36
37 /*
38 * p2p_scan recovery timeout
39 *
40 * Many drivers are using 30 second timeout on scan results. Allow a bit larger
41 * timeout for this to avoid hitting P2P timeout unnecessarily.
42 */
43 #define P2P_SCAN_TIMEOUT 35
44
45 /**
46 * P2P_PEER_EXPIRATION_AGE - Number of seconds after which inactive peer
47 * entries will be removed
48 */
49 #ifndef P2P_PEER_EXPIRATION_AGE
50 #define P2P_PEER_EXPIRATION_AGE 60
51 #endif /* P2P_PEER_EXPIRATION_AGE */
52
53
p2p_expire_peers(struct p2p_data * p2p)54 void p2p_expire_peers(struct p2p_data *p2p)
55 {
56 struct p2p_device *dev, *n;
57 struct os_reltime now;
58 size_t i;
59
60 os_get_reltime(&now);
61 dl_list_for_each_safe(dev, n, &p2p->devices, struct p2p_device, list) {
62 if (dev->last_seen.sec + P2P_PEER_EXPIRATION_AGE >= now.sec)
63 continue;
64
65 if (dev == p2p->go_neg_peer) {
66 /*
67 * GO Negotiation is in progress with the peer, so
68 * don't expire the peer entry until GO Negotiation
69 * fails or times out.
70 */
71 continue;
72 }
73
74 if (p2p->cfg->go_connected &&
75 p2p->cfg->go_connected(p2p->cfg->cb_ctx,
76 dev->info.p2p_device_addr)) {
77 /*
78 * We are connected as a client to a group in which the
79 * peer is the GO, so do not expire the peer entry.
80 */
81 os_get_reltime(&dev->last_seen);
82 continue;
83 }
84
85 for (i = 0; i < p2p->num_groups; i++) {
86 if (p2p_group_is_client_connected(
87 p2p->groups[i], dev->info.p2p_device_addr))
88 break;
89 }
90 if (i < p2p->num_groups) {
91 /*
92 * The peer is connected as a client in a group where
93 * we are the GO, so do not expire the peer entry.
94 */
95 os_get_reltime(&dev->last_seen);
96 continue;
97 }
98
99 p2p_dbg(p2p, "Expiring old peer entry " MACSTR,
100 MAC2STR(dev->info.p2p_device_addr));
101 dl_list_del(&dev->list);
102 p2p_device_free(p2p, dev);
103 }
104 }
105
106
p2p_state_txt(int state)107 static const char * p2p_state_txt(int state)
108 {
109 switch (state) {
110 case P2P_IDLE:
111 return "IDLE";
112 case P2P_SEARCH:
113 return "SEARCH";
114 case P2P_CONNECT:
115 return "CONNECT";
116 case P2P_CONNECT_LISTEN:
117 return "CONNECT_LISTEN";
118 case P2P_GO_NEG:
119 return "GO_NEG";
120 case P2P_LISTEN_ONLY:
121 return "LISTEN_ONLY";
122 case P2P_WAIT_PEER_CONNECT:
123 return "WAIT_PEER_CONNECT";
124 case P2P_WAIT_PEER_IDLE:
125 return "WAIT_PEER_IDLE";
126 case P2P_SD_DURING_FIND:
127 return "SD_DURING_FIND";
128 case P2P_PROVISIONING:
129 return "PROVISIONING";
130 case P2P_PD_DURING_FIND:
131 return "PD_DURING_FIND";
132 case P2P_INVITE:
133 return "INVITE";
134 case P2P_INVITE_LISTEN:
135 return "INVITE_LISTEN";
136 default:
137 return "?";
138 }
139 }
140
141
p2p_get_state_txt(struct p2p_data * p2p)142 const char * p2p_get_state_txt(struct p2p_data *p2p)
143 {
144 return p2p_state_txt(p2p->state);
145 }
146
147
p2p_get_p2ps_adv_list(struct p2p_data * p2p)148 struct p2ps_advertisement * p2p_get_p2ps_adv_list(struct p2p_data *p2p)
149 {
150 return p2p ? p2p->p2ps_adv_list : NULL;
151 }
152
153
p2p_set_intended_addr(struct p2p_data * p2p,const u8 * intended_addr)154 void p2p_set_intended_addr(struct p2p_data *p2p, const u8 *intended_addr)
155 {
156 if (p2p && intended_addr)
157 os_memcpy(p2p->intended_addr, intended_addr, ETH_ALEN);
158 }
159
160
p2p_get_provisioning_info(struct p2p_data * p2p,const u8 * addr)161 u16 p2p_get_provisioning_info(struct p2p_data *p2p, const u8 *addr)
162 {
163 struct p2p_device *dev = NULL;
164
165 if (!addr || !p2p)
166 return 0;
167
168 dev = p2p_get_device(p2p, addr);
169 if (dev)
170 return dev->wps_prov_info;
171 else
172 return 0;
173 }
174
175
p2p_clear_provisioning_info(struct p2p_data * p2p,const u8 * addr)176 void p2p_clear_provisioning_info(struct p2p_data *p2p, const u8 *addr)
177 {
178 struct p2p_device *dev = NULL;
179
180 if (!addr || !p2p)
181 return;
182
183 dev = p2p_get_device(p2p, addr);
184 if (dev)
185 dev->wps_prov_info = 0;
186 }
187
188
p2p_set_state(struct p2p_data * p2p,int new_state)189 void p2p_set_state(struct p2p_data *p2p, int new_state)
190 {
191 p2p_dbg(p2p, "State %s -> %s",
192 p2p_state_txt(p2p->state), p2p_state_txt(new_state));
193 p2p->state = new_state;
194
195 if (new_state == P2P_IDLE && p2p->pending_channel) {
196 p2p_dbg(p2p, "Apply change in listen channel");
197 p2p->cfg->reg_class = p2p->pending_reg_class;
198 p2p->cfg->channel = p2p->pending_channel;
199 p2p->pending_reg_class = 0;
200 p2p->pending_channel = 0;
201 }
202 }
203
204
p2p_set_timeout(struct p2p_data * p2p,unsigned int sec,unsigned int usec)205 void p2p_set_timeout(struct p2p_data *p2p, unsigned int sec, unsigned int usec)
206 {
207 p2p_dbg(p2p, "Set timeout (state=%s): %u.%06u sec",
208 p2p_state_txt(p2p->state), sec, usec);
209 eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
210 eloop_register_timeout(sec, usec, p2p_state_timeout, p2p, NULL);
211 }
212
213
p2p_clear_timeout(struct p2p_data * p2p)214 void p2p_clear_timeout(struct p2p_data *p2p)
215 {
216 p2p_dbg(p2p, "Clear timeout (state=%s)", p2p_state_txt(p2p->state));
217 eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
218 }
219
220
p2p_go_neg_failed(struct p2p_data * p2p,int status)221 void p2p_go_neg_failed(struct p2p_data *p2p, int status)
222 {
223 struct p2p_go_neg_results res;
224 struct p2p_device *peer = p2p->go_neg_peer;
225
226 if (!peer)
227 return;
228
229 eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p, NULL);
230 if (p2p->state != P2P_SEARCH) {
231 /*
232 * Clear timeouts related to GO Negotiation if no new p2p_find
233 * has been started.
234 */
235 p2p_clear_timeout(p2p);
236 p2p_set_state(p2p, P2P_IDLE);
237 }
238
239 peer->flags &= ~P2P_DEV_PEER_WAITING_RESPONSE;
240 peer->wps_method = WPS_NOT_READY;
241 peer->oob_pw_id = 0;
242 wpabuf_free(peer->go_neg_conf);
243 peer->go_neg_conf = NULL;
244 p2p->go_neg_peer = NULL;
245
246 os_memset(&res, 0, sizeof(res));
247 res.status = status;
248 os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr, ETH_ALEN);
249 os_memcpy(res.peer_interface_addr, peer->intended_addr, ETH_ALEN);
250 p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
251 }
252
253
p2p_listen_in_find(struct p2p_data * p2p,int dev_disc)254 static void p2p_listen_in_find(struct p2p_data *p2p, int dev_disc)
255 {
256 unsigned int r, tu;
257 int freq;
258 struct wpabuf *ies;
259
260 p2p_dbg(p2p, "Starting short listen state (state=%s)",
261 p2p_state_txt(p2p->state));
262
263 if (p2p->pending_listen_freq) {
264 /* We have a pending p2p_listen request */
265 p2p_dbg(p2p, "p2p_listen command pending already");
266 return;
267 }
268
269 freq = p2p_channel_to_freq(p2p->cfg->reg_class, p2p->cfg->channel);
270 if (freq < 0) {
271 p2p_dbg(p2p, "Unknown regulatory class/channel");
272 return;
273 }
274
275 if (os_get_random((u8 *) &r, sizeof(r)) < 0)
276 r = 0;
277 tu = (r % ((p2p->max_disc_int - p2p->min_disc_int) + 1) +
278 p2p->min_disc_int) * 100;
279 if (p2p->max_disc_tu >= 0 && tu > (unsigned int) p2p->max_disc_tu)
280 tu = p2p->max_disc_tu;
281 if (!dev_disc && tu < 100)
282 tu = 100; /* Need to wait in non-device discovery use cases */
283 if (p2p->cfg->max_listen && 1024 * tu / 1000 > p2p->cfg->max_listen)
284 tu = p2p->cfg->max_listen * 1000 / 1024;
285
286 if (tu == 0) {
287 p2p_dbg(p2p, "Skip listen state since duration was 0 TU");
288 p2p_set_timeout(p2p, 0, 0);
289 return;
290 }
291
292 ies = p2p_build_probe_resp_ies(p2p, NULL, 0);
293 if (ies == NULL)
294 return;
295
296 p2p->pending_listen_freq = freq;
297 p2p->pending_listen_sec = 0;
298 p2p->pending_listen_usec = 1024 * tu;
299
300 if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, 1024 * tu / 1000,
301 ies) < 0) {
302 p2p_dbg(p2p, "Failed to start listen mode");
303 p2p->pending_listen_freq = 0;
304 }
305 wpabuf_free(ies);
306 }
307
308
p2p_listen(struct p2p_data * p2p,unsigned int timeout)309 int p2p_listen(struct p2p_data *p2p, unsigned int timeout)
310 {
311 int freq;
312 struct wpabuf *ies;
313
314 p2p_dbg(p2p, "Going to listen(only) state");
315
316 if (p2p->pending_listen_freq) {
317 /* We have a pending p2p_listen request */
318 p2p_dbg(p2p, "p2p_listen command pending already");
319 return -1;
320 }
321
322 freq = p2p_channel_to_freq(p2p->cfg->reg_class, p2p->cfg->channel);
323 if (freq < 0) {
324 p2p_dbg(p2p, "Unknown regulatory class/channel");
325 return -1;
326 }
327
328 p2p->pending_listen_sec = timeout / 1000;
329 p2p->pending_listen_usec = (timeout % 1000) * 1000;
330
331 if (p2p->p2p_scan_running) {
332 if (p2p->start_after_scan == P2P_AFTER_SCAN_CONNECT) {
333 p2p_dbg(p2p, "p2p_scan running - connect is already pending - skip listen");
334 return 0;
335 }
336 p2p_dbg(p2p, "p2p_scan running - delay start of listen state");
337 p2p->start_after_scan = P2P_AFTER_SCAN_LISTEN;
338 return 0;
339 }
340
341 ies = p2p_build_probe_resp_ies(p2p, NULL, 0);
342 if (ies == NULL)
343 return -1;
344
345 p2p->pending_listen_freq = freq;
346
347 if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, timeout, ies) < 0) {
348 p2p_dbg(p2p, "Failed to start listen mode");
349 p2p->pending_listen_freq = 0;
350 wpabuf_free(ies);
351 return -1;
352 }
353 wpabuf_free(ies);
354
355 p2p_set_state(p2p, P2P_LISTEN_ONLY);
356
357 return 0;
358 }
359
360
p2p_device_clear_reported(struct p2p_data * p2p)361 static void p2p_device_clear_reported(struct p2p_data *p2p)
362 {
363 struct p2p_device *dev;
364 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
365 dev->flags &= ~P2P_DEV_REPORTED;
366 dev->sd_reqs = 0;
367 }
368 }
369
370
371 /**
372 * p2p_get_device - Fetch a peer entry
373 * @p2p: P2P module context from p2p_init()
374 * @addr: P2P Device Address of the peer
375 * Returns: Pointer to the device entry or %NULL if not found
376 */
p2p_get_device(struct p2p_data * p2p,const u8 * addr)377 struct p2p_device * p2p_get_device(struct p2p_data *p2p, const u8 *addr)
378 {
379 struct p2p_device *dev;
380 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
381 if (os_memcmp(dev->info.p2p_device_addr, addr, ETH_ALEN) == 0)
382 return dev;
383 }
384 return NULL;
385 }
386
387
388 /**
389 * p2p_get_device_interface - Fetch a peer entry based on P2P Interface Address
390 * @p2p: P2P module context from p2p_init()
391 * @addr: P2P Interface Address of the peer
392 * Returns: Pointer to the device entry or %NULL if not found
393 */
p2p_get_device_interface(struct p2p_data * p2p,const u8 * addr)394 struct p2p_device * p2p_get_device_interface(struct p2p_data *p2p,
395 const u8 *addr)
396 {
397 struct p2p_device *dev;
398 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
399 if (os_memcmp(dev->interface_addr, addr, ETH_ALEN) == 0)
400 return dev;
401 }
402 return NULL;
403 }
404
405
406 /**
407 * p2p_create_device - Create a peer entry
408 * @p2p: P2P module context from p2p_init()
409 * @addr: P2P Device Address of the peer
410 * Returns: Pointer to the device entry or %NULL on failure
411 *
412 * If there is already an entry for the peer, it will be returned instead of
413 * creating a new one.
414 */
p2p_create_device(struct p2p_data * p2p,const u8 * addr)415 static struct p2p_device * p2p_create_device(struct p2p_data *p2p,
416 const u8 *addr)
417 {
418 struct p2p_device *dev, *oldest = NULL;
419 size_t count = 0;
420
421 dev = p2p_get_device(p2p, addr);
422 if (dev)
423 return dev;
424
425 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
426 count++;
427 if (oldest == NULL ||
428 os_reltime_before(&dev->last_seen, &oldest->last_seen))
429 oldest = dev;
430 }
431 if (count + 1 > p2p->cfg->max_peers && oldest) {
432 p2p_dbg(p2p, "Remove oldest peer entry to make room for a new peer");
433 dl_list_del(&oldest->list);
434 p2p_device_free(p2p, oldest);
435 }
436
437 dev = os_zalloc(sizeof(*dev));
438 if (dev == NULL)
439 return NULL;
440 dl_list_add(&p2p->devices, &dev->list);
441 os_memcpy(dev->info.p2p_device_addr, addr, ETH_ALEN);
442
443 return dev;
444 }
445
446
p2p_copy_client_info(struct p2p_device * dev,struct p2p_client_info * cli)447 static void p2p_copy_client_info(struct p2p_device *dev,
448 struct p2p_client_info *cli)
449 {
450 p2p_copy_filter_devname(dev->info.device_name,
451 sizeof(dev->info.device_name),
452 cli->dev_name, cli->dev_name_len);
453 dev->info.dev_capab = cli->dev_capab;
454 dev->info.config_methods = cli->config_methods;
455 os_memcpy(dev->info.pri_dev_type, cli->pri_dev_type, 8);
456 dev->info.wps_sec_dev_type_list_len = 8 * cli->num_sec_dev_types;
457 if (dev->info.wps_sec_dev_type_list_len > WPS_SEC_DEV_TYPE_MAX_LEN) {
458 android_errorWriteLog(0x534e4554, "172937525");
459 dev->info.wps_sec_dev_type_list_len = WPS_SEC_DEV_TYPE_MAX_LEN;
460 }
461 os_memcpy(dev->info.wps_sec_dev_type_list, cli->sec_dev_types,
462 dev->info.wps_sec_dev_type_list_len);
463 }
464
465
p2p_add_group_clients(struct p2p_data * p2p,const u8 * go_dev_addr,const u8 * go_interface_addr,int freq,const u8 * gi,size_t gi_len,struct os_reltime * rx_time)466 static int p2p_add_group_clients(struct p2p_data *p2p, const u8 *go_dev_addr,
467 const u8 *go_interface_addr, int freq,
468 const u8 *gi, size_t gi_len,
469 struct os_reltime *rx_time)
470 {
471 struct p2p_group_info info;
472 size_t c;
473 struct p2p_device *dev;
474
475 if (gi == NULL)
476 return 0;
477
478 if (p2p_group_info_parse(gi, gi_len, &info) < 0)
479 return -1;
480
481 /*
482 * Clear old data for this group; if the devices are still in the
483 * group, the information will be restored in the loop following this.
484 */
485 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
486 if (os_memcmp(dev->member_in_go_iface, go_interface_addr,
487 ETH_ALEN) == 0) {
488 os_memset(dev->member_in_go_iface, 0, ETH_ALEN);
489 os_memset(dev->member_in_go_dev, 0, ETH_ALEN);
490 }
491 }
492
493 for (c = 0; c < info.num_clients; c++) {
494 struct p2p_client_info *cli = &info.client[c];
495 if (os_memcmp(cli->p2p_device_addr, p2p->cfg->dev_addr,
496 ETH_ALEN) == 0)
497 continue; /* ignore our own entry */
498 dev = p2p_get_device(p2p, cli->p2p_device_addr);
499 if (dev) {
500 if (dev->flags & (P2P_DEV_GROUP_CLIENT_ONLY |
501 P2P_DEV_PROBE_REQ_ONLY)) {
502 /*
503 * Update information since we have not
504 * received this directly from the client.
505 */
506 p2p_copy_client_info(dev, cli);
507 } else {
508 /*
509 * Need to update P2P Client Discoverability
510 * flag since it is valid only in P2P Group
511 * Info attribute.
512 */
513 dev->info.dev_capab &=
514 ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
515 dev->info.dev_capab |=
516 cli->dev_capab &
517 P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
518 }
519 if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
520 dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
521 }
522 } else {
523 dev = p2p_create_device(p2p, cli->p2p_device_addr);
524 if (dev == NULL)
525 continue;
526 dev->flags |= P2P_DEV_GROUP_CLIENT_ONLY;
527 p2p_copy_client_info(dev, cli);
528 dev->oper_freq = freq;
529 p2p->cfg->dev_found(p2p->cfg->cb_ctx,
530 dev->info.p2p_device_addr,
531 &dev->info, 1);
532 dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
533 }
534
535 os_memcpy(dev->interface_addr, cli->p2p_interface_addr,
536 ETH_ALEN);
537 os_memcpy(&dev->last_seen, rx_time, sizeof(struct os_reltime));
538 os_memcpy(dev->member_in_go_dev, go_dev_addr, ETH_ALEN);
539 os_memcpy(dev->member_in_go_iface, go_interface_addr,
540 ETH_ALEN);
541 dev->flags |= P2P_DEV_LAST_SEEN_AS_GROUP_CLIENT;
542 }
543
544 return 0;
545 }
546
547
p2p_copy_wps_info(struct p2p_data * p2p,struct p2p_device * dev,int probe_req,const struct p2p_message * msg)548 static void p2p_copy_wps_info(struct p2p_data *p2p, struct p2p_device *dev,
549 int probe_req, const struct p2p_message *msg)
550 {
551 os_memcpy(dev->info.device_name, msg->device_name,
552 sizeof(dev->info.device_name));
553
554 if (msg->manufacturer &&
555 msg->manufacturer_len < sizeof(dev->info.manufacturer)) {
556 os_memset(dev->info.manufacturer, 0,
557 sizeof(dev->info.manufacturer));
558 os_memcpy(dev->info.manufacturer, msg->manufacturer,
559 msg->manufacturer_len);
560 }
561
562 if (msg->model_name &&
563 msg->model_name_len < sizeof(dev->info.model_name)) {
564 os_memset(dev->info.model_name, 0,
565 sizeof(dev->info.model_name));
566 os_memcpy(dev->info.model_name, msg->model_name,
567 msg->model_name_len);
568 }
569
570 if (msg->model_number &&
571 msg->model_number_len < sizeof(dev->info.model_number)) {
572 os_memset(dev->info.model_number, 0,
573 sizeof(dev->info.model_number));
574 os_memcpy(dev->info.model_number, msg->model_number,
575 msg->model_number_len);
576 }
577
578 if (msg->serial_number &&
579 msg->serial_number_len < sizeof(dev->info.serial_number)) {
580 os_memset(dev->info.serial_number, 0,
581 sizeof(dev->info.serial_number));
582 os_memcpy(dev->info.serial_number, msg->serial_number,
583 msg->serial_number_len);
584 }
585
586 if (msg->pri_dev_type)
587 os_memcpy(dev->info.pri_dev_type, msg->pri_dev_type,
588 sizeof(dev->info.pri_dev_type));
589 else if (msg->wps_pri_dev_type)
590 os_memcpy(dev->info.pri_dev_type, msg->wps_pri_dev_type,
591 sizeof(dev->info.pri_dev_type));
592
593 if (msg->wps_sec_dev_type_list) {
594 os_memcpy(dev->info.wps_sec_dev_type_list,
595 msg->wps_sec_dev_type_list,
596 msg->wps_sec_dev_type_list_len);
597 dev->info.wps_sec_dev_type_list_len =
598 msg->wps_sec_dev_type_list_len;
599 }
600
601 if (msg->capability) {
602 /*
603 * P2P Client Discoverability bit is reserved in all frames
604 * that use this function, so do not change its value here.
605 */
606 dev->info.dev_capab &= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
607 dev->info.dev_capab |= msg->capability[0] &
608 ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
609 dev->info.group_capab = msg->capability[1];
610 }
611
612 if (msg->ext_listen_timing) {
613 dev->ext_listen_period = WPA_GET_LE16(msg->ext_listen_timing);
614 dev->ext_listen_interval =
615 WPA_GET_LE16(msg->ext_listen_timing + 2);
616 }
617
618 if (!probe_req) {
619 u16 new_config_methods;
620 new_config_methods = msg->config_methods ?
621 msg->config_methods : msg->wps_config_methods;
622 if (new_config_methods &&
623 dev->info.config_methods != new_config_methods) {
624 p2p_dbg(p2p, "Update peer " MACSTR
625 " config_methods 0x%x -> 0x%x",
626 MAC2STR(dev->info.p2p_device_addr),
627 dev->info.config_methods,
628 new_config_methods);
629 dev->info.config_methods = new_config_methods;
630 }
631 }
632 }
633
634
p2p_update_peer_vendor_elems(struct p2p_device * dev,const u8 * ies,size_t ies_len)635 static void p2p_update_peer_vendor_elems(struct p2p_device *dev, const u8 *ies,
636 size_t ies_len)
637 {
638 const u8 *pos, *end;
639 u8 id, len;
640
641 wpabuf_free(dev->info.vendor_elems);
642 dev->info.vendor_elems = NULL;
643
644 end = ies + ies_len;
645
646 for (pos = ies; end - pos > 1; pos += len) {
647 id = *pos++;
648 len = *pos++;
649
650 if (len > end - pos)
651 break;
652
653 if (id != WLAN_EID_VENDOR_SPECIFIC || len < 3)
654 continue;
655
656 if (len >= 4) {
657 u32 type = WPA_GET_BE32(pos);
658
659 if (type == WPA_IE_VENDOR_TYPE ||
660 type == WMM_IE_VENDOR_TYPE ||
661 type == WPS_IE_VENDOR_TYPE ||
662 type == P2P_IE_VENDOR_TYPE ||
663 type == WFD_IE_VENDOR_TYPE)
664 continue;
665 }
666
667 /* Unknown vendor element - make raw IE data available */
668 if (wpabuf_resize(&dev->info.vendor_elems, 2 + len) < 0)
669 break;
670 wpabuf_put_data(dev->info.vendor_elems, pos - 2, 2 + len);
671 }
672 }
673
674
p2p_compare_wfd_info(struct p2p_device * dev,const struct p2p_message * msg)675 static int p2p_compare_wfd_info(struct p2p_device *dev,
676 const struct p2p_message *msg)
677 {
678 if (dev->info.wfd_subelems && msg->wfd_subelems) {
679 if (dev->info.wfd_subelems->used != msg->wfd_subelems->used)
680 return 1;
681
682 return os_memcmp(dev->info.wfd_subelems->buf,
683 msg->wfd_subelems->buf,
684 dev->info.wfd_subelems->used);
685 }
686 if (dev->info.wfd_subelems || msg->wfd_subelems)
687 return 1;
688
689 return 0;
690 }
691
692
693 /**
694 * p2p_add_device - Add peer entries based on scan results or P2P frames
695 * @p2p: P2P module context from p2p_init()
696 * @addr: Source address of Beacon or Probe Response frame (may be either
697 * P2P Device Address or P2P Interface Address)
698 * @level: Signal level (signal strength of the received frame from the peer)
699 * @freq: Frequency on which the Beacon or Probe Response frame was received
700 * @rx_time: Time when the result was received
701 * @ies: IEs from the Beacon or Probe Response frame
702 * @ies_len: Length of ies buffer in octets
703 * @scan_res: Whether this was based on scan results
704 * Returns: 0 on success, -1 on failure
705 *
706 * If the scan result is for a GO, the clients in the group will also be added
707 * to the peer table. This function can also be used with some other frames
708 * like Provision Discovery Request that contains P2P Capability and P2P Device
709 * Info attributes.
710 */
p2p_add_device(struct p2p_data * p2p,const u8 * addr,int freq,struct os_reltime * rx_time,int level,const u8 * ies,size_t ies_len,int scan_res)711 int p2p_add_device(struct p2p_data *p2p, const u8 *addr, int freq,
712 struct os_reltime *rx_time, int level, const u8 *ies,
713 size_t ies_len, int scan_res)
714 {
715 struct p2p_device *dev;
716 struct p2p_message msg;
717 const u8 *p2p_dev_addr;
718 int wfd_changed;
719 int dev_name_changed;
720 int i;
721 struct os_reltime time_now;
722
723 os_memset(&msg, 0, sizeof(msg));
724 if (p2p_parse_ies(ies, ies_len, &msg)) {
725 p2p_dbg(p2p, "Failed to parse P2P IE for a device entry");
726 p2p_parse_free(&msg);
727 return -1;
728 }
729
730 if (msg.p2p_device_addr)
731 p2p_dev_addr = msg.p2p_device_addr;
732 else if (msg.device_id)
733 p2p_dev_addr = msg.device_id;
734 else {
735 p2p_dbg(p2p, "Ignore scan data without P2P Device Info or P2P Device Id");
736 p2p_parse_free(&msg);
737 return -1;
738 }
739
740 if (!is_zero_ether_addr(p2p->peer_filter) &&
741 os_memcmp(p2p_dev_addr, p2p->peer_filter, ETH_ALEN) != 0) {
742 p2p_dbg(p2p, "Do not add peer filter for " MACSTR
743 " due to peer filter", MAC2STR(p2p_dev_addr));
744 p2p_parse_free(&msg);
745 return 0;
746 }
747
748 dev = p2p_create_device(p2p, p2p_dev_addr);
749 if (dev == NULL) {
750 p2p_parse_free(&msg);
751 return -1;
752 }
753
754 if (rx_time == NULL) {
755 os_get_reltime(&time_now);
756 rx_time = &time_now;
757 }
758
759 /*
760 * Update the device entry only if the new peer
761 * entry is newer than the one previously stored, or if
762 * the device was previously seen as a P2P Client in a group
763 * and the new entry isn't older than a threshold.
764 */
765 if (dev->last_seen.sec > 0 &&
766 os_reltime_before(rx_time, &dev->last_seen) &&
767 (!(dev->flags & P2P_DEV_LAST_SEEN_AS_GROUP_CLIENT) ||
768 os_reltime_expired(&dev->last_seen, rx_time,
769 P2P_DEV_GROUP_CLIENT_RESP_THRESHOLD))) {
770 p2p_dbg(p2p,
771 "Do not update peer entry based on old frame (rx_time=%u.%06u last_seen=%u.%06u flags=0x%x)",
772 (unsigned int) rx_time->sec,
773 (unsigned int) rx_time->usec,
774 (unsigned int) dev->last_seen.sec,
775 (unsigned int) dev->last_seen.usec,
776 dev->flags);
777 p2p_parse_free(&msg);
778 return -1;
779 }
780
781 os_memcpy(&dev->last_seen, rx_time, sizeof(struct os_reltime));
782
783 dev->flags &= ~(P2P_DEV_PROBE_REQ_ONLY | P2P_DEV_GROUP_CLIENT_ONLY |
784 P2P_DEV_LAST_SEEN_AS_GROUP_CLIENT);
785
786 if (os_memcmp(addr, p2p_dev_addr, ETH_ALEN) != 0)
787 os_memcpy(dev->interface_addr, addr, ETH_ALEN);
788 if (msg.ssid &&
789 msg.ssid[1] <= sizeof(dev->oper_ssid) &&
790 (msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
791 os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
792 != 0)) {
793 os_memcpy(dev->oper_ssid, msg.ssid + 2, msg.ssid[1]);
794 dev->oper_ssid_len = msg.ssid[1];
795 }
796
797 wpabuf_free(dev->info.p2ps_instance);
798 dev->info.p2ps_instance = NULL;
799 if (msg.adv_service_instance && msg.adv_service_instance_len)
800 dev->info.p2ps_instance = wpabuf_alloc_copy(
801 msg.adv_service_instance, msg.adv_service_instance_len);
802
803 if (freq >= 2412 && freq <= 2484 && msg.ds_params &&
804 *msg.ds_params >= 1 && *msg.ds_params <= 14) {
805 int ds_freq;
806 if (*msg.ds_params == 14)
807 ds_freq = 2484;
808 else
809 ds_freq = 2407 + *msg.ds_params * 5;
810 if (freq != ds_freq) {
811 p2p_dbg(p2p, "Update Listen frequency based on DS Parameter Set IE: %d -> %d MHz",
812 freq, ds_freq);
813 freq = ds_freq;
814 }
815 }
816
817 if (dev->listen_freq && dev->listen_freq != freq && scan_res) {
818 p2p_dbg(p2p, "Update Listen frequency based on scan results ("
819 MACSTR " %d -> %d MHz (DS param %d)",
820 MAC2STR(dev->info.p2p_device_addr), dev->listen_freq,
821 freq, msg.ds_params ? *msg.ds_params : -1);
822 }
823 if (scan_res) {
824 dev->listen_freq = freq;
825 if (msg.group_info)
826 dev->oper_freq = freq;
827 }
828 dev->info.level = level;
829
830 dev_name_changed = os_strncmp(dev->info.device_name, msg.device_name,
831 WPS_DEV_NAME_MAX_LEN) != 0;
832
833 p2p_copy_wps_info(p2p, dev, 0, &msg);
834
835 for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
836 wpabuf_free(dev->info.wps_vendor_ext[i]);
837 dev->info.wps_vendor_ext[i] = NULL;
838 }
839
840 for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
841 if (msg.wps_vendor_ext[i] == NULL)
842 break;
843 dev->info.wps_vendor_ext[i] = wpabuf_alloc_copy(
844 msg.wps_vendor_ext[i], msg.wps_vendor_ext_len[i]);
845 if (dev->info.wps_vendor_ext[i] == NULL)
846 break;
847 }
848
849 wfd_changed = p2p_compare_wfd_info(dev, &msg);
850
851 if (wfd_changed) {
852 wpabuf_free(dev->info.wfd_subelems);
853 if (msg.wfd_subelems)
854 dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
855 else
856 dev->info.wfd_subelems = NULL;
857 }
858
859 if (scan_res) {
860 p2p_add_group_clients(p2p, p2p_dev_addr, addr, freq,
861 msg.group_info, msg.group_info_len,
862 rx_time);
863 }
864
865 p2p_parse_free(&msg);
866
867 p2p_update_peer_vendor_elems(dev, ies, ies_len);
868
869 if (dev->flags & P2P_DEV_REPORTED && !wfd_changed &&
870 !dev_name_changed &&
871 (!msg.adv_service_instance ||
872 (dev->flags & P2P_DEV_P2PS_REPORTED)))
873 return 0;
874
875 p2p_dbg(p2p, "Peer found with Listen frequency %d MHz (rx_time=%u.%06u)",
876 freq, (unsigned int) rx_time->sec,
877 (unsigned int) rx_time->usec);
878 if (dev->flags & P2P_DEV_USER_REJECTED) {
879 p2p_dbg(p2p, "Do not report rejected device");
880 return 0;
881 }
882
883 if (dev->info.config_methods == 0 &&
884 (freq == 2412 || freq == 2437 || freq == 2462)) {
885 /*
886 * If we have only seen a Beacon frame from a GO, we do not yet
887 * know what WPS config methods it supports. Since some
888 * applications use config_methods value from P2P-DEVICE-FOUND
889 * events, postpone reporting this peer until we've fully
890 * discovered its capabilities.
891 *
892 * At least for now, do this only if the peer was detected on
893 * one of the social channels since that peer can be easily be
894 * found again and there are no limitations of having to use
895 * passive scan on this channels, so this can be done through
896 * Probe Response frame that includes the config_methods
897 * information.
898 */
899 p2p_dbg(p2p, "Do not report peer " MACSTR
900 " with unknown config methods", MAC2STR(addr));
901 return 0;
902 }
903
904 p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
905 !(dev->flags & P2P_DEV_REPORTED_ONCE));
906 dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
907
908 if (msg.adv_service_instance)
909 dev->flags |= P2P_DEV_P2PS_REPORTED;
910
911 return 0;
912 }
913
914
p2p_device_free(struct p2p_data * p2p,struct p2p_device * dev)915 static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev)
916 {
917 int i;
918
919 if (p2p->go_neg_peer == dev) {
920 /*
921 * If GO Negotiation is in progress, report that it has failed.
922 */
923 p2p_go_neg_failed(p2p, -1);
924 }
925 if (p2p->invite_peer == dev)
926 p2p->invite_peer = NULL;
927 if (p2p->sd_peer == dev)
928 p2p->sd_peer = NULL;
929 if (p2p->pending_client_disc_go == dev)
930 p2p->pending_client_disc_go = NULL;
931
932 /* dev_lost() device, but only if it was previously dev_found() */
933 if (dev->flags & P2P_DEV_REPORTED_ONCE)
934 p2p->cfg->dev_lost(p2p->cfg->cb_ctx,
935 dev->info.p2p_device_addr);
936
937 for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
938 wpabuf_free(dev->info.wps_vendor_ext[i]);
939 dev->info.wps_vendor_ext[i] = NULL;
940 }
941
942 wpabuf_free(dev->info.wfd_subelems);
943 wpabuf_free(dev->info.vendor_elems);
944 wpabuf_free(dev->go_neg_conf);
945 wpabuf_free(dev->info.p2ps_instance);
946
947 os_free(dev);
948 }
949
950
p2p_get_next_prog_freq(struct p2p_data * p2p)951 static int p2p_get_next_prog_freq(struct p2p_data *p2p)
952 {
953 struct p2p_channels *c;
954 struct p2p_reg_class *cla;
955 size_t cl, ch;
956 int found = 0;
957 u8 reg_class;
958 u8 channel;
959 int freq;
960
961 c = &p2p->cfg->channels;
962 for (cl = 0; cl < c->reg_classes; cl++) {
963 cla = &c->reg_class[cl];
964 if (cla->reg_class != p2p->last_prog_scan_class)
965 continue;
966 for (ch = 0; ch < cla->channels; ch++) {
967 if (cla->channel[ch] == p2p->last_prog_scan_chan) {
968 found = 1;
969 break;
970 }
971 }
972 if (found)
973 break;
974 }
975
976 if (!found) {
977 /* Start from beginning */
978 reg_class = c->reg_class[0].reg_class;
979 channel = c->reg_class[0].channel[0];
980 } else {
981 /* Pick the next channel */
982 ch++;
983 if (ch == cla->channels) {
984 cl++;
985 if (cl == c->reg_classes)
986 cl = 0;
987 ch = 0;
988 }
989 reg_class = c->reg_class[cl].reg_class;
990 channel = c->reg_class[cl].channel[ch];
991 }
992
993 freq = p2p_channel_to_freq(reg_class, channel);
994 p2p_dbg(p2p, "Next progressive search channel: reg_class %u channel %u -> %d MHz",
995 reg_class, channel, freq);
996 p2p->last_prog_scan_class = reg_class;
997 p2p->last_prog_scan_chan = channel;
998
999 if (freq == 2412 || freq == 2437 || freq == 2462)
1000 return 0; /* No need to add social channels */
1001 return freq;
1002 }
1003
1004
p2p_search(struct p2p_data * p2p)1005 static void p2p_search(struct p2p_data *p2p)
1006 {
1007 int freq = 0;
1008 enum p2p_scan_type type;
1009 u16 pw_id = DEV_PW_DEFAULT;
1010 int res;
1011
1012 if (p2p->drv_in_listen) {
1013 p2p_dbg(p2p, "Driver is still in Listen state - wait for it to end before continuing");
1014 return;
1015 }
1016 p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1017
1018 if (p2p->find_pending_full &&
1019 (p2p->find_type == P2P_FIND_PROGRESSIVE ||
1020 p2p->find_type == P2P_FIND_START_WITH_FULL)) {
1021 type = P2P_SCAN_FULL;
1022 p2p_dbg(p2p, "Starting search (pending full scan)");
1023 p2p->find_pending_full = 0;
1024 } else if ((p2p->find_type == P2P_FIND_PROGRESSIVE &&
1025 (freq = p2p_get_next_prog_freq(p2p)) > 0) ||
1026 (p2p->find_type == P2P_FIND_START_WITH_FULL &&
1027 (freq = p2p->find_specified_freq) > 0)) {
1028 type = P2P_SCAN_SOCIAL_PLUS_ONE;
1029 p2p_dbg(p2p, "Starting search (+ freq %u)", freq);
1030 } else {
1031 type = P2P_SCAN_SOCIAL;
1032 p2p_dbg(p2p, "Starting search");
1033 }
1034
1035 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, type, freq,
1036 p2p->num_req_dev_types, p2p->req_dev_types,
1037 p2p->find_dev_id, pw_id);
1038 if (res < 0) {
1039 p2p_dbg(p2p, "Scan request schedule failed");
1040 p2p_continue_find(p2p);
1041 }
1042 }
1043
1044
p2p_find_timeout(void * eloop_ctx,void * timeout_ctx)1045 static void p2p_find_timeout(void *eloop_ctx, void *timeout_ctx)
1046 {
1047 struct p2p_data *p2p = eloop_ctx;
1048 p2p_dbg(p2p, "Find timeout -> stop");
1049 p2p_stop_find(p2p);
1050 }
1051
1052
p2p_notify_scan_trigger_status(struct p2p_data * p2p,int status)1053 void p2p_notify_scan_trigger_status(struct p2p_data *p2p, int status)
1054 {
1055 if (status != 0) {
1056 p2p_dbg(p2p, "Scan request failed");
1057 /* Do continue find even for the first p2p_find_scan */
1058 p2p_continue_find(p2p);
1059 } else {
1060 p2p_dbg(p2p, "Running p2p_scan");
1061 p2p->p2p_scan_running = 1;
1062 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
1063 eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
1064 p2p, NULL);
1065 }
1066 }
1067
1068
p2p_run_after_scan(struct p2p_data * p2p)1069 static int p2p_run_after_scan(struct p2p_data *p2p)
1070 {
1071 struct p2p_device *dev;
1072 enum p2p_after_scan op;
1073
1074 op = p2p->start_after_scan;
1075 p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1076 switch (op) {
1077 case P2P_AFTER_SCAN_NOTHING:
1078 break;
1079 case P2P_AFTER_SCAN_LISTEN:
1080 p2p_dbg(p2p, "Start previously requested Listen state");
1081 p2p_listen(p2p, p2p->pending_listen_sec * 1000 +
1082 p2p->pending_listen_usec / 1000);
1083 return 1;
1084 case P2P_AFTER_SCAN_CONNECT:
1085 p2p_dbg(p2p, "Start previously requested connect with " MACSTR,
1086 MAC2STR(p2p->after_scan_peer));
1087 dev = p2p_get_device(p2p, p2p->after_scan_peer);
1088 if (dev == NULL) {
1089 p2p_dbg(p2p, "Peer not known anymore");
1090 break;
1091 }
1092 p2p_connect_send(p2p, dev);
1093 return 1;
1094 }
1095
1096 return 0;
1097 }
1098
1099
p2p_scan_timeout(void * eloop_ctx,void * timeout_ctx)1100 static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx)
1101 {
1102 struct p2p_data *p2p = eloop_ctx;
1103 int running;
1104 p2p_dbg(p2p, "p2p_scan timeout (running=%d)", p2p->p2p_scan_running);
1105 running = p2p->p2p_scan_running;
1106 /* Make sure we recover from missed scan results callback */
1107 p2p->p2p_scan_running = 0;
1108
1109 if (running)
1110 p2p_run_after_scan(p2p);
1111 }
1112
1113
p2p_free_req_dev_types(struct p2p_data * p2p)1114 static void p2p_free_req_dev_types(struct p2p_data *p2p)
1115 {
1116 p2p->num_req_dev_types = 0;
1117 os_free(p2p->req_dev_types);
1118 p2p->req_dev_types = NULL;
1119 }
1120
1121
p2ps_gen_hash(struct p2p_data * p2p,const char * str,u8 * hash)1122 static int p2ps_gen_hash(struct p2p_data *p2p, const char *str, u8 *hash)
1123 {
1124 u8 buf[SHA256_MAC_LEN];
1125 char str_buf[256];
1126 const u8 *adv_array;
1127 size_t i, adv_len;
1128
1129 if (!str || !hash)
1130 return 0;
1131
1132 if (!str[0]) {
1133 os_memcpy(hash, p2p->wild_card_hash, P2PS_HASH_LEN);
1134 return 1;
1135 }
1136
1137 adv_array = (u8 *) str_buf;
1138 adv_len = os_strlen(str);
1139 if (adv_len >= sizeof(str_buf))
1140 return 0;
1141
1142 for (i = 0; i < adv_len; i++) {
1143 if (str[i] >= 'A' && str[i] <= 'Z')
1144 str_buf[i] = str[i] - 'A' + 'a';
1145 else
1146 str_buf[i] = str[i];
1147 }
1148
1149 if (sha256_vector(1, &adv_array, &adv_len, buf))
1150 return 0;
1151
1152 os_memcpy(hash, buf, P2PS_HASH_LEN);
1153 return 1;
1154 }
1155
1156
p2p_find(struct p2p_data * p2p,unsigned int timeout,enum p2p_discovery_type type,unsigned int num_req_dev_types,const u8 * req_dev_types,const u8 * dev_id,unsigned int search_delay,u8 seek_count,const char ** seek,int freq)1157 int p2p_find(struct p2p_data *p2p, unsigned int timeout,
1158 enum p2p_discovery_type type,
1159 unsigned int num_req_dev_types, const u8 *req_dev_types,
1160 const u8 *dev_id, unsigned int search_delay,
1161 u8 seek_count, const char **seek, int freq)
1162 {
1163 int res;
1164 struct os_reltime start;
1165
1166 p2p_dbg(p2p, "Starting find (type=%d)", type);
1167 if (p2p->p2p_scan_running) {
1168 p2p_dbg(p2p, "p2p_scan is already running");
1169 }
1170
1171 p2p_free_req_dev_types(p2p);
1172 if (req_dev_types && num_req_dev_types) {
1173 p2p->req_dev_types = os_memdup(req_dev_types,
1174 num_req_dev_types *
1175 WPS_DEV_TYPE_LEN);
1176 if (p2p->req_dev_types == NULL)
1177 return -1;
1178 p2p->num_req_dev_types = num_req_dev_types;
1179 }
1180
1181 if (dev_id) {
1182 os_memcpy(p2p->find_dev_id_buf, dev_id, ETH_ALEN);
1183 p2p->find_dev_id = p2p->find_dev_id_buf;
1184 } else
1185 p2p->find_dev_id = NULL;
1186
1187 if (seek_count == 0 || !seek) {
1188 /* Not an ASP search */
1189 p2p->p2ps_seek = 0;
1190 } else if (seek_count == 1 && seek && (!seek[0] || !seek[0][0])) {
1191 /*
1192 * An empty seek string means no hash values, but still an ASP
1193 * search.
1194 */
1195 p2p_dbg(p2p, "ASP search");
1196 p2p->p2ps_seek_count = 0;
1197 p2p->p2ps_seek = 1;
1198 } else if (seek && seek_count <= P2P_MAX_QUERY_HASH) {
1199 u8 buf[P2PS_HASH_LEN];
1200 int i, count = 0;
1201
1202 for (i = 0; i < seek_count; i++) {
1203 if (!p2ps_gen_hash(p2p, seek[i], buf))
1204 continue;
1205
1206 p2p_dbg(p2p, "Seek service %s hash " MACSTR,
1207 seek[i], MAC2STR(buf));
1208 os_memcpy(&p2p->p2ps_seek_hash[count * P2PS_HASH_LEN],
1209 buf, P2PS_HASH_LEN);
1210 count++;
1211 }
1212
1213 p2p->p2ps_seek_count = count;
1214 p2p->p2ps_seek = 1;
1215 } else {
1216 p2p->p2ps_seek_count = 0;
1217 p2p->p2ps_seek = 1;
1218 }
1219
1220 /* Special case to perform wildcard search */
1221 if (p2p->p2ps_seek_count == 0 && p2p->p2ps_seek) {
1222 p2p->p2ps_seek_count = 1;
1223 os_memcpy(&p2p->p2ps_seek_hash, p2p->wild_card_hash,
1224 P2PS_HASH_LEN);
1225 }
1226
1227 p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1228 p2p_clear_timeout(p2p);
1229 if (p2p->pending_listen_freq) {
1230 p2p_dbg(p2p, "Clear pending_listen_freq for p2p_find");
1231 p2p->pending_listen_freq = 0;
1232 }
1233 p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1234 p2p->find_pending_full = 0;
1235 p2p->find_type = type;
1236 if (freq != 2412 && freq != 2437 && freq != 2462 && freq != 60480)
1237 p2p->find_specified_freq = freq;
1238 else
1239 p2p->find_specified_freq = 0;
1240 p2p_device_clear_reported(p2p);
1241 os_memset(p2p->sd_query_no_ack, 0, ETH_ALEN);
1242 p2p_set_state(p2p, P2P_SEARCH);
1243 p2p->search_delay = search_delay;
1244 p2p->in_search_delay = 0;
1245 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1246 p2p->last_p2p_find_timeout = timeout;
1247 if (timeout)
1248 eloop_register_timeout(timeout, 0, p2p_find_timeout,
1249 p2p, NULL);
1250 os_get_reltime(&start);
1251 switch (type) {
1252 case P2P_FIND_START_WITH_FULL:
1253 if (freq > 0) {
1254 /*
1255 * Start with the specified channel and then move to
1256 * scans for social channels and this specific channel.
1257 */
1258 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx,
1259 P2P_SCAN_SPECIFIC, freq,
1260 p2p->num_req_dev_types,
1261 p2p->req_dev_types, dev_id,
1262 DEV_PW_DEFAULT);
1263 break;
1264 }
1265 /* fall through */
1266 case P2P_FIND_PROGRESSIVE:
1267 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_FULL, 0,
1268 p2p->num_req_dev_types,
1269 p2p->req_dev_types, dev_id,
1270 DEV_PW_DEFAULT);
1271 break;
1272 case P2P_FIND_ONLY_SOCIAL:
1273 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_SOCIAL, 0,
1274 p2p->num_req_dev_types,
1275 p2p->req_dev_types, dev_id,
1276 DEV_PW_DEFAULT);
1277 break;
1278 default:
1279 return -1;
1280 }
1281
1282 if (!res)
1283 p2p->find_start = start;
1284
1285 if (res != 0 && p2p->p2p_scan_running) {
1286 p2p_dbg(p2p, "Failed to start p2p_scan - another p2p_scan was already running");
1287 /* wait for the previous p2p_scan to complete */
1288 if (type == P2P_FIND_PROGRESSIVE ||
1289 (type == P2P_FIND_START_WITH_FULL && freq == 0))
1290 p2p->find_pending_full = 1;
1291 res = 0; /* do not report failure */
1292 } else if (res != 0) {
1293 p2p_dbg(p2p, "Failed to start p2p_scan");
1294 p2p_set_state(p2p, P2P_IDLE);
1295 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1296 }
1297
1298 return res;
1299 }
1300
1301
p2p_stop_find_for_freq(struct p2p_data * p2p,int freq)1302 void p2p_stop_find_for_freq(struct p2p_data *p2p, int freq)
1303 {
1304 p2p_dbg(p2p, "Stopping find");
1305 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1306 p2p_clear_timeout(p2p);
1307 if (p2p->state == P2P_SEARCH || p2p->state == P2P_SD_DURING_FIND)
1308 p2p->cfg->find_stopped(p2p->cfg->cb_ctx);
1309
1310 p2p->p2ps_seek_count = 0;
1311
1312 p2p_set_state(p2p, P2P_IDLE);
1313 p2p_free_req_dev_types(p2p);
1314 p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1315 if (p2p->go_neg_peer)
1316 p2p->go_neg_peer->flags &= ~P2P_DEV_PEER_WAITING_RESPONSE;
1317 p2p->go_neg_peer = NULL;
1318 p2p->sd_peer = NULL;
1319 p2p->invite_peer = NULL;
1320 p2p_stop_listen_for_freq(p2p, freq);
1321 p2p->send_action_in_progress = 0;
1322 }
1323
1324
p2p_stop_listen_for_freq(struct p2p_data * p2p,int freq)1325 void p2p_stop_listen_for_freq(struct p2p_data *p2p, int freq)
1326 {
1327 if (freq > 0 && p2p->drv_in_listen == freq && p2p->in_listen) {
1328 p2p_dbg(p2p, "Skip stop_listen since we are on correct channel for response");
1329 return;
1330 }
1331 if (p2p->in_listen) {
1332 p2p->in_listen = 0;
1333 p2p_clear_timeout(p2p);
1334 }
1335 if (p2p->drv_in_listen) {
1336 /*
1337 * The driver may not deliver callback to p2p_listen_end()
1338 * when the operation gets canceled, so clear the internal
1339 * variable that is tracking driver state.
1340 */
1341 p2p_dbg(p2p, "Clear drv_in_listen (%d)", p2p->drv_in_listen);
1342 p2p->drv_in_listen = 0;
1343 }
1344 p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1345 }
1346
1347
p2p_stop_listen(struct p2p_data * p2p)1348 void p2p_stop_listen(struct p2p_data *p2p)
1349 {
1350 if (p2p->state != P2P_LISTEN_ONLY) {
1351 p2p_dbg(p2p, "Skip stop_listen since not in listen_only state.");
1352 return;
1353 }
1354
1355 p2p_stop_listen_for_freq(p2p, 0);
1356 p2p_set_state(p2p, P2P_IDLE);
1357 }
1358
1359
p2p_stop_find(struct p2p_data * p2p)1360 void p2p_stop_find(struct p2p_data *p2p)
1361 {
1362 p2p->pending_listen_freq = 0;
1363 p2p_stop_find_for_freq(p2p, 0);
1364 }
1365
1366
p2p_prepare_channel_pref(struct p2p_data * p2p,unsigned int force_freq,unsigned int pref_freq,int go)1367 static int p2p_prepare_channel_pref(struct p2p_data *p2p,
1368 unsigned int force_freq,
1369 unsigned int pref_freq, int go)
1370 {
1371 u8 op_class, op_channel;
1372 unsigned int freq = force_freq ? force_freq : pref_freq;
1373
1374 p2p_dbg(p2p, "Prepare channel pref - force_freq=%u pref_freq=%u go=%d",
1375 force_freq, pref_freq, go);
1376 if (p2p_freq_to_channel(freq, &op_class, &op_channel) < 0) {
1377 p2p_dbg(p2p, "Unsupported frequency %u MHz", freq);
1378 return -1;
1379 }
1380
1381 if (!p2p_channels_includes(&p2p->cfg->channels, op_class, op_channel) &&
1382 (go || !p2p_channels_includes(&p2p->cfg->cli_channels, op_class,
1383 op_channel))) {
1384 p2p_dbg(p2p, "Frequency %u MHz (oper_class %u channel %u) not allowed for P2P",
1385 freq, op_class, op_channel);
1386 return -1;
1387 }
1388
1389 p2p->op_reg_class = op_class;
1390 p2p->op_channel = op_channel;
1391
1392 if (force_freq) {
1393 p2p->channels.reg_classes = 1;
1394 p2p->channels.reg_class[0].channels = 1;
1395 p2p->channels.reg_class[0].reg_class = p2p->op_reg_class;
1396 p2p->channels.reg_class[0].channel[0] = p2p->op_channel;
1397 } else {
1398 os_memcpy(&p2p->channels, &p2p->cfg->channels,
1399 sizeof(struct p2p_channels));
1400 }
1401
1402 return 0;
1403 }
1404
1405
p2p_prepare_channel_best(struct p2p_data * p2p)1406 static void p2p_prepare_channel_best(struct p2p_data *p2p)
1407 {
1408 u8 op_class, op_channel;
1409 const int op_classes_5ghz[] = { 124, 125, 115, 0 };
1410 const int op_classes_ht40[] = { 126, 127, 116, 117, 0 };
1411 const int op_classes_vht[] = { 128, 0 };
1412 const int op_classes_edmg[] = { 181, 182, 183, 0 };
1413
1414 p2p_dbg(p2p, "Prepare channel best");
1415
1416 if (!p2p->cfg->cfg_op_channel && p2p->best_freq_overall > 0 &&
1417 p2p_supported_freq(p2p, p2p->best_freq_overall) &&
1418 p2p_freq_to_channel(p2p->best_freq_overall, &op_class, &op_channel)
1419 == 0) {
1420 p2p_dbg(p2p, "Select best overall channel as operating channel preference");
1421 p2p->op_reg_class = op_class;
1422 p2p->op_channel = op_channel;
1423 } else if (!p2p->cfg->cfg_op_channel && p2p->best_freq_5 > 0 &&
1424 p2p_supported_freq(p2p, p2p->best_freq_5) &&
1425 p2p_freq_to_channel(p2p->best_freq_5, &op_class, &op_channel)
1426 == 0) {
1427 p2p_dbg(p2p, "Select best 5 GHz channel as operating channel preference");
1428 p2p->op_reg_class = op_class;
1429 p2p->op_channel = op_channel;
1430 } else if (!p2p->cfg->cfg_op_channel && p2p->best_freq_24 > 0 &&
1431 p2p_supported_freq(p2p, p2p->best_freq_24) &&
1432 p2p_freq_to_channel(p2p->best_freq_24, &op_class,
1433 &op_channel) == 0) {
1434 p2p_dbg(p2p, "Select best 2.4 GHz channel as operating channel preference");
1435 p2p->op_reg_class = op_class;
1436 p2p->op_channel = op_channel;
1437 } else if (p2p->cfg->num_pref_chan > 0 &&
1438 p2p_channels_includes(&p2p->cfg->channels,
1439 p2p->cfg->pref_chan[0].op_class,
1440 p2p->cfg->pref_chan[0].chan)) {
1441 p2p_dbg(p2p, "Select first pref_chan entry as operating channel preference");
1442 p2p->op_reg_class = p2p->cfg->pref_chan[0].op_class;
1443 p2p->op_channel = p2p->cfg->pref_chan[0].chan;
1444 } else if (p2p_channel_select(&p2p->cfg->channels, op_classes_edmg,
1445 &p2p->op_reg_class, &p2p->op_channel) ==
1446 0) {
1447 p2p_dbg(p2p, "Select possible EDMG channel (op_class %u channel %u) as operating channel preference",
1448 p2p->op_reg_class, p2p->op_channel);
1449 } else if (p2p_channel_select(&p2p->cfg->channels, op_classes_vht,
1450 &p2p->op_reg_class, &p2p->op_channel) ==
1451 0) {
1452 p2p_dbg(p2p, "Select possible VHT channel (op_class %u channel %u) as operating channel preference",
1453 p2p->op_reg_class, p2p->op_channel);
1454 } else if (p2p_channel_select(&p2p->cfg->channels, op_classes_ht40,
1455 &p2p->op_reg_class, &p2p->op_channel) ==
1456 0) {
1457 p2p_dbg(p2p, "Select possible HT40 channel (op_class %u channel %u) as operating channel preference",
1458 p2p->op_reg_class, p2p->op_channel);
1459 } else if (p2p_channel_select(&p2p->cfg->channels, op_classes_5ghz,
1460 &p2p->op_reg_class, &p2p->op_channel) ==
1461 0) {
1462 p2p_dbg(p2p, "Select possible 5 GHz channel (op_class %u channel %u) as operating channel preference",
1463 p2p->op_reg_class, p2p->op_channel);
1464 } else if (p2p_channels_includes(&p2p->cfg->channels,
1465 p2p->cfg->op_reg_class,
1466 p2p->cfg->op_channel)) {
1467 p2p_dbg(p2p, "Select pre-configured channel as operating channel preference");
1468 p2p->op_reg_class = p2p->cfg->op_reg_class;
1469 p2p->op_channel = p2p->cfg->op_channel;
1470 } else if (p2p_channel_random_social(&p2p->cfg->channels,
1471 &p2p->op_reg_class,
1472 &p2p->op_channel,
1473 NULL, NULL) == 0) {
1474 p2p_dbg(p2p, "Select random available social channel (op_class %u channel %u) as operating channel preference",
1475 p2p->op_reg_class, p2p->op_channel);
1476 } else {
1477 /* Select any random available channel from the first available
1478 * operating class */
1479 p2p_channel_select(&p2p->cfg->channels, NULL,
1480 &p2p->op_reg_class,
1481 &p2p->op_channel);
1482 p2p_dbg(p2p, "Select random available channel %d from operating class %d as operating channel preference",
1483 p2p->op_channel, p2p->op_reg_class);
1484 }
1485
1486 os_memcpy(&p2p->channels, &p2p->cfg->channels,
1487 sizeof(struct p2p_channels));
1488 }
1489
1490
1491 /**
1492 * p2p_prepare_channel - Select operating channel for GO Negotiation or P2PS PD
1493 * @p2p: P2P module context from p2p_init()
1494 * @dev: Selected peer device
1495 * @force_freq: Forced frequency in MHz or 0 if not forced
1496 * @pref_freq: Preferred frequency in MHz or 0 if no preference
1497 * @go: Whether the local end will be forced to be GO
1498 * Returns: 0 on success, -1 on failure (channel not supported for P2P)
1499 *
1500 * This function is used to do initial operating channel selection for GO
1501 * Negotiation prior to having received peer information or for P2PS PD
1502 * signalling. The selected channel may be further optimized in
1503 * p2p_reselect_channel() once the peer information is available.
1504 */
p2p_prepare_channel(struct p2p_data * p2p,struct p2p_device * dev,unsigned int force_freq,unsigned int pref_freq,int go)1505 int p2p_prepare_channel(struct p2p_data *p2p, struct p2p_device *dev,
1506 unsigned int force_freq, unsigned int pref_freq, int go)
1507 {
1508 p2p_dbg(p2p, "Prepare channel - force_freq=%u pref_freq=%u go=%d",
1509 force_freq, pref_freq, go);
1510 if (force_freq || pref_freq) {
1511 if (p2p_prepare_channel_pref(p2p, force_freq, pref_freq, go) <
1512 0)
1513 return -1;
1514 } else {
1515 p2p_prepare_channel_best(p2p);
1516 }
1517 p2p_channels_dump(p2p, "prepared channels", &p2p->channels);
1518 if (go)
1519 p2p_channels_remove_freqs(&p2p->channels, &p2p->no_go_freq);
1520 else if (!force_freq)
1521 p2p_channels_union_inplace(&p2p->channels,
1522 &p2p->cfg->cli_channels);
1523 p2p_channels_dump(p2p, "after go/cli filter/add", &p2p->channels);
1524
1525 p2p_dbg(p2p, "Own preference for operation channel: Operating Class %u Channel %u%s",
1526 p2p->op_reg_class, p2p->op_channel,
1527 force_freq ? " (forced)" : "");
1528
1529 if (force_freq)
1530 dev->flags |= P2P_DEV_FORCE_FREQ;
1531 else
1532 dev->flags &= ~P2P_DEV_FORCE_FREQ;
1533
1534 return 0;
1535 }
1536
1537
p2p_set_dev_persistent(struct p2p_device * dev,int persistent_group)1538 static void p2p_set_dev_persistent(struct p2p_device *dev,
1539 int persistent_group)
1540 {
1541 switch (persistent_group) {
1542 case 0:
1543 dev->flags &= ~(P2P_DEV_PREFER_PERSISTENT_GROUP |
1544 P2P_DEV_PREFER_PERSISTENT_RECONN);
1545 break;
1546 case 1:
1547 dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP;
1548 dev->flags &= ~P2P_DEV_PREFER_PERSISTENT_RECONN;
1549 break;
1550 case 2:
1551 dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP |
1552 P2P_DEV_PREFER_PERSISTENT_RECONN;
1553 break;
1554 }
1555 }
1556
1557
p2p_connect(struct p2p_data * p2p,const u8 * peer_addr,enum p2p_wps_method wps_method,int go_intent,const u8 * own_interface_addr,unsigned int force_freq,int persistent_group,const u8 * force_ssid,size_t force_ssid_len,int pd_before_go_neg,unsigned int pref_freq,u16 oob_pw_id)1558 int p2p_connect(struct p2p_data *p2p, const u8 *peer_addr,
1559 enum p2p_wps_method wps_method,
1560 int go_intent, const u8 *own_interface_addr,
1561 unsigned int force_freq, int persistent_group,
1562 const u8 *force_ssid, size_t force_ssid_len,
1563 int pd_before_go_neg, unsigned int pref_freq, u16 oob_pw_id)
1564 {
1565 struct p2p_device *dev;
1566
1567 p2p_dbg(p2p, "Request to start group negotiation - peer=" MACSTR
1568 " GO Intent=%d Intended Interface Address=" MACSTR
1569 " wps_method=%d persistent_group=%d pd_before_go_neg=%d "
1570 "oob_pw_id=%u",
1571 MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1572 wps_method, persistent_group, pd_before_go_neg, oob_pw_id);
1573
1574 dev = p2p_get_device(p2p, peer_addr);
1575 if (dev == NULL || (dev->flags & P2P_DEV_PROBE_REQ_ONLY)) {
1576 p2p_dbg(p2p, "Cannot connect to unknown P2P Device " MACSTR,
1577 MAC2STR(peer_addr));
1578 return -1;
1579 }
1580
1581 if (p2p_prepare_channel(p2p, dev, force_freq, pref_freq,
1582 go_intent == 15) < 0)
1583 return -1;
1584
1585 if (dev->flags & P2P_DEV_GROUP_CLIENT_ONLY) {
1586 if (!(dev->info.dev_capab &
1587 P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY)) {
1588 p2p_dbg(p2p, "Cannot connect to P2P Device " MACSTR
1589 " that is in a group and is not discoverable",
1590 MAC2STR(peer_addr));
1591 return -1;
1592 }
1593 if (dev->oper_freq <= 0) {
1594 p2p_dbg(p2p, "Cannot connect to P2P Device " MACSTR
1595 " with incomplete information",
1596 MAC2STR(peer_addr));
1597 return -1;
1598 }
1599
1600 /*
1601 * First, try to connect directly. If the peer does not
1602 * acknowledge frames, assume it is sleeping and use device
1603 * discoverability via the GO at that point.
1604 */
1605 }
1606
1607 p2p->ssid_set = 0;
1608 if (force_ssid) {
1609 wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1610 force_ssid, force_ssid_len);
1611 os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1612 p2p->ssid_len = force_ssid_len;
1613 p2p->ssid_set = 1;
1614 }
1615
1616 dev->flags &= ~P2P_DEV_NOT_YET_READY;
1617 dev->flags &= ~P2P_DEV_USER_REJECTED;
1618 dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
1619 dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
1620 if (pd_before_go_neg)
1621 dev->flags |= P2P_DEV_PD_BEFORE_GO_NEG;
1622 else {
1623 dev->flags &= ~P2P_DEV_PD_BEFORE_GO_NEG;
1624 /*
1625 * Assign dialog token and tie breaker here to use the same
1626 * values in each retry within the same GO Negotiation exchange.
1627 */
1628 dev->dialog_token++;
1629 if (dev->dialog_token == 0)
1630 dev->dialog_token = 1;
1631 dev->tie_breaker = p2p->next_tie_breaker;
1632 p2p->next_tie_breaker = !p2p->next_tie_breaker;
1633 }
1634 dev->connect_reqs = 0;
1635 dev->go_neg_req_sent = 0;
1636 dev->go_state = UNKNOWN_GO;
1637 p2p_set_dev_persistent(dev, persistent_group);
1638 p2p->go_intent = go_intent;
1639 os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1640
1641 if (p2p->state != P2P_IDLE)
1642 p2p_stop_find(p2p);
1643
1644 dev->wps_method = wps_method;
1645 dev->oob_pw_id = oob_pw_id;
1646 dev->status = P2P_SC_SUCCESS;
1647
1648 if (p2p->p2p_scan_running) {
1649 p2p_dbg(p2p, "p2p_scan running - delay connect send");
1650 p2p->start_after_scan = P2P_AFTER_SCAN_CONNECT;
1651 os_memcpy(p2p->after_scan_peer, peer_addr, ETH_ALEN);
1652 return 0;
1653 }
1654
1655 return p2p_connect_send(p2p, dev);
1656 }
1657
1658
p2p_authorize(struct p2p_data * p2p,const u8 * peer_addr,enum p2p_wps_method wps_method,int go_intent,const u8 * own_interface_addr,unsigned int force_freq,int persistent_group,const u8 * force_ssid,size_t force_ssid_len,unsigned int pref_freq,u16 oob_pw_id)1659 int p2p_authorize(struct p2p_data *p2p, const u8 *peer_addr,
1660 enum p2p_wps_method wps_method,
1661 int go_intent, const u8 *own_interface_addr,
1662 unsigned int force_freq, int persistent_group,
1663 const u8 *force_ssid, size_t force_ssid_len,
1664 unsigned int pref_freq, u16 oob_pw_id)
1665 {
1666 struct p2p_device *dev;
1667
1668 p2p_dbg(p2p, "Request to authorize group negotiation - peer=" MACSTR
1669 " GO Intent=%d Intended Interface Address=" MACSTR
1670 " wps_method=%d persistent_group=%d oob_pw_id=%u",
1671 MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1672 wps_method, persistent_group, oob_pw_id);
1673
1674 dev = p2p_get_device(p2p, peer_addr);
1675 if (dev == NULL) {
1676 p2p_dbg(p2p, "Cannot authorize unknown P2P Device " MACSTR,
1677 MAC2STR(peer_addr));
1678 return -1;
1679 }
1680
1681 if (p2p_prepare_channel(p2p, dev, force_freq, pref_freq, go_intent ==
1682 15) < 0)
1683 return -1;
1684
1685 p2p->ssid_set = 0;
1686 if (force_ssid) {
1687 wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1688 force_ssid, force_ssid_len);
1689 os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1690 p2p->ssid_len = force_ssid_len;
1691 p2p->ssid_set = 1;
1692 }
1693
1694 dev->flags &= ~P2P_DEV_NOT_YET_READY;
1695 dev->flags &= ~P2P_DEV_USER_REJECTED;
1696 dev->go_neg_req_sent = 0;
1697 dev->go_state = UNKNOWN_GO;
1698 p2p_set_dev_persistent(dev, persistent_group);
1699 p2p->go_intent = go_intent;
1700 os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1701
1702 dev->wps_method = wps_method;
1703 dev->oob_pw_id = oob_pw_id;
1704 dev->status = P2P_SC_SUCCESS;
1705
1706 return 0;
1707 }
1708
1709
p2p_add_dev_info(struct p2p_data * p2p,const u8 * addr,struct p2p_device * dev,struct p2p_message * msg)1710 void p2p_add_dev_info(struct p2p_data *p2p, const u8 *addr,
1711 struct p2p_device *dev, struct p2p_message *msg)
1712 {
1713 os_get_reltime(&dev->last_seen);
1714
1715 p2p_copy_wps_info(p2p, dev, 0, msg);
1716
1717 if (msg->listen_channel) {
1718 int freq;
1719 freq = p2p_channel_to_freq(msg->listen_channel[3],
1720 msg->listen_channel[4]);
1721 if (freq < 0) {
1722 p2p_dbg(p2p, "Unknown peer Listen channel: "
1723 "country=%c%c(0x%02x) reg_class=%u channel=%u",
1724 msg->listen_channel[0],
1725 msg->listen_channel[1],
1726 msg->listen_channel[2],
1727 msg->listen_channel[3],
1728 msg->listen_channel[4]);
1729 } else {
1730 p2p_dbg(p2p, "Update peer " MACSTR
1731 " Listen channel: %u -> %u MHz",
1732 MAC2STR(dev->info.p2p_device_addr),
1733 dev->listen_freq, freq);
1734 dev->listen_freq = freq;
1735 }
1736 }
1737
1738 if (msg->wfd_subelems) {
1739 wpabuf_free(dev->info.wfd_subelems);
1740 dev->info.wfd_subelems = wpabuf_dup(msg->wfd_subelems);
1741 }
1742
1743 if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
1744 dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
1745 p2p_dbg(p2p, "Completed device entry based on data from GO Negotiation Request");
1746 } else {
1747 p2p_dbg(p2p, "Created device entry based on GO Neg Req: "
1748 MACSTR " dev_capab=0x%x group_capab=0x%x name='%s' "
1749 "listen_freq=%d",
1750 MAC2STR(dev->info.p2p_device_addr),
1751 dev->info.dev_capab, dev->info.group_capab,
1752 dev->info.device_name, dev->listen_freq);
1753 }
1754
1755 dev->flags &= ~P2P_DEV_GROUP_CLIENT_ONLY;
1756
1757 if (dev->flags & P2P_DEV_USER_REJECTED) {
1758 p2p_dbg(p2p, "Do not report rejected device");
1759 return;
1760 }
1761
1762 p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
1763 !(dev->flags & P2P_DEV_REPORTED_ONCE));
1764 dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
1765 }
1766
1767
p2p_build_ssid(struct p2p_data * p2p,u8 * ssid,size_t * ssid_len)1768 void p2p_build_ssid(struct p2p_data *p2p, u8 *ssid, size_t *ssid_len)
1769 {
1770 os_memcpy(ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
1771 p2p_random((char *) &ssid[P2P_WILDCARD_SSID_LEN], 2);
1772 os_memcpy(&ssid[P2P_WILDCARD_SSID_LEN + 2],
1773 p2p->cfg->ssid_postfix, p2p->cfg->ssid_postfix_len);
1774 *ssid_len = P2P_WILDCARD_SSID_LEN + 2 + p2p->cfg->ssid_postfix_len;
1775 }
1776
1777
p2p_go_params(struct p2p_data * p2p,struct p2p_go_neg_results * params)1778 int p2p_go_params(struct p2p_data *p2p, struct p2p_go_neg_results *params)
1779 {
1780 if (p2p->ssid_set) {
1781 os_memcpy(params->ssid, p2p->ssid, p2p->ssid_len);
1782 params->ssid_len = p2p->ssid_len;
1783 } else {
1784 p2p_build_ssid(p2p, params->ssid, ¶ms->ssid_len);
1785 }
1786 p2p->ssid_set = 0;
1787
1788 if (p2p->passphrase_set) {
1789 os_memcpy(params->passphrase, p2p->passphrase, os_strlen(p2p->passphrase));
1790 } else {
1791 p2p_random(params->passphrase, p2p->cfg->passphrase_len);
1792 }
1793 p2p->passphrase_set = 0;
1794 return 0;
1795 }
1796
1797
p2p_go_complete(struct p2p_data * p2p,struct p2p_device * peer)1798 void p2p_go_complete(struct p2p_data *p2p, struct p2p_device *peer)
1799 {
1800 struct p2p_go_neg_results res;
1801 int go = peer->go_state == LOCAL_GO;
1802 struct p2p_channels intersection;
1803
1804 p2p_dbg(p2p, "GO Negotiation with " MACSTR " completed (%s will be GO)",
1805 MAC2STR(peer->info.p2p_device_addr), go ? "local end" : "peer");
1806
1807 os_memset(&res, 0, sizeof(res));
1808 res.role_go = go;
1809 os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr, ETH_ALEN);
1810 os_memcpy(res.peer_interface_addr, peer->intended_addr, ETH_ALEN);
1811 res.wps_method = peer->wps_method;
1812 if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
1813 if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
1814 res.persistent_group = 2;
1815 else
1816 res.persistent_group = 1;
1817 }
1818
1819 if (go) {
1820 /* Setup AP mode for WPS provisioning */
1821 res.freq = p2p_channel_to_freq(p2p->op_reg_class,
1822 p2p->op_channel);
1823 os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1824 res.ssid_len = p2p->ssid_len;
1825 p2p_random(res.passphrase, p2p->cfg->passphrase_len);
1826 } else {
1827 res.freq = peer->oper_freq;
1828 if (p2p->ssid_len) {
1829 os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1830 res.ssid_len = p2p->ssid_len;
1831 }
1832 }
1833
1834 p2p_channels_dump(p2p, "own channels", &p2p->channels);
1835 p2p_channels_dump(p2p, "peer channels", &peer->channels);
1836 p2p_channels_intersect(&p2p->channels, &peer->channels,
1837 &intersection);
1838 if (go) {
1839 p2p_channels_remove_freqs(&intersection, &p2p->no_go_freq);
1840 p2p_channels_dump(p2p, "intersection after no-GO removal",
1841 &intersection);
1842 }
1843
1844 p2p_channels_to_freqs(&intersection, res.freq_list,
1845 P2P_MAX_CHANNELS);
1846
1847 res.peer_config_timeout = go ? peer->client_timeout : peer->go_timeout;
1848
1849 p2p_clear_timeout(p2p);
1850 p2p->ssid_set = 0;
1851 peer->go_neg_req_sent = 0;
1852 peer->flags &= ~P2P_DEV_PEER_WAITING_RESPONSE;
1853 peer->wps_method = WPS_NOT_READY;
1854 peer->oob_pw_id = 0;
1855 wpabuf_free(peer->go_neg_conf);
1856 peer->go_neg_conf = NULL;
1857
1858 p2p_set_state(p2p, P2P_PROVISIONING);
1859 p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
1860 }
1861
1862
p2p_rx_p2p_action(struct p2p_data * p2p,const u8 * sa,const u8 * data,size_t len,int rx_freq)1863 static void p2p_rx_p2p_action(struct p2p_data *p2p, const u8 *sa,
1864 const u8 *data, size_t len, int rx_freq)
1865 {
1866 p2p_dbg(p2p, "RX P2P Public Action from " MACSTR, MAC2STR(sa));
1867 wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Public Action contents", data, len);
1868
1869 if (len < 1)
1870 return;
1871
1872 switch (data[0]) {
1873 case P2P_GO_NEG_REQ:
1874 p2p_process_go_neg_req(p2p, sa, data + 1, len - 1, rx_freq);
1875 break;
1876 case P2P_GO_NEG_RESP:
1877 p2p_process_go_neg_resp(p2p, sa, data + 1, len - 1, rx_freq);
1878 break;
1879 case P2P_GO_NEG_CONF:
1880 p2p_process_go_neg_conf(p2p, sa, data + 1, len - 1);
1881 break;
1882 case P2P_INVITATION_REQ:
1883 p2p_process_invitation_req(p2p, sa, data + 1, len - 1,
1884 rx_freq);
1885 break;
1886 case P2P_INVITATION_RESP:
1887 p2p_process_invitation_resp(p2p, sa, data + 1, len - 1);
1888 break;
1889 case P2P_PROV_DISC_REQ:
1890 p2p_process_prov_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1891 break;
1892 case P2P_PROV_DISC_RESP:
1893 p2p_process_prov_disc_resp(p2p, sa, data + 1, len - 1);
1894 break;
1895 case P2P_DEV_DISC_REQ:
1896 p2p_process_dev_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1897 break;
1898 case P2P_DEV_DISC_RESP:
1899 p2p_process_dev_disc_resp(p2p, sa, data + 1, len - 1);
1900 break;
1901 default:
1902 p2p_dbg(p2p, "Unsupported P2P Public Action frame type %d",
1903 data[0]);
1904 break;
1905 }
1906 }
1907
1908
p2p_rx_action_public(struct p2p_data * p2p,const u8 * da,const u8 * sa,const u8 * bssid,const u8 * data,size_t len,int freq)1909 static void p2p_rx_action_public(struct p2p_data *p2p, const u8 *da,
1910 const u8 *sa, const u8 *bssid, const u8 *data,
1911 size_t len, int freq)
1912 {
1913 if (len < 1)
1914 return;
1915
1916 switch (data[0]) {
1917 case WLAN_PA_VENDOR_SPECIFIC:
1918 data++;
1919 len--;
1920 if (len < 4)
1921 return;
1922 if (WPA_GET_BE32(data) != P2P_IE_VENDOR_TYPE)
1923 return;
1924
1925 data += 4;
1926 len -= 4;
1927
1928 p2p_rx_p2p_action(p2p, sa, data, len, freq);
1929 break;
1930 case WLAN_PA_GAS_INITIAL_REQ:
1931 p2p_rx_gas_initial_req(p2p, sa, data + 1, len - 1, freq);
1932 break;
1933 case WLAN_PA_GAS_INITIAL_RESP:
1934 p2p_rx_gas_initial_resp(p2p, sa, data + 1, len - 1, freq);
1935 break;
1936 case WLAN_PA_GAS_COMEBACK_REQ:
1937 p2p_rx_gas_comeback_req(p2p, sa, data + 1, len - 1, freq);
1938 break;
1939 case WLAN_PA_GAS_COMEBACK_RESP:
1940 p2p_rx_gas_comeback_resp(p2p, sa, data + 1, len - 1, freq);
1941 break;
1942 }
1943 }
1944
1945
p2p_rx_action(struct p2p_data * p2p,const u8 * da,const u8 * sa,const u8 * bssid,u8 category,const u8 * data,size_t len,int freq)1946 void p2p_rx_action(struct p2p_data *p2p, const u8 *da, const u8 *sa,
1947 const u8 *bssid, u8 category,
1948 const u8 *data, size_t len, int freq)
1949 {
1950 if (category == WLAN_ACTION_PUBLIC) {
1951 p2p_rx_action_public(p2p, da, sa, bssid, data, len, freq);
1952 return;
1953 }
1954
1955 if (category != WLAN_ACTION_VENDOR_SPECIFIC)
1956 return;
1957
1958 if (len < 4)
1959 return;
1960
1961 if (WPA_GET_BE32(data) != P2P_IE_VENDOR_TYPE)
1962 return;
1963 data += 4;
1964 len -= 4;
1965
1966 /* P2P action frame */
1967 p2p_dbg(p2p, "RX P2P Action from " MACSTR, MAC2STR(sa));
1968 wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Action contents", data, len);
1969
1970 if (len < 1)
1971 return;
1972 switch (data[0]) {
1973 case P2P_NOA:
1974 p2p_dbg(p2p, "Received P2P Action - Notice of Absence");
1975 /* TODO */
1976 break;
1977 case P2P_PRESENCE_REQ:
1978 p2p_process_presence_req(p2p, da, sa, data + 1, len - 1, freq);
1979 break;
1980 case P2P_PRESENCE_RESP:
1981 p2p_process_presence_resp(p2p, da, sa, data + 1, len - 1);
1982 break;
1983 case P2P_GO_DISC_REQ:
1984 p2p_process_go_disc_req(p2p, da, sa, data + 1, len - 1, freq);
1985 break;
1986 default:
1987 p2p_dbg(p2p, "Received P2P Action - unknown type %u", data[0]);
1988 break;
1989 }
1990 }
1991
1992
p2p_go_neg_start(void * eloop_ctx,void * timeout_ctx)1993 static void p2p_go_neg_start(void *eloop_ctx, void *timeout_ctx)
1994 {
1995 struct p2p_data *p2p = eloop_ctx;
1996 if (p2p->go_neg_peer == NULL)
1997 return;
1998 if (p2p->pending_listen_freq) {
1999 p2p_dbg(p2p, "Clear pending_listen_freq for p2p_go_neg_start");
2000 p2p->pending_listen_freq = 0;
2001 }
2002 p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
2003 p2p->go_neg_peer->status = P2P_SC_SUCCESS;
2004 /*
2005 * Set new timeout to make sure a previously set one does not expire
2006 * too quickly while waiting for the GO Negotiation to complete.
2007 */
2008 p2p_set_timeout(p2p, 0, 500000);
2009 p2p_connect_send(p2p, p2p->go_neg_peer);
2010 }
2011
2012
p2p_invite_start(void * eloop_ctx,void * timeout_ctx)2013 static void p2p_invite_start(void *eloop_ctx, void *timeout_ctx)
2014 {
2015 struct p2p_data *p2p = eloop_ctx;
2016 if (p2p->invite_peer == NULL)
2017 return;
2018 if (p2p->pending_listen_freq) {
2019 p2p_dbg(p2p, "Clear pending_listen_freq for p2p_invite_start");
2020 p2p->pending_listen_freq = 0;
2021 }
2022 p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
2023 p2p_invite_send(p2p, p2p->invite_peer, p2p->invite_go_dev_addr,
2024 p2p->invite_dev_pw_id);
2025 }
2026
2027
p2p_add_dev_from_probe_req(struct p2p_data * p2p,const u8 * addr,const u8 * ie,size_t ie_len)2028 static void p2p_add_dev_from_probe_req(struct p2p_data *p2p, const u8 *addr,
2029 const u8 *ie, size_t ie_len)
2030 {
2031 struct p2p_message msg;
2032 struct p2p_device *dev;
2033
2034 os_memset(&msg, 0, sizeof(msg));
2035 if (p2p_parse_ies(ie, ie_len, &msg) < 0 || msg.p2p_attributes == NULL)
2036 {
2037 p2p_parse_free(&msg);
2038 return; /* not a P2P probe */
2039 }
2040
2041 if (msg.ssid == NULL || msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
2042 os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
2043 != 0) {
2044 /* The Probe Request is not part of P2P Device Discovery. It is
2045 * not known whether the source address of the frame is the P2P
2046 * Device Address or P2P Interface Address. Do not add a new
2047 * peer entry based on this frames.
2048 */
2049 p2p_parse_free(&msg);
2050 return;
2051 }
2052
2053 dev = p2p_get_device(p2p, addr);
2054 if (dev) {
2055 if (msg.listen_channel) {
2056 int freq;
2057
2058 if (dev->country[0] == 0)
2059 os_memcpy(dev->country, msg.listen_channel, 3);
2060
2061 freq = p2p_channel_to_freq(msg.listen_channel[3],
2062 msg.listen_channel[4]);
2063
2064 if (freq > 0 && dev->listen_freq != freq) {
2065 p2p_dbg(p2p,
2066 "Updated peer " MACSTR " Listen channel (Probe Request): %d -> %d MHz",
2067 MAC2STR(addr), dev->listen_freq, freq);
2068 dev->listen_freq = freq;
2069 }
2070 }
2071
2072 os_get_reltime(&dev->last_seen);
2073 p2p_parse_free(&msg);
2074 return; /* already known */
2075 }
2076
2077 dev = p2p_create_device(p2p, addr);
2078 if (dev == NULL) {
2079 p2p_parse_free(&msg);
2080 return;
2081 }
2082
2083 os_get_reltime(&dev->last_seen);
2084 dev->flags |= P2P_DEV_PROBE_REQ_ONLY;
2085
2086 if (msg.listen_channel) {
2087 os_memcpy(dev->country, msg.listen_channel, 3);
2088 dev->listen_freq = p2p_channel_to_freq(msg.listen_channel[3],
2089 msg.listen_channel[4]);
2090 }
2091
2092 p2p_copy_wps_info(p2p, dev, 1, &msg);
2093
2094 if (msg.wfd_subelems) {
2095 wpabuf_free(dev->info.wfd_subelems);
2096 dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
2097 }
2098
2099 p2p_parse_free(&msg);
2100
2101 p2p_dbg(p2p, "Created device entry based on Probe Req: " MACSTR
2102 " dev_capab=0x%x group_capab=0x%x name='%s' listen_freq=%d",
2103 MAC2STR(dev->info.p2p_device_addr), dev->info.dev_capab,
2104 dev->info.group_capab, dev->info.device_name,
2105 dev->listen_freq);
2106 }
2107
2108
p2p_add_dev_from_go_neg_req(struct p2p_data * p2p,const u8 * addr,struct p2p_message * msg)2109 struct p2p_device * p2p_add_dev_from_go_neg_req(struct p2p_data *p2p,
2110 const u8 *addr,
2111 struct p2p_message *msg)
2112 {
2113 struct p2p_device *dev;
2114
2115 dev = p2p_get_device(p2p, addr);
2116 if (dev) {
2117 os_get_reltime(&dev->last_seen);
2118 return dev; /* already known */
2119 }
2120
2121 dev = p2p_create_device(p2p, addr);
2122 if (dev == NULL)
2123 return NULL;
2124
2125 p2p_add_dev_info(p2p, addr, dev, msg);
2126
2127 return dev;
2128 }
2129
2130
dev_type_match(const u8 * dev_type,const u8 * req_dev_type)2131 static int dev_type_match(const u8 *dev_type, const u8 *req_dev_type)
2132 {
2133 if (os_memcmp(dev_type, req_dev_type, WPS_DEV_TYPE_LEN) == 0)
2134 return 1;
2135 if (os_memcmp(dev_type, req_dev_type, 2) == 0 &&
2136 WPA_GET_BE32(&req_dev_type[2]) == 0 &&
2137 WPA_GET_BE16(&req_dev_type[6]) == 0)
2138 return 1; /* Category match with wildcard OUI/sub-category */
2139 return 0;
2140 }
2141
2142
dev_type_list_match(const u8 * dev_type,const u8 * req_dev_type[],size_t num_req_dev_type)2143 int dev_type_list_match(const u8 *dev_type, const u8 *req_dev_type[],
2144 size_t num_req_dev_type)
2145 {
2146 size_t i;
2147 for (i = 0; i < num_req_dev_type; i++) {
2148 if (dev_type_match(dev_type, req_dev_type[i]))
2149 return 1;
2150 }
2151 return 0;
2152 }
2153
2154
2155 /**
2156 * p2p_match_dev_type - Match local device type with requested type
2157 * @p2p: P2P module context from p2p_init()
2158 * @wps: WPS TLVs from Probe Request frame (concatenated WPS IEs)
2159 * Returns: 1 on match, 0 on mismatch
2160 *
2161 * This function can be used to match the Requested Device Type attribute in
2162 * WPS IE with the local device types for deciding whether to reply to a Probe
2163 * Request frame.
2164 */
p2p_match_dev_type(struct p2p_data * p2p,struct wpabuf * wps)2165 int p2p_match_dev_type(struct p2p_data *p2p, struct wpabuf *wps)
2166 {
2167 struct wps_parse_attr attr;
2168 size_t i;
2169
2170 if (wps_parse_msg(wps, &attr))
2171 return 1; /* assume no Requested Device Type attributes */
2172
2173 if (attr.num_req_dev_type == 0)
2174 return 1; /* no Requested Device Type attributes -> match */
2175
2176 if (dev_type_list_match(p2p->cfg->pri_dev_type, attr.req_dev_type,
2177 attr.num_req_dev_type))
2178 return 1; /* Own Primary Device Type matches */
2179
2180 for (i = 0; i < p2p->cfg->num_sec_dev_types; i++) {
2181 if (dev_type_list_match(p2p->cfg->sec_dev_type[i],
2182 attr.req_dev_type,
2183 attr.num_req_dev_type))
2184 return 1; /* Own Secondary Device Type matches */
2185 }
2186
2187 /* No matching device type found */
2188 return 0;
2189 }
2190
2191
p2p_build_probe_resp_ies(struct p2p_data * p2p,const u8 * query_hash,u8 query_count)2192 struct wpabuf * p2p_build_probe_resp_ies(struct p2p_data *p2p,
2193 const u8 *query_hash,
2194 u8 query_count)
2195 {
2196 struct wpabuf *buf;
2197 u8 *len;
2198 int pw_id = -1;
2199 size_t extra = 0;
2200
2201 #ifdef CONFIG_WIFI_DISPLAY
2202 if (p2p->wfd_ie_probe_resp)
2203 extra = wpabuf_len(p2p->wfd_ie_probe_resp);
2204 #endif /* CONFIG_WIFI_DISPLAY */
2205
2206 if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_PROBE_RESP_P2P])
2207 extra += wpabuf_len(p2p->vendor_elem[VENDOR_ELEM_PROBE_RESP_P2P]);
2208
2209 if (query_count)
2210 extra += MAX_SVC_ADV_IE_LEN;
2211
2212 buf = wpabuf_alloc(1000 + extra);
2213 if (buf == NULL)
2214 return NULL;
2215
2216 if (p2p->go_neg_peer) {
2217 /* Advertise immediate availability of WPS credential */
2218 pw_id = p2p_wps_method_pw_id(p2p->go_neg_peer->wps_method);
2219 }
2220
2221 if (p2p_build_wps_ie(p2p, buf, pw_id, 1) < 0) {
2222 p2p_dbg(p2p, "Failed to build WPS IE for Probe Response");
2223 wpabuf_free(buf);
2224 return NULL;
2225 }
2226
2227 #ifdef CONFIG_WIFI_DISPLAY
2228 if (p2p->wfd_ie_probe_resp)
2229 wpabuf_put_buf(buf, p2p->wfd_ie_probe_resp);
2230 #endif /* CONFIG_WIFI_DISPLAY */
2231
2232 if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_PROBE_RESP_P2P])
2233 wpabuf_put_buf(buf,
2234 p2p->vendor_elem[VENDOR_ELEM_PROBE_RESP_P2P]);
2235
2236 /* P2P IE */
2237 len = p2p_buf_add_ie_hdr(buf);
2238 p2p_buf_add_capability(buf, p2p->dev_capab &
2239 ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
2240 if (p2p->ext_listen_interval)
2241 p2p_buf_add_ext_listen_timing(buf, p2p->ext_listen_period,
2242 p2p->ext_listen_interval);
2243 p2p_buf_add_device_info(buf, p2p, NULL);
2244 p2p_buf_update_ie_hdr(buf, len);
2245
2246 if (query_count) {
2247 p2p_buf_add_service_instance(buf, p2p, query_count, query_hash,
2248 p2p->p2ps_adv_list);
2249 }
2250
2251 return buf;
2252 }
2253
p2p_build_probe_resp_buf(struct p2p_data * p2p,struct wpabuf * buf,struct wpabuf * ies,const u8 * addr,int rx_freq)2254 static int p2p_build_probe_resp_buf(struct p2p_data *p2p, struct wpabuf *buf,
2255 struct wpabuf *ies,
2256 const u8 *addr, int rx_freq)
2257 {
2258 struct ieee80211_mgmt *resp;
2259 u8 channel, op_class;
2260
2261 resp = wpabuf_put(buf, offsetof(struct ieee80211_mgmt,
2262 u.probe_resp.variable));
2263
2264 resp->frame_control = host_to_le16((WLAN_FC_TYPE_MGMT << 2) |
2265 (WLAN_FC_STYPE_PROBE_RESP << 4));
2266 os_memcpy(resp->da, addr, ETH_ALEN);
2267 os_memcpy(resp->sa, p2p->cfg->dev_addr, ETH_ALEN);
2268 os_memcpy(resp->bssid, p2p->cfg->dev_addr, ETH_ALEN);
2269 resp->u.probe_resp.beacon_int = host_to_le16(100);
2270 /* hardware or low-level driver will setup seq_ctrl and timestamp */
2271 resp->u.probe_resp.capab_info =
2272 host_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE |
2273 WLAN_CAPABILITY_PRIVACY |
2274 WLAN_CAPABILITY_SHORT_SLOT_TIME);
2275
2276 wpabuf_put_u8(buf, WLAN_EID_SSID);
2277 wpabuf_put_u8(buf, P2P_WILDCARD_SSID_LEN);
2278 wpabuf_put_data(buf, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
2279
2280 wpabuf_put_u8(buf, WLAN_EID_SUPP_RATES);
2281 wpabuf_put_u8(buf, 8);
2282 wpabuf_put_u8(buf, (60 / 5) | 0x80);
2283 wpabuf_put_u8(buf, 90 / 5);
2284 wpabuf_put_u8(buf, (120 / 5) | 0x80);
2285 wpabuf_put_u8(buf, 180 / 5);
2286 wpabuf_put_u8(buf, (240 / 5) | 0x80);
2287 wpabuf_put_u8(buf, 360 / 5);
2288 wpabuf_put_u8(buf, 480 / 5);
2289 wpabuf_put_u8(buf, 540 / 5);
2290
2291 if (!rx_freq) {
2292 channel = p2p->cfg->channel;
2293 } else if (p2p_freq_to_channel(rx_freq, &op_class, &channel)) {
2294 p2p_err(p2p, "Failed to convert freq to channel");
2295 return -1;
2296 }
2297
2298 wpabuf_put_u8(buf, WLAN_EID_DS_PARAMS);
2299 wpabuf_put_u8(buf, 1);
2300 wpabuf_put_u8(buf, channel);
2301
2302 wpabuf_put_buf(buf, ies);
2303
2304 return 0;
2305 }
2306
p2p_service_find_asp(struct p2p_data * p2p,const u8 * hash)2307 static int p2p_service_find_asp(struct p2p_data *p2p, const u8 *hash)
2308 {
2309 struct p2ps_advertisement *adv_data;
2310 int any_wfa;
2311
2312 p2p_dbg(p2p, "ASP find - ASP list: %p", p2p->p2ps_adv_list);
2313
2314 /* Wildcard org.wi-fi.wfds matches any WFA spec defined service */
2315 any_wfa = os_memcmp(hash, p2p->wild_card_hash, P2PS_HASH_LEN) == 0;
2316
2317 adv_data = p2p->p2ps_adv_list;
2318 while (adv_data) {
2319 if (os_memcmp(hash, adv_data->hash, P2PS_HASH_LEN) == 0)
2320 return 1; /* exact hash match */
2321 if (any_wfa &&
2322 os_strncmp(adv_data->svc_name, P2PS_WILD_HASH_STR,
2323 os_strlen(P2PS_WILD_HASH_STR)) == 0)
2324 return 1; /* WFA service match */
2325 adv_data = adv_data->next;
2326 }
2327
2328 return 0;
2329 }
2330
2331
2332 static enum p2p_probe_req_status
p2p_reply_probe(struct p2p_data * p2p,const u8 * addr,const u8 * dst,const u8 * bssid,const u8 * ie,size_t ie_len,unsigned int rx_freq)2333 p2p_reply_probe(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
2334 const u8 *bssid, const u8 *ie, size_t ie_len,
2335 unsigned int rx_freq)
2336 {
2337 struct ieee802_11_elems elems;
2338 struct wpabuf *buf;
2339 struct p2p_message msg;
2340 struct wpabuf *ies;
2341
2342 if (ieee802_11_parse_elems((u8 *) ie, ie_len, &elems, 0) ==
2343 ParseFailed) {
2344 /* Ignore invalid Probe Request frames */
2345 p2p_dbg(p2p, "Could not parse Probe Request frame - ignore it");
2346 return P2P_PREQ_MALFORMED;
2347 }
2348
2349 if (elems.p2p == NULL) {
2350 /* not a P2P probe - ignore it */
2351 p2p_dbg(p2p, "Not a P2P probe - ignore it");
2352 return P2P_PREQ_NOT_P2P;
2353 }
2354
2355 if (dst && !is_broadcast_ether_addr(dst) &&
2356 os_memcmp(dst, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
2357 /* Not sent to the broadcast address or our P2P Device Address
2358 */
2359 p2p_dbg(p2p, "Probe Req DA " MACSTR " not ours - ignore it",
2360 MAC2STR(dst));
2361 return P2P_PREQ_NOT_PROCESSED;
2362 }
2363
2364 if (bssid && !is_broadcast_ether_addr(bssid)) {
2365 /* Not sent to the Wildcard BSSID */
2366 p2p_dbg(p2p, "Probe Req BSSID " MACSTR " not wildcard - ignore it",
2367 MAC2STR(bssid));
2368 return P2P_PREQ_NOT_PROCESSED;
2369 }
2370
2371 if (elems.ssid == NULL || elems.ssid_len != P2P_WILDCARD_SSID_LEN ||
2372 os_memcmp(elems.ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) !=
2373 0) {
2374 /* not using P2P Wildcard SSID - ignore */
2375 p2p_dbg(p2p, "Probe Req not using P2P Wildcard SSID - ignore it");
2376 return P2P_PREQ_NOT_PROCESSED;
2377 }
2378
2379 if (supp_rates_11b_only(&elems)) {
2380 /* Indicates support for 11b rates only */
2381 p2p_dbg(p2p, "Probe Req with 11b rates only supported - ignore it");
2382 return P2P_PREQ_NOT_P2P;
2383 }
2384
2385 os_memset(&msg, 0, sizeof(msg));
2386 if (p2p_parse_ies(ie, ie_len, &msg) < 0) {
2387 /* Could not parse P2P attributes */
2388 p2p_dbg(p2p, "Could not parse P2P attributes in Probe Req - ignore it");
2389 return P2P_PREQ_NOT_P2P;
2390 }
2391
2392 if (msg.service_hash && msg.service_hash_count) {
2393 const u8 *hash = msg.service_hash;
2394 u8 i;
2395 int p2ps_svc_found = 0;
2396
2397 p2p_dbg(p2p, "in_listen=%d drv_in_listen=%d when received P2PS Probe Request at %u MHz; own Listen channel %u, pending listen freq %u MHz",
2398 p2p->in_listen, p2p->drv_in_listen, rx_freq,
2399 p2p->cfg->channel, p2p->pending_listen_freq);
2400
2401 if (!p2p->in_listen && !p2p->drv_in_listen &&
2402 p2p->pending_listen_freq && rx_freq &&
2403 rx_freq != p2p->pending_listen_freq) {
2404 p2p_dbg(p2p, "Do not reply to Probe Request frame that was received on %u MHz while waiting to start Listen state on %u MHz",
2405 rx_freq, p2p->pending_listen_freq);
2406 p2p_parse_free(&msg);
2407 return P2P_PREQ_NOT_LISTEN;
2408 }
2409
2410 for (i = 0; i < msg.service_hash_count; i++) {
2411 if (p2p_service_find_asp(p2p, hash)) {
2412 p2p_dbg(p2p, "Service Hash match found: "
2413 MACSTR, MAC2STR(hash));
2414 p2ps_svc_found = 1;
2415 break;
2416 }
2417 hash += P2PS_HASH_LEN;
2418 }
2419
2420 /* Probed hash unknown */
2421 if (!p2ps_svc_found) {
2422 p2p_dbg(p2p, "No Service Hash match found");
2423 p2p_parse_free(&msg);
2424 return P2P_PREQ_NOT_PROCESSED;
2425 }
2426 } else {
2427 /* This is not a P2PS Probe Request */
2428 p2p_dbg(p2p, "No P2PS Hash in Probe Request");
2429
2430 if (!p2p->in_listen || !p2p->drv_in_listen) {
2431 /* not in Listen state - ignore Probe Request */
2432 p2p_dbg(p2p, "Not in Listen state (in_listen=%d drv_in_listen=%d) - ignore Probe Request",
2433 p2p->in_listen, p2p->drv_in_listen);
2434 p2p_parse_free(&msg);
2435 return P2P_PREQ_NOT_LISTEN;
2436 }
2437 }
2438
2439 if (msg.device_id &&
2440 os_memcmp(msg.device_id, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
2441 /* Device ID did not match */
2442 p2p_dbg(p2p, "Probe Req requested Device ID " MACSTR " did not match - ignore it",
2443 MAC2STR(msg.device_id));
2444 p2p_parse_free(&msg);
2445 return P2P_PREQ_NOT_PROCESSED;
2446 }
2447
2448 /* Check Requested Device Type match */
2449 if (msg.wps_attributes &&
2450 !p2p_match_dev_type(p2p, msg.wps_attributes)) {
2451 /* No match with Requested Device Type */
2452 p2p_dbg(p2p, "Probe Req requested Device Type did not match - ignore it");
2453 p2p_parse_free(&msg);
2454 return P2P_PREQ_NOT_PROCESSED;
2455 }
2456
2457 if (!p2p->cfg->send_probe_resp) {
2458 /* Response generated elsewhere */
2459 p2p_dbg(p2p, "Probe Resp generated elsewhere - do not generate additional response");
2460 p2p_parse_free(&msg);
2461 return P2P_PREQ_NOT_PROCESSED;
2462 }
2463
2464 p2p_dbg(p2p, "Reply to P2P Probe Request in Listen state");
2465
2466 /*
2467 * We do not really have a specific BSS that this frame is advertising,
2468 * so build a frame that has some information in valid format. This is
2469 * really only used for discovery purposes, not to learn exact BSS
2470 * parameters.
2471 */
2472 ies = p2p_build_probe_resp_ies(p2p, msg.service_hash,
2473 msg.service_hash_count);
2474 p2p_parse_free(&msg);
2475 if (ies == NULL)
2476 return P2P_PREQ_NOT_PROCESSED;
2477
2478 buf = wpabuf_alloc(200 + wpabuf_len(ies));
2479 if (buf == NULL) {
2480 wpabuf_free(ies);
2481 return P2P_PREQ_NOT_PROCESSED;
2482 }
2483
2484 if (p2p_build_probe_resp_buf(p2p, buf, ies, addr, rx_freq)) {
2485 wpabuf_free(ies);
2486 wpabuf_free(buf);
2487 return P2P_PREQ_NOT_PROCESSED;
2488 }
2489
2490 wpabuf_free(ies);
2491
2492 p2p->cfg->send_probe_resp(p2p->cfg->cb_ctx, buf, rx_freq);
2493
2494 wpabuf_free(buf);
2495
2496 return P2P_PREQ_PROCESSED;
2497 }
2498
2499
2500 enum p2p_probe_req_status
p2p_probe_req_rx(struct p2p_data * p2p,const u8 * addr,const u8 * dst,const u8 * bssid,const u8 * ie,size_t ie_len,unsigned int rx_freq,int p2p_lo_started)2501 p2p_probe_req_rx(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
2502 const u8 *bssid, const u8 *ie, size_t ie_len,
2503 unsigned int rx_freq, int p2p_lo_started)
2504 {
2505 enum p2p_probe_req_status res;
2506
2507 p2p_add_dev_from_probe_req(p2p, addr, ie, ie_len);
2508
2509 if (p2p_lo_started) {
2510 p2p_dbg(p2p,
2511 "Probe Response is offloaded, do not reply Probe Request");
2512 return P2P_PREQ_PROCESSED;
2513 }
2514
2515 res = p2p_reply_probe(p2p, addr, dst, bssid, ie, ie_len, rx_freq);
2516 if (res != P2P_PREQ_PROCESSED && res != P2P_PREQ_NOT_PROCESSED)
2517 return res;
2518
2519 /*
2520 * Activate a pending GO Negotiation/Invite flow if a received Probe
2521 * Request frame is from an expected peer. Some devices may share the
2522 * same address for P2P and non-P2P STA running simultaneously. The
2523 * P2P_PREQ_PROCESSED and P2P_PREQ_NOT_PROCESSED p2p_reply_probe()
2524 * return values verified above ensure we are handling a Probe Request
2525 * frame from a P2P peer.
2526 */
2527 if ((p2p->state == P2P_CONNECT || p2p->state == P2P_CONNECT_LISTEN) &&
2528 p2p->go_neg_peer &&
2529 os_memcmp(addr, p2p->go_neg_peer->info.p2p_device_addr, ETH_ALEN)
2530 == 0 &&
2531 !(p2p->go_neg_peer->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM)) {
2532 /* Received a Probe Request from GO Negotiation peer */
2533 p2p_dbg(p2p, "Found GO Negotiation peer - try to start GO negotiation from timeout");
2534 eloop_cancel_timeout(p2p_go_neg_start, p2p, NULL);
2535 eloop_register_timeout(0, 0, p2p_go_neg_start, p2p, NULL);
2536 return res;
2537 }
2538
2539 if ((p2p->state == P2P_INVITE || p2p->state == P2P_INVITE_LISTEN) &&
2540 p2p->invite_peer &&
2541 (p2p->invite_peer->flags & P2P_DEV_WAIT_INV_REQ_ACK) &&
2542 os_memcmp(addr, p2p->invite_peer->info.p2p_device_addr, ETH_ALEN)
2543 == 0) {
2544 /* Received a Probe Request from Invite peer */
2545 p2p_dbg(p2p, "Found Invite peer - try to start Invite from timeout");
2546 eloop_cancel_timeout(p2p_invite_start, p2p, NULL);
2547 eloop_register_timeout(0, 0, p2p_invite_start, p2p, NULL);
2548 return res;
2549 }
2550
2551 return res;
2552 }
2553
2554
p2p_assoc_req_ie_wlan_ap(struct p2p_data * p2p,const u8 * bssid,u8 * buf,size_t len,struct wpabuf * p2p_ie)2555 static int p2p_assoc_req_ie_wlan_ap(struct p2p_data *p2p, const u8 *bssid,
2556 u8 *buf, size_t len, struct wpabuf *p2p_ie)
2557 {
2558 struct wpabuf *tmp;
2559 u8 *lpos;
2560 size_t tmplen;
2561 int res;
2562 u8 group_capab;
2563 struct p2p_message msg;
2564
2565 if (p2p_ie == NULL)
2566 return 0; /* WLAN AP is not a P2P manager */
2567
2568 os_memset(&msg, 0, sizeof(msg));
2569 if (p2p_parse_p2p_ie(p2p_ie, &msg) < 0)
2570 return 0;
2571
2572 p2p_dbg(p2p, "BSS P2P manageability %s",
2573 msg.manageability ? "enabled" : "disabled");
2574
2575 if (!msg.manageability)
2576 return 0;
2577
2578 /*
2579 * (Re)Association Request - P2P IE
2580 * P2P Capability attribute (shall be present)
2581 * P2P Interface attribute (present if concurrent device and
2582 * P2P Management is enabled)
2583 */
2584 tmp = wpabuf_alloc(200);
2585 if (tmp == NULL)
2586 return -1;
2587
2588 lpos = p2p_buf_add_ie_hdr(tmp);
2589 group_capab = 0;
2590 if (p2p->num_groups > 0) {
2591 group_capab |= P2P_GROUP_CAPAB_GROUP_OWNER;
2592 if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2593 (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED) &&
2594 p2p->cross_connect)
2595 group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
2596 }
2597 p2p_buf_add_capability(tmp, p2p->dev_capab, group_capab);
2598 if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2599 (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED))
2600 p2p_buf_add_p2p_interface(tmp, p2p);
2601 p2p_buf_update_ie_hdr(tmp, lpos);
2602
2603 tmplen = wpabuf_len(tmp);
2604 if (tmplen > len)
2605 res = -1;
2606 else {
2607 os_memcpy(buf, wpabuf_head(tmp), tmplen);
2608 res = tmplen;
2609 }
2610 wpabuf_free(tmp);
2611
2612 return res;
2613 }
2614
2615
p2p_assoc_req_ie(struct p2p_data * p2p,const u8 * bssid,u8 * buf,size_t len,int p2p_group,struct wpabuf * p2p_ie)2616 int p2p_assoc_req_ie(struct p2p_data *p2p, const u8 *bssid, u8 *buf,
2617 size_t len, int p2p_group, struct wpabuf *p2p_ie)
2618 {
2619 struct wpabuf *tmp;
2620 u8 *lpos;
2621 struct p2p_device *peer;
2622 size_t tmplen;
2623 int res;
2624 size_t extra = 0;
2625
2626 if (!p2p_group)
2627 return p2p_assoc_req_ie_wlan_ap(p2p, bssid, buf, len, p2p_ie);
2628
2629 #ifdef CONFIG_WIFI_DISPLAY
2630 if (p2p->wfd_ie_assoc_req)
2631 extra = wpabuf_len(p2p->wfd_ie_assoc_req);
2632 #endif /* CONFIG_WIFI_DISPLAY */
2633
2634 if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_ASSOC_REQ])
2635 extra += wpabuf_len(p2p->vendor_elem[VENDOR_ELEM_P2P_ASSOC_REQ]);
2636
2637 /*
2638 * (Re)Association Request - P2P IE
2639 * P2P Capability attribute (shall be present)
2640 * Extended Listen Timing (may be present)
2641 * P2P Device Info attribute (shall be present)
2642 */
2643 tmp = wpabuf_alloc(200 + extra);
2644 if (tmp == NULL)
2645 return -1;
2646
2647 #ifdef CONFIG_WIFI_DISPLAY
2648 if (p2p->wfd_ie_assoc_req)
2649 wpabuf_put_buf(tmp, p2p->wfd_ie_assoc_req);
2650 #endif /* CONFIG_WIFI_DISPLAY */
2651
2652 if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_ASSOC_REQ])
2653 wpabuf_put_buf(tmp,
2654 p2p->vendor_elem[VENDOR_ELEM_P2P_ASSOC_REQ]);
2655
2656 peer = bssid ? p2p_get_device(p2p, bssid) : NULL;
2657
2658 lpos = p2p_buf_add_ie_hdr(tmp);
2659 p2p_buf_add_capability(tmp, p2p->dev_capab, 0);
2660 if (p2p->ext_listen_interval)
2661 p2p_buf_add_ext_listen_timing(tmp, p2p->ext_listen_period,
2662 p2p->ext_listen_interval);
2663 p2p_buf_add_device_info(tmp, p2p, peer);
2664 p2p_buf_update_ie_hdr(tmp, lpos);
2665
2666 tmplen = wpabuf_len(tmp);
2667 if (tmplen > len)
2668 res = -1;
2669 else {
2670 os_memcpy(buf, wpabuf_head(tmp), tmplen);
2671 res = tmplen;
2672 }
2673 wpabuf_free(tmp);
2674
2675 return res;
2676 }
2677
2678
p2p_scan_result_text(const u8 * ies,size_t ies_len,char * buf,char * end)2679 int p2p_scan_result_text(const u8 *ies, size_t ies_len, char *buf, char *end)
2680 {
2681 struct wpabuf *p2p_ie;
2682 int ret;
2683
2684 p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len, P2P_IE_VENDOR_TYPE);
2685 if (p2p_ie == NULL)
2686 return 0;
2687
2688 ret = p2p_attr_text(p2p_ie, buf, end);
2689 wpabuf_free(p2p_ie);
2690 return ret;
2691 }
2692
2693
2694 struct p2ps_advertisement *
p2p_service_p2ps_id(struct p2p_data * p2p,u32 adv_id)2695 p2p_service_p2ps_id(struct p2p_data *p2p, u32 adv_id)
2696 {
2697 struct p2ps_advertisement *adv_data;
2698
2699 if (!p2p)
2700 return NULL;
2701
2702 adv_data = p2p->p2ps_adv_list;
2703 while (adv_data) {
2704 if (adv_data->id == adv_id)
2705 return adv_data;
2706 adv_data = adv_data->next;
2707 }
2708
2709 return NULL;
2710 }
2711
2712
p2p_service_del_asp(struct p2p_data * p2p,u32 adv_id)2713 int p2p_service_del_asp(struct p2p_data *p2p, u32 adv_id)
2714 {
2715 struct p2ps_advertisement *adv_data;
2716 struct p2ps_advertisement **prior;
2717
2718 if (!p2p)
2719 return -1;
2720
2721 adv_data = p2p->p2ps_adv_list;
2722 prior = &p2p->p2ps_adv_list;
2723 while (adv_data) {
2724 if (adv_data->id == adv_id) {
2725 p2p_dbg(p2p, "Delete ASP adv_id=0x%x", adv_id);
2726 *prior = adv_data->next;
2727 os_free(adv_data);
2728 return 0;
2729 }
2730 prior = &adv_data->next;
2731 adv_data = adv_data->next;
2732 }
2733
2734 return -1;
2735 }
2736
2737
p2p_service_add_asp(struct p2p_data * p2p,int auto_accept,u32 adv_id,const char * adv_str,u8 svc_state,u16 config_methods,const char * svc_info,const u8 * cpt_priority)2738 int p2p_service_add_asp(struct p2p_data *p2p, int auto_accept, u32 adv_id,
2739 const char *adv_str, u8 svc_state, u16 config_methods,
2740 const char *svc_info, const u8 *cpt_priority)
2741 {
2742 struct p2ps_advertisement *adv_data, *tmp, **prev;
2743 u8 buf[P2PS_HASH_LEN];
2744 size_t adv_data_len, adv_len, info_len = 0;
2745 int i;
2746
2747 if (!p2p || !adv_str || !adv_str[0] || !cpt_priority)
2748 return -1;
2749
2750 if (!(config_methods & p2p->cfg->config_methods)) {
2751 p2p_dbg(p2p, "Config methods not supported svc: 0x%x dev: 0x%x",
2752 config_methods, p2p->cfg->config_methods);
2753 return -1;
2754 }
2755
2756 if (!p2ps_gen_hash(p2p, adv_str, buf))
2757 return -1;
2758
2759 if (svc_info)
2760 info_len = os_strlen(svc_info);
2761 adv_len = os_strlen(adv_str);
2762 adv_data_len = sizeof(struct p2ps_advertisement) + adv_len + 1 +
2763 info_len + 1;
2764
2765 adv_data = os_zalloc(adv_data_len);
2766 if (!adv_data)
2767 return -1;
2768
2769 os_memcpy(adv_data->hash, buf, P2PS_HASH_LEN);
2770 adv_data->id = adv_id;
2771 adv_data->state = svc_state;
2772 adv_data->config_methods = config_methods & p2p->cfg->config_methods;
2773 adv_data->auto_accept = (u8) auto_accept;
2774 os_memcpy(adv_data->svc_name, adv_str, adv_len);
2775
2776 for (i = 0; cpt_priority[i] && i < P2PS_FEATURE_CAPAB_CPT_MAX; i++) {
2777 adv_data->cpt_priority[i] = cpt_priority[i];
2778 adv_data->cpt_mask |= cpt_priority[i];
2779 }
2780
2781 if (svc_info && info_len) {
2782 adv_data->svc_info = &adv_data->svc_name[adv_len + 1];
2783 os_memcpy(adv_data->svc_info, svc_info, info_len);
2784 }
2785
2786 /*
2787 * Group Advertisements by service string. They do not need to be
2788 * sorted, but groups allow easier Probe Response instance grouping
2789 */
2790 tmp = p2p->p2ps_adv_list;
2791 prev = &p2p->p2ps_adv_list;
2792 while (tmp) {
2793 if (tmp->id == adv_data->id) {
2794 if (os_strcmp(tmp->svc_name, adv_data->svc_name) != 0) {
2795 os_free(adv_data);
2796 return -1;
2797 }
2798 adv_data->next = tmp->next;
2799 *prev = adv_data;
2800 os_free(tmp);
2801 goto inserted;
2802 } else {
2803 if (os_strcmp(tmp->svc_name, adv_data->svc_name) == 0) {
2804 adv_data->next = tmp->next;
2805 tmp->next = adv_data;
2806 goto inserted;
2807 }
2808 }
2809 prev = &tmp->next;
2810 tmp = tmp->next;
2811 }
2812
2813 /* No svc_name match found */
2814 adv_data->next = p2p->p2ps_adv_list;
2815 p2p->p2ps_adv_list = adv_data;
2816
2817 inserted:
2818 p2p_dbg(p2p,
2819 "Added ASP advertisement adv_id=0x%x config_methods=0x%x svc_state=0x%x adv_str='%s' cpt_mask=0x%x",
2820 adv_id, adv_data->config_methods, svc_state, adv_str,
2821 adv_data->cpt_mask);
2822
2823 return 0;
2824 }
2825
2826
p2p_service_flush_asp(struct p2p_data * p2p)2827 void p2p_service_flush_asp(struct p2p_data *p2p)
2828 {
2829 struct p2ps_advertisement *adv, *prev;
2830
2831 if (!p2p)
2832 return;
2833
2834 adv = p2p->p2ps_adv_list;
2835 while (adv) {
2836 prev = adv;
2837 adv = adv->next;
2838 os_free(prev);
2839 }
2840
2841 p2p->p2ps_adv_list = NULL;
2842 p2ps_prov_free(p2p);
2843 p2p_dbg(p2p, "All ASP advertisements flushed");
2844 }
2845
2846
p2p_parse_dev_addr_in_p2p_ie(struct wpabuf * p2p_ie,u8 * dev_addr)2847 int p2p_parse_dev_addr_in_p2p_ie(struct wpabuf *p2p_ie, u8 *dev_addr)
2848 {
2849 struct p2p_message msg;
2850
2851 os_memset(&msg, 0, sizeof(msg));
2852 if (p2p_parse_p2p_ie(p2p_ie, &msg))
2853 return -1;
2854
2855 if (msg.p2p_device_addr) {
2856 os_memcpy(dev_addr, msg.p2p_device_addr, ETH_ALEN);
2857 return 0;
2858 } else if (msg.device_id) {
2859 os_memcpy(dev_addr, msg.device_id, ETH_ALEN);
2860 return 0;
2861 }
2862 return -1;
2863 }
2864
2865
p2p_parse_dev_addr(const u8 * ies,size_t ies_len,u8 * dev_addr)2866 int p2p_parse_dev_addr(const u8 *ies, size_t ies_len, u8 *dev_addr)
2867 {
2868 struct wpabuf *p2p_ie;
2869 int ret;
2870
2871 p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len,
2872 P2P_IE_VENDOR_TYPE);
2873 if (p2p_ie == NULL)
2874 return -1;
2875 ret = p2p_parse_dev_addr_in_p2p_ie(p2p_ie, dev_addr);
2876 wpabuf_free(p2p_ie);
2877 return ret;
2878 }
2879
2880
p2p_clear_go_neg(struct p2p_data * p2p)2881 static void p2p_clear_go_neg(struct p2p_data *p2p)
2882 {
2883 p2p->go_neg_peer = NULL;
2884 p2p_clear_timeout(p2p);
2885 p2p_set_state(p2p, P2P_IDLE);
2886 }
2887
2888
p2p_wps_success_cb(struct p2p_data * p2p,const u8 * mac_addr)2889 void p2p_wps_success_cb(struct p2p_data *p2p, const u8 *mac_addr)
2890 {
2891 if (p2p->go_neg_peer == NULL) {
2892 p2p_dbg(p2p, "No pending Group Formation - ignore WPS registration success notification");
2893 return; /* No pending Group Formation */
2894 }
2895
2896 if (os_memcmp(mac_addr, p2p->go_neg_peer->intended_addr, ETH_ALEN) !=
2897 0) {
2898 p2p_dbg(p2p, "Ignore WPS registration success notification for "
2899 MACSTR " (GO Negotiation peer " MACSTR ")",
2900 MAC2STR(mac_addr),
2901 MAC2STR(p2p->go_neg_peer->intended_addr));
2902 return; /* Ignore unexpected peer address */
2903 }
2904
2905 p2p_dbg(p2p, "Group Formation completed successfully with " MACSTR,
2906 MAC2STR(mac_addr));
2907
2908 p2p_clear_go_neg(p2p);
2909 }
2910
2911
p2p_group_formation_failed(struct p2p_data * p2p)2912 void p2p_group_formation_failed(struct p2p_data *p2p)
2913 {
2914 if (p2p->go_neg_peer == NULL) {
2915 p2p_dbg(p2p, "No pending Group Formation - ignore group formation failure notification");
2916 return; /* No pending Group Formation */
2917 }
2918
2919 p2p_dbg(p2p, "Group Formation failed with " MACSTR,
2920 MAC2STR(p2p->go_neg_peer->intended_addr));
2921
2922 p2p_clear_go_neg(p2p);
2923 }
2924
2925
p2p_init(const struct p2p_config * cfg)2926 struct p2p_data * p2p_init(const struct p2p_config *cfg)
2927 {
2928 struct p2p_data *p2p;
2929
2930 if (cfg->max_peers < 1 ||
2931 cfg->passphrase_len < 8 || cfg->passphrase_len > 63)
2932 return NULL;
2933
2934 p2p = os_zalloc(sizeof(*p2p) + sizeof(*cfg));
2935 if (p2p == NULL)
2936 return NULL;
2937 p2p->cfg = (struct p2p_config *) (p2p + 1);
2938 os_memcpy(p2p->cfg, cfg, sizeof(*cfg));
2939 if (cfg->dev_name)
2940 p2p->cfg->dev_name = os_strdup(cfg->dev_name);
2941 if (cfg->manufacturer)
2942 p2p->cfg->manufacturer = os_strdup(cfg->manufacturer);
2943 if (cfg->model_name)
2944 p2p->cfg->model_name = os_strdup(cfg->model_name);
2945 if (cfg->model_number)
2946 p2p->cfg->model_number = os_strdup(cfg->model_number);
2947 if (cfg->serial_number)
2948 p2p->cfg->serial_number = os_strdup(cfg->serial_number);
2949 if (cfg->pref_chan) {
2950 p2p->cfg->pref_chan = os_malloc(cfg->num_pref_chan *
2951 sizeof(struct p2p_channel));
2952 if (p2p->cfg->pref_chan) {
2953 os_memcpy(p2p->cfg->pref_chan, cfg->pref_chan,
2954 cfg->num_pref_chan *
2955 sizeof(struct p2p_channel));
2956 } else
2957 p2p->cfg->num_pref_chan = 0;
2958 }
2959
2960 p2ps_gen_hash(p2p, P2PS_WILD_HASH_STR, p2p->wild_card_hash);
2961
2962 p2p->min_disc_int = 1;
2963 p2p->max_disc_int = 3;
2964 p2p->max_disc_tu = -1;
2965
2966 if (os_get_random(&p2p->next_tie_breaker, 1) < 0)
2967 p2p->next_tie_breaker = 0;
2968 p2p->next_tie_breaker &= 0x01;
2969 if (cfg->sd_request)
2970 p2p->dev_capab |= P2P_DEV_CAPAB_SERVICE_DISCOVERY;
2971 p2p->dev_capab |= P2P_DEV_CAPAB_INVITATION_PROCEDURE;
2972 if (cfg->concurrent_operations)
2973 p2p->dev_capab |= P2P_DEV_CAPAB_CONCURRENT_OPER;
2974 p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
2975
2976 dl_list_init(&p2p->devices);
2977
2978 p2p->go_timeout = 100;
2979 p2p->client_timeout = 20;
2980 p2p->num_p2p_sd_queries = 0;
2981
2982 p2p_dbg(p2p, "initialized");
2983 p2p_channels_dump(p2p, "channels", &p2p->cfg->channels);
2984 p2p_channels_dump(p2p, "cli_channels", &p2p->cfg->cli_channels);
2985
2986 return p2p;
2987 }
2988
2989
p2p_deinit(struct p2p_data * p2p)2990 void p2p_deinit(struct p2p_data *p2p)
2991 {
2992 #ifdef CONFIG_WIFI_DISPLAY
2993 wpabuf_free(p2p->wfd_ie_beacon);
2994 wpabuf_free(p2p->wfd_ie_probe_req);
2995 wpabuf_free(p2p->wfd_ie_probe_resp);
2996 wpabuf_free(p2p->wfd_ie_assoc_req);
2997 wpabuf_free(p2p->wfd_ie_invitation);
2998 wpabuf_free(p2p->wfd_ie_prov_disc_req);
2999 wpabuf_free(p2p->wfd_ie_prov_disc_resp);
3000 wpabuf_free(p2p->wfd_ie_go_neg);
3001 wpabuf_free(p2p->wfd_dev_info);
3002 wpabuf_free(p2p->wfd_assoc_bssid);
3003 wpabuf_free(p2p->wfd_coupled_sink_info);
3004 wpabuf_free(p2p->wfd_r2_dev_info);
3005 #endif /* CONFIG_WIFI_DISPLAY */
3006
3007 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
3008 eloop_cancel_timeout(p2p_go_neg_start, p2p, NULL);
3009 eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p, NULL);
3010 p2p_flush(p2p);
3011 p2p_free_req_dev_types(p2p);
3012 os_free(p2p->cfg->dev_name);
3013 os_free(p2p->cfg->manufacturer);
3014 os_free(p2p->cfg->model_name);
3015 os_free(p2p->cfg->model_number);
3016 os_free(p2p->cfg->serial_number);
3017 os_free(p2p->cfg->pref_chan);
3018 os_free(p2p->groups);
3019 p2ps_prov_free(p2p);
3020 wpabuf_free(p2p->sd_resp);
3021 p2p_remove_wps_vendor_extensions(p2p);
3022 os_free(p2p->no_go_freq.range);
3023 p2p_service_flush_asp(p2p);
3024
3025 os_free(p2p);
3026 }
3027
3028
p2p_flush(struct p2p_data * p2p)3029 void p2p_flush(struct p2p_data *p2p)
3030 {
3031 struct p2p_device *dev, *prev;
3032
3033 p2p_ext_listen(p2p, 0, 0);
3034 p2p_stop_find(p2p);
3035 dl_list_for_each_safe(dev, prev, &p2p->devices, struct p2p_device,
3036 list) {
3037 dl_list_del(&dev->list);
3038 p2p_device_free(p2p, dev);
3039 }
3040 p2p_free_sd_queries(p2p);
3041 p2p->ssid_set = 0;
3042 p2ps_prov_free(p2p);
3043 p2p_reset_pending_pd(p2p);
3044 p2p->override_pref_op_class = 0;
3045 p2p->override_pref_channel = 0;
3046 }
3047
3048
p2p_unauthorize(struct p2p_data * p2p,const u8 * addr)3049 int p2p_unauthorize(struct p2p_data *p2p, const u8 *addr)
3050 {
3051 struct p2p_device *dev;
3052
3053 dev = p2p_get_device(p2p, addr);
3054 if (dev == NULL)
3055 return -1;
3056
3057 p2p_dbg(p2p, "Unauthorizing " MACSTR, MAC2STR(addr));
3058
3059 if (p2p->go_neg_peer == dev) {
3060 eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p, NULL);
3061 p2p->go_neg_peer = NULL;
3062 }
3063
3064 dev->wps_method = WPS_NOT_READY;
3065 dev->oob_pw_id = 0;
3066 dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
3067 dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
3068
3069 return 0;
3070 }
3071
3072
p2p_set_dev_name(struct p2p_data * p2p,const char * dev_name)3073 int p2p_set_dev_name(struct p2p_data *p2p, const char *dev_name)
3074 {
3075 os_free(p2p->cfg->dev_name);
3076 if (dev_name) {
3077 p2p->cfg->dev_name = os_strdup(dev_name);
3078 if (p2p->cfg->dev_name == NULL)
3079 return -1;
3080 } else
3081 p2p->cfg->dev_name = NULL;
3082 return 0;
3083 }
3084
3085
p2p_set_manufacturer(struct p2p_data * p2p,const char * manufacturer)3086 int p2p_set_manufacturer(struct p2p_data *p2p, const char *manufacturer)
3087 {
3088 os_free(p2p->cfg->manufacturer);
3089 p2p->cfg->manufacturer = NULL;
3090 if (manufacturer) {
3091 p2p->cfg->manufacturer = os_strdup(manufacturer);
3092 if (p2p->cfg->manufacturer == NULL)
3093 return -1;
3094 }
3095
3096 return 0;
3097 }
3098
3099
p2p_set_model_name(struct p2p_data * p2p,const char * model_name)3100 int p2p_set_model_name(struct p2p_data *p2p, const char *model_name)
3101 {
3102 os_free(p2p->cfg->model_name);
3103 p2p->cfg->model_name = NULL;
3104 if (model_name) {
3105 p2p->cfg->model_name = os_strdup(model_name);
3106 if (p2p->cfg->model_name == NULL)
3107 return -1;
3108 }
3109
3110 return 0;
3111 }
3112
3113
p2p_set_model_number(struct p2p_data * p2p,const char * model_number)3114 int p2p_set_model_number(struct p2p_data *p2p, const char *model_number)
3115 {
3116 os_free(p2p->cfg->model_number);
3117 p2p->cfg->model_number = NULL;
3118 if (model_number) {
3119 p2p->cfg->model_number = os_strdup(model_number);
3120 if (p2p->cfg->model_number == NULL)
3121 return -1;
3122 }
3123
3124 return 0;
3125 }
3126
3127
p2p_set_serial_number(struct p2p_data * p2p,const char * serial_number)3128 int p2p_set_serial_number(struct p2p_data *p2p, const char *serial_number)
3129 {
3130 os_free(p2p->cfg->serial_number);
3131 p2p->cfg->serial_number = NULL;
3132 if (serial_number) {
3133 p2p->cfg->serial_number = os_strdup(serial_number);
3134 if (p2p->cfg->serial_number == NULL)
3135 return -1;
3136 }
3137
3138 return 0;
3139 }
3140
3141
p2p_set_config_methods(struct p2p_data * p2p,u16 config_methods)3142 void p2p_set_config_methods(struct p2p_data *p2p, u16 config_methods)
3143 {
3144 p2p->cfg->config_methods = config_methods;
3145 }
3146
3147
p2p_set_uuid(struct p2p_data * p2p,const u8 * uuid)3148 void p2p_set_uuid(struct p2p_data *p2p, const u8 *uuid)
3149 {
3150 os_memcpy(p2p->cfg->uuid, uuid, 16);
3151 }
3152
3153
p2p_set_pri_dev_type(struct p2p_data * p2p,const u8 * pri_dev_type)3154 int p2p_set_pri_dev_type(struct p2p_data *p2p, const u8 *pri_dev_type)
3155 {
3156 os_memcpy(p2p->cfg->pri_dev_type, pri_dev_type, 8);
3157 return 0;
3158 }
3159
3160
p2p_set_sec_dev_types(struct p2p_data * p2p,const u8 dev_types[][8],size_t num_dev_types)3161 int p2p_set_sec_dev_types(struct p2p_data *p2p, const u8 dev_types[][8],
3162 size_t num_dev_types)
3163 {
3164 if (num_dev_types > P2P_SEC_DEVICE_TYPES)
3165 num_dev_types = P2P_SEC_DEVICE_TYPES;
3166 p2p->cfg->num_sec_dev_types = num_dev_types;
3167 os_memcpy(p2p->cfg->sec_dev_type, dev_types, num_dev_types * 8);
3168 return 0;
3169 }
3170
3171
p2p_remove_wps_vendor_extensions(struct p2p_data * p2p)3172 void p2p_remove_wps_vendor_extensions(struct p2p_data *p2p)
3173 {
3174 int i;
3175
3176 for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
3177 wpabuf_free(p2p->wps_vendor_ext[i]);
3178 p2p->wps_vendor_ext[i] = NULL;
3179 }
3180 }
3181
3182
p2p_add_wps_vendor_extension(struct p2p_data * p2p,const struct wpabuf * vendor_ext)3183 int p2p_add_wps_vendor_extension(struct p2p_data *p2p,
3184 const struct wpabuf *vendor_ext)
3185 {
3186 int i;
3187
3188 if (vendor_ext == NULL)
3189 return -1;
3190
3191 for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
3192 if (p2p->wps_vendor_ext[i] == NULL)
3193 break;
3194 }
3195 if (i >= P2P_MAX_WPS_VENDOR_EXT)
3196 return -1;
3197
3198 p2p->wps_vendor_ext[i] = wpabuf_dup(vendor_ext);
3199 if (p2p->wps_vendor_ext[i] == NULL)
3200 return -1;
3201
3202 return 0;
3203 }
3204
3205
p2p_set_country(struct p2p_data * p2p,const char * country)3206 int p2p_set_country(struct p2p_data *p2p, const char *country)
3207 {
3208 os_memcpy(p2p->cfg->country, country, 3);
3209 return 0;
3210 }
3211
3212
p2p_pre_find_operation(struct p2p_data * p2p,struct p2p_device * dev)3213 static int p2p_pre_find_operation(struct p2p_data *p2p, struct p2p_device *dev)
3214 {
3215 int res;
3216
3217 if (dev->sd_pending_bcast_queries == 0) {
3218 /* Initialize with total number of registered broadcast
3219 * SD queries. */
3220 dev->sd_pending_bcast_queries = p2p->num_p2p_sd_queries;
3221 }
3222
3223 res = p2p_start_sd(p2p, dev);
3224 if (res == -2)
3225 return -2;
3226 if (res == 0)
3227 return 1;
3228
3229 if (dev->req_config_methods &&
3230 !(dev->flags & P2P_DEV_PD_FOR_JOIN)) {
3231 p2p_dbg(p2p, "Send pending Provision Discovery Request to "
3232 MACSTR " (config methods 0x%x)",
3233 MAC2STR(dev->info.p2p_device_addr),
3234 dev->req_config_methods);
3235 if (p2p_send_prov_disc_req(p2p, dev, 0, 0) == 0)
3236 return 1;
3237 }
3238
3239 return 0;
3240 }
3241
3242
p2p_continue_find(struct p2p_data * p2p)3243 void p2p_continue_find(struct p2p_data *p2p)
3244 {
3245 struct p2p_device *dev;
3246 int found, res;
3247
3248 p2p_set_state(p2p, P2P_SEARCH);
3249
3250 /* Continue from the device following the last iteration */
3251 found = 0;
3252 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
3253 if (dev == p2p->last_p2p_find_oper) {
3254 found = 1;
3255 continue;
3256 }
3257 if (!found)
3258 continue;
3259 res = p2p_pre_find_operation(p2p, dev);
3260 if (res > 0) {
3261 p2p->last_p2p_find_oper = dev;
3262 return;
3263 }
3264 if (res == -2)
3265 goto skip_sd;
3266 }
3267
3268 /*
3269 * Wrap around to the beginning of the list and continue until the last
3270 * iteration device.
3271 */
3272 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
3273 res = p2p_pre_find_operation(p2p, dev);
3274 if (res > 0) {
3275 p2p->last_p2p_find_oper = dev;
3276 return;
3277 }
3278 if (res == -2)
3279 goto skip_sd;
3280 if (dev == p2p->last_p2p_find_oper)
3281 break;
3282 }
3283
3284 skip_sd:
3285 os_memset(p2p->sd_query_no_ack, 0, ETH_ALEN);
3286 p2p_listen_in_find(p2p, 1);
3287 }
3288
3289
p2p_sd_cb(struct p2p_data * p2p,int success)3290 static void p2p_sd_cb(struct p2p_data *p2p, int success)
3291 {
3292 p2p_dbg(p2p, "Service Discovery Query TX callback: success=%d",
3293 success);
3294 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3295
3296 if (!success) {
3297 if (p2p->sd_peer) {
3298 if (is_zero_ether_addr(p2p->sd_query_no_ack)) {
3299 os_memcpy(p2p->sd_query_no_ack,
3300 p2p->sd_peer->info.p2p_device_addr,
3301 ETH_ALEN);
3302 p2p_dbg(p2p,
3303 "First SD Query no-ACK in this search iteration: "
3304 MACSTR, MAC2STR(p2p->sd_query_no_ack));
3305 }
3306 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3307 }
3308 p2p->sd_peer = NULL;
3309 if (p2p->state != P2P_IDLE)
3310 p2p_continue_find(p2p);
3311 return;
3312 }
3313
3314 if (p2p->sd_peer == NULL) {
3315 p2p_dbg(p2p, "No SD peer entry known");
3316 if (p2p->state != P2P_IDLE)
3317 p2p_continue_find(p2p);
3318 return;
3319 }
3320
3321 if (p2p->sd_query && p2p->sd_query->for_all_peers) {
3322 /* Update the pending broadcast SD query count for this device
3323 */
3324 p2p->sd_peer->sd_pending_bcast_queries--;
3325
3326 /*
3327 * If there are no pending broadcast queries for this device,
3328 * mark it as done (-1).
3329 */
3330 if (p2p->sd_peer->sd_pending_bcast_queries == 0)
3331 p2p->sd_peer->sd_pending_bcast_queries = -1;
3332 }
3333
3334 /* Wait for response from the peer */
3335 p2p_set_state(p2p, P2P_SD_DURING_FIND);
3336 p2p_set_timeout(p2p, 0, 200000);
3337 }
3338
3339
3340 /**
3341 * p2p_retry_pd - Retry any pending provision disc requests in IDLE state
3342 * @p2p: P2P module context from p2p_init()
3343 */
p2p_retry_pd(struct p2p_data * p2p)3344 static void p2p_retry_pd(struct p2p_data *p2p)
3345 {
3346 struct p2p_device *dev;
3347
3348 /*
3349 * Retry the prov disc req attempt only for the peer that the user had
3350 * requested.
3351 */
3352
3353 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
3354 if (os_memcmp(p2p->pending_pd_devaddr,
3355 dev->info.p2p_device_addr, ETH_ALEN) != 0)
3356 continue;
3357 if (!dev->req_config_methods)
3358 continue;
3359
3360 p2p_dbg(p2p, "Send pending Provision Discovery Request to "
3361 MACSTR " (config methods 0x%x)",
3362 MAC2STR(dev->info.p2p_device_addr),
3363 dev->req_config_methods);
3364 p2p_send_prov_disc_req(p2p, dev,
3365 dev->flags & P2P_DEV_PD_FOR_JOIN,
3366 p2p->pd_force_freq);
3367 return;
3368 }
3369 }
3370
3371
p2p_prov_disc_cb(struct p2p_data * p2p,int success)3372 static void p2p_prov_disc_cb(struct p2p_data *p2p, int success)
3373 {
3374 p2p_dbg(p2p, "Provision Discovery Request TX callback: success=%d",
3375 success);
3376
3377 /*
3378 * Postpone resetting the pending action state till after we actually
3379 * time out. This allows us to take some action like notifying any
3380 * interested parties about no response to the request.
3381 *
3382 * When the timer (below) goes off we check in IDLE, SEARCH, or
3383 * LISTEN_ONLY state, which are the only allowed states to issue a PD
3384 * requests in, if this was still pending and then raise notification.
3385 */
3386
3387 if (!success) {
3388 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3389
3390 if (p2p->user_initiated_pd &&
3391 (p2p->state == P2P_SEARCH || p2p->state == P2P_LISTEN_ONLY))
3392 {
3393 /* Retry request from timeout to avoid busy loops */
3394 p2p->pending_action_state = P2P_PENDING_PD;
3395 p2p_set_timeout(p2p, 0, 50000);
3396 } else if (p2p->state != P2P_IDLE)
3397 p2p_continue_find(p2p);
3398 else if (p2p->user_initiated_pd) {
3399 p2p->pending_action_state = P2P_PENDING_PD;
3400 p2p_set_timeout(p2p, 0, 300000);
3401 }
3402 return;
3403 }
3404
3405 /*
3406 * If after PD Request the peer doesn't expect to receive PD Response
3407 * the PD Request ACK indicates a completion of the current PD. This
3408 * happens only on the advertiser side sending the follow-on PD Request
3409 * with the status different than 12 (Success: accepted by user).
3410 */
3411 if (p2p->p2ps_prov && !p2p->p2ps_prov->pd_seeker &&
3412 p2p->p2ps_prov->status != P2P_SC_SUCCESS_DEFERRED) {
3413 p2p_dbg(p2p, "P2PS PD completion on Follow-on PD Request ACK");
3414
3415 if (p2p->send_action_in_progress) {
3416 p2p->send_action_in_progress = 0;
3417 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3418 }
3419
3420 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3421
3422 if (p2p->cfg->p2ps_prov_complete) {
3423 p2p->cfg->p2ps_prov_complete(
3424 p2p->cfg->cb_ctx,
3425 p2p->p2ps_prov->status,
3426 p2p->p2ps_prov->adv_mac,
3427 p2p->p2ps_prov->adv_mac,
3428 p2p->p2ps_prov->session_mac,
3429 NULL, p2p->p2ps_prov->adv_id,
3430 p2p->p2ps_prov->session_id,
3431 0, 0, NULL, 0, 0, 0,
3432 NULL, NULL, 0, 0, NULL, 0);
3433 }
3434
3435 if (p2p->user_initiated_pd)
3436 p2p_reset_pending_pd(p2p);
3437
3438 p2ps_prov_free(p2p);
3439 return;
3440 }
3441
3442 /*
3443 * This postponing, of resetting pending_action_state, needs to be
3444 * done only for user initiated PD requests and not internal ones.
3445 */
3446 if (p2p->user_initiated_pd)
3447 p2p->pending_action_state = P2P_PENDING_PD;
3448 else
3449 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3450
3451 /* Wait for response from the peer */
3452 if (p2p->state == P2P_SEARCH)
3453 p2p_set_state(p2p, P2P_PD_DURING_FIND);
3454 p2p_set_timeout(p2p, 0, 200000);
3455 }
3456
3457
p2p_prov_disc_resp_cb(struct p2p_data * p2p,int success)3458 static void p2p_prov_disc_resp_cb(struct p2p_data *p2p, int success)
3459 {
3460 p2p_dbg(p2p, "Provision Discovery Response TX callback: success=%d",
3461 success);
3462
3463 if (p2p->send_action_in_progress) {
3464 p2p->send_action_in_progress = 0;
3465 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3466 }
3467
3468 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3469
3470 if (!success) {
3471 if (p2p->state == P2P_SEARCH)
3472 p2p_continue_find(p2p);
3473 return;
3474 }
3475
3476 if (!p2p->cfg->prov_disc_resp_cb ||
3477 p2p->cfg->prov_disc_resp_cb(p2p->cfg->cb_ctx) < 1) {
3478 if (p2p->state == P2P_SEARCH)
3479 p2p_continue_find(p2p);
3480 return;
3481 }
3482
3483 p2p_dbg(p2p,
3484 "Post-Provision Discovery operations started - do not try to continue other P2P operations");
3485 }
3486
3487
p2p_scan_res_handler(struct p2p_data * p2p,const u8 * bssid,int freq,struct os_reltime * rx_time,int level,const u8 * ies,size_t ies_len)3488 int p2p_scan_res_handler(struct p2p_data *p2p, const u8 *bssid, int freq,
3489 struct os_reltime *rx_time, int level, const u8 *ies,
3490 size_t ies_len)
3491 {
3492 if (os_reltime_before(rx_time, &p2p->find_start)) {
3493 /*
3494 * The driver may have cached (e.g., in cfg80211 BSS table) the
3495 * scan results for relatively long time. To avoid reporting
3496 * stale information, update P2P peers only based on results
3497 * that have based on frames received after the last p2p_find
3498 * operation was started.
3499 */
3500 p2p_dbg(p2p, "Ignore old scan result for " MACSTR
3501 " (rx_time=%u.%06u find_start=%u.%06u)",
3502 MAC2STR(bssid), (unsigned int) rx_time->sec,
3503 (unsigned int) rx_time->usec,
3504 (unsigned int) p2p->find_start.sec,
3505 (unsigned int) p2p->find_start.usec);
3506 return 0;
3507 }
3508
3509 p2p_add_device(p2p, bssid, freq, rx_time, level, ies, ies_len, 1);
3510
3511 return 0;
3512 }
3513
3514
p2p_scan_res_handled(struct p2p_data * p2p)3515 void p2p_scan_res_handled(struct p2p_data *p2p)
3516 {
3517 if (!p2p->p2p_scan_running) {
3518 p2p_dbg(p2p, "p2p_scan was not running, but scan results received");
3519 }
3520 p2p->p2p_scan_running = 0;
3521 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
3522
3523 if (p2p_run_after_scan(p2p))
3524 return;
3525 if (p2p->state == P2P_SEARCH)
3526 p2p_continue_find(p2p);
3527 }
3528
3529
p2p_scan_ie(struct p2p_data * p2p,struct wpabuf * ies,const u8 * dev_id,unsigned int bands)3530 void p2p_scan_ie(struct p2p_data *p2p, struct wpabuf *ies, const u8 *dev_id,
3531 unsigned int bands)
3532 {
3533 u8 dev_capab;
3534 u8 *len;
3535
3536 #ifdef CONFIG_WIFI_DISPLAY
3537 if (p2p->wfd_ie_probe_req)
3538 wpabuf_put_buf(ies, p2p->wfd_ie_probe_req);
3539 #endif /* CONFIG_WIFI_DISPLAY */
3540
3541 if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_PROBE_REQ_P2P])
3542 wpabuf_put_buf(ies,
3543 p2p->vendor_elem[VENDOR_ELEM_PROBE_REQ_P2P]);
3544
3545 len = p2p_buf_add_ie_hdr(ies);
3546
3547 dev_capab = p2p->dev_capab & ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3548
3549 /* P2PS requires Probe Request frames to include SD bit */
3550 if (p2p->p2ps_seek && p2p->p2ps_seek_count)
3551 dev_capab |= P2P_DEV_CAPAB_SERVICE_DISCOVERY;
3552
3553 p2p_buf_add_capability(ies, dev_capab, 0);
3554
3555 if (dev_id)
3556 p2p_buf_add_device_id(ies, dev_id);
3557 if (p2p->cfg->reg_class && p2p->cfg->channel)
3558 p2p_buf_add_listen_channel(ies, p2p->cfg->country,
3559 p2p->cfg->reg_class,
3560 p2p->cfg->channel);
3561 if (p2p->ext_listen_interval)
3562 p2p_buf_add_ext_listen_timing(ies, p2p->ext_listen_period,
3563 p2p->ext_listen_interval);
3564
3565 if (bands & BAND_60_GHZ)
3566 p2p_buf_add_device_info(ies, p2p, NULL);
3567
3568 if (p2p->p2ps_seek && p2p->p2ps_seek_count)
3569 p2p_buf_add_service_hash(ies, p2p);
3570
3571 /* TODO: p2p_buf_add_operating_channel() if GO */
3572 p2p_buf_update_ie_hdr(ies, len);
3573 }
3574
3575
p2p_scan_ie_buf_len(struct p2p_data * p2p)3576 size_t p2p_scan_ie_buf_len(struct p2p_data *p2p)
3577 {
3578 size_t len = 100;
3579
3580 #ifdef CONFIG_WIFI_DISPLAY
3581 if (p2p && p2p->wfd_ie_probe_req)
3582 len += wpabuf_len(p2p->wfd_ie_probe_req);
3583 #endif /* CONFIG_WIFI_DISPLAY */
3584
3585 if (p2p && p2p->vendor_elem &&
3586 p2p->vendor_elem[VENDOR_ELEM_PROBE_REQ_P2P])
3587 len += wpabuf_len(p2p->vendor_elem[VENDOR_ELEM_PROBE_REQ_P2P]);
3588
3589 return len;
3590 }
3591
3592
p2p_ie_text(struct wpabuf * p2p_ie,char * buf,char * end)3593 int p2p_ie_text(struct wpabuf *p2p_ie, char *buf, char *end)
3594 {
3595 return p2p_attr_text(p2p_ie, buf, end);
3596 }
3597
3598
p2p_go_neg_req_cb(struct p2p_data * p2p,int success)3599 static void p2p_go_neg_req_cb(struct p2p_data *p2p, int success)
3600 {
3601 struct p2p_device *dev = p2p->go_neg_peer;
3602 int timeout;
3603
3604 p2p_dbg(p2p, "GO Negotiation Request TX callback: success=%d", success);
3605
3606 if (dev == NULL) {
3607 p2p_dbg(p2p, "No pending GO Negotiation");
3608 return;
3609 }
3610
3611 if (success) {
3612 if (dev->flags & P2P_DEV_USER_REJECTED) {
3613 p2p_set_state(p2p, P2P_IDLE);
3614 return;
3615 }
3616 } else if (dev->go_neg_req_sent) {
3617 /* Cancel the increment from p2p_connect_send() on failure */
3618 dev->go_neg_req_sent--;
3619 }
3620
3621 if (!success &&
3622 (dev->info.dev_capab & P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY) &&
3623 !is_zero_ether_addr(dev->member_in_go_dev)) {
3624 p2p_dbg(p2p, "Peer " MACSTR " did not acknowledge request - try to use device discoverability through its GO",
3625 MAC2STR(dev->info.p2p_device_addr));
3626 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3627 p2p_send_dev_disc_req(p2p, dev);
3628 return;
3629 }
3630
3631 /*
3632 * Use P2P find, if needed, to find the other device from its listen
3633 * channel.
3634 */
3635 p2p_set_state(p2p, P2P_CONNECT);
3636 timeout = success ? 500000 : 100000;
3637 if (!success && p2p->go_neg_peer &&
3638 (p2p->go_neg_peer->flags & P2P_DEV_PEER_WAITING_RESPONSE)) {
3639 unsigned int r;
3640 /*
3641 * Peer is expected to wait our response and we will skip the
3642 * listen phase. Add some randomness to the wait time here to
3643 * make it less likely to hit cases where we could end up in
3644 * sync with peer not listening.
3645 */
3646 if (os_get_random((u8 *) &r, sizeof(r)) < 0)
3647 r = 0;
3648 timeout += r % 100000;
3649 }
3650 p2p_set_timeout(p2p, 0, timeout);
3651 }
3652
3653
p2p_go_neg_resp_cb(struct p2p_data * p2p,int success)3654 static void p2p_go_neg_resp_cb(struct p2p_data *p2p, int success)
3655 {
3656 p2p_dbg(p2p, "GO Negotiation Response TX callback: success=%d",
3657 success);
3658 if (!p2p->go_neg_peer && p2p->state == P2P_PROVISIONING) {
3659 p2p_dbg(p2p, "Ignore TX callback event - GO Negotiation is not running anymore");
3660 return;
3661 }
3662 p2p_set_state(p2p, P2P_CONNECT);
3663 p2p_set_timeout(p2p, 0, 500000);
3664 }
3665
3666
p2p_go_neg_resp_failure_cb(struct p2p_data * p2p,int success,const u8 * addr)3667 static void p2p_go_neg_resp_failure_cb(struct p2p_data *p2p, int success,
3668 const u8 *addr)
3669 {
3670 p2p_dbg(p2p, "GO Negotiation Response (failure) TX callback: success=%d", success);
3671 if (p2p->go_neg_peer && p2p->go_neg_peer->status != P2P_SC_SUCCESS) {
3672 p2p_go_neg_failed(p2p, p2p->go_neg_peer->status);
3673 return;
3674 }
3675
3676 if (success) {
3677 struct p2p_device *dev;
3678 dev = p2p_get_device(p2p, addr);
3679 if (dev &&
3680 dev->status == P2P_SC_FAIL_INFO_CURRENTLY_UNAVAILABLE)
3681 dev->flags |= P2P_DEV_PEER_WAITING_RESPONSE;
3682 }
3683
3684 if (p2p->state == P2P_SEARCH || p2p->state == P2P_SD_DURING_FIND)
3685 p2p_continue_find(p2p);
3686 }
3687
3688
p2p_go_neg_conf_cb(struct p2p_data * p2p,enum p2p_send_action_result result)3689 static void p2p_go_neg_conf_cb(struct p2p_data *p2p,
3690 enum p2p_send_action_result result)
3691 {
3692 struct p2p_device *dev;
3693
3694 p2p_dbg(p2p, "GO Negotiation Confirm TX callback: result=%d", result);
3695 if (result == P2P_SEND_ACTION_FAILED) {
3696 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3697 p2p_go_neg_failed(p2p, -1);
3698 return;
3699 }
3700
3701 dev = p2p->go_neg_peer;
3702
3703 if (result == P2P_SEND_ACTION_NO_ACK) {
3704 /*
3705 * Retry GO Negotiation Confirmation
3706 * P2P_GO_NEG_CNF_MAX_RETRY_COUNT times if we did not receive
3707 * ACK for confirmation.
3708 */
3709 if (dev && dev->go_neg_conf &&
3710 dev->go_neg_conf_sent <= P2P_GO_NEG_CNF_MAX_RETRY_COUNT) {
3711 p2p_dbg(p2p, "GO Negotiation Confirm retry %d",
3712 dev->go_neg_conf_sent);
3713 p2p->pending_action_state = P2P_PENDING_GO_NEG_CONFIRM;
3714 if (p2p_send_action(p2p, dev->go_neg_conf_freq,
3715 dev->info.p2p_device_addr,
3716 p2p->cfg->dev_addr,
3717 dev->info.p2p_device_addr,
3718 wpabuf_head(dev->go_neg_conf),
3719 wpabuf_len(dev->go_neg_conf), 0) >=
3720 0) {
3721 dev->go_neg_conf_sent++;
3722 return;
3723 }
3724 p2p_dbg(p2p, "Failed to re-send Action frame");
3725
3726 /*
3727 * Continue with the assumption that the first attempt
3728 * went through and just the ACK frame was lost.
3729 */
3730 }
3731
3732 /*
3733 * It looks like the TX status for GO Negotiation Confirm is
3734 * often showing failure even when the peer has actually
3735 * received the frame. Since the peer may change channels
3736 * immediately after having received the frame, we may not see
3737 * an Ack for retries, so just dropping a single frame may
3738 * trigger this. To allow the group formation to succeed if the
3739 * peer did indeed receive the frame, continue regardless of
3740 * the TX status.
3741 */
3742 p2p_dbg(p2p, "Assume GO Negotiation Confirm TX was actually received by the peer even though Ack was not reported");
3743 }
3744
3745 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3746
3747 if (dev == NULL)
3748 return;
3749
3750 p2p_go_complete(p2p, dev);
3751 }
3752
3753
p2p_send_action_cb(struct p2p_data * p2p,unsigned int freq,const u8 * dst,const u8 * src,const u8 * bssid,enum p2p_send_action_result result)3754 void p2p_send_action_cb(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
3755 const u8 *src, const u8 *bssid,
3756 enum p2p_send_action_result result)
3757 {
3758 enum p2p_pending_action_state state;
3759 int success;
3760
3761 p2p_dbg(p2p, "Action frame TX callback (state=%d freq=%u dst=" MACSTR
3762 " src=" MACSTR " bssid=" MACSTR " result=%d p2p_state=%s)",
3763 p2p->pending_action_state, freq, MAC2STR(dst), MAC2STR(src),
3764 MAC2STR(bssid), result, p2p_state_txt(p2p->state));
3765 success = result == P2P_SEND_ACTION_SUCCESS;
3766 state = p2p->pending_action_state;
3767 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3768 switch (state) {
3769 case P2P_NO_PENDING_ACTION:
3770 if (p2p->send_action_in_progress) {
3771 p2p->send_action_in_progress = 0;
3772 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3773 }
3774 break;
3775 case P2P_PENDING_GO_NEG_REQUEST:
3776 p2p_go_neg_req_cb(p2p, success);
3777 break;
3778 case P2P_PENDING_GO_NEG_RESPONSE:
3779 p2p_go_neg_resp_cb(p2p, success);
3780 break;
3781 case P2P_PENDING_GO_NEG_RESPONSE_FAILURE:
3782 p2p_go_neg_resp_failure_cb(p2p, success, dst);
3783 break;
3784 case P2P_PENDING_GO_NEG_CONFIRM:
3785 p2p_go_neg_conf_cb(p2p, result);
3786 break;
3787 case P2P_PENDING_SD:
3788 p2p_sd_cb(p2p, success);
3789 break;
3790 case P2P_PENDING_PD:
3791 p2p_prov_disc_cb(p2p, success);
3792 break;
3793 case P2P_PENDING_PD_RESPONSE:
3794 p2p_prov_disc_resp_cb(p2p, success);
3795 break;
3796 case P2P_PENDING_INVITATION_REQUEST:
3797 p2p_invitation_req_cb(p2p, success);
3798 break;
3799 case P2P_PENDING_INVITATION_RESPONSE:
3800 p2p_invitation_resp_cb(p2p, success);
3801 break;
3802 case P2P_PENDING_DEV_DISC_REQUEST:
3803 p2p_dev_disc_req_cb(p2p, success);
3804 break;
3805 case P2P_PENDING_DEV_DISC_RESPONSE:
3806 p2p_dev_disc_resp_cb(p2p, success);
3807 break;
3808 case P2P_PENDING_GO_DISC_REQ:
3809 p2p_go_disc_req_cb(p2p, success);
3810 break;
3811 }
3812 }
3813
3814
p2p_listen_cb(struct p2p_data * p2p,unsigned int freq,unsigned int duration)3815 void p2p_listen_cb(struct p2p_data *p2p, unsigned int freq,
3816 unsigned int duration)
3817 {
3818 if (freq == p2p->pending_client_disc_freq) {
3819 p2p_dbg(p2p, "Client discoverability remain-awake completed");
3820 p2p->pending_client_disc_freq = 0;
3821 return;
3822 }
3823
3824 if (freq != p2p->pending_listen_freq) {
3825 p2p_dbg(p2p, "Unexpected listen callback for freq=%u duration=%u (pending_listen_freq=%u)",
3826 freq, duration, p2p->pending_listen_freq);
3827 return;
3828 }
3829
3830 p2p_dbg(p2p, "Starting Listen timeout(%u,%u) on freq=%u based on callback",
3831 p2p->pending_listen_sec, p2p->pending_listen_usec,
3832 p2p->pending_listen_freq);
3833 p2p->in_listen = 1;
3834 p2p->drv_in_listen = freq;
3835 if (p2p->pending_listen_sec || p2p->pending_listen_usec) {
3836 /*
3837 * Add 20 msec extra wait to avoid race condition with driver
3838 * remain-on-channel end event, i.e., give driver more time to
3839 * complete the operation before our timeout expires.
3840 */
3841 p2p_set_timeout(p2p, p2p->pending_listen_sec,
3842 p2p->pending_listen_usec + 20000);
3843 }
3844
3845 p2p->pending_listen_freq = 0;
3846 }
3847
3848
p2p_listen_end(struct p2p_data * p2p,unsigned int freq)3849 int p2p_listen_end(struct p2p_data *p2p, unsigned int freq)
3850 {
3851 p2p_dbg(p2p, "Driver ended Listen state (freq=%u)", freq);
3852 p2p->drv_in_listen = 0;
3853 if (p2p->in_listen)
3854 return 0; /* Internal timeout will trigger the next step */
3855
3856 if (p2p->state == P2P_WAIT_PEER_CONNECT && p2p->go_neg_peer &&
3857 p2p->pending_listen_freq) {
3858 /*
3859 * Better wait a bit if the driver is unable to start
3860 * offchannel operation for some reason to continue with
3861 * P2P_WAIT_PEER_(IDLE/CONNECT) state transitions.
3862 */
3863 p2p_dbg(p2p,
3864 "Listen operation did not seem to start - delay idle phase to avoid busy loop");
3865 p2p_set_timeout(p2p, 0, 100000);
3866 return 1;
3867 }
3868
3869 if (p2p->state == P2P_CONNECT_LISTEN && p2p->go_neg_peer) {
3870 if (p2p->go_neg_peer->connect_reqs >= 120) {
3871 p2p_dbg(p2p, "Timeout on sending GO Negotiation Request without getting response");
3872 p2p_go_neg_failed(p2p, -1);
3873 return 0;
3874 }
3875
3876 p2p_set_state(p2p, P2P_CONNECT);
3877 p2p_connect_send(p2p, p2p->go_neg_peer);
3878 return 1;
3879 } else if (p2p->state == P2P_SEARCH) {
3880 if (p2p->p2p_scan_running) {
3881 /*
3882 * Search is already in progress. This can happen if
3883 * an Action frame RX is reported immediately after
3884 * the end of a remain-on-channel operation and the
3885 * response frame to that is sent using an offchannel
3886 * operation while in p2p_find. Avoid an attempt to
3887 * restart a scan here.
3888 */
3889 p2p_dbg(p2p, "p2p_scan already in progress - do not try to start a new one");
3890 return 1;
3891 }
3892 if (p2p->pending_listen_freq) {
3893 /*
3894 * Better wait a bit if the driver is unable to start
3895 * offchannel operation for some reason. p2p_search()
3896 * will be started from internal timeout.
3897 */
3898 p2p_dbg(p2p, "Listen operation did not seem to start - delay search phase to avoid busy loop");
3899 p2p_set_timeout(p2p, 0, 100000);
3900 return 1;
3901 }
3902 if (p2p->search_delay) {
3903 p2p_dbg(p2p, "Delay search operation by %u ms",
3904 p2p->search_delay);
3905 p2p_set_timeout(p2p, p2p->search_delay / 1000,
3906 (p2p->search_delay % 1000) * 1000);
3907 return 1;
3908 }
3909 p2p_search(p2p);
3910 return 1;
3911 }
3912
3913 return 0;
3914 }
3915
3916
p2p_timeout_connect(struct p2p_data * p2p)3917 static void p2p_timeout_connect(struct p2p_data *p2p)
3918 {
3919 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3920 if (p2p->go_neg_peer &&
3921 (p2p->go_neg_peer->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM)) {
3922 p2p_dbg(p2p, "Wait for GO Negotiation Confirm timed out - assume GO Negotiation failed");
3923 p2p_go_neg_failed(p2p, -1);
3924 return;
3925 }
3926 if (p2p->go_neg_peer &&
3927 (p2p->go_neg_peer->flags & P2P_DEV_PEER_WAITING_RESPONSE) &&
3928 p2p->go_neg_peer->connect_reqs < 120) {
3929 p2p_dbg(p2p, "Peer expected to wait our response - skip listen");
3930 p2p_connect_send(p2p, p2p->go_neg_peer);
3931 return;
3932 }
3933 if (p2p->go_neg_peer && p2p->go_neg_peer->oob_go_neg_freq > 0) {
3934 p2p_dbg(p2p, "Skip connect-listen since GO Neg channel known (OOB)");
3935 p2p_set_state(p2p, P2P_CONNECT_LISTEN);
3936 p2p_set_timeout(p2p, 0, 30000);
3937 return;
3938 }
3939 p2p_set_state(p2p, P2P_CONNECT_LISTEN);
3940 p2p_listen_in_find(p2p, 0);
3941 }
3942
3943
p2p_timeout_connect_listen(struct p2p_data * p2p)3944 static void p2p_timeout_connect_listen(struct p2p_data *p2p)
3945 {
3946 if (p2p->go_neg_peer) {
3947 if (p2p->drv_in_listen) {
3948 p2p_dbg(p2p, "Driver is still in Listen state; wait for it to complete");
3949 return;
3950 }
3951
3952 if (p2p->go_neg_peer->connect_reqs >= 120) {
3953 p2p_dbg(p2p, "Timeout on sending GO Negotiation Request without getting response");
3954 p2p_go_neg_failed(p2p, -1);
3955 return;
3956 }
3957
3958 p2p_set_state(p2p, P2P_CONNECT);
3959 p2p_connect_send(p2p, p2p->go_neg_peer);
3960 } else
3961 p2p_set_state(p2p, P2P_IDLE);
3962 }
3963
3964
p2p_timeout_wait_peer_connect(struct p2p_data * p2p)3965 static void p2p_timeout_wait_peer_connect(struct p2p_data *p2p)
3966 {
3967 p2p_set_state(p2p, P2P_WAIT_PEER_IDLE);
3968
3969 if (p2p->cfg->is_concurrent_session_active &&
3970 p2p->cfg->is_concurrent_session_active(p2p->cfg->cb_ctx))
3971 p2p_set_timeout(p2p, 0, 500000);
3972 else
3973 p2p_set_timeout(p2p, 0, 200000);
3974 }
3975
3976
p2p_timeout_wait_peer_idle(struct p2p_data * p2p)3977 static void p2p_timeout_wait_peer_idle(struct p2p_data *p2p)
3978 {
3979 struct p2p_device *dev = p2p->go_neg_peer;
3980
3981 if (dev == NULL) {
3982 p2p_dbg(p2p, "Unknown GO Neg peer - stop GO Neg wait");
3983 return;
3984 }
3985
3986 p2p_dbg(p2p, "Go to Listen state while waiting for the peer to become ready for GO Negotiation");
3987 p2p_set_state(p2p, P2P_WAIT_PEER_CONNECT);
3988 p2p_listen_in_find(p2p, 0);
3989 }
3990
3991
p2p_timeout_sd_during_find(struct p2p_data * p2p)3992 static void p2p_timeout_sd_during_find(struct p2p_data *p2p)
3993 {
3994 p2p_dbg(p2p, "Service Discovery Query timeout");
3995 if (p2p->sd_peer) {
3996 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3997 p2p->sd_peer = NULL;
3998 }
3999 p2p_continue_find(p2p);
4000 }
4001
4002
p2p_timeout_prov_disc_during_find(struct p2p_data * p2p)4003 static void p2p_timeout_prov_disc_during_find(struct p2p_data *p2p)
4004 {
4005 p2p_dbg(p2p, "Provision Discovery Request timeout");
4006 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
4007 p2p_continue_find(p2p);
4008 }
4009
4010
p2p_timeout_prov_disc_req(struct p2p_data * p2p)4011 static void p2p_timeout_prov_disc_req(struct p2p_data *p2p)
4012 {
4013 u32 adv_id = 0;
4014 u8 *adv_mac = NULL;
4015
4016 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
4017
4018 /*
4019 * For user initiated PD requests that we have not gotten any responses
4020 * for while in IDLE state, we retry them a couple of times before
4021 * giving up.
4022 */
4023 if (!p2p->user_initiated_pd)
4024 return;
4025
4026 p2p_dbg(p2p, "User initiated Provision Discovery Request timeout");
4027
4028 if (p2p->pd_retries) {
4029 p2p->pd_retries--;
4030 p2p_retry_pd(p2p);
4031 } else {
4032 struct p2p_device *dev;
4033 int for_join = 0;
4034
4035 dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
4036 if (os_memcmp(p2p->pending_pd_devaddr,
4037 dev->info.p2p_device_addr, ETH_ALEN) != 0)
4038 continue;
4039 if (dev->req_config_methods &&
4040 (dev->flags & P2P_DEV_PD_FOR_JOIN))
4041 for_join = 1;
4042 }
4043
4044 if (p2p->p2ps_prov) {
4045 adv_id = p2p->p2ps_prov->adv_id;
4046 adv_mac = p2p->p2ps_prov->adv_mac;
4047 }
4048
4049 if (p2p->cfg->prov_disc_fail)
4050 p2p->cfg->prov_disc_fail(p2p->cfg->cb_ctx,
4051 p2p->pending_pd_devaddr,
4052 for_join ?
4053 P2P_PROV_DISC_TIMEOUT_JOIN :
4054 P2P_PROV_DISC_TIMEOUT,
4055 adv_id, adv_mac, NULL);
4056 p2p_reset_pending_pd(p2p);
4057 }
4058 }
4059
4060
p2p_timeout_invite(struct p2p_data * p2p)4061 static void p2p_timeout_invite(struct p2p_data *p2p)
4062 {
4063 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
4064 p2p_set_state(p2p, P2P_INVITE_LISTEN);
4065 if (p2p->inv_role == P2P_INVITE_ROLE_ACTIVE_GO) {
4066 /*
4067 * Better remain on operating channel instead of listen channel
4068 * when running a group.
4069 */
4070 p2p_dbg(p2p, "Inviting in active GO role - wait on operating channel");
4071 p2p_set_timeout(p2p, 0, 100000);
4072 return;
4073 }
4074 p2p_listen_in_find(p2p, 0);
4075 }
4076
4077
p2p_timeout_invite_listen(struct p2p_data * p2p)4078 static void p2p_timeout_invite_listen(struct p2p_data *p2p)
4079 {
4080 if (p2p->invite_peer && p2p->invite_peer->invitation_reqs < 100) {
4081 p2p_set_state(p2p, P2P_INVITE);
4082 p2p_invite_send(p2p, p2p->invite_peer,
4083 p2p->invite_go_dev_addr, p2p->invite_dev_pw_id);
4084 } else {
4085 if (p2p->invite_peer) {
4086 p2p_dbg(p2p, "Invitation Request retry limit reached");
4087 if (p2p->cfg->invitation_result)
4088 p2p->cfg->invitation_result(
4089 p2p->cfg->cb_ctx, -1, NULL, NULL,
4090 p2p->invite_peer->info.p2p_device_addr,
4091 0, 0);
4092 }
4093 p2p_set_state(p2p, P2P_IDLE);
4094 }
4095 }
4096
4097
p2p_state_timeout(void * eloop_ctx,void * timeout_ctx)4098 static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx)
4099 {
4100 struct p2p_data *p2p = eloop_ctx;
4101
4102 p2p_dbg(p2p, "Timeout (state=%s)", p2p_state_txt(p2p->state));
4103
4104 p2p->in_listen = 0;
4105 if (p2p->drv_in_listen) {
4106 p2p_dbg(p2p, "Driver is still in listen state - stop it");
4107 p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
4108 }
4109
4110 switch (p2p->state) {
4111 case P2P_IDLE:
4112 /* Check if we timed out waiting for PD req */
4113 if (p2p->pending_action_state == P2P_PENDING_PD)
4114 p2p_timeout_prov_disc_req(p2p);
4115 break;
4116 case P2P_SEARCH:
4117 /* Check if we timed out waiting for PD req */
4118 if (p2p->pending_action_state == P2P_PENDING_PD)
4119 p2p_timeout_prov_disc_req(p2p);
4120 if (p2p->search_delay && !p2p->in_search_delay) {
4121 p2p_dbg(p2p, "Delay search operation by %u ms",
4122 p2p->search_delay);
4123 p2p->in_search_delay = 1;
4124 p2p_set_timeout(p2p, p2p->search_delay / 1000,
4125 (p2p->search_delay % 1000) * 1000);
4126 break;
4127 }
4128 p2p->in_search_delay = 0;
4129 p2p_search(p2p);
4130 break;
4131 case P2P_CONNECT:
4132 p2p_timeout_connect(p2p);
4133 break;
4134 case P2P_CONNECT_LISTEN:
4135 p2p_timeout_connect_listen(p2p);
4136 break;
4137 case P2P_GO_NEG:
4138 break;
4139 case P2P_LISTEN_ONLY:
4140 /* Check if we timed out waiting for PD req */
4141 if (p2p->pending_action_state == P2P_PENDING_PD)
4142 p2p_timeout_prov_disc_req(p2p);
4143
4144 if (p2p->ext_listen_only) {
4145 p2p_dbg(p2p, "Extended Listen Timing - Listen State completed");
4146 p2p->ext_listen_only = 0;
4147 p2p_set_state(p2p, P2P_IDLE);
4148 }
4149 break;
4150 case P2P_WAIT_PEER_CONNECT:
4151 p2p_timeout_wait_peer_connect(p2p);
4152 break;
4153 case P2P_WAIT_PEER_IDLE:
4154 p2p_timeout_wait_peer_idle(p2p);
4155 break;
4156 case P2P_SD_DURING_FIND:
4157 p2p_timeout_sd_during_find(p2p);
4158 break;
4159 case P2P_PROVISIONING:
4160 break;
4161 case P2P_PD_DURING_FIND:
4162 p2p_timeout_prov_disc_during_find(p2p);
4163 break;
4164 case P2P_INVITE:
4165 p2p_timeout_invite(p2p);
4166 break;
4167 case P2P_INVITE_LISTEN:
4168 p2p_timeout_invite_listen(p2p);
4169 break;
4170 }
4171 }
4172
4173
p2p_reject(struct p2p_data * p2p,const u8 * peer_addr)4174 int p2p_reject(struct p2p_data *p2p, const u8 *peer_addr)
4175 {
4176 struct p2p_device *dev;
4177
4178 dev = p2p_get_device(p2p, peer_addr);
4179 p2p_dbg(p2p, "Local request to reject connection attempts by peer "
4180 MACSTR, MAC2STR(peer_addr));
4181 if (dev == NULL) {
4182 p2p_dbg(p2p, "Peer " MACSTR " unknown", MAC2STR(peer_addr));
4183 return -1;
4184 }
4185 dev->status = P2P_SC_FAIL_REJECTED_BY_USER;
4186 dev->flags |= P2P_DEV_USER_REJECTED;
4187 return 0;
4188 }
4189
4190
p2p_wps_method_text(enum p2p_wps_method method)4191 const char * p2p_wps_method_text(enum p2p_wps_method method)
4192 {
4193 switch (method) {
4194 case WPS_NOT_READY:
4195 return "not-ready";
4196 case WPS_PIN_DISPLAY:
4197 return "Display";
4198 case WPS_PIN_KEYPAD:
4199 return "Keypad";
4200 case WPS_PBC:
4201 return "PBC";
4202 case WPS_NFC:
4203 return "NFC";
4204 case WPS_P2PS:
4205 return "P2PS";
4206 }
4207
4208 return "??";
4209 }
4210
4211
p2p_go_state_text(enum p2p_go_state go_state)4212 static const char * p2p_go_state_text(enum p2p_go_state go_state)
4213 {
4214 switch (go_state) {
4215 case UNKNOWN_GO:
4216 return "unknown";
4217 case LOCAL_GO:
4218 return "local";
4219 case REMOTE_GO:
4220 return "remote";
4221 }
4222
4223 return "??";
4224 }
4225
4226
p2p_get_peer_info(struct p2p_data * p2p,const u8 * addr,int next)4227 const struct p2p_peer_info * p2p_get_peer_info(struct p2p_data *p2p,
4228 const u8 *addr, int next)
4229 {
4230 struct p2p_device *dev;
4231
4232 if (addr)
4233 dev = p2p_get_device(p2p, addr);
4234 else
4235 dev = dl_list_first(&p2p->devices, struct p2p_device, list);
4236
4237 if (dev && next) {
4238 dev = dl_list_first(&dev->list, struct p2p_device, list);
4239 if (&dev->list == &p2p->devices)
4240 dev = NULL;
4241 }
4242
4243 if (dev == NULL)
4244 return NULL;
4245
4246 return &dev->info;
4247 }
4248
4249
p2p_get_peer_info_txt(const struct p2p_peer_info * info,char * buf,size_t buflen)4250 int p2p_get_peer_info_txt(const struct p2p_peer_info *info,
4251 char *buf, size_t buflen)
4252 {
4253 struct p2p_device *dev;
4254 int res;
4255 char *pos, *end;
4256 struct os_reltime now;
4257
4258 if (info == NULL)
4259 return -1;
4260
4261 dev = (struct p2p_device *) (((u8 *) info) -
4262 offsetof(struct p2p_device, info));
4263
4264 pos = buf;
4265 end = buf + buflen;
4266
4267 os_get_reltime(&now);
4268 res = os_snprintf(pos, end - pos,
4269 "age=%d\n"
4270 "listen_freq=%d\n"
4271 "wps_method=%s\n"
4272 "interface_addr=" MACSTR "\n"
4273 "member_in_go_dev=" MACSTR "\n"
4274 "member_in_go_iface=" MACSTR "\n"
4275 "go_neg_req_sent=%d\n"
4276 "go_state=%s\n"
4277 "dialog_token=%u\n"
4278 "intended_addr=" MACSTR "\n"
4279 "country=%c%c\n"
4280 "oper_freq=%d\n"
4281 "req_config_methods=0x%x\n"
4282 "flags=%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s\n"
4283 "status=%d\n"
4284 "invitation_reqs=%u\n",
4285 (int) (now.sec - dev->last_seen.sec),
4286 dev->listen_freq,
4287 p2p_wps_method_text(dev->wps_method),
4288 MAC2STR(dev->interface_addr),
4289 MAC2STR(dev->member_in_go_dev),
4290 MAC2STR(dev->member_in_go_iface),
4291 dev->go_neg_req_sent,
4292 p2p_go_state_text(dev->go_state),
4293 dev->dialog_token,
4294 MAC2STR(dev->intended_addr),
4295 dev->country[0] ? dev->country[0] : '_',
4296 dev->country[1] ? dev->country[1] : '_',
4297 dev->oper_freq,
4298 dev->req_config_methods,
4299 dev->flags & P2P_DEV_PROBE_REQ_ONLY ?
4300 "[PROBE_REQ_ONLY]" : "",
4301 dev->flags & P2P_DEV_REPORTED ? "[REPORTED]" : "",
4302 dev->flags & P2P_DEV_NOT_YET_READY ?
4303 "[NOT_YET_READY]" : "",
4304 dev->flags & P2P_DEV_PD_PEER_DISPLAY ?
4305 "[PD_PEER_DISPLAY]" : "",
4306 dev->flags & P2P_DEV_PD_PEER_KEYPAD ?
4307 "[PD_PEER_KEYPAD]" : "",
4308 dev->flags & P2P_DEV_PD_PEER_P2PS ?
4309 "[PD_PEER_P2PS]" : "",
4310 dev->flags & P2P_DEV_USER_REJECTED ?
4311 "[USER_REJECTED]" : "",
4312 dev->flags & P2P_DEV_PEER_WAITING_RESPONSE ?
4313 "[PEER_WAITING_RESPONSE]" : "",
4314 dev->flags & P2P_DEV_PREFER_PERSISTENT_GROUP ?
4315 "[PREFER_PERSISTENT_GROUP]" : "",
4316 dev->flags & P2P_DEV_WAIT_GO_NEG_RESPONSE ?
4317 "[WAIT_GO_NEG_RESPONSE]" : "",
4318 dev->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM ?
4319 "[WAIT_GO_NEG_CONFIRM]" : "",
4320 dev->flags & P2P_DEV_GROUP_CLIENT_ONLY ?
4321 "[GROUP_CLIENT_ONLY]" : "",
4322 dev->flags & P2P_DEV_FORCE_FREQ ?
4323 "[FORCE_FREQ]" : "",
4324 dev->flags & P2P_DEV_PD_FOR_JOIN ?
4325 "[PD_FOR_JOIN]" : "",
4326 dev->flags & P2P_DEV_LAST_SEEN_AS_GROUP_CLIENT ?
4327 "[LAST_SEEN_AS_GROUP_CLIENT]" : "",
4328 dev->status,
4329 dev->invitation_reqs);
4330 if (os_snprintf_error(end - pos, res))
4331 return pos - buf;
4332 pos += res;
4333
4334 if (dev->ext_listen_period) {
4335 res = os_snprintf(pos, end - pos,
4336 "ext_listen_period=%u\n"
4337 "ext_listen_interval=%u\n",
4338 dev->ext_listen_period,
4339 dev->ext_listen_interval);
4340 if (os_snprintf_error(end - pos, res))
4341 return pos - buf;
4342 pos += res;
4343 }
4344
4345 if (dev->oper_ssid_len) {
4346 res = os_snprintf(pos, end - pos,
4347 "oper_ssid=%s\n",
4348 wpa_ssid_txt(dev->oper_ssid,
4349 dev->oper_ssid_len));
4350 if (os_snprintf_error(end - pos, res))
4351 return pos - buf;
4352 pos += res;
4353 }
4354
4355 #ifdef CONFIG_WIFI_DISPLAY
4356 if (dev->info.wfd_subelems) {
4357 res = os_snprintf(pos, end - pos, "wfd_subelems=");
4358 if (os_snprintf_error(end - pos, res))
4359 return pos - buf;
4360 pos += res;
4361
4362 pos += wpa_snprintf_hex(pos, end - pos,
4363 wpabuf_head(dev->info.wfd_subelems),
4364 wpabuf_len(dev->info.wfd_subelems));
4365
4366 res = os_snprintf(pos, end - pos, "\n");
4367 if (os_snprintf_error(end - pos, res))
4368 return pos - buf;
4369 pos += res;
4370 }
4371 #endif /* CONFIG_WIFI_DISPLAY */
4372
4373 return pos - buf;
4374 }
4375
4376
p2p_peer_known(struct p2p_data * p2p,const u8 * addr)4377 int p2p_peer_known(struct p2p_data *p2p, const u8 *addr)
4378 {
4379 return p2p_get_device(p2p, addr) != NULL;
4380 }
4381
4382
p2p_set_client_discoverability(struct p2p_data * p2p,int enabled)4383 void p2p_set_client_discoverability(struct p2p_data *p2p, int enabled)
4384 {
4385 if (enabled) {
4386 p2p_dbg(p2p, "Client discoverability enabled");
4387 p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
4388 } else {
4389 p2p_dbg(p2p, "Client discoverability disabled");
4390 p2p->dev_capab &= ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
4391 }
4392 }
4393
4394
p2p_build_presence_req(u32 duration1,u32 interval1,u32 duration2,u32 interval2)4395 static struct wpabuf * p2p_build_presence_req(u32 duration1, u32 interval1,
4396 u32 duration2, u32 interval2)
4397 {
4398 struct wpabuf *req;
4399 struct p2p_noa_desc desc1, desc2, *ptr1 = NULL, *ptr2 = NULL;
4400 u8 *len;
4401
4402 req = wpabuf_alloc(100);
4403 if (req == NULL)
4404 return NULL;
4405
4406 if (duration1 || interval1) {
4407 os_memset(&desc1, 0, sizeof(desc1));
4408 desc1.count_type = 1;
4409 desc1.duration = duration1;
4410 desc1.interval = interval1;
4411 ptr1 = &desc1;
4412
4413 if (duration2 || interval2) {
4414 os_memset(&desc2, 0, sizeof(desc2));
4415 desc2.count_type = 2;
4416 desc2.duration = duration2;
4417 desc2.interval = interval2;
4418 ptr2 = &desc2;
4419 }
4420 }
4421
4422 p2p_buf_add_action_hdr(req, P2P_PRESENCE_REQ, 1);
4423 len = p2p_buf_add_ie_hdr(req);
4424 p2p_buf_add_noa(req, 0, 0, 0, ptr1, ptr2);
4425 p2p_buf_update_ie_hdr(req, len);
4426
4427 return req;
4428 }
4429
4430
p2p_presence_req(struct p2p_data * p2p,const u8 * go_interface_addr,const u8 * own_interface_addr,unsigned int freq,u32 duration1,u32 interval1,u32 duration2,u32 interval2)4431 int p2p_presence_req(struct p2p_data *p2p, const u8 *go_interface_addr,
4432 const u8 *own_interface_addr, unsigned int freq,
4433 u32 duration1, u32 interval1, u32 duration2,
4434 u32 interval2)
4435 {
4436 struct wpabuf *req;
4437
4438 p2p_dbg(p2p, "Send Presence Request to GO " MACSTR
4439 " (own interface " MACSTR ") freq=%u dur1=%u int1=%u "
4440 "dur2=%u int2=%u",
4441 MAC2STR(go_interface_addr), MAC2STR(own_interface_addr),
4442 freq, duration1, interval1, duration2, interval2);
4443
4444 req = p2p_build_presence_req(duration1, interval1, duration2,
4445 interval2);
4446 if (req == NULL)
4447 return -1;
4448
4449 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
4450 if (p2p_send_action(p2p, freq, go_interface_addr, own_interface_addr,
4451 go_interface_addr,
4452 wpabuf_head(req), wpabuf_len(req), 200) < 0) {
4453 p2p_dbg(p2p, "Failed to send Action frame");
4454 }
4455 wpabuf_free(req);
4456
4457 return 0;
4458 }
4459
4460
p2p_build_presence_resp(u8 status,const u8 * noa,size_t noa_len,u8 dialog_token)4461 static struct wpabuf * p2p_build_presence_resp(u8 status, const u8 *noa,
4462 size_t noa_len, u8 dialog_token)
4463 {
4464 struct wpabuf *resp;
4465 u8 *len;
4466
4467 resp = wpabuf_alloc(100 + noa_len);
4468 if (resp == NULL)
4469 return NULL;
4470
4471 p2p_buf_add_action_hdr(resp, P2P_PRESENCE_RESP, dialog_token);
4472 len = p2p_buf_add_ie_hdr(resp);
4473 p2p_buf_add_status(resp, status);
4474 if (noa) {
4475 wpabuf_put_u8(resp, P2P_ATTR_NOTICE_OF_ABSENCE);
4476 wpabuf_put_le16(resp, noa_len);
4477 wpabuf_put_data(resp, noa, noa_len);
4478 } else
4479 p2p_buf_add_noa(resp, 0, 0, 0, NULL, NULL);
4480 p2p_buf_update_ie_hdr(resp, len);
4481
4482 return resp;
4483 }
4484
4485
p2p_process_presence_req(struct p2p_data * p2p,const u8 * da,const u8 * sa,const u8 * data,size_t len,int rx_freq)4486 static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
4487 const u8 *sa, const u8 *data, size_t len,
4488 int rx_freq)
4489 {
4490 struct p2p_message msg;
4491 u8 status;
4492 struct wpabuf *resp;
4493 size_t g;
4494 struct p2p_group *group = NULL;
4495 int parsed = 0;
4496 u8 noa[50];
4497 int noa_len;
4498
4499 p2p_dbg(p2p, "Received P2P Action - P2P Presence Request");
4500
4501 for (g = 0; g < p2p->num_groups; g++) {
4502 if (os_memcmp(da, p2p_group_get_interface_addr(p2p->groups[g]),
4503 ETH_ALEN) == 0) {
4504 group = p2p->groups[g];
4505 break;
4506 }
4507 }
4508 if (group == NULL) {
4509 p2p_dbg(p2p, "Ignore P2P Presence Request for unknown group "
4510 MACSTR, MAC2STR(da));
4511 return;
4512 }
4513
4514 if (p2p_parse(data, len, &msg) < 0) {
4515 p2p_dbg(p2p, "Failed to parse P2P Presence Request");
4516 status = P2P_SC_FAIL_INVALID_PARAMS;
4517 goto fail;
4518 }
4519 parsed = 1;
4520
4521 if (msg.noa == NULL) {
4522 p2p_dbg(p2p, "No NoA attribute in P2P Presence Request");
4523 status = P2P_SC_FAIL_INVALID_PARAMS;
4524 goto fail;
4525 }
4526
4527 status = p2p_group_presence_req(group, sa, msg.noa, msg.noa_len);
4528
4529 fail:
4530 if (p2p->cfg->get_noa)
4531 noa_len = p2p->cfg->get_noa(p2p->cfg->cb_ctx, da, noa,
4532 sizeof(noa));
4533 else
4534 noa_len = -1;
4535 resp = p2p_build_presence_resp(status, noa_len > 0 ? noa : NULL,
4536 noa_len > 0 ? noa_len : 0,
4537 msg.dialog_token);
4538 if (parsed)
4539 p2p_parse_free(&msg);
4540 if (resp == NULL)
4541 return;
4542
4543 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
4544 if (p2p_send_action(p2p, rx_freq, sa, da, da,
4545 wpabuf_head(resp), wpabuf_len(resp), 200) < 0) {
4546 p2p_dbg(p2p, "Failed to send Action frame");
4547 }
4548 wpabuf_free(resp);
4549 }
4550
4551
p2p_process_presence_resp(struct p2p_data * p2p,const u8 * da,const u8 * sa,const u8 * data,size_t len)4552 static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
4553 const u8 *sa, const u8 *data, size_t len)
4554 {
4555 struct p2p_message msg;
4556
4557 p2p_dbg(p2p, "Received P2P Action - P2P Presence Response");
4558
4559 if (p2p_parse(data, len, &msg) < 0) {
4560 p2p_dbg(p2p, "Failed to parse P2P Presence Response");
4561 return;
4562 }
4563
4564 if (msg.status == NULL || msg.noa == NULL) {
4565 p2p_dbg(p2p, "No Status or NoA attribute in P2P Presence Response");
4566 p2p_parse_free(&msg);
4567 return;
4568 }
4569
4570 if (p2p->cfg->presence_resp) {
4571 p2p->cfg->presence_resp(p2p->cfg->cb_ctx, sa, *msg.status,
4572 msg.noa, msg.noa_len);
4573 }
4574
4575 if (*msg.status) {
4576 p2p_dbg(p2p, "P2P Presence Request was rejected: status %u",
4577 *msg.status);
4578 p2p_parse_free(&msg);
4579 return;
4580 }
4581
4582 p2p_dbg(p2p, "P2P Presence Request was accepted");
4583 wpa_hexdump(MSG_DEBUG, "P2P: P2P Presence Response - NoA",
4584 msg.noa, msg.noa_len);
4585 /* TODO: process NoA */
4586 p2p_parse_free(&msg);
4587 }
4588
4589
p2p_ext_listen_timeout(void * eloop_ctx,void * timeout_ctx)4590 static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx)
4591 {
4592 struct p2p_data *p2p = eloop_ctx;
4593
4594 if (p2p->ext_listen_interval) {
4595 /* Schedule next extended listen timeout */
4596 eloop_register_timeout(p2p->ext_listen_interval_sec,
4597 p2p->ext_listen_interval_usec,
4598 p2p_ext_listen_timeout, p2p, NULL);
4599 }
4600
4601 if ((p2p->cfg->is_p2p_in_progress &&
4602 p2p->cfg->is_p2p_in_progress(p2p->cfg->cb_ctx)) ||
4603 (p2p->pending_action_state == P2P_PENDING_PD &&
4604 p2p->pd_retries > 0)) {
4605 p2p_dbg(p2p, "Operation in progress - skip Extended Listen timeout (%s)",
4606 p2p_state_txt(p2p->state));
4607 return;
4608 }
4609
4610 if (p2p->state == P2P_LISTEN_ONLY && p2p->ext_listen_only) {
4611 /*
4612 * This should not really happen, but it looks like the Listen
4613 * command may fail is something else (e.g., a scan) was
4614 * running at an inconvenient time. As a workaround, allow new
4615 * Extended Listen operation to be started.
4616 */
4617 p2p_dbg(p2p, "Previous Extended Listen operation had not been completed - try again");
4618 p2p->ext_listen_only = 0;
4619 p2p_set_state(p2p, P2P_IDLE);
4620 }
4621
4622 if (p2p->state != P2P_IDLE) {
4623 p2p_dbg(p2p, "Skip Extended Listen timeout in active state (%s)", p2p_state_txt(p2p->state));
4624 return;
4625 }
4626
4627 p2p_dbg(p2p, "Extended Listen timeout");
4628 p2p->ext_listen_only = 1;
4629 if (p2p_listen(p2p, p2p->ext_listen_period) < 0) {
4630 p2p_dbg(p2p, "Failed to start Listen state for Extended Listen Timing");
4631 p2p->ext_listen_only = 0;
4632 }
4633 }
4634
4635
p2p_ext_listen(struct p2p_data * p2p,unsigned int period,unsigned int interval)4636 int p2p_ext_listen(struct p2p_data *p2p, unsigned int period,
4637 unsigned int interval)
4638 {
4639 if (period > 65535 || interval > 65535 || period > interval ||
4640 (period == 0 && interval > 0) || (period > 0 && interval == 0)) {
4641 p2p_dbg(p2p, "Invalid Extended Listen Timing request: period=%u interval=%u",
4642 period, interval);
4643 return -1;
4644 }
4645
4646 eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
4647
4648 if (interval == 0) {
4649 p2p_dbg(p2p, "Disabling Extended Listen Timing");
4650 p2p->ext_listen_period = 0;
4651 p2p->ext_listen_interval = 0;
4652 return 0;
4653 }
4654
4655 p2p_dbg(p2p, "Enabling Extended Listen Timing: period %u msec, interval %u msec",
4656 period, interval);
4657 p2p->ext_listen_period = period;
4658 p2p->ext_listen_interval = interval;
4659 p2p->ext_listen_interval_sec = interval / 1000;
4660 p2p->ext_listen_interval_usec = (interval % 1000) * 1000;
4661
4662 eloop_register_timeout(p2p->ext_listen_interval_sec,
4663 p2p->ext_listen_interval_usec,
4664 p2p_ext_listen_timeout, p2p, NULL);
4665
4666 return 0;
4667 }
4668
4669
p2p_deauth_notif(struct p2p_data * p2p,const u8 * bssid,u16 reason_code,const u8 * ie,size_t ie_len)4670 void p2p_deauth_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
4671 const u8 *ie, size_t ie_len)
4672 {
4673 struct p2p_message msg;
4674
4675 if (bssid == NULL || ie == NULL)
4676 return;
4677
4678 os_memset(&msg, 0, sizeof(msg));
4679 if (p2p_parse_ies(ie, ie_len, &msg))
4680 return;
4681 if (msg.minor_reason_code == NULL) {
4682 p2p_parse_free(&msg);
4683 return;
4684 }
4685
4686 p2p_dbg(p2p, "Deauthentication notification BSSID " MACSTR
4687 " reason_code=%u minor_reason_code=%u",
4688 MAC2STR(bssid), reason_code, *msg.minor_reason_code);
4689
4690 p2p_parse_free(&msg);
4691 }
4692
4693
p2p_disassoc_notif(struct p2p_data * p2p,const u8 * bssid,u16 reason_code,const u8 * ie,size_t ie_len)4694 void p2p_disassoc_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
4695 const u8 *ie, size_t ie_len)
4696 {
4697 struct p2p_message msg;
4698
4699 if (bssid == NULL || ie == NULL)
4700 return;
4701
4702 os_memset(&msg, 0, sizeof(msg));
4703 if (p2p_parse_ies(ie, ie_len, &msg))
4704 return;
4705 if (msg.minor_reason_code == NULL) {
4706 p2p_parse_free(&msg);
4707 return;
4708 }
4709
4710 p2p_dbg(p2p, "Disassociation notification BSSID " MACSTR
4711 " reason_code=%u minor_reason_code=%u",
4712 MAC2STR(bssid), reason_code, *msg.minor_reason_code);
4713
4714 p2p_parse_free(&msg);
4715 }
4716
4717
p2p_set_managed_oper(struct p2p_data * p2p,int enabled)4718 void p2p_set_managed_oper(struct p2p_data *p2p, int enabled)
4719 {
4720 if (enabled) {
4721 p2p_dbg(p2p, "Managed P2P Device operations enabled");
4722 p2p->dev_capab |= P2P_DEV_CAPAB_INFRA_MANAGED;
4723 } else {
4724 p2p_dbg(p2p, "Managed P2P Device operations disabled");
4725 p2p->dev_capab &= ~P2P_DEV_CAPAB_INFRA_MANAGED;
4726 }
4727 }
4728
4729
p2p_config_get_random_social(struct p2p_config * p2p,u8 * op_class,u8 * op_channel,struct wpa_freq_range_list * avoid_list,struct wpa_freq_range_list * disallow_list)4730 int p2p_config_get_random_social(struct p2p_config *p2p, u8 *op_class,
4731 u8 *op_channel,
4732 struct wpa_freq_range_list *avoid_list,
4733 struct wpa_freq_range_list *disallow_list)
4734 {
4735 return p2p_channel_random_social(&p2p->channels, op_class, op_channel,
4736 avoid_list, disallow_list);
4737 }
4738
4739
p2p_set_listen_channel(struct p2p_data * p2p,u8 reg_class,u8 channel,u8 forced)4740 int p2p_set_listen_channel(struct p2p_data *p2p, u8 reg_class, u8 channel,
4741 u8 forced)
4742 {
4743 if (p2p_channel_to_freq(reg_class, channel) < 0)
4744 return -1;
4745
4746 /*
4747 * Listen channel was set in configuration or set by control interface;
4748 * cannot override it.
4749 */
4750 if (p2p->cfg->channel_forced && forced == 0) {
4751 p2p_dbg(p2p,
4752 "Listen channel was previously configured - do not override based on optimization");
4753 return -1;
4754 }
4755
4756 p2p_dbg(p2p, "Set Listen channel: reg_class %u channel %u",
4757 reg_class, channel);
4758
4759 if (p2p->state == P2P_IDLE) {
4760 p2p->cfg->reg_class = reg_class;
4761 p2p->cfg->channel = channel;
4762 p2p->cfg->channel_forced = forced;
4763 } else {
4764 p2p_dbg(p2p, "Defer setting listen channel");
4765 p2p->pending_reg_class = reg_class;
4766 p2p->pending_channel = channel;
4767 p2p->pending_channel_forced = forced;
4768 }
4769
4770 return 0;
4771 }
4772
4773
p2p_get_listen_channel(struct p2p_data * p2p)4774 u8 p2p_get_listen_channel(struct p2p_data *p2p)
4775 {
4776 return p2p->cfg->channel;
4777 }
4778
4779
p2p_set_ssid_postfix(struct p2p_data * p2p,const u8 * postfix,size_t len)4780 int p2p_set_ssid_postfix(struct p2p_data *p2p, const u8 *postfix, size_t len)
4781 {
4782 p2p_dbg(p2p, "New SSID postfix: %s", wpa_ssid_txt(postfix, len));
4783 if (postfix == NULL) {
4784 p2p->cfg->ssid_postfix_len = 0;
4785 return 0;
4786 }
4787 if (len > sizeof(p2p->cfg->ssid_postfix))
4788 return -1;
4789 os_memcpy(p2p->cfg->ssid_postfix, postfix, len);
4790 p2p->cfg->ssid_postfix_len = len;
4791 return 0;
4792 }
4793
4794
p2p_set_oper_channel(struct p2p_data * p2p,u8 op_reg_class,u8 op_channel,int cfg_op_channel)4795 int p2p_set_oper_channel(struct p2p_data *p2p, u8 op_reg_class, u8 op_channel,
4796 int cfg_op_channel)
4797 {
4798 if (p2p_channel_to_freq(op_reg_class, op_channel) < 0)
4799 return -1;
4800
4801 p2p_dbg(p2p, "Set Operating channel: reg_class %u channel %u",
4802 op_reg_class, op_channel);
4803 p2p->cfg->op_reg_class = op_reg_class;
4804 p2p->cfg->op_channel = op_channel;
4805 p2p->cfg->cfg_op_channel = cfg_op_channel;
4806 return 0;
4807 }
4808
4809
p2p_set_pref_chan(struct p2p_data * p2p,unsigned int num_pref_chan,const struct p2p_channel * pref_chan)4810 int p2p_set_pref_chan(struct p2p_data *p2p, unsigned int num_pref_chan,
4811 const struct p2p_channel *pref_chan)
4812 {
4813 struct p2p_channel *n;
4814
4815 if (pref_chan) {
4816 n = os_memdup(pref_chan,
4817 num_pref_chan * sizeof(struct p2p_channel));
4818 if (n == NULL)
4819 return -1;
4820 } else
4821 n = NULL;
4822
4823 os_free(p2p->cfg->pref_chan);
4824 p2p->cfg->pref_chan = n;
4825 p2p->cfg->num_pref_chan = num_pref_chan;
4826
4827 return 0;
4828 }
4829
4830
p2p_set_no_go_freq(struct p2p_data * p2p,const struct wpa_freq_range_list * list)4831 int p2p_set_no_go_freq(struct p2p_data *p2p,
4832 const struct wpa_freq_range_list *list)
4833 {
4834 struct wpa_freq_range *tmp;
4835
4836 if (list == NULL || list->num == 0) {
4837 os_free(p2p->no_go_freq.range);
4838 p2p->no_go_freq.range = NULL;
4839 p2p->no_go_freq.num = 0;
4840 return 0;
4841 }
4842
4843 tmp = os_calloc(list->num, sizeof(struct wpa_freq_range));
4844 if (tmp == NULL)
4845 return -1;
4846 os_memcpy(tmp, list->range, list->num * sizeof(struct wpa_freq_range));
4847 os_free(p2p->no_go_freq.range);
4848 p2p->no_go_freq.range = tmp;
4849 p2p->no_go_freq.num = list->num;
4850 p2p_dbg(p2p, "Updated no GO chan list");
4851
4852 return 0;
4853 }
4854
4855
p2p_get_interface_addr(struct p2p_data * p2p,const u8 * dev_addr,u8 * iface_addr)4856 int p2p_get_interface_addr(struct p2p_data *p2p, const u8 *dev_addr,
4857 u8 *iface_addr)
4858 {
4859 struct p2p_device *dev = p2p_get_device(p2p, dev_addr);
4860 if (dev == NULL || is_zero_ether_addr(dev->interface_addr))
4861 return -1;
4862 os_memcpy(iface_addr, dev->interface_addr, ETH_ALEN);
4863 return 0;
4864 }
4865
4866
p2p_get_dev_addr(struct p2p_data * p2p,const u8 * iface_addr,u8 * dev_addr)4867 int p2p_get_dev_addr(struct p2p_data *p2p, const u8 *iface_addr,
4868 u8 *dev_addr)
4869 {
4870 struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
4871 if (dev == NULL)
4872 return -1;
4873 os_memcpy(dev_addr, dev->info.p2p_device_addr, ETH_ALEN);
4874 return 0;
4875 }
4876
4877
p2p_set_peer_filter(struct p2p_data * p2p,const u8 * addr)4878 void p2p_set_peer_filter(struct p2p_data *p2p, const u8 *addr)
4879 {
4880 os_memcpy(p2p->peer_filter, addr, ETH_ALEN);
4881 if (is_zero_ether_addr(p2p->peer_filter))
4882 p2p_dbg(p2p, "Disable peer filter");
4883 else
4884 p2p_dbg(p2p, "Enable peer filter for " MACSTR,
4885 MAC2STR(p2p->peer_filter));
4886 }
4887
4888
p2p_set_cross_connect(struct p2p_data * p2p,int enabled)4889 void p2p_set_cross_connect(struct p2p_data *p2p, int enabled)
4890 {
4891 p2p_dbg(p2p, "Cross connection %s", enabled ? "enabled" : "disabled");
4892 if (p2p->cross_connect == enabled)
4893 return;
4894 p2p->cross_connect = enabled;
4895 /* TODO: may need to tear down any action group where we are GO(?) */
4896 }
4897
4898
p2p_get_oper_freq(struct p2p_data * p2p,const u8 * iface_addr)4899 int p2p_get_oper_freq(struct p2p_data *p2p, const u8 *iface_addr)
4900 {
4901 struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
4902 if (dev == NULL)
4903 return -1;
4904 if (dev->oper_freq <= 0)
4905 return -1;
4906 return dev->oper_freq;
4907 }
4908
4909
p2p_set_intra_bss_dist(struct p2p_data * p2p,int enabled)4910 void p2p_set_intra_bss_dist(struct p2p_data *p2p, int enabled)
4911 {
4912 p2p_dbg(p2p, "Intra BSS distribution %s",
4913 enabled ? "enabled" : "disabled");
4914 p2p->cfg->p2p_intra_bss = enabled;
4915 }
4916
4917
p2p_update_channel_list(struct p2p_data * p2p,const struct p2p_channels * chan,const struct p2p_channels * cli_chan)4918 void p2p_update_channel_list(struct p2p_data *p2p,
4919 const struct p2p_channels *chan,
4920 const struct p2p_channels *cli_chan)
4921 {
4922 p2p_dbg(p2p, "Update channel list");
4923 os_memcpy(&p2p->cfg->channels, chan, sizeof(struct p2p_channels));
4924 p2p_channels_dump(p2p, "channels", &p2p->cfg->channels);
4925 os_memcpy(&p2p->cfg->cli_channels, cli_chan,
4926 sizeof(struct p2p_channels));
4927 p2p_channels_dump(p2p, "cli_channels", &p2p->cfg->cli_channels);
4928 }
4929
4930
p2p_send_action(struct p2p_data * p2p,unsigned int freq,const u8 * dst,const u8 * src,const u8 * bssid,const u8 * buf,size_t len,unsigned int wait_time)4931 int p2p_send_action(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
4932 const u8 *src, const u8 *bssid, const u8 *buf,
4933 size_t len, unsigned int wait_time)
4934 {
4935 int res, scheduled;
4936
4937 res = p2p->cfg->send_action(p2p->cfg->cb_ctx, freq, dst, src, bssid,
4938 buf, len, wait_time, &scheduled);
4939 if (res == 0 && scheduled && p2p->in_listen && freq > 0 &&
4940 p2p->drv_in_listen > 0 &&
4941 (unsigned int) p2p->drv_in_listen != freq) {
4942 p2p_dbg(p2p,
4943 "Stop listen on %d MHz to allow a frame to be sent immediately on %d MHz",
4944 p2p->drv_in_listen, freq);
4945 p2p_stop_listen_for_freq(p2p, freq);
4946 }
4947 return res;
4948 }
4949
4950
p2p_set_best_channels(struct p2p_data * p2p,int freq_24,int freq_5,int freq_overall)4951 void p2p_set_best_channels(struct p2p_data *p2p, int freq_24, int freq_5,
4952 int freq_overall)
4953 {
4954 p2p_dbg(p2p, "Best channel: 2.4 GHz: %d, 5 GHz: %d, overall: %d",
4955 freq_24, freq_5, freq_overall);
4956 p2p->best_freq_24 = freq_24;
4957 p2p->best_freq_5 = freq_5;
4958 p2p->best_freq_overall = freq_overall;
4959 }
4960
4961
p2p_set_own_freq_preference(struct p2p_data * p2p,int freq)4962 void p2p_set_own_freq_preference(struct p2p_data *p2p, int freq)
4963 {
4964 p2p_dbg(p2p, "Own frequency preference: %d MHz", freq);
4965 p2p->own_freq_preference = freq;
4966 }
4967
4968
p2p_get_go_neg_peer(struct p2p_data * p2p)4969 const u8 * p2p_get_go_neg_peer(struct p2p_data *p2p)
4970 {
4971 if (p2p == NULL || p2p->go_neg_peer == NULL)
4972 return NULL;
4973 return p2p->go_neg_peer->info.p2p_device_addr;
4974 }
4975
4976
4977 const struct p2p_peer_info *
p2p_get_peer_found(struct p2p_data * p2p,const u8 * addr,int next)4978 p2p_get_peer_found(struct p2p_data *p2p, const u8 *addr, int next)
4979 {
4980 struct p2p_device *dev;
4981
4982 if (addr) {
4983 dev = p2p_get_device(p2p, addr);
4984 if (!dev)
4985 return NULL;
4986
4987 if (!next) {
4988 if (dev->flags & P2P_DEV_PROBE_REQ_ONLY)
4989 return NULL;
4990
4991 return &dev->info;
4992 } else {
4993 do {
4994 dev = dl_list_first(&dev->list,
4995 struct p2p_device,
4996 list);
4997 if (!dev || &dev->list == &p2p->devices)
4998 return NULL;
4999 } while (dev->flags & P2P_DEV_PROBE_REQ_ONLY);
5000 }
5001 } else {
5002 dev = dl_list_first(&p2p->devices, struct p2p_device, list);
5003 if (!dev)
5004 return NULL;
5005 while (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
5006 dev = dl_list_first(&dev->list,
5007 struct p2p_device,
5008 list);
5009 if (!dev || &dev->list == &p2p->devices)
5010 return NULL;
5011 }
5012 }
5013
5014 return &dev->info;
5015 }
5016
5017
p2p_in_progress(struct p2p_data * p2p)5018 int p2p_in_progress(struct p2p_data *p2p)
5019 {
5020 if (p2p == NULL)
5021 return 0;
5022 if (p2p->state == P2P_SEARCH)
5023 return 2;
5024 return p2p->state != P2P_IDLE && p2p->state != P2P_PROVISIONING;
5025 }
5026
5027
p2p_set_config_timeout(struct p2p_data * p2p,u8 go_timeout,u8 client_timeout)5028 void p2p_set_config_timeout(struct p2p_data *p2p, u8 go_timeout,
5029 u8 client_timeout)
5030 {
5031 if (p2p) {
5032 p2p->go_timeout = go_timeout;
5033 p2p->client_timeout = client_timeout;
5034 }
5035 }
5036
5037
5038 #ifdef CONFIG_WIFI_DISPLAY
5039
p2p_update_wfd_ie_groups(struct p2p_data * p2p)5040 static void p2p_update_wfd_ie_groups(struct p2p_data *p2p)
5041 {
5042 size_t g;
5043 struct p2p_group *group;
5044
5045 for (g = 0; g < p2p->num_groups; g++) {
5046 group = p2p->groups[g];
5047 p2p_group_force_beacon_update_ies(group);
5048 }
5049 }
5050
5051
p2p_set_wfd_ie_beacon(struct p2p_data * p2p,struct wpabuf * ie)5052 int p2p_set_wfd_ie_beacon(struct p2p_data *p2p, struct wpabuf *ie)
5053 {
5054 wpabuf_free(p2p->wfd_ie_beacon);
5055 p2p->wfd_ie_beacon = ie;
5056 p2p_update_wfd_ie_groups(p2p);
5057 return 0;
5058 }
5059
5060
p2p_set_wfd_ie_probe_req(struct p2p_data * p2p,struct wpabuf * ie)5061 int p2p_set_wfd_ie_probe_req(struct p2p_data *p2p, struct wpabuf *ie)
5062 {
5063 wpabuf_free(p2p->wfd_ie_probe_req);
5064 p2p->wfd_ie_probe_req = ie;
5065 return 0;
5066 }
5067
5068
p2p_set_wfd_ie_probe_resp(struct p2p_data * p2p,struct wpabuf * ie)5069 int p2p_set_wfd_ie_probe_resp(struct p2p_data *p2p, struct wpabuf *ie)
5070 {
5071 wpabuf_free(p2p->wfd_ie_probe_resp);
5072 p2p->wfd_ie_probe_resp = ie;
5073 p2p_update_wfd_ie_groups(p2p);
5074 return 0;
5075 }
5076
5077
p2p_set_wfd_ie_assoc_req(struct p2p_data * p2p,struct wpabuf * ie)5078 int p2p_set_wfd_ie_assoc_req(struct p2p_data *p2p, struct wpabuf *ie)
5079 {
5080 wpabuf_free(p2p->wfd_ie_assoc_req);
5081 p2p->wfd_ie_assoc_req = ie;
5082 return 0;
5083 }
5084
5085
p2p_set_wfd_ie_invitation(struct p2p_data * p2p,struct wpabuf * ie)5086 int p2p_set_wfd_ie_invitation(struct p2p_data *p2p, struct wpabuf *ie)
5087 {
5088 wpabuf_free(p2p->wfd_ie_invitation);
5089 p2p->wfd_ie_invitation = ie;
5090 return 0;
5091 }
5092
5093
p2p_set_wfd_ie_prov_disc_req(struct p2p_data * p2p,struct wpabuf * ie)5094 int p2p_set_wfd_ie_prov_disc_req(struct p2p_data *p2p, struct wpabuf *ie)
5095 {
5096 wpabuf_free(p2p->wfd_ie_prov_disc_req);
5097 p2p->wfd_ie_prov_disc_req = ie;
5098 return 0;
5099 }
5100
5101
p2p_set_wfd_ie_prov_disc_resp(struct p2p_data * p2p,struct wpabuf * ie)5102 int p2p_set_wfd_ie_prov_disc_resp(struct p2p_data *p2p, struct wpabuf *ie)
5103 {
5104 wpabuf_free(p2p->wfd_ie_prov_disc_resp);
5105 p2p->wfd_ie_prov_disc_resp = ie;
5106 return 0;
5107 }
5108
5109
p2p_set_wfd_ie_go_neg(struct p2p_data * p2p,struct wpabuf * ie)5110 int p2p_set_wfd_ie_go_neg(struct p2p_data *p2p, struct wpabuf *ie)
5111 {
5112 wpabuf_free(p2p->wfd_ie_go_neg);
5113 p2p->wfd_ie_go_neg = ie;
5114 return 0;
5115 }
5116
5117
p2p_set_wfd_dev_info(struct p2p_data * p2p,const struct wpabuf * elem)5118 int p2p_set_wfd_dev_info(struct p2p_data *p2p, const struct wpabuf *elem)
5119 {
5120 wpabuf_free(p2p->wfd_dev_info);
5121 if (elem) {
5122 p2p->wfd_dev_info = wpabuf_dup(elem);
5123 if (p2p->wfd_dev_info == NULL)
5124 return -1;
5125 } else
5126 p2p->wfd_dev_info = NULL;
5127
5128 return 0;
5129 }
5130
5131
p2p_set_wfd_r2_dev_info(struct p2p_data * p2p,const struct wpabuf * elem)5132 int p2p_set_wfd_r2_dev_info(struct p2p_data *p2p, const struct wpabuf *elem)
5133 {
5134 wpabuf_free(p2p->wfd_r2_dev_info);
5135 if (elem) {
5136 p2p->wfd_r2_dev_info = wpabuf_dup(elem);
5137 if (p2p->wfd_r2_dev_info == NULL)
5138 return -1;
5139 } else
5140 p2p->wfd_r2_dev_info = NULL;
5141
5142 return 0;
5143 }
5144
5145
p2p_set_wfd_assoc_bssid(struct p2p_data * p2p,const struct wpabuf * elem)5146 int p2p_set_wfd_assoc_bssid(struct p2p_data *p2p, const struct wpabuf *elem)
5147 {
5148 wpabuf_free(p2p->wfd_assoc_bssid);
5149 if (elem) {
5150 p2p->wfd_assoc_bssid = wpabuf_dup(elem);
5151 if (p2p->wfd_assoc_bssid == NULL)
5152 return -1;
5153 } else
5154 p2p->wfd_assoc_bssid = NULL;
5155
5156 return 0;
5157 }
5158
5159
p2p_set_wfd_coupled_sink_info(struct p2p_data * p2p,const struct wpabuf * elem)5160 int p2p_set_wfd_coupled_sink_info(struct p2p_data *p2p,
5161 const struct wpabuf *elem)
5162 {
5163 wpabuf_free(p2p->wfd_coupled_sink_info);
5164 if (elem) {
5165 p2p->wfd_coupled_sink_info = wpabuf_dup(elem);
5166 if (p2p->wfd_coupled_sink_info == NULL)
5167 return -1;
5168 } else
5169 p2p->wfd_coupled_sink_info = NULL;
5170
5171 return 0;
5172 }
5173
5174 #endif /* CONFIG_WIFI_DISPLAY */
5175
5176
p2p_set_disc_int(struct p2p_data * p2p,int min_disc_int,int max_disc_int,int max_disc_tu)5177 int p2p_set_disc_int(struct p2p_data *p2p, int min_disc_int, int max_disc_int,
5178 int max_disc_tu)
5179 {
5180 if (min_disc_int > max_disc_int || min_disc_int < 0 || max_disc_int < 0)
5181 return -1;
5182
5183 p2p->min_disc_int = min_disc_int;
5184 p2p->max_disc_int = max_disc_int;
5185 p2p->max_disc_tu = max_disc_tu;
5186 p2p_dbg(p2p, "Set discoverable interval: min=%d max=%d max_tu=%d",
5187 min_disc_int, max_disc_int, max_disc_tu);
5188
5189 return 0;
5190 }
5191
5192
p2p_dbg(struct p2p_data * p2p,const char * fmt,...)5193 void p2p_dbg(struct p2p_data *p2p, const char *fmt, ...)
5194 {
5195 va_list ap;
5196 char buf[500];
5197
5198 if (!p2p->cfg->debug_print)
5199 return;
5200
5201 va_start(ap, fmt);
5202 vsnprintf(buf, sizeof(buf), fmt, ap);
5203 buf[sizeof(buf) - 1] = '\0';
5204 va_end(ap);
5205 p2p->cfg->debug_print(p2p->cfg->cb_ctx, MSG_DEBUG, buf);
5206 }
5207
5208
p2p_info(struct p2p_data * p2p,const char * fmt,...)5209 void p2p_info(struct p2p_data *p2p, const char *fmt, ...)
5210 {
5211 va_list ap;
5212 char buf[500];
5213
5214 if (!p2p->cfg->debug_print)
5215 return;
5216
5217 va_start(ap, fmt);
5218 vsnprintf(buf, sizeof(buf), fmt, ap);
5219 buf[sizeof(buf) - 1] = '\0';
5220 va_end(ap);
5221 p2p->cfg->debug_print(p2p->cfg->cb_ctx, MSG_INFO, buf);
5222 }
5223
5224
p2p_err(struct p2p_data * p2p,const char * fmt,...)5225 void p2p_err(struct p2p_data *p2p, const char *fmt, ...)
5226 {
5227 va_list ap;
5228 char buf[500];
5229
5230 if (!p2p->cfg->debug_print)
5231 return;
5232
5233 va_start(ap, fmt);
5234 vsnprintf(buf, sizeof(buf), fmt, ap);
5235 buf[sizeof(buf) - 1] = '\0';
5236 va_end(ap);
5237 p2p->cfg->debug_print(p2p->cfg->cb_ctx, MSG_ERROR, buf);
5238 }
5239
5240
p2p_loop_on_known_peers(struct p2p_data * p2p,void (* peer_callback)(struct p2p_peer_info * peer,void * user_data),void * user_data)5241 void p2p_loop_on_known_peers(struct p2p_data *p2p,
5242 void (*peer_callback)(struct p2p_peer_info *peer,
5243 void *user_data),
5244 void *user_data)
5245 {
5246 struct p2p_device *dev, *n;
5247
5248 dl_list_for_each_safe(dev, n, &p2p->devices, struct p2p_device, list) {
5249 peer_callback(&dev->info, user_data);
5250 }
5251 }
5252
5253
5254 #ifdef CONFIG_WPS_NFC
5255
p2p_build_nfc_handover(struct p2p_data * p2p,int client_freq,const u8 * go_dev_addr,const u8 * ssid,size_t ssid_len)5256 static struct wpabuf * p2p_build_nfc_handover(struct p2p_data *p2p,
5257 int client_freq,
5258 const u8 *go_dev_addr,
5259 const u8 *ssid, size_t ssid_len)
5260 {
5261 struct wpabuf *buf;
5262 u8 op_class, channel;
5263 enum p2p_role_indication role = P2P_DEVICE_NOT_IN_GROUP;
5264
5265 buf = wpabuf_alloc(1000);
5266 if (buf == NULL)
5267 return NULL;
5268
5269 op_class = p2p->cfg->reg_class;
5270 channel = p2p->cfg->channel;
5271
5272 p2p_buf_add_capability(buf, p2p->dev_capab &
5273 ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
5274 p2p_buf_add_device_info(buf, p2p, NULL);
5275
5276 if (p2p->num_groups > 0) {
5277 int freq = p2p_group_get_freq(p2p->groups[0]);
5278 role = P2P_GO_IN_A_GROUP;
5279 if (p2p_freq_to_channel(freq, &op_class, &channel) < 0) {
5280 p2p_dbg(p2p,
5281 "Unknown GO operating frequency %d MHz for NFC handover",
5282 freq);
5283 wpabuf_free(buf);
5284 return NULL;
5285 }
5286 } else if (client_freq > 0) {
5287 role = P2P_CLIENT_IN_A_GROUP;
5288 if (p2p_freq_to_channel(client_freq, &op_class, &channel) < 0) {
5289 p2p_dbg(p2p,
5290 "Unknown client operating frequency %d MHz for NFC handover",
5291 client_freq);
5292 wpabuf_free(buf);
5293 return NULL;
5294 }
5295 }
5296
5297 p2p_buf_add_oob_go_neg_channel(buf, p2p->cfg->country, op_class,
5298 channel, role);
5299
5300 if (p2p->num_groups > 0) {
5301 /* Limit number of clients to avoid very long message */
5302 p2p_buf_add_group_info(p2p->groups[0], buf, 5);
5303 p2p_group_buf_add_id(p2p->groups[0], buf);
5304 } else if (client_freq > 0 &&
5305 go_dev_addr && !is_zero_ether_addr(go_dev_addr) &&
5306 ssid && ssid_len > 0) {
5307 /*
5308 * Add the optional P2P Group ID to indicate in which group this
5309 * device is a P2P Client.
5310 */
5311 p2p_buf_add_group_id(buf, go_dev_addr, ssid, ssid_len);
5312 }
5313
5314 return buf;
5315 }
5316
5317
p2p_build_nfc_handover_req(struct p2p_data * p2p,int client_freq,const u8 * go_dev_addr,const u8 * ssid,size_t ssid_len)5318 struct wpabuf * p2p_build_nfc_handover_req(struct p2p_data *p2p,
5319 int client_freq,
5320 const u8 *go_dev_addr,
5321 const u8 *ssid, size_t ssid_len)
5322 {
5323 return p2p_build_nfc_handover(p2p, client_freq, go_dev_addr, ssid,
5324 ssid_len);
5325 }
5326
5327
p2p_build_nfc_handover_sel(struct p2p_data * p2p,int client_freq,const u8 * go_dev_addr,const u8 * ssid,size_t ssid_len)5328 struct wpabuf * p2p_build_nfc_handover_sel(struct p2p_data *p2p,
5329 int client_freq,
5330 const u8 *go_dev_addr,
5331 const u8 *ssid, size_t ssid_len)
5332 {
5333 return p2p_build_nfc_handover(p2p, client_freq, go_dev_addr, ssid,
5334 ssid_len);
5335 }
5336
5337
p2p_process_nfc_connection_handover(struct p2p_data * p2p,struct p2p_nfc_params * params)5338 int p2p_process_nfc_connection_handover(struct p2p_data *p2p,
5339 struct p2p_nfc_params *params)
5340 {
5341 struct p2p_message msg;
5342 struct p2p_device *dev;
5343 const u8 *p2p_dev_addr;
5344 int freq;
5345 enum p2p_role_indication role;
5346
5347 params->next_step = NO_ACTION;
5348
5349 if (p2p_parse_ies_separate(params->wsc_attr, params->wsc_len,
5350 params->p2p_attr, params->p2p_len, &msg)) {
5351 p2p_dbg(p2p, "Failed to parse WSC/P2P attributes from NFC");
5352 p2p_parse_free(&msg);
5353 return -1;
5354 }
5355
5356 if (msg.p2p_device_addr)
5357 p2p_dev_addr = msg.p2p_device_addr;
5358 else if (msg.device_id)
5359 p2p_dev_addr = msg.device_id;
5360 else {
5361 p2p_dbg(p2p, "Ignore scan data without P2P Device Info or P2P Device Id");
5362 p2p_parse_free(&msg);
5363 return -1;
5364 }
5365
5366 if (msg.oob_dev_password) {
5367 os_memcpy(params->oob_dev_pw, msg.oob_dev_password,
5368 msg.oob_dev_password_len);
5369 params->oob_dev_pw_len = msg.oob_dev_password_len;
5370 }
5371
5372 dev = p2p_create_device(p2p, p2p_dev_addr);
5373 if (dev == NULL) {
5374 p2p_parse_free(&msg);
5375 return -1;
5376 }
5377
5378 params->peer = &dev->info;
5379
5380 os_get_reltime(&dev->last_seen);
5381 dev->flags &= ~(P2P_DEV_PROBE_REQ_ONLY | P2P_DEV_GROUP_CLIENT_ONLY);
5382 p2p_copy_wps_info(p2p, dev, 0, &msg);
5383
5384 if (!msg.oob_go_neg_channel) {
5385 p2p_dbg(p2p, "OOB GO Negotiation Channel attribute not included");
5386 p2p_parse_free(&msg);
5387 return -1;
5388 }
5389
5390 if (msg.oob_go_neg_channel[3] == 0 &&
5391 msg.oob_go_neg_channel[4] == 0)
5392 freq = 0;
5393 else
5394 freq = p2p_channel_to_freq(msg.oob_go_neg_channel[3],
5395 msg.oob_go_neg_channel[4]);
5396 if (freq < 0) {
5397 p2p_dbg(p2p, "Unknown peer OOB GO Neg channel");
5398 p2p_parse_free(&msg);
5399 return -1;
5400 }
5401 role = msg.oob_go_neg_channel[5];
5402
5403 if (role == P2P_GO_IN_A_GROUP) {
5404 p2p_dbg(p2p, "Peer OOB GO operating channel: %u MHz", freq);
5405 params->go_freq = freq;
5406 } else if (role == P2P_CLIENT_IN_A_GROUP) {
5407 p2p_dbg(p2p, "Peer (client) OOB GO operating channel: %u MHz",
5408 freq);
5409 params->go_freq = freq;
5410 } else
5411 p2p_dbg(p2p, "Peer OOB GO Neg channel: %u MHz", freq);
5412 dev->oob_go_neg_freq = freq;
5413
5414 if (!params->sel && role != P2P_GO_IN_A_GROUP) {
5415 freq = p2p_channel_to_freq(p2p->cfg->reg_class,
5416 p2p->cfg->channel);
5417 if (freq < 0) {
5418 p2p_dbg(p2p, "Own listen channel not known");
5419 p2p_parse_free(&msg);
5420 return -1;
5421 }
5422 p2p_dbg(p2p, "Use own Listen channel as OOB GO Neg channel: %u MHz", freq);
5423 dev->oob_go_neg_freq = freq;
5424 }
5425
5426 if (msg.group_id) {
5427 os_memcpy(params->go_dev_addr, msg.group_id, ETH_ALEN);
5428 params->go_ssid_len = msg.group_id_len - ETH_ALEN;
5429 os_memcpy(params->go_ssid, msg.group_id + ETH_ALEN,
5430 params->go_ssid_len);
5431 }
5432
5433 if (dev->flags & P2P_DEV_USER_REJECTED) {
5434 p2p_dbg(p2p, "Do not report rejected device");
5435 p2p_parse_free(&msg);
5436 return 0;
5437 }
5438
5439 if (!(dev->flags & P2P_DEV_REPORTED)) {
5440 p2p->cfg->dev_found(p2p->cfg->cb_ctx, p2p_dev_addr, &dev->info,
5441 !(dev->flags & P2P_DEV_REPORTED_ONCE));
5442 dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
5443 }
5444 p2p_parse_free(&msg);
5445
5446 if (role == P2P_GO_IN_A_GROUP && p2p->num_groups > 0)
5447 params->next_step = BOTH_GO;
5448 else if (role == P2P_GO_IN_A_GROUP)
5449 params->next_step = JOIN_GROUP;
5450 else if (role == P2P_CLIENT_IN_A_GROUP) {
5451 dev->flags |= P2P_DEV_GROUP_CLIENT_ONLY;
5452 params->next_step = PEER_CLIENT;
5453 } else if (p2p->num_groups > 0)
5454 params->next_step = AUTH_JOIN;
5455 else if (params->sel)
5456 params->next_step = INIT_GO_NEG;
5457 else
5458 params->next_step = RESP_GO_NEG;
5459
5460 return 0;
5461 }
5462
5463
p2p_set_authorized_oob_dev_pw_id(struct p2p_data * p2p,u16 dev_pw_id,int go_intent,const u8 * own_interface_addr)5464 void p2p_set_authorized_oob_dev_pw_id(struct p2p_data *p2p, u16 dev_pw_id,
5465 int go_intent,
5466 const u8 *own_interface_addr)
5467 {
5468
5469 p2p->authorized_oob_dev_pw_id = dev_pw_id;
5470 if (dev_pw_id == 0) {
5471 p2p_dbg(p2p, "NFC OOB Password unauthorized for static handover");
5472 return;
5473 }
5474
5475 p2p_dbg(p2p, "NFC OOB Password (id=%u) authorized for static handover",
5476 dev_pw_id);
5477
5478 p2p->go_intent = go_intent;
5479 os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
5480 }
5481
5482 #endif /* CONFIG_WPS_NFC */
5483
5484
p2p_set_passphrase_len(struct p2p_data * p2p,unsigned int len)5485 int p2p_set_passphrase_len(struct p2p_data *p2p, unsigned int len)
5486 {
5487 if (len < 8 || len > 63)
5488 return -1;
5489 p2p->cfg->passphrase_len = len;
5490 return 0;
5491 }
5492
5493
p2p_set_vendor_elems(struct p2p_data * p2p,struct wpabuf ** vendor_elem)5494 void p2p_set_vendor_elems(struct p2p_data *p2p, struct wpabuf **vendor_elem)
5495 {
5496 p2p->vendor_elem = vendor_elem;
5497 }
5498
5499
p2p_go_neg_wait_timeout(void * eloop_ctx,void * timeout_ctx)5500 void p2p_go_neg_wait_timeout(void *eloop_ctx, void *timeout_ctx)
5501 {
5502 struct p2p_data *p2p = eloop_ctx;
5503
5504 p2p_dbg(p2p,
5505 "Timeout on waiting peer to become ready for GO Negotiation");
5506 p2p_go_neg_failed(p2p, -1);
5507 }
5508
5509
p2p_set_own_pref_freq_list(struct p2p_data * p2p,const unsigned int * pref_freq_list,unsigned int size)5510 void p2p_set_own_pref_freq_list(struct p2p_data *p2p,
5511 const unsigned int *pref_freq_list,
5512 unsigned int size)
5513 {
5514 unsigned int i;
5515
5516 if (size > P2P_MAX_PREF_CHANNELS)
5517 size = P2P_MAX_PREF_CHANNELS;
5518 p2p->num_pref_freq = size;
5519 for (i = 0; i < size; i++) {
5520 p2p->pref_freq_list[i] = pref_freq_list[i];
5521 p2p_dbg(p2p, "Own preferred frequency list[%u]=%u MHz",
5522 i, p2p->pref_freq_list[i]);
5523 }
5524 }
5525
5526
p2p_set_override_pref_op_chan(struct p2p_data * p2p,u8 op_class,u8 chan)5527 void p2p_set_override_pref_op_chan(struct p2p_data *p2p, u8 op_class,
5528 u8 chan)
5529 {
5530 p2p->override_pref_op_class = op_class;
5531 p2p->override_pref_channel = chan;
5532 }
5533
5534
p2p_build_probe_resp_template(struct p2p_data * p2p,unsigned int freq)5535 struct wpabuf * p2p_build_probe_resp_template(struct p2p_data *p2p,
5536 unsigned int freq)
5537 {
5538 struct wpabuf *ies, *buf;
5539 u8 addr[] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
5540 int ret;
5541
5542 ies = p2p_build_probe_resp_ies(p2p, NULL, 0);
5543 if (!ies) {
5544 wpa_printf(MSG_ERROR,
5545 "CTRL: Failed to build Probe Response IEs");
5546 return NULL;
5547 }
5548
5549 buf = wpabuf_alloc(200 + wpabuf_len(ies));
5550 if (!buf) {
5551 wpabuf_free(ies);
5552 return NULL;
5553 }
5554
5555 ret = p2p_build_probe_resp_buf(p2p, buf, ies, addr, freq);
5556 wpabuf_free(ies);
5557 if (ret) {
5558 wpabuf_free(buf);
5559 return NULL;
5560 }
5561
5562 return buf;
5563 }
5564