1 /*
2 * hostapd / Station table
3 * Copyright (c) 2002-2011, Jouni Malinen <j@w1.fi>
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include "utils/includes.h"
10
11 #include "utils/common.h"
12 #include "utils/eloop.h"
13 #include "common/ieee802_11_defs.h"
14 #include "common/wpa_ctrl.h"
15 #include "radius/radius.h"
16 #include "radius/radius_client.h"
17 #include "drivers/driver.h"
18 #include "p2p/p2p.h"
19 #include "hostapd.h"
20 #include "accounting.h"
21 #include "ieee802_1x.h"
22 #include "ieee802_11.h"
23 #include "wpa_auth.h"
24 #include "preauth_auth.h"
25 #include "ap_config.h"
26 #include "beacon.h"
27 #include "ap_mlme.h"
28 #include "vlan_init.h"
29 #include "p2p_hostapd.h"
30 #include "ap_drv_ops.h"
31 #include "sta_info.h"
32
33 static void ap_sta_remove_in_other_bss(struct hostapd_data *hapd,
34 struct sta_info *sta);
35 static void ap_handle_session_timer(void *eloop_ctx, void *timeout_ctx);
36 static void ap_sta_deauth_cb_timeout(void *eloop_ctx, void *timeout_ctx);
37 static void ap_sta_disassoc_cb_timeout(void *eloop_ctx, void *timeout_ctx);
38 #ifdef CONFIG_IEEE80211W
39 static void ap_sa_query_timer(void *eloop_ctx, void *timeout_ctx);
40 #endif /* CONFIG_IEEE80211W */
41 static int ap_sta_remove(struct hostapd_data *hapd, struct sta_info *sta);
42
ap_for_each_sta(struct hostapd_data * hapd,int (* cb)(struct hostapd_data * hapd,struct sta_info * sta,void * ctx),void * ctx)43 int ap_for_each_sta(struct hostapd_data *hapd,
44 int (*cb)(struct hostapd_data *hapd, struct sta_info *sta,
45 void *ctx),
46 void *ctx)
47 {
48 struct sta_info *sta;
49
50 for (sta = hapd->sta_list; sta; sta = sta->next) {
51 if (cb(hapd, sta, ctx))
52 return 1;
53 }
54
55 return 0;
56 }
57
58
ap_get_sta(struct hostapd_data * hapd,const u8 * sta)59 struct sta_info * ap_get_sta(struct hostapd_data *hapd, const u8 *sta)
60 {
61 struct sta_info *s;
62
63 s = hapd->sta_hash[STA_HASH(sta)];
64 while (s != NULL && os_memcmp(s->addr, sta, 6) != 0)
65 s = s->hnext;
66 return s;
67 }
68
69
ap_sta_list_del(struct hostapd_data * hapd,struct sta_info * sta)70 static void ap_sta_list_del(struct hostapd_data *hapd, struct sta_info *sta)
71 {
72 struct sta_info *tmp;
73
74 if (hapd->sta_list == sta) {
75 hapd->sta_list = sta->next;
76 return;
77 }
78
79 tmp = hapd->sta_list;
80 while (tmp != NULL && tmp->next != sta)
81 tmp = tmp->next;
82 if (tmp == NULL) {
83 wpa_printf(MSG_DEBUG, "Could not remove STA " MACSTR " from "
84 "list.", MAC2STR(sta->addr));
85 } else
86 tmp->next = sta->next;
87 }
88
89
ap_sta_hash_add(struct hostapd_data * hapd,struct sta_info * sta)90 void ap_sta_hash_add(struct hostapd_data *hapd, struct sta_info *sta)
91 {
92 sta->hnext = hapd->sta_hash[STA_HASH(sta->addr)];
93 hapd->sta_hash[STA_HASH(sta->addr)] = sta;
94 }
95
96
ap_sta_hash_del(struct hostapd_data * hapd,struct sta_info * sta)97 static void ap_sta_hash_del(struct hostapd_data *hapd, struct sta_info *sta)
98 {
99 struct sta_info *s;
100
101 s = hapd->sta_hash[STA_HASH(sta->addr)];
102 if (s == NULL) return;
103 if (os_memcmp(s->addr, sta->addr, 6) == 0) {
104 hapd->sta_hash[STA_HASH(sta->addr)] = s->hnext;
105 return;
106 }
107
108 while (s->hnext != NULL &&
109 os_memcmp(s->hnext->addr, sta->addr, ETH_ALEN) != 0)
110 s = s->hnext;
111 if (s->hnext != NULL)
112 s->hnext = s->hnext->hnext;
113 else
114 wpa_printf(MSG_DEBUG, "AP: could not remove STA " MACSTR
115 " from hash table", MAC2STR(sta->addr));
116 }
117
118
ap_free_sta(struct hostapd_data * hapd,struct sta_info * sta)119 void ap_free_sta(struct hostapd_data *hapd, struct sta_info *sta)
120 {
121 int set_beacon = 0;
122
123 accounting_sta_stop(hapd, sta);
124
125 /* just in case */
126 ap_sta_set_authorized(hapd, sta, 0);
127
128 if (sta->flags & WLAN_STA_WDS)
129 hostapd_set_wds_sta(hapd, sta->addr, sta->aid, 0);
130
131 if (!(sta->flags & WLAN_STA_PREAUTH))
132 hostapd_drv_sta_remove(hapd, sta->addr);
133
134 ap_sta_hash_del(hapd, sta);
135 ap_sta_list_del(hapd, sta);
136
137 if (sta->aid > 0)
138 hapd->sta_aid[(sta->aid - 1) / 32] &=
139 ~BIT((sta->aid - 1) % 32);
140
141 hapd->num_sta--;
142 if (sta->nonerp_set) {
143 sta->nonerp_set = 0;
144 hapd->iface->num_sta_non_erp--;
145 if (hapd->iface->num_sta_non_erp == 0)
146 set_beacon++;
147 }
148
149 if (sta->no_short_slot_time_set) {
150 sta->no_short_slot_time_set = 0;
151 hapd->iface->num_sta_no_short_slot_time--;
152 if (hapd->iface->current_mode->mode == HOSTAPD_MODE_IEEE80211G
153 && hapd->iface->num_sta_no_short_slot_time == 0)
154 set_beacon++;
155 }
156
157 if (sta->no_short_preamble_set) {
158 sta->no_short_preamble_set = 0;
159 hapd->iface->num_sta_no_short_preamble--;
160 if (hapd->iface->current_mode->mode == HOSTAPD_MODE_IEEE80211G
161 && hapd->iface->num_sta_no_short_preamble == 0)
162 set_beacon++;
163 }
164
165 if (sta->no_ht_gf_set) {
166 sta->no_ht_gf_set = 0;
167 hapd->iface->num_sta_ht_no_gf--;
168 }
169
170 if (sta->no_ht_set) {
171 sta->no_ht_set = 0;
172 hapd->iface->num_sta_no_ht--;
173 }
174
175 if (sta->ht_20mhz_set) {
176 sta->ht_20mhz_set = 0;
177 hapd->iface->num_sta_ht_20mhz--;
178 }
179
180 #ifdef CONFIG_P2P
181 if (sta->no_p2p_set) {
182 sta->no_p2p_set = 0;
183 hapd->num_sta_no_p2p--;
184 if (hapd->num_sta_no_p2p == 0)
185 hostapd_p2p_non_p2p_sta_disconnected(hapd);
186 }
187 #endif /* CONFIG_P2P */
188
189 #if defined(NEED_AP_MLME) && defined(CONFIG_IEEE80211N)
190 if (hostapd_ht_operation_update(hapd->iface) > 0)
191 set_beacon++;
192 #endif /* NEED_AP_MLME && CONFIG_IEEE80211N */
193
194 if (set_beacon)
195 ieee802_11_set_beacons(hapd->iface);
196
197 eloop_cancel_timeout(ap_handle_timer, hapd, sta);
198 eloop_cancel_timeout(ap_handle_session_timer, hapd, sta);
199 eloop_cancel_timeout(ap_sta_deauth_cb_timeout, hapd, sta);
200 eloop_cancel_timeout(ap_sta_disassoc_cb_timeout, hapd, sta);
201
202 ieee802_1x_free_station(sta);
203 wpa_auth_sta_deinit(sta->wpa_sm);
204 rsn_preauth_free_station(hapd, sta);
205 #ifndef CONFIG_NO_RADIUS
206 radius_client_flush_auth(hapd->radius, sta->addr);
207 #endif /* CONFIG_NO_RADIUS */
208
209 os_free(sta->last_assoc_req);
210 os_free(sta->challenge);
211
212 #ifdef CONFIG_IEEE80211W
213 os_free(sta->sa_query_trans_id);
214 eloop_cancel_timeout(ap_sa_query_timer, hapd, sta);
215 #endif /* CONFIG_IEEE80211W */
216
217 #ifdef CONFIG_P2P
218 p2p_group_notif_disassoc(hapd->p2p_group, sta->addr);
219 #endif /* CONFIG_P2P */
220
221 wpabuf_free(sta->wps_ie);
222 wpabuf_free(sta->p2p_ie);
223
224 os_free(sta->ht_capabilities);
225 os_free(sta->psk);
226
227 os_free(sta);
228 }
229
230
hostapd_free_stas(struct hostapd_data * hapd)231 void hostapd_free_stas(struct hostapd_data *hapd)
232 {
233 struct sta_info *sta, *prev;
234
235 sta = hapd->sta_list;
236
237 while (sta) {
238 prev = sta;
239 if (sta->flags & WLAN_STA_AUTH) {
240 mlme_deauthenticate_indication(
241 hapd, sta, WLAN_REASON_UNSPECIFIED);
242 }
243 sta = sta->next;
244 wpa_printf(MSG_DEBUG, "Removing station " MACSTR,
245 MAC2STR(prev->addr));
246 ap_free_sta(hapd, prev);
247 }
248 }
249
250
251 /**
252 * ap_handle_timer - Per STA timer handler
253 * @eloop_ctx: struct hostapd_data *
254 * @timeout_ctx: struct sta_info *
255 *
256 * This function is called to check station activity and to remove inactive
257 * stations.
258 */
ap_handle_timer(void * eloop_ctx,void * timeout_ctx)259 void ap_handle_timer(void *eloop_ctx, void *timeout_ctx)
260 {
261 struct hostapd_data *hapd = eloop_ctx;
262 struct sta_info *sta = timeout_ctx;
263 unsigned long next_time = 0;
264
265 if (sta->timeout_next == STA_REMOVE) {
266 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
267 HOSTAPD_LEVEL_INFO, "deauthenticated due to "
268 "local deauth request");
269 ap_free_sta(hapd, sta);
270 return;
271 }
272
273 if ((sta->flags & WLAN_STA_ASSOC) &&
274 (sta->timeout_next == STA_NULLFUNC ||
275 sta->timeout_next == STA_DISASSOC)) {
276 int inactive_sec;
277 inactive_sec = hostapd_drv_get_inact_sec(hapd, sta->addr);
278 if (inactive_sec == -1) {
279 wpa_msg(hapd->msg_ctx, MSG_DEBUG,
280 "Check inactivity: Could not "
281 "get station info from kernel driver for "
282 MACSTR, MAC2STR(sta->addr));
283 /*
284 * The driver may not support this functionality.
285 * Anyway, try again after the next inactivity timeout,
286 * but do not disconnect the station now.
287 */
288 next_time = hapd->conf->ap_max_inactivity;
289 } else if (inactive_sec < hapd->conf->ap_max_inactivity &&
290 sta->flags & WLAN_STA_ASSOC) {
291 /* station activity detected; reset timeout state */
292 wpa_msg(hapd->msg_ctx, MSG_DEBUG,
293 "Station " MACSTR " has been active %is ago",
294 MAC2STR(sta->addr), inactive_sec);
295 sta->timeout_next = STA_NULLFUNC;
296 next_time = hapd->conf->ap_max_inactivity -
297 inactive_sec;
298 } else {
299 wpa_msg(hapd->msg_ctx, MSG_DEBUG,
300 "Station " MACSTR " has been "
301 "inactive too long: %d sec, max allowed: %d",
302 MAC2STR(sta->addr), inactive_sec,
303 hapd->conf->ap_max_inactivity);
304
305 if (hapd->conf->skip_inactivity_poll)
306 sta->timeout_next = STA_DISASSOC;
307 }
308 }
309
310 if ((sta->flags & WLAN_STA_ASSOC) &&
311 sta->timeout_next == STA_DISASSOC &&
312 !(sta->flags & WLAN_STA_PENDING_POLL) &&
313 !hapd->conf->skip_inactivity_poll) {
314 wpa_msg(hapd->msg_ctx, MSG_DEBUG, "Station " MACSTR
315 " has ACKed data poll", MAC2STR(sta->addr));
316 /* data nullfunc frame poll did not produce TX errors; assume
317 * station ACKed it */
318 sta->timeout_next = STA_NULLFUNC;
319 next_time = hapd->conf->ap_max_inactivity;
320 }
321
322 if (next_time) {
323 eloop_register_timeout(next_time, 0, ap_handle_timer, hapd,
324 sta);
325 return;
326 }
327
328 if (sta->timeout_next == STA_NULLFUNC &&
329 (sta->flags & WLAN_STA_ASSOC)) {
330 wpa_printf(MSG_DEBUG, " Polling STA");
331 sta->flags |= WLAN_STA_PENDING_POLL;
332 hostapd_drv_poll_client(hapd, hapd->own_addr, sta->addr,
333 sta->flags & WLAN_STA_WMM);
334 } else if (sta->timeout_next != STA_REMOVE) {
335 int deauth = sta->timeout_next == STA_DEAUTH;
336
337 wpa_dbg(hapd->msg_ctx, MSG_DEBUG,
338 "Timeout, sending %s info to STA " MACSTR,
339 deauth ? "deauthentication" : "disassociation",
340 MAC2STR(sta->addr));
341
342 if (deauth) {
343 hostapd_drv_sta_deauth(
344 hapd, sta->addr,
345 WLAN_REASON_PREV_AUTH_NOT_VALID);
346 } else {
347 hostapd_drv_sta_disassoc(
348 hapd, sta->addr,
349 WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY);
350 }
351 }
352
353 switch (sta->timeout_next) {
354 case STA_NULLFUNC:
355 sta->timeout_next = STA_DISASSOC;
356 eloop_register_timeout(AP_DISASSOC_DELAY, 0, ap_handle_timer,
357 hapd, sta);
358 break;
359 case STA_DISASSOC:
360 ap_sta_set_authorized(hapd, sta, 0);
361 sta->flags &= ~WLAN_STA_ASSOC;
362 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
363 if (!sta->acct_terminate_cause)
364 sta->acct_terminate_cause =
365 RADIUS_ACCT_TERMINATE_CAUSE_IDLE_TIMEOUT;
366 accounting_sta_stop(hapd, sta);
367 ieee802_1x_free_station(sta);
368 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
369 HOSTAPD_LEVEL_INFO, "disassociated due to "
370 "inactivity");
371 sta->timeout_next = STA_DEAUTH;
372 eloop_register_timeout(AP_DEAUTH_DELAY, 0, ap_handle_timer,
373 hapd, sta);
374 mlme_disassociate_indication(
375 hapd, sta, WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY);
376 break;
377 case STA_DEAUTH:
378 case STA_REMOVE:
379 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
380 HOSTAPD_LEVEL_INFO, "deauthenticated due to "
381 "inactivity (timer DEAUTH/REMOVE)");
382 if (!sta->acct_terminate_cause)
383 sta->acct_terminate_cause =
384 RADIUS_ACCT_TERMINATE_CAUSE_IDLE_TIMEOUT;
385 mlme_deauthenticate_indication(
386 hapd, sta,
387 WLAN_REASON_PREV_AUTH_NOT_VALID);
388 ap_free_sta(hapd, sta);
389 break;
390 }
391 }
392
393
ap_handle_session_timer(void * eloop_ctx,void * timeout_ctx)394 static void ap_handle_session_timer(void *eloop_ctx, void *timeout_ctx)
395 {
396 struct hostapd_data *hapd = eloop_ctx;
397 struct sta_info *sta = timeout_ctx;
398 u8 addr[ETH_ALEN];
399
400 if (!(sta->flags & WLAN_STA_AUTH))
401 return;
402
403 mlme_deauthenticate_indication(hapd, sta,
404 WLAN_REASON_PREV_AUTH_NOT_VALID);
405 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
406 HOSTAPD_LEVEL_INFO, "deauthenticated due to "
407 "session timeout");
408 sta->acct_terminate_cause =
409 RADIUS_ACCT_TERMINATE_CAUSE_SESSION_TIMEOUT;
410 os_memcpy(addr, sta->addr, ETH_ALEN);
411 ap_free_sta(hapd, sta);
412 hostapd_drv_sta_deauth(hapd, addr, WLAN_REASON_PREV_AUTH_NOT_VALID);
413 }
414
415
ap_sta_session_timeout(struct hostapd_data * hapd,struct sta_info * sta,u32 session_timeout)416 void ap_sta_session_timeout(struct hostapd_data *hapd, struct sta_info *sta,
417 u32 session_timeout)
418 {
419 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
420 HOSTAPD_LEVEL_DEBUG, "setting session timeout to %d "
421 "seconds", session_timeout);
422 eloop_cancel_timeout(ap_handle_session_timer, hapd, sta);
423 eloop_register_timeout(session_timeout, 0, ap_handle_session_timer,
424 hapd, sta);
425 }
426
427
ap_sta_no_session_timeout(struct hostapd_data * hapd,struct sta_info * sta)428 void ap_sta_no_session_timeout(struct hostapd_data *hapd, struct sta_info *sta)
429 {
430 eloop_cancel_timeout(ap_handle_session_timer, hapd, sta);
431 }
432
433
ap_sta_add(struct hostapd_data * hapd,const u8 * addr)434 struct sta_info * ap_sta_add(struct hostapd_data *hapd, const u8 *addr)
435 {
436 struct sta_info *sta;
437
438 sta = ap_get_sta(hapd, addr);
439 if (sta)
440 return sta;
441
442 wpa_printf(MSG_DEBUG, " New STA");
443 if (hapd->num_sta >= hapd->conf->max_num_sta) {
444 /* FIX: might try to remove some old STAs first? */
445 wpa_printf(MSG_DEBUG, "no more room for new STAs (%d/%d)",
446 hapd->num_sta, hapd->conf->max_num_sta);
447 return NULL;
448 }
449
450 sta = os_zalloc(sizeof(struct sta_info));
451 if (sta == NULL) {
452 wpa_printf(MSG_ERROR, "malloc failed");
453 return NULL;
454 }
455 sta->acct_interim_interval = hapd->conf->acct_interim_interval;
456
457 /* initialize STA info data */
458 eloop_register_timeout(hapd->conf->ap_max_inactivity, 0,
459 ap_handle_timer, hapd, sta);
460 os_memcpy(sta->addr, addr, ETH_ALEN);
461 sta->next = hapd->sta_list;
462 hapd->sta_list = sta;
463 hapd->num_sta++;
464 ap_sta_hash_add(hapd, sta);
465 sta->ssid = &hapd->conf->ssid;
466 ap_sta_remove_in_other_bss(hapd, sta);
467
468 return sta;
469 }
470
471
ap_sta_remove(struct hostapd_data * hapd,struct sta_info * sta)472 static int ap_sta_remove(struct hostapd_data *hapd, struct sta_info *sta)
473 {
474 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
475
476 wpa_printf(MSG_DEBUG, "Removing STA " MACSTR " from kernel driver",
477 MAC2STR(sta->addr));
478 if (hostapd_drv_sta_remove(hapd, sta->addr) &&
479 sta->flags & WLAN_STA_ASSOC) {
480 wpa_printf(MSG_DEBUG, "Could not remove station " MACSTR
481 " from kernel driver.", MAC2STR(sta->addr));
482 return -1;
483 }
484 return 0;
485 }
486
487
ap_sta_remove_in_other_bss(struct hostapd_data * hapd,struct sta_info * sta)488 static void ap_sta_remove_in_other_bss(struct hostapd_data *hapd,
489 struct sta_info *sta)
490 {
491 struct hostapd_iface *iface = hapd->iface;
492 size_t i;
493
494 for (i = 0; i < iface->num_bss; i++) {
495 struct hostapd_data *bss = iface->bss[i];
496 struct sta_info *sta2;
497 /* bss should always be set during operation, but it may be
498 * NULL during reconfiguration. Assume the STA is not
499 * associated to another BSS in that case to avoid NULL pointer
500 * dereferences. */
501 if (bss == hapd || bss == NULL)
502 continue;
503 sta2 = ap_get_sta(bss, sta->addr);
504 if (!sta2)
505 continue;
506
507 ap_sta_disconnect(bss, sta2, sta2->addr,
508 WLAN_REASON_PREV_AUTH_NOT_VALID);
509 }
510 }
511
512
ap_sta_disassoc_cb_timeout(void * eloop_ctx,void * timeout_ctx)513 static void ap_sta_disassoc_cb_timeout(void *eloop_ctx, void *timeout_ctx)
514 {
515 struct hostapd_data *hapd = eloop_ctx;
516 struct sta_info *sta = timeout_ctx;
517
518 ap_sta_remove(hapd, sta);
519 mlme_disassociate_indication(hapd, sta, sta->disassoc_reason);
520 }
521
522
ap_sta_disassociate(struct hostapd_data * hapd,struct sta_info * sta,u16 reason)523 void ap_sta_disassociate(struct hostapd_data *hapd, struct sta_info *sta,
524 u16 reason)
525 {
526 wpa_printf(MSG_DEBUG, "%s: disassociate STA " MACSTR,
527 hapd->conf->iface, MAC2STR(sta->addr));
528 sta->flags &= ~WLAN_STA_ASSOC;
529 ap_sta_set_authorized(hapd, sta, 0);
530 sta->timeout_next = STA_DEAUTH;
531 eloop_cancel_timeout(ap_handle_timer, hapd, sta);
532 eloop_register_timeout(AP_MAX_INACTIVITY_AFTER_DISASSOC, 0,
533 ap_handle_timer, hapd, sta);
534 accounting_sta_stop(hapd, sta);
535 ieee802_1x_free_station(sta);
536
537 sta->disassoc_reason = reason;
538 sta->flags |= WLAN_STA_PENDING_DISASSOC_CB;
539 eloop_cancel_timeout(ap_sta_disassoc_cb_timeout, hapd, sta);
540 eloop_register_timeout(hapd->iface->drv_flags &
541 WPA_DRIVER_FLAGS_DEAUTH_TX_STATUS ? 2 : 0, 0,
542 ap_sta_disassoc_cb_timeout, hapd, sta);
543 }
544
545
ap_sta_deauth_cb_timeout(void * eloop_ctx,void * timeout_ctx)546 static void ap_sta_deauth_cb_timeout(void *eloop_ctx, void *timeout_ctx)
547 {
548 struct hostapd_data *hapd = eloop_ctx;
549 struct sta_info *sta = timeout_ctx;
550
551 ap_sta_remove(hapd, sta);
552 mlme_deauthenticate_indication(hapd, sta, sta->deauth_reason);
553 }
554
555
ap_sta_deauthenticate(struct hostapd_data * hapd,struct sta_info * sta,u16 reason)556 void ap_sta_deauthenticate(struct hostapd_data *hapd, struct sta_info *sta,
557 u16 reason)
558 {
559 wpa_printf(MSG_DEBUG, "%s: deauthenticate STA " MACSTR,
560 hapd->conf->iface, MAC2STR(sta->addr));
561 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
562 ap_sta_set_authorized(hapd, sta, 0);
563 sta->timeout_next = STA_REMOVE;
564 eloop_cancel_timeout(ap_handle_timer, hapd, sta);
565 eloop_register_timeout(AP_MAX_INACTIVITY_AFTER_DEAUTH, 0,
566 ap_handle_timer, hapd, sta);
567 accounting_sta_stop(hapd, sta);
568 ieee802_1x_free_station(sta);
569
570 sta->deauth_reason = reason;
571 sta->flags |= WLAN_STA_PENDING_DEAUTH_CB;
572 eloop_cancel_timeout(ap_sta_deauth_cb_timeout, hapd, sta);
573 eloop_register_timeout(hapd->iface->drv_flags &
574 WPA_DRIVER_FLAGS_DEAUTH_TX_STATUS ? 2 : 0, 0,
575 ap_sta_deauth_cb_timeout, hapd, sta);
576 }
577
578
ap_sta_bind_vlan(struct hostapd_data * hapd,struct sta_info * sta,int old_vlanid)579 int ap_sta_bind_vlan(struct hostapd_data *hapd, struct sta_info *sta,
580 int old_vlanid)
581 {
582 #ifndef CONFIG_NO_VLAN
583 const char *iface;
584 struct hostapd_vlan *vlan = NULL;
585 int ret;
586
587 /*
588 * Do not proceed furthur if the vlan id remains same. We do not want
589 * duplicate dynamic vlan entries.
590 */
591 if (sta->vlan_id == old_vlanid)
592 return 0;
593
594 /*
595 * During 1x reauth, if the vlan id changes, then remove the old id and
596 * proceed furthur to add the new one.
597 */
598 if (old_vlanid > 0)
599 vlan_remove_dynamic(hapd, old_vlanid);
600
601 iface = hapd->conf->iface;
602 if (sta->ssid->vlan[0])
603 iface = sta->ssid->vlan;
604
605 if (sta->ssid->dynamic_vlan == DYNAMIC_VLAN_DISABLED)
606 sta->vlan_id = 0;
607 else if (sta->vlan_id > 0) {
608 vlan = hapd->conf->vlan;
609 while (vlan) {
610 if (vlan->vlan_id == sta->vlan_id ||
611 vlan->vlan_id == VLAN_ID_WILDCARD) {
612 iface = vlan->ifname;
613 break;
614 }
615 vlan = vlan->next;
616 }
617 }
618
619 if (sta->vlan_id > 0 && vlan == NULL) {
620 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
621 HOSTAPD_LEVEL_DEBUG, "could not find VLAN for "
622 "binding station to (vlan_id=%d)",
623 sta->vlan_id);
624 return -1;
625 } else if (sta->vlan_id > 0 && vlan->vlan_id == VLAN_ID_WILDCARD) {
626 vlan = vlan_add_dynamic(hapd, vlan, sta->vlan_id);
627 if (vlan == NULL) {
628 hostapd_logger(hapd, sta->addr,
629 HOSTAPD_MODULE_IEEE80211,
630 HOSTAPD_LEVEL_DEBUG, "could not add "
631 "dynamic VLAN interface for vlan_id=%d",
632 sta->vlan_id);
633 return -1;
634 }
635
636 iface = vlan->ifname;
637 if (vlan_setup_encryption_dyn(hapd, sta->ssid, iface) != 0) {
638 hostapd_logger(hapd, sta->addr,
639 HOSTAPD_MODULE_IEEE80211,
640 HOSTAPD_LEVEL_DEBUG, "could not "
641 "configure encryption for dynamic VLAN "
642 "interface for vlan_id=%d",
643 sta->vlan_id);
644 }
645
646 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
647 HOSTAPD_LEVEL_DEBUG, "added new dynamic VLAN "
648 "interface '%s'", iface);
649 } else if (vlan && vlan->vlan_id == sta->vlan_id) {
650 if (sta->vlan_id > 0) {
651 vlan->dynamic_vlan++;
652 hostapd_logger(hapd, sta->addr,
653 HOSTAPD_MODULE_IEEE80211,
654 HOSTAPD_LEVEL_DEBUG, "updated existing "
655 "dynamic VLAN interface '%s'", iface);
656 }
657
658 /*
659 * Update encryption configuration for statically generated
660 * VLAN interface. This is only used for static WEP
661 * configuration for the case where hostapd did not yet know
662 * which keys are to be used when the interface was added.
663 */
664 if (vlan_setup_encryption_dyn(hapd, sta->ssid, iface) != 0) {
665 hostapd_logger(hapd, sta->addr,
666 HOSTAPD_MODULE_IEEE80211,
667 HOSTAPD_LEVEL_DEBUG, "could not "
668 "configure encryption for VLAN "
669 "interface for vlan_id=%d",
670 sta->vlan_id);
671 }
672 }
673
674 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
675 HOSTAPD_LEVEL_DEBUG, "binding station to interface "
676 "'%s'", iface);
677
678 if (wpa_auth_sta_set_vlan(sta->wpa_sm, sta->vlan_id) < 0)
679 wpa_printf(MSG_INFO, "Failed to update VLAN-ID for WPA");
680
681 ret = hostapd_drv_set_sta_vlan(iface, hapd, sta->addr, sta->vlan_id);
682 if (ret < 0) {
683 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
684 HOSTAPD_LEVEL_DEBUG, "could not bind the STA "
685 "entry to vlan_id=%d", sta->vlan_id);
686 }
687 return ret;
688 #else /* CONFIG_NO_VLAN */
689 return 0;
690 #endif /* CONFIG_NO_VLAN */
691 }
692
693
694 #ifdef CONFIG_IEEE80211W
695
ap_check_sa_query_timeout(struct hostapd_data * hapd,struct sta_info * sta)696 int ap_check_sa_query_timeout(struct hostapd_data *hapd, struct sta_info *sta)
697 {
698 u32 tu;
699 struct os_time now, passed;
700 os_get_time(&now);
701 os_time_sub(&now, &sta->sa_query_start, &passed);
702 tu = (passed.sec * 1000000 + passed.usec) / 1024;
703 if (hapd->conf->assoc_sa_query_max_timeout < tu) {
704 hostapd_logger(hapd, sta->addr,
705 HOSTAPD_MODULE_IEEE80211,
706 HOSTAPD_LEVEL_DEBUG,
707 "association SA Query timed out");
708 sta->sa_query_timed_out = 1;
709 os_free(sta->sa_query_trans_id);
710 sta->sa_query_trans_id = NULL;
711 sta->sa_query_count = 0;
712 eloop_cancel_timeout(ap_sa_query_timer, hapd, sta);
713 return 1;
714 }
715
716 return 0;
717 }
718
719
ap_sa_query_timer(void * eloop_ctx,void * timeout_ctx)720 static void ap_sa_query_timer(void *eloop_ctx, void *timeout_ctx)
721 {
722 struct hostapd_data *hapd = eloop_ctx;
723 struct sta_info *sta = timeout_ctx;
724 unsigned int timeout, sec, usec;
725 u8 *trans_id, *nbuf;
726
727 if (sta->sa_query_count > 0 &&
728 ap_check_sa_query_timeout(hapd, sta))
729 return;
730
731 nbuf = os_realloc(sta->sa_query_trans_id,
732 (sta->sa_query_count + 1) * WLAN_SA_QUERY_TR_ID_LEN);
733 if (nbuf == NULL)
734 return;
735 if (sta->sa_query_count == 0) {
736 /* Starting a new SA Query procedure */
737 os_get_time(&sta->sa_query_start);
738 }
739 trans_id = nbuf + sta->sa_query_count * WLAN_SA_QUERY_TR_ID_LEN;
740 sta->sa_query_trans_id = nbuf;
741 sta->sa_query_count++;
742
743 os_get_random(trans_id, WLAN_SA_QUERY_TR_ID_LEN);
744
745 timeout = hapd->conf->assoc_sa_query_retry_timeout;
746 sec = ((timeout / 1000) * 1024) / 1000;
747 usec = (timeout % 1000) * 1024;
748 eloop_register_timeout(sec, usec, ap_sa_query_timer, hapd, sta);
749
750 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
751 HOSTAPD_LEVEL_DEBUG,
752 "association SA Query attempt %d", sta->sa_query_count);
753
754 #ifdef NEED_AP_MLME
755 ieee802_11_send_sa_query_req(hapd, sta->addr, trans_id);
756 #endif /* NEED_AP_MLME */
757 }
758
759
ap_sta_start_sa_query(struct hostapd_data * hapd,struct sta_info * sta)760 void ap_sta_start_sa_query(struct hostapd_data *hapd, struct sta_info *sta)
761 {
762 ap_sa_query_timer(hapd, sta);
763 }
764
765
ap_sta_stop_sa_query(struct hostapd_data * hapd,struct sta_info * sta)766 void ap_sta_stop_sa_query(struct hostapd_data *hapd, struct sta_info *sta)
767 {
768 eloop_cancel_timeout(ap_sa_query_timer, hapd, sta);
769 os_free(sta->sa_query_trans_id);
770 sta->sa_query_trans_id = NULL;
771 sta->sa_query_count = 0;
772 }
773
774 #endif /* CONFIG_IEEE80211W */
775
776
ap_sta_set_authorized(struct hostapd_data * hapd,struct sta_info * sta,int authorized)777 void ap_sta_set_authorized(struct hostapd_data *hapd, struct sta_info *sta,
778 int authorized)
779 {
780 const u8 *dev_addr = NULL;
781 if (!!authorized == !!(sta->flags & WLAN_STA_AUTHORIZED))
782 return;
783
784 #ifdef CONFIG_P2P
785 dev_addr = p2p_group_get_dev_addr(hapd->p2p_group, sta->addr);
786 #endif /* CONFIG_P2P */
787
788 if (authorized) {
789 if (dev_addr)
790 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_STA_CONNECTED
791 MACSTR " p2p_dev_addr=" MACSTR,
792 MAC2STR(sta->addr), MAC2STR(dev_addr));
793 else
794 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_STA_CONNECTED
795 MACSTR, MAC2STR(sta->addr));
796 if (hapd->msg_ctx_parent &&
797 hapd->msg_ctx_parent != hapd->msg_ctx && dev_addr)
798 wpa_msg(hapd->msg_ctx_parent, MSG_INFO,
799 AP_STA_CONNECTED MACSTR " p2p_dev_addr="
800 MACSTR,
801 MAC2STR(sta->addr), MAC2STR(dev_addr));
802 else if (hapd->msg_ctx_parent &&
803 hapd->msg_ctx_parent != hapd->msg_ctx)
804 wpa_msg(hapd->msg_ctx_parent, MSG_INFO,
805 AP_STA_CONNECTED MACSTR, MAC2STR(sta->addr));
806
807 sta->flags |= WLAN_STA_AUTHORIZED;
808 } else {
809 if (dev_addr)
810 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_STA_DISCONNECTED
811 MACSTR " p2p_dev_addr=" MACSTR,
812 MAC2STR(sta->addr), MAC2STR(dev_addr));
813 else
814 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_STA_DISCONNECTED
815 MACSTR, MAC2STR(sta->addr));
816 if (hapd->msg_ctx_parent &&
817 hapd->msg_ctx_parent != hapd->msg_ctx && dev_addr)
818 wpa_msg(hapd->msg_ctx_parent, MSG_INFO,
819 AP_STA_DISCONNECTED MACSTR " p2p_dev_addr="
820 MACSTR, MAC2STR(sta->addr), MAC2STR(dev_addr));
821 else if (hapd->msg_ctx_parent &&
822 hapd->msg_ctx_parent != hapd->msg_ctx)
823 wpa_msg(hapd->msg_ctx_parent, MSG_INFO,
824 AP_STA_DISCONNECTED MACSTR,
825 MAC2STR(sta->addr));
826 sta->flags &= ~WLAN_STA_AUTHORIZED;
827 }
828
829 if (hapd->sta_authorized_cb)
830 hapd->sta_authorized_cb(hapd->sta_authorized_cb_ctx,
831 sta->addr, authorized, dev_addr);
832 }
833
834
ap_sta_disconnect(struct hostapd_data * hapd,struct sta_info * sta,const u8 * addr,u16 reason)835 void ap_sta_disconnect(struct hostapd_data *hapd, struct sta_info *sta,
836 const u8 *addr, u16 reason)
837 {
838
839 if (sta == NULL && addr)
840 sta = ap_get_sta(hapd, addr);
841
842 if (addr)
843 hostapd_drv_sta_deauth(hapd, addr, reason);
844
845 if (sta == NULL)
846 return;
847 ap_sta_set_authorized(hapd, sta, 0);
848 wpa_auth_sm_event(sta->wpa_sm, WPA_DEAUTH);
849 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
850 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
851 eloop_cancel_timeout(ap_handle_timer, hapd, sta);
852 eloop_register_timeout(AP_MAX_INACTIVITY_AFTER_DEAUTH, 0,
853 ap_handle_timer, hapd, sta);
854 sta->timeout_next = STA_REMOVE;
855
856 sta->deauth_reason = reason;
857 sta->flags |= WLAN_STA_PENDING_DEAUTH_CB;
858 eloop_cancel_timeout(ap_sta_deauth_cb_timeout, hapd, sta);
859 eloop_register_timeout(hapd->iface->drv_flags &
860 WPA_DRIVER_FLAGS_DEAUTH_TX_STATUS ? 2 : 0, 0,
861 ap_sta_deauth_cb_timeout, hapd, sta);
862 }
863
864
ap_sta_deauth_cb(struct hostapd_data * hapd,struct sta_info * sta)865 void ap_sta_deauth_cb(struct hostapd_data *hapd, struct sta_info *sta)
866 {
867 if (!(sta->flags & WLAN_STA_PENDING_DEAUTH_CB)) {
868 wpa_printf(MSG_DEBUG, "Ignore deauth cb for test frame");
869 return;
870 }
871 sta->flags &= ~WLAN_STA_PENDING_DEAUTH_CB;
872 eloop_cancel_timeout(ap_sta_deauth_cb_timeout, hapd, sta);
873 ap_sta_deauth_cb_timeout(hapd, sta);
874 }
875
876
ap_sta_disassoc_cb(struct hostapd_data * hapd,struct sta_info * sta)877 void ap_sta_disassoc_cb(struct hostapd_data *hapd, struct sta_info *sta)
878 {
879 if (!(sta->flags & WLAN_STA_PENDING_DISASSOC_CB)) {
880 wpa_printf(MSG_DEBUG, "Ignore disassoc cb for test frame");
881 return;
882 }
883 sta->flags &= ~WLAN_STA_PENDING_DISASSOC_CB;
884 eloop_cancel_timeout(ap_sta_disassoc_cb_timeout, hapd, sta);
885 ap_sta_disassoc_cb_timeout(hapd, sta);
886 }
887