1 /*
2 * WPA Supplicant - driver interaction with BSD net80211 layer
3 * Copyright (c) 2004, Sam Leffler <sam@errno.com>
4 * Copyright (c) 2004, 2Wire, Inc
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
9 *
10 * Alternatively, this software may be distributed under the terms of BSD
11 * license.
12 *
13 * See README and COPYING for more details.
14 */
15
16 #include "includes.h"
17 #include <sys/ioctl.h>
18 #include <sys/sysctl.h>
19
20 #include "common.h"
21 #include "driver.h"
22 #include "eloop.h"
23 #include "common/ieee802_11_defs.h"
24 #include "common/wpa_common.h"
25
26 #include <net/if.h>
27 #include <net/if_media.h>
28
29 #ifdef __NetBSD__
30 #include <net/if_ether.h>
31 #else
32 #include <net/ethernet.h>
33 #endif
34 #include <net/route.h>
35
36 #ifdef __DragonFly__
37 #include <netproto/802_11/ieee80211_ioctl.h>
38 #include <netproto/802_11/ieee80211_dragonfly.h>
39 #else /* __DragonFly__ */
40 #ifdef __GLIBC__
41 #include <netinet/ether.h>
42 #endif /* __GLIBC__ */
43 #include <net80211/ieee80211.h>
44 #include <net80211/ieee80211_ioctl.h>
45 #include <net80211/ieee80211_crypto.h>
46 #endif /* __DragonFly__ || __GLIBC__ */
47 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
48 #include <net80211/ieee80211_freebsd.h>
49 #endif
50 #if __NetBSD__
51 #include <net80211/ieee80211_netbsd.h>
52 #endif
53
54 #include "l2_packet/l2_packet.h"
55
56 struct bsd_driver_data {
57 struct hostapd_data *hapd; /* back pointer */
58
59 int sock; /* open socket for 802.11 ioctls */
60 struct l2_packet_data *sock_xmit;/* raw packet xmit socket */
61 int route; /* routing socket for events */
62 char ifname[IFNAMSIZ+1]; /* interface name */
63 unsigned int ifindex; /* interface index */
64 void *ctx;
65 struct wpa_driver_capa capa; /* driver capability */
66 int is_ap; /* Access point mode */
67 int prev_roaming; /* roaming state to restore on deinit */
68 int prev_privacy; /* privacy state to restore on deinit */
69 int prev_wpa; /* wpa state to restore on deinit */
70 };
71
72 /* Generic functions for hostapd and wpa_supplicant */
73
74 static int
bsd_set80211(void * priv,int op,int val,const void * arg,int arg_len)75 bsd_set80211(void *priv, int op, int val, const void *arg, int arg_len)
76 {
77 struct bsd_driver_data *drv = priv;
78 struct ieee80211req ireq;
79
80 os_memset(&ireq, 0, sizeof(ireq));
81 os_strlcpy(ireq.i_name, drv->ifname, sizeof(ireq.i_name));
82 ireq.i_type = op;
83 ireq.i_val = val;
84 ireq.i_data = (void *) arg;
85 ireq.i_len = arg_len;
86
87 if (ioctl(drv->sock, SIOCS80211, &ireq) < 0) {
88 wpa_printf(MSG_ERROR, "ioctl[SIOCS80211, op=%u, val=%u, "
89 "arg_len=%u]: %s", op, val, arg_len,
90 strerror(errno));
91 return -1;
92 }
93 return 0;
94 }
95
96 static int
bsd_get80211(void * priv,struct ieee80211req * ireq,int op,void * arg,int arg_len)97 bsd_get80211(void *priv, struct ieee80211req *ireq, int op, void *arg,
98 int arg_len)
99 {
100 struct bsd_driver_data *drv = priv;
101
102 os_memset(ireq, 0, sizeof(*ireq));
103 os_strlcpy(ireq->i_name, drv->ifname, sizeof(ireq->i_name));
104 ireq->i_type = op;
105 ireq->i_len = arg_len;
106 ireq->i_data = arg;
107
108 if (ioctl(drv->sock, SIOCG80211, ireq) < 0) {
109 wpa_printf(MSG_ERROR, "ioctl[SIOCS80211, op=%u, "
110 "arg_len=%u]: %s", op, arg_len, strerror(errno));
111 return -1;
112 }
113 return 0;
114 }
115
116 static int
get80211var(struct bsd_driver_data * drv,int op,void * arg,int arg_len)117 get80211var(struct bsd_driver_data *drv, int op, void *arg, int arg_len)
118 {
119 struct ieee80211req ireq;
120
121 if (bsd_get80211(drv, &ireq, op, arg, arg_len) < 0)
122 return -1;
123 return ireq.i_len;
124 }
125
126 static int
set80211var(struct bsd_driver_data * drv,int op,const void * arg,int arg_len)127 set80211var(struct bsd_driver_data *drv, int op, const void *arg, int arg_len)
128 {
129 return bsd_set80211(drv, op, 0, arg, arg_len);
130 }
131
132 static int
set80211param(struct bsd_driver_data * drv,int op,int arg)133 set80211param(struct bsd_driver_data *drv, int op, int arg)
134 {
135 return bsd_set80211(drv, op, arg, NULL, 0);
136 }
137
138 static int
bsd_get_ssid(void * priv,u8 * ssid,int len)139 bsd_get_ssid(void *priv, u8 *ssid, int len)
140 {
141 struct bsd_driver_data *drv = priv;
142 #ifdef SIOCG80211NWID
143 struct ieee80211_nwid nwid;
144 struct ifreq ifr;
145
146 os_memset(&ifr, 0, sizeof(ifr));
147 os_strlcpy(ifr.ifr_name, drv->ifname, sizeof(ifr.ifr_name));
148 ifr.ifr_data = (void *)&nwid;
149 if (ioctl(drv->sock, SIOCG80211NWID, &ifr) < 0 ||
150 nwid.i_len > IEEE80211_NWID_LEN)
151 return -1;
152 os_memcpy(ssid, nwid.i_nwid, nwid.i_len);
153 return nwid.i_len;
154 #else
155 return get80211var(drv, IEEE80211_IOC_SSID, ssid, IEEE80211_NWID_LEN);
156 #endif
157 }
158
159 static int
bsd_set_ssid(void * priv,const u8 * ssid,int ssid_len)160 bsd_set_ssid(void *priv, const u8 *ssid, int ssid_len)
161 {
162 struct bsd_driver_data *drv = priv;
163 #ifdef SIOCS80211NWID
164 struct ieee80211_nwid nwid;
165 struct ifreq ifr;
166
167 os_memcpy(nwid.i_nwid, ssid, ssid_len);
168 nwid.i_len = ssid_len;
169 os_memset(&ifr, 0, sizeof(ifr));
170 os_strlcpy(ifr.ifr_name, drv->ifname, sizeof(ifr.ifr_name));
171 ifr.ifr_data = (void *)&nwid;
172 return ioctl(drv->sock, SIOCS80211NWID, &ifr);
173 #else
174 return set80211var(drv, IEEE80211_IOC_SSID, ssid, ssid_len);
175 #endif
176 }
177
178 static int
bsd_get_if_media(void * priv)179 bsd_get_if_media(void *priv)
180 {
181 struct bsd_driver_data *drv = priv;
182 struct ifmediareq ifmr;
183
184 os_memset(&ifmr, 0, sizeof(ifmr));
185 os_strlcpy(ifmr.ifm_name, drv->ifname, sizeof(ifmr.ifm_name));
186
187 if (ioctl(drv->sock, SIOCGIFMEDIA, &ifmr) < 0) {
188 wpa_printf(MSG_ERROR, "%s: SIOCGIFMEDIA %s", __func__,
189 strerror(errno));
190 return -1;
191 }
192
193 return ifmr.ifm_current;
194 }
195
196 static int
bsd_set_if_media(void * priv,int media)197 bsd_set_if_media(void *priv, int media)
198 {
199 struct bsd_driver_data *drv = priv;
200 struct ifreq ifr;
201
202 os_memset(&ifr, 0, sizeof(ifr));
203 os_strlcpy(ifr.ifr_name, drv->ifname, sizeof(ifr.ifr_name));
204 ifr.ifr_media = media;
205
206 if (ioctl(drv->sock, SIOCSIFMEDIA, &ifr) < 0) {
207 wpa_printf(MSG_ERROR, "%s: SIOCSIFMEDIA %s", __func__,
208 strerror(errno));
209 return -1;
210 }
211
212 return 0;
213 }
214
215 static int
bsd_set_mediaopt(void * priv,uint32_t mask,uint32_t mode)216 bsd_set_mediaopt(void *priv, uint32_t mask, uint32_t mode)
217 {
218 int media = bsd_get_if_media(priv);
219
220 if (media < 0)
221 return -1;
222 media &= ~mask;
223 media |= mode;
224 if (bsd_set_if_media(priv, media) < 0)
225 return -1;
226 return 0;
227 }
228
229 static int
bsd_del_key(void * priv,const u8 * addr,int key_idx)230 bsd_del_key(void *priv, const u8 *addr, int key_idx)
231 {
232 struct ieee80211req_del_key wk;
233
234 os_memset(&wk, 0, sizeof(wk));
235 if (addr == NULL) {
236 wpa_printf(MSG_DEBUG, "%s: key_idx=%d", __func__, key_idx);
237 wk.idk_keyix = key_idx;
238 } else {
239 wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR, __func__,
240 MAC2STR(addr));
241 os_memcpy(wk.idk_macaddr, addr, IEEE80211_ADDR_LEN);
242 wk.idk_keyix = (u_int8_t) IEEE80211_KEYIX_NONE; /* XXX */
243 }
244
245 return set80211var(priv, IEEE80211_IOC_DELKEY, &wk, sizeof(wk));
246 }
247
248 static int
bsd_send_mlme_param(void * priv,const u8 op,const u16 reason,const u8 * addr)249 bsd_send_mlme_param(void *priv, const u8 op, const u16 reason, const u8 *addr)
250 {
251 struct ieee80211req_mlme mlme;
252
253 os_memset(&mlme, 0, sizeof(mlme));
254 mlme.im_op = op;
255 mlme.im_reason = reason;
256 os_memcpy(mlme.im_macaddr, addr, IEEE80211_ADDR_LEN);
257 return set80211var(priv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme));
258 }
259
260 static int
bsd_ctrl_iface(void * priv,int enable)261 bsd_ctrl_iface(void *priv, int enable)
262 {
263 struct bsd_driver_data *drv = priv;
264 struct ifreq ifr;
265
266 os_memset(&ifr, 0, sizeof(ifr));
267 os_strlcpy(ifr.ifr_name, drv->ifname, sizeof(ifr.ifr_name));
268
269 if (ioctl(drv->sock, SIOCGIFFLAGS, &ifr) < 0) {
270 perror("ioctl[SIOCGIFFLAGS]");
271 return -1;
272 }
273
274 if (enable)
275 ifr.ifr_flags |= IFF_UP;
276 else
277 ifr.ifr_flags &= ~IFF_UP;
278
279 if (ioctl(drv->sock, SIOCSIFFLAGS, &ifr) < 0) {
280 perror("ioctl[SIOCSIFFLAGS]");
281 return -1;
282 }
283
284 return 0;
285 }
286
287 static int
bsd_set_key(const char * ifname,void * priv,enum wpa_alg alg,const unsigned char * addr,int key_idx,int set_tx,const u8 * seq,size_t seq_len,const u8 * key,size_t key_len)288 bsd_set_key(const char *ifname, void *priv, enum wpa_alg alg,
289 const unsigned char *addr, int key_idx, int set_tx, const u8 *seq,
290 size_t seq_len, const u8 *key, size_t key_len)
291 {
292 struct ieee80211req_key wk;
293
294 wpa_printf(MSG_DEBUG, "%s: alg=%d addr=%p key_idx=%d set_tx=%d "
295 "seq_len=%zu key_len=%zu", __func__, alg, addr, key_idx,
296 set_tx, seq_len, key_len);
297
298 if (alg == WPA_ALG_NONE) {
299 #ifndef HOSTAPD
300 if (addr == NULL || is_broadcast_ether_addr(addr))
301 return bsd_del_key(priv, NULL, key_idx);
302 else
303 #endif /* HOSTAPD */
304 return bsd_del_key(priv, addr, key_idx);
305 }
306
307 os_memset(&wk, 0, sizeof(wk));
308 switch (alg) {
309 case WPA_ALG_WEP:
310 wk.ik_type = IEEE80211_CIPHER_WEP;
311 break;
312 case WPA_ALG_TKIP:
313 wk.ik_type = IEEE80211_CIPHER_TKIP;
314 break;
315 case WPA_ALG_CCMP:
316 wk.ik_type = IEEE80211_CIPHER_AES_CCM;
317 break;
318 default:
319 wpa_printf(MSG_ERROR, "%s: unknown alg=%d", __func__, alg);
320 return -1;
321 }
322
323 wk.ik_flags = IEEE80211_KEY_RECV;
324 if (set_tx)
325 wk.ik_flags |= IEEE80211_KEY_XMIT;
326
327 if (addr == NULL) {
328 os_memset(wk.ik_macaddr, 0xff, IEEE80211_ADDR_LEN);
329 wk.ik_keyix = key_idx;
330 } else {
331 os_memcpy(wk.ik_macaddr, addr, IEEE80211_ADDR_LEN);
332 /*
333 * Deduce whether group/global or unicast key by checking
334 * the address (yech). Note also that we can only mark global
335 * keys default; doing this for a unicast key is an error.
336 */
337 if (is_broadcast_ether_addr(addr)) {
338 wk.ik_flags |= IEEE80211_KEY_GROUP;
339 wk.ik_keyix = key_idx;
340 } else {
341 wk.ik_keyix = key_idx == 0 ? IEEE80211_KEYIX_NONE :
342 key_idx;
343 }
344 }
345 if (wk.ik_keyix != IEEE80211_KEYIX_NONE && set_tx)
346 wk.ik_flags |= IEEE80211_KEY_DEFAULT;
347 wk.ik_keylen = key_len;
348 if (seq) {
349 #ifdef WORDS_BIGENDIAN
350 /*
351 * wk.ik_keyrsc is in host byte order (big endian), need to
352 * swap it to match with the byte order used in WPA.
353 */
354 int i;
355 u8 *keyrsc = (u8 *) &wk.ik_keyrsc;
356 for (i = 0; i < seq_len; i++)
357 keyrsc[WPA_KEY_RSC_LEN - i - 1] = seq[i];
358 #else /* WORDS_BIGENDIAN */
359 os_memcpy(&wk.ik_keyrsc, seq, seq_len);
360 #endif /* WORDS_BIGENDIAN */
361 }
362 os_memcpy(wk.ik_keydata, key, key_len);
363
364 return set80211var(priv, IEEE80211_IOC_WPAKEY, &wk, sizeof(wk));
365 }
366
367 static int
bsd_configure_wpa(void * priv,struct wpa_bss_params * params)368 bsd_configure_wpa(void *priv, struct wpa_bss_params *params)
369 {
370 #ifndef IEEE80211_IOC_APPIE
371 static const char *ciphernames[] =
372 { "WEP", "TKIP", "AES-OCB", "AES-CCM", "CKIP", "NONE" };
373 int v;
374
375 switch (params->wpa_group) {
376 case WPA_CIPHER_CCMP:
377 v = IEEE80211_CIPHER_AES_CCM;
378 break;
379 case WPA_CIPHER_TKIP:
380 v = IEEE80211_CIPHER_TKIP;
381 break;
382 case WPA_CIPHER_WEP104:
383 v = IEEE80211_CIPHER_WEP;
384 break;
385 case WPA_CIPHER_WEP40:
386 v = IEEE80211_CIPHER_WEP;
387 break;
388 case WPA_CIPHER_NONE:
389 v = IEEE80211_CIPHER_NONE;
390 break;
391 default:
392 printf("Unknown group key cipher %u\n",
393 params->wpa_group);
394 return -1;
395 }
396 wpa_printf(MSG_DEBUG, "%s: group key cipher=%s (%u)",
397 __func__, ciphernames[v], v);
398 if (set80211param(priv, IEEE80211_IOC_MCASTCIPHER, v)) {
399 printf("Unable to set group key cipher to %u (%s)\n",
400 v, ciphernames[v]);
401 return -1;
402 }
403 if (v == IEEE80211_CIPHER_WEP) {
404 /* key length is done only for specific ciphers */
405 v = (params->wpa_group == WPA_CIPHER_WEP104 ? 13 : 5);
406 if (set80211param(priv, IEEE80211_IOC_MCASTKEYLEN, v)) {
407 printf("Unable to set group key length to %u\n", v);
408 return -1;
409 }
410 }
411
412 v = 0;
413 if (params->wpa_pairwise & WPA_CIPHER_CCMP)
414 v |= 1<<IEEE80211_CIPHER_AES_CCM;
415 if (params->wpa_pairwise & WPA_CIPHER_TKIP)
416 v |= 1<<IEEE80211_CIPHER_TKIP;
417 if (params->wpa_pairwise & WPA_CIPHER_NONE)
418 v |= 1<<IEEE80211_CIPHER_NONE;
419 wpa_printf(MSG_DEBUG, "%s: pairwise key ciphers=0x%x", __func__, v);
420 if (set80211param(priv, IEEE80211_IOC_UCASTCIPHERS, v)) {
421 printf("Unable to set pairwise key ciphers to 0x%x\n", v);
422 return -1;
423 }
424
425 wpa_printf(MSG_DEBUG, "%s: key management algorithms=0x%x",
426 __func__, params->wpa_key_mgmt);
427 if (set80211param(priv, IEEE80211_IOC_KEYMGTALGS,
428 params->wpa_key_mgmt)) {
429 printf("Unable to set key management algorithms to 0x%x\n",
430 params->wpa_key_mgmt);
431 return -1;
432 }
433
434 v = 0;
435 if (params->rsn_preauth)
436 v |= BIT(0);
437 wpa_printf(MSG_DEBUG, "%s: rsn capabilities=0x%x",
438 __func__, params->rsn_preauth);
439 if (set80211param(priv, IEEE80211_IOC_RSNCAPS, v)) {
440 printf("Unable to set RSN capabilities to 0x%x\n", v);
441 return -1;
442 }
443 #endif /* IEEE80211_IOC_APPIE */
444
445 wpa_printf(MSG_DEBUG, "%s: enable WPA= 0x%x", __func__, params->wpa);
446 if (set80211param(priv, IEEE80211_IOC_WPA, params->wpa)) {
447 printf("Unable to set WPA to %u\n", params->wpa);
448 return -1;
449 }
450 return 0;
451 }
452
453 static int
bsd_set_ieee8021x(void * priv,struct wpa_bss_params * params)454 bsd_set_ieee8021x(void *priv, struct wpa_bss_params *params)
455 {
456 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, params->enabled);
457
458 if (!params->enabled) {
459 /* XXX restore state */
460 return set80211param(priv, IEEE80211_IOC_AUTHMODE,
461 IEEE80211_AUTH_AUTO);
462 }
463 if (!params->wpa && !params->ieee802_1x) {
464 wpa_printf(MSG_ERROR, "%s: No 802.1X or WPA enabled",
465 __func__);
466 return -1;
467 }
468 if (params->wpa && bsd_configure_wpa(priv, params) != 0) {
469 wpa_printf(MSG_ERROR, "%s: Failed to configure WPA state",
470 __func__);
471 return -1;
472 }
473 if (set80211param(priv, IEEE80211_IOC_AUTHMODE,
474 (params->wpa ? IEEE80211_AUTH_WPA : IEEE80211_AUTH_8021X))) {
475 wpa_printf(MSG_ERROR, "%s: Failed to enable WPA/802.1X",
476 __func__);
477 return -1;
478 }
479 return bsd_ctrl_iface(priv, 1);
480 }
481
482 static int
bsd_set_sta_authorized(void * priv,const u8 * addr,int total_flags,int flags_or,int flags_and)483 bsd_set_sta_authorized(void *priv, const u8 *addr,
484 int total_flags, int flags_or, int flags_and)
485 {
486 int authorized = -1;
487
488 /* For now, only support setting Authorized flag */
489 if (flags_or & WPA_STA_AUTHORIZED)
490 authorized = 1;
491 if (!(flags_and & WPA_STA_AUTHORIZED))
492 authorized = 0;
493
494 if (authorized < 0)
495 return 0;
496
497 return bsd_send_mlme_param(priv, authorized ?
498 IEEE80211_MLME_AUTHORIZE :
499 IEEE80211_MLME_UNAUTHORIZE, 0, addr);
500 }
501
502 static void
bsd_new_sta(void * priv,void * ctx,u8 addr[IEEE80211_ADDR_LEN])503 bsd_new_sta(void *priv, void *ctx, u8 addr[IEEE80211_ADDR_LEN])
504 {
505 struct ieee80211req_wpaie ie;
506 int ielen = 0;
507 u8 *iebuf = NULL;
508
509 /*
510 * Fetch and validate any negotiated WPA/RSN parameters.
511 */
512 memset(&ie, 0, sizeof(ie));
513 memcpy(ie.wpa_macaddr, addr, IEEE80211_ADDR_LEN);
514 if (get80211var(priv, IEEE80211_IOC_WPAIE, &ie, sizeof(ie)) < 0) {
515 printf("Failed to get WPA/RSN information element.\n");
516 goto no_ie;
517 }
518 iebuf = ie.wpa_ie;
519 ielen = ie.wpa_ie[1];
520 if (ielen == 0)
521 iebuf = NULL;
522 else
523 ielen += 2;
524
525 no_ie:
526 drv_event_assoc(ctx, addr, iebuf, ielen, 0);
527 }
528
529 static int
bsd_send_eapol(void * priv,const u8 * addr,const u8 * data,size_t data_len,int encrypt,const u8 * own_addr,u32 flags)530 bsd_send_eapol(void *priv, const u8 *addr, const u8 *data, size_t data_len,
531 int encrypt, const u8 *own_addr, u32 flags)
532 {
533 struct bsd_driver_data *drv = priv;
534
535 wpa_hexdump(MSG_MSGDUMP, "TX EAPOL", data, data_len);
536
537 return l2_packet_send(drv->sock_xmit, addr, ETH_P_EAPOL, data,
538 data_len);
539 }
540
541 static int
bsd_set_freq(void * priv,struct hostapd_freq_params * freq)542 bsd_set_freq(void *priv, struct hostapd_freq_params *freq)
543 {
544 struct bsd_driver_data *drv = priv;
545 #ifdef SIOCS80211CHANNEL
546 struct ieee80211chanreq creq;
547 #endif /* SIOCS80211CHANNEL */
548 u32 mode;
549 int channel = freq->channel;
550
551 if (channel < 14) {
552 mode =
553 #ifdef CONFIG_IEEE80211N
554 freq->ht_enabled ? IFM_IEEE80211_11NG :
555 #endif /* CONFIG_IEEE80211N */
556 IFM_IEEE80211_11G;
557 } else if (channel == 14) {
558 mode = IFM_IEEE80211_11B;
559 } else {
560 mode =
561 #ifdef CONFIG_IEEE80211N
562 freq->ht_enabled ? IFM_IEEE80211_11NA :
563 #endif /* CONFIG_IEEE80211N */
564 IFM_IEEE80211_11A;
565 }
566 if (bsd_set_mediaopt(drv, IFM_MMASK, mode) < 0) {
567 wpa_printf(MSG_ERROR, "%s: failed to set modulation mode",
568 __func__);
569 return -1;
570 }
571
572 #ifdef SIOCS80211CHANNEL
573 os_memset(&creq, 0, sizeof(creq));
574 os_strlcpy(creq.i_name, drv->ifname, sizeof(creq.i_name));
575 creq.i_channel = (u_int16_t)channel;
576 return ioctl(drv->sock, SIOCS80211CHANNEL, &creq);
577 #else /* SIOCS80211CHANNEL */
578 return set80211param(priv, IEEE80211_IOC_CHANNEL, channel);
579 #endif /* SIOCS80211CHANNEL */
580 }
581
582 static int
bsd_set_opt_ie(void * priv,const u8 * ie,size_t ie_len)583 bsd_set_opt_ie(void *priv, const u8 *ie, size_t ie_len)
584 {
585 #ifdef IEEE80211_IOC_APPIE
586 wpa_printf(MSG_DEBUG, "%s: set WPA+RSN ie (len %lu)", __func__,
587 (unsigned long)ie_len);
588 return bsd_set80211(priv, IEEE80211_IOC_APPIE, IEEE80211_APPIE_WPA,
589 ie, ie_len);
590 #endif /* IEEE80211_IOC_APPIE */
591 return 0;
592 }
593
594 static int
rtbuf_len(void)595 rtbuf_len(void)
596 {
597 size_t len;
598
599 int mib[6] = {CTL_NET, AF_ROUTE, 0, AF_INET, NET_RT_DUMP, 0};
600
601 if (sysctl(mib, 6, NULL, &len, NULL, 0) < 0) {
602 wpa_printf(MSG_WARNING, "%s failed: %s\n", __func__,
603 strerror(errno));
604 len = 2048;
605 }
606
607 return len;
608 }
609
610 #ifdef HOSTAPD
611
612 /*
613 * Avoid conflicts with hostapd definitions by undefining couple of defines
614 * from net80211 header files.
615 */
616 #undef RSN_VERSION
617 #undef WPA_VERSION
618 #undef WPA_OUI_TYPE
619
620 static int bsd_sta_deauth(void *priv, const u8 *own_addr, const u8 *addr,
621 int reason_code);
622
623 static const char *
ether_sprintf(const u8 * addr)624 ether_sprintf(const u8 *addr)
625 {
626 static char buf[sizeof(MACSTR)];
627
628 if (addr != NULL)
629 snprintf(buf, sizeof(buf), MACSTR, MAC2STR(addr));
630 else
631 snprintf(buf, sizeof(buf), MACSTR, 0,0,0,0,0,0);
632 return buf;
633 }
634
635 static int
bsd_set_privacy(void * priv,int enabled)636 bsd_set_privacy(void *priv, int enabled)
637 {
638 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
639
640 return set80211param(priv, IEEE80211_IOC_PRIVACY, enabled);
641 }
642
643 static int
bsd_get_seqnum(const char * ifname,void * priv,const u8 * addr,int idx,u8 * seq)644 bsd_get_seqnum(const char *ifname, void *priv, const u8 *addr, int idx,
645 u8 *seq)
646 {
647 struct ieee80211req_key wk;
648
649 wpa_printf(MSG_DEBUG, "%s: addr=%s idx=%d",
650 __func__, ether_sprintf(addr), idx);
651
652 memset(&wk, 0, sizeof(wk));
653 if (addr == NULL)
654 memset(wk.ik_macaddr, 0xff, IEEE80211_ADDR_LEN);
655 else
656 memcpy(wk.ik_macaddr, addr, IEEE80211_ADDR_LEN);
657 wk.ik_keyix = idx;
658
659 if (get80211var(priv, IEEE80211_IOC_WPAKEY, &wk, sizeof(wk)) < 0) {
660 printf("Failed to get encryption.\n");
661 return -1;
662 }
663
664 #ifdef WORDS_BIGENDIAN
665 {
666 /*
667 * wk.ik_keytsc is in host byte order (big endian), need to
668 * swap it to match with the byte order used in WPA.
669 */
670 int i;
671 u8 tmp[WPA_KEY_RSC_LEN];
672 memcpy(tmp, &wk.ik_keytsc, sizeof(wk.ik_keytsc));
673 for (i = 0; i < WPA_KEY_RSC_LEN; i++) {
674 seq[i] = tmp[WPA_KEY_RSC_LEN - i - 1];
675 }
676 }
677 #else /* WORDS_BIGENDIAN */
678 memcpy(seq, &wk.ik_keytsc, sizeof(wk.ik_keytsc));
679 #endif /* WORDS_BIGENDIAN */
680 return 0;
681 }
682
683
684 static int
bsd_flush(void * priv)685 bsd_flush(void *priv)
686 {
687 u8 allsta[IEEE80211_ADDR_LEN];
688
689 memset(allsta, 0xff, IEEE80211_ADDR_LEN);
690 return bsd_sta_deauth(priv, NULL, allsta, IEEE80211_REASON_AUTH_LEAVE);
691 }
692
693
694 static int
bsd_read_sta_driver_data(void * priv,struct hostap_sta_driver_data * data,const u8 * addr)695 bsd_read_sta_driver_data(void *priv, struct hostap_sta_driver_data *data,
696 const u8 *addr)
697 {
698 struct ieee80211req_sta_stats stats;
699
700 memcpy(stats.is_u.macaddr, addr, IEEE80211_ADDR_LEN);
701 if (get80211var(priv, IEEE80211_IOC_STA_STATS, &stats, sizeof(stats))
702 > 0) {
703 /* XXX? do packets counts include non-data frames? */
704 data->rx_packets = stats.is_stats.ns_rx_data;
705 data->rx_bytes = stats.is_stats.ns_rx_bytes;
706 data->tx_packets = stats.is_stats.ns_tx_data;
707 data->tx_bytes = stats.is_stats.ns_tx_bytes;
708 }
709 return 0;
710 }
711
712 static int
bsd_sta_deauth(void * priv,const u8 * own_addr,const u8 * addr,int reason_code)713 bsd_sta_deauth(void *priv, const u8 *own_addr, const u8 *addr, int reason_code)
714 {
715 return bsd_send_mlme_param(priv, IEEE80211_MLME_DEAUTH, reason_code,
716 addr);
717 }
718
719 static int
bsd_sta_disassoc(void * priv,const u8 * own_addr,const u8 * addr,int reason_code)720 bsd_sta_disassoc(void *priv, const u8 *own_addr, const u8 *addr,
721 int reason_code)
722 {
723 return bsd_send_mlme_param(priv, IEEE80211_MLME_DISASSOC, reason_code,
724 addr);
725 }
726
727 static void
bsd_wireless_event_receive(int sock,void * ctx,void * sock_ctx)728 bsd_wireless_event_receive(int sock, void *ctx, void *sock_ctx)
729 {
730 struct bsd_driver_data *drv = ctx;
731 char *buf;
732 struct if_announcemsghdr *ifan;
733 struct rt_msghdr *rtm;
734 struct ieee80211_michael_event *mic;
735 struct ieee80211_join_event *join;
736 struct ieee80211_leave_event *leave;
737 int n, len;
738 union wpa_event_data data;
739
740 len = rtbuf_len();
741
742 buf = os_malloc(len);
743 if (buf == NULL) {
744 wpa_printf(MSG_ERROR, "%s os_malloc() failed\n", __func__);
745 return;
746 }
747
748 n = read(sock, buf, len);
749 if (n < 0) {
750 if (errno != EINTR && errno != EAGAIN)
751 wpa_printf(MSG_ERROR, "%s read() failed: %s\n",
752 __func__, strerror(errno));
753 os_free(buf);
754 return;
755 }
756
757 rtm = (struct rt_msghdr *) buf;
758 if (rtm->rtm_version != RTM_VERSION) {
759 wpa_printf(MSG_DEBUG, "Invalid routing message version=%d",
760 rtm->rtm_version);
761 os_free(buf);
762 return;
763 }
764 ifan = (struct if_announcemsghdr *) rtm;
765 switch (rtm->rtm_type) {
766 case RTM_IEEE80211:
767 switch (ifan->ifan_what) {
768 case RTM_IEEE80211_ASSOC:
769 case RTM_IEEE80211_REASSOC:
770 case RTM_IEEE80211_DISASSOC:
771 case RTM_IEEE80211_SCAN:
772 break;
773 case RTM_IEEE80211_LEAVE:
774 leave = (struct ieee80211_leave_event *) &ifan[1];
775 drv_event_disassoc(drv->hapd, leave->iev_addr);
776 break;
777 case RTM_IEEE80211_JOIN:
778 #ifdef RTM_IEEE80211_REJOIN
779 case RTM_IEEE80211_REJOIN:
780 #endif
781 join = (struct ieee80211_join_event *) &ifan[1];
782 bsd_new_sta(drv, drv->hapd, join->iev_addr);
783 break;
784 case RTM_IEEE80211_REPLAY:
785 /* ignore */
786 break;
787 case RTM_IEEE80211_MICHAEL:
788 mic = (struct ieee80211_michael_event *) &ifan[1];
789 wpa_printf(MSG_DEBUG,
790 "Michael MIC failure wireless event: "
791 "keyix=%u src_addr=" MACSTR, mic->iev_keyix,
792 MAC2STR(mic->iev_src));
793 os_memset(&data, 0, sizeof(data));
794 data.michael_mic_failure.unicast = 1;
795 data.michael_mic_failure.src = mic->iev_src;
796 wpa_supplicant_event(drv->hapd,
797 EVENT_MICHAEL_MIC_FAILURE, &data);
798 break;
799 }
800 break;
801 }
802 os_free(buf);
803 }
804
805 static void
handle_read(void * ctx,const u8 * src_addr,const u8 * buf,size_t len)806 handle_read(void *ctx, const u8 *src_addr, const u8 *buf, size_t len)
807 {
808 struct bsd_driver_data *drv = ctx;
809 drv_event_eapol_rx(drv->hapd, src_addr, buf, len);
810 }
811
812 static void *
bsd_init(struct hostapd_data * hapd,struct wpa_init_params * params)813 bsd_init(struct hostapd_data *hapd, struct wpa_init_params *params)
814 {
815 struct bsd_driver_data *drv;
816
817 drv = os_zalloc(sizeof(struct bsd_driver_data));
818 if (drv == NULL) {
819 printf("Could not allocate memory for bsd driver data\n");
820 goto bad;
821 }
822
823 drv->hapd = hapd;
824 drv->sock = socket(PF_INET, SOCK_DGRAM, 0);
825 if (drv->sock < 0) {
826 perror("socket[PF_INET,SOCK_DGRAM]");
827 goto bad;
828 }
829 os_strlcpy(drv->ifname, params->ifname, sizeof(drv->ifname));
830
831 drv->sock_xmit = l2_packet_init(drv->ifname, NULL, ETH_P_EAPOL,
832 handle_read, drv, 0);
833 if (drv->sock_xmit == NULL)
834 goto bad;
835 if (l2_packet_get_own_addr(drv->sock_xmit, params->own_addr))
836 goto bad;
837
838 /* mark down during setup */
839 if (bsd_ctrl_iface(drv, 0) < 0)
840 goto bad;
841
842 drv->route = socket(PF_ROUTE, SOCK_RAW, 0);
843 if (drv->route < 0) {
844 perror("socket(PF_ROUTE,SOCK_RAW)");
845 goto bad;
846 }
847 eloop_register_read_sock(drv->route, bsd_wireless_event_receive, drv,
848 NULL);
849
850 if (bsd_set_mediaopt(drv, IFM_OMASK, IFM_IEEE80211_HOSTAP) < 0) {
851 wpa_printf(MSG_ERROR, "%s: failed to set operation mode",
852 __func__);
853 goto bad;
854 }
855
856 return drv;
857 bad:
858 if (drv->sock_xmit != NULL)
859 l2_packet_deinit(drv->sock_xmit);
860 if (drv->sock >= 0)
861 close(drv->sock);
862 if (drv != NULL)
863 os_free(drv);
864 return NULL;
865 }
866
867
868 static void
bsd_deinit(void * priv)869 bsd_deinit(void *priv)
870 {
871 struct bsd_driver_data *drv = priv;
872
873 if (drv->route >= 0) {
874 eloop_unregister_read_sock(drv->route);
875 close(drv->route);
876 }
877 bsd_ctrl_iface(drv, 0);
878 if (drv->sock >= 0)
879 close(drv->sock);
880 if (drv->sock_xmit != NULL)
881 l2_packet_deinit(drv->sock_xmit);
882 os_free(drv);
883 }
884
885 #else /* HOSTAPD */
886
887 static int
get80211param(struct bsd_driver_data * drv,int op)888 get80211param(struct bsd_driver_data *drv, int op)
889 {
890 struct ieee80211req ireq;
891
892 if (bsd_get80211(drv, &ireq, op, NULL, 0) < 0)
893 return -1;
894 return ireq.i_val;
895 }
896
897 static int
wpa_driver_bsd_get_bssid(void * priv,u8 * bssid)898 wpa_driver_bsd_get_bssid(void *priv, u8 *bssid)
899 {
900 struct bsd_driver_data *drv = priv;
901 #ifdef SIOCG80211BSSID
902 struct ieee80211_bssid bs;
903
904 os_strlcpy(bs.i_name, drv->ifname, sizeof(bs.i_name));
905 if (ioctl(drv->sock, SIOCG80211BSSID, &bs) < 0)
906 return -1;
907 os_memcpy(bssid, bs.i_bssid, sizeof(bs.i_bssid));
908 return 0;
909 #else
910 return get80211var(drv, IEEE80211_IOC_BSSID,
911 bssid, IEEE80211_ADDR_LEN) < 0 ? -1 : 0;
912 #endif
913 }
914
915 static int
wpa_driver_bsd_get_ssid(void * priv,u8 * ssid)916 wpa_driver_bsd_get_ssid(void *priv, u8 *ssid)
917 {
918 struct bsd_driver_data *drv = priv;
919 return bsd_get_ssid(drv, ssid, 0);
920 }
921
922 static int
wpa_driver_bsd_set_wpa_ie(struct bsd_driver_data * drv,const u8 * wpa_ie,size_t wpa_ie_len)923 wpa_driver_bsd_set_wpa_ie(struct bsd_driver_data *drv, const u8 *wpa_ie,
924 size_t wpa_ie_len)
925 {
926 #ifdef IEEE80211_IOC_APPIE
927 return bsd_set_opt_ie(drv, wpa_ie, wpa_ie_len);
928 #else /* IEEE80211_IOC_APPIE */
929 return set80211var(drv, IEEE80211_IOC_OPTIE, wpa_ie, wpa_ie_len);
930 #endif /* IEEE80211_IOC_APPIE */
931 }
932
933 static int
wpa_driver_bsd_set_wpa_internal(void * priv,int wpa,int privacy)934 wpa_driver_bsd_set_wpa_internal(void *priv, int wpa, int privacy)
935 {
936 int ret = 0;
937
938 wpa_printf(MSG_DEBUG, "%s: wpa=%d privacy=%d",
939 __FUNCTION__, wpa, privacy);
940
941 if (!wpa && wpa_driver_bsd_set_wpa_ie(priv, NULL, 0) < 0)
942 ret = -1;
943 if (set80211param(priv, IEEE80211_IOC_PRIVACY, privacy) < 0)
944 ret = -1;
945 if (set80211param(priv, IEEE80211_IOC_WPA, wpa) < 0)
946 ret = -1;
947
948 return ret;
949 }
950
951 static int
wpa_driver_bsd_set_wpa(void * priv,int enabled)952 wpa_driver_bsd_set_wpa(void *priv, int enabled)
953 {
954 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __FUNCTION__, enabled);
955
956 return wpa_driver_bsd_set_wpa_internal(priv, enabled ? 3 : 0, enabled);
957 }
958
959 static int
wpa_driver_bsd_set_countermeasures(void * priv,int enabled)960 wpa_driver_bsd_set_countermeasures(void *priv, int enabled)
961 {
962 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
963 return set80211param(priv, IEEE80211_IOC_COUNTERMEASURES, enabled);
964 }
965
966
967 static int
wpa_driver_bsd_set_drop_unencrypted(void * priv,int enabled)968 wpa_driver_bsd_set_drop_unencrypted(void *priv, int enabled)
969 {
970 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
971 return set80211param(priv, IEEE80211_IOC_DROPUNENCRYPTED, enabled);
972 }
973
974 static int
wpa_driver_bsd_deauthenticate(void * priv,const u8 * addr,int reason_code)975 wpa_driver_bsd_deauthenticate(void *priv, const u8 *addr, int reason_code)
976 {
977 return bsd_send_mlme_param(priv, IEEE80211_MLME_DEAUTH, reason_code,
978 addr);
979 }
980
981 static int
wpa_driver_bsd_disassociate(void * priv,const u8 * addr,int reason_code)982 wpa_driver_bsd_disassociate(void *priv, const u8 *addr, int reason_code)
983 {
984 return bsd_send_mlme_param(priv, IEEE80211_MLME_DISASSOC, reason_code,
985 addr);
986 }
987
988 static int
wpa_driver_bsd_set_auth_alg(void * priv,int auth_alg)989 wpa_driver_bsd_set_auth_alg(void *priv, int auth_alg)
990 {
991 int authmode;
992
993 if ((auth_alg & WPA_AUTH_ALG_OPEN) &&
994 (auth_alg & WPA_AUTH_ALG_SHARED))
995 authmode = IEEE80211_AUTH_AUTO;
996 else if (auth_alg & WPA_AUTH_ALG_SHARED)
997 authmode = IEEE80211_AUTH_SHARED;
998 else
999 authmode = IEEE80211_AUTH_OPEN;
1000
1001 return set80211param(priv, IEEE80211_IOC_AUTHMODE, authmode);
1002 }
1003
1004 static void
handle_read(void * ctx,const u8 * src_addr,const u8 * buf,size_t len)1005 handle_read(void *ctx, const u8 *src_addr, const u8 *buf, size_t len)
1006 {
1007 struct bsd_driver_data *drv = ctx;
1008
1009 drv_event_eapol_rx(drv->ctx, src_addr, buf, len);
1010 }
1011
1012 static int
wpa_driver_bsd_associate(void * priv,struct wpa_driver_associate_params * params)1013 wpa_driver_bsd_associate(void *priv, struct wpa_driver_associate_params *params)
1014 {
1015 struct bsd_driver_data *drv = priv;
1016 struct ieee80211req_mlme mlme;
1017 u32 mode;
1018 int privacy;
1019 int ret = 0;
1020
1021 wpa_printf(MSG_DEBUG,
1022 "%s: ssid '%.*s' wpa ie len %u pairwise %u group %u key mgmt %u"
1023 , __func__
1024 , (unsigned int) params->ssid_len, params->ssid
1025 , (unsigned int) params->wpa_ie_len
1026 , params->pairwise_suite
1027 , params->group_suite
1028 , params->key_mgmt_suite
1029 );
1030
1031 switch (params->mode) {
1032 case IEEE80211_MODE_INFRA:
1033 mode = 0 /* STA */;
1034 break;
1035 case IEEE80211_MODE_IBSS:
1036 mode = IFM_IEEE80211_IBSS;
1037 break;
1038 case IEEE80211_MODE_AP:
1039 mode = IFM_IEEE80211_HOSTAP;
1040 break;
1041 default:
1042 wpa_printf(MSG_ERROR, "%s: unknown operation mode", __func__);
1043 return -1;
1044 }
1045 if (bsd_set_mediaopt(drv, IFM_OMASK, mode) < 0) {
1046 wpa_printf(MSG_ERROR, "%s: failed to set operation mode",
1047 __func__);
1048 return -1;
1049 }
1050
1051 if (params->mode == IEEE80211_MODE_AP) {
1052 drv->sock_xmit = l2_packet_init(drv->ifname, NULL, ETH_P_EAPOL,
1053 handle_read, drv, 0);
1054 if (drv->sock_xmit == NULL)
1055 return -1;
1056 drv->is_ap = 1;
1057 return 0;
1058 }
1059
1060 if (wpa_driver_bsd_set_drop_unencrypted(drv, params->drop_unencrypted)
1061 < 0)
1062 ret = -1;
1063 if (wpa_driver_bsd_set_auth_alg(drv, params->auth_alg) < 0)
1064 ret = -1;
1065 /* XXX error handling is wrong but unclear what to do... */
1066 if (wpa_driver_bsd_set_wpa_ie(drv, params->wpa_ie, params->wpa_ie_len) < 0)
1067 return -1;
1068
1069 privacy = !(params->pairwise_suite == CIPHER_NONE &&
1070 params->group_suite == CIPHER_NONE &&
1071 params->key_mgmt_suite == KEY_MGMT_NONE &&
1072 params->wpa_ie_len == 0);
1073 wpa_printf(MSG_DEBUG, "%s: set PRIVACY %u", __func__, privacy);
1074
1075 if (set80211param(drv, IEEE80211_IOC_PRIVACY, privacy) < 0)
1076 return -1;
1077
1078 if (params->wpa_ie_len &&
1079 set80211param(drv, IEEE80211_IOC_WPA,
1080 params->wpa_ie[0] == WLAN_EID_RSN ? 2 : 1) < 0)
1081 return -1;
1082
1083 os_memset(&mlme, 0, sizeof(mlme));
1084 mlme.im_op = IEEE80211_MLME_ASSOC;
1085 if (params->ssid != NULL)
1086 os_memcpy(mlme.im_ssid, params->ssid, params->ssid_len);
1087 mlme.im_ssid_len = params->ssid_len;
1088 if (params->bssid != NULL)
1089 os_memcpy(mlme.im_macaddr, params->bssid, IEEE80211_ADDR_LEN);
1090 if (set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme)) < 0)
1091 return -1;
1092 return ret;
1093 }
1094
1095 static int
wpa_driver_bsd_scan(void * priv,struct wpa_driver_scan_params * params)1096 wpa_driver_bsd_scan(void *priv, struct wpa_driver_scan_params *params)
1097 {
1098 struct bsd_driver_data *drv = priv;
1099 #ifdef IEEE80211_IOC_SCAN_MAX_SSID
1100 struct ieee80211_scan_req sr;
1101 int i;
1102 #endif /* IEEE80211_IOC_SCAN_MAX_SSID */
1103
1104 if (bsd_set_mediaopt(drv, IFM_OMASK, 0 /* STA */) < 0) {
1105 wpa_printf(MSG_ERROR, "%s: failed to set operation mode",
1106 __func__);
1107 return -1;
1108 }
1109
1110 if (set80211param(drv, IEEE80211_IOC_ROAMING,
1111 IEEE80211_ROAMING_MANUAL) < 0) {
1112 wpa_printf(MSG_ERROR, "%s: failed to set "
1113 "wpa_supplicant-based roaming: %s", __func__,
1114 strerror(errno));
1115 return -1;
1116 }
1117
1118 if (wpa_driver_bsd_set_wpa(drv, 1) < 0) {
1119 wpa_printf(MSG_ERROR, "%s: failed to set wpa: %s", __func__,
1120 strerror(errno));
1121 return -1;
1122 }
1123
1124 /* NB: interface must be marked UP to do a scan */
1125 if (bsd_ctrl_iface(drv, 1) < 0)
1126 return -1;
1127
1128 #ifdef IEEE80211_IOC_SCAN_MAX_SSID
1129 os_memset(&sr, 0, sizeof(sr));
1130 sr.sr_flags = IEEE80211_IOC_SCAN_ACTIVE | IEEE80211_IOC_SCAN_ONCE |
1131 IEEE80211_IOC_SCAN_NOJOIN;
1132 sr.sr_duration = IEEE80211_IOC_SCAN_FOREVER;
1133 if (params->num_ssids > 0) {
1134 sr.sr_nssid = params->num_ssids;
1135 #if 0
1136 /* Boundary check is done by upper layer */
1137 if (sr.sr_nssid > IEEE80211_IOC_SCAN_MAX_SSID)
1138 sr.sr_nssid = IEEE80211_IOC_SCAN_MAX_SSID;
1139 #endif
1140
1141 /* NB: check scan cache first */
1142 sr.sr_flags |= IEEE80211_IOC_SCAN_CHECK;
1143 }
1144 for (i = 0; i < sr.sr_nssid; i++) {
1145 sr.sr_ssid[i].len = params->ssids[i].ssid_len;
1146 os_memcpy(sr.sr_ssid[i].ssid, params->ssids[i].ssid,
1147 sr.sr_ssid[i].len);
1148 }
1149
1150 /* NB: net80211 delivers a scan complete event so no need to poll */
1151 return set80211var(drv, IEEE80211_IOC_SCAN_REQ, &sr, sizeof(sr));
1152 #else /* IEEE80211_IOC_SCAN_MAX_SSID */
1153 /* set desired ssid before scan */
1154 if (bsd_set_ssid(drv, params->ssids[0].ssid,
1155 params->ssids[0].ssid_len) < 0)
1156 return -1;
1157
1158 /* NB: net80211 delivers a scan complete event so no need to poll */
1159 return set80211param(drv, IEEE80211_IOC_SCAN_REQ, 0);
1160 #endif /* IEEE80211_IOC_SCAN_MAX_SSID */
1161 }
1162
1163 static void
wpa_driver_bsd_event_receive(int sock,void * ctx,void * sock_ctx)1164 wpa_driver_bsd_event_receive(int sock, void *ctx, void *sock_ctx)
1165 {
1166 struct bsd_driver_data *drv = sock_ctx;
1167 char *buf;
1168 struct if_announcemsghdr *ifan;
1169 struct if_msghdr *ifm;
1170 struct rt_msghdr *rtm;
1171 union wpa_event_data event;
1172 struct ieee80211_michael_event *mic;
1173 struct ieee80211_leave_event *leave;
1174 struct ieee80211_join_event *join;
1175 int n, len;
1176
1177 len = rtbuf_len();
1178
1179 buf = os_malloc(len);
1180 if (buf == NULL) {
1181 wpa_printf(MSG_ERROR, "%s os_malloc() failed\n", __func__);
1182 return;
1183 }
1184
1185 n = read(sock, buf, len);
1186 if (n < 0) {
1187 if (errno != EINTR && errno != EAGAIN)
1188 wpa_printf(MSG_ERROR, "%s read() failed: %s\n",
1189 __func__, strerror(errno));
1190 os_free(buf);
1191 return;
1192 }
1193
1194 rtm = (struct rt_msghdr *) buf;
1195 if (rtm->rtm_version != RTM_VERSION) {
1196 wpa_printf(MSG_DEBUG, "Invalid routing message version=%d",
1197 rtm->rtm_version);
1198 os_free(buf);
1199 return;
1200 }
1201 os_memset(&event, 0, sizeof(event));
1202 switch (rtm->rtm_type) {
1203 case RTM_IFANNOUNCE:
1204 ifan = (struct if_announcemsghdr *) rtm;
1205 if (ifan->ifan_index != drv->ifindex)
1206 break;
1207 os_strlcpy(event.interface_status.ifname, drv->ifname,
1208 sizeof(event.interface_status.ifname));
1209 switch (ifan->ifan_what) {
1210 case IFAN_DEPARTURE:
1211 event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1212 default:
1213 os_free(buf);
1214 return;
1215 }
1216 wpa_printf(MSG_DEBUG, "RTM_IFANNOUNCE: Interface '%s' %s",
1217 event.interface_status.ifname,
1218 ifan->ifan_what == IFAN_DEPARTURE ?
1219 "removed" : "added");
1220 wpa_supplicant_event(ctx, EVENT_INTERFACE_STATUS, &event);
1221 break;
1222 case RTM_IEEE80211:
1223 ifan = (struct if_announcemsghdr *) rtm;
1224 if (ifan->ifan_index != drv->ifindex)
1225 break;
1226 switch (ifan->ifan_what) {
1227 case RTM_IEEE80211_ASSOC:
1228 case RTM_IEEE80211_REASSOC:
1229 if (drv->is_ap)
1230 break;
1231 wpa_supplicant_event(ctx, EVENT_ASSOC, NULL);
1232 break;
1233 case RTM_IEEE80211_DISASSOC:
1234 if (drv->is_ap)
1235 break;
1236 wpa_supplicant_event(ctx, EVENT_DISASSOC, NULL);
1237 break;
1238 case RTM_IEEE80211_SCAN:
1239 if (drv->is_ap)
1240 break;
1241 wpa_supplicant_event(ctx, EVENT_SCAN_RESULTS, NULL);
1242 break;
1243 case RTM_IEEE80211_LEAVE:
1244 leave = (struct ieee80211_leave_event *) &ifan[1];
1245 drv_event_disassoc(ctx, leave->iev_addr);
1246 break;
1247 case RTM_IEEE80211_JOIN:
1248 #ifdef RTM_IEEE80211_REJOIN
1249 case RTM_IEEE80211_REJOIN:
1250 #endif
1251 join = (struct ieee80211_join_event *) &ifan[1];
1252 bsd_new_sta(drv, ctx, join->iev_addr);
1253 break;
1254 case RTM_IEEE80211_REPLAY:
1255 /* ignore */
1256 break;
1257 case RTM_IEEE80211_MICHAEL:
1258 mic = (struct ieee80211_michael_event *) &ifan[1];
1259 wpa_printf(MSG_DEBUG,
1260 "Michael MIC failure wireless event: "
1261 "keyix=%u src_addr=" MACSTR, mic->iev_keyix,
1262 MAC2STR(mic->iev_src));
1263
1264 os_memset(&event, 0, sizeof(event));
1265 event.michael_mic_failure.unicast =
1266 !IEEE80211_IS_MULTICAST(mic->iev_dst);
1267 wpa_supplicant_event(ctx, EVENT_MICHAEL_MIC_FAILURE,
1268 &event);
1269 break;
1270 }
1271 break;
1272 case RTM_IFINFO:
1273 ifm = (struct if_msghdr *) rtm;
1274 if (ifm->ifm_index != drv->ifindex)
1275 break;
1276 if ((rtm->rtm_flags & RTF_UP) == 0) {
1277 os_strlcpy(event.interface_status.ifname, drv->ifname,
1278 sizeof(event.interface_status.ifname));
1279 event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1280 wpa_printf(MSG_DEBUG, "RTM_IFINFO: Interface '%s' DOWN",
1281 event.interface_status.ifname);
1282 wpa_supplicant_event(ctx, EVENT_INTERFACE_STATUS, &event);
1283 }
1284 break;
1285 }
1286 os_free(buf);
1287 }
1288
1289 static void
wpa_driver_bsd_add_scan_entry(struct wpa_scan_results * res,struct ieee80211req_scan_result * sr)1290 wpa_driver_bsd_add_scan_entry(struct wpa_scan_results *res,
1291 struct ieee80211req_scan_result *sr)
1292 {
1293 struct wpa_scan_res *result, **tmp;
1294 size_t extra_len;
1295 u8 *pos;
1296
1297 extra_len = 2 + sr->isr_ssid_len;
1298 extra_len += 2 + sr->isr_nrates;
1299 extra_len += 3; /* ERP IE */
1300 extra_len += sr->isr_ie_len;
1301
1302 result = os_zalloc(sizeof(*result) + extra_len);
1303 if (result == NULL)
1304 return;
1305 os_memcpy(result->bssid, sr->isr_bssid, ETH_ALEN);
1306 result->freq = sr->isr_freq;
1307 result->beacon_int = sr->isr_intval;
1308 result->caps = sr->isr_capinfo;
1309 result->qual = sr->isr_rssi;
1310 result->noise = sr->isr_noise;
1311
1312 pos = (u8 *)(result + 1);
1313
1314 *pos++ = WLAN_EID_SSID;
1315 *pos++ = sr->isr_ssid_len;
1316 os_memcpy(pos, sr + 1, sr->isr_ssid_len);
1317 pos += sr->isr_ssid_len;
1318
1319 /*
1320 * Deal all rates as supported rate.
1321 * Because net80211 doesn't report extended supported rate or not.
1322 */
1323 *pos++ = WLAN_EID_SUPP_RATES;
1324 *pos++ = sr->isr_nrates;
1325 os_memcpy(pos, sr->isr_rates, sr->isr_nrates);
1326 pos += sr->isr_nrates;
1327
1328 *pos++ = WLAN_EID_ERP_INFO;
1329 *pos++ = 1;
1330 *pos++ = sr->isr_erp;
1331
1332 os_memcpy(pos, (u8 *)(sr + 1) + sr->isr_ssid_len, sr->isr_ie_len);
1333 pos += sr->isr_ie_len;
1334
1335 result->ie_len = pos - (u8 *)(result + 1);
1336
1337 tmp = os_realloc(res->res,
1338 (res->num + 1) * sizeof(struct wpa_scan_res *));
1339 if (tmp == NULL) {
1340 os_free(result);
1341 return;
1342 }
1343 tmp[res->num++] = result;
1344 res->res = tmp;
1345 }
1346
1347 struct wpa_scan_results *
wpa_driver_bsd_get_scan_results2(void * priv)1348 wpa_driver_bsd_get_scan_results2(void *priv)
1349 {
1350 struct ieee80211req_scan_result *sr;
1351 struct wpa_scan_results *res;
1352 int len, rest;
1353 uint8_t buf[24*1024], *pos;
1354
1355 len = get80211var(priv, IEEE80211_IOC_SCAN_RESULTS, buf, 24*1024);
1356 if (len < 0)
1357 return NULL;
1358
1359 res = os_zalloc(sizeof(*res));
1360 if (res == NULL)
1361 return NULL;
1362
1363 pos = buf;
1364 rest = len;
1365 while (rest >= sizeof(struct ieee80211req_scan_result)) {
1366 sr = (struct ieee80211req_scan_result *)pos;
1367 wpa_driver_bsd_add_scan_entry(res, sr);
1368 pos += sr->isr_len;
1369 rest -= sr->isr_len;
1370 }
1371
1372 wpa_printf(MSG_DEBUG, "Received %d bytes of scan results (%lu BSSes)",
1373 len, (unsigned long)res->num);
1374
1375 return res;
1376 }
1377
wpa_driver_bsd_capa(struct bsd_driver_data * drv)1378 static int wpa_driver_bsd_capa(struct bsd_driver_data *drv)
1379 {
1380 #ifdef IEEE80211_IOC_DEVCAPS
1381 /* kernel definitions copied from net80211/ieee80211_var.h */
1382 #define IEEE80211_CIPHER_WEP 0
1383 #define IEEE80211_CIPHER_TKIP 1
1384 #define IEEE80211_CIPHER_AES_CCM 3
1385 #define IEEE80211_CRYPTO_WEP (1<<IEEE80211_CIPHER_WEP)
1386 #define IEEE80211_CRYPTO_TKIP (1<<IEEE80211_CIPHER_TKIP)
1387 #define IEEE80211_CRYPTO_AES_CCM (1<<IEEE80211_CIPHER_AES_CCM)
1388 #define IEEE80211_C_HOSTAP 0x00000400 /* CAPABILITY: HOSTAP avail */
1389 #define IEEE80211_C_WPA1 0x00800000 /* CAPABILITY: WPA1 avail */
1390 #define IEEE80211_C_WPA2 0x01000000 /* CAPABILITY: WPA2 avail */
1391 struct ieee80211_devcaps_req devcaps;
1392
1393 if (get80211var(drv, IEEE80211_IOC_DEVCAPS, &devcaps,
1394 sizeof(devcaps)) < 0) {
1395 wpa_printf(MSG_ERROR, "failed to IEEE80211_IOC_DEVCAPS: %s",
1396 strerror(errno));
1397 return -1;
1398 }
1399
1400 wpa_printf(MSG_DEBUG, "%s: drivercaps=0x%08x,cryptocaps=0x%08x",
1401 __func__, devcaps.dc_drivercaps, devcaps.dc_cryptocaps);
1402
1403 if (devcaps.dc_drivercaps & IEEE80211_C_WPA1)
1404 drv->capa.key_mgmt = WPA_DRIVER_CAPA_KEY_MGMT_WPA |
1405 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1406 if (devcaps.dc_drivercaps & IEEE80211_C_WPA2)
1407 drv->capa.key_mgmt = WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
1408 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
1409
1410 if (devcaps.dc_cryptocaps & IEEE80211_CRYPTO_WEP)
1411 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40 |
1412 WPA_DRIVER_CAPA_ENC_WEP104;
1413 if (devcaps.dc_cryptocaps & IEEE80211_CRYPTO_TKIP)
1414 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1415 if (devcaps.dc_cryptocaps & IEEE80211_CRYPTO_AES_CCM)
1416 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1417
1418 if (devcaps.dc_drivercaps & IEEE80211_C_HOSTAP)
1419 drv->capa.flags |= WPA_DRIVER_FLAGS_AP;
1420 #undef IEEE80211_CIPHER_WEP
1421 #undef IEEE80211_CIPHER_TKIP
1422 #undef IEEE80211_CIPHER_AES_CCM
1423 #undef IEEE80211_CRYPTO_WEP
1424 #undef IEEE80211_CRYPTO_TKIP
1425 #undef IEEE80211_CRYPTO_AES_CCM
1426 #undef IEEE80211_C_HOSTAP
1427 #undef IEEE80211_C_WPA1
1428 #undef IEEE80211_C_WPA2
1429 #else /* IEEE80211_IOC_DEVCAPS */
1430 /* For now, assume TKIP, CCMP, WPA, WPA2 are supported */
1431 drv->capa.key_mgmt = WPA_DRIVER_CAPA_KEY_MGMT_WPA |
1432 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
1433 WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
1434 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
1435 drv->capa.enc = WPA_DRIVER_CAPA_ENC_WEP40 |
1436 WPA_DRIVER_CAPA_ENC_WEP104 |
1437 WPA_DRIVER_CAPA_ENC_TKIP |
1438 WPA_DRIVER_CAPA_ENC_CCMP;
1439 drv->capa.flags |= WPA_DRIVER_FLAGS_AP;
1440 #endif /* IEEE80211_IOC_DEVCAPS */
1441 #ifdef IEEE80211_IOC_SCAN_MAX_SSID
1442 drv->capa.max_scan_ssids = IEEE80211_IOC_SCAN_MAX_SSID;
1443 #else /* IEEE80211_IOC_SCAN_MAX_SSID */
1444 drv->capa.max_scan_ssids = 1;
1445 #endif /* IEEE80211_IOC_SCAN_MAX_SSID */
1446 drv->capa.auth = WPA_DRIVER_AUTH_OPEN |
1447 WPA_DRIVER_AUTH_SHARED |
1448 WPA_DRIVER_AUTH_LEAP;
1449 return 0;
1450 }
1451
1452 static void *
wpa_driver_bsd_init(void * ctx,const char * ifname)1453 wpa_driver_bsd_init(void *ctx, const char *ifname)
1454 {
1455 #define GETPARAM(drv, param, v) \
1456 (((v) = get80211param(drv, param)) != -1)
1457 struct bsd_driver_data *drv;
1458
1459 drv = os_zalloc(sizeof(*drv));
1460 if (drv == NULL)
1461 return NULL;
1462 /*
1463 * NB: We require the interface name be mappable to an index.
1464 * This implies we do not support having wpa_supplicant
1465 * wait for an interface to appear. This seems ok; that
1466 * doesn't belong here; it's really the job of devd.
1467 */
1468 drv->ifindex = if_nametoindex(ifname);
1469 if (drv->ifindex == 0) {
1470 wpa_printf(MSG_DEBUG, "%s: interface %s does not exist",
1471 __func__, ifname);
1472 goto fail1;
1473 }
1474 drv->sock = socket(PF_INET, SOCK_DGRAM, 0);
1475 if (drv->sock < 0)
1476 goto fail1;
1477 drv->route = socket(PF_ROUTE, SOCK_RAW, 0);
1478 if (drv->route < 0)
1479 goto fail;
1480 eloop_register_read_sock(drv->route,
1481 wpa_driver_bsd_event_receive, ctx, drv);
1482
1483 drv->ctx = ctx;
1484 os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
1485
1486 /* Down interface during setup. */
1487 if (bsd_ctrl_iface(drv, 0) < 0)
1488 goto fail;
1489
1490 if (!GETPARAM(drv, IEEE80211_IOC_ROAMING, drv->prev_roaming)) {
1491 wpa_printf(MSG_DEBUG, "%s: failed to get roaming state: %s",
1492 __func__, strerror(errno));
1493 goto fail;
1494 }
1495 if (!GETPARAM(drv, IEEE80211_IOC_PRIVACY, drv->prev_privacy)) {
1496 wpa_printf(MSG_DEBUG, "%s: failed to get privacy state: %s",
1497 __func__, strerror(errno));
1498 goto fail;
1499 }
1500 if (!GETPARAM(drv, IEEE80211_IOC_WPA, drv->prev_wpa)) {
1501 wpa_printf(MSG_DEBUG, "%s: failed to get wpa state: %s",
1502 __func__, strerror(errno));
1503 goto fail;
1504 }
1505
1506 if (wpa_driver_bsd_capa(drv))
1507 goto fail;
1508
1509 return drv;
1510 fail:
1511 close(drv->sock);
1512 fail1:
1513 os_free(drv);
1514 return NULL;
1515 #undef GETPARAM
1516 }
1517
1518 static void
wpa_driver_bsd_deinit(void * priv)1519 wpa_driver_bsd_deinit(void *priv)
1520 {
1521 struct bsd_driver_data *drv = priv;
1522
1523 wpa_driver_bsd_set_wpa(drv, 0);
1524 eloop_unregister_read_sock(drv->route);
1525
1526 /* NB: mark interface down */
1527 bsd_ctrl_iface(drv, 0);
1528
1529 wpa_driver_bsd_set_wpa_internal(drv, drv->prev_wpa, drv->prev_privacy);
1530 if (set80211param(drv, IEEE80211_IOC_ROAMING, drv->prev_roaming) < 0)
1531 wpa_printf(MSG_DEBUG, "%s: failed to restore roaming state",
1532 __func__);
1533
1534 if (drv->sock_xmit != NULL)
1535 l2_packet_deinit(drv->sock_xmit);
1536 (void) close(drv->route); /* ioctl socket */
1537 (void) close(drv->sock); /* event socket */
1538 os_free(drv);
1539 }
1540
1541 static int
wpa_driver_bsd_get_capa(void * priv,struct wpa_driver_capa * capa)1542 wpa_driver_bsd_get_capa(void *priv, struct wpa_driver_capa *capa)
1543 {
1544 struct bsd_driver_data *drv = priv;
1545
1546 os_memcpy(capa, &drv->capa, sizeof(*capa));
1547 return 0;
1548 }
1549 #endif /* HOSTAPD */
1550
1551
1552 const struct wpa_driver_ops wpa_driver_bsd_ops = {
1553 .name = "bsd",
1554 .desc = "BSD 802.11 support",
1555 #ifdef HOSTAPD
1556 .hapd_init = bsd_init,
1557 .hapd_deinit = bsd_deinit,
1558 .set_privacy = bsd_set_privacy,
1559 .get_seqnum = bsd_get_seqnum,
1560 .flush = bsd_flush,
1561 .read_sta_data = bsd_read_sta_driver_data,
1562 .sta_disassoc = bsd_sta_disassoc,
1563 .sta_deauth = bsd_sta_deauth,
1564 #else /* HOSTAPD */
1565 .init = wpa_driver_bsd_init,
1566 .deinit = wpa_driver_bsd_deinit,
1567 .get_bssid = wpa_driver_bsd_get_bssid,
1568 .get_ssid = wpa_driver_bsd_get_ssid,
1569 .set_countermeasures = wpa_driver_bsd_set_countermeasures,
1570 .scan2 = wpa_driver_bsd_scan,
1571 .get_scan_results2 = wpa_driver_bsd_get_scan_results2,
1572 .deauthenticate = wpa_driver_bsd_deauthenticate,
1573 .disassociate = wpa_driver_bsd_disassociate,
1574 .associate = wpa_driver_bsd_associate,
1575 .get_capa = wpa_driver_bsd_get_capa,
1576 #endif /* HOSTAPD */
1577 .set_freq = bsd_set_freq,
1578 .set_key = bsd_set_key,
1579 .set_ieee8021x = bsd_set_ieee8021x,
1580 .hapd_set_ssid = bsd_set_ssid,
1581 .hapd_get_ssid = bsd_get_ssid,
1582 .hapd_send_eapol = bsd_send_eapol,
1583 .sta_set_flags = bsd_set_sta_authorized,
1584 .set_generic_elem = bsd_set_opt_ie,
1585 };
1586