]>
Commit | Line | Data |
---|---|---|
6fc6879b JM |
1 | /* |
2 | * WPA Supplicant - Scanning | |
9ba9fa07 | 3 | * Copyright (c) 2003-2010, Jouni Malinen <j@w1.fi> |
6fc6879b JM |
4 | * |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of the GNU General Public License version 2 as | |
7 | * published by the Free Software Foundation. | |
8 | * | |
9 | * Alternatively, this software may be distributed under the terms of BSD | |
10 | * license. | |
11 | * | |
12 | * See README and COPYING for more details. | |
13 | */ | |
14 | ||
9ba9fa07 | 15 | #include "utils/includes.h" |
6fc6879b | 16 | |
9ba9fa07 JM |
17 | #include "utils/common.h" |
18 | #include "utils/eloop.h" | |
19 | #include "common/ieee802_11_defs.h" | |
6fc6879b JM |
20 | #include "config.h" |
21 | #include "wpa_supplicant_i.h" | |
2d5b792d | 22 | #include "driver_i.h" |
6fc6879b | 23 | #include "mlme.h" |
b01c18a8 | 24 | #include "wps_supplicant.h" |
0e65037c JM |
25 | #include "p2p_supplicant.h" |
26 | #include "p2p/p2p.h" | |
8bac466b | 27 | #include "notify.h" |
9ba9fa07 JM |
28 | #include "bss.h" |
29 | #include "scan.h" | |
6fc6879b JM |
30 | |
31 | ||
32 | static void wpa_supplicant_gen_assoc_event(struct wpa_supplicant *wpa_s) | |
33 | { | |
34 | struct wpa_ssid *ssid; | |
35 | union wpa_event_data data; | |
36 | ||
37 | ssid = wpa_supplicant_get_ssid(wpa_s); | |
38 | if (ssid == NULL) | |
39 | return; | |
40 | ||
8bac466b | 41 | if (wpa_s->current_ssid == NULL) { |
6fc6879b | 42 | wpa_s->current_ssid = ssid; |
8bac466b JM |
43 | if (wpa_s->current_ssid != NULL) |
44 | wpas_notify_network_changed(wpa_s); | |
45 | } | |
6fc6879b | 46 | wpa_supplicant_initiate_eapol(wpa_s); |
f049052b BG |
47 | wpa_dbg(wpa_s, MSG_DEBUG, "Already associated with a configured " |
48 | "network - generating associated event"); | |
6fc6879b JM |
49 | os_memset(&data, 0, sizeof(data)); |
50 | wpa_supplicant_event(wpa_s, EVENT_ASSOC, &data); | |
51 | } | |
52 | ||
53 | ||
ad08c363 | 54 | #ifdef CONFIG_WPS |
f90c86d4 JM |
55 | static int wpas_wps_in_use(struct wpa_config *conf, |
56 | enum wps_request_type *req_type) | |
ad08c363 JM |
57 | { |
58 | struct wpa_ssid *ssid; | |
59 | int wps = 0; | |
ad08c363 JM |
60 | |
61 | for (ssid = conf->ssid; ssid; ssid = ssid->next) { | |
62 | if (!(ssid->key_mgmt & WPA_KEY_MGMT_WPS)) | |
63 | continue; | |
64 | ||
65 | wps = 1; | |
b01c18a8 | 66 | *req_type = wpas_wps_get_req_type(ssid); |
ad08c363 JM |
67 | if (!ssid->eap.phase1) |
68 | continue; | |
69 | ||
ad08c363 JM |
70 | if (os_strstr(ssid->eap.phase1, "pbc=1")) |
71 | return 2; | |
72 | } | |
73 | ||
74 | return wps; | |
75 | } | |
76 | #endif /* CONFIG_WPS */ | |
77 | ||
e76baaac | 78 | |
4f34d51a | 79 | int wpa_supplicant_enabled_networks(struct wpa_config *conf) |
e76baaac JM |
80 | { |
81 | struct wpa_ssid *ssid = conf->ssid; | |
5471c343 | 82 | int count = 0; |
e76baaac JM |
83 | while (ssid) { |
84 | if (!ssid->disabled) | |
5471c343 | 85 | count++; |
e76baaac JM |
86 | ssid = ssid->next; |
87 | } | |
5471c343 | 88 | return count; |
e76baaac JM |
89 | } |
90 | ||
91 | ||
92 | static void wpa_supplicant_assoc_try(struct wpa_supplicant *wpa_s, | |
93 | struct wpa_ssid *ssid) | |
94 | { | |
95 | while (ssid) { | |
96 | if (!ssid->disabled) | |
97 | break; | |
98 | ssid = ssid->next; | |
99 | } | |
100 | ||
101 | /* ap_scan=2 mode - try to associate with each SSID. */ | |
102 | if (ssid == NULL) { | |
f049052b BG |
103 | wpa_dbg(wpa_s, MSG_DEBUG, "wpa_supplicant_assoc_try: Reached " |
104 | "end of scan list - go back to beginning"); | |
ba2a573c | 105 | wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN; |
e76baaac JM |
106 | wpa_supplicant_req_scan(wpa_s, 0, 0); |
107 | return; | |
108 | } | |
109 | if (ssid->next) { | |
110 | /* Continue from the next SSID on the next attempt. */ | |
111 | wpa_s->prev_scan_ssid = ssid; | |
112 | } else { | |
113 | /* Start from the beginning of the SSID list. */ | |
ba2a573c | 114 | wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN; |
e76baaac JM |
115 | } |
116 | wpa_supplicant_associate(wpa_s, NULL, ssid); | |
117 | } | |
118 | ||
119 | ||
d3a98225 JM |
120 | static int int_array_len(const int *a) |
121 | { | |
122 | int i; | |
123 | for (i = 0; a && a[i]; i++) | |
124 | ; | |
125 | return i; | |
126 | } | |
127 | ||
128 | ||
129 | static void int_array_concat(int **res, const int *a) | |
130 | { | |
131 | int reslen, alen, i; | |
132 | int *n; | |
133 | ||
134 | reslen = int_array_len(*res); | |
135 | alen = int_array_len(a); | |
136 | ||
137 | n = os_realloc(*res, (reslen + alen + 1) * sizeof(int)); | |
138 | if (n == NULL) { | |
139 | os_free(*res); | |
140 | *res = NULL; | |
e6c0ebff | 141 | return; |
d3a98225 JM |
142 | } |
143 | for (i = 0; i <= alen; i++) | |
144 | n[reslen + i] = a[i]; | |
145 | *res = n; | |
146 | } | |
147 | ||
148 | ||
149 | static int freq_cmp(const void *a, const void *b) | |
150 | { | |
151 | int _a = *(int *) a; | |
152 | int _b = *(int *) b; | |
153 | ||
154 | if (_a == 0) | |
155 | return 1; | |
156 | if (_b == 0) | |
157 | return -1; | |
158 | return _a - _b; | |
159 | } | |
160 | ||
161 | ||
162 | static void int_array_sort_unique(int *a) | |
163 | { | |
164 | int alen; | |
165 | int i, j; | |
166 | ||
167 | if (a == NULL) | |
168 | return; | |
169 | ||
170 | alen = int_array_len(a); | |
171 | qsort(a, alen, sizeof(int), freq_cmp); | |
172 | ||
173 | i = 0; | |
174 | j = 1; | |
175 | while (a[i] && a[j]) { | |
176 | if (a[i] == a[j]) { | |
177 | j++; | |
178 | continue; | |
179 | } | |
180 | a[++i] = a[j++]; | |
181 | } | |
182 | if (a[i]) | |
183 | i++; | |
184 | a[i] = 0; | |
185 | } | |
186 | ||
187 | ||
60b94c98 JM |
188 | int wpa_supplicant_trigger_scan(struct wpa_supplicant *wpa_s, |
189 | struct wpa_driver_scan_params *params) | |
190 | { | |
191 | int ret; | |
192 | ||
193 | wpa_supplicant_notify_scanning(wpa_s, 1); | |
194 | ||
d009a9da JM |
195 | if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) |
196 | ret = ieee80211_sta_req_scan(wpa_s, params); | |
197 | else | |
60b94c98 | 198 | ret = wpa_drv_scan(wpa_s, params); |
60b94c98 JM |
199 | |
200 | if (ret) { | |
201 | wpa_supplicant_notify_scanning(wpa_s, 0); | |
202 | wpas_notify_scan_done(wpa_s, 0); | |
203 | } else | |
204 | wpa_s->scan_runs++; | |
205 | ||
206 | return ret; | |
207 | } | |
208 | ||
209 | ||
3812464c JM |
210 | static struct wpa_driver_scan_filter * |
211 | wpa_supplicant_build_filter_ssids(struct wpa_config *conf, size_t *num_ssids) | |
212 | { | |
213 | struct wpa_driver_scan_filter *ssids; | |
214 | struct wpa_ssid *ssid; | |
215 | size_t count; | |
216 | ||
217 | *num_ssids = 0; | |
218 | if (!conf->filter_ssids) | |
219 | return NULL; | |
220 | ||
221 | for (count = 0, ssid = conf->ssid; ssid; ssid = ssid->next) { | |
222 | if (ssid->ssid && ssid->ssid_len) | |
223 | count++; | |
224 | } | |
225 | if (count == 0) | |
226 | return NULL; | |
227 | ssids = os_zalloc(count * sizeof(struct wpa_driver_scan_filter)); | |
228 | if (ssids == NULL) | |
229 | return NULL; | |
230 | ||
231 | for (ssid = conf->ssid; ssid; ssid = ssid->next) { | |
232 | if (!ssid->ssid || !ssid->ssid_len) | |
233 | continue; | |
234 | os_memcpy(ssids[*num_ssids].ssid, ssid->ssid, ssid->ssid_len); | |
235 | ssids[*num_ssids].ssid_len = ssid->ssid_len; | |
236 | (*num_ssids)++; | |
237 | } | |
238 | ||
239 | return ssids; | |
240 | } | |
241 | ||
242 | ||
6fc6879b JM |
243 | static void wpa_supplicant_scan(void *eloop_ctx, void *timeout_ctx) |
244 | { | |
245 | struct wpa_supplicant *wpa_s = eloop_ctx; | |
246 | struct wpa_ssid *ssid; | |
e76baaac | 247 | int scan_req = 0, ret; |
ad08c363 | 248 | struct wpabuf *wps_ie = NULL; |
b01c18a8 | 249 | #ifdef CONFIG_WPS |
509a3972 | 250 | int wps = 0; |
f90c86d4 | 251 | enum wps_request_type req_type = WPS_REQ_ENROLLEE_INFO; |
b01c18a8 | 252 | #endif /* CONFIG_WPS */ |
e76baaac JM |
253 | struct wpa_driver_scan_params params; |
254 | size_t max_ssids; | |
207ef3fb | 255 | enum wpa_states prev_state; |
6fc6879b | 256 | |
8401a6b0 | 257 | if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) { |
f049052b | 258 | wpa_dbg(wpa_s, MSG_DEBUG, "Skip scan - interface disabled"); |
8401a6b0 JM |
259 | return; |
260 | } | |
261 | ||
3180d7a2 SO |
262 | if (wpa_s->disconnected && !wpa_s->scan_req) { |
263 | wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED); | |
6fc6879b | 264 | return; |
3180d7a2 | 265 | } |
6fc6879b | 266 | |
e76baaac JM |
267 | if (!wpa_supplicant_enabled_networks(wpa_s->conf) && |
268 | !wpa_s->scan_req) { | |
f049052b | 269 | wpa_dbg(wpa_s, MSG_DEBUG, "No enabled networks - do not scan"); |
6fc6879b JM |
270 | wpa_supplicant_set_state(wpa_s, WPA_INACTIVE); |
271 | return; | |
272 | } | |
6fc6879b | 273 | |
c2a04078 JM |
274 | if (wpa_s->conf->ap_scan != 0 && |
275 | (wpa_s->drv_flags & WPA_DRIVER_FLAGS_WIRED)) { | |
f049052b BG |
276 | wpa_dbg(wpa_s, MSG_DEBUG, "Using wired authentication - " |
277 | "overriding ap_scan configuration"); | |
6fc6879b | 278 | wpa_s->conf->ap_scan = 0; |
8bac466b | 279 | wpas_notify_ap_scan_changed(wpa_s); |
6fc6879b JM |
280 | } |
281 | ||
282 | if (wpa_s->conf->ap_scan == 0) { | |
283 | wpa_supplicant_gen_assoc_event(wpa_s); | |
284 | return; | |
285 | } | |
286 | ||
303f60d3 JM |
287 | #ifdef CONFIG_P2P |
288 | if (wpas_p2p_in_progress(wpa_s)) { | |
289 | if (wpa_s->wpa_state == WPA_SCANNING) { | |
290 | wpa_dbg(wpa_s, MSG_DEBUG, "Delay station mode scan " | |
291 | "while P2P operation is in progress"); | |
292 | wpa_supplicant_req_scan(wpa_s, 5, 0); | |
293 | } else { | |
294 | wpa_dbg(wpa_s, MSG_DEBUG, "Do not request scan while " | |
295 | "P2P operation is in progress"); | |
296 | } | |
297 | return; | |
298 | } | |
299 | #endif /* CONFIG_P2P */ | |
300 | ||
c2a04078 JM |
301 | if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) || |
302 | wpa_s->conf->ap_scan == 2) | |
e76baaac JM |
303 | max_ssids = 1; |
304 | else { | |
305 | max_ssids = wpa_s->max_scan_ssids; | |
306 | if (max_ssids > WPAS_MAX_SCAN_SSIDS) | |
307 | max_ssids = WPAS_MAX_SCAN_SSIDS; | |
308 | } | |
309 | ||
310 | #ifdef CONFIG_WPS | |
311 | wps = wpas_wps_in_use(wpa_s->conf, &req_type); | |
312 | #endif /* CONFIG_WPS */ | |
313 | ||
e76baaac JM |
314 | scan_req = wpa_s->scan_req; |
315 | wpa_s->scan_req = 0; | |
316 | ||
317 | os_memset(¶ms, 0, sizeof(params)); | |
318 | ||
207ef3fb | 319 | prev_state = wpa_s->wpa_state; |
6fc6879b JM |
320 | if (wpa_s->wpa_state == WPA_DISCONNECTED || |
321 | wpa_s->wpa_state == WPA_INACTIVE) | |
322 | wpa_supplicant_set_state(wpa_s, WPA_SCANNING); | |
323 | ||
7dcdcfd6 JM |
324 | if (scan_req != 2 && wpa_s->connect_without_scan) { |
325 | for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { | |
326 | if (ssid == wpa_s->connect_without_scan) | |
327 | break; | |
328 | } | |
329 | wpa_s->connect_without_scan = NULL; | |
330 | if (ssid) { | |
331 | wpa_printf(MSG_DEBUG, "Start a pre-selected network " | |
332 | "without scan step"); | |
333 | wpa_supplicant_associate(wpa_s, NULL, ssid); | |
334 | return; | |
335 | } | |
336 | } | |
337 | ||
e76baaac | 338 | /* Find the starting point from which to continue scanning */ |
6fc6879b | 339 | ssid = wpa_s->conf->ssid; |
ba2a573c | 340 | if (wpa_s->prev_scan_ssid != WILDCARD_SSID_SCAN) { |
6fc6879b JM |
341 | while (ssid) { |
342 | if (ssid == wpa_s->prev_scan_ssid) { | |
343 | ssid = ssid->next; | |
344 | break; | |
345 | } | |
346 | ssid = ssid->next; | |
347 | } | |
348 | } | |
6fc6879b | 349 | |
7dcdcfd6 JM |
350 | if (scan_req != 2 && wpa_s->conf->ap_scan == 2) { |
351 | wpa_s->connect_without_scan = NULL; | |
e76baaac JM |
352 | wpa_supplicant_assoc_try(wpa_s, ssid); |
353 | return; | |
354 | } else if (wpa_s->conf->ap_scan == 2) { | |
6fc6879b | 355 | /* |
ba2a573c JM |
356 | * User-initiated scan request in ap_scan == 2; scan with |
357 | * wildcard SSID. | |
6fc6879b | 358 | */ |
e76baaac JM |
359 | ssid = NULL; |
360 | } else { | |
5be45e2e | 361 | struct wpa_ssid *start = ssid, *tssid; |
d3a98225 | 362 | int freqs_set = 0; |
e76baaac JM |
363 | if (ssid == NULL && max_ssids > 1) |
364 | ssid = wpa_s->conf->ssid; | |
365 | while (ssid) { | |
366 | if (!ssid->disabled && ssid->scan_ssid) { | |
367 | wpa_hexdump_ascii(MSG_DEBUG, "Scan SSID", | |
368 | ssid->ssid, ssid->ssid_len); | |
369 | params.ssids[params.num_ssids].ssid = | |
370 | ssid->ssid; | |
371 | params.ssids[params.num_ssids].ssid_len = | |
372 | ssid->ssid_len; | |
373 | params.num_ssids++; | |
374 | if (params.num_ssids + 1 >= max_ssids) | |
375 | break; | |
376 | } | |
377 | ssid = ssid->next; | |
378 | if (ssid == start) | |
379 | break; | |
380 | if (ssid == NULL && max_ssids > 1 && | |
381 | start != wpa_s->conf->ssid) | |
382 | ssid = wpa_s->conf->ssid; | |
6fc6879b | 383 | } |
d3a98225 | 384 | |
5be45e2e JM |
385 | for (tssid = wpa_s->conf->ssid; tssid; tssid = tssid->next) { |
386 | if (tssid->disabled) | |
d3a98225 | 387 | continue; |
5be45e2e | 388 | if ((params.freqs || !freqs_set) && tssid->scan_freq) { |
d3a98225 | 389 | int_array_concat(¶ms.freqs, |
5be45e2e | 390 | tssid->scan_freq); |
d3a98225 JM |
391 | } else { |
392 | os_free(params.freqs); | |
393 | params.freqs = NULL; | |
394 | } | |
395 | freqs_set = 1; | |
396 | } | |
397 | int_array_sort_unique(params.freqs); | |
6fc6879b JM |
398 | } |
399 | ||
6fc6879b | 400 | if (ssid) { |
6fc6879b | 401 | wpa_s->prev_scan_ssid = ssid; |
e76baaac | 402 | if (max_ssids > 1) { |
f049052b BG |
403 | wpa_dbg(wpa_s, MSG_DEBUG, "Include wildcard SSID in " |
404 | "the scan request"); | |
ba2a573c | 405 | params.num_ssids++; |
e76baaac | 406 | } |
f049052b BG |
407 | wpa_dbg(wpa_s, MSG_DEBUG, "Starting AP scan for specific " |
408 | "SSID(s)"); | |
e76baaac | 409 | } else { |
ba2a573c | 410 | wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN; |
e76baaac | 411 | params.num_ssids++; |
f049052b BG |
412 | wpa_dbg(wpa_s, MSG_DEBUG, "Starting AP scan for wildcard " |
413 | "SSID"); | |
6fc6879b JM |
414 | } |
415 | ||
0817de90 JM |
416 | #ifdef CONFIG_P2P |
417 | wpa_s->wps->dev.p2p = 1; | |
418 | if (!wps) { | |
419 | wps = 1; | |
af8ab1ae | 420 | req_type = WPS_REQ_ENROLLEE_INFO; |
0817de90 JM |
421 | } |
422 | ||
423 | if (params.freqs == NULL && wpa_s->p2p_in_provisioning && | |
424 | wpa_s->go_params) { | |
425 | /* Optimize provisioning state scan based on GO information */ | |
426 | if (wpa_s->p2p_in_provisioning < 5 && | |
427 | wpa_s->go_params->freq > 0) { | |
f049052b BG |
428 | wpa_dbg(wpa_s, MSG_DEBUG, "P2P: Scan only GO " |
429 | "preferred frequency %d MHz", | |
430 | wpa_s->go_params->freq); | |
0817de90 JM |
431 | params.freqs = os_zalloc(2 * sizeof(int)); |
432 | if (params.freqs) | |
433 | params.freqs[0] = wpa_s->go_params->freq; | |
2af1c187 JM |
434 | } else if (wpa_s->p2p_in_provisioning < 8 && |
435 | wpa_s->go_params->freq_list[0]) { | |
f049052b BG |
436 | wpa_dbg(wpa_s, MSG_DEBUG, "P2P: Scan only common " |
437 | "channels"); | |
0817de90 JM |
438 | int_array_concat(¶ms.freqs, |
439 | wpa_s->go_params->freq_list); | |
440 | if (params.freqs) | |
441 | int_array_sort_unique(params.freqs); | |
442 | } | |
443 | wpa_s->p2p_in_provisioning++; | |
444 | } | |
445 | #endif /* CONFIG_P2P */ | |
446 | ||
ad08c363 | 447 | #ifdef CONFIG_WPS |
17a4734d JM |
448 | if (params.freqs == NULL && wpa_s->after_wps && wpa_s->wps_freq) { |
449 | /* | |
450 | * Optimize post-provisioning scan based on channel used | |
451 | * during provisioning. | |
452 | */ | |
f049052b BG |
453 | wpa_dbg(wpa_s, MSG_DEBUG, "WPS: Scan only frequency %u MHz " |
454 | "that was used during provisioning", wpa_s->wps_freq); | |
17a4734d JM |
455 | params.freqs = os_zalloc(2 * sizeof(int)); |
456 | if (params.freqs) | |
457 | params.freqs[0] = wpa_s->wps_freq; | |
458 | wpa_s->after_wps--; | |
459 | } | |
460 | ||
ad08c363 | 461 | if (wps) { |
c0d041d9 | 462 | wps_ie = wps_build_probe_req_ie(wps == 2, &wpa_s->wps->dev, |
046ef4aa JMB |
463 | wpa_s->wps->uuid, req_type, |
464 | 0, NULL); | |
ad08c363 | 465 | if (wps_ie) { |
e76baaac JM |
466 | params.extra_ies = wpabuf_head(wps_ie); |
467 | params.extra_ies_len = wpabuf_len(wps_ie); | |
ad08c363 JM |
468 | } |
469 | } | |
470 | #endif /* CONFIG_WPS */ | |
471 | ||
0e65037c JM |
472 | #ifdef CONFIG_P2P |
473 | if (wps_ie) { | |
206e1f42 JM |
474 | size_t ielen = p2p_scan_ie_buf_len(wpa_s->global->p2p); |
475 | if (wpabuf_resize(&wps_ie, ielen) == 0) { | |
0e65037c JM |
476 | wpas_p2p_scan_ie(wpa_s, wps_ie); |
477 | params.extra_ies = wpabuf_head(wps_ie); | |
478 | params.extra_ies_len = wpabuf_len(wps_ie); | |
479 | } | |
480 | } | |
481 | #endif /* CONFIG_P2P */ | |
482 | ||
f47d639d | 483 | if (params.freqs == NULL && wpa_s->next_scan_freqs) { |
f049052b BG |
484 | wpa_dbg(wpa_s, MSG_DEBUG, "Optimize scan based on previously " |
485 | "generated frequency list"); | |
f47d639d JM |
486 | params.freqs = wpa_s->next_scan_freqs; |
487 | } else | |
488 | os_free(wpa_s->next_scan_freqs); | |
489 | wpa_s->next_scan_freqs = NULL; | |
490 | ||
3812464c JM |
491 | params.filter_ssids = wpa_supplicant_build_filter_ssids( |
492 | wpa_s->conf, ¶ms.num_filter_ssids); | |
493 | ||
60b94c98 | 494 | ret = wpa_supplicant_trigger_scan(wpa_s, ¶ms); |
6fc6879b | 495 | |
ad08c363 | 496 | wpabuf_free(wps_ie); |
d3a98225 | 497 | os_free(params.freqs); |
3812464c | 498 | os_free(params.filter_ssids); |
ad08c363 | 499 | |
6fc6879b | 500 | if (ret) { |
f049052b | 501 | wpa_msg(wpa_s, MSG_WARNING, "Failed to initiate AP scan"); |
207ef3fb JM |
502 | if (prev_state != wpa_s->wpa_state) |
503 | wpa_supplicant_set_state(wpa_s, prev_state); | |
1c4c9c50 | 504 | wpa_supplicant_req_scan(wpa_s, 1, 0); |
d902a9c1 | 505 | } |
6fc6879b JM |
506 | } |
507 | ||
508 | ||
509 | /** | |
510 | * wpa_supplicant_req_scan - Schedule a scan for neighboring access points | |
511 | * @wpa_s: Pointer to wpa_supplicant data | |
512 | * @sec: Number of seconds after which to scan | |
513 | * @usec: Number of microseconds after which to scan | |
514 | * | |
515 | * This function is used to schedule a scan for neighboring access points after | |
516 | * the specified time. | |
517 | */ | |
518 | void wpa_supplicant_req_scan(struct wpa_supplicant *wpa_s, int sec, int usec) | |
519 | { | |
7e148849 DW |
520 | /* If there's at least one network that should be specifically scanned |
521 | * then don't cancel the scan and reschedule. Some drivers do | |
522 | * background scanning which generates frequent scan results, and that | |
523 | * causes the specific SSID scan to get continually pushed back and | |
524 | * never happen, which causes hidden APs to never get probe-scanned. | |
525 | */ | |
526 | if (eloop_is_timeout_registered(wpa_supplicant_scan, wpa_s, NULL) && | |
527 | wpa_s->conf->ap_scan == 1) { | |
528 | struct wpa_ssid *ssid = wpa_s->conf->ssid; | |
529 | ||
530 | while (ssid) { | |
531 | if (!ssid->disabled && ssid->scan_ssid) | |
532 | break; | |
533 | ssid = ssid->next; | |
534 | } | |
535 | if (ssid) { | |
f049052b | 536 | wpa_dbg(wpa_s, MSG_DEBUG, "Not rescheduling scan to " |
7e148849 DW |
537 | "ensure that specific SSID scans occur"); |
538 | return; | |
539 | } | |
540 | } | |
541 | ||
f049052b | 542 | wpa_dbg(wpa_s, MSG_DEBUG, "Setting scan request: %d sec %d usec", |
6fc6879b JM |
543 | sec, usec); |
544 | eloop_cancel_timeout(wpa_supplicant_scan, wpa_s, NULL); | |
545 | eloop_register_timeout(sec, usec, wpa_supplicant_scan, wpa_s, NULL); | |
546 | } | |
547 | ||
548 | ||
549 | /** | |
550 | * wpa_supplicant_cancel_scan - Cancel a scheduled scan request | |
551 | * @wpa_s: Pointer to wpa_supplicant data | |
552 | * | |
553 | * This function is used to cancel a scan request scheduled with | |
554 | * wpa_supplicant_req_scan(). | |
555 | */ | |
556 | void wpa_supplicant_cancel_scan(struct wpa_supplicant *wpa_s) | |
557 | { | |
f049052b | 558 | wpa_dbg(wpa_s, MSG_DEBUG, "Cancelling scan request"); |
6fc6879b JM |
559 | eloop_cancel_timeout(wpa_supplicant_scan, wpa_s, NULL); |
560 | } | |
cb8564b1 DW |
561 | |
562 | ||
563 | void wpa_supplicant_notify_scanning(struct wpa_supplicant *wpa_s, | |
564 | int scanning) | |
565 | { | |
566 | if (wpa_s->scanning != scanning) { | |
567 | wpa_s->scanning = scanning; | |
8bac466b | 568 | wpas_notify_scanning(wpa_s); |
cb8564b1 DW |
569 | } |
570 | } | |
571 | ||
9ba9fa07 JM |
572 | |
573 | static int wpa_scan_get_max_rate(const struct wpa_scan_res *res) | |
574 | { | |
575 | int rate = 0; | |
576 | const u8 *ie; | |
577 | int i; | |
578 | ||
579 | ie = wpa_scan_get_ie(res, WLAN_EID_SUPP_RATES); | |
580 | for (i = 0; ie && i < ie[1]; i++) { | |
581 | if ((ie[i + 2] & 0x7f) > rate) | |
582 | rate = ie[i + 2] & 0x7f; | |
583 | } | |
584 | ||
585 | ie = wpa_scan_get_ie(res, WLAN_EID_EXT_SUPP_RATES); | |
586 | for (i = 0; ie && i < ie[1]; i++) { | |
587 | if ((ie[i + 2] & 0x7f) > rate) | |
588 | rate = ie[i + 2] & 0x7f; | |
589 | } | |
590 | ||
591 | return rate; | |
592 | } | |
593 | ||
594 | ||
d1f9c410 JM |
595 | const u8 * wpa_scan_get_ie(const struct wpa_scan_res *res, u8 ie) |
596 | { | |
597 | const u8 *end, *pos; | |
598 | ||
599 | pos = (const u8 *) (res + 1); | |
600 | end = pos + res->ie_len; | |
601 | ||
602 | while (pos + 1 < end) { | |
603 | if (pos + 2 + pos[1] > end) | |
604 | break; | |
605 | if (pos[0] == ie) | |
606 | return pos; | |
607 | pos += 2 + pos[1]; | |
608 | } | |
609 | ||
610 | return NULL; | |
611 | } | |
612 | ||
613 | ||
9ba9fa07 JM |
614 | const u8 * wpa_scan_get_vendor_ie(const struct wpa_scan_res *res, |
615 | u32 vendor_type) | |
616 | { | |
617 | const u8 *end, *pos; | |
618 | ||
619 | pos = (const u8 *) (res + 1); | |
620 | end = pos + res->ie_len; | |
621 | ||
622 | while (pos + 1 < end) { | |
623 | if (pos + 2 + pos[1] > end) | |
624 | break; | |
625 | if (pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 && | |
626 | vendor_type == WPA_GET_BE32(&pos[2])) | |
627 | return pos; | |
628 | pos += 2 + pos[1]; | |
629 | } | |
630 | ||
631 | return NULL; | |
632 | } | |
633 | ||
634 | ||
635 | struct wpabuf * wpa_scan_get_vendor_ie_multi(const struct wpa_scan_res *res, | |
636 | u32 vendor_type) | |
637 | { | |
638 | struct wpabuf *buf; | |
639 | const u8 *end, *pos; | |
640 | ||
641 | buf = wpabuf_alloc(res->ie_len); | |
642 | if (buf == NULL) | |
643 | return NULL; | |
644 | ||
645 | pos = (const u8 *) (res + 1); | |
646 | end = pos + res->ie_len; | |
647 | ||
54f489be JM |
648 | while (pos + 1 < end) { |
649 | if (pos + 2 + pos[1] > end) | |
650 | break; | |
651 | if (pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 && | |
652 | vendor_type == WPA_GET_BE32(&pos[2])) | |
653 | wpabuf_put_data(buf, pos + 2 + 4, pos[1] - 4); | |
654 | pos += 2 + pos[1]; | |
655 | } | |
656 | ||
657 | if (wpabuf_len(buf) == 0) { | |
658 | wpabuf_free(buf); | |
659 | buf = NULL; | |
660 | } | |
661 | ||
662 | return buf; | |
663 | } | |
664 | ||
665 | ||
666 | struct wpabuf * wpa_scan_get_vendor_ie_multi_beacon( | |
667 | const struct wpa_scan_res *res, u32 vendor_type) | |
668 | { | |
669 | struct wpabuf *buf; | |
670 | const u8 *end, *pos; | |
671 | ||
672 | if (res->beacon_ie_len == 0) | |
673 | return NULL; | |
674 | buf = wpabuf_alloc(res->beacon_ie_len); | |
675 | if (buf == NULL) | |
676 | return NULL; | |
677 | ||
678 | pos = (const u8 *) (res + 1); | |
679 | pos += res->ie_len; | |
680 | end = pos + res->beacon_ie_len; | |
681 | ||
9ba9fa07 JM |
682 | while (pos + 1 < end) { |
683 | if (pos + 2 + pos[1] > end) | |
684 | break; | |
685 | if (pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 && | |
686 | vendor_type == WPA_GET_BE32(&pos[2])) | |
687 | wpabuf_put_data(buf, pos + 2 + 4, pos[1] - 4); | |
688 | pos += 2 + pos[1]; | |
689 | } | |
690 | ||
691 | if (wpabuf_len(buf) == 0) { | |
692 | wpabuf_free(buf); | |
693 | buf = NULL; | |
694 | } | |
695 | ||
696 | return buf; | |
697 | } | |
698 | ||
699 | ||
700 | /* Compare function for sorting scan results. Return >0 if @b is considered | |
701 | * better. */ | |
702 | static int wpa_scan_result_compar(const void *a, const void *b) | |
703 | { | |
704 | struct wpa_scan_res **_wa = (void *) a; | |
705 | struct wpa_scan_res **_wb = (void *) b; | |
706 | struct wpa_scan_res *wa = *_wa; | |
707 | struct wpa_scan_res *wb = *_wb; | |
708 | int wpa_a, wpa_b, maxrate_a, maxrate_b; | |
709 | ||
710 | /* WPA/WPA2 support preferred */ | |
711 | wpa_a = wpa_scan_get_vendor_ie(wa, WPA_IE_VENDOR_TYPE) != NULL || | |
712 | wpa_scan_get_ie(wa, WLAN_EID_RSN) != NULL; | |
713 | wpa_b = wpa_scan_get_vendor_ie(wb, WPA_IE_VENDOR_TYPE) != NULL || | |
714 | wpa_scan_get_ie(wb, WLAN_EID_RSN) != NULL; | |
715 | ||
716 | if (wpa_b && !wpa_a) | |
717 | return 1; | |
718 | if (!wpa_b && wpa_a) | |
719 | return -1; | |
720 | ||
721 | /* privacy support preferred */ | |
722 | if ((wa->caps & IEEE80211_CAP_PRIVACY) == 0 && | |
723 | (wb->caps & IEEE80211_CAP_PRIVACY)) | |
724 | return 1; | |
725 | if ((wa->caps & IEEE80211_CAP_PRIVACY) && | |
726 | (wb->caps & IEEE80211_CAP_PRIVACY) == 0) | |
727 | return -1; | |
728 | ||
729 | /* best/max rate preferred if signal level close enough XXX */ | |
730 | if ((wa->level && wb->level && abs(wb->level - wa->level) < 5) || | |
731 | (wa->qual && wb->qual && abs(wb->qual - wa->qual) < 10)) { | |
732 | maxrate_a = wpa_scan_get_max_rate(wa); | |
733 | maxrate_b = wpa_scan_get_max_rate(wb); | |
734 | if (maxrate_a != maxrate_b) | |
735 | return maxrate_b - maxrate_a; | |
736 | } | |
737 | ||
738 | /* use freq for channel preference */ | |
739 | ||
740 | /* all things being equal, use signal level; if signal levels are | |
741 | * identical, use quality values since some drivers may only report | |
742 | * that value and leave the signal level zero */ | |
743 | if (wb->level == wa->level) | |
744 | return wb->qual - wa->qual; | |
745 | return wb->level - wa->level; | |
746 | } | |
747 | ||
748 | ||
41e650ae JM |
749 | #ifdef CONFIG_WPS |
750 | /* Compare function for sorting scan results when searching a WPS AP for | |
751 | * provisioning. Return >0 if @b is considered better. */ | |
752 | static int wpa_scan_result_wps_compar(const void *a, const void *b) | |
753 | { | |
754 | struct wpa_scan_res **_wa = (void *) a; | |
755 | struct wpa_scan_res **_wb = (void *) b; | |
756 | struct wpa_scan_res *wa = *_wa; | |
757 | struct wpa_scan_res *wb = *_wb; | |
758 | int uses_wps_a, uses_wps_b; | |
759 | struct wpabuf *wps_a, *wps_b; | |
760 | int res; | |
761 | ||
762 | /* Optimization - check WPS IE existence before allocated memory and | |
763 | * doing full reassembly. */ | |
764 | uses_wps_a = wpa_scan_get_vendor_ie(wa, WPS_IE_VENDOR_TYPE) != NULL; | |
765 | uses_wps_b = wpa_scan_get_vendor_ie(wb, WPS_IE_VENDOR_TYPE) != NULL; | |
766 | if (uses_wps_a && !uses_wps_b) | |
767 | return -1; | |
768 | if (!uses_wps_a && uses_wps_b) | |
769 | return 1; | |
770 | ||
771 | if (uses_wps_a && uses_wps_b) { | |
772 | wps_a = wpa_scan_get_vendor_ie_multi(wa, WPS_IE_VENDOR_TYPE); | |
773 | wps_b = wpa_scan_get_vendor_ie_multi(wb, WPS_IE_VENDOR_TYPE); | |
774 | res = wps_ap_priority_compar(wps_a, wps_b); | |
775 | wpabuf_free(wps_a); | |
776 | wpabuf_free(wps_b); | |
777 | if (res) | |
778 | return res; | |
779 | } | |
780 | ||
781 | /* | |
782 | * Do not use current AP security policy as a sorting criteria during | |
783 | * WPS provisioning step since the AP may get reconfigured at the | |
784 | * completion of provisioning. | |
785 | */ | |
786 | ||
787 | /* all things being equal, use signal level; if signal levels are | |
788 | * identical, use quality values since some drivers may only report | |
789 | * that value and leave the signal level zero */ | |
790 | if (wb->level == wa->level) | |
791 | return wb->qual - wa->qual; | |
792 | return wb->level - wa->level; | |
793 | } | |
794 | #endif /* CONFIG_WPS */ | |
795 | ||
796 | ||
9ba9fa07 JM |
797 | /** |
798 | * wpa_supplicant_get_scan_results - Get scan results | |
799 | * @wpa_s: Pointer to wpa_supplicant data | |
800 | * @info: Information about what was scanned or %NULL if not available | |
801 | * @new_scan: Whether a new scan was performed | |
802 | * Returns: Scan results, %NULL on failure | |
803 | * | |
804 | * This function request the current scan results from the driver and updates | |
805 | * the local BSS list wpa_s->bss. The caller is responsible for freeing the | |
806 | * results with wpa_scan_results_free(). | |
807 | */ | |
808 | struct wpa_scan_results * | |
809 | wpa_supplicant_get_scan_results(struct wpa_supplicant *wpa_s, | |
810 | struct scan_info *info, int new_scan) | |
811 | { | |
812 | struct wpa_scan_results *scan_res; | |
813 | size_t i; | |
41e650ae | 814 | int (*compar)(const void *, const void *) = wpa_scan_result_compar; |
9ba9fa07 JM |
815 | |
816 | if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) | |
817 | scan_res = ieee80211_sta_get_scan_results(wpa_s); | |
818 | else | |
819 | scan_res = wpa_drv_get_scan_results2(wpa_s); | |
820 | if (scan_res == NULL) { | |
f049052b | 821 | wpa_dbg(wpa_s, MSG_DEBUG, "Failed to get scan results"); |
9ba9fa07 JM |
822 | return NULL; |
823 | } | |
824 | ||
41e650ae JM |
825 | #ifdef CONFIG_WPS |
826 | if (wpas_wps_in_progress(wpa_s)) { | |
f049052b BG |
827 | wpa_dbg(wpa_s, MSG_DEBUG, "WPS: Order scan results with WPS " |
828 | "provisioning rules"); | |
41e650ae JM |
829 | compar = wpa_scan_result_wps_compar; |
830 | } | |
831 | #endif /* CONFIG_WPS */ | |
832 | ||
9ba9fa07 | 833 | qsort(scan_res->res, scan_res->num, sizeof(struct wpa_scan_res *), |
41e650ae | 834 | compar); |
9ba9fa07 JM |
835 | |
836 | wpa_bss_update_start(wpa_s); | |
837 | for (i = 0; i < scan_res->num; i++) | |
838 | wpa_bss_update_scan_res(wpa_s, scan_res->res[i]); | |
839 | wpa_bss_update_end(wpa_s, info, new_scan); | |
840 | ||
841 | return scan_res; | |
842 | } | |
843 | ||
844 | ||
845 | int wpa_supplicant_update_scan_results(struct wpa_supplicant *wpa_s) | |
846 | { | |
847 | struct wpa_scan_results *scan_res; | |
848 | scan_res = wpa_supplicant_get_scan_results(wpa_s, NULL, 0); | |
849 | if (scan_res == NULL) | |
850 | return -1; | |
851 | wpa_scan_results_free(scan_res); | |
852 | ||
853 | return 0; | |
854 | } | |
d1f9c410 JM |
855 | |
856 | ||
857 | void wpa_scan_results_free(struct wpa_scan_results *res) | |
858 | { | |
859 | size_t i; | |
860 | ||
861 | if (res == NULL) | |
862 | return; | |
863 | ||
864 | for (i = 0; i < res->num; i++) | |
865 | os_free(res->res[i]); | |
866 | os_free(res->res); | |
867 | os_free(res); | |
868 | } |