2 * hostapd / Callback functions for driver wrappers
3 * Copyright (c) 2002-2009, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
9 #include "utils/includes.h"
11 #include "utils/common.h"
12 #include "radius/radius.h"
13 #include "drivers/driver.h"
14 #include "common/ieee802_11_defs.h"
15 #include "common/ieee802_11_common.h"
16 #include "crypto/random.h"
20 #include "ieee802_11.h"
22 #include "accounting.h"
23 #include "tkip_countermeasures.h"
24 #include "ieee802_1x.h"
26 #include "wps_hostapd.h"
27 #include "ap_drv_ops.h"
28 #include "ap_config.h"
29 #include "hw_features.h"
32 int hostapd_notif_assoc(struct hostapd_data
*hapd
, const u8
*addr
,
33 const u8
*req_ies
, size_t req_ies_len
, int reassoc
)
37 struct ieee802_11_elems elems
;
40 u16 reason
= WLAN_REASON_UNSPECIFIED
;
44 * This could potentially happen with unexpected event from the
45 * driver wrapper. This was seen at least in one case where the
46 * driver ended up being set to station mode while hostapd was
47 * running, so better make sure we stop processing such an
50 wpa_printf(MSG_DEBUG
, "hostapd_notif_assoc: Skip event with "
54 random_add_randomness(addr
, ETH_ALEN
);
56 hostapd_logger(hapd
, addr
, HOSTAPD_MODULE_IEEE80211
,
57 HOSTAPD_LEVEL_INFO
, "associated");
59 ieee802_11_parse_elems(req_ies
, req_ies_len
, &elems
, 0);
61 ie
= elems
.wps_ie
- 2;
62 ielen
= elems
.wps_ie_len
+ 2;
63 wpa_printf(MSG_DEBUG
, "STA included WPS IE in (Re)AssocReq");
64 } else if (elems
.rsn_ie
) {
65 ie
= elems
.rsn_ie
- 2;
66 ielen
= elems
.rsn_ie_len
+ 2;
67 wpa_printf(MSG_DEBUG
, "STA included RSN IE in (Re)AssocReq");
68 } else if (elems
.wpa_ie
) {
69 ie
= elems
.wpa_ie
- 2;
70 ielen
= elems
.wpa_ie_len
+ 2;
71 wpa_printf(MSG_DEBUG
, "STA included WPA IE in (Re)AssocReq");
75 wpa_printf(MSG_DEBUG
, "STA did not include WPS/RSN/WPA IE in "
79 sta
= ap_get_sta(hapd
, addr
);
81 accounting_sta_stop(hapd
, sta
);
84 * Make sure that the previously registered inactivity timer
85 * will not remove the STA immediately.
87 sta
->timeout_next
= STA_NULLFUNC
;
89 sta
= ap_sta_add(hapd
, addr
);
91 hostapd_drv_sta_disassoc(hapd
, addr
,
92 WLAN_REASON_DISASSOC_AP_BUSY
);
96 sta
->flags
&= ~(WLAN_STA_WPS
| WLAN_STA_MAYBE_WPS
| WLAN_STA_WPS2
);
100 wpabuf_free(sta
->p2p_ie
);
101 sta
->p2p_ie
= ieee802_11_vendor_ie_concat(req_ies
, req_ies_len
,
104 #endif /* CONFIG_P2P */
106 if (hapd
->conf
->wpa
) {
107 if (ie
== NULL
|| ielen
== 0) {
109 if (hapd
->conf
->wps_state
) {
110 wpa_printf(MSG_DEBUG
, "STA did not include "
111 "WPA/RSN IE in (Re)Association "
112 "Request - possible WPS use");
113 sta
->flags
|= WLAN_STA_MAYBE_WPS
;
116 #endif /* CONFIG_WPS */
118 wpa_printf(MSG_DEBUG
, "No WPA/RSN IE from STA");
122 if (hapd
->conf
->wps_state
&& ie
[0] == 0xdd && ie
[1] >= 4 &&
123 os_memcmp(ie
+ 2, "\x00\x50\xf2\x04", 4) == 0) {
125 sta
->flags
|= WLAN_STA_WPS
;
126 wps
= ieee802_11_vendor_ie_concat(ie
, ielen
,
129 if (wps_is_20(wps
)) {
130 wpa_printf(MSG_DEBUG
, "WPS: STA "
132 sta
->flags
|= WLAN_STA_WPS2
;
138 #endif /* CONFIG_WPS */
140 if (sta
->wpa_sm
== NULL
)
141 sta
->wpa_sm
= wpa_auth_sta_init(hapd
->wpa_auth
,
143 if (sta
->wpa_sm
== NULL
) {
144 wpa_printf(MSG_ERROR
, "Failed to initialize WPA state "
148 res
= wpa_validate_wpa_ie(hapd
->wpa_auth
, sta
->wpa_sm
,
150 if (res
!= WPA_IE_OK
) {
151 wpa_printf(MSG_DEBUG
, "WPA/RSN information element "
152 "rejected? (res %u)", res
);
153 wpa_hexdump(MSG_DEBUG
, "IE", ie
, ielen
);
154 if (res
== WPA_INVALID_GROUP
)
155 reason
= WLAN_REASON_GROUP_CIPHER_NOT_VALID
;
156 else if (res
== WPA_INVALID_PAIRWISE
)
157 reason
= WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID
;
158 else if (res
== WPA_INVALID_AKMP
)
159 reason
= WLAN_REASON_AKMP_NOT_VALID
;
160 #ifdef CONFIG_IEEE80211W
161 else if (res
== WPA_MGMT_FRAME_PROTECTION_VIOLATION
)
162 reason
= WLAN_REASON_INVALID_IE
;
163 else if (res
== WPA_INVALID_MGMT_GROUP_CIPHER
)
164 reason
= WLAN_REASON_GROUP_CIPHER_NOT_VALID
;
165 #endif /* CONFIG_IEEE80211W */
167 reason
= WLAN_REASON_INVALID_IE
;
170 } else if (hapd
->conf
->wps_state
) {
174 wps
= ieee802_11_vendor_ie_concat(req_ies
, req_ies_len
,
178 #ifdef CONFIG_WPS_STRICT
179 if (wps
&& wps_validate_assoc_req(wps
) < 0) {
180 reason
= WLAN_REASON_INVALID_IE
;
184 #endif /* CONFIG_WPS_STRICT */
186 sta
->flags
|= WLAN_STA_WPS
;
187 if (wps_is_20(wps
)) {
188 wpa_printf(MSG_DEBUG
, "WPS: STA supports "
190 sta
->flags
|= WLAN_STA_WPS2
;
193 sta
->flags
|= WLAN_STA_MAYBE_WPS
;
195 #endif /* CONFIG_WPS */
199 #endif /* CONFIG_WPS */
201 new_assoc
= (sta
->flags
& WLAN_STA_ASSOC
) == 0;
202 sta
->flags
|= WLAN_STA_AUTH
| WLAN_STA_ASSOC
;
203 wpa_auth_sm_event(sta
->wpa_sm
, WPA_ASSOC
);
205 hostapd_new_assoc_sta(hapd
, sta
, !new_assoc
);
207 ieee802_1x_notify_port_enabled(sta
->eapol_sm
, 1);
211 p2p_group_notif_assoc(hapd
->p2p_group
, sta
->addr
,
212 req_ies
, req_ies_len
);
214 #endif /* CONFIG_P2P */
219 hostapd_drv_sta_disassoc(hapd
, sta
->addr
, reason
);
220 ap_free_sta(hapd
, sta
);
225 void hostapd_notif_disassoc(struct hostapd_data
*hapd
, const u8
*addr
)
227 struct sta_info
*sta
;
231 * This could potentially happen with unexpected event from the
232 * driver wrapper. This was seen at least in one case where the
233 * driver ended up reporting a station mode event while hostapd
234 * was running, so better make sure we stop processing such an
237 wpa_printf(MSG_DEBUG
, "hostapd_notif_disassoc: Skip event "
242 hostapd_logger(hapd
, addr
, HOSTAPD_MODULE_IEEE80211
,
243 HOSTAPD_LEVEL_INFO
, "disassociated");
245 sta
= ap_get_sta(hapd
, addr
);
247 wpa_printf(MSG_DEBUG
, "Disassociation notification for "
248 "unknown STA " MACSTR
, MAC2STR(addr
));
252 ap_sta_set_authorized(hapd
, sta
, 0);
253 sta
->flags
&= ~(WLAN_STA_AUTH
| WLAN_STA_ASSOC
);
254 wpa_auth_sm_event(sta
->wpa_sm
, WPA_DISASSOC
);
255 sta
->acct_terminate_cause
= RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST
;
256 ieee802_1x_notify_port_enabled(sta
->eapol_sm
, 0);
257 ap_free_sta(hapd
, sta
);
261 void hostapd_event_sta_low_ack(struct hostapd_data
*hapd
, const u8
*addr
)
263 struct sta_info
*sta
= ap_get_sta(hapd
, addr
);
265 if (!sta
|| !hapd
->conf
->disassoc_low_ack
)
268 hostapd_logger(hapd
, addr
, HOSTAPD_MODULE_IEEE80211
,
269 HOSTAPD_LEVEL_INFO
, "disconnected due to excessive "
271 hostapd_drv_sta_disassoc(hapd
, addr
, WLAN_REASON_DISASSOC_LOW_ACK
);
273 ap_sta_disassociate(hapd
, sta
, WLAN_REASON_DISASSOC_LOW_ACK
);
277 void hostapd_event_ch_switch(struct hostapd_data
*hapd
, int freq
, int ht
,
283 hostapd_logger(hapd
, NULL
, HOSTAPD_MODULE_IEEE80211
,
284 HOSTAPD_LEVEL_INFO
, "driver had channel switch: "
285 "freq=%d, ht=%d, offset=%d", freq
, ht
, offset
);
287 hapd
->iface
->freq
= freq
;
289 channel
= hostapd_hw_get_channel(hapd
, freq
);
291 hostapd_logger(hapd
, NULL
, HOSTAPD_MODULE_IEEE80211
,
292 HOSTAPD_LEVEL_WARNING
, "driver switched to "
297 hapd
->iconf
->channel
= channel
;
298 hapd
->iconf
->ieee80211n
= ht
;
299 hapd
->iconf
->secondary_channel
= offset
;
300 #endif /* NEED_AP_MLME */
304 int hostapd_probe_req_rx(struct hostapd_data
*hapd
, const u8
*sa
, const u8
*da
,
305 const u8
*bssid
, const u8
*ie
, size_t ie_len
,
311 if (sa
== NULL
|| ie
== NULL
)
314 random_add_randomness(sa
, ETH_ALEN
);
315 for (i
= 0; hapd
->probereq_cb
&& i
< hapd
->num_probereq_cb
; i
++) {
316 if (hapd
->probereq_cb
[i
].cb(hapd
->probereq_cb
[i
].ctx
,
317 sa
, da
, bssid
, ie
, ie_len
,
331 #define HAPD_BROADCAST ((struct hostapd_data *) -1)
333 static struct hostapd_data
* get_hapd_bssid(struct hostapd_iface
*iface
,
340 if (bssid
[0] == 0xff && bssid
[1] == 0xff && bssid
[2] == 0xff &&
341 bssid
[3] == 0xff && bssid
[4] == 0xff && bssid
[5] == 0xff)
342 return HAPD_BROADCAST
;
344 for (i
= 0; i
< iface
->num_bss
; i
++) {
345 if (os_memcmp(bssid
, iface
->bss
[i
]->own_addr
, ETH_ALEN
) == 0)
346 return iface
->bss
[i
];
353 static void hostapd_rx_from_unknown_sta(struct hostapd_data
*hapd
,
354 const u8
*bssid
, const u8
*addr
,
357 hapd
= get_hapd_bssid(hapd
->iface
, bssid
);
358 if (hapd
== NULL
|| hapd
== HAPD_BROADCAST
)
361 ieee802_11_rx_from_unknown(hapd
, addr
, wds
);
365 static void hostapd_mgmt_rx(struct hostapd_data
*hapd
, struct rx_mgmt
*rx_mgmt
)
367 struct hostapd_iface
*iface
= hapd
->iface
;
368 const struct ieee80211_hdr
*hdr
;
370 struct hostapd_frame_info fi
;
372 hdr
= (const struct ieee80211_hdr
*) rx_mgmt
->frame
;
373 bssid
= get_hdr_bssid(hdr
, rx_mgmt
->frame_len
);
377 hapd
= get_hapd_bssid(iface
, bssid
);
380 fc
= le_to_host16(hdr
->frame_control
);
383 * Drop frames to unknown BSSIDs except for Beacon frames which
384 * could be used to update neighbor information.
386 if (WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
387 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_BEACON
)
388 hapd
= iface
->bss
[0];
393 os_memset(&fi
, 0, sizeof(fi
));
394 fi
.datarate
= rx_mgmt
->datarate
;
395 fi
.ssi_signal
= rx_mgmt
->ssi_signal
;
397 if (hapd
== HAPD_BROADCAST
) {
399 for (i
= 0; i
< iface
->num_bss
; i
++)
400 ieee802_11_mgmt(iface
->bss
[i
], rx_mgmt
->frame
,
401 rx_mgmt
->frame_len
, &fi
);
403 ieee802_11_mgmt(hapd
, rx_mgmt
->frame
, rx_mgmt
->frame_len
, &fi
);
405 random_add_randomness(&fi
, sizeof(fi
));
409 static void hostapd_rx_action(struct hostapd_data
*hapd
,
410 struct rx_action
*rx_action
)
412 struct rx_mgmt rx_mgmt
;
414 struct ieee80211_hdr
*hdr
;
416 wpa_printf(MSG_DEBUG
, "EVENT_RX_ACTION DA=" MACSTR
" SA=" MACSTR
417 " BSSID=" MACSTR
" category=%u",
418 MAC2STR(rx_action
->da
), MAC2STR(rx_action
->sa
),
419 MAC2STR(rx_action
->bssid
), rx_action
->category
);
420 wpa_hexdump(MSG_MSGDUMP
, "Received action frame contents",
421 rx_action
->data
, rx_action
->len
);
423 buf
= os_zalloc(24 + 1 + rx_action
->len
);
426 hdr
= (struct ieee80211_hdr
*) buf
;
427 hdr
->frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
428 WLAN_FC_STYPE_ACTION
);
429 if (rx_action
->category
== WLAN_ACTION_SA_QUERY
) {
431 * Assume frame was protected; it would have been dropped if
434 hdr
->frame_control
|= host_to_le16(WLAN_FC_ISWEP
);
436 os_memcpy(hdr
->addr1
, rx_action
->da
, ETH_ALEN
);
437 os_memcpy(hdr
->addr2
, rx_action
->sa
, ETH_ALEN
);
438 os_memcpy(hdr
->addr3
, rx_action
->bssid
, ETH_ALEN
);
439 buf
[24] = rx_action
->category
;
440 os_memcpy(buf
+ 24 + 1, rx_action
->data
, rx_action
->len
);
441 os_memset(&rx_mgmt
, 0, sizeof(rx_mgmt
));
443 rx_mgmt
.frame_len
= 24 + 1 + rx_action
->len
;
444 hostapd_mgmt_rx(hapd
, &rx_mgmt
);
449 static void hostapd_mgmt_tx_cb(struct hostapd_data
*hapd
, const u8
*buf
,
450 size_t len
, u16 stype
, int ok
)
452 struct ieee80211_hdr
*hdr
;
453 hdr
= (struct ieee80211_hdr
*) buf
;
454 hapd
= get_hapd_bssid(hapd
->iface
, get_hdr_bssid(hdr
, len
));
455 if (hapd
== NULL
|| hapd
== HAPD_BROADCAST
)
457 ieee802_11_mgmt_cb(hapd
, buf
, len
, stype
, ok
);
460 #endif /* NEED_AP_MLME */
463 static int hostapd_event_new_sta(struct hostapd_data
*hapd
, const u8
*addr
)
465 struct sta_info
*sta
= ap_get_sta(hapd
, addr
);
469 wpa_printf(MSG_DEBUG
, "Data frame from unknown STA " MACSTR
470 " - adding a new STA", MAC2STR(addr
));
471 sta
= ap_sta_add(hapd
, addr
);
473 hostapd_new_assoc_sta(hapd
, sta
, 0);
475 wpa_printf(MSG_DEBUG
, "Failed to add STA entry for " MACSTR
,
484 static void hostapd_event_eapol_rx(struct hostapd_data
*hapd
, const u8
*src
,
485 const u8
*data
, size_t data_len
)
487 struct hostapd_iface
*iface
= hapd
->iface
;
490 for (j
= 0; j
< iface
->num_bss
; j
++) {
491 if (ap_get_sta(iface
->bss
[j
], src
)) {
492 hapd
= iface
->bss
[j
];
497 ieee802_1x_receive(hapd
, src
, data
, data_len
);
501 void wpa_supplicant_event(void *ctx
, enum wpa_event_type event
,
502 union wpa_event_data
*data
)
504 struct hostapd_data
*hapd
= ctx
;
505 #ifndef CONFIG_NO_STDOUT_DEBUG
506 int level
= MSG_DEBUG
;
508 if (event
== EVENT_RX_MGMT
&& data
&& data
->rx_mgmt
.frame
&&
509 data
->rx_mgmt
.frame_len
>= 24) {
510 const struct ieee80211_hdr
*hdr
;
512 hdr
= (const struct ieee80211_hdr
*) data
->rx_mgmt
.frame
;
513 fc
= le_to_host16(hdr
->frame_control
);
514 if (WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
515 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_BEACON
)
516 level
= MSG_EXCESSIVE
;
519 wpa_dbg(hapd
->msg_ctx
, level
, "Event %s (%d) received",
520 event_to_string(event
), event
);
521 #endif /* CONFIG_NO_STDOUT_DEBUG */
524 case EVENT_MICHAEL_MIC_FAILURE
:
525 michael_mic_failure(hapd
, data
->michael_mic_failure
.src
, 1);
527 case EVENT_SCAN_RESULTS
:
528 if (hapd
->iface
->scan_cb
)
529 hapd
->iface
->scan_cb(hapd
->iface
);
531 #ifdef CONFIG_IEEE80211R
532 case EVENT_FT_RRB_RX
:
533 wpa_ft_rrb_rx(hapd
->wpa_auth
, data
->ft_rrb_rx
.src
,
534 data
->ft_rrb_rx
.data
, data
->ft_rrb_rx
.data_len
);
536 #endif /* CONFIG_IEEE80211R */
537 case EVENT_WPS_BUTTON_PUSHED
:
538 hostapd_wps_button_pushed(hapd
, NULL
);
541 case EVENT_TX_STATUS
:
542 switch (data
->tx_status
.type
) {
543 case WLAN_FC_TYPE_MGMT
:
544 hostapd_mgmt_tx_cb(hapd
, data
->tx_status
.data
,
545 data
->tx_status
.data_len
,
546 data
->tx_status
.stype
,
547 data
->tx_status
.ack
);
549 case WLAN_FC_TYPE_DATA
:
550 hostapd_tx_status(hapd
, data
->tx_status
.dst
,
551 data
->tx_status
.data
,
552 data
->tx_status
.data_len
,
553 data
->tx_status
.ack
);
557 case EVENT_EAPOL_TX_STATUS
:
558 hostapd_eapol_tx_status(hapd
, data
->eapol_tx_status
.dst
,
559 data
->eapol_tx_status
.data
,
560 data
->eapol_tx_status
.data_len
,
561 data
->eapol_tx_status
.ack
);
563 case EVENT_DRIVER_CLIENT_POLL_OK
:
564 hostapd_client_poll_ok(hapd
, data
->client_poll
.addr
);
566 case EVENT_RX_FROM_UNKNOWN
:
567 hostapd_rx_from_unknown_sta(hapd
, data
->rx_from_unknown
.bssid
,
568 data
->rx_from_unknown
.addr
,
569 data
->rx_from_unknown
.wds
);
572 hostapd_mgmt_rx(hapd
, &data
->rx_mgmt
);
574 #endif /* NEED_AP_MLME */
575 case EVENT_RX_PROBE_REQ
:
576 if (data
->rx_probe_req
.sa
== NULL
||
577 data
->rx_probe_req
.ie
== NULL
)
579 hostapd_probe_req_rx(hapd
, data
->rx_probe_req
.sa
,
580 data
->rx_probe_req
.da
,
581 data
->rx_probe_req
.bssid
,
582 data
->rx_probe_req
.ie
,
583 data
->rx_probe_req
.ie_len
,
584 data
->rx_probe_req
.ssi_signal
);
587 hostapd_event_new_sta(hapd
, data
->new_sta
.addr
);
590 hostapd_event_eapol_rx(hapd
, data
->eapol_rx
.src
,
592 data
->eapol_rx
.data_len
);
595 hostapd_notif_assoc(hapd
, data
->assoc_info
.addr
,
596 data
->assoc_info
.req_ies
,
597 data
->assoc_info
.req_ies_len
,
598 data
->assoc_info
.reassoc
);
602 hostapd_notif_disassoc(hapd
, data
->disassoc_info
.addr
);
606 hostapd_notif_disassoc(hapd
, data
->deauth_info
.addr
);
608 case EVENT_STATION_LOW_ACK
:
611 hostapd_event_sta_low_ack(hapd
, data
->low_ack
.addr
);
614 case EVENT_RX_ACTION
:
615 if (data
->rx_action
.da
== NULL
|| data
->rx_action
.sa
== NULL
||
616 data
->rx_action
.bssid
== NULL
)
618 hostapd_rx_action(hapd
, &data
->rx_action
);
620 #endif /* NEED_AP_MLME */
621 case EVENT_CH_SWITCH
:
624 hostapd_event_ch_switch(hapd
, data
->ch_switch
.freq
,
625 data
->ch_switch
.ht_enabled
,
626 data
->ch_switch
.ch_offset
);
629 wpa_printf(MSG_DEBUG
, "Unknown event %d", event
);