]> git.ipfire.org Git - thirdparty/hostap.git/blob - wpa_supplicant/ctrl_iface.c
Handle Wi-Fi Display commands more carefully if P2P is disabled
[thirdparty/hostap.git] / wpa_supplicant / ctrl_iface.c
1 /*
2 * WPA Supplicant / Control interface (shared code for all backends)
3 * Copyright (c) 2004-2014, Jouni Malinen <j@w1.fi>
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include "utils/includes.h"
10
11 #include "utils/common.h"
12 #include "utils/eloop.h"
13 #include "utils/uuid.h"
14 #include "common/version.h"
15 #include "common/ieee802_11_defs.h"
16 #include "common/ieee802_11_common.h"
17 #include "common/wpa_ctrl.h"
18 #include "eap_peer/eap.h"
19 #include "eapol_supp/eapol_supp_sm.h"
20 #include "rsn_supp/wpa.h"
21 #include "rsn_supp/preauth.h"
22 #include "rsn_supp/pmksa_cache.h"
23 #include "l2_packet/l2_packet.h"
24 #include "wps/wps.h"
25 #include "config.h"
26 #include "wpa_supplicant_i.h"
27 #include "driver_i.h"
28 #include "wps_supplicant.h"
29 #include "ibss_rsn.h"
30 #include "ap.h"
31 #include "p2p_supplicant.h"
32 #include "p2p/p2p.h"
33 #include "hs20_supplicant.h"
34 #include "wifi_display.h"
35 #include "notify.h"
36 #include "bss.h"
37 #include "scan.h"
38 #include "ctrl_iface.h"
39 #include "interworking.h"
40 #include "blacklist.h"
41 #include "autoscan.h"
42 #include "wnm_sta.h"
43
44 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
45 char *buf, int len);
46 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
47 char *buf, int len);
48
49
50 static int pno_start(struct wpa_supplicant *wpa_s)
51 {
52 int ret, interval;
53 size_t i, num_ssid;
54 struct wpa_ssid *ssid;
55 struct wpa_driver_scan_params params;
56
57 if (wpa_s->pno || wpa_s->pno_sched_pending)
58 return 0;
59
60 if ((wpa_s->wpa_state > WPA_SCANNING) &&
61 (wpa_s->wpa_state <= WPA_COMPLETED)) {
62 wpa_printf(MSG_ERROR, "PNO: In assoc process");
63 return -EAGAIN;
64 }
65
66 if (wpa_s->wpa_state == WPA_SCANNING) {
67 wpa_supplicant_cancel_scan(wpa_s);
68 if (wpa_s->sched_scanning) {
69 wpa_printf(MSG_DEBUG, "Schedule PNO on completion of "
70 "ongoing sched scan");
71 wpa_supplicant_cancel_sched_scan(wpa_s);
72 wpa_s->pno_sched_pending = 1;
73 return 0;
74 }
75 }
76
77 os_memset(&params, 0, sizeof(params));
78
79 num_ssid = 0;
80 ssid = wpa_s->conf->ssid;
81 while (ssid) {
82 if (!wpas_network_disabled(wpa_s, ssid))
83 num_ssid++;
84 ssid = ssid->next;
85 }
86 if (num_ssid > WPAS_MAX_SCAN_SSIDS) {
87 wpa_printf(MSG_DEBUG, "PNO: Use only the first %u SSIDs from "
88 "%u", WPAS_MAX_SCAN_SSIDS, (unsigned int) num_ssid);
89 num_ssid = WPAS_MAX_SCAN_SSIDS;
90 }
91
92 if (num_ssid == 0) {
93 wpa_printf(MSG_DEBUG, "PNO: No configured SSIDs");
94 return -1;
95 }
96
97 params.filter_ssids = os_malloc(sizeof(struct wpa_driver_scan_filter) *
98 num_ssid);
99 if (params.filter_ssids == NULL)
100 return -1;
101 i = 0;
102 ssid = wpa_s->conf->ssid;
103 while (ssid) {
104 if (!wpas_network_disabled(wpa_s, ssid)) {
105 params.ssids[i].ssid = ssid->ssid;
106 params.ssids[i].ssid_len = ssid->ssid_len;
107 params.num_ssids++;
108 os_memcpy(params.filter_ssids[i].ssid, ssid->ssid,
109 ssid->ssid_len);
110 params.filter_ssids[i].ssid_len = ssid->ssid_len;
111 params.num_filter_ssids++;
112 i++;
113 if (i == num_ssid)
114 break;
115 }
116 ssid = ssid->next;
117 }
118
119 if (wpa_s->conf->filter_rssi)
120 params.filter_rssi = wpa_s->conf->filter_rssi;
121
122 interval = wpa_s->conf->sched_scan_interval ?
123 wpa_s->conf->sched_scan_interval : 10;
124
125 ret = wpa_supplicant_start_sched_scan(wpa_s, &params, interval);
126 os_free(params.filter_ssids);
127 if (ret == 0)
128 wpa_s->pno = 1;
129 return ret;
130 }
131
132
133 static int pno_stop(struct wpa_supplicant *wpa_s)
134 {
135 int ret = 0;
136
137 if (wpa_s->pno || wpa_s->sched_scanning) {
138 wpa_s->pno = 0;
139 ret = wpa_supplicant_stop_sched_scan(wpa_s);
140 }
141
142 wpa_s->pno_sched_pending = 0;
143
144 if (wpa_s->wpa_state == WPA_SCANNING)
145 wpa_supplicant_req_scan(wpa_s, 0, 0);
146
147 return ret;
148 }
149
150
151 static int set_bssid_filter(struct wpa_supplicant *wpa_s, char *val)
152 {
153 char *pos;
154 u8 addr[ETH_ALEN], *filter = NULL, *n;
155 size_t count = 0;
156
157 pos = val;
158 while (pos) {
159 if (*pos == '\0')
160 break;
161 if (hwaddr_aton(pos, addr)) {
162 os_free(filter);
163 return -1;
164 }
165 n = os_realloc_array(filter, count + 1, ETH_ALEN);
166 if (n == NULL) {
167 os_free(filter);
168 return -1;
169 }
170 filter = n;
171 os_memcpy(filter + count * ETH_ALEN, addr, ETH_ALEN);
172 count++;
173
174 pos = os_strchr(pos, ' ');
175 if (pos)
176 pos++;
177 }
178
179 wpa_hexdump(MSG_DEBUG, "bssid_filter", filter, count * ETH_ALEN);
180 os_free(wpa_s->bssid_filter);
181 wpa_s->bssid_filter = filter;
182 wpa_s->bssid_filter_count = count;
183
184 return 0;
185 }
186
187
188 static int set_disallow_aps(struct wpa_supplicant *wpa_s, char *val)
189 {
190 char *pos;
191 u8 addr[ETH_ALEN], *bssid = NULL, *n;
192 struct wpa_ssid_value *ssid = NULL, *ns;
193 size_t count = 0, ssid_count = 0;
194 struct wpa_ssid *c;
195
196 /*
197 * disallow_list ::= <ssid_spec> | <bssid_spec> | <disallow_list> | ""
198 * SSID_SPEC ::= ssid <SSID_HEX>
199 * BSSID_SPEC ::= bssid <BSSID_HEX>
200 */
201
202 pos = val;
203 while (pos) {
204 if (*pos == '\0')
205 break;
206 if (os_strncmp(pos, "bssid ", 6) == 0) {
207 int res;
208 pos += 6;
209 res = hwaddr_aton2(pos, addr);
210 if (res < 0) {
211 os_free(ssid);
212 os_free(bssid);
213 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
214 "BSSID value '%s'", pos);
215 return -1;
216 }
217 pos += res;
218 n = os_realloc_array(bssid, count + 1, ETH_ALEN);
219 if (n == NULL) {
220 os_free(ssid);
221 os_free(bssid);
222 return -1;
223 }
224 bssid = n;
225 os_memcpy(bssid + count * ETH_ALEN, addr, ETH_ALEN);
226 count++;
227 } else if (os_strncmp(pos, "ssid ", 5) == 0) {
228 char *end;
229 pos += 5;
230
231 end = pos;
232 while (*end) {
233 if (*end == '\0' || *end == ' ')
234 break;
235 end++;
236 }
237
238 ns = os_realloc_array(ssid, ssid_count + 1,
239 sizeof(struct wpa_ssid_value));
240 if (ns == NULL) {
241 os_free(ssid);
242 os_free(bssid);
243 return -1;
244 }
245 ssid = ns;
246
247 if ((end - pos) & 0x01 || end - pos > 2 * 32 ||
248 hexstr2bin(pos, ssid[ssid_count].ssid,
249 (end - pos) / 2) < 0) {
250 os_free(ssid);
251 os_free(bssid);
252 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
253 "SSID value '%s'", pos);
254 return -1;
255 }
256 ssid[ssid_count].ssid_len = (end - pos) / 2;
257 wpa_hexdump_ascii(MSG_DEBUG, "disallow_aps SSID",
258 ssid[ssid_count].ssid,
259 ssid[ssid_count].ssid_len);
260 ssid_count++;
261 pos = end;
262 } else {
263 wpa_printf(MSG_DEBUG, "Unexpected disallow_aps value "
264 "'%s'", pos);
265 os_free(ssid);
266 os_free(bssid);
267 return -1;
268 }
269
270 pos = os_strchr(pos, ' ');
271 if (pos)
272 pos++;
273 }
274
275 wpa_hexdump(MSG_DEBUG, "disallow_aps_bssid", bssid, count * ETH_ALEN);
276 os_free(wpa_s->disallow_aps_bssid);
277 wpa_s->disallow_aps_bssid = bssid;
278 wpa_s->disallow_aps_bssid_count = count;
279
280 wpa_printf(MSG_DEBUG, "disallow_aps_ssid_count %d", (int) ssid_count);
281 os_free(wpa_s->disallow_aps_ssid);
282 wpa_s->disallow_aps_ssid = ssid;
283 wpa_s->disallow_aps_ssid_count = ssid_count;
284
285 if (!wpa_s->current_ssid || wpa_s->wpa_state < WPA_AUTHENTICATING)
286 return 0;
287
288 c = wpa_s->current_ssid;
289 if (c->mode != WPAS_MODE_INFRA && c->mode != WPAS_MODE_IBSS)
290 return 0;
291
292 if (!disallowed_bssid(wpa_s, wpa_s->bssid) &&
293 !disallowed_ssid(wpa_s, c->ssid, c->ssid_len))
294 return 0;
295
296 wpa_printf(MSG_DEBUG, "Disconnect and try to find another network "
297 "because current AP was marked disallowed");
298
299 #ifdef CONFIG_SME
300 wpa_s->sme.prev_bssid_set = 0;
301 #endif /* CONFIG_SME */
302 wpa_s->reassociate = 1;
303 wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
304 wpa_supplicant_req_scan(wpa_s, 0, 0);
305
306 return 0;
307 }
308
309
310 static int wpa_supplicant_ctrl_iface_set(struct wpa_supplicant *wpa_s,
311 char *cmd)
312 {
313 char *value;
314 int ret = 0;
315
316 value = os_strchr(cmd, ' ');
317 if (value == NULL)
318 return -1;
319 *value++ = '\0';
320
321 wpa_printf(MSG_DEBUG, "CTRL_IFACE SET '%s'='%s'", cmd, value);
322 if (os_strcasecmp(cmd, "EAPOL::heldPeriod") == 0) {
323 eapol_sm_configure(wpa_s->eapol,
324 atoi(value), -1, -1, -1);
325 } else if (os_strcasecmp(cmd, "EAPOL::authPeriod") == 0) {
326 eapol_sm_configure(wpa_s->eapol,
327 -1, atoi(value), -1, -1);
328 } else if (os_strcasecmp(cmd, "EAPOL::startPeriod") == 0) {
329 eapol_sm_configure(wpa_s->eapol,
330 -1, -1, atoi(value), -1);
331 } else if (os_strcasecmp(cmd, "EAPOL::maxStart") == 0) {
332 eapol_sm_configure(wpa_s->eapol,
333 -1, -1, -1, atoi(value));
334 } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKLifetime") == 0) {
335 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME,
336 atoi(value)))
337 ret = -1;
338 } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKReauthThreshold") ==
339 0) {
340 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD,
341 atoi(value)))
342 ret = -1;
343 } else if (os_strcasecmp(cmd, "dot11RSNAConfigSATimeout") == 0) {
344 if (wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, atoi(value)))
345 ret = -1;
346 } else if (os_strcasecmp(cmd, "wps_fragment_size") == 0) {
347 wpa_s->wps_fragment_size = atoi(value);
348 #ifdef CONFIG_WPS_TESTING
349 } else if (os_strcasecmp(cmd, "wps_version_number") == 0) {
350 long int val;
351 val = strtol(value, NULL, 0);
352 if (val < 0 || val > 0xff) {
353 ret = -1;
354 wpa_printf(MSG_DEBUG, "WPS: Invalid "
355 "wps_version_number %ld", val);
356 } else {
357 wps_version_number = val;
358 wpa_printf(MSG_DEBUG, "WPS: Testing - force WPS "
359 "version %u.%u",
360 (wps_version_number & 0xf0) >> 4,
361 wps_version_number & 0x0f);
362 }
363 } else if (os_strcasecmp(cmd, "wps_testing_dummy_cred") == 0) {
364 wps_testing_dummy_cred = atoi(value);
365 wpa_printf(MSG_DEBUG, "WPS: Testing - dummy_cred=%d",
366 wps_testing_dummy_cred);
367 } else if (os_strcasecmp(cmd, "wps_corrupt_pkhash") == 0) {
368 wps_corrupt_pkhash = atoi(value);
369 wpa_printf(MSG_DEBUG, "WPS: Testing - wps_corrupt_pkhash=%d",
370 wps_corrupt_pkhash);
371 #endif /* CONFIG_WPS_TESTING */
372 } else if (os_strcasecmp(cmd, "ampdu") == 0) {
373 if (wpa_drv_ampdu(wpa_s, atoi(value)) < 0)
374 ret = -1;
375 #ifdef CONFIG_TDLS
376 #ifdef CONFIG_TDLS_TESTING
377 } else if (os_strcasecmp(cmd, "tdls_testing") == 0) {
378 extern unsigned int tdls_testing;
379 tdls_testing = strtol(value, NULL, 0);
380 wpa_printf(MSG_DEBUG, "TDLS: tdls_testing=0x%x", tdls_testing);
381 #endif /* CONFIG_TDLS_TESTING */
382 } else if (os_strcasecmp(cmd, "tdls_disabled") == 0) {
383 int disabled = atoi(value);
384 wpa_printf(MSG_DEBUG, "TDLS: tdls_disabled=%d", disabled);
385 if (disabled) {
386 if (wpa_drv_tdls_oper(wpa_s, TDLS_DISABLE, NULL) < 0)
387 ret = -1;
388 } else if (wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL) < 0)
389 ret = -1;
390 wpa_tdls_enable(wpa_s->wpa, !disabled);
391 #endif /* CONFIG_TDLS */
392 } else if (os_strcasecmp(cmd, "pno") == 0) {
393 if (atoi(value))
394 ret = pno_start(wpa_s);
395 else
396 ret = pno_stop(wpa_s);
397 } else if (os_strcasecmp(cmd, "radio_disabled") == 0) {
398 int disabled = atoi(value);
399 if (wpa_drv_radio_disable(wpa_s, disabled) < 0)
400 ret = -1;
401 else if (disabled)
402 wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);
403 } else if (os_strcasecmp(cmd, "uapsd") == 0) {
404 if (os_strcmp(value, "disable") == 0)
405 wpa_s->set_sta_uapsd = 0;
406 else {
407 int be, bk, vi, vo;
408 char *pos;
409 /* format: BE,BK,VI,VO;max SP Length */
410 be = atoi(value);
411 pos = os_strchr(value, ',');
412 if (pos == NULL)
413 return -1;
414 pos++;
415 bk = atoi(pos);
416 pos = os_strchr(pos, ',');
417 if (pos == NULL)
418 return -1;
419 pos++;
420 vi = atoi(pos);
421 pos = os_strchr(pos, ',');
422 if (pos == NULL)
423 return -1;
424 pos++;
425 vo = atoi(pos);
426 /* ignore max SP Length for now */
427
428 wpa_s->set_sta_uapsd = 1;
429 wpa_s->sta_uapsd = 0;
430 if (be)
431 wpa_s->sta_uapsd |= BIT(0);
432 if (bk)
433 wpa_s->sta_uapsd |= BIT(1);
434 if (vi)
435 wpa_s->sta_uapsd |= BIT(2);
436 if (vo)
437 wpa_s->sta_uapsd |= BIT(3);
438 }
439 } else if (os_strcasecmp(cmd, "ps") == 0) {
440 ret = wpa_drv_set_p2p_powersave(wpa_s, atoi(value), -1, -1);
441 #ifdef CONFIG_WIFI_DISPLAY
442 } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
443 int enabled = !!atoi(value);
444 if (enabled && !wpa_s->global->p2p)
445 ret = -1;
446 else
447 wifi_display_enable(wpa_s->global, enabled);
448 #endif /* CONFIG_WIFI_DISPLAY */
449 } else if (os_strcasecmp(cmd, "bssid_filter") == 0) {
450 ret = set_bssid_filter(wpa_s, value);
451 } else if (os_strcasecmp(cmd, "disallow_aps") == 0) {
452 ret = set_disallow_aps(wpa_s, value);
453 } else if (os_strcasecmp(cmd, "no_keep_alive") == 0) {
454 wpa_s->no_keep_alive = !!atoi(value);
455 } else {
456 value[-1] = '=';
457 ret = wpa_config_process_global(wpa_s->conf, cmd, -1);
458 if (ret == 0)
459 wpa_supplicant_update_config(wpa_s);
460 }
461
462 return ret;
463 }
464
465
466 static int wpa_supplicant_ctrl_iface_get(struct wpa_supplicant *wpa_s,
467 char *cmd, char *buf, size_t buflen)
468 {
469 int res = -1;
470
471 wpa_printf(MSG_DEBUG, "CTRL_IFACE GET '%s'", cmd);
472
473 if (os_strcmp(cmd, "version") == 0) {
474 res = os_snprintf(buf, buflen, "%s", VERSION_STR);
475 } else if (os_strcasecmp(cmd, "country") == 0) {
476 if (wpa_s->conf->country[0] && wpa_s->conf->country[1])
477 res = os_snprintf(buf, buflen, "%c%c",
478 wpa_s->conf->country[0],
479 wpa_s->conf->country[1]);
480 #ifdef CONFIG_WIFI_DISPLAY
481 } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
482 int enabled;
483 if (wpa_s->global->p2p == NULL ||
484 wpa_s->global->p2p_disabled)
485 enabled = 0;
486 else
487 enabled = wpa_s->global->wifi_display;
488 res = os_snprintf(buf, buflen, "%d", enabled);
489 if (res < 0 || (unsigned int) res >= buflen)
490 return -1;
491 return res;
492 #endif /* CONFIG_WIFI_DISPLAY */
493 #ifdef CONFIG_TESTING_GET_GTK
494 } else if (os_strcmp(cmd, "gtk") == 0) {
495 if (wpa_s->last_gtk_len == 0)
496 return -1;
497 res = wpa_snprintf_hex(buf, buflen, wpa_s->last_gtk,
498 wpa_s->last_gtk_len);
499 return res;
500 #endif /* CONFIG_TESTING_GET_GTK */
501 }
502
503 if (res < 0 || (unsigned int) res >= buflen)
504 return -1;
505 return res;
506 }
507
508
509 #ifdef IEEE8021X_EAPOL
510 static int wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant *wpa_s,
511 char *addr)
512 {
513 u8 bssid[ETH_ALEN];
514 struct wpa_ssid *ssid = wpa_s->current_ssid;
515
516 if (hwaddr_aton(addr, bssid)) {
517 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH: invalid address "
518 "'%s'", addr);
519 return -1;
520 }
521
522 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH " MACSTR, MAC2STR(bssid));
523 rsn_preauth_deinit(wpa_s->wpa);
524 if (rsn_preauth_init(wpa_s->wpa, bssid, ssid ? &ssid->eap : NULL))
525 return -1;
526
527 return 0;
528 }
529 #endif /* IEEE8021X_EAPOL */
530
531
532 #ifdef CONFIG_PEERKEY
533 /* MLME-STKSTART.request(peer) */
534 static int wpa_supplicant_ctrl_iface_stkstart(
535 struct wpa_supplicant *wpa_s, char *addr)
536 {
537 u8 peer[ETH_ALEN];
538
539 if (hwaddr_aton(addr, peer)) {
540 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART: invalid "
541 "address '%s'", addr);
542 return -1;
543 }
544
545 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART " MACSTR,
546 MAC2STR(peer));
547
548 return wpa_sm_stkstart(wpa_s->wpa, peer);
549 }
550 #endif /* CONFIG_PEERKEY */
551
552
553 #ifdef CONFIG_TDLS
554
555 static int wpa_supplicant_ctrl_iface_tdls_discover(
556 struct wpa_supplicant *wpa_s, char *addr)
557 {
558 u8 peer[ETH_ALEN];
559 int ret;
560
561 if (hwaddr_aton(addr, peer)) {
562 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER: invalid "
563 "address '%s'", addr);
564 return -1;
565 }
566
567 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER " MACSTR,
568 MAC2STR(peer));
569
570 if (wpa_tdls_is_external_setup(wpa_s->wpa))
571 ret = wpa_tdls_send_discovery_request(wpa_s->wpa, peer);
572 else
573 ret = wpa_drv_tdls_oper(wpa_s, TDLS_DISCOVERY_REQ, peer);
574
575 return ret;
576 }
577
578
579 static int wpa_supplicant_ctrl_iface_tdls_setup(
580 struct wpa_supplicant *wpa_s, char *addr)
581 {
582 u8 peer[ETH_ALEN];
583 int ret;
584
585 if (hwaddr_aton(addr, peer)) {
586 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP: invalid "
587 "address '%s'", addr);
588 return -1;
589 }
590
591 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP " MACSTR,
592 MAC2STR(peer));
593
594 if ((wpa_s->conf->tdls_external_control) &&
595 wpa_tdls_is_external_setup(wpa_s->wpa))
596 return wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
597
598 wpa_tdls_remove(wpa_s->wpa, peer);
599
600 if (wpa_tdls_is_external_setup(wpa_s->wpa))
601 ret = wpa_tdls_start(wpa_s->wpa, peer);
602 else
603 ret = wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
604
605 return ret;
606 }
607
608
609 static int wpa_supplicant_ctrl_iface_tdls_teardown(
610 struct wpa_supplicant *wpa_s, char *addr)
611 {
612 u8 peer[ETH_ALEN];
613 int ret;
614
615 if (hwaddr_aton(addr, peer)) {
616 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN: invalid "
617 "address '%s'", addr);
618 return -1;
619 }
620
621 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN " MACSTR,
622 MAC2STR(peer));
623
624 if ((wpa_s->conf->tdls_external_control) &&
625 wpa_tdls_is_external_setup(wpa_s->wpa))
626 return wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
627
628 if (wpa_tdls_is_external_setup(wpa_s->wpa))
629 ret = wpa_tdls_teardown_link(
630 wpa_s->wpa, peer,
631 WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED);
632 else
633 ret = wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
634
635 return ret;
636 }
637
638 #endif /* CONFIG_TDLS */
639
640
641 #ifdef CONFIG_IEEE80211R
642 static int wpa_supplicant_ctrl_iface_ft_ds(
643 struct wpa_supplicant *wpa_s, char *addr)
644 {
645 u8 target_ap[ETH_ALEN];
646 struct wpa_bss *bss;
647 const u8 *mdie;
648
649 if (hwaddr_aton(addr, target_ap)) {
650 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS: invalid "
651 "address '%s'", addr);
652 return -1;
653 }
654
655 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS " MACSTR, MAC2STR(target_ap));
656
657 bss = wpa_bss_get_bssid(wpa_s, target_ap);
658 if (bss)
659 mdie = wpa_bss_get_ie(bss, WLAN_EID_MOBILITY_DOMAIN);
660 else
661 mdie = NULL;
662
663 return wpa_ft_start_over_ds(wpa_s->wpa, target_ap, mdie);
664 }
665 #endif /* CONFIG_IEEE80211R */
666
667
668 #ifdef CONFIG_WPS
669 static int wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant *wpa_s,
670 char *cmd)
671 {
672 u8 bssid[ETH_ALEN], *_bssid = bssid;
673 #ifdef CONFIG_P2P
674 u8 p2p_dev_addr[ETH_ALEN];
675 #endif /* CONFIG_P2P */
676 #ifdef CONFIG_AP
677 u8 *_p2p_dev_addr = NULL;
678 #endif /* CONFIG_AP */
679
680 if (cmd == NULL || os_strcmp(cmd, "any") == 0) {
681 _bssid = NULL;
682 #ifdef CONFIG_P2P
683 } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
684 if (hwaddr_aton(cmd + 13, p2p_dev_addr)) {
685 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid "
686 "P2P Device Address '%s'",
687 cmd + 13);
688 return -1;
689 }
690 _p2p_dev_addr = p2p_dev_addr;
691 #endif /* CONFIG_P2P */
692 } else if (hwaddr_aton(cmd, bssid)) {
693 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid BSSID '%s'",
694 cmd);
695 return -1;
696 }
697
698 #ifdef CONFIG_AP
699 if (wpa_s->ap_iface)
700 return wpa_supplicant_ap_wps_pbc(wpa_s, _bssid, _p2p_dev_addr);
701 #endif /* CONFIG_AP */
702
703 return wpas_wps_start_pbc(wpa_s, _bssid, 0);
704 }
705
706
707 static int wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant *wpa_s,
708 char *cmd, char *buf,
709 size_t buflen)
710 {
711 u8 bssid[ETH_ALEN], *_bssid = bssid;
712 char *pin;
713 int ret;
714
715 pin = os_strchr(cmd, ' ');
716 if (pin)
717 *pin++ = '\0';
718
719 if (os_strcmp(cmd, "any") == 0)
720 _bssid = NULL;
721 else if (os_strcmp(cmd, "get") == 0) {
722 ret = wps_generate_pin();
723 goto done;
724 } else if (hwaddr_aton(cmd, bssid)) {
725 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PIN: invalid BSSID '%s'",
726 cmd);
727 return -1;
728 }
729
730 #ifdef CONFIG_AP
731 if (wpa_s->ap_iface) {
732 int timeout = 0;
733 char *pos;
734
735 if (pin) {
736 pos = os_strchr(pin, ' ');
737 if (pos) {
738 *pos++ = '\0';
739 timeout = atoi(pos);
740 }
741 }
742
743 return wpa_supplicant_ap_wps_pin(wpa_s, _bssid, pin,
744 buf, buflen, timeout);
745 }
746 #endif /* CONFIG_AP */
747
748 if (pin) {
749 ret = wpas_wps_start_pin(wpa_s, _bssid, pin, 0,
750 DEV_PW_DEFAULT);
751 if (ret < 0)
752 return -1;
753 ret = os_snprintf(buf, buflen, "%s", pin);
754 if (ret < 0 || (size_t) ret >= buflen)
755 return -1;
756 return ret;
757 }
758
759 ret = wpas_wps_start_pin(wpa_s, _bssid, NULL, 0, DEV_PW_DEFAULT);
760 if (ret < 0)
761 return -1;
762
763 done:
764 /* Return the generated PIN */
765 ret = os_snprintf(buf, buflen, "%08d", ret);
766 if (ret < 0 || (size_t) ret >= buflen)
767 return -1;
768 return ret;
769 }
770
771
772 static int wpa_supplicant_ctrl_iface_wps_check_pin(
773 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
774 {
775 char pin[9];
776 size_t len;
777 char *pos;
778 int ret;
779
780 wpa_hexdump_ascii_key(MSG_DEBUG, "WPS_CHECK_PIN",
781 (u8 *) cmd, os_strlen(cmd));
782 for (pos = cmd, len = 0; *pos != '\0'; pos++) {
783 if (*pos < '0' || *pos > '9')
784 continue;
785 pin[len++] = *pos;
786 if (len == 9) {
787 wpa_printf(MSG_DEBUG, "WPS: Too long PIN");
788 return -1;
789 }
790 }
791 if (len != 4 && len != 8) {
792 wpa_printf(MSG_DEBUG, "WPS: Invalid PIN length %d", (int) len);
793 return -1;
794 }
795 pin[len] = '\0';
796
797 if (len == 8) {
798 unsigned int pin_val;
799 pin_val = atoi(pin);
800 if (!wps_pin_valid(pin_val)) {
801 wpa_printf(MSG_DEBUG, "WPS: Invalid checksum digit");
802 ret = os_snprintf(buf, buflen, "FAIL-CHECKSUM\n");
803 if (ret < 0 || (size_t) ret >= buflen)
804 return -1;
805 return ret;
806 }
807 }
808
809 ret = os_snprintf(buf, buflen, "%s", pin);
810 if (ret < 0 || (size_t) ret >= buflen)
811 return -1;
812
813 return ret;
814 }
815
816
817 #ifdef CONFIG_WPS_NFC
818
819 static int wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant *wpa_s,
820 char *cmd)
821 {
822 u8 bssid[ETH_ALEN], *_bssid = bssid;
823
824 if (cmd == NULL || cmd[0] == '\0')
825 _bssid = NULL;
826 else if (hwaddr_aton(cmd, bssid))
827 return -1;
828
829 return wpas_wps_start_nfc(wpa_s, NULL, _bssid, NULL, 0, 0, NULL, NULL,
830 0, 0);
831 }
832
833
834 static int wpa_supplicant_ctrl_iface_wps_nfc_config_token(
835 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
836 {
837 int ndef;
838 struct wpabuf *buf;
839 int res;
840 char *pos;
841
842 pos = os_strchr(cmd, ' ');
843 if (pos)
844 *pos++ = '\0';
845 if (os_strcmp(cmd, "WPS") == 0)
846 ndef = 0;
847 else if (os_strcmp(cmd, "NDEF") == 0)
848 ndef = 1;
849 else
850 return -1;
851
852 buf = wpas_wps_nfc_config_token(wpa_s, ndef, pos);
853 if (buf == NULL)
854 return -1;
855
856 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
857 wpabuf_len(buf));
858 reply[res++] = '\n';
859 reply[res] = '\0';
860
861 wpabuf_free(buf);
862
863 return res;
864 }
865
866
867 static int wpa_supplicant_ctrl_iface_wps_nfc_token(
868 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
869 {
870 int ndef;
871 struct wpabuf *buf;
872 int res;
873
874 if (os_strcmp(cmd, "WPS") == 0)
875 ndef = 0;
876 else if (os_strcmp(cmd, "NDEF") == 0)
877 ndef = 1;
878 else
879 return -1;
880
881 buf = wpas_wps_nfc_token(wpa_s, ndef);
882 if (buf == NULL)
883 return -1;
884
885 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
886 wpabuf_len(buf));
887 reply[res++] = '\n';
888 reply[res] = '\0';
889
890 wpabuf_free(buf);
891
892 return res;
893 }
894
895
896 static int wpa_supplicant_ctrl_iface_wps_nfc_tag_read(
897 struct wpa_supplicant *wpa_s, char *pos)
898 {
899 size_t len;
900 struct wpabuf *buf;
901 int ret;
902 char *freq;
903 int forced_freq = 0;
904
905 freq = strstr(pos, " freq=");
906 if (freq) {
907 *freq = '\0';
908 freq += 6;
909 forced_freq = atoi(freq);
910 }
911
912 len = os_strlen(pos);
913 if (len & 0x01)
914 return -1;
915 len /= 2;
916
917 buf = wpabuf_alloc(len);
918 if (buf == NULL)
919 return -1;
920 if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
921 wpabuf_free(buf);
922 return -1;
923 }
924
925 ret = wpas_wps_nfc_tag_read(wpa_s, buf, forced_freq);
926 wpabuf_free(buf);
927
928 return ret;
929 }
930
931
932 static int wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant *wpa_s,
933 char *reply, size_t max_len,
934 int ndef)
935 {
936 struct wpabuf *buf;
937 int res;
938
939 buf = wpas_wps_nfc_handover_req(wpa_s, ndef);
940 if (buf == NULL)
941 return -1;
942
943 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
944 wpabuf_len(buf));
945 reply[res++] = '\n';
946 reply[res] = '\0';
947
948 wpabuf_free(buf);
949
950 return res;
951 }
952
953
954 static int wpas_ctrl_nfc_get_handover_req_p2p(struct wpa_supplicant *wpa_s,
955 char *reply, size_t max_len,
956 int ndef)
957 {
958 struct wpabuf *buf;
959 int res;
960
961 buf = wpas_p2p_nfc_handover_req(wpa_s, ndef);
962 if (buf == NULL) {
963 wpa_printf(MSG_DEBUG, "P2P: Could not generate NFC handover request");
964 return -1;
965 }
966
967 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
968 wpabuf_len(buf));
969 reply[res++] = '\n';
970 reply[res] = '\0';
971
972 wpabuf_free(buf);
973
974 return res;
975 }
976
977
978 static int wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant *wpa_s,
979 char *cmd, char *reply,
980 size_t max_len)
981 {
982 char *pos;
983 int ndef;
984
985 pos = os_strchr(cmd, ' ');
986 if (pos == NULL)
987 return -1;
988 *pos++ = '\0';
989
990 if (os_strcmp(cmd, "WPS") == 0)
991 ndef = 0;
992 else if (os_strcmp(cmd, "NDEF") == 0)
993 ndef = 1;
994 else
995 return -1;
996
997 if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
998 if (!ndef)
999 return -1;
1000 return wpas_ctrl_nfc_get_handover_req_wps(
1001 wpa_s, reply, max_len, ndef);
1002 }
1003
1004 if (os_strcmp(pos, "P2P-CR") == 0) {
1005 return wpas_ctrl_nfc_get_handover_req_p2p(
1006 wpa_s, reply, max_len, ndef);
1007 }
1008
1009 return -1;
1010 }
1011
1012
1013 static int wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant *wpa_s,
1014 char *reply, size_t max_len,
1015 int ndef, int cr, char *uuid)
1016 {
1017 struct wpabuf *buf;
1018 int res;
1019
1020 buf = wpas_wps_nfc_handover_sel(wpa_s, ndef, cr, uuid);
1021 if (buf == NULL)
1022 return -1;
1023
1024 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1025 wpabuf_len(buf));
1026 reply[res++] = '\n';
1027 reply[res] = '\0';
1028
1029 wpabuf_free(buf);
1030
1031 return res;
1032 }
1033
1034
1035 static int wpas_ctrl_nfc_get_handover_sel_p2p(struct wpa_supplicant *wpa_s,
1036 char *reply, size_t max_len,
1037 int ndef, int tag)
1038 {
1039 struct wpabuf *buf;
1040 int res;
1041
1042 buf = wpas_p2p_nfc_handover_sel(wpa_s, ndef, tag);
1043 if (buf == NULL)
1044 return -1;
1045
1046 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1047 wpabuf_len(buf));
1048 reply[res++] = '\n';
1049 reply[res] = '\0';
1050
1051 wpabuf_free(buf);
1052
1053 return res;
1054 }
1055
1056
1057 static int wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant *wpa_s,
1058 char *cmd, char *reply,
1059 size_t max_len)
1060 {
1061 char *pos, *pos2;
1062 int ndef;
1063
1064 pos = os_strchr(cmd, ' ');
1065 if (pos == NULL)
1066 return -1;
1067 *pos++ = '\0';
1068
1069 if (os_strcmp(cmd, "WPS") == 0)
1070 ndef = 0;
1071 else if (os_strcmp(cmd, "NDEF") == 0)
1072 ndef = 1;
1073 else
1074 return -1;
1075
1076 pos2 = os_strchr(pos, ' ');
1077 if (pos2)
1078 *pos2++ = '\0';
1079 if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1080 if (!ndef)
1081 return -1;
1082 return wpas_ctrl_nfc_get_handover_sel_wps(
1083 wpa_s, reply, max_len, ndef,
1084 os_strcmp(pos, "WPS-CR") == 0, pos2);
1085 }
1086
1087 if (os_strcmp(pos, "P2P-CR") == 0) {
1088 return wpas_ctrl_nfc_get_handover_sel_p2p(
1089 wpa_s, reply, max_len, ndef, 0);
1090 }
1091
1092 if (os_strcmp(pos, "P2P-CR-TAG") == 0) {
1093 return wpas_ctrl_nfc_get_handover_sel_p2p(
1094 wpa_s, reply, max_len, ndef, 1);
1095 }
1096
1097 return -1;
1098 }
1099
1100
1101 static int wpas_ctrl_nfc_rx_handover_req(struct wpa_supplicant *wpa_s,
1102 char *cmd, char *reply,
1103 size_t max_len)
1104 {
1105 size_t len;
1106 struct wpabuf *buf;
1107 int ret;
1108
1109 len = os_strlen(cmd);
1110 if (len & 0x01)
1111 return -1;
1112 len /= 2;
1113
1114 buf = wpabuf_alloc(len);
1115 if (buf == NULL)
1116 return -1;
1117 if (hexstr2bin(cmd, wpabuf_put(buf, len), len) < 0) {
1118 wpabuf_free(buf);
1119 return -1;
1120 }
1121
1122 ret = wpas_wps_nfc_rx_handover_req(wpa_s, buf);
1123 wpabuf_free(buf);
1124
1125 return ret;
1126 }
1127
1128
1129 static int wpas_ctrl_nfc_rx_handover_sel(struct wpa_supplicant *wpa_s,
1130 char *cmd)
1131 {
1132 size_t len;
1133 struct wpabuf *buf;
1134 int ret;
1135
1136 len = os_strlen(cmd);
1137 if (len & 0x01)
1138 return -1;
1139 len /= 2;
1140
1141 buf = wpabuf_alloc(len);
1142 if (buf == NULL)
1143 return -1;
1144 if (hexstr2bin(cmd, wpabuf_put(buf, len), len) < 0) {
1145 wpabuf_free(buf);
1146 return -1;
1147 }
1148
1149 ret = wpas_wps_nfc_rx_handover_sel(wpa_s, buf);
1150 wpabuf_free(buf);
1151
1152 return ret;
1153 }
1154
1155
1156 static int wpas_ctrl_nfc_report_handover(struct wpa_supplicant *wpa_s,
1157 char *cmd)
1158 {
1159 size_t len;
1160 struct wpabuf *req, *sel;
1161 int ret;
1162 char *pos, *role, *type, *pos2;
1163 char *freq;
1164 int forced_freq = 0;
1165
1166 freq = strstr(cmd, " freq=");
1167 if (freq) {
1168 *freq = '\0';
1169 freq += 6;
1170 forced_freq = atoi(freq);
1171 }
1172
1173 role = cmd;
1174 pos = os_strchr(role, ' ');
1175 if (pos == NULL) {
1176 wpa_printf(MSG_DEBUG, "NFC: Missing type in handover report");
1177 return -1;
1178 }
1179 *pos++ = '\0';
1180
1181 type = pos;
1182 pos = os_strchr(type, ' ');
1183 if (pos == NULL) {
1184 wpa_printf(MSG_DEBUG, "NFC: Missing request message in handover report");
1185 return -1;
1186 }
1187 *pos++ = '\0';
1188
1189 pos2 = os_strchr(pos, ' ');
1190 if (pos2 == NULL) {
1191 wpa_printf(MSG_DEBUG, "NFC: Missing select message in handover report");
1192 return -1;
1193 }
1194 *pos2++ = '\0';
1195
1196 len = os_strlen(pos);
1197 if (len & 0x01) {
1198 wpa_printf(MSG_DEBUG, "NFC: Invalid request message length in handover report");
1199 return -1;
1200 }
1201 len /= 2;
1202
1203 req = wpabuf_alloc(len);
1204 if (req == NULL) {
1205 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for request message");
1206 return -1;
1207 }
1208 if (hexstr2bin(pos, wpabuf_put(req, len), len) < 0) {
1209 wpa_printf(MSG_DEBUG, "NFC: Invalid request message hexdump in handover report");
1210 wpabuf_free(req);
1211 return -1;
1212 }
1213
1214 len = os_strlen(pos2);
1215 if (len & 0x01) {
1216 wpa_printf(MSG_DEBUG, "NFC: Invalid select message length in handover report");
1217 wpabuf_free(req);
1218 return -1;
1219 }
1220 len /= 2;
1221
1222 sel = wpabuf_alloc(len);
1223 if (sel == NULL) {
1224 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for select message");
1225 wpabuf_free(req);
1226 return -1;
1227 }
1228 if (hexstr2bin(pos2, wpabuf_put(sel, len), len) < 0) {
1229 wpa_printf(MSG_DEBUG, "NFC: Invalid select message hexdump in handover report");
1230 wpabuf_free(req);
1231 wpabuf_free(sel);
1232 return -1;
1233 }
1234
1235 wpa_printf(MSG_DEBUG, "NFC: Connection handover reported - role=%s type=%s req_len=%d sel_len=%d",
1236 role, type, (int) wpabuf_len(req), (int) wpabuf_len(sel));
1237
1238 if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "WPS") == 0) {
1239 ret = wpas_wps_nfc_report_handover(wpa_s, req, sel);
1240 } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "WPS") == 0)
1241 {
1242 ret = wpas_ap_wps_nfc_report_handover(wpa_s, req, sel);
1243 if (ret < 0)
1244 ret = wpas_er_wps_nfc_report_handover(wpa_s, req, sel);
1245 } else if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "P2P") == 0)
1246 {
1247 ret = wpas_p2p_nfc_report_handover(wpa_s, 1, req, sel, 0);
1248 } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "P2P") == 0)
1249 {
1250 ret = wpas_p2p_nfc_report_handover(wpa_s, 0, req, sel,
1251 forced_freq);
1252 } else {
1253 wpa_printf(MSG_DEBUG, "NFC: Unsupported connection handover "
1254 "reported: role=%s type=%s", role, type);
1255 ret = -1;
1256 }
1257 wpabuf_free(req);
1258 wpabuf_free(sel);
1259
1260 if (ret)
1261 wpa_printf(MSG_DEBUG, "NFC: Failed to process reported handover messages");
1262
1263 return ret;
1264 }
1265
1266 #endif /* CONFIG_WPS_NFC */
1267
1268
1269 static int wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant *wpa_s,
1270 char *cmd)
1271 {
1272 u8 bssid[ETH_ALEN];
1273 char *pin;
1274 char *new_ssid;
1275 char *new_auth;
1276 char *new_encr;
1277 char *new_key;
1278 struct wps_new_ap_settings ap;
1279
1280 pin = os_strchr(cmd, ' ');
1281 if (pin == NULL)
1282 return -1;
1283 *pin++ = '\0';
1284
1285 if (hwaddr_aton(cmd, bssid)) {
1286 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_REG: invalid BSSID '%s'",
1287 cmd);
1288 return -1;
1289 }
1290
1291 new_ssid = os_strchr(pin, ' ');
1292 if (new_ssid == NULL)
1293 return wpas_wps_start_reg(wpa_s, bssid, pin, NULL);
1294 *new_ssid++ = '\0';
1295
1296 new_auth = os_strchr(new_ssid, ' ');
1297 if (new_auth == NULL)
1298 return -1;
1299 *new_auth++ = '\0';
1300
1301 new_encr = os_strchr(new_auth, ' ');
1302 if (new_encr == NULL)
1303 return -1;
1304 *new_encr++ = '\0';
1305
1306 new_key = os_strchr(new_encr, ' ');
1307 if (new_key == NULL)
1308 return -1;
1309 *new_key++ = '\0';
1310
1311 os_memset(&ap, 0, sizeof(ap));
1312 ap.ssid_hex = new_ssid;
1313 ap.auth = new_auth;
1314 ap.encr = new_encr;
1315 ap.key_hex = new_key;
1316 return wpas_wps_start_reg(wpa_s, bssid, pin, &ap);
1317 }
1318
1319
1320 #ifdef CONFIG_AP
1321 static int wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant *wpa_s,
1322 char *cmd, char *buf,
1323 size_t buflen)
1324 {
1325 int timeout = 300;
1326 char *pos;
1327 const char *pin_txt;
1328
1329 if (!wpa_s->ap_iface)
1330 return -1;
1331
1332 pos = os_strchr(cmd, ' ');
1333 if (pos)
1334 *pos++ = '\0';
1335
1336 if (os_strcmp(cmd, "disable") == 0) {
1337 wpas_wps_ap_pin_disable(wpa_s);
1338 return os_snprintf(buf, buflen, "OK\n");
1339 }
1340
1341 if (os_strcmp(cmd, "random") == 0) {
1342 if (pos)
1343 timeout = atoi(pos);
1344 pin_txt = wpas_wps_ap_pin_random(wpa_s, timeout);
1345 if (pin_txt == NULL)
1346 return -1;
1347 return os_snprintf(buf, buflen, "%s", pin_txt);
1348 }
1349
1350 if (os_strcmp(cmd, "get") == 0) {
1351 pin_txt = wpas_wps_ap_pin_get(wpa_s);
1352 if (pin_txt == NULL)
1353 return -1;
1354 return os_snprintf(buf, buflen, "%s", pin_txt);
1355 }
1356
1357 if (os_strcmp(cmd, "set") == 0) {
1358 char *pin;
1359 if (pos == NULL)
1360 return -1;
1361 pin = pos;
1362 pos = os_strchr(pos, ' ');
1363 if (pos) {
1364 *pos++ = '\0';
1365 timeout = atoi(pos);
1366 }
1367 if (os_strlen(pin) > buflen)
1368 return -1;
1369 if (wpas_wps_ap_pin_set(wpa_s, pin, timeout) < 0)
1370 return -1;
1371 return os_snprintf(buf, buflen, "%s", pin);
1372 }
1373
1374 return -1;
1375 }
1376 #endif /* CONFIG_AP */
1377
1378
1379 #ifdef CONFIG_WPS_ER
1380 static int wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant *wpa_s,
1381 char *cmd)
1382 {
1383 char *uuid = cmd, *pin, *pos;
1384 u8 addr_buf[ETH_ALEN], *addr = NULL;
1385 pin = os_strchr(uuid, ' ');
1386 if (pin == NULL)
1387 return -1;
1388 *pin++ = '\0';
1389 pos = os_strchr(pin, ' ');
1390 if (pos) {
1391 *pos++ = '\0';
1392 if (hwaddr_aton(pos, addr_buf) == 0)
1393 addr = addr_buf;
1394 }
1395 return wpas_wps_er_add_pin(wpa_s, addr, uuid, pin);
1396 }
1397
1398
1399 static int wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant *wpa_s,
1400 char *cmd)
1401 {
1402 char *uuid = cmd, *pin;
1403 pin = os_strchr(uuid, ' ');
1404 if (pin == NULL)
1405 return -1;
1406 *pin++ = '\0';
1407 return wpas_wps_er_learn(wpa_s, uuid, pin);
1408 }
1409
1410
1411 static int wpa_supplicant_ctrl_iface_wps_er_set_config(
1412 struct wpa_supplicant *wpa_s, char *cmd)
1413 {
1414 char *uuid = cmd, *id;
1415 id = os_strchr(uuid, ' ');
1416 if (id == NULL)
1417 return -1;
1418 *id++ = '\0';
1419 return wpas_wps_er_set_config(wpa_s, uuid, atoi(id));
1420 }
1421
1422
1423 static int wpa_supplicant_ctrl_iface_wps_er_config(
1424 struct wpa_supplicant *wpa_s, char *cmd)
1425 {
1426 char *pin;
1427 char *new_ssid;
1428 char *new_auth;
1429 char *new_encr;
1430 char *new_key;
1431 struct wps_new_ap_settings ap;
1432
1433 pin = os_strchr(cmd, ' ');
1434 if (pin == NULL)
1435 return -1;
1436 *pin++ = '\0';
1437
1438 new_ssid = os_strchr(pin, ' ');
1439 if (new_ssid == NULL)
1440 return -1;
1441 *new_ssid++ = '\0';
1442
1443 new_auth = os_strchr(new_ssid, ' ');
1444 if (new_auth == NULL)
1445 return -1;
1446 *new_auth++ = '\0';
1447
1448 new_encr = os_strchr(new_auth, ' ');
1449 if (new_encr == NULL)
1450 return -1;
1451 *new_encr++ = '\0';
1452
1453 new_key = os_strchr(new_encr, ' ');
1454 if (new_key == NULL)
1455 return -1;
1456 *new_key++ = '\0';
1457
1458 os_memset(&ap, 0, sizeof(ap));
1459 ap.ssid_hex = new_ssid;
1460 ap.auth = new_auth;
1461 ap.encr = new_encr;
1462 ap.key_hex = new_key;
1463 return wpas_wps_er_config(wpa_s, cmd, pin, &ap);
1464 }
1465
1466
1467 #ifdef CONFIG_WPS_NFC
1468 static int wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
1469 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1470 {
1471 int ndef;
1472 struct wpabuf *buf;
1473 int res;
1474 char *uuid;
1475
1476 uuid = os_strchr(cmd, ' ');
1477 if (uuid == NULL)
1478 return -1;
1479 *uuid++ = '\0';
1480
1481 if (os_strcmp(cmd, "WPS") == 0)
1482 ndef = 0;
1483 else if (os_strcmp(cmd, "NDEF") == 0)
1484 ndef = 1;
1485 else
1486 return -1;
1487
1488 buf = wpas_wps_er_nfc_config_token(wpa_s, ndef, uuid);
1489 if (buf == NULL)
1490 return -1;
1491
1492 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1493 wpabuf_len(buf));
1494 reply[res++] = '\n';
1495 reply[res] = '\0';
1496
1497 wpabuf_free(buf);
1498
1499 return res;
1500 }
1501 #endif /* CONFIG_WPS_NFC */
1502 #endif /* CONFIG_WPS_ER */
1503
1504 #endif /* CONFIG_WPS */
1505
1506
1507 #ifdef CONFIG_IBSS_RSN
1508 static int wpa_supplicant_ctrl_iface_ibss_rsn(
1509 struct wpa_supplicant *wpa_s, char *addr)
1510 {
1511 u8 peer[ETH_ALEN];
1512
1513 if (hwaddr_aton(addr, peer)) {
1514 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN: invalid "
1515 "address '%s'", addr);
1516 return -1;
1517 }
1518
1519 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN " MACSTR,
1520 MAC2STR(peer));
1521
1522 return ibss_rsn_start(wpa_s->ibss_rsn, peer);
1523 }
1524 #endif /* CONFIG_IBSS_RSN */
1525
1526
1527 static int wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant *wpa_s,
1528 char *rsp)
1529 {
1530 #ifdef IEEE8021X_EAPOL
1531 char *pos, *id_pos;
1532 int id;
1533 struct wpa_ssid *ssid;
1534
1535 pos = os_strchr(rsp, '-');
1536 if (pos == NULL)
1537 return -1;
1538 *pos++ = '\0';
1539 id_pos = pos;
1540 pos = os_strchr(pos, ':');
1541 if (pos == NULL)
1542 return -1;
1543 *pos++ = '\0';
1544 id = atoi(id_pos);
1545 wpa_printf(MSG_DEBUG, "CTRL_IFACE: field=%s id=%d", rsp, id);
1546 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
1547 (u8 *) pos, os_strlen(pos));
1548
1549 ssid = wpa_config_get_network(wpa_s->conf, id);
1550 if (ssid == NULL) {
1551 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1552 "to update", id);
1553 return -1;
1554 }
1555
1556 return wpa_supplicant_ctrl_iface_ctrl_rsp_handle(wpa_s, ssid, rsp,
1557 pos);
1558 #else /* IEEE8021X_EAPOL */
1559 wpa_printf(MSG_DEBUG, "CTRL_IFACE: 802.1X not included");
1560 return -1;
1561 #endif /* IEEE8021X_EAPOL */
1562 }
1563
1564
1565 static int wpa_supplicant_ctrl_iface_status(struct wpa_supplicant *wpa_s,
1566 const char *params,
1567 char *buf, size_t buflen)
1568 {
1569 char *pos, *end, tmp[30];
1570 int res, verbose, wps, ret;
1571
1572 if (os_strcmp(params, "-DRIVER") == 0)
1573 return wpa_drv_status(wpa_s, buf, buflen);
1574 verbose = os_strcmp(params, "-VERBOSE") == 0;
1575 wps = os_strcmp(params, "-WPS") == 0;
1576 pos = buf;
1577 end = buf + buflen;
1578 if (wpa_s->wpa_state >= WPA_ASSOCIATED) {
1579 struct wpa_ssid *ssid = wpa_s->current_ssid;
1580 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
1581 MAC2STR(wpa_s->bssid));
1582 if (ret < 0 || ret >= end - pos)
1583 return pos - buf;
1584 pos += ret;
1585 if (ssid) {
1586 u8 *_ssid = ssid->ssid;
1587 size_t ssid_len = ssid->ssid_len;
1588 u8 ssid_buf[MAX_SSID_LEN];
1589 if (ssid_len == 0) {
1590 int _res = wpa_drv_get_ssid(wpa_s, ssid_buf);
1591 if (_res < 0)
1592 ssid_len = 0;
1593 else
1594 ssid_len = _res;
1595 _ssid = ssid_buf;
1596 }
1597 ret = os_snprintf(pos, end - pos, "ssid=%s\nid=%d\n",
1598 wpa_ssid_txt(_ssid, ssid_len),
1599 ssid->id);
1600 if (ret < 0 || ret >= end - pos)
1601 return pos - buf;
1602 pos += ret;
1603
1604 if (wps && ssid->passphrase &&
1605 wpa_key_mgmt_wpa_psk(ssid->key_mgmt) &&
1606 (ssid->mode == WPAS_MODE_AP ||
1607 ssid->mode == WPAS_MODE_P2P_GO)) {
1608 ret = os_snprintf(pos, end - pos,
1609 "passphrase=%s\n",
1610 ssid->passphrase);
1611 if (ret < 0 || ret >= end - pos)
1612 return pos - buf;
1613 pos += ret;
1614 }
1615 if (ssid->id_str) {
1616 ret = os_snprintf(pos, end - pos,
1617 "id_str=%s\n",
1618 ssid->id_str);
1619 if (ret < 0 || ret >= end - pos)
1620 return pos - buf;
1621 pos += ret;
1622 }
1623
1624 switch (ssid->mode) {
1625 case WPAS_MODE_INFRA:
1626 ret = os_snprintf(pos, end - pos,
1627 "mode=station\n");
1628 break;
1629 case WPAS_MODE_IBSS:
1630 ret = os_snprintf(pos, end - pos,
1631 "mode=IBSS\n");
1632 break;
1633 case WPAS_MODE_AP:
1634 ret = os_snprintf(pos, end - pos,
1635 "mode=AP\n");
1636 break;
1637 case WPAS_MODE_P2P_GO:
1638 ret = os_snprintf(pos, end - pos,
1639 "mode=P2P GO\n");
1640 break;
1641 case WPAS_MODE_P2P_GROUP_FORMATION:
1642 ret = os_snprintf(pos, end - pos,
1643 "mode=P2P GO - group "
1644 "formation\n");
1645 break;
1646 default:
1647 ret = 0;
1648 break;
1649 }
1650 if (ret < 0 || ret >= end - pos)
1651 return pos - buf;
1652 pos += ret;
1653 }
1654
1655 #ifdef CONFIG_AP
1656 if (wpa_s->ap_iface) {
1657 pos += ap_ctrl_iface_wpa_get_status(wpa_s, pos,
1658 end - pos,
1659 verbose);
1660 } else
1661 #endif /* CONFIG_AP */
1662 pos += wpa_sm_get_status(wpa_s->wpa, pos, end - pos, verbose);
1663 }
1664 #ifdef CONFIG_SAE
1665 if (wpa_s->wpa_state >= WPA_ASSOCIATED &&
1666 #ifdef CONFIG_AP
1667 !wpa_s->ap_iface &&
1668 #endif /* CONFIG_AP */
1669 wpa_s->sme.sae.state == SAE_ACCEPTED) {
1670 ret = os_snprintf(pos, end - pos, "sae_group=%d\n",
1671 wpa_s->sme.sae.group);
1672 if (ret < 0 || ret >= end - pos)
1673 return pos - buf;
1674 pos += ret;
1675 }
1676 #endif /* CONFIG_SAE */
1677 ret = os_snprintf(pos, end - pos, "wpa_state=%s\n",
1678 wpa_supplicant_state_txt(wpa_s->wpa_state));
1679 if (ret < 0 || ret >= end - pos)
1680 return pos - buf;
1681 pos += ret;
1682
1683 if (wpa_s->l2 &&
1684 l2_packet_get_ip_addr(wpa_s->l2, tmp, sizeof(tmp)) >= 0) {
1685 ret = os_snprintf(pos, end - pos, "ip_address=%s\n", tmp);
1686 if (ret < 0 || ret >= end - pos)
1687 return pos - buf;
1688 pos += ret;
1689 }
1690
1691 #ifdef CONFIG_P2P
1692 if (wpa_s->global->p2p) {
1693 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
1694 "\n", MAC2STR(wpa_s->global->p2p_dev_addr));
1695 if (ret < 0 || ret >= end - pos)
1696 return pos - buf;
1697 pos += ret;
1698 }
1699 #endif /* CONFIG_P2P */
1700
1701 ret = os_snprintf(pos, end - pos, "address=" MACSTR "\n",
1702 MAC2STR(wpa_s->own_addr));
1703 if (ret < 0 || ret >= end - pos)
1704 return pos - buf;
1705 pos += ret;
1706
1707 #ifdef CONFIG_HS20
1708 if (wpa_s->current_bss &&
1709 wpa_bss_get_vendor_ie(wpa_s->current_bss, HS20_IE_VENDOR_TYPE) &&
1710 wpa_s->wpa_proto == WPA_PROTO_RSN &&
1711 wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
1712 ret = os_snprintf(pos, end - pos, "hs20=1\n");
1713 if (ret < 0 || ret >= end - pos)
1714 return pos - buf;
1715 pos += ret;
1716 }
1717
1718 if (wpa_s->current_ssid) {
1719 struct wpa_cred *cred;
1720 char *type;
1721
1722 for (cred = wpa_s->conf->cred; cred; cred = cred->next) {
1723 size_t i;
1724
1725 if (wpa_s->current_ssid->parent_cred != cred)
1726 continue;
1727
1728 for (i = 0; cred->domain && i < cred->num_domain; i++) {
1729 ret = os_snprintf(pos, end - pos,
1730 "home_sp=%s\n",
1731 cred->domain[i]);
1732 if (ret < 0 || ret >= end - pos)
1733 return pos - buf;
1734 pos += ret;
1735 }
1736
1737 if (wpa_s->current_bss == NULL ||
1738 wpa_s->current_bss->anqp == NULL)
1739 res = -1;
1740 else
1741 res = interworking_home_sp_cred(
1742 wpa_s, cred,
1743 wpa_s->current_bss->anqp->domain_name);
1744 if (res > 0)
1745 type = "home";
1746 else if (res == 0)
1747 type = "roaming";
1748 else
1749 type = "unknown";
1750
1751 ret = os_snprintf(pos, end - pos, "sp_type=%s\n", type);
1752 if (ret < 0 || ret >= end - pos)
1753 return pos - buf;
1754 pos += ret;
1755
1756 break;
1757 }
1758 }
1759 #endif /* CONFIG_HS20 */
1760
1761 if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) ||
1762 wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
1763 res = eapol_sm_get_status(wpa_s->eapol, pos, end - pos,
1764 verbose);
1765 if (res >= 0)
1766 pos += res;
1767 }
1768
1769 res = rsn_preauth_get_status(wpa_s->wpa, pos, end - pos, verbose);
1770 if (res >= 0)
1771 pos += res;
1772
1773 #ifdef CONFIG_WPS
1774 {
1775 char uuid_str[100];
1776 uuid_bin2str(wpa_s->wps->uuid, uuid_str, sizeof(uuid_str));
1777 ret = os_snprintf(pos, end - pos, "uuid=%s\n", uuid_str);
1778 if (ret < 0 || ret >= end - pos)
1779 return pos - buf;
1780 pos += ret;
1781 }
1782 #endif /* CONFIG_WPS */
1783
1784 #ifdef ANDROID
1785 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_STATE_CHANGE
1786 "id=%d state=%d BSSID=" MACSTR " SSID=%s",
1787 wpa_s->current_ssid ? wpa_s->current_ssid->id : -1,
1788 wpa_s->wpa_state,
1789 MAC2STR(wpa_s->bssid),
1790 wpa_s->current_ssid && wpa_s->current_ssid->ssid ?
1791 wpa_ssid_txt(wpa_s->current_ssid->ssid,
1792 wpa_s->current_ssid->ssid_len) : "");
1793 if (wpa_s->wpa_state == WPA_COMPLETED) {
1794 struct wpa_ssid *ssid = wpa_s->current_ssid;
1795 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_CONNECTED
1796 "- connection to " MACSTR
1797 " completed %s [id=%d id_str=%s]",
1798 MAC2STR(wpa_s->bssid), "(auth)",
1799 ssid ? ssid->id : -1,
1800 ssid && ssid->id_str ? ssid->id_str : "");
1801 }
1802 #endif /* ANDROID */
1803
1804 return pos - buf;
1805 }
1806
1807
1808 static int wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant *wpa_s,
1809 char *cmd)
1810 {
1811 char *pos;
1812 int id;
1813 struct wpa_ssid *ssid;
1814 u8 bssid[ETH_ALEN];
1815
1816 /* cmd: "<network id> <BSSID>" */
1817 pos = os_strchr(cmd, ' ');
1818 if (pos == NULL)
1819 return -1;
1820 *pos++ = '\0';
1821 id = atoi(cmd);
1822 wpa_printf(MSG_DEBUG, "CTRL_IFACE: id=%d bssid='%s'", id, pos);
1823 if (hwaddr_aton(pos, bssid)) {
1824 wpa_printf(MSG_DEBUG ,"CTRL_IFACE: invalid BSSID '%s'", pos);
1825 return -1;
1826 }
1827
1828 ssid = wpa_config_get_network(wpa_s->conf, id);
1829 if (ssid == NULL) {
1830 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1831 "to update", id);
1832 return -1;
1833 }
1834
1835 os_memcpy(ssid->bssid, bssid, ETH_ALEN);
1836 ssid->bssid_set = !is_zero_ether_addr(bssid);
1837
1838 return 0;
1839 }
1840
1841
1842 static int wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant *wpa_s,
1843 char *cmd, char *buf,
1844 size_t buflen)
1845 {
1846 u8 bssid[ETH_ALEN];
1847 struct wpa_blacklist *e;
1848 char *pos, *end;
1849 int ret;
1850
1851 /* cmd: "BLACKLIST [<BSSID>]" */
1852 if (*cmd == '\0') {
1853 pos = buf;
1854 end = buf + buflen;
1855 e = wpa_s->blacklist;
1856 while (e) {
1857 ret = os_snprintf(pos, end - pos, MACSTR "\n",
1858 MAC2STR(e->bssid));
1859 if (ret < 0 || ret >= end - pos)
1860 return pos - buf;
1861 pos += ret;
1862 e = e->next;
1863 }
1864 return pos - buf;
1865 }
1866
1867 cmd++;
1868 if (os_strncmp(cmd, "clear", 5) == 0) {
1869 wpa_blacklist_clear(wpa_s);
1870 os_memcpy(buf, "OK\n", 3);
1871 return 3;
1872 }
1873
1874 wpa_printf(MSG_DEBUG, "CTRL_IFACE: BLACKLIST bssid='%s'", cmd);
1875 if (hwaddr_aton(cmd, bssid)) {
1876 wpa_printf(MSG_DEBUG, "CTRL_IFACE: invalid BSSID '%s'", cmd);
1877 return -1;
1878 }
1879
1880 /*
1881 * Add the BSSID twice, so its count will be 2, causing it to be
1882 * skipped when processing scan results.
1883 */
1884 ret = wpa_blacklist_add(wpa_s, bssid);
1885 if (ret != 0)
1886 return -1;
1887 ret = wpa_blacklist_add(wpa_s, bssid);
1888 if (ret != 0)
1889 return -1;
1890 os_memcpy(buf, "OK\n", 3);
1891 return 3;
1892 }
1893
1894
1895 static const char * debug_level_str(int level)
1896 {
1897 switch (level) {
1898 case MSG_EXCESSIVE:
1899 return "EXCESSIVE";
1900 case MSG_MSGDUMP:
1901 return "MSGDUMP";
1902 case MSG_DEBUG:
1903 return "DEBUG";
1904 case MSG_INFO:
1905 return "INFO";
1906 case MSG_WARNING:
1907 return "WARNING";
1908 case MSG_ERROR:
1909 return "ERROR";
1910 default:
1911 return "?";
1912 }
1913 }
1914
1915
1916 static int str_to_debug_level(const char *s)
1917 {
1918 if (os_strcasecmp(s, "EXCESSIVE") == 0)
1919 return MSG_EXCESSIVE;
1920 if (os_strcasecmp(s, "MSGDUMP") == 0)
1921 return MSG_MSGDUMP;
1922 if (os_strcasecmp(s, "DEBUG") == 0)
1923 return MSG_DEBUG;
1924 if (os_strcasecmp(s, "INFO") == 0)
1925 return MSG_INFO;
1926 if (os_strcasecmp(s, "WARNING") == 0)
1927 return MSG_WARNING;
1928 if (os_strcasecmp(s, "ERROR") == 0)
1929 return MSG_ERROR;
1930 return -1;
1931 }
1932
1933
1934 static int wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant *wpa_s,
1935 char *cmd, char *buf,
1936 size_t buflen)
1937 {
1938 char *pos, *end, *stamp;
1939 int ret;
1940
1941 if (cmd == NULL) {
1942 return -1;
1943 }
1944
1945 /* cmd: "LOG_LEVEL [<level>]" */
1946 if (*cmd == '\0') {
1947 pos = buf;
1948 end = buf + buflen;
1949 ret = os_snprintf(pos, end - pos, "Current level: %s\n"
1950 "Timestamp: %d\n",
1951 debug_level_str(wpa_debug_level),
1952 wpa_debug_timestamp);
1953 if (ret < 0 || ret >= end - pos)
1954 ret = 0;
1955
1956 return ret;
1957 }
1958
1959 while (*cmd == ' ')
1960 cmd++;
1961
1962 stamp = os_strchr(cmd, ' ');
1963 if (stamp) {
1964 *stamp++ = '\0';
1965 while (*stamp == ' ') {
1966 stamp++;
1967 }
1968 }
1969
1970 if (cmd && os_strlen(cmd)) {
1971 int level = str_to_debug_level(cmd);
1972 if (level < 0)
1973 return -1;
1974 wpa_debug_level = level;
1975 }
1976
1977 if (stamp && os_strlen(stamp))
1978 wpa_debug_timestamp = atoi(stamp);
1979
1980 os_memcpy(buf, "OK\n", 3);
1981 return 3;
1982 }
1983
1984
1985 static int wpa_supplicant_ctrl_iface_list_networks(
1986 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
1987 {
1988 char *pos, *end;
1989 struct wpa_ssid *ssid;
1990 int ret;
1991
1992 pos = buf;
1993 end = buf + buflen;
1994 ret = os_snprintf(pos, end - pos,
1995 "network id / ssid / bssid / flags\n");
1996 if (ret < 0 || ret >= end - pos)
1997 return pos - buf;
1998 pos += ret;
1999
2000 ssid = wpa_s->conf->ssid;
2001 while (ssid) {
2002 ret = os_snprintf(pos, end - pos, "%d\t%s",
2003 ssid->id,
2004 wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
2005 if (ret < 0 || ret >= end - pos)
2006 return pos - buf;
2007 pos += ret;
2008 if (ssid->bssid_set) {
2009 ret = os_snprintf(pos, end - pos, "\t" MACSTR,
2010 MAC2STR(ssid->bssid));
2011 } else {
2012 ret = os_snprintf(pos, end - pos, "\tany");
2013 }
2014 if (ret < 0 || ret >= end - pos)
2015 return pos - buf;
2016 pos += ret;
2017 ret = os_snprintf(pos, end - pos, "\t%s%s%s%s",
2018 ssid == wpa_s->current_ssid ?
2019 "[CURRENT]" : "",
2020 ssid->disabled ? "[DISABLED]" : "",
2021 ssid->disabled_until.sec ?
2022 "[TEMP-DISABLED]" : "",
2023 ssid->disabled == 2 ? "[P2P-PERSISTENT]" :
2024 "");
2025 if (ret < 0 || ret >= end - pos)
2026 return pos - buf;
2027 pos += ret;
2028 ret = os_snprintf(pos, end - pos, "\n");
2029 if (ret < 0 || ret >= end - pos)
2030 return pos - buf;
2031 pos += ret;
2032
2033 ssid = ssid->next;
2034 }
2035
2036 return pos - buf;
2037 }
2038
2039
2040 static char * wpa_supplicant_cipher_txt(char *pos, char *end, int cipher)
2041 {
2042 int ret;
2043 ret = os_snprintf(pos, end - pos, "-");
2044 if (ret < 0 || ret >= end - pos)
2045 return pos;
2046 pos += ret;
2047 ret = wpa_write_ciphers(pos, end, cipher, "+");
2048 if (ret < 0)
2049 return pos;
2050 pos += ret;
2051 return pos;
2052 }
2053
2054
2055 static char * wpa_supplicant_ie_txt(char *pos, char *end, const char *proto,
2056 const u8 *ie, size_t ie_len)
2057 {
2058 struct wpa_ie_data data;
2059 int first, ret;
2060
2061 ret = os_snprintf(pos, end - pos, "[%s-", proto);
2062 if (ret < 0 || ret >= end - pos)
2063 return pos;
2064 pos += ret;
2065
2066 if (wpa_parse_wpa_ie(ie, ie_len, &data) < 0) {
2067 ret = os_snprintf(pos, end - pos, "?]");
2068 if (ret < 0 || ret >= end - pos)
2069 return pos;
2070 pos += ret;
2071 return pos;
2072 }
2073
2074 first = 1;
2075 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
2076 ret = os_snprintf(pos, end - pos, "%sEAP", first ? "" : "+");
2077 if (ret < 0 || ret >= end - pos)
2078 return pos;
2079 pos += ret;
2080 first = 0;
2081 }
2082 if (data.key_mgmt & WPA_KEY_MGMT_PSK) {
2083 ret = os_snprintf(pos, end - pos, "%sPSK", first ? "" : "+");
2084 if (ret < 0 || ret >= end - pos)
2085 return pos;
2086 pos += ret;
2087 first = 0;
2088 }
2089 if (data.key_mgmt & WPA_KEY_MGMT_WPA_NONE) {
2090 ret = os_snprintf(pos, end - pos, "%sNone", first ? "" : "+");
2091 if (ret < 0 || ret >= end - pos)
2092 return pos;
2093 pos += ret;
2094 first = 0;
2095 }
2096 #ifdef CONFIG_IEEE80211R
2097 if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
2098 ret = os_snprintf(pos, end - pos, "%sFT/EAP",
2099 first ? "" : "+");
2100 if (ret < 0 || ret >= end - pos)
2101 return pos;
2102 pos += ret;
2103 first = 0;
2104 }
2105 if (data.key_mgmt & WPA_KEY_MGMT_FT_PSK) {
2106 ret = os_snprintf(pos, end - pos, "%sFT/PSK",
2107 first ? "" : "+");
2108 if (ret < 0 || ret >= end - pos)
2109 return pos;
2110 pos += ret;
2111 first = 0;
2112 }
2113 #endif /* CONFIG_IEEE80211R */
2114 #ifdef CONFIG_IEEE80211W
2115 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
2116 ret = os_snprintf(pos, end - pos, "%sEAP-SHA256",
2117 first ? "" : "+");
2118 if (ret < 0 || ret >= end - pos)
2119 return pos;
2120 pos += ret;
2121 first = 0;
2122 }
2123 if (data.key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
2124 ret = os_snprintf(pos, end - pos, "%sPSK-SHA256",
2125 first ? "" : "+");
2126 if (ret < 0 || ret >= end - pos)
2127 return pos;
2128 pos += ret;
2129 first = 0;
2130 }
2131 #endif /* CONFIG_IEEE80211W */
2132
2133 pos = wpa_supplicant_cipher_txt(pos, end, data.pairwise_cipher);
2134
2135 if (data.capabilities & WPA_CAPABILITY_PREAUTH) {
2136 ret = os_snprintf(pos, end - pos, "-preauth");
2137 if (ret < 0 || ret >= end - pos)
2138 return pos;
2139 pos += ret;
2140 }
2141
2142 ret = os_snprintf(pos, end - pos, "]");
2143 if (ret < 0 || ret >= end - pos)
2144 return pos;
2145 pos += ret;
2146
2147 return pos;
2148 }
2149
2150
2151 #ifdef CONFIG_WPS
2152 static char * wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant *wpa_s,
2153 char *pos, char *end,
2154 struct wpabuf *wps_ie)
2155 {
2156 int ret;
2157 const char *txt;
2158
2159 if (wps_ie == NULL)
2160 return pos;
2161 if (wps_is_selected_pbc_registrar(wps_ie))
2162 txt = "[WPS-PBC]";
2163 #ifdef CONFIG_WPS2
2164 else if (wps_is_addr_authorized(wps_ie, wpa_s->own_addr, 0))
2165 txt = "[WPS-AUTH]";
2166 #endif /* CONFIG_WPS2 */
2167 else if (wps_is_selected_pin_registrar(wps_ie))
2168 txt = "[WPS-PIN]";
2169 else
2170 txt = "[WPS]";
2171
2172 ret = os_snprintf(pos, end - pos, "%s", txt);
2173 if (ret >= 0 && ret < end - pos)
2174 pos += ret;
2175 wpabuf_free(wps_ie);
2176 return pos;
2177 }
2178 #endif /* CONFIG_WPS */
2179
2180
2181 static char * wpa_supplicant_wps_ie_txt(struct wpa_supplicant *wpa_s,
2182 char *pos, char *end,
2183 const struct wpa_bss *bss)
2184 {
2185 #ifdef CONFIG_WPS
2186 struct wpabuf *wps_ie;
2187 wps_ie = wpa_bss_get_vendor_ie_multi(bss, WPS_IE_VENDOR_TYPE);
2188 return wpa_supplicant_wps_ie_txt_buf(wpa_s, pos, end, wps_ie);
2189 #else /* CONFIG_WPS */
2190 return pos;
2191 #endif /* CONFIG_WPS */
2192 }
2193
2194
2195 /* Format one result on one text line into a buffer. */
2196 static int wpa_supplicant_ctrl_iface_scan_result(
2197 struct wpa_supplicant *wpa_s,
2198 const struct wpa_bss *bss, char *buf, size_t buflen)
2199 {
2200 char *pos, *end;
2201 int ret;
2202 const u8 *ie, *ie2, *p2p;
2203
2204 p2p = wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE);
2205 if (!p2p)
2206 p2p = wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE);
2207 if (p2p && bss->ssid_len == P2P_WILDCARD_SSID_LEN &&
2208 os_memcmp(bss->ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) ==
2209 0)
2210 return 0; /* Do not show P2P listen discovery results here */
2211
2212 pos = buf;
2213 end = buf + buflen;
2214
2215 ret = os_snprintf(pos, end - pos, MACSTR "\t%d\t%d\t",
2216 MAC2STR(bss->bssid), bss->freq, bss->level);
2217 if (ret < 0 || ret >= end - pos)
2218 return -1;
2219 pos += ret;
2220 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
2221 if (ie)
2222 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie, 2 + ie[1]);
2223 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
2224 if (ie2)
2225 pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2, 2 + ie2[1]);
2226 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
2227 if (!ie && !ie2 && bss->caps & IEEE80211_CAP_PRIVACY) {
2228 ret = os_snprintf(pos, end - pos, "[WEP]");
2229 if (ret < 0 || ret >= end - pos)
2230 return -1;
2231 pos += ret;
2232 }
2233 if (bss->caps & IEEE80211_CAP_IBSS) {
2234 ret = os_snprintf(pos, end - pos, "[IBSS]");
2235 if (ret < 0 || ret >= end - pos)
2236 return -1;
2237 pos += ret;
2238 }
2239 if (bss->caps & IEEE80211_CAP_ESS) {
2240 ret = os_snprintf(pos, end - pos, "[ESS]");
2241 if (ret < 0 || ret >= end - pos)
2242 return -1;
2243 pos += ret;
2244 }
2245 if (p2p) {
2246 ret = os_snprintf(pos, end - pos, "[P2P]");
2247 if (ret < 0 || ret >= end - pos)
2248 return -1;
2249 pos += ret;
2250 }
2251 #ifdef CONFIG_HS20
2252 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE) && ie2) {
2253 ret = os_snprintf(pos, end - pos, "[HS20]");
2254 if (ret < 0 || ret >= end - pos)
2255 return -1;
2256 pos += ret;
2257 }
2258 #endif /* CONFIG_HS20 */
2259
2260 ret = os_snprintf(pos, end - pos, "\t%s",
2261 wpa_ssid_txt(bss->ssid, bss->ssid_len));
2262 if (ret < 0 || ret >= end - pos)
2263 return -1;
2264 pos += ret;
2265
2266 ret = os_snprintf(pos, end - pos, "\n");
2267 if (ret < 0 || ret >= end - pos)
2268 return -1;
2269 pos += ret;
2270
2271 return pos - buf;
2272 }
2273
2274
2275 static int wpa_supplicant_ctrl_iface_scan_results(
2276 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2277 {
2278 char *pos, *end;
2279 struct wpa_bss *bss;
2280 int ret;
2281
2282 pos = buf;
2283 end = buf + buflen;
2284 ret = os_snprintf(pos, end - pos, "bssid / frequency / signal level / "
2285 "flags / ssid\n");
2286 if (ret < 0 || ret >= end - pos)
2287 return pos - buf;
2288 pos += ret;
2289
2290 dl_list_for_each(bss, &wpa_s->bss_id, struct wpa_bss, list_id) {
2291 ret = wpa_supplicant_ctrl_iface_scan_result(wpa_s, bss, pos,
2292 end - pos);
2293 if (ret < 0 || ret >= end - pos)
2294 return pos - buf;
2295 pos += ret;
2296 }
2297
2298 return pos - buf;
2299 }
2300
2301
2302 static int wpa_supplicant_ctrl_iface_select_network(
2303 struct wpa_supplicant *wpa_s, char *cmd)
2304 {
2305 int id;
2306 struct wpa_ssid *ssid;
2307
2308 /* cmd: "<network id>" or "any" */
2309 if (os_strcmp(cmd, "any") == 0) {
2310 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK any");
2311 ssid = NULL;
2312 } else {
2313 id = atoi(cmd);
2314 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK id=%d", id);
2315
2316 ssid = wpa_config_get_network(wpa_s->conf, id);
2317 if (ssid == NULL) {
2318 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2319 "network id=%d", id);
2320 return -1;
2321 }
2322 if (ssid->disabled == 2) {
2323 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2324 "SELECT_NETWORK with persistent P2P group");
2325 return -1;
2326 }
2327 }
2328
2329 wpa_supplicant_select_network(wpa_s, ssid);
2330
2331 return 0;
2332 }
2333
2334
2335 static int wpa_supplicant_ctrl_iface_enable_network(
2336 struct wpa_supplicant *wpa_s, char *cmd)
2337 {
2338 int id;
2339 struct wpa_ssid *ssid;
2340
2341 /* cmd: "<network id>" or "all" */
2342 if (os_strcmp(cmd, "all") == 0) {
2343 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK all");
2344 ssid = NULL;
2345 } else {
2346 id = atoi(cmd);
2347 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK id=%d", id);
2348
2349 ssid = wpa_config_get_network(wpa_s->conf, id);
2350 if (ssid == NULL) {
2351 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2352 "network id=%d", id);
2353 return -1;
2354 }
2355 if (ssid->disabled == 2) {
2356 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2357 "ENABLE_NETWORK with persistent P2P group");
2358 return -1;
2359 }
2360
2361 if (os_strstr(cmd, " no-connect")) {
2362 ssid->disabled = 0;
2363 return 0;
2364 }
2365 }
2366 wpa_supplicant_enable_network(wpa_s, ssid);
2367
2368 return 0;
2369 }
2370
2371
2372 static int wpa_supplicant_ctrl_iface_disable_network(
2373 struct wpa_supplicant *wpa_s, char *cmd)
2374 {
2375 int id;
2376 struct wpa_ssid *ssid;
2377
2378 /* cmd: "<network id>" or "all" */
2379 if (os_strcmp(cmd, "all") == 0) {
2380 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK all");
2381 ssid = NULL;
2382 } else {
2383 id = atoi(cmd);
2384 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK id=%d", id);
2385
2386 ssid = wpa_config_get_network(wpa_s->conf, id);
2387 if (ssid == NULL) {
2388 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2389 "network id=%d", id);
2390 return -1;
2391 }
2392 if (ssid->disabled == 2) {
2393 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2394 "DISABLE_NETWORK with persistent P2P "
2395 "group");
2396 return -1;
2397 }
2398 }
2399 wpa_supplicant_disable_network(wpa_s, ssid);
2400
2401 return 0;
2402 }
2403
2404
2405 static int wpa_supplicant_ctrl_iface_add_network(
2406 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2407 {
2408 struct wpa_ssid *ssid;
2409 int ret;
2410
2411 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_NETWORK");
2412
2413 ssid = wpa_config_add_network(wpa_s->conf);
2414 if (ssid == NULL)
2415 return -1;
2416
2417 wpas_notify_network_added(wpa_s, ssid);
2418
2419 ssid->disabled = 1;
2420 wpa_config_set_network_defaults(ssid);
2421
2422 ret = os_snprintf(buf, buflen, "%d\n", ssid->id);
2423 if (ret < 0 || (size_t) ret >= buflen)
2424 return -1;
2425 return ret;
2426 }
2427
2428
2429 static int wpa_supplicant_ctrl_iface_remove_network(
2430 struct wpa_supplicant *wpa_s, char *cmd)
2431 {
2432 int id;
2433 struct wpa_ssid *ssid;
2434 int was_disabled;
2435
2436 /* cmd: "<network id>" or "all" */
2437 if (os_strcmp(cmd, "all") == 0) {
2438 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK all");
2439 if (wpa_s->sched_scanning)
2440 wpa_supplicant_cancel_sched_scan(wpa_s);
2441
2442 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2443 if (wpa_s->current_ssid) {
2444 #ifdef CONFIG_SME
2445 wpa_s->sme.prev_bssid_set = 0;
2446 #endif /* CONFIG_SME */
2447 wpa_sm_set_config(wpa_s->wpa, NULL);
2448 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2449 wpa_supplicant_deauthenticate(
2450 wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2451 }
2452 ssid = wpa_s->conf->ssid;
2453 while (ssid) {
2454 struct wpa_ssid *remove_ssid = ssid;
2455 id = ssid->id;
2456 ssid = ssid->next;
2457 wpas_notify_network_removed(wpa_s, remove_ssid);
2458 wpa_config_remove_network(wpa_s->conf, id);
2459 }
2460 return 0;
2461 }
2462
2463 id = atoi(cmd);
2464 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK id=%d", id);
2465
2466 ssid = wpa_config_get_network(wpa_s->conf, id);
2467 if (ssid)
2468 wpas_notify_network_removed(wpa_s, ssid);
2469 if (ssid == NULL) {
2470 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2471 "id=%d", id);
2472 return -1;
2473 }
2474
2475 if (ssid == wpa_s->current_ssid || wpa_s->current_ssid == NULL) {
2476 #ifdef CONFIG_SME
2477 wpa_s->sme.prev_bssid_set = 0;
2478 #endif /* CONFIG_SME */
2479 /*
2480 * Invalidate the EAP session cache if the current or
2481 * previously used network is removed.
2482 */
2483 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2484 }
2485
2486 if (ssid == wpa_s->current_ssid) {
2487 wpa_sm_set_config(wpa_s->wpa, NULL);
2488 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2489
2490 wpa_supplicant_deauthenticate(wpa_s,
2491 WLAN_REASON_DEAUTH_LEAVING);
2492 }
2493
2494 was_disabled = ssid->disabled;
2495
2496 if (wpa_config_remove_network(wpa_s->conf, id) < 0) {
2497 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Not able to remove the "
2498 "network id=%d", id);
2499 return -1;
2500 }
2501
2502 if (!was_disabled && wpa_s->sched_scanning) {
2503 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to remove "
2504 "network from filters");
2505 wpa_supplicant_cancel_sched_scan(wpa_s);
2506 wpa_supplicant_req_scan(wpa_s, 0, 0);
2507 }
2508
2509 return 0;
2510 }
2511
2512
2513 static int wpa_supplicant_ctrl_iface_set_network(
2514 struct wpa_supplicant *wpa_s, char *cmd)
2515 {
2516 int id;
2517 struct wpa_ssid *ssid;
2518 char *name, *value;
2519
2520 /* cmd: "<network id> <variable name> <value>" */
2521 name = os_strchr(cmd, ' ');
2522 if (name == NULL)
2523 return -1;
2524 *name++ = '\0';
2525
2526 value = os_strchr(name, ' ');
2527 if (value == NULL)
2528 return -1;
2529 *value++ = '\0';
2530
2531 id = atoi(cmd);
2532 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_NETWORK id=%d name='%s'",
2533 id, name);
2534 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
2535 (u8 *) value, os_strlen(value));
2536
2537 ssid = wpa_config_get_network(wpa_s->conf, id);
2538 if (ssid == NULL) {
2539 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2540 "id=%d", id);
2541 return -1;
2542 }
2543
2544 if (wpa_config_set(ssid, name, value, 0) < 0) {
2545 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set network "
2546 "variable '%s'", name);
2547 return -1;
2548 }
2549
2550 if (os_strcmp(name, "bssid") != 0 &&
2551 os_strcmp(name, "priority") != 0)
2552 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid);
2553
2554 if (wpa_s->current_ssid == ssid || wpa_s->current_ssid == NULL) {
2555 /*
2556 * Invalidate the EAP session cache if anything in the current
2557 * or previously used configuration changes.
2558 */
2559 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2560 }
2561
2562 if ((os_strcmp(name, "psk") == 0 &&
2563 value[0] == '"' && ssid->ssid_len) ||
2564 (os_strcmp(name, "ssid") == 0 && ssid->passphrase))
2565 wpa_config_update_psk(ssid);
2566 else if (os_strcmp(name, "priority") == 0)
2567 wpa_config_update_prio_list(wpa_s->conf);
2568
2569 return 0;
2570 }
2571
2572
2573 static int wpa_supplicant_ctrl_iface_get_network(
2574 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
2575 {
2576 int id;
2577 size_t res;
2578 struct wpa_ssid *ssid;
2579 char *name, *value;
2580
2581 /* cmd: "<network id> <variable name>" */
2582 name = os_strchr(cmd, ' ');
2583 if (name == NULL || buflen == 0)
2584 return -1;
2585 *name++ = '\0';
2586
2587 id = atoi(cmd);
2588 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_NETWORK id=%d name='%s'",
2589 id, name);
2590
2591 ssid = wpa_config_get_network(wpa_s->conf, id);
2592 if (ssid == NULL) {
2593 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2594 "id=%d", id);
2595 return -1;
2596 }
2597
2598 value = wpa_config_get_no_key(ssid, name);
2599 if (value == NULL) {
2600 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
2601 "variable '%s'", name);
2602 return -1;
2603 }
2604
2605 res = os_strlcpy(buf, value, buflen);
2606 if (res >= buflen) {
2607 os_free(value);
2608 return -1;
2609 }
2610
2611 os_free(value);
2612
2613 return res;
2614 }
2615
2616
2617 static int wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant *wpa_s,
2618 char *buf, size_t buflen)
2619 {
2620 char *pos, *end;
2621 struct wpa_cred *cred;
2622 int ret;
2623
2624 pos = buf;
2625 end = buf + buflen;
2626 ret = os_snprintf(pos, end - pos,
2627 "cred id / realm / username / domain / imsi\n");
2628 if (ret < 0 || ret >= end - pos)
2629 return pos - buf;
2630 pos += ret;
2631
2632 cred = wpa_s->conf->cred;
2633 while (cred) {
2634 ret = os_snprintf(pos, end - pos, "%d\t%s\t%s\t%s\t%s\n",
2635 cred->id, cred->realm ? cred->realm : "",
2636 cred->username ? cred->username : "",
2637 cred->domain ? cred->domain[0] : "",
2638 cred->imsi ? cred->imsi : "");
2639 if (ret < 0 || ret >= end - pos)
2640 return pos - buf;
2641 pos += ret;
2642
2643 cred = cred->next;
2644 }
2645
2646 return pos - buf;
2647 }
2648
2649
2650 static int wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant *wpa_s,
2651 char *buf, size_t buflen)
2652 {
2653 struct wpa_cred *cred;
2654 int ret;
2655
2656 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_CRED");
2657
2658 cred = wpa_config_add_cred(wpa_s->conf);
2659 if (cred == NULL)
2660 return -1;
2661
2662 ret = os_snprintf(buf, buflen, "%d\n", cred->id);
2663 if (ret < 0 || (size_t) ret >= buflen)
2664 return -1;
2665 return ret;
2666 }
2667
2668
2669 static int wpas_ctrl_remove_cred(struct wpa_supplicant *wpa_s,
2670 struct wpa_cred *cred)
2671 {
2672 struct wpa_ssid *ssid;
2673 char str[20];
2674
2675 if (cred == NULL || wpa_config_remove_cred(wpa_s->conf, cred->id) < 0) {
2676 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
2677 return -1;
2678 }
2679
2680 /* Remove any network entry created based on the removed credential */
2681 ssid = wpa_s->conf->ssid;
2682 while (ssid) {
2683 if (ssid->parent_cred == cred) {
2684 wpa_printf(MSG_DEBUG, "Remove network id %d since it "
2685 "used the removed credential", ssid->id);
2686 os_snprintf(str, sizeof(str), "%d", ssid->id);
2687 ssid = ssid->next;
2688 wpa_supplicant_ctrl_iface_remove_network(wpa_s, str);
2689 } else
2690 ssid = ssid->next;
2691 }
2692
2693 return 0;
2694 }
2695
2696
2697 static int wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant *wpa_s,
2698 char *cmd)
2699 {
2700 int id;
2701 struct wpa_cred *cred, *prev;
2702
2703 /* cmd: "<cred id>", "all", or "sp_fqdn=<FQDN>" */
2704 if (os_strcmp(cmd, "all") == 0) {
2705 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED all");
2706 cred = wpa_s->conf->cred;
2707 while (cred) {
2708 prev = cred;
2709 cred = cred->next;
2710 wpas_ctrl_remove_cred(wpa_s, prev);
2711 }
2712 return 0;
2713 }
2714
2715 if (os_strncmp(cmd, "sp_fqdn=", 8) == 0) {
2716 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED SP FQDN '%s'",
2717 cmd + 8);
2718 cred = wpa_s->conf->cred;
2719 while (cred) {
2720 prev = cred;
2721 cred = cred->next;
2722 if (prev->domain) {
2723 size_t i;
2724 for (i = 0; i < prev->num_domain; i++) {
2725 if (os_strcmp(prev->domain[i], cmd + 8)
2726 != 0)
2727 continue;
2728 wpas_ctrl_remove_cred(wpa_s, prev);
2729 break;
2730 }
2731 }
2732 }
2733 return 0;
2734 }
2735
2736 id = atoi(cmd);
2737 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED id=%d", id);
2738
2739 cred = wpa_config_get_cred(wpa_s->conf, id);
2740 return wpas_ctrl_remove_cred(wpa_s, cred);
2741 }
2742
2743
2744 static int wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant *wpa_s,
2745 char *cmd)
2746 {
2747 int id;
2748 struct wpa_cred *cred;
2749 char *name, *value;
2750
2751 /* cmd: "<cred id> <variable name> <value>" */
2752 name = os_strchr(cmd, ' ');
2753 if (name == NULL)
2754 return -1;
2755 *name++ = '\0';
2756
2757 value = os_strchr(name, ' ');
2758 if (value == NULL)
2759 return -1;
2760 *value++ = '\0';
2761
2762 id = atoi(cmd);
2763 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_CRED id=%d name='%s'",
2764 id, name);
2765 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
2766 (u8 *) value, os_strlen(value));
2767
2768 cred = wpa_config_get_cred(wpa_s->conf, id);
2769 if (cred == NULL) {
2770 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
2771 id);
2772 return -1;
2773 }
2774
2775 if (wpa_config_set_cred(cred, name, value, 0) < 0) {
2776 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set cred "
2777 "variable '%s'", name);
2778 return -1;
2779 }
2780
2781 return 0;
2782 }
2783
2784
2785 #ifndef CONFIG_NO_CONFIG_WRITE
2786 static int wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant *wpa_s)
2787 {
2788 int ret;
2789
2790 if (!wpa_s->conf->update_config) {
2791 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed "
2792 "to update configuration (update_config=0)");
2793 return -1;
2794 }
2795
2796 ret = wpa_config_write(wpa_s->confname, wpa_s->conf);
2797 if (ret) {
2798 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to "
2799 "update configuration");
2800 } else {
2801 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration"
2802 " updated");
2803 }
2804
2805 return ret;
2806 }
2807 #endif /* CONFIG_NO_CONFIG_WRITE */
2808
2809
2810 struct cipher_info {
2811 unsigned int capa;
2812 const char *name;
2813 int group_only;
2814 };
2815
2816 static const struct cipher_info ciphers[] = {
2817 { WPA_DRIVER_CAPA_ENC_CCMP_256, "CCMP-256", 0 },
2818 { WPA_DRIVER_CAPA_ENC_GCMP_256, "GCMP-256", 0 },
2819 { WPA_DRIVER_CAPA_ENC_CCMP, "CCMP", 0 },
2820 { WPA_DRIVER_CAPA_ENC_GCMP, "GCMP", 0 },
2821 { WPA_DRIVER_CAPA_ENC_TKIP, "TKIP", 0 },
2822 { WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE, "NONE", 0 },
2823 { WPA_DRIVER_CAPA_ENC_WEP104, "WEP104", 1 },
2824 { WPA_DRIVER_CAPA_ENC_WEP40, "WEP40", 1 }
2825 };
2826
2827
2828 static int ctrl_iface_get_capability_pairwise(int res, char *strict,
2829 struct wpa_driver_capa *capa,
2830 char *buf, size_t buflen)
2831 {
2832 int ret, first = 1;
2833 char *pos, *end;
2834 size_t len;
2835 unsigned int i;
2836
2837 pos = buf;
2838 end = pos + buflen;
2839
2840 if (res < 0) {
2841 if (strict)
2842 return 0;
2843 len = os_strlcpy(buf, "CCMP TKIP NONE", buflen);
2844 if (len >= buflen)
2845 return -1;
2846 return len;
2847 }
2848
2849 for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
2850 if (!ciphers[i].group_only && capa->enc & ciphers[i].capa) {
2851 ret = os_snprintf(pos, end - pos, "%s%s",
2852 first ? "" : " ", ciphers[i].name);
2853 if (ret < 0 || ret >= end - pos)
2854 return pos - buf;
2855 pos += ret;
2856 first = 0;
2857 }
2858 }
2859
2860 return pos - buf;
2861 }
2862
2863
2864 static int ctrl_iface_get_capability_group(int res, char *strict,
2865 struct wpa_driver_capa *capa,
2866 char *buf, size_t buflen)
2867 {
2868 int ret, first = 1;
2869 char *pos, *end;
2870 size_t len;
2871 unsigned int i;
2872
2873 pos = buf;
2874 end = pos + buflen;
2875
2876 if (res < 0) {
2877 if (strict)
2878 return 0;
2879 len = os_strlcpy(buf, "CCMP TKIP WEP104 WEP40", buflen);
2880 if (len >= buflen)
2881 return -1;
2882 return len;
2883 }
2884
2885 for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
2886 if (capa->enc & ciphers[i].capa) {
2887 ret = os_snprintf(pos, end - pos, "%s%s",
2888 first ? "" : " ", ciphers[i].name);
2889 if (ret < 0 || ret >= end - pos)
2890 return pos - buf;
2891 pos += ret;
2892 first = 0;
2893 }
2894 }
2895
2896 return pos - buf;
2897 }
2898
2899
2900 static int ctrl_iface_get_capability_key_mgmt(int res, char *strict,
2901 struct wpa_driver_capa *capa,
2902 char *buf, size_t buflen)
2903 {
2904 int ret;
2905 char *pos, *end;
2906 size_t len;
2907
2908 pos = buf;
2909 end = pos + buflen;
2910
2911 if (res < 0) {
2912 if (strict)
2913 return 0;
2914 len = os_strlcpy(buf, "WPA-PSK WPA-EAP IEEE8021X WPA-NONE "
2915 "NONE", buflen);
2916 if (len >= buflen)
2917 return -1;
2918 return len;
2919 }
2920
2921 ret = os_snprintf(pos, end - pos, "NONE IEEE8021X");
2922 if (ret < 0 || ret >= end - pos)
2923 return pos - buf;
2924 pos += ret;
2925
2926 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
2927 WPA_DRIVER_CAPA_KEY_MGMT_WPA2)) {
2928 ret = os_snprintf(pos, end - pos, " WPA-EAP");
2929 if (ret < 0 || ret >= end - pos)
2930 return pos - buf;
2931 pos += ret;
2932 }
2933
2934 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
2935 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
2936 ret = os_snprintf(pos, end - pos, " WPA-PSK");
2937 if (ret < 0 || ret >= end - pos)
2938 return pos - buf;
2939 pos += ret;
2940 }
2941
2942 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE) {
2943 ret = os_snprintf(pos, end - pos, " WPA-NONE");
2944 if (ret < 0 || ret >= end - pos)
2945 return pos - buf;
2946 pos += ret;
2947 }
2948
2949 return pos - buf;
2950 }
2951
2952
2953 static int ctrl_iface_get_capability_proto(int res, char *strict,
2954 struct wpa_driver_capa *capa,
2955 char *buf, size_t buflen)
2956 {
2957 int ret, first = 1;
2958 char *pos, *end;
2959 size_t len;
2960
2961 pos = buf;
2962 end = pos + buflen;
2963
2964 if (res < 0) {
2965 if (strict)
2966 return 0;
2967 len = os_strlcpy(buf, "RSN WPA", buflen);
2968 if (len >= buflen)
2969 return -1;
2970 return len;
2971 }
2972
2973 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
2974 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
2975 ret = os_snprintf(pos, end - pos, "%sRSN", first ? "" : " ");
2976 if (ret < 0 || ret >= end - pos)
2977 return pos - buf;
2978 pos += ret;
2979 first = 0;
2980 }
2981
2982 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
2983 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK)) {
2984 ret = os_snprintf(pos, end - pos, "%sWPA", first ? "" : " ");
2985 if (ret < 0 || ret >= end - pos)
2986 return pos - buf;
2987 pos += ret;
2988 first = 0;
2989 }
2990
2991 return pos - buf;
2992 }
2993
2994
2995 static int ctrl_iface_get_capability_auth_alg(int res, char *strict,
2996 struct wpa_driver_capa *capa,
2997 char *buf, size_t buflen)
2998 {
2999 int ret, first = 1;
3000 char *pos, *end;
3001 size_t len;
3002
3003 pos = buf;
3004 end = pos + buflen;
3005
3006 if (res < 0) {
3007 if (strict)
3008 return 0;
3009 len = os_strlcpy(buf, "OPEN SHARED LEAP", buflen);
3010 if (len >= buflen)
3011 return -1;
3012 return len;
3013 }
3014
3015 if (capa->auth & (WPA_DRIVER_AUTH_OPEN)) {
3016 ret = os_snprintf(pos, end - pos, "%sOPEN", first ? "" : " ");
3017 if (ret < 0 || ret >= end - pos)
3018 return pos - buf;
3019 pos += ret;
3020 first = 0;
3021 }
3022
3023 if (capa->auth & (WPA_DRIVER_AUTH_SHARED)) {
3024 ret = os_snprintf(pos, end - pos, "%sSHARED",
3025 first ? "" : " ");
3026 if (ret < 0 || ret >= end - pos)
3027 return pos - buf;
3028 pos += ret;
3029 first = 0;
3030 }
3031
3032 if (capa->auth & (WPA_DRIVER_AUTH_LEAP)) {
3033 ret = os_snprintf(pos, end - pos, "%sLEAP", first ? "" : " ");
3034 if (ret < 0 || ret >= end - pos)
3035 return pos - buf;
3036 pos += ret;
3037 first = 0;
3038 }
3039
3040 return pos - buf;
3041 }
3042
3043
3044 static int ctrl_iface_get_capability_modes(int res, char *strict,
3045 struct wpa_driver_capa *capa,
3046 char *buf, size_t buflen)
3047 {
3048 int ret, first = 1;
3049 char *pos, *end;
3050 size_t len;
3051
3052 pos = buf;
3053 end = pos + buflen;
3054
3055 if (res < 0) {
3056 if (strict)
3057 return 0;
3058 len = os_strlcpy(buf, "IBSS AP", buflen);
3059 if (len >= buflen)
3060 return -1;
3061 return len;
3062 }
3063
3064 if (capa->flags & WPA_DRIVER_FLAGS_IBSS) {
3065 ret = os_snprintf(pos, end - pos, "%sIBSS", first ? "" : " ");
3066 if (ret < 0 || ret >= end - pos)
3067 return pos - buf;
3068 pos += ret;
3069 first = 0;
3070 }
3071
3072 if (capa->flags & WPA_DRIVER_FLAGS_AP) {
3073 ret = os_snprintf(pos, end - pos, "%sAP", first ? "" : " ");
3074 if (ret < 0 || ret >= end - pos)
3075 return pos - buf;
3076 pos += ret;
3077 first = 0;
3078 }
3079
3080 return pos - buf;
3081 }
3082
3083
3084 static int ctrl_iface_get_capability_channels(struct wpa_supplicant *wpa_s,
3085 char *buf, size_t buflen)
3086 {
3087 struct hostapd_channel_data *chnl;
3088 int ret, i, j;
3089 char *pos, *end, *hmode;
3090
3091 pos = buf;
3092 end = pos + buflen;
3093
3094 for (j = 0; j < wpa_s->hw.num_modes; j++) {
3095 switch (wpa_s->hw.modes[j].mode) {
3096 case HOSTAPD_MODE_IEEE80211B:
3097 hmode = "B";
3098 break;
3099 case HOSTAPD_MODE_IEEE80211G:
3100 hmode = "G";
3101 break;
3102 case HOSTAPD_MODE_IEEE80211A:
3103 hmode = "A";
3104 break;
3105 case HOSTAPD_MODE_IEEE80211AD:
3106 hmode = "AD";
3107 break;
3108 default:
3109 continue;
3110 }
3111 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:", hmode);
3112 if (ret < 0 || ret >= end - pos)
3113 return pos - buf;
3114 pos += ret;
3115 chnl = wpa_s->hw.modes[j].channels;
3116 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3117 if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3118 continue;
3119 ret = os_snprintf(pos, end - pos, " %d", chnl[i].chan);
3120 if (ret < 0 || ret >= end - pos)
3121 return pos - buf;
3122 pos += ret;
3123 }
3124 ret = os_snprintf(pos, end - pos, "\n");
3125 if (ret < 0 || ret >= end - pos)
3126 return pos - buf;
3127 pos += ret;
3128 }
3129
3130 return pos - buf;
3131 }
3132
3133
3134 static int ctrl_iface_get_capability_freq(struct wpa_supplicant *wpa_s,
3135 char *buf, size_t buflen)
3136 {
3137 struct hostapd_channel_data *chnl;
3138 int ret, i, j;
3139 char *pos, *end, *hmode;
3140
3141 pos = buf;
3142 end = pos + buflen;
3143
3144 for (j = 0; j < wpa_s->hw.num_modes; j++) {
3145 switch (wpa_s->hw.modes[j].mode) {
3146 case HOSTAPD_MODE_IEEE80211B:
3147 hmode = "B";
3148 break;
3149 case HOSTAPD_MODE_IEEE80211G:
3150 hmode = "G";
3151 break;
3152 case HOSTAPD_MODE_IEEE80211A:
3153 hmode = "A";
3154 break;
3155 case HOSTAPD_MODE_IEEE80211AD:
3156 hmode = "AD";
3157 break;
3158 default:
3159 continue;
3160 }
3161 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:\n",
3162 hmode);
3163 if (ret < 0 || ret >= end - pos)
3164 return pos - buf;
3165 pos += ret;
3166 chnl = wpa_s->hw.modes[j].channels;
3167 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3168 if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3169 continue;
3170 ret = os_snprintf(pos, end - pos, " %d = %d MHz%s\n",
3171 chnl[i].chan, chnl[i].freq,
3172 chnl[i].flag & HOSTAPD_CHAN_NO_IBSS ?
3173 " (NO_IBSS)" : "");
3174 if (ret < 0 || ret >= end - pos)
3175 return pos - buf;
3176 pos += ret;
3177 }
3178 ret = os_snprintf(pos, end - pos, "\n");
3179 if (ret < 0 || ret >= end - pos)
3180 return pos - buf;
3181 pos += ret;
3182 }
3183
3184 return pos - buf;
3185 }
3186
3187
3188 static int wpa_supplicant_ctrl_iface_get_capability(
3189 struct wpa_supplicant *wpa_s, const char *_field, char *buf,
3190 size_t buflen)
3191 {
3192 struct wpa_driver_capa capa;
3193 int res;
3194 char *strict;
3195 char field[30];
3196 size_t len;
3197
3198 /* Determine whether or not strict checking was requested */
3199 len = os_strlcpy(field, _field, sizeof(field));
3200 if (len >= sizeof(field))
3201 return -1;
3202 strict = os_strchr(field, ' ');
3203 if (strict != NULL) {
3204 *strict++ = '\0';
3205 if (os_strcmp(strict, "strict") != 0)
3206 return -1;
3207 }
3208
3209 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CAPABILITY '%s' %s",
3210 field, strict ? strict : "");
3211
3212 if (os_strcmp(field, "eap") == 0) {
3213 return eap_get_names(buf, buflen);
3214 }
3215
3216 res = wpa_drv_get_capa(wpa_s, &capa);
3217
3218 if (os_strcmp(field, "pairwise") == 0)
3219 return ctrl_iface_get_capability_pairwise(res, strict, &capa,
3220 buf, buflen);
3221
3222 if (os_strcmp(field, "group") == 0)
3223 return ctrl_iface_get_capability_group(res, strict, &capa,
3224 buf, buflen);
3225
3226 if (os_strcmp(field, "key_mgmt") == 0)
3227 return ctrl_iface_get_capability_key_mgmt(res, strict, &capa,
3228 buf, buflen);
3229
3230 if (os_strcmp(field, "proto") == 0)
3231 return ctrl_iface_get_capability_proto(res, strict, &capa,
3232 buf, buflen);
3233
3234 if (os_strcmp(field, "auth_alg") == 0)
3235 return ctrl_iface_get_capability_auth_alg(res, strict, &capa,
3236 buf, buflen);
3237
3238 if (os_strcmp(field, "modes") == 0)
3239 return ctrl_iface_get_capability_modes(res, strict, &capa,
3240 buf, buflen);
3241
3242 if (os_strcmp(field, "channels") == 0)
3243 return ctrl_iface_get_capability_channels(wpa_s, buf, buflen);
3244
3245 if (os_strcmp(field, "freq") == 0)
3246 return ctrl_iface_get_capability_freq(wpa_s, buf, buflen);
3247
3248 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown GET_CAPABILITY field '%s'",
3249 field);
3250
3251 return -1;
3252 }
3253
3254
3255 #ifdef CONFIG_INTERWORKING
3256 static char * anqp_add_hex(char *pos, char *end, const char *title,
3257 struct wpabuf *data)
3258 {
3259 char *start = pos;
3260 size_t i;
3261 int ret;
3262 const u8 *d;
3263
3264 if (data == NULL)
3265 return start;
3266
3267 ret = os_snprintf(pos, end - pos, "%s=", title);
3268 if (ret < 0 || ret >= end - pos)
3269 return start;
3270 pos += ret;
3271
3272 d = wpabuf_head_u8(data);
3273 for (i = 0; i < wpabuf_len(data); i++) {
3274 ret = os_snprintf(pos, end - pos, "%02x", *d++);
3275 if (ret < 0 || ret >= end - pos)
3276 return start;
3277 pos += ret;
3278 }
3279
3280 ret = os_snprintf(pos, end - pos, "\n");
3281 if (ret < 0 || ret >= end - pos)
3282 return start;
3283 pos += ret;
3284
3285 return pos;
3286 }
3287 #endif /* CONFIG_INTERWORKING */
3288
3289
3290 static int print_bss_info(struct wpa_supplicant *wpa_s, struct wpa_bss *bss,
3291 unsigned long mask, char *buf, size_t buflen)
3292 {
3293 size_t i;
3294 int ret;
3295 char *pos, *end;
3296 const u8 *ie, *ie2;
3297
3298 pos = buf;
3299 end = buf + buflen;
3300
3301 if (mask & WPA_BSS_MASK_ID) {
3302 ret = os_snprintf(pos, end - pos, "id=%u\n", bss->id);
3303 if (ret < 0 || ret >= end - pos)
3304 return 0;
3305 pos += ret;
3306 }
3307
3308 if (mask & WPA_BSS_MASK_BSSID) {
3309 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
3310 MAC2STR(bss->bssid));
3311 if (ret < 0 || ret >= end - pos)
3312 return 0;
3313 pos += ret;
3314 }
3315
3316 if (mask & WPA_BSS_MASK_FREQ) {
3317 ret = os_snprintf(pos, end - pos, "freq=%d\n", bss->freq);
3318 if (ret < 0 || ret >= end - pos)
3319 return 0;
3320 pos += ret;
3321 }
3322
3323 if (mask & WPA_BSS_MASK_BEACON_INT) {
3324 ret = os_snprintf(pos, end - pos, "beacon_int=%d\n",
3325 bss->beacon_int);
3326 if (ret < 0 || ret >= end - pos)
3327 return 0;
3328 pos += ret;
3329 }
3330
3331 if (mask & WPA_BSS_MASK_CAPABILITIES) {
3332 ret = os_snprintf(pos, end - pos, "capabilities=0x%04x\n",
3333 bss->caps);
3334 if (ret < 0 || ret >= end - pos)
3335 return 0;
3336 pos += ret;
3337 }
3338
3339 if (mask & WPA_BSS_MASK_QUAL) {
3340 ret = os_snprintf(pos, end - pos, "qual=%d\n", bss->qual);
3341 if (ret < 0 || ret >= end - pos)
3342 return 0;
3343 pos += ret;
3344 }
3345
3346 if (mask & WPA_BSS_MASK_NOISE) {
3347 ret = os_snprintf(pos, end - pos, "noise=%d\n", bss->noise);
3348 if (ret < 0 || ret >= end - pos)
3349 return 0;
3350 pos += ret;
3351 }
3352
3353 if (mask & WPA_BSS_MASK_LEVEL) {
3354 ret = os_snprintf(pos, end - pos, "level=%d\n", bss->level);
3355 if (ret < 0 || ret >= end - pos)
3356 return 0;
3357 pos += ret;
3358 }
3359
3360 if (mask & WPA_BSS_MASK_TSF) {
3361 ret = os_snprintf(pos, end - pos, "tsf=%016llu\n",
3362 (unsigned long long) bss->tsf);
3363 if (ret < 0 || ret >= end - pos)
3364 return 0;
3365 pos += ret;
3366 }
3367
3368 if (mask & WPA_BSS_MASK_AGE) {
3369 struct os_reltime now;
3370
3371 os_get_reltime(&now);
3372 ret = os_snprintf(pos, end - pos, "age=%d\n",
3373 (int) (now.sec - bss->last_update.sec));
3374 if (ret < 0 || ret >= end - pos)
3375 return 0;
3376 pos += ret;
3377 }
3378
3379 if (mask & WPA_BSS_MASK_IE) {
3380 ret = os_snprintf(pos, end - pos, "ie=");
3381 if (ret < 0 || ret >= end - pos)
3382 return 0;
3383 pos += ret;
3384
3385 ie = (const u8 *) (bss + 1);
3386 for (i = 0; i < bss->ie_len; i++) {
3387 ret = os_snprintf(pos, end - pos, "%02x", *ie++);
3388 if (ret < 0 || ret >= end - pos)
3389 return 0;
3390 pos += ret;
3391 }
3392
3393 ret = os_snprintf(pos, end - pos, "\n");
3394 if (ret < 0 || ret >= end - pos)
3395 return 0;
3396 pos += ret;
3397 }
3398
3399 if (mask & WPA_BSS_MASK_FLAGS) {
3400 ret = os_snprintf(pos, end - pos, "flags=");
3401 if (ret < 0 || ret >= end - pos)
3402 return 0;
3403 pos += ret;
3404
3405 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
3406 if (ie)
3407 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie,
3408 2 + ie[1]);
3409 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
3410 if (ie2)
3411 pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2,
3412 2 + ie2[1]);
3413 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
3414 if (!ie && !ie2 && bss->caps & IEEE80211_CAP_PRIVACY) {
3415 ret = os_snprintf(pos, end - pos, "[WEP]");
3416 if (ret < 0 || ret >= end - pos)
3417 return 0;
3418 pos += ret;
3419 }
3420 if (bss->caps & IEEE80211_CAP_IBSS) {
3421 ret = os_snprintf(pos, end - pos, "[IBSS]");
3422 if (ret < 0 || ret >= end - pos)
3423 return 0;
3424 pos += ret;
3425 }
3426 if (bss->caps & IEEE80211_CAP_ESS) {
3427 ret = os_snprintf(pos, end - pos, "[ESS]");
3428 if (ret < 0 || ret >= end - pos)
3429 return 0;
3430 pos += ret;
3431 }
3432 if (wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE) ||
3433 wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE)) {
3434 ret = os_snprintf(pos, end - pos, "[P2P]");
3435 if (ret < 0 || ret >= end - pos)
3436 return 0;
3437 pos += ret;
3438 }
3439 #ifdef CONFIG_HS20
3440 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE)) {
3441 ret = os_snprintf(pos, end - pos, "[HS20]");
3442 if (ret < 0 || ret >= end - pos)
3443 return 0;
3444 pos += ret;
3445 }
3446 #endif /* CONFIG_HS20 */
3447
3448 ret = os_snprintf(pos, end - pos, "\n");
3449 if (ret < 0 || ret >= end - pos)
3450 return 0;
3451 pos += ret;
3452 }
3453
3454 if (mask & WPA_BSS_MASK_SSID) {
3455 ret = os_snprintf(pos, end - pos, "ssid=%s\n",
3456 wpa_ssid_txt(bss->ssid, bss->ssid_len));
3457 if (ret < 0 || ret >= end - pos)
3458 return 0;
3459 pos += ret;
3460 }
3461
3462 #ifdef CONFIG_WPS
3463 if (mask & WPA_BSS_MASK_WPS_SCAN) {
3464 ie = (const u8 *) (bss + 1);
3465 ret = wpas_wps_scan_result_text(ie, bss->ie_len, pos, end);
3466 if (ret < 0 || ret >= end - pos)
3467 return 0;
3468 pos += ret;
3469 }
3470 #endif /* CONFIG_WPS */
3471
3472 #ifdef CONFIG_P2P
3473 if (mask & WPA_BSS_MASK_P2P_SCAN) {
3474 ie = (const u8 *) (bss + 1);
3475 ret = wpas_p2p_scan_result_text(ie, bss->ie_len, pos, end);
3476 if (ret < 0 || ret >= end - pos)
3477 return 0;
3478 pos += ret;
3479 }
3480 #endif /* CONFIG_P2P */
3481
3482 #ifdef CONFIG_WIFI_DISPLAY
3483 if (mask & WPA_BSS_MASK_WIFI_DISPLAY) {
3484 struct wpabuf *wfd;
3485 ie = (const u8 *) (bss + 1);
3486 wfd = ieee802_11_vendor_ie_concat(ie, bss->ie_len,
3487 WFD_IE_VENDOR_TYPE);
3488 if (wfd) {
3489 ret = os_snprintf(pos, end - pos, "wfd_subelems=");
3490 if (ret < 0 || ret >= end - pos)
3491 return 0;
3492 pos += ret;
3493
3494 pos += wpa_snprintf_hex(pos, end - pos,
3495 wpabuf_head(wfd),
3496 wpabuf_len(wfd));
3497 wpabuf_free(wfd);
3498
3499 ret = os_snprintf(pos, end - pos, "\n");
3500 if (ret < 0 || ret >= end - pos)
3501 return 0;
3502 pos += ret;
3503 }
3504 }
3505 #endif /* CONFIG_WIFI_DISPLAY */
3506
3507 #ifdef CONFIG_INTERWORKING
3508 if ((mask & WPA_BSS_MASK_INTERNETW) && bss->anqp) {
3509 struct wpa_bss_anqp *anqp = bss->anqp;
3510 pos = anqp_add_hex(pos, end, "anqp_venue_name",
3511 anqp->venue_name);
3512 pos = anqp_add_hex(pos, end, "anqp_network_auth_type",
3513 anqp->network_auth_type);
3514 pos = anqp_add_hex(pos, end, "anqp_roaming_consortium",
3515 anqp->roaming_consortium);
3516 pos = anqp_add_hex(pos, end, "anqp_ip_addr_type_availability",
3517 anqp->ip_addr_type_availability);
3518 pos = anqp_add_hex(pos, end, "anqp_nai_realm",
3519 anqp->nai_realm);
3520 pos = anqp_add_hex(pos, end, "anqp_3gpp", anqp->anqp_3gpp);
3521 pos = anqp_add_hex(pos, end, "anqp_domain_name",
3522 anqp->domain_name);
3523 #ifdef CONFIG_HS20
3524 pos = anqp_add_hex(pos, end, "hs20_operator_friendly_name",
3525 anqp->hs20_operator_friendly_name);
3526 pos = anqp_add_hex(pos, end, "hs20_wan_metrics",
3527 anqp->hs20_wan_metrics);
3528 pos = anqp_add_hex(pos, end, "hs20_connection_capability",
3529 anqp->hs20_connection_capability);
3530 #endif /* CONFIG_HS20 */
3531 }
3532 #endif /* CONFIG_INTERWORKING */
3533
3534 if (mask & WPA_BSS_MASK_DELIM) {
3535 ret = os_snprintf(pos, end - pos, "====\n");
3536 if (ret < 0 || ret >= end - pos)
3537 return 0;
3538 pos += ret;
3539 }
3540
3541 return pos - buf;
3542 }
3543
3544
3545 static int wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant *wpa_s,
3546 const char *cmd, char *buf,
3547 size_t buflen)
3548 {
3549 u8 bssid[ETH_ALEN];
3550 size_t i;
3551 struct wpa_bss *bss;
3552 struct wpa_bss *bsslast = NULL;
3553 struct dl_list *next;
3554 int ret = 0;
3555 int len;
3556 char *ctmp;
3557 unsigned long mask = WPA_BSS_MASK_ALL;
3558
3559 if (os_strncmp(cmd, "RANGE=", 6) == 0) {
3560 if (os_strncmp(cmd + 6, "ALL", 3) == 0) {
3561 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss,
3562 list_id);
3563 bsslast = dl_list_last(&wpa_s->bss_id, struct wpa_bss,
3564 list_id);
3565 } else { /* N1-N2 */
3566 unsigned int id1, id2;
3567
3568 if ((ctmp = os_strchr(cmd + 6, '-')) == NULL) {
3569 wpa_printf(MSG_INFO, "Wrong BSS range "
3570 "format");
3571 return 0;
3572 }
3573
3574 if (*(cmd + 6) == '-')
3575 id1 = 0;
3576 else
3577 id1 = atoi(cmd + 6);
3578 ctmp++;
3579 if (*ctmp >= '0' && *ctmp <= '9')
3580 id2 = atoi(ctmp);
3581 else
3582 id2 = (unsigned int) -1;
3583 bss = wpa_bss_get_id_range(wpa_s, id1, id2);
3584 if (id2 == (unsigned int) -1)
3585 bsslast = dl_list_last(&wpa_s->bss_id,
3586 struct wpa_bss,
3587 list_id);
3588 else {
3589 bsslast = wpa_bss_get_id(wpa_s, id2);
3590 if (bsslast == NULL && bss && id2 > id1) {
3591 struct wpa_bss *tmp = bss;
3592 for (;;) {
3593 next = tmp->list_id.next;
3594 if (next == &wpa_s->bss_id)
3595 break;
3596 tmp = dl_list_entry(
3597 next, struct wpa_bss,
3598 list_id);
3599 if (tmp->id > id2)
3600 break;
3601 bsslast = tmp;
3602 }
3603 }
3604 }
3605 }
3606 } else if (os_strncmp(cmd, "FIRST", 5) == 0)
3607 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss, list_id);
3608 else if (os_strncmp(cmd, "LAST", 4) == 0)
3609 bss = dl_list_last(&wpa_s->bss_id, struct wpa_bss, list_id);
3610 else if (os_strncmp(cmd, "ID-", 3) == 0) {
3611 i = atoi(cmd + 3);
3612 bss = wpa_bss_get_id(wpa_s, i);
3613 } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
3614 i = atoi(cmd + 5);
3615 bss = wpa_bss_get_id(wpa_s, i);
3616 if (bss) {
3617 next = bss->list_id.next;
3618 if (next == &wpa_s->bss_id)
3619 bss = NULL;
3620 else
3621 bss = dl_list_entry(next, struct wpa_bss,
3622 list_id);
3623 }
3624 #ifdef CONFIG_P2P
3625 } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
3626 if (hwaddr_aton(cmd + 13, bssid) == 0)
3627 bss = wpa_bss_get_p2p_dev_addr(wpa_s, bssid);
3628 else
3629 bss = NULL;
3630 #endif /* CONFIG_P2P */
3631 } else if (hwaddr_aton(cmd, bssid) == 0)
3632 bss = wpa_bss_get_bssid(wpa_s, bssid);
3633 else {
3634 struct wpa_bss *tmp;
3635 i = atoi(cmd);
3636 bss = NULL;
3637 dl_list_for_each(tmp, &wpa_s->bss_id, struct wpa_bss, list_id)
3638 {
3639 if (i-- == 0) {
3640 bss = tmp;
3641 break;
3642 }
3643 }
3644 }
3645
3646 if ((ctmp = os_strstr(cmd, "MASK=")) != NULL) {
3647 mask = strtoul(ctmp + 5, NULL, 0x10);
3648 if (mask == 0)
3649 mask = WPA_BSS_MASK_ALL;
3650 }
3651
3652 if (bss == NULL)
3653 return 0;
3654
3655 if (bsslast == NULL)
3656 bsslast = bss;
3657 do {
3658 len = print_bss_info(wpa_s, bss, mask, buf, buflen);
3659 ret += len;
3660 buf += len;
3661 buflen -= len;
3662 if (bss == bsslast) {
3663 if ((mask & WPA_BSS_MASK_DELIM) && len &&
3664 (bss == dl_list_last(&wpa_s->bss_id,
3665 struct wpa_bss, list_id)))
3666 os_snprintf(buf - 5, 5, "####\n");
3667 break;
3668 }
3669 next = bss->list_id.next;
3670 if (next == &wpa_s->bss_id)
3671 break;
3672 bss = dl_list_entry(next, struct wpa_bss, list_id);
3673 } while (bss && len);
3674
3675 return ret;
3676 }
3677
3678
3679 static int wpa_supplicant_ctrl_iface_ap_scan(
3680 struct wpa_supplicant *wpa_s, char *cmd)
3681 {
3682 int ap_scan = atoi(cmd);
3683 return wpa_supplicant_set_ap_scan(wpa_s, ap_scan);
3684 }
3685
3686
3687 static int wpa_supplicant_ctrl_iface_scan_interval(
3688 struct wpa_supplicant *wpa_s, char *cmd)
3689 {
3690 int scan_int = atoi(cmd);
3691 return wpa_supplicant_set_scan_interval(wpa_s, scan_int);
3692 }
3693
3694
3695 static int wpa_supplicant_ctrl_iface_bss_expire_age(
3696 struct wpa_supplicant *wpa_s, char *cmd)
3697 {
3698 int expire_age = atoi(cmd);
3699 return wpa_supplicant_set_bss_expiration_age(wpa_s, expire_age);
3700 }
3701
3702
3703 static int wpa_supplicant_ctrl_iface_bss_expire_count(
3704 struct wpa_supplicant *wpa_s, char *cmd)
3705 {
3706 int expire_count = atoi(cmd);
3707 return wpa_supplicant_set_bss_expiration_count(wpa_s, expire_count);
3708 }
3709
3710
3711 static int wpa_supplicant_ctrl_iface_bss_flush(
3712 struct wpa_supplicant *wpa_s, char *cmd)
3713 {
3714 int flush_age = atoi(cmd);
3715
3716 if (flush_age == 0)
3717 wpa_bss_flush(wpa_s);
3718 else
3719 wpa_bss_flush_by_age(wpa_s, flush_age);
3720 return 0;
3721 }
3722
3723
3724 static void wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant *wpa_s)
3725 {
3726 wpa_printf(MSG_DEBUG, "Dropping SA without deauthentication");
3727 /* MLME-DELETEKEYS.request */
3728 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 0, 0, NULL, 0, NULL, 0);
3729 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 1, 0, NULL, 0, NULL, 0);
3730 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 2, 0, NULL, 0, NULL, 0);
3731 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 3, 0, NULL, 0, NULL, 0);
3732 #ifdef CONFIG_IEEE80211W
3733 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 4, 0, NULL, 0, NULL, 0);
3734 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 5, 0, NULL, 0, NULL, 0);
3735 #endif /* CONFIG_IEEE80211W */
3736
3737 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, wpa_s->bssid, 0, 0, NULL, 0, NULL,
3738 0);
3739 /* MLME-SETPROTECTION.request(None) */
3740 wpa_drv_mlme_setprotection(wpa_s, wpa_s->bssid,
3741 MLME_SETPROTECTION_PROTECT_TYPE_NONE,
3742 MLME_SETPROTECTION_KEY_TYPE_PAIRWISE);
3743 wpa_sm_drop_sa(wpa_s->wpa);
3744 }
3745
3746
3747 static int wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant *wpa_s,
3748 char *addr)
3749 {
3750 #ifdef CONFIG_NO_SCAN_PROCESSING
3751 return -1;
3752 #else /* CONFIG_NO_SCAN_PROCESSING */
3753 u8 bssid[ETH_ALEN];
3754 struct wpa_bss *bss;
3755 struct wpa_ssid *ssid = wpa_s->current_ssid;
3756
3757 if (hwaddr_aton(addr, bssid)) {
3758 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: invalid "
3759 "address '%s'", addr);
3760 return -1;
3761 }
3762
3763 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM " MACSTR, MAC2STR(bssid));
3764
3765 if (!ssid) {
3766 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: No network "
3767 "configuration known for the target AP");
3768 return -1;
3769 }
3770
3771 bss = wpa_bss_get(wpa_s, bssid, ssid->ssid, ssid->ssid_len);
3772 if (!bss) {
3773 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: Target AP not found "
3774 "from BSS table");
3775 return -1;
3776 }
3777
3778 /*
3779 * TODO: Find best network configuration block from configuration to
3780 * allow roaming to other networks
3781 */
3782
3783 wpa_s->reassociate = 1;
3784 wpa_supplicant_connect(wpa_s, bss, ssid);
3785
3786 return 0;
3787 #endif /* CONFIG_NO_SCAN_PROCESSING */
3788 }
3789
3790
3791 #ifdef CONFIG_P2P
3792 static int p2p_ctrl_find(struct wpa_supplicant *wpa_s, char *cmd)
3793 {
3794 unsigned int timeout = atoi(cmd);
3795 enum p2p_discovery_type type = P2P_FIND_START_WITH_FULL;
3796 u8 dev_id[ETH_ALEN], *_dev_id = NULL;
3797 u8 dev_type[WPS_DEV_TYPE_LEN], *_dev_type = NULL;
3798 char *pos;
3799 unsigned int search_delay;
3800
3801 if (os_strstr(cmd, "type=social"))
3802 type = P2P_FIND_ONLY_SOCIAL;
3803 else if (os_strstr(cmd, "type=progressive"))
3804 type = P2P_FIND_PROGRESSIVE;
3805
3806 pos = os_strstr(cmd, "dev_id=");
3807 if (pos) {
3808 pos += 7;
3809 if (hwaddr_aton(pos, dev_id))
3810 return -1;
3811 _dev_id = dev_id;
3812 }
3813
3814 pos = os_strstr(cmd, "dev_type=");
3815 if (pos) {
3816 pos += 9;
3817 if (wps_dev_type_str2bin(pos, dev_type) < 0)
3818 return -1;
3819 _dev_type = dev_type;
3820 }
3821
3822 pos = os_strstr(cmd, "delay=");
3823 if (pos) {
3824 pos += 6;
3825 search_delay = atoi(pos);
3826 } else
3827 search_delay = wpas_p2p_search_delay(wpa_s);
3828
3829 return wpas_p2p_find(wpa_s, timeout, type, _dev_type != NULL, _dev_type,
3830 _dev_id, search_delay);
3831 }
3832
3833
3834 static int p2p_ctrl_connect(struct wpa_supplicant *wpa_s, char *cmd,
3835 char *buf, size_t buflen)
3836 {
3837 u8 addr[ETH_ALEN];
3838 char *pos, *pos2;
3839 char *pin = NULL;
3840 enum p2p_wps_method wps_method;
3841 int new_pin;
3842 int ret;
3843 int persistent_group, persistent_id = -1;
3844 int join;
3845 int auth;
3846 int automatic;
3847 int go_intent = -1;
3848 int freq = 0;
3849 int pd;
3850 int ht40, vht;
3851
3852 /* <addr> <"pbc" | "pin" | PIN> [label|display|keypad]
3853 * [persistent|persistent=<network id>]
3854 * [join] [auth] [go_intent=<0..15>] [freq=<in MHz>] [provdisc]
3855 * [ht40] [vht] */
3856
3857 if (hwaddr_aton(cmd, addr))
3858 return -1;
3859
3860 pos = cmd + 17;
3861 if (*pos != ' ')
3862 return -1;
3863 pos++;
3864
3865 persistent_group = os_strstr(pos, " persistent") != NULL;
3866 pos2 = os_strstr(pos, " persistent=");
3867 if (pos2) {
3868 struct wpa_ssid *ssid;
3869 persistent_id = atoi(pos2 + 12);
3870 ssid = wpa_config_get_network(wpa_s->conf, persistent_id);
3871 if (ssid == NULL || ssid->disabled != 2 ||
3872 ssid->mode != WPAS_MODE_P2P_GO) {
3873 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
3874 "SSID id=%d for persistent P2P group (GO)",
3875 persistent_id);
3876 return -1;
3877 }
3878 }
3879 join = os_strstr(pos, " join") != NULL;
3880 auth = os_strstr(pos, " auth") != NULL;
3881 automatic = os_strstr(pos, " auto") != NULL;
3882 pd = os_strstr(pos, " provdisc") != NULL;
3883 vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
3884 ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
3885 vht;
3886
3887 pos2 = os_strstr(pos, " go_intent=");
3888 if (pos2) {
3889 pos2 += 11;
3890 go_intent = atoi(pos2);
3891 if (go_intent < 0 || go_intent > 15)
3892 return -1;
3893 }
3894
3895 pos2 = os_strstr(pos, " freq=");
3896 if (pos2) {
3897 pos2 += 6;
3898 freq = atoi(pos2);
3899 if (freq <= 0)
3900 return -1;
3901 }
3902
3903 if (os_strncmp(pos, "pin", 3) == 0) {
3904 /* Request random PIN (to be displayed) and enable the PIN */
3905 wps_method = WPS_PIN_DISPLAY;
3906 } else if (os_strncmp(pos, "pbc", 3) == 0) {
3907 wps_method = WPS_PBC;
3908 } else {
3909 pin = pos;
3910 pos = os_strchr(pin, ' ');
3911 wps_method = WPS_PIN_KEYPAD;
3912 if (pos) {
3913 *pos++ = '\0';
3914 if (os_strncmp(pos, "display", 7) == 0)
3915 wps_method = WPS_PIN_DISPLAY;
3916 }
3917 if (!wps_pin_str_valid(pin)) {
3918 os_memcpy(buf, "FAIL-INVALID-PIN\n", 17);
3919 return 17;
3920 }
3921 }
3922
3923 new_pin = wpas_p2p_connect(wpa_s, addr, pin, wps_method,
3924 persistent_group, automatic, join,
3925 auth, go_intent, freq, persistent_id, pd,
3926 ht40, vht);
3927 if (new_pin == -2) {
3928 os_memcpy(buf, "FAIL-CHANNEL-UNAVAILABLE\n", 25);
3929 return 25;
3930 }
3931 if (new_pin == -3) {
3932 os_memcpy(buf, "FAIL-CHANNEL-UNSUPPORTED\n", 25);
3933 return 25;
3934 }
3935 if (new_pin < 0)
3936 return -1;
3937 if (wps_method == WPS_PIN_DISPLAY && pin == NULL) {
3938 ret = os_snprintf(buf, buflen, "%08d", new_pin);
3939 if (ret < 0 || (size_t) ret >= buflen)
3940 return -1;
3941 return ret;
3942 }
3943
3944 os_memcpy(buf, "OK\n", 3);
3945 return 3;
3946 }
3947
3948
3949 static int p2p_ctrl_listen(struct wpa_supplicant *wpa_s, char *cmd)
3950 {
3951 unsigned int timeout = atoi(cmd);
3952 return wpas_p2p_listen(wpa_s, timeout);
3953 }
3954
3955
3956 static int p2p_ctrl_prov_disc(struct wpa_supplicant *wpa_s, char *cmd)
3957 {
3958 u8 addr[ETH_ALEN];
3959 char *pos;
3960 enum wpas_p2p_prov_disc_use use = WPAS_P2P_PD_FOR_GO_NEG;
3961
3962 /* <addr> <config method> [join|auto] */
3963
3964 if (hwaddr_aton(cmd, addr))
3965 return -1;
3966
3967 pos = cmd + 17;
3968 if (*pos != ' ')
3969 return -1;
3970 pos++;
3971
3972 if (os_strstr(pos, " join") != NULL)
3973 use = WPAS_P2P_PD_FOR_JOIN;
3974 else if (os_strstr(pos, " auto") != NULL)
3975 use = WPAS_P2P_PD_AUTO;
3976
3977 return wpas_p2p_prov_disc(wpa_s, addr, pos, use);
3978 }
3979
3980
3981 static int p2p_get_passphrase(struct wpa_supplicant *wpa_s, char *buf,
3982 size_t buflen)
3983 {
3984 struct wpa_ssid *ssid = wpa_s->current_ssid;
3985
3986 if (ssid == NULL || ssid->mode != WPAS_MODE_P2P_GO ||
3987 ssid->passphrase == NULL)
3988 return -1;
3989
3990 os_strlcpy(buf, ssid->passphrase, buflen);
3991 return os_strlen(buf);
3992 }
3993
3994
3995 static int p2p_ctrl_serv_disc_req(struct wpa_supplicant *wpa_s, char *cmd,
3996 char *buf, size_t buflen)
3997 {
3998 u64 ref;
3999 int res;
4000 u8 dst_buf[ETH_ALEN], *dst;
4001 struct wpabuf *tlvs;
4002 char *pos;
4003 size_t len;
4004
4005 if (hwaddr_aton(cmd, dst_buf))
4006 return -1;
4007 dst = dst_buf;
4008 if (dst[0] == 0 && dst[1] == 0 && dst[2] == 0 &&
4009 dst[3] == 0 && dst[4] == 0 && dst[5] == 0)
4010 dst = NULL;
4011 pos = cmd + 17;
4012 if (*pos != ' ')
4013 return -1;
4014 pos++;
4015
4016 if (os_strncmp(pos, "upnp ", 5) == 0) {
4017 u8 version;
4018 pos += 5;
4019 if (hexstr2bin(pos, &version, 1) < 0)
4020 return -1;
4021 pos += 2;
4022 if (*pos != ' ')
4023 return -1;
4024 pos++;
4025 ref = wpas_p2p_sd_request_upnp(wpa_s, dst, version, pos);
4026 #ifdef CONFIG_WIFI_DISPLAY
4027 } else if (os_strncmp(pos, "wifi-display ", 13) == 0) {
4028 ref = wpas_p2p_sd_request_wifi_display(wpa_s, dst, pos + 13);
4029 #endif /* CONFIG_WIFI_DISPLAY */
4030 } else {
4031 len = os_strlen(pos);
4032 if (len & 1)
4033 return -1;
4034 len /= 2;
4035 tlvs = wpabuf_alloc(len);
4036 if (tlvs == NULL)
4037 return -1;
4038 if (hexstr2bin(pos, wpabuf_put(tlvs, len), len) < 0) {
4039 wpabuf_free(tlvs);
4040 return -1;
4041 }
4042
4043 ref = wpas_p2p_sd_request(wpa_s, dst, tlvs);
4044 wpabuf_free(tlvs);
4045 }
4046 if (ref == 0)
4047 return -1;
4048 res = os_snprintf(buf, buflen, "%llx", (long long unsigned) ref);
4049 if (res < 0 || (unsigned) res >= buflen)
4050 return -1;
4051 return res;
4052 }
4053
4054
4055 static int p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant *wpa_s,
4056 char *cmd)
4057 {
4058 long long unsigned val;
4059 u64 req;
4060 if (sscanf(cmd, "%llx", &val) != 1)
4061 return -1;
4062 req = val;
4063 return wpas_p2p_sd_cancel_request(wpa_s, req);
4064 }
4065
4066
4067 static int p2p_ctrl_serv_disc_resp(struct wpa_supplicant *wpa_s, char *cmd)
4068 {
4069 int freq;
4070 u8 dst[ETH_ALEN];
4071 u8 dialog_token;
4072 struct wpabuf *resp_tlvs;
4073 char *pos, *pos2;
4074 size_t len;
4075
4076 pos = os_strchr(cmd, ' ');
4077 if (pos == NULL)
4078 return -1;
4079 *pos++ = '\0';
4080 freq = atoi(cmd);
4081 if (freq == 0)
4082 return -1;
4083
4084 if (hwaddr_aton(pos, dst))
4085 return -1;
4086 pos += 17;
4087 if (*pos != ' ')
4088 return -1;
4089 pos++;
4090
4091 pos2 = os_strchr(pos, ' ');
4092 if (pos2 == NULL)
4093 return -1;
4094 *pos2++ = '\0';
4095 dialog_token = atoi(pos);
4096
4097 len = os_strlen(pos2);
4098 if (len & 1)
4099 return -1;
4100 len /= 2;
4101 resp_tlvs = wpabuf_alloc(len);
4102 if (resp_tlvs == NULL)
4103 return -1;
4104 if (hexstr2bin(pos2, wpabuf_put(resp_tlvs, len), len) < 0) {
4105 wpabuf_free(resp_tlvs);
4106 return -1;
4107 }
4108
4109 wpas_p2p_sd_response(wpa_s, freq, dst, dialog_token, resp_tlvs);
4110 wpabuf_free(resp_tlvs);
4111 return 0;
4112 }
4113
4114
4115 static int p2p_ctrl_serv_disc_external(struct wpa_supplicant *wpa_s,
4116 char *cmd)
4117 {
4118 if (os_strcmp(cmd, "0") && os_strcmp(cmd, "1"))
4119 return -1;
4120 wpa_s->p2p_sd_over_ctrl_iface = atoi(cmd);
4121 return 0;
4122 }
4123
4124
4125 static int p2p_ctrl_service_add_bonjour(struct wpa_supplicant *wpa_s,
4126 char *cmd)
4127 {
4128 char *pos;
4129 size_t len;
4130 struct wpabuf *query, *resp;
4131
4132 pos = os_strchr(cmd, ' ');
4133 if (pos == NULL)
4134 return -1;
4135 *pos++ = '\0';
4136
4137 len = os_strlen(cmd);
4138 if (len & 1)
4139 return -1;
4140 len /= 2;
4141 query = wpabuf_alloc(len);
4142 if (query == NULL)
4143 return -1;
4144 if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
4145 wpabuf_free(query);
4146 return -1;
4147 }
4148
4149 len = os_strlen(pos);
4150 if (len & 1) {
4151 wpabuf_free(query);
4152 return -1;
4153 }
4154 len /= 2;
4155 resp = wpabuf_alloc(len);
4156 if (resp == NULL) {
4157 wpabuf_free(query);
4158 return -1;
4159 }
4160 if (hexstr2bin(pos, wpabuf_put(resp, len), len) < 0) {
4161 wpabuf_free(query);
4162 wpabuf_free(resp);
4163 return -1;
4164 }
4165
4166 if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0) {
4167 wpabuf_free(query);
4168 wpabuf_free(resp);
4169 return -1;
4170 }
4171 return 0;
4172 }
4173
4174
4175 static int p2p_ctrl_service_add_upnp(struct wpa_supplicant *wpa_s, char *cmd)
4176 {
4177 char *pos;
4178 u8 version;
4179
4180 pos = os_strchr(cmd, ' ');
4181 if (pos == NULL)
4182 return -1;
4183 *pos++ = '\0';
4184
4185 if (hexstr2bin(cmd, &version, 1) < 0)
4186 return -1;
4187
4188 return wpas_p2p_service_add_upnp(wpa_s, version, pos);
4189 }
4190
4191
4192 static int p2p_ctrl_service_add(struct wpa_supplicant *wpa_s, char *cmd)
4193 {
4194 char *pos;
4195
4196 pos = os_strchr(cmd, ' ');
4197 if (pos == NULL)
4198 return -1;
4199 *pos++ = '\0';
4200
4201 if (os_strcmp(cmd, "bonjour") == 0)
4202 return p2p_ctrl_service_add_bonjour(wpa_s, pos);
4203 if (os_strcmp(cmd, "upnp") == 0)
4204 return p2p_ctrl_service_add_upnp(wpa_s, pos);
4205 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
4206 return -1;
4207 }
4208
4209
4210 static int p2p_ctrl_service_del_bonjour(struct wpa_supplicant *wpa_s,
4211 char *cmd)
4212 {
4213 size_t len;
4214 struct wpabuf *query;
4215 int ret;
4216
4217 len = os_strlen(cmd);
4218 if (len & 1)
4219 return -1;
4220 len /= 2;
4221 query = wpabuf_alloc(len);
4222 if (query == NULL)
4223 return -1;
4224 if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
4225 wpabuf_free(query);
4226 return -1;
4227 }
4228
4229 ret = wpas_p2p_service_del_bonjour(wpa_s, query);
4230 wpabuf_free(query);
4231 return ret;
4232 }
4233
4234
4235 static int p2p_ctrl_service_del_upnp(struct wpa_supplicant *wpa_s, char *cmd)
4236 {
4237 char *pos;
4238 u8 version;
4239
4240 pos = os_strchr(cmd, ' ');
4241 if (pos == NULL)
4242 return -1;
4243 *pos++ = '\0';
4244
4245 if (hexstr2bin(cmd, &version, 1) < 0)
4246 return -1;
4247
4248 return wpas_p2p_service_del_upnp(wpa_s, version, pos);
4249 }
4250
4251
4252 static int p2p_ctrl_service_del(struct wpa_supplicant *wpa_s, char *cmd)
4253 {
4254 char *pos;
4255
4256 pos = os_strchr(cmd, ' ');
4257 if (pos == NULL)
4258 return -1;
4259 *pos++ = '\0';
4260
4261 if (os_strcmp(cmd, "bonjour") == 0)
4262 return p2p_ctrl_service_del_bonjour(wpa_s, pos);
4263 if (os_strcmp(cmd, "upnp") == 0)
4264 return p2p_ctrl_service_del_upnp(wpa_s, pos);
4265 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
4266 return -1;
4267 }
4268
4269
4270 static int p2p_ctrl_reject(struct wpa_supplicant *wpa_s, char *cmd)
4271 {
4272 u8 addr[ETH_ALEN];
4273
4274 /* <addr> */
4275
4276 if (hwaddr_aton(cmd, addr))
4277 return -1;
4278
4279 return wpas_p2p_reject(wpa_s, addr);
4280 }
4281
4282
4283 static int p2p_ctrl_invite_persistent(struct wpa_supplicant *wpa_s, char *cmd)
4284 {
4285 char *pos;
4286 int id;
4287 struct wpa_ssid *ssid;
4288 u8 *_peer = NULL, peer[ETH_ALEN];
4289 int freq = 0, pref_freq = 0;
4290 int ht40, vht;
4291
4292 id = atoi(cmd);
4293 pos = os_strstr(cmd, " peer=");
4294 if (pos) {
4295 pos += 6;
4296 if (hwaddr_aton(pos, peer))
4297 return -1;
4298 _peer = peer;
4299 }
4300 ssid = wpa_config_get_network(wpa_s->conf, id);
4301 if (ssid == NULL || ssid->disabled != 2) {
4302 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
4303 "for persistent P2P group",
4304 id);
4305 return -1;
4306 }
4307
4308 pos = os_strstr(cmd, " freq=");
4309 if (pos) {
4310 pos += 6;
4311 freq = atoi(pos);
4312 if (freq <= 0)
4313 return -1;
4314 }
4315
4316 pos = os_strstr(cmd, " pref=");
4317 if (pos) {
4318 pos += 6;
4319 pref_freq = atoi(pos);
4320 if (pref_freq <= 0)
4321 return -1;
4322 }
4323
4324 vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
4325 ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
4326 vht;
4327
4328 return wpas_p2p_invite(wpa_s, _peer, ssid, NULL, freq, ht40, vht,
4329 pref_freq);
4330 }
4331
4332
4333 static int p2p_ctrl_invite_group(struct wpa_supplicant *wpa_s, char *cmd)
4334 {
4335 char *pos;
4336 u8 peer[ETH_ALEN], go_dev_addr[ETH_ALEN], *go_dev = NULL;
4337
4338 pos = os_strstr(cmd, " peer=");
4339 if (!pos)
4340 return -1;
4341
4342 *pos = '\0';
4343 pos += 6;
4344 if (hwaddr_aton(pos, peer)) {
4345 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'", pos);
4346 return -1;
4347 }
4348
4349 pos = os_strstr(pos, " go_dev_addr=");
4350 if (pos) {
4351 pos += 13;
4352 if (hwaddr_aton(pos, go_dev_addr)) {
4353 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'",
4354 pos);
4355 return -1;
4356 }
4357 go_dev = go_dev_addr;
4358 }
4359
4360 return wpas_p2p_invite_group(wpa_s, cmd, peer, go_dev);
4361 }
4362
4363
4364 static int p2p_ctrl_invite(struct wpa_supplicant *wpa_s, char *cmd)
4365 {
4366 if (os_strncmp(cmd, "persistent=", 11) == 0)
4367 return p2p_ctrl_invite_persistent(wpa_s, cmd + 11);
4368 if (os_strncmp(cmd, "group=", 6) == 0)
4369 return p2p_ctrl_invite_group(wpa_s, cmd + 6);
4370
4371 return -1;
4372 }
4373
4374
4375 static int p2p_ctrl_group_add_persistent(struct wpa_supplicant *wpa_s,
4376 char *cmd, int freq, int ht40,
4377 int vht)
4378 {
4379 int id;
4380 struct wpa_ssid *ssid;
4381
4382 id = atoi(cmd);
4383 ssid = wpa_config_get_network(wpa_s->conf, id);
4384 if (ssid == NULL || ssid->disabled != 2) {
4385 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
4386 "for persistent P2P group",
4387 id);
4388 return -1;
4389 }
4390
4391 return wpas_p2p_group_add_persistent(wpa_s, ssid, 0, freq, ht40, vht,
4392 NULL, 0);
4393 }
4394
4395
4396 static int p2p_ctrl_group_add(struct wpa_supplicant *wpa_s, char *cmd)
4397 {
4398 int freq = 0, ht40, vht;
4399 char *pos;
4400
4401 pos = os_strstr(cmd, "freq=");
4402 if (pos)
4403 freq = atoi(pos + 5);
4404
4405 vht = (os_strstr(cmd, "vht") != NULL) || wpa_s->conf->p2p_go_vht;
4406 ht40 = (os_strstr(cmd, "ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
4407 vht;
4408
4409 if (os_strncmp(cmd, "persistent=", 11) == 0)
4410 return p2p_ctrl_group_add_persistent(wpa_s, cmd + 11, freq,
4411 ht40, vht);
4412 if (os_strcmp(cmd, "persistent") == 0 ||
4413 os_strncmp(cmd, "persistent ", 11) == 0)
4414 return wpas_p2p_group_add(wpa_s, 1, freq, ht40, vht);
4415 if (os_strncmp(cmd, "freq=", 5) == 0)
4416 return wpas_p2p_group_add(wpa_s, 0, freq, ht40, vht);
4417 if (ht40)
4418 return wpas_p2p_group_add(wpa_s, 0, freq, ht40, vht);
4419
4420 wpa_printf(MSG_DEBUG, "CTRL: Invalid P2P_GROUP_ADD parameters '%s'",
4421 cmd);
4422 return -1;
4423 }
4424
4425
4426 static int p2p_ctrl_peer(struct wpa_supplicant *wpa_s, char *cmd,
4427 char *buf, size_t buflen)
4428 {
4429 u8 addr[ETH_ALEN], *addr_ptr;
4430 int next, res;
4431 const struct p2p_peer_info *info;
4432 char *pos, *end;
4433 char devtype[WPS_DEV_TYPE_BUFSIZE];
4434 struct wpa_ssid *ssid;
4435 size_t i;
4436
4437 if (!wpa_s->global->p2p)
4438 return -1;
4439
4440 if (os_strcmp(cmd, "FIRST") == 0) {
4441 addr_ptr = NULL;
4442 next = 0;
4443 } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
4444 if (hwaddr_aton(cmd + 5, addr) < 0)
4445 return -1;
4446 addr_ptr = addr;
4447 next = 1;
4448 } else {
4449 if (hwaddr_aton(cmd, addr) < 0)
4450 return -1;
4451 addr_ptr = addr;
4452 next = 0;
4453 }
4454
4455 info = p2p_get_peer_info(wpa_s->global->p2p, addr_ptr, next);
4456 if (info == NULL)
4457 return -1;
4458
4459 pos = buf;
4460 end = buf + buflen;
4461
4462 res = os_snprintf(pos, end - pos, MACSTR "\n"
4463 "pri_dev_type=%s\n"
4464 "device_name=%s\n"
4465 "manufacturer=%s\n"
4466 "model_name=%s\n"
4467 "model_number=%s\n"
4468 "serial_number=%s\n"
4469 "config_methods=0x%x\n"
4470 "dev_capab=0x%x\n"
4471 "group_capab=0x%x\n"
4472 "level=%d\n",
4473 MAC2STR(info->p2p_device_addr),
4474 wps_dev_type_bin2str(info->pri_dev_type,
4475 devtype, sizeof(devtype)),
4476 info->device_name,
4477 info->manufacturer,
4478 info->model_name,
4479 info->model_number,
4480 info->serial_number,
4481 info->config_methods,
4482 info->dev_capab,
4483 info->group_capab,
4484 info->level);
4485 if (res < 0 || res >= end - pos)
4486 return pos - buf;
4487 pos += res;
4488
4489 for (i = 0; i < info->wps_sec_dev_type_list_len / WPS_DEV_TYPE_LEN; i++)
4490 {
4491 const u8 *t;
4492 t = &info->wps_sec_dev_type_list[i * WPS_DEV_TYPE_LEN];
4493 res = os_snprintf(pos, end - pos, "sec_dev_type=%s\n",
4494 wps_dev_type_bin2str(t, devtype,
4495 sizeof(devtype)));
4496 if (res < 0 || res >= end - pos)
4497 return pos - buf;
4498 pos += res;
4499 }
4500
4501 ssid = wpas_p2p_get_persistent(wpa_s, info->p2p_device_addr, NULL, 0);
4502 if (ssid) {
4503 res = os_snprintf(pos, end - pos, "persistent=%d\n", ssid->id);
4504 if (res < 0 || res >= end - pos)
4505 return pos - buf;
4506 pos += res;
4507 }
4508
4509 res = p2p_get_peer_info_txt(info, pos, end - pos);
4510 if (res < 0)
4511 return pos - buf;
4512 pos += res;
4513
4514 return pos - buf;
4515 }
4516
4517
4518 static int p2p_ctrl_disallow_freq(struct wpa_supplicant *wpa_s,
4519 const char *param)
4520 {
4521 unsigned int i;
4522
4523 if (wpa_s->global->p2p == NULL)
4524 return -1;
4525
4526 if (freq_range_list_parse(&wpa_s->global->p2p_disallow_freq, param) < 0)
4527 return -1;
4528
4529 for (i = 0; i < wpa_s->global->p2p_disallow_freq.num; i++) {
4530 struct wpa_freq_range *freq;
4531 freq = &wpa_s->global->p2p_disallow_freq.range[i];
4532 wpa_printf(MSG_DEBUG, "P2P: Disallowed frequency range %u-%u",
4533 freq->min, freq->max);
4534 }
4535
4536 wpas_p2p_update_channel_list(wpa_s);
4537 return 0;
4538 }
4539
4540
4541 static int p2p_ctrl_set(struct wpa_supplicant *wpa_s, char *cmd)
4542 {
4543 char *param;
4544
4545 if (wpa_s->global->p2p == NULL)
4546 return -1;
4547
4548 param = os_strchr(cmd, ' ');
4549 if (param == NULL)
4550 return -1;
4551 *param++ = '\0';
4552
4553 if (os_strcmp(cmd, "discoverability") == 0) {
4554 p2p_set_client_discoverability(wpa_s->global->p2p,
4555 atoi(param));
4556 return 0;
4557 }
4558
4559 if (os_strcmp(cmd, "managed") == 0) {
4560 p2p_set_managed_oper(wpa_s->global->p2p, atoi(param));
4561 return 0;
4562 }
4563
4564 if (os_strcmp(cmd, "listen_channel") == 0) {
4565 return p2p_set_listen_channel(wpa_s->global->p2p, 81,
4566 atoi(param));
4567 }
4568
4569 if (os_strcmp(cmd, "ssid_postfix") == 0) {
4570 return p2p_set_ssid_postfix(wpa_s->global->p2p, (u8 *) param,
4571 os_strlen(param));
4572 }
4573
4574 if (os_strcmp(cmd, "noa") == 0) {
4575 char *pos;
4576 int count, start, duration;
4577 /* GO NoA parameters: count,start_offset(ms),duration(ms) */
4578 count = atoi(param);
4579 pos = os_strchr(param, ',');
4580 if (pos == NULL)
4581 return -1;
4582 pos++;
4583 start = atoi(pos);
4584 pos = os_strchr(pos, ',');
4585 if (pos == NULL)
4586 return -1;
4587 pos++;
4588 duration = atoi(pos);
4589 if (count < 0 || count > 255 || start < 0 || duration < 0)
4590 return -1;
4591 if (count == 0 && duration > 0)
4592 return -1;
4593 wpa_printf(MSG_DEBUG, "CTRL_IFACE: P2P_SET GO NoA: count=%d "
4594 "start=%d duration=%d", count, start, duration);
4595 return wpas_p2p_set_noa(wpa_s, count, start, duration);
4596 }
4597
4598 if (os_strcmp(cmd, "ps") == 0)
4599 return wpa_drv_set_p2p_powersave(wpa_s, atoi(param), -1, -1);
4600
4601 if (os_strcmp(cmd, "oppps") == 0)
4602 return wpa_drv_set_p2p_powersave(wpa_s, -1, atoi(param), -1);
4603
4604 if (os_strcmp(cmd, "ctwindow") == 0)
4605 return wpa_drv_set_p2p_powersave(wpa_s, -1, -1, atoi(param));
4606
4607 if (os_strcmp(cmd, "disabled") == 0) {
4608 wpa_s->global->p2p_disabled = atoi(param);
4609 wpa_printf(MSG_DEBUG, "P2P functionality %s",
4610 wpa_s->global->p2p_disabled ?
4611 "disabled" : "enabled");
4612 if (wpa_s->global->p2p_disabled) {
4613 wpas_p2p_stop_find(wpa_s);
4614 os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
4615 p2p_flush(wpa_s->global->p2p);
4616 }
4617 return 0;
4618 }
4619
4620 if (os_strcmp(cmd, "conc_pref") == 0) {
4621 if (os_strcmp(param, "sta") == 0)
4622 wpa_s->global->conc_pref = WPA_CONC_PREF_STA;
4623 else if (os_strcmp(param, "p2p") == 0)
4624 wpa_s->global->conc_pref = WPA_CONC_PREF_P2P;
4625 else {
4626 wpa_printf(MSG_INFO, "Invalid conc_pref value");
4627 return -1;
4628 }
4629 wpa_printf(MSG_DEBUG, "Single channel concurrency preference: "
4630 "%s", param);
4631 return 0;
4632 }
4633
4634 if (os_strcmp(cmd, "force_long_sd") == 0) {
4635 wpa_s->force_long_sd = atoi(param);
4636 return 0;
4637 }
4638
4639 if (os_strcmp(cmd, "peer_filter") == 0) {
4640 u8 addr[ETH_ALEN];
4641 if (hwaddr_aton(param, addr))
4642 return -1;
4643 p2p_set_peer_filter(wpa_s->global->p2p, addr);
4644 return 0;
4645 }
4646
4647 if (os_strcmp(cmd, "cross_connect") == 0)
4648 return wpas_p2p_set_cross_connect(wpa_s, atoi(param));
4649
4650 if (os_strcmp(cmd, "go_apsd") == 0) {
4651 if (os_strcmp(param, "disable") == 0)
4652 wpa_s->set_ap_uapsd = 0;
4653 else {
4654 wpa_s->set_ap_uapsd = 1;
4655 wpa_s->ap_uapsd = atoi(param);
4656 }
4657 return 0;
4658 }
4659
4660 if (os_strcmp(cmd, "client_apsd") == 0) {
4661 if (os_strcmp(param, "disable") == 0)
4662 wpa_s->set_sta_uapsd = 0;
4663 else {
4664 int be, bk, vi, vo;
4665 char *pos;
4666 /* format: BE,BK,VI,VO;max SP Length */
4667 be = atoi(param);
4668 pos = os_strchr(param, ',');
4669 if (pos == NULL)
4670 return -1;
4671 pos++;
4672 bk = atoi(pos);
4673 pos = os_strchr(pos, ',');
4674 if (pos == NULL)
4675 return -1;
4676 pos++;
4677 vi = atoi(pos);
4678 pos = os_strchr(pos, ',');
4679 if (pos == NULL)
4680 return -1;
4681 pos++;
4682 vo = atoi(pos);
4683 /* ignore max SP Length for now */
4684
4685 wpa_s->set_sta_uapsd = 1;
4686 wpa_s->sta_uapsd = 0;
4687 if (be)
4688 wpa_s->sta_uapsd |= BIT(0);
4689 if (bk)
4690 wpa_s->sta_uapsd |= BIT(1);
4691 if (vi)
4692 wpa_s->sta_uapsd |= BIT(2);
4693 if (vo)
4694 wpa_s->sta_uapsd |= BIT(3);
4695 }
4696 return 0;
4697 }
4698
4699 if (os_strcmp(cmd, "disallow_freq") == 0)
4700 return p2p_ctrl_disallow_freq(wpa_s, param);
4701
4702 if (os_strcmp(cmd, "disc_int") == 0) {
4703 int min_disc_int, max_disc_int, max_disc_tu;
4704 char *pos;
4705
4706 pos = param;
4707
4708 min_disc_int = atoi(pos);
4709 pos = os_strchr(pos, ' ');
4710 if (pos == NULL)
4711 return -1;
4712 *pos++ = '\0';
4713
4714 max_disc_int = atoi(pos);
4715 pos = os_strchr(pos, ' ');
4716 if (pos == NULL)
4717 return -1;
4718 *pos++ = '\0';
4719
4720 max_disc_tu = atoi(pos);
4721
4722 return p2p_set_disc_int(wpa_s->global->p2p, min_disc_int,
4723 max_disc_int, max_disc_tu);
4724 }
4725
4726 if (os_strcmp(cmd, "per_sta_psk") == 0) {
4727 wpa_s->global->p2p_per_sta_psk = !!atoi(param);
4728 return 0;
4729 }
4730
4731 #ifdef CONFIG_WPS_NFC
4732 if (os_strcmp(cmd, "nfc_tag") == 0)
4733 return wpas_p2p_nfc_tag_enabled(wpa_s, !!atoi(param));
4734 #endif /* CONFIG_WPS_NFC */
4735
4736 if (os_strcmp(cmd, "disable_ip_addr_req") == 0) {
4737 wpa_s->p2p_disable_ip_addr_req = !!atoi(param);
4738 return 0;
4739 }
4740
4741 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown P2P_SET field value '%s'",
4742 cmd);
4743
4744 return -1;
4745 }
4746
4747
4748 static void p2p_ctrl_flush(struct wpa_supplicant *wpa_s)
4749 {
4750 os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
4751 wpa_s->force_long_sd = 0;
4752 if (wpa_s->global->p2p)
4753 p2p_flush(wpa_s->global->p2p);
4754 }
4755
4756
4757 static int p2p_ctrl_presence_req(struct wpa_supplicant *wpa_s, char *cmd)
4758 {
4759 char *pos, *pos2;
4760 unsigned int dur1 = 0, int1 = 0, dur2 = 0, int2 = 0;
4761
4762 if (cmd[0]) {
4763 pos = os_strchr(cmd, ' ');
4764 if (pos == NULL)
4765 return -1;
4766 *pos++ = '\0';
4767 dur1 = atoi(cmd);
4768
4769 pos2 = os_strchr(pos, ' ');
4770 if (pos2)
4771 *pos2++ = '\0';
4772 int1 = atoi(pos);
4773 } else
4774 pos2 = NULL;
4775
4776 if (pos2) {
4777 pos = os_strchr(pos2, ' ');
4778 if (pos == NULL)
4779 return -1;
4780 *pos++ = '\0';
4781 dur2 = atoi(pos2);
4782 int2 = atoi(pos);
4783 }
4784
4785 return wpas_p2p_presence_req(wpa_s, dur1, int1, dur2, int2);
4786 }
4787
4788
4789 static int p2p_ctrl_ext_listen(struct wpa_supplicant *wpa_s, char *cmd)
4790 {
4791 char *pos;
4792 unsigned int period = 0, interval = 0;
4793
4794 if (cmd[0]) {
4795 pos = os_strchr(cmd, ' ');
4796 if (pos == NULL)
4797 return -1;
4798 *pos++ = '\0';
4799 period = atoi(cmd);
4800 interval = atoi(pos);
4801 }
4802
4803 return wpas_p2p_ext_listen(wpa_s, period, interval);
4804 }
4805
4806
4807 static int p2p_ctrl_remove_client(struct wpa_supplicant *wpa_s, const char *cmd)
4808 {
4809 const char *pos;
4810 u8 peer[ETH_ALEN];
4811 int iface_addr = 0;
4812
4813 pos = cmd;
4814 if (os_strncmp(pos, "iface=", 6) == 0) {
4815 iface_addr = 1;
4816 pos += 6;
4817 }
4818 if (hwaddr_aton(pos, peer))
4819 return -1;
4820
4821 wpas_p2p_remove_client(wpa_s, peer, iface_addr);
4822 return 0;
4823 }
4824
4825 #endif /* CONFIG_P2P */
4826
4827
4828 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s, char *val)
4829 {
4830 struct wpa_freq_range_list ranges;
4831 int *freqs = NULL;
4832 struct hostapd_hw_modes *mode;
4833 u16 i;
4834
4835 if (wpa_s->hw.modes == NULL)
4836 return NULL;
4837
4838 os_memset(&ranges, 0, sizeof(ranges));
4839 if (freq_range_list_parse(&ranges, val) < 0)
4840 return NULL;
4841
4842 for (i = 0; i < wpa_s->hw.num_modes; i++) {
4843 int j;
4844
4845 mode = &wpa_s->hw.modes[i];
4846 for (j = 0; j < mode->num_channels; j++) {
4847 unsigned int freq;
4848
4849 if (mode->channels[j].flag & HOSTAPD_CHAN_DISABLED)
4850 continue;
4851
4852 freq = mode->channels[j].freq;
4853 if (!freq_range_list_includes(&ranges, freq))
4854 continue;
4855
4856 int_array_add_unique(&freqs, freq);
4857 }
4858 }
4859
4860 os_free(ranges.range);
4861 return freqs;
4862 }
4863
4864
4865 #ifdef CONFIG_INTERWORKING
4866
4867 static int ctrl_interworking_select(struct wpa_supplicant *wpa_s, char *param)
4868 {
4869 int auto_sel = 0;
4870 int *freqs = NULL;
4871
4872 if (param) {
4873 char *pos;
4874
4875 auto_sel = os_strstr(param, "auto") != NULL;
4876
4877 pos = os_strstr(param, "freq=");
4878 if (pos) {
4879 freqs = freq_range_to_channel_list(wpa_s, pos + 5);
4880 if (freqs == NULL)
4881 return -1;
4882 }
4883
4884 }
4885
4886 return interworking_select(wpa_s, auto_sel, freqs);
4887 }
4888
4889
4890 static int ctrl_interworking_connect(struct wpa_supplicant *wpa_s, char *dst)
4891 {
4892 u8 bssid[ETH_ALEN];
4893 struct wpa_bss *bss;
4894
4895 if (hwaddr_aton(dst, bssid)) {
4896 wpa_printf(MSG_DEBUG, "Invalid BSSID '%s'", dst);
4897 return -1;
4898 }
4899
4900 bss = wpa_bss_get_bssid(wpa_s, bssid);
4901 if (bss == NULL) {
4902 wpa_printf(MSG_DEBUG, "Could not find BSS " MACSTR,
4903 MAC2STR(bssid));
4904 return -1;
4905 }
4906
4907 return interworking_connect(wpa_s, bss);
4908 }
4909
4910
4911 static int get_anqp(struct wpa_supplicant *wpa_s, char *dst)
4912 {
4913 u8 dst_addr[ETH_ALEN];
4914 int used;
4915 char *pos;
4916 #define MAX_ANQP_INFO_ID 100
4917 u16 id[MAX_ANQP_INFO_ID];
4918 size_t num_id = 0;
4919
4920 used = hwaddr_aton2(dst, dst_addr);
4921 if (used < 0)
4922 return -1;
4923 pos = dst + used;
4924 while (num_id < MAX_ANQP_INFO_ID) {
4925 id[num_id] = atoi(pos);
4926 if (id[num_id])
4927 num_id++;
4928 pos = os_strchr(pos + 1, ',');
4929 if (pos == NULL)
4930 break;
4931 pos++;
4932 }
4933
4934 if (num_id == 0)
4935 return -1;
4936
4937 return anqp_send_req(wpa_s, dst_addr, id, num_id);
4938 }
4939
4940
4941 static int gas_request(struct wpa_supplicant *wpa_s, char *cmd)
4942 {
4943 u8 dst_addr[ETH_ALEN];
4944 struct wpabuf *advproto, *query = NULL;
4945 int used, ret = -1;
4946 char *pos, *end;
4947 size_t len;
4948
4949 used = hwaddr_aton2(cmd, dst_addr);
4950 if (used < 0)
4951 return -1;
4952
4953 pos = cmd + used;
4954 while (*pos == ' ')
4955 pos++;
4956
4957 /* Advertisement Protocol ID */
4958 end = os_strchr(pos, ' ');
4959 if (end)
4960 len = end - pos;
4961 else
4962 len = os_strlen(pos);
4963 if (len & 0x01)
4964 return -1;
4965 len /= 2;
4966 if (len == 0)
4967 return -1;
4968 advproto = wpabuf_alloc(len);
4969 if (advproto == NULL)
4970 return -1;
4971 if (hexstr2bin(pos, wpabuf_put(advproto, len), len) < 0)
4972 goto fail;
4973
4974 if (end) {
4975 /* Optional Query Request */
4976 pos = end + 1;
4977 while (*pos == ' ')
4978 pos++;
4979
4980 len = os_strlen(pos);
4981 if (len) {
4982 if (len & 0x01)
4983 goto fail;
4984 len /= 2;
4985 if (len == 0)
4986 goto fail;
4987 query = wpabuf_alloc(len);
4988 if (query == NULL)
4989 goto fail;
4990 if (hexstr2bin(pos, wpabuf_put(query, len), len) < 0)
4991 goto fail;
4992 }
4993 }
4994
4995 ret = gas_send_request(wpa_s, dst_addr, advproto, query);
4996
4997 fail:
4998 wpabuf_free(advproto);
4999 wpabuf_free(query);
5000
5001 return ret;
5002 }
5003
5004
5005 static int gas_response_get(struct wpa_supplicant *wpa_s, char *cmd, char *buf,
5006 size_t buflen)
5007 {
5008 u8 addr[ETH_ALEN];
5009 int dialog_token;
5010 int used;
5011 char *pos;
5012 size_t resp_len, start, requested_len;
5013 struct wpabuf *resp;
5014 int ret;
5015
5016 used = hwaddr_aton2(cmd, addr);
5017 if (used < 0)
5018 return -1;
5019
5020 pos = cmd + used;
5021 while (*pos == ' ')
5022 pos++;
5023 dialog_token = atoi(pos);
5024
5025 if (wpa_s->last_gas_resp &&
5026 os_memcmp(addr, wpa_s->last_gas_addr, ETH_ALEN) == 0 &&
5027 dialog_token == wpa_s->last_gas_dialog_token)
5028 resp = wpa_s->last_gas_resp;
5029 else if (wpa_s->prev_gas_resp &&
5030 os_memcmp(addr, wpa_s->prev_gas_addr, ETH_ALEN) == 0 &&
5031 dialog_token == wpa_s->prev_gas_dialog_token)
5032 resp = wpa_s->prev_gas_resp;
5033 else
5034 return -1;
5035
5036 resp_len = wpabuf_len(resp);
5037 start = 0;
5038 requested_len = resp_len;
5039
5040 pos = os_strchr(pos, ' ');
5041 if (pos) {
5042 start = atoi(pos);
5043 if (start > resp_len)
5044 return os_snprintf(buf, buflen, "FAIL-Invalid range");
5045 pos = os_strchr(pos, ',');
5046 if (pos == NULL)
5047 return -1;
5048 pos++;
5049 requested_len = atoi(pos);
5050 if (start + requested_len > resp_len)
5051 return os_snprintf(buf, buflen, "FAIL-Invalid range");
5052 }
5053
5054 if (requested_len * 2 + 1 > buflen)
5055 return os_snprintf(buf, buflen, "FAIL-Too long response");
5056
5057 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(resp) + start,
5058 requested_len);
5059
5060 if (start + requested_len == resp_len) {
5061 /*
5062 * Free memory by dropping the response after it has been
5063 * fetched.
5064 */
5065 if (resp == wpa_s->prev_gas_resp) {
5066 wpabuf_free(wpa_s->prev_gas_resp);
5067 wpa_s->prev_gas_resp = NULL;
5068 } else {
5069 wpabuf_free(wpa_s->last_gas_resp);
5070 wpa_s->last_gas_resp = NULL;
5071 }
5072 }
5073
5074 return ret;
5075 }
5076 #endif /* CONFIG_INTERWORKING */
5077
5078
5079 #ifdef CONFIG_HS20
5080
5081 static int get_hs20_anqp(struct wpa_supplicant *wpa_s, char *dst)
5082 {
5083 u8 dst_addr[ETH_ALEN];
5084 int used;
5085 char *pos;
5086 u32 subtypes = 0;
5087
5088 used = hwaddr_aton2(dst, dst_addr);
5089 if (used < 0)
5090 return -1;
5091 pos = dst + used;
5092 for (;;) {
5093 int num = atoi(pos);
5094 if (num <= 0 || num > 31)
5095 return -1;
5096 subtypes |= BIT(num);
5097 pos = os_strchr(pos + 1, ',');
5098 if (pos == NULL)
5099 break;
5100 pos++;
5101 }
5102
5103 if (subtypes == 0)
5104 return -1;
5105
5106 return hs20_anqp_send_req(wpa_s, dst_addr, subtypes, NULL, 0);
5107 }
5108
5109
5110 static int hs20_nai_home_realm_list(struct wpa_supplicant *wpa_s,
5111 const u8 *addr, const char *realm)
5112 {
5113 u8 *buf;
5114 size_t rlen, len;
5115 int ret;
5116
5117 rlen = os_strlen(realm);
5118 len = 3 + rlen;
5119 buf = os_malloc(len);
5120 if (buf == NULL)
5121 return -1;
5122 buf[0] = 1; /* NAI Home Realm Count */
5123 buf[1] = 0; /* Formatted in accordance with RFC 4282 */
5124 buf[2] = rlen;
5125 os_memcpy(buf + 3, realm, rlen);
5126
5127 ret = hs20_anqp_send_req(wpa_s, addr,
5128 BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
5129 buf, len);
5130
5131 os_free(buf);
5132
5133 return ret;
5134 }
5135
5136
5137 static int hs20_get_nai_home_realm_list(struct wpa_supplicant *wpa_s,
5138 char *dst)
5139 {
5140 struct wpa_cred *cred = wpa_s->conf->cred;
5141 u8 dst_addr[ETH_ALEN];
5142 int used;
5143 u8 *buf;
5144 size_t len;
5145 int ret;
5146
5147 used = hwaddr_aton2(dst, dst_addr);
5148 if (used < 0)
5149 return -1;
5150
5151 while (dst[used] == ' ')
5152 used++;
5153 if (os_strncmp(dst + used, "realm=", 6) == 0)
5154 return hs20_nai_home_realm_list(wpa_s, dst_addr,
5155 dst + used + 6);
5156
5157 len = os_strlen(dst + used);
5158
5159 if (len == 0 && cred && cred->realm)
5160 return hs20_nai_home_realm_list(wpa_s, dst_addr, cred->realm);
5161
5162 if (len % 1)
5163 return -1;
5164 len /= 2;
5165 buf = os_malloc(len);
5166 if (buf == NULL)
5167 return -1;
5168 if (hexstr2bin(dst + used, buf, len) < 0) {
5169 os_free(buf);
5170 return -1;
5171 }
5172
5173 ret = hs20_anqp_send_req(wpa_s, dst_addr,
5174 BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
5175 buf, len);
5176 os_free(buf);
5177
5178 return ret;
5179 }
5180
5181 #endif /* CONFIG_HS20 */
5182
5183
5184 static int wpa_supplicant_ctrl_iface_sta_autoconnect(
5185 struct wpa_supplicant *wpa_s, char *cmd)
5186 {
5187 wpa_s->auto_reconnect_disabled = atoi(cmd) == 0 ? 1 : 0;
5188 return 0;
5189 }
5190
5191
5192 #ifdef CONFIG_AUTOSCAN
5193
5194 static int wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant *wpa_s,
5195 char *cmd)
5196 {
5197 enum wpa_states state = wpa_s->wpa_state;
5198 char *new_params = NULL;
5199
5200 if (os_strlen(cmd) > 0) {
5201 new_params = os_strdup(cmd);
5202 if (new_params == NULL)
5203 return -1;
5204 }
5205
5206 os_free(wpa_s->conf->autoscan);
5207 wpa_s->conf->autoscan = new_params;
5208
5209 if (wpa_s->conf->autoscan == NULL)
5210 autoscan_deinit(wpa_s);
5211 else if (state == WPA_DISCONNECTED || state == WPA_INACTIVE)
5212 autoscan_init(wpa_s, 1);
5213 else if (state == WPA_SCANNING)
5214 wpa_supplicant_reinit_autoscan(wpa_s);
5215
5216 return 0;
5217 }
5218
5219 #endif /* CONFIG_AUTOSCAN */
5220
5221
5222 #ifdef CONFIG_WNM
5223
5224 static int wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant *wpa_s, char *cmd)
5225 {
5226 int enter;
5227 int intval = 0;
5228 char *pos;
5229 int ret;
5230 struct wpabuf *tfs_req = NULL;
5231
5232 if (os_strncmp(cmd, "enter", 5) == 0)
5233 enter = 1;
5234 else if (os_strncmp(cmd, "exit", 4) == 0)
5235 enter = 0;
5236 else
5237 return -1;
5238
5239 pos = os_strstr(cmd, " interval=");
5240 if (pos)
5241 intval = atoi(pos + 10);
5242
5243 pos = os_strstr(cmd, " tfs_req=");
5244 if (pos) {
5245 char *end;
5246 size_t len;
5247 pos += 9;
5248 end = os_strchr(pos, ' ');
5249 if (end)
5250 len = end - pos;
5251 else
5252 len = os_strlen(pos);
5253 if (len & 1)
5254 return -1;
5255 len /= 2;
5256 tfs_req = wpabuf_alloc(len);
5257 if (tfs_req == NULL)
5258 return -1;
5259 if (hexstr2bin(pos, wpabuf_put(tfs_req, len), len) < 0) {
5260 wpabuf_free(tfs_req);
5261 return -1;
5262 }
5263 }
5264
5265 ret = ieee802_11_send_wnmsleep_req(wpa_s, enter ? WNM_SLEEP_MODE_ENTER :
5266 WNM_SLEEP_MODE_EXIT, intval,
5267 tfs_req);
5268 wpabuf_free(tfs_req);
5269
5270 return ret;
5271 }
5272
5273
5274 static int wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant *wpa_s, char *cmd)
5275 {
5276 int query_reason;
5277
5278 query_reason = atoi(cmd);
5279
5280 wpa_printf(MSG_DEBUG, "CTRL_IFACE: WNM_BSS_QUERY query_reason=%d",
5281 query_reason);
5282
5283 return wnm_send_bss_transition_mgmt_query(wpa_s, query_reason);
5284 }
5285
5286 #endif /* CONFIG_WNM */
5287
5288
5289 /* Get string representation of channel width */
5290 static const char * channel_width_name(enum chan_width width)
5291 {
5292 switch (width) {
5293 case CHAN_WIDTH_20_NOHT:
5294 return "20 MHz (no HT)";
5295 case CHAN_WIDTH_20:
5296 return "20 MHz";
5297 case CHAN_WIDTH_40:
5298 return "40 MHz";
5299 case CHAN_WIDTH_80:
5300 return "80 MHz";
5301 case CHAN_WIDTH_80P80:
5302 return "80+80 MHz";
5303 case CHAN_WIDTH_160:
5304 return "160 MHz";
5305 default:
5306 return "unknown";
5307 }
5308 }
5309
5310
5311 static int wpa_supplicant_signal_poll(struct wpa_supplicant *wpa_s, char *buf,
5312 size_t buflen)
5313 {
5314 struct wpa_signal_info si;
5315 int ret;
5316 char *pos, *end;
5317
5318 ret = wpa_drv_signal_poll(wpa_s, &si);
5319 if (ret)
5320 return -1;
5321
5322 pos = buf;
5323 end = buf + buflen;
5324
5325 ret = os_snprintf(pos, end - pos, "RSSI=%d\nLINKSPEED=%d\n"
5326 "NOISE=%d\nFREQUENCY=%u\n",
5327 si.current_signal, si.current_txrate / 1000,
5328 si.current_noise, si.frequency);
5329 if (ret < 0 || ret > end - pos)
5330 return -1;
5331 pos += ret;
5332
5333 if (si.chanwidth != CHAN_WIDTH_UNKNOWN) {
5334 ret = os_snprintf(pos, end - pos, "WIDTH=%s\n",
5335 channel_width_name(si.chanwidth));
5336 if (ret < 0 || ret > end - pos)
5337 return -1;
5338 pos += ret;
5339 }
5340
5341 if (si.center_frq1 > 0 && si.center_frq2 > 0) {
5342 ret = os_snprintf(pos, end - pos,
5343 "CENTER_FRQ1=%d\nCENTER_FRQ2=%d\n",
5344 si.center_frq1, si.center_frq2);
5345 if (ret < 0 || ret > end - pos)
5346 return -1;
5347 pos += ret;
5348 }
5349
5350 if (si.avg_signal) {
5351 ret = os_snprintf(pos, end - pos,
5352 "AVG_RSSI=%d\n", si.avg_signal);
5353 if (ret < 0 || ret >= end - pos)
5354 return -1;
5355 pos += ret;
5356 }
5357
5358 return pos - buf;
5359 }
5360
5361
5362 static int wpa_supplicant_pktcnt_poll(struct wpa_supplicant *wpa_s, char *buf,
5363 size_t buflen)
5364 {
5365 struct hostap_sta_driver_data sta;
5366 int ret;
5367
5368 ret = wpa_drv_pktcnt_poll(wpa_s, &sta);
5369 if (ret)
5370 return -1;
5371
5372 ret = os_snprintf(buf, buflen, "TXGOOD=%lu\nTXBAD=%lu\nRXGOOD=%lu\n",
5373 sta.tx_packets, sta.tx_retry_failed, sta.rx_packets);
5374 if (ret < 0 || (size_t) ret > buflen)
5375 return -1;
5376 return ret;
5377 }
5378
5379
5380 #ifdef ANDROID
5381 static int wpa_supplicant_driver_cmd(struct wpa_supplicant *wpa_s, char *cmd,
5382 char *buf, size_t buflen)
5383 {
5384 int ret;
5385
5386 ret = wpa_drv_driver_cmd(wpa_s, cmd, buf, buflen);
5387 if (ret == 0) {
5388 if (os_strncasecmp(cmd, "COUNTRY", 7) == 0) {
5389 struct p2p_data *p2p = wpa_s->global->p2p;
5390 if (p2p) {
5391 char country[3];
5392 country[0] = cmd[8];
5393 country[1] = cmd[9];
5394 country[2] = 0x04;
5395 p2p_set_country(p2p, country);
5396 }
5397 }
5398 ret = os_snprintf(buf, buflen, "%s\n", "OK");
5399 }
5400 return ret;
5401 }
5402 #endif /* ANDROID */
5403
5404
5405 static void wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant *wpa_s)
5406 {
5407 wpa_dbg(wpa_s, MSG_DEBUG, "Flush all wpa_supplicant state");
5408
5409 #ifdef CONFIG_P2P
5410 wpas_p2p_stop_find(wpa_s);
5411 p2p_ctrl_flush(wpa_s);
5412 wpas_p2p_group_remove(wpa_s, "*");
5413 wpas_p2p_service_flush(wpa_s);
5414 wpa_s->global->p2p_disabled = 0;
5415 wpa_s->global->p2p_per_sta_psk = 0;
5416 wpa_s->conf->num_sec_device_types = 0;
5417 wpa_s->p2p_disable_ip_addr_req = 0;
5418 #endif /* CONFIG_P2P */
5419
5420 #ifdef CONFIG_WPS_TESTING
5421 wps_version_number = 0x20;
5422 wps_testing_dummy_cred = 0;
5423 wps_corrupt_pkhash = 0;
5424 #endif /* CONFIG_WPS_TESTING */
5425 #ifdef CONFIG_WPS
5426 wpa_s->wps_fragment_size = 0;
5427 wpas_wps_cancel(wpa_s);
5428 #endif /* CONFIG_WPS */
5429 wpa_s->after_wps = 0;
5430 wpa_s->known_wps_freq = 0;
5431
5432 #ifdef CONFIG_TDLS
5433 #ifdef CONFIG_TDLS_TESTING
5434 extern unsigned int tdls_testing;
5435 tdls_testing = 0;
5436 #endif /* CONFIG_TDLS_TESTING */
5437 wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL);
5438 wpa_tdls_enable(wpa_s->wpa, 1);
5439 #endif /* CONFIG_TDLS */
5440
5441 eloop_cancel_timeout(wpa_supplicant_stop_countermeasures, wpa_s, NULL);
5442 wpa_supplicant_stop_countermeasures(wpa_s, NULL);
5443
5444 wpa_s->no_keep_alive = 0;
5445
5446 os_free(wpa_s->disallow_aps_bssid);
5447 wpa_s->disallow_aps_bssid = NULL;
5448 wpa_s->disallow_aps_bssid_count = 0;
5449 os_free(wpa_s->disallow_aps_ssid);
5450 wpa_s->disallow_aps_ssid = NULL;
5451 wpa_s->disallow_aps_ssid_count = 0;
5452
5453 wpa_s->set_sta_uapsd = 0;
5454 wpa_s->sta_uapsd = 0;
5455
5456 wpa_drv_radio_disable(wpa_s, 0);
5457
5458 wpa_bss_flush(wpa_s);
5459 wpa_blacklist_clear(wpa_s);
5460 wpa_s->extra_blacklist_count = 0;
5461 wpa_supplicant_ctrl_iface_remove_network(wpa_s, "all");
5462 wpa_supplicant_ctrl_iface_remove_cred(wpa_s, "all");
5463 wpa_config_flush_blobs(wpa_s->conf);
5464 wpa_s->conf->auto_interworking = 0;
5465 wpa_s->conf->okc = 0;
5466 wpa_s->conf->pmf = 0;
5467
5468 wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME, 43200);
5469 wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD, 70);
5470 wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, 60);
5471 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
5472
5473 radio_remove_unstarted_work(wpa_s, NULL);
5474 }
5475
5476
5477 static int wpas_ctrl_radio_work_show(struct wpa_supplicant *wpa_s,
5478 char *buf, size_t buflen)
5479 {
5480 struct wpa_radio_work *work;
5481 char *pos, *end;
5482 struct os_reltime now, diff;
5483
5484 pos = buf;
5485 end = buf + buflen;
5486
5487 os_get_reltime(&now);
5488
5489 dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
5490 {
5491 int ret;
5492
5493 os_reltime_sub(&now, &work->time, &diff);
5494 ret = os_snprintf(pos, end - pos, "%s@%s:%u:%u:%ld.%06ld\n",
5495 work->type, work->wpa_s->ifname, work->freq,
5496 work->started, diff.sec, diff.usec);
5497 if (ret < 0 || ret >= end - pos)
5498 break;
5499 pos += ret;
5500 }
5501
5502 return pos - buf;
5503 }
5504
5505
5506 static void wpas_ctrl_radio_work_timeout(void *eloop_ctx, void *timeout_ctx)
5507 {
5508 struct wpa_radio_work *work = eloop_ctx;
5509 struct wpa_external_work *ework = work->ctx;
5510
5511 wpa_dbg(work->wpa_s, MSG_DEBUG,
5512 "Timing out external radio work %u (%s)",
5513 ework->id, work->type);
5514 wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_TIMEOUT "%u", ework->id);
5515 os_free(ework);
5516 radio_work_done(work);
5517 }
5518
5519
5520 static void wpas_ctrl_radio_work_cb(struct wpa_radio_work *work, int deinit)
5521 {
5522 struct wpa_external_work *ework = work->ctx;
5523
5524 if (deinit) {
5525 os_free(ework);
5526 return;
5527 }
5528
5529 wpa_dbg(work->wpa_s, MSG_DEBUG, "Starting external radio work %u (%s)",
5530 ework->id, ework->type);
5531 wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_START "%u", ework->id);
5532 if (!ework->timeout)
5533 ework->timeout = 10;
5534 eloop_register_timeout(ework->timeout, 0, wpas_ctrl_radio_work_timeout,
5535 work, NULL);
5536 }
5537
5538
5539 static int wpas_ctrl_radio_work_add(struct wpa_supplicant *wpa_s, char *cmd,
5540 char *buf, size_t buflen)
5541 {
5542 struct wpa_external_work *ework;
5543 char *pos, *pos2;
5544 size_t type_len;
5545 int ret;
5546 unsigned int freq = 0;
5547
5548 /* format: <name> [freq=<MHz>] [timeout=<seconds>] */
5549
5550 ework = os_zalloc(sizeof(*ework));
5551 if (ework == NULL)
5552 return -1;
5553
5554 pos = os_strchr(cmd, ' ');
5555 if (pos) {
5556 type_len = pos - cmd;
5557 pos++;
5558
5559 pos2 = os_strstr(pos, "freq=");
5560 if (pos2)
5561 freq = atoi(pos2 + 5);
5562
5563 pos2 = os_strstr(pos, "timeout=");
5564 if (pos2)
5565 ework->timeout = atoi(pos2 + 8);
5566 } else {
5567 type_len = os_strlen(cmd);
5568 }
5569 if (4 + type_len >= sizeof(ework->type))
5570 type_len = sizeof(ework->type) - 4 - 1;
5571 os_strlcpy(ework->type, "ext:", sizeof(ework->type));
5572 os_memcpy(ework->type + 4, cmd, type_len);
5573 ework->type[4 + type_len] = '\0';
5574
5575 wpa_s->ext_work_id++;
5576 if (wpa_s->ext_work_id == 0)
5577 wpa_s->ext_work_id++;
5578 ework->id = wpa_s->ext_work_id;
5579
5580 if (radio_add_work(wpa_s, freq, ework->type, 0, wpas_ctrl_radio_work_cb,
5581 ework) < 0) {
5582 os_free(ework);
5583 return -1;
5584 }
5585
5586 ret = os_snprintf(buf, buflen, "%u", ework->id);
5587 if (ret < 0 || (size_t) ret >= buflen)
5588 return -1;
5589 return ret;
5590 }
5591
5592
5593 static int wpas_ctrl_radio_work_done(struct wpa_supplicant *wpa_s, char *cmd)
5594 {
5595 struct wpa_radio_work *work;
5596 unsigned int id = atoi(cmd);
5597
5598 dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
5599 {
5600 struct wpa_external_work *ework;
5601
5602 if (os_strncmp(work->type, "ext:", 4) != 0)
5603 continue;
5604 ework = work->ctx;
5605 if (id && ework->id != id)
5606 continue;
5607 wpa_dbg(wpa_s, MSG_DEBUG,
5608 "Completed external radio work %u (%s)",
5609 ework->id, ework->type);
5610 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout, work, NULL);
5611 os_free(ework);
5612 radio_work_done(work);
5613 return 3; /* "OK\n" */
5614 }
5615
5616 return -1;
5617 }
5618
5619
5620 static int wpas_ctrl_radio_work(struct wpa_supplicant *wpa_s, char *cmd,
5621 char *buf, size_t buflen)
5622 {
5623 if (os_strcmp(cmd, "show") == 0)
5624 return wpas_ctrl_radio_work_show(wpa_s, buf, buflen);
5625 if (os_strncmp(cmd, "add ", 4) == 0)
5626 return wpas_ctrl_radio_work_add(wpa_s, cmd + 4, buf, buflen);
5627 if (os_strncmp(cmd, "done ", 5) == 0)
5628 return wpas_ctrl_radio_work_done(wpa_s, cmd + 4);
5629 return -1;
5630 }
5631
5632
5633 void wpas_ctrl_radio_work_flush(struct wpa_supplicant *wpa_s)
5634 {
5635 struct wpa_radio_work *work, *tmp;
5636
5637 if (!wpa_s || !wpa_s->radio)
5638 return;
5639
5640 dl_list_for_each_safe(work, tmp, &wpa_s->radio->work,
5641 struct wpa_radio_work, list) {
5642 struct wpa_external_work *ework;
5643
5644 if (os_strncmp(work->type, "ext:", 4) != 0)
5645 continue;
5646 ework = work->ctx;
5647 wpa_dbg(wpa_s, MSG_DEBUG,
5648 "Flushing %sexternal radio work %u (%s)",
5649 work->started ? " started" : "", ework->id,
5650 ework->type);
5651 if (work->started)
5652 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
5653 work, NULL);
5654 os_free(ework);
5655 radio_work_done(work);
5656 }
5657 }
5658
5659
5660 static void wpas_ctrl_eapol_response(void *eloop_ctx, void *timeout_ctx)
5661 {
5662 struct wpa_supplicant *wpa_s = eloop_ctx;
5663 eapol_sm_notify_ctrl_response(wpa_s->eapol);
5664 }
5665
5666
5667 static int set_scan_freqs(struct wpa_supplicant *wpa_s, char *val)
5668 {
5669 int *freqs = NULL;
5670
5671 freqs = freq_range_to_channel_list(wpa_s, val);
5672 if (freqs == NULL)
5673 return -1;
5674
5675 os_free(wpa_s->manual_scan_freqs);
5676 wpa_s->manual_scan_freqs = freqs;
5677
5678 return 0;
5679 }
5680
5681
5682 static void wpas_ctrl_scan(struct wpa_supplicant *wpa_s, char *params,
5683 char *reply, int reply_size, int *reply_len)
5684 {
5685 char *pos;
5686
5687 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
5688 *reply_len = -1;
5689 return;
5690 }
5691
5692 wpa_s->manual_scan_passive = 0;
5693 wpa_s->manual_scan_use_id = 0;
5694 wpa_s->manual_scan_only_new = 0;
5695
5696 if (params) {
5697 if (os_strncasecmp(params, "TYPE=ONLY", 9) == 0)
5698 wpa_s->scan_res_handler = scan_only_handler;
5699
5700 pos = os_strstr(params, "freq=");
5701 if (pos && set_scan_freqs(wpa_s, pos + 5) < 0) {
5702 *reply_len = -1;
5703 return;
5704 }
5705
5706 pos = os_strstr(params, "passive=");
5707 if (pos)
5708 wpa_s->manual_scan_passive = !!atoi(pos + 8);
5709
5710 pos = os_strstr(params, "use_id=");
5711 if (pos)
5712 wpa_s->manual_scan_use_id = atoi(pos + 7);
5713
5714 pos = os_strstr(params, "only_new=1");
5715 if (pos)
5716 wpa_s->manual_scan_only_new = 1;
5717 } else {
5718 os_free(wpa_s->manual_scan_freqs);
5719 wpa_s->manual_scan_freqs = NULL;
5720 if (wpa_s->scan_res_handler == scan_only_handler)
5721 wpa_s->scan_res_handler = NULL;
5722 }
5723
5724 if (!wpa_s->sched_scanning && !wpa_s->scanning &&
5725 ((wpa_s->wpa_state <= WPA_SCANNING) ||
5726 (wpa_s->wpa_state == WPA_COMPLETED))) {
5727 wpa_s->normal_scans = 0;
5728 wpa_s->scan_req = MANUAL_SCAN_REQ;
5729 wpa_s->after_wps = 0;
5730 wpa_s->known_wps_freq = 0;
5731 wpa_supplicant_req_scan(wpa_s, 0, 0);
5732 if (wpa_s->manual_scan_use_id) {
5733 wpa_s->manual_scan_id++;
5734 wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
5735 wpa_s->manual_scan_id);
5736 *reply_len = os_snprintf(reply, reply_size, "%u\n",
5737 wpa_s->manual_scan_id);
5738 }
5739 } else if (wpa_s->sched_scanning) {
5740 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to allow requested full scan to proceed");
5741 wpa_supplicant_cancel_sched_scan(wpa_s);
5742 wpa_s->scan_req = MANUAL_SCAN_REQ;
5743 wpa_supplicant_req_scan(wpa_s, 0, 0);
5744 if (wpa_s->manual_scan_use_id) {
5745 wpa_s->manual_scan_id++;
5746 *reply_len = os_snprintf(reply, reply_size, "%u\n",
5747 wpa_s->manual_scan_id);
5748 wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
5749 wpa_s->manual_scan_id);
5750 }
5751 } else {
5752 wpa_printf(MSG_DEBUG, "Ongoing scan action - reject new request");
5753 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
5754 }
5755 }
5756
5757
5758 char * wpa_supplicant_ctrl_iface_process(struct wpa_supplicant *wpa_s,
5759 char *buf, size_t *resp_len)
5760 {
5761 char *reply;
5762 const int reply_size = 4096;
5763 int reply_len;
5764
5765 if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0 ||
5766 os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
5767 if (wpa_debug_show_keys)
5768 wpa_dbg(wpa_s, MSG_DEBUG,
5769 "Control interface command '%s'", buf);
5770 else
5771 wpa_dbg(wpa_s, MSG_DEBUG,
5772 "Control interface command '%s [REMOVED]'",
5773 os_strncmp(buf, WPA_CTRL_RSP,
5774 os_strlen(WPA_CTRL_RSP)) == 0 ?
5775 WPA_CTRL_RSP : "SET_NETWORK");
5776 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ", 16) == 0 ||
5777 os_strncmp(buf, "NFC_REPORT_HANDOVER", 19) == 0 ||
5778 os_strncmp(buf, "NFC_RX_HANDOVER_SEL", 19) == 0) {
5779 wpa_hexdump_ascii_key(MSG_DEBUG, "RX ctrl_iface",
5780 (const u8 *) buf, os_strlen(buf));
5781 } else {
5782 int level = MSG_DEBUG;
5783 if (os_strcmp(buf, "PING") == 0)
5784 level = MSG_EXCESSIVE;
5785 wpa_dbg(wpa_s, level, "Control interface command '%s'", buf);
5786 }
5787
5788 reply = os_malloc(reply_size);
5789 if (reply == NULL) {
5790 *resp_len = 1;
5791 return NULL;
5792 }
5793
5794 os_memcpy(reply, "OK\n", 3);
5795 reply_len = 3;
5796
5797 if (os_strcmp(buf, "PING") == 0) {
5798 os_memcpy(reply, "PONG\n", 5);
5799 reply_len = 5;
5800 } else if (os_strcmp(buf, "IFNAME") == 0) {
5801 reply_len = os_strlen(wpa_s->ifname);
5802 os_memcpy(reply, wpa_s->ifname, reply_len);
5803 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
5804 if (wpa_debug_reopen_file() < 0)
5805 reply_len = -1;
5806 } else if (os_strncmp(buf, "NOTE ", 5) == 0) {
5807 wpa_printf(MSG_INFO, "NOTE: %s", buf + 5);
5808 } else if (os_strcmp(buf, "MIB") == 0) {
5809 reply_len = wpa_sm_get_mib(wpa_s->wpa, reply, reply_size);
5810 if (reply_len >= 0) {
5811 int res;
5812 res = eapol_sm_get_mib(wpa_s->eapol, reply + reply_len,
5813 reply_size - reply_len);
5814 if (res < 0)
5815 reply_len = -1;
5816 else
5817 reply_len += res;
5818 }
5819 } else if (os_strncmp(buf, "STATUS", 6) == 0) {
5820 reply_len = wpa_supplicant_ctrl_iface_status(
5821 wpa_s, buf + 6, reply, reply_size);
5822 } else if (os_strcmp(buf, "PMKSA") == 0) {
5823 reply_len = wpa_sm_pmksa_cache_list(wpa_s->wpa, reply,
5824 reply_size);
5825 } else if (os_strncmp(buf, "SET ", 4) == 0) {
5826 if (wpa_supplicant_ctrl_iface_set(wpa_s, buf + 4))
5827 reply_len = -1;
5828 } else if (os_strncmp(buf, "GET ", 4) == 0) {
5829 reply_len = wpa_supplicant_ctrl_iface_get(wpa_s, buf + 4,
5830 reply, reply_size);
5831 } else if (os_strcmp(buf, "LOGON") == 0) {
5832 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
5833 } else if (os_strcmp(buf, "LOGOFF") == 0) {
5834 eapol_sm_notify_logoff(wpa_s->eapol, TRUE);
5835 } else if (os_strcmp(buf, "REASSOCIATE") == 0) {
5836 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
5837 reply_len = -1;
5838 else
5839 wpas_request_connection(wpa_s);
5840 } else if (os_strcmp(buf, "RECONNECT") == 0) {
5841 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
5842 reply_len = -1;
5843 else if (wpa_s->disconnected)
5844 wpas_request_connection(wpa_s);
5845 #ifdef IEEE8021X_EAPOL
5846 } else if (os_strncmp(buf, "PREAUTH ", 8) == 0) {
5847 if (wpa_supplicant_ctrl_iface_preauth(wpa_s, buf + 8))
5848 reply_len = -1;
5849 #endif /* IEEE8021X_EAPOL */
5850 #ifdef CONFIG_PEERKEY
5851 } else if (os_strncmp(buf, "STKSTART ", 9) == 0) {
5852 if (wpa_supplicant_ctrl_iface_stkstart(wpa_s, buf + 9))
5853 reply_len = -1;
5854 #endif /* CONFIG_PEERKEY */
5855 #ifdef CONFIG_IEEE80211R
5856 } else if (os_strncmp(buf, "FT_DS ", 6) == 0) {
5857 if (wpa_supplicant_ctrl_iface_ft_ds(wpa_s, buf + 6))
5858 reply_len = -1;
5859 #endif /* CONFIG_IEEE80211R */
5860 #ifdef CONFIG_WPS
5861 } else if (os_strcmp(buf, "WPS_PBC") == 0) {
5862 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, NULL);
5863 if (res == -2) {
5864 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
5865 reply_len = 17;
5866 } else if (res)
5867 reply_len = -1;
5868 } else if (os_strncmp(buf, "WPS_PBC ", 8) == 0) {
5869 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, buf + 8);
5870 if (res == -2) {
5871 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
5872 reply_len = 17;
5873 } else if (res)
5874 reply_len = -1;
5875 } else if (os_strncmp(buf, "WPS_PIN ", 8) == 0) {
5876 reply_len = wpa_supplicant_ctrl_iface_wps_pin(wpa_s, buf + 8,
5877 reply,
5878 reply_size);
5879 } else if (os_strncmp(buf, "WPS_CHECK_PIN ", 14) == 0) {
5880 reply_len = wpa_supplicant_ctrl_iface_wps_check_pin(
5881 wpa_s, buf + 14, reply, reply_size);
5882 } else if (os_strcmp(buf, "WPS_CANCEL") == 0) {
5883 if (wpas_wps_cancel(wpa_s))
5884 reply_len = -1;
5885 #ifdef CONFIG_WPS_NFC
5886 } else if (os_strcmp(buf, "WPS_NFC") == 0) {
5887 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, NULL))
5888 reply_len = -1;
5889 } else if (os_strncmp(buf, "WPS_NFC ", 8) == 0) {
5890 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, buf + 8))
5891 reply_len = -1;
5892 } else if (os_strncmp(buf, "WPS_NFC_CONFIG_TOKEN ", 21) == 0) {
5893 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_config_token(
5894 wpa_s, buf + 21, reply, reply_size);
5895 } else if (os_strncmp(buf, "WPS_NFC_TOKEN ", 14) == 0) {
5896 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_token(
5897 wpa_s, buf + 14, reply, reply_size);
5898 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ ", 17) == 0) {
5899 if (wpa_supplicant_ctrl_iface_wps_nfc_tag_read(wpa_s,
5900 buf + 17))
5901 reply_len = -1;
5902 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_REQ ", 21) == 0) {
5903 reply_len = wpas_ctrl_nfc_get_handover_req(
5904 wpa_s, buf + 21, reply, reply_size);
5905 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_SEL ", 21) == 0) {
5906 reply_len = wpas_ctrl_nfc_get_handover_sel(
5907 wpa_s, buf + 21, reply, reply_size);
5908 } else if (os_strncmp(buf, "NFC_RX_HANDOVER_REQ ", 20) == 0) {
5909 reply_len = wpas_ctrl_nfc_rx_handover_req(
5910 wpa_s, buf + 20, reply, reply_size);
5911 } else if (os_strncmp(buf, "NFC_RX_HANDOVER_SEL ", 20) == 0) {
5912 if (wpas_ctrl_nfc_rx_handover_sel(wpa_s, buf + 20))
5913 reply_len = -1;
5914 } else if (os_strncmp(buf, "NFC_REPORT_HANDOVER ", 20) == 0) {
5915 if (wpas_ctrl_nfc_report_handover(wpa_s, buf + 20))
5916 reply_len = -1;
5917 #endif /* CONFIG_WPS_NFC */
5918 } else if (os_strncmp(buf, "WPS_REG ", 8) == 0) {
5919 if (wpa_supplicant_ctrl_iface_wps_reg(wpa_s, buf + 8))
5920 reply_len = -1;
5921 #ifdef CONFIG_AP
5922 } else if (os_strncmp(buf, "WPS_AP_PIN ", 11) == 0) {
5923 reply_len = wpa_supplicant_ctrl_iface_wps_ap_pin(
5924 wpa_s, buf + 11, reply, reply_size);
5925 #endif /* CONFIG_AP */
5926 #ifdef CONFIG_WPS_ER
5927 } else if (os_strcmp(buf, "WPS_ER_START") == 0) {
5928 if (wpas_wps_er_start(wpa_s, NULL))
5929 reply_len = -1;
5930 } else if (os_strncmp(buf, "WPS_ER_START ", 13) == 0) {
5931 if (wpas_wps_er_start(wpa_s, buf + 13))
5932 reply_len = -1;
5933 } else if (os_strcmp(buf, "WPS_ER_STOP") == 0) {
5934 if (wpas_wps_er_stop(wpa_s))
5935 reply_len = -1;
5936 } else if (os_strncmp(buf, "WPS_ER_PIN ", 11) == 0) {
5937 if (wpa_supplicant_ctrl_iface_wps_er_pin(wpa_s, buf + 11))
5938 reply_len = -1;
5939 } else if (os_strncmp(buf, "WPS_ER_PBC ", 11) == 0) {
5940 int ret = wpas_wps_er_pbc(wpa_s, buf + 11);
5941 if (ret == -2) {
5942 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
5943 reply_len = 17;
5944 } else if (ret == -3) {
5945 os_memcpy(reply, "FAIL-UNKNOWN-UUID\n", 18);
5946 reply_len = 18;
5947 } else if (ret == -4) {
5948 os_memcpy(reply, "FAIL-NO-AP-SETTINGS\n", 20);
5949 reply_len = 20;
5950 } else if (ret)
5951 reply_len = -1;
5952 } else if (os_strncmp(buf, "WPS_ER_LEARN ", 13) == 0) {
5953 if (wpa_supplicant_ctrl_iface_wps_er_learn(wpa_s, buf + 13))
5954 reply_len = -1;
5955 } else if (os_strncmp(buf, "WPS_ER_SET_CONFIG ", 18) == 0) {
5956 if (wpa_supplicant_ctrl_iface_wps_er_set_config(wpa_s,
5957 buf + 18))
5958 reply_len = -1;
5959 } else if (os_strncmp(buf, "WPS_ER_CONFIG ", 14) == 0) {
5960 if (wpa_supplicant_ctrl_iface_wps_er_config(wpa_s, buf + 14))
5961 reply_len = -1;
5962 #ifdef CONFIG_WPS_NFC
5963 } else if (os_strncmp(buf, "WPS_ER_NFC_CONFIG_TOKEN ", 24) == 0) {
5964 reply_len = wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
5965 wpa_s, buf + 24, reply, reply_size);
5966 #endif /* CONFIG_WPS_NFC */
5967 #endif /* CONFIG_WPS_ER */
5968 #endif /* CONFIG_WPS */
5969 #ifdef CONFIG_IBSS_RSN
5970 } else if (os_strncmp(buf, "IBSS_RSN ", 9) == 0) {
5971 if (wpa_supplicant_ctrl_iface_ibss_rsn(wpa_s, buf + 9))
5972 reply_len = -1;
5973 #endif /* CONFIG_IBSS_RSN */
5974 #ifdef CONFIG_P2P
5975 } else if (os_strncmp(buf, "P2P_FIND ", 9) == 0) {
5976 if (p2p_ctrl_find(wpa_s, buf + 9))
5977 reply_len = -1;
5978 } else if (os_strcmp(buf, "P2P_FIND") == 0) {
5979 if (p2p_ctrl_find(wpa_s, ""))
5980 reply_len = -1;
5981 } else if (os_strcmp(buf, "P2P_STOP_FIND") == 0) {
5982 wpas_p2p_stop_find(wpa_s);
5983 } else if (os_strncmp(buf, "P2P_CONNECT ", 12) == 0) {
5984 reply_len = p2p_ctrl_connect(wpa_s, buf + 12, reply,
5985 reply_size);
5986 } else if (os_strncmp(buf, "P2P_LISTEN ", 11) == 0) {
5987 if (p2p_ctrl_listen(wpa_s, buf + 11))
5988 reply_len = -1;
5989 } else if (os_strcmp(buf, "P2P_LISTEN") == 0) {
5990 if (p2p_ctrl_listen(wpa_s, ""))
5991 reply_len = -1;
5992 } else if (os_strncmp(buf, "P2P_GROUP_REMOVE ", 17) == 0) {
5993 if (wpas_p2p_group_remove(wpa_s, buf + 17))
5994 reply_len = -1;
5995 } else if (os_strcmp(buf, "P2P_GROUP_ADD") == 0) {
5996 if (wpas_p2p_group_add(wpa_s, 0, 0, 0, 0))
5997 reply_len = -1;
5998 } else if (os_strncmp(buf, "P2P_GROUP_ADD ", 14) == 0) {
5999 if (p2p_ctrl_group_add(wpa_s, buf + 14))
6000 reply_len = -1;
6001 } else if (os_strncmp(buf, "P2P_PROV_DISC ", 14) == 0) {
6002 if (p2p_ctrl_prov_disc(wpa_s, buf + 14))
6003 reply_len = -1;
6004 } else if (os_strcmp(buf, "P2P_GET_PASSPHRASE") == 0) {
6005 reply_len = p2p_get_passphrase(wpa_s, reply, reply_size);
6006 } else if (os_strncmp(buf, "P2P_SERV_DISC_REQ ", 18) == 0) {
6007 reply_len = p2p_ctrl_serv_disc_req(wpa_s, buf + 18, reply,
6008 reply_size);
6009 } else if (os_strncmp(buf, "P2P_SERV_DISC_CANCEL_REQ ", 25) == 0) {
6010 if (p2p_ctrl_serv_disc_cancel_req(wpa_s, buf + 25) < 0)
6011 reply_len = -1;
6012 } else if (os_strncmp(buf, "P2P_SERV_DISC_RESP ", 19) == 0) {
6013 if (p2p_ctrl_serv_disc_resp(wpa_s, buf + 19) < 0)
6014 reply_len = -1;
6015 } else if (os_strcmp(buf, "P2P_SERVICE_UPDATE") == 0) {
6016 wpas_p2p_sd_service_update(wpa_s);
6017 } else if (os_strncmp(buf, "P2P_SERV_DISC_EXTERNAL ", 23) == 0) {
6018 if (p2p_ctrl_serv_disc_external(wpa_s, buf + 23) < 0)
6019 reply_len = -1;
6020 } else if (os_strcmp(buf, "P2P_SERVICE_FLUSH") == 0) {
6021 wpas_p2p_service_flush(wpa_s);
6022 } else if (os_strncmp(buf, "P2P_SERVICE_ADD ", 16) == 0) {
6023 if (p2p_ctrl_service_add(wpa_s, buf + 16) < 0)
6024 reply_len = -1;
6025 } else if (os_strncmp(buf, "P2P_SERVICE_DEL ", 16) == 0) {
6026 if (p2p_ctrl_service_del(wpa_s, buf + 16) < 0)
6027 reply_len = -1;
6028 } else if (os_strncmp(buf, "P2P_REJECT ", 11) == 0) {
6029 if (p2p_ctrl_reject(wpa_s, buf + 11) < 0)
6030 reply_len = -1;
6031 } else if (os_strncmp(buf, "P2P_INVITE ", 11) == 0) {
6032 if (p2p_ctrl_invite(wpa_s, buf + 11) < 0)
6033 reply_len = -1;
6034 } else if (os_strncmp(buf, "P2P_PEER ", 9) == 0) {
6035 reply_len = p2p_ctrl_peer(wpa_s, buf + 9, reply,
6036 reply_size);
6037 } else if (os_strncmp(buf, "P2P_SET ", 8) == 0) {
6038 if (p2p_ctrl_set(wpa_s, buf + 8) < 0)
6039 reply_len = -1;
6040 } else if (os_strcmp(buf, "P2P_FLUSH") == 0) {
6041 p2p_ctrl_flush(wpa_s);
6042 } else if (os_strncmp(buf, "P2P_UNAUTHORIZE ", 16) == 0) {
6043 if (wpas_p2p_unauthorize(wpa_s, buf + 16) < 0)
6044 reply_len = -1;
6045 } else if (os_strcmp(buf, "P2P_CANCEL") == 0) {
6046 if (wpas_p2p_cancel(wpa_s))
6047 reply_len = -1;
6048 } else if (os_strncmp(buf, "P2P_PRESENCE_REQ ", 17) == 0) {
6049 if (p2p_ctrl_presence_req(wpa_s, buf + 17) < 0)
6050 reply_len = -1;
6051 } else if (os_strcmp(buf, "P2P_PRESENCE_REQ") == 0) {
6052 if (p2p_ctrl_presence_req(wpa_s, "") < 0)
6053 reply_len = -1;
6054 } else if (os_strncmp(buf, "P2P_EXT_LISTEN ", 15) == 0) {
6055 if (p2p_ctrl_ext_listen(wpa_s, buf + 15) < 0)
6056 reply_len = -1;
6057 } else if (os_strcmp(buf, "P2P_EXT_LISTEN") == 0) {
6058 if (p2p_ctrl_ext_listen(wpa_s, "") < 0)
6059 reply_len = -1;
6060 } else if (os_strncmp(buf, "P2P_REMOVE_CLIENT ", 18) == 0) {
6061 if (p2p_ctrl_remove_client(wpa_s, buf + 18) < 0)
6062 reply_len = -1;
6063 #endif /* CONFIG_P2P */
6064 #ifdef CONFIG_WIFI_DISPLAY
6065 } else if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0) {
6066 if (wifi_display_subelem_set(wpa_s->global, buf + 16) < 0)
6067 reply_len = -1;
6068 } else if (os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0) {
6069 reply_len = wifi_display_subelem_get(wpa_s->global, buf + 16,
6070 reply, reply_size);
6071 #endif /* CONFIG_WIFI_DISPLAY */
6072 #ifdef CONFIG_INTERWORKING
6073 } else if (os_strcmp(buf, "FETCH_ANQP") == 0) {
6074 if (interworking_fetch_anqp(wpa_s) < 0)
6075 reply_len = -1;
6076 } else if (os_strcmp(buf, "STOP_FETCH_ANQP") == 0) {
6077 interworking_stop_fetch_anqp(wpa_s);
6078 } else if (os_strcmp(buf, "INTERWORKING_SELECT") == 0) {
6079 if (ctrl_interworking_select(wpa_s, NULL) < 0)
6080 reply_len = -1;
6081 } else if (os_strncmp(buf, "INTERWORKING_SELECT ", 20) == 0) {
6082 if (ctrl_interworking_select(wpa_s, buf + 20) < 0)
6083 reply_len = -1;
6084 } else if (os_strncmp(buf, "INTERWORKING_CONNECT ", 21) == 0) {
6085 if (ctrl_interworking_connect(wpa_s, buf + 21) < 0)
6086 reply_len = -1;
6087 } else if (os_strncmp(buf, "ANQP_GET ", 9) == 0) {
6088 if (get_anqp(wpa_s, buf + 9) < 0)
6089 reply_len = -1;
6090 } else if (os_strncmp(buf, "GAS_REQUEST ", 12) == 0) {
6091 if (gas_request(wpa_s, buf + 12) < 0)
6092 reply_len = -1;
6093 } else if (os_strncmp(buf, "GAS_RESPONSE_GET ", 17) == 0) {
6094 reply_len = gas_response_get(wpa_s, buf + 17, reply,
6095 reply_size);
6096 #endif /* CONFIG_INTERWORKING */
6097 #ifdef CONFIG_HS20
6098 } else if (os_strncmp(buf, "HS20_ANQP_GET ", 14) == 0) {
6099 if (get_hs20_anqp(wpa_s, buf + 14) < 0)
6100 reply_len = -1;
6101 } else if (os_strncmp(buf, "HS20_GET_NAI_HOME_REALM_LIST ", 29) == 0) {
6102 if (hs20_get_nai_home_realm_list(wpa_s, buf + 29) < 0)
6103 reply_len = -1;
6104 #endif /* CONFIG_HS20 */
6105 } else if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0)
6106 {
6107 if (wpa_supplicant_ctrl_iface_ctrl_rsp(
6108 wpa_s, buf + os_strlen(WPA_CTRL_RSP)))
6109 reply_len = -1;
6110 else {
6111 /*
6112 * Notify response from timeout to allow the control
6113 * interface response to be sent first.
6114 */
6115 eloop_register_timeout(0, 0, wpas_ctrl_eapol_response,
6116 wpa_s, NULL);
6117 }
6118 } else if (os_strcmp(buf, "RECONFIGURE") == 0) {
6119 if (wpa_supplicant_reload_configuration(wpa_s))
6120 reply_len = -1;
6121 } else if (os_strcmp(buf, "TERMINATE") == 0) {
6122 wpa_supplicant_terminate_proc(wpa_s->global);
6123 } else if (os_strncmp(buf, "BSSID ", 6) == 0) {
6124 if (wpa_supplicant_ctrl_iface_bssid(wpa_s, buf + 6))
6125 reply_len = -1;
6126 } else if (os_strncmp(buf, "BLACKLIST", 9) == 0) {
6127 reply_len = wpa_supplicant_ctrl_iface_blacklist(
6128 wpa_s, buf + 9, reply, reply_size);
6129 } else if (os_strncmp(buf, "LOG_LEVEL", 9) == 0) {
6130 reply_len = wpa_supplicant_ctrl_iface_log_level(
6131 wpa_s, buf + 9, reply, reply_size);
6132 } else if (os_strcmp(buf, "LIST_NETWORKS") == 0) {
6133 reply_len = wpa_supplicant_ctrl_iface_list_networks(
6134 wpa_s, reply, reply_size);
6135 } else if (os_strcmp(buf, "DISCONNECT") == 0) {
6136 #ifdef CONFIG_SME
6137 wpa_s->sme.prev_bssid_set = 0;
6138 #endif /* CONFIG_SME */
6139 wpa_s->reassociate = 0;
6140 wpa_s->disconnected = 1;
6141 wpa_supplicant_cancel_sched_scan(wpa_s);
6142 wpa_supplicant_cancel_scan(wpa_s);
6143 wpa_supplicant_deauthenticate(wpa_s,
6144 WLAN_REASON_DEAUTH_LEAVING);
6145 } else if (os_strcmp(buf, "SCAN") == 0) {
6146 wpas_ctrl_scan(wpa_s, NULL, reply, reply_size, &reply_len);
6147 } else if (os_strncmp(buf, "SCAN ", 5) == 0) {
6148 wpas_ctrl_scan(wpa_s, buf + 5, reply, reply_size, &reply_len);
6149 } else if (os_strcmp(buf, "SCAN_RESULTS") == 0) {
6150 reply_len = wpa_supplicant_ctrl_iface_scan_results(
6151 wpa_s, reply, reply_size);
6152 } else if (os_strncmp(buf, "SELECT_NETWORK ", 15) == 0) {
6153 if (wpa_supplicant_ctrl_iface_select_network(wpa_s, buf + 15))
6154 reply_len = -1;
6155 } else if (os_strncmp(buf, "ENABLE_NETWORK ", 15) == 0) {
6156 if (wpa_supplicant_ctrl_iface_enable_network(wpa_s, buf + 15))
6157 reply_len = -1;
6158 } else if (os_strncmp(buf, "DISABLE_NETWORK ", 16) == 0) {
6159 if (wpa_supplicant_ctrl_iface_disable_network(wpa_s, buf + 16))
6160 reply_len = -1;
6161 } else if (os_strcmp(buf, "ADD_NETWORK") == 0) {
6162 reply_len = wpa_supplicant_ctrl_iface_add_network(
6163 wpa_s, reply, reply_size);
6164 } else if (os_strncmp(buf, "REMOVE_NETWORK ", 15) == 0) {
6165 if (wpa_supplicant_ctrl_iface_remove_network(wpa_s, buf + 15))
6166 reply_len = -1;
6167 } else if (os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
6168 if (wpa_supplicant_ctrl_iface_set_network(wpa_s, buf + 12))
6169 reply_len = -1;
6170 } else if (os_strncmp(buf, "GET_NETWORK ", 12) == 0) {
6171 reply_len = wpa_supplicant_ctrl_iface_get_network(
6172 wpa_s, buf + 12, reply, reply_size);
6173 } else if (os_strcmp(buf, "LIST_CREDS") == 0) {
6174 reply_len = wpa_supplicant_ctrl_iface_list_creds(
6175 wpa_s, reply, reply_size);
6176 } else if (os_strcmp(buf, "ADD_CRED") == 0) {
6177 reply_len = wpa_supplicant_ctrl_iface_add_cred(
6178 wpa_s, reply, reply_size);
6179 } else if (os_strncmp(buf, "REMOVE_CRED ", 12) == 0) {
6180 if (wpa_supplicant_ctrl_iface_remove_cred(wpa_s, buf + 12))
6181 reply_len = -1;
6182 } else if (os_strncmp(buf, "SET_CRED ", 9) == 0) {
6183 if (wpa_supplicant_ctrl_iface_set_cred(wpa_s, buf + 9))
6184 reply_len = -1;
6185 #ifndef CONFIG_NO_CONFIG_WRITE
6186 } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
6187 if (wpa_supplicant_ctrl_iface_save_config(wpa_s))
6188 reply_len = -1;
6189 #endif /* CONFIG_NO_CONFIG_WRITE */
6190 } else if (os_strncmp(buf, "GET_CAPABILITY ", 15) == 0) {
6191 reply_len = wpa_supplicant_ctrl_iface_get_capability(
6192 wpa_s, buf + 15, reply, reply_size);
6193 } else if (os_strncmp(buf, "AP_SCAN ", 8) == 0) {
6194 if (wpa_supplicant_ctrl_iface_ap_scan(wpa_s, buf + 8))
6195 reply_len = -1;
6196 } else if (os_strncmp(buf, "SCAN_INTERVAL ", 14) == 0) {
6197 if (wpa_supplicant_ctrl_iface_scan_interval(wpa_s, buf + 14))
6198 reply_len = -1;
6199 } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
6200 reply_len = wpa_supplicant_global_iface_list(
6201 wpa_s->global, reply, reply_size);
6202 } else if (os_strcmp(buf, "INTERFACES") == 0) {
6203 reply_len = wpa_supplicant_global_iface_interfaces(
6204 wpa_s->global, reply, reply_size);
6205 } else if (os_strncmp(buf, "BSS ", 4) == 0) {
6206 reply_len = wpa_supplicant_ctrl_iface_bss(
6207 wpa_s, buf + 4, reply, reply_size);
6208 #ifdef CONFIG_AP
6209 } else if (os_strcmp(buf, "STA-FIRST") == 0) {
6210 reply_len = ap_ctrl_iface_sta_first(wpa_s, reply, reply_size);
6211 } else if (os_strncmp(buf, "STA ", 4) == 0) {
6212 reply_len = ap_ctrl_iface_sta(wpa_s, buf + 4, reply,
6213 reply_size);
6214 } else if (os_strncmp(buf, "STA-NEXT ", 9) == 0) {
6215 reply_len = ap_ctrl_iface_sta_next(wpa_s, buf + 9, reply,
6216 reply_size);
6217 } else if (os_strncmp(buf, "DEAUTHENTICATE ", 15) == 0) {
6218 if (ap_ctrl_iface_sta_deauthenticate(wpa_s, buf + 15))
6219 reply_len = -1;
6220 } else if (os_strncmp(buf, "DISASSOCIATE ", 13) == 0) {
6221 if (ap_ctrl_iface_sta_disassociate(wpa_s, buf + 13))
6222 reply_len = -1;
6223 } else if (os_strncmp(buf, "CHAN_SWITCH ", 12) == 0) {
6224 if (ap_ctrl_iface_chanswitch(wpa_s, buf + 12))
6225 reply_len = -1;
6226 #endif /* CONFIG_AP */
6227 } else if (os_strcmp(buf, "SUSPEND") == 0) {
6228 wpas_notify_suspend(wpa_s->global);
6229 } else if (os_strcmp(buf, "RESUME") == 0) {
6230 wpas_notify_resume(wpa_s->global);
6231 } else if (os_strcmp(buf, "DROP_SA") == 0) {
6232 wpa_supplicant_ctrl_iface_drop_sa(wpa_s);
6233 } else if (os_strncmp(buf, "ROAM ", 5) == 0) {
6234 if (wpa_supplicant_ctrl_iface_roam(wpa_s, buf + 5))
6235 reply_len = -1;
6236 } else if (os_strncmp(buf, "STA_AUTOCONNECT ", 16) == 0) {
6237 if (wpa_supplicant_ctrl_iface_sta_autoconnect(wpa_s, buf + 16))
6238 reply_len = -1;
6239 } else if (os_strncmp(buf, "BSS_EXPIRE_AGE ", 15) == 0) {
6240 if (wpa_supplicant_ctrl_iface_bss_expire_age(wpa_s, buf + 15))
6241 reply_len = -1;
6242 } else if (os_strncmp(buf, "BSS_EXPIRE_COUNT ", 17) == 0) {
6243 if (wpa_supplicant_ctrl_iface_bss_expire_count(wpa_s,
6244 buf + 17))
6245 reply_len = -1;
6246 } else if (os_strncmp(buf, "BSS_FLUSH ", 10) == 0) {
6247 if (wpa_supplicant_ctrl_iface_bss_flush(wpa_s, buf + 10))
6248 reply_len = -1;
6249 #ifdef CONFIG_TDLS
6250 } else if (os_strncmp(buf, "TDLS_DISCOVER ", 14) == 0) {
6251 if (wpa_supplicant_ctrl_iface_tdls_discover(wpa_s, buf + 14))
6252 reply_len = -1;
6253 } else if (os_strncmp(buf, "TDLS_SETUP ", 11) == 0) {
6254 if (wpa_supplicant_ctrl_iface_tdls_setup(wpa_s, buf + 11))
6255 reply_len = -1;
6256 } else if (os_strncmp(buf, "TDLS_TEARDOWN ", 14) == 0) {
6257 if (wpa_supplicant_ctrl_iface_tdls_teardown(wpa_s, buf + 14))
6258 reply_len = -1;
6259 #endif /* CONFIG_TDLS */
6260 } else if (os_strncmp(buf, "SIGNAL_POLL", 11) == 0) {
6261 reply_len = wpa_supplicant_signal_poll(wpa_s, reply,
6262 reply_size);
6263 } else if (os_strncmp(buf, "PKTCNT_POLL", 11) == 0) {
6264 reply_len = wpa_supplicant_pktcnt_poll(wpa_s, reply,
6265 reply_size);
6266 #ifdef CONFIG_AUTOSCAN
6267 } else if (os_strncmp(buf, "AUTOSCAN ", 9) == 0) {
6268 if (wpa_supplicant_ctrl_iface_autoscan(wpa_s, buf + 9))
6269 reply_len = -1;
6270 #endif /* CONFIG_AUTOSCAN */
6271 #ifdef ANDROID
6272 } else if (os_strncmp(buf, "DRIVER ", 7) == 0) {
6273 reply_len = wpa_supplicant_driver_cmd(wpa_s, buf + 7, reply,
6274 reply_size);
6275 #endif /* ANDROID */
6276 } else if (os_strcmp(buf, "REAUTHENTICATE") == 0) {
6277 pmksa_cache_clear_current(wpa_s->wpa);
6278 eapol_sm_request_reauth(wpa_s->eapol);
6279 #ifdef CONFIG_WNM
6280 } else if (os_strncmp(buf, "WNM_SLEEP ", 10) == 0) {
6281 if (wpas_ctrl_iface_wnm_sleep(wpa_s, buf + 10))
6282 reply_len = -1;
6283 } else if (os_strncmp(buf, "WNM_BSS_QUERY ", 10) == 0) {
6284 if (wpas_ctrl_iface_wnm_bss_query(wpa_s, buf + 10))
6285 reply_len = -1;
6286 #endif /* CONFIG_WNM */
6287 } else if (os_strcmp(buf, "FLUSH") == 0) {
6288 wpa_supplicant_ctrl_iface_flush(wpa_s);
6289 } else if (os_strncmp(buf, "RADIO_WORK ", 11) == 0) {
6290 reply_len = wpas_ctrl_radio_work(wpa_s, buf + 11, reply,
6291 reply_size);
6292 } else {
6293 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
6294 reply_len = 16;
6295 }
6296
6297 if (reply_len < 0) {
6298 os_memcpy(reply, "FAIL\n", 5);
6299 reply_len = 5;
6300 }
6301
6302 *resp_len = reply_len;
6303 return reply;
6304 }
6305
6306
6307 static int wpa_supplicant_global_iface_add(struct wpa_global *global,
6308 char *cmd)
6309 {
6310 struct wpa_interface iface;
6311 char *pos;
6312
6313 /*
6314 * <ifname>TAB<confname>TAB<driver>TAB<ctrl_interface>TAB<driver_param>
6315 * TAB<bridge_ifname>
6316 */
6317 wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_ADD '%s'", cmd);
6318
6319 os_memset(&iface, 0, sizeof(iface));
6320
6321 do {
6322 iface.ifname = pos = cmd;
6323 pos = os_strchr(pos, '\t');
6324 if (pos)
6325 *pos++ = '\0';
6326 if (iface.ifname[0] == '\0')
6327 return -1;
6328 if (pos == NULL)
6329 break;
6330
6331 iface.confname = pos;
6332 pos = os_strchr(pos, '\t');
6333 if (pos)
6334 *pos++ = '\0';
6335 if (iface.confname[0] == '\0')
6336 iface.confname = NULL;
6337 if (pos == NULL)
6338 break;
6339
6340 iface.driver = pos;
6341 pos = os_strchr(pos, '\t');
6342 if (pos)
6343 *pos++ = '\0';
6344 if (iface.driver[0] == '\0')
6345 iface.driver = NULL;
6346 if (pos == NULL)
6347 break;
6348
6349 iface.ctrl_interface = pos;
6350 pos = os_strchr(pos, '\t');
6351 if (pos)
6352 *pos++ = '\0';
6353 if (iface.ctrl_interface[0] == '\0')
6354 iface.ctrl_interface = NULL;
6355 if (pos == NULL)
6356 break;
6357
6358 iface.driver_param = pos;
6359 pos = os_strchr(pos, '\t');
6360 if (pos)
6361 *pos++ = '\0';
6362 if (iface.driver_param[0] == '\0')
6363 iface.driver_param = NULL;
6364 if (pos == NULL)
6365 break;
6366
6367 iface.bridge_ifname = pos;
6368 pos = os_strchr(pos, '\t');
6369 if (pos)
6370 *pos++ = '\0';
6371 if (iface.bridge_ifname[0] == '\0')
6372 iface.bridge_ifname = NULL;
6373 if (pos == NULL)
6374 break;
6375 } while (0);
6376
6377 if (wpa_supplicant_get_iface(global, iface.ifname))
6378 return -1;
6379
6380 return wpa_supplicant_add_iface(global, &iface) ? 0 : -1;
6381 }
6382
6383
6384 static int wpa_supplicant_global_iface_remove(struct wpa_global *global,
6385 char *cmd)
6386 {
6387 struct wpa_supplicant *wpa_s;
6388
6389 wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_REMOVE '%s'", cmd);
6390
6391 wpa_s = wpa_supplicant_get_iface(global, cmd);
6392 if (wpa_s == NULL)
6393 return -1;
6394 return wpa_supplicant_remove_iface(global, wpa_s, 0);
6395 }
6396
6397
6398 static void wpa_free_iface_info(struct wpa_interface_info *iface)
6399 {
6400 struct wpa_interface_info *prev;
6401
6402 while (iface) {
6403 prev = iface;
6404 iface = iface->next;
6405
6406 os_free(prev->ifname);
6407 os_free(prev->desc);
6408 os_free(prev);
6409 }
6410 }
6411
6412
6413 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
6414 char *buf, int len)
6415 {
6416 int i, res;
6417 struct wpa_interface_info *iface = NULL, *last = NULL, *tmp;
6418 char *pos, *end;
6419
6420 for (i = 0; wpa_drivers[i]; i++) {
6421 struct wpa_driver_ops *drv = wpa_drivers[i];
6422 if (drv->get_interfaces == NULL)
6423 continue;
6424 tmp = drv->get_interfaces(global->drv_priv[i]);
6425 if (tmp == NULL)
6426 continue;
6427
6428 if (last == NULL)
6429 iface = last = tmp;
6430 else
6431 last->next = tmp;
6432 while (last->next)
6433 last = last->next;
6434 }
6435
6436 pos = buf;
6437 end = buf + len;
6438 for (tmp = iface; tmp; tmp = tmp->next) {
6439 res = os_snprintf(pos, end - pos, "%s\t%s\t%s\n",
6440 tmp->drv_name, tmp->ifname,
6441 tmp->desc ? tmp->desc : "");
6442 if (res < 0 || res >= end - pos) {
6443 *pos = '\0';
6444 break;
6445 }
6446 pos += res;
6447 }
6448
6449 wpa_free_iface_info(iface);
6450
6451 return pos - buf;
6452 }
6453
6454
6455 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
6456 char *buf, int len)
6457 {
6458 int res;
6459 char *pos, *end;
6460 struct wpa_supplicant *wpa_s;
6461
6462 wpa_s = global->ifaces;
6463 pos = buf;
6464 end = buf + len;
6465
6466 while (wpa_s) {
6467 res = os_snprintf(pos, end - pos, "%s\n", wpa_s->ifname);
6468 if (res < 0 || res >= end - pos) {
6469 *pos = '\0';
6470 break;
6471 }
6472 pos += res;
6473 wpa_s = wpa_s->next;
6474 }
6475 return pos - buf;
6476 }
6477
6478
6479 static char * wpas_global_ctrl_iface_ifname(struct wpa_global *global,
6480 const char *ifname,
6481 char *cmd, size_t *resp_len)
6482 {
6483 struct wpa_supplicant *wpa_s;
6484
6485 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
6486 if (os_strcmp(ifname, wpa_s->ifname) == 0)
6487 break;
6488 }
6489
6490 if (wpa_s == NULL) {
6491 char *resp = os_strdup("FAIL-NO-IFNAME-MATCH\n");
6492 if (resp)
6493 *resp_len = os_strlen(resp);
6494 else
6495 *resp_len = 1;
6496 return resp;
6497 }
6498
6499 return wpa_supplicant_ctrl_iface_process(wpa_s, cmd, resp_len);
6500 }
6501
6502
6503 static char * wpas_global_ctrl_iface_redir_p2p(struct wpa_global *global,
6504 char *buf, size_t *resp_len)
6505 {
6506 #ifdef CONFIG_P2P
6507 static const char * cmd[] = {
6508 "LIST_NETWORKS",
6509 "SAVE_CONFIG",
6510 "P2P_FIND",
6511 "P2P_STOP_FIND",
6512 "P2P_LISTEN",
6513 "P2P_GROUP_ADD",
6514 "P2P_GET_PASSPHRASE",
6515 "P2P_SERVICE_UPDATE",
6516 "P2P_SERVICE_FLUSH",
6517 "P2P_FLUSH",
6518 "P2P_CANCEL",
6519 "P2P_PRESENCE_REQ",
6520 "P2P_EXT_LISTEN",
6521 NULL
6522 };
6523 static const char * prefix[] = {
6524 #ifdef ANDROID
6525 "DRIVER ",
6526 #endif /* ANDROID */
6527 "GET_NETWORK ",
6528 "REMOVE_NETWORK ",
6529 "SET ",
6530 "P2P_FIND ",
6531 "P2P_CONNECT ",
6532 "P2P_LISTEN ",
6533 "P2P_GROUP_REMOVE ",
6534 "P2P_GROUP_ADD ",
6535 "P2P_PROV_DISC ",
6536 "P2P_SERV_DISC_REQ ",
6537 "P2P_SERV_DISC_CANCEL_REQ ",
6538 "P2P_SERV_DISC_RESP ",
6539 "P2P_SERV_DISC_EXTERNAL ",
6540 "P2P_SERVICE_ADD ",
6541 "P2P_SERVICE_DEL ",
6542 "P2P_REJECT ",
6543 "P2P_INVITE ",
6544 "P2P_PEER ",
6545 "P2P_SET ",
6546 "P2P_UNAUTHORIZE ",
6547 "P2P_PRESENCE_REQ ",
6548 "P2P_EXT_LISTEN ",
6549 "P2P_REMOVE_CLIENT ",
6550 NULL
6551 };
6552 int found = 0;
6553 int i;
6554
6555 if (global->p2p_init_wpa_s == NULL)
6556 return NULL;
6557
6558 for (i = 0; !found && cmd[i]; i++) {
6559 if (os_strcmp(buf, cmd[i]) == 0)
6560 found = 1;
6561 }
6562
6563 for (i = 0; !found && prefix[i]; i++) {
6564 if (os_strncmp(buf, prefix[i], os_strlen(prefix[i])) == 0)
6565 found = 1;
6566 }
6567
6568 if (found)
6569 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
6570 buf, resp_len);
6571 #endif /* CONFIG_P2P */
6572 return NULL;
6573 }
6574
6575
6576 static char * wpas_global_ctrl_iface_redir_wfd(struct wpa_global *global,
6577 char *buf, size_t *resp_len)
6578 {
6579 #ifdef CONFIG_WIFI_DISPLAY
6580 if (global->p2p_init_wpa_s == NULL)
6581 return NULL;
6582 if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0 ||
6583 os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0)
6584 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
6585 buf, resp_len);
6586 #endif /* CONFIG_WIFI_DISPLAY */
6587 return NULL;
6588 }
6589
6590
6591 static char * wpas_global_ctrl_iface_redir(struct wpa_global *global,
6592 char *buf, size_t *resp_len)
6593 {
6594 char *ret;
6595
6596 ret = wpas_global_ctrl_iface_redir_p2p(global, buf, resp_len);
6597 if (ret)
6598 return ret;
6599
6600 ret = wpas_global_ctrl_iface_redir_wfd(global, buf, resp_len);
6601 if (ret)
6602 return ret;
6603
6604 return NULL;
6605 }
6606
6607
6608 static int wpas_global_ctrl_iface_set(struct wpa_global *global, char *cmd)
6609 {
6610 char *value;
6611
6612 value = os_strchr(cmd, ' ');
6613 if (value == NULL)
6614 return -1;
6615 *value++ = '\0';
6616
6617 wpa_printf(MSG_DEBUG, "GLOBAL_CTRL_IFACE SET '%s'='%s'", cmd, value);
6618
6619 #ifdef CONFIG_WIFI_DISPLAY
6620 if (os_strcasecmp(cmd, "wifi_display") == 0) {
6621 wifi_display_enable(global, !!atoi(value));
6622 return 0;
6623 }
6624 #endif /* CONFIG_WIFI_DISPLAY */
6625
6626 return -1;
6627 }
6628
6629
6630 #ifndef CONFIG_NO_CONFIG_WRITE
6631 static int wpas_global_ctrl_iface_save_config(struct wpa_global *global)
6632 {
6633 int ret = 0;
6634 struct wpa_supplicant *wpa_s;
6635
6636 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
6637 if (!wpa_s->conf->update_config) {
6638 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed to update configuration (update_config=0)");
6639 continue;
6640 }
6641
6642 if (wpa_config_write(wpa_s->confname, wpa_s->conf)) {
6643 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to update configuration");
6644 ret = 1;
6645 } else {
6646 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration updated");
6647 }
6648 }
6649
6650 return ret;
6651 }
6652 #endif /* CONFIG_NO_CONFIG_WRITE */
6653
6654
6655 static int wpas_global_ctrl_iface_status(struct wpa_global *global,
6656 char *buf, size_t buflen)
6657 {
6658 char *pos, *end;
6659 int ret;
6660 struct wpa_supplicant *wpa_s;
6661
6662 pos = buf;
6663 end = buf + buflen;
6664
6665 #ifdef CONFIG_P2P
6666 if (global->p2p && !global->p2p_disabled) {
6667 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
6668 "\n"
6669 "p2p_state=%s\n",
6670 MAC2STR(global->p2p_dev_addr),
6671 p2p_get_state_txt(global->p2p));
6672 if (ret < 0 || ret >= end - pos)
6673 return pos - buf;
6674 pos += ret;
6675 } else if (global->p2p) {
6676 ret = os_snprintf(pos, end - pos, "p2p_state=DISABLED\n");
6677 if (ret < 0 || ret >= end - pos)
6678 return pos - buf;
6679 pos += ret;
6680 }
6681 #endif /* CONFIG_P2P */
6682
6683 #ifdef CONFIG_WIFI_DISPLAY
6684 ret = os_snprintf(pos, end - pos, "wifi_display=%d\n",
6685 !!global->wifi_display);
6686 if (ret < 0 || ret >= end - pos)
6687 return pos - buf;
6688 pos += ret;
6689 #endif /* CONFIG_WIFI_DISPLAY */
6690
6691 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
6692 ret = os_snprintf(pos, end - pos, "ifname=%s\n"
6693 "address=" MACSTR "\n",
6694 wpa_s->ifname, MAC2STR(wpa_s->own_addr));
6695 if (ret < 0 || ret >= end - pos)
6696 return pos - buf;
6697 pos += ret;
6698 }
6699
6700 return pos - buf;
6701 }
6702
6703
6704 char * wpa_supplicant_global_ctrl_iface_process(struct wpa_global *global,
6705 char *buf, size_t *resp_len)
6706 {
6707 char *reply;
6708 const int reply_size = 2048;
6709 int reply_len;
6710 int level = MSG_DEBUG;
6711
6712 if (os_strncmp(buf, "IFNAME=", 7) == 0) {
6713 char *pos = os_strchr(buf + 7, ' ');
6714 if (pos) {
6715 *pos++ = '\0';
6716 return wpas_global_ctrl_iface_ifname(global,
6717 buf + 7, pos,
6718 resp_len);
6719 }
6720 }
6721
6722 reply = wpas_global_ctrl_iface_redir(global, buf, resp_len);
6723 if (reply)
6724 return reply;
6725
6726 if (os_strcmp(buf, "PING") == 0)
6727 level = MSG_EXCESSIVE;
6728 wpa_hexdump_ascii(level, "RX global ctrl_iface",
6729 (const u8 *) buf, os_strlen(buf));
6730
6731 reply = os_malloc(reply_size);
6732 if (reply == NULL) {
6733 *resp_len = 1;
6734 return NULL;
6735 }
6736
6737 os_memcpy(reply, "OK\n", 3);
6738 reply_len = 3;
6739
6740 if (os_strcmp(buf, "PING") == 0) {
6741 os_memcpy(reply, "PONG\n", 5);
6742 reply_len = 5;
6743 } else if (os_strncmp(buf, "INTERFACE_ADD ", 14) == 0) {
6744 if (wpa_supplicant_global_iface_add(global, buf + 14))
6745 reply_len = -1;
6746 } else if (os_strncmp(buf, "INTERFACE_REMOVE ", 17) == 0) {
6747 if (wpa_supplicant_global_iface_remove(global, buf + 17))
6748 reply_len = -1;
6749 } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
6750 reply_len = wpa_supplicant_global_iface_list(
6751 global, reply, reply_size);
6752 } else if (os_strcmp(buf, "INTERFACES") == 0) {
6753 reply_len = wpa_supplicant_global_iface_interfaces(
6754 global, reply, reply_size);
6755 } else if (os_strcmp(buf, "TERMINATE") == 0) {
6756 wpa_supplicant_terminate_proc(global);
6757 } else if (os_strcmp(buf, "SUSPEND") == 0) {
6758 wpas_notify_suspend(global);
6759 } else if (os_strcmp(buf, "RESUME") == 0) {
6760 wpas_notify_resume(global);
6761 } else if (os_strncmp(buf, "SET ", 4) == 0) {
6762 if (wpas_global_ctrl_iface_set(global, buf + 4))
6763 reply_len = -1;
6764 #ifndef CONFIG_NO_CONFIG_WRITE
6765 } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
6766 if (wpas_global_ctrl_iface_save_config(global))
6767 reply_len = -1;
6768 #endif /* CONFIG_NO_CONFIG_WRITE */
6769 } else if (os_strcmp(buf, "STATUS") == 0) {
6770 reply_len = wpas_global_ctrl_iface_status(global, reply,
6771 reply_size);
6772 } else {
6773 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
6774 reply_len = 16;
6775 }
6776
6777 if (reply_len < 0) {
6778 os_memcpy(reply, "FAIL\n", 5);
6779 reply_len = 5;
6780 }
6781
6782 *resp_len = reply_len;
6783 return reply;
6784 }