]> git.ipfire.org Git - thirdparty/hostap.git/blame - src/ap/drv_callbacks.c
tests: sigma_dut sta_scan ShortSSID
[thirdparty/hostap.git] / src / ap / drv_callbacks.c
CommitLineData
b5b969e9
JM
1/*
2 * hostapd / Callback functions for driver wrappers
94ddef3e 3 * Copyright (c) 2002-2013, Jouni Malinen <j@w1.fi>
b5b969e9 4 *
0f3d578e
JM
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
b5b969e9
JM
7 */
8
6226e38d 9#include "utils/includes.h"
b5b969e9 10
6226e38d 11#include "utils/common.h"
9c47f6a2 12#include "utils/eloop.h"
b5b969e9 13#include "radius/radius.h"
6e6e8c31 14#include "drivers/driver.h"
81f4f619 15#include "common/ieee802_11_defs.h"
c41a1095 16#include "common/ieee802_11_common.h"
3140803b 17#include "common/wpa_ctrl.h"
10ec6a5f 18#include "common/dpp.h"
898b6d58 19#include "common/sae.h"
41cac481 20#include "common/hw_features_common.h"
bbb921da 21#include "crypto/random.h"
ef796391 22#include "p2p/p2p.h"
54f489be 23#include "wps/wps.h"
037378ff 24#include "fst/fst.h"
d32d94db 25#include "wnm_ap.h"
6226e38d
JM
26#include "hostapd.h"
27#include "ieee802_11.h"
0603bcb7 28#include "ieee802_11_auth.h"
6226e38d
JM
29#include "sta_info.h"
30#include "accounting.h"
31#include "tkip_countermeasures.h"
6226e38d
JM
32#include "ieee802_1x.h"
33#include "wpa_auth.h"
6226e38d 34#include "wps_hostapd.h"
51e2a27a 35#include "ap_drv_ops.h"
8b06c1ed 36#include "ap_config.h"
fa61bff6 37#include "ap_mlme.h"
1b487b8b 38#include "hw_features.h"
e76da505 39#include "dfs.h"
9c47f6a2 40#include "beacon.h"
6332aaf3 41#include "mbo_ap.h"
9c2b8204 42#include "dpp_hostapd.h"
8b5ddda5 43#include "fils_hlp.h"
6ca4949a 44#include "neighbor_db.h"
8b5ddda5
JM
45
46
47#ifdef CONFIG_FILS
48void hostapd_notify_assoc_fils_finish(struct hostapd_data *hapd,
49 struct sta_info *sta)
50{
51 u16 reply_res = WLAN_STATUS_SUCCESS;
52 struct ieee802_11_elems elems;
53 u8 buf[IEEE80211_MAX_MMPDU_SIZE], *p = buf;
54 int new_assoc;
55
56 wpa_printf(MSG_DEBUG, "%s FILS: Finish association with " MACSTR,
57 __func__, MAC2STR(sta->addr));
58 eloop_cancel_timeout(fils_hlp_timeout, hapd, sta);
59 if (!sta->fils_pending_assoc_req)
60 return;
61
62 ieee802_11_parse_elems(sta->fils_pending_assoc_req,
63 sta->fils_pending_assoc_req_len, &elems, 0);
64 if (!elems.fils_session) {
65 wpa_printf(MSG_DEBUG, "%s failed to find FILS Session element",
66 __func__);
67 return;
68 }
69
70 p = hostapd_eid_assoc_fils_session(sta->wpa_sm, p,
71 elems.fils_session,
72 sta->fils_hlp_resp);
73
74 reply_res = hostapd_sta_assoc(hapd, sta->addr,
75 sta->fils_pending_assoc_is_reassoc,
76 WLAN_STATUS_SUCCESS,
77 buf, p - buf);
78 ap_sta_set_authorized(hapd, sta, 1);
79 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
80 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
81 sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE;
82 hostapd_set_sta_flags(hapd, sta);
83 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FILS);
84 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
85 hostapd_new_assoc_sta(hapd, sta, !new_assoc);
86 os_free(sta->fils_pending_assoc_req);
87 sta->fils_pending_assoc_req = NULL;
88 sta->fils_pending_assoc_req_len = 0;
89 wpabuf_free(sta->fils_hlp_resp);
90 sta->fils_hlp_resp = NULL;
91 wpabuf_free(sta->hlp_dhcp_discover);
92 sta->hlp_dhcp_discover = NULL;
93 fils_hlp_deinit(hapd);
94
95 /*
96 * Remove the station in case transmission of a success response fails
97 * (the STA was added associated to the driver) or if the station was
98 * previously added unassociated.
99 */
100 if (reply_res != WLAN_STATUS_SUCCESS || sta->added_unassoc) {
101 hostapd_drv_sta_remove(hapd, sta->addr);
102 sta->added_unassoc = 0;
103 }
104}
105#endif /* CONFIG_FILS */
b5b969e9
JM
106
107
b5b969e9 108int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
2bb20281 109 const u8 *req_ies, size_t req_ies_len, int reassoc)
b5b969e9
JM
110{
111 struct sta_info *sta;
112 int new_assoc, res;
c41a1095 113 struct ieee802_11_elems elems;
2bb20281
JM
114 const u8 *ie;
115 size_t ielen;
88b32a99
SP
116 u8 buf[sizeof(struct ieee80211_mgmt) + 1024];
117 u8 *p = buf;
08a74e6a 118 u16 reason = WLAN_REASON_UNSPECIFIED;
88b32a99 119 u16 status = WLAN_STATUS_SUCCESS;
94ddef3e 120 const u8 *p2p_dev_addr = NULL;
b5b969e9 121
68532a9c
JM
122 if (addr == NULL) {
123 /*
124 * This could potentially happen with unexpected event from the
125 * driver wrapper. This was seen at least in one case where the
126 * driver ended up being set to station mode while hostapd was
127 * running, so better make sure we stop processing such an
128 * event here.
129 */
48b06c17
JM
130 wpa_printf(MSG_DEBUG,
131 "hostapd_notif_assoc: Skip event with no address");
68532a9c
JM
132 return -1;
133 }
d86d66dc
JM
134
135 if (is_multicast_ether_addr(addr) ||
136 is_zero_ether_addr(addr) ||
137 os_memcmp(addr, hapd->own_addr, ETH_ALEN) == 0) {
138 /* Do not process any frames with unexpected/invalid SA so that
139 * we do not add any state for unexpected STA addresses or end
140 * up sending out frames to unexpected destination. */
141 wpa_printf(MSG_DEBUG, "%s: Invalid SA=" MACSTR
142 " in received indication - ignore this indication silently",
143 __func__, MAC2STR(addr));
144 return 0;
145 }
146
bbb921da 147 random_add_randomness(addr, ETH_ALEN);
68532a9c 148
b5b969e9
JM
149 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
150 HOSTAPD_LEVEL_INFO, "associated");
151
2bb20281 152 ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0);
c41a1095
JM
153 if (elems.wps_ie) {
154 ie = elems.wps_ie - 2;
155 ielen = elems.wps_ie_len + 2;
156 wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq");
157 } else if (elems.rsn_ie) {
158 ie = elems.rsn_ie - 2;
159 ielen = elems.rsn_ie_len + 2;
160 wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq");
161 } else if (elems.wpa_ie) {
162 ie = elems.wpa_ie - 2;
163 ielen = elems.wpa_ie_len + 2;
164 wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq");
a14896e8
JM
165#ifdef CONFIG_HS20
166 } else if (elems.osen) {
167 ie = elems.osen - 2;
168 ielen = elems.osen_len + 2;
169 wpa_printf(MSG_DEBUG, "STA included OSEN IE in (Re)AssocReq");
170#endif /* CONFIG_HS20 */
c41a1095
JM
171 } else {
172 ie = NULL;
173 ielen = 0;
48b06c17
JM
174 wpa_printf(MSG_DEBUG,
175 "STA did not include WPS/RSN/WPA IE in (Re)AssocReq");
c41a1095
JM
176 }
177
b5b969e9
JM
178 sta = ap_get_sta(hapd, addr);
179 if (sta) {
4331263b 180 ap_sta_no_session_timeout(hapd, sta);
b5b969e9 181 accounting_sta_stop(hapd, sta);
c72bd6d4
JM
182
183 /*
184 * Make sure that the previously registered inactivity timer
185 * will not remove the STA immediately.
186 */
187 sta->timeout_next = STA_NULLFUNC;
b5b969e9
JM
188 } else {
189 sta = ap_sta_add(hapd, addr);
8bd0fc0e
JM
190 if (sta == NULL) {
191 hostapd_drv_sta_disassoc(hapd, addr,
192 WLAN_REASON_DISASSOC_AP_BUSY);
b5b969e9 193 return -1;
8bd0fc0e 194 }
b5b969e9 195 }
17f6b900 196 sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
b5b969e9 197
bb4e19e3
SD
198 /*
199 * ACL configurations to the drivers (implementing AP SME and ACL
200 * offload) without hostapd's knowledge, can result in a disconnection
201 * though the driver accepts the connection. Skip the hostapd check for
202 * ACL if the driver supports ACL offload to avoid potentially
203 * conflicting ACL rules.
204 */
205 if (hapd->iface->drv_max_acl_mac_addrs == 0 &&
206 hostapd_check_acl(hapd, addr, NULL) != HOSTAPD_ACL_ACCEPT) {
0603bcb7
AN
207 wpa_printf(MSG_INFO, "STA " MACSTR " not allowed to connect",
208 MAC2STR(addr));
209 reason = WLAN_REASON_UNSPECIFIED;
210 goto fail;
211 }
212
b305c684
JM
213#ifdef CONFIG_P2P
214 if (elems.p2p) {
215 wpabuf_free(sta->p2p_ie);
2bb20281 216 sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
b305c684 217 P2P_IE_VENDOR_TYPE);
94ddef3e
JM
218 if (sta->p2p_ie)
219 p2p_dev_addr = p2p_get_go_dev_addr(sta->p2p_ie);
b305c684
JM
220 }
221#endif /* CONFIG_P2P */
222
9c47f6a2
PX
223#ifdef NEED_AP_MLME
224 if (elems.ht_capabilities &&
9c47f6a2
PX
225 (hapd->iface->conf->ht_capab &
226 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET)) {
227 struct ieee80211_ht_capabilities *ht_cap =
228 (struct ieee80211_ht_capabilities *)
229 elems.ht_capabilities;
230
231 if (le_to_host16(ht_cap->ht_capabilities_info) &
232 HT_CAP_INFO_40MHZ_INTOLERANT)
233 ht40_intolerant_add(hapd->iface, sta);
234 }
235#endif /* NEED_AP_MLME */
9c47f6a2 236
c551700f
KP
237#ifdef CONFIG_INTERWORKING
238 if (elems.ext_capab && elems.ext_capab_len > 4) {
239 if (elems.ext_capab[4] & 0x01)
240 sta->qos_map_enabled = 1;
241 }
242#endif /* CONFIG_INTERWORKING */
243
f403dcd6
JM
244#ifdef CONFIG_HS20
245 wpabuf_free(sta->hs20_ie);
246 if (elems.hs20 && elems.hs20_len > 4) {
247 sta->hs20_ie = wpabuf_alloc_copy(elems.hs20 + 4,
248 elems.hs20_len - 4);
249 } else
250 sta->hs20_ie = NULL;
67cca346
JM
251
252 wpabuf_free(sta->roaming_consortium);
253 if (elems.roaming_cons_sel)
254 sta->roaming_consortium = wpabuf_alloc_copy(
255 elems.roaming_cons_sel + 4,
256 elems.roaming_cons_sel_len - 4);
257 else
258 sta->roaming_consortium = NULL;
f403dcd6
JM
259#endif /* CONFIG_HS20 */
260
ae667c08
AN
261#ifdef CONFIG_FST
262 wpabuf_free(sta->mb_ies);
263 if (hapd->iface->fst)
264 sta->mb_ies = mb_ies_by_info(&elems.mb_ies);
265 else
266 sta->mb_ies = NULL;
267#endif /* CONFIG_FST */
268
6332aaf3
JM
269 mbo_ap_check_sta_assoc(hapd, sta, &elems);
270
adf0478e
JM
271 ap_copy_sta_supp_op_classes(sta, elems.supp_op_classes,
272 elems.supp_op_classes_len);
273
b5b969e9
JM
274 if (hapd->conf->wpa) {
275 if (ie == NULL || ielen == 0) {
633d4469 276#ifdef CONFIG_WPS
b5b969e9 277 if (hapd->conf->wps_state) {
48b06c17
JM
278 wpa_printf(MSG_DEBUG,
279 "STA did not include WPA/RSN IE in (Re)Association Request - possible WPS use");
b5b969e9
JM
280 sta->flags |= WLAN_STA_MAYBE_WPS;
281 goto skip_wpa_check;
282 }
633d4469 283#endif /* CONFIG_WPS */
b5b969e9
JM
284
285 wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
63dc0f9c
HW
286 reason = WLAN_REASON_INVALID_IE;
287 status = WLAN_STATUS_INVALID_IE;
288 goto fail;
b5b969e9 289 }
633d4469 290#ifdef CONFIG_WPS
b5b969e9
JM
291 if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
292 os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
17f6b900 293 struct wpabuf *wps;
48b06c17 294
b5b969e9 295 sta->flags |= WLAN_STA_WPS;
17f6b900
JM
296 wps = ieee802_11_vendor_ie_concat(ie, ielen,
297 WPS_IE_VENDOR_TYPE);
298 if (wps) {
299 if (wps_is_20(wps)) {
48b06c17
JM
300 wpa_printf(MSG_DEBUG,
301 "WPS: STA supports WPS 2.0");
17f6b900
JM
302 sta->flags |= WLAN_STA_WPS2;
303 }
304 wpabuf_free(wps);
305 }
b5b969e9
JM
306 goto skip_wpa_check;
307 }
633d4469 308#endif /* CONFIG_WPS */
b5b969e9
JM
309
310 if (sta->wpa_sm == NULL)
311 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
94ddef3e
JM
312 sta->addr,
313 p2p_dev_addr);
b5b969e9 314 if (sta->wpa_sm == NULL) {
48b06c17
JM
315 wpa_printf(MSG_ERROR,
316 "Failed to initialize WPA state machine");
b5b969e9
JM
317 return -1;
318 }
319 res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
2c129a1b 320 hapd->iface->freq,
88b32a99 321 ie, ielen,
d3516cad
JM
322 elems.rsnxe ? elems.rsnxe - 2 : NULL,
323 elems.rsnxe ? elems.rsnxe_len + 2 : 0,
09368515
JM
324 elems.mdie, elems.mdie_len,
325 elems.owe_dh, elems.owe_dh_len);
b5b969e9 326 if (res != WPA_IE_OK) {
48b06c17
JM
327 wpa_printf(MSG_DEBUG,
328 "WPA/RSN information element rejected? (res %u)",
329 res);
b5b969e9 330 wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
88b32a99 331 if (res == WPA_INVALID_GROUP) {
08a74e6a 332 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
88b32a99
SP
333 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
334 } else if (res == WPA_INVALID_PAIRWISE) {
08a74e6a 335 reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
88b32a99
SP
336 status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
337 } else if (res == WPA_INVALID_AKMP) {
08a74e6a 338 reason = WLAN_REASON_AKMP_NOT_VALID;
88b32a99 339 status = WLAN_STATUS_AKMP_NOT_VALID;
7d2ed8ba 340 } else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION) {
08a74e6a 341 reason = WLAN_REASON_INVALID_IE;
88b32a99
SP
342 status = WLAN_STATUS_INVALID_IE;
343 } else if (res == WPA_INVALID_MGMT_GROUP_CIPHER) {
feba5848
JM
344 reason = WLAN_REASON_CIPHER_SUITE_REJECTED;
345 status = WLAN_STATUS_CIPHER_REJECTED_PER_POLICY;
93ba13bc
JM
346 } else if (res == WPA_INVALID_PMKID) {
347 reason = WLAN_REASON_INVALID_PMKID;
348 status = WLAN_STATUS_INVALID_PMKID;
7d2ed8ba 349 } else {
08a74e6a 350 reason = WLAN_REASON_INVALID_IE;
88b32a99
SP
351 status = WLAN_STATUS_INVALID_IE;
352 }
08a74e6a 353 goto fail;
b5b969e9 354 }
7d2ed8ba 355
edb28006
AK
356 if ((sta->flags & (WLAN_STA_ASSOC | WLAN_STA_MFP)) ==
357 (WLAN_STA_ASSOC | WLAN_STA_MFP) &&
358 !sta->sa_query_timed_out &&
7d9c0cd3
MP
359 sta->sa_query_count > 0)
360 ap_check_sa_query_timeout(hapd, sta);
edb28006
AK
361 if ((sta->flags & (WLAN_STA_ASSOC | WLAN_STA_MFP)) ==
362 (WLAN_STA_ASSOC | WLAN_STA_MFP) &&
363 !sta->sa_query_timed_out &&
7d9c0cd3
MP
364 (sta->auth_alg != WLAN_AUTH_FT)) {
365 /*
366 * STA has already been associated with MFP and SA
367 * Query timeout has not been reached. Reject the
368 * association attempt temporarily and start SA Query,
369 * if one is not pending.
370 */
371
372 if (sta->sa_query_count == 0)
373 ap_sta_start_sa_query(hapd, sta);
374
7d9c0cd3
MP
375 status = WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY;
376
377 p = hostapd_eid_assoc_comeback_time(hapd, sta, p);
378
379 hostapd_sta_assoc(hapd, addr, reassoc, status, buf,
380 p - buf);
7d9c0cd3
MP
381 return 0;
382 }
383
384 if (wpa_auth_uses_mfp(sta->wpa_sm))
385 sta->flags |= WLAN_STA_MFP;
386 else
387 sta->flags &= ~WLAN_STA_MFP;
7d9c0cd3 388
4ec1fd8e 389#ifdef CONFIG_IEEE80211R_AP
88b32a99
SP
390 if (sta->auth_alg == WLAN_AUTH_FT) {
391 status = wpa_ft_validate_reassoc(sta->wpa_sm, req_ies,
392 req_ies_len);
393 if (status != WLAN_STATUS_SUCCESS) {
394 if (status == WLAN_STATUS_INVALID_PMKID)
395 reason = WLAN_REASON_INVALID_IE;
396 if (status == WLAN_STATUS_INVALID_MDIE)
397 reason = WLAN_REASON_INVALID_IE;
398 if (status == WLAN_STATUS_INVALID_FTIE)
399 reason = WLAN_REASON_INVALID_IE;
400 goto fail;
401 }
402 }
4ec1fd8e 403#endif /* CONFIG_IEEE80211R_AP */
898b6d58
JM
404#ifdef CONFIG_SAE
405 if (hapd->conf->sae_pwe == 2 &&
406 sta->auth_alg == WLAN_AUTH_SAE &&
407 sta->sae && sta->sae->tmp && !sta->sae->tmp->h2e &&
408 elems.rsnxe && elems.rsnxe_len >= 1 &&
409 (elems.rsnxe[0] & BIT(WLAN_RSNX_CAPAB_SAE_H2E))) {
410 wpa_printf(MSG_INFO, "SAE: " MACSTR
411 " indicates support for SAE H2E, but did not use it",
412 MAC2STR(sta->addr));
413 status = WLAN_STATUS_UNSPECIFIED_FAILURE;
414 reason = WLAN_REASON_UNSPECIFIED;
415 goto fail;
416 }
417#endif /* CONFIG_SAE */
a9aca28b 418 } else if (hapd->conf->wps_state) {
633d4469 419#ifdef CONFIG_WPS
17f6b900 420 struct wpabuf *wps;
48b06c17 421
2bb20281
JM
422 if (req_ies)
423 wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
fa15d405
JM
424 WPS_IE_VENDOR_TYPE);
425 else
426 wps = NULL;
54f489be 427#ifdef CONFIG_WPS_STRICT
fa15d405 428 if (wps && wps_validate_assoc_req(wps) < 0) {
08a74e6a 429 reason = WLAN_REASON_INVALID_IE;
88b32a99 430 status = WLAN_STATUS_INVALID_IE;
fa15d405 431 wpabuf_free(wps);
08a74e6a 432 goto fail;
54f489be 433 }
54f489be 434#endif /* CONFIG_WPS_STRICT */
fa15d405 435 if (wps) {
a9aca28b 436 sta->flags |= WLAN_STA_WPS;
fa15d405 437 if (wps_is_20(wps)) {
48b06c17
JM
438 wpa_printf(MSG_DEBUG,
439 "WPS: STA supports WPS 2.0");
17f6b900
JM
440 sta->flags |= WLAN_STA_WPS2;
441 }
a9aca28b
JM
442 } else
443 sta->flags |= WLAN_STA_MAYBE_WPS;
17f6b900 444 wpabuf_free(wps);
633d4469 445#endif /* CONFIG_WPS */
a14896e8
JM
446#ifdef CONFIG_HS20
447 } else if (hapd->conf->osen) {
448 if (elems.osen == NULL) {
449 hostapd_logger(
450 hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
451 HOSTAPD_LEVEL_INFO,
452 "No HS 2.0 OSEN element in association request");
453 return WLAN_STATUS_INVALID_IE;
454 }
455
456 wpa_printf(MSG_DEBUG, "HS 2.0: OSEN association");
457 if (sta->wpa_sm == NULL)
458 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
459 sta->addr, NULL);
460 if (sta->wpa_sm == NULL) {
48b06c17
JM
461 wpa_printf(MSG_WARNING,
462 "Failed to initialize WPA state machine");
a14896e8
JM
463 return WLAN_STATUS_UNSPECIFIED_FAILURE;
464 }
465 if (wpa_validate_osen(hapd->wpa_auth, sta->wpa_sm,
466 elems.osen - 2, elems.osen_len + 2) < 0)
467 return WLAN_STATUS_INVALID_IE;
468#endif /* CONFIG_HS20 */
b5b969e9 469 }
7b26238d
JM
470#ifdef CONFIG_WPS
471skip_wpa_check:
472#endif /* CONFIG_WPS */
4c572281
JM
473
474#ifdef CONFIG_MBO
475 if (hapd->conf->mbo_enabled && (hapd->conf->wpa & 2) &&
476 elems.mbo && sta->cell_capa && !(sta->flags & WLAN_STA_MFP) &&
477 hapd->conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) {
478 wpa_printf(MSG_INFO,
479 "MBO: Reject WPA2 association without PMF");
480 return WLAN_STATUS_UNSPECIFIED_FAILURE;
481 }
482#endif /* CONFIG_MBO */
483
4ec1fd8e 484#ifdef CONFIG_IEEE80211R_AP
88b32a99 485 p = wpa_sm_write_assoc_resp_ies(sta->wpa_sm, buf, sizeof(buf),
b7366a94
JM
486 sta->auth_alg, req_ies, req_ies_len,
487 !elems.rsnxe);
2cf36d60
JM
488 if (!p) {
489 wpa_printf(MSG_DEBUG, "FT: Failed to write AssocResp IEs");
490 return WLAN_STATUS_UNSPECIFIED_FAILURE;
491 }
cc20edc9 492#endif /* CONFIG_IEEE80211R_AP */
88b32a99 493
fa61bff6
JM
494#ifdef CONFIG_FILS
495 if (sta->auth_alg == WLAN_AUTH_FILS_SK ||
496 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS ||
497 sta->auth_alg == WLAN_AUTH_FILS_PK) {
8b5ddda5
JM
498 int delay_assoc = 0;
499
3de1566d
PX
500 if (!req_ies)
501 return WLAN_STATUS_UNSPECIFIED_FAILURE;
502
fa61bff6
JM
503 if (!wpa_fils_validate_fils_session(sta->wpa_sm, req_ies,
504 req_ies_len,
505 sta->fils_session)) {
506 wpa_printf(MSG_DEBUG,
507 "FILS: Session validation failed");
508 return WLAN_STATUS_UNSPECIFIED_FAILURE;
509 }
510
511 res = wpa_fils_validate_key_confirm(sta->wpa_sm, req_ies,
512 req_ies_len);
513 if (res < 0) {
514 wpa_printf(MSG_DEBUG,
515 "FILS: Key Confirm validation failed");
516 return WLAN_STATUS_UNSPECIFIED_FAILURE;
517 }
518
8b5ddda5 519 if (fils_process_hlp(hapd, sta, req_ies, req_ies_len) > 0) {
fa61bff6 520 wpa_printf(MSG_DEBUG,
8b5ddda5
JM
521 "FILS: Delaying Assoc Response (HLP)");
522 delay_assoc = 1;
523 } else {
524 wpa_printf(MSG_DEBUG,
525 "FILS: Going ahead with Assoc Response (no HLP)");
526 }
527
528 if (sta) {
529 wpa_printf(MSG_DEBUG, "FILS: HLP callback cleanup");
530 eloop_cancel_timeout(fils_hlp_timeout, hapd, sta);
531 os_free(sta->fils_pending_assoc_req);
532 sta->fils_pending_assoc_req = NULL;
533 sta->fils_pending_assoc_req_len = 0;
534 wpabuf_free(sta->fils_hlp_resp);
535 sta->fils_hlp_resp = NULL;
536 sta->fils_drv_assoc_finish = 0;
fa61bff6
JM
537 }
538
8b5ddda5
JM
539 if (sta && delay_assoc && status == WLAN_STATUS_SUCCESS) {
540 u8 *req_tmp;
541
542 req_tmp = os_malloc(req_ies_len);
543 if (!req_tmp) {
544 wpa_printf(MSG_DEBUG,
545 "FILS: buffer allocation failed for assoc req");
546 goto fail;
547 }
548 os_memcpy(req_tmp, req_ies, req_ies_len);
549 sta->fils_pending_assoc_req = req_tmp;
550 sta->fils_pending_assoc_req_len = req_ies_len;
551 sta->fils_pending_assoc_is_reassoc = reassoc;
552 sta->fils_drv_assoc_finish = 1;
553 wpa_printf(MSG_DEBUG,
554 "FILS: Waiting for HLP processing before sending (Re)Association Response frame to "
555 MACSTR, MAC2STR(sta->addr));
556 eloop_register_timeout(
557 0, hapd->conf->fils_hlp_wait_time * 1024,
558 fils_hlp_timeout, hapd, sta);
559 return 0;
560 }
fa61bff6 561 p = hostapd_eid_assoc_fils_session(sta->wpa_sm, p,
8b5ddda5
JM
562 elems.fils_session,
563 sta->fils_hlp_resp);
fa61bff6
JM
564 wpa_hexdump(MSG_DEBUG, "FILS Assoc Resp BUF (IEs)",
565 buf, p - buf);
566 }
567#endif /* CONFIG_FILS */
568
33c8bbd8
AKP
569#ifdef CONFIG_OWE
570 if ((hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_OWE) &&
571 wpa_auth_sta_key_mgmt(sta->wpa_sm) == WPA_KEY_MGMT_OWE &&
572 elems.owe_dh) {
04ded82e
JM
573 u8 *npos;
574
79ce2d51
AP
575 npos = owe_assoc_req_process(hapd, sta,
576 elems.owe_dh, elems.owe_dh_len,
577 p, sizeof(buf) - (p - buf),
e7d8842e 578 &status);
a4668c68
AP
579 if (npos)
580 p = npos;
e7d8842e 581
a4668c68 582 if (!npos &&
e7d8842e 583 status == WLAN_STATUS_FINITE_CYCLIC_GROUP_NOT_SUPPORTED) {
a4668c68
AP
584 hostapd_sta_assoc(hapd, addr, reassoc, status, buf,
585 p - buf);
586 return 0;
587 }
588
e7d8842e 589 if (!npos || status != WLAN_STATUS_SUCCESS)
33c8bbd8
AKP
590 goto fail;
591 }
592#endif /* CONFIG_OWE */
593
10ec6a5f
JM
594#ifdef CONFIG_DPP2
595 dpp_pfs_free(sta->dpp_pfs);
596 sta->dpp_pfs = NULL;
597
598 if ((hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_DPP) &&
599 hapd->conf->dpp_netaccesskey && sta->wpa_sm &&
600 wpa_auth_sta_key_mgmt(sta->wpa_sm) == WPA_KEY_MGMT_DPP &&
601 elems.owe_dh) {
602 sta->dpp_pfs = dpp_pfs_init(
603 wpabuf_head(hapd->conf->dpp_netaccesskey),
604 wpabuf_len(hapd->conf->dpp_netaccesskey));
605 if (!sta->dpp_pfs) {
606 wpa_printf(MSG_DEBUG,
607 "DPP: Could not initialize PFS");
608 /* Try to continue without PFS */
609 goto pfs_fail;
610 }
611
612 if (dpp_pfs_process(sta->dpp_pfs, elems.owe_dh,
613 elems.owe_dh_len) < 0) {
614 dpp_pfs_free(sta->dpp_pfs);
615 sta->dpp_pfs = NULL;
616 reason = WLAN_REASON_UNSPECIFIED;
617 goto fail;
618 }
619 }
620
621 wpa_auth_set_dpp_z(sta->wpa_sm, sta->dpp_pfs ?
622 sta->dpp_pfs->secret : NULL);
623 pfs_fail:
624#endif /* CONFIG_DPP2 */
625
fae7e64a
O
626 if (elems.rrm_enabled &&
627 elems.rrm_enabled_len >= sizeof(sta->rrm_enabled_capa))
628 os_memcpy(sta->rrm_enabled_capa, elems.rrm_enabled,
629 sizeof(sta->rrm_enabled_capa));
630
33c8bbd8 631#if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_FILS) || defined(CONFIG_OWE)
88b32a99 632 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
e4474c1c 633
cc20edc9
JM
634 if (sta->auth_alg == WLAN_AUTH_FT ||
635 sta->auth_alg == WLAN_AUTH_FILS_SK ||
636 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS ||
637 sta->auth_alg == WLAN_AUTH_FILS_PK)
e4474c1c 638 ap_sta_set_authorized(hapd, sta, 1);
cc20edc9 639#else /* CONFIG_IEEE80211R_AP || CONFIG_FILS */
88b32a99
SP
640 /* Keep compiler silent about unused variables */
641 if (status) {
642 }
cc20edc9 643#endif /* CONFIG_IEEE80211R_AP || CONFIG_FILS */
88b32a99 644
b5b969e9
JM
645 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
646 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
3578e665 647 sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE;
88b32a99 648
e4474c1c
DPS
649 hostapd_set_sta_flags(hapd, sta);
650
88b32a99
SP
651 if (reassoc && (sta->auth_alg == WLAN_AUTH_FT))
652 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FT);
957bff83
JM
653#ifdef CONFIG_FILS
654 else if (sta->auth_alg == WLAN_AUTH_FILS_SK ||
655 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS ||
656 sta->auth_alg == WLAN_AUTH_FILS_PK)
657 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FILS);
658#endif /* CONFIG_FILS */
88b32a99
SP
659 else
660 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
b5b969e9
JM
661
662 hostapd_new_assoc_sta(hapd, sta, !new_assoc);
663
664 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
665
ef796391 666#ifdef CONFIG_P2P
99c01af9
JM
667 if (req_ies) {
668 p2p_group_notif_assoc(hapd->p2p_group, sta->addr,
669 req_ies, req_ies_len);
670 }
ef796391
JM
671#endif /* CONFIG_P2P */
672
b5b969e9 673 return 0;
08a74e6a
JM
674
675fail:
4ec1fd8e 676#ifdef CONFIG_IEEE80211R_AP
88b32a99 677 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
4ec1fd8e 678#endif /* CONFIG_IEEE80211R_AP */
08a74e6a
JM
679 hostapd_drv_sta_disassoc(hapd, sta->addr, reason);
680 ap_free_sta(hapd, sta);
681 return -1;
b5b969e9
JM
682}
683
684
685void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
686{
687 struct sta_info *sta;
688
83e843e8
JM
689 if (addr == NULL) {
690 /*
691 * This could potentially happen with unexpected event from the
692 * driver wrapper. This was seen at least in one case where the
693 * driver ended up reporting a station mode event while hostapd
694 * was running, so better make sure we stop processing such an
695 * event here.
696 */
48b06c17
JM
697 wpa_printf(MSG_DEBUG,
698 "hostapd_notif_disassoc: Skip event with no address");
1f4c7b6b 699 return;
83e843e8
JM
700 }
701
b5b969e9
JM
702 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
703 HOSTAPD_LEVEL_INFO, "disassociated");
704
705 sta = ap_get_sta(hapd, addr);
706 if (sta == NULL) {
48b06c17
JM
707 wpa_printf(MSG_DEBUG,
708 "Disassociation notification for unknown STA "
709 MACSTR, MAC2STR(addr));
b5b969e9
JM
710 return;
711 }
712
ae055af4 713 ap_sta_set_authorized(hapd, sta, 0);
b5b969e9
JM
714 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
715 wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
716 sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
717 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
718 ap_free_sta(hapd, sta);
719}
720
721
0d7e5a3a
JB
722void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr)
723{
724 struct sta_info *sta = ap_get_sta(hapd, addr);
725
d58c3bd8 726 if (!sta || !hapd->conf->disassoc_low_ack || sta->agreed_to_steer)
0d7e5a3a
JB
727 return;
728
729 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
48b06c17
JM
730 HOSTAPD_LEVEL_INFO,
731 "disconnected due to excessive missing ACKs");
0d7e5a3a 732 hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK);
5f99d962 733 ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK);
0d7e5a3a
JB
734}
735
736
ec2b5173
T
737void hostapd_event_sta_opmode_changed(struct hostapd_data *hapd, const u8 *addr,
738 enum smps_mode smps_mode,
739 enum chan_width chan_width, u8 rx_nss)
740{
741 struct sta_info *sta = ap_get_sta(hapd, addr);
742 const char *txt;
743
744 if (!sta)
745 return;
746
747 switch (smps_mode) {
748 case SMPS_AUTOMATIC:
749 txt = "automatic";
750 break;
751 case SMPS_OFF:
752 txt = "off";
753 break;
754 case SMPS_DYNAMIC:
755 txt = "dynamic";
756 break;
757 case SMPS_STATIC:
758 txt = "static";
759 break;
760 default:
761 txt = NULL;
762 break;
763 }
764 if (txt) {
765 wpa_msg(hapd->msg_ctx, MSG_INFO, STA_OPMODE_SMPS_MODE_CHANGED
766 MACSTR " %s", MAC2STR(addr), txt);
767 }
768
769 switch (chan_width) {
770 case CHAN_WIDTH_20_NOHT:
771 txt = "20(no-HT)";
772 break;
773 case CHAN_WIDTH_20:
774 txt = "20";
775 break;
776 case CHAN_WIDTH_40:
777 txt = "40";
778 break;
779 case CHAN_WIDTH_80:
780 txt = "80";
781 break;
782 case CHAN_WIDTH_80P80:
783 txt = "80+80";
784 break;
785 case CHAN_WIDTH_160:
786 txt = "160";
787 break;
788 default:
789 txt = NULL;
790 break;
791 }
792 if (txt) {
793 wpa_msg(hapd->msg_ctx, MSG_INFO, STA_OPMODE_MAX_BW_CHANGED
794 MACSTR " %s", MAC2STR(addr), txt);
795 }
796
797 if (rx_nss != 0xff) {
798 wpa_msg(hapd->msg_ctx, MSG_INFO, STA_OPMODE_N_SS_CHANGED
799 MACSTR " %d", MAC2STR(addr), rx_nss);
800 }
801}
802
803
1b487b8b 804void hostapd_event_ch_switch(struct hostapd_data *hapd, int freq, int ht,
95f556f3
OD
805 int offset, int width, int cf1, int cf2,
806 int finished)
1b487b8b 807{
f91e68e9
MV
808 /* TODO: If OCV is enabled deauth STAs that don't perform a SA Query */
809
c7803a02 810#ifdef NEED_AP_MLME
d308a44f
LC
811 int channel, chwidth, is_dfs;
812 u8 seg0_idx = 0, seg1_idx = 0;
6ca4949a 813 size_t i;
1b487b8b
TP
814
815 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
2f06bcb3 816 HOSTAPD_LEVEL_INFO,
95f556f3
OD
817 "driver %s channel switch: freq=%d, ht=%d, vht_ch=0x%x, offset=%d, width=%d (%s), cf1=%d, cf2=%d",
818 finished ? "had" : "starting",
bda9c085
SM
819 freq, ht, hapd->iconf->ch_switch_vht_config, offset,
820 width, channel_width_to_string(width), cf1, cf2);
1b487b8b 821
c3805fb6
JM
822 if (!hapd->iface->current_mode) {
823 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
824 HOSTAPD_LEVEL_WARNING,
825 "ignore channel switch since the interface is not yet ready");
826 return;
827 }
828
1b487b8b
TP
829 hapd->iface->freq = freq;
830
831 channel = hostapd_hw_get_channel(hapd, freq);
832 if (!channel) {
833 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
48b06c17
JM
834 HOSTAPD_LEVEL_WARNING,
835 "driver switched to bad channel!");
1b487b8b
TP
836 return;
837 }
838
8d1fdde7
JD
839 switch (width) {
840 case CHAN_WIDTH_80:
464dcfd0 841 chwidth = CHANWIDTH_80MHZ;
8d1fdde7
JD
842 break;
843 case CHAN_WIDTH_80P80:
464dcfd0 844 chwidth = CHANWIDTH_80P80MHZ;
8d1fdde7
JD
845 break;
846 case CHAN_WIDTH_160:
464dcfd0 847 chwidth = CHANWIDTH_160MHZ;
8d1fdde7
JD
848 break;
849 case CHAN_WIDTH_20_NOHT:
850 case CHAN_WIDTH_20:
851 case CHAN_WIDTH_40:
852 default:
464dcfd0 853 chwidth = CHANWIDTH_USE_HT;
8d1fdde7
JD
854 break;
855 }
856
857 switch (hapd->iface->current_mode->mode) {
858 case HOSTAPD_MODE_IEEE80211A:
859 if (cf1 > 5000)
860 seg0_idx = (cf1 - 5000) / 5;
861 if (cf2 > 5000)
862 seg1_idx = (cf2 - 5000) / 5;
863 break;
864 default:
d308a44f
LC
865 ieee80211_freq_to_chan(cf1, &seg0_idx);
866 ieee80211_freq_to_chan(cf2, &seg1_idx);
8d1fdde7
JD
867 break;
868 }
869
1b487b8b
TP
870 hapd->iconf->channel = channel;
871 hapd->iconf->ieee80211n = ht;
bda9c085 872 if (!ht) {
5de74818 873 hapd->iconf->ieee80211ac = 0;
bda9c085
SM
874 } else if (hapd->iconf->ch_switch_vht_config) {
875 /* CHAN_SWITCH VHT config */
876 if (hapd->iconf->ch_switch_vht_config &
877 CH_SWITCH_VHT_ENABLED)
878 hapd->iconf->ieee80211ac = 1;
879 else if (hapd->iconf->ch_switch_vht_config &
880 CH_SWITCH_VHT_DISABLED)
881 hapd->iconf->ieee80211ac = 0;
882 }
883 hapd->iconf->ch_switch_vht_config = 0;
884
1b487b8b 885 hapd->iconf->secondary_channel = offset;
c6b7ac07
JC
886 hostapd_set_oper_chwidth(hapd->iconf, chwidth);
887 hostapd_set_oper_centr_freq_seg0_idx(hapd->iconf, seg0_idx);
888 hostapd_set_oper_centr_freq_seg1_idx(hapd->iconf, seg1_idx);
bf281c12 889
d239ab39 890 is_dfs = ieee80211_is_dfs(freq, hapd->iface->hw_features,
891 hapd->iface->num_hw_features);
1e2aaffb 892
95f556f3
OD
893 wpa_msg(hapd->msg_ctx, MSG_INFO,
894 "%sfreq=%d ht_enabled=%d ch_offset=%d ch_width=%s cf1=%d cf2=%d dfs=%d",
895 finished ? WPA_EVENT_CHANNEL_SWITCH :
896 WPA_EVENT_CHANNEL_SWITCH_STARTED,
897 freq, ht, offset, channel_width_to_string(width),
898 cf1, cf2, is_dfs);
899 if (!finished)
900 return;
901
6782b684
MK
902 if (hapd->csa_in_progress &&
903 freq == hapd->cs_freq_params.freq) {
bf281c12 904 hostapd_cleanup_cs_params(hapd);
6782b684 905 ieee802_11_set_beacon(hapd);
bf281c12 906
1e2aaffb
AK
907 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED
908 "freq=%d dfs=%d", freq, is_dfs);
909 } else if (hapd->iface->drv_flags & WPA_DRIVER_FLAGS_DFS_OFFLOAD) {
910 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED
911 "freq=%d dfs=%d", freq, is_dfs);
bf281c12 912 }
6ca4949a
MT
913
914 for (i = 0; i < hapd->iface->num_bss; i++)
915 hostapd_neighbor_set_own_report(hapd->iface->bss[i]);
c7803a02 916#endif /* NEED_AP_MLME */
1b487b8b
TP
917}
918
919
3140803b
RM
920void hostapd_event_connect_failed_reason(struct hostapd_data *hapd,
921 const u8 *addr, int reason_code)
922{
923 switch (reason_code) {
924 case MAX_CLIENT_REACHED:
925 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_MAX_STA MACSTR,
926 MAC2STR(addr));
927 break;
928 case BLOCKED_CLIENT:
929 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_BLOCKED_STA MACSTR,
930 MAC2STR(addr));
931 break;
932 }
933}
934
935
16689c7c 936#ifdef CONFIG_ACS
d9909717
TB
937void hostapd_acs_channel_selected(struct hostapd_data *hapd,
938 struct acs_selected_channels *acs_res)
16689c7c 939{
3784c058 940 int ret, i;
e1d00d47 941 int err = 0;
41cac481 942 struct hostapd_channel_data *pri_chan;
16689c7c
PX
943
944 if (hapd->iconf->channel) {
945 wpa_printf(MSG_INFO, "ACS: Channel was already set to %d",
946 hapd->iconf->channel);
947 return;
948 }
949
59e33b4a
AB
950 hapd->iface->freq = acs_res->pri_freq;
951
3784c058
PX
952 if (!hapd->iface->current_mode) {
953 for (i = 0; i < hapd->iface->num_hw_features; i++) {
954 struct hostapd_hw_modes *mode =
955 &hapd->iface->hw_features[i];
956
957 if (mode->mode == acs_res->hw_mode) {
59e33b4a
AB
958 if (hapd->iface->freq > 0 &&
959 !hw_get_chan(mode->mode,
960 hapd->iface->freq,
961 hapd->iface->hw_features,
962 hapd->iface->num_hw_features))
963 continue;
3784c058
PX
964 hapd->iface->current_mode = mode;
965 break;
966 }
967 }
968 if (!hapd->iface->current_mode) {
969 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
970 HOSTAPD_LEVEL_WARNING,
971 "driver selected to bad hw_mode");
e1d00d47
PX
972 err = 1;
973 goto out;
3784c058
PX
974 }
975 }
976
41cac481 977 if (!acs_res->pri_freq) {
16689c7c
PX
978 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
979 HOSTAPD_LEVEL_WARNING,
980 "driver switched to bad channel");
e1d00d47
PX
981 err = 1;
982 goto out;
16689c7c 983 }
41cac481
AB
984 pri_chan = hw_get_channel_freq(hapd->iface->current_mode->mode,
985 acs_res->pri_freq, NULL,
986 hapd->iface->hw_features,
987 hapd->iface->num_hw_features);
988 if (!pri_chan) {
989 wpa_printf(MSG_ERROR,
990 "ACS: Could not determine primary channel number from pri_freq %u",
991 acs_res->pri_freq);
992 err = 1;
993 goto out;
994 }
16689c7c 995
41cac481 996 hapd->iconf->channel = pri_chan->chan;
857d9422 997 hapd->iconf->acs = 1;
16689c7c 998
41cac481 999 if (acs_res->sec_freq == 0)
16689c7c 1000 hapd->iconf->secondary_channel = 0;
41cac481 1001 else if (acs_res->sec_freq < acs_res->pri_freq)
16689c7c 1002 hapd->iconf->secondary_channel = -1;
41cac481 1003 else if (acs_res->sec_freq > acs_res->pri_freq)
16689c7c
PX
1004 hapd->iconf->secondary_channel = 1;
1005 else {
1006 wpa_printf(MSG_ERROR, "Invalid secondary channel!");
e1d00d47
PX
1007 err = 1;
1008 goto out;
16689c7c
PX
1009 }
1010
1d2c45ec 1011 if (hapd->iface->conf->ieee80211ac || hapd->iface->conf->ieee80211ax) {
857d9422 1012 /* set defaults for backwards compatibility */
c6b7ac07
JC
1013 hostapd_set_oper_centr_freq_seg1_idx(hapd->iconf, 0);
1014 hostapd_set_oper_centr_freq_seg0_idx(hapd->iconf, 0);
1015 hostapd_set_oper_chwidth(hapd->iconf, CHANWIDTH_USE_HT);
4bf78a79
VK
1016 if (acs_res->ch_width == 40) {
1017 if (is_6ghz_freq(acs_res->pri_freq))
c6b7ac07
JC
1018 hostapd_set_oper_centr_freq_seg0_idx(
1019 hapd->iconf,
1020 acs_res->vht_seg0_center_ch);
4bf78a79
VK
1021 } else if (acs_res->ch_width == 80) {
1022 hostapd_set_oper_centr_freq_seg0_idx(
1023 hapd->iconf, acs_res->vht_seg0_center_ch);
1024 if (acs_res->vht_seg1_center_ch == 0) {
c6b7ac07 1025 hostapd_set_oper_chwidth(hapd->iconf,
4bf78a79 1026 CHANWIDTH_80MHZ);
857d9422 1027 } else {
4bf78a79
VK
1028 hostapd_set_oper_chwidth(hapd->iconf,
1029 CHANWIDTH_80P80MHZ);
c6b7ac07
JC
1030 hostapd_set_oper_centr_freq_seg1_idx(
1031 hapd->iconf,
1032 acs_res->vht_seg1_center_ch);
857d9422 1033 }
4bf78a79
VK
1034 } else if (acs_res->ch_width == 160) {
1035 hostapd_set_oper_chwidth(hapd->iconf, CHANWIDTH_160MHZ);
1036 hostapd_set_oper_centr_freq_seg0_idx(
1037 hapd->iconf, acs_res->vht_seg1_center_ch);
857d9422
MM
1038 }
1039 }
1040
e1d00d47
PX
1041out:
1042 ret = hostapd_acs_completed(hapd->iface, err);
16689c7c
PX
1043 if (ret) {
1044 wpa_printf(MSG_ERROR,
1045 "ACS: Possibly channel configuration is invalid");
1046 }
1047}
1048#endif /* CONFIG_ACS */
1049
1050
04a85e44 1051int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da,
baf513d6
JB
1052 const u8 *bssid, const u8 *ie, size_t ie_len,
1053 int ssi_signal)
e67b55fb
JM
1054{
1055 size_t i;
1056 int ret = 0;
1057
b211f3eb
JM
1058 if (sa == NULL || ie == NULL)
1059 return -1;
1060
1061 random_add_randomness(sa, ETH_ALEN);
e67b55fb
JM
1062 for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) {
1063 if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
baf513d6
JB
1064 sa, da, bssid, ie, ie_len,
1065 ssi_signal) > 0) {
e67b55fb
JM
1066 ret = 1;
1067 break;
1068 }
1069 }
1070 return ret;
1071}
1072
1073
5c61a282
JM
1074#ifdef HOSTAPD
1075
4ec1fd8e 1076#ifdef CONFIG_IEEE80211R_AP
88b32a99
SP
1077static void hostapd_notify_auth_ft_finish(void *ctx, const u8 *dst,
1078 const u8 *bssid,
1079 u16 auth_transaction, u16 status,
1080 const u8 *ies, size_t ies_len)
1081{
1082 struct hostapd_data *hapd = ctx;
1083 struct sta_info *sta;
1084
1085 sta = ap_get_sta(hapd, dst);
1086 if (sta == NULL)
1087 return;
1088
1089 hostapd_logger(hapd, dst, HOSTAPD_MODULE_IEEE80211,
1090 HOSTAPD_LEVEL_DEBUG, "authentication OK (FT)");
1091 sta->flags |= WLAN_STA_AUTH;
1092
1093 hostapd_sta_auth(hapd, dst, auth_transaction, status, ies, ies_len);
1094}
4ec1fd8e 1095#endif /* CONFIG_IEEE80211R_AP */
88b32a99
SP
1096
1097
fa61bff6
JM
1098#ifdef CONFIG_FILS
1099static void hostapd_notify_auth_fils_finish(struct hostapd_data *hapd,
1100 struct sta_info *sta, u16 resp,
1101 struct wpabuf *data, int pub)
1102{
1103 if (resp == WLAN_STATUS_SUCCESS) {
1104 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
1105 HOSTAPD_LEVEL_DEBUG, "authentication OK (FILS)");
1106 sta->flags |= WLAN_STA_AUTH;
1107 wpa_auth_sm_event(sta->wpa_sm, WPA_AUTH);
1108 sta->auth_alg = WLAN_AUTH_FILS_SK;
1109 mlme_authenticate_indication(hapd, sta);
1110 } else {
1111 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
1112 HOSTAPD_LEVEL_DEBUG,
1113 "authentication failed (FILS)");
1114 }
1115
1116 hostapd_sta_auth(hapd, sta->addr, 2, resp,
1117 data ? wpabuf_head(data) : NULL,
1118 data ? wpabuf_len(data) : 0);
1119 wpabuf_free(data);
1120}
1121#endif /* CONFIG_FILS */
1122
1123
88b32a99
SP
1124static void hostapd_notif_auth(struct hostapd_data *hapd,
1125 struct auth_info *rx_auth)
1126{
1127 struct sta_info *sta;
1128 u16 status = WLAN_STATUS_SUCCESS;
1129 u8 resp_ies[2 + WLAN_AUTH_CHALLENGE_LEN];
1130 size_t resp_ies_len = 0;
1131
1132 sta = ap_get_sta(hapd, rx_auth->peer);
1133 if (!sta) {
1134 sta = ap_sta_add(hapd, rx_auth->peer);
1135 if (sta == NULL) {
728d9717 1136 status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
88b32a99
SP
1137 goto fail;
1138 }
1139 }
1140 sta->flags &= ~WLAN_STA_PREAUTH;
1141 ieee802_1x_notify_pre_auth(sta->eapol_sm, 0);
4ec1fd8e 1142#ifdef CONFIG_IEEE80211R_AP
88b32a99
SP
1143 if (rx_auth->auth_type == WLAN_AUTH_FT && hapd->wpa_auth) {
1144 sta->auth_alg = WLAN_AUTH_FT;
1145 if (sta->wpa_sm == NULL)
1146 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
94ddef3e 1147 sta->addr, NULL);
88b32a99 1148 if (sta->wpa_sm == NULL) {
48b06c17
JM
1149 wpa_printf(MSG_DEBUG,
1150 "FT: Failed to initialize WPA state machine");
88b32a99
SP
1151 status = WLAN_STATUS_UNSPECIFIED_FAILURE;
1152 goto fail;
1153 }
1154 wpa_ft_process_auth(sta->wpa_sm, rx_auth->bssid,
1155 rx_auth->auth_transaction, rx_auth->ies,
1156 rx_auth->ies_len,
1157 hostapd_notify_auth_ft_finish, hapd);
1158 return;
1159 }
4ec1fd8e 1160#endif /* CONFIG_IEEE80211R_AP */
fa61bff6
JM
1161
1162#ifdef CONFIG_FILS
1163 if (rx_auth->auth_type == WLAN_AUTH_FILS_SK) {
1164 sta->auth_alg = WLAN_AUTH_FILS_SK;
1165 handle_auth_fils(hapd, sta, rx_auth->ies, rx_auth->ies_len,
1166 rx_auth->auth_type, rx_auth->auth_transaction,
1167 rx_auth->status_code,
1168 hostapd_notify_auth_fils_finish);
1169 return;
1170 }
1171#endif /* CONFIG_FILS */
1172
88b32a99
SP
1173fail:
1174 hostapd_sta_auth(hapd, rx_auth->peer, rx_auth->auth_transaction + 1,
1175 status, resp_ies, resp_ies_len);
1176}
1177
1178
4d379be4 1179#ifndef NEED_AP_MLME
88b32a99 1180static void hostapd_action_rx(struct hostapd_data *hapd,
dbfb8e82 1181 struct rx_mgmt *drv_mgmt)
88b32a99 1182{
dbfb8e82 1183 struct ieee80211_mgmt *mgmt;
88b32a99 1184 struct sta_info *sta;
dbfb8e82
JM
1185 size_t plen __maybe_unused;
1186 u16 fc;
e0785ebb 1187 u8 *action __maybe_unused;
dbfb8e82 1188
e0785ebb 1189 if (drv_mgmt->frame_len < IEEE80211_HDRLEN + 2 + 1)
dbfb8e82
JM
1190 return;
1191
002edb63 1192 plen = drv_mgmt->frame_len - IEEE80211_HDRLEN;
dbfb8e82
JM
1193
1194 mgmt = (struct ieee80211_mgmt *) drv_mgmt->frame;
1195 fc = le_to_host16(mgmt->frame_control);
1196 if (WLAN_FC_GET_STYPE(fc) != WLAN_FC_STYPE_ACTION)
1197 return; /* handled by the driver */
88b32a99 1198
e0785ebb
JM
1199 action = (u8 *) &mgmt->u.action.u;
1200 wpa_printf(MSG_DEBUG, "RX_ACTION category %u action %u sa " MACSTR
1201 " da " MACSTR " plen %d",
1202 mgmt->u.action.category, *action,
1203 MAC2STR(mgmt->sa), MAC2STR(mgmt->da), (int) plen);
7d9c0cd3 1204
dbfb8e82 1205 sta = ap_get_sta(hapd, mgmt->sa);
88b32a99
SP
1206 if (sta == NULL) {
1207 wpa_printf(MSG_DEBUG, "%s: station not found", __func__);
1208 return;
1209 }
4ec1fd8e 1210#ifdef CONFIG_IEEE80211R_AP
dbfb8e82 1211 if (mgmt->u.action.category == WLAN_ACTION_FT) {
002edb63
JM
1212 wpa_ft_action_rx(sta->wpa_sm, (u8 *) &mgmt->u.action, plen);
1213 return;
88b32a99 1214 }
4ec1fd8e 1215#endif /* CONFIG_IEEE80211R_AP */
700b3f39 1216 if (mgmt->u.action.category == WLAN_ACTION_SA_QUERY) {
f9da7505 1217 ieee802_11_sa_query_action(hapd, mgmt, drv_mgmt->frame_len);
700b3f39 1218 return;
7d9c0cd3 1219 }
b5bf84ba 1220#ifdef CONFIG_WNM_AP
dbfb8e82
JM
1221 if (mgmt->u.action.category == WLAN_ACTION_WNM) {
1222 ieee802_11_rx_wnm_action_ap(hapd, mgmt, drv_mgmt->frame_len);
cc833a23 1223 return;
d32d94db 1224 }
b5bf84ba 1225#endif /* CONFIG_WNM_AP */
037378ff
AN
1226#ifdef CONFIG_FST
1227 if (mgmt->u.action.category == WLAN_ACTION_FST && hapd->iface->fst) {
1228 fst_rx_action(hapd->iface->fst, mgmt, drv_mgmt->frame_len);
1229 return;
1230 }
1231#endif /* CONFIG_FST */
9c2b8204 1232#ifdef CONFIG_DPP
002edb63 1233 if (plen >= 2 + 4 &&
9c2b8204
JM
1234 mgmt->u.action.u.vs_public_action.action ==
1235 WLAN_PA_VENDOR_SPECIFIC &&
1236 WPA_GET_BE24(mgmt->u.action.u.vs_public_action.oui) ==
1237 OUI_WFA &&
1238 mgmt->u.action.u.vs_public_action.variable[0] ==
1239 DPP_OUI_TYPE) {
1240 const u8 *pos, *end;
1241
dc4d271c 1242 pos = mgmt->u.action.u.vs_public_action.oui;
9c2b8204
JM
1243 end = drv_mgmt->frame + drv_mgmt->frame_len;
1244 hostapd_dpp_rx_action(hapd, mgmt->sa, pos, end - pos,
1245 drv_mgmt->freq);
1246 return;
1247 }
1248#endif /* CONFIG_DPP */
88b32a99 1249}
4d379be4 1250#endif /* NEED_AP_MLME */
88b32a99
SP
1251
1252
fe6bdb77 1253#ifdef NEED_AP_MLME
f8b1f695 1254
f8b1f695
JM
1255#define HAPD_BROADCAST ((struct hostapd_data *) -1)
1256
1257static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
1258 const u8 *bssid)
1259{
1260 size_t i;
1261
1262 if (bssid == NULL)
1263 return NULL;
1264 if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
1265 bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
1266 return HAPD_BROADCAST;
1267
1268 for (i = 0; i < iface->num_bss; i++) {
1269 if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
1270 return iface->bss[i];
1271 }
1272
1273 return NULL;
1274}
1275
1276
1277static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
9b90955e
JB
1278 const u8 *bssid, const u8 *addr,
1279 int wds)
f8b1f695 1280{
9b90955e 1281 hapd = get_hapd_bssid(hapd->iface, bssid);
f8b1f695
JM
1282 if (hapd == NULL || hapd == HAPD_BROADCAST)
1283 return;
1284
9b90955e 1285 ieee802_11_rx_from_unknown(hapd, addr, wds);
f8b1f695
JM
1286}
1287
1288
912b34f0 1289static int hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt)
b5b969e9 1290{
4b9841d3 1291 struct hostapd_iface *iface = hapd->iface;
b57e086c 1292 const struct ieee80211_hdr *hdr;
4b9841d3 1293 const u8 *bssid;
2a8b7416 1294 struct hostapd_frame_info fi;
912b34f0 1295 int ret;
4b9841d3 1296
5f7e1c06
JM
1297#ifdef CONFIG_TESTING_OPTIONS
1298 if (hapd->ext_mgmt_frame_handling) {
1299 size_t hex_len = 2 * rx_mgmt->frame_len + 1;
1300 char *hex = os_malloc(hex_len);
48b06c17 1301
5f7e1c06
JM
1302 if (hex) {
1303 wpa_snprintf_hex(hex, hex_len, rx_mgmt->frame,
1304 rx_mgmt->frame_len);
1305 wpa_msg(hapd->msg_ctx, MSG_INFO, "MGMT-RX %s", hex);
1306 os_free(hex);
1307 }
1308 return 1;
1309 }
1310#endif /* CONFIG_TESTING_OPTIONS */
1311
2a8b7416
JM
1312 hdr = (const struct ieee80211_hdr *) rx_mgmt->frame;
1313 bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len);
4b9841d3 1314 if (bssid == NULL)
912b34f0 1315 return 0;
4b9841d3
JM
1316
1317 hapd = get_hapd_bssid(iface, bssid);
1318 if (hapd == NULL) {
48b06c17 1319 u16 fc = le_to_host16(hdr->frame_control);
4b9841d3
JM
1320
1321 /*
1322 * Drop frames to unknown BSSIDs except for Beacon frames which
1323 * could be used to update neighbor information.
1324 */
1325 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1326 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
1327 hapd = iface->bss[0];
1328 else
912b34f0 1329 return 0;
4b9841d3
JM
1330 }
1331
2a8b7416 1332 os_memset(&fi, 0, sizeof(fi));
c5cc7a59 1333 fi.freq = rx_mgmt->freq;
2a8b7416
JM
1334 fi.datarate = rx_mgmt->datarate;
1335 fi.ssi_signal = rx_mgmt->ssi_signal;
1336
4b9841d3
JM
1337 if (hapd == HAPD_BROADCAST) {
1338 size_t i;
48b06c17 1339
912b34f0
JM
1340 ret = 0;
1341 for (i = 0; i < iface->num_bss; i++) {
1d91f504
SW
1342 /* if bss is set, driver will call this function for
1343 * each bss individually. */
1344 if (rx_mgmt->drv_priv &&
1345 (iface->bss[i]->drv_priv != rx_mgmt->drv_priv))
1346 continue;
1347
912b34f0
JM
1348 if (ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame,
1349 rx_mgmt->frame_len, &fi) > 0)
1350 ret = 1;
1351 }
4b9841d3 1352 } else
912b34f0
JM
1353 ret = ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len,
1354 &fi);
bbb921da
JM
1355
1356 random_add_randomness(&fi, sizeof(fi));
912b34f0
JM
1357
1358 return ret;
b5b969e9
JM
1359}
1360
1361
f8b1f695
JM
1362static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf,
1363 size_t len, u16 stype, int ok)
b5b969e9 1364{
4b9841d3 1365 struct ieee80211_hdr *hdr;
6996ff7b 1366 struct hostapd_data *orig_hapd = hapd;
48b06c17 1367
4b9841d3
JM
1368 hdr = (struct ieee80211_hdr *) buf;
1369 hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
6996ff7b 1370 if (!hapd)
4b9841d3 1371 return;
6996ff7b
JM
1372 if (hapd == HAPD_BROADCAST) {
1373 if (stype != WLAN_FC_STYPE_ACTION || len <= 25 ||
1374 buf[24] != WLAN_ACTION_PUBLIC)
1375 return;
1376 hapd = get_hapd_bssid(orig_hapd->iface, hdr->addr2);
1377 if (!hapd || hapd == HAPD_BROADCAST)
1378 return;
1379 /*
1380 * Allow processing of TX status for a Public Action frame that
1381 * used wildcard BBSID.
1382 */
1383 }
b5b969e9
JM
1384 ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
1385}
f82ef4d8 1386
f8b1f695 1387#endif /* NEED_AP_MLME */
ad1e68e6
JM
1388
1389
a8e0505b
JM
1390static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr)
1391{
1392 struct sta_info *sta = ap_get_sta(hapd, addr);
48b06c17 1393
a8e0505b
JM
1394 if (sta)
1395 return 0;
1396
1397 wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR
1398 " - adding a new STA", MAC2STR(addr));
1399 sta = ap_sta_add(hapd, addr);
1400 if (sta) {
1401 hostapd_new_assoc_sta(hapd, sta, 0);
1402 } else {
1403 wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR,
1404 MAC2STR(addr));
1405 return -1;
1406 }
1407
1408 return 0;
1409}
1410
1411
1412static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src,
1413 const u8 *data, size_t data_len)
1414{
1415 struct hostapd_iface *iface = hapd->iface;
f826635c 1416 struct sta_info *sta;
a8e0505b
JM
1417 size_t j;
1418
1419 for (j = 0; j < iface->num_bss; j++) {
48b06c17
JM
1420 sta = ap_get_sta(iface->bss[j], src);
1421 if (sta && sta->flags & WLAN_STA_ASSOC) {
1422 hapd = iface->bss[j];
1423 break;
a8e0505b
JM
1424 }
1425 }
1426
1427 ieee802_1x_receive(hapd, src, data, data_len);
1428}
1429
96bc5086
TB
1430#endif /* HOSTAPD */
1431
a8e0505b 1432
499c37b7
NJ
1433static struct hostapd_channel_data *
1434hostapd_get_mode_chan(struct hostapd_hw_modes *mode, unsigned int freq)
1435{
1436 int i;
1437 struct hostapd_channel_data *chan;
1438
1439 for (i = 0; i < mode->num_channels; i++) {
1440 chan = &mode->channels[i];
1441 if ((unsigned int) chan->freq == freq)
1442 return chan;
1443 }
1444
1445 return NULL;
1446}
1447
1448
0185007c
MK
1449static struct hostapd_channel_data * hostapd_get_mode_channel(
1450 struct hostapd_iface *iface, unsigned int freq)
1451{
1452 int i;
1453 struct hostapd_channel_data *chan;
1454
499c37b7
NJ
1455 for (i = 0; i < iface->num_hw_features; i++) {
1456 if (hostapd_hw_skip_mode(iface, &iface->hw_features[i]))
1457 continue;
1458 chan = hostapd_get_mode_chan(&iface->hw_features[i], freq);
1459 if (chan)
0185007c
MK
1460 return chan;
1461 }
1462
1463 return NULL;
1464}
1465
1466
1467static void hostapd_update_nf(struct hostapd_iface *iface,
1468 struct hostapd_channel_data *chan,
1469 struct freq_survey *survey)
1470{
1471 if (!iface->chans_surveyed) {
1472 chan->min_nf = survey->nf;
1473 iface->lowest_nf = survey->nf;
1474 } else {
1475 if (dl_list_empty(&chan->survey_list))
1476 chan->min_nf = survey->nf;
1477 else if (survey->nf < chan->min_nf)
1478 chan->min_nf = survey->nf;
1479 if (survey->nf < iface->lowest_nf)
1480 iface->lowest_nf = survey->nf;
1481 }
1482}
1483
1484
ec8f36af
KP
1485static void hostapd_single_channel_get_survey(struct hostapd_iface *iface,
1486 struct survey_results *survey_res)
1487{
1488 struct hostapd_channel_data *chan;
1489 struct freq_survey *survey;
1490 u64 divisor, dividend;
1491
1492 survey = dl_list_first(&survey_res->survey_list, struct freq_survey,
1493 list);
1494 if (!survey || !survey->freq)
1495 return;
1496
1497 chan = hostapd_get_mode_channel(iface, survey->freq);
1498 if (!chan || chan->flag & HOSTAPD_CHAN_DISABLED)
1499 return;
1500
48b06c17
JM
1501 wpa_printf(MSG_DEBUG,
1502 "Single Channel Survey: (freq=%d channel_time=%ld channel_time_busy=%ld)",
ec8f36af
KP
1503 survey->freq,
1504 (unsigned long int) survey->channel_time,
1505 (unsigned long int) survey->channel_time_busy);
1506
1507 if (survey->channel_time > iface->last_channel_time &&
1508 survey->channel_time > survey->channel_time_busy) {
1509 dividend = survey->channel_time_busy -
1510 iface->last_channel_time_busy;
1511 divisor = survey->channel_time - iface->last_channel_time;
1512
1513 iface->channel_utilization = dividend * 255 / divisor;
1514 wpa_printf(MSG_DEBUG, "Channel Utilization: %d",
1515 iface->channel_utilization);
1516 }
1517 iface->last_channel_time = survey->channel_time;
1518 iface->last_channel_time_busy = survey->channel_time_busy;
1519}
1520
1521
96bc5086
TB
1522void hostapd_event_get_survey(struct hostapd_iface *iface,
1523 struct survey_results *survey_results)
0185007c 1524{
0185007c
MK
1525 struct freq_survey *survey, *tmp;
1526 struct hostapd_channel_data *chan;
1527
1528 if (dl_list_empty(&survey_results->survey_list)) {
1529 wpa_printf(MSG_DEBUG, "No survey data received");
1530 return;
1531 }
1532
ec8f36af
KP
1533 if (survey_results->freq_filter) {
1534 hostapd_single_channel_get_survey(iface, survey_results);
1535 return;
1536 }
1537
0185007c
MK
1538 dl_list_for_each_safe(survey, tmp, &survey_results->survey_list,
1539 struct freq_survey, list) {
1540 chan = hostapd_get_mode_channel(iface, survey->freq);
1541 if (!chan)
1542 continue;
1543 if (chan->flag & HOSTAPD_CHAN_DISABLED)
1544 continue;
1545
1546 dl_list_del(&survey->list);
1547 dl_list_add_tail(&chan->survey_list, &survey->list);
1548
1549 hostapd_update_nf(iface, chan, survey);
1550
1551 iface->chans_surveyed++;
1552 }
1553}
1554
1555
96bc5086 1556#ifdef HOSTAPD
e76da505
JD
1557#ifdef NEED_AP_MLME
1558
5841958f
MK
1559static void hostapd_event_iface_unavailable(struct hostapd_data *hapd)
1560{
1561 wpa_printf(MSG_DEBUG, "Interface %s is unavailable -- stopped",
1562 hapd->conf->iface);
1563
1564 if (hapd->csa_in_progress) {
1565 wpa_printf(MSG_INFO, "CSA failed (%s was stopped)",
1566 hapd->conf->iface);
1567 hostapd_switch_channel_fallback(hapd->iface,
1568 &hapd->cs_freq_params);
1569 }
1570}
1571
1572
e76da505
JD
1573static void hostapd_event_dfs_radar_detected(struct hostapd_data *hapd,
1574 struct dfs_event *radar)
1575{
e76da505 1576 wpa_printf(MSG_DEBUG, "DFS radar detected on %d MHz", radar->freq);
dc036d9e 1577 hostapd_dfs_radar_detected(hapd->iface, radar->freq, radar->ht_enabled,
58b73e3d
JD
1578 radar->chan_offset, radar->chan_width,
1579 radar->cf1, radar->cf2);
e76da505
JD
1580}
1581
1582
7cbb5f1a
VT
1583static void hostapd_event_dfs_pre_cac_expired(struct hostapd_data *hapd,
1584 struct dfs_event *radar)
1585{
1586 wpa_printf(MSG_DEBUG, "DFS Pre-CAC expired on %d MHz", radar->freq);
1587 hostapd_dfs_pre_cac_expired(hapd->iface, radar->freq, radar->ht_enabled,
1588 radar->chan_offset, radar->chan_width,
1589 radar->cf1, radar->cf2);
1590}
1591
1592
e76da505
JD
1593static void hostapd_event_dfs_cac_finished(struct hostapd_data *hapd,
1594 struct dfs_event *radar)
1595{
1596 wpa_printf(MSG_DEBUG, "DFS CAC finished on %d MHz", radar->freq);
dc036d9e 1597 hostapd_dfs_complete_cac(hapd->iface, 1, radar->freq, radar->ht_enabled,
58b73e3d
JD
1598 radar->chan_offset, radar->chan_width,
1599 radar->cf1, radar->cf2);
e76da505
JD
1600}
1601
1602
1603static void hostapd_event_dfs_cac_aborted(struct hostapd_data *hapd,
1604 struct dfs_event *radar)
1605{
1606 wpa_printf(MSG_DEBUG, "DFS CAC aborted on %d MHz", radar->freq);
dc036d9e 1607 hostapd_dfs_complete_cac(hapd->iface, 0, radar->freq, radar->ht_enabled,
58b73e3d
JD
1608 radar->chan_offset, radar->chan_width,
1609 radar->cf1, radar->cf2);
e76da505
JD
1610}
1611
1612
1613static void hostapd_event_dfs_nop_finished(struct hostapd_data *hapd,
1614 struct dfs_event *radar)
1615{
1616 wpa_printf(MSG_DEBUG, "DFS NOP finished on %d MHz", radar->freq);
dc036d9e 1617 hostapd_dfs_nop_finished(hapd->iface, radar->freq, radar->ht_enabled,
58b73e3d
JD
1618 radar->chan_offset, radar->chan_width,
1619 radar->cf1, radar->cf2);
e76da505
JD
1620}
1621
c13578c3
AK
1622
1623static void hostapd_event_dfs_cac_started(struct hostapd_data *hapd,
1624 struct dfs_event *radar)
1625{
1626 wpa_printf(MSG_DEBUG, "DFS offload CAC started on %d MHz", radar->freq);
1627 hostapd_dfs_start_cac(hapd->iface, radar->freq, radar->ht_enabled,
1628 radar->chan_offset, radar->chan_width,
1629 radar->cf1, radar->cf2);
1630}
1631
e76da505
JD
1632#endif /* NEED_AP_MLME */
1633
1634
1952b626
BP
1635static void hostapd_event_wds_sta_interface_status(struct hostapd_data *hapd,
1636 int istatus,
1637 const char *ifname,
1638 const u8 *addr)
1639{
1640 struct sta_info *sta = ap_get_sta(hapd, addr);
1641
1642 if (sta) {
1643 os_free(sta->ifname_wds);
1644 if (istatus == INTERFACE_ADDED)
1645 sta->ifname_wds = os_strdup(ifname);
1646 else
1647 sta->ifname_wds = NULL;
1648 }
1649
1650 wpa_msg(hapd->msg_ctx, MSG_INFO, "%sifname=%s sta_addr=" MACSTR,
1651 istatus == INTERFACE_ADDED ?
1652 WDS_STA_INTERFACE_ADDED : WDS_STA_INTERFACE_REMOVED,
1653 ifname, MAC2STR(addr));
1654}
1655
1656
ef60f012
LD
1657#ifdef CONFIG_OWE
1658static int hostapd_notif_update_dh_ie(struct hostapd_data *hapd,
1659 const u8 *peer, const u8 *ie,
1660 size_t ie_len)
1661{
1662 u16 status;
1663 struct sta_info *sta;
1664 struct ieee802_11_elems elems;
1665
1666 if (!hapd || !hapd->wpa_auth) {
1667 wpa_printf(MSG_DEBUG, "OWE: Invalid hapd context");
1668 return -1;
1669 }
1670 if (!peer) {
1671 wpa_printf(MSG_DEBUG, "OWE: Peer unknown");
1672 return -1;
1673 }
1674 if (!(hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_OWE)) {
1675 wpa_printf(MSG_DEBUG, "OWE: No OWE AKM configured");
1676 status = WLAN_STATUS_AKMP_NOT_VALID;
1677 goto err;
1678 }
1679 if (ieee802_11_parse_elems(ie, ie_len, &elems, 1) == ParseFailed) {
1680 wpa_printf(MSG_DEBUG, "OWE: Failed to parse OWE IE for "
1681 MACSTR, MAC2STR(peer));
1682 status = WLAN_STATUS_UNSPECIFIED_FAILURE;
1683 goto err;
1684 }
1685 status = owe_validate_request(hapd, peer, elems.rsn_ie,
1686 elems.rsn_ie_len,
1687 elems.owe_dh, elems.owe_dh_len);
1688 if (status != WLAN_STATUS_SUCCESS)
1689 goto err;
1690
1691 sta = ap_get_sta(hapd, peer);
1692 if (sta) {
1693 ap_sta_no_session_timeout(hapd, sta);
1694 accounting_sta_stop(hapd, sta);
1695
1696 /*
1697 * Make sure that the previously registered inactivity timer
1698 * will not remove the STA immediately.
1699 */
1700 sta->timeout_next = STA_NULLFUNC;
1701 } else {
1702 sta = ap_sta_add(hapd, peer);
1703 if (!sta) {
1704 status = WLAN_STATUS_UNSPECIFIED_FAILURE;
1705 goto err;
1706 }
1707 }
1708 sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
1709
1710 status = owe_process_rsn_ie(hapd, sta, elems.rsn_ie,
1711 elems.rsn_ie_len, elems.owe_dh,
1712 elems.owe_dh_len);
1713 if (status != WLAN_STATUS_SUCCESS)
1714 ap_free_sta(hapd, sta);
1715
1716 return 0;
1717err:
1718 hostapd_drv_update_dh_ie(hapd, peer, status, NULL, 0);
1719 return 0;
1720}
1721#endif /* CONFIG_OWE */
1722
1723
9646a8ab 1724void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
ad1e68e6
JM
1725 union wpa_event_data *data)
1726{
1727 struct hostapd_data *hapd = ctx;
74781dfc
JM
1728#ifndef CONFIG_NO_STDOUT_DEBUG
1729 int level = MSG_DEBUG;
ad1e68e6 1730
34caf71a 1731 if (event == EVENT_RX_MGMT && data->rx_mgmt.frame &&
74781dfc
JM
1732 data->rx_mgmt.frame_len >= 24) {
1733 const struct ieee80211_hdr *hdr;
1734 u16 fc;
48b06c17 1735
74781dfc
JM
1736 hdr = (const struct ieee80211_hdr *) data->rx_mgmt.frame;
1737 fc = le_to_host16(hdr->frame_control);
1738 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1739 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
1740 level = MSG_EXCESSIVE;
cc2ada86
JM
1741 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1742 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ)
1743 level = MSG_EXCESSIVE;
74781dfc
JM
1744 }
1745
1746 wpa_dbg(hapd->msg_ctx, level, "Event %s (%d) received",
e26cd1a1 1747 event_to_string(event), event);
74781dfc 1748#endif /* CONFIG_NO_STDOUT_DEBUG */
e26cd1a1 1749
ad1e68e6
JM
1750 switch (event) {
1751 case EVENT_MICHAEL_MIC_FAILURE:
1752 michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
1753 break;
1754 case EVENT_SCAN_RESULTS:
1755 if (hapd->iface->scan_cb)
1756 hapd->iface->scan_cb(hapd->iface);
1757 break;
fcf0f87d 1758 case EVENT_WPS_BUTTON_PUSHED:
d601247c 1759 hostapd_wps_button_pushed(hapd, NULL);
fcf0f87d 1760 break;
f8b1f695
JM
1761#ifdef NEED_AP_MLME
1762 case EVENT_TX_STATUS:
1763 switch (data->tx_status.type) {
1764 case WLAN_FC_TYPE_MGMT:
1765 hostapd_mgmt_tx_cb(hapd, data->tx_status.data,
1766 data->tx_status.data_len,
1767 data->tx_status.stype,
1768 data->tx_status.ack);
1769 break;
1770 case WLAN_FC_TYPE_DATA:
1771 hostapd_tx_status(hapd, data->tx_status.dst,
1772 data->tx_status.data,
1773 data->tx_status.data_len,
1774 data->tx_status.ack);
1775 break;
1776 }
1777 break;
dd840f79
JB
1778 case EVENT_EAPOL_TX_STATUS:
1779 hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst,
1780 data->eapol_tx_status.data,
1781 data->eapol_tx_status.data_len,
1782 data->eapol_tx_status.ack);
1783 break;
bcf24348
JB
1784 case EVENT_DRIVER_CLIENT_POLL_OK:
1785 hostapd_client_poll_ok(hapd, data->client_poll.addr);
1786 break;
f8b1f695 1787 case EVENT_RX_FROM_UNKNOWN:
9b90955e
JB
1788 hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid,
1789 data->rx_from_unknown.addr,
1790 data->rx_from_unknown.wds);
f8b1f695 1791 break;
dbfb8e82 1792#endif /* NEED_AP_MLME */
f8b1f695 1793 case EVENT_RX_MGMT:
c0333c8d
JM
1794 if (!data->rx_mgmt.frame)
1795 break;
dbfb8e82 1796#ifdef NEED_AP_MLME
4d379be4
JM
1797 hostapd_mgmt_rx(hapd, &data->rx_mgmt);
1798#else /* NEED_AP_MLME */
dbfb8e82 1799 hostapd_action_rx(hapd, &data->rx_mgmt);
4d379be4 1800#endif /* NEED_AP_MLME */
dbfb8e82 1801 break;
a0e0d3bb 1802 case EVENT_RX_PROBE_REQ:
b211f3eb
JM
1803 if (data->rx_probe_req.sa == NULL ||
1804 data->rx_probe_req.ie == NULL)
1805 break;
a0e0d3bb 1806 hostapd_probe_req_rx(hapd, data->rx_probe_req.sa,
04a85e44
JM
1807 data->rx_probe_req.da,
1808 data->rx_probe_req.bssid,
a0e0d3bb 1809 data->rx_probe_req.ie,
baf513d6
JB
1810 data->rx_probe_req.ie_len,
1811 data->rx_probe_req.ssi_signal);
a0e0d3bb 1812 break;
a70a5d6d 1813 case EVENT_NEW_STA:
a8e0505b
JM
1814 hostapd_event_new_sta(hapd, data->new_sta.addr);
1815 break;
1816 case EVENT_EAPOL_RX:
1817 hostapd_event_eapol_rx(hapd, data->eapol_rx.src,
1818 data->eapol_rx.data,
1819 data->eapol_rx.data_len);
1820 break;
1d041bec 1821 case EVENT_ASSOC:
04a258e7
JM
1822 if (!data)
1823 return;
1d041bec
JM
1824 hostapd_notif_assoc(hapd, data->assoc_info.addr,
1825 data->assoc_info.req_ies,
39b08b5f
SP
1826 data->assoc_info.req_ies_len,
1827 data->assoc_info.reassoc);
1d041bec 1828 break;
ef60f012
LD
1829#ifdef CONFIG_OWE
1830 case EVENT_UPDATE_DH:
1831 if (!data)
1832 return;
1833 hostapd_notif_update_dh_ie(hapd, data->update_dh.peer,
1834 data->update_dh.ie,
1835 data->update_dh.ie_len);
1836 break;
1837#endif /* CONFIG_OWE */
1d041bec
JM
1838 case EVENT_DISASSOC:
1839 if (data)
1840 hostapd_notif_disassoc(hapd, data->disassoc_info.addr);
1841 break;
1842 case EVENT_DEAUTH:
1843 if (data)
1844 hostapd_notif_disassoc(hapd, data->deauth_info.addr);
1845 break;
0d7e5a3a
JB
1846 case EVENT_STATION_LOW_ACK:
1847 if (!data)
1848 break;
1849 hostapd_event_sta_low_ack(hapd, data->low_ack.addr);
1850 break;
88b32a99
SP
1851 case EVENT_AUTH:
1852 hostapd_notif_auth(hapd, &data->auth);
1853 break;
95f556f3 1854 case EVENT_CH_SWITCH_STARTED:
1b487b8b
TP
1855 case EVENT_CH_SWITCH:
1856 if (!data)
1857 break;
1858 hostapd_event_ch_switch(hapd, data->ch_switch.freq,
1859 data->ch_switch.ht_enabled,
8d1fdde7
JD
1860 data->ch_switch.ch_offset,
1861 data->ch_switch.ch_width,
1862 data->ch_switch.cf1,
95f556f3
OD
1863 data->ch_switch.cf2,
1864 event == EVENT_CH_SWITCH);
1b487b8b 1865 break;
3140803b
RM
1866 case EVENT_CONNECT_FAILED_REASON:
1867 if (!data)
1868 break;
1869 hostapd_event_connect_failed_reason(
1870 hapd, data->connect_failed_reason.addr,
1871 data->connect_failed_reason.code);
1872 break;
0185007c 1873 case EVENT_SURVEY:
96bc5086 1874 hostapd_event_get_survey(hapd->iface, &data->survey_results);
0185007c 1875 break;
e76da505 1876#ifdef NEED_AP_MLME
5841958f
MK
1877 case EVENT_INTERFACE_UNAVAILABLE:
1878 hostapd_event_iface_unavailable(hapd);
1879 break;
e76da505
JD
1880 case EVENT_DFS_RADAR_DETECTED:
1881 if (!data)
1882 break;
1883 hostapd_event_dfs_radar_detected(hapd, &data->dfs_event);
1884 break;
7cbb5f1a
VT
1885 case EVENT_DFS_PRE_CAC_EXPIRED:
1886 if (!data)
1887 break;
1888 hostapd_event_dfs_pre_cac_expired(hapd, &data->dfs_event);
1889 break;
e76da505
JD
1890 case EVENT_DFS_CAC_FINISHED:
1891 if (!data)
1892 break;
1893 hostapd_event_dfs_cac_finished(hapd, &data->dfs_event);
1894 break;
1895 case EVENT_DFS_CAC_ABORTED:
1896 if (!data)
1897 break;
1898 hostapd_event_dfs_cac_aborted(hapd, &data->dfs_event);
1899 break;
1900 case EVENT_DFS_NOP_FINISHED:
1901 if (!data)
1902 break;
1903 hostapd_event_dfs_nop_finished(hapd, &data->dfs_event);
1904 break;
1905 case EVENT_CHANNEL_LIST_CHANGED:
1906 /* channel list changed (regulatory?), update channel list */
1907 /* TODO: check this. hostapd_get_hw_features() initializes
1908 * too much stuff. */
1909 /* hostapd_get_hw_features(hapd->iface); */
795baf77
AS
1910 hostapd_channel_list_updated(
1911 hapd->iface, data->channel_list_changed.initiator);
e76da505 1912 break;
c13578c3
AK
1913 case EVENT_DFS_CAC_STARTED:
1914 if (!data)
1915 break;
1916 hostapd_event_dfs_cac_started(hapd, &data->dfs_event);
1917 break;
e76da505 1918#endif /* NEED_AP_MLME */
ab93fdeb
JM
1919 case EVENT_INTERFACE_ENABLED:
1920 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_ENABLED);
f33c8606
JM
1921 if (hapd->disabled && hapd->started) {
1922 hapd->disabled = 0;
1923 /*
1924 * Try to re-enable interface if the driver stopped it
1925 * when the interface got disabled.
1926 */
567df550
HW
1927 if (hapd->wpa_auth)
1928 wpa_auth_reconfig_group_keys(hapd->wpa_auth);
1929 else
1930 hostapd_reconfig_encryption(hapd);
f33c8606
JM
1931 hapd->reenable_beacon = 1;
1932 ieee802_11_set_beacon(hapd);
10de40c0
ZK
1933#ifdef NEED_AP_MLME
1934 } else if (hapd->disabled && hapd->iface->cac_started) {
1935 wpa_printf(MSG_DEBUG, "DFS: restarting pending CAC");
1936 hostapd_handle_dfs(hapd->iface);
1937#endif /* NEED_AP_MLME */
f33c8606 1938 }
ab93fdeb
JM
1939 break;
1940 case EVENT_INTERFACE_DISABLED:
c165cb40 1941 hostapd_free_stas(hapd);
ab93fdeb 1942 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_DISABLED);
f33c8606 1943 hapd->disabled = 1;
ab93fdeb 1944 break;
16689c7c
PX
1945#ifdef CONFIG_ACS
1946 case EVENT_ACS_CHANNEL_SELECTED:
857d9422
MM
1947 hostapd_acs_channel_selected(hapd,
1948 &data->acs_selected_channels);
16689c7c
PX
1949 break;
1950#endif /* CONFIG_ACS */
ec2b5173
T
1951 case EVENT_STATION_OPMODE_CHANGED:
1952 hostapd_event_sta_opmode_changed(hapd, data->sta_opmode.addr,
1953 data->sta_opmode.smps_mode,
1954 data->sta_opmode.chan_width,
1955 data->sta_opmode.rx_nss);
1956 break;
1952b626
BP
1957 case EVENT_WDS_STA_INTERFACE_STATUS:
1958 hostapd_event_wds_sta_interface_status(
1959 hapd, data->wds_sta_interface.istatus,
1960 data->wds_sta_interface.ifname,
1961 data->wds_sta_interface.sta_addr);
1962 break;
ad1e68e6
JM
1963 default:
1964 wpa_printf(MSG_DEBUG, "Unknown event %d", event);
1965 break;
1966 }
1967}
f8b1f695 1968
45e3fc72
RM
1969
1970void wpa_supplicant_event_global(void *ctx, enum wpa_event_type event,
1971 union wpa_event_data *data)
1972{
1973 struct hapd_interfaces *interfaces = ctx;
1974 struct hostapd_data *hapd;
1975
1976 if (event != EVENT_INTERFACE_STATUS)
1977 return;
1978
1979 hapd = hostapd_get_iface(interfaces, data->interface_status.ifname);
1980 if (hapd && hapd->driver && hapd->driver->get_ifindex &&
1981 hapd->drv_priv) {
1982 unsigned int ifindex;
1983
1984 ifindex = hapd->driver->get_ifindex(hapd->drv_priv);
1985 if (ifindex != data->interface_status.ifindex) {
1986 wpa_dbg(hapd->msg_ctx, MSG_DEBUG,
1987 "interface status ifindex %d mismatch (%d)",
1988 ifindex, data->interface_status.ifindex);
1989 return;
1990 }
1991 }
1992 if (hapd)
1993 wpa_supplicant_event(hapd, event, data);
1994}
1995
f8b1f695 1996#endif /* HOSTAPD */