[thirdparty/hostap.git] / wpa_supplicant / wnm_sta.c

/*
 * wpa_supplicant - WNM
 * Copyright (c) 2011-2012, Qualcomm Atheros, Inc.
 *
 * This software may be distributed under the terms of the BSD license.
 * See README for more details.
 */

#include "utils/includes.h"

#include "utils/common.h"
#include "common/ieee802_11_defs.h"
#include "rsn_supp/wpa.h"
#include "wpa_supplicant_i.h"
#include "driver_i.h"

#define MAX_TFS_IE_LEN  1024

#ifdef CONFIG_IEEE80211V

/* get the TFS IE from driver */
static int ieee80211_11_get_tfs_ie(struct wpa_supplicant *wpa_s, u8 *buf,
				   u16 *buf_len, enum wnm_oper oper)
{
	wpa_printf(MSG_DEBUG, "%s: TFS get operation %d", __func__, oper);

	return wpa_drv_wnm_oper(wpa_s, oper, wpa_s->bssid, buf, buf_len);
}


/* set the TFS IE to driver */
static int ieee80211_11_set_tfs_ie(struct wpa_supplicant *wpa_s,
				   const u8 *addr, u8 *buf, u16 *buf_len,
				   enum wnm_oper oper)
{
	wpa_printf(MSG_DEBUG, "%s: TFS set operation %d", __func__, oper);

	return wpa_drv_wnm_oper(wpa_s, oper, addr, buf, buf_len);
}


/* MLME-SLEEPMODE.request */
int ieee802_11_send_wnmsleep_req(struct wpa_supplicant *wpa_s,
				 u8 action, u16 intval, struct wpabuf *tfs_req)
{
	struct ieee80211_mgmt *mgmt;
	int res;
	size_t len;
	struct wnm_sleep_element *wnmsleep_ie;
	u8 *wnmtfs_ie;
	u8 wnmsleep_ie_len;
	u16 wnmtfs_ie_len;  /* possibly multiple IE(s) */
	enum wnm_oper tfs_oper = action == 0 ? WNM_SLEEP_TFS_REQ_IE_ADD :
		WNM_SLEEP_TFS_REQ_IE_NONE;

	wpa_printf(MSG_DEBUG, "WNM: Request to send WNM-Sleep Mode Request "
		   "action=%s to " MACSTR,
		   action == 0 ? "enter" : "exit",
		   MAC2STR(wpa_s->bssid));

	/* WNM-Sleep Mode IE */
	wnmsleep_ie_len = sizeof(struct wnm_sleep_element);
	wnmsleep_ie = os_zalloc(sizeof(struct wnm_sleep_element));
	if (wnmsleep_ie == NULL)
		return -1;
	wnmsleep_ie->eid = WLAN_EID_WNMSLEEP;
	wnmsleep_ie->len = wnmsleep_ie_len - 2;
	wnmsleep_ie->action_type = action;
	wnmsleep_ie->status = WNM_STATUS_SLEEP_ACCEPT;
	wnmsleep_ie->intval = host_to_le16(intval);
	wpa_hexdump(MSG_DEBUG, "WNM: WNM-Sleep Mode element",
		    (u8 *) wnmsleep_ie, wnmsleep_ie_len);

	/* TFS IE(s) */
	if (tfs_req) {
		wnmtfs_ie_len = wpabuf_len(tfs_req);
		wnmtfs_ie = os_malloc(wnmtfs_ie_len);
		if (wnmtfs_ie == NULL) {
			os_free(wnmsleep_ie);
			return -1;
		}
		os_memcpy(wnmtfs_ie, wpabuf_head(tfs_req), wnmtfs_ie_len);
	} else {
		wnmtfs_ie = os_zalloc(MAX_TFS_IE_LEN);
		if (wnmtfs_ie == NULL) {
			os_free(wnmsleep_ie);
			return -1;
		}
		if (ieee80211_11_get_tfs_ie(wpa_s, wnmtfs_ie, &wnmtfs_ie_len,
					    tfs_oper)) {
			wnmtfs_ie_len = 0;
			os_free(wnmtfs_ie);
			wnmtfs_ie = NULL;
		}
	}
	wpa_hexdump(MSG_DEBUG, "WNM: TFS Request element",
		    (u8 *) wnmtfs_ie, wnmtfs_ie_len);

	mgmt = os_zalloc(sizeof(*mgmt) + wnmsleep_ie_len + wnmtfs_ie_len);
	if (mgmt == NULL) {
		wpa_printf(MSG_DEBUG, "MLME: Failed to allocate buffer for "
			   "WNM-Sleep Request action frame");
		return -1;
	}

	os_memcpy(mgmt->da, wpa_s->bssid, ETH_ALEN);
	os_memcpy(mgmt->sa, wpa_s->own_addr, ETH_ALEN);
	os_memcpy(mgmt->bssid, wpa_s->bssid, ETH_ALEN);
	mgmt->frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT,
					   WLAN_FC_STYPE_ACTION);
	mgmt->u.action.category = WLAN_ACTION_WNM;
	mgmt->u.action.u.wnm_sleep_req.action = WNM_SLEEP_MODE_REQ;
	os_memcpy(mgmt->u.action.u.wnm_sleep_req.variable, wnmsleep_ie,
		  wnmsleep_ie_len);
	/* copy TFS IE here */
	if (wnmtfs_ie_len > 0) {
		os_memcpy(mgmt->u.action.u.wnm_sleep_req.variable +
			  wnmsleep_ie_len, wnmtfs_ie, wnmtfs_ie_len);
	}

	len = 1 + sizeof(mgmt->u.action.u.wnm_sleep_req) + wnmsleep_ie_len +
		wnmtfs_ie_len;

	res = wpa_drv_send_action(wpa_s, wpa_s->assoc_freq, 0, wpa_s->bssid,
				  wpa_s->own_addr, wpa_s->bssid,
				  &mgmt->u.action.category, len, 0);
	if (res < 0)
		wpa_printf(MSG_DEBUG, "Failed to send WNM-Sleep Request "
			   "(action=%d, intval=%d)", action, intval);

	os_free(wnmsleep_ie);
	os_free(wnmtfs_ie);
	os_free(mgmt);

	return res;
}


static void ieee802_11_rx_wnmsleep_resp(struct wpa_supplicant *wpa_s,
					const u8 *frm, int len)
{
	/*
	 * Action [1] | Diaglog Token [1] | Key Data Len [2] | Key Data |
	 * WNM-Sleep Mode IE | TFS Response IE
	 */
	u8 *pos = (u8 *) frm; /* point to action field */
	u16 key_len_total = le_to_host16(*((u16 *)(frm+2)));
	u8 gtk_len;
	struct wnm_sleep_element *wnmsleep_ie = NULL;
	/* multiple TFS Resp IE (assuming consecutive) */
	u8 *tfsresp_ie_start = NULL;
	u8 *tfsresp_ie_end = NULL;
	u16 tfsresp_ie_len = 0;

	wpa_printf(MSG_DEBUG, "action=%d token = %d key_len_total = %d",
		   frm[0], frm[1], key_len_total);
	pos += 4 + key_len_total;
	while (pos - frm < len) {
		u8 ie_len = *(pos + 1);
		if (*pos == WLAN_EID_WNMSLEEP)
			wnmsleep_ie = (struct wnm_sleep_element *) pos;
		else if (*pos == WLAN_EID_TFS_RESP) {
			if (!tfsresp_ie_start)
				tfsresp_ie_start = pos;
			tfsresp_ie_end = pos;
		} else
			wpa_printf(MSG_DEBUG, "EID %d not recognized", *pos);
		pos += ie_len + 2;
	}

	if (!wnmsleep_ie) {
		wpa_printf(MSG_DEBUG, "No WNM-Sleep IE found");
		return;
	}

	if (wnmsleep_ie->status == WNM_STATUS_SLEEP_ACCEPT) {
		wpa_printf(MSG_DEBUG, "Successfully recv WNM-Sleep Response "
			   "frame (action=%d, intval=%d)",
			   wnmsleep_ie->action_type, wnmsleep_ie->intval);
		if (wnmsleep_ie->action_type == 0) {
			wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_ENTER_CONFIRM,
					 wpa_s->bssid, NULL, NULL);
			/* remove GTK/IGTK ?? */

			/* set the TFS Resp IE(s) */
			if (tfsresp_ie_start && tfsresp_ie_end &&
			    tfsresp_ie_end - tfsresp_ie_start >= 0) {
				tfsresp_ie_len = (tfsresp_ie_end +
						  tfsresp_ie_end[1] + 2) -
					tfsresp_ie_start;
				wpa_printf(MSG_DEBUG, "TFS Resp IE(s) found");
				/*
				 * pass the TFS Resp IE(s) to driver for
				 * processing
				 */
				if (ieee80211_11_set_tfs_ie(
					    wpa_s, wpa_s->bssid,
					    tfsresp_ie_start,
					    &tfsresp_ie_len,
					    WNM_SLEEP_TFS_RESP_IE_SET))
					wpa_printf(MSG_DEBUG, "Fail to set "
						   "TFS Resp IE");
			}
		} else if (wnmsleep_ie->action_type == 1) {
			wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_EXIT_CONFIRM,
					 wpa_s->bssid, NULL, NULL);
			/* Install GTK/IGTK */
			do {
				/* point to key data field */
				u8 *ptr = (u8 *) frm + 1 + 1 + 2;
				while (ptr < (u8 *) frm + 4 + key_len_total) {
					if (*ptr == WNM_SLEEP_SUBELEM_GTK) {
						gtk_len = *(ptr + 4);
						wpa_wnmsleep_install_key(
							wpa_s->wpa,
							WNM_SLEEP_SUBELEM_GTK,
							ptr);
						ptr += 13 + gtk_len;
#ifdef CONFIG_IEEE80211W
					} else if (*ptr ==
						   WNM_SLEEP_SUBELEM_IGTK) {
						wpa_wnmsleep_install_key(
							wpa_s->wpa,
							WNM_SLEEP_SUBELEM_IGTK,
							ptr);
						ptr += 10 + WPA_IGTK_LEN;
#endif /* CONFIG_IEEE80211W */
					} else
						break; /* skip the loop */
				}
			} while(0);
		}
	} else {
		wpa_printf(MSG_DEBUG, "Reject recv WNM-Sleep Response frame "
			   "(action=%d, intval=%d)",
			   wnmsleep_ie->action_type, wnmsleep_ie->intval);
		if (wnmsleep_ie->action_type == 0)
			wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_ENTER_FAIL,
					 wpa_s->bssid, NULL, NULL);
		else if (wnmsleep_ie->action_type == 1)
			wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_EXIT_FAIL,
					 wpa_s->bssid, NULL, NULL);
	}
}


void ieee802_11_rx_wnm_action(struct wpa_supplicant *wpa_s,
			      struct rx_action *action)
{
	u8 *pos = (u8 *) action->data; /* point to action field */
	u8 act = *pos++;
	/* u8 dialog_token = *pos++; */

	switch (act) {
	case WNM_SLEEP_MODE_RESP:
		ieee802_11_rx_wnmsleep_resp(wpa_s, action->data, action->len);
		break;
	default:
		break;
	}
}

#endif /* CONFIG_IEEE80211V */
Commit	Line	Data
75cad1a0 XC	1	/*
	2	* wpa_supplicant - WNM
	3	* Copyright (c) 2011-2012, Qualcomm Atheros, Inc.
	4	*
	5	* This software may be distributed under the terms of the BSD license.
	6	* See README for more details.
	7	*/
	8
	9	#include "utils/includes.h"
	10
	11	#include "utils/common.h"
	12	#include "common/ieee802_11_defs.h"
	13	#include "rsn_supp/wpa.h"
61c54976 JM	14	#include "wpa_supplicant_i.h"
61c54976 JM	15	#include "driver_i.h"
75cad1a0 XC	16
	17	#define MAX_TFS_IE_LEN 1024
	18
	19	#ifdef CONFIG_IEEE80211V
	20
	21	/* get the TFS IE from driver */
	22	static int ieee80211_11_get_tfs_ie(struct wpa_supplicant wpa_s, u8 buf,
	23	u16 *buf_len, enum wnm_oper oper)
	24	{
	25	wpa_printf(MSG_DEBUG, "%s: TFS get operation %d", __func__, oper);
	26
	27	return wpa_drv_wnm_oper(wpa_s, oper, wpa_s->bssid, buf, buf_len);
	28	}
	29
	30
	31	/* set the TFS IE to driver */
	32	static int ieee80211_11_set_tfs_ie(struct wpa_supplicant *wpa_s,
	33	const u8 addr, u8 buf, u16 *buf_len,
	34	enum wnm_oper oper)
	35	{
	36	wpa_printf(MSG_DEBUG, "%s: TFS set operation %d", __func__, oper);
	37
	38	return wpa_drv_wnm_oper(wpa_s, oper, addr, buf, buf_len);
	39	}
	40
	41
	42	/* MLME-SLEEPMODE.request */
	43	int ieee802_11_send_wnmsleep_req(struct wpa_supplicant *wpa_s,
cd0ef657	44	u8 action, u16 intval, struct wpabuf *tfs_req)
75cad1a0 XC	45	{
	46	struct ieee80211_mgmt *mgmt;
	47	int res;
	48	size_t len;
	49	struct wnm_sleep_element *wnmsleep_ie;
	50	u8 *wnmtfs_ie;
	51	u8 wnmsleep_ie_len;
	52	u16 wnmtfs_ie_len; /* possibly multiple IE(s) */
	53	enum wnm_oper tfs_oper = action == 0 ? WNM_SLEEP_TFS_REQ_IE_ADD :
	54	WNM_SLEEP_TFS_REQ_IE_NONE;
	55
cd0ef657 JM	56	wpa_printf(MSG_DEBUG, "WNM: Request to send WNM-Sleep Mode Request "
	57	"action=%s to " MACSTR,
	58	action == 0 ? "enter" : "exit",
	59	MAC2STR(wpa_s->bssid));
	60
75cad1a0 XC	61	/* WNM-Sleep Mode IE */
	62	wnmsleep_ie_len = sizeof(struct wnm_sleep_element);
	63	wnmsleep_ie = os_zalloc(sizeof(struct wnm_sleep_element));
	64	if (wnmsleep_ie == NULL)
	65	return -1;
	66	wnmsleep_ie->eid = WLAN_EID_WNMSLEEP;
	67	wnmsleep_ie->len = wnmsleep_ie_len - 2;
	68	wnmsleep_ie->action_type = action;
	69	wnmsleep_ie->status = WNM_STATUS_SLEEP_ACCEPT;
e9199e31	70	wnmsleep_ie->intval = host_to_le16(intval);
cd0ef657 JM	71	wpa_hexdump(MSG_DEBUG, "WNM: WNM-Sleep Mode element",
cd0ef657 JM	72	(u8 *) wnmsleep_ie, wnmsleep_ie_len);
75cad1a0 XC	73
75cad1a0 XC	74	/* TFS IE(s) */
cd0ef657 JM	75	if (tfs_req) {
	76	wnmtfs_ie_len = wpabuf_len(tfs_req);
	77	wnmtfs_ie = os_malloc(wnmtfs_ie_len);
	78	if (wnmtfs_ie == NULL) {
	79	os_free(wnmsleep_ie);
	80	return -1;
	81	}
	82	os_memcpy(wnmtfs_ie, wpabuf_head(tfs_req), wnmtfs_ie_len);
	83	} else {
	84	wnmtfs_ie = os_zalloc(MAX_TFS_IE_LEN);
	85	if (wnmtfs_ie == NULL) {
	86	os_free(wnmsleep_ie);
	87	return -1;
	88	}
	89	if (ieee80211_11_get_tfs_ie(wpa_s, wnmtfs_ie, &wnmtfs_ie_len,
	90	tfs_oper)) {
	91	wnmtfs_ie_len = 0;
	92	os_free(wnmtfs_ie);
	93	wnmtfs_ie = NULL;
	94	}
75cad1a0	95	}
cd0ef657 JM	96	wpa_hexdump(MSG_DEBUG, "WNM: TFS Request element",
cd0ef657 JM	97	(u8 *) wnmtfs_ie, wnmtfs_ie_len);
75cad1a0 XC	98
	99	mgmt = os_zalloc(sizeof(*mgmt) + wnmsleep_ie_len + wnmtfs_ie_len);
	100	if (mgmt == NULL) {
	101	wpa_printf(MSG_DEBUG, "MLME: Failed to allocate buffer for "
	102	"WNM-Sleep Request action frame");
	103	return -1;
	104	}
	105
	106	os_memcpy(mgmt->da, wpa_s->bssid, ETH_ALEN);
	107	os_memcpy(mgmt->sa, wpa_s->own_addr, ETH_ALEN);
	108	os_memcpy(mgmt->bssid, wpa_s->bssid, ETH_ALEN);
	109	mgmt->frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT,
	110	WLAN_FC_STYPE_ACTION);
	111	mgmt->u.action.category = WLAN_ACTION_WNM;
	112	mgmt->u.action.u.wnm_sleep_req.action = WNM_SLEEP_MODE_REQ;
	113	os_memcpy(mgmt->u.action.u.wnm_sleep_req.variable, wnmsleep_ie,
	114	wnmsleep_ie_len);
	115	/* copy TFS IE here */
	116	if (wnmtfs_ie_len > 0) {
	117	os_memcpy(mgmt->u.action.u.wnm_sleep_req.variable +
	118	wnmsleep_ie_len, wnmtfs_ie, wnmtfs_ie_len);
	119	}
	120
	121	len = 1 + sizeof(mgmt->u.action.u.wnm_sleep_req) + wnmsleep_ie_len +
	122	wnmtfs_ie_len;
	123
	124	res = wpa_drv_send_action(wpa_s, wpa_s->assoc_freq, 0, wpa_s->bssid,
	125	wpa_s->own_addr, wpa_s->bssid,
	126	&mgmt->u.action.category, len, 0);
	127	if (res < 0)
	128	wpa_printf(MSG_DEBUG, "Failed to send WNM-Sleep Request "
	129	"(action=%d, intval=%d)", action, intval);
	130
	131	os_free(wnmsleep_ie);
	132	os_free(wnmtfs_ie);
	133	os_free(mgmt);
	134
	135	return res;
	136	}
	137
	138
	139	static void ieee802_11_rx_wnmsleep_resp(struct wpa_supplicant *wpa_s,
	140	const u8 *frm, int len)
	141	{
	142	/*
	143	* Action [1] \| Diaglog Token [1] \| Key Data Len [2] \| Key Data \|
	144	* WNM-Sleep Mode IE \| TFS Response IE
	145	*/
	146	u8 pos = (u8 ) frm; /* point to action field */
	147	u16 key_len_total = le_to_host16(((u16 )(frm+2)));
	148	u8 gtk_len;
75cad1a0 XC	149	struct wnm_sleep_element *wnmsleep_ie = NULL;
	150	/* multiple TFS Resp IE (assuming consecutive) */
	151	u8 *tfsresp_ie_start = NULL;
	152	u8 *tfsresp_ie_end = NULL;
	153	u16 tfsresp_ie_len = 0;
	154
	155	wpa_printf(MSG_DEBUG, "action=%d token = %d key_len_total = %d",
	156	frm[0], frm[1], key_len_total);
	157	pos += 4 + key_len_total;
	158	while (pos - frm < len) {
	159	u8 ie_len = *(pos + 1);
	160	if (*pos == WLAN_EID_WNMSLEEP)
	161	wnmsleep_ie = (struct wnm_sleep_element *) pos;
	162	else if (*pos == WLAN_EID_TFS_RESP) {
	163	if (!tfsresp_ie_start)
	164	tfsresp_ie_start = pos;
	165	tfsresp_ie_end = pos;
	166	} else
	167	wpa_printf(MSG_DEBUG, "EID %d not recognized", *pos);
	168	pos += ie_len + 2;
	169	}
	170
	171	if (!wnmsleep_ie) {
	172	wpa_printf(MSG_DEBUG, "No WNM-Sleep IE found");
	173	return;
	174	}
	175
	176	if (wnmsleep_ie->status == WNM_STATUS_SLEEP_ACCEPT) {
	177	wpa_printf(MSG_DEBUG, "Successfully recv WNM-Sleep Response "
	178	"frame (action=%d, intval=%d)",
	179	wnmsleep_ie->action_type, wnmsleep_ie->intval);
	180	if (wnmsleep_ie->action_type == 0) {
	181	wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_ENTER_CONFIRM,
	182	wpa_s->bssid, NULL, NULL);
	183	/* remove GTK/IGTK ?? */
	184
	185	/* set the TFS Resp IE(s) */
	186	if (tfsresp_ie_start && tfsresp_ie_end &&
	187	tfsresp_ie_end - tfsresp_ie_start >= 0) {
	188	tfsresp_ie_len = (tfsresp_ie_end +
	189	tfsresp_ie_end[1] + 2) -
	190	tfsresp_ie_start;
	191	wpa_printf(MSG_DEBUG, "TFS Resp IE(s) found");
	192	/*
	193	* pass the TFS Resp IE(s) to driver for
	194	* processing
	195	*/
	196	if (ieee80211_11_set_tfs_ie(
	197	wpa_s, wpa_s->bssid,
	198	tfsresp_ie_start,
	199	&tfsresp_ie_len,
	200	WNM_SLEEP_TFS_RESP_IE_SET))
	201	wpa_printf(MSG_DEBUG, "Fail to set "
	202	"TFS Resp IE");
	203	}
	204	} else if (wnmsleep_ie->action_type == 1) {
	205	wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_EXIT_CONFIRM,
	206	wpa_s->bssid, NULL, NULL);
	207	/* Install GTK/IGTK */
	208	do {
	209	/* point to key data field */
	210	u8 ptr = (u8 ) frm + 1 + 1 + 2;
	211	while (ptr < (u8 *) frm + 4 + key_len_total) {
	212	if (*ptr == WNM_SLEEP_SUBELEM_GTK) {
213	gtk_len = *(ptr + 4);
214	wpa_wnmsleep_install_key(
215	wpa_s->wpa,
216	WNM_SLEEP_SUBELEM_GTK,
217	ptr);
218	ptr += 13 + gtk_len;
219	#ifdef CONFIG_IEEE80211W
220	} else if (*ptr ==
221	WNM_SLEEP_SUBELEM_IGTK) {
75cad1a0 XC	222	wpa_wnmsleep_install_key(
	223	wpa_s->wpa,
	224	WNM_SLEEP_SUBELEM_IGTK,
	225	ptr);
	226	ptr += 10 + WPA_IGTK_LEN;
	227	#endif /* CONFIG_IEEE80211W */
	228	} else
	229	break; /* skip the loop */
	230	}
	231	} while(0);
	232	}
	233	} else {
	234	wpa_printf(MSG_DEBUG, "Reject recv WNM-Sleep Response frame "
	235	"(action=%d, intval=%d)",
	236	wnmsleep_ie->action_type, wnmsleep_ie->intval);
	237	if (wnmsleep_ie->action_type == 0)
	238	wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_ENTER_FAIL,
	239	wpa_s->bssid, NULL, NULL);
	240	else if (wnmsleep_ie->action_type == 1)
	241	wpa_drv_wnm_oper(wpa_s, WNM_SLEEP_EXIT_FAIL,
	242	wpa_s->bssid, NULL, NULL);
	243	}
	244	}
	245
	246
	247	void ieee802_11_rx_wnm_action(struct wpa_supplicant *wpa_s,
	248	struct rx_action *action)
	249	{
	250	u8 pos = (u8 ) action->data; /* point to action field */
	251	u8 act = *pos++;
	252	/* u8 dialog_token = pos++; /
	253
	254	switch (act) {
	255	case WNM_SLEEP_MODE_RESP:
	256	ieee802_11_rx_wnmsleep_resp(wpa_s, action->data, action->len);
	257	break;
	258	default:
	259	break;
	260	}
	261	}
	262
	263	#endif /* CONFIG_IEEE80211V */