2 * Driver interaction with Linux nl80211/cfg80211
3 * Copyright (c) 2002-2010, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2003-2004, Instant802 Networks, Inc.
5 * Copyright (c) 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2007, Johannes Berg <johannes@sipsolutions.net>
7 * Copyright (c) 2009-2010, Atheros Communications
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
13 * Alternatively, this software may be distributed under the terms of BSD
16 * See README and COPYING for more details.
20 #include <sys/ioctl.h>
21 #include <sys/types.h>
25 #include <netlink/genl/genl.h>
26 #include <netlink/genl/family.h>
27 #include <netlink/genl/ctrl.h>
28 #include <linux/rtnetlink.h>
29 #include <netpacket/packet.h>
30 #include <linux/filter.h>
31 #include "nl80211_copy.h"
35 #include "utils/list.h"
36 #include "common/ieee802_11_defs.h"
37 #include "common/ieee802_11_common.h"
38 #include "l2_packet/l2_packet.h"
40 #include "linux_ioctl.h"
42 #include "radiotap_iter.h"
47 /* libnl 2.0 compatibility code */
48 #define nl_handle nl_sock
49 #define nl80211_handle_alloc nl_socket_alloc_cb
50 #define nl80211_handle_destroy nl_socket_free
53 * libnl 1.1 has a bug, it tries to allocate socket numbers densely
54 * but when you free a socket again it will mess up its bitmap and
55 * and use the wrong number the next time it needs a socket ID.
56 * Therefore, we wrap the handle alloc/destroy and add our own pid
59 static uint32_t port_bitmap
[32] = { 0 };
61 static struct nl_handle
*nl80211_handle_alloc(void *cb
)
63 struct nl_handle
*handle
;
64 uint32_t pid
= getpid() & 0x3FFFFF;
67 handle
= nl_handle_alloc_cb(cb
);
69 for (i
= 0; i
< 1024; i
++) {
70 if (port_bitmap
[i
/ 32] & (1 << (i
% 32)))
72 port_bitmap
[i
/ 32] |= 1 << (i
% 32);
77 nl_socket_set_local_port(handle
, pid
);
82 static void nl80211_handle_destroy(struct nl_handle
*handle
)
84 uint32_t port
= nl_socket_get_local_port(handle
);
87 port_bitmap
[port
/ 32] &= ~(1 << (port
% 32));
89 nl_handle_destroy(handle
);
91 #endif /* CONFIG_LIBNL20 */
94 struct nl80211_handles
{
95 struct nl_handle
*handle
;
99 static int nl_create_handles(struct nl80211_handles
*handles
, struct nl_cb
*cb
,
105 handles
->handle
= nl80211_handle_alloc(cb
);
106 if (handles
->handle
== NULL
) {
107 wpa_printf(MSG_ERROR
, "nl80211: Failed to allocate netlink "
108 "callbacks (%s)", dbg
);
112 if (genl_connect(handles
->handle
)) {
113 wpa_printf(MSG_ERROR
, "nl80211: Failed to connect to generic "
114 "netlink (%s)", dbg
);
120 nl80211_handle_destroy(handles
->handle
);
125 static void nl_destroy_handles(struct nl80211_handles
*handles
)
127 if (handles
->handle
== NULL
)
129 nl80211_handle_destroy(handles
->handle
);
130 handles
->handle
= NULL
;
135 #define IFF_LOWER_UP 0x10000 /* driver signals L1 up */
138 #define IFF_DORMANT 0x20000 /* driver signals dormant */
141 #ifndef IF_OPER_DORMANT
142 #define IF_OPER_DORMANT 5
148 struct nl80211_global
{
149 struct dl_list interfaces
;
151 struct netlink_data
*netlink
;
153 struct nl80211_handles nl
;
155 int ioctl_sock
; /* socket for ioctl() use */
158 static void nl80211_global_deinit(void *priv
);
159 static void wpa_driver_nl80211_deinit(void *priv
);
162 struct wpa_driver_nl80211_data
*drv
;
163 struct i802_bss
*next
;
165 char ifname
[IFNAMSIZ
+ 1];
166 char brname
[IFNAMSIZ
];
167 unsigned int beacon_set
:1;
168 unsigned int added_if_into_bridge
:1;
169 unsigned int added_bridge
:1;
172 struct wpa_driver_nl80211_data
{
173 struct nl80211_global
*global
;
181 int ignore_if_down_event
;
182 struct rfkill_data
*rfkill
;
183 struct wpa_driver_capa capa
;
188 int scan_complete_events
;
190 struct nl80211_handles nl_event
, nl_preq
;
192 u8 auth_bssid
[ETH_ALEN
];
197 enum nl80211_iftype nlmode
;
198 enum nl80211_iftype ap_scan_as_station
;
199 unsigned int assoc_freq
;
203 int no_monitor_iface_capab
;
205 unsigned int disabled_11b_rates
:1;
206 unsigned int pending_remain_on_chan
:1;
207 unsigned int in_interface_list
:1;
209 u64 remain_on_chan_cookie
;
210 u64 send_action_cookie
;
212 unsigned int last_mgmt_freq
;
213 unsigned int ap_oper_freq
;
215 struct wpa_driver_scan_filter
*filter_ssids
;
216 size_t num_filter_ssids
;
218 struct i802_bss first_bss
;
221 struct l2_packet_data
*l2
;
222 #endif /* CONFIG_AP */
225 int eapol_sock
; /* socket for EAPOL frames */
227 int default_if_indices
[16];
237 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx
,
239 static int wpa_driver_nl80211_set_mode(struct i802_bss
*bss
,
240 enum nl80211_iftype nlmode
);
242 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data
*drv
);
243 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data
*drv
,
244 const u8
*addr
, int cmd
, u16 reason_code
,
245 int local_state_change
);
246 static void nl80211_remove_monitor_interface(
247 struct wpa_driver_nl80211_data
*drv
);
248 static int nl80211_send_frame_cmd(struct wpa_driver_nl80211_data
*drv
,
249 unsigned int freq
, unsigned int wait
,
250 const u8
*buf
, size_t buf_len
, u64
*cookie
,
252 static int wpa_driver_nl80211_probe_req_report(void *priv
, int report
);
255 static void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
256 static void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
257 static int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
258 static int wpa_driver_nl80211_if_remove(void *priv
,
259 enum wpa_driver_if_type type
,
262 static inline void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
266 static inline void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
270 static inline int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
276 static int i802_set_freq(void *priv
, struct hostapd_freq_params
*freq
);
277 static int nl80211_disable_11b_rates(struct wpa_driver_nl80211_data
*drv
,
278 int ifindex
, int disabled
);
280 static int nl80211_leave_ibss(struct wpa_driver_nl80211_data
*drv
);
283 static int is_ap_interface(enum nl80211_iftype nlmode
)
285 return (nlmode
== NL80211_IFTYPE_AP
||
286 nlmode
== NL80211_IFTYPE_P2P_GO
);
290 static int is_sta_interface(enum nl80211_iftype nlmode
)
292 return (nlmode
== NL80211_IFTYPE_STATION
||
293 nlmode
== NL80211_IFTYPE_P2P_CLIENT
);
297 static int is_p2p_interface(enum nl80211_iftype nlmode
)
299 return (nlmode
== NL80211_IFTYPE_P2P_CLIENT
||
300 nlmode
== NL80211_IFTYPE_P2P_GO
);
304 struct nl80211_bss_info_arg
{
305 struct wpa_driver_nl80211_data
*drv
;
306 struct wpa_scan_results
*res
;
307 unsigned int assoc_freq
;
308 u8 assoc_bssid
[ETH_ALEN
];
311 static int bss_info_handler(struct nl_msg
*msg
, void *arg
);
315 static int ack_handler(struct nl_msg
*msg
, void *arg
)
322 static int finish_handler(struct nl_msg
*msg
, void *arg
)
329 static int error_handler(struct sockaddr_nl
*nla
, struct nlmsgerr
*err
,
338 static int no_seq_check(struct nl_msg
*msg
, void *arg
)
344 static int send_and_recv(struct wpa_driver_nl80211_data
*drv
,
345 struct nl_handle
*nl_handle
, struct nl_msg
*msg
,
346 int (*valid_handler
)(struct nl_msg
*, void *),
352 cb
= nl_cb_clone(drv
->global
->nl_cb
);
356 err
= nl_send_auto_complete(nl_handle
, msg
);
362 nl_cb_err(cb
, NL_CB_CUSTOM
, error_handler
, &err
);
363 nl_cb_set(cb
, NL_CB_FINISH
, NL_CB_CUSTOM
, finish_handler
, &err
);
364 nl_cb_set(cb
, NL_CB_ACK
, NL_CB_CUSTOM
, ack_handler
, &err
);
367 nl_cb_set(cb
, NL_CB_VALID
, NL_CB_CUSTOM
,
368 valid_handler
, valid_data
);
371 nl_recvmsgs(nl_handle
, cb
);
379 static int send_and_recv_msgs(struct wpa_driver_nl80211_data
*drv
,
381 int (*valid_handler
)(struct nl_msg
*, void *),
384 return send_and_recv(drv
, drv
->global
->nl
.handle
, msg
, valid_handler
,
395 static int family_handler(struct nl_msg
*msg
, void *arg
)
397 struct family_data
*res
= arg
;
398 struct nlattr
*tb
[CTRL_ATTR_MAX
+ 1];
399 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
400 struct nlattr
*mcgrp
;
403 nla_parse(tb
, CTRL_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
404 genlmsg_attrlen(gnlh
, 0), NULL
);
405 if (!tb
[CTRL_ATTR_MCAST_GROUPS
])
408 nla_for_each_nested(mcgrp
, tb
[CTRL_ATTR_MCAST_GROUPS
], i
) {
409 struct nlattr
*tb2
[CTRL_ATTR_MCAST_GRP_MAX
+ 1];
410 nla_parse(tb2
, CTRL_ATTR_MCAST_GRP_MAX
, nla_data(mcgrp
),
411 nla_len(mcgrp
), NULL
);
412 if (!tb2
[CTRL_ATTR_MCAST_GRP_NAME
] ||
413 !tb2
[CTRL_ATTR_MCAST_GRP_ID
] ||
414 os_strncmp(nla_data(tb2
[CTRL_ATTR_MCAST_GRP_NAME
]),
416 nla_len(tb2
[CTRL_ATTR_MCAST_GRP_NAME
])) != 0)
418 res
->id
= nla_get_u32(tb2
[CTRL_ATTR_MCAST_GRP_ID
]);
426 static int nl_get_multicast_id(struct wpa_driver_nl80211_data
*drv
,
427 const char *family
, const char *group
)
431 struct family_data res
= { group
, -ENOENT
};
436 genlmsg_put(msg
, 0, 0,
437 genl_ctrl_resolve(drv
->global
->nl
.handle
, "nlctrl"),
438 0, 0, CTRL_CMD_GETFAMILY
, 0);
439 NLA_PUT_STRING(msg
, CTRL_ATTR_FAMILY_NAME
, family
);
441 ret
= send_and_recv_msgs(drv
, msg
, family_handler
, &res
);
452 static void * nl80211_cmd(struct wpa_driver_nl80211_data
*drv
,
453 struct nl_msg
*msg
, int flags
, uint8_t cmd
)
455 return genlmsg_put(msg
, 0, 0, drv
->global
->nl80211_id
,
460 static int wpa_driver_nl80211_get_bssid(void *priv
, u8
*bssid
)
462 struct i802_bss
*bss
= priv
;
463 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
464 if (!drv
->associated
)
466 os_memcpy(bssid
, drv
->bssid
, ETH_ALEN
);
471 static int wpa_driver_nl80211_get_ssid(void *priv
, u8
*ssid
)
473 struct i802_bss
*bss
= priv
;
474 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
475 if (!drv
->associated
)
477 os_memcpy(ssid
, drv
->ssid
, drv
->ssid_len
);
478 return drv
->ssid_len
;
482 static void wpa_driver_nl80211_event_link(struct wpa_driver_nl80211_data
*drv
,
483 char *buf
, size_t len
, int del
)
485 union wpa_event_data event
;
487 os_memset(&event
, 0, sizeof(event
));
488 if (len
> sizeof(event
.interface_status
.ifname
))
489 len
= sizeof(event
.interface_status
.ifname
) - 1;
490 os_memcpy(event
.interface_status
.ifname
, buf
, len
);
491 event
.interface_status
.ievent
= del
? EVENT_INTERFACE_REMOVED
:
492 EVENT_INTERFACE_ADDED
;
494 wpa_printf(MSG_DEBUG
, "RTM_%sLINK, IFLA_IFNAME: Interface '%s' %s",
496 event
.interface_status
.ifname
,
497 del
? "removed" : "added");
499 if (os_strcmp(drv
->first_bss
.ifname
, event
.interface_status
.ifname
) == 0) {
506 wpa_supplicant_event(drv
->ctx
, EVENT_INTERFACE_STATUS
, &event
);
510 static int wpa_driver_nl80211_own_ifname(struct wpa_driver_nl80211_data
*drv
,
513 int attrlen
, rta_len
;
517 attr
= (struct rtattr
*) buf
;
519 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
520 while (RTA_OK(attr
, attrlen
)) {
521 if (attr
->rta_type
== IFLA_IFNAME
) {
522 if (os_strcmp(((char *) attr
) + rta_len
, drv
->first_bss
.ifname
)
528 attr
= RTA_NEXT(attr
, attrlen
);
535 static int wpa_driver_nl80211_own_ifindex(struct wpa_driver_nl80211_data
*drv
,
536 int ifindex
, u8
*buf
, size_t len
)
538 if (drv
->ifindex
== ifindex
)
541 if (drv
->if_removed
&& wpa_driver_nl80211_own_ifname(drv
, buf
, len
)) {
542 drv
->first_bss
.ifindex
= if_nametoindex(drv
->first_bss
.ifname
);
543 wpa_printf(MSG_DEBUG
, "nl80211: Update ifindex for a removed "
545 wpa_driver_nl80211_finish_drv_init(drv
);
553 static struct wpa_driver_nl80211_data
*
554 nl80211_find_drv(struct nl80211_global
*global
, int idx
, u8
*buf
, size_t len
)
556 struct wpa_driver_nl80211_data
*drv
;
557 dl_list_for_each(drv
, &global
->interfaces
,
558 struct wpa_driver_nl80211_data
, list
) {
559 if (wpa_driver_nl80211_own_ifindex(drv
, idx
, buf
, len
) ||
560 have_ifidx(drv
, idx
))
567 static void wpa_driver_nl80211_event_rtm_newlink(void *ctx
,
568 struct ifinfomsg
*ifi
,
571 struct nl80211_global
*global
= ctx
;
572 struct wpa_driver_nl80211_data
*drv
;
573 int attrlen
, rta_len
;
577 drv
= nl80211_find_drv(global
, ifi
->ifi_index
, buf
, len
);
579 wpa_printf(MSG_DEBUG
, "nl80211: Ignore event for foreign "
580 "ifindex %d", ifi
->ifi_index
);
584 wpa_printf(MSG_DEBUG
, "RTM_NEWLINK: operstate=%d ifi_flags=0x%x "
586 drv
->operstate
, ifi
->ifi_flags
,
587 (ifi
->ifi_flags
& IFF_UP
) ? "[UP]" : "",
588 (ifi
->ifi_flags
& IFF_RUNNING
) ? "[RUNNING]" : "",
589 (ifi
->ifi_flags
& IFF_LOWER_UP
) ? "[LOWER_UP]" : "",
590 (ifi
->ifi_flags
& IFF_DORMANT
) ? "[DORMANT]" : "");
592 if (!drv
->if_disabled
&& !(ifi
->ifi_flags
& IFF_UP
)) {
593 char namebuf
[IFNAMSIZ
];
594 if (if_indextoname(ifi
->ifi_index
, namebuf
) &&
595 linux_iface_up(drv
->global
->ioctl_sock
,
596 drv
->first_bss
.ifname
) > 0) {
597 wpa_printf(MSG_DEBUG
, "nl80211: Ignore interface down "
598 "event since interface %s is up", namebuf
);
601 wpa_printf(MSG_DEBUG
, "nl80211: Interface down");
602 if (drv
->ignore_if_down_event
) {
603 wpa_printf(MSG_DEBUG
, "nl80211: Ignore interface down "
604 "event generated by mode change");
605 drv
->ignore_if_down_event
= 0;
607 drv
->if_disabled
= 1;
608 wpa_supplicant_event(drv
->ctx
,
609 EVENT_INTERFACE_DISABLED
, NULL
);
613 if (drv
->if_disabled
&& (ifi
->ifi_flags
& IFF_UP
)) {
614 wpa_printf(MSG_DEBUG
, "nl80211: Interface up");
615 drv
->if_disabled
= 0;
616 wpa_supplicant_event(drv
->ctx
, EVENT_INTERFACE_ENABLED
, NULL
);
620 * Some drivers send the association event before the operup event--in
621 * this case, lifting operstate in wpa_driver_nl80211_set_operstate()
622 * fails. This will hit us when wpa_supplicant does not need to do
623 * IEEE 802.1X authentication
625 if (drv
->operstate
== 1 &&
626 (ifi
->ifi_flags
& (IFF_LOWER_UP
| IFF_DORMANT
)) == IFF_LOWER_UP
&&
627 !(ifi
->ifi_flags
& IFF_RUNNING
))
628 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
,
632 attr
= (struct rtattr
*) buf
;
633 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
634 while (RTA_OK(attr
, attrlen
)) {
635 if (attr
->rta_type
== IFLA_IFNAME
) {
636 wpa_driver_nl80211_event_link(
638 ((char *) attr
) + rta_len
,
639 attr
->rta_len
- rta_len
, 0);
640 } else if (attr
->rta_type
== IFLA_MASTER
)
641 brid
= nla_get_u32((struct nlattr
*) attr
);
642 attr
= RTA_NEXT(attr
, attrlen
);
645 if (ifi
->ifi_family
== AF_BRIDGE
&& brid
) {
646 /* device has been added to bridge */
647 char namebuf
[IFNAMSIZ
];
648 if_indextoname(brid
, namebuf
);
649 wpa_printf(MSG_DEBUG
, "nl80211: Add ifindex %u for bridge %s",
651 add_ifidx(drv
, brid
);
656 static void wpa_driver_nl80211_event_rtm_dellink(void *ctx
,
657 struct ifinfomsg
*ifi
,
660 struct nl80211_global
*global
= ctx
;
661 struct wpa_driver_nl80211_data
*drv
;
662 int attrlen
, rta_len
;
666 drv
= nl80211_find_drv(global
, ifi
->ifi_index
, buf
, len
);
668 wpa_printf(MSG_DEBUG
, "nl80211: Ignore dellink event for "
669 "foreign ifindex %d", ifi
->ifi_index
);
674 attr
= (struct rtattr
*) buf
;
676 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
677 while (RTA_OK(attr
, attrlen
)) {
678 if (attr
->rta_type
== IFLA_IFNAME
) {
679 wpa_driver_nl80211_event_link(
681 ((char *) attr
) + rta_len
,
682 attr
->rta_len
- rta_len
, 1);
683 } else if (attr
->rta_type
== IFLA_MASTER
)
684 brid
= nla_get_u32((struct nlattr
*) attr
);
685 attr
= RTA_NEXT(attr
, attrlen
);
688 if (ifi
->ifi_family
== AF_BRIDGE
&& brid
) {
689 /* device has been removed from bridge */
690 char namebuf
[IFNAMSIZ
];
691 if_indextoname(brid
, namebuf
);
692 wpa_printf(MSG_DEBUG
, "nl80211: Remove ifindex %u for bridge "
693 "%s", brid
, namebuf
);
694 del_ifidx(drv
, brid
);
699 static void mlme_event_auth(struct wpa_driver_nl80211_data
*drv
,
700 const u8
*frame
, size_t len
)
702 const struct ieee80211_mgmt
*mgmt
;
703 union wpa_event_data event
;
705 mgmt
= (const struct ieee80211_mgmt
*) frame
;
706 if (len
< 24 + sizeof(mgmt
->u
.auth
)) {
707 wpa_printf(MSG_DEBUG
, "nl80211: Too short association event "
712 os_memcpy(drv
->auth_bssid
, mgmt
->sa
, ETH_ALEN
);
713 os_memset(&event
, 0, sizeof(event
));
714 os_memcpy(event
.auth
.peer
, mgmt
->sa
, ETH_ALEN
);
715 event
.auth
.auth_type
= le_to_host16(mgmt
->u
.auth
.auth_alg
);
716 event
.auth
.status_code
= le_to_host16(mgmt
->u
.auth
.status_code
);
717 if (len
> 24 + sizeof(mgmt
->u
.auth
)) {
718 event
.auth
.ies
= mgmt
->u
.auth
.variable
;
719 event
.auth
.ies_len
= len
- 24 - sizeof(mgmt
->u
.auth
);
722 wpa_supplicant_event(drv
->ctx
, EVENT_AUTH
, &event
);
726 static unsigned int nl80211_get_assoc_freq(struct wpa_driver_nl80211_data
*drv
)
730 struct nl80211_bss_info_arg arg
;
732 os_memset(&arg
, 0, sizeof(arg
));
735 goto nla_put_failure
;
737 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
738 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
741 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
744 wpa_printf(MSG_DEBUG
, "nl80211: Operating frequency for the "
745 "associated BSS from scan results: %u MHz",
747 return arg
.assoc_freq
? arg
.assoc_freq
: drv
->assoc_freq
;
749 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
750 "(%s)", ret
, strerror(-ret
));
753 return drv
->assoc_freq
;
757 static void mlme_event_assoc(struct wpa_driver_nl80211_data
*drv
,
758 const u8
*frame
, size_t len
)
760 const struct ieee80211_mgmt
*mgmt
;
761 union wpa_event_data event
;
764 mgmt
= (const struct ieee80211_mgmt
*) frame
;
765 if (len
< 24 + sizeof(mgmt
->u
.assoc_resp
)) {
766 wpa_printf(MSG_DEBUG
, "nl80211: Too short association event "
771 status
= le_to_host16(mgmt
->u
.assoc_resp
.status_code
);
772 if (status
!= WLAN_STATUS_SUCCESS
) {
773 os_memset(&event
, 0, sizeof(event
));
774 event
.assoc_reject
.bssid
= mgmt
->bssid
;
775 if (len
> 24 + sizeof(mgmt
->u
.assoc_resp
)) {
776 event
.assoc_reject
.resp_ies
=
777 (u8
*) mgmt
->u
.assoc_resp
.variable
;
778 event
.assoc_reject
.resp_ies_len
=
779 len
- 24 - sizeof(mgmt
->u
.assoc_resp
);
781 event
.assoc_reject
.status_code
= status
;
783 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC_REJECT
, &event
);
788 os_memcpy(drv
->bssid
, mgmt
->sa
, ETH_ALEN
);
790 os_memset(&event
, 0, sizeof(event
));
791 if (len
> 24 + sizeof(mgmt
->u
.assoc_resp
)) {
792 event
.assoc_info
.resp_ies
= (u8
*) mgmt
->u
.assoc_resp
.variable
;
793 event
.assoc_info
.resp_ies_len
=
794 len
- 24 - sizeof(mgmt
->u
.assoc_resp
);
797 event
.assoc_info
.freq
= drv
->assoc_freq
;
799 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, &event
);
803 static void mlme_event_connect(struct wpa_driver_nl80211_data
*drv
,
804 enum nl80211_commands cmd
, struct nlattr
*status
,
805 struct nlattr
*addr
, struct nlattr
*req_ie
,
806 struct nlattr
*resp_ie
)
808 union wpa_event_data event
;
810 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
812 * Avoid reporting two association events that would confuse
815 wpa_printf(MSG_DEBUG
, "nl80211: Ignore connect event (cmd=%d) "
816 "when using userspace SME", cmd
);
820 os_memset(&event
, 0, sizeof(event
));
821 if (cmd
== NL80211_CMD_CONNECT
&&
822 nla_get_u16(status
) != WLAN_STATUS_SUCCESS
) {
824 event
.assoc_reject
.bssid
= nla_data(addr
);
826 event
.assoc_reject
.resp_ies
= nla_data(resp_ie
);
827 event
.assoc_reject
.resp_ies_len
= nla_len(resp_ie
);
829 event
.assoc_reject
.status_code
= nla_get_u16(status
);
830 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC_REJECT
, &event
);
836 os_memcpy(drv
->bssid
, nla_data(addr
), ETH_ALEN
);
839 event
.assoc_info
.req_ies
= nla_data(req_ie
);
840 event
.assoc_info
.req_ies_len
= nla_len(req_ie
);
843 event
.assoc_info
.resp_ies
= nla_data(resp_ie
);
844 event
.assoc_info
.resp_ies_len
= nla_len(resp_ie
);
847 event
.assoc_info
.freq
= nl80211_get_assoc_freq(drv
);
849 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, &event
);
853 static void mlme_event_disconnect(struct wpa_driver_nl80211_data
*drv
,
854 struct nlattr
*reason
, struct nlattr
*addr
)
856 union wpa_event_data data
;
858 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
860 * Avoid reporting two disassociation events that could
861 * confuse the core code.
863 wpa_printf(MSG_DEBUG
, "nl80211: Ignore disconnect "
864 "event when using userspace SME");
869 os_memset(&data
, 0, sizeof(data
));
871 data
.disassoc_info
.reason_code
= nla_get_u16(reason
);
872 wpa_supplicant_event(drv
->ctx
, EVENT_DISASSOC
, &data
);
876 static void mlme_timeout_event(struct wpa_driver_nl80211_data
*drv
,
877 enum nl80211_commands cmd
, struct nlattr
*addr
)
879 union wpa_event_data event
;
880 enum wpa_event_type ev
;
882 if (nla_len(addr
) != ETH_ALEN
)
885 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d; timeout with " MACSTR
,
886 cmd
, MAC2STR((u8
*) nla_data(addr
)));
888 if (cmd
== NL80211_CMD_AUTHENTICATE
)
889 ev
= EVENT_AUTH_TIMED_OUT
;
890 else if (cmd
== NL80211_CMD_ASSOCIATE
)
891 ev
= EVENT_ASSOC_TIMED_OUT
;
895 os_memset(&event
, 0, sizeof(event
));
896 os_memcpy(event
.timeout_event
.addr
, nla_data(addr
), ETH_ALEN
);
897 wpa_supplicant_event(drv
->ctx
, ev
, &event
);
901 static void mlme_event_mgmt(struct wpa_driver_nl80211_data
*drv
,
902 struct nlattr
*freq
, const u8
*frame
, size_t len
)
904 const struct ieee80211_mgmt
*mgmt
;
905 union wpa_event_data event
;
908 mgmt
= (const struct ieee80211_mgmt
*) frame
;
910 wpa_printf(MSG_DEBUG
, "nl80211: Too short action frame");
914 fc
= le_to_host16(mgmt
->frame_control
);
915 stype
= WLAN_FC_GET_STYPE(fc
);
917 os_memset(&event
, 0, sizeof(event
));
919 event
.rx_action
.freq
= nla_get_u32(freq
);
920 drv
->last_mgmt_freq
= event
.rx_action
.freq
;
922 if (stype
== WLAN_FC_STYPE_ACTION
) {
923 event
.rx_action
.da
= mgmt
->da
;
924 event
.rx_action
.sa
= mgmt
->sa
;
925 event
.rx_action
.bssid
= mgmt
->bssid
;
926 event
.rx_action
.category
= mgmt
->u
.action
.category
;
927 event
.rx_action
.data
= &mgmt
->u
.action
.category
+ 1;
928 event
.rx_action
.len
= frame
+ len
- event
.rx_action
.data
;
929 wpa_supplicant_event(drv
->ctx
, EVENT_RX_ACTION
, &event
);
931 event
.rx_mgmt
.frame
= frame
;
932 event
.rx_mgmt
.frame_len
= len
;
933 wpa_supplicant_event(drv
->ctx
, EVENT_RX_MGMT
, &event
);
938 static void mlme_event_action_tx_status(struct wpa_driver_nl80211_data
*drv
,
939 struct nlattr
*cookie
, const u8
*frame
,
940 size_t len
, struct nlattr
*ack
)
942 union wpa_event_data event
;
943 const struct ieee80211_hdr
*hdr
;
950 cookie_val
= nla_get_u64(cookie
);
951 wpa_printf(MSG_DEBUG
, "nl80211: Action TX status: cookie=0%llx%s "
953 (long long unsigned int) cookie_val
,
954 cookie_val
== drv
->send_action_cookie
?
955 " (match)" : " (unknown)", ack
!= NULL
);
956 if (cookie_val
!= drv
->send_action_cookie
)
959 hdr
= (const struct ieee80211_hdr
*) frame
;
960 fc
= le_to_host16(hdr
->frame_control
);
962 os_memset(&event
, 0, sizeof(event
));
963 event
.tx_status
.type
= WLAN_FC_GET_TYPE(fc
);
964 event
.tx_status
.stype
= WLAN_FC_GET_STYPE(fc
);
965 event
.tx_status
.dst
= hdr
->addr1
;
966 event
.tx_status
.data
= frame
;
967 event
.tx_status
.data_len
= len
;
968 event
.tx_status
.ack
= ack
!= NULL
;
969 wpa_supplicant_event(drv
->ctx
, EVENT_TX_STATUS
, &event
);
973 static void mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data
*drv
,
974 enum wpa_event_type type
,
975 const u8
*frame
, size_t len
)
977 const struct ieee80211_mgmt
*mgmt
;
978 union wpa_event_data event
;
979 const u8
*bssid
= NULL
;
982 mgmt
= (const struct ieee80211_mgmt
*) frame
;
986 if (drv
->associated
!= 0 &&
987 os_memcmp(bssid
, drv
->bssid
, ETH_ALEN
) != 0 &&
988 os_memcmp(bssid
, drv
->auth_bssid
, ETH_ALEN
) != 0) {
990 * We have presumably received this deauth as a
991 * response to a clear_state_mismatch() outgoing
992 * deauth. Don't let it take us offline!
994 wpa_printf(MSG_DEBUG
, "nl80211: Deauth received "
995 "from Unknown BSSID " MACSTR
" -- ignoring",
1001 drv
->associated
= 0;
1002 os_memset(&event
, 0, sizeof(event
));
1004 /* Note: Same offset for Reason Code in both frame subtypes */
1005 if (len
>= 24 + sizeof(mgmt
->u
.deauth
))
1006 reason_code
= le_to_host16(mgmt
->u
.deauth
.reason_code
);
1008 if (type
== EVENT_DISASSOC
) {
1009 event
.disassoc_info
.addr
= bssid
;
1010 event
.disassoc_info
.reason_code
= reason_code
;
1011 if (frame
+ len
> mgmt
->u
.disassoc
.variable
) {
1012 event
.disassoc_info
.ie
= mgmt
->u
.disassoc
.variable
;
1013 event
.disassoc_info
.ie_len
= frame
+ len
-
1014 mgmt
->u
.disassoc
.variable
;
1017 event
.deauth_info
.addr
= bssid
;
1018 event
.deauth_info
.reason_code
= reason_code
;
1019 if (frame
+ len
> mgmt
->u
.deauth
.variable
) {
1020 event
.deauth_info
.ie
= mgmt
->u
.deauth
.variable
;
1021 event
.deauth_info
.ie_len
= frame
+ len
-
1022 mgmt
->u
.deauth
.variable
;
1026 wpa_supplicant_event(drv
->ctx
, type
, &event
);
1030 static void mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data
*drv
,
1031 enum wpa_event_type type
,
1032 const u8
*frame
, size_t len
)
1034 const struct ieee80211_mgmt
*mgmt
;
1035 union wpa_event_data event
;
1036 u16 reason_code
= 0;
1041 mgmt
= (const struct ieee80211_mgmt
*) frame
;
1043 os_memset(&event
, 0, sizeof(event
));
1044 /* Note: Same offset for Reason Code in both frame subtypes */
1045 if (len
>= 24 + sizeof(mgmt
->u
.deauth
))
1046 reason_code
= le_to_host16(mgmt
->u
.deauth
.reason_code
);
1048 if (type
== EVENT_UNPROT_DISASSOC
) {
1049 event
.unprot_disassoc
.sa
= mgmt
->sa
;
1050 event
.unprot_disassoc
.da
= mgmt
->da
;
1051 event
.unprot_disassoc
.reason_code
= reason_code
;
1053 event
.unprot_deauth
.sa
= mgmt
->sa
;
1054 event
.unprot_deauth
.da
= mgmt
->da
;
1055 event
.unprot_deauth
.reason_code
= reason_code
;
1058 wpa_supplicant_event(drv
->ctx
, type
, &event
);
1062 static void mlme_event(struct wpa_driver_nl80211_data
*drv
,
1063 enum nl80211_commands cmd
, struct nlattr
*frame
,
1064 struct nlattr
*addr
, struct nlattr
*timed_out
,
1065 struct nlattr
*freq
, struct nlattr
*ack
,
1066 struct nlattr
*cookie
)
1068 if (timed_out
&& addr
) {
1069 mlme_timeout_event(drv
, cmd
, addr
);
1073 if (frame
== NULL
) {
1074 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d without frame "
1079 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d", cmd
);
1080 wpa_hexdump(MSG_MSGDUMP
, "nl80211: MLME event frame",
1081 nla_data(frame
), nla_len(frame
));
1084 case NL80211_CMD_AUTHENTICATE
:
1085 mlme_event_auth(drv
, nla_data(frame
), nla_len(frame
));
1087 case NL80211_CMD_ASSOCIATE
:
1088 mlme_event_assoc(drv
, nla_data(frame
), nla_len(frame
));
1090 case NL80211_CMD_DEAUTHENTICATE
:
1091 mlme_event_deauth_disassoc(drv
, EVENT_DEAUTH
,
1092 nla_data(frame
), nla_len(frame
));
1094 case NL80211_CMD_DISASSOCIATE
:
1095 mlme_event_deauth_disassoc(drv
, EVENT_DISASSOC
,
1096 nla_data(frame
), nla_len(frame
));
1098 case NL80211_CMD_FRAME
:
1099 mlme_event_mgmt(drv
, freq
, nla_data(frame
), nla_len(frame
));
1101 case NL80211_CMD_FRAME_TX_STATUS
:
1102 mlme_event_action_tx_status(drv
, cookie
, nla_data(frame
),
1103 nla_len(frame
), ack
);
1105 case NL80211_CMD_UNPROT_DEAUTHENTICATE
:
1106 mlme_event_unprot_disconnect(drv
, EVENT_UNPROT_DEAUTH
,
1107 nla_data(frame
), nla_len(frame
));
1109 case NL80211_CMD_UNPROT_DISASSOCIATE
:
1110 mlme_event_unprot_disconnect(drv
, EVENT_UNPROT_DISASSOC
,
1111 nla_data(frame
), nla_len(frame
));
1119 static void mlme_event_michael_mic_failure(struct wpa_driver_nl80211_data
*drv
,
1120 struct nlattr
*tb
[])
1122 union wpa_event_data data
;
1124 wpa_printf(MSG_DEBUG
, "nl80211: MLME event Michael MIC failure");
1125 os_memset(&data
, 0, sizeof(data
));
1126 if (tb
[NL80211_ATTR_MAC
]) {
1127 wpa_hexdump(MSG_DEBUG
, "nl80211: Source MAC address",
1128 nla_data(tb
[NL80211_ATTR_MAC
]),
1129 nla_len(tb
[NL80211_ATTR_MAC
]));
1130 data
.michael_mic_failure
.src
= nla_data(tb
[NL80211_ATTR_MAC
]);
1132 if (tb
[NL80211_ATTR_KEY_SEQ
]) {
1133 wpa_hexdump(MSG_DEBUG
, "nl80211: TSC",
1134 nla_data(tb
[NL80211_ATTR_KEY_SEQ
]),
1135 nla_len(tb
[NL80211_ATTR_KEY_SEQ
]));
1137 if (tb
[NL80211_ATTR_KEY_TYPE
]) {
1138 enum nl80211_key_type key_type
=
1139 nla_get_u32(tb
[NL80211_ATTR_KEY_TYPE
]);
1140 wpa_printf(MSG_DEBUG
, "nl80211: Key Type %d", key_type
);
1141 if (key_type
== NL80211_KEYTYPE_PAIRWISE
)
1142 data
.michael_mic_failure
.unicast
= 1;
1144 data
.michael_mic_failure
.unicast
= 1;
1146 if (tb
[NL80211_ATTR_KEY_IDX
]) {
1147 u8 key_id
= nla_get_u8(tb
[NL80211_ATTR_KEY_IDX
]);
1148 wpa_printf(MSG_DEBUG
, "nl80211: Key Id %d", key_id
);
1151 wpa_supplicant_event(drv
->ctx
, EVENT_MICHAEL_MIC_FAILURE
, &data
);
1155 static void mlme_event_join_ibss(struct wpa_driver_nl80211_data
*drv
,
1156 struct nlattr
*tb
[])
1158 if (tb
[NL80211_ATTR_MAC
] == NULL
) {
1159 wpa_printf(MSG_DEBUG
, "nl80211: No address in IBSS joined "
1163 os_memcpy(drv
->bssid
, nla_data(tb
[NL80211_ATTR_MAC
]), ETH_ALEN
);
1164 drv
->associated
= 1;
1165 wpa_printf(MSG_DEBUG
, "nl80211: IBSS " MACSTR
" joined",
1166 MAC2STR(drv
->bssid
));
1168 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, NULL
);
1172 static void mlme_event_remain_on_channel(struct wpa_driver_nl80211_data
*drv
,
1173 int cancel_event
, struct nlattr
*tb
[])
1175 unsigned int freq
, chan_type
, duration
;
1176 union wpa_event_data data
;
1179 if (tb
[NL80211_ATTR_WIPHY_FREQ
])
1180 freq
= nla_get_u32(tb
[NL80211_ATTR_WIPHY_FREQ
]);
1184 if (tb
[NL80211_ATTR_WIPHY_CHANNEL_TYPE
])
1185 chan_type
= nla_get_u32(tb
[NL80211_ATTR_WIPHY_CHANNEL_TYPE
]);
1189 if (tb
[NL80211_ATTR_DURATION
])
1190 duration
= nla_get_u32(tb
[NL80211_ATTR_DURATION
]);
1194 if (tb
[NL80211_ATTR_COOKIE
])
1195 cookie
= nla_get_u64(tb
[NL80211_ATTR_COOKIE
]);
1199 wpa_printf(MSG_DEBUG
, "nl80211: Remain-on-channel event (cancel=%d "
1200 "freq=%u channel_type=%u duration=%u cookie=0x%llx (%s))",
1201 cancel_event
, freq
, chan_type
, duration
,
1202 (long long unsigned int) cookie
,
1203 cookie
== drv
->remain_on_chan_cookie
? "match" : "unknown");
1205 if (cookie
!= drv
->remain_on_chan_cookie
)
1206 return; /* not for us */
1209 drv
->pending_remain_on_chan
= 0;
1211 os_memset(&data
, 0, sizeof(data
));
1212 data
.remain_on_channel
.freq
= freq
;
1213 data
.remain_on_channel
.duration
= duration
;
1214 wpa_supplicant_event(drv
->ctx
, cancel_event
?
1215 EVENT_CANCEL_REMAIN_ON_CHANNEL
:
1216 EVENT_REMAIN_ON_CHANNEL
, &data
);
1220 static void send_scan_event(struct wpa_driver_nl80211_data
*drv
, int aborted
,
1221 struct nlattr
*tb
[])
1223 union wpa_event_data event
;
1226 struct scan_info
*info
;
1227 #define MAX_REPORT_FREQS 50
1228 int freqs
[MAX_REPORT_FREQS
];
1231 os_memset(&event
, 0, sizeof(event
));
1232 info
= &event
.scan_info
;
1233 info
->aborted
= aborted
;
1235 if (tb
[NL80211_ATTR_SCAN_SSIDS
]) {
1236 nla_for_each_nested(nl
, tb
[NL80211_ATTR_SCAN_SSIDS
], rem
) {
1237 struct wpa_driver_scan_ssid
*s
=
1238 &info
->ssids
[info
->num_ssids
];
1239 s
->ssid
= nla_data(nl
);
1240 s
->ssid_len
= nla_len(nl
);
1242 if (info
->num_ssids
== WPAS_MAX_SCAN_SSIDS
)
1246 if (tb
[NL80211_ATTR_SCAN_FREQUENCIES
]) {
1247 nla_for_each_nested(nl
, tb
[NL80211_ATTR_SCAN_FREQUENCIES
], rem
)
1249 freqs
[num_freqs
] = nla_get_u32(nl
);
1251 if (num_freqs
== MAX_REPORT_FREQS
- 1)
1254 info
->freqs
= freqs
;
1255 info
->num_freqs
= num_freqs
;
1257 wpa_supplicant_event(drv
->ctx
, EVENT_SCAN_RESULTS
, &event
);
1261 static int get_link_signal(struct nl_msg
*msg
, void *arg
)
1263 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1264 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1265 struct nlattr
*sinfo
[NL80211_STA_INFO_MAX
+ 1];
1266 static struct nla_policy policy
[NL80211_STA_INFO_MAX
+ 1] = {
1267 [NL80211_STA_INFO_SIGNAL
] = { .type
= NLA_U8
},
1269 struct nlattr
*rinfo
[NL80211_RATE_INFO_MAX
+ 1];
1270 static struct nla_policy rate_policy
[NL80211_RATE_INFO_MAX
+ 1] = {
1271 [NL80211_RATE_INFO_BITRATE
] = { .type
= NLA_U16
},
1272 [NL80211_RATE_INFO_MCS
] = { .type
= NLA_U8
},
1273 [NL80211_RATE_INFO_40_MHZ_WIDTH
] = { .type
= NLA_FLAG
},
1274 [NL80211_RATE_INFO_SHORT_GI
] = { .type
= NLA_FLAG
},
1276 struct wpa_signal_info
*sig_change
= arg
;
1278 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1279 genlmsg_attrlen(gnlh
, 0), NULL
);
1280 if (!tb
[NL80211_ATTR_STA_INFO
] ||
1281 nla_parse_nested(sinfo
, NL80211_STA_INFO_MAX
,
1282 tb
[NL80211_ATTR_STA_INFO
], policy
))
1284 if (!sinfo
[NL80211_STA_INFO_SIGNAL
])
1287 sig_change
->current_signal
=
1288 (s8
) nla_get_u8(sinfo
[NL80211_STA_INFO_SIGNAL
]);
1290 if (sinfo
[NL80211_STA_INFO_TX_BITRATE
]) {
1291 if (nla_parse_nested(rinfo
, NL80211_RATE_INFO_MAX
,
1292 sinfo
[NL80211_STA_INFO_TX_BITRATE
],
1294 sig_change
->current_txrate
= 0;
1296 if (rinfo
[NL80211_RATE_INFO_BITRATE
]) {
1297 sig_change
->current_txrate
=
1299 NL80211_RATE_INFO_BITRATE
]) * 100;
1308 static int nl80211_get_link_signal(struct wpa_driver_nl80211_data
*drv
,
1309 struct wpa_signal_info
*sig
)
1313 sig
->current_signal
= -9999;
1314 sig
->current_txrate
= 0;
1316 msg
= nlmsg_alloc();
1320 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_STATION
);
1322 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1323 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, drv
->bssid
);
1325 return send_and_recv_msgs(drv
, msg
, get_link_signal
, sig
);
1331 static int get_link_noise(struct nl_msg
*msg
, void *arg
)
1333 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1334 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1335 struct nlattr
*sinfo
[NL80211_SURVEY_INFO_MAX
+ 1];
1336 static struct nla_policy survey_policy
[NL80211_SURVEY_INFO_MAX
+ 1] = {
1337 [NL80211_SURVEY_INFO_FREQUENCY
] = { .type
= NLA_U32
},
1338 [NL80211_SURVEY_INFO_NOISE
] = { .type
= NLA_U8
},
1340 struct wpa_signal_info
*sig_change
= arg
;
1342 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1343 genlmsg_attrlen(gnlh
, 0), NULL
);
1345 if (!tb
[NL80211_ATTR_SURVEY_INFO
]) {
1346 wpa_printf(MSG_DEBUG
, "nl80211: survey data missing!");
1350 if (nla_parse_nested(sinfo
, NL80211_SURVEY_INFO_MAX
,
1351 tb
[NL80211_ATTR_SURVEY_INFO
],
1353 wpa_printf(MSG_DEBUG
, "nl80211: failed to parse nested "
1358 if (!sinfo
[NL80211_SURVEY_INFO_FREQUENCY
])
1361 if (nla_get_u32(sinfo
[NL80211_SURVEY_INFO_FREQUENCY
]) !=
1362 sig_change
->frequency
)
1365 if (!sinfo
[NL80211_SURVEY_INFO_NOISE
])
1368 sig_change
->current_noise
=
1369 (s8
) nla_get_u8(sinfo
[NL80211_SURVEY_INFO_NOISE
]);
1375 static int nl80211_get_link_noise(struct wpa_driver_nl80211_data
*drv
,
1376 struct wpa_signal_info
*sig_change
)
1380 sig_change
->current_noise
= 9999;
1381 sig_change
->frequency
= drv
->assoc_freq
;
1383 msg
= nlmsg_alloc();
1387 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SURVEY
);
1389 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1391 return send_and_recv_msgs(drv
, msg
, get_link_noise
, sig_change
);
1397 static int get_noise_for_scan_results(struct nl_msg
*msg
, void *arg
)
1399 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1400 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1401 struct nlattr
*sinfo
[NL80211_SURVEY_INFO_MAX
+ 1];
1402 static struct nla_policy survey_policy
[NL80211_SURVEY_INFO_MAX
+ 1] = {
1403 [NL80211_SURVEY_INFO_FREQUENCY
] = { .type
= NLA_U32
},
1404 [NL80211_SURVEY_INFO_NOISE
] = { .type
= NLA_U8
},
1406 struct wpa_scan_results
*scan_results
= arg
;
1407 struct wpa_scan_res
*scan_res
;
1410 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1411 genlmsg_attrlen(gnlh
, 0), NULL
);
1413 if (!tb
[NL80211_ATTR_SURVEY_INFO
]) {
1414 wpa_printf(MSG_DEBUG
, "nl80211: Survey data missing");
1418 if (nla_parse_nested(sinfo
, NL80211_SURVEY_INFO_MAX
,
1419 tb
[NL80211_ATTR_SURVEY_INFO
],
1421 wpa_printf(MSG_DEBUG
, "nl80211: Failed to parse nested "
1426 if (!sinfo
[NL80211_SURVEY_INFO_NOISE
])
1429 if (!sinfo
[NL80211_SURVEY_INFO_FREQUENCY
])
1432 for (i
= 0; i
< scan_results
->num
; ++i
) {
1433 scan_res
= scan_results
->res
[i
];
1436 if ((int) nla_get_u32(sinfo
[NL80211_SURVEY_INFO_FREQUENCY
]) !=
1439 if (!(scan_res
->flags
& WPA_SCAN_NOISE_INVALID
))
1441 scan_res
->noise
= (s8
)
1442 nla_get_u8(sinfo
[NL80211_SURVEY_INFO_NOISE
]);
1443 scan_res
->flags
&= ~WPA_SCAN_NOISE_INVALID
;
1450 static int nl80211_get_noise_for_scan_results(
1451 struct wpa_driver_nl80211_data
*drv
,
1452 struct wpa_scan_results
*scan_res
)
1456 msg
= nlmsg_alloc();
1460 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SURVEY
);
1462 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1464 return send_and_recv_msgs(drv
, msg
, get_noise_for_scan_results
,
1471 static void nl80211_cqm_event(struct wpa_driver_nl80211_data
*drv
,
1472 struct nlattr
*tb
[])
1474 static struct nla_policy cqm_policy
[NL80211_ATTR_CQM_MAX
+ 1] = {
1475 [NL80211_ATTR_CQM_RSSI_THOLD
] = { .type
= NLA_U32
},
1476 [NL80211_ATTR_CQM_RSSI_HYST
] = { .type
= NLA_U8
},
1477 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
] = { .type
= NLA_U32
},
1478 [NL80211_ATTR_CQM_PKT_LOSS_EVENT
] = { .type
= NLA_U32
},
1480 struct nlattr
*cqm
[NL80211_ATTR_CQM_MAX
+ 1];
1481 enum nl80211_cqm_rssi_threshold_event event
;
1482 union wpa_event_data ed
;
1483 struct wpa_signal_info sig
;
1486 if (tb
[NL80211_ATTR_CQM
] == NULL
||
1487 nla_parse_nested(cqm
, NL80211_ATTR_CQM_MAX
, tb
[NL80211_ATTR_CQM
],
1489 wpa_printf(MSG_DEBUG
, "nl80211: Ignore invalid CQM event");
1493 os_memset(&ed
, 0, sizeof(ed
));
1495 if (cqm
[NL80211_ATTR_CQM_PKT_LOSS_EVENT
]) {
1496 if (!tb
[NL80211_ATTR_MAC
])
1498 os_memcpy(ed
.low_ack
.addr
, nla_data(tb
[NL80211_ATTR_MAC
]),
1500 wpa_supplicant_event(drv
->ctx
, EVENT_STATION_LOW_ACK
, &ed
);
1504 if (cqm
[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
] == NULL
)
1506 event
= nla_get_u32(cqm
[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
]);
1508 if (event
== NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH
) {
1509 wpa_printf(MSG_DEBUG
, "nl80211: Connection quality monitor "
1510 "event: RSSI high");
1511 ed
.signal_change
.above_threshold
= 1;
1512 } else if (event
== NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW
) {
1513 wpa_printf(MSG_DEBUG
, "nl80211: Connection quality monitor "
1515 ed
.signal_change
.above_threshold
= 0;
1519 res
= nl80211_get_link_signal(drv
, &sig
);
1521 ed
.signal_change
.current_signal
= sig
.current_signal
;
1522 ed
.signal_change
.current_txrate
= sig
.current_txrate
;
1523 wpa_printf(MSG_DEBUG
, "nl80211: Signal: %d dBm txrate: %d",
1524 sig
.current_signal
, sig
.current_txrate
);
1527 res
= nl80211_get_link_noise(drv
, &sig
);
1529 ed
.signal_change
.current_noise
= sig
.current_noise
;
1530 wpa_printf(MSG_DEBUG
, "nl80211: Noise: %d dBm",
1534 wpa_supplicant_event(drv
->ctx
, EVENT_SIGNAL_CHANGE
, &ed
);
1538 static void nl80211_new_station_event(struct wpa_driver_nl80211_data
*drv
,
1542 union wpa_event_data data
;
1544 if (tb
[NL80211_ATTR_MAC
] == NULL
)
1546 addr
= nla_data(tb
[NL80211_ATTR_MAC
]);
1547 wpa_printf(MSG_DEBUG
, "nl80211: New station " MACSTR
, MAC2STR(addr
));
1549 if (is_ap_interface(drv
->nlmode
) && drv
->no_monitor_iface_capab
) {
1552 if (tb
[NL80211_ATTR_IE
]) {
1553 ies
= nla_data(tb
[NL80211_ATTR_IE
]);
1554 ies_len
= nla_len(tb
[NL80211_ATTR_IE
]);
1556 wpa_hexdump(MSG_DEBUG
, "nl80211: Assoc Req IEs", ies
, ies_len
);
1557 drv_event_assoc(drv
->ctx
, addr
, ies
, ies_len
, 0);
1561 if (drv
->nlmode
!= NL80211_IFTYPE_ADHOC
)
1564 os_memset(&data
, 0, sizeof(data
));
1565 os_memcpy(data
.ibss_rsn_start
.peer
, addr
, ETH_ALEN
);
1566 wpa_supplicant_event(drv
->ctx
, EVENT_IBSS_RSN_START
, &data
);
1570 static void nl80211_del_station_event(struct wpa_driver_nl80211_data
*drv
,
1574 union wpa_event_data data
;
1576 if (tb
[NL80211_ATTR_MAC
] == NULL
)
1578 addr
= nla_data(tb
[NL80211_ATTR_MAC
]);
1579 wpa_printf(MSG_DEBUG
, "nl80211: Delete station " MACSTR
,
1582 if (is_ap_interface(drv
->nlmode
) && drv
->no_monitor_iface_capab
) {
1583 drv_event_disassoc(drv
->ctx
, addr
);
1587 if (drv
->nlmode
!= NL80211_IFTYPE_ADHOC
)
1590 os_memset(&data
, 0, sizeof(data
));
1591 os_memcpy(data
.ibss_peer_lost
.peer
, addr
, ETH_ALEN
);
1592 wpa_supplicant_event(drv
->ctx
, EVENT_IBSS_PEER_LOST
, &data
);
1596 static void nl80211_rekey_offload_event(struct wpa_driver_nl80211_data
*drv
,
1599 struct nlattr
*rekey_info
[NUM_NL80211_REKEY_DATA
];
1600 static struct nla_policy rekey_policy
[NUM_NL80211_REKEY_DATA
] = {
1601 [NL80211_REKEY_DATA_KEK
] = {
1602 .minlen
= NL80211_KEK_LEN
,
1603 .maxlen
= NL80211_KEK_LEN
,
1605 [NL80211_REKEY_DATA_KCK
] = {
1606 .minlen
= NL80211_KCK_LEN
,
1607 .maxlen
= NL80211_KCK_LEN
,
1609 [NL80211_REKEY_DATA_REPLAY_CTR
] = {
1610 .minlen
= NL80211_REPLAY_CTR_LEN
,
1611 .maxlen
= NL80211_REPLAY_CTR_LEN
,
1614 union wpa_event_data data
;
1616 if (!tb
[NL80211_ATTR_MAC
])
1618 if (!tb
[NL80211_ATTR_REKEY_DATA
])
1620 if (nla_parse_nested(rekey_info
, MAX_NL80211_REKEY_DATA
,
1621 tb
[NL80211_ATTR_REKEY_DATA
], rekey_policy
))
1623 if (!rekey_info
[NL80211_REKEY_DATA_REPLAY_CTR
])
1626 os_memset(&data
, 0, sizeof(data
));
1627 data
.driver_gtk_rekey
.bssid
= nla_data(tb
[NL80211_ATTR_MAC
]);
1628 wpa_printf(MSG_DEBUG
, "nl80211: Rekey offload event for BSSID " MACSTR
,
1629 MAC2STR(data
.driver_gtk_rekey
.bssid
));
1630 data
.driver_gtk_rekey
.replay_ctr
=
1631 nla_data(rekey_info
[NL80211_REKEY_DATA_REPLAY_CTR
]);
1632 wpa_hexdump(MSG_DEBUG
, "nl80211: Rekey offload - Replay Counter",
1633 data
.driver_gtk_rekey
.replay_ctr
, NL80211_REPLAY_CTR_LEN
);
1634 wpa_supplicant_event(drv
->ctx
, EVENT_DRIVER_GTK_REKEY
, &data
);
1638 static void nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data
*drv
,
1641 struct nlattr
*cand
[NUM_NL80211_PMKSA_CANDIDATE
];
1642 static struct nla_policy cand_policy
[NUM_NL80211_PMKSA_CANDIDATE
] = {
1643 [NL80211_PMKSA_CANDIDATE_INDEX
] = { .type
= NLA_U32
},
1644 [NL80211_PMKSA_CANDIDATE_BSSID
] = {
1648 [NL80211_PMKSA_CANDIDATE_PREAUTH
] = { .type
= NLA_FLAG
},
1650 union wpa_event_data data
;
1652 if (!tb
[NL80211_ATTR_PMKSA_CANDIDATE
])
1654 if (nla_parse_nested(cand
, MAX_NL80211_PMKSA_CANDIDATE
,
1655 tb
[NL80211_ATTR_PMKSA_CANDIDATE
], cand_policy
))
1657 if (!cand
[NL80211_PMKSA_CANDIDATE_INDEX
] ||
1658 !cand
[NL80211_PMKSA_CANDIDATE_BSSID
])
1661 os_memset(&data
, 0, sizeof(data
));
1662 os_memcpy(data
.pmkid_candidate
.bssid
,
1663 nla_data(cand
[NL80211_PMKSA_CANDIDATE_BSSID
]), ETH_ALEN
);
1664 data
.pmkid_candidate
.index
=
1665 nla_get_u32(cand
[NL80211_PMKSA_CANDIDATE_INDEX
]);
1666 data
.pmkid_candidate
.preauth
=
1667 cand
[NL80211_PMKSA_CANDIDATE_PREAUTH
] != NULL
;
1668 wpa_supplicant_event(drv
->ctx
, EVENT_PMKID_CANDIDATE
, &data
);
1672 static int process_event(struct nl_msg
*msg
, void *arg
)
1674 struct wpa_driver_nl80211_data
*drv
= arg
;
1675 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1676 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1678 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1679 genlmsg_attrlen(gnlh
, 0), NULL
);
1681 if (tb
[NL80211_ATTR_IFINDEX
]) {
1682 int ifindex
= nla_get_u32(tb
[NL80211_ATTR_IFINDEX
]);
1683 if (ifindex
!= drv
->ifindex
&& !have_ifidx(drv
, ifindex
)) {
1684 wpa_printf(MSG_DEBUG
, "nl80211: Ignored event (cmd=%d)"
1685 " for foreign interface (ifindex %d)",
1686 gnlh
->cmd
, ifindex
);
1691 if (drv
->ap_scan_as_station
!= NL80211_IFTYPE_UNSPECIFIED
&&
1692 (gnlh
->cmd
== NL80211_CMD_NEW_SCAN_RESULTS
||
1693 gnlh
->cmd
== NL80211_CMD_SCAN_ABORTED
)) {
1694 wpa_driver_nl80211_set_mode(&drv
->first_bss
,
1695 drv
->ap_scan_as_station
);
1696 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
1699 switch (gnlh
->cmd
) {
1700 case NL80211_CMD_TRIGGER_SCAN
:
1701 wpa_printf(MSG_DEBUG
, "nl80211: Scan trigger");
1703 case NL80211_CMD_START_SCHED_SCAN
:
1704 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan started");
1706 case NL80211_CMD_SCHED_SCAN_STOPPED
:
1707 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stopped");
1708 wpa_supplicant_event(drv
->ctx
, EVENT_SCHED_SCAN_STOPPED
, NULL
);
1710 case NL80211_CMD_NEW_SCAN_RESULTS
:
1711 wpa_printf(MSG_DEBUG
, "nl80211: New scan results available");
1712 drv
->scan_complete_events
= 1;
1713 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
,
1715 send_scan_event(drv
, 0, tb
);
1717 case NL80211_CMD_SCHED_SCAN_RESULTS
:
1718 wpa_printf(MSG_DEBUG
,
1719 "nl80211: New sched scan results available");
1720 send_scan_event(drv
, 0, tb
);
1722 case NL80211_CMD_SCAN_ABORTED
:
1723 wpa_printf(MSG_DEBUG
, "nl80211: Scan aborted");
1725 * Need to indicate that scan results are available in order
1726 * not to make wpa_supplicant stop its scanning.
1728 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
,
1730 send_scan_event(drv
, 1, tb
);
1732 case NL80211_CMD_AUTHENTICATE
:
1733 case NL80211_CMD_ASSOCIATE
:
1734 case NL80211_CMD_DEAUTHENTICATE
:
1735 case NL80211_CMD_DISASSOCIATE
:
1736 case NL80211_CMD_FRAME
:
1737 case NL80211_CMD_FRAME_TX_STATUS
:
1738 case NL80211_CMD_UNPROT_DEAUTHENTICATE
:
1739 case NL80211_CMD_UNPROT_DISASSOCIATE
:
1740 mlme_event(drv
, gnlh
->cmd
, tb
[NL80211_ATTR_FRAME
],
1741 tb
[NL80211_ATTR_MAC
], tb
[NL80211_ATTR_TIMED_OUT
],
1742 tb
[NL80211_ATTR_WIPHY_FREQ
], tb
[NL80211_ATTR_ACK
],
1743 tb
[NL80211_ATTR_COOKIE
]);
1745 case NL80211_CMD_CONNECT
:
1746 case NL80211_CMD_ROAM
:
1747 mlme_event_connect(drv
, gnlh
->cmd
,
1748 tb
[NL80211_ATTR_STATUS_CODE
],
1749 tb
[NL80211_ATTR_MAC
],
1750 tb
[NL80211_ATTR_REQ_IE
],
1751 tb
[NL80211_ATTR_RESP_IE
]);
1753 case NL80211_CMD_DISCONNECT
:
1754 mlme_event_disconnect(drv
, tb
[NL80211_ATTR_REASON_CODE
],
1755 tb
[NL80211_ATTR_MAC
]);
1757 case NL80211_CMD_MICHAEL_MIC_FAILURE
:
1758 mlme_event_michael_mic_failure(drv
, tb
);
1760 case NL80211_CMD_JOIN_IBSS
:
1761 mlme_event_join_ibss(drv
, tb
);
1763 case NL80211_CMD_REMAIN_ON_CHANNEL
:
1764 mlme_event_remain_on_channel(drv
, 0, tb
);
1766 case NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL
:
1767 mlme_event_remain_on_channel(drv
, 1, tb
);
1769 case NL80211_CMD_NOTIFY_CQM
:
1770 nl80211_cqm_event(drv
, tb
);
1772 case NL80211_CMD_REG_CHANGE
:
1773 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory domain change");
1774 wpa_supplicant_event(drv
->ctx
, EVENT_CHANNEL_LIST_CHANGED
,
1777 case NL80211_CMD_REG_BEACON_HINT
:
1778 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory beacon hint");
1779 wpa_supplicant_event(drv
->ctx
, EVENT_CHANNEL_LIST_CHANGED
,
1782 case NL80211_CMD_NEW_STATION
:
1783 nl80211_new_station_event(drv
, tb
);
1785 case NL80211_CMD_DEL_STATION
:
1786 nl80211_del_station_event(drv
, tb
);
1788 case NL80211_CMD_SET_REKEY_OFFLOAD
:
1789 nl80211_rekey_offload_event(drv
, tb
);
1791 case NL80211_CMD_PMKSA_CANDIDATE
:
1792 nl80211_pmksa_candidate_event(drv
, tb
);
1795 wpa_printf(MSG_DEBUG
, "nl80211: Ignored unknown event "
1796 "(cmd=%d)", gnlh
->cmd
);
1804 static void wpa_driver_nl80211_event_receive(int sock
, void *eloop_ctx
,
1808 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
1810 wpa_printf(MSG_DEBUG
, "nl80211: Event message available");
1812 cb
= nl_cb_clone(drv
->global
->nl_cb
);
1815 nl_cb_set(cb
, NL_CB_SEQ_CHECK
, NL_CB_CUSTOM
, no_seq_check
, NULL
);
1816 nl_cb_set(cb
, NL_CB_VALID
, NL_CB_CUSTOM
, process_event
, drv
);
1817 nl_recvmsgs(handle
, cb
);
1823 * wpa_driver_nl80211_set_country - ask nl80211 to set the regulatory domain
1824 * @priv: driver_nl80211 private data
1825 * @alpha2_arg: country to which to switch to
1826 * Returns: 0 on success, -1 on failure
1828 * This asks nl80211 to set the regulatory domain for given
1829 * country ISO / IEC alpha2.
1831 static int wpa_driver_nl80211_set_country(void *priv
, const char *alpha2_arg
)
1833 struct i802_bss
*bss
= priv
;
1834 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
1838 msg
= nlmsg_alloc();
1842 alpha2
[0] = alpha2_arg
[0];
1843 alpha2
[1] = alpha2_arg
[1];
1846 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REQ_SET_REG
);
1848 NLA_PUT_STRING(msg
, NL80211_ATTR_REG_ALPHA2
, alpha2
);
1849 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
))
1857 struct wiphy_info_data
{
1858 struct wpa_driver_capa
*capa
;
1860 unsigned int error
:1;
1864 static int wiphy_info_handler(struct nl_msg
*msg
, void *arg
)
1866 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1867 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1868 struct wiphy_info_data
*info
= arg
;
1869 int p2p_go_supported
= 0, p2p_client_supported
= 0;
1870 int p2p_concurrent
= 0;
1871 int auth_supported
= 0, connect_supported
= 0;
1872 struct wpa_driver_capa
*capa
= info
->capa
;
1873 static struct nla_policy
1874 iface_combination_policy
[NUM_NL80211_IFACE_COMB
] = {
1875 [NL80211_IFACE_COMB_LIMITS
] = { .type
= NLA_NESTED
},
1876 [NL80211_IFACE_COMB_MAXNUM
] = { .type
= NLA_U32
},
1877 [NL80211_IFACE_COMB_STA_AP_BI_MATCH
] = { .type
= NLA_FLAG
},
1878 [NL80211_IFACE_COMB_NUM_CHANNELS
] = { .type
= NLA_U32
},
1880 iface_limit_policy
[NUM_NL80211_IFACE_LIMIT
] = {
1881 [NL80211_IFACE_LIMIT_TYPES
] = { .type
= NLA_NESTED
},
1882 [NL80211_IFACE_LIMIT_MAX
] = { .type
= NLA_U32
},
1885 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1886 genlmsg_attrlen(gnlh
, 0), NULL
);
1888 if (tb
[NL80211_ATTR_MAX_NUM_SCAN_SSIDS
])
1889 capa
->max_scan_ssids
=
1890 nla_get_u8(tb
[NL80211_ATTR_MAX_NUM_SCAN_SSIDS
]);
1892 if (tb
[NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS
])
1893 capa
->max_sched_scan_ssids
=
1894 nla_get_u8(tb
[NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS
]);
1896 if (tb
[NL80211_ATTR_MAX_MATCH_SETS
])
1897 capa
->max_match_sets
=
1898 nla_get_u8(tb
[NL80211_ATTR_MAX_MATCH_SETS
]);
1900 if (tb
[NL80211_ATTR_SUPPORTED_IFTYPES
]) {
1901 struct nlattr
*nl_mode
;
1903 nla_for_each_nested(nl_mode
,
1904 tb
[NL80211_ATTR_SUPPORTED_IFTYPES
], i
) {
1905 switch (nla_type(nl_mode
)) {
1906 case NL80211_IFTYPE_AP
:
1907 capa
->flags
|= WPA_DRIVER_FLAGS_AP
;
1909 case NL80211_IFTYPE_P2P_GO
:
1910 p2p_go_supported
= 1;
1912 case NL80211_IFTYPE_P2P_CLIENT
:
1913 p2p_client_supported
= 1;
1919 if (tb
[NL80211_ATTR_INTERFACE_COMBINATIONS
]) {
1920 struct nlattr
*nl_combi
;
1923 nla_for_each_nested(nl_combi
,
1924 tb
[NL80211_ATTR_INTERFACE_COMBINATIONS
],
1926 struct nlattr
*tb_comb
[NUM_NL80211_IFACE_COMB
];
1927 struct nlattr
*tb_limit
[NUM_NL80211_IFACE_LIMIT
];
1928 struct nlattr
*nl_limit
, *nl_mode
;
1929 int err
, rem_limit
, rem_mode
;
1930 int combination_has_p2p
= 0, combination_has_mgd
= 0;
1932 err
= nla_parse_nested(tb_comb
, MAX_NL80211_IFACE_COMB
,
1934 iface_combination_policy
);
1935 if (err
|| !tb_comb
[NL80211_IFACE_COMB_LIMITS
] ||
1936 !tb_comb
[NL80211_IFACE_COMB_MAXNUM
] ||
1937 !tb_comb
[NL80211_IFACE_COMB_NUM_CHANNELS
])
1938 goto broken_combination
;
1940 nla_for_each_nested(nl_limit
,
1941 tb_comb
[NL80211_IFACE_COMB_LIMITS
],
1943 err
= nla_parse_nested(tb_limit
,
1944 MAX_NL80211_IFACE_LIMIT
,
1946 iface_limit_policy
);
1948 !tb_limit
[NL80211_IFACE_LIMIT_TYPES
])
1949 goto broken_combination
;
1951 nla_for_each_nested(
1953 tb_limit
[NL80211_IFACE_LIMIT_TYPES
],
1955 int ift
= nla_type(nl_mode
);
1956 if (ift
== NL80211_IFTYPE_P2P_GO
||
1957 ift
== NL80211_IFTYPE_P2P_CLIENT
)
1958 combination_has_p2p
= 1;
1959 if (ift
== NL80211_IFTYPE_STATION
)
1960 combination_has_mgd
= 1;
1962 if (combination_has_p2p
&& combination_has_mgd
)
1966 if (combination_has_p2p
&& combination_has_mgd
) {
1976 if (tb
[NL80211_ATTR_SUPPORTED_COMMANDS
]) {
1977 struct nlattr
*nl_cmd
;
1980 nla_for_each_nested(nl_cmd
,
1981 tb
[NL80211_ATTR_SUPPORTED_COMMANDS
], i
) {
1982 switch (nla_get_u32(nl_cmd
)) {
1983 case NL80211_CMD_AUTHENTICATE
:
1986 case NL80211_CMD_CONNECT
:
1987 connect_supported
= 1;
1989 case NL80211_CMD_START_SCHED_SCAN
:
1990 capa
->sched_scan_supported
= 1;
1996 if (tb
[NL80211_ATTR_OFFCHANNEL_TX_OK
]) {
1997 wpa_printf(MSG_DEBUG
, "nl80211: Using driver-based "
1999 capa
->flags
|= WPA_DRIVER_FLAGS_OFFCHANNEL_TX
;
2002 if (tb
[NL80211_ATTR_ROAM_SUPPORT
]) {
2003 wpa_printf(MSG_DEBUG
, "nl80211: Using driver-based roaming");
2004 capa
->flags
|= WPA_DRIVER_FLAGS_BSS_SELECTION
;
2007 /* default to 5000 since early versions of mac80211 don't set it */
2008 capa
->max_remain_on_chan
= 5000;
2010 if (tb
[NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION
])
2011 capa
->max_remain_on_chan
=
2012 nla_get_u32(tb
[NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION
]);
2015 capa
->flags
|= WPA_DRIVER_FLAGS_SME
;
2016 else if (!connect_supported
) {
2017 wpa_printf(MSG_INFO
, "nl80211: Driver does not support "
2018 "authentication/association or connect commands");
2022 if (p2p_go_supported
&& p2p_client_supported
)
2023 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_CAPABLE
;
2024 if (p2p_concurrent
) {
2025 wpa_printf(MSG_DEBUG
, "nl80211: Use separate P2P group "
2026 "interface (driver advertised support)");
2027 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_CONCURRENT
;
2028 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_MGMT_AND_NON_P2P
;
2031 if (tb
[NL80211_ATTR_TDLS_SUPPORT
]) {
2032 wpa_printf(MSG_DEBUG
, "nl80211: TDLS supported");
2033 capa
->flags
|= WPA_DRIVER_FLAGS_TDLS_SUPPORT
;
2035 if (tb
[NL80211_ATTR_TDLS_EXTERNAL_SETUP
]) {
2036 wpa_printf(MSG_DEBUG
, "nl80211: TDLS external setup");
2038 WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP
;
2046 static int wpa_driver_nl80211_get_info(struct wpa_driver_nl80211_data
*drv
,
2047 struct wiphy_info_data
*info
)
2051 os_memset(info
, 0, sizeof(*info
));
2052 info
->capa
= &drv
->capa
;
2054 msg
= nlmsg_alloc();
2058 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_WIPHY
);
2060 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->first_bss
.ifindex
);
2062 if (send_and_recv_msgs(drv
, msg
, wiphy_info_handler
, info
) == 0)
2071 static int wpa_driver_nl80211_capa(struct wpa_driver_nl80211_data
*drv
)
2073 struct wiphy_info_data info
;
2074 if (wpa_driver_nl80211_get_info(drv
, &info
))
2080 drv
->has_capability
= 1;
2081 /* For now, assume TKIP, CCMP, WPA, WPA2 are supported */
2082 drv
->capa
.key_mgmt
= WPA_DRIVER_CAPA_KEY_MGMT_WPA
|
2083 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK
|
2084 WPA_DRIVER_CAPA_KEY_MGMT_WPA2
|
2085 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK
;
2086 drv
->capa
.enc
= WPA_DRIVER_CAPA_ENC_WEP40
|
2087 WPA_DRIVER_CAPA_ENC_WEP104
|
2088 WPA_DRIVER_CAPA_ENC_TKIP
|
2089 WPA_DRIVER_CAPA_ENC_CCMP
;
2090 drv
->capa
.auth
= WPA_DRIVER_AUTH_OPEN
|
2091 WPA_DRIVER_AUTH_SHARED
|
2092 WPA_DRIVER_AUTH_LEAP
;
2094 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_SANE_ERROR_CODES
;
2095 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_SET_KEYS_AFTER_ASSOC_DONE
;
2096 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_EAPOL_TX_STATUS
;
2097 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_DEAUTH_TX_STATUS
;
2103 static int wpa_driver_nl80211_init_nl_global(struct nl80211_global
*global
)
2105 global
->nl_cb
= nl_cb_alloc(NL_CB_DEFAULT
);
2106 if (global
->nl_cb
== NULL
) {
2107 wpa_printf(MSG_ERROR
, "nl80211: Failed to allocate netlink "
2112 if (nl_create_handles(&global
->nl
, global
->nl_cb
, "nl"))
2115 global
->nl80211_id
= genl_ctrl_resolve(global
->nl
.handle
, "nl80211");
2116 if (global
->nl80211_id
< 0) {
2117 wpa_printf(MSG_ERROR
, "nl80211: 'nl80211' generic netlink not "
2126 static int wpa_driver_nl80211_init_nl(struct wpa_driver_nl80211_data
*drv
)
2128 struct nl80211_global
*global
= drv
->global
;
2131 /* Initialize generic netlink and nl80211 */
2133 if (nl_create_handles(&drv
->nl_event
, global
->nl_cb
, "event"))
2136 ret
= nl_get_multicast_id(drv
, "nl80211", "scan");
2138 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2140 wpa_printf(MSG_ERROR
, "nl80211: Could not add multicast "
2141 "membership for scan events: %d (%s)",
2142 ret
, strerror(-ret
));
2146 ret
= nl_get_multicast_id(drv
, "nl80211", "mlme");
2148 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2150 wpa_printf(MSG_ERROR
, "nl80211: Could not add multicast "
2151 "membership for mlme events: %d (%s)",
2152 ret
, strerror(-ret
));
2156 ret
= nl_get_multicast_id(drv
, "nl80211", "regulatory");
2158 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2160 wpa_printf(MSG_DEBUG
, "nl80211: Could not add multicast "
2161 "membership for regulatory events: %d (%s)",
2162 ret
, strerror(-ret
));
2163 /* Continue without regulatory events */
2166 eloop_register_read_sock(nl_socket_get_fd(drv
->nl_event
.handle
),
2167 wpa_driver_nl80211_event_receive
, drv
,
2168 drv
->nl_event
.handle
);
2173 nl_destroy_handles(&drv
->nl_event
);
2179 static void wpa_driver_nl80211_rfkill_blocked(void *ctx
)
2181 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL blocked");
2183 * This may be for any interface; use ifdown event to disable
2189 static void wpa_driver_nl80211_rfkill_unblocked(void *ctx
)
2191 struct wpa_driver_nl80211_data
*drv
= ctx
;
2192 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL unblocked");
2193 if (linux_set_iface_flags(drv
->global
->ioctl_sock
,
2194 drv
->first_bss
.ifname
, 1)) {
2195 wpa_printf(MSG_DEBUG
, "nl80211: Could not set interface UP "
2196 "after rfkill unblock");
2199 /* rtnetlink ifup handler will report interface as enabled */
2203 static void nl80211_get_phy_name(struct wpa_driver_nl80211_data
*drv
)
2205 /* Find phy (radio) to which this interface belongs */
2209 drv
->phyname
[0] = '\0';
2210 snprintf(buf
, sizeof(buf
) - 1, "/sys/class/net/%s/phy80211/name",
2211 drv
->first_bss
.ifname
);
2212 f
= open(buf
, O_RDONLY
);
2214 wpa_printf(MSG_DEBUG
, "Could not open file %s: %s",
2215 buf
, strerror(errno
));
2219 rv
= read(f
, drv
->phyname
, sizeof(drv
->phyname
) - 1);
2222 wpa_printf(MSG_DEBUG
, "Could not read file %s: %s",
2223 buf
, strerror(errno
));
2227 drv
->phyname
[rv
] = '\0';
2228 pos
= os_strchr(drv
->phyname
, '\n');
2231 wpa_printf(MSG_DEBUG
, "nl80211: interface %s in phy %s",
2232 drv
->first_bss
.ifname
, drv
->phyname
);
2237 static void nl80211_l2_read(void *ctx
, const u8
*src_addr
, const u8
*buf
,
2240 wpa_printf(MSG_DEBUG
, "nl80211: l2_packet read %u",
2241 (unsigned int) len
);
2243 #endif /* CONFIG_AP */
2247 * wpa_driver_nl80211_init - Initialize nl80211 driver interface
2248 * @ctx: context to be used when calling wpa_supplicant functions,
2249 * e.g., wpa_supplicant_event()
2250 * @ifname: interface name, e.g., wlan0
2251 * @global_priv: private driver global data from global_init()
2252 * Returns: Pointer to private data, %NULL on failure
2254 static void * wpa_driver_nl80211_init(void *ctx
, const char *ifname
,
2257 struct wpa_driver_nl80211_data
*drv
;
2258 struct rfkill_config
*rcfg
;
2259 struct i802_bss
*bss
;
2261 if (global_priv
== NULL
)
2263 drv
= os_zalloc(sizeof(*drv
));
2266 drv
->global
= global_priv
;
2268 bss
= &drv
->first_bss
;
2270 os_strlcpy(bss
->ifname
, ifname
, sizeof(bss
->ifname
));
2271 drv
->monitor_ifidx
= -1;
2272 drv
->monitor_sock
= -1;
2273 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
2275 if (wpa_driver_nl80211_init_nl(drv
)) {
2280 nl80211_get_phy_name(drv
);
2282 rcfg
= os_zalloc(sizeof(*rcfg
));
2286 os_strlcpy(rcfg
->ifname
, ifname
, sizeof(rcfg
->ifname
));
2287 rcfg
->blocked_cb
= wpa_driver_nl80211_rfkill_blocked
;
2288 rcfg
->unblocked_cb
= wpa_driver_nl80211_rfkill_unblocked
;
2289 drv
->rfkill
= rfkill_init(rcfg
);
2290 if (drv
->rfkill
== NULL
) {
2291 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL status not available");
2295 if (wpa_driver_nl80211_finish_drv_init(drv
))
2299 drv
->l2
= l2_packet_init(ifname
, NULL
, ETH_P_EAPOL
,
2300 nl80211_l2_read
, drv
, 0);
2301 #endif /* CONFIG_AP */
2304 dl_list_add(&drv
->global
->interfaces
, &drv
->list
);
2305 drv
->in_interface_list
= 1;
2311 wpa_driver_nl80211_deinit(bss
);
2316 static int nl80211_register_frame(struct wpa_driver_nl80211_data
*drv
,
2317 struct nl_handle
*nl_handle
,
2318 u16 type
, const u8
*match
, size_t match_len
)
2323 msg
= nlmsg_alloc();
2327 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REGISTER_ACTION
);
2329 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2330 NLA_PUT_U16(msg
, NL80211_ATTR_FRAME_TYPE
, type
);
2331 NLA_PUT(msg
, NL80211_ATTR_FRAME_MATCH
, match_len
, match
);
2333 ret
= send_and_recv(drv
, nl_handle
, msg
, NULL
, NULL
);
2336 wpa_printf(MSG_DEBUG
, "nl80211: Register frame command "
2337 "failed (type=%u): ret=%d (%s)",
2338 type
, ret
, strerror(-ret
));
2339 wpa_hexdump(MSG_DEBUG
, "nl80211: Register frame match",
2341 goto nla_put_failure
;
2350 static int nl80211_register_action_frame(struct wpa_driver_nl80211_data
*drv
,
2351 const u8
*match
, size_t match_len
)
2353 u16 type
= (WLAN_FC_TYPE_MGMT
<< 2) | (WLAN_FC_STYPE_ACTION
<< 4);
2354 return nl80211_register_frame(drv
, drv
->nl_event
.handle
,
2355 type
, match
, match_len
);
2359 static int nl80211_register_action_frames(struct wpa_driver_nl80211_data
*drv
)
2361 #if defined(CONFIG_P2P) || defined(CONFIG_INTERWORKING)
2362 /* GAS Initial Request */
2363 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0a", 2) < 0)
2365 /* GAS Initial Response */
2366 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0b", 2) < 0)
2368 /* GAS Comeback Request */
2369 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0c", 2) < 0)
2371 /* GAS Comeback Response */
2372 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0d", 2) < 0)
2374 #endif /* CONFIG_P2P || CONFIG_INTERWORKING */
2376 /* P2P Public Action */
2377 if (nl80211_register_action_frame(drv
,
2378 (u8
*) "\x04\x09\x50\x6f\x9a\x09",
2382 if (nl80211_register_action_frame(drv
,
2383 (u8
*) "\x7f\x50\x6f\x9a\x09",
2386 #endif /* CONFIG_P2P */
2387 #ifdef CONFIG_IEEE80211W
2388 /* SA Query Response */
2389 if (nl80211_register_action_frame(drv
, (u8
*) "\x08\x01", 2) < 0)
2391 #endif /* CONFIG_IEEE80211W */
2393 if ((drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
)) {
2394 /* TDLS Discovery Response */
2395 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0e", 2) <
2399 #endif /* CONFIG_TDLS */
2401 /* FT Action frames */
2402 if (nl80211_register_action_frame(drv
, (u8
*) "\x06", 1) < 0)
2405 drv
->capa
.key_mgmt
|= WPA_DRIVER_CAPA_KEY_MGMT_FT
|
2406 WPA_DRIVER_CAPA_KEY_MGMT_FT_PSK
;
2408 /* WNM - BSS Transition Management Request */
2409 if (nl80211_register_action_frame(drv
, (u8
*) "\x0a\x07", 2) < 0)
2416 static void wpa_driver_nl80211_send_rfkill(void *eloop_ctx
, void *timeout_ctx
)
2418 wpa_supplicant_event(timeout_ctx
, EVENT_INTERFACE_DISABLED
, NULL
);
2423 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data
*drv
)
2425 struct i802_bss
*bss
= &drv
->first_bss
;
2426 int send_rfkill_event
= 0;
2428 drv
->ifindex
= if_nametoindex(bss
->ifname
);
2429 drv
->first_bss
.ifindex
= drv
->ifindex
;
2433 * Make sure the interface starts up in station mode unless this is a
2434 * dynamically added interface (e.g., P2P) that was already configured
2435 * with proper iftype.
2437 if (drv
->ifindex
!= drv
->global
->if_add_ifindex
&&
2438 wpa_driver_nl80211_set_mode(bss
, NL80211_IFTYPE_STATION
) < 0) {
2439 wpa_printf(MSG_ERROR
, "nl80211: Could not configure driver to "
2440 "use managed mode");
2444 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1)) {
2445 if (rfkill_is_blocked(drv
->rfkill
)) {
2446 wpa_printf(MSG_DEBUG
, "nl80211: Could not yet enable "
2447 "interface '%s' due to rfkill",
2449 drv
->if_disabled
= 1;
2450 send_rfkill_event
= 1;
2452 wpa_printf(MSG_ERROR
, "nl80211: Could not set "
2453 "interface '%s' UP", bss
->ifname
);
2458 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
,
2459 1, IF_OPER_DORMANT
);
2460 #endif /* HOSTAPD */
2462 if (wpa_driver_nl80211_capa(drv
))
2465 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
2469 if (nl80211_register_action_frames(drv
) < 0) {
2470 wpa_printf(MSG_DEBUG
, "nl80211: Failed to register Action "
2471 "frame processing - ignore for now");
2473 * Older kernel versions did not support this, so ignore the
2474 * error for now. Some functionality may not be available
2479 if (send_rfkill_event
) {
2480 eloop_register_timeout(0, 0, wpa_driver_nl80211_send_rfkill
,
2488 static int wpa_driver_nl80211_del_beacon(struct wpa_driver_nl80211_data
*drv
)
2492 msg
= nlmsg_alloc();
2496 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_BEACON
);
2497 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2499 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2506 * wpa_driver_nl80211_deinit - Deinitialize nl80211 driver interface
2507 * @priv: Pointer to private nl80211 data from wpa_driver_nl80211_init()
2509 * Shut down driver interface and processing of driver events. Free
2510 * private data buffer if one was allocated in wpa_driver_nl80211_init().
2512 static void wpa_driver_nl80211_deinit(void *priv
)
2514 struct i802_bss
*bss
= priv
;
2515 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2519 l2_packet_deinit(drv
->l2
);
2520 #endif /* CONFIG_AP */
2522 if (drv
->nl_preq
.handle
)
2523 wpa_driver_nl80211_probe_req_report(bss
, 0);
2524 if (bss
->added_if_into_bridge
) {
2525 if (linux_br_del_if(drv
->global
->ioctl_sock
, bss
->brname
,
2527 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
2528 "interface %s from bridge %s: %s",
2529 bss
->ifname
, bss
->brname
, strerror(errno
));
2531 if (bss
->added_bridge
) {
2532 if (linux_br_del(drv
->global
->ioctl_sock
, bss
->brname
) < 0)
2533 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
2535 bss
->brname
, strerror(errno
));
2538 nl80211_remove_monitor_interface(drv
);
2540 if (is_ap_interface(drv
->nlmode
))
2541 wpa_driver_nl80211_del_beacon(drv
);
2544 if (drv
->last_freq_ht
) {
2545 /* Clear HT flags from the driver */
2546 struct hostapd_freq_params freq
;
2547 os_memset(&freq
, 0, sizeof(freq
));
2548 freq
.freq
= drv
->last_freq
;
2549 i802_set_freq(priv
, &freq
);
2552 if (drv
->eapol_sock
>= 0) {
2553 eloop_unregister_read_sock(drv
->eapol_sock
);
2554 close(drv
->eapol_sock
);
2557 if (drv
->if_indices
!= drv
->default_if_indices
)
2558 os_free(drv
->if_indices
);
2559 #endif /* HOSTAPD */
2561 if (drv
->disabled_11b_rates
)
2562 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 0);
2564 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
, 0,
2566 rfkill_deinit(drv
->rfkill
);
2568 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
, drv
->ctx
);
2570 (void) linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 0);
2571 wpa_driver_nl80211_set_mode(bss
, NL80211_IFTYPE_STATION
);
2573 eloop_unregister_read_sock(nl_socket_get_fd(drv
->nl_event
.handle
));
2574 nl_destroy_handles(&drv
->nl_event
);
2576 os_free(drv
->filter_ssids
);
2578 if (drv
->in_interface_list
)
2579 dl_list_del(&drv
->list
);
2586 * wpa_driver_nl80211_scan_timeout - Scan timeout to report scan completion
2587 * @eloop_ctx: Driver private data
2588 * @timeout_ctx: ctx argument given to wpa_driver_nl80211_init()
2590 * This function can be used as registered timeout when starting a scan to
2591 * generate a scan completed event if the driver does not report this.
2593 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx
, void *timeout_ctx
)
2595 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
2596 if (drv
->ap_scan_as_station
!= NL80211_IFTYPE_UNSPECIFIED
) {
2597 wpa_driver_nl80211_set_mode(&drv
->first_bss
,
2598 drv
->ap_scan_as_station
);
2599 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
2601 wpa_printf(MSG_DEBUG
, "Scan timeout - try to get results");
2602 wpa_supplicant_event(timeout_ctx
, EVENT_SCAN_RESULTS
, NULL
);
2607 * wpa_driver_nl80211_scan - Request the driver to initiate scan
2608 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2609 * @params: Scan parameters
2610 * Returns: 0 on success, -1 on failure
2612 static int wpa_driver_nl80211_scan(void *priv
,
2613 struct wpa_driver_scan_params
*params
)
2615 struct i802_bss
*bss
= priv
;
2616 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2617 int ret
= 0, timeout
;
2618 struct nl_msg
*msg
, *ssids
, *freqs
, *rates
;
2621 msg
= nlmsg_alloc();
2622 ssids
= nlmsg_alloc();
2623 freqs
= nlmsg_alloc();
2624 rates
= nlmsg_alloc();
2625 if (!msg
|| !ssids
|| !freqs
|| !rates
) {
2633 os_free(drv
->filter_ssids
);
2634 drv
->filter_ssids
= params
->filter_ssids
;
2635 params
->filter_ssids
= NULL
;
2636 drv
->num_filter_ssids
= params
->num_filter_ssids
;
2638 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TRIGGER_SCAN
);
2640 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2642 for (i
= 0; i
< params
->num_ssids
; i
++) {
2643 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Scan SSID",
2644 params
->ssids
[i
].ssid
,
2645 params
->ssids
[i
].ssid_len
);
2646 NLA_PUT(ssids
, i
+ 1, params
->ssids
[i
].ssid_len
,
2647 params
->ssids
[i
].ssid
);
2649 if (params
->num_ssids
)
2650 nla_put_nested(msg
, NL80211_ATTR_SCAN_SSIDS
, ssids
);
2652 if (params
->extra_ies
) {
2653 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Scan extra IEs",
2654 params
->extra_ies
, params
->extra_ies_len
);
2655 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->extra_ies_len
,
2659 if (params
->freqs
) {
2660 for (i
= 0; params
->freqs
[i
]; i
++) {
2661 wpa_printf(MSG_MSGDUMP
, "nl80211: Scan frequency %u "
2662 "MHz", params
->freqs
[i
]);
2663 NLA_PUT_U32(freqs
, i
+ 1, params
->freqs
[i
]);
2665 nla_put_nested(msg
, NL80211_ATTR_SCAN_FREQUENCIES
, freqs
);
2668 if (params
->p2p_probe
) {
2670 * Remove 2.4 GHz rates 1, 2, 5.5, 11 Mbps from supported rates
2671 * by masking out everything else apart from the OFDM rates 6,
2672 * 9, 12, 18, 24, 36, 48, 54 Mbps from non-MCS rates. All 5 GHz
2673 * rates are left enabled.
2675 NLA_PUT(rates
, NL80211_BAND_2GHZ
, 8,
2676 "\x0c\x12\x18\x24\x30\x48\x60\x6c");
2677 nla_put_nested(msg
, NL80211_ATTR_SCAN_SUPP_RATES
, rates
);
2679 NLA_PUT_FLAG(msg
, NL80211_ATTR_TX_NO_CCK_RATE
);
2682 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2685 wpa_printf(MSG_DEBUG
, "nl80211: Scan trigger failed: ret=%d "
2686 "(%s)", ret
, strerror(-ret
));
2688 if (is_ap_interface(drv
->nlmode
)) {
2690 * mac80211 does not allow scan requests in AP mode, so
2691 * try to do this in station mode.
2693 if (wpa_driver_nl80211_set_mode(
2694 bss
, NL80211_IFTYPE_STATION
))
2695 goto nla_put_failure
;
2697 if (wpa_driver_nl80211_scan(drv
, params
)) {
2698 wpa_driver_nl80211_set_mode(bss
, drv
->nlmode
);
2699 goto nla_put_failure
;
2702 /* Restore AP mode when processing scan results */
2703 drv
->ap_scan_as_station
= drv
->nlmode
;
2706 goto nla_put_failure
;
2708 goto nla_put_failure
;
2709 #endif /* HOSTAPD */
2712 /* Not all drivers generate "scan completed" wireless event, so try to
2713 * read results after a timeout. */
2715 if (drv
->scan_complete_events
) {
2717 * The driver seems to deliver events to notify when scan is
2718 * complete, so use longer timeout to avoid race conditions
2719 * with scanning and following association request.
2723 wpa_printf(MSG_DEBUG
, "Scan requested (ret=%d) - scan timeout %d "
2724 "seconds", ret
, timeout
);
2725 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
, drv
->ctx
);
2726 eloop_register_timeout(timeout
, 0, wpa_driver_nl80211_scan_timeout
,
2739 * wpa_driver_nl80211_sched_scan - Initiate a scheduled scan
2740 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2741 * @params: Scan parameters
2742 * @interval: Interval between scan cycles in milliseconds
2743 * Returns: 0 on success, -1 on failure or if not supported
2745 static int wpa_driver_nl80211_sched_scan(void *priv
,
2746 struct wpa_driver_scan_params
*params
,
2749 struct i802_bss
*bss
= priv
;
2750 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2752 struct nl_msg
*msg
, *ssids
, *freqs
, *match_set_ssid
, *match_sets
;
2755 msg
= nlmsg_alloc();
2756 ssids
= nlmsg_alloc();
2757 freqs
= nlmsg_alloc();
2758 if (!msg
|| !ssids
|| !freqs
) {
2765 os_free(drv
->filter_ssids
);
2766 drv
->filter_ssids
= params
->filter_ssids
;
2767 params
->filter_ssids
= NULL
;
2768 drv
->num_filter_ssids
= params
->num_filter_ssids
;
2770 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_START_SCHED_SCAN
);
2772 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2774 NLA_PUT_U32(msg
, NL80211_ATTR_SCHED_SCAN_INTERVAL
, interval
);
2776 if (drv
->num_filter_ssids
) {
2777 match_sets
= nlmsg_alloc();
2779 for (i
= 0; i
< drv
->num_filter_ssids
; i
++) {
2780 wpa_hexdump_ascii(MSG_MSGDUMP
,
2781 "nl80211: Sched scan filter SSID",
2782 drv
->filter_ssids
[i
].ssid
,
2783 drv
->filter_ssids
[i
].ssid_len
);
2785 match_set_ssid
= nlmsg_alloc();
2786 nla_put(match_set_ssid
,
2787 NL80211_ATTR_SCHED_SCAN_MATCH_SSID
,
2788 drv
->filter_ssids
[i
].ssid_len
,
2789 drv
->filter_ssids
[i
].ssid
);
2791 nla_put_nested(match_sets
, i
+ 1, match_set_ssid
);
2793 nlmsg_free(match_set_ssid
);
2796 nla_put_nested(msg
, NL80211_ATTR_SCHED_SCAN_MATCH
,
2798 nlmsg_free(match_sets
);
2801 for (i
= 0; i
< params
->num_ssids
; i
++) {
2802 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Sched scan SSID",
2803 params
->ssids
[i
].ssid
,
2804 params
->ssids
[i
].ssid_len
);
2805 NLA_PUT(ssids
, i
+ 1, params
->ssids
[i
].ssid_len
,
2806 params
->ssids
[i
].ssid
);
2808 if (params
->num_ssids
)
2809 nla_put_nested(msg
, NL80211_ATTR_SCAN_SSIDS
, ssids
);
2811 if (params
->extra_ies
) {
2812 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Sched scan extra IEs",
2813 params
->extra_ies
, params
->extra_ies_len
);
2814 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->extra_ies_len
,
2818 if (params
->freqs
) {
2819 for (i
= 0; params
->freqs
[i
]; i
++) {
2820 wpa_printf(MSG_MSGDUMP
, "nl80211: Scan frequency %u "
2821 "MHz", params
->freqs
[i
]);
2822 NLA_PUT_U32(freqs
, i
+ 1, params
->freqs
[i
]);
2824 nla_put_nested(msg
, NL80211_ATTR_SCAN_FREQUENCIES
, freqs
);
2827 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2829 /* TODO: if we get an error here, we should fall back to normal scan */
2833 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan start failed: "
2834 "ret=%d (%s)", ret
, strerror(-ret
));
2835 goto nla_put_failure
;
2838 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan requested (ret=%d) - "
2839 "scan interval %d msec", ret
, interval
);
2850 * wpa_driver_nl80211_stop_sched_scan - Stop a scheduled scan
2851 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2852 * Returns: 0 on success, -1 on failure or if not supported
2854 static int wpa_driver_nl80211_stop_sched_scan(void *priv
)
2856 struct i802_bss
*bss
= priv
;
2857 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2861 msg
= nlmsg_alloc();
2865 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_STOP_SCHED_SCAN
);
2867 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2869 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2872 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stop failed: "
2873 "ret=%d (%s)", ret
, strerror(-ret
));
2874 goto nla_put_failure
;
2877 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stop sent (ret=%d)", ret
);
2885 static const u8
* nl80211_get_ie(const u8
*ies
, size_t ies_len
, u8 ie
)
2887 const u8
*end
, *pos
;
2893 end
= ies
+ ies_len
;
2895 while (pos
+ 1 < end
) {
2896 if (pos
+ 2 + pos
[1] > end
)
2907 static int nl80211_scan_filtered(struct wpa_driver_nl80211_data
*drv
,
2908 const u8
*ie
, size_t ie_len
)
2913 if (drv
->filter_ssids
== NULL
)
2916 ssid
= nl80211_get_ie(ie
, ie_len
, WLAN_EID_SSID
);
2920 for (i
= 0; i
< drv
->num_filter_ssids
; i
++) {
2921 if (ssid
[1] == drv
->filter_ssids
[i
].ssid_len
&&
2922 os_memcmp(ssid
+ 2, drv
->filter_ssids
[i
].ssid
, ssid
[1]) ==
2931 static int bss_info_handler(struct nl_msg
*msg
, void *arg
)
2933 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
2934 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
2935 struct nlattr
*bss
[NL80211_BSS_MAX
+ 1];
2936 static struct nla_policy bss_policy
[NL80211_BSS_MAX
+ 1] = {
2937 [NL80211_BSS_BSSID
] = { .type
= NLA_UNSPEC
},
2938 [NL80211_BSS_FREQUENCY
] = { .type
= NLA_U32
},
2939 [NL80211_BSS_TSF
] = { .type
= NLA_U64
},
2940 [NL80211_BSS_BEACON_INTERVAL
] = { .type
= NLA_U16
},
2941 [NL80211_BSS_CAPABILITY
] = { .type
= NLA_U16
},
2942 [NL80211_BSS_INFORMATION_ELEMENTS
] = { .type
= NLA_UNSPEC
},
2943 [NL80211_BSS_SIGNAL_MBM
] = { .type
= NLA_U32
},
2944 [NL80211_BSS_SIGNAL_UNSPEC
] = { .type
= NLA_U8
},
2945 [NL80211_BSS_STATUS
] = { .type
= NLA_U32
},
2946 [NL80211_BSS_SEEN_MS_AGO
] = { .type
= NLA_U32
},
2947 [NL80211_BSS_BEACON_IES
] = { .type
= NLA_UNSPEC
},
2949 struct nl80211_bss_info_arg
*_arg
= arg
;
2950 struct wpa_scan_results
*res
= _arg
->res
;
2951 struct wpa_scan_res
**tmp
;
2952 struct wpa_scan_res
*r
;
2953 const u8
*ie
, *beacon_ie
;
2954 size_t ie_len
, beacon_ie_len
;
2958 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
2959 genlmsg_attrlen(gnlh
, 0), NULL
);
2960 if (!tb
[NL80211_ATTR_BSS
])
2962 if (nla_parse_nested(bss
, NL80211_BSS_MAX
, tb
[NL80211_ATTR_BSS
],
2965 if (bss
[NL80211_BSS_STATUS
]) {
2966 enum nl80211_bss_status status
;
2967 status
= nla_get_u32(bss
[NL80211_BSS_STATUS
]);
2968 if (status
== NL80211_BSS_STATUS_ASSOCIATED
&&
2969 bss
[NL80211_BSS_FREQUENCY
]) {
2971 nla_get_u32(bss
[NL80211_BSS_FREQUENCY
]);
2972 wpa_printf(MSG_DEBUG
, "nl80211: Associated on %u MHz",
2975 if (status
== NL80211_BSS_STATUS_ASSOCIATED
&&
2976 bss
[NL80211_BSS_BSSID
]) {
2977 os_memcpy(_arg
->assoc_bssid
,
2978 nla_data(bss
[NL80211_BSS_BSSID
]), ETH_ALEN
);
2979 wpa_printf(MSG_DEBUG
, "nl80211: Associated with "
2980 MACSTR
, MAC2STR(_arg
->assoc_bssid
));
2985 if (bss
[NL80211_BSS_INFORMATION_ELEMENTS
]) {
2986 ie
= nla_data(bss
[NL80211_BSS_INFORMATION_ELEMENTS
]);
2987 ie_len
= nla_len(bss
[NL80211_BSS_INFORMATION_ELEMENTS
]);
2992 if (bss
[NL80211_BSS_BEACON_IES
]) {
2993 beacon_ie
= nla_data(bss
[NL80211_BSS_BEACON_IES
]);
2994 beacon_ie_len
= nla_len(bss
[NL80211_BSS_BEACON_IES
]);
3000 if (nl80211_scan_filtered(_arg
->drv
, ie
? ie
: beacon_ie
,
3001 ie
? ie_len
: beacon_ie_len
))
3004 r
= os_zalloc(sizeof(*r
) + ie_len
+ beacon_ie_len
);
3007 if (bss
[NL80211_BSS_BSSID
])
3008 os_memcpy(r
->bssid
, nla_data(bss
[NL80211_BSS_BSSID
]),
3010 if (bss
[NL80211_BSS_FREQUENCY
])
3011 r
->freq
= nla_get_u32(bss
[NL80211_BSS_FREQUENCY
]);
3012 if (bss
[NL80211_BSS_BEACON_INTERVAL
])
3013 r
->beacon_int
= nla_get_u16(bss
[NL80211_BSS_BEACON_INTERVAL
]);
3014 if (bss
[NL80211_BSS_CAPABILITY
])
3015 r
->caps
= nla_get_u16(bss
[NL80211_BSS_CAPABILITY
]);
3016 r
->flags
|= WPA_SCAN_NOISE_INVALID
;
3017 if (bss
[NL80211_BSS_SIGNAL_MBM
]) {
3018 r
->level
= nla_get_u32(bss
[NL80211_BSS_SIGNAL_MBM
]);
3019 r
->level
/= 100; /* mBm to dBm */
3020 r
->flags
|= WPA_SCAN_LEVEL_DBM
| WPA_SCAN_QUAL_INVALID
;
3021 } else if (bss
[NL80211_BSS_SIGNAL_UNSPEC
]) {
3022 r
->level
= nla_get_u8(bss
[NL80211_BSS_SIGNAL_UNSPEC
]);
3023 r
->flags
|= WPA_SCAN_LEVEL_INVALID
;
3025 r
->flags
|= WPA_SCAN_LEVEL_INVALID
| WPA_SCAN_QUAL_INVALID
;
3026 if (bss
[NL80211_BSS_TSF
])
3027 r
->tsf
= nla_get_u64(bss
[NL80211_BSS_TSF
]);
3028 if (bss
[NL80211_BSS_SEEN_MS_AGO
])
3029 r
->age
= nla_get_u32(bss
[NL80211_BSS_SEEN_MS_AGO
]);
3031 pos
= (u8
*) (r
+ 1);
3033 os_memcpy(pos
, ie
, ie_len
);
3036 r
->beacon_ie_len
= beacon_ie_len
;
3038 os_memcpy(pos
, beacon_ie
, beacon_ie_len
);
3040 if (bss
[NL80211_BSS_STATUS
]) {
3041 enum nl80211_bss_status status
;
3042 status
= nla_get_u32(bss
[NL80211_BSS_STATUS
]);
3044 case NL80211_BSS_STATUS_AUTHENTICATED
:
3045 r
->flags
|= WPA_SCAN_AUTHENTICATED
;
3047 case NL80211_BSS_STATUS_ASSOCIATED
:
3048 r
->flags
|= WPA_SCAN_ASSOCIATED
;
3056 * cfg80211 maintains separate BSS table entries for APs if the same
3057 * BSSID,SSID pair is seen on multiple channels. wpa_supplicant does
3058 * not use frequency as a separate key in the BSS table, so filter out
3059 * duplicated entries. Prefer associated BSS entry in such a case in
3060 * order to get the correct frequency into the BSS table.
3062 for (i
= 0; i
< res
->num
; i
++) {
3064 if (os_memcmp(res
->res
[i
]->bssid
, r
->bssid
, ETH_ALEN
) != 0)
3067 s1
= nl80211_get_ie((u8
*) (res
->res
[i
] + 1),
3068 res
->res
[i
]->ie_len
, WLAN_EID_SSID
);
3069 s2
= nl80211_get_ie((u8
*) (r
+ 1), r
->ie_len
, WLAN_EID_SSID
);
3070 if (s1
== NULL
|| s2
== NULL
|| s1
[1] != s2
[1] ||
3071 os_memcmp(s1
, s2
, 2 + s1
[1]) != 0)
3074 /* Same BSSID,SSID was already included in scan results */
3075 wpa_printf(MSG_DEBUG
, "nl80211: Remove duplicated scan result "
3076 "for " MACSTR
, MAC2STR(r
->bssid
));
3078 if ((r
->flags
& WPA_SCAN_ASSOCIATED
) &&
3079 !(res
->res
[i
]->flags
& WPA_SCAN_ASSOCIATED
)) {
3080 os_free(res
->res
[i
]);
3087 tmp
= os_realloc(res
->res
,
3088 (res
->num
+ 1) * sizeof(struct wpa_scan_res
*));
3093 tmp
[res
->num
++] = r
;
3100 static void clear_state_mismatch(struct wpa_driver_nl80211_data
*drv
,
3103 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
3104 wpa_printf(MSG_DEBUG
, "nl80211: Clear possible state "
3105 "mismatch (" MACSTR
")", MAC2STR(addr
));
3106 wpa_driver_nl80211_mlme(drv
, addr
,
3107 NL80211_CMD_DEAUTHENTICATE
,
3108 WLAN_REASON_PREV_AUTH_NOT_VALID
, 1);
3113 static void wpa_driver_nl80211_check_bss_status(
3114 struct wpa_driver_nl80211_data
*drv
, struct wpa_scan_results
*res
)
3118 for (i
= 0; i
< res
->num
; i
++) {
3119 struct wpa_scan_res
*r
= res
->res
[i
];
3120 if (r
->flags
& WPA_SCAN_AUTHENTICATED
) {
3121 wpa_printf(MSG_DEBUG
, "nl80211: Scan results "
3122 "indicates BSS status with " MACSTR
3123 " as authenticated",
3125 if (is_sta_interface(drv
->nlmode
) &&
3126 os_memcmp(r
->bssid
, drv
->bssid
, ETH_ALEN
) != 0 &&
3127 os_memcmp(r
->bssid
, drv
->auth_bssid
, ETH_ALEN
) !=
3129 wpa_printf(MSG_DEBUG
, "nl80211: Unknown BSSID"
3130 " in local state (auth=" MACSTR
3131 " assoc=" MACSTR
")",
3132 MAC2STR(drv
->auth_bssid
),
3133 MAC2STR(drv
->bssid
));
3134 clear_state_mismatch(drv
, r
->bssid
);
3138 if (r
->flags
& WPA_SCAN_ASSOCIATED
) {
3139 wpa_printf(MSG_DEBUG
, "nl80211: Scan results "
3140 "indicate BSS status with " MACSTR
3143 if (is_sta_interface(drv
->nlmode
) &&
3145 wpa_printf(MSG_DEBUG
, "nl80211: Local state "
3146 "(not associated) does not match "
3148 clear_state_mismatch(drv
, r
->bssid
);
3149 } else if (is_sta_interface(drv
->nlmode
) &&
3150 os_memcmp(drv
->bssid
, r
->bssid
, ETH_ALEN
) !=
3152 wpa_printf(MSG_DEBUG
, "nl80211: Local state "
3153 "(associated with " MACSTR
") does "
3154 "not match with BSS state",
3155 MAC2STR(drv
->bssid
));
3156 clear_state_mismatch(drv
, r
->bssid
);
3157 clear_state_mismatch(drv
, drv
->bssid
);
3164 static struct wpa_scan_results
*
3165 nl80211_get_scan_results(struct wpa_driver_nl80211_data
*drv
)
3168 struct wpa_scan_results
*res
;
3170 struct nl80211_bss_info_arg arg
;
3172 res
= os_zalloc(sizeof(*res
));
3175 msg
= nlmsg_alloc();
3177 goto nla_put_failure
;
3179 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
3180 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3184 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
3187 wpa_printf(MSG_DEBUG
, "nl80211: Received scan results (%lu "
3188 "BSSes)", (unsigned long) res
->num
);
3189 nl80211_get_noise_for_scan_results(drv
, res
);
3192 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
3193 "(%s)", ret
, strerror(-ret
));
3196 wpa_scan_results_free(res
);
3202 * wpa_driver_nl80211_get_scan_results - Fetch the latest scan results
3203 * @priv: Pointer to private wext data from wpa_driver_nl80211_init()
3204 * Returns: Scan results on success, -1 on failure
3206 static struct wpa_scan_results
*
3207 wpa_driver_nl80211_get_scan_results(void *priv
)
3209 struct i802_bss
*bss
= priv
;
3210 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3211 struct wpa_scan_results
*res
;
3213 res
= nl80211_get_scan_results(drv
);
3215 wpa_driver_nl80211_check_bss_status(drv
, res
);
3220 static void nl80211_dump_scan(struct wpa_driver_nl80211_data
*drv
)
3222 struct wpa_scan_results
*res
;
3225 res
= nl80211_get_scan_results(drv
);
3227 wpa_printf(MSG_DEBUG
, "nl80211: Failed to get scan results");
3231 wpa_printf(MSG_DEBUG
, "nl80211: Scan result dump");
3232 for (i
= 0; i
< res
->num
; i
++) {
3233 struct wpa_scan_res
*r
= res
->res
[i
];
3234 wpa_printf(MSG_DEBUG
, "nl80211: %d/%d " MACSTR
"%s%s",
3235 (int) i
, (int) res
->num
, MAC2STR(r
->bssid
),
3236 r
->flags
& WPA_SCAN_AUTHENTICATED
? " [auth]" : "",
3237 r
->flags
& WPA_SCAN_ASSOCIATED
? " [assoc]" : "");
3240 wpa_scan_results_free(res
);
3244 static int wpa_driver_nl80211_set_key(const char *ifname
, void *priv
,
3245 enum wpa_alg alg
, const u8
*addr
,
3246 int key_idx
, int set_tx
,
3247 const u8
*seq
, size_t seq_len
,
3248 const u8
*key
, size_t key_len
)
3250 struct i802_bss
*bss
= priv
;
3251 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3252 int ifindex
= if_nametoindex(ifname
);
3256 wpa_printf(MSG_DEBUG
, "%s: ifindex=%d alg=%d addr=%p key_idx=%d "
3257 "set_tx=%d seq_len=%lu key_len=%lu",
3258 __func__
, ifindex
, alg
, addr
, key_idx
, set_tx
,
3259 (unsigned long) seq_len
, (unsigned long) key_len
);
3263 #endif /* CONFIG_TDLS */
3265 msg
= nlmsg_alloc();
3269 if (alg
== WPA_ALG_NONE
) {
3270 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_KEY
);
3272 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_NEW_KEY
);
3273 NLA_PUT(msg
, NL80211_ATTR_KEY_DATA
, key_len
, key
);
3277 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3278 WLAN_CIPHER_SUITE_WEP40
);
3280 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3281 WLAN_CIPHER_SUITE_WEP104
);
3284 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3285 WLAN_CIPHER_SUITE_TKIP
);
3288 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3289 WLAN_CIPHER_SUITE_CCMP
);
3292 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3293 WLAN_CIPHER_SUITE_AES_CMAC
);
3296 wpa_printf(MSG_ERROR
, "%s: Unsupported encryption "
3297 "algorithm %d", __func__
, alg
);
3304 NLA_PUT(msg
, NL80211_ATTR_KEY_SEQ
, seq_len
, seq
);
3306 if (addr
&& !is_broadcast_ether_addr(addr
)) {
3307 wpa_printf(MSG_DEBUG
, " addr=" MACSTR
, MAC2STR(addr
));
3308 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
3310 if (alg
!= WPA_ALG_WEP
&& key_idx
&& !set_tx
) {
3311 wpa_printf(MSG_DEBUG
, " RSN IBSS RX GTK");
3312 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_TYPE
,
3313 NL80211_KEYTYPE_GROUP
);
3315 } else if (addr
&& is_broadcast_ether_addr(addr
)) {
3316 struct nl_msg
*types
;
3318 wpa_printf(MSG_DEBUG
, " broadcast key");
3319 types
= nlmsg_alloc();
3321 goto nla_put_failure
;
3322 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_MULTICAST
);
3323 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3327 goto nla_put_failure
;
3329 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, key_idx
);
3330 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
3332 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3333 if ((ret
== -ENOENT
|| ret
== -ENOLINK
) && alg
== WPA_ALG_NONE
)
3336 wpa_printf(MSG_DEBUG
, "nl80211: set_key failed; err=%d %s)",
3337 ret
, strerror(-ret
));
3340 * If we failed or don't need to set the default TX key (below),
3343 if (ret
|| !set_tx
|| alg
== WPA_ALG_NONE
)
3345 if (is_ap_interface(drv
->nlmode
) && addr
&&
3346 !is_broadcast_ether_addr(addr
))
3349 msg
= nlmsg_alloc();
3353 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_KEY
);
3354 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, key_idx
);
3355 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
3356 if (alg
== WPA_ALG_IGTK
)
3357 NLA_PUT_FLAG(msg
, NL80211_ATTR_KEY_DEFAULT_MGMT
);
3359 NLA_PUT_FLAG(msg
, NL80211_ATTR_KEY_DEFAULT
);
3360 if (addr
&& is_broadcast_ether_addr(addr
)) {
3361 struct nl_msg
*types
;
3363 types
= nlmsg_alloc();
3365 goto nla_put_failure
;
3366 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_MULTICAST
);
3367 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3371 goto nla_put_failure
;
3373 struct nl_msg
*types
;
3375 types
= nlmsg_alloc();
3377 goto nla_put_failure
;
3378 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_UNICAST
);
3379 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3383 goto nla_put_failure
;
3386 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3390 wpa_printf(MSG_DEBUG
, "nl80211: set_key default failed; "
3391 "err=%d %s)", ret
, strerror(-ret
));
3399 static int nl_add_key(struct nl_msg
*msg
, enum wpa_alg alg
,
3400 int key_idx
, int defkey
,
3401 const u8
*seq
, size_t seq_len
,
3402 const u8
*key
, size_t key_len
)
3404 struct nlattr
*key_attr
= nla_nest_start(msg
, NL80211_ATTR_KEY
);
3408 if (defkey
&& alg
== WPA_ALG_IGTK
)
3409 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT_MGMT
);
3411 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT
);
3413 NLA_PUT_U8(msg
, NL80211_KEY_IDX
, key_idx
);
3418 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3419 WLAN_CIPHER_SUITE_WEP40
);
3421 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3422 WLAN_CIPHER_SUITE_WEP104
);
3425 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
, WLAN_CIPHER_SUITE_TKIP
);
3428 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
, WLAN_CIPHER_SUITE_CCMP
);
3431 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3432 WLAN_CIPHER_SUITE_AES_CMAC
);
3435 wpa_printf(MSG_ERROR
, "%s: Unsupported encryption "
3436 "algorithm %d", __func__
, alg
);
3441 NLA_PUT(msg
, NL80211_KEY_SEQ
, seq_len
, seq
);
3443 NLA_PUT(msg
, NL80211_KEY_DATA
, key_len
, key
);
3445 nla_nest_end(msg
, key_attr
);
3453 static int nl80211_set_conn_keys(struct wpa_driver_associate_params
*params
,
3457 struct nlattr
*nl_keys
, *nl_key
;
3459 for (i
= 0; i
< 4; i
++) {
3460 if (!params
->wep_key
[i
])
3465 if (params
->wps
== WPS_MODE_PRIVACY
)
3467 if (params
->pairwise_suite
&&
3468 params
->pairwise_suite
!= WPA_CIPHER_NONE
)
3474 NLA_PUT_FLAG(msg
, NL80211_ATTR_PRIVACY
);
3476 nl_keys
= nla_nest_start(msg
, NL80211_ATTR_KEYS
);
3478 goto nla_put_failure
;
3480 for (i
= 0; i
< 4; i
++) {
3481 if (!params
->wep_key
[i
])
3484 nl_key
= nla_nest_start(msg
, i
);
3486 goto nla_put_failure
;
3488 NLA_PUT(msg
, NL80211_KEY_DATA
, params
->wep_key_len
[i
],
3489 params
->wep_key
[i
]);
3490 if (params
->wep_key_len
[i
] == 5)
3491 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3492 WLAN_CIPHER_SUITE_WEP40
);
3494 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3495 WLAN_CIPHER_SUITE_WEP104
);
3497 NLA_PUT_U8(msg
, NL80211_KEY_IDX
, i
);
3499 if (i
== params
->wep_tx_keyidx
)
3500 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT
);
3502 nla_nest_end(msg
, nl_key
);
3504 nla_nest_end(msg
, nl_keys
);
3513 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data
*drv
,
3514 const u8
*addr
, int cmd
, u16 reason_code
,
3515 int local_state_change
)
3520 msg
= nlmsg_alloc();
3524 nl80211_cmd(drv
, msg
, 0, cmd
);
3526 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3527 NLA_PUT_U16(msg
, NL80211_ATTR_REASON_CODE
, reason_code
);
3528 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
3529 if (local_state_change
)
3530 NLA_PUT_FLAG(msg
, NL80211_ATTR_LOCAL_STATE_CHANGE
);
3532 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3535 wpa_printf(MSG_DEBUG
, "nl80211: MLME command failed: ret=%d "
3536 "(%s)", ret
, strerror(-ret
));
3537 goto nla_put_failure
;
3547 static int wpa_driver_nl80211_disconnect(struct wpa_driver_nl80211_data
*drv
,
3548 const u8
*addr
, int reason_code
)
3550 wpa_printf(MSG_DEBUG
, "%s(addr=" MACSTR
" reason_code=%d)",
3551 __func__
, MAC2STR(addr
), reason_code
);
3552 drv
->associated
= 0;
3553 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DISCONNECT
,
3558 static int wpa_driver_nl80211_deauthenticate(void *priv
, const u8
*addr
,
3561 struct i802_bss
*bss
= priv
;
3562 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3563 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
))
3564 return wpa_driver_nl80211_disconnect(drv
, addr
, reason_code
);
3565 wpa_printf(MSG_DEBUG
, "%s(addr=" MACSTR
" reason_code=%d)",
3566 __func__
, MAC2STR(addr
), reason_code
);
3567 drv
->associated
= 0;
3568 if (drv
->nlmode
== NL80211_IFTYPE_ADHOC
)
3569 return nl80211_leave_ibss(drv
);
3570 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DEAUTHENTICATE
,
3575 static int wpa_driver_nl80211_disassociate(void *priv
, const u8
*addr
,
3578 struct i802_bss
*bss
= priv
;
3579 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3580 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
))
3581 return wpa_driver_nl80211_disconnect(drv
, addr
, reason_code
);
3582 wpa_printf(MSG_DEBUG
, "%s", __func__
);
3583 drv
->associated
= 0;
3584 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DISASSOCIATE
,
3589 static int wpa_driver_nl80211_authenticate(
3590 void *priv
, struct wpa_driver_auth_params
*params
)
3592 struct i802_bss
*bss
= priv
;
3593 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3596 enum nl80211_auth_type type
;
3597 enum nl80211_iftype nlmode
;
3600 drv
->associated
= 0;
3601 os_memset(drv
->auth_bssid
, 0, ETH_ALEN
);
3602 /* FIX: IBSS mode */
3603 nlmode
= params
->p2p
?
3604 NL80211_IFTYPE_P2P_CLIENT
: NL80211_IFTYPE_STATION
;
3605 if (drv
->nlmode
!= nlmode
&&
3606 wpa_driver_nl80211_set_mode(priv
, nlmode
) < 0)
3610 msg
= nlmsg_alloc();
3614 wpa_printf(MSG_DEBUG
, "nl80211: Authenticate (ifindex=%d)",
3617 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_AUTHENTICATE
);
3619 for (i
= 0; i
< 4; i
++) {
3620 if (!params
->wep_key
[i
])
3622 wpa_driver_nl80211_set_key(bss
->ifname
, priv
, WPA_ALG_WEP
,
3624 i
== params
->wep_tx_keyidx
, NULL
, 0,
3626 params
->wep_key_len
[i
]);
3627 if (params
->wep_tx_keyidx
!= i
)
3629 if (nl_add_key(msg
, WPA_ALG_WEP
, i
, 1, NULL
, 0,
3630 params
->wep_key
[i
], params
->wep_key_len
[i
])) {
3636 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3637 if (params
->bssid
) {
3638 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
3639 MAC2STR(params
->bssid
));
3640 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
3643 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
3644 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
3647 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
3648 params
->ssid
, params
->ssid_len
);
3649 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
3652 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->ie
, params
->ie_len
);
3654 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->ie_len
, params
->ie
);
3655 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
3656 type
= NL80211_AUTHTYPE_OPEN_SYSTEM
;
3657 else if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
3658 type
= NL80211_AUTHTYPE_SHARED_KEY
;
3659 else if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
3660 type
= NL80211_AUTHTYPE_NETWORK_EAP
;
3661 else if (params
->auth_alg
& WPA_AUTH_ALG_FT
)
3662 type
= NL80211_AUTHTYPE_FT
;
3664 goto nla_put_failure
;
3665 wpa_printf(MSG_DEBUG
, " * Auth Type %d", type
);
3666 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
, type
);
3667 if (params
->local_state_change
) {
3668 wpa_printf(MSG_DEBUG
, " * Local state change only");
3669 NLA_PUT_FLAG(msg
, NL80211_ATTR_LOCAL_STATE_CHANGE
);
3672 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3675 wpa_printf(MSG_DEBUG
, "nl80211: MLME command failed: ret=%d "
3676 "(%s)", ret
, strerror(-ret
));
3678 if (ret
== -EALREADY
&& count
== 1 && params
->bssid
&&
3679 !params
->local_state_change
) {
3681 * mac80211 does not currently accept new
3682 * authentication if we are already authenticated. As a
3683 * workaround, force deauthentication and try again.
3685 wpa_printf(MSG_DEBUG
, "nl80211: Retry authentication "
3686 "after forced deauthentication");
3687 wpa_driver_nl80211_deauthenticate(
3689 WLAN_REASON_PREV_AUTH_NOT_VALID
);
3693 goto nla_put_failure
;
3696 wpa_printf(MSG_DEBUG
, "nl80211: Authentication request send "
3705 struct phy_info_arg
{
3707 struct hostapd_hw_modes
*modes
;
3710 static int phy_info_handler(struct nl_msg
*msg
, void *arg
)
3712 struct nlattr
*tb_msg
[NL80211_ATTR_MAX
+ 1];
3713 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
3714 struct phy_info_arg
*phy_info
= arg
;
3716 struct nlattr
*tb_band
[NL80211_BAND_ATTR_MAX
+ 1];
3718 struct nlattr
*tb_freq
[NL80211_FREQUENCY_ATTR_MAX
+ 1];
3719 static struct nla_policy freq_policy
[NL80211_FREQUENCY_ATTR_MAX
+ 1] = {
3720 [NL80211_FREQUENCY_ATTR_FREQ
] = { .type
= NLA_U32
},
3721 [NL80211_FREQUENCY_ATTR_DISABLED
] = { .type
= NLA_FLAG
},
3722 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN
] = { .type
= NLA_FLAG
},
3723 [NL80211_FREQUENCY_ATTR_NO_IBSS
] = { .type
= NLA_FLAG
},
3724 [NL80211_FREQUENCY_ATTR_RADAR
] = { .type
= NLA_FLAG
},
3725 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER
] = { .type
= NLA_U32
},
3728 struct nlattr
*tb_rate
[NL80211_BITRATE_ATTR_MAX
+ 1];
3729 static struct nla_policy rate_policy
[NL80211_BITRATE_ATTR_MAX
+ 1] = {
3730 [NL80211_BITRATE_ATTR_RATE
] = { .type
= NLA_U32
},
3731 [NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE
] = { .type
= NLA_FLAG
},
3734 struct nlattr
*nl_band
;
3735 struct nlattr
*nl_freq
;
3736 struct nlattr
*nl_rate
;
3737 int rem_band
, rem_freq
, rem_rate
;
3738 struct hostapd_hw_modes
*mode
;
3739 int idx
, mode_is_set
;
3741 nla_parse(tb_msg
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
3742 genlmsg_attrlen(gnlh
, 0), NULL
);
3744 if (!tb_msg
[NL80211_ATTR_WIPHY_BANDS
])
3747 nla_for_each_nested(nl_band
, tb_msg
[NL80211_ATTR_WIPHY_BANDS
], rem_band
) {
3748 mode
= os_realloc(phy_info
->modes
, (*phy_info
->num_modes
+ 1) * sizeof(*mode
));
3751 phy_info
->modes
= mode
;
3755 mode
= &phy_info
->modes
[*(phy_info
->num_modes
)];
3756 memset(mode
, 0, sizeof(*mode
));
3757 mode
->flags
= HOSTAPD_MODE_FLAG_HT_INFO_KNOWN
;
3758 *(phy_info
->num_modes
) += 1;
3760 nla_parse(tb_band
, NL80211_BAND_ATTR_MAX
, nla_data(nl_band
),
3761 nla_len(nl_band
), NULL
);
3763 if (tb_band
[NL80211_BAND_ATTR_HT_CAPA
]) {
3764 mode
->ht_capab
= nla_get_u16(
3765 tb_band
[NL80211_BAND_ATTR_HT_CAPA
]);
3768 if (tb_band
[NL80211_BAND_ATTR_HT_AMPDU_FACTOR
]) {
3769 mode
->a_mpdu_params
|= nla_get_u8(
3770 tb_band
[NL80211_BAND_ATTR_HT_AMPDU_FACTOR
]) &
3774 if (tb_band
[NL80211_BAND_ATTR_HT_AMPDU_DENSITY
]) {
3775 mode
->a_mpdu_params
|= nla_get_u8(
3776 tb_band
[NL80211_BAND_ATTR_HT_AMPDU_DENSITY
]) <<
3780 if (tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
] &&
3781 nla_len(tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
])) {
3783 mcs
= nla_data(tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
]);
3784 os_memcpy(mode
->mcs_set
, mcs
, 16);
3787 nla_for_each_nested(nl_freq
, tb_band
[NL80211_BAND_ATTR_FREQS
], rem_freq
) {
3788 nla_parse(tb_freq
, NL80211_FREQUENCY_ATTR_MAX
, nla_data(nl_freq
),
3789 nla_len(nl_freq
), freq_policy
);
3790 if (!tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
])
3792 mode
->num_channels
++;
3795 mode
->channels
= os_zalloc(mode
->num_channels
* sizeof(struct hostapd_channel_data
));
3796 if (!mode
->channels
)
3801 nla_for_each_nested(nl_freq
, tb_band
[NL80211_BAND_ATTR_FREQS
], rem_freq
) {
3802 nla_parse(tb_freq
, NL80211_FREQUENCY_ATTR_MAX
, nla_data(nl_freq
),
3803 nla_len(nl_freq
), freq_policy
);
3804 if (!tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
])
3807 mode
->channels
[idx
].freq
= nla_get_u32(tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
]);
3808 mode
->channels
[idx
].flag
= 0;
3811 /* crude heuristic */
3812 if (mode
->channels
[idx
].freq
< 4000)
3813 mode
->mode
= HOSTAPD_MODE_IEEE80211B
;
3815 mode
->mode
= HOSTAPD_MODE_IEEE80211A
;
3819 /* crude heuristic */
3820 if (mode
->channels
[idx
].freq
< 4000)
3821 if (mode
->channels
[idx
].freq
== 2484)
3822 mode
->channels
[idx
].chan
= 14;
3824 mode
->channels
[idx
].chan
= (mode
->channels
[idx
].freq
- 2407) / 5;
3826 mode
->channels
[idx
].chan
= mode
->channels
[idx
].freq
/5 - 1000;
3828 if (tb_freq
[NL80211_FREQUENCY_ATTR_DISABLED
])
3829 mode
->channels
[idx
].flag
|=
3830 HOSTAPD_CHAN_DISABLED
;
3831 if (tb_freq
[NL80211_FREQUENCY_ATTR_PASSIVE_SCAN
])
3832 mode
->channels
[idx
].flag
|=
3833 HOSTAPD_CHAN_PASSIVE_SCAN
;
3834 if (tb_freq
[NL80211_FREQUENCY_ATTR_NO_IBSS
])
3835 mode
->channels
[idx
].flag
|=
3836 HOSTAPD_CHAN_NO_IBSS
;
3837 if (tb_freq
[NL80211_FREQUENCY_ATTR_RADAR
])
3838 mode
->channels
[idx
].flag
|=
3841 if (tb_freq
[NL80211_FREQUENCY_ATTR_MAX_TX_POWER
] &&
3842 !tb_freq
[NL80211_FREQUENCY_ATTR_DISABLED
])
3843 mode
->channels
[idx
].max_tx_power
=
3844 nla_get_u32(tb_freq
[NL80211_FREQUENCY_ATTR_MAX_TX_POWER
]) / 100;
3849 nla_for_each_nested(nl_rate
, tb_band
[NL80211_BAND_ATTR_RATES
], rem_rate
) {
3850 nla_parse(tb_rate
, NL80211_BITRATE_ATTR_MAX
, nla_data(nl_rate
),
3851 nla_len(nl_rate
), rate_policy
);
3852 if (!tb_rate
[NL80211_BITRATE_ATTR_RATE
])
3857 mode
->rates
= os_zalloc(mode
->num_rates
* sizeof(int));
3863 nla_for_each_nested(nl_rate
, tb_band
[NL80211_BAND_ATTR_RATES
], rem_rate
) {
3864 nla_parse(tb_rate
, NL80211_BITRATE_ATTR_MAX
, nla_data(nl_rate
),
3865 nla_len(nl_rate
), rate_policy
);
3866 if (!tb_rate
[NL80211_BITRATE_ATTR_RATE
])
3868 mode
->rates
[idx
] = nla_get_u32(tb_rate
[NL80211_BITRATE_ATTR_RATE
]);
3870 /* crude heuristic */
3871 if (mode
->mode
== HOSTAPD_MODE_IEEE80211B
&&
3872 mode
->rates
[idx
] > 200)
3873 mode
->mode
= HOSTAPD_MODE_IEEE80211G
;
3882 static struct hostapd_hw_modes
*
3883 wpa_driver_nl80211_add_11b(struct hostapd_hw_modes
*modes
, u16
*num_modes
)
3886 struct hostapd_hw_modes
*mode11g
= NULL
, *nmodes
, *mode
;
3887 int i
, mode11g_idx
= -1;
3889 /* If only 802.11g mode is included, use it to construct matching
3890 * 802.11b mode data. */
3892 for (m
= 0; m
< *num_modes
; m
++) {
3893 if (modes
[m
].mode
== HOSTAPD_MODE_IEEE80211B
)
3894 return modes
; /* 802.11b already included */
3895 if (modes
[m
].mode
== HOSTAPD_MODE_IEEE80211G
)
3899 if (mode11g_idx
< 0)
3900 return modes
; /* 2.4 GHz band not supported at all */
3902 nmodes
= os_realloc(modes
, (*num_modes
+ 1) * sizeof(*nmodes
));
3904 return modes
; /* Could not add 802.11b mode */
3906 mode
= &nmodes
[*num_modes
];
3907 os_memset(mode
, 0, sizeof(*mode
));
3911 mode
->mode
= HOSTAPD_MODE_IEEE80211B
;
3913 mode11g
= &modes
[mode11g_idx
];
3914 mode
->num_channels
= mode11g
->num_channels
;
3915 mode
->channels
= os_malloc(mode11g
->num_channels
*
3916 sizeof(struct hostapd_channel_data
));
3917 if (mode
->channels
== NULL
) {
3919 return modes
; /* Could not add 802.11b mode */
3921 os_memcpy(mode
->channels
, mode11g
->channels
,
3922 mode11g
->num_channels
* sizeof(struct hostapd_channel_data
));
3924 mode
->num_rates
= 0;
3925 mode
->rates
= os_malloc(4 * sizeof(int));
3926 if (mode
->rates
== NULL
) {
3927 os_free(mode
->channels
);
3929 return modes
; /* Could not add 802.11b mode */
3932 for (i
= 0; i
< mode11g
->num_rates
; i
++) {
3933 if (mode11g
->rates
[i
] != 10 && mode11g
->rates
[i
] != 20 &&
3934 mode11g
->rates
[i
] != 55 && mode11g
->rates
[i
] != 110)
3936 mode
->rates
[mode
->num_rates
] = mode11g
->rates
[i
];
3938 if (mode
->num_rates
== 4)
3942 if (mode
->num_rates
== 0) {
3943 os_free(mode
->channels
);
3944 os_free(mode
->rates
);
3946 return modes
; /* No 802.11b rates */
3949 wpa_printf(MSG_DEBUG
, "nl80211: Added 802.11b mode based on 802.11g "
3956 static void nl80211_set_ht40_mode(struct hostapd_hw_modes
*mode
, int start
,
3961 for (c
= 0; c
< mode
->num_channels
; c
++) {
3962 struct hostapd_channel_data
*chan
= &mode
->channels
[c
];
3963 if (chan
->freq
- 10 >= start
&& chan
->freq
+ 10 <= end
)
3964 chan
->flag
|= HOSTAPD_CHAN_HT40
;
3969 static void nl80211_set_ht40_mode_sec(struct hostapd_hw_modes
*mode
, int start
,
3974 for (c
= 0; c
< mode
->num_channels
; c
++) {
3975 struct hostapd_channel_data
*chan
= &mode
->channels
[c
];
3976 if (!(chan
->flag
& HOSTAPD_CHAN_HT40
))
3978 if (chan
->freq
- 30 >= start
&& chan
->freq
- 10 <= end
)
3979 chan
->flag
|= HOSTAPD_CHAN_HT40MINUS
;
3980 if (chan
->freq
+ 10 >= start
&& chan
->freq
+ 30 <= end
)
3981 chan
->flag
|= HOSTAPD_CHAN_HT40PLUS
;
3986 static void nl80211_reg_rule_ht40(struct nlattr
*tb
[],
3987 struct phy_info_arg
*results
)
3989 u32 start
, end
, max_bw
;
3992 if (tb
[NL80211_ATTR_FREQ_RANGE_START
] == NULL
||
3993 tb
[NL80211_ATTR_FREQ_RANGE_END
] == NULL
||
3994 tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
] == NULL
)
3997 start
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_START
]) / 1000;
3998 end
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_END
]) / 1000;
3999 max_bw
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
]) / 1000;
4001 wpa_printf(MSG_DEBUG
, "nl80211: %u-%u @ %u MHz",
4002 start
, end
, max_bw
);
4006 for (m
= 0; m
< *results
->num_modes
; m
++) {
4007 if (!(results
->modes
[m
].ht_capab
&
4008 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
))
4010 nl80211_set_ht40_mode(&results
->modes
[m
], start
, end
);
4015 static void nl80211_reg_rule_sec(struct nlattr
*tb
[],
4016 struct phy_info_arg
*results
)
4018 u32 start
, end
, max_bw
;
4021 if (tb
[NL80211_ATTR_FREQ_RANGE_START
] == NULL
||
4022 tb
[NL80211_ATTR_FREQ_RANGE_END
] == NULL
||
4023 tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
] == NULL
)
4026 start
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_START
]) / 1000;
4027 end
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_END
]) / 1000;
4028 max_bw
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
]) / 1000;
4033 for (m
= 0; m
< *results
->num_modes
; m
++) {
4034 if (!(results
->modes
[m
].ht_capab
&
4035 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
))
4037 nl80211_set_ht40_mode_sec(&results
->modes
[m
], start
, end
);
4042 static int nl80211_get_reg(struct nl_msg
*msg
, void *arg
)
4044 struct phy_info_arg
*results
= arg
;
4045 struct nlattr
*tb_msg
[NL80211_ATTR_MAX
+ 1];
4046 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
4047 struct nlattr
*nl_rule
;
4048 struct nlattr
*tb_rule
[NL80211_FREQUENCY_ATTR_MAX
+ 1];
4050 static struct nla_policy reg_policy
[NL80211_FREQUENCY_ATTR_MAX
+ 1] = {
4051 [NL80211_ATTR_REG_RULE_FLAGS
] = { .type
= NLA_U32
},
4052 [NL80211_ATTR_FREQ_RANGE_START
] = { .type
= NLA_U32
},
4053 [NL80211_ATTR_FREQ_RANGE_END
] = { .type
= NLA_U32
},
4054 [NL80211_ATTR_FREQ_RANGE_MAX_BW
] = { .type
= NLA_U32
},
4055 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN
] = { .type
= NLA_U32
},
4056 [NL80211_ATTR_POWER_RULE_MAX_EIRP
] = { .type
= NLA_U32
},
4059 nla_parse(tb_msg
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
4060 genlmsg_attrlen(gnlh
, 0), NULL
);
4061 if (!tb_msg
[NL80211_ATTR_REG_ALPHA2
] ||
4062 !tb_msg
[NL80211_ATTR_REG_RULES
]) {
4063 wpa_printf(MSG_DEBUG
, "nl80211: No regulatory information "
4068 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory information - country=%s",
4069 (char *) nla_data(tb_msg
[NL80211_ATTR_REG_ALPHA2
]));
4071 nla_for_each_nested(nl_rule
, tb_msg
[NL80211_ATTR_REG_RULES
], rem_rule
)
4073 nla_parse(tb_rule
, NL80211_FREQUENCY_ATTR_MAX
,
4074 nla_data(nl_rule
), nla_len(nl_rule
), reg_policy
);
4075 nl80211_reg_rule_ht40(tb_rule
, results
);
4078 nla_for_each_nested(nl_rule
, tb_msg
[NL80211_ATTR_REG_RULES
], rem_rule
)
4080 nla_parse(tb_rule
, NL80211_FREQUENCY_ATTR_MAX
,
4081 nla_data(nl_rule
), nla_len(nl_rule
), reg_policy
);
4082 nl80211_reg_rule_sec(tb_rule
, results
);
4089 static int nl80211_set_ht40_flags(struct wpa_driver_nl80211_data
*drv
,
4090 struct phy_info_arg
*results
)
4094 msg
= nlmsg_alloc();
4098 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_REG
);
4099 return send_and_recv_msgs(drv
, msg
, nl80211_get_reg
, results
);
4103 static struct hostapd_hw_modes
*
4104 wpa_driver_nl80211_get_hw_feature_data(void *priv
, u16
*num_modes
, u16
*flags
)
4106 struct i802_bss
*bss
= priv
;
4107 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4109 struct phy_info_arg result
= {
4110 .num_modes
= num_modes
,
4117 msg
= nlmsg_alloc();
4121 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_WIPHY
);
4123 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4125 if (send_and_recv_msgs(drv
, msg
, phy_info_handler
, &result
) == 0) {
4126 nl80211_set_ht40_flags(drv
, &result
);
4127 return wpa_driver_nl80211_add_11b(result
.modes
, num_modes
);
4134 static int wpa_driver_nl80211_send_frame(struct wpa_driver_nl80211_data
*drv
,
4135 const void *data
, size_t len
,
4139 0x00, 0x00, /* radiotap version */
4140 0x0e, 0x00, /* radiotap length */
4141 0x02, 0xc0, 0x00, 0x00, /* bmap: flags, tx and rx flags */
4142 IEEE80211_RADIOTAP_F_FRAG
, /* F_FRAG (fragment if required) */
4144 0x00, 0x00, /* RX and TX flags to indicate that */
4145 0x00, 0x00, /* this is the injected frame directly */
4147 struct iovec iov
[2] = {
4149 .iov_base
= &rtap_hdr
,
4150 .iov_len
= sizeof(rtap_hdr
),
4153 .iov_base
= (void *) data
,
4157 struct msghdr msg
= {
4162 .msg_control
= NULL
,
4163 .msg_controllen
= 0,
4169 rtap_hdr
[8] |= IEEE80211_RADIOTAP_F_WEP
;
4171 if (drv
->monitor_sock
< 0) {
4172 wpa_printf(MSG_DEBUG
, "nl80211: No monitor socket available "
4173 "for %s", __func__
);
4177 res
= sendmsg(drv
->monitor_sock
, &msg
, 0);
4179 wpa_printf(MSG_INFO
, "nl80211: sendmsg: %s", strerror(errno
));
4186 static int wpa_driver_nl80211_send_mlme(void *priv
, const u8
*data
,
4189 struct i802_bss
*bss
= priv
;
4190 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4191 struct ieee80211_mgmt
*mgmt
;
4195 mgmt
= (struct ieee80211_mgmt
*) data
;
4196 fc
= le_to_host16(mgmt
->frame_control
);
4198 if (is_sta_interface(drv
->nlmode
) &&
4199 WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
4200 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_PROBE_RESP
) {
4202 * The use of last_mgmt_freq is a bit of a hack,
4203 * but it works due to the single-threaded nature
4204 * of wpa_supplicant.
4206 return nl80211_send_frame_cmd(drv
, drv
->last_mgmt_freq
, 0,
4207 data
, data_len
, NULL
, 1);
4210 if (drv
->no_monitor_iface_capab
&& is_ap_interface(drv
->nlmode
)) {
4211 return nl80211_send_frame_cmd(drv
, drv
->ap_oper_freq
, 0,
4212 data
, data_len
, NULL
, 0);
4215 if (WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
4216 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_AUTH
) {
4218 * Only one of the authentication frame types is encrypted.
4219 * In order for static WEP encryption to work properly (i.e.,
4220 * to not encrypt the frame), we need to tell mac80211 about
4221 * the frames that must not be encrypted.
4223 u16 auth_alg
= le_to_host16(mgmt
->u
.auth
.auth_alg
);
4224 u16 auth_trans
= le_to_host16(mgmt
->u
.auth
.auth_transaction
);
4225 if (auth_alg
!= WLAN_AUTH_SHARED_KEY
|| auth_trans
!= 3)
4229 return wpa_driver_nl80211_send_frame(drv
, data
, data_len
, encrypt
);
4233 static int nl80211_set_ap_isolate(struct i802_bss
*bss
, int enabled
)
4235 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4238 msg
= nlmsg_alloc();
4242 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
4244 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4245 NLA_PUT_U8(msg
, NL80211_ATTR_AP_ISOLATE
, enabled
);
4247 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4253 static int nl80211_set_bss(struct i802_bss
*bss
, int cts
, int preamble
,
4254 int slot
, int ht_opmode
)
4256 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4259 msg
= nlmsg_alloc();
4263 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
4266 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_CTS_PROT
, cts
);
4268 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_SHORT_PREAMBLE
, preamble
);
4270 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_SHORT_SLOT_TIME
, slot
);
4272 NLA_PUT_U16(msg
, NL80211_ATTR_BSS_HT_OPMODE
, ht_opmode
);
4273 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4275 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4281 static int wpa_driver_nl80211_set_ap(void *priv
,
4282 struct wpa_driver_ap_params
*params
)
4284 struct i802_bss
*bss
= priv
;
4285 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4287 u8 cmd
= NL80211_CMD_NEW_BEACON
;
4290 int ifindex
= if_nametoindex(bss
->ifname
);
4295 beacon_set
= bss
->beacon_set
;
4297 msg
= nlmsg_alloc();
4301 wpa_printf(MSG_DEBUG
, "nl80211: Set beacon (beacon_set=%d)",
4304 cmd
= NL80211_CMD_SET_BEACON
;
4306 nl80211_cmd(drv
, msg
, 0, cmd
);
4307 NLA_PUT(msg
, NL80211_ATTR_BEACON_HEAD
, params
->head_len
, params
->head
);
4308 NLA_PUT(msg
, NL80211_ATTR_BEACON_TAIL
, params
->tail_len
, params
->tail
);
4309 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
4310 NLA_PUT_U32(msg
, NL80211_ATTR_BEACON_INTERVAL
, params
->beacon_int
);
4311 NLA_PUT_U32(msg
, NL80211_ATTR_DTIM_PERIOD
, params
->dtim_period
);
4312 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
4314 switch (params
->hide_ssid
) {
4315 case NO_SSID_HIDING
:
4316 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4317 NL80211_HIDDEN_SSID_NOT_IN_USE
);
4319 case HIDDEN_SSID_ZERO_LEN
:
4320 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4321 NL80211_HIDDEN_SSID_ZERO_LEN
);
4323 case HIDDEN_SSID_ZERO_CONTENTS
:
4324 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4325 NL80211_HIDDEN_SSID_ZERO_CONTENTS
);
4328 if (params
->privacy
)
4329 NLA_PUT_FLAG(msg
, NL80211_ATTR_PRIVACY
);
4330 if ((params
->auth_algs
& (WPA_AUTH_ALG_OPEN
| WPA_AUTH_ALG_SHARED
)) ==
4331 (WPA_AUTH_ALG_OPEN
| WPA_AUTH_ALG_SHARED
)) {
4332 /* Leave out the attribute */
4333 } else if (params
->auth_algs
& WPA_AUTH_ALG_SHARED
)
4334 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
,
4335 NL80211_AUTHTYPE_SHARED_KEY
);
4337 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
,
4338 NL80211_AUTHTYPE_OPEN_SYSTEM
);
4341 if (params
->wpa_version
& WPA_PROTO_WPA
)
4342 ver
|= NL80211_WPA_VERSION_1
;
4343 if (params
->wpa_version
& WPA_PROTO_RSN
)
4344 ver
|= NL80211_WPA_VERSION_2
;
4346 NLA_PUT_U32(msg
, NL80211_ATTR_WPA_VERSIONS
, ver
);
4349 if (params
->key_mgmt_suites
& WPA_KEY_MGMT_IEEE8021X
)
4350 suites
[num_suites
++] = WLAN_AKM_SUITE_8021X
;
4351 if (params
->key_mgmt_suites
& WPA_KEY_MGMT_PSK
)
4352 suites
[num_suites
++] = WLAN_AKM_SUITE_PSK
;
4354 NLA_PUT(msg
, NL80211_ATTR_AKM_SUITES
,
4355 num_suites
* sizeof(u32
), suites
);
4359 if (params
->pairwise_ciphers
& WPA_CIPHER_CCMP
)
4360 suites
[num_suites
++] = WLAN_CIPHER_SUITE_CCMP
;
4361 if (params
->pairwise_ciphers
& WPA_CIPHER_TKIP
)
4362 suites
[num_suites
++] = WLAN_CIPHER_SUITE_TKIP
;
4363 if (params
->pairwise_ciphers
& WPA_CIPHER_WEP104
)
4364 suites
[num_suites
++] = WLAN_CIPHER_SUITE_WEP104
;
4365 if (params
->pairwise_ciphers
& WPA_CIPHER_WEP40
)
4366 suites
[num_suites
++] = WLAN_CIPHER_SUITE_WEP40
;
4368 NLA_PUT(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
,
4369 num_suites
* sizeof(u32
), suites
);
4372 switch (params
->group_cipher
) {
4373 case WPA_CIPHER_CCMP
:
4374 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4375 WLAN_CIPHER_SUITE_CCMP
);
4377 case WPA_CIPHER_TKIP
:
4378 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4379 WLAN_CIPHER_SUITE_TKIP
);
4381 case WPA_CIPHER_WEP104
:
4382 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4383 WLAN_CIPHER_SUITE_WEP104
);
4385 case WPA_CIPHER_WEP40
:
4386 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4387 WLAN_CIPHER_SUITE_WEP40
);
4391 if (params
->beacon_ies
) {
4392 NLA_PUT(msg
, NL80211_ATTR_IE
, wpabuf_len(params
->beacon_ies
),
4393 wpabuf_head(params
->beacon_ies
));
4395 if (params
->proberesp_ies
) {
4396 NLA_PUT(msg
, NL80211_ATTR_IE_PROBE_RESP
,
4397 wpabuf_len(params
->proberesp_ies
),
4398 wpabuf_head(params
->proberesp_ies
));
4400 if (params
->assocresp_ies
) {
4401 NLA_PUT(msg
, NL80211_ATTR_IE_ASSOC_RESP
,
4402 wpabuf_len(params
->assocresp_ies
),
4403 wpabuf_head(params
->assocresp_ies
));
4406 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4408 wpa_printf(MSG_DEBUG
, "nl80211: Beacon set failed: %d (%s)",
4409 ret
, strerror(-ret
));
4411 bss
->beacon_set
= 1;
4412 ret
= nl80211_set_ap_isolate(bss
, params
->isolate
);
4413 if (!params
->isolate
&& ret
) {
4414 wpa_printf(MSG_DEBUG
, "nl80211: Ignore AP isolation "
4415 "configuration error since isolation is "
4420 nl80211_set_bss(bss
, params
->cts_protect
, params
->preamble
,
4421 params
->short_slot_time
, params
->ht_opmode
);
4429 static int wpa_driver_nl80211_set_freq(struct wpa_driver_nl80211_data
*drv
,
4430 int freq
, int ht_enabled
,
4431 int sec_channel_offset
)
4436 wpa_printf(MSG_DEBUG
, "nl80211: Set freq %d (ht_enabled=%d "
4437 "sec_channel_offset=%d)",
4438 freq
, ht_enabled
, sec_channel_offset
);
4439 msg
= nlmsg_alloc();
4443 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
4445 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4446 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
4448 switch (sec_channel_offset
) {
4450 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4451 NL80211_CHAN_HT40MINUS
);
4454 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4455 NL80211_CHAN_HT40PLUS
);
4458 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4464 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4467 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set channel (freq=%d): "
4468 "%d (%s)", freq
, ret
, strerror(-ret
));
4474 static u32
sta_flags_nl80211(int flags
)
4478 if (flags
& WPA_STA_AUTHORIZED
)
4479 f
|= BIT(NL80211_STA_FLAG_AUTHORIZED
);
4480 if (flags
& WPA_STA_WMM
)
4481 f
|= BIT(NL80211_STA_FLAG_WME
);
4482 if (flags
& WPA_STA_SHORT_PREAMBLE
)
4483 f
|= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE
);
4484 if (flags
& WPA_STA_MFP
)
4485 f
|= BIT(NL80211_STA_FLAG_MFP
);
4486 if (flags
& WPA_STA_TDLS_PEER
)
4487 f
|= BIT(NL80211_STA_FLAG_TDLS_PEER
);
4493 static int wpa_driver_nl80211_sta_add(void *priv
,
4494 struct hostapd_sta_add_params
*params
)
4496 struct i802_bss
*bss
= priv
;
4497 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4499 struct nl80211_sta_flag_update upd
;
4502 if ((params
->flags
& WPA_STA_TDLS_PEER
) &&
4503 !(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
4506 msg
= nlmsg_alloc();
4510 nl80211_cmd(drv
, msg
, 0, params
->set
? NL80211_CMD_SET_STATION
:
4511 NL80211_CMD_NEW_STATION
);
4513 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4514 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->addr
);
4515 NLA_PUT(msg
, NL80211_ATTR_STA_SUPPORTED_RATES
, params
->supp_rates_len
,
4516 params
->supp_rates
);
4518 NLA_PUT_U16(msg
, NL80211_ATTR_STA_AID
, params
->aid
);
4519 NLA_PUT_U16(msg
, NL80211_ATTR_STA_LISTEN_INTERVAL
,
4520 params
->listen_interval
);
4522 if (params
->ht_capabilities
) {
4523 NLA_PUT(msg
, NL80211_ATTR_HT_CAPABILITY
,
4524 sizeof(*params
->ht_capabilities
),
4525 params
->ht_capabilities
);
4528 os_memset(&upd
, 0, sizeof(upd
));
4529 upd
.mask
= sta_flags_nl80211(params
->flags
);
4531 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
4533 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4535 wpa_printf(MSG_DEBUG
, "nl80211: NL80211_CMD_%s_STATION "
4536 "result: %d (%s)", params
->set
? "SET" : "NEW", ret
,
4545 static int wpa_driver_nl80211_sta_remove(void *priv
, const u8
*addr
)
4547 struct i802_bss
*bss
= priv
;
4548 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4552 msg
= nlmsg_alloc();
4556 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_STATION
);
4558 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
4559 if_nametoindex(bss
->ifname
));
4560 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
4562 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4571 static void nl80211_remove_iface(struct wpa_driver_nl80211_data
*drv
,
4576 wpa_printf(MSG_DEBUG
, "nl80211: Remove interface ifindex=%d", ifidx
);
4578 /* stop listening for EAPOL on this interface */
4579 del_ifidx(drv
, ifidx
);
4581 msg
= nlmsg_alloc();
4583 goto nla_put_failure
;
4585 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_INTERFACE
);
4586 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifidx
);
4588 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
4591 wpa_printf(MSG_ERROR
, "Failed to remove interface (ifidx=%d)", ifidx
);
4595 static const char * nl80211_iftype_str(enum nl80211_iftype mode
)
4598 case NL80211_IFTYPE_ADHOC
:
4600 case NL80211_IFTYPE_STATION
:
4602 case NL80211_IFTYPE_AP
:
4604 case NL80211_IFTYPE_MONITOR
:
4606 case NL80211_IFTYPE_P2P_CLIENT
:
4607 return "P2P_CLIENT";
4608 case NL80211_IFTYPE_P2P_GO
:
4616 static int nl80211_create_iface_once(struct wpa_driver_nl80211_data
*drv
,
4618 enum nl80211_iftype iftype
,
4619 const u8
*addr
, int wds
)
4621 struct nl_msg
*msg
, *flags
= NULL
;
4625 wpa_printf(MSG_DEBUG
, "nl80211: Create interface iftype %d (%s)",
4626 iftype
, nl80211_iftype_str(iftype
));
4628 msg
= nlmsg_alloc();
4632 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_NEW_INTERFACE
);
4633 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4634 NLA_PUT_STRING(msg
, NL80211_ATTR_IFNAME
, ifname
);
4635 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, iftype
);
4637 if (iftype
== NL80211_IFTYPE_MONITOR
) {
4640 flags
= nlmsg_alloc();
4642 goto nla_put_failure
;
4644 NLA_PUT_FLAG(flags
, NL80211_MNTR_FLAG_COOK_FRAMES
);
4646 err
= nla_put_nested(msg
, NL80211_ATTR_MNTR_FLAGS
, flags
);
4651 goto nla_put_failure
;
4653 NLA_PUT_U8(msg
, NL80211_ATTR_4ADDR
, wds
);
4656 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4659 wpa_printf(MSG_ERROR
, "Failed to create interface %s: %d (%s)",
4660 ifname
, ret
, strerror(-ret
));
4664 ifidx
= if_nametoindex(ifname
);
4665 wpa_printf(MSG_DEBUG
, "nl80211: New interface %s created: ifindex=%d",
4671 /* start listening for EAPOL on this interface */
4672 add_ifidx(drv
, ifidx
);
4674 if (addr
&& iftype
!= NL80211_IFTYPE_MONITOR
&&
4675 linux_set_ifhwaddr(drv
->global
->ioctl_sock
, ifname
, addr
)) {
4676 nl80211_remove_iface(drv
, ifidx
);
4684 static int nl80211_create_iface(struct wpa_driver_nl80211_data
*drv
,
4685 const char *ifname
, enum nl80211_iftype iftype
,
4686 const u8
*addr
, int wds
)
4690 ret
= nl80211_create_iface_once(drv
, ifname
, iftype
, addr
, wds
);
4692 /* if error occurred and interface exists already */
4693 if (ret
== -ENFILE
&& if_nametoindex(ifname
)) {
4694 wpa_printf(MSG_INFO
, "Try to remove and re-create %s", ifname
);
4696 /* Try to remove the interface that was already there. */
4697 nl80211_remove_iface(drv
, if_nametoindex(ifname
));
4699 /* Try to create the interface again */
4700 ret
= nl80211_create_iface_once(drv
, ifname
, iftype
, addr
,
4704 if (ret
>= 0 && is_p2p_interface(iftype
))
4705 nl80211_disable_11b_rates(drv
, ret
, 1);
4711 static void handle_tx_callback(void *ctx
, u8
*buf
, size_t len
, int ok
)
4713 struct ieee80211_hdr
*hdr
;
4715 union wpa_event_data event
;
4717 hdr
= (struct ieee80211_hdr
*) buf
;
4718 fc
= le_to_host16(hdr
->frame_control
);
4720 os_memset(&event
, 0, sizeof(event
));
4721 event
.tx_status
.type
= WLAN_FC_GET_TYPE(fc
);
4722 event
.tx_status
.stype
= WLAN_FC_GET_STYPE(fc
);
4723 event
.tx_status
.dst
= hdr
->addr1
;
4724 event
.tx_status
.data
= buf
;
4725 event
.tx_status
.data_len
= len
;
4726 event
.tx_status
.ack
= ok
;
4727 wpa_supplicant_event(ctx
, EVENT_TX_STATUS
, &event
);
4731 static void from_unknown_sta(struct wpa_driver_nl80211_data
*drv
,
4732 u8
*buf
, size_t len
)
4734 struct ieee80211_hdr
*hdr
= (void *)buf
;
4736 union wpa_event_data event
;
4738 if (len
< sizeof(*hdr
))
4741 fc
= le_to_host16(hdr
->frame_control
);
4743 os_memset(&event
, 0, sizeof(event
));
4744 event
.rx_from_unknown
.bssid
= get_hdr_bssid(hdr
, len
);
4745 event
.rx_from_unknown
.addr
= hdr
->addr2
;
4746 event
.rx_from_unknown
.wds
= (fc
& (WLAN_FC_FROMDS
| WLAN_FC_TODS
)) ==
4747 (WLAN_FC_FROMDS
| WLAN_FC_TODS
);
4748 wpa_supplicant_event(drv
->ctx
, EVENT_RX_FROM_UNKNOWN
, &event
);
4752 static void handle_frame(struct wpa_driver_nl80211_data
*drv
,
4753 u8
*buf
, size_t len
, int datarate
, int ssi_signal
)
4755 struct ieee80211_hdr
*hdr
;
4757 union wpa_event_data event
;
4759 hdr
= (struct ieee80211_hdr
*) buf
;
4760 fc
= le_to_host16(hdr
->frame_control
);
4762 switch (WLAN_FC_GET_TYPE(fc
)) {
4763 case WLAN_FC_TYPE_MGMT
:
4764 os_memset(&event
, 0, sizeof(event
));
4765 event
.rx_mgmt
.frame
= buf
;
4766 event
.rx_mgmt
.frame_len
= len
;
4767 event
.rx_mgmt
.datarate
= datarate
;
4768 event
.rx_mgmt
.ssi_signal
= ssi_signal
;
4769 wpa_supplicant_event(drv
->ctx
, EVENT_RX_MGMT
, &event
);
4771 case WLAN_FC_TYPE_CTRL
:
4772 /* can only get here with PS-Poll frames */
4773 wpa_printf(MSG_DEBUG
, "CTRL");
4774 from_unknown_sta(drv
, buf
, len
);
4776 case WLAN_FC_TYPE_DATA
:
4777 from_unknown_sta(drv
, buf
, len
);
4783 static void handle_monitor_read(int sock
, void *eloop_ctx
, void *sock_ctx
)
4785 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
4787 unsigned char buf
[3000];
4788 struct ieee80211_radiotap_iterator iter
;
4790 int datarate
= 0, ssi_signal
= 0;
4791 int injected
= 0, failed
= 0, rxflags
= 0;
4793 len
= recv(sock
, buf
, sizeof(buf
), 0);
4799 if (ieee80211_radiotap_iterator_init(&iter
, (void*)buf
, len
)) {
4800 printf("received invalid radiotap frame\n");
4805 ret
= ieee80211_radiotap_iterator_next(&iter
);
4809 printf("received invalid radiotap frame (%d)\n", ret
);
4812 switch (iter
.this_arg_index
) {
4813 case IEEE80211_RADIOTAP_FLAGS
:
4814 if (*iter
.this_arg
& IEEE80211_RADIOTAP_F_FCS
)
4817 case IEEE80211_RADIOTAP_RX_FLAGS
:
4820 case IEEE80211_RADIOTAP_TX_FLAGS
:
4822 failed
= le_to_host16((*(uint16_t *) iter
.this_arg
)) &
4823 IEEE80211_RADIOTAP_F_TX_FAIL
;
4825 case IEEE80211_RADIOTAP_DATA_RETRIES
:
4827 case IEEE80211_RADIOTAP_CHANNEL
:
4828 /* TODO: convert from freq/flags to channel number */
4830 case IEEE80211_RADIOTAP_RATE
:
4831 datarate
= *iter
.this_arg
* 5;
4833 case IEEE80211_RADIOTAP_DB_ANTSIGNAL
:
4834 ssi_signal
= *iter
.this_arg
;
4839 if (rxflags
&& injected
)
4843 handle_frame(drv
, buf
+ iter
.max_length
,
4844 len
- iter
.max_length
, datarate
, ssi_signal
);
4846 handle_tx_callback(drv
->ctx
, buf
+ iter
.max_length
,
4847 len
- iter
.max_length
, !failed
);
4852 * we post-process the filter code later and rewrite
4853 * this to the offset to the last instruction
4858 static struct sock_filter msock_filter_insns
[] = {
4860 * do a little-endian load of the radiotap length field
4862 /* load lower byte into A */
4863 BPF_STMT(BPF_LD
| BPF_B
| BPF_ABS
, 2),
4864 /* put it into X (== index register) */
4865 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4866 /* load upper byte into A */
4867 BPF_STMT(BPF_LD
| BPF_B
| BPF_ABS
, 3),
4868 /* left-shift it by 8 */
4869 BPF_STMT(BPF_ALU
| BPF_LSH
| BPF_K
, 8),
4871 BPF_STMT(BPF_ALU
| BPF_OR
| BPF_X
, 0),
4872 /* put result into X */
4873 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4876 * Allow management frames through, this also gives us those
4877 * management frames that we sent ourselves with status
4879 /* load the lower byte of the IEEE 802.11 frame control field */
4880 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4881 /* mask off frame type and version */
4882 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0xF),
4883 /* accept frame if it's both 0, fall through otherwise */
4884 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0, PASS
, 0),
4887 * TODO: add a bit to radiotap RX flags that indicates
4888 * that the sending station is not associated, then
4889 * add a filter here that filters on our DA and that flag
4890 * to allow us to deauth frames to that bad station.
4892 * For now allow all To DS data frames through.
4894 /* load the IEEE 802.11 frame control field */
4895 BPF_STMT(BPF_LD
| BPF_H
| BPF_IND
, 0),
4896 /* mask off frame type, version and DS status */
4897 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x0F03),
4898 /* accept frame if version 0, type 2 and To DS, fall through otherwise
4900 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0x0801, PASS
, 0),
4904 * drop non-data frames
4906 /* load the lower byte of the frame control field */
4907 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4908 /* mask off QoS bit */
4909 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x0c),
4910 /* drop non-data frames */
4911 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 8, 0, FAIL
),
4913 /* load the upper byte of the frame control field */
4914 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 1),
4915 /* mask off toDS/fromDS */
4916 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x03),
4917 /* accept WDS frames */
4918 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 3, PASS
, 0),
4921 * add header length to index
4923 /* load the lower byte of the frame control field */
4924 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4925 /* mask off QoS bit */
4926 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x80),
4927 /* right shift it by 6 to give 0 or 2 */
4928 BPF_STMT(BPF_ALU
| BPF_RSH
| BPF_K
, 6),
4929 /* add data frame header length */
4930 BPF_STMT(BPF_ALU
| BPF_ADD
| BPF_K
, 24),
4931 /* add index, was start of 802.11 header */
4932 BPF_STMT(BPF_ALU
| BPF_ADD
| BPF_X
, 0),
4933 /* move to index, now start of LL header */
4934 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4937 * Accept empty data frames, we use those for
4940 BPF_STMT(BPF_LD
| BPF_W
| BPF_LEN
, 0),
4941 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_X
, 0, PASS
, 0),
4944 * Accept EAPOL frames
4946 BPF_STMT(BPF_LD
| BPF_W
| BPF_IND
, 0),
4947 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0xAAAA0300, 0, FAIL
),
4948 BPF_STMT(BPF_LD
| BPF_W
| BPF_IND
, 4),
4949 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0x0000888E, PASS
, FAIL
),
4951 /* keep these last two statements or change the code below */
4952 /* return 0 == "DROP" */
4953 BPF_STMT(BPF_RET
| BPF_K
, 0),
4954 /* return ~0 == "keep all" */
4955 BPF_STMT(BPF_RET
| BPF_K
, ~0),
4958 static struct sock_fprog msock_filter
= {
4959 .len
= sizeof(msock_filter_insns
)/sizeof(msock_filter_insns
[0]),
4960 .filter
= msock_filter_insns
,
4964 static int add_monitor_filter(int s
)
4968 /* rewrite all PASS/FAIL jump offsets */
4969 for (idx
= 0; idx
< msock_filter
.len
; idx
++) {
4970 struct sock_filter
*insn
= &msock_filter_insns
[idx
];
4972 if (BPF_CLASS(insn
->code
) == BPF_JMP
) {
4973 if (insn
->code
== (BPF_JMP
|BPF_JA
)) {
4974 if (insn
->k
== PASS
)
4975 insn
->k
= msock_filter
.len
- idx
- 2;
4976 else if (insn
->k
== FAIL
)
4977 insn
->k
= msock_filter
.len
- idx
- 3;
4980 if (insn
->jt
== PASS
)
4981 insn
->jt
= msock_filter
.len
- idx
- 2;
4982 else if (insn
->jt
== FAIL
)
4983 insn
->jt
= msock_filter
.len
- idx
- 3;
4985 if (insn
->jf
== PASS
)
4986 insn
->jf
= msock_filter
.len
- idx
- 2;
4987 else if (insn
->jf
== FAIL
)
4988 insn
->jf
= msock_filter
.len
- idx
- 3;
4992 if (setsockopt(s
, SOL_SOCKET
, SO_ATTACH_FILTER
,
4993 &msock_filter
, sizeof(msock_filter
))) {
4994 perror("SO_ATTACH_FILTER");
5002 static void nl80211_remove_monitor_interface(
5003 struct wpa_driver_nl80211_data
*drv
)
5005 if (drv
->monitor_ifidx
>= 0) {
5006 nl80211_remove_iface(drv
, drv
->monitor_ifidx
);
5007 drv
->monitor_ifidx
= -1;
5009 if (drv
->monitor_sock
>= 0) {
5010 eloop_unregister_read_sock(drv
->monitor_sock
);
5011 close(drv
->monitor_sock
);
5012 drv
->monitor_sock
= -1;
5018 nl80211_create_monitor_interface(struct wpa_driver_nl80211_data
*drv
)
5021 struct sockaddr_ll ll
;
5025 if (os_strncmp(drv
->first_bss
.ifname
, "p2p-", 4) == 0) {
5027 * P2P interface name is of the format p2p-%s-%d. For monitor
5028 * interface name corresponding to P2P GO, replace "p2p-" with
5029 * "mon-" to retain the same interface name length and to
5030 * indicate that it is a monitor interface.
5032 snprintf(buf
, IFNAMSIZ
, "mon-%s", drv
->first_bss
.ifname
+ 4);
5034 /* Non-P2P interface with AP functionality. */
5035 snprintf(buf
, IFNAMSIZ
, "mon.%s", drv
->first_bss
.ifname
);
5038 buf
[IFNAMSIZ
- 1] = '\0';
5040 drv
->monitor_ifidx
=
5041 nl80211_create_iface(drv
, buf
, NL80211_IFTYPE_MONITOR
, NULL
,
5044 if (drv
->monitor_ifidx
== -EOPNOTSUPP
) {
5045 wpa_printf(MSG_DEBUG
, "nl80211: Driver does not support "
5046 "monitor interface type - try to run without it");
5047 drv
->no_monitor_iface_capab
= 1;
5050 if (drv
->monitor_ifidx
< 0)
5053 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, buf
, 1))
5056 memset(&ll
, 0, sizeof(ll
));
5057 ll
.sll_family
= AF_PACKET
;
5058 ll
.sll_ifindex
= drv
->monitor_ifidx
;
5059 drv
->monitor_sock
= socket(PF_PACKET
, SOCK_RAW
, htons(ETH_P_ALL
));
5060 if (drv
->monitor_sock
< 0) {
5061 perror("socket[PF_PACKET,SOCK_RAW]");
5065 if (add_monitor_filter(drv
->monitor_sock
)) {
5066 wpa_printf(MSG_INFO
, "Failed to set socket filter for monitor "
5067 "interface; do filtering in user space");
5068 /* This works, but will cost in performance. */
5071 if (bind(drv
->monitor_sock
, (struct sockaddr
*) &ll
, sizeof(ll
)) < 0) {
5072 perror("monitor socket bind");
5076 optlen
= sizeof(optval
);
5079 (drv
->monitor_sock
, SOL_SOCKET
, SO_PRIORITY
, &optval
, optlen
)) {
5080 perror("Failed to set socket priority");
5084 if (eloop_register_read_sock(drv
->monitor_sock
, handle_monitor_read
,
5086 printf("Could not register monitor read socket\n");
5092 nl80211_remove_monitor_interface(drv
);
5098 static int nl80211_send_eapol_data(struct i802_bss
*bss
,
5099 const u8
*addr
, const u8
*data
,
5100 size_t data_len
, const u8
*own_addr
)
5102 if (bss
->drv
->l2
== NULL
) {
5103 wpa_printf(MSG_DEBUG
, "nl80211: No l2_packet to send EAPOL");
5107 if (l2_packet_send(bss
->drv
->l2
, addr
, ETH_P_EAPOL
, data
, data_len
) <
5112 #endif /* CONFIG_AP */
5115 static const u8 rfc1042_header
[6] = { 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
5117 static int wpa_driver_nl80211_hapd_send_eapol(
5118 void *priv
, const u8
*addr
, const u8
*data
,
5119 size_t data_len
, int encrypt
, const u8
*own_addr
, u32 flags
)
5121 struct i802_bss
*bss
= priv
;
5122 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5123 struct ieee80211_hdr
*hdr
;
5127 int qos
= flags
& WPA_STA_WMM
;
5130 if (drv
->no_monitor_iface_capab
)
5131 return nl80211_send_eapol_data(bss
, addr
, data
, data_len
,
5133 #endif /* CONFIG_AP */
5135 len
= sizeof(*hdr
) + (qos
? 2 : 0) + sizeof(rfc1042_header
) + 2 +
5137 hdr
= os_zalloc(len
);
5139 printf("malloc() failed for i802_send_data(len=%lu)\n",
5140 (unsigned long) len
);
5144 hdr
->frame_control
=
5145 IEEE80211_FC(WLAN_FC_TYPE_DATA
, WLAN_FC_STYPE_DATA
);
5146 hdr
->frame_control
|= host_to_le16(WLAN_FC_FROMDS
);
5148 hdr
->frame_control
|= host_to_le16(WLAN_FC_ISWEP
);
5150 hdr
->frame_control
|=
5151 host_to_le16(WLAN_FC_STYPE_QOS_DATA
<< 4);
5154 memcpy(hdr
->IEEE80211_DA_FROMDS
, addr
, ETH_ALEN
);
5155 memcpy(hdr
->IEEE80211_BSSID_FROMDS
, own_addr
, ETH_ALEN
);
5156 memcpy(hdr
->IEEE80211_SA_FROMDS
, own_addr
, ETH_ALEN
);
5157 pos
= (u8
*) (hdr
+ 1);
5160 /* add an empty QoS header if needed */
5166 memcpy(pos
, rfc1042_header
, sizeof(rfc1042_header
));
5167 pos
+= sizeof(rfc1042_header
);
5168 WPA_PUT_BE16(pos
, ETH_P_PAE
);
5170 memcpy(pos
, data
, data_len
);
5172 res
= wpa_driver_nl80211_send_frame(drv
, (u8
*) hdr
, len
, encrypt
);
5174 wpa_printf(MSG_ERROR
, "i802_send_eapol - packet len: %lu - "
5176 (unsigned long) len
, errno
, strerror(errno
));
5184 static int wpa_driver_nl80211_sta_set_flags(void *priv
, const u8
*addr
,
5186 int flags_or
, int flags_and
)
5188 struct i802_bss
*bss
= priv
;
5189 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5190 struct nl_msg
*msg
, *flags
= NULL
;
5191 struct nl80211_sta_flag_update upd
;
5193 msg
= nlmsg_alloc();
5197 flags
= nlmsg_alloc();
5203 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
5205 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
5206 if_nametoindex(bss
->ifname
));
5207 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
5210 * Backwards compatibility version using NL80211_ATTR_STA_FLAGS. This
5211 * can be removed eventually.
5213 if (total_flags
& WPA_STA_AUTHORIZED
)
5214 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_AUTHORIZED
);
5216 if (total_flags
& WPA_STA_WMM
)
5217 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_WME
);
5219 if (total_flags
& WPA_STA_SHORT_PREAMBLE
)
5220 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_SHORT_PREAMBLE
);
5222 if (total_flags
& WPA_STA_MFP
)
5223 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_MFP
);
5225 if (total_flags
& WPA_STA_TDLS_PEER
)
5226 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_TDLS_PEER
);
5228 if (nla_put_nested(msg
, NL80211_ATTR_STA_FLAGS
, flags
))
5229 goto nla_put_failure
;
5231 os_memset(&upd
, 0, sizeof(upd
));
5232 upd
.mask
= sta_flags_nl80211(flags_or
| ~flags_and
);
5233 upd
.set
= sta_flags_nl80211(flags_or
);
5234 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
5238 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5245 static int wpa_driver_nl80211_ap(struct wpa_driver_nl80211_data
*drv
,
5246 struct wpa_driver_associate_params
*params
)
5248 enum nl80211_iftype nlmode
;
5251 wpa_printf(MSG_DEBUG
, "nl80211: Setup AP operations for P2P "
5253 nlmode
= NL80211_IFTYPE_P2P_GO
;
5255 nlmode
= NL80211_IFTYPE_AP
;
5257 if (wpa_driver_nl80211_set_mode(&drv
->first_bss
, nlmode
) ||
5258 wpa_driver_nl80211_set_freq(drv
, params
->freq
, 0, 0)) {
5259 nl80211_remove_monitor_interface(drv
);
5263 if (drv
->no_monitor_iface_capab
) {
5264 if (wpa_driver_nl80211_probe_req_report(&drv
->first_bss
, 1) < 0)
5266 wpa_printf(MSG_DEBUG
, "nl80211: Failed to enable "
5267 "Probe Request frame reporting in AP mode");
5268 /* Try to survive without this */
5272 drv
->ap_oper_freq
= params
->freq
;
5278 static int nl80211_leave_ibss(struct wpa_driver_nl80211_data
*drv
)
5283 msg
= nlmsg_alloc();
5287 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_LEAVE_IBSS
);
5288 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5289 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5292 wpa_printf(MSG_DEBUG
, "nl80211: Leave IBSS failed: ret=%d "
5293 "(%s)", ret
, strerror(-ret
));
5294 goto nla_put_failure
;
5298 wpa_printf(MSG_DEBUG
, "nl80211: Leave IBSS request sent successfully");
5306 static int wpa_driver_nl80211_ibss(struct wpa_driver_nl80211_data
*drv
,
5307 struct wpa_driver_associate_params
*params
)
5313 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS (ifindex=%d)", drv
->ifindex
);
5315 if (wpa_driver_nl80211_set_mode(&drv
->first_bss
,
5316 NL80211_IFTYPE_ADHOC
)) {
5317 wpa_printf(MSG_INFO
, "nl80211: Failed to set interface into "
5323 msg
= nlmsg_alloc();
5327 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_JOIN_IBSS
);
5328 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5330 if (params
->ssid
== NULL
|| params
->ssid_len
> sizeof(drv
->ssid
))
5331 goto nla_put_failure
;
5333 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5334 params
->ssid
, params
->ssid_len
);
5335 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5337 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5338 drv
->ssid_len
= params
->ssid_len
;
5340 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5341 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5343 ret
= nl80211_set_conn_keys(params
, msg
);
5345 goto nla_put_failure
;
5347 if (params
->wpa_ie
) {
5348 wpa_hexdump(MSG_DEBUG
,
5349 " * Extra IEs for Beacon/Probe Response frames",
5350 params
->wpa_ie
, params
->wpa_ie_len
);
5351 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5355 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5358 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS failed: ret=%d (%s)",
5359 ret
, strerror(-ret
));
5361 if (ret
== -EALREADY
&& count
== 1) {
5362 wpa_printf(MSG_DEBUG
, "nl80211: Retry IBSS join after "
5364 nl80211_leave_ibss(drv
);
5369 goto nla_put_failure
;
5372 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS request sent successfully");
5380 static unsigned int nl80211_get_assoc_bssid(struct wpa_driver_nl80211_data
*drv
,
5385 struct nl80211_bss_info_arg arg
;
5387 os_memset(&arg
, 0, sizeof(arg
));
5388 msg
= nlmsg_alloc();
5390 goto nla_put_failure
;
5392 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
5393 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5396 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
5399 if (is_zero_ether_addr(arg
.assoc_bssid
))
5401 os_memcpy(bssid
, arg
.assoc_bssid
, ETH_ALEN
);
5404 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
5405 "(%s)", ret
, strerror(-ret
));
5408 return drv
->assoc_freq
;
5412 static int nl80211_disconnect(struct wpa_driver_nl80211_data
*drv
,
5417 if (bssid
== NULL
) {
5418 int res
= nl80211_get_assoc_bssid(drv
, addr
);
5424 return wpa_driver_nl80211_disconnect(drv
, bssid
,
5425 WLAN_REASON_PREV_AUTH_NOT_VALID
);
5429 static int wpa_driver_nl80211_connect(
5430 struct wpa_driver_nl80211_data
*drv
,
5431 struct wpa_driver_associate_params
*params
)
5434 enum nl80211_auth_type type
;
5438 msg
= nlmsg_alloc();
5442 wpa_printf(MSG_DEBUG
, "nl80211: Connect (ifindex=%d)", drv
->ifindex
);
5443 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_CONNECT
);
5445 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5446 if (params
->bssid
) {
5447 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
5448 MAC2STR(params
->bssid
));
5449 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
5452 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5453 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5456 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5457 params
->ssid
, params
->ssid_len
);
5458 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5460 if (params
->ssid_len
> sizeof(drv
->ssid
))
5461 goto nla_put_failure
;
5462 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5463 drv
->ssid_len
= params
->ssid_len
;
5465 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->wpa_ie
, params
->wpa_ie_len
);
5467 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5471 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
5473 if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
5475 if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
5478 wpa_printf(MSG_DEBUG
, " * Leave out Auth Type for automatic "
5480 goto skip_auth_type
;
5483 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
5484 type
= NL80211_AUTHTYPE_OPEN_SYSTEM
;
5485 else if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
5486 type
= NL80211_AUTHTYPE_SHARED_KEY
;
5487 else if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
5488 type
= NL80211_AUTHTYPE_NETWORK_EAP
;
5489 else if (params
->auth_alg
& WPA_AUTH_ALG_FT
)
5490 type
= NL80211_AUTHTYPE_FT
;
5492 goto nla_put_failure
;
5494 wpa_printf(MSG_DEBUG
, " * Auth Type %d", type
);
5495 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
, type
);
5498 if (params
->wpa_proto
) {
5499 enum nl80211_wpa_versions ver
= 0;
5501 if (params
->wpa_proto
& WPA_PROTO_WPA
)
5502 ver
|= NL80211_WPA_VERSION_1
;
5503 if (params
->wpa_proto
& WPA_PROTO_RSN
)
5504 ver
|= NL80211_WPA_VERSION_2
;
5506 wpa_printf(MSG_DEBUG
, " * WPA Versions 0x%x", ver
);
5507 NLA_PUT_U32(msg
, NL80211_ATTR_WPA_VERSIONS
, ver
);
5510 if (params
->pairwise_suite
!= CIPHER_NONE
) {
5513 switch (params
->pairwise_suite
) {
5515 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5518 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5521 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5525 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5528 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
, cipher
);
5531 if (params
->group_suite
!= CIPHER_NONE
) {
5534 switch (params
->group_suite
) {
5536 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5539 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5542 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5546 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5549 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
, cipher
);
5552 if (params
->key_mgmt_suite
== KEY_MGMT_802_1X
||
5553 params
->key_mgmt_suite
== KEY_MGMT_PSK
) {
5554 int mgmt
= WLAN_AKM_SUITE_PSK
;
5556 switch (params
->key_mgmt_suite
) {
5557 case KEY_MGMT_802_1X
:
5558 mgmt
= WLAN_AKM_SUITE_8021X
;
5562 mgmt
= WLAN_AKM_SUITE_PSK
;
5565 NLA_PUT_U32(msg
, NL80211_ATTR_AKM_SUITES
, mgmt
);
5568 ret
= nl80211_set_conn_keys(params
, msg
);
5570 goto nla_put_failure
;
5572 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5575 wpa_printf(MSG_DEBUG
, "nl80211: MLME connect failed: ret=%d "
5576 "(%s)", ret
, strerror(-ret
));
5578 * cfg80211 does not currently accept new connection if we are
5579 * already connected. As a workaround, force disconnection and
5580 * try again once the driver indicates it completed
5583 if (ret
== -EALREADY
)
5584 nl80211_disconnect(drv
, params
->bssid
);
5585 goto nla_put_failure
;
5588 wpa_printf(MSG_DEBUG
, "nl80211: Connect request send successfully");
5597 static int wpa_driver_nl80211_associate(
5598 void *priv
, struct wpa_driver_associate_params
*params
)
5600 struct i802_bss
*bss
= priv
;
5601 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5605 if (params
->mode
== IEEE80211_MODE_AP
)
5606 return wpa_driver_nl80211_ap(drv
, params
);
5608 if (params
->mode
== IEEE80211_MODE_IBSS
)
5609 return wpa_driver_nl80211_ibss(drv
, params
);
5611 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
)) {
5612 enum nl80211_iftype nlmode
= params
->p2p
?
5613 NL80211_IFTYPE_P2P_CLIENT
: NL80211_IFTYPE_STATION
;
5615 if (wpa_driver_nl80211_set_mode(priv
, nlmode
) < 0)
5617 return wpa_driver_nl80211_connect(drv
, params
);
5620 drv
->associated
= 0;
5622 msg
= nlmsg_alloc();
5626 wpa_printf(MSG_DEBUG
, "nl80211: Associate (ifindex=%d)",
5628 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_ASSOCIATE
);
5630 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5631 if (params
->bssid
) {
5632 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
5633 MAC2STR(params
->bssid
));
5634 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
5637 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5638 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5639 drv
->assoc_freq
= params
->freq
;
5641 drv
->assoc_freq
= 0;
5643 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5644 params
->ssid
, params
->ssid_len
);
5645 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5647 if (params
->ssid_len
> sizeof(drv
->ssid
))
5648 goto nla_put_failure
;
5649 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5650 drv
->ssid_len
= params
->ssid_len
;
5652 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->wpa_ie
, params
->wpa_ie_len
);
5654 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5657 if (params
->pairwise_suite
!= CIPHER_NONE
) {
5660 switch (params
->pairwise_suite
) {
5662 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5665 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5668 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5672 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5675 wpa_printf(MSG_DEBUG
, " * pairwise=0x%x", cipher
);
5676 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
, cipher
);
5679 if (params
->group_suite
!= CIPHER_NONE
) {
5682 switch (params
->group_suite
) {
5684 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5687 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5690 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5694 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5697 wpa_printf(MSG_DEBUG
, " * group=0x%x", cipher
);
5698 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
, cipher
);
5701 #ifdef CONFIG_IEEE80211W
5702 if (params
->mgmt_frame_protection
== MGMT_FRAME_PROTECTION_REQUIRED
)
5703 NLA_PUT_U32(msg
, NL80211_ATTR_USE_MFP
, NL80211_MFP_REQUIRED
);
5704 #endif /* CONFIG_IEEE80211W */
5706 NLA_PUT_FLAG(msg
, NL80211_ATTR_CONTROL_PORT
);
5708 if (params
->prev_bssid
) {
5709 wpa_printf(MSG_DEBUG
, " * prev_bssid=" MACSTR
,
5710 MAC2STR(params
->prev_bssid
));
5711 NLA_PUT(msg
, NL80211_ATTR_PREV_BSSID
, ETH_ALEN
,
5712 params
->prev_bssid
);
5716 wpa_printf(MSG_DEBUG
, " * P2P group");
5718 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5721 wpa_printf(MSG_DEBUG
, "nl80211: MLME command failed: ret=%d "
5722 "(%s)", ret
, strerror(-ret
));
5723 nl80211_dump_scan(drv
);
5724 goto nla_put_failure
;
5727 wpa_printf(MSG_DEBUG
, "nl80211: Association request send "
5736 static int nl80211_set_mode(struct wpa_driver_nl80211_data
*drv
,
5737 int ifindex
, enum nl80211_iftype mode
)
5742 wpa_printf(MSG_DEBUG
, "nl80211: Set mode ifindex %d iftype %d (%s)",
5743 ifindex
, mode
, nl80211_iftype_str(mode
));
5745 msg
= nlmsg_alloc();
5749 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_INTERFACE
);
5750 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
5751 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, mode
);
5753 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5757 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set interface %d to mode %d:"
5758 " %d (%s)", ifindex
, mode
, ret
, strerror(-ret
));
5763 static int wpa_driver_nl80211_set_mode(struct i802_bss
*bss
,
5764 enum nl80211_iftype nlmode
)
5766 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5769 int was_ap
= is_ap_interface(drv
->nlmode
);
5771 if (nl80211_set_mode(drv
, drv
->ifindex
, nlmode
) == 0) {
5772 drv
->nlmode
= nlmode
;
5777 if (nlmode
== drv
->nlmode
) {
5778 wpa_printf(MSG_DEBUG
, "nl80211: Interface already in "
5779 "requested mode - ignore error");
5781 goto done
; /* Already in the requested mode */
5784 /* mac80211 doesn't allow mode changes while the device is up, so
5785 * take the device down, try to set the mode again, and bring the
5788 wpa_printf(MSG_DEBUG
, "nl80211: Try mode change after setting "
5790 for (i
= 0; i
< 10; i
++) {
5792 res
= linux_set_iface_flags(drv
->global
->ioctl_sock
,
5794 if (res
== -EACCES
|| res
== -ENODEV
)
5797 /* Try to set the mode again while the interface is
5799 ret
= nl80211_set_mode(drv
, drv
->ifindex
, nlmode
);
5802 res
= linux_set_iface_flags(drv
->global
->ioctl_sock
,
5806 else if (ret
!= -EBUSY
)
5809 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set "
5811 os_sleep(0, 100000);
5815 wpa_printf(MSG_DEBUG
, "nl80211: Mode change succeeded while "
5816 "interface is down");
5817 drv
->nlmode
= nlmode
;
5818 drv
->ignore_if_down_event
= 1;
5822 if (!ret
&& is_ap_interface(nlmode
)) {
5823 /* Setup additional AP mode functionality if needed */
5824 if (!drv
->no_monitor_iface_capab
&& drv
->monitor_ifidx
< 0 &&
5825 nl80211_create_monitor_interface(drv
) &&
5826 !drv
->no_monitor_iface_capab
)
5828 } else if (!ret
&& !is_ap_interface(nlmode
)) {
5829 /* Remove additional AP mode functionality */
5830 if (was_ap
&& drv
->no_monitor_iface_capab
)
5831 wpa_driver_nl80211_probe_req_report(bss
, 0);
5832 nl80211_remove_monitor_interface(drv
);
5833 bss
->beacon_set
= 0;
5836 if (!ret
&& is_p2p_interface(drv
->nlmode
)) {
5837 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 1);
5838 drv
->disabled_11b_rates
= 1;
5839 } else if (!ret
&& drv
->disabled_11b_rates
) {
5840 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 0);
5841 drv
->disabled_11b_rates
= 0;
5845 wpa_printf(MSG_DEBUG
, "nl80211: Interface mode change to %d "
5846 "from %d failed", nlmode
, drv
->nlmode
);
5852 static int wpa_driver_nl80211_get_capa(void *priv
,
5853 struct wpa_driver_capa
*capa
)
5855 struct i802_bss
*bss
= priv
;
5856 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5857 if (!drv
->has_capability
)
5859 os_memcpy(capa
, &drv
->capa
, sizeof(*capa
));
5864 static int wpa_driver_nl80211_set_operstate(void *priv
, int state
)
5866 struct i802_bss
*bss
= priv
;
5867 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5869 wpa_printf(MSG_DEBUG
, "%s: operstate %d->%d (%s)",
5870 __func__
, drv
->operstate
, state
, state
? "UP" : "DORMANT");
5871 drv
->operstate
= state
;
5872 return netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
, -1,
5873 state
? IF_OPER_UP
: IF_OPER_DORMANT
);
5877 static int wpa_driver_nl80211_set_supp_port(void *priv
, int authorized
)
5879 struct i802_bss
*bss
= priv
;
5880 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5882 struct nl80211_sta_flag_update upd
;
5884 msg
= nlmsg_alloc();
5888 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
5890 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
5891 if_nametoindex(bss
->ifname
));
5892 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, drv
->bssid
);
5894 os_memset(&upd
, 0, sizeof(upd
));
5895 upd
.mask
= BIT(NL80211_STA_FLAG_AUTHORIZED
);
5897 upd
.set
= BIT(NL80211_STA_FLAG_AUTHORIZED
);
5898 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
5900 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5906 /* Set kernel driver on given frequency (MHz) */
5907 static int i802_set_freq(void *priv
, struct hostapd_freq_params
*freq
)
5909 struct i802_bss
*bss
= priv
;
5910 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5911 return wpa_driver_nl80211_set_freq(drv
, freq
->freq
, freq
->ht_enabled
,
5912 freq
->sec_channel_offset
);
5916 #if defined(HOSTAPD) || defined(CONFIG_AP)
5918 static inline int min_int(int a
, int b
)
5926 static int get_key_handler(struct nl_msg
*msg
, void *arg
)
5928 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
5929 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
5931 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
5932 genlmsg_attrlen(gnlh
, 0), NULL
);
5935 * TODO: validate the key index and mac address!
5936 * Otherwise, there's a race condition as soon as
5937 * the kernel starts sending key notifications.
5940 if (tb
[NL80211_ATTR_KEY_SEQ
])
5941 memcpy(arg
, nla_data(tb
[NL80211_ATTR_KEY_SEQ
]),
5942 min_int(nla_len(tb
[NL80211_ATTR_KEY_SEQ
]), 6));
5947 static int i802_get_seqnum(const char *iface
, void *priv
, const u8
*addr
,
5950 struct i802_bss
*bss
= priv
;
5951 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5954 msg
= nlmsg_alloc();
5958 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_KEY
);
5961 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
5962 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, idx
);
5963 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(iface
));
5967 return send_and_recv_msgs(drv
, msg
, get_key_handler
, seq
);
5973 static int i802_set_rate_sets(void *priv
, int *supp_rates
, int *basic_rates
,
5976 struct i802_bss
*bss
= priv
;
5977 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5979 u8 rates
[NL80211_MAX_SUPP_RATES
];
5983 msg
= nlmsg_alloc();
5987 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
5989 for (i
= 0; i
< NL80211_MAX_SUPP_RATES
&& basic_rates
[i
] >= 0; i
++)
5990 rates
[rates_len
++] = basic_rates
[i
] / 5;
5992 NLA_PUT(msg
, NL80211_ATTR_BSS_BASIC_RATES
, rates_len
, rates
);
5994 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
5996 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6002 static int i802_set_rts(void *priv
, int rts
)
6004 struct i802_bss
*bss
= priv
;
6005 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6010 msg
= nlmsg_alloc();
6019 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6020 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6021 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_RTS_THRESHOLD
, val
);
6023 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6027 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set RTS threshold %d: "
6028 "%d (%s)", rts
, ret
, strerror(-ret
));
6033 static int i802_set_frag(void *priv
, int frag
)
6035 struct i802_bss
*bss
= priv
;
6036 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6041 msg
= nlmsg_alloc();
6050 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6051 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6052 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FRAG_THRESHOLD
, val
);
6054 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6058 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set fragmentation threshold "
6059 "%d: %d (%s)", frag
, ret
, strerror(-ret
));
6064 static int i802_flush(void *priv
)
6066 struct i802_bss
*bss
= priv
;
6067 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6070 msg
= nlmsg_alloc();
6074 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_STATION
);
6077 * XXX: FIX! this needs to flush all VLANs too
6079 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
6080 if_nametoindex(bss
->ifname
));
6082 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6088 static int get_sta_handler(struct nl_msg
*msg
, void *arg
)
6090 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
6091 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
6092 struct hostap_sta_driver_data
*data
= arg
;
6093 struct nlattr
*stats
[NL80211_STA_INFO_MAX
+ 1];
6094 static struct nla_policy stats_policy
[NL80211_STA_INFO_MAX
+ 1] = {
6095 [NL80211_STA_INFO_INACTIVE_TIME
] = { .type
= NLA_U32
},
6096 [NL80211_STA_INFO_RX_BYTES
] = { .type
= NLA_U32
},
6097 [NL80211_STA_INFO_TX_BYTES
] = { .type
= NLA_U32
},
6098 [NL80211_STA_INFO_RX_PACKETS
] = { .type
= NLA_U32
},
6099 [NL80211_STA_INFO_TX_PACKETS
] = { .type
= NLA_U32
},
6102 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
6103 genlmsg_attrlen(gnlh
, 0), NULL
);
6106 * TODO: validate the interface and mac address!
6107 * Otherwise, there's a race condition as soon as
6108 * the kernel starts sending station notifications.
6111 if (!tb
[NL80211_ATTR_STA_INFO
]) {
6112 wpa_printf(MSG_DEBUG
, "sta stats missing!");
6115 if (nla_parse_nested(stats
, NL80211_STA_INFO_MAX
,
6116 tb
[NL80211_ATTR_STA_INFO
],
6118 wpa_printf(MSG_DEBUG
, "failed to parse nested attributes!");
6122 if (stats
[NL80211_STA_INFO_INACTIVE_TIME
])
6123 data
->inactive_msec
=
6124 nla_get_u32(stats
[NL80211_STA_INFO_INACTIVE_TIME
]);
6125 if (stats
[NL80211_STA_INFO_RX_BYTES
])
6126 data
->rx_bytes
= nla_get_u32(stats
[NL80211_STA_INFO_RX_BYTES
]);
6127 if (stats
[NL80211_STA_INFO_TX_BYTES
])
6128 data
->tx_bytes
= nla_get_u32(stats
[NL80211_STA_INFO_TX_BYTES
]);
6129 if (stats
[NL80211_STA_INFO_RX_PACKETS
])
6131 nla_get_u32(stats
[NL80211_STA_INFO_RX_PACKETS
]);
6132 if (stats
[NL80211_STA_INFO_TX_PACKETS
])
6134 nla_get_u32(stats
[NL80211_STA_INFO_TX_PACKETS
]);
6139 static int i802_read_sta_data(void *priv
, struct hostap_sta_driver_data
*data
,
6142 struct i802_bss
*bss
= priv
;
6143 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6146 os_memset(data
, 0, sizeof(*data
));
6147 msg
= nlmsg_alloc();
6151 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_STATION
);
6153 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6154 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6156 return send_and_recv_msgs(drv
, msg
, get_sta_handler
, data
);
6162 static int i802_set_tx_queue_params(void *priv
, int queue
, int aifs
,
6163 int cw_min
, int cw_max
, int burst_time
)
6165 struct i802_bss
*bss
= priv
;
6166 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6168 struct nlattr
*txq
, *params
;
6170 msg
= nlmsg_alloc();
6174 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6176 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6178 txq
= nla_nest_start(msg
, NL80211_ATTR_WIPHY_TXQ_PARAMS
);
6180 goto nla_put_failure
;
6182 /* We are only sending parameters for a single TXQ at a time */
6183 params
= nla_nest_start(msg
, 1);
6185 goto nla_put_failure
;
6189 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_VO
);
6192 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_VI
);
6195 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_BE
);
6198 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_BK
);
6201 /* Burst time is configured in units of 0.1 msec and TXOP parameter in
6202 * 32 usec, so need to convert the value here. */
6203 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_TXOP
, (burst_time
* 100 + 16) / 32);
6204 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_CWMIN
, cw_min
);
6205 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_CWMAX
, cw_max
);
6206 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_AIFS
, aifs
);
6208 nla_nest_end(msg
, params
);
6210 nla_nest_end(msg
, txq
);
6212 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
6219 static int i802_set_sta_vlan(void *priv
, const u8
*addr
,
6220 const char *ifname
, int vlan_id
)
6222 struct i802_bss
*bss
= priv
;
6223 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6227 msg
= nlmsg_alloc();
6231 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
6233 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
6234 if_nametoindex(bss
->ifname
));
6235 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6236 NLA_PUT_U32(msg
, NL80211_ATTR_STA_VLAN
,
6237 if_nametoindex(ifname
));
6239 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6241 wpa_printf(MSG_ERROR
, "nl80211: NL80211_ATTR_STA_VLAN (addr="
6242 MACSTR
" ifname=%s vlan_id=%d) failed: %d (%s)",
6243 MAC2STR(addr
), ifname
, vlan_id
, ret
,
6251 static int i802_get_inact_sec(void *priv
, const u8
*addr
)
6253 struct hostap_sta_driver_data data
;
6256 data
.inactive_msec
= (unsigned long) -1;
6257 ret
= i802_read_sta_data(priv
, &data
, addr
);
6258 if (ret
|| data
.inactive_msec
== (unsigned long) -1)
6260 return data
.inactive_msec
/ 1000;
6264 static int i802_sta_clear_stats(void *priv
, const u8
*addr
)
6273 static int i802_sta_deauth(void *priv
, const u8
*own_addr
, const u8
*addr
,
6276 struct i802_bss
*bss
= priv
;
6277 struct ieee80211_mgmt mgmt
;
6279 memset(&mgmt
, 0, sizeof(mgmt
));
6280 mgmt
.frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
6281 WLAN_FC_STYPE_DEAUTH
);
6282 memcpy(mgmt
.da
, addr
, ETH_ALEN
);
6283 memcpy(mgmt
.sa
, own_addr
, ETH_ALEN
);
6284 memcpy(mgmt
.bssid
, own_addr
, ETH_ALEN
);
6285 mgmt
.u
.deauth
.reason_code
= host_to_le16(reason
);
6286 return wpa_driver_nl80211_send_mlme(bss
, (u8
*) &mgmt
,
6288 sizeof(mgmt
.u
.deauth
));
6292 static int i802_sta_disassoc(void *priv
, const u8
*own_addr
, const u8
*addr
,
6295 struct i802_bss
*bss
= priv
;
6296 struct ieee80211_mgmt mgmt
;
6298 memset(&mgmt
, 0, sizeof(mgmt
));
6299 mgmt
.frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
6300 WLAN_FC_STYPE_DISASSOC
);
6301 memcpy(mgmt
.da
, addr
, ETH_ALEN
);
6302 memcpy(mgmt
.sa
, own_addr
, ETH_ALEN
);
6303 memcpy(mgmt
.bssid
, own_addr
, ETH_ALEN
);
6304 mgmt
.u
.disassoc
.reason_code
= host_to_le16(reason
);
6305 return wpa_driver_nl80211_send_mlme(bss
, (u8
*) &mgmt
,
6307 sizeof(mgmt
.u
.disassoc
));
6310 #endif /* HOSTAPD || CONFIG_AP */
6314 static void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6319 wpa_printf(MSG_DEBUG
, "nl80211: Add own interface ifindex %d",
6321 for (i
= 0; i
< drv
->num_if_indices
; i
++) {
6322 if (drv
->if_indices
[i
] == 0) {
6323 drv
->if_indices
[i
] = ifidx
;
6328 if (drv
->if_indices
!= drv
->default_if_indices
)
6329 old
= drv
->if_indices
;
6333 drv
->if_indices
= os_realloc(old
,
6334 sizeof(int) * (drv
->num_if_indices
+ 1));
6335 if (!drv
->if_indices
) {
6337 drv
->if_indices
= drv
->default_if_indices
;
6339 drv
->if_indices
= old
;
6340 wpa_printf(MSG_ERROR
, "Failed to reallocate memory for "
6342 wpa_printf(MSG_ERROR
, "Ignoring EAPOL on interface %d", ifidx
);
6345 os_memcpy(drv
->if_indices
, drv
->default_if_indices
,
6346 sizeof(drv
->default_if_indices
));
6347 drv
->if_indices
[drv
->num_if_indices
] = ifidx
;
6348 drv
->num_if_indices
++;
6352 static void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6356 for (i
= 0; i
< drv
->num_if_indices
; i
++) {
6357 if (drv
->if_indices
[i
] == ifidx
) {
6358 drv
->if_indices
[i
] = 0;
6365 static int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6369 for (i
= 0; i
< drv
->num_if_indices
; i
++)
6370 if (drv
->if_indices
[i
] == ifidx
)
6377 static int i802_set_wds_sta(void *priv
, const u8
*addr
, int aid
, int val
,
6378 const char *bridge_ifname
)
6380 struct i802_bss
*bss
= priv
;
6381 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6382 char name
[IFNAMSIZ
+ 1];
6384 os_snprintf(name
, sizeof(name
), "%s.sta%d", bss
->ifname
, aid
);
6385 wpa_printf(MSG_DEBUG
, "nl80211: Set WDS STA addr=" MACSTR
6386 " aid=%d val=%d name=%s", MAC2STR(addr
), aid
, val
, name
);
6388 if (!if_nametoindex(name
)) {
6389 if (nl80211_create_iface(drv
, name
,
6390 NL80211_IFTYPE_AP_VLAN
,
6393 if (bridge_ifname
&&
6394 linux_br_add_if(drv
->global
->ioctl_sock
,
6395 bridge_ifname
, name
) < 0)
6398 linux_set_iface_flags(drv
->global
->ioctl_sock
, name
, 1);
6399 return i802_set_sta_vlan(priv
, addr
, name
, 0);
6401 i802_set_sta_vlan(priv
, addr
, bss
->ifname
, 0);
6402 return wpa_driver_nl80211_if_remove(priv
, WPA_IF_AP_VLAN
,
6408 static void handle_eapol(int sock
, void *eloop_ctx
, void *sock_ctx
)
6410 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
6411 struct sockaddr_ll lladdr
;
6412 unsigned char buf
[3000];
6414 socklen_t fromlen
= sizeof(lladdr
);
6416 len
= recvfrom(sock
, buf
, sizeof(buf
), 0,
6417 (struct sockaddr
*)&lladdr
, &fromlen
);
6423 if (have_ifidx(drv
, lladdr
.sll_ifindex
))
6424 drv_event_eapol_rx(drv
->ctx
, lladdr
.sll_addr
, buf
, len
);
6428 static int i802_check_bridge(struct wpa_driver_nl80211_data
*drv
,
6429 struct i802_bss
*bss
,
6430 const char *brname
, const char *ifname
)
6433 char in_br
[IFNAMSIZ
];
6435 os_strlcpy(bss
->brname
, brname
, IFNAMSIZ
);
6436 ifindex
= if_nametoindex(brname
);
6439 * Bridge was configured, but the bridge device does
6440 * not exist. Try to add it now.
6442 if (linux_br_add(drv
->global
->ioctl_sock
, brname
) < 0) {
6443 wpa_printf(MSG_ERROR
, "nl80211: Failed to add the "
6444 "bridge interface %s: %s",
6445 brname
, strerror(errno
));
6448 bss
->added_bridge
= 1;
6449 add_ifidx(drv
, if_nametoindex(brname
));
6452 if (linux_br_get(in_br
, ifname
) == 0) {
6453 if (os_strcmp(in_br
, brname
) == 0)
6454 return 0; /* already in the bridge */
6456 wpa_printf(MSG_DEBUG
, "nl80211: Removing interface %s from "
6457 "bridge %s", ifname
, in_br
);
6458 if (linux_br_del_if(drv
->global
->ioctl_sock
, in_br
, ifname
) <
6460 wpa_printf(MSG_ERROR
, "nl80211: Failed to "
6461 "remove interface %s from bridge "
6463 ifname
, brname
, strerror(errno
));
6468 wpa_printf(MSG_DEBUG
, "nl80211: Adding interface %s into bridge %s",
6470 if (linux_br_add_if(drv
->global
->ioctl_sock
, brname
, ifname
) < 0) {
6471 wpa_printf(MSG_ERROR
, "nl80211: Failed to add interface %s "
6472 "into bridge %s: %s",
6473 ifname
, brname
, strerror(errno
));
6476 bss
->added_if_into_bridge
= 1;
6482 static void *i802_init(struct hostapd_data
*hapd
,
6483 struct wpa_init_params
*params
)
6485 struct wpa_driver_nl80211_data
*drv
;
6486 struct i802_bss
*bss
;
6488 char brname
[IFNAMSIZ
];
6489 int ifindex
, br_ifindex
;
6492 bss
= wpa_driver_nl80211_init(hapd
, params
->ifname
,
6493 params
->global_priv
);
6498 drv
->nlmode
= NL80211_IFTYPE_AP
;
6499 drv
->eapol_sock
= -1;
6501 if (linux_br_get(brname
, params
->ifname
) == 0) {
6502 wpa_printf(MSG_DEBUG
, "nl80211: Interface %s is in bridge %s",
6503 params
->ifname
, brname
);
6504 br_ifindex
= if_nametoindex(brname
);
6510 drv
->num_if_indices
= sizeof(drv
->default_if_indices
) / sizeof(int);
6511 drv
->if_indices
= drv
->default_if_indices
;
6512 for (i
= 0; i
< params
->num_bridge
; i
++) {
6513 if (params
->bridge
[i
]) {
6514 ifindex
= if_nametoindex(params
->bridge
[i
]);
6516 add_ifidx(drv
, ifindex
);
6517 if (ifindex
== br_ifindex
)
6521 if (!br_added
&& br_ifindex
&&
6522 (params
->num_bridge
== 0 || !params
->bridge
[0]))
6523 add_ifidx(drv
, br_ifindex
);
6525 /* start listening for EAPOL on the default AP interface */
6526 add_ifidx(drv
, drv
->ifindex
);
6528 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 0))
6531 if (params
->bssid
) {
6532 if (linux_set_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6537 if (wpa_driver_nl80211_set_mode(bss
, drv
->nlmode
)) {
6538 wpa_printf(MSG_ERROR
, "nl80211: Failed to set interface %s "
6539 "into AP mode", bss
->ifname
);
6543 if (params
->num_bridge
&& params
->bridge
[0] &&
6544 i802_check_bridge(drv
, bss
, params
->bridge
[0], params
->ifname
) < 0)
6547 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1))
6550 drv
->eapol_sock
= socket(PF_PACKET
, SOCK_DGRAM
, htons(ETH_P_PAE
));
6551 if (drv
->eapol_sock
< 0) {
6552 perror("socket(PF_PACKET, SOCK_DGRAM, ETH_P_PAE)");
6556 if (eloop_register_read_sock(drv
->eapol_sock
, handle_eapol
, drv
, NULL
))
6558 printf("Could not register read socket for eapol\n");
6562 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6569 wpa_driver_nl80211_deinit(bss
);
6574 static void i802_deinit(void *priv
)
6576 wpa_driver_nl80211_deinit(priv
);
6579 #endif /* HOSTAPD */
6582 static enum nl80211_iftype
wpa_driver_nl80211_if_type(
6583 enum wpa_driver_if_type type
)
6586 case WPA_IF_STATION
:
6587 return NL80211_IFTYPE_STATION
;
6588 case WPA_IF_P2P_CLIENT
:
6589 case WPA_IF_P2P_GROUP
:
6590 return NL80211_IFTYPE_P2P_CLIENT
;
6591 case WPA_IF_AP_VLAN
:
6592 return NL80211_IFTYPE_AP_VLAN
;
6594 return NL80211_IFTYPE_AP
;
6596 return NL80211_IFTYPE_P2P_GO
;
6604 static int nl80211_addr_in_use(struct nl80211_global
*global
, const u8
*addr
)
6606 struct wpa_driver_nl80211_data
*drv
;
6607 dl_list_for_each(drv
, &global
->interfaces
,
6608 struct wpa_driver_nl80211_data
, list
) {
6609 if (os_memcmp(addr
, drv
->addr
, ETH_ALEN
) == 0)
6616 static int nl80211_p2p_interface_addr(struct wpa_driver_nl80211_data
*drv
,
6624 os_memcpy(new_addr
, drv
->addr
, ETH_ALEN
);
6625 for (idx
= 0; idx
< 64; idx
++) {
6626 new_addr
[0] = drv
->addr
[0] | 0x02;
6627 new_addr
[0] ^= idx
<< 2;
6628 if (!nl80211_addr_in_use(drv
->global
, new_addr
))
6634 wpa_printf(MSG_DEBUG
, "nl80211: Assigned new P2P Interface Address "
6635 MACSTR
, MAC2STR(new_addr
));
6640 #endif /* CONFIG_P2P */
6643 static int wpa_driver_nl80211_if_add(void *priv
, enum wpa_driver_if_type type
,
6644 const char *ifname
, const u8
*addr
,
6645 void *bss_ctx
, void **drv_priv
,
6646 char *force_ifname
, u8
*if_addr
,
6649 struct i802_bss
*bss
= priv
;
6650 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6653 struct i802_bss
*new_bss
= NULL
;
6655 if (type
== WPA_IF_AP_BSS
) {
6656 new_bss
= os_zalloc(sizeof(*new_bss
));
6657 if (new_bss
== NULL
)
6660 #endif /* HOSTAPD */
6663 os_memcpy(if_addr
, addr
, ETH_ALEN
);
6664 ifidx
= nl80211_create_iface(drv
, ifname
,
6665 wpa_driver_nl80211_if_type(type
), addr
,
6670 #endif /* HOSTAPD */
6675 linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6677 nl80211_remove_iface(drv
, ifidx
);
6683 (type
== WPA_IF_P2P_CLIENT
|| type
== WPA_IF_P2P_GROUP
||
6684 type
== WPA_IF_P2P_GO
)) {
6685 /* Enforce unique P2P Interface Address */
6686 u8 new_addr
[ETH_ALEN
], own_addr
[ETH_ALEN
];
6688 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6690 linux_get_ifhwaddr(drv
->global
->ioctl_sock
, ifname
,
6692 nl80211_remove_iface(drv
, ifidx
);
6695 if (os_memcmp(own_addr
, new_addr
, ETH_ALEN
) == 0) {
6696 wpa_printf(MSG_DEBUG
, "nl80211: Allocate new address "
6697 "for P2P group interface");
6698 if (nl80211_p2p_interface_addr(drv
, new_addr
) < 0) {
6699 nl80211_remove_iface(drv
, ifidx
);
6702 if (linux_set_ifhwaddr(drv
->global
->ioctl_sock
, ifname
,
6704 nl80211_remove_iface(drv
, ifidx
);
6708 os_memcpy(if_addr
, new_addr
, ETH_ALEN
);
6710 #endif /* CONFIG_P2P */
6714 i802_check_bridge(drv
, new_bss
, bridge
, ifname
) < 0) {
6715 wpa_printf(MSG_ERROR
, "nl80211: Failed to add the new "
6716 "interface %s to a bridge %s", ifname
, bridge
);
6717 nl80211_remove_iface(drv
, ifidx
);
6722 if (type
== WPA_IF_AP_BSS
) {
6723 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, ifname
, 1))
6725 nl80211_remove_iface(drv
, ifidx
);
6729 os_strlcpy(new_bss
->ifname
, ifname
, IFNAMSIZ
);
6730 new_bss
->ifindex
= ifidx
;
6732 new_bss
->next
= drv
->first_bss
.next
;
6733 drv
->first_bss
.next
= new_bss
;
6735 *drv_priv
= new_bss
;
6737 #endif /* HOSTAPD */
6740 drv
->global
->if_add_ifindex
= ifidx
;
6746 static int wpa_driver_nl80211_if_remove(void *priv
,
6747 enum wpa_driver_if_type type
,
6750 struct i802_bss
*bss
= priv
;
6751 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6752 int ifindex
= if_nametoindex(ifname
);
6754 wpa_printf(MSG_DEBUG
, "nl80211: %s(type=%d ifname=%s) ifindex=%d",
6755 __func__
, type
, ifname
, ifindex
);
6760 if (bss
->added_if_into_bridge
) {
6761 if (linux_br_del_if(drv
->global
->ioctl_sock
, bss
->brname
,
6763 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
6764 "interface %s from bridge %s: %s",
6765 bss
->ifname
, bss
->brname
, strerror(errno
));
6767 if (bss
->added_bridge
) {
6768 if (linux_br_del(drv
->global
->ioctl_sock
, bss
->brname
) < 0)
6769 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
6771 bss
->brname
, strerror(errno
));
6773 #endif /* HOSTAPD */
6775 nl80211_remove_iface(drv
, ifindex
);
6778 if (type
!= WPA_IF_AP_BSS
)
6781 if (bss
!= &drv
->first_bss
) {
6782 struct i802_bss
*tbss
;
6784 for (tbss
= &drv
->first_bss
; tbss
; tbss
= tbss
->next
) {
6785 if (tbss
->next
== bss
) {
6786 tbss
->next
= bss
->next
;
6793 wpa_printf(MSG_INFO
, "nl80211: %s - could not find "
6794 "BSS %p in the list", __func__
, bss
);
6796 #endif /* HOSTAPD */
6802 static int cookie_handler(struct nl_msg
*msg
, void *arg
)
6804 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
6805 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
6807 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
6808 genlmsg_attrlen(gnlh
, 0), NULL
);
6809 if (tb
[NL80211_ATTR_COOKIE
])
6810 *cookie
= nla_get_u64(tb
[NL80211_ATTR_COOKIE
]);
6815 static int nl80211_send_frame_cmd(struct wpa_driver_nl80211_data
*drv
,
6816 unsigned int freq
, unsigned int wait
,
6817 const u8
*buf
, size_t buf_len
,
6818 u64
*cookie_out
, int no_cck
)
6824 msg
= nlmsg_alloc();
6828 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_FRAME
);
6830 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6831 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
6833 NLA_PUT_U32(msg
, NL80211_ATTR_DURATION
, wait
);
6834 NLA_PUT_FLAG(msg
, NL80211_ATTR_OFFCHANNEL_TX_OK
);
6836 NLA_PUT_FLAG(msg
, NL80211_ATTR_TX_NO_CCK_RATE
);
6838 NLA_PUT(msg
, NL80211_ATTR_FRAME
, buf_len
, buf
);
6841 ret
= send_and_recv_msgs(drv
, msg
, cookie_handler
, &cookie
);
6844 wpa_printf(MSG_DEBUG
, "nl80211: Frame command failed: ret=%d "
6845 "(%s) (freq=%u wait=%u)", ret
, strerror(-ret
),
6847 goto nla_put_failure
;
6849 wpa_printf(MSG_DEBUG
, "nl80211: Frame TX command accepted; "
6850 "cookie 0x%llx", (long long unsigned int) cookie
);
6853 *cookie_out
= cookie
;
6861 static int wpa_driver_nl80211_send_action(void *priv
, unsigned int freq
,
6862 unsigned int wait_time
,
6863 const u8
*dst
, const u8
*src
,
6865 const u8
*data
, size_t data_len
,
6868 struct i802_bss
*bss
= priv
;
6869 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6872 struct ieee80211_hdr
*hdr
;
6874 wpa_printf(MSG_DEBUG
, "nl80211: Send Action frame (ifindex=%d, "
6875 "wait=%d ms no_cck=%d)", drv
->ifindex
, wait_time
, no_cck
);
6877 buf
= os_zalloc(24 + data_len
);
6880 os_memcpy(buf
+ 24, data
, data_len
);
6881 hdr
= (struct ieee80211_hdr
*) buf
;
6882 hdr
->frame_control
=
6883 IEEE80211_FC(WLAN_FC_TYPE_MGMT
, WLAN_FC_STYPE_ACTION
);
6884 os_memcpy(hdr
->addr1
, dst
, ETH_ALEN
);
6885 os_memcpy(hdr
->addr2
, src
, ETH_ALEN
);
6886 os_memcpy(hdr
->addr3
, bssid
, ETH_ALEN
);
6888 if (is_ap_interface(drv
->nlmode
))
6889 ret
= wpa_driver_nl80211_send_mlme(priv
, buf
, 24 + data_len
);
6891 ret
= nl80211_send_frame_cmd(drv
, freq
, wait_time
, buf
,
6893 &drv
->send_action_cookie
,
6901 static void wpa_driver_nl80211_send_action_cancel_wait(void *priv
)
6903 struct i802_bss
*bss
= priv
;
6904 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6908 msg
= nlmsg_alloc();
6912 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_FRAME_WAIT_CANCEL
);
6914 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6915 NLA_PUT_U64(msg
, NL80211_ATTR_COOKIE
, drv
->send_action_cookie
);
6917 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6920 wpa_printf(MSG_DEBUG
, "nl80211: wait cancel failed: ret=%d "
6921 "(%s)", ret
, strerror(-ret
));
6928 static int wpa_driver_nl80211_remain_on_channel(void *priv
, unsigned int freq
,
6929 unsigned int duration
)
6931 struct i802_bss
*bss
= priv
;
6932 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6937 msg
= nlmsg_alloc();
6941 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REMAIN_ON_CHANNEL
);
6943 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6944 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
6945 NLA_PUT_U32(msg
, NL80211_ATTR_DURATION
, duration
);
6948 ret
= send_and_recv_msgs(drv
, msg
, cookie_handler
, &cookie
);
6950 wpa_printf(MSG_DEBUG
, "nl80211: Remain-on-channel cookie "
6951 "0x%llx for freq=%u MHz duration=%u",
6952 (long long unsigned int) cookie
, freq
, duration
);
6953 drv
->remain_on_chan_cookie
= cookie
;
6954 drv
->pending_remain_on_chan
= 1;
6957 wpa_printf(MSG_DEBUG
, "nl80211: Failed to request remain-on-channel "
6958 "(freq=%d duration=%u): %d (%s)",
6959 freq
, duration
, ret
, strerror(-ret
));
6965 static int wpa_driver_nl80211_cancel_remain_on_channel(void *priv
)
6967 struct i802_bss
*bss
= priv
;
6968 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6972 if (!drv
->pending_remain_on_chan
) {
6973 wpa_printf(MSG_DEBUG
, "nl80211: No pending remain-on-channel "
6978 wpa_printf(MSG_DEBUG
, "nl80211: Cancel remain-on-channel with cookie "
6980 (long long unsigned int) drv
->remain_on_chan_cookie
);
6982 msg
= nlmsg_alloc();
6986 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL
);
6988 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6989 NLA_PUT_U64(msg
, NL80211_ATTR_COOKIE
, drv
->remain_on_chan_cookie
);
6991 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6994 wpa_printf(MSG_DEBUG
, "nl80211: Failed to cancel remain-on-channel: "
6995 "%d (%s)", ret
, strerror(-ret
));
7001 static int wpa_driver_nl80211_probe_req_report(void *priv
, int report
)
7003 struct i802_bss
*bss
= priv
;
7004 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7007 if (drv
->nl_preq
.handle
) {
7008 eloop_unregister_read_sock(
7009 nl_socket_get_fd(drv
->nl_preq
.handle
));
7010 nl_destroy_handles(&drv
->nl_preq
);
7015 if (drv
->nl_preq
.handle
) {
7016 wpa_printf(MSG_DEBUG
, "nl80211: Probe Request reporting "
7021 if (nl_create_handles(&drv
->nl_preq
, drv
->global
->nl_cb
, "preq"))
7024 if (nl80211_register_frame(drv
, drv
->nl_preq
.handle
,
7025 (WLAN_FC_TYPE_MGMT
<< 2) |
7026 (WLAN_FC_STYPE_PROBE_REQ
<< 4),
7030 eloop_register_read_sock(nl_socket_get_fd(drv
->nl_preq
.handle
),
7031 wpa_driver_nl80211_event_receive
, drv
,
7032 drv
->nl_preq
.handle
);
7037 nl_destroy_handles(&drv
->nl_preq
);
7042 static int nl80211_disable_11b_rates(struct wpa_driver_nl80211_data
*drv
,
7043 int ifindex
, int disabled
)
7046 struct nlattr
*bands
, *band
;
7049 msg
= nlmsg_alloc();
7053 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_TX_BITRATE_MASK
);
7054 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
7056 bands
= nla_nest_start(msg
, NL80211_ATTR_TX_RATES
);
7058 goto nla_put_failure
;
7061 * Disable 2 GHz rates 1, 2, 5.5, 11 Mbps by masking out everything
7062 * else apart from 6, 9, 12, 18, 24, 36, 48, 54 Mbps from non-MCS
7063 * rates. All 5 GHz rates are left enabled.
7065 band
= nla_nest_start(msg
, NL80211_BAND_2GHZ
);
7067 goto nla_put_failure
;
7069 NLA_PUT(msg
, NL80211_TXRATE_LEGACY
, 8,
7070 "\x0c\x12\x18\x24\x30\x48\x60\x6c");
7072 nla_nest_end(msg
, band
);
7074 nla_nest_end(msg
, bands
);
7076 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7079 wpa_printf(MSG_DEBUG
, "nl80211: Set TX rates failed: ret=%d "
7080 "(%s)", ret
, strerror(-ret
));
7091 static int wpa_driver_nl80211_deinit_ap(void *priv
)
7093 struct i802_bss
*bss
= priv
;
7094 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7095 if (!is_ap_interface(drv
->nlmode
))
7097 wpa_driver_nl80211_del_beacon(drv
);
7098 return wpa_driver_nl80211_set_mode(priv
, NL80211_IFTYPE_STATION
);
7102 static void wpa_driver_nl80211_resume(void *priv
)
7104 struct i802_bss
*bss
= priv
;
7105 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7106 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1)) {
7107 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set interface up on "
7113 static int nl80211_send_ft_action(void *priv
, u8 action
, const u8
*target_ap
,
7114 const u8
*ies
, size_t ies_len
)
7116 struct i802_bss
*bss
= priv
;
7117 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7121 u8 own_addr
[ETH_ALEN
];
7123 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
7128 wpa_printf(MSG_ERROR
, "nl80211: Unsupported send_ft_action "
7129 "action %d", action
);
7134 * Action frame payload:
7135 * Category[1] = 6 (Fast BSS Transition)
7136 * Action[1] = 1 (Fast BSS Transition Request)
7142 data_len
= 2 + 2 * ETH_ALEN
+ ies_len
;
7143 data
= os_malloc(data_len
);
7147 *pos
++ = 0x06; /* FT Action category */
7149 os_memcpy(pos
, own_addr
, ETH_ALEN
);
7151 os_memcpy(pos
, target_ap
, ETH_ALEN
);
7153 os_memcpy(pos
, ies
, ies_len
);
7155 ret
= wpa_driver_nl80211_send_action(bss
, drv
->assoc_freq
, 0,
7156 drv
->bssid
, own_addr
, drv
->bssid
,
7164 static int nl80211_signal_monitor(void *priv
, int threshold
, int hysteresis
)
7166 struct i802_bss
*bss
= priv
;
7167 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7168 struct nl_msg
*msg
, *cqm
= NULL
;
7170 wpa_printf(MSG_DEBUG
, "nl80211: Signal monitor threshold=%d "
7171 "hysteresis=%d", threshold
, hysteresis
);
7173 msg
= nlmsg_alloc();
7177 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_CQM
);
7179 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7181 cqm
= nlmsg_alloc();
7185 NLA_PUT_U32(cqm
, NL80211_ATTR_CQM_RSSI_THOLD
, threshold
);
7186 NLA_PUT_U32(cqm
, NL80211_ATTR_CQM_RSSI_HYST
, hysteresis
);
7187 nla_put_nested(msg
, NL80211_ATTR_CQM
, cqm
);
7189 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
7201 static int nl80211_signal_poll(void *priv
, struct wpa_signal_info
*si
)
7203 struct i802_bss
*bss
= priv
;
7204 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7207 os_memset(si
, 0, sizeof(*si
));
7208 res
= nl80211_get_link_signal(drv
, si
);
7212 return nl80211_get_link_noise(drv
, si
);
7216 static int nl80211_send_frame(void *priv
, const u8
*data
, size_t data_len
,
7219 struct i802_bss
*bss
= priv
;
7220 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7221 return wpa_driver_nl80211_send_frame(drv
, data
, data_len
, encrypt
);
7225 static int nl80211_set_param(void *priv
, const char *param
)
7227 wpa_printf(MSG_DEBUG
, "nl80211: driver param='%s'", param
);
7232 if (os_strstr(param
, "use_p2p_group_interface=1")) {
7233 struct i802_bss
*bss
= priv
;
7234 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7236 wpa_printf(MSG_DEBUG
, "nl80211: Use separate P2P group "
7238 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_P2P_CONCURRENT
;
7239 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_P2P_MGMT_AND_NON_P2P
;
7241 #endif /* CONFIG_P2P */
7247 static void * nl80211_global_init(void)
7249 struct nl80211_global
*global
;
7250 struct netlink_config
*cfg
;
7252 global
= os_zalloc(sizeof(*global
));
7255 global
->ioctl_sock
= -1;
7256 dl_list_init(&global
->interfaces
);
7257 global
->if_add_ifindex
= -1;
7259 cfg
= os_zalloc(sizeof(*cfg
));
7264 cfg
->newlink_cb
= wpa_driver_nl80211_event_rtm_newlink
;
7265 cfg
->dellink_cb
= wpa_driver_nl80211_event_rtm_dellink
;
7266 global
->netlink
= netlink_init(cfg
);
7267 if (global
->netlink
== NULL
) {
7272 if (wpa_driver_nl80211_init_nl_global(global
) < 0)
7275 global
->ioctl_sock
= socket(PF_INET
, SOCK_DGRAM
, 0);
7276 if (global
->ioctl_sock
< 0) {
7277 perror("socket(PF_INET,SOCK_DGRAM)");
7284 nl80211_global_deinit(global
);
7289 static void nl80211_global_deinit(void *priv
)
7291 struct nl80211_global
*global
= priv
;
7294 if (!dl_list_empty(&global
->interfaces
)) {
7295 wpa_printf(MSG_ERROR
, "nl80211: %u interface(s) remain at "
7296 "nl80211_global_deinit",
7297 dl_list_len(&global
->interfaces
));
7300 if (global
->netlink
)
7301 netlink_deinit(global
->netlink
);
7303 nl_destroy_handles(&global
->nl
);
7306 nl_cb_put(global
->nl_cb
);
7308 if (global
->ioctl_sock
>= 0)
7309 close(global
->ioctl_sock
);
7315 static const char * nl80211_get_radio_name(void *priv
)
7317 struct i802_bss
*bss
= priv
;
7318 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7319 return drv
->phyname
;
7323 static int nl80211_pmkid(struct i802_bss
*bss
, int cmd
, const u8
*bssid
,
7328 msg
= nlmsg_alloc();
7332 nl80211_cmd(bss
->drv
, msg
, 0, cmd
);
7334 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
7336 NLA_PUT(msg
, NL80211_ATTR_PMKID
, 16, pmkid
);
7338 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, bssid
);
7340 return send_and_recv_msgs(bss
->drv
, msg
, NULL
, NULL
);
7346 static int nl80211_add_pmkid(void *priv
, const u8
*bssid
, const u8
*pmkid
)
7348 struct i802_bss
*bss
= priv
;
7349 wpa_printf(MSG_DEBUG
, "nl80211: Add PMKID for " MACSTR
, MAC2STR(bssid
));
7350 return nl80211_pmkid(bss
, NL80211_CMD_SET_PMKSA
, bssid
, pmkid
);
7354 static int nl80211_remove_pmkid(void *priv
, const u8
*bssid
, const u8
*pmkid
)
7356 struct i802_bss
*bss
= priv
;
7357 wpa_printf(MSG_DEBUG
, "nl80211: Delete PMKID for " MACSTR
,
7359 return nl80211_pmkid(bss
, NL80211_CMD_DEL_PMKSA
, bssid
, pmkid
);
7363 static int nl80211_flush_pmkid(void *priv
)
7365 struct i802_bss
*bss
= priv
;
7366 wpa_printf(MSG_DEBUG
, "nl80211: Flush PMKIDs");
7367 return nl80211_pmkid(bss
, NL80211_CMD_FLUSH_PMKSA
, NULL
, NULL
);
7371 static void nl80211_set_rekey_info(void *priv
, const u8
*kek
, const u8
*kck
,
7372 const u8
*replay_ctr
)
7374 struct i802_bss
*bss
= priv
;
7375 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7376 struct nlattr
*replay_nested
;
7379 msg
= nlmsg_alloc();
7383 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_REKEY_OFFLOAD
);
7385 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7387 replay_nested
= nla_nest_start(msg
, NL80211_ATTR_REKEY_DATA
);
7389 goto nla_put_failure
;
7391 NLA_PUT(msg
, NL80211_REKEY_DATA_KEK
, NL80211_KEK_LEN
, kek
);
7392 NLA_PUT(msg
, NL80211_REKEY_DATA_KCK
, NL80211_KCK_LEN
, kck
);
7393 NLA_PUT(msg
, NL80211_REKEY_DATA_REPLAY_CTR
, NL80211_REPLAY_CTR_LEN
,
7396 nla_nest_end(msg
, replay_nested
);
7398 send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7405 static void nl80211_poll_client(void *priv
, const u8
*own_addr
, const u8
*addr
,
7408 struct i802_bss
*bss
= priv
;
7410 struct ieee80211_hdr hdr
;
7412 } STRUCT_PACKED nulldata
;
7415 /* Send data frame to poll STA and check whether this frame is ACKed */
7417 os_memset(&nulldata
, 0, sizeof(nulldata
));
7420 nulldata
.hdr
.frame_control
=
7421 IEEE80211_FC(WLAN_FC_TYPE_DATA
,
7422 WLAN_FC_STYPE_QOS_NULL
);
7423 size
= sizeof(nulldata
);
7425 nulldata
.hdr
.frame_control
=
7426 IEEE80211_FC(WLAN_FC_TYPE_DATA
,
7427 WLAN_FC_STYPE_NULLFUNC
);
7428 size
= sizeof(struct ieee80211_hdr
);
7431 nulldata
.hdr
.frame_control
|= host_to_le16(WLAN_FC_FROMDS
);
7432 os_memcpy(nulldata
.hdr
.IEEE80211_DA_FROMDS
, addr
, ETH_ALEN
);
7433 os_memcpy(nulldata
.hdr
.IEEE80211_BSSID_FROMDS
, own_addr
, ETH_ALEN
);
7434 os_memcpy(nulldata
.hdr
.IEEE80211_SA_FROMDS
, own_addr
, ETH_ALEN
);
7436 if (wpa_driver_nl80211_send_mlme(bss
, (u8
*) &nulldata
, size
) < 0)
7437 wpa_printf(MSG_DEBUG
, "nl80211_send_null_frame: Failed to "
7444 static int nl80211_send_tdls_mgmt(void *priv
, const u8
*dst
, u8 action_code
,
7445 u8 dialog_token
, u16 status_code
,
7446 const u8
*buf
, size_t len
)
7448 struct i802_bss
*bss
= priv
;
7449 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7452 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
7458 msg
= nlmsg_alloc();
7462 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TDLS_MGMT
);
7463 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7464 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, dst
);
7465 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_ACTION
, action_code
);
7466 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_DIALOG_TOKEN
, dialog_token
);
7467 NLA_PUT_U16(msg
, NL80211_ATTR_STATUS_CODE
, status_code
);
7468 NLA_PUT(msg
, NL80211_ATTR_IE
, len
, buf
);
7470 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7478 static int nl80211_tdls_oper(void *priv
, enum tdls_oper oper
, const u8
*peer
)
7480 struct i802_bss
*bss
= priv
;
7481 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7483 enum nl80211_tdls_operation nl80211_oper
;
7485 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
7489 case TDLS_DISCOVERY_REQ
:
7490 nl80211_oper
= NL80211_TDLS_DISCOVERY_REQ
;
7493 nl80211_oper
= NL80211_TDLS_SETUP
;
7496 nl80211_oper
= NL80211_TDLS_TEARDOWN
;
7498 case TDLS_ENABLE_LINK
:
7499 nl80211_oper
= NL80211_TDLS_ENABLE_LINK
;
7501 case TDLS_DISABLE_LINK
:
7502 nl80211_oper
= NL80211_TDLS_DISABLE_LINK
;
7512 msg
= nlmsg_alloc();
7516 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TDLS_OPER
);
7517 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_OPERATION
, nl80211_oper
);
7518 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7519 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, peer
);
7521 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7528 #endif /* CONFIG TDLS */
7531 const struct wpa_driver_ops wpa_driver_nl80211_ops
= {
7533 .desc
= "Linux nl80211/cfg80211",
7534 .get_bssid
= wpa_driver_nl80211_get_bssid
,
7535 .get_ssid
= wpa_driver_nl80211_get_ssid
,
7536 .set_key
= wpa_driver_nl80211_set_key
,
7537 .scan2
= wpa_driver_nl80211_scan
,
7538 .sched_scan
= wpa_driver_nl80211_sched_scan
,
7539 .stop_sched_scan
= wpa_driver_nl80211_stop_sched_scan
,
7540 .get_scan_results2
= wpa_driver_nl80211_get_scan_results
,
7541 .deauthenticate
= wpa_driver_nl80211_deauthenticate
,
7542 .disassociate
= wpa_driver_nl80211_disassociate
,
7543 .authenticate
= wpa_driver_nl80211_authenticate
,
7544 .associate
= wpa_driver_nl80211_associate
,
7545 .global_init
= nl80211_global_init
,
7546 .global_deinit
= nl80211_global_deinit
,
7547 .init2
= wpa_driver_nl80211_init
,
7548 .deinit
= wpa_driver_nl80211_deinit
,
7549 .get_capa
= wpa_driver_nl80211_get_capa
,
7550 .set_operstate
= wpa_driver_nl80211_set_operstate
,
7551 .set_supp_port
= wpa_driver_nl80211_set_supp_port
,
7552 .set_country
= wpa_driver_nl80211_set_country
,
7553 .set_ap
= wpa_driver_nl80211_set_ap
,
7554 .if_add
= wpa_driver_nl80211_if_add
,
7555 .if_remove
= wpa_driver_nl80211_if_remove
,
7556 .send_mlme
= wpa_driver_nl80211_send_mlme
,
7557 .get_hw_feature_data
= wpa_driver_nl80211_get_hw_feature_data
,
7558 .sta_add
= wpa_driver_nl80211_sta_add
,
7559 .sta_remove
= wpa_driver_nl80211_sta_remove
,
7560 .hapd_send_eapol
= wpa_driver_nl80211_hapd_send_eapol
,
7561 .sta_set_flags
= wpa_driver_nl80211_sta_set_flags
,
7563 .hapd_init
= i802_init
,
7564 .hapd_deinit
= i802_deinit
,
7565 .set_wds_sta
= i802_set_wds_sta
,
7566 #endif /* HOSTAPD */
7567 #if defined(HOSTAPD) || defined(CONFIG_AP)
7568 .get_seqnum
= i802_get_seqnum
,
7569 .flush
= i802_flush
,
7570 .read_sta_data
= i802_read_sta_data
,
7571 .get_inact_sec
= i802_get_inact_sec
,
7572 .sta_clear_stats
= i802_sta_clear_stats
,
7573 .set_rts
= i802_set_rts
,
7574 .set_frag
= i802_set_frag
,
7575 .set_tx_queue_params
= i802_set_tx_queue_params
,
7576 .set_sta_vlan
= i802_set_sta_vlan
,
7577 .set_rate_sets
= i802_set_rate_sets
,
7578 .sta_deauth
= i802_sta_deauth
,
7579 .sta_disassoc
= i802_sta_disassoc
,
7580 #endif /* HOSTAPD || CONFIG_AP */
7581 .set_freq
= i802_set_freq
,
7582 .send_action
= wpa_driver_nl80211_send_action
,
7583 .send_action_cancel_wait
= wpa_driver_nl80211_send_action_cancel_wait
,
7584 .remain_on_channel
= wpa_driver_nl80211_remain_on_channel
,
7585 .cancel_remain_on_channel
=
7586 wpa_driver_nl80211_cancel_remain_on_channel
,
7587 .probe_req_report
= wpa_driver_nl80211_probe_req_report
,
7588 .deinit_ap
= wpa_driver_nl80211_deinit_ap
,
7589 .resume
= wpa_driver_nl80211_resume
,
7590 .send_ft_action
= nl80211_send_ft_action
,
7591 .signal_monitor
= nl80211_signal_monitor
,
7592 .signal_poll
= nl80211_signal_poll
,
7593 .send_frame
= nl80211_send_frame
,
7594 .set_param
= nl80211_set_param
,
7595 .get_radio_name
= nl80211_get_radio_name
,
7596 .add_pmkid
= nl80211_add_pmkid
,
7597 .remove_pmkid
= nl80211_remove_pmkid
,
7598 .flush_pmkid
= nl80211_flush_pmkid
,
7599 .set_rekey_info
= nl80211_set_rekey_info
,
7600 .poll_client
= nl80211_poll_client
,
7602 .send_tdls_mgmt
= nl80211_send_tdls_mgmt
,
7603 .tdls_oper
= nl80211_tdls_oper
,
7604 #endif /* CONFIG_TDLS */