2 * Driver interaction with Linux nl80211/cfg80211
3 * Copyright (c) 2002-2010, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2003-2004, Instant802 Networks, Inc.
5 * Copyright (c) 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2007, Johannes Berg <johannes@sipsolutions.net>
7 * Copyright (c) 2009-2010, Atheros Communications
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
13 * Alternatively, this software may be distributed under the terms of BSD
16 * See README and COPYING for more details.
20 #include <sys/ioctl.h>
21 #include <sys/types.h>
25 #include <netlink/genl/genl.h>
26 #include <netlink/genl/family.h>
27 #include <netlink/genl/ctrl.h>
28 #include <linux/rtnetlink.h>
29 #include <netpacket/packet.h>
30 #include <linux/filter.h>
31 #include "nl80211_copy.h"
35 #include "utils/list.h"
36 #include "common/ieee802_11_defs.h"
37 #include "common/ieee802_11_common.h"
38 #include "l2_packet/l2_packet.h"
40 #include "linux_ioctl.h"
42 #include "radiotap_iter.h"
47 /* libnl 2.0 compatibility code */
48 #define nl_handle nl_sock
49 #define nl80211_handle_alloc nl_socket_alloc_cb
50 #define nl80211_handle_destroy nl_socket_free
53 * libnl 1.1 has a bug, it tries to allocate socket numbers densely
54 * but when you free a socket again it will mess up its bitmap and
55 * and use the wrong number the next time it needs a socket ID.
56 * Therefore, we wrap the handle alloc/destroy and add our own pid
59 static uint32_t port_bitmap
[32] = { 0 };
61 static struct nl_handle
*nl80211_handle_alloc(void *cb
)
63 struct nl_handle
*handle
;
64 uint32_t pid
= getpid() & 0x3FFFFF;
67 handle
= nl_handle_alloc_cb(cb
);
69 for (i
= 0; i
< 1024; i
++) {
70 if (port_bitmap
[i
/ 32] & (1 << (i
% 32)))
72 port_bitmap
[i
/ 32] |= 1 << (i
% 32);
77 nl_socket_set_local_port(handle
, pid
);
82 static void nl80211_handle_destroy(struct nl_handle
*handle
)
84 uint32_t port
= nl_socket_get_local_port(handle
);
87 port_bitmap
[port
/ 32] &= ~(1 << (port
% 32));
89 nl_handle_destroy(handle
);
91 #endif /* CONFIG_LIBNL20 */
94 struct nl80211_handles
{
95 struct nl_handle
*handle
;
99 static int nl_create_handles(struct nl80211_handles
*handles
, struct nl_cb
*cb
,
105 handles
->handle
= nl80211_handle_alloc(cb
);
106 if (handles
->handle
== NULL
) {
107 wpa_printf(MSG_ERROR
, "nl80211: Failed to allocate netlink "
108 "callbacks (%s)", dbg
);
112 if (genl_connect(handles
->handle
)) {
113 wpa_printf(MSG_ERROR
, "nl80211: Failed to connect to generic "
114 "netlink (%s)", dbg
);
120 nl80211_handle_destroy(handles
->handle
);
125 static void nl_destroy_handles(struct nl80211_handles
*handles
)
127 if (handles
->handle
== NULL
)
129 nl80211_handle_destroy(handles
->handle
);
130 handles
->handle
= NULL
;
135 #define IFF_LOWER_UP 0x10000 /* driver signals L1 up */
138 #define IFF_DORMANT 0x20000 /* driver signals dormant */
141 #ifndef IF_OPER_DORMANT
142 #define IF_OPER_DORMANT 5
148 struct nl80211_global
{
149 struct dl_list interfaces
;
151 struct netlink_data
*netlink
;
153 struct nl80211_handles nl
;
155 int ioctl_sock
; /* socket for ioctl() use */
158 static void nl80211_global_deinit(void *priv
);
159 static void wpa_driver_nl80211_deinit(void *priv
);
162 struct wpa_driver_nl80211_data
*drv
;
163 struct i802_bss
*next
;
165 char ifname
[IFNAMSIZ
+ 1];
166 char brname
[IFNAMSIZ
];
167 unsigned int beacon_set
:1;
168 unsigned int added_if_into_bridge
:1;
169 unsigned int added_bridge
:1;
172 struct wpa_driver_nl80211_data
{
173 struct nl80211_global
*global
;
181 int ignore_if_down_event
;
182 struct rfkill_data
*rfkill
;
183 struct wpa_driver_capa capa
;
188 int scan_complete_events
;
190 struct nl80211_handles nl_event
, nl_preq
;
192 u8 auth_bssid
[ETH_ALEN
];
197 enum nl80211_iftype nlmode
;
198 enum nl80211_iftype ap_scan_as_station
;
199 unsigned int assoc_freq
;
203 int no_monitor_iface_capab
;
205 unsigned int disabled_11b_rates
:1;
206 unsigned int pending_remain_on_chan
:1;
207 unsigned int in_interface_list
:1;
209 u64 remain_on_chan_cookie
;
210 u64 send_action_cookie
;
212 unsigned int last_mgmt_freq
;
213 unsigned int ap_oper_freq
;
215 struct wpa_driver_scan_filter
*filter_ssids
;
216 size_t num_filter_ssids
;
218 struct i802_bss first_bss
;
221 struct l2_packet_data
*l2
;
222 #endif /* CONFIG_AP */
225 int eapol_sock
; /* socket for EAPOL frames */
227 int default_if_indices
[16];
237 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx
,
239 static int wpa_driver_nl80211_set_mode(struct i802_bss
*bss
,
240 enum nl80211_iftype nlmode
);
242 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data
*drv
);
243 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data
*drv
,
244 const u8
*addr
, int cmd
, u16 reason_code
,
245 int local_state_change
);
246 static void nl80211_remove_monitor_interface(
247 struct wpa_driver_nl80211_data
*drv
);
248 static int nl80211_send_frame_cmd(struct wpa_driver_nl80211_data
*drv
,
249 unsigned int freq
, unsigned int wait
,
250 const u8
*buf
, size_t buf_len
, u64
*cookie
,
252 static int wpa_driver_nl80211_probe_req_report(void *priv
, int report
);
255 static void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
256 static void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
257 static int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
258 static int wpa_driver_nl80211_if_remove(void *priv
,
259 enum wpa_driver_if_type type
,
262 static inline void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
266 static inline void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
270 static inline int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
276 static int i802_set_freq(void *priv
, struct hostapd_freq_params
*freq
);
277 static int nl80211_disable_11b_rates(struct wpa_driver_nl80211_data
*drv
,
278 int ifindex
, int disabled
);
280 static int nl80211_leave_ibss(struct wpa_driver_nl80211_data
*drv
);
283 static int is_ap_interface(enum nl80211_iftype nlmode
)
285 return (nlmode
== NL80211_IFTYPE_AP
||
286 nlmode
== NL80211_IFTYPE_P2P_GO
);
290 static int is_sta_interface(enum nl80211_iftype nlmode
)
292 return (nlmode
== NL80211_IFTYPE_STATION
||
293 nlmode
== NL80211_IFTYPE_P2P_CLIENT
);
297 static int is_p2p_interface(enum nl80211_iftype nlmode
)
299 return (nlmode
== NL80211_IFTYPE_P2P_CLIENT
||
300 nlmode
== NL80211_IFTYPE_P2P_GO
);
304 struct nl80211_bss_info_arg
{
305 struct wpa_driver_nl80211_data
*drv
;
306 struct wpa_scan_results
*res
;
307 unsigned int assoc_freq
;
308 u8 assoc_bssid
[ETH_ALEN
];
311 static int bss_info_handler(struct nl_msg
*msg
, void *arg
);
315 static int ack_handler(struct nl_msg
*msg
, void *arg
)
322 static int finish_handler(struct nl_msg
*msg
, void *arg
)
329 static int error_handler(struct sockaddr_nl
*nla
, struct nlmsgerr
*err
,
338 static int no_seq_check(struct nl_msg
*msg
, void *arg
)
344 static int send_and_recv(struct wpa_driver_nl80211_data
*drv
,
345 struct nl_handle
*nl_handle
, struct nl_msg
*msg
,
346 int (*valid_handler
)(struct nl_msg
*, void *),
352 cb
= nl_cb_clone(drv
->global
->nl_cb
);
356 err
= nl_send_auto_complete(nl_handle
, msg
);
362 nl_cb_err(cb
, NL_CB_CUSTOM
, error_handler
, &err
);
363 nl_cb_set(cb
, NL_CB_FINISH
, NL_CB_CUSTOM
, finish_handler
, &err
);
364 nl_cb_set(cb
, NL_CB_ACK
, NL_CB_CUSTOM
, ack_handler
, &err
);
367 nl_cb_set(cb
, NL_CB_VALID
, NL_CB_CUSTOM
,
368 valid_handler
, valid_data
);
371 nl_recvmsgs(nl_handle
, cb
);
379 static int send_and_recv_msgs(struct wpa_driver_nl80211_data
*drv
,
381 int (*valid_handler
)(struct nl_msg
*, void *),
384 return send_and_recv(drv
, drv
->global
->nl
.handle
, msg
, valid_handler
,
395 static int family_handler(struct nl_msg
*msg
, void *arg
)
397 struct family_data
*res
= arg
;
398 struct nlattr
*tb
[CTRL_ATTR_MAX
+ 1];
399 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
400 struct nlattr
*mcgrp
;
403 nla_parse(tb
, CTRL_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
404 genlmsg_attrlen(gnlh
, 0), NULL
);
405 if (!tb
[CTRL_ATTR_MCAST_GROUPS
])
408 nla_for_each_nested(mcgrp
, tb
[CTRL_ATTR_MCAST_GROUPS
], i
) {
409 struct nlattr
*tb2
[CTRL_ATTR_MCAST_GRP_MAX
+ 1];
410 nla_parse(tb2
, CTRL_ATTR_MCAST_GRP_MAX
, nla_data(mcgrp
),
411 nla_len(mcgrp
), NULL
);
412 if (!tb2
[CTRL_ATTR_MCAST_GRP_NAME
] ||
413 !tb2
[CTRL_ATTR_MCAST_GRP_ID
] ||
414 os_strncmp(nla_data(tb2
[CTRL_ATTR_MCAST_GRP_NAME
]),
416 nla_len(tb2
[CTRL_ATTR_MCAST_GRP_NAME
])) != 0)
418 res
->id
= nla_get_u32(tb2
[CTRL_ATTR_MCAST_GRP_ID
]);
426 static int nl_get_multicast_id(struct wpa_driver_nl80211_data
*drv
,
427 const char *family
, const char *group
)
431 struct family_data res
= { group
, -ENOENT
};
436 genlmsg_put(msg
, 0, 0,
437 genl_ctrl_resolve(drv
->global
->nl
.handle
, "nlctrl"),
438 0, 0, CTRL_CMD_GETFAMILY
, 0);
439 NLA_PUT_STRING(msg
, CTRL_ATTR_FAMILY_NAME
, family
);
441 ret
= send_and_recv_msgs(drv
, msg
, family_handler
, &res
);
452 static void * nl80211_cmd(struct wpa_driver_nl80211_data
*drv
,
453 struct nl_msg
*msg
, int flags
, uint8_t cmd
)
455 return genlmsg_put(msg
, 0, 0, drv
->global
->nl80211_id
,
460 static int wpa_driver_nl80211_get_bssid(void *priv
, u8
*bssid
)
462 struct i802_bss
*bss
= priv
;
463 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
464 if (!drv
->associated
)
466 os_memcpy(bssid
, drv
->bssid
, ETH_ALEN
);
471 static int wpa_driver_nl80211_get_ssid(void *priv
, u8
*ssid
)
473 struct i802_bss
*bss
= priv
;
474 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
475 if (!drv
->associated
)
477 os_memcpy(ssid
, drv
->ssid
, drv
->ssid_len
);
478 return drv
->ssid_len
;
482 static void wpa_driver_nl80211_event_link(struct wpa_driver_nl80211_data
*drv
,
483 char *buf
, size_t len
, int del
)
485 union wpa_event_data event
;
487 os_memset(&event
, 0, sizeof(event
));
488 if (len
> sizeof(event
.interface_status
.ifname
))
489 len
= sizeof(event
.interface_status
.ifname
) - 1;
490 os_memcpy(event
.interface_status
.ifname
, buf
, len
);
491 event
.interface_status
.ievent
= del
? EVENT_INTERFACE_REMOVED
:
492 EVENT_INTERFACE_ADDED
;
494 wpa_printf(MSG_DEBUG
, "RTM_%sLINK, IFLA_IFNAME: Interface '%s' %s",
496 event
.interface_status
.ifname
,
497 del
? "removed" : "added");
499 if (os_strcmp(drv
->first_bss
.ifname
, event
.interface_status
.ifname
) == 0) {
506 wpa_supplicant_event(drv
->ctx
, EVENT_INTERFACE_STATUS
, &event
);
510 static int wpa_driver_nl80211_own_ifname(struct wpa_driver_nl80211_data
*drv
,
513 int attrlen
, rta_len
;
517 attr
= (struct rtattr
*) buf
;
519 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
520 while (RTA_OK(attr
, attrlen
)) {
521 if (attr
->rta_type
== IFLA_IFNAME
) {
522 if (os_strcmp(((char *) attr
) + rta_len
, drv
->first_bss
.ifname
)
528 attr
= RTA_NEXT(attr
, attrlen
);
535 static int wpa_driver_nl80211_own_ifindex(struct wpa_driver_nl80211_data
*drv
,
536 int ifindex
, u8
*buf
, size_t len
)
538 if (drv
->ifindex
== ifindex
)
541 if (drv
->if_removed
&& wpa_driver_nl80211_own_ifname(drv
, buf
, len
)) {
542 drv
->first_bss
.ifindex
= if_nametoindex(drv
->first_bss
.ifname
);
543 wpa_printf(MSG_DEBUG
, "nl80211: Update ifindex for a removed "
545 wpa_driver_nl80211_finish_drv_init(drv
);
553 static struct wpa_driver_nl80211_data
*
554 nl80211_find_drv(struct nl80211_global
*global
, int idx
, u8
*buf
, size_t len
)
556 struct wpa_driver_nl80211_data
*drv
;
557 dl_list_for_each(drv
, &global
->interfaces
,
558 struct wpa_driver_nl80211_data
, list
) {
559 if (wpa_driver_nl80211_own_ifindex(drv
, idx
, buf
, len
) ||
560 have_ifidx(drv
, idx
))
567 static void wpa_driver_nl80211_event_rtm_newlink(void *ctx
,
568 struct ifinfomsg
*ifi
,
571 struct nl80211_global
*global
= ctx
;
572 struct wpa_driver_nl80211_data
*drv
;
573 int attrlen
, rta_len
;
577 drv
= nl80211_find_drv(global
, ifi
->ifi_index
, buf
, len
);
579 wpa_printf(MSG_DEBUG
, "nl80211: Ignore event for foreign "
580 "ifindex %d", ifi
->ifi_index
);
584 wpa_printf(MSG_DEBUG
, "RTM_NEWLINK: operstate=%d ifi_flags=0x%x "
586 drv
->operstate
, ifi
->ifi_flags
,
587 (ifi
->ifi_flags
& IFF_UP
) ? "[UP]" : "",
588 (ifi
->ifi_flags
& IFF_RUNNING
) ? "[RUNNING]" : "",
589 (ifi
->ifi_flags
& IFF_LOWER_UP
) ? "[LOWER_UP]" : "",
590 (ifi
->ifi_flags
& IFF_DORMANT
) ? "[DORMANT]" : "");
592 if (!drv
->if_disabled
&& !(ifi
->ifi_flags
& IFF_UP
)) {
593 char namebuf
[IFNAMSIZ
];
594 if (if_indextoname(ifi
->ifi_index
, namebuf
) &&
595 linux_iface_up(drv
->global
->ioctl_sock
,
596 drv
->first_bss
.ifname
) > 0) {
597 wpa_printf(MSG_DEBUG
, "nl80211: Ignore interface down "
598 "event since interface %s is up", namebuf
);
601 wpa_printf(MSG_DEBUG
, "nl80211: Interface down");
602 if (drv
->ignore_if_down_event
) {
603 wpa_printf(MSG_DEBUG
, "nl80211: Ignore interface down "
604 "event generated by mode change");
605 drv
->ignore_if_down_event
= 0;
607 drv
->if_disabled
= 1;
608 wpa_supplicant_event(drv
->ctx
,
609 EVENT_INTERFACE_DISABLED
, NULL
);
613 if (drv
->if_disabled
&& (ifi
->ifi_flags
& IFF_UP
)) {
614 wpa_printf(MSG_DEBUG
, "nl80211: Interface up");
615 drv
->if_disabled
= 0;
616 wpa_supplicant_event(drv
->ctx
, EVENT_INTERFACE_ENABLED
, NULL
);
620 * Some drivers send the association event before the operup event--in
621 * this case, lifting operstate in wpa_driver_nl80211_set_operstate()
622 * fails. This will hit us when wpa_supplicant does not need to do
623 * IEEE 802.1X authentication
625 if (drv
->operstate
== 1 &&
626 (ifi
->ifi_flags
& (IFF_LOWER_UP
| IFF_DORMANT
)) == IFF_LOWER_UP
&&
627 !(ifi
->ifi_flags
& IFF_RUNNING
))
628 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
,
632 attr
= (struct rtattr
*) buf
;
633 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
634 while (RTA_OK(attr
, attrlen
)) {
635 if (attr
->rta_type
== IFLA_IFNAME
) {
636 wpa_driver_nl80211_event_link(
638 ((char *) attr
) + rta_len
,
639 attr
->rta_len
- rta_len
, 0);
640 } else if (attr
->rta_type
== IFLA_MASTER
)
641 brid
= nla_get_u32((struct nlattr
*) attr
);
642 attr
= RTA_NEXT(attr
, attrlen
);
645 if (ifi
->ifi_family
== AF_BRIDGE
&& brid
) {
646 /* device has been added to bridge */
647 char namebuf
[IFNAMSIZ
];
648 if_indextoname(brid
, namebuf
);
649 wpa_printf(MSG_DEBUG
, "nl80211: Add ifindex %u for bridge %s",
651 add_ifidx(drv
, brid
);
656 static void wpa_driver_nl80211_event_rtm_dellink(void *ctx
,
657 struct ifinfomsg
*ifi
,
660 struct nl80211_global
*global
= ctx
;
661 struct wpa_driver_nl80211_data
*drv
;
662 int attrlen
, rta_len
;
666 drv
= nl80211_find_drv(global
, ifi
->ifi_index
, buf
, len
);
668 wpa_printf(MSG_DEBUG
, "nl80211: Ignore dellink event for "
669 "foreign ifindex %d", ifi
->ifi_index
);
674 attr
= (struct rtattr
*) buf
;
676 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
677 while (RTA_OK(attr
, attrlen
)) {
678 if (attr
->rta_type
== IFLA_IFNAME
) {
679 wpa_driver_nl80211_event_link(
681 ((char *) attr
) + rta_len
,
682 attr
->rta_len
- rta_len
, 1);
683 } else if (attr
->rta_type
== IFLA_MASTER
)
684 brid
= nla_get_u32((struct nlattr
*) attr
);
685 attr
= RTA_NEXT(attr
, attrlen
);
688 if (ifi
->ifi_family
== AF_BRIDGE
&& brid
) {
689 /* device has been removed from bridge */
690 char namebuf
[IFNAMSIZ
];
691 if_indextoname(brid
, namebuf
);
692 wpa_printf(MSG_DEBUG
, "nl80211: Remove ifindex %u for bridge "
693 "%s", brid
, namebuf
);
694 del_ifidx(drv
, brid
);
699 static void mlme_event_auth(struct wpa_driver_nl80211_data
*drv
,
700 const u8
*frame
, size_t len
)
702 const struct ieee80211_mgmt
*mgmt
;
703 union wpa_event_data event
;
705 mgmt
= (const struct ieee80211_mgmt
*) frame
;
706 if (len
< 24 + sizeof(mgmt
->u
.auth
)) {
707 wpa_printf(MSG_DEBUG
, "nl80211: Too short association event "
712 os_memcpy(drv
->auth_bssid
, mgmt
->sa
, ETH_ALEN
);
713 os_memset(&event
, 0, sizeof(event
));
714 os_memcpy(event
.auth
.peer
, mgmt
->sa
, ETH_ALEN
);
715 event
.auth
.auth_type
= le_to_host16(mgmt
->u
.auth
.auth_alg
);
716 event
.auth
.status_code
= le_to_host16(mgmt
->u
.auth
.status_code
);
717 if (len
> 24 + sizeof(mgmt
->u
.auth
)) {
718 event
.auth
.ies
= mgmt
->u
.auth
.variable
;
719 event
.auth
.ies_len
= len
- 24 - sizeof(mgmt
->u
.auth
);
722 wpa_supplicant_event(drv
->ctx
, EVENT_AUTH
, &event
);
726 static unsigned int nl80211_get_assoc_freq(struct wpa_driver_nl80211_data
*drv
)
730 struct nl80211_bss_info_arg arg
;
732 os_memset(&arg
, 0, sizeof(arg
));
735 goto nla_put_failure
;
737 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
738 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
741 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
744 wpa_printf(MSG_DEBUG
, "nl80211: Operating frequency for the "
745 "associated BSS from scan results: %u MHz",
747 return arg
.assoc_freq
? arg
.assoc_freq
: drv
->assoc_freq
;
749 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
750 "(%s)", ret
, strerror(-ret
));
753 return drv
->assoc_freq
;
757 static void mlme_event_assoc(struct wpa_driver_nl80211_data
*drv
,
758 const u8
*frame
, size_t len
)
760 const struct ieee80211_mgmt
*mgmt
;
761 union wpa_event_data event
;
764 mgmt
= (const struct ieee80211_mgmt
*) frame
;
765 if (len
< 24 + sizeof(mgmt
->u
.assoc_resp
)) {
766 wpa_printf(MSG_DEBUG
, "nl80211: Too short association event "
771 status
= le_to_host16(mgmt
->u
.assoc_resp
.status_code
);
772 if (status
!= WLAN_STATUS_SUCCESS
) {
773 os_memset(&event
, 0, sizeof(event
));
774 event
.assoc_reject
.bssid
= mgmt
->bssid
;
775 if (len
> 24 + sizeof(mgmt
->u
.assoc_resp
)) {
776 event
.assoc_reject
.resp_ies
=
777 (u8
*) mgmt
->u
.assoc_resp
.variable
;
778 event
.assoc_reject
.resp_ies_len
=
779 len
- 24 - sizeof(mgmt
->u
.assoc_resp
);
781 event
.assoc_reject
.status_code
= status
;
783 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC_REJECT
, &event
);
788 os_memcpy(drv
->bssid
, mgmt
->sa
, ETH_ALEN
);
790 os_memset(&event
, 0, sizeof(event
));
791 if (len
> 24 + sizeof(mgmt
->u
.assoc_resp
)) {
792 event
.assoc_info
.resp_ies
= (u8
*) mgmt
->u
.assoc_resp
.variable
;
793 event
.assoc_info
.resp_ies_len
=
794 len
- 24 - sizeof(mgmt
->u
.assoc_resp
);
797 event
.assoc_info
.freq
= drv
->assoc_freq
;
799 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, &event
);
803 static void mlme_event_connect(struct wpa_driver_nl80211_data
*drv
,
804 enum nl80211_commands cmd
, struct nlattr
*status
,
805 struct nlattr
*addr
, struct nlattr
*req_ie
,
806 struct nlattr
*resp_ie
)
808 union wpa_event_data event
;
810 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
812 * Avoid reporting two association events that would confuse
815 wpa_printf(MSG_DEBUG
, "nl80211: Ignore connect event (cmd=%d) "
816 "when using userspace SME", cmd
);
820 os_memset(&event
, 0, sizeof(event
));
821 if (cmd
== NL80211_CMD_CONNECT
&&
822 nla_get_u16(status
) != WLAN_STATUS_SUCCESS
) {
824 event
.assoc_reject
.bssid
= nla_data(addr
);
826 event
.assoc_reject
.resp_ies
= nla_data(resp_ie
);
827 event
.assoc_reject
.resp_ies_len
= nla_len(resp_ie
);
829 event
.assoc_reject
.status_code
= nla_get_u16(status
);
830 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC_REJECT
, &event
);
836 os_memcpy(drv
->bssid
, nla_data(addr
), ETH_ALEN
);
839 event
.assoc_info
.req_ies
= nla_data(req_ie
);
840 event
.assoc_info
.req_ies_len
= nla_len(req_ie
);
843 event
.assoc_info
.resp_ies
= nla_data(resp_ie
);
844 event
.assoc_info
.resp_ies_len
= nla_len(resp_ie
);
847 event
.assoc_info
.freq
= nl80211_get_assoc_freq(drv
);
849 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, &event
);
853 static void mlme_event_disconnect(struct wpa_driver_nl80211_data
*drv
,
854 struct nlattr
*reason
, struct nlattr
*addr
)
856 union wpa_event_data data
;
858 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
860 * Avoid reporting two disassociation events that could
861 * confuse the core code.
863 wpa_printf(MSG_DEBUG
, "nl80211: Ignore disconnect "
864 "event when using userspace SME");
869 os_memset(&data
, 0, sizeof(data
));
871 data
.disassoc_info
.reason_code
= nla_get_u16(reason
);
872 wpa_supplicant_event(drv
->ctx
, EVENT_DISASSOC
, &data
);
876 static void mlme_timeout_event(struct wpa_driver_nl80211_data
*drv
,
877 enum nl80211_commands cmd
, struct nlattr
*addr
)
879 union wpa_event_data event
;
880 enum wpa_event_type ev
;
882 if (nla_len(addr
) != ETH_ALEN
)
885 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d; timeout with " MACSTR
,
886 cmd
, MAC2STR((u8
*) nla_data(addr
)));
888 if (cmd
== NL80211_CMD_AUTHENTICATE
)
889 ev
= EVENT_AUTH_TIMED_OUT
;
890 else if (cmd
== NL80211_CMD_ASSOCIATE
)
891 ev
= EVENT_ASSOC_TIMED_OUT
;
895 os_memset(&event
, 0, sizeof(event
));
896 os_memcpy(event
.timeout_event
.addr
, nla_data(addr
), ETH_ALEN
);
897 wpa_supplicant_event(drv
->ctx
, ev
, &event
);
901 static void mlme_event_mgmt(struct wpa_driver_nl80211_data
*drv
,
902 struct nlattr
*freq
, const u8
*frame
, size_t len
)
904 const struct ieee80211_mgmt
*mgmt
;
905 union wpa_event_data event
;
908 mgmt
= (const struct ieee80211_mgmt
*) frame
;
910 wpa_printf(MSG_DEBUG
, "nl80211: Too short action frame");
914 fc
= le_to_host16(mgmt
->frame_control
);
915 stype
= WLAN_FC_GET_STYPE(fc
);
917 os_memset(&event
, 0, sizeof(event
));
919 event
.rx_action
.freq
= nla_get_u32(freq
);
920 drv
->last_mgmt_freq
= event
.rx_action
.freq
;
922 if (stype
== WLAN_FC_STYPE_ACTION
) {
923 event
.rx_action
.da
= mgmt
->da
;
924 event
.rx_action
.sa
= mgmt
->sa
;
925 event
.rx_action
.bssid
= mgmt
->bssid
;
926 event
.rx_action
.category
= mgmt
->u
.action
.category
;
927 event
.rx_action
.data
= &mgmt
->u
.action
.category
+ 1;
928 event
.rx_action
.len
= frame
+ len
- event
.rx_action
.data
;
929 wpa_supplicant_event(drv
->ctx
, EVENT_RX_ACTION
, &event
);
931 event
.rx_mgmt
.frame
= frame
;
932 event
.rx_mgmt
.frame_len
= len
;
933 wpa_supplicant_event(drv
->ctx
, EVENT_RX_MGMT
, &event
);
938 static void mlme_event_action_tx_status(struct wpa_driver_nl80211_data
*drv
,
939 struct nlattr
*cookie
, const u8
*frame
,
940 size_t len
, struct nlattr
*ack
)
942 union wpa_event_data event
;
943 const struct ieee80211_hdr
*hdr
;
950 cookie_val
= nla_get_u64(cookie
);
951 wpa_printf(MSG_DEBUG
, "nl80211: Action TX status: cookie=0%llx%s "
953 (long long unsigned int) cookie_val
,
954 cookie_val
== drv
->send_action_cookie
?
955 " (match)" : " (unknown)", ack
!= NULL
);
956 if (cookie_val
!= drv
->send_action_cookie
)
959 hdr
= (const struct ieee80211_hdr
*) frame
;
960 fc
= le_to_host16(hdr
->frame_control
);
962 os_memset(&event
, 0, sizeof(event
));
963 event
.tx_status
.type
= WLAN_FC_GET_TYPE(fc
);
964 event
.tx_status
.stype
= WLAN_FC_GET_STYPE(fc
);
965 event
.tx_status
.dst
= hdr
->addr1
;
966 event
.tx_status
.data
= frame
;
967 event
.tx_status
.data_len
= len
;
968 event
.tx_status
.ack
= ack
!= NULL
;
969 wpa_supplicant_event(drv
->ctx
, EVENT_TX_STATUS
, &event
);
973 static void mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data
*drv
,
974 enum wpa_event_type type
,
975 const u8
*frame
, size_t len
)
977 const struct ieee80211_mgmt
*mgmt
;
978 union wpa_event_data event
;
979 const u8
*bssid
= NULL
;
982 mgmt
= (const struct ieee80211_mgmt
*) frame
;
986 if (drv
->associated
!= 0 &&
987 os_memcmp(bssid
, drv
->bssid
, ETH_ALEN
) != 0 &&
988 os_memcmp(bssid
, drv
->auth_bssid
, ETH_ALEN
) != 0) {
990 * We have presumably received this deauth as a
991 * response to a clear_state_mismatch() outgoing
992 * deauth. Don't let it take us offline!
994 wpa_printf(MSG_DEBUG
, "nl80211: Deauth received "
995 "from Unknown BSSID " MACSTR
" -- ignoring",
1001 drv
->associated
= 0;
1002 os_memset(&event
, 0, sizeof(event
));
1004 /* Note: Same offset for Reason Code in both frame subtypes */
1005 if (len
>= 24 + sizeof(mgmt
->u
.deauth
))
1006 reason_code
= le_to_host16(mgmt
->u
.deauth
.reason_code
);
1008 if (type
== EVENT_DISASSOC
) {
1009 event
.disassoc_info
.addr
= bssid
;
1010 event
.disassoc_info
.reason_code
= reason_code
;
1011 if (frame
+ len
> mgmt
->u
.disassoc
.variable
) {
1012 event
.disassoc_info
.ie
= mgmt
->u
.disassoc
.variable
;
1013 event
.disassoc_info
.ie_len
= frame
+ len
-
1014 mgmt
->u
.disassoc
.variable
;
1017 event
.deauth_info
.addr
= bssid
;
1018 event
.deauth_info
.reason_code
= reason_code
;
1019 if (frame
+ len
> mgmt
->u
.deauth
.variable
) {
1020 event
.deauth_info
.ie
= mgmt
->u
.deauth
.variable
;
1021 event
.deauth_info
.ie_len
= frame
+ len
-
1022 mgmt
->u
.deauth
.variable
;
1026 wpa_supplicant_event(drv
->ctx
, type
, &event
);
1030 static void mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data
*drv
,
1031 enum wpa_event_type type
,
1032 const u8
*frame
, size_t len
)
1034 const struct ieee80211_mgmt
*mgmt
;
1035 union wpa_event_data event
;
1036 u16 reason_code
= 0;
1041 mgmt
= (const struct ieee80211_mgmt
*) frame
;
1043 os_memset(&event
, 0, sizeof(event
));
1044 /* Note: Same offset for Reason Code in both frame subtypes */
1045 if (len
>= 24 + sizeof(mgmt
->u
.deauth
))
1046 reason_code
= le_to_host16(mgmt
->u
.deauth
.reason_code
);
1048 if (type
== EVENT_UNPROT_DISASSOC
) {
1049 event
.unprot_disassoc
.sa
= mgmt
->sa
;
1050 event
.unprot_disassoc
.da
= mgmt
->da
;
1051 event
.unprot_disassoc
.reason_code
= reason_code
;
1053 event
.unprot_deauth
.sa
= mgmt
->sa
;
1054 event
.unprot_deauth
.da
= mgmt
->da
;
1055 event
.unprot_deauth
.reason_code
= reason_code
;
1058 wpa_supplicant_event(drv
->ctx
, type
, &event
);
1062 static void mlme_event(struct wpa_driver_nl80211_data
*drv
,
1063 enum nl80211_commands cmd
, struct nlattr
*frame
,
1064 struct nlattr
*addr
, struct nlattr
*timed_out
,
1065 struct nlattr
*freq
, struct nlattr
*ack
,
1066 struct nlattr
*cookie
)
1068 if (timed_out
&& addr
) {
1069 mlme_timeout_event(drv
, cmd
, addr
);
1073 if (frame
== NULL
) {
1074 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d without frame "
1079 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d", cmd
);
1080 wpa_hexdump(MSG_MSGDUMP
, "nl80211: MLME event frame",
1081 nla_data(frame
), nla_len(frame
));
1084 case NL80211_CMD_AUTHENTICATE
:
1085 mlme_event_auth(drv
, nla_data(frame
), nla_len(frame
));
1087 case NL80211_CMD_ASSOCIATE
:
1088 mlme_event_assoc(drv
, nla_data(frame
), nla_len(frame
));
1090 case NL80211_CMD_DEAUTHENTICATE
:
1091 mlme_event_deauth_disassoc(drv
, EVENT_DEAUTH
,
1092 nla_data(frame
), nla_len(frame
));
1094 case NL80211_CMD_DISASSOCIATE
:
1095 mlme_event_deauth_disassoc(drv
, EVENT_DISASSOC
,
1096 nla_data(frame
), nla_len(frame
));
1098 case NL80211_CMD_FRAME
:
1099 mlme_event_mgmt(drv
, freq
, nla_data(frame
), nla_len(frame
));
1101 case NL80211_CMD_FRAME_TX_STATUS
:
1102 mlme_event_action_tx_status(drv
, cookie
, nla_data(frame
),
1103 nla_len(frame
), ack
);
1105 case NL80211_CMD_UNPROT_DEAUTHENTICATE
:
1106 mlme_event_unprot_disconnect(drv
, EVENT_UNPROT_DEAUTH
,
1107 nla_data(frame
), nla_len(frame
));
1109 case NL80211_CMD_UNPROT_DISASSOCIATE
:
1110 mlme_event_unprot_disconnect(drv
, EVENT_UNPROT_DISASSOC
,
1111 nla_data(frame
), nla_len(frame
));
1119 static void mlme_event_michael_mic_failure(struct wpa_driver_nl80211_data
*drv
,
1120 struct nlattr
*tb
[])
1122 union wpa_event_data data
;
1124 wpa_printf(MSG_DEBUG
, "nl80211: MLME event Michael MIC failure");
1125 os_memset(&data
, 0, sizeof(data
));
1126 if (tb
[NL80211_ATTR_MAC
]) {
1127 wpa_hexdump(MSG_DEBUG
, "nl80211: Source MAC address",
1128 nla_data(tb
[NL80211_ATTR_MAC
]),
1129 nla_len(tb
[NL80211_ATTR_MAC
]));
1130 data
.michael_mic_failure
.src
= nla_data(tb
[NL80211_ATTR_MAC
]);
1132 if (tb
[NL80211_ATTR_KEY_SEQ
]) {
1133 wpa_hexdump(MSG_DEBUG
, "nl80211: TSC",
1134 nla_data(tb
[NL80211_ATTR_KEY_SEQ
]),
1135 nla_len(tb
[NL80211_ATTR_KEY_SEQ
]));
1137 if (tb
[NL80211_ATTR_KEY_TYPE
]) {
1138 enum nl80211_key_type key_type
=
1139 nla_get_u32(tb
[NL80211_ATTR_KEY_TYPE
]);
1140 wpa_printf(MSG_DEBUG
, "nl80211: Key Type %d", key_type
);
1141 if (key_type
== NL80211_KEYTYPE_PAIRWISE
)
1142 data
.michael_mic_failure
.unicast
= 1;
1144 data
.michael_mic_failure
.unicast
= 1;
1146 if (tb
[NL80211_ATTR_KEY_IDX
]) {
1147 u8 key_id
= nla_get_u8(tb
[NL80211_ATTR_KEY_IDX
]);
1148 wpa_printf(MSG_DEBUG
, "nl80211: Key Id %d", key_id
);
1151 wpa_supplicant_event(drv
->ctx
, EVENT_MICHAEL_MIC_FAILURE
, &data
);
1155 static void mlme_event_join_ibss(struct wpa_driver_nl80211_data
*drv
,
1156 struct nlattr
*tb
[])
1158 if (tb
[NL80211_ATTR_MAC
] == NULL
) {
1159 wpa_printf(MSG_DEBUG
, "nl80211: No address in IBSS joined "
1163 os_memcpy(drv
->bssid
, nla_data(tb
[NL80211_ATTR_MAC
]), ETH_ALEN
);
1164 drv
->associated
= 1;
1165 wpa_printf(MSG_DEBUG
, "nl80211: IBSS " MACSTR
" joined",
1166 MAC2STR(drv
->bssid
));
1168 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, NULL
);
1172 static void mlme_event_remain_on_channel(struct wpa_driver_nl80211_data
*drv
,
1173 int cancel_event
, struct nlattr
*tb
[])
1175 unsigned int freq
, chan_type
, duration
;
1176 union wpa_event_data data
;
1179 if (tb
[NL80211_ATTR_WIPHY_FREQ
])
1180 freq
= nla_get_u32(tb
[NL80211_ATTR_WIPHY_FREQ
]);
1184 if (tb
[NL80211_ATTR_WIPHY_CHANNEL_TYPE
])
1185 chan_type
= nla_get_u32(tb
[NL80211_ATTR_WIPHY_CHANNEL_TYPE
]);
1189 if (tb
[NL80211_ATTR_DURATION
])
1190 duration
= nla_get_u32(tb
[NL80211_ATTR_DURATION
]);
1194 if (tb
[NL80211_ATTR_COOKIE
])
1195 cookie
= nla_get_u64(tb
[NL80211_ATTR_COOKIE
]);
1199 wpa_printf(MSG_DEBUG
, "nl80211: Remain-on-channel event (cancel=%d "
1200 "freq=%u channel_type=%u duration=%u cookie=0x%llx (%s))",
1201 cancel_event
, freq
, chan_type
, duration
,
1202 (long long unsigned int) cookie
,
1203 cookie
== drv
->remain_on_chan_cookie
? "match" : "unknown");
1205 if (cookie
!= drv
->remain_on_chan_cookie
)
1206 return; /* not for us */
1209 drv
->pending_remain_on_chan
= 0;
1211 os_memset(&data
, 0, sizeof(data
));
1212 data
.remain_on_channel
.freq
= freq
;
1213 data
.remain_on_channel
.duration
= duration
;
1214 wpa_supplicant_event(drv
->ctx
, cancel_event
?
1215 EVENT_CANCEL_REMAIN_ON_CHANNEL
:
1216 EVENT_REMAIN_ON_CHANNEL
, &data
);
1220 static void send_scan_event(struct wpa_driver_nl80211_data
*drv
, int aborted
,
1221 struct nlattr
*tb
[])
1223 union wpa_event_data event
;
1226 struct scan_info
*info
;
1227 #define MAX_REPORT_FREQS 50
1228 int freqs
[MAX_REPORT_FREQS
];
1231 os_memset(&event
, 0, sizeof(event
));
1232 info
= &event
.scan_info
;
1233 info
->aborted
= aborted
;
1235 if (tb
[NL80211_ATTR_SCAN_SSIDS
]) {
1236 nla_for_each_nested(nl
, tb
[NL80211_ATTR_SCAN_SSIDS
], rem
) {
1237 struct wpa_driver_scan_ssid
*s
=
1238 &info
->ssids
[info
->num_ssids
];
1239 s
->ssid
= nla_data(nl
);
1240 s
->ssid_len
= nla_len(nl
);
1242 if (info
->num_ssids
== WPAS_MAX_SCAN_SSIDS
)
1246 if (tb
[NL80211_ATTR_SCAN_FREQUENCIES
]) {
1247 nla_for_each_nested(nl
, tb
[NL80211_ATTR_SCAN_FREQUENCIES
], rem
)
1249 freqs
[num_freqs
] = nla_get_u32(nl
);
1251 if (num_freqs
== MAX_REPORT_FREQS
- 1)
1254 info
->freqs
= freqs
;
1255 info
->num_freqs
= num_freqs
;
1257 wpa_supplicant_event(drv
->ctx
, EVENT_SCAN_RESULTS
, &event
);
1261 static int get_link_signal(struct nl_msg
*msg
, void *arg
)
1263 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1264 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1265 struct nlattr
*sinfo
[NL80211_STA_INFO_MAX
+ 1];
1266 static struct nla_policy policy
[NL80211_STA_INFO_MAX
+ 1] = {
1267 [NL80211_STA_INFO_SIGNAL
] = { .type
= NLA_U8
},
1269 struct nlattr
*rinfo
[NL80211_RATE_INFO_MAX
+ 1];
1270 static struct nla_policy rate_policy
[NL80211_RATE_INFO_MAX
+ 1] = {
1271 [NL80211_RATE_INFO_BITRATE
] = { .type
= NLA_U16
},
1272 [NL80211_RATE_INFO_MCS
] = { .type
= NLA_U8
},
1273 [NL80211_RATE_INFO_40_MHZ_WIDTH
] = { .type
= NLA_FLAG
},
1274 [NL80211_RATE_INFO_SHORT_GI
] = { .type
= NLA_FLAG
},
1276 struct wpa_signal_info
*sig_change
= arg
;
1278 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1279 genlmsg_attrlen(gnlh
, 0), NULL
);
1280 if (!tb
[NL80211_ATTR_STA_INFO
] ||
1281 nla_parse_nested(sinfo
, NL80211_STA_INFO_MAX
,
1282 tb
[NL80211_ATTR_STA_INFO
], policy
))
1284 if (!sinfo
[NL80211_STA_INFO_SIGNAL
])
1287 sig_change
->current_signal
=
1288 (s8
) nla_get_u8(sinfo
[NL80211_STA_INFO_SIGNAL
]);
1290 if (sinfo
[NL80211_STA_INFO_TX_BITRATE
]) {
1291 if (nla_parse_nested(rinfo
, NL80211_RATE_INFO_MAX
,
1292 sinfo
[NL80211_STA_INFO_TX_BITRATE
],
1294 sig_change
->current_txrate
= 0;
1296 if (rinfo
[NL80211_RATE_INFO_BITRATE
]) {
1297 sig_change
->current_txrate
=
1299 NL80211_RATE_INFO_BITRATE
]) * 100;
1308 static int nl80211_get_link_signal(struct wpa_driver_nl80211_data
*drv
,
1309 struct wpa_signal_info
*sig
)
1313 sig
->current_signal
= -9999;
1314 sig
->current_txrate
= 0;
1316 msg
= nlmsg_alloc();
1320 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_STATION
);
1322 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1323 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, drv
->bssid
);
1325 return send_and_recv_msgs(drv
, msg
, get_link_signal
, sig
);
1331 static int get_link_noise(struct nl_msg
*msg
, void *arg
)
1333 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1334 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1335 struct nlattr
*sinfo
[NL80211_SURVEY_INFO_MAX
+ 1];
1336 static struct nla_policy survey_policy
[NL80211_SURVEY_INFO_MAX
+ 1] = {
1337 [NL80211_SURVEY_INFO_FREQUENCY
] = { .type
= NLA_U32
},
1338 [NL80211_SURVEY_INFO_NOISE
] = { .type
= NLA_U8
},
1340 struct wpa_signal_info
*sig_change
= arg
;
1342 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1343 genlmsg_attrlen(gnlh
, 0), NULL
);
1345 if (!tb
[NL80211_ATTR_SURVEY_INFO
]) {
1346 wpa_printf(MSG_DEBUG
, "nl80211: survey data missing!");
1350 if (nla_parse_nested(sinfo
, NL80211_SURVEY_INFO_MAX
,
1351 tb
[NL80211_ATTR_SURVEY_INFO
],
1353 wpa_printf(MSG_DEBUG
, "nl80211: failed to parse nested "
1358 if (!sinfo
[NL80211_SURVEY_INFO_FREQUENCY
])
1361 if (nla_get_u32(sinfo
[NL80211_SURVEY_INFO_FREQUENCY
]) !=
1362 sig_change
->frequency
)
1365 if (!sinfo
[NL80211_SURVEY_INFO_NOISE
])
1368 sig_change
->current_noise
=
1369 (s8
) nla_get_u8(sinfo
[NL80211_SURVEY_INFO_NOISE
]);
1375 static int nl80211_get_link_noise(struct wpa_driver_nl80211_data
*drv
,
1376 struct wpa_signal_info
*sig_change
)
1380 sig_change
->current_noise
= 9999;
1381 sig_change
->frequency
= drv
->assoc_freq
;
1383 msg
= nlmsg_alloc();
1387 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SURVEY
);
1389 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1391 return send_and_recv_msgs(drv
, msg
, get_link_noise
, sig_change
);
1397 static int get_noise_for_scan_results(struct nl_msg
*msg
, void *arg
)
1399 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1400 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1401 struct nlattr
*sinfo
[NL80211_SURVEY_INFO_MAX
+ 1];
1402 static struct nla_policy survey_policy
[NL80211_SURVEY_INFO_MAX
+ 1] = {
1403 [NL80211_SURVEY_INFO_FREQUENCY
] = { .type
= NLA_U32
},
1404 [NL80211_SURVEY_INFO_NOISE
] = { .type
= NLA_U8
},
1406 struct wpa_scan_results
*scan_results
= arg
;
1407 struct wpa_scan_res
*scan_res
;
1410 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1411 genlmsg_attrlen(gnlh
, 0), NULL
);
1413 if (!tb
[NL80211_ATTR_SURVEY_INFO
]) {
1414 wpa_printf(MSG_DEBUG
, "nl80211: Survey data missing");
1418 if (nla_parse_nested(sinfo
, NL80211_SURVEY_INFO_MAX
,
1419 tb
[NL80211_ATTR_SURVEY_INFO
],
1421 wpa_printf(MSG_DEBUG
, "nl80211: Failed to parse nested "
1426 if (!sinfo
[NL80211_SURVEY_INFO_NOISE
])
1429 if (!sinfo
[NL80211_SURVEY_INFO_FREQUENCY
])
1432 for (i
= 0; i
< scan_results
->num
; ++i
) {
1433 scan_res
= scan_results
->res
[i
];
1436 if ((int) nla_get_u32(sinfo
[NL80211_SURVEY_INFO_FREQUENCY
]) !=
1439 if (!(scan_res
->flags
& WPA_SCAN_NOISE_INVALID
))
1441 scan_res
->noise
= (s8
)
1442 nla_get_u8(sinfo
[NL80211_SURVEY_INFO_NOISE
]);
1443 scan_res
->flags
&= ~WPA_SCAN_NOISE_INVALID
;
1450 static int nl80211_get_noise_for_scan_results(
1451 struct wpa_driver_nl80211_data
*drv
,
1452 struct wpa_scan_results
*scan_res
)
1456 msg
= nlmsg_alloc();
1460 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SURVEY
);
1462 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1464 return send_and_recv_msgs(drv
, msg
, get_noise_for_scan_results
,
1471 static void nl80211_cqm_event(struct wpa_driver_nl80211_data
*drv
,
1472 struct nlattr
*tb
[])
1474 static struct nla_policy cqm_policy
[NL80211_ATTR_CQM_MAX
+ 1] = {
1475 [NL80211_ATTR_CQM_RSSI_THOLD
] = { .type
= NLA_U32
},
1476 [NL80211_ATTR_CQM_RSSI_HYST
] = { .type
= NLA_U8
},
1477 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
] = { .type
= NLA_U32
},
1478 [NL80211_ATTR_CQM_PKT_LOSS_EVENT
] = { .type
= NLA_U32
},
1480 struct nlattr
*cqm
[NL80211_ATTR_CQM_MAX
+ 1];
1481 enum nl80211_cqm_rssi_threshold_event event
;
1482 union wpa_event_data ed
;
1483 struct wpa_signal_info sig
;
1486 if (tb
[NL80211_ATTR_CQM
] == NULL
||
1487 nla_parse_nested(cqm
, NL80211_ATTR_CQM_MAX
, tb
[NL80211_ATTR_CQM
],
1489 wpa_printf(MSG_DEBUG
, "nl80211: Ignore invalid CQM event");
1493 os_memset(&ed
, 0, sizeof(ed
));
1495 if (cqm
[NL80211_ATTR_CQM_PKT_LOSS_EVENT
]) {
1496 if (!tb
[NL80211_ATTR_MAC
])
1498 os_memcpy(ed
.low_ack
.addr
, nla_data(tb
[NL80211_ATTR_MAC
]),
1500 wpa_supplicant_event(drv
->ctx
, EVENT_STATION_LOW_ACK
, &ed
);
1504 if (cqm
[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
] == NULL
)
1506 event
= nla_get_u32(cqm
[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
]);
1508 if (event
== NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH
) {
1509 wpa_printf(MSG_DEBUG
, "nl80211: Connection quality monitor "
1510 "event: RSSI high");
1511 ed
.signal_change
.above_threshold
= 1;
1512 } else if (event
== NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW
) {
1513 wpa_printf(MSG_DEBUG
, "nl80211: Connection quality monitor "
1515 ed
.signal_change
.above_threshold
= 0;
1519 res
= nl80211_get_link_signal(drv
, &sig
);
1521 ed
.signal_change
.current_signal
= sig
.current_signal
;
1522 ed
.signal_change
.current_txrate
= sig
.current_txrate
;
1523 wpa_printf(MSG_DEBUG
, "nl80211: Signal: %d dBm txrate: %d",
1524 sig
.current_signal
, sig
.current_txrate
);
1527 res
= nl80211_get_link_noise(drv
, &sig
);
1529 ed
.signal_change
.current_noise
= sig
.current_noise
;
1530 wpa_printf(MSG_DEBUG
, "nl80211: Noise: %d dBm",
1534 wpa_supplicant_event(drv
->ctx
, EVENT_SIGNAL_CHANGE
, &ed
);
1538 static void nl80211_new_station_event(struct wpa_driver_nl80211_data
*drv
,
1542 union wpa_event_data data
;
1544 if (tb
[NL80211_ATTR_MAC
] == NULL
)
1546 addr
= nla_data(tb
[NL80211_ATTR_MAC
]);
1547 wpa_printf(MSG_DEBUG
, "nl80211: New station " MACSTR
, MAC2STR(addr
));
1549 if (is_ap_interface(drv
->nlmode
) && drv
->no_monitor_iface_capab
) {
1552 if (tb
[NL80211_ATTR_IE
]) {
1553 ies
= nla_data(tb
[NL80211_ATTR_IE
]);
1554 ies_len
= nla_len(tb
[NL80211_ATTR_IE
]);
1556 wpa_hexdump(MSG_DEBUG
, "nl80211: Assoc Req IEs", ies
, ies_len
);
1557 drv_event_assoc(drv
->ctx
, addr
, ies
, ies_len
, 0);
1561 if (drv
->nlmode
!= NL80211_IFTYPE_ADHOC
)
1564 os_memset(&data
, 0, sizeof(data
));
1565 os_memcpy(data
.ibss_rsn_start
.peer
, addr
, ETH_ALEN
);
1566 wpa_supplicant_event(drv
->ctx
, EVENT_IBSS_RSN_START
, &data
);
1570 static void nl80211_del_station_event(struct wpa_driver_nl80211_data
*drv
,
1574 union wpa_event_data data
;
1576 if (tb
[NL80211_ATTR_MAC
] == NULL
)
1578 addr
= nla_data(tb
[NL80211_ATTR_MAC
]);
1579 wpa_printf(MSG_DEBUG
, "nl80211: Delete station " MACSTR
,
1582 if (is_ap_interface(drv
->nlmode
) && drv
->no_monitor_iface_capab
) {
1583 drv_event_disassoc(drv
->ctx
, addr
);
1587 if (drv
->nlmode
!= NL80211_IFTYPE_ADHOC
)
1590 os_memset(&data
, 0, sizeof(data
));
1591 os_memcpy(data
.ibss_peer_lost
.peer
, addr
, ETH_ALEN
);
1592 wpa_supplicant_event(drv
->ctx
, EVENT_IBSS_PEER_LOST
, &data
);
1596 static void nl80211_rekey_offload_event(struct wpa_driver_nl80211_data
*drv
,
1599 struct nlattr
*rekey_info
[NUM_NL80211_REKEY_DATA
];
1600 static struct nla_policy rekey_policy
[NUM_NL80211_REKEY_DATA
] = {
1601 [NL80211_REKEY_DATA_KEK
] = {
1602 .minlen
= NL80211_KEK_LEN
,
1603 .maxlen
= NL80211_KEK_LEN
,
1605 [NL80211_REKEY_DATA_KCK
] = {
1606 .minlen
= NL80211_KCK_LEN
,
1607 .maxlen
= NL80211_KCK_LEN
,
1609 [NL80211_REKEY_DATA_REPLAY_CTR
] = {
1610 .minlen
= NL80211_REPLAY_CTR_LEN
,
1611 .maxlen
= NL80211_REPLAY_CTR_LEN
,
1614 union wpa_event_data data
;
1616 if (!tb
[NL80211_ATTR_MAC
])
1618 if (!tb
[NL80211_ATTR_REKEY_DATA
])
1620 if (nla_parse_nested(rekey_info
, MAX_NL80211_REKEY_DATA
,
1621 tb
[NL80211_ATTR_REKEY_DATA
], rekey_policy
))
1623 if (!rekey_info
[NL80211_REKEY_DATA_REPLAY_CTR
])
1626 os_memset(&data
, 0, sizeof(data
));
1627 data
.driver_gtk_rekey
.bssid
= nla_data(tb
[NL80211_ATTR_MAC
]);
1628 wpa_printf(MSG_DEBUG
, "nl80211: Rekey offload event for BSSID " MACSTR
,
1629 MAC2STR(data
.driver_gtk_rekey
.bssid
));
1630 data
.driver_gtk_rekey
.replay_ctr
=
1631 nla_data(rekey_info
[NL80211_REKEY_DATA_REPLAY_CTR
]);
1632 wpa_hexdump(MSG_DEBUG
, "nl80211: Rekey offload - Replay Counter",
1633 data
.driver_gtk_rekey
.replay_ctr
, NL80211_REPLAY_CTR_LEN
);
1634 wpa_supplicant_event(drv
->ctx
, EVENT_DRIVER_GTK_REKEY
, &data
);
1638 static void nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data
*drv
,
1641 struct nlattr
*cand
[NUM_NL80211_PMKSA_CANDIDATE
];
1642 static struct nla_policy cand_policy
[NUM_NL80211_PMKSA_CANDIDATE
] = {
1643 [NL80211_PMKSA_CANDIDATE_INDEX
] = { .type
= NLA_U32
},
1644 [NL80211_PMKSA_CANDIDATE_BSSID
] = {
1648 [NL80211_PMKSA_CANDIDATE_PREAUTH
] = { .type
= NLA_FLAG
},
1650 union wpa_event_data data
;
1652 if (!tb
[NL80211_ATTR_PMKSA_CANDIDATE
])
1654 if (nla_parse_nested(cand
, MAX_NL80211_PMKSA_CANDIDATE
,
1655 tb
[NL80211_ATTR_PMKSA_CANDIDATE
], cand_policy
))
1657 if (!cand
[NL80211_PMKSA_CANDIDATE_INDEX
] ||
1658 !cand
[NL80211_PMKSA_CANDIDATE_BSSID
])
1661 os_memset(&data
, 0, sizeof(data
));
1662 os_memcpy(data
.pmkid_candidate
.bssid
,
1663 nla_data(cand
[NL80211_PMKSA_CANDIDATE_BSSID
]), ETH_ALEN
);
1664 data
.pmkid_candidate
.index
=
1665 nla_get_u32(cand
[NL80211_PMKSA_CANDIDATE_INDEX
]);
1666 data
.pmkid_candidate
.preauth
=
1667 cand
[NL80211_PMKSA_CANDIDATE_PREAUTH
] != NULL
;
1668 wpa_supplicant_event(drv
->ctx
, EVENT_PMKID_CANDIDATE
, &data
);
1672 static int process_event(struct nl_msg
*msg
, void *arg
)
1674 struct wpa_driver_nl80211_data
*drv
= arg
;
1675 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1676 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1678 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1679 genlmsg_attrlen(gnlh
, 0), NULL
);
1681 if (tb
[NL80211_ATTR_IFINDEX
]) {
1682 int ifindex
= nla_get_u32(tb
[NL80211_ATTR_IFINDEX
]);
1683 if (ifindex
!= drv
->ifindex
&& !have_ifidx(drv
, ifindex
)) {
1684 wpa_printf(MSG_DEBUG
, "nl80211: Ignored event (cmd=%d)"
1685 " for foreign interface (ifindex %d)",
1686 gnlh
->cmd
, ifindex
);
1691 if (drv
->ap_scan_as_station
!= NL80211_IFTYPE_UNSPECIFIED
&&
1692 (gnlh
->cmd
== NL80211_CMD_NEW_SCAN_RESULTS
||
1693 gnlh
->cmd
== NL80211_CMD_SCAN_ABORTED
)) {
1694 wpa_driver_nl80211_set_mode(&drv
->first_bss
,
1695 drv
->ap_scan_as_station
);
1696 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
1699 switch (gnlh
->cmd
) {
1700 case NL80211_CMD_TRIGGER_SCAN
:
1701 wpa_printf(MSG_DEBUG
, "nl80211: Scan trigger");
1703 case NL80211_CMD_START_SCHED_SCAN
:
1704 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan started");
1706 case NL80211_CMD_SCHED_SCAN_STOPPED
:
1707 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stopped");
1708 wpa_supplicant_event(drv
->ctx
, EVENT_SCHED_SCAN_STOPPED
, NULL
);
1710 case NL80211_CMD_NEW_SCAN_RESULTS
:
1711 wpa_printf(MSG_DEBUG
, "nl80211: New scan results available");
1712 drv
->scan_complete_events
= 1;
1713 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
,
1715 send_scan_event(drv
, 0, tb
);
1717 case NL80211_CMD_SCHED_SCAN_RESULTS
:
1718 wpa_printf(MSG_DEBUG
,
1719 "nl80211: New sched scan results available");
1720 send_scan_event(drv
, 0, tb
);
1722 case NL80211_CMD_SCAN_ABORTED
:
1723 wpa_printf(MSG_DEBUG
, "nl80211: Scan aborted");
1725 * Need to indicate that scan results are available in order
1726 * not to make wpa_supplicant stop its scanning.
1728 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
,
1730 send_scan_event(drv
, 1, tb
);
1732 case NL80211_CMD_AUTHENTICATE
:
1733 case NL80211_CMD_ASSOCIATE
:
1734 case NL80211_CMD_DEAUTHENTICATE
:
1735 case NL80211_CMD_DISASSOCIATE
:
1736 case NL80211_CMD_FRAME
:
1737 case NL80211_CMD_FRAME_TX_STATUS
:
1738 case NL80211_CMD_UNPROT_DEAUTHENTICATE
:
1739 case NL80211_CMD_UNPROT_DISASSOCIATE
:
1740 mlme_event(drv
, gnlh
->cmd
, tb
[NL80211_ATTR_FRAME
],
1741 tb
[NL80211_ATTR_MAC
], tb
[NL80211_ATTR_TIMED_OUT
],
1742 tb
[NL80211_ATTR_WIPHY_FREQ
], tb
[NL80211_ATTR_ACK
],
1743 tb
[NL80211_ATTR_COOKIE
]);
1745 case NL80211_CMD_CONNECT
:
1746 case NL80211_CMD_ROAM
:
1747 mlme_event_connect(drv
, gnlh
->cmd
,
1748 tb
[NL80211_ATTR_STATUS_CODE
],
1749 tb
[NL80211_ATTR_MAC
],
1750 tb
[NL80211_ATTR_REQ_IE
],
1751 tb
[NL80211_ATTR_RESP_IE
]);
1753 case NL80211_CMD_DISCONNECT
:
1754 mlme_event_disconnect(drv
, tb
[NL80211_ATTR_REASON_CODE
],
1755 tb
[NL80211_ATTR_MAC
]);
1757 case NL80211_CMD_MICHAEL_MIC_FAILURE
:
1758 mlme_event_michael_mic_failure(drv
, tb
);
1760 case NL80211_CMD_JOIN_IBSS
:
1761 mlme_event_join_ibss(drv
, tb
);
1763 case NL80211_CMD_REMAIN_ON_CHANNEL
:
1764 mlme_event_remain_on_channel(drv
, 0, tb
);
1766 case NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL
:
1767 mlme_event_remain_on_channel(drv
, 1, tb
);
1769 case NL80211_CMD_NOTIFY_CQM
:
1770 nl80211_cqm_event(drv
, tb
);
1772 case NL80211_CMD_REG_CHANGE
:
1773 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory domain change");
1774 wpa_supplicant_event(drv
->ctx
, EVENT_CHANNEL_LIST_CHANGED
,
1777 case NL80211_CMD_REG_BEACON_HINT
:
1778 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory beacon hint");
1779 wpa_supplicant_event(drv
->ctx
, EVENT_CHANNEL_LIST_CHANGED
,
1782 case NL80211_CMD_NEW_STATION
:
1783 nl80211_new_station_event(drv
, tb
);
1785 case NL80211_CMD_DEL_STATION
:
1786 nl80211_del_station_event(drv
, tb
);
1788 case NL80211_CMD_SET_REKEY_OFFLOAD
:
1789 nl80211_rekey_offload_event(drv
, tb
);
1791 case NL80211_CMD_PMKSA_CANDIDATE
:
1792 nl80211_pmksa_candidate_event(drv
, tb
);
1795 wpa_printf(MSG_DEBUG
, "nl80211: Ignored unknown event "
1796 "(cmd=%d)", gnlh
->cmd
);
1804 static void wpa_driver_nl80211_event_receive(int sock
, void *eloop_ctx
,
1808 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
1810 wpa_printf(MSG_DEBUG
, "nl80211: Event message available");
1812 cb
= nl_cb_clone(drv
->global
->nl_cb
);
1815 nl_cb_set(cb
, NL_CB_SEQ_CHECK
, NL_CB_CUSTOM
, no_seq_check
, NULL
);
1816 nl_cb_set(cb
, NL_CB_VALID
, NL_CB_CUSTOM
, process_event
, drv
);
1817 nl_recvmsgs(handle
, cb
);
1823 * wpa_driver_nl80211_set_country - ask nl80211 to set the regulatory domain
1824 * @priv: driver_nl80211 private data
1825 * @alpha2_arg: country to which to switch to
1826 * Returns: 0 on success, -1 on failure
1828 * This asks nl80211 to set the regulatory domain for given
1829 * country ISO / IEC alpha2.
1831 static int wpa_driver_nl80211_set_country(void *priv
, const char *alpha2_arg
)
1833 struct i802_bss
*bss
= priv
;
1834 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
1838 msg
= nlmsg_alloc();
1842 alpha2
[0] = alpha2_arg
[0];
1843 alpha2
[1] = alpha2_arg
[1];
1846 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REQ_SET_REG
);
1848 NLA_PUT_STRING(msg
, NL80211_ATTR_REG_ALPHA2
, alpha2
);
1849 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
))
1857 struct wiphy_info_data
{
1858 struct wpa_driver_capa
*capa
;
1860 unsigned int error
:1;
1864 static int wiphy_info_handler(struct nl_msg
*msg
, void *arg
)
1866 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1867 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1868 struct wiphy_info_data
*info
= arg
;
1869 int p2p_go_supported
= 0, p2p_client_supported
= 0;
1870 int p2p_concurrent
= 0;
1871 int auth_supported
= 0, connect_supported
= 0;
1872 struct wpa_driver_capa
*capa
= info
->capa
;
1873 static struct nla_policy
1874 iface_combination_policy
[NUM_NL80211_IFACE_COMB
] = {
1875 [NL80211_IFACE_COMB_LIMITS
] = { .type
= NLA_NESTED
},
1876 [NL80211_IFACE_COMB_MAXNUM
] = { .type
= NLA_U32
},
1877 [NL80211_IFACE_COMB_STA_AP_BI_MATCH
] = { .type
= NLA_FLAG
},
1878 [NL80211_IFACE_COMB_NUM_CHANNELS
] = { .type
= NLA_U32
},
1880 iface_limit_policy
[NUM_NL80211_IFACE_LIMIT
] = {
1881 [NL80211_IFACE_LIMIT_TYPES
] = { .type
= NLA_NESTED
},
1882 [NL80211_IFACE_LIMIT_MAX
] = { .type
= NLA_U32
},
1885 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1886 genlmsg_attrlen(gnlh
, 0), NULL
);
1888 if (tb
[NL80211_ATTR_MAX_NUM_SCAN_SSIDS
])
1889 capa
->max_scan_ssids
=
1890 nla_get_u8(tb
[NL80211_ATTR_MAX_NUM_SCAN_SSIDS
]);
1892 if (tb
[NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS
])
1893 capa
->max_sched_scan_ssids
=
1894 nla_get_u8(tb
[NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS
]);
1896 if (tb
[NL80211_ATTR_MAX_MATCH_SETS
])
1897 capa
->max_match_sets
=
1898 nla_get_u8(tb
[NL80211_ATTR_MAX_MATCH_SETS
]);
1900 if (tb
[NL80211_ATTR_SUPPORTED_IFTYPES
]) {
1901 struct nlattr
*nl_mode
;
1903 nla_for_each_nested(nl_mode
,
1904 tb
[NL80211_ATTR_SUPPORTED_IFTYPES
], i
) {
1905 switch (nla_type(nl_mode
)) {
1906 case NL80211_IFTYPE_AP
:
1907 capa
->flags
|= WPA_DRIVER_FLAGS_AP
;
1909 case NL80211_IFTYPE_P2P_GO
:
1910 p2p_go_supported
= 1;
1912 case NL80211_IFTYPE_P2P_CLIENT
:
1913 p2p_client_supported
= 1;
1919 if (tb
[NL80211_ATTR_INTERFACE_COMBINATIONS
]) {
1920 struct nlattr
*nl_combi
;
1923 nla_for_each_nested(nl_combi
,
1924 tb
[NL80211_ATTR_INTERFACE_COMBINATIONS
],
1926 struct nlattr
*tb_comb
[NUM_NL80211_IFACE_COMB
];
1927 struct nlattr
*tb_limit
[NUM_NL80211_IFACE_LIMIT
];
1928 struct nlattr
*nl_limit
, *nl_mode
;
1929 int err
, rem_limit
, rem_mode
;
1930 int combination_has_p2p
= 0, combination_has_mgd
= 0;
1932 err
= nla_parse_nested(tb_comb
, MAX_NL80211_IFACE_COMB
,
1934 iface_combination_policy
);
1935 if (err
|| !tb_comb
[NL80211_IFACE_COMB_LIMITS
] ||
1936 !tb_comb
[NL80211_IFACE_COMB_MAXNUM
] ||
1937 !tb_comb
[NL80211_IFACE_COMB_NUM_CHANNELS
])
1938 goto broken_combination
;
1940 nla_for_each_nested(nl_limit
,
1941 tb_comb
[NL80211_IFACE_COMB_LIMITS
],
1943 err
= nla_parse_nested(tb_limit
,
1944 MAX_NL80211_IFACE_LIMIT
,
1946 iface_limit_policy
);
1948 !tb_limit
[NL80211_IFACE_LIMIT_TYPES
])
1949 goto broken_combination
;
1951 nla_for_each_nested(
1953 tb_limit
[NL80211_IFACE_LIMIT_TYPES
],
1955 int ift
= nla_type(nl_mode
);
1956 if (ift
== NL80211_IFTYPE_P2P_GO
||
1957 ift
== NL80211_IFTYPE_P2P_CLIENT
)
1958 combination_has_p2p
= 1;
1959 if (ift
== NL80211_IFTYPE_STATION
)
1960 combination_has_mgd
= 1;
1962 if (combination_has_p2p
&& combination_has_mgd
)
1966 if (combination_has_p2p
&& combination_has_mgd
) {
1976 if (tb
[NL80211_ATTR_SUPPORTED_COMMANDS
]) {
1977 struct nlattr
*nl_cmd
;
1980 nla_for_each_nested(nl_cmd
,
1981 tb
[NL80211_ATTR_SUPPORTED_COMMANDS
], i
) {
1982 switch (nla_get_u32(nl_cmd
)) {
1983 case NL80211_CMD_AUTHENTICATE
:
1986 case NL80211_CMD_CONNECT
:
1987 connect_supported
= 1;
1989 case NL80211_CMD_START_SCHED_SCAN
:
1990 capa
->sched_scan_supported
= 1;
1996 if (tb
[NL80211_ATTR_OFFCHANNEL_TX_OK
]) {
1997 wpa_printf(MSG_DEBUG
, "nl80211: Using driver-based "
1999 capa
->flags
|= WPA_DRIVER_FLAGS_OFFCHANNEL_TX
;
2002 if (tb
[NL80211_ATTR_ROAM_SUPPORT
]) {
2003 wpa_printf(MSG_DEBUG
, "nl80211: Using driver-based roaming");
2004 capa
->flags
|= WPA_DRIVER_FLAGS_BSS_SELECTION
;
2007 /* default to 5000 since early versions of mac80211 don't set it */
2008 capa
->max_remain_on_chan
= 5000;
2010 if (tb
[NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION
])
2011 capa
->max_remain_on_chan
=
2012 nla_get_u32(tb
[NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION
]);
2015 capa
->flags
|= WPA_DRIVER_FLAGS_SME
;
2016 else if (!connect_supported
) {
2017 wpa_printf(MSG_INFO
, "nl80211: Driver does not support "
2018 "authentication/association or connect commands");
2022 if (p2p_go_supported
&& p2p_client_supported
)
2023 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_CAPABLE
;
2024 if (p2p_concurrent
) {
2025 wpa_printf(MSG_DEBUG
, "nl80211: Use separate P2P group "
2026 "interface (driver advertised support)");
2027 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_CONCURRENT
;
2028 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_MGMT_AND_NON_P2P
;
2031 if (tb
[NL80211_ATTR_TDLS_SUPPORT
]) {
2032 wpa_printf(MSG_DEBUG
, "nl80211: TDLS supported");
2033 capa
->flags
|= WPA_DRIVER_FLAGS_TDLS_SUPPORT
;
2035 if (tb
[NL80211_ATTR_TDLS_EXTERNAL_SETUP
]) {
2036 wpa_printf(MSG_DEBUG
, "nl80211: TDLS external setup");
2038 WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP
;
2046 static int wpa_driver_nl80211_get_info(struct wpa_driver_nl80211_data
*drv
,
2047 struct wiphy_info_data
*info
)
2051 os_memset(info
, 0, sizeof(*info
));
2052 info
->capa
= &drv
->capa
;
2054 msg
= nlmsg_alloc();
2058 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_WIPHY
);
2060 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->first_bss
.ifindex
);
2062 if (send_and_recv_msgs(drv
, msg
, wiphy_info_handler
, info
) == 0)
2071 static int wpa_driver_nl80211_capa(struct wpa_driver_nl80211_data
*drv
)
2073 struct wiphy_info_data info
;
2074 if (wpa_driver_nl80211_get_info(drv
, &info
))
2080 drv
->has_capability
= 1;
2081 /* For now, assume TKIP, CCMP, WPA, WPA2 are supported */
2082 drv
->capa
.key_mgmt
= WPA_DRIVER_CAPA_KEY_MGMT_WPA
|
2083 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK
|
2084 WPA_DRIVER_CAPA_KEY_MGMT_WPA2
|
2085 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK
;
2086 drv
->capa
.enc
= WPA_DRIVER_CAPA_ENC_WEP40
|
2087 WPA_DRIVER_CAPA_ENC_WEP104
|
2088 WPA_DRIVER_CAPA_ENC_TKIP
|
2089 WPA_DRIVER_CAPA_ENC_CCMP
;
2090 drv
->capa
.auth
= WPA_DRIVER_AUTH_OPEN
|
2091 WPA_DRIVER_AUTH_SHARED
|
2092 WPA_DRIVER_AUTH_LEAP
;
2094 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_SANE_ERROR_CODES
;
2095 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_SET_KEYS_AFTER_ASSOC_DONE
;
2096 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_EAPOL_TX_STATUS
;
2097 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_DEAUTH_TX_STATUS
;
2103 static int wpa_driver_nl80211_init_nl_global(struct nl80211_global
*global
)
2105 global
->nl_cb
= nl_cb_alloc(NL_CB_DEFAULT
);
2106 if (global
->nl_cb
== NULL
) {
2107 wpa_printf(MSG_ERROR
, "nl80211: Failed to allocate netlink "
2112 if (nl_create_handles(&global
->nl
, global
->nl_cb
, "nl"))
2115 global
->nl80211_id
= genl_ctrl_resolve(global
->nl
.handle
, "nl80211");
2116 if (global
->nl80211_id
< 0) {
2117 wpa_printf(MSG_ERROR
, "nl80211: 'nl80211' generic netlink not "
2126 static int wpa_driver_nl80211_init_nl(struct wpa_driver_nl80211_data
*drv
)
2128 struct nl80211_global
*global
= drv
->global
;
2131 /* Initialize generic netlink and nl80211 */
2133 if (nl_create_handles(&drv
->nl_event
, global
->nl_cb
, "event"))
2136 ret
= nl_get_multicast_id(drv
, "nl80211", "scan");
2138 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2140 wpa_printf(MSG_ERROR
, "nl80211: Could not add multicast "
2141 "membership for scan events: %d (%s)",
2142 ret
, strerror(-ret
));
2146 ret
= nl_get_multicast_id(drv
, "nl80211", "mlme");
2148 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2150 wpa_printf(MSG_ERROR
, "nl80211: Could not add multicast "
2151 "membership for mlme events: %d (%s)",
2152 ret
, strerror(-ret
));
2156 ret
= nl_get_multicast_id(drv
, "nl80211", "regulatory");
2158 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2160 wpa_printf(MSG_DEBUG
, "nl80211: Could not add multicast "
2161 "membership for regulatory events: %d (%s)",
2162 ret
, strerror(-ret
));
2163 /* Continue without regulatory events */
2166 eloop_register_read_sock(nl_socket_get_fd(drv
->nl_event
.handle
),
2167 wpa_driver_nl80211_event_receive
, drv
,
2168 drv
->nl_event
.handle
);
2173 nl_destroy_handles(&drv
->nl_event
);
2179 static void wpa_driver_nl80211_rfkill_blocked(void *ctx
)
2181 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL blocked");
2183 * This may be for any interface; use ifdown event to disable
2189 static void wpa_driver_nl80211_rfkill_unblocked(void *ctx
)
2191 struct wpa_driver_nl80211_data
*drv
= ctx
;
2192 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL unblocked");
2193 if (linux_set_iface_flags(drv
->global
->ioctl_sock
,
2194 drv
->first_bss
.ifname
, 1)) {
2195 wpa_printf(MSG_DEBUG
, "nl80211: Could not set interface UP "
2196 "after rfkill unblock");
2199 /* rtnetlink ifup handler will report interface as enabled */
2203 static void nl80211_get_phy_name(struct wpa_driver_nl80211_data
*drv
)
2205 /* Find phy (radio) to which this interface belongs */
2209 drv
->phyname
[0] = '\0';
2210 snprintf(buf
, sizeof(buf
) - 1, "/sys/class/net/%s/phy80211/name",
2211 drv
->first_bss
.ifname
);
2212 f
= open(buf
, O_RDONLY
);
2214 wpa_printf(MSG_DEBUG
, "Could not open file %s: %s",
2215 buf
, strerror(errno
));
2219 rv
= read(f
, drv
->phyname
, sizeof(drv
->phyname
) - 1);
2222 wpa_printf(MSG_DEBUG
, "Could not read file %s: %s",
2223 buf
, strerror(errno
));
2227 drv
->phyname
[rv
] = '\0';
2228 pos
= os_strchr(drv
->phyname
, '\n');
2231 wpa_printf(MSG_DEBUG
, "nl80211: interface %s in phy %s",
2232 drv
->first_bss
.ifname
, drv
->phyname
);
2237 static void nl80211_l2_read(void *ctx
, const u8
*src_addr
, const u8
*buf
,
2240 wpa_printf(MSG_DEBUG
, "nl80211: l2_packet read %u",
2241 (unsigned int) len
);
2243 #endif /* CONFIG_AP */
2247 * wpa_driver_nl80211_init - Initialize nl80211 driver interface
2248 * @ctx: context to be used when calling wpa_supplicant functions,
2249 * e.g., wpa_supplicant_event()
2250 * @ifname: interface name, e.g., wlan0
2251 * @global_priv: private driver global data from global_init()
2252 * Returns: Pointer to private data, %NULL on failure
2254 static void * wpa_driver_nl80211_init(void *ctx
, const char *ifname
,
2257 struct wpa_driver_nl80211_data
*drv
;
2258 struct rfkill_config
*rcfg
;
2259 struct i802_bss
*bss
;
2261 if (global_priv
== NULL
)
2263 drv
= os_zalloc(sizeof(*drv
));
2266 drv
->global
= global_priv
;
2268 bss
= &drv
->first_bss
;
2270 os_strlcpy(bss
->ifname
, ifname
, sizeof(bss
->ifname
));
2271 drv
->monitor_ifidx
= -1;
2272 drv
->monitor_sock
= -1;
2273 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
2275 if (wpa_driver_nl80211_init_nl(drv
)) {
2280 nl80211_get_phy_name(drv
);
2282 rcfg
= os_zalloc(sizeof(*rcfg
));
2286 os_strlcpy(rcfg
->ifname
, ifname
, sizeof(rcfg
->ifname
));
2287 rcfg
->blocked_cb
= wpa_driver_nl80211_rfkill_blocked
;
2288 rcfg
->unblocked_cb
= wpa_driver_nl80211_rfkill_unblocked
;
2289 drv
->rfkill
= rfkill_init(rcfg
);
2290 if (drv
->rfkill
== NULL
) {
2291 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL status not available");
2295 if (wpa_driver_nl80211_finish_drv_init(drv
))
2299 drv
->l2
= l2_packet_init(ifname
, NULL
, ETH_P_EAPOL
,
2300 nl80211_l2_read
, drv
, 0);
2301 #endif /* CONFIG_AP */
2304 dl_list_add(&drv
->global
->interfaces
, &drv
->list
);
2305 drv
->in_interface_list
= 1;
2311 wpa_driver_nl80211_deinit(bss
);
2316 static int nl80211_register_frame(struct wpa_driver_nl80211_data
*drv
,
2317 struct nl_handle
*nl_handle
,
2318 u16 type
, const u8
*match
, size_t match_len
)
2323 msg
= nlmsg_alloc();
2327 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REGISTER_ACTION
);
2329 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2330 NLA_PUT_U16(msg
, NL80211_ATTR_FRAME_TYPE
, type
);
2331 NLA_PUT(msg
, NL80211_ATTR_FRAME_MATCH
, match_len
, match
);
2333 ret
= send_and_recv(drv
, nl_handle
, msg
, NULL
, NULL
);
2336 wpa_printf(MSG_DEBUG
, "nl80211: Register frame command "
2337 "failed (type=%u): ret=%d (%s)",
2338 type
, ret
, strerror(-ret
));
2339 wpa_hexdump(MSG_DEBUG
, "nl80211: Register frame match",
2341 goto nla_put_failure
;
2350 static int nl80211_register_action_frame(struct wpa_driver_nl80211_data
*drv
,
2351 const u8
*match
, size_t match_len
)
2353 u16 type
= (WLAN_FC_TYPE_MGMT
<< 2) | (WLAN_FC_STYPE_ACTION
<< 4);
2354 return nl80211_register_frame(drv
, drv
->nl_event
.handle
,
2355 type
, match
, match_len
);
2359 static int nl80211_register_action_frames(struct wpa_driver_nl80211_data
*drv
)
2361 #if defined(CONFIG_P2P) || defined(CONFIG_INTERWORKING)
2362 /* GAS Initial Request */
2363 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0a", 2) < 0)
2365 /* GAS Initial Response */
2366 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0b", 2) < 0)
2368 /* GAS Comeback Request */
2369 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0c", 2) < 0)
2371 /* GAS Comeback Response */
2372 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0d", 2) < 0)
2374 #endif /* CONFIG_P2P || CONFIG_INTERWORKING */
2376 /* P2P Public Action */
2377 if (nl80211_register_action_frame(drv
,
2378 (u8
*) "\x04\x09\x50\x6f\x9a\x09",
2382 if (nl80211_register_action_frame(drv
,
2383 (u8
*) "\x7f\x50\x6f\x9a\x09",
2386 #endif /* CONFIG_P2P */
2387 #ifdef CONFIG_IEEE80211W
2388 /* SA Query Response */
2389 if (nl80211_register_action_frame(drv
, (u8
*) "\x08\x01", 2) < 0)
2391 #endif /* CONFIG_IEEE80211W */
2393 if ((drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
)) {
2394 /* TDLS Discovery Response */
2395 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0e", 2) <
2399 #endif /* CONFIG_TDLS */
2401 /* FT Action frames */
2402 if (nl80211_register_action_frame(drv
, (u8
*) "\x06", 1) < 0)
2405 drv
->capa
.key_mgmt
|= WPA_DRIVER_CAPA_KEY_MGMT_FT
|
2406 WPA_DRIVER_CAPA_KEY_MGMT_FT_PSK
;
2408 /* WNM - BSS Transition Management Request */
2409 if (nl80211_register_action_frame(drv
, (u8
*) "\x0a\x07", 2) < 0)
2416 static void wpa_driver_nl80211_send_rfkill(void *eloop_ctx
, void *timeout_ctx
)
2418 wpa_supplicant_event(timeout_ctx
, EVENT_INTERFACE_DISABLED
, NULL
);
2423 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data
*drv
)
2425 struct i802_bss
*bss
= &drv
->first_bss
;
2426 int send_rfkill_event
= 0;
2428 drv
->ifindex
= if_nametoindex(bss
->ifname
);
2429 drv
->first_bss
.ifindex
= drv
->ifindex
;
2433 * Make sure the interface starts up in station mode unless this is a
2434 * dynamically added interface (e.g., P2P) that was already configured
2435 * with proper iftype.
2437 if (drv
->ifindex
!= drv
->global
->if_add_ifindex
&&
2438 wpa_driver_nl80211_set_mode(bss
, NL80211_IFTYPE_STATION
) < 0) {
2439 wpa_printf(MSG_ERROR
, "nl80211: Could not configure driver to "
2440 "use managed mode");
2444 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1)) {
2445 if (rfkill_is_blocked(drv
->rfkill
)) {
2446 wpa_printf(MSG_DEBUG
, "nl80211: Could not yet enable "
2447 "interface '%s' due to rfkill",
2449 drv
->if_disabled
= 1;
2450 send_rfkill_event
= 1;
2452 wpa_printf(MSG_ERROR
, "nl80211: Could not set "
2453 "interface '%s' UP", bss
->ifname
);
2458 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
,
2459 1, IF_OPER_DORMANT
);
2460 #endif /* HOSTAPD */
2462 if (wpa_driver_nl80211_capa(drv
))
2465 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
2469 if (nl80211_register_action_frames(drv
) < 0) {
2470 wpa_printf(MSG_DEBUG
, "nl80211: Failed to register Action "
2471 "frame processing - ignore for now");
2473 * Older kernel versions did not support this, so ignore the
2474 * error for now. Some functionality may not be available
2479 if (send_rfkill_event
) {
2480 eloop_register_timeout(0, 0, wpa_driver_nl80211_send_rfkill
,
2488 static int wpa_driver_nl80211_del_beacon(struct wpa_driver_nl80211_data
*drv
)
2492 msg
= nlmsg_alloc();
2496 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_BEACON
);
2497 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2499 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2506 * wpa_driver_nl80211_deinit - Deinitialize nl80211 driver interface
2507 * @priv: Pointer to private nl80211 data from wpa_driver_nl80211_init()
2509 * Shut down driver interface and processing of driver events. Free
2510 * private data buffer if one was allocated in wpa_driver_nl80211_init().
2512 static void wpa_driver_nl80211_deinit(void *priv
)
2514 struct i802_bss
*bss
= priv
;
2515 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2519 l2_packet_deinit(drv
->l2
);
2520 #endif /* CONFIG_AP */
2522 if (drv
->nl_preq
.handle
)
2523 wpa_driver_nl80211_probe_req_report(bss
, 0);
2524 if (bss
->added_if_into_bridge
) {
2525 if (linux_br_del_if(drv
->global
->ioctl_sock
, bss
->brname
,
2527 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
2528 "interface %s from bridge %s: %s",
2529 bss
->ifname
, bss
->brname
, strerror(errno
));
2531 if (bss
->added_bridge
) {
2532 if (linux_br_del(drv
->global
->ioctl_sock
, bss
->brname
) < 0)
2533 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
2535 bss
->brname
, strerror(errno
));
2538 nl80211_remove_monitor_interface(drv
);
2540 if (is_ap_interface(drv
->nlmode
))
2541 wpa_driver_nl80211_del_beacon(drv
);
2544 if (drv
->last_freq_ht
) {
2545 /* Clear HT flags from the driver */
2546 struct hostapd_freq_params freq
;
2547 os_memset(&freq
, 0, sizeof(freq
));
2548 freq
.freq
= drv
->last_freq
;
2549 i802_set_freq(priv
, &freq
);
2552 if (drv
->eapol_sock
>= 0) {
2553 eloop_unregister_read_sock(drv
->eapol_sock
);
2554 close(drv
->eapol_sock
);
2557 if (drv
->if_indices
!= drv
->default_if_indices
)
2558 os_free(drv
->if_indices
);
2559 #endif /* HOSTAPD */
2561 if (drv
->disabled_11b_rates
)
2562 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 0);
2564 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
, 0,
2566 rfkill_deinit(drv
->rfkill
);
2568 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
, drv
->ctx
);
2570 (void) linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 0);
2571 wpa_driver_nl80211_set_mode(bss
, NL80211_IFTYPE_STATION
);
2573 eloop_unregister_read_sock(nl_socket_get_fd(drv
->nl_event
.handle
));
2574 nl_destroy_handles(&drv
->nl_event
);
2576 os_free(drv
->filter_ssids
);
2578 if (drv
->in_interface_list
)
2579 dl_list_del(&drv
->list
);
2586 * wpa_driver_nl80211_scan_timeout - Scan timeout to report scan completion
2587 * @eloop_ctx: Driver private data
2588 * @timeout_ctx: ctx argument given to wpa_driver_nl80211_init()
2590 * This function can be used as registered timeout when starting a scan to
2591 * generate a scan completed event if the driver does not report this.
2593 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx
, void *timeout_ctx
)
2595 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
2596 if (drv
->ap_scan_as_station
!= NL80211_IFTYPE_UNSPECIFIED
) {
2597 wpa_driver_nl80211_set_mode(&drv
->first_bss
,
2598 drv
->ap_scan_as_station
);
2599 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
2601 wpa_printf(MSG_DEBUG
, "Scan timeout - try to get results");
2602 wpa_supplicant_event(timeout_ctx
, EVENT_SCAN_RESULTS
, NULL
);
2607 * wpa_driver_nl80211_scan - Request the driver to initiate scan
2608 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2609 * @params: Scan parameters
2610 * Returns: 0 on success, -1 on failure
2612 static int wpa_driver_nl80211_scan(void *priv
,
2613 struct wpa_driver_scan_params
*params
)
2615 struct i802_bss
*bss
= priv
;
2616 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2617 int ret
= 0, timeout
;
2618 struct nl_msg
*msg
, *ssids
, *freqs
, *rates
;
2621 msg
= nlmsg_alloc();
2622 ssids
= nlmsg_alloc();
2623 freqs
= nlmsg_alloc();
2624 rates
= nlmsg_alloc();
2625 if (!msg
|| !ssids
|| !freqs
|| !rates
) {
2633 os_free(drv
->filter_ssids
);
2634 drv
->filter_ssids
= params
->filter_ssids
;
2635 params
->filter_ssids
= NULL
;
2636 drv
->num_filter_ssids
= params
->num_filter_ssids
;
2638 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TRIGGER_SCAN
);
2640 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2642 for (i
= 0; i
< params
->num_ssids
; i
++) {
2643 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Scan SSID",
2644 params
->ssids
[i
].ssid
,
2645 params
->ssids
[i
].ssid_len
);
2646 NLA_PUT(ssids
, i
+ 1, params
->ssids
[i
].ssid_len
,
2647 params
->ssids
[i
].ssid
);
2649 if (params
->num_ssids
)
2650 nla_put_nested(msg
, NL80211_ATTR_SCAN_SSIDS
, ssids
);
2652 if (params
->extra_ies
) {
2653 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Scan extra IEs",
2654 params
->extra_ies
, params
->extra_ies_len
);
2655 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->extra_ies_len
,
2659 if (params
->freqs
) {
2660 for (i
= 0; params
->freqs
[i
]; i
++) {
2661 wpa_printf(MSG_MSGDUMP
, "nl80211: Scan frequency %u "
2662 "MHz", params
->freqs
[i
]);
2663 NLA_PUT_U32(freqs
, i
+ 1, params
->freqs
[i
]);
2665 nla_put_nested(msg
, NL80211_ATTR_SCAN_FREQUENCIES
, freqs
);
2668 if (params
->p2p_probe
) {
2670 * Remove 2.4 GHz rates 1, 2, 5.5, 11 Mbps from supported rates
2671 * by masking out everything else apart from the OFDM rates 6,
2672 * 9, 12, 18, 24, 36, 48, 54 Mbps from non-MCS rates. All 5 GHz
2673 * rates are left enabled.
2675 NLA_PUT(rates
, NL80211_BAND_2GHZ
, 8,
2676 "\x0c\x12\x18\x24\x30\x48\x60\x6c");
2677 nla_put_nested(msg
, NL80211_ATTR_SCAN_SUPP_RATES
, rates
);
2679 NLA_PUT_FLAG(msg
, NL80211_ATTR_TX_NO_CCK_RATE
);
2682 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2685 wpa_printf(MSG_DEBUG
, "nl80211: Scan trigger failed: ret=%d "
2686 "(%s)", ret
, strerror(-ret
));
2688 if (is_ap_interface(drv
->nlmode
)) {
2690 * mac80211 does not allow scan requests in AP mode, so
2691 * try to do this in station mode.
2693 if (wpa_driver_nl80211_set_mode(
2694 bss
, NL80211_IFTYPE_STATION
))
2695 goto nla_put_failure
;
2697 if (wpa_driver_nl80211_scan(drv
, params
)) {
2698 wpa_driver_nl80211_set_mode(bss
, drv
->nlmode
);
2699 goto nla_put_failure
;
2702 /* Restore AP mode when processing scan results */
2703 drv
->ap_scan_as_station
= drv
->nlmode
;
2706 goto nla_put_failure
;
2708 goto nla_put_failure
;
2709 #endif /* HOSTAPD */
2712 /* Not all drivers generate "scan completed" wireless event, so try to
2713 * read results after a timeout. */
2715 if (drv
->scan_complete_events
) {
2717 * The driver seems to deliver events to notify when scan is
2718 * complete, so use longer timeout to avoid race conditions
2719 * with scanning and following association request.
2723 wpa_printf(MSG_DEBUG
, "Scan requested (ret=%d) - scan timeout %d "
2724 "seconds", ret
, timeout
);
2725 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
, drv
->ctx
);
2726 eloop_register_timeout(timeout
, 0, wpa_driver_nl80211_scan_timeout
,
2739 * wpa_driver_nl80211_sched_scan - Initiate a scheduled scan
2740 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2741 * @params: Scan parameters
2742 * @interval: Interval between scan cycles in milliseconds
2743 * Returns: 0 on success, -1 on failure or if not supported
2745 static int wpa_driver_nl80211_sched_scan(void *priv
,
2746 struct wpa_driver_scan_params
*params
,
2749 struct i802_bss
*bss
= priv
;
2750 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2752 struct nl_msg
*msg
, *ssids
, *freqs
, *match_set_ssid
, *match_sets
;
2755 msg
= nlmsg_alloc();
2756 ssids
= nlmsg_alloc();
2757 freqs
= nlmsg_alloc();
2758 if (!msg
|| !ssids
|| !freqs
) {
2765 os_free(drv
->filter_ssids
);
2766 drv
->filter_ssids
= params
->filter_ssids
;
2767 params
->filter_ssids
= NULL
;
2768 drv
->num_filter_ssids
= params
->num_filter_ssids
;
2770 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_START_SCHED_SCAN
);
2772 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2774 NLA_PUT_U32(msg
, NL80211_ATTR_SCHED_SCAN_INTERVAL
, interval
);
2776 if (drv
->num_filter_ssids
) {
2777 match_sets
= nlmsg_alloc();
2779 for (i
= 0; i
< drv
->num_filter_ssids
; i
++) {
2780 wpa_hexdump_ascii(MSG_MSGDUMP
,
2781 "nl80211: Sched scan filter SSID",
2782 drv
->filter_ssids
[i
].ssid
,
2783 drv
->filter_ssids
[i
].ssid_len
);
2785 match_set_ssid
= nlmsg_alloc();
2786 nla_put(match_set_ssid
,
2787 NL80211_ATTR_SCHED_SCAN_MATCH_SSID
,
2788 drv
->filter_ssids
[i
].ssid_len
,
2789 drv
->filter_ssids
[i
].ssid
);
2791 nla_put_nested(match_sets
, i
+ 1, match_set_ssid
);
2793 nlmsg_free(match_set_ssid
);
2796 nla_put_nested(msg
, NL80211_ATTR_SCHED_SCAN_MATCH
,
2798 nlmsg_free(match_sets
);
2801 for (i
= 0; i
< params
->num_ssids
; i
++) {
2802 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Sched scan SSID",
2803 params
->ssids
[i
].ssid
,
2804 params
->ssids
[i
].ssid_len
);
2805 NLA_PUT(ssids
, i
+ 1, params
->ssids
[i
].ssid_len
,
2806 params
->ssids
[i
].ssid
);
2808 if (params
->num_ssids
)
2809 nla_put_nested(msg
, NL80211_ATTR_SCAN_SSIDS
, ssids
);
2811 if (params
->extra_ies
) {
2812 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Sched scan extra IEs",
2813 params
->extra_ies
, params
->extra_ies_len
);
2814 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->extra_ies_len
,
2818 if (params
->freqs
) {
2819 for (i
= 0; params
->freqs
[i
]; i
++) {
2820 wpa_printf(MSG_MSGDUMP
, "nl80211: Scan frequency %u "
2821 "MHz", params
->freqs
[i
]);
2822 NLA_PUT_U32(freqs
, i
+ 1, params
->freqs
[i
]);
2824 nla_put_nested(msg
, NL80211_ATTR_SCAN_FREQUENCIES
, freqs
);
2827 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2829 /* TODO: if we get an error here, we should fall back to normal scan */
2833 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan start failed: "
2834 "ret=%d (%s)", ret
, strerror(-ret
));
2835 goto nla_put_failure
;
2838 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan requested (ret=%d) - "
2839 "scan interval %d msec", ret
, interval
);
2850 * wpa_driver_nl80211_stop_sched_scan - Stop a scheduled scan
2851 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2852 * Returns: 0 on success, -1 on failure or if not supported
2854 static int wpa_driver_nl80211_stop_sched_scan(void *priv
)
2856 struct i802_bss
*bss
= priv
;
2857 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2861 msg
= nlmsg_alloc();
2865 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_STOP_SCHED_SCAN
);
2867 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2869 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2872 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stop failed: "
2873 "ret=%d (%s)", ret
, strerror(-ret
));
2874 goto nla_put_failure
;
2877 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stop sent (ret=%d)", ret
);
2885 static const u8
* nl80211_get_ie(const u8
*ies
, size_t ies_len
, u8 ie
)
2887 const u8
*end
, *pos
;
2893 end
= ies
+ ies_len
;
2895 while (pos
+ 1 < end
) {
2896 if (pos
+ 2 + pos
[1] > end
)
2907 static int nl80211_scan_filtered(struct wpa_driver_nl80211_data
*drv
,
2908 const u8
*ie
, size_t ie_len
)
2913 if (drv
->filter_ssids
== NULL
)
2916 ssid
= nl80211_get_ie(ie
, ie_len
, WLAN_EID_SSID
);
2920 for (i
= 0; i
< drv
->num_filter_ssids
; i
++) {
2921 if (ssid
[1] == drv
->filter_ssids
[i
].ssid_len
&&
2922 os_memcmp(ssid
+ 2, drv
->filter_ssids
[i
].ssid
, ssid
[1]) ==
2931 static int bss_info_handler(struct nl_msg
*msg
, void *arg
)
2933 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
2934 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
2935 struct nlattr
*bss
[NL80211_BSS_MAX
+ 1];
2936 static struct nla_policy bss_policy
[NL80211_BSS_MAX
+ 1] = {
2937 [NL80211_BSS_BSSID
] = { .type
= NLA_UNSPEC
},
2938 [NL80211_BSS_FREQUENCY
] = { .type
= NLA_U32
},
2939 [NL80211_BSS_TSF
] = { .type
= NLA_U64
},
2940 [NL80211_BSS_BEACON_INTERVAL
] = { .type
= NLA_U16
},
2941 [NL80211_BSS_CAPABILITY
] = { .type
= NLA_U16
},
2942 [NL80211_BSS_INFORMATION_ELEMENTS
] = { .type
= NLA_UNSPEC
},
2943 [NL80211_BSS_SIGNAL_MBM
] = { .type
= NLA_U32
},
2944 [NL80211_BSS_SIGNAL_UNSPEC
] = { .type
= NLA_U8
},
2945 [NL80211_BSS_STATUS
] = { .type
= NLA_U32
},
2946 [NL80211_BSS_SEEN_MS_AGO
] = { .type
= NLA_U32
},
2947 [NL80211_BSS_BEACON_IES
] = { .type
= NLA_UNSPEC
},
2949 struct nl80211_bss_info_arg
*_arg
= arg
;
2950 struct wpa_scan_results
*res
= _arg
->res
;
2951 struct wpa_scan_res
**tmp
;
2952 struct wpa_scan_res
*r
;
2953 const u8
*ie
, *beacon_ie
;
2954 size_t ie_len
, beacon_ie_len
;
2958 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
2959 genlmsg_attrlen(gnlh
, 0), NULL
);
2960 if (!tb
[NL80211_ATTR_BSS
])
2962 if (nla_parse_nested(bss
, NL80211_BSS_MAX
, tb
[NL80211_ATTR_BSS
],
2965 if (bss
[NL80211_BSS_STATUS
]) {
2966 enum nl80211_bss_status status
;
2967 status
= nla_get_u32(bss
[NL80211_BSS_STATUS
]);
2968 if (status
== NL80211_BSS_STATUS_ASSOCIATED
&&
2969 bss
[NL80211_BSS_FREQUENCY
]) {
2971 nla_get_u32(bss
[NL80211_BSS_FREQUENCY
]);
2972 wpa_printf(MSG_DEBUG
, "nl80211: Associated on %u MHz",
2975 if (status
== NL80211_BSS_STATUS_ASSOCIATED
&&
2976 bss
[NL80211_BSS_BSSID
]) {
2977 os_memcpy(_arg
->assoc_bssid
,
2978 nla_data(bss
[NL80211_BSS_BSSID
]), ETH_ALEN
);
2979 wpa_printf(MSG_DEBUG
, "nl80211: Associated with "
2980 MACSTR
, MAC2STR(_arg
->assoc_bssid
));
2985 if (bss
[NL80211_BSS_INFORMATION_ELEMENTS
]) {
2986 ie
= nla_data(bss
[NL80211_BSS_INFORMATION_ELEMENTS
]);
2987 ie_len
= nla_len(bss
[NL80211_BSS_INFORMATION_ELEMENTS
]);
2992 if (bss
[NL80211_BSS_BEACON_IES
]) {
2993 beacon_ie
= nla_data(bss
[NL80211_BSS_BEACON_IES
]);
2994 beacon_ie_len
= nla_len(bss
[NL80211_BSS_BEACON_IES
]);
3000 if (nl80211_scan_filtered(_arg
->drv
, ie
? ie
: beacon_ie
,
3001 ie
? ie_len
: beacon_ie_len
))
3004 r
= os_zalloc(sizeof(*r
) + ie_len
+ beacon_ie_len
);
3007 if (bss
[NL80211_BSS_BSSID
])
3008 os_memcpy(r
->bssid
, nla_data(bss
[NL80211_BSS_BSSID
]),
3010 if (bss
[NL80211_BSS_FREQUENCY
])
3011 r
->freq
= nla_get_u32(bss
[NL80211_BSS_FREQUENCY
]);
3012 if (bss
[NL80211_BSS_BEACON_INTERVAL
])
3013 r
->beacon_int
= nla_get_u16(bss
[NL80211_BSS_BEACON_INTERVAL
]);
3014 if (bss
[NL80211_BSS_CAPABILITY
])
3015 r
->caps
= nla_get_u16(bss
[NL80211_BSS_CAPABILITY
]);
3016 r
->flags
|= WPA_SCAN_NOISE_INVALID
;
3017 if (bss
[NL80211_BSS_SIGNAL_MBM
]) {
3018 r
->level
= nla_get_u32(bss
[NL80211_BSS_SIGNAL_MBM
]);
3019 r
->level
/= 100; /* mBm to dBm */
3020 r
->flags
|= WPA_SCAN_LEVEL_DBM
| WPA_SCAN_QUAL_INVALID
;
3021 } else if (bss
[NL80211_BSS_SIGNAL_UNSPEC
]) {
3022 r
->level
= nla_get_u8(bss
[NL80211_BSS_SIGNAL_UNSPEC
]);
3023 r
->flags
|= WPA_SCAN_QUAL_INVALID
;
3025 r
->flags
|= WPA_SCAN_LEVEL_INVALID
| WPA_SCAN_QUAL_INVALID
;
3026 if (bss
[NL80211_BSS_TSF
])
3027 r
->tsf
= nla_get_u64(bss
[NL80211_BSS_TSF
]);
3028 if (bss
[NL80211_BSS_SEEN_MS_AGO
])
3029 r
->age
= nla_get_u32(bss
[NL80211_BSS_SEEN_MS_AGO
]);
3031 pos
= (u8
*) (r
+ 1);
3033 os_memcpy(pos
, ie
, ie_len
);
3036 r
->beacon_ie_len
= beacon_ie_len
;
3038 os_memcpy(pos
, beacon_ie
, beacon_ie_len
);
3040 if (bss
[NL80211_BSS_STATUS
]) {
3041 enum nl80211_bss_status status
;
3042 status
= nla_get_u32(bss
[NL80211_BSS_STATUS
]);
3044 case NL80211_BSS_STATUS_AUTHENTICATED
:
3045 r
->flags
|= WPA_SCAN_AUTHENTICATED
;
3047 case NL80211_BSS_STATUS_ASSOCIATED
:
3048 r
->flags
|= WPA_SCAN_ASSOCIATED
;
3056 * cfg80211 maintains separate BSS table entries for APs if the same
3057 * BSSID,SSID pair is seen on multiple channels. wpa_supplicant does
3058 * not use frequency as a separate key in the BSS table, so filter out
3059 * duplicated entries. Prefer associated BSS entry in such a case in
3060 * order to get the correct frequency into the BSS table.
3062 for (i
= 0; i
< res
->num
; i
++) {
3064 if (os_memcmp(res
->res
[i
]->bssid
, r
->bssid
, ETH_ALEN
) != 0)
3067 s1
= nl80211_get_ie((u8
*) (res
->res
[i
] + 1),
3068 res
->res
[i
]->ie_len
, WLAN_EID_SSID
);
3069 s2
= nl80211_get_ie((u8
*) (r
+ 1), r
->ie_len
, WLAN_EID_SSID
);
3070 if (s1
== NULL
|| s2
== NULL
|| s1
[1] != s2
[1] ||
3071 os_memcmp(s1
, s2
, 2 + s1
[1]) != 0)
3074 /* Same BSSID,SSID was already included in scan results */
3075 wpa_printf(MSG_DEBUG
, "nl80211: Remove duplicated scan result "
3076 "for " MACSTR
, MAC2STR(r
->bssid
));
3078 if ((r
->flags
& WPA_SCAN_ASSOCIATED
) &&
3079 !(res
->res
[i
]->flags
& WPA_SCAN_ASSOCIATED
)) {
3080 os_free(res
->res
[i
]);
3087 tmp
= os_realloc(res
->res
,
3088 (res
->num
+ 1) * sizeof(struct wpa_scan_res
*));
3093 tmp
[res
->num
++] = r
;
3100 static void clear_state_mismatch(struct wpa_driver_nl80211_data
*drv
,
3103 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
3104 wpa_printf(MSG_DEBUG
, "nl80211: Clear possible state "
3105 "mismatch (" MACSTR
")", MAC2STR(addr
));
3106 wpa_driver_nl80211_mlme(drv
, addr
,
3107 NL80211_CMD_DEAUTHENTICATE
,
3108 WLAN_REASON_PREV_AUTH_NOT_VALID
, 1);
3113 static void wpa_driver_nl80211_check_bss_status(
3114 struct wpa_driver_nl80211_data
*drv
, struct wpa_scan_results
*res
)
3118 for (i
= 0; i
< res
->num
; i
++) {
3119 struct wpa_scan_res
*r
= res
->res
[i
];
3120 if (r
->flags
& WPA_SCAN_AUTHENTICATED
) {
3121 wpa_printf(MSG_DEBUG
, "nl80211: Scan results "
3122 "indicates BSS status with " MACSTR
3123 " as authenticated",
3125 if (is_sta_interface(drv
->nlmode
) &&
3126 os_memcmp(r
->bssid
, drv
->bssid
, ETH_ALEN
) != 0 &&
3127 os_memcmp(r
->bssid
, drv
->auth_bssid
, ETH_ALEN
) !=
3129 wpa_printf(MSG_DEBUG
, "nl80211: Unknown BSSID"
3130 " in local state (auth=" MACSTR
3131 " assoc=" MACSTR
")",
3132 MAC2STR(drv
->auth_bssid
),
3133 MAC2STR(drv
->bssid
));
3134 clear_state_mismatch(drv
, r
->bssid
);
3138 if (r
->flags
& WPA_SCAN_ASSOCIATED
) {
3139 wpa_printf(MSG_DEBUG
, "nl80211: Scan results "
3140 "indicate BSS status with " MACSTR
3143 if (is_sta_interface(drv
->nlmode
) &&
3145 wpa_printf(MSG_DEBUG
, "nl80211: Local state "
3146 "(not associated) does not match "
3148 clear_state_mismatch(drv
, r
->bssid
);
3149 } else if (is_sta_interface(drv
->nlmode
) &&
3150 os_memcmp(drv
->bssid
, r
->bssid
, ETH_ALEN
) !=
3152 wpa_printf(MSG_DEBUG
, "nl80211: Local state "
3153 "(associated with " MACSTR
") does "
3154 "not match with BSS state",
3155 MAC2STR(drv
->bssid
));
3156 clear_state_mismatch(drv
, r
->bssid
);
3157 clear_state_mismatch(drv
, drv
->bssid
);
3164 static struct wpa_scan_results
*
3165 nl80211_get_scan_results(struct wpa_driver_nl80211_data
*drv
)
3168 struct wpa_scan_results
*res
;
3170 struct nl80211_bss_info_arg arg
;
3172 res
= os_zalloc(sizeof(*res
));
3175 msg
= nlmsg_alloc();
3177 goto nla_put_failure
;
3179 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
3180 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3184 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
3187 wpa_printf(MSG_DEBUG
, "nl80211: Received scan results (%lu "
3188 "BSSes)", (unsigned long) res
->num
);
3189 nl80211_get_noise_for_scan_results(drv
, res
);
3192 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
3193 "(%s)", ret
, strerror(-ret
));
3196 wpa_scan_results_free(res
);
3202 * wpa_driver_nl80211_get_scan_results - Fetch the latest scan results
3203 * @priv: Pointer to private wext data from wpa_driver_nl80211_init()
3204 * Returns: Scan results on success, -1 on failure
3206 static struct wpa_scan_results
*
3207 wpa_driver_nl80211_get_scan_results(void *priv
)
3209 struct i802_bss
*bss
= priv
;
3210 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3211 struct wpa_scan_results
*res
;
3213 res
= nl80211_get_scan_results(drv
);
3215 wpa_driver_nl80211_check_bss_status(drv
, res
);
3220 static void nl80211_dump_scan(struct wpa_driver_nl80211_data
*drv
)
3222 struct wpa_scan_results
*res
;
3225 res
= nl80211_get_scan_results(drv
);
3227 wpa_printf(MSG_DEBUG
, "nl80211: Failed to get scan results");
3231 wpa_printf(MSG_DEBUG
, "nl80211: Scan result dump");
3232 for (i
= 0; i
< res
->num
; i
++) {
3233 struct wpa_scan_res
*r
= res
->res
[i
];
3234 wpa_printf(MSG_DEBUG
, "nl80211: %d/%d " MACSTR
"%s%s",
3235 (int) i
, (int) res
->num
, MAC2STR(r
->bssid
),
3236 r
->flags
& WPA_SCAN_AUTHENTICATED
? " [auth]" : "",
3237 r
->flags
& WPA_SCAN_ASSOCIATED
? " [assoc]" : "");
3240 wpa_scan_results_free(res
);
3244 static int wpa_driver_nl80211_set_key(const char *ifname
, void *priv
,
3245 enum wpa_alg alg
, const u8
*addr
,
3246 int key_idx
, int set_tx
,
3247 const u8
*seq
, size_t seq_len
,
3248 const u8
*key
, size_t key_len
)
3250 struct i802_bss
*bss
= priv
;
3251 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3252 int ifindex
= if_nametoindex(ifname
);
3256 wpa_printf(MSG_DEBUG
, "%s: ifindex=%d alg=%d addr=%p key_idx=%d "
3257 "set_tx=%d seq_len=%lu key_len=%lu",
3258 __func__
, ifindex
, alg
, addr
, key_idx
, set_tx
,
3259 (unsigned long) seq_len
, (unsigned long) key_len
);
3263 #endif /* CONFIG_TDLS */
3265 msg
= nlmsg_alloc();
3269 if (alg
== WPA_ALG_NONE
) {
3270 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_KEY
);
3272 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_NEW_KEY
);
3273 NLA_PUT(msg
, NL80211_ATTR_KEY_DATA
, key_len
, key
);
3277 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3278 WLAN_CIPHER_SUITE_WEP40
);
3280 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3281 WLAN_CIPHER_SUITE_WEP104
);
3284 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3285 WLAN_CIPHER_SUITE_TKIP
);
3288 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3289 WLAN_CIPHER_SUITE_CCMP
);
3292 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3293 WLAN_CIPHER_SUITE_AES_CMAC
);
3296 wpa_printf(MSG_ERROR
, "%s: Unsupported encryption "
3297 "algorithm %d", __func__
, alg
);
3304 NLA_PUT(msg
, NL80211_ATTR_KEY_SEQ
, seq_len
, seq
);
3306 if (addr
&& !is_broadcast_ether_addr(addr
)) {
3307 wpa_printf(MSG_DEBUG
, " addr=" MACSTR
, MAC2STR(addr
));
3308 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
3310 if (alg
!= WPA_ALG_WEP
&& key_idx
&& !set_tx
) {
3311 wpa_printf(MSG_DEBUG
, " RSN IBSS RX GTK");
3312 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_TYPE
,
3313 NL80211_KEYTYPE_GROUP
);
3315 } else if (addr
&& is_broadcast_ether_addr(addr
)) {
3316 struct nl_msg
*types
;
3318 wpa_printf(MSG_DEBUG
, " broadcast key");
3319 types
= nlmsg_alloc();
3321 goto nla_put_failure
;
3322 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_MULTICAST
);
3323 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3327 goto nla_put_failure
;
3329 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, key_idx
);
3330 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
3332 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3333 if ((ret
== -ENOENT
|| ret
== -ENOLINK
) && alg
== WPA_ALG_NONE
)
3336 wpa_printf(MSG_DEBUG
, "nl80211: set_key failed; err=%d %s)",
3337 ret
, strerror(-ret
));
3340 * If we failed or don't need to set the default TX key (below),
3343 if (ret
|| !set_tx
|| alg
== WPA_ALG_NONE
)
3345 if (is_ap_interface(drv
->nlmode
) && addr
&&
3346 !is_broadcast_ether_addr(addr
))
3349 msg
= nlmsg_alloc();
3353 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_KEY
);
3354 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, key_idx
);
3355 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
3356 if (alg
== WPA_ALG_IGTK
)
3357 NLA_PUT_FLAG(msg
, NL80211_ATTR_KEY_DEFAULT_MGMT
);
3359 NLA_PUT_FLAG(msg
, NL80211_ATTR_KEY_DEFAULT
);
3360 if (addr
&& is_broadcast_ether_addr(addr
)) {
3361 struct nl_msg
*types
;
3363 types
= nlmsg_alloc();
3365 goto nla_put_failure
;
3366 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_MULTICAST
);
3367 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3371 goto nla_put_failure
;
3373 struct nl_msg
*types
;
3375 types
= nlmsg_alloc();
3377 goto nla_put_failure
;
3378 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_UNICAST
);
3379 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3383 goto nla_put_failure
;
3386 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3390 wpa_printf(MSG_DEBUG
, "nl80211: set_key default failed; "
3391 "err=%d %s)", ret
, strerror(-ret
));
3399 static int nl_add_key(struct nl_msg
*msg
, enum wpa_alg alg
,
3400 int key_idx
, int defkey
,
3401 const u8
*seq
, size_t seq_len
,
3402 const u8
*key
, size_t key_len
)
3404 struct nlattr
*key_attr
= nla_nest_start(msg
, NL80211_ATTR_KEY
);
3408 if (defkey
&& alg
== WPA_ALG_IGTK
)
3409 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT_MGMT
);
3411 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT
);
3413 NLA_PUT_U8(msg
, NL80211_KEY_IDX
, key_idx
);
3418 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3419 WLAN_CIPHER_SUITE_WEP40
);
3421 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3422 WLAN_CIPHER_SUITE_WEP104
);
3425 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
, WLAN_CIPHER_SUITE_TKIP
);
3428 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
, WLAN_CIPHER_SUITE_CCMP
);
3431 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3432 WLAN_CIPHER_SUITE_AES_CMAC
);
3435 wpa_printf(MSG_ERROR
, "%s: Unsupported encryption "
3436 "algorithm %d", __func__
, alg
);
3441 NLA_PUT(msg
, NL80211_KEY_SEQ
, seq_len
, seq
);
3443 NLA_PUT(msg
, NL80211_KEY_DATA
, key_len
, key
);
3445 nla_nest_end(msg
, key_attr
);
3453 static int nl80211_set_conn_keys(struct wpa_driver_associate_params
*params
,
3457 struct nlattr
*nl_keys
, *nl_key
;
3459 for (i
= 0; i
< 4; i
++) {
3460 if (!params
->wep_key
[i
])
3465 if (params
->wps
== WPS_MODE_PRIVACY
)
3467 if (params
->pairwise_suite
&&
3468 params
->pairwise_suite
!= WPA_CIPHER_NONE
)
3474 NLA_PUT_FLAG(msg
, NL80211_ATTR_PRIVACY
);
3476 nl_keys
= nla_nest_start(msg
, NL80211_ATTR_KEYS
);
3478 goto nla_put_failure
;
3480 for (i
= 0; i
< 4; i
++) {
3481 if (!params
->wep_key
[i
])
3484 nl_key
= nla_nest_start(msg
, i
);
3486 goto nla_put_failure
;
3488 NLA_PUT(msg
, NL80211_KEY_DATA
, params
->wep_key_len
[i
],
3489 params
->wep_key
[i
]);
3490 if (params
->wep_key_len
[i
] == 5)
3491 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3492 WLAN_CIPHER_SUITE_WEP40
);
3494 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3495 WLAN_CIPHER_SUITE_WEP104
);
3497 NLA_PUT_U8(msg
, NL80211_KEY_IDX
, i
);
3499 if (i
== params
->wep_tx_keyidx
)
3500 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT
);
3502 nla_nest_end(msg
, nl_key
);
3504 nla_nest_end(msg
, nl_keys
);
3513 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data
*drv
,
3514 const u8
*addr
, int cmd
, u16 reason_code
,
3515 int local_state_change
)
3520 msg
= nlmsg_alloc();
3524 nl80211_cmd(drv
, msg
, 0, cmd
);
3526 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3527 NLA_PUT_U16(msg
, NL80211_ATTR_REASON_CODE
, reason_code
);
3528 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
3529 if (local_state_change
)
3530 NLA_PUT_FLAG(msg
, NL80211_ATTR_LOCAL_STATE_CHANGE
);
3532 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3535 wpa_dbg(drv
->ctx
, MSG_DEBUG
,
3536 "nl80211: MLME command failed: reason=%u ret=%d (%s)",
3537 reason_code
, ret
, strerror(-ret
));
3538 goto nla_put_failure
;
3548 static int wpa_driver_nl80211_disconnect(struct wpa_driver_nl80211_data
*drv
,
3549 const u8
*addr
, int reason_code
)
3551 wpa_printf(MSG_DEBUG
, "%s(addr=" MACSTR
" reason_code=%d)",
3552 __func__
, MAC2STR(addr
), reason_code
);
3553 drv
->associated
= 0;
3554 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DISCONNECT
,
3559 static int wpa_driver_nl80211_deauthenticate(void *priv
, const u8
*addr
,
3562 struct i802_bss
*bss
= priv
;
3563 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3564 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
))
3565 return wpa_driver_nl80211_disconnect(drv
, addr
, reason_code
);
3566 wpa_printf(MSG_DEBUG
, "%s(addr=" MACSTR
" reason_code=%d)",
3567 __func__
, MAC2STR(addr
), reason_code
);
3568 drv
->associated
= 0;
3569 if (drv
->nlmode
== NL80211_IFTYPE_ADHOC
)
3570 return nl80211_leave_ibss(drv
);
3571 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DEAUTHENTICATE
,
3576 static int wpa_driver_nl80211_disassociate(void *priv
, const u8
*addr
,
3579 struct i802_bss
*bss
= priv
;
3580 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3581 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
))
3582 return wpa_driver_nl80211_disconnect(drv
, addr
, reason_code
);
3583 wpa_printf(MSG_DEBUG
, "%s", __func__
);
3584 drv
->associated
= 0;
3585 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DISASSOCIATE
,
3590 static int wpa_driver_nl80211_authenticate(
3591 void *priv
, struct wpa_driver_auth_params
*params
)
3593 struct i802_bss
*bss
= priv
;
3594 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3597 enum nl80211_auth_type type
;
3598 enum nl80211_iftype nlmode
;
3601 drv
->associated
= 0;
3602 os_memset(drv
->auth_bssid
, 0, ETH_ALEN
);
3603 /* FIX: IBSS mode */
3604 nlmode
= params
->p2p
?
3605 NL80211_IFTYPE_P2P_CLIENT
: NL80211_IFTYPE_STATION
;
3606 if (drv
->nlmode
!= nlmode
&&
3607 wpa_driver_nl80211_set_mode(priv
, nlmode
) < 0)
3611 msg
= nlmsg_alloc();
3615 wpa_printf(MSG_DEBUG
, "nl80211: Authenticate (ifindex=%d)",
3618 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_AUTHENTICATE
);
3620 for (i
= 0; i
< 4; i
++) {
3621 if (!params
->wep_key
[i
])
3623 wpa_driver_nl80211_set_key(bss
->ifname
, priv
, WPA_ALG_WEP
,
3625 i
== params
->wep_tx_keyidx
, NULL
, 0,
3627 params
->wep_key_len
[i
]);
3628 if (params
->wep_tx_keyidx
!= i
)
3630 if (nl_add_key(msg
, WPA_ALG_WEP
, i
, 1, NULL
, 0,
3631 params
->wep_key
[i
], params
->wep_key_len
[i
])) {
3637 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3638 if (params
->bssid
) {
3639 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
3640 MAC2STR(params
->bssid
));
3641 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
3644 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
3645 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
3648 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
3649 params
->ssid
, params
->ssid_len
);
3650 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
3653 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->ie
, params
->ie_len
);
3655 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->ie_len
, params
->ie
);
3656 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
3657 type
= NL80211_AUTHTYPE_OPEN_SYSTEM
;
3658 else if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
3659 type
= NL80211_AUTHTYPE_SHARED_KEY
;
3660 else if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
3661 type
= NL80211_AUTHTYPE_NETWORK_EAP
;
3662 else if (params
->auth_alg
& WPA_AUTH_ALG_FT
)
3663 type
= NL80211_AUTHTYPE_FT
;
3665 goto nla_put_failure
;
3666 wpa_printf(MSG_DEBUG
, " * Auth Type %d", type
);
3667 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
, type
);
3668 if (params
->local_state_change
) {
3669 wpa_printf(MSG_DEBUG
, " * Local state change only");
3670 NLA_PUT_FLAG(msg
, NL80211_ATTR_LOCAL_STATE_CHANGE
);
3673 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3676 wpa_dbg(drv
->ctx
, MSG_DEBUG
,
3677 "nl80211: MLME command failed (auth): ret=%d (%s)",
3678 ret
, strerror(-ret
));
3680 if (ret
== -EALREADY
&& count
== 1 && params
->bssid
&&
3681 !params
->local_state_change
) {
3683 * mac80211 does not currently accept new
3684 * authentication if we are already authenticated. As a
3685 * workaround, force deauthentication and try again.
3687 wpa_printf(MSG_DEBUG
, "nl80211: Retry authentication "
3688 "after forced deauthentication");
3689 wpa_driver_nl80211_deauthenticate(
3691 WLAN_REASON_PREV_AUTH_NOT_VALID
);
3695 goto nla_put_failure
;
3698 wpa_printf(MSG_DEBUG
, "nl80211: Authentication request send "
3707 struct phy_info_arg
{
3709 struct hostapd_hw_modes
*modes
;
3712 static int phy_info_handler(struct nl_msg
*msg
, void *arg
)
3714 struct nlattr
*tb_msg
[NL80211_ATTR_MAX
+ 1];
3715 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
3716 struct phy_info_arg
*phy_info
= arg
;
3718 struct nlattr
*tb_band
[NL80211_BAND_ATTR_MAX
+ 1];
3720 struct nlattr
*tb_freq
[NL80211_FREQUENCY_ATTR_MAX
+ 1];
3721 static struct nla_policy freq_policy
[NL80211_FREQUENCY_ATTR_MAX
+ 1] = {
3722 [NL80211_FREQUENCY_ATTR_FREQ
] = { .type
= NLA_U32
},
3723 [NL80211_FREQUENCY_ATTR_DISABLED
] = { .type
= NLA_FLAG
},
3724 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN
] = { .type
= NLA_FLAG
},
3725 [NL80211_FREQUENCY_ATTR_NO_IBSS
] = { .type
= NLA_FLAG
},
3726 [NL80211_FREQUENCY_ATTR_RADAR
] = { .type
= NLA_FLAG
},
3727 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER
] = { .type
= NLA_U32
},
3730 struct nlattr
*tb_rate
[NL80211_BITRATE_ATTR_MAX
+ 1];
3731 static struct nla_policy rate_policy
[NL80211_BITRATE_ATTR_MAX
+ 1] = {
3732 [NL80211_BITRATE_ATTR_RATE
] = { .type
= NLA_U32
},
3733 [NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE
] = { .type
= NLA_FLAG
},
3736 struct nlattr
*nl_band
;
3737 struct nlattr
*nl_freq
;
3738 struct nlattr
*nl_rate
;
3739 int rem_band
, rem_freq
, rem_rate
;
3740 struct hostapd_hw_modes
*mode
;
3741 int idx
, mode_is_set
;
3743 nla_parse(tb_msg
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
3744 genlmsg_attrlen(gnlh
, 0), NULL
);
3746 if (!tb_msg
[NL80211_ATTR_WIPHY_BANDS
])
3749 nla_for_each_nested(nl_band
, tb_msg
[NL80211_ATTR_WIPHY_BANDS
], rem_band
) {
3750 mode
= os_realloc(phy_info
->modes
, (*phy_info
->num_modes
+ 1) * sizeof(*mode
));
3753 phy_info
->modes
= mode
;
3757 mode
= &phy_info
->modes
[*(phy_info
->num_modes
)];
3758 memset(mode
, 0, sizeof(*mode
));
3759 mode
->flags
= HOSTAPD_MODE_FLAG_HT_INFO_KNOWN
;
3760 *(phy_info
->num_modes
) += 1;
3762 nla_parse(tb_band
, NL80211_BAND_ATTR_MAX
, nla_data(nl_band
),
3763 nla_len(nl_band
), NULL
);
3765 if (tb_band
[NL80211_BAND_ATTR_HT_CAPA
]) {
3766 mode
->ht_capab
= nla_get_u16(
3767 tb_band
[NL80211_BAND_ATTR_HT_CAPA
]);
3770 if (tb_band
[NL80211_BAND_ATTR_HT_AMPDU_FACTOR
]) {
3771 mode
->a_mpdu_params
|= nla_get_u8(
3772 tb_band
[NL80211_BAND_ATTR_HT_AMPDU_FACTOR
]) &
3776 if (tb_band
[NL80211_BAND_ATTR_HT_AMPDU_DENSITY
]) {
3777 mode
->a_mpdu_params
|= nla_get_u8(
3778 tb_band
[NL80211_BAND_ATTR_HT_AMPDU_DENSITY
]) <<
3782 if (tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
] &&
3783 nla_len(tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
])) {
3785 mcs
= nla_data(tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
]);
3786 os_memcpy(mode
->mcs_set
, mcs
, 16);
3789 nla_for_each_nested(nl_freq
, tb_band
[NL80211_BAND_ATTR_FREQS
], rem_freq
) {
3790 nla_parse(tb_freq
, NL80211_FREQUENCY_ATTR_MAX
, nla_data(nl_freq
),
3791 nla_len(nl_freq
), freq_policy
);
3792 if (!tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
])
3794 mode
->num_channels
++;
3797 mode
->channels
= os_zalloc(mode
->num_channels
* sizeof(struct hostapd_channel_data
));
3798 if (!mode
->channels
)
3803 nla_for_each_nested(nl_freq
, tb_band
[NL80211_BAND_ATTR_FREQS
], rem_freq
) {
3804 nla_parse(tb_freq
, NL80211_FREQUENCY_ATTR_MAX
, nla_data(nl_freq
),
3805 nla_len(nl_freq
), freq_policy
);
3806 if (!tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
])
3809 mode
->channels
[idx
].freq
= nla_get_u32(tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
]);
3810 mode
->channels
[idx
].flag
= 0;
3813 /* crude heuristic */
3814 if (mode
->channels
[idx
].freq
< 4000)
3815 mode
->mode
= HOSTAPD_MODE_IEEE80211B
;
3817 mode
->mode
= HOSTAPD_MODE_IEEE80211A
;
3821 /* crude heuristic */
3822 if (mode
->channels
[idx
].freq
< 4000)
3823 if (mode
->channels
[idx
].freq
== 2484)
3824 mode
->channels
[idx
].chan
= 14;
3826 mode
->channels
[idx
].chan
= (mode
->channels
[idx
].freq
- 2407) / 5;
3828 mode
->channels
[idx
].chan
= mode
->channels
[idx
].freq
/5 - 1000;
3830 if (tb_freq
[NL80211_FREQUENCY_ATTR_DISABLED
])
3831 mode
->channels
[idx
].flag
|=
3832 HOSTAPD_CHAN_DISABLED
;
3833 if (tb_freq
[NL80211_FREQUENCY_ATTR_PASSIVE_SCAN
])
3834 mode
->channels
[idx
].flag
|=
3835 HOSTAPD_CHAN_PASSIVE_SCAN
;
3836 if (tb_freq
[NL80211_FREQUENCY_ATTR_NO_IBSS
])
3837 mode
->channels
[idx
].flag
|=
3838 HOSTAPD_CHAN_NO_IBSS
;
3839 if (tb_freq
[NL80211_FREQUENCY_ATTR_RADAR
])
3840 mode
->channels
[idx
].flag
|=
3843 if (tb_freq
[NL80211_FREQUENCY_ATTR_MAX_TX_POWER
] &&
3844 !tb_freq
[NL80211_FREQUENCY_ATTR_DISABLED
])
3845 mode
->channels
[idx
].max_tx_power
=
3846 nla_get_u32(tb_freq
[NL80211_FREQUENCY_ATTR_MAX_TX_POWER
]) / 100;
3851 nla_for_each_nested(nl_rate
, tb_band
[NL80211_BAND_ATTR_RATES
], rem_rate
) {
3852 nla_parse(tb_rate
, NL80211_BITRATE_ATTR_MAX
, nla_data(nl_rate
),
3853 nla_len(nl_rate
), rate_policy
);
3854 if (!tb_rate
[NL80211_BITRATE_ATTR_RATE
])
3859 mode
->rates
= os_zalloc(mode
->num_rates
* sizeof(int));
3865 nla_for_each_nested(nl_rate
, tb_band
[NL80211_BAND_ATTR_RATES
], rem_rate
) {
3866 nla_parse(tb_rate
, NL80211_BITRATE_ATTR_MAX
, nla_data(nl_rate
),
3867 nla_len(nl_rate
), rate_policy
);
3868 if (!tb_rate
[NL80211_BITRATE_ATTR_RATE
])
3870 mode
->rates
[idx
] = nla_get_u32(tb_rate
[NL80211_BITRATE_ATTR_RATE
]);
3872 /* crude heuristic */
3873 if (mode
->mode
== HOSTAPD_MODE_IEEE80211B
&&
3874 mode
->rates
[idx
] > 200)
3875 mode
->mode
= HOSTAPD_MODE_IEEE80211G
;
3884 static struct hostapd_hw_modes
*
3885 wpa_driver_nl80211_add_11b(struct hostapd_hw_modes
*modes
, u16
*num_modes
)
3888 struct hostapd_hw_modes
*mode11g
= NULL
, *nmodes
, *mode
;
3889 int i
, mode11g_idx
= -1;
3891 /* If only 802.11g mode is included, use it to construct matching
3892 * 802.11b mode data. */
3894 for (m
= 0; m
< *num_modes
; m
++) {
3895 if (modes
[m
].mode
== HOSTAPD_MODE_IEEE80211B
)
3896 return modes
; /* 802.11b already included */
3897 if (modes
[m
].mode
== HOSTAPD_MODE_IEEE80211G
)
3901 if (mode11g_idx
< 0)
3902 return modes
; /* 2.4 GHz band not supported at all */
3904 nmodes
= os_realloc(modes
, (*num_modes
+ 1) * sizeof(*nmodes
));
3906 return modes
; /* Could not add 802.11b mode */
3908 mode
= &nmodes
[*num_modes
];
3909 os_memset(mode
, 0, sizeof(*mode
));
3913 mode
->mode
= HOSTAPD_MODE_IEEE80211B
;
3915 mode11g
= &modes
[mode11g_idx
];
3916 mode
->num_channels
= mode11g
->num_channels
;
3917 mode
->channels
= os_malloc(mode11g
->num_channels
*
3918 sizeof(struct hostapd_channel_data
));
3919 if (mode
->channels
== NULL
) {
3921 return modes
; /* Could not add 802.11b mode */
3923 os_memcpy(mode
->channels
, mode11g
->channels
,
3924 mode11g
->num_channels
* sizeof(struct hostapd_channel_data
));
3926 mode
->num_rates
= 0;
3927 mode
->rates
= os_malloc(4 * sizeof(int));
3928 if (mode
->rates
== NULL
) {
3929 os_free(mode
->channels
);
3931 return modes
; /* Could not add 802.11b mode */
3934 for (i
= 0; i
< mode11g
->num_rates
; i
++) {
3935 if (mode11g
->rates
[i
] != 10 && mode11g
->rates
[i
] != 20 &&
3936 mode11g
->rates
[i
] != 55 && mode11g
->rates
[i
] != 110)
3938 mode
->rates
[mode
->num_rates
] = mode11g
->rates
[i
];
3940 if (mode
->num_rates
== 4)
3944 if (mode
->num_rates
== 0) {
3945 os_free(mode
->channels
);
3946 os_free(mode
->rates
);
3948 return modes
; /* No 802.11b rates */
3951 wpa_printf(MSG_DEBUG
, "nl80211: Added 802.11b mode based on 802.11g "
3958 static void nl80211_set_ht40_mode(struct hostapd_hw_modes
*mode
, int start
,
3963 for (c
= 0; c
< mode
->num_channels
; c
++) {
3964 struct hostapd_channel_data
*chan
= &mode
->channels
[c
];
3965 if (chan
->freq
- 10 >= start
&& chan
->freq
+ 10 <= end
)
3966 chan
->flag
|= HOSTAPD_CHAN_HT40
;
3971 static void nl80211_set_ht40_mode_sec(struct hostapd_hw_modes
*mode
, int start
,
3976 for (c
= 0; c
< mode
->num_channels
; c
++) {
3977 struct hostapd_channel_data
*chan
= &mode
->channels
[c
];
3978 if (!(chan
->flag
& HOSTAPD_CHAN_HT40
))
3980 if (chan
->freq
- 30 >= start
&& chan
->freq
- 10 <= end
)
3981 chan
->flag
|= HOSTAPD_CHAN_HT40MINUS
;
3982 if (chan
->freq
+ 10 >= start
&& chan
->freq
+ 30 <= end
)
3983 chan
->flag
|= HOSTAPD_CHAN_HT40PLUS
;
3988 static void nl80211_reg_rule_ht40(struct nlattr
*tb
[],
3989 struct phy_info_arg
*results
)
3991 u32 start
, end
, max_bw
;
3994 if (tb
[NL80211_ATTR_FREQ_RANGE_START
] == NULL
||
3995 tb
[NL80211_ATTR_FREQ_RANGE_END
] == NULL
||
3996 tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
] == NULL
)
3999 start
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_START
]) / 1000;
4000 end
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_END
]) / 1000;
4001 max_bw
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
]) / 1000;
4003 wpa_printf(MSG_DEBUG
, "nl80211: %u-%u @ %u MHz",
4004 start
, end
, max_bw
);
4008 for (m
= 0; m
< *results
->num_modes
; m
++) {
4009 if (!(results
->modes
[m
].ht_capab
&
4010 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
))
4012 nl80211_set_ht40_mode(&results
->modes
[m
], start
, end
);
4017 static void nl80211_reg_rule_sec(struct nlattr
*tb
[],
4018 struct phy_info_arg
*results
)
4020 u32 start
, end
, max_bw
;
4023 if (tb
[NL80211_ATTR_FREQ_RANGE_START
] == NULL
||
4024 tb
[NL80211_ATTR_FREQ_RANGE_END
] == NULL
||
4025 tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
] == NULL
)
4028 start
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_START
]) / 1000;
4029 end
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_END
]) / 1000;
4030 max_bw
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
]) / 1000;
4035 for (m
= 0; m
< *results
->num_modes
; m
++) {
4036 if (!(results
->modes
[m
].ht_capab
&
4037 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
))
4039 nl80211_set_ht40_mode_sec(&results
->modes
[m
], start
, end
);
4044 static int nl80211_get_reg(struct nl_msg
*msg
, void *arg
)
4046 struct phy_info_arg
*results
= arg
;
4047 struct nlattr
*tb_msg
[NL80211_ATTR_MAX
+ 1];
4048 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
4049 struct nlattr
*nl_rule
;
4050 struct nlattr
*tb_rule
[NL80211_FREQUENCY_ATTR_MAX
+ 1];
4052 static struct nla_policy reg_policy
[NL80211_FREQUENCY_ATTR_MAX
+ 1] = {
4053 [NL80211_ATTR_REG_RULE_FLAGS
] = { .type
= NLA_U32
},
4054 [NL80211_ATTR_FREQ_RANGE_START
] = { .type
= NLA_U32
},
4055 [NL80211_ATTR_FREQ_RANGE_END
] = { .type
= NLA_U32
},
4056 [NL80211_ATTR_FREQ_RANGE_MAX_BW
] = { .type
= NLA_U32
},
4057 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN
] = { .type
= NLA_U32
},
4058 [NL80211_ATTR_POWER_RULE_MAX_EIRP
] = { .type
= NLA_U32
},
4061 nla_parse(tb_msg
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
4062 genlmsg_attrlen(gnlh
, 0), NULL
);
4063 if (!tb_msg
[NL80211_ATTR_REG_ALPHA2
] ||
4064 !tb_msg
[NL80211_ATTR_REG_RULES
]) {
4065 wpa_printf(MSG_DEBUG
, "nl80211: No regulatory information "
4070 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory information - country=%s",
4071 (char *) nla_data(tb_msg
[NL80211_ATTR_REG_ALPHA2
]));
4073 nla_for_each_nested(nl_rule
, tb_msg
[NL80211_ATTR_REG_RULES
], rem_rule
)
4075 nla_parse(tb_rule
, NL80211_FREQUENCY_ATTR_MAX
,
4076 nla_data(nl_rule
), nla_len(nl_rule
), reg_policy
);
4077 nl80211_reg_rule_ht40(tb_rule
, results
);
4080 nla_for_each_nested(nl_rule
, tb_msg
[NL80211_ATTR_REG_RULES
], rem_rule
)
4082 nla_parse(tb_rule
, NL80211_FREQUENCY_ATTR_MAX
,
4083 nla_data(nl_rule
), nla_len(nl_rule
), reg_policy
);
4084 nl80211_reg_rule_sec(tb_rule
, results
);
4091 static int nl80211_set_ht40_flags(struct wpa_driver_nl80211_data
*drv
,
4092 struct phy_info_arg
*results
)
4096 msg
= nlmsg_alloc();
4100 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_REG
);
4101 return send_and_recv_msgs(drv
, msg
, nl80211_get_reg
, results
);
4105 static struct hostapd_hw_modes
*
4106 wpa_driver_nl80211_get_hw_feature_data(void *priv
, u16
*num_modes
, u16
*flags
)
4108 struct i802_bss
*bss
= priv
;
4109 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4111 struct phy_info_arg result
= {
4112 .num_modes
= num_modes
,
4119 msg
= nlmsg_alloc();
4123 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_WIPHY
);
4125 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4127 if (send_and_recv_msgs(drv
, msg
, phy_info_handler
, &result
) == 0) {
4128 nl80211_set_ht40_flags(drv
, &result
);
4129 return wpa_driver_nl80211_add_11b(result
.modes
, num_modes
);
4136 static int wpa_driver_nl80211_send_frame(struct wpa_driver_nl80211_data
*drv
,
4137 const void *data
, size_t len
,
4141 0x00, 0x00, /* radiotap version */
4142 0x0e, 0x00, /* radiotap length */
4143 0x02, 0xc0, 0x00, 0x00, /* bmap: flags, tx and rx flags */
4144 IEEE80211_RADIOTAP_F_FRAG
, /* F_FRAG (fragment if required) */
4146 0x00, 0x00, /* RX and TX flags to indicate that */
4147 0x00, 0x00, /* this is the injected frame directly */
4149 struct iovec iov
[2] = {
4151 .iov_base
= &rtap_hdr
,
4152 .iov_len
= sizeof(rtap_hdr
),
4155 .iov_base
= (void *) data
,
4159 struct msghdr msg
= {
4164 .msg_control
= NULL
,
4165 .msg_controllen
= 0,
4171 rtap_hdr
[8] |= IEEE80211_RADIOTAP_F_WEP
;
4173 if (drv
->monitor_sock
< 0) {
4174 wpa_printf(MSG_DEBUG
, "nl80211: No monitor socket available "
4175 "for %s", __func__
);
4179 res
= sendmsg(drv
->monitor_sock
, &msg
, 0);
4181 wpa_printf(MSG_INFO
, "nl80211: sendmsg: %s", strerror(errno
));
4188 static int wpa_driver_nl80211_send_mlme(void *priv
, const u8
*data
,
4191 struct i802_bss
*bss
= priv
;
4192 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4193 struct ieee80211_mgmt
*mgmt
;
4197 mgmt
= (struct ieee80211_mgmt
*) data
;
4198 fc
= le_to_host16(mgmt
->frame_control
);
4200 if (is_sta_interface(drv
->nlmode
) &&
4201 WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
4202 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_PROBE_RESP
) {
4204 * The use of last_mgmt_freq is a bit of a hack,
4205 * but it works due to the single-threaded nature
4206 * of wpa_supplicant.
4208 return nl80211_send_frame_cmd(drv
, drv
->last_mgmt_freq
, 0,
4209 data
, data_len
, NULL
, 1);
4212 if (drv
->no_monitor_iface_capab
&& is_ap_interface(drv
->nlmode
)) {
4213 return nl80211_send_frame_cmd(drv
, drv
->ap_oper_freq
, 0,
4214 data
, data_len
, NULL
, 0);
4217 if (WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
4218 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_AUTH
) {
4220 * Only one of the authentication frame types is encrypted.
4221 * In order for static WEP encryption to work properly (i.e.,
4222 * to not encrypt the frame), we need to tell mac80211 about
4223 * the frames that must not be encrypted.
4225 u16 auth_alg
= le_to_host16(mgmt
->u
.auth
.auth_alg
);
4226 u16 auth_trans
= le_to_host16(mgmt
->u
.auth
.auth_transaction
);
4227 if (auth_alg
!= WLAN_AUTH_SHARED_KEY
|| auth_trans
!= 3)
4231 return wpa_driver_nl80211_send_frame(drv
, data
, data_len
, encrypt
);
4235 static int nl80211_set_ap_isolate(struct i802_bss
*bss
, int enabled
)
4237 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4240 msg
= nlmsg_alloc();
4244 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
4246 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4247 NLA_PUT_U8(msg
, NL80211_ATTR_AP_ISOLATE
, enabled
);
4249 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4255 static int nl80211_set_bss(struct i802_bss
*bss
, int cts
, int preamble
,
4256 int slot
, int ht_opmode
)
4258 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4261 msg
= nlmsg_alloc();
4265 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
4268 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_CTS_PROT
, cts
);
4270 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_SHORT_PREAMBLE
, preamble
);
4272 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_SHORT_SLOT_TIME
, slot
);
4274 NLA_PUT_U16(msg
, NL80211_ATTR_BSS_HT_OPMODE
, ht_opmode
);
4275 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4277 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4283 static int wpa_driver_nl80211_set_ap(void *priv
,
4284 struct wpa_driver_ap_params
*params
)
4286 struct i802_bss
*bss
= priv
;
4287 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4289 u8 cmd
= NL80211_CMD_NEW_BEACON
;
4292 int ifindex
= if_nametoindex(bss
->ifname
);
4297 beacon_set
= bss
->beacon_set
;
4299 msg
= nlmsg_alloc();
4303 wpa_printf(MSG_DEBUG
, "nl80211: Set beacon (beacon_set=%d)",
4306 cmd
= NL80211_CMD_SET_BEACON
;
4308 nl80211_cmd(drv
, msg
, 0, cmd
);
4309 NLA_PUT(msg
, NL80211_ATTR_BEACON_HEAD
, params
->head_len
, params
->head
);
4310 NLA_PUT(msg
, NL80211_ATTR_BEACON_TAIL
, params
->tail_len
, params
->tail
);
4311 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
4312 NLA_PUT_U32(msg
, NL80211_ATTR_BEACON_INTERVAL
, params
->beacon_int
);
4313 NLA_PUT_U32(msg
, NL80211_ATTR_DTIM_PERIOD
, params
->dtim_period
);
4314 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
4316 switch (params
->hide_ssid
) {
4317 case NO_SSID_HIDING
:
4318 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4319 NL80211_HIDDEN_SSID_NOT_IN_USE
);
4321 case HIDDEN_SSID_ZERO_LEN
:
4322 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4323 NL80211_HIDDEN_SSID_ZERO_LEN
);
4325 case HIDDEN_SSID_ZERO_CONTENTS
:
4326 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4327 NL80211_HIDDEN_SSID_ZERO_CONTENTS
);
4330 if (params
->privacy
)
4331 NLA_PUT_FLAG(msg
, NL80211_ATTR_PRIVACY
);
4332 if ((params
->auth_algs
& (WPA_AUTH_ALG_OPEN
| WPA_AUTH_ALG_SHARED
)) ==
4333 (WPA_AUTH_ALG_OPEN
| WPA_AUTH_ALG_SHARED
)) {
4334 /* Leave out the attribute */
4335 } else if (params
->auth_algs
& WPA_AUTH_ALG_SHARED
)
4336 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
,
4337 NL80211_AUTHTYPE_SHARED_KEY
);
4339 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
,
4340 NL80211_AUTHTYPE_OPEN_SYSTEM
);
4343 if (params
->wpa_version
& WPA_PROTO_WPA
)
4344 ver
|= NL80211_WPA_VERSION_1
;
4345 if (params
->wpa_version
& WPA_PROTO_RSN
)
4346 ver
|= NL80211_WPA_VERSION_2
;
4348 NLA_PUT_U32(msg
, NL80211_ATTR_WPA_VERSIONS
, ver
);
4351 if (params
->key_mgmt_suites
& WPA_KEY_MGMT_IEEE8021X
)
4352 suites
[num_suites
++] = WLAN_AKM_SUITE_8021X
;
4353 if (params
->key_mgmt_suites
& WPA_KEY_MGMT_PSK
)
4354 suites
[num_suites
++] = WLAN_AKM_SUITE_PSK
;
4356 NLA_PUT(msg
, NL80211_ATTR_AKM_SUITES
,
4357 num_suites
* sizeof(u32
), suites
);
4361 if (params
->pairwise_ciphers
& WPA_CIPHER_CCMP
)
4362 suites
[num_suites
++] = WLAN_CIPHER_SUITE_CCMP
;
4363 if (params
->pairwise_ciphers
& WPA_CIPHER_TKIP
)
4364 suites
[num_suites
++] = WLAN_CIPHER_SUITE_TKIP
;
4365 if (params
->pairwise_ciphers
& WPA_CIPHER_WEP104
)
4366 suites
[num_suites
++] = WLAN_CIPHER_SUITE_WEP104
;
4367 if (params
->pairwise_ciphers
& WPA_CIPHER_WEP40
)
4368 suites
[num_suites
++] = WLAN_CIPHER_SUITE_WEP40
;
4370 NLA_PUT(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
,
4371 num_suites
* sizeof(u32
), suites
);
4374 switch (params
->group_cipher
) {
4375 case WPA_CIPHER_CCMP
:
4376 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4377 WLAN_CIPHER_SUITE_CCMP
);
4379 case WPA_CIPHER_TKIP
:
4380 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4381 WLAN_CIPHER_SUITE_TKIP
);
4383 case WPA_CIPHER_WEP104
:
4384 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4385 WLAN_CIPHER_SUITE_WEP104
);
4387 case WPA_CIPHER_WEP40
:
4388 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4389 WLAN_CIPHER_SUITE_WEP40
);
4393 if (params
->beacon_ies
) {
4394 NLA_PUT(msg
, NL80211_ATTR_IE
, wpabuf_len(params
->beacon_ies
),
4395 wpabuf_head(params
->beacon_ies
));
4397 if (params
->proberesp_ies
) {
4398 NLA_PUT(msg
, NL80211_ATTR_IE_PROBE_RESP
,
4399 wpabuf_len(params
->proberesp_ies
),
4400 wpabuf_head(params
->proberesp_ies
));
4402 if (params
->assocresp_ies
) {
4403 NLA_PUT(msg
, NL80211_ATTR_IE_ASSOC_RESP
,
4404 wpabuf_len(params
->assocresp_ies
),
4405 wpabuf_head(params
->assocresp_ies
));
4408 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4410 wpa_printf(MSG_DEBUG
, "nl80211: Beacon set failed: %d (%s)",
4411 ret
, strerror(-ret
));
4413 bss
->beacon_set
= 1;
4414 ret
= nl80211_set_ap_isolate(bss
, params
->isolate
);
4415 if (!params
->isolate
&& ret
) {
4416 wpa_printf(MSG_DEBUG
, "nl80211: Ignore AP isolation "
4417 "configuration error since isolation is "
4422 nl80211_set_bss(bss
, params
->cts_protect
, params
->preamble
,
4423 params
->short_slot_time
, params
->ht_opmode
);
4431 static int wpa_driver_nl80211_set_freq(struct wpa_driver_nl80211_data
*drv
,
4432 int freq
, int ht_enabled
,
4433 int sec_channel_offset
)
4438 wpa_printf(MSG_DEBUG
, "nl80211: Set freq %d (ht_enabled=%d "
4439 "sec_channel_offset=%d)",
4440 freq
, ht_enabled
, sec_channel_offset
);
4441 msg
= nlmsg_alloc();
4445 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
4447 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4448 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
4450 switch (sec_channel_offset
) {
4452 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4453 NL80211_CHAN_HT40MINUS
);
4456 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4457 NL80211_CHAN_HT40PLUS
);
4460 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4466 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4469 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set channel (freq=%d): "
4470 "%d (%s)", freq
, ret
, strerror(-ret
));
4476 static u32
sta_flags_nl80211(int flags
)
4480 if (flags
& WPA_STA_AUTHORIZED
)
4481 f
|= BIT(NL80211_STA_FLAG_AUTHORIZED
);
4482 if (flags
& WPA_STA_WMM
)
4483 f
|= BIT(NL80211_STA_FLAG_WME
);
4484 if (flags
& WPA_STA_SHORT_PREAMBLE
)
4485 f
|= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE
);
4486 if (flags
& WPA_STA_MFP
)
4487 f
|= BIT(NL80211_STA_FLAG_MFP
);
4488 if (flags
& WPA_STA_TDLS_PEER
)
4489 f
|= BIT(NL80211_STA_FLAG_TDLS_PEER
);
4495 static int wpa_driver_nl80211_sta_add(void *priv
,
4496 struct hostapd_sta_add_params
*params
)
4498 struct i802_bss
*bss
= priv
;
4499 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4501 struct nl80211_sta_flag_update upd
;
4504 if ((params
->flags
& WPA_STA_TDLS_PEER
) &&
4505 !(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
4508 msg
= nlmsg_alloc();
4512 nl80211_cmd(drv
, msg
, 0, params
->set
? NL80211_CMD_SET_STATION
:
4513 NL80211_CMD_NEW_STATION
);
4515 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4516 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->addr
);
4517 NLA_PUT(msg
, NL80211_ATTR_STA_SUPPORTED_RATES
, params
->supp_rates_len
,
4518 params
->supp_rates
);
4520 NLA_PUT_U16(msg
, NL80211_ATTR_STA_AID
, params
->aid
);
4521 NLA_PUT_U16(msg
, NL80211_ATTR_STA_LISTEN_INTERVAL
,
4522 params
->listen_interval
);
4524 if (params
->ht_capabilities
) {
4525 NLA_PUT(msg
, NL80211_ATTR_HT_CAPABILITY
,
4526 sizeof(*params
->ht_capabilities
),
4527 params
->ht_capabilities
);
4530 os_memset(&upd
, 0, sizeof(upd
));
4531 upd
.mask
= sta_flags_nl80211(params
->flags
);
4533 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
4535 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4537 wpa_printf(MSG_DEBUG
, "nl80211: NL80211_CMD_%s_STATION "
4538 "result: %d (%s)", params
->set
? "SET" : "NEW", ret
,
4547 static int wpa_driver_nl80211_sta_remove(void *priv
, const u8
*addr
)
4549 struct i802_bss
*bss
= priv
;
4550 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4554 msg
= nlmsg_alloc();
4558 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_STATION
);
4560 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
4561 if_nametoindex(bss
->ifname
));
4562 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
4564 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4573 static void nl80211_remove_iface(struct wpa_driver_nl80211_data
*drv
,
4578 wpa_printf(MSG_DEBUG
, "nl80211: Remove interface ifindex=%d", ifidx
);
4580 /* stop listening for EAPOL on this interface */
4581 del_ifidx(drv
, ifidx
);
4583 msg
= nlmsg_alloc();
4585 goto nla_put_failure
;
4587 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_INTERFACE
);
4588 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifidx
);
4590 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
4593 wpa_printf(MSG_ERROR
, "Failed to remove interface (ifidx=%d)", ifidx
);
4597 static const char * nl80211_iftype_str(enum nl80211_iftype mode
)
4600 case NL80211_IFTYPE_ADHOC
:
4602 case NL80211_IFTYPE_STATION
:
4604 case NL80211_IFTYPE_AP
:
4606 case NL80211_IFTYPE_MONITOR
:
4608 case NL80211_IFTYPE_P2P_CLIENT
:
4609 return "P2P_CLIENT";
4610 case NL80211_IFTYPE_P2P_GO
:
4618 static int nl80211_create_iface_once(struct wpa_driver_nl80211_data
*drv
,
4620 enum nl80211_iftype iftype
,
4621 const u8
*addr
, int wds
)
4623 struct nl_msg
*msg
, *flags
= NULL
;
4627 wpa_printf(MSG_DEBUG
, "nl80211: Create interface iftype %d (%s)",
4628 iftype
, nl80211_iftype_str(iftype
));
4630 msg
= nlmsg_alloc();
4634 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_NEW_INTERFACE
);
4635 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4636 NLA_PUT_STRING(msg
, NL80211_ATTR_IFNAME
, ifname
);
4637 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, iftype
);
4639 if (iftype
== NL80211_IFTYPE_MONITOR
) {
4642 flags
= nlmsg_alloc();
4644 goto nla_put_failure
;
4646 NLA_PUT_FLAG(flags
, NL80211_MNTR_FLAG_COOK_FRAMES
);
4648 err
= nla_put_nested(msg
, NL80211_ATTR_MNTR_FLAGS
, flags
);
4653 goto nla_put_failure
;
4655 NLA_PUT_U8(msg
, NL80211_ATTR_4ADDR
, wds
);
4658 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4661 wpa_printf(MSG_ERROR
, "Failed to create interface %s: %d (%s)",
4662 ifname
, ret
, strerror(-ret
));
4666 ifidx
= if_nametoindex(ifname
);
4667 wpa_printf(MSG_DEBUG
, "nl80211: New interface %s created: ifindex=%d",
4673 /* start listening for EAPOL on this interface */
4674 add_ifidx(drv
, ifidx
);
4676 if (addr
&& iftype
!= NL80211_IFTYPE_MONITOR
&&
4677 linux_set_ifhwaddr(drv
->global
->ioctl_sock
, ifname
, addr
)) {
4678 nl80211_remove_iface(drv
, ifidx
);
4686 static int nl80211_create_iface(struct wpa_driver_nl80211_data
*drv
,
4687 const char *ifname
, enum nl80211_iftype iftype
,
4688 const u8
*addr
, int wds
)
4692 ret
= nl80211_create_iface_once(drv
, ifname
, iftype
, addr
, wds
);
4694 /* if error occurred and interface exists already */
4695 if (ret
== -ENFILE
&& if_nametoindex(ifname
)) {
4696 wpa_printf(MSG_INFO
, "Try to remove and re-create %s", ifname
);
4698 /* Try to remove the interface that was already there. */
4699 nl80211_remove_iface(drv
, if_nametoindex(ifname
));
4701 /* Try to create the interface again */
4702 ret
= nl80211_create_iface_once(drv
, ifname
, iftype
, addr
,
4706 if (ret
>= 0 && is_p2p_interface(iftype
))
4707 nl80211_disable_11b_rates(drv
, ret
, 1);
4713 static void handle_tx_callback(void *ctx
, u8
*buf
, size_t len
, int ok
)
4715 struct ieee80211_hdr
*hdr
;
4717 union wpa_event_data event
;
4719 hdr
= (struct ieee80211_hdr
*) buf
;
4720 fc
= le_to_host16(hdr
->frame_control
);
4722 os_memset(&event
, 0, sizeof(event
));
4723 event
.tx_status
.type
= WLAN_FC_GET_TYPE(fc
);
4724 event
.tx_status
.stype
= WLAN_FC_GET_STYPE(fc
);
4725 event
.tx_status
.dst
= hdr
->addr1
;
4726 event
.tx_status
.data
= buf
;
4727 event
.tx_status
.data_len
= len
;
4728 event
.tx_status
.ack
= ok
;
4729 wpa_supplicant_event(ctx
, EVENT_TX_STATUS
, &event
);
4733 static void from_unknown_sta(struct wpa_driver_nl80211_data
*drv
,
4734 u8
*buf
, size_t len
)
4736 struct ieee80211_hdr
*hdr
= (void *)buf
;
4738 union wpa_event_data event
;
4740 if (len
< sizeof(*hdr
))
4743 fc
= le_to_host16(hdr
->frame_control
);
4745 os_memset(&event
, 0, sizeof(event
));
4746 event
.rx_from_unknown
.bssid
= get_hdr_bssid(hdr
, len
);
4747 event
.rx_from_unknown
.addr
= hdr
->addr2
;
4748 event
.rx_from_unknown
.wds
= (fc
& (WLAN_FC_FROMDS
| WLAN_FC_TODS
)) ==
4749 (WLAN_FC_FROMDS
| WLAN_FC_TODS
);
4750 wpa_supplicant_event(drv
->ctx
, EVENT_RX_FROM_UNKNOWN
, &event
);
4754 static void handle_frame(struct wpa_driver_nl80211_data
*drv
,
4755 u8
*buf
, size_t len
, int datarate
, int ssi_signal
)
4757 struct ieee80211_hdr
*hdr
;
4759 union wpa_event_data event
;
4761 hdr
= (struct ieee80211_hdr
*) buf
;
4762 fc
= le_to_host16(hdr
->frame_control
);
4764 switch (WLAN_FC_GET_TYPE(fc
)) {
4765 case WLAN_FC_TYPE_MGMT
:
4766 os_memset(&event
, 0, sizeof(event
));
4767 event
.rx_mgmt
.frame
= buf
;
4768 event
.rx_mgmt
.frame_len
= len
;
4769 event
.rx_mgmt
.datarate
= datarate
;
4770 event
.rx_mgmt
.ssi_signal
= ssi_signal
;
4771 wpa_supplicant_event(drv
->ctx
, EVENT_RX_MGMT
, &event
);
4773 case WLAN_FC_TYPE_CTRL
:
4774 /* can only get here with PS-Poll frames */
4775 wpa_printf(MSG_DEBUG
, "CTRL");
4776 from_unknown_sta(drv
, buf
, len
);
4778 case WLAN_FC_TYPE_DATA
:
4779 from_unknown_sta(drv
, buf
, len
);
4785 static void handle_monitor_read(int sock
, void *eloop_ctx
, void *sock_ctx
)
4787 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
4789 unsigned char buf
[3000];
4790 struct ieee80211_radiotap_iterator iter
;
4792 int datarate
= 0, ssi_signal
= 0;
4793 int injected
= 0, failed
= 0, rxflags
= 0;
4795 len
= recv(sock
, buf
, sizeof(buf
), 0);
4801 if (ieee80211_radiotap_iterator_init(&iter
, (void*)buf
, len
)) {
4802 printf("received invalid radiotap frame\n");
4807 ret
= ieee80211_radiotap_iterator_next(&iter
);
4811 printf("received invalid radiotap frame (%d)\n", ret
);
4814 switch (iter
.this_arg_index
) {
4815 case IEEE80211_RADIOTAP_FLAGS
:
4816 if (*iter
.this_arg
& IEEE80211_RADIOTAP_F_FCS
)
4819 case IEEE80211_RADIOTAP_RX_FLAGS
:
4822 case IEEE80211_RADIOTAP_TX_FLAGS
:
4824 failed
= le_to_host16((*(uint16_t *) iter
.this_arg
)) &
4825 IEEE80211_RADIOTAP_F_TX_FAIL
;
4827 case IEEE80211_RADIOTAP_DATA_RETRIES
:
4829 case IEEE80211_RADIOTAP_CHANNEL
:
4830 /* TODO: convert from freq/flags to channel number */
4832 case IEEE80211_RADIOTAP_RATE
:
4833 datarate
= *iter
.this_arg
* 5;
4835 case IEEE80211_RADIOTAP_DB_ANTSIGNAL
:
4836 ssi_signal
= *iter
.this_arg
;
4841 if (rxflags
&& injected
)
4845 handle_frame(drv
, buf
+ iter
.max_length
,
4846 len
- iter
.max_length
, datarate
, ssi_signal
);
4848 handle_tx_callback(drv
->ctx
, buf
+ iter
.max_length
,
4849 len
- iter
.max_length
, !failed
);
4854 * we post-process the filter code later and rewrite
4855 * this to the offset to the last instruction
4860 static struct sock_filter msock_filter_insns
[] = {
4862 * do a little-endian load of the radiotap length field
4864 /* load lower byte into A */
4865 BPF_STMT(BPF_LD
| BPF_B
| BPF_ABS
, 2),
4866 /* put it into X (== index register) */
4867 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4868 /* load upper byte into A */
4869 BPF_STMT(BPF_LD
| BPF_B
| BPF_ABS
, 3),
4870 /* left-shift it by 8 */
4871 BPF_STMT(BPF_ALU
| BPF_LSH
| BPF_K
, 8),
4873 BPF_STMT(BPF_ALU
| BPF_OR
| BPF_X
, 0),
4874 /* put result into X */
4875 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4878 * Allow management frames through, this also gives us those
4879 * management frames that we sent ourselves with status
4881 /* load the lower byte of the IEEE 802.11 frame control field */
4882 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4883 /* mask off frame type and version */
4884 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0xF),
4885 /* accept frame if it's both 0, fall through otherwise */
4886 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0, PASS
, 0),
4889 * TODO: add a bit to radiotap RX flags that indicates
4890 * that the sending station is not associated, then
4891 * add a filter here that filters on our DA and that flag
4892 * to allow us to deauth frames to that bad station.
4894 * For now allow all To DS data frames through.
4896 /* load the IEEE 802.11 frame control field */
4897 BPF_STMT(BPF_LD
| BPF_H
| BPF_IND
, 0),
4898 /* mask off frame type, version and DS status */
4899 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x0F03),
4900 /* accept frame if version 0, type 2 and To DS, fall through otherwise
4902 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0x0801, PASS
, 0),
4906 * drop non-data frames
4908 /* load the lower byte of the frame control field */
4909 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4910 /* mask off QoS bit */
4911 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x0c),
4912 /* drop non-data frames */
4913 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 8, 0, FAIL
),
4915 /* load the upper byte of the frame control field */
4916 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 1),
4917 /* mask off toDS/fromDS */
4918 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x03),
4919 /* accept WDS frames */
4920 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 3, PASS
, 0),
4923 * add header length to index
4925 /* load the lower byte of the frame control field */
4926 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4927 /* mask off QoS bit */
4928 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x80),
4929 /* right shift it by 6 to give 0 or 2 */
4930 BPF_STMT(BPF_ALU
| BPF_RSH
| BPF_K
, 6),
4931 /* add data frame header length */
4932 BPF_STMT(BPF_ALU
| BPF_ADD
| BPF_K
, 24),
4933 /* add index, was start of 802.11 header */
4934 BPF_STMT(BPF_ALU
| BPF_ADD
| BPF_X
, 0),
4935 /* move to index, now start of LL header */
4936 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4939 * Accept empty data frames, we use those for
4942 BPF_STMT(BPF_LD
| BPF_W
| BPF_LEN
, 0),
4943 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_X
, 0, PASS
, 0),
4946 * Accept EAPOL frames
4948 BPF_STMT(BPF_LD
| BPF_W
| BPF_IND
, 0),
4949 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0xAAAA0300, 0, FAIL
),
4950 BPF_STMT(BPF_LD
| BPF_W
| BPF_IND
, 4),
4951 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0x0000888E, PASS
, FAIL
),
4953 /* keep these last two statements or change the code below */
4954 /* return 0 == "DROP" */
4955 BPF_STMT(BPF_RET
| BPF_K
, 0),
4956 /* return ~0 == "keep all" */
4957 BPF_STMT(BPF_RET
| BPF_K
, ~0),
4960 static struct sock_fprog msock_filter
= {
4961 .len
= sizeof(msock_filter_insns
)/sizeof(msock_filter_insns
[0]),
4962 .filter
= msock_filter_insns
,
4966 static int add_monitor_filter(int s
)
4970 /* rewrite all PASS/FAIL jump offsets */
4971 for (idx
= 0; idx
< msock_filter
.len
; idx
++) {
4972 struct sock_filter
*insn
= &msock_filter_insns
[idx
];
4974 if (BPF_CLASS(insn
->code
) == BPF_JMP
) {
4975 if (insn
->code
== (BPF_JMP
|BPF_JA
)) {
4976 if (insn
->k
== PASS
)
4977 insn
->k
= msock_filter
.len
- idx
- 2;
4978 else if (insn
->k
== FAIL
)
4979 insn
->k
= msock_filter
.len
- idx
- 3;
4982 if (insn
->jt
== PASS
)
4983 insn
->jt
= msock_filter
.len
- idx
- 2;
4984 else if (insn
->jt
== FAIL
)
4985 insn
->jt
= msock_filter
.len
- idx
- 3;
4987 if (insn
->jf
== PASS
)
4988 insn
->jf
= msock_filter
.len
- idx
- 2;
4989 else if (insn
->jf
== FAIL
)
4990 insn
->jf
= msock_filter
.len
- idx
- 3;
4994 if (setsockopt(s
, SOL_SOCKET
, SO_ATTACH_FILTER
,
4995 &msock_filter
, sizeof(msock_filter
))) {
4996 perror("SO_ATTACH_FILTER");
5004 static void nl80211_remove_monitor_interface(
5005 struct wpa_driver_nl80211_data
*drv
)
5007 if (drv
->monitor_ifidx
>= 0) {
5008 nl80211_remove_iface(drv
, drv
->monitor_ifidx
);
5009 drv
->monitor_ifidx
= -1;
5011 if (drv
->monitor_sock
>= 0) {
5012 eloop_unregister_read_sock(drv
->monitor_sock
);
5013 close(drv
->monitor_sock
);
5014 drv
->monitor_sock
= -1;
5020 nl80211_create_monitor_interface(struct wpa_driver_nl80211_data
*drv
)
5023 struct sockaddr_ll ll
;
5027 if (os_strncmp(drv
->first_bss
.ifname
, "p2p-", 4) == 0) {
5029 * P2P interface name is of the format p2p-%s-%d. For monitor
5030 * interface name corresponding to P2P GO, replace "p2p-" with
5031 * "mon-" to retain the same interface name length and to
5032 * indicate that it is a monitor interface.
5034 snprintf(buf
, IFNAMSIZ
, "mon-%s", drv
->first_bss
.ifname
+ 4);
5036 /* Non-P2P interface with AP functionality. */
5037 snprintf(buf
, IFNAMSIZ
, "mon.%s", drv
->first_bss
.ifname
);
5040 buf
[IFNAMSIZ
- 1] = '\0';
5042 drv
->monitor_ifidx
=
5043 nl80211_create_iface(drv
, buf
, NL80211_IFTYPE_MONITOR
, NULL
,
5046 if (drv
->monitor_ifidx
== -EOPNOTSUPP
) {
5047 wpa_printf(MSG_DEBUG
, "nl80211: Driver does not support "
5048 "monitor interface type - try to run without it");
5049 drv
->no_monitor_iface_capab
= 1;
5052 if (drv
->monitor_ifidx
< 0)
5055 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, buf
, 1))
5058 memset(&ll
, 0, sizeof(ll
));
5059 ll
.sll_family
= AF_PACKET
;
5060 ll
.sll_ifindex
= drv
->monitor_ifidx
;
5061 drv
->monitor_sock
= socket(PF_PACKET
, SOCK_RAW
, htons(ETH_P_ALL
));
5062 if (drv
->monitor_sock
< 0) {
5063 perror("socket[PF_PACKET,SOCK_RAW]");
5067 if (add_monitor_filter(drv
->monitor_sock
)) {
5068 wpa_printf(MSG_INFO
, "Failed to set socket filter for monitor "
5069 "interface; do filtering in user space");
5070 /* This works, but will cost in performance. */
5073 if (bind(drv
->monitor_sock
, (struct sockaddr
*) &ll
, sizeof(ll
)) < 0) {
5074 perror("monitor socket bind");
5078 optlen
= sizeof(optval
);
5081 (drv
->monitor_sock
, SOL_SOCKET
, SO_PRIORITY
, &optval
, optlen
)) {
5082 perror("Failed to set socket priority");
5086 if (eloop_register_read_sock(drv
->monitor_sock
, handle_monitor_read
,
5088 printf("Could not register monitor read socket\n");
5094 nl80211_remove_monitor_interface(drv
);
5100 static int nl80211_send_eapol_data(struct i802_bss
*bss
,
5101 const u8
*addr
, const u8
*data
,
5102 size_t data_len
, const u8
*own_addr
)
5104 if (bss
->drv
->l2
== NULL
) {
5105 wpa_printf(MSG_DEBUG
, "nl80211: No l2_packet to send EAPOL");
5109 if (l2_packet_send(bss
->drv
->l2
, addr
, ETH_P_EAPOL
, data
, data_len
) <
5114 #endif /* CONFIG_AP */
5117 static const u8 rfc1042_header
[6] = { 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
5119 static int wpa_driver_nl80211_hapd_send_eapol(
5120 void *priv
, const u8
*addr
, const u8
*data
,
5121 size_t data_len
, int encrypt
, const u8
*own_addr
, u32 flags
)
5123 struct i802_bss
*bss
= priv
;
5124 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5125 struct ieee80211_hdr
*hdr
;
5129 int qos
= flags
& WPA_STA_WMM
;
5132 if (drv
->no_monitor_iface_capab
)
5133 return nl80211_send_eapol_data(bss
, addr
, data
, data_len
,
5135 #endif /* CONFIG_AP */
5137 len
= sizeof(*hdr
) + (qos
? 2 : 0) + sizeof(rfc1042_header
) + 2 +
5139 hdr
= os_zalloc(len
);
5141 printf("malloc() failed for i802_send_data(len=%lu)\n",
5142 (unsigned long) len
);
5146 hdr
->frame_control
=
5147 IEEE80211_FC(WLAN_FC_TYPE_DATA
, WLAN_FC_STYPE_DATA
);
5148 hdr
->frame_control
|= host_to_le16(WLAN_FC_FROMDS
);
5150 hdr
->frame_control
|= host_to_le16(WLAN_FC_ISWEP
);
5152 hdr
->frame_control
|=
5153 host_to_le16(WLAN_FC_STYPE_QOS_DATA
<< 4);
5156 memcpy(hdr
->IEEE80211_DA_FROMDS
, addr
, ETH_ALEN
);
5157 memcpy(hdr
->IEEE80211_BSSID_FROMDS
, own_addr
, ETH_ALEN
);
5158 memcpy(hdr
->IEEE80211_SA_FROMDS
, own_addr
, ETH_ALEN
);
5159 pos
= (u8
*) (hdr
+ 1);
5162 /* add an empty QoS header if needed */
5168 memcpy(pos
, rfc1042_header
, sizeof(rfc1042_header
));
5169 pos
+= sizeof(rfc1042_header
);
5170 WPA_PUT_BE16(pos
, ETH_P_PAE
);
5172 memcpy(pos
, data
, data_len
);
5174 res
= wpa_driver_nl80211_send_frame(drv
, (u8
*) hdr
, len
, encrypt
);
5176 wpa_printf(MSG_ERROR
, "i802_send_eapol - packet len: %lu - "
5178 (unsigned long) len
, errno
, strerror(errno
));
5186 static int wpa_driver_nl80211_sta_set_flags(void *priv
, const u8
*addr
,
5188 int flags_or
, int flags_and
)
5190 struct i802_bss
*bss
= priv
;
5191 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5192 struct nl_msg
*msg
, *flags
= NULL
;
5193 struct nl80211_sta_flag_update upd
;
5195 msg
= nlmsg_alloc();
5199 flags
= nlmsg_alloc();
5205 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
5207 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
5208 if_nametoindex(bss
->ifname
));
5209 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
5212 * Backwards compatibility version using NL80211_ATTR_STA_FLAGS. This
5213 * can be removed eventually.
5215 if (total_flags
& WPA_STA_AUTHORIZED
)
5216 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_AUTHORIZED
);
5218 if (total_flags
& WPA_STA_WMM
)
5219 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_WME
);
5221 if (total_flags
& WPA_STA_SHORT_PREAMBLE
)
5222 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_SHORT_PREAMBLE
);
5224 if (total_flags
& WPA_STA_MFP
)
5225 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_MFP
);
5227 if (total_flags
& WPA_STA_TDLS_PEER
)
5228 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_TDLS_PEER
);
5230 if (nla_put_nested(msg
, NL80211_ATTR_STA_FLAGS
, flags
))
5231 goto nla_put_failure
;
5233 os_memset(&upd
, 0, sizeof(upd
));
5234 upd
.mask
= sta_flags_nl80211(flags_or
| ~flags_and
);
5235 upd
.set
= sta_flags_nl80211(flags_or
);
5236 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
5240 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5247 static int wpa_driver_nl80211_ap(struct wpa_driver_nl80211_data
*drv
,
5248 struct wpa_driver_associate_params
*params
)
5250 enum nl80211_iftype nlmode
;
5253 wpa_printf(MSG_DEBUG
, "nl80211: Setup AP operations for P2P "
5255 nlmode
= NL80211_IFTYPE_P2P_GO
;
5257 nlmode
= NL80211_IFTYPE_AP
;
5259 if (wpa_driver_nl80211_set_mode(&drv
->first_bss
, nlmode
) ||
5260 wpa_driver_nl80211_set_freq(drv
, params
->freq
, 0, 0)) {
5261 nl80211_remove_monitor_interface(drv
);
5265 if (drv
->no_monitor_iface_capab
) {
5266 if (wpa_driver_nl80211_probe_req_report(&drv
->first_bss
, 1) < 0)
5268 wpa_printf(MSG_DEBUG
, "nl80211: Failed to enable "
5269 "Probe Request frame reporting in AP mode");
5270 /* Try to survive without this */
5274 drv
->ap_oper_freq
= params
->freq
;
5280 static int nl80211_leave_ibss(struct wpa_driver_nl80211_data
*drv
)
5285 msg
= nlmsg_alloc();
5289 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_LEAVE_IBSS
);
5290 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5291 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5294 wpa_printf(MSG_DEBUG
, "nl80211: Leave IBSS failed: ret=%d "
5295 "(%s)", ret
, strerror(-ret
));
5296 goto nla_put_failure
;
5300 wpa_printf(MSG_DEBUG
, "nl80211: Leave IBSS request sent successfully");
5308 static int wpa_driver_nl80211_ibss(struct wpa_driver_nl80211_data
*drv
,
5309 struct wpa_driver_associate_params
*params
)
5315 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS (ifindex=%d)", drv
->ifindex
);
5317 if (wpa_driver_nl80211_set_mode(&drv
->first_bss
,
5318 NL80211_IFTYPE_ADHOC
)) {
5319 wpa_printf(MSG_INFO
, "nl80211: Failed to set interface into "
5325 msg
= nlmsg_alloc();
5329 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_JOIN_IBSS
);
5330 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5332 if (params
->ssid
== NULL
|| params
->ssid_len
> sizeof(drv
->ssid
))
5333 goto nla_put_failure
;
5335 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5336 params
->ssid
, params
->ssid_len
);
5337 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5339 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5340 drv
->ssid_len
= params
->ssid_len
;
5342 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5343 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5345 ret
= nl80211_set_conn_keys(params
, msg
);
5347 goto nla_put_failure
;
5349 if (params
->wpa_ie
) {
5350 wpa_hexdump(MSG_DEBUG
,
5351 " * Extra IEs for Beacon/Probe Response frames",
5352 params
->wpa_ie
, params
->wpa_ie_len
);
5353 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5357 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5360 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS failed: ret=%d (%s)",
5361 ret
, strerror(-ret
));
5363 if (ret
== -EALREADY
&& count
== 1) {
5364 wpa_printf(MSG_DEBUG
, "nl80211: Retry IBSS join after "
5366 nl80211_leave_ibss(drv
);
5371 goto nla_put_failure
;
5374 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS request sent successfully");
5382 static unsigned int nl80211_get_assoc_bssid(struct wpa_driver_nl80211_data
*drv
,
5387 struct nl80211_bss_info_arg arg
;
5389 os_memset(&arg
, 0, sizeof(arg
));
5390 msg
= nlmsg_alloc();
5392 goto nla_put_failure
;
5394 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
5395 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5398 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
5401 if (is_zero_ether_addr(arg
.assoc_bssid
))
5403 os_memcpy(bssid
, arg
.assoc_bssid
, ETH_ALEN
);
5406 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
5407 "(%s)", ret
, strerror(-ret
));
5410 return drv
->assoc_freq
;
5414 static int nl80211_disconnect(struct wpa_driver_nl80211_data
*drv
,
5419 if (bssid
== NULL
) {
5420 int res
= nl80211_get_assoc_bssid(drv
, addr
);
5426 return wpa_driver_nl80211_disconnect(drv
, bssid
,
5427 WLAN_REASON_PREV_AUTH_NOT_VALID
);
5431 static int wpa_driver_nl80211_connect(
5432 struct wpa_driver_nl80211_data
*drv
,
5433 struct wpa_driver_associate_params
*params
)
5436 enum nl80211_auth_type type
;
5440 msg
= nlmsg_alloc();
5444 wpa_printf(MSG_DEBUG
, "nl80211: Connect (ifindex=%d)", drv
->ifindex
);
5445 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_CONNECT
);
5447 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5448 if (params
->bssid
) {
5449 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
5450 MAC2STR(params
->bssid
));
5451 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
5454 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5455 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5458 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5459 params
->ssid
, params
->ssid_len
);
5460 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5462 if (params
->ssid_len
> sizeof(drv
->ssid
))
5463 goto nla_put_failure
;
5464 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5465 drv
->ssid_len
= params
->ssid_len
;
5467 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->wpa_ie
, params
->wpa_ie_len
);
5469 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5473 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
5475 if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
5477 if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
5480 wpa_printf(MSG_DEBUG
, " * Leave out Auth Type for automatic "
5482 goto skip_auth_type
;
5485 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
5486 type
= NL80211_AUTHTYPE_OPEN_SYSTEM
;
5487 else if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
5488 type
= NL80211_AUTHTYPE_SHARED_KEY
;
5489 else if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
5490 type
= NL80211_AUTHTYPE_NETWORK_EAP
;
5491 else if (params
->auth_alg
& WPA_AUTH_ALG_FT
)
5492 type
= NL80211_AUTHTYPE_FT
;
5494 goto nla_put_failure
;
5496 wpa_printf(MSG_DEBUG
, " * Auth Type %d", type
);
5497 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
, type
);
5500 if (params
->wpa_proto
) {
5501 enum nl80211_wpa_versions ver
= 0;
5503 if (params
->wpa_proto
& WPA_PROTO_WPA
)
5504 ver
|= NL80211_WPA_VERSION_1
;
5505 if (params
->wpa_proto
& WPA_PROTO_RSN
)
5506 ver
|= NL80211_WPA_VERSION_2
;
5508 wpa_printf(MSG_DEBUG
, " * WPA Versions 0x%x", ver
);
5509 NLA_PUT_U32(msg
, NL80211_ATTR_WPA_VERSIONS
, ver
);
5512 if (params
->pairwise_suite
!= CIPHER_NONE
) {
5515 switch (params
->pairwise_suite
) {
5517 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5520 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5523 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5527 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5530 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
, cipher
);
5533 if (params
->group_suite
!= CIPHER_NONE
) {
5536 switch (params
->group_suite
) {
5538 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5541 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5544 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5548 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5551 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
, cipher
);
5554 if (params
->key_mgmt_suite
== KEY_MGMT_802_1X
||
5555 params
->key_mgmt_suite
== KEY_MGMT_PSK
) {
5556 int mgmt
= WLAN_AKM_SUITE_PSK
;
5558 switch (params
->key_mgmt_suite
) {
5559 case KEY_MGMT_802_1X
:
5560 mgmt
= WLAN_AKM_SUITE_8021X
;
5564 mgmt
= WLAN_AKM_SUITE_PSK
;
5567 NLA_PUT_U32(msg
, NL80211_ATTR_AKM_SUITES
, mgmt
);
5570 ret
= nl80211_set_conn_keys(params
, msg
);
5572 goto nla_put_failure
;
5574 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5577 wpa_printf(MSG_DEBUG
, "nl80211: MLME connect failed: ret=%d "
5578 "(%s)", ret
, strerror(-ret
));
5580 * cfg80211 does not currently accept new connection if we are
5581 * already connected. As a workaround, force disconnection and
5582 * try again once the driver indicates it completed
5585 if (ret
== -EALREADY
)
5586 nl80211_disconnect(drv
, params
->bssid
);
5587 goto nla_put_failure
;
5590 wpa_printf(MSG_DEBUG
, "nl80211: Connect request send successfully");
5599 static int wpa_driver_nl80211_associate(
5600 void *priv
, struct wpa_driver_associate_params
*params
)
5602 struct i802_bss
*bss
= priv
;
5603 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5607 if (params
->mode
== IEEE80211_MODE_AP
)
5608 return wpa_driver_nl80211_ap(drv
, params
);
5610 if (params
->mode
== IEEE80211_MODE_IBSS
)
5611 return wpa_driver_nl80211_ibss(drv
, params
);
5613 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
)) {
5614 enum nl80211_iftype nlmode
= params
->p2p
?
5615 NL80211_IFTYPE_P2P_CLIENT
: NL80211_IFTYPE_STATION
;
5617 if (wpa_driver_nl80211_set_mode(priv
, nlmode
) < 0)
5619 return wpa_driver_nl80211_connect(drv
, params
);
5622 drv
->associated
= 0;
5624 msg
= nlmsg_alloc();
5628 wpa_printf(MSG_DEBUG
, "nl80211: Associate (ifindex=%d)",
5630 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_ASSOCIATE
);
5632 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5633 if (params
->bssid
) {
5634 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
5635 MAC2STR(params
->bssid
));
5636 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
5639 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5640 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5641 drv
->assoc_freq
= params
->freq
;
5643 drv
->assoc_freq
= 0;
5645 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5646 params
->ssid
, params
->ssid_len
);
5647 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5649 if (params
->ssid_len
> sizeof(drv
->ssid
))
5650 goto nla_put_failure
;
5651 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5652 drv
->ssid_len
= params
->ssid_len
;
5654 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->wpa_ie
, params
->wpa_ie_len
);
5656 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5659 if (params
->pairwise_suite
!= CIPHER_NONE
) {
5662 switch (params
->pairwise_suite
) {
5664 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5667 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5670 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5674 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5677 wpa_printf(MSG_DEBUG
, " * pairwise=0x%x", cipher
);
5678 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
, cipher
);
5681 if (params
->group_suite
!= CIPHER_NONE
) {
5684 switch (params
->group_suite
) {
5686 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5689 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5692 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5696 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5699 wpa_printf(MSG_DEBUG
, " * group=0x%x", cipher
);
5700 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
, cipher
);
5703 #ifdef CONFIG_IEEE80211W
5704 if (params
->mgmt_frame_protection
== MGMT_FRAME_PROTECTION_REQUIRED
)
5705 NLA_PUT_U32(msg
, NL80211_ATTR_USE_MFP
, NL80211_MFP_REQUIRED
);
5706 #endif /* CONFIG_IEEE80211W */
5708 NLA_PUT_FLAG(msg
, NL80211_ATTR_CONTROL_PORT
);
5710 if (params
->prev_bssid
) {
5711 wpa_printf(MSG_DEBUG
, " * prev_bssid=" MACSTR
,
5712 MAC2STR(params
->prev_bssid
));
5713 NLA_PUT(msg
, NL80211_ATTR_PREV_BSSID
, ETH_ALEN
,
5714 params
->prev_bssid
);
5718 wpa_printf(MSG_DEBUG
, " * P2P group");
5720 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5723 wpa_dbg(drv
->ctx
, MSG_DEBUG
,
5724 "nl80211: MLME command failed (assoc): ret=%d (%s)",
5725 ret
, strerror(-ret
));
5726 nl80211_dump_scan(drv
);
5727 goto nla_put_failure
;
5730 wpa_printf(MSG_DEBUG
, "nl80211: Association request send "
5739 static int nl80211_set_mode(struct wpa_driver_nl80211_data
*drv
,
5740 int ifindex
, enum nl80211_iftype mode
)
5745 wpa_printf(MSG_DEBUG
, "nl80211: Set mode ifindex %d iftype %d (%s)",
5746 ifindex
, mode
, nl80211_iftype_str(mode
));
5748 msg
= nlmsg_alloc();
5752 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_INTERFACE
);
5753 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
5754 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, mode
);
5756 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5760 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set interface %d to mode %d:"
5761 " %d (%s)", ifindex
, mode
, ret
, strerror(-ret
));
5766 static int wpa_driver_nl80211_set_mode(struct i802_bss
*bss
,
5767 enum nl80211_iftype nlmode
)
5769 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5772 int was_ap
= is_ap_interface(drv
->nlmode
);
5774 if (nl80211_set_mode(drv
, drv
->ifindex
, nlmode
) == 0) {
5775 drv
->nlmode
= nlmode
;
5780 if (nlmode
== drv
->nlmode
) {
5781 wpa_printf(MSG_DEBUG
, "nl80211: Interface already in "
5782 "requested mode - ignore error");
5784 goto done
; /* Already in the requested mode */
5787 /* mac80211 doesn't allow mode changes while the device is up, so
5788 * take the device down, try to set the mode again, and bring the
5791 wpa_printf(MSG_DEBUG
, "nl80211: Try mode change after setting "
5793 for (i
= 0; i
< 10; i
++) {
5795 res
= linux_set_iface_flags(drv
->global
->ioctl_sock
,
5797 if (res
== -EACCES
|| res
== -ENODEV
)
5800 /* Try to set the mode again while the interface is
5802 ret
= nl80211_set_mode(drv
, drv
->ifindex
, nlmode
);
5805 res
= linux_set_iface_flags(drv
->global
->ioctl_sock
,
5809 else if (ret
!= -EBUSY
)
5812 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set "
5814 os_sleep(0, 100000);
5818 wpa_printf(MSG_DEBUG
, "nl80211: Mode change succeeded while "
5819 "interface is down");
5820 drv
->nlmode
= nlmode
;
5821 drv
->ignore_if_down_event
= 1;
5825 if (!ret
&& is_ap_interface(nlmode
)) {
5826 /* Setup additional AP mode functionality if needed */
5827 if (!drv
->no_monitor_iface_capab
&& drv
->monitor_ifidx
< 0 &&
5828 nl80211_create_monitor_interface(drv
) &&
5829 !drv
->no_monitor_iface_capab
)
5831 } else if (!ret
&& !is_ap_interface(nlmode
)) {
5832 /* Remove additional AP mode functionality */
5833 if (was_ap
&& drv
->no_monitor_iface_capab
)
5834 wpa_driver_nl80211_probe_req_report(bss
, 0);
5835 nl80211_remove_monitor_interface(drv
);
5836 bss
->beacon_set
= 0;
5839 if (!ret
&& is_p2p_interface(drv
->nlmode
)) {
5840 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 1);
5841 drv
->disabled_11b_rates
= 1;
5842 } else if (!ret
&& drv
->disabled_11b_rates
) {
5843 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 0);
5844 drv
->disabled_11b_rates
= 0;
5848 wpa_printf(MSG_DEBUG
, "nl80211: Interface mode change to %d "
5849 "from %d failed", nlmode
, drv
->nlmode
);
5855 static int wpa_driver_nl80211_get_capa(void *priv
,
5856 struct wpa_driver_capa
*capa
)
5858 struct i802_bss
*bss
= priv
;
5859 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5860 if (!drv
->has_capability
)
5862 os_memcpy(capa
, &drv
->capa
, sizeof(*capa
));
5867 static int wpa_driver_nl80211_set_operstate(void *priv
, int state
)
5869 struct i802_bss
*bss
= priv
;
5870 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5872 wpa_printf(MSG_DEBUG
, "%s: operstate %d->%d (%s)",
5873 __func__
, drv
->operstate
, state
, state
? "UP" : "DORMANT");
5874 drv
->operstate
= state
;
5875 return netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
, -1,
5876 state
? IF_OPER_UP
: IF_OPER_DORMANT
);
5880 static int wpa_driver_nl80211_set_supp_port(void *priv
, int authorized
)
5882 struct i802_bss
*bss
= priv
;
5883 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5885 struct nl80211_sta_flag_update upd
;
5887 msg
= nlmsg_alloc();
5891 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
5893 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
5894 if_nametoindex(bss
->ifname
));
5895 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, drv
->bssid
);
5897 os_memset(&upd
, 0, sizeof(upd
));
5898 upd
.mask
= BIT(NL80211_STA_FLAG_AUTHORIZED
);
5900 upd
.set
= BIT(NL80211_STA_FLAG_AUTHORIZED
);
5901 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
5903 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5909 /* Set kernel driver on given frequency (MHz) */
5910 static int i802_set_freq(void *priv
, struct hostapd_freq_params
*freq
)
5912 struct i802_bss
*bss
= priv
;
5913 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5914 return wpa_driver_nl80211_set_freq(drv
, freq
->freq
, freq
->ht_enabled
,
5915 freq
->sec_channel_offset
);
5919 #if defined(HOSTAPD) || defined(CONFIG_AP)
5921 static inline int min_int(int a
, int b
)
5929 static int get_key_handler(struct nl_msg
*msg
, void *arg
)
5931 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
5932 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
5934 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
5935 genlmsg_attrlen(gnlh
, 0), NULL
);
5938 * TODO: validate the key index and mac address!
5939 * Otherwise, there's a race condition as soon as
5940 * the kernel starts sending key notifications.
5943 if (tb
[NL80211_ATTR_KEY_SEQ
])
5944 memcpy(arg
, nla_data(tb
[NL80211_ATTR_KEY_SEQ
]),
5945 min_int(nla_len(tb
[NL80211_ATTR_KEY_SEQ
]), 6));
5950 static int i802_get_seqnum(const char *iface
, void *priv
, const u8
*addr
,
5953 struct i802_bss
*bss
= priv
;
5954 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5957 msg
= nlmsg_alloc();
5961 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_KEY
);
5964 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
5965 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, idx
);
5966 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(iface
));
5970 return send_and_recv_msgs(drv
, msg
, get_key_handler
, seq
);
5976 static int i802_set_rate_sets(void *priv
, int *supp_rates
, int *basic_rates
,
5979 struct i802_bss
*bss
= priv
;
5980 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5982 u8 rates
[NL80211_MAX_SUPP_RATES
];
5986 msg
= nlmsg_alloc();
5990 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
5992 for (i
= 0; i
< NL80211_MAX_SUPP_RATES
&& basic_rates
[i
] >= 0; i
++)
5993 rates
[rates_len
++] = basic_rates
[i
] / 5;
5995 NLA_PUT(msg
, NL80211_ATTR_BSS_BASIC_RATES
, rates_len
, rates
);
5997 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
5999 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6005 static int i802_set_rts(void *priv
, int rts
)
6007 struct i802_bss
*bss
= priv
;
6008 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6013 msg
= nlmsg_alloc();
6022 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6023 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6024 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_RTS_THRESHOLD
, val
);
6026 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6030 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set RTS threshold %d: "
6031 "%d (%s)", rts
, ret
, strerror(-ret
));
6036 static int i802_set_frag(void *priv
, int frag
)
6038 struct i802_bss
*bss
= priv
;
6039 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6044 msg
= nlmsg_alloc();
6053 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6054 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6055 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FRAG_THRESHOLD
, val
);
6057 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6061 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set fragmentation threshold "
6062 "%d: %d (%s)", frag
, ret
, strerror(-ret
));
6067 static int i802_flush(void *priv
)
6069 struct i802_bss
*bss
= priv
;
6070 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6073 msg
= nlmsg_alloc();
6077 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_STATION
);
6080 * XXX: FIX! this needs to flush all VLANs too
6082 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
6083 if_nametoindex(bss
->ifname
));
6085 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6091 static int get_sta_handler(struct nl_msg
*msg
, void *arg
)
6093 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
6094 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
6095 struct hostap_sta_driver_data
*data
= arg
;
6096 struct nlattr
*stats
[NL80211_STA_INFO_MAX
+ 1];
6097 static struct nla_policy stats_policy
[NL80211_STA_INFO_MAX
+ 1] = {
6098 [NL80211_STA_INFO_INACTIVE_TIME
] = { .type
= NLA_U32
},
6099 [NL80211_STA_INFO_RX_BYTES
] = { .type
= NLA_U32
},
6100 [NL80211_STA_INFO_TX_BYTES
] = { .type
= NLA_U32
},
6101 [NL80211_STA_INFO_RX_PACKETS
] = { .type
= NLA_U32
},
6102 [NL80211_STA_INFO_TX_PACKETS
] = { .type
= NLA_U32
},
6105 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
6106 genlmsg_attrlen(gnlh
, 0), NULL
);
6109 * TODO: validate the interface and mac address!
6110 * Otherwise, there's a race condition as soon as
6111 * the kernel starts sending station notifications.
6114 if (!tb
[NL80211_ATTR_STA_INFO
]) {
6115 wpa_printf(MSG_DEBUG
, "sta stats missing!");
6118 if (nla_parse_nested(stats
, NL80211_STA_INFO_MAX
,
6119 tb
[NL80211_ATTR_STA_INFO
],
6121 wpa_printf(MSG_DEBUG
, "failed to parse nested attributes!");
6125 if (stats
[NL80211_STA_INFO_INACTIVE_TIME
])
6126 data
->inactive_msec
=
6127 nla_get_u32(stats
[NL80211_STA_INFO_INACTIVE_TIME
]);
6128 if (stats
[NL80211_STA_INFO_RX_BYTES
])
6129 data
->rx_bytes
= nla_get_u32(stats
[NL80211_STA_INFO_RX_BYTES
]);
6130 if (stats
[NL80211_STA_INFO_TX_BYTES
])
6131 data
->tx_bytes
= nla_get_u32(stats
[NL80211_STA_INFO_TX_BYTES
]);
6132 if (stats
[NL80211_STA_INFO_RX_PACKETS
])
6134 nla_get_u32(stats
[NL80211_STA_INFO_RX_PACKETS
]);
6135 if (stats
[NL80211_STA_INFO_TX_PACKETS
])
6137 nla_get_u32(stats
[NL80211_STA_INFO_TX_PACKETS
]);
6142 static int i802_read_sta_data(void *priv
, struct hostap_sta_driver_data
*data
,
6145 struct i802_bss
*bss
= priv
;
6146 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6149 os_memset(data
, 0, sizeof(*data
));
6150 msg
= nlmsg_alloc();
6154 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_STATION
);
6156 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6157 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6159 return send_and_recv_msgs(drv
, msg
, get_sta_handler
, data
);
6165 static int i802_set_tx_queue_params(void *priv
, int queue
, int aifs
,
6166 int cw_min
, int cw_max
, int burst_time
)
6168 struct i802_bss
*bss
= priv
;
6169 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6171 struct nlattr
*txq
, *params
;
6173 msg
= nlmsg_alloc();
6177 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6179 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6181 txq
= nla_nest_start(msg
, NL80211_ATTR_WIPHY_TXQ_PARAMS
);
6183 goto nla_put_failure
;
6185 /* We are only sending parameters for a single TXQ at a time */
6186 params
= nla_nest_start(msg
, 1);
6188 goto nla_put_failure
;
6192 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_VO
);
6195 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_VI
);
6198 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_BE
);
6201 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_BK
);
6204 /* Burst time is configured in units of 0.1 msec and TXOP parameter in
6205 * 32 usec, so need to convert the value here. */
6206 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_TXOP
, (burst_time
* 100 + 16) / 32);
6207 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_CWMIN
, cw_min
);
6208 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_CWMAX
, cw_max
);
6209 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_AIFS
, aifs
);
6211 nla_nest_end(msg
, params
);
6213 nla_nest_end(msg
, txq
);
6215 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
6222 static int i802_set_sta_vlan(void *priv
, const u8
*addr
,
6223 const char *ifname
, int vlan_id
)
6225 struct i802_bss
*bss
= priv
;
6226 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6230 msg
= nlmsg_alloc();
6234 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
6236 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
6237 if_nametoindex(bss
->ifname
));
6238 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6239 NLA_PUT_U32(msg
, NL80211_ATTR_STA_VLAN
,
6240 if_nametoindex(ifname
));
6242 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6244 wpa_printf(MSG_ERROR
, "nl80211: NL80211_ATTR_STA_VLAN (addr="
6245 MACSTR
" ifname=%s vlan_id=%d) failed: %d (%s)",
6246 MAC2STR(addr
), ifname
, vlan_id
, ret
,
6254 static int i802_get_inact_sec(void *priv
, const u8
*addr
)
6256 struct hostap_sta_driver_data data
;
6259 data
.inactive_msec
= (unsigned long) -1;
6260 ret
= i802_read_sta_data(priv
, &data
, addr
);
6261 if (ret
|| data
.inactive_msec
== (unsigned long) -1)
6263 return data
.inactive_msec
/ 1000;
6267 static int i802_sta_clear_stats(void *priv
, const u8
*addr
)
6276 static int i802_sta_deauth(void *priv
, const u8
*own_addr
, const u8
*addr
,
6279 struct i802_bss
*bss
= priv
;
6280 struct ieee80211_mgmt mgmt
;
6282 memset(&mgmt
, 0, sizeof(mgmt
));
6283 mgmt
.frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
6284 WLAN_FC_STYPE_DEAUTH
);
6285 memcpy(mgmt
.da
, addr
, ETH_ALEN
);
6286 memcpy(mgmt
.sa
, own_addr
, ETH_ALEN
);
6287 memcpy(mgmt
.bssid
, own_addr
, ETH_ALEN
);
6288 mgmt
.u
.deauth
.reason_code
= host_to_le16(reason
);
6289 return wpa_driver_nl80211_send_mlme(bss
, (u8
*) &mgmt
,
6291 sizeof(mgmt
.u
.deauth
));
6295 static int i802_sta_disassoc(void *priv
, const u8
*own_addr
, const u8
*addr
,
6298 struct i802_bss
*bss
= priv
;
6299 struct ieee80211_mgmt mgmt
;
6301 memset(&mgmt
, 0, sizeof(mgmt
));
6302 mgmt
.frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
6303 WLAN_FC_STYPE_DISASSOC
);
6304 memcpy(mgmt
.da
, addr
, ETH_ALEN
);
6305 memcpy(mgmt
.sa
, own_addr
, ETH_ALEN
);
6306 memcpy(mgmt
.bssid
, own_addr
, ETH_ALEN
);
6307 mgmt
.u
.disassoc
.reason_code
= host_to_le16(reason
);
6308 return wpa_driver_nl80211_send_mlme(bss
, (u8
*) &mgmt
,
6310 sizeof(mgmt
.u
.disassoc
));
6313 #endif /* HOSTAPD || CONFIG_AP */
6317 static void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6322 wpa_printf(MSG_DEBUG
, "nl80211: Add own interface ifindex %d",
6324 for (i
= 0; i
< drv
->num_if_indices
; i
++) {
6325 if (drv
->if_indices
[i
] == 0) {
6326 drv
->if_indices
[i
] = ifidx
;
6331 if (drv
->if_indices
!= drv
->default_if_indices
)
6332 old
= drv
->if_indices
;
6336 drv
->if_indices
= os_realloc(old
,
6337 sizeof(int) * (drv
->num_if_indices
+ 1));
6338 if (!drv
->if_indices
) {
6340 drv
->if_indices
= drv
->default_if_indices
;
6342 drv
->if_indices
= old
;
6343 wpa_printf(MSG_ERROR
, "Failed to reallocate memory for "
6345 wpa_printf(MSG_ERROR
, "Ignoring EAPOL on interface %d", ifidx
);
6348 os_memcpy(drv
->if_indices
, drv
->default_if_indices
,
6349 sizeof(drv
->default_if_indices
));
6350 drv
->if_indices
[drv
->num_if_indices
] = ifidx
;
6351 drv
->num_if_indices
++;
6355 static void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6359 for (i
= 0; i
< drv
->num_if_indices
; i
++) {
6360 if (drv
->if_indices
[i
] == ifidx
) {
6361 drv
->if_indices
[i
] = 0;
6368 static int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6372 for (i
= 0; i
< drv
->num_if_indices
; i
++)
6373 if (drv
->if_indices
[i
] == ifidx
)
6380 static int i802_set_wds_sta(void *priv
, const u8
*addr
, int aid
, int val
,
6381 const char *bridge_ifname
)
6383 struct i802_bss
*bss
= priv
;
6384 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6385 char name
[IFNAMSIZ
+ 1];
6387 os_snprintf(name
, sizeof(name
), "%s.sta%d", bss
->ifname
, aid
);
6388 wpa_printf(MSG_DEBUG
, "nl80211: Set WDS STA addr=" MACSTR
6389 " aid=%d val=%d name=%s", MAC2STR(addr
), aid
, val
, name
);
6391 if (!if_nametoindex(name
)) {
6392 if (nl80211_create_iface(drv
, name
,
6393 NL80211_IFTYPE_AP_VLAN
,
6396 if (bridge_ifname
&&
6397 linux_br_add_if(drv
->global
->ioctl_sock
,
6398 bridge_ifname
, name
) < 0)
6401 linux_set_iface_flags(drv
->global
->ioctl_sock
, name
, 1);
6402 return i802_set_sta_vlan(priv
, addr
, name
, 0);
6404 i802_set_sta_vlan(priv
, addr
, bss
->ifname
, 0);
6405 return wpa_driver_nl80211_if_remove(priv
, WPA_IF_AP_VLAN
,
6411 static void handle_eapol(int sock
, void *eloop_ctx
, void *sock_ctx
)
6413 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
6414 struct sockaddr_ll lladdr
;
6415 unsigned char buf
[3000];
6417 socklen_t fromlen
= sizeof(lladdr
);
6419 len
= recvfrom(sock
, buf
, sizeof(buf
), 0,
6420 (struct sockaddr
*)&lladdr
, &fromlen
);
6426 if (have_ifidx(drv
, lladdr
.sll_ifindex
))
6427 drv_event_eapol_rx(drv
->ctx
, lladdr
.sll_addr
, buf
, len
);
6431 static int i802_check_bridge(struct wpa_driver_nl80211_data
*drv
,
6432 struct i802_bss
*bss
,
6433 const char *brname
, const char *ifname
)
6436 char in_br
[IFNAMSIZ
];
6438 os_strlcpy(bss
->brname
, brname
, IFNAMSIZ
);
6439 ifindex
= if_nametoindex(brname
);
6442 * Bridge was configured, but the bridge device does
6443 * not exist. Try to add it now.
6445 if (linux_br_add(drv
->global
->ioctl_sock
, brname
) < 0) {
6446 wpa_printf(MSG_ERROR
, "nl80211: Failed to add the "
6447 "bridge interface %s: %s",
6448 brname
, strerror(errno
));
6451 bss
->added_bridge
= 1;
6452 add_ifidx(drv
, if_nametoindex(brname
));
6455 if (linux_br_get(in_br
, ifname
) == 0) {
6456 if (os_strcmp(in_br
, brname
) == 0)
6457 return 0; /* already in the bridge */
6459 wpa_printf(MSG_DEBUG
, "nl80211: Removing interface %s from "
6460 "bridge %s", ifname
, in_br
);
6461 if (linux_br_del_if(drv
->global
->ioctl_sock
, in_br
, ifname
) <
6463 wpa_printf(MSG_ERROR
, "nl80211: Failed to "
6464 "remove interface %s from bridge "
6466 ifname
, brname
, strerror(errno
));
6471 wpa_printf(MSG_DEBUG
, "nl80211: Adding interface %s into bridge %s",
6473 if (linux_br_add_if(drv
->global
->ioctl_sock
, brname
, ifname
) < 0) {
6474 wpa_printf(MSG_ERROR
, "nl80211: Failed to add interface %s "
6475 "into bridge %s: %s",
6476 ifname
, brname
, strerror(errno
));
6479 bss
->added_if_into_bridge
= 1;
6485 static void *i802_init(struct hostapd_data
*hapd
,
6486 struct wpa_init_params
*params
)
6488 struct wpa_driver_nl80211_data
*drv
;
6489 struct i802_bss
*bss
;
6491 char brname
[IFNAMSIZ
];
6492 int ifindex
, br_ifindex
;
6495 bss
= wpa_driver_nl80211_init(hapd
, params
->ifname
,
6496 params
->global_priv
);
6501 drv
->nlmode
= NL80211_IFTYPE_AP
;
6502 drv
->eapol_sock
= -1;
6504 if (linux_br_get(brname
, params
->ifname
) == 0) {
6505 wpa_printf(MSG_DEBUG
, "nl80211: Interface %s is in bridge %s",
6506 params
->ifname
, brname
);
6507 br_ifindex
= if_nametoindex(brname
);
6513 drv
->num_if_indices
= sizeof(drv
->default_if_indices
) / sizeof(int);
6514 drv
->if_indices
= drv
->default_if_indices
;
6515 for (i
= 0; i
< params
->num_bridge
; i
++) {
6516 if (params
->bridge
[i
]) {
6517 ifindex
= if_nametoindex(params
->bridge
[i
]);
6519 add_ifidx(drv
, ifindex
);
6520 if (ifindex
== br_ifindex
)
6524 if (!br_added
&& br_ifindex
&&
6525 (params
->num_bridge
== 0 || !params
->bridge
[0]))
6526 add_ifidx(drv
, br_ifindex
);
6528 /* start listening for EAPOL on the default AP interface */
6529 add_ifidx(drv
, drv
->ifindex
);
6531 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 0))
6534 if (params
->bssid
) {
6535 if (linux_set_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6540 if (wpa_driver_nl80211_set_mode(bss
, drv
->nlmode
)) {
6541 wpa_printf(MSG_ERROR
, "nl80211: Failed to set interface %s "
6542 "into AP mode", bss
->ifname
);
6546 if (params
->num_bridge
&& params
->bridge
[0] &&
6547 i802_check_bridge(drv
, bss
, params
->bridge
[0], params
->ifname
) < 0)
6550 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1))
6553 drv
->eapol_sock
= socket(PF_PACKET
, SOCK_DGRAM
, htons(ETH_P_PAE
));
6554 if (drv
->eapol_sock
< 0) {
6555 perror("socket(PF_PACKET, SOCK_DGRAM, ETH_P_PAE)");
6559 if (eloop_register_read_sock(drv
->eapol_sock
, handle_eapol
, drv
, NULL
))
6561 printf("Could not register read socket for eapol\n");
6565 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6572 wpa_driver_nl80211_deinit(bss
);
6577 static void i802_deinit(void *priv
)
6579 wpa_driver_nl80211_deinit(priv
);
6582 #endif /* HOSTAPD */
6585 static enum nl80211_iftype
wpa_driver_nl80211_if_type(
6586 enum wpa_driver_if_type type
)
6589 case WPA_IF_STATION
:
6590 return NL80211_IFTYPE_STATION
;
6591 case WPA_IF_P2P_CLIENT
:
6592 case WPA_IF_P2P_GROUP
:
6593 return NL80211_IFTYPE_P2P_CLIENT
;
6594 case WPA_IF_AP_VLAN
:
6595 return NL80211_IFTYPE_AP_VLAN
;
6597 return NL80211_IFTYPE_AP
;
6599 return NL80211_IFTYPE_P2P_GO
;
6607 static int nl80211_addr_in_use(struct nl80211_global
*global
, const u8
*addr
)
6609 struct wpa_driver_nl80211_data
*drv
;
6610 dl_list_for_each(drv
, &global
->interfaces
,
6611 struct wpa_driver_nl80211_data
, list
) {
6612 if (os_memcmp(addr
, drv
->addr
, ETH_ALEN
) == 0)
6619 static int nl80211_p2p_interface_addr(struct wpa_driver_nl80211_data
*drv
,
6627 os_memcpy(new_addr
, drv
->addr
, ETH_ALEN
);
6628 for (idx
= 0; idx
< 64; idx
++) {
6629 new_addr
[0] = drv
->addr
[0] | 0x02;
6630 new_addr
[0] ^= idx
<< 2;
6631 if (!nl80211_addr_in_use(drv
->global
, new_addr
))
6637 wpa_printf(MSG_DEBUG
, "nl80211: Assigned new P2P Interface Address "
6638 MACSTR
, MAC2STR(new_addr
));
6643 #endif /* CONFIG_P2P */
6646 static int wpa_driver_nl80211_if_add(void *priv
, enum wpa_driver_if_type type
,
6647 const char *ifname
, const u8
*addr
,
6648 void *bss_ctx
, void **drv_priv
,
6649 char *force_ifname
, u8
*if_addr
,
6652 struct i802_bss
*bss
= priv
;
6653 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6656 struct i802_bss
*new_bss
= NULL
;
6658 if (type
== WPA_IF_AP_BSS
) {
6659 new_bss
= os_zalloc(sizeof(*new_bss
));
6660 if (new_bss
== NULL
)
6663 #endif /* HOSTAPD */
6666 os_memcpy(if_addr
, addr
, ETH_ALEN
);
6667 ifidx
= nl80211_create_iface(drv
, ifname
,
6668 wpa_driver_nl80211_if_type(type
), addr
,
6673 #endif /* HOSTAPD */
6678 linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6680 nl80211_remove_iface(drv
, ifidx
);
6686 (type
== WPA_IF_P2P_CLIENT
|| type
== WPA_IF_P2P_GROUP
||
6687 type
== WPA_IF_P2P_GO
)) {
6688 /* Enforce unique P2P Interface Address */
6689 u8 new_addr
[ETH_ALEN
], own_addr
[ETH_ALEN
];
6691 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6693 linux_get_ifhwaddr(drv
->global
->ioctl_sock
, ifname
,
6695 nl80211_remove_iface(drv
, ifidx
);
6698 if (os_memcmp(own_addr
, new_addr
, ETH_ALEN
) == 0) {
6699 wpa_printf(MSG_DEBUG
, "nl80211: Allocate new address "
6700 "for P2P group interface");
6701 if (nl80211_p2p_interface_addr(drv
, new_addr
) < 0) {
6702 nl80211_remove_iface(drv
, ifidx
);
6705 if (linux_set_ifhwaddr(drv
->global
->ioctl_sock
, ifname
,
6707 nl80211_remove_iface(drv
, ifidx
);
6711 os_memcpy(if_addr
, new_addr
, ETH_ALEN
);
6713 #endif /* CONFIG_P2P */
6717 i802_check_bridge(drv
, new_bss
, bridge
, ifname
) < 0) {
6718 wpa_printf(MSG_ERROR
, "nl80211: Failed to add the new "
6719 "interface %s to a bridge %s", ifname
, bridge
);
6720 nl80211_remove_iface(drv
, ifidx
);
6725 if (type
== WPA_IF_AP_BSS
) {
6726 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, ifname
, 1))
6728 nl80211_remove_iface(drv
, ifidx
);
6732 os_strlcpy(new_bss
->ifname
, ifname
, IFNAMSIZ
);
6733 new_bss
->ifindex
= ifidx
;
6735 new_bss
->next
= drv
->first_bss
.next
;
6736 drv
->first_bss
.next
= new_bss
;
6738 *drv_priv
= new_bss
;
6740 #endif /* HOSTAPD */
6743 drv
->global
->if_add_ifindex
= ifidx
;
6749 static int wpa_driver_nl80211_if_remove(void *priv
,
6750 enum wpa_driver_if_type type
,
6753 struct i802_bss
*bss
= priv
;
6754 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6755 int ifindex
= if_nametoindex(ifname
);
6757 wpa_printf(MSG_DEBUG
, "nl80211: %s(type=%d ifname=%s) ifindex=%d",
6758 __func__
, type
, ifname
, ifindex
);
6763 if (bss
->added_if_into_bridge
) {
6764 if (linux_br_del_if(drv
->global
->ioctl_sock
, bss
->brname
,
6766 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
6767 "interface %s from bridge %s: %s",
6768 bss
->ifname
, bss
->brname
, strerror(errno
));
6770 if (bss
->added_bridge
) {
6771 if (linux_br_del(drv
->global
->ioctl_sock
, bss
->brname
) < 0)
6772 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
6774 bss
->brname
, strerror(errno
));
6776 #endif /* HOSTAPD */
6778 nl80211_remove_iface(drv
, ifindex
);
6781 if (type
!= WPA_IF_AP_BSS
)
6784 if (bss
!= &drv
->first_bss
) {
6785 struct i802_bss
*tbss
;
6787 for (tbss
= &drv
->first_bss
; tbss
; tbss
= tbss
->next
) {
6788 if (tbss
->next
== bss
) {
6789 tbss
->next
= bss
->next
;
6796 wpa_printf(MSG_INFO
, "nl80211: %s - could not find "
6797 "BSS %p in the list", __func__
, bss
);
6799 #endif /* HOSTAPD */
6805 static int cookie_handler(struct nl_msg
*msg
, void *arg
)
6807 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
6808 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
6810 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
6811 genlmsg_attrlen(gnlh
, 0), NULL
);
6812 if (tb
[NL80211_ATTR_COOKIE
])
6813 *cookie
= nla_get_u64(tb
[NL80211_ATTR_COOKIE
]);
6818 static int nl80211_send_frame_cmd(struct wpa_driver_nl80211_data
*drv
,
6819 unsigned int freq
, unsigned int wait
,
6820 const u8
*buf
, size_t buf_len
,
6821 u64
*cookie_out
, int no_cck
)
6827 msg
= nlmsg_alloc();
6831 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_FRAME
);
6833 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6834 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
6836 NLA_PUT_U32(msg
, NL80211_ATTR_DURATION
, wait
);
6837 NLA_PUT_FLAG(msg
, NL80211_ATTR_OFFCHANNEL_TX_OK
);
6839 NLA_PUT_FLAG(msg
, NL80211_ATTR_TX_NO_CCK_RATE
);
6841 NLA_PUT(msg
, NL80211_ATTR_FRAME
, buf_len
, buf
);
6844 ret
= send_and_recv_msgs(drv
, msg
, cookie_handler
, &cookie
);
6847 wpa_printf(MSG_DEBUG
, "nl80211: Frame command failed: ret=%d "
6848 "(%s) (freq=%u wait=%u)", ret
, strerror(-ret
),
6850 goto nla_put_failure
;
6852 wpa_printf(MSG_DEBUG
, "nl80211: Frame TX command accepted; "
6853 "cookie 0x%llx", (long long unsigned int) cookie
);
6856 *cookie_out
= cookie
;
6864 static int wpa_driver_nl80211_send_action(void *priv
, unsigned int freq
,
6865 unsigned int wait_time
,
6866 const u8
*dst
, const u8
*src
,
6868 const u8
*data
, size_t data_len
,
6871 struct i802_bss
*bss
= priv
;
6872 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6875 struct ieee80211_hdr
*hdr
;
6877 wpa_printf(MSG_DEBUG
, "nl80211: Send Action frame (ifindex=%d, "
6878 "wait=%d ms no_cck=%d)", drv
->ifindex
, wait_time
, no_cck
);
6880 buf
= os_zalloc(24 + data_len
);
6883 os_memcpy(buf
+ 24, data
, data_len
);
6884 hdr
= (struct ieee80211_hdr
*) buf
;
6885 hdr
->frame_control
=
6886 IEEE80211_FC(WLAN_FC_TYPE_MGMT
, WLAN_FC_STYPE_ACTION
);
6887 os_memcpy(hdr
->addr1
, dst
, ETH_ALEN
);
6888 os_memcpy(hdr
->addr2
, src
, ETH_ALEN
);
6889 os_memcpy(hdr
->addr3
, bssid
, ETH_ALEN
);
6891 if (is_ap_interface(drv
->nlmode
))
6892 ret
= wpa_driver_nl80211_send_mlme(priv
, buf
, 24 + data_len
);
6894 ret
= nl80211_send_frame_cmd(drv
, freq
, wait_time
, buf
,
6896 &drv
->send_action_cookie
,
6904 static void wpa_driver_nl80211_send_action_cancel_wait(void *priv
)
6906 struct i802_bss
*bss
= priv
;
6907 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6911 msg
= nlmsg_alloc();
6915 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_FRAME_WAIT_CANCEL
);
6917 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6918 NLA_PUT_U64(msg
, NL80211_ATTR_COOKIE
, drv
->send_action_cookie
);
6920 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6923 wpa_printf(MSG_DEBUG
, "nl80211: wait cancel failed: ret=%d "
6924 "(%s)", ret
, strerror(-ret
));
6931 static int wpa_driver_nl80211_remain_on_channel(void *priv
, unsigned int freq
,
6932 unsigned int duration
)
6934 struct i802_bss
*bss
= priv
;
6935 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6940 msg
= nlmsg_alloc();
6944 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REMAIN_ON_CHANNEL
);
6946 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6947 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
6948 NLA_PUT_U32(msg
, NL80211_ATTR_DURATION
, duration
);
6951 ret
= send_and_recv_msgs(drv
, msg
, cookie_handler
, &cookie
);
6953 wpa_printf(MSG_DEBUG
, "nl80211: Remain-on-channel cookie "
6954 "0x%llx for freq=%u MHz duration=%u",
6955 (long long unsigned int) cookie
, freq
, duration
);
6956 drv
->remain_on_chan_cookie
= cookie
;
6957 drv
->pending_remain_on_chan
= 1;
6960 wpa_printf(MSG_DEBUG
, "nl80211: Failed to request remain-on-channel "
6961 "(freq=%d duration=%u): %d (%s)",
6962 freq
, duration
, ret
, strerror(-ret
));
6968 static int wpa_driver_nl80211_cancel_remain_on_channel(void *priv
)
6970 struct i802_bss
*bss
= priv
;
6971 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6975 if (!drv
->pending_remain_on_chan
) {
6976 wpa_printf(MSG_DEBUG
, "nl80211: No pending remain-on-channel "
6981 wpa_printf(MSG_DEBUG
, "nl80211: Cancel remain-on-channel with cookie "
6983 (long long unsigned int) drv
->remain_on_chan_cookie
);
6985 msg
= nlmsg_alloc();
6989 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL
);
6991 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6992 NLA_PUT_U64(msg
, NL80211_ATTR_COOKIE
, drv
->remain_on_chan_cookie
);
6994 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6997 wpa_printf(MSG_DEBUG
, "nl80211: Failed to cancel remain-on-channel: "
6998 "%d (%s)", ret
, strerror(-ret
));
7004 static int wpa_driver_nl80211_probe_req_report(void *priv
, int report
)
7006 struct i802_bss
*bss
= priv
;
7007 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7010 if (drv
->nl_preq
.handle
) {
7011 eloop_unregister_read_sock(
7012 nl_socket_get_fd(drv
->nl_preq
.handle
));
7013 nl_destroy_handles(&drv
->nl_preq
);
7018 if (drv
->nl_preq
.handle
) {
7019 wpa_printf(MSG_DEBUG
, "nl80211: Probe Request reporting "
7024 if (nl_create_handles(&drv
->nl_preq
, drv
->global
->nl_cb
, "preq"))
7027 if (nl80211_register_frame(drv
, drv
->nl_preq
.handle
,
7028 (WLAN_FC_TYPE_MGMT
<< 2) |
7029 (WLAN_FC_STYPE_PROBE_REQ
<< 4),
7033 eloop_register_read_sock(nl_socket_get_fd(drv
->nl_preq
.handle
),
7034 wpa_driver_nl80211_event_receive
, drv
,
7035 drv
->nl_preq
.handle
);
7040 nl_destroy_handles(&drv
->nl_preq
);
7045 static int nl80211_disable_11b_rates(struct wpa_driver_nl80211_data
*drv
,
7046 int ifindex
, int disabled
)
7049 struct nlattr
*bands
, *band
;
7052 msg
= nlmsg_alloc();
7056 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_TX_BITRATE_MASK
);
7057 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
7059 bands
= nla_nest_start(msg
, NL80211_ATTR_TX_RATES
);
7061 goto nla_put_failure
;
7064 * Disable 2 GHz rates 1, 2, 5.5, 11 Mbps by masking out everything
7065 * else apart from 6, 9, 12, 18, 24, 36, 48, 54 Mbps from non-MCS
7066 * rates. All 5 GHz rates are left enabled.
7068 band
= nla_nest_start(msg
, NL80211_BAND_2GHZ
);
7070 goto nla_put_failure
;
7072 NLA_PUT(msg
, NL80211_TXRATE_LEGACY
, 8,
7073 "\x0c\x12\x18\x24\x30\x48\x60\x6c");
7075 nla_nest_end(msg
, band
);
7077 nla_nest_end(msg
, bands
);
7079 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7082 wpa_printf(MSG_DEBUG
, "nl80211: Set TX rates failed: ret=%d "
7083 "(%s)", ret
, strerror(-ret
));
7094 static int wpa_driver_nl80211_deinit_ap(void *priv
)
7096 struct i802_bss
*bss
= priv
;
7097 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7098 if (!is_ap_interface(drv
->nlmode
))
7100 wpa_driver_nl80211_del_beacon(drv
);
7101 return wpa_driver_nl80211_set_mode(priv
, NL80211_IFTYPE_STATION
);
7105 static void wpa_driver_nl80211_resume(void *priv
)
7107 struct i802_bss
*bss
= priv
;
7108 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7109 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1)) {
7110 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set interface up on "
7116 static int nl80211_send_ft_action(void *priv
, u8 action
, const u8
*target_ap
,
7117 const u8
*ies
, size_t ies_len
)
7119 struct i802_bss
*bss
= priv
;
7120 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7124 u8 own_addr
[ETH_ALEN
];
7126 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
7131 wpa_printf(MSG_ERROR
, "nl80211: Unsupported send_ft_action "
7132 "action %d", action
);
7137 * Action frame payload:
7138 * Category[1] = 6 (Fast BSS Transition)
7139 * Action[1] = 1 (Fast BSS Transition Request)
7145 data_len
= 2 + 2 * ETH_ALEN
+ ies_len
;
7146 data
= os_malloc(data_len
);
7150 *pos
++ = 0x06; /* FT Action category */
7152 os_memcpy(pos
, own_addr
, ETH_ALEN
);
7154 os_memcpy(pos
, target_ap
, ETH_ALEN
);
7156 os_memcpy(pos
, ies
, ies_len
);
7158 ret
= wpa_driver_nl80211_send_action(bss
, drv
->assoc_freq
, 0,
7159 drv
->bssid
, own_addr
, drv
->bssid
,
7167 static int nl80211_signal_monitor(void *priv
, int threshold
, int hysteresis
)
7169 struct i802_bss
*bss
= priv
;
7170 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7171 struct nl_msg
*msg
, *cqm
= NULL
;
7173 wpa_printf(MSG_DEBUG
, "nl80211: Signal monitor threshold=%d "
7174 "hysteresis=%d", threshold
, hysteresis
);
7176 msg
= nlmsg_alloc();
7180 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_CQM
);
7182 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7184 cqm
= nlmsg_alloc();
7188 NLA_PUT_U32(cqm
, NL80211_ATTR_CQM_RSSI_THOLD
, threshold
);
7189 NLA_PUT_U32(cqm
, NL80211_ATTR_CQM_RSSI_HYST
, hysteresis
);
7190 nla_put_nested(msg
, NL80211_ATTR_CQM
, cqm
);
7192 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
7204 static int nl80211_signal_poll(void *priv
, struct wpa_signal_info
*si
)
7206 struct i802_bss
*bss
= priv
;
7207 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7210 os_memset(si
, 0, sizeof(*si
));
7211 res
= nl80211_get_link_signal(drv
, si
);
7215 return nl80211_get_link_noise(drv
, si
);
7219 static int wpa_driver_nl80211_shared_freq(void *priv
)
7221 struct i802_bss
*bss
= priv
;
7222 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7223 struct wpa_driver_nl80211_data
*driver
;
7227 * If the same PHY is in connected state with some other interface,
7228 * then retrieve the assoc freq.
7230 wpa_printf(MSG_DEBUG
, "nl80211: Get shared freq for PHY %s",
7233 dl_list_for_each(driver
, &drv
->global
->interfaces
,
7234 struct wpa_driver_nl80211_data
, list
) {
7235 if (drv
== driver
||
7236 os_strcmp(drv
->phyname
, driver
->phyname
) != 0 ||
7237 !driver
->associated
)
7240 wpa_printf(MSG_DEBUG
, "nl80211: Found a match for PHY %s - %s "
7242 driver
->phyname
, driver
->first_bss
.ifname
,
7243 MAC2STR(driver
->addr
));
7244 freq
= nl80211_get_assoc_freq(driver
);
7245 wpa_printf(MSG_DEBUG
, "nl80211: Shared freq for PHY %s: %d",
7246 drv
->phyname
, freq
);
7250 wpa_printf(MSG_DEBUG
, "nl80211: No shared interface for "
7251 "PHY (%s) in associated state", drv
->phyname
);
7257 static int nl80211_send_frame(void *priv
, const u8
*data
, size_t data_len
,
7260 struct i802_bss
*bss
= priv
;
7261 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7262 return wpa_driver_nl80211_send_frame(drv
, data
, data_len
, encrypt
);
7266 static int nl80211_set_param(void *priv
, const char *param
)
7268 wpa_printf(MSG_DEBUG
, "nl80211: driver param='%s'", param
);
7273 if (os_strstr(param
, "use_p2p_group_interface=1")) {
7274 struct i802_bss
*bss
= priv
;
7275 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7277 wpa_printf(MSG_DEBUG
, "nl80211: Use separate P2P group "
7279 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_P2P_CONCURRENT
;
7280 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_P2P_MGMT_AND_NON_P2P
;
7282 #endif /* CONFIG_P2P */
7288 static void * nl80211_global_init(void)
7290 struct nl80211_global
*global
;
7291 struct netlink_config
*cfg
;
7293 global
= os_zalloc(sizeof(*global
));
7296 global
->ioctl_sock
= -1;
7297 dl_list_init(&global
->interfaces
);
7298 global
->if_add_ifindex
= -1;
7300 cfg
= os_zalloc(sizeof(*cfg
));
7305 cfg
->newlink_cb
= wpa_driver_nl80211_event_rtm_newlink
;
7306 cfg
->dellink_cb
= wpa_driver_nl80211_event_rtm_dellink
;
7307 global
->netlink
= netlink_init(cfg
);
7308 if (global
->netlink
== NULL
) {
7313 if (wpa_driver_nl80211_init_nl_global(global
) < 0)
7316 global
->ioctl_sock
= socket(PF_INET
, SOCK_DGRAM
, 0);
7317 if (global
->ioctl_sock
< 0) {
7318 perror("socket(PF_INET,SOCK_DGRAM)");
7325 nl80211_global_deinit(global
);
7330 static void nl80211_global_deinit(void *priv
)
7332 struct nl80211_global
*global
= priv
;
7335 if (!dl_list_empty(&global
->interfaces
)) {
7336 wpa_printf(MSG_ERROR
, "nl80211: %u interface(s) remain at "
7337 "nl80211_global_deinit",
7338 dl_list_len(&global
->interfaces
));
7341 if (global
->netlink
)
7342 netlink_deinit(global
->netlink
);
7344 nl_destroy_handles(&global
->nl
);
7347 nl_cb_put(global
->nl_cb
);
7349 if (global
->ioctl_sock
>= 0)
7350 close(global
->ioctl_sock
);
7356 static const char * nl80211_get_radio_name(void *priv
)
7358 struct i802_bss
*bss
= priv
;
7359 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7360 return drv
->phyname
;
7364 static int nl80211_pmkid(struct i802_bss
*bss
, int cmd
, const u8
*bssid
,
7369 msg
= nlmsg_alloc();
7373 nl80211_cmd(bss
->drv
, msg
, 0, cmd
);
7375 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
7377 NLA_PUT(msg
, NL80211_ATTR_PMKID
, 16, pmkid
);
7379 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, bssid
);
7381 return send_and_recv_msgs(bss
->drv
, msg
, NULL
, NULL
);
7387 static int nl80211_add_pmkid(void *priv
, const u8
*bssid
, const u8
*pmkid
)
7389 struct i802_bss
*bss
= priv
;
7390 wpa_printf(MSG_DEBUG
, "nl80211: Add PMKID for " MACSTR
, MAC2STR(bssid
));
7391 return nl80211_pmkid(bss
, NL80211_CMD_SET_PMKSA
, bssid
, pmkid
);
7395 static int nl80211_remove_pmkid(void *priv
, const u8
*bssid
, const u8
*pmkid
)
7397 struct i802_bss
*bss
= priv
;
7398 wpa_printf(MSG_DEBUG
, "nl80211: Delete PMKID for " MACSTR
,
7400 return nl80211_pmkid(bss
, NL80211_CMD_DEL_PMKSA
, bssid
, pmkid
);
7404 static int nl80211_flush_pmkid(void *priv
)
7406 struct i802_bss
*bss
= priv
;
7407 wpa_printf(MSG_DEBUG
, "nl80211: Flush PMKIDs");
7408 return nl80211_pmkid(bss
, NL80211_CMD_FLUSH_PMKSA
, NULL
, NULL
);
7412 static void nl80211_set_rekey_info(void *priv
, const u8
*kek
, const u8
*kck
,
7413 const u8
*replay_ctr
)
7415 struct i802_bss
*bss
= priv
;
7416 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7417 struct nlattr
*replay_nested
;
7420 msg
= nlmsg_alloc();
7424 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_REKEY_OFFLOAD
);
7426 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7428 replay_nested
= nla_nest_start(msg
, NL80211_ATTR_REKEY_DATA
);
7430 goto nla_put_failure
;
7432 NLA_PUT(msg
, NL80211_REKEY_DATA_KEK
, NL80211_KEK_LEN
, kek
);
7433 NLA_PUT(msg
, NL80211_REKEY_DATA_KCK
, NL80211_KCK_LEN
, kck
);
7434 NLA_PUT(msg
, NL80211_REKEY_DATA_REPLAY_CTR
, NL80211_REPLAY_CTR_LEN
,
7437 nla_nest_end(msg
, replay_nested
);
7439 send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7446 static void nl80211_poll_client(void *priv
, const u8
*own_addr
, const u8
*addr
,
7449 struct i802_bss
*bss
= priv
;
7451 struct ieee80211_hdr hdr
;
7453 } STRUCT_PACKED nulldata
;
7456 /* Send data frame to poll STA and check whether this frame is ACKed */
7458 os_memset(&nulldata
, 0, sizeof(nulldata
));
7461 nulldata
.hdr
.frame_control
=
7462 IEEE80211_FC(WLAN_FC_TYPE_DATA
,
7463 WLAN_FC_STYPE_QOS_NULL
);
7464 size
= sizeof(nulldata
);
7466 nulldata
.hdr
.frame_control
=
7467 IEEE80211_FC(WLAN_FC_TYPE_DATA
,
7468 WLAN_FC_STYPE_NULLFUNC
);
7469 size
= sizeof(struct ieee80211_hdr
);
7472 nulldata
.hdr
.frame_control
|= host_to_le16(WLAN_FC_FROMDS
);
7473 os_memcpy(nulldata
.hdr
.IEEE80211_DA_FROMDS
, addr
, ETH_ALEN
);
7474 os_memcpy(nulldata
.hdr
.IEEE80211_BSSID_FROMDS
, own_addr
, ETH_ALEN
);
7475 os_memcpy(nulldata
.hdr
.IEEE80211_SA_FROMDS
, own_addr
, ETH_ALEN
);
7477 if (wpa_driver_nl80211_send_mlme(bss
, (u8
*) &nulldata
, size
) < 0)
7478 wpa_printf(MSG_DEBUG
, "nl80211_send_null_frame: Failed to "
7485 static int nl80211_send_tdls_mgmt(void *priv
, const u8
*dst
, u8 action_code
,
7486 u8 dialog_token
, u16 status_code
,
7487 const u8
*buf
, size_t len
)
7489 struct i802_bss
*bss
= priv
;
7490 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7493 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
7499 msg
= nlmsg_alloc();
7503 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TDLS_MGMT
);
7504 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7505 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, dst
);
7506 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_ACTION
, action_code
);
7507 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_DIALOG_TOKEN
, dialog_token
);
7508 NLA_PUT_U16(msg
, NL80211_ATTR_STATUS_CODE
, status_code
);
7509 NLA_PUT(msg
, NL80211_ATTR_IE
, len
, buf
);
7511 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7519 static int nl80211_tdls_oper(void *priv
, enum tdls_oper oper
, const u8
*peer
)
7521 struct i802_bss
*bss
= priv
;
7522 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7524 enum nl80211_tdls_operation nl80211_oper
;
7526 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
7530 case TDLS_DISCOVERY_REQ
:
7531 nl80211_oper
= NL80211_TDLS_DISCOVERY_REQ
;
7534 nl80211_oper
= NL80211_TDLS_SETUP
;
7537 nl80211_oper
= NL80211_TDLS_TEARDOWN
;
7539 case TDLS_ENABLE_LINK
:
7540 nl80211_oper
= NL80211_TDLS_ENABLE_LINK
;
7542 case TDLS_DISABLE_LINK
:
7543 nl80211_oper
= NL80211_TDLS_DISABLE_LINK
;
7553 msg
= nlmsg_alloc();
7557 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TDLS_OPER
);
7558 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_OPERATION
, nl80211_oper
);
7559 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7560 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, peer
);
7562 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7569 #endif /* CONFIG TDLS */
7572 const struct wpa_driver_ops wpa_driver_nl80211_ops
= {
7574 .desc
= "Linux nl80211/cfg80211",
7575 .get_bssid
= wpa_driver_nl80211_get_bssid
,
7576 .get_ssid
= wpa_driver_nl80211_get_ssid
,
7577 .set_key
= wpa_driver_nl80211_set_key
,
7578 .scan2
= wpa_driver_nl80211_scan
,
7579 .sched_scan
= wpa_driver_nl80211_sched_scan
,
7580 .stop_sched_scan
= wpa_driver_nl80211_stop_sched_scan
,
7581 .get_scan_results2
= wpa_driver_nl80211_get_scan_results
,
7582 .deauthenticate
= wpa_driver_nl80211_deauthenticate
,
7583 .disassociate
= wpa_driver_nl80211_disassociate
,
7584 .authenticate
= wpa_driver_nl80211_authenticate
,
7585 .associate
= wpa_driver_nl80211_associate
,
7586 .global_init
= nl80211_global_init
,
7587 .global_deinit
= nl80211_global_deinit
,
7588 .init2
= wpa_driver_nl80211_init
,
7589 .deinit
= wpa_driver_nl80211_deinit
,
7590 .get_capa
= wpa_driver_nl80211_get_capa
,
7591 .set_operstate
= wpa_driver_nl80211_set_operstate
,
7592 .set_supp_port
= wpa_driver_nl80211_set_supp_port
,
7593 .set_country
= wpa_driver_nl80211_set_country
,
7594 .set_ap
= wpa_driver_nl80211_set_ap
,
7595 .if_add
= wpa_driver_nl80211_if_add
,
7596 .if_remove
= wpa_driver_nl80211_if_remove
,
7597 .send_mlme
= wpa_driver_nl80211_send_mlme
,
7598 .get_hw_feature_data
= wpa_driver_nl80211_get_hw_feature_data
,
7599 .sta_add
= wpa_driver_nl80211_sta_add
,
7600 .sta_remove
= wpa_driver_nl80211_sta_remove
,
7601 .hapd_send_eapol
= wpa_driver_nl80211_hapd_send_eapol
,
7602 .sta_set_flags
= wpa_driver_nl80211_sta_set_flags
,
7604 .hapd_init
= i802_init
,
7605 .hapd_deinit
= i802_deinit
,
7606 .set_wds_sta
= i802_set_wds_sta
,
7607 #endif /* HOSTAPD */
7608 #if defined(HOSTAPD) || defined(CONFIG_AP)
7609 .get_seqnum
= i802_get_seqnum
,
7610 .flush
= i802_flush
,
7611 .read_sta_data
= i802_read_sta_data
,
7612 .get_inact_sec
= i802_get_inact_sec
,
7613 .sta_clear_stats
= i802_sta_clear_stats
,
7614 .set_rts
= i802_set_rts
,
7615 .set_frag
= i802_set_frag
,
7616 .set_tx_queue_params
= i802_set_tx_queue_params
,
7617 .set_sta_vlan
= i802_set_sta_vlan
,
7618 .set_rate_sets
= i802_set_rate_sets
,
7619 .sta_deauth
= i802_sta_deauth
,
7620 .sta_disassoc
= i802_sta_disassoc
,
7621 #endif /* HOSTAPD || CONFIG_AP */
7622 .set_freq
= i802_set_freq
,
7623 .send_action
= wpa_driver_nl80211_send_action
,
7624 .send_action_cancel_wait
= wpa_driver_nl80211_send_action_cancel_wait
,
7625 .remain_on_channel
= wpa_driver_nl80211_remain_on_channel
,
7626 .cancel_remain_on_channel
=
7627 wpa_driver_nl80211_cancel_remain_on_channel
,
7628 .probe_req_report
= wpa_driver_nl80211_probe_req_report
,
7629 .deinit_ap
= wpa_driver_nl80211_deinit_ap
,
7630 .resume
= wpa_driver_nl80211_resume
,
7631 .send_ft_action
= nl80211_send_ft_action
,
7632 .signal_monitor
= nl80211_signal_monitor
,
7633 .signal_poll
= nl80211_signal_poll
,
7634 .send_frame
= nl80211_send_frame
,
7635 .shared_freq
= wpa_driver_nl80211_shared_freq
,
7636 .set_param
= nl80211_set_param
,
7637 .get_radio_name
= nl80211_get_radio_name
,
7638 .add_pmkid
= nl80211_add_pmkid
,
7639 .remove_pmkid
= nl80211_remove_pmkid
,
7640 .flush_pmkid
= nl80211_flush_pmkid
,
7641 .set_rekey_info
= nl80211_set_rekey_info
,
7642 .poll_client
= nl80211_poll_client
,
7644 .send_tdls_mgmt
= nl80211_send_tdls_mgmt
,
7645 .tdls_oper
= nl80211_tdls_oper
,
7646 #endif /* CONFIG_TDLS */