2 * Driver interaction with Linux nl80211/cfg80211
3 * Copyright (c) 2002-2010, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2003-2004, Instant802 Networks, Inc.
5 * Copyright (c) 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2007, Johannes Berg <johannes@sipsolutions.net>
7 * Copyright (c) 2009-2010, Atheros Communications
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
13 * Alternatively, this software may be distributed under the terms of BSD
16 * See README and COPYING for more details.
20 #include <sys/ioctl.h>
21 #include <sys/types.h>
25 #include <netlink/genl/genl.h>
26 #include <netlink/genl/family.h>
27 #include <netlink/genl/ctrl.h>
28 #include <linux/rtnetlink.h>
29 #include <netpacket/packet.h>
30 #include <linux/filter.h>
31 #include "nl80211_copy.h"
35 #include "utils/list.h"
36 #include "common/ieee802_11_defs.h"
37 #include "common/ieee802_11_common.h"
38 #include "l2_packet/l2_packet.h"
40 #include "linux_ioctl.h"
42 #include "radiotap_iter.h"
47 /* libnl 2.0 compatibility code */
48 #define nl_handle nl_sock
49 #define nl80211_handle_alloc nl_socket_alloc_cb
50 #define nl80211_handle_destroy nl_socket_free
53 * libnl 1.1 has a bug, it tries to allocate socket numbers densely
54 * but when you free a socket again it will mess up its bitmap and
55 * and use the wrong number the next time it needs a socket ID.
56 * Therefore, we wrap the handle alloc/destroy and add our own pid
59 static uint32_t port_bitmap
[32] = { 0 };
61 static struct nl_handle
*nl80211_handle_alloc(void *cb
)
63 struct nl_handle
*handle
;
64 uint32_t pid
= getpid() & 0x3FFFFF;
67 handle
= nl_handle_alloc_cb(cb
);
69 for (i
= 0; i
< 1024; i
++) {
70 if (port_bitmap
[i
/ 32] & (1 << (i
% 32)))
72 port_bitmap
[i
/ 32] |= 1 << (i
% 32);
77 nl_socket_set_local_port(handle
, pid
);
82 static void nl80211_handle_destroy(struct nl_handle
*handle
)
84 uint32_t port
= nl_socket_get_local_port(handle
);
87 port_bitmap
[port
/ 32] &= ~(1 << (port
% 32));
89 nl_handle_destroy(handle
);
91 #endif /* CONFIG_LIBNL20 */
94 struct nl80211_handles
{
95 struct nl_handle
*handle
;
99 static int nl_create_handles(struct nl80211_handles
*handles
, struct nl_cb
*cb
,
105 handles
->handle
= nl80211_handle_alloc(cb
);
106 if (handles
->handle
== NULL
) {
107 wpa_printf(MSG_ERROR
, "nl80211: Failed to allocate netlink "
108 "callbacks (%s)", dbg
);
112 if (genl_connect(handles
->handle
)) {
113 wpa_printf(MSG_ERROR
, "nl80211: Failed to connect to generic "
114 "netlink (%s)", dbg
);
120 nl80211_handle_destroy(handles
->handle
);
125 static void nl_destroy_handles(struct nl80211_handles
*handles
)
127 if (handles
->handle
== NULL
)
129 nl80211_handle_destroy(handles
->handle
);
130 handles
->handle
= NULL
;
135 #define IFF_LOWER_UP 0x10000 /* driver signals L1 up */
138 #define IFF_DORMANT 0x20000 /* driver signals dormant */
141 #ifndef IF_OPER_DORMANT
142 #define IF_OPER_DORMANT 5
148 struct nl80211_global
{
149 struct dl_list interfaces
;
151 struct netlink_data
*netlink
;
153 struct nl80211_handles nl
;
155 int ioctl_sock
; /* socket for ioctl() use */
158 static void nl80211_global_deinit(void *priv
);
159 static void wpa_driver_nl80211_deinit(void *priv
);
162 struct wpa_driver_nl80211_data
*drv
;
163 struct i802_bss
*next
;
165 char ifname
[IFNAMSIZ
+ 1];
166 char brname
[IFNAMSIZ
];
167 unsigned int beacon_set
:1;
168 unsigned int added_if_into_bridge
:1;
169 unsigned int added_bridge
:1;
172 struct wpa_driver_nl80211_data
{
173 struct nl80211_global
*global
;
181 int ignore_if_down_event
;
182 struct rfkill_data
*rfkill
;
183 struct wpa_driver_capa capa
;
188 int scan_complete_events
;
190 struct nl80211_handles nl_event
, nl_preq
;
192 u8 auth_bssid
[ETH_ALEN
];
197 enum nl80211_iftype nlmode
;
198 enum nl80211_iftype ap_scan_as_station
;
199 unsigned int assoc_freq
;
204 unsigned int disabled_11b_rates
:1;
205 unsigned int pending_remain_on_chan
:1;
206 unsigned int in_interface_list
:1;
207 unsigned int device_ap_sme
:1;
208 unsigned int poll_command_supported
:1;
210 u64 remain_on_chan_cookie
;
211 u64 send_action_cookie
;
213 unsigned int last_mgmt_freq
;
214 unsigned int ap_oper_freq
;
216 struct wpa_driver_scan_filter
*filter_ssids
;
217 size_t num_filter_ssids
;
219 struct i802_bss first_bss
;
223 #endif /* CONFIG_AP */
226 int eapol_sock
; /* socket for EAPOL frames */
228 int default_if_indices
[16];
238 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx
,
240 static int wpa_driver_nl80211_set_mode(struct i802_bss
*bss
,
241 enum nl80211_iftype nlmode
);
243 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data
*drv
);
244 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data
*drv
,
245 const u8
*addr
, int cmd
, u16 reason_code
,
246 int local_state_change
);
247 static void nl80211_remove_monitor_interface(
248 struct wpa_driver_nl80211_data
*drv
);
249 static int nl80211_send_frame_cmd(struct wpa_driver_nl80211_data
*drv
,
250 unsigned int freq
, unsigned int wait
,
251 const u8
*buf
, size_t buf_len
, u64
*cookie
,
252 int no_cck
, int no_ack
);
253 static int wpa_driver_nl80211_probe_req_report(void *priv
, int report
);
256 static void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
257 static void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
258 static int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
);
259 static int wpa_driver_nl80211_if_remove(void *priv
,
260 enum wpa_driver_if_type type
,
263 static inline void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
267 static inline void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
271 static inline int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
277 static int i802_set_freq(void *priv
, struct hostapd_freq_params
*freq
);
278 static int nl80211_disable_11b_rates(struct wpa_driver_nl80211_data
*drv
,
279 int ifindex
, int disabled
);
281 static int nl80211_leave_ibss(struct wpa_driver_nl80211_data
*drv
);
284 static int is_ap_interface(enum nl80211_iftype nlmode
)
286 return (nlmode
== NL80211_IFTYPE_AP
||
287 nlmode
== NL80211_IFTYPE_P2P_GO
);
291 static int is_sta_interface(enum nl80211_iftype nlmode
)
293 return (nlmode
== NL80211_IFTYPE_STATION
||
294 nlmode
== NL80211_IFTYPE_P2P_CLIENT
);
298 static int is_p2p_interface(enum nl80211_iftype nlmode
)
300 return (nlmode
== NL80211_IFTYPE_P2P_CLIENT
||
301 nlmode
== NL80211_IFTYPE_P2P_GO
);
305 struct nl80211_bss_info_arg
{
306 struct wpa_driver_nl80211_data
*drv
;
307 struct wpa_scan_results
*res
;
308 unsigned int assoc_freq
;
309 u8 assoc_bssid
[ETH_ALEN
];
312 static int bss_info_handler(struct nl_msg
*msg
, void *arg
);
316 static int ack_handler(struct nl_msg
*msg
, void *arg
)
323 static int finish_handler(struct nl_msg
*msg
, void *arg
)
330 static int error_handler(struct sockaddr_nl
*nla
, struct nlmsgerr
*err
,
339 static int no_seq_check(struct nl_msg
*msg
, void *arg
)
345 static int send_and_recv(struct wpa_driver_nl80211_data
*drv
,
346 struct nl_handle
*nl_handle
, struct nl_msg
*msg
,
347 int (*valid_handler
)(struct nl_msg
*, void *),
353 cb
= nl_cb_clone(drv
->global
->nl_cb
);
357 err
= nl_send_auto_complete(nl_handle
, msg
);
363 nl_cb_err(cb
, NL_CB_CUSTOM
, error_handler
, &err
);
364 nl_cb_set(cb
, NL_CB_FINISH
, NL_CB_CUSTOM
, finish_handler
, &err
);
365 nl_cb_set(cb
, NL_CB_ACK
, NL_CB_CUSTOM
, ack_handler
, &err
);
368 nl_cb_set(cb
, NL_CB_VALID
, NL_CB_CUSTOM
,
369 valid_handler
, valid_data
);
372 nl_recvmsgs(nl_handle
, cb
);
380 static int send_and_recv_msgs(struct wpa_driver_nl80211_data
*drv
,
382 int (*valid_handler
)(struct nl_msg
*, void *),
385 return send_and_recv(drv
, drv
->global
->nl
.handle
, msg
, valid_handler
,
396 static int family_handler(struct nl_msg
*msg
, void *arg
)
398 struct family_data
*res
= arg
;
399 struct nlattr
*tb
[CTRL_ATTR_MAX
+ 1];
400 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
401 struct nlattr
*mcgrp
;
404 nla_parse(tb
, CTRL_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
405 genlmsg_attrlen(gnlh
, 0), NULL
);
406 if (!tb
[CTRL_ATTR_MCAST_GROUPS
])
409 nla_for_each_nested(mcgrp
, tb
[CTRL_ATTR_MCAST_GROUPS
], i
) {
410 struct nlattr
*tb2
[CTRL_ATTR_MCAST_GRP_MAX
+ 1];
411 nla_parse(tb2
, CTRL_ATTR_MCAST_GRP_MAX
, nla_data(mcgrp
),
412 nla_len(mcgrp
), NULL
);
413 if (!tb2
[CTRL_ATTR_MCAST_GRP_NAME
] ||
414 !tb2
[CTRL_ATTR_MCAST_GRP_ID
] ||
415 os_strncmp(nla_data(tb2
[CTRL_ATTR_MCAST_GRP_NAME
]),
417 nla_len(tb2
[CTRL_ATTR_MCAST_GRP_NAME
])) != 0)
419 res
->id
= nla_get_u32(tb2
[CTRL_ATTR_MCAST_GRP_ID
]);
427 static int nl_get_multicast_id(struct wpa_driver_nl80211_data
*drv
,
428 const char *family
, const char *group
)
432 struct family_data res
= { group
, -ENOENT
};
437 genlmsg_put(msg
, 0, 0,
438 genl_ctrl_resolve(drv
->global
->nl
.handle
, "nlctrl"),
439 0, 0, CTRL_CMD_GETFAMILY
, 0);
440 NLA_PUT_STRING(msg
, CTRL_ATTR_FAMILY_NAME
, family
);
442 ret
= send_and_recv_msgs(drv
, msg
, family_handler
, &res
);
453 static void * nl80211_cmd(struct wpa_driver_nl80211_data
*drv
,
454 struct nl_msg
*msg
, int flags
, uint8_t cmd
)
456 return genlmsg_put(msg
, 0, 0, drv
->global
->nl80211_id
,
461 static int wpa_driver_nl80211_get_bssid(void *priv
, u8
*bssid
)
463 struct i802_bss
*bss
= priv
;
464 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
465 if (!drv
->associated
)
467 os_memcpy(bssid
, drv
->bssid
, ETH_ALEN
);
472 static int wpa_driver_nl80211_get_ssid(void *priv
, u8
*ssid
)
474 struct i802_bss
*bss
= priv
;
475 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
476 if (!drv
->associated
)
478 os_memcpy(ssid
, drv
->ssid
, drv
->ssid_len
);
479 return drv
->ssid_len
;
483 static void wpa_driver_nl80211_event_link(struct wpa_driver_nl80211_data
*drv
,
484 char *buf
, size_t len
, int del
)
486 union wpa_event_data event
;
488 os_memset(&event
, 0, sizeof(event
));
489 if (len
> sizeof(event
.interface_status
.ifname
))
490 len
= sizeof(event
.interface_status
.ifname
) - 1;
491 os_memcpy(event
.interface_status
.ifname
, buf
, len
);
492 event
.interface_status
.ievent
= del
? EVENT_INTERFACE_REMOVED
:
493 EVENT_INTERFACE_ADDED
;
495 wpa_printf(MSG_DEBUG
, "RTM_%sLINK, IFLA_IFNAME: Interface '%s' %s",
497 event
.interface_status
.ifname
,
498 del
? "removed" : "added");
500 if (os_strcmp(drv
->first_bss
.ifname
, event
.interface_status
.ifname
) == 0) {
507 wpa_supplicant_event(drv
->ctx
, EVENT_INTERFACE_STATUS
, &event
);
511 static int wpa_driver_nl80211_own_ifname(struct wpa_driver_nl80211_data
*drv
,
514 int attrlen
, rta_len
;
518 attr
= (struct rtattr
*) buf
;
520 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
521 while (RTA_OK(attr
, attrlen
)) {
522 if (attr
->rta_type
== IFLA_IFNAME
) {
523 if (os_strcmp(((char *) attr
) + rta_len
, drv
->first_bss
.ifname
)
529 attr
= RTA_NEXT(attr
, attrlen
);
536 static int wpa_driver_nl80211_own_ifindex(struct wpa_driver_nl80211_data
*drv
,
537 int ifindex
, u8
*buf
, size_t len
)
539 if (drv
->ifindex
== ifindex
)
542 if (drv
->if_removed
&& wpa_driver_nl80211_own_ifname(drv
, buf
, len
)) {
543 drv
->first_bss
.ifindex
= if_nametoindex(drv
->first_bss
.ifname
);
544 wpa_printf(MSG_DEBUG
, "nl80211: Update ifindex for a removed "
546 wpa_driver_nl80211_finish_drv_init(drv
);
554 static struct wpa_driver_nl80211_data
*
555 nl80211_find_drv(struct nl80211_global
*global
, int idx
, u8
*buf
, size_t len
)
557 struct wpa_driver_nl80211_data
*drv
;
558 dl_list_for_each(drv
, &global
->interfaces
,
559 struct wpa_driver_nl80211_data
, list
) {
560 if (wpa_driver_nl80211_own_ifindex(drv
, idx
, buf
, len
) ||
561 have_ifidx(drv
, idx
))
568 static void wpa_driver_nl80211_event_rtm_newlink(void *ctx
,
569 struct ifinfomsg
*ifi
,
572 struct nl80211_global
*global
= ctx
;
573 struct wpa_driver_nl80211_data
*drv
;
574 int attrlen
, rta_len
;
578 drv
= nl80211_find_drv(global
, ifi
->ifi_index
, buf
, len
);
580 wpa_printf(MSG_DEBUG
, "nl80211: Ignore event for foreign "
581 "ifindex %d", ifi
->ifi_index
);
585 wpa_printf(MSG_DEBUG
, "RTM_NEWLINK: operstate=%d ifi_flags=0x%x "
587 drv
->operstate
, ifi
->ifi_flags
,
588 (ifi
->ifi_flags
& IFF_UP
) ? "[UP]" : "",
589 (ifi
->ifi_flags
& IFF_RUNNING
) ? "[RUNNING]" : "",
590 (ifi
->ifi_flags
& IFF_LOWER_UP
) ? "[LOWER_UP]" : "",
591 (ifi
->ifi_flags
& IFF_DORMANT
) ? "[DORMANT]" : "");
593 if (!drv
->if_disabled
&& !(ifi
->ifi_flags
& IFF_UP
)) {
594 char namebuf
[IFNAMSIZ
];
595 if (if_indextoname(ifi
->ifi_index
, namebuf
) &&
596 linux_iface_up(drv
->global
->ioctl_sock
,
597 drv
->first_bss
.ifname
) > 0) {
598 wpa_printf(MSG_DEBUG
, "nl80211: Ignore interface down "
599 "event since interface %s is up", namebuf
);
602 wpa_printf(MSG_DEBUG
, "nl80211: Interface down");
603 if (drv
->ignore_if_down_event
) {
604 wpa_printf(MSG_DEBUG
, "nl80211: Ignore interface down "
605 "event generated by mode change");
606 drv
->ignore_if_down_event
= 0;
608 drv
->if_disabled
= 1;
609 wpa_supplicant_event(drv
->ctx
,
610 EVENT_INTERFACE_DISABLED
, NULL
);
614 if (drv
->if_disabled
&& (ifi
->ifi_flags
& IFF_UP
)) {
615 wpa_printf(MSG_DEBUG
, "nl80211: Interface up");
616 drv
->if_disabled
= 0;
617 wpa_supplicant_event(drv
->ctx
, EVENT_INTERFACE_ENABLED
, NULL
);
621 * Some drivers send the association event before the operup event--in
622 * this case, lifting operstate in wpa_driver_nl80211_set_operstate()
623 * fails. This will hit us when wpa_supplicant does not need to do
624 * IEEE 802.1X authentication
626 if (drv
->operstate
== 1 &&
627 (ifi
->ifi_flags
& (IFF_LOWER_UP
| IFF_DORMANT
)) == IFF_LOWER_UP
&&
628 !(ifi
->ifi_flags
& IFF_RUNNING
))
629 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
,
633 attr
= (struct rtattr
*) buf
;
634 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
635 while (RTA_OK(attr
, attrlen
)) {
636 if (attr
->rta_type
== IFLA_IFNAME
) {
637 wpa_driver_nl80211_event_link(
639 ((char *) attr
) + rta_len
,
640 attr
->rta_len
- rta_len
, 0);
641 } else if (attr
->rta_type
== IFLA_MASTER
)
642 brid
= nla_get_u32((struct nlattr
*) attr
);
643 attr
= RTA_NEXT(attr
, attrlen
);
646 if (ifi
->ifi_family
== AF_BRIDGE
&& brid
) {
647 /* device has been added to bridge */
648 char namebuf
[IFNAMSIZ
];
649 if_indextoname(brid
, namebuf
);
650 wpa_printf(MSG_DEBUG
, "nl80211: Add ifindex %u for bridge %s",
652 add_ifidx(drv
, brid
);
657 static void wpa_driver_nl80211_event_rtm_dellink(void *ctx
,
658 struct ifinfomsg
*ifi
,
661 struct nl80211_global
*global
= ctx
;
662 struct wpa_driver_nl80211_data
*drv
;
663 int attrlen
, rta_len
;
667 drv
= nl80211_find_drv(global
, ifi
->ifi_index
, buf
, len
);
669 wpa_printf(MSG_DEBUG
, "nl80211: Ignore dellink event for "
670 "foreign ifindex %d", ifi
->ifi_index
);
675 attr
= (struct rtattr
*) buf
;
677 rta_len
= RTA_ALIGN(sizeof(struct rtattr
));
678 while (RTA_OK(attr
, attrlen
)) {
679 if (attr
->rta_type
== IFLA_IFNAME
) {
680 wpa_driver_nl80211_event_link(
682 ((char *) attr
) + rta_len
,
683 attr
->rta_len
- rta_len
, 1);
684 } else if (attr
->rta_type
== IFLA_MASTER
)
685 brid
= nla_get_u32((struct nlattr
*) attr
);
686 attr
= RTA_NEXT(attr
, attrlen
);
689 if (ifi
->ifi_family
== AF_BRIDGE
&& brid
) {
690 /* device has been removed from bridge */
691 char namebuf
[IFNAMSIZ
];
692 if_indextoname(brid
, namebuf
);
693 wpa_printf(MSG_DEBUG
, "nl80211: Remove ifindex %u for bridge "
694 "%s", brid
, namebuf
);
695 del_ifidx(drv
, brid
);
700 static void mlme_event_auth(struct wpa_driver_nl80211_data
*drv
,
701 const u8
*frame
, size_t len
)
703 const struct ieee80211_mgmt
*mgmt
;
704 union wpa_event_data event
;
706 mgmt
= (const struct ieee80211_mgmt
*) frame
;
707 if (len
< 24 + sizeof(mgmt
->u
.auth
)) {
708 wpa_printf(MSG_DEBUG
, "nl80211: Too short association event "
713 os_memcpy(drv
->auth_bssid
, mgmt
->sa
, ETH_ALEN
);
714 os_memset(&event
, 0, sizeof(event
));
715 os_memcpy(event
.auth
.peer
, mgmt
->sa
, ETH_ALEN
);
716 event
.auth
.auth_type
= le_to_host16(mgmt
->u
.auth
.auth_alg
);
717 event
.auth
.status_code
= le_to_host16(mgmt
->u
.auth
.status_code
);
718 if (len
> 24 + sizeof(mgmt
->u
.auth
)) {
719 event
.auth
.ies
= mgmt
->u
.auth
.variable
;
720 event
.auth
.ies_len
= len
- 24 - sizeof(mgmt
->u
.auth
);
723 wpa_supplicant_event(drv
->ctx
, EVENT_AUTH
, &event
);
727 static unsigned int nl80211_get_assoc_freq(struct wpa_driver_nl80211_data
*drv
)
731 struct nl80211_bss_info_arg arg
;
733 os_memset(&arg
, 0, sizeof(arg
));
736 goto nla_put_failure
;
738 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
739 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
742 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
745 wpa_printf(MSG_DEBUG
, "nl80211: Operating frequency for the "
746 "associated BSS from scan results: %u MHz",
748 return arg
.assoc_freq
? arg
.assoc_freq
: drv
->assoc_freq
;
750 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
751 "(%s)", ret
, strerror(-ret
));
754 return drv
->assoc_freq
;
758 static void mlme_event_assoc(struct wpa_driver_nl80211_data
*drv
,
759 const u8
*frame
, size_t len
)
761 const struct ieee80211_mgmt
*mgmt
;
762 union wpa_event_data event
;
765 mgmt
= (const struct ieee80211_mgmt
*) frame
;
766 if (len
< 24 + sizeof(mgmt
->u
.assoc_resp
)) {
767 wpa_printf(MSG_DEBUG
, "nl80211: Too short association event "
772 status
= le_to_host16(mgmt
->u
.assoc_resp
.status_code
);
773 if (status
!= WLAN_STATUS_SUCCESS
) {
774 os_memset(&event
, 0, sizeof(event
));
775 event
.assoc_reject
.bssid
= mgmt
->bssid
;
776 if (len
> 24 + sizeof(mgmt
->u
.assoc_resp
)) {
777 event
.assoc_reject
.resp_ies
=
778 (u8
*) mgmt
->u
.assoc_resp
.variable
;
779 event
.assoc_reject
.resp_ies_len
=
780 len
- 24 - sizeof(mgmt
->u
.assoc_resp
);
782 event
.assoc_reject
.status_code
= status
;
784 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC_REJECT
, &event
);
789 os_memcpy(drv
->bssid
, mgmt
->sa
, ETH_ALEN
);
791 os_memset(&event
, 0, sizeof(event
));
792 if (len
> 24 + sizeof(mgmt
->u
.assoc_resp
)) {
793 event
.assoc_info
.resp_ies
= (u8
*) mgmt
->u
.assoc_resp
.variable
;
794 event
.assoc_info
.resp_ies_len
=
795 len
- 24 - sizeof(mgmt
->u
.assoc_resp
);
798 event
.assoc_info
.freq
= drv
->assoc_freq
;
800 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, &event
);
804 static void mlme_event_connect(struct wpa_driver_nl80211_data
*drv
,
805 enum nl80211_commands cmd
, struct nlattr
*status
,
806 struct nlattr
*addr
, struct nlattr
*req_ie
,
807 struct nlattr
*resp_ie
)
809 union wpa_event_data event
;
811 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
813 * Avoid reporting two association events that would confuse
816 wpa_printf(MSG_DEBUG
, "nl80211: Ignore connect event (cmd=%d) "
817 "when using userspace SME", cmd
);
821 os_memset(&event
, 0, sizeof(event
));
822 if (cmd
== NL80211_CMD_CONNECT
&&
823 nla_get_u16(status
) != WLAN_STATUS_SUCCESS
) {
825 event
.assoc_reject
.bssid
= nla_data(addr
);
827 event
.assoc_reject
.resp_ies
= nla_data(resp_ie
);
828 event
.assoc_reject
.resp_ies_len
= nla_len(resp_ie
);
830 event
.assoc_reject
.status_code
= nla_get_u16(status
);
831 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC_REJECT
, &event
);
837 os_memcpy(drv
->bssid
, nla_data(addr
), ETH_ALEN
);
840 event
.assoc_info
.req_ies
= nla_data(req_ie
);
841 event
.assoc_info
.req_ies_len
= nla_len(req_ie
);
844 event
.assoc_info
.resp_ies
= nla_data(resp_ie
);
845 event
.assoc_info
.resp_ies_len
= nla_len(resp_ie
);
848 event
.assoc_info
.freq
= nl80211_get_assoc_freq(drv
);
850 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, &event
);
854 static void mlme_event_disconnect(struct wpa_driver_nl80211_data
*drv
,
855 struct nlattr
*reason
, struct nlattr
*addr
)
857 union wpa_event_data data
;
859 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
861 * Avoid reporting two disassociation events that could
862 * confuse the core code.
864 wpa_printf(MSG_DEBUG
, "nl80211: Ignore disconnect "
865 "event when using userspace SME");
870 os_memset(&data
, 0, sizeof(data
));
872 data
.disassoc_info
.reason_code
= nla_get_u16(reason
);
873 wpa_supplicant_event(drv
->ctx
, EVENT_DISASSOC
, &data
);
877 static void mlme_timeout_event(struct wpa_driver_nl80211_data
*drv
,
878 enum nl80211_commands cmd
, struct nlattr
*addr
)
880 union wpa_event_data event
;
881 enum wpa_event_type ev
;
883 if (nla_len(addr
) != ETH_ALEN
)
886 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d; timeout with " MACSTR
,
887 cmd
, MAC2STR((u8
*) nla_data(addr
)));
889 if (cmd
== NL80211_CMD_AUTHENTICATE
)
890 ev
= EVENT_AUTH_TIMED_OUT
;
891 else if (cmd
== NL80211_CMD_ASSOCIATE
)
892 ev
= EVENT_ASSOC_TIMED_OUT
;
896 os_memset(&event
, 0, sizeof(event
));
897 os_memcpy(event
.timeout_event
.addr
, nla_data(addr
), ETH_ALEN
);
898 wpa_supplicant_event(drv
->ctx
, ev
, &event
);
902 static void mlme_event_mgmt(struct wpa_driver_nl80211_data
*drv
,
903 struct nlattr
*freq
, const u8
*frame
, size_t len
)
905 const struct ieee80211_mgmt
*mgmt
;
906 union wpa_event_data event
;
909 mgmt
= (const struct ieee80211_mgmt
*) frame
;
911 wpa_printf(MSG_DEBUG
, "nl80211: Too short action frame");
915 fc
= le_to_host16(mgmt
->frame_control
);
916 stype
= WLAN_FC_GET_STYPE(fc
);
918 os_memset(&event
, 0, sizeof(event
));
920 event
.rx_action
.freq
= nla_get_u32(freq
);
921 drv
->last_mgmt_freq
= event
.rx_action
.freq
;
923 if (stype
== WLAN_FC_STYPE_ACTION
) {
924 event
.rx_action
.da
= mgmt
->da
;
925 event
.rx_action
.sa
= mgmt
->sa
;
926 event
.rx_action
.bssid
= mgmt
->bssid
;
927 event
.rx_action
.category
= mgmt
->u
.action
.category
;
928 event
.rx_action
.data
= &mgmt
->u
.action
.category
+ 1;
929 event
.rx_action
.len
= frame
+ len
- event
.rx_action
.data
;
930 wpa_supplicant_event(drv
->ctx
, EVENT_RX_ACTION
, &event
);
932 event
.rx_mgmt
.frame
= frame
;
933 event
.rx_mgmt
.frame_len
= len
;
934 wpa_supplicant_event(drv
->ctx
, EVENT_RX_MGMT
, &event
);
939 static void mlme_event_action_tx_status(struct wpa_driver_nl80211_data
*drv
,
940 struct nlattr
*cookie
, const u8
*frame
,
941 size_t len
, struct nlattr
*ack
)
943 union wpa_event_data event
;
944 const struct ieee80211_hdr
*hdr
;
951 cookie_val
= nla_get_u64(cookie
);
952 wpa_printf(MSG_DEBUG
, "nl80211: Action TX status: cookie=0%llx%s "
954 (long long unsigned int) cookie_val
,
955 cookie_val
== drv
->send_action_cookie
?
956 " (match)" : " (unknown)", ack
!= NULL
);
957 if (cookie_val
!= drv
->send_action_cookie
)
960 hdr
= (const struct ieee80211_hdr
*) frame
;
961 fc
= le_to_host16(hdr
->frame_control
);
963 os_memset(&event
, 0, sizeof(event
));
964 event
.tx_status
.type
= WLAN_FC_GET_TYPE(fc
);
965 event
.tx_status
.stype
= WLAN_FC_GET_STYPE(fc
);
966 event
.tx_status
.dst
= hdr
->addr1
;
967 event
.tx_status
.data
= frame
;
968 event
.tx_status
.data_len
= len
;
969 event
.tx_status
.ack
= ack
!= NULL
;
970 wpa_supplicant_event(drv
->ctx
, EVENT_TX_STATUS
, &event
);
974 static void mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data
*drv
,
975 enum wpa_event_type type
,
976 const u8
*frame
, size_t len
)
978 const struct ieee80211_mgmt
*mgmt
;
979 union wpa_event_data event
;
980 const u8
*bssid
= NULL
;
983 mgmt
= (const struct ieee80211_mgmt
*) frame
;
987 if (drv
->associated
!= 0 &&
988 os_memcmp(bssid
, drv
->bssid
, ETH_ALEN
) != 0 &&
989 os_memcmp(bssid
, drv
->auth_bssid
, ETH_ALEN
) != 0) {
991 * We have presumably received this deauth as a
992 * response to a clear_state_mismatch() outgoing
993 * deauth. Don't let it take us offline!
995 wpa_printf(MSG_DEBUG
, "nl80211: Deauth received "
996 "from Unknown BSSID " MACSTR
" -- ignoring",
1002 drv
->associated
= 0;
1003 os_memset(&event
, 0, sizeof(event
));
1005 /* Note: Same offset for Reason Code in both frame subtypes */
1006 if (len
>= 24 + sizeof(mgmt
->u
.deauth
))
1007 reason_code
= le_to_host16(mgmt
->u
.deauth
.reason_code
);
1009 if (type
== EVENT_DISASSOC
) {
1010 event
.disassoc_info
.addr
= bssid
;
1011 event
.disassoc_info
.reason_code
= reason_code
;
1012 if (frame
+ len
> mgmt
->u
.disassoc
.variable
) {
1013 event
.disassoc_info
.ie
= mgmt
->u
.disassoc
.variable
;
1014 event
.disassoc_info
.ie_len
= frame
+ len
-
1015 mgmt
->u
.disassoc
.variable
;
1018 event
.deauth_info
.addr
= bssid
;
1019 event
.deauth_info
.reason_code
= reason_code
;
1020 if (frame
+ len
> mgmt
->u
.deauth
.variable
) {
1021 event
.deauth_info
.ie
= mgmt
->u
.deauth
.variable
;
1022 event
.deauth_info
.ie_len
= frame
+ len
-
1023 mgmt
->u
.deauth
.variable
;
1027 wpa_supplicant_event(drv
->ctx
, type
, &event
);
1031 static void mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data
*drv
,
1032 enum wpa_event_type type
,
1033 const u8
*frame
, size_t len
)
1035 const struct ieee80211_mgmt
*mgmt
;
1036 union wpa_event_data event
;
1037 u16 reason_code
= 0;
1042 mgmt
= (const struct ieee80211_mgmt
*) frame
;
1044 os_memset(&event
, 0, sizeof(event
));
1045 /* Note: Same offset for Reason Code in both frame subtypes */
1046 if (len
>= 24 + sizeof(mgmt
->u
.deauth
))
1047 reason_code
= le_to_host16(mgmt
->u
.deauth
.reason_code
);
1049 if (type
== EVENT_UNPROT_DISASSOC
) {
1050 event
.unprot_disassoc
.sa
= mgmt
->sa
;
1051 event
.unprot_disassoc
.da
= mgmt
->da
;
1052 event
.unprot_disassoc
.reason_code
= reason_code
;
1054 event
.unprot_deauth
.sa
= mgmt
->sa
;
1055 event
.unprot_deauth
.da
= mgmt
->da
;
1056 event
.unprot_deauth
.reason_code
= reason_code
;
1059 wpa_supplicant_event(drv
->ctx
, type
, &event
);
1063 static void mlme_event(struct wpa_driver_nl80211_data
*drv
,
1064 enum nl80211_commands cmd
, struct nlattr
*frame
,
1065 struct nlattr
*addr
, struct nlattr
*timed_out
,
1066 struct nlattr
*freq
, struct nlattr
*ack
,
1067 struct nlattr
*cookie
)
1069 if (timed_out
&& addr
) {
1070 mlme_timeout_event(drv
, cmd
, addr
);
1074 if (frame
== NULL
) {
1075 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d without frame "
1080 wpa_printf(MSG_DEBUG
, "nl80211: MLME event %d", cmd
);
1081 wpa_hexdump(MSG_MSGDUMP
, "nl80211: MLME event frame",
1082 nla_data(frame
), nla_len(frame
));
1085 case NL80211_CMD_AUTHENTICATE
:
1086 mlme_event_auth(drv
, nla_data(frame
), nla_len(frame
));
1088 case NL80211_CMD_ASSOCIATE
:
1089 mlme_event_assoc(drv
, nla_data(frame
), nla_len(frame
));
1091 case NL80211_CMD_DEAUTHENTICATE
:
1092 mlme_event_deauth_disassoc(drv
, EVENT_DEAUTH
,
1093 nla_data(frame
), nla_len(frame
));
1095 case NL80211_CMD_DISASSOCIATE
:
1096 mlme_event_deauth_disassoc(drv
, EVENT_DISASSOC
,
1097 nla_data(frame
), nla_len(frame
));
1099 case NL80211_CMD_FRAME
:
1100 mlme_event_mgmt(drv
, freq
, nla_data(frame
), nla_len(frame
));
1102 case NL80211_CMD_FRAME_TX_STATUS
:
1103 mlme_event_action_tx_status(drv
, cookie
, nla_data(frame
),
1104 nla_len(frame
), ack
);
1106 case NL80211_CMD_UNPROT_DEAUTHENTICATE
:
1107 mlme_event_unprot_disconnect(drv
, EVENT_UNPROT_DEAUTH
,
1108 nla_data(frame
), nla_len(frame
));
1110 case NL80211_CMD_UNPROT_DISASSOCIATE
:
1111 mlme_event_unprot_disconnect(drv
, EVENT_UNPROT_DISASSOC
,
1112 nla_data(frame
), nla_len(frame
));
1120 static void mlme_event_michael_mic_failure(struct wpa_driver_nl80211_data
*drv
,
1121 struct nlattr
*tb
[])
1123 union wpa_event_data data
;
1125 wpa_printf(MSG_DEBUG
, "nl80211: MLME event Michael MIC failure");
1126 os_memset(&data
, 0, sizeof(data
));
1127 if (tb
[NL80211_ATTR_MAC
]) {
1128 wpa_hexdump(MSG_DEBUG
, "nl80211: Source MAC address",
1129 nla_data(tb
[NL80211_ATTR_MAC
]),
1130 nla_len(tb
[NL80211_ATTR_MAC
]));
1131 data
.michael_mic_failure
.src
= nla_data(tb
[NL80211_ATTR_MAC
]);
1133 if (tb
[NL80211_ATTR_KEY_SEQ
]) {
1134 wpa_hexdump(MSG_DEBUG
, "nl80211: TSC",
1135 nla_data(tb
[NL80211_ATTR_KEY_SEQ
]),
1136 nla_len(tb
[NL80211_ATTR_KEY_SEQ
]));
1138 if (tb
[NL80211_ATTR_KEY_TYPE
]) {
1139 enum nl80211_key_type key_type
=
1140 nla_get_u32(tb
[NL80211_ATTR_KEY_TYPE
]);
1141 wpa_printf(MSG_DEBUG
, "nl80211: Key Type %d", key_type
);
1142 if (key_type
== NL80211_KEYTYPE_PAIRWISE
)
1143 data
.michael_mic_failure
.unicast
= 1;
1145 data
.michael_mic_failure
.unicast
= 1;
1147 if (tb
[NL80211_ATTR_KEY_IDX
]) {
1148 u8 key_id
= nla_get_u8(tb
[NL80211_ATTR_KEY_IDX
]);
1149 wpa_printf(MSG_DEBUG
, "nl80211: Key Id %d", key_id
);
1152 wpa_supplicant_event(drv
->ctx
, EVENT_MICHAEL_MIC_FAILURE
, &data
);
1156 static void mlme_event_join_ibss(struct wpa_driver_nl80211_data
*drv
,
1157 struct nlattr
*tb
[])
1159 if (tb
[NL80211_ATTR_MAC
] == NULL
) {
1160 wpa_printf(MSG_DEBUG
, "nl80211: No address in IBSS joined "
1164 os_memcpy(drv
->bssid
, nla_data(tb
[NL80211_ATTR_MAC
]), ETH_ALEN
);
1165 drv
->associated
= 1;
1166 wpa_printf(MSG_DEBUG
, "nl80211: IBSS " MACSTR
" joined",
1167 MAC2STR(drv
->bssid
));
1169 wpa_supplicant_event(drv
->ctx
, EVENT_ASSOC
, NULL
);
1173 static void mlme_event_remain_on_channel(struct wpa_driver_nl80211_data
*drv
,
1174 int cancel_event
, struct nlattr
*tb
[])
1176 unsigned int freq
, chan_type
, duration
;
1177 union wpa_event_data data
;
1180 if (tb
[NL80211_ATTR_WIPHY_FREQ
])
1181 freq
= nla_get_u32(tb
[NL80211_ATTR_WIPHY_FREQ
]);
1185 if (tb
[NL80211_ATTR_WIPHY_CHANNEL_TYPE
])
1186 chan_type
= nla_get_u32(tb
[NL80211_ATTR_WIPHY_CHANNEL_TYPE
]);
1190 if (tb
[NL80211_ATTR_DURATION
])
1191 duration
= nla_get_u32(tb
[NL80211_ATTR_DURATION
]);
1195 if (tb
[NL80211_ATTR_COOKIE
])
1196 cookie
= nla_get_u64(tb
[NL80211_ATTR_COOKIE
]);
1200 wpa_printf(MSG_DEBUG
, "nl80211: Remain-on-channel event (cancel=%d "
1201 "freq=%u channel_type=%u duration=%u cookie=0x%llx (%s))",
1202 cancel_event
, freq
, chan_type
, duration
,
1203 (long long unsigned int) cookie
,
1204 cookie
== drv
->remain_on_chan_cookie
? "match" : "unknown");
1206 if (cookie
!= drv
->remain_on_chan_cookie
)
1207 return; /* not for us */
1210 drv
->pending_remain_on_chan
= 0;
1212 os_memset(&data
, 0, sizeof(data
));
1213 data
.remain_on_channel
.freq
= freq
;
1214 data
.remain_on_channel
.duration
= duration
;
1215 wpa_supplicant_event(drv
->ctx
, cancel_event
?
1216 EVENT_CANCEL_REMAIN_ON_CHANNEL
:
1217 EVENT_REMAIN_ON_CHANNEL
, &data
);
1221 static void send_scan_event(struct wpa_driver_nl80211_data
*drv
, int aborted
,
1222 struct nlattr
*tb
[])
1224 union wpa_event_data event
;
1227 struct scan_info
*info
;
1228 #define MAX_REPORT_FREQS 50
1229 int freqs
[MAX_REPORT_FREQS
];
1232 os_memset(&event
, 0, sizeof(event
));
1233 info
= &event
.scan_info
;
1234 info
->aborted
= aborted
;
1236 if (tb
[NL80211_ATTR_SCAN_SSIDS
]) {
1237 nla_for_each_nested(nl
, tb
[NL80211_ATTR_SCAN_SSIDS
], rem
) {
1238 struct wpa_driver_scan_ssid
*s
=
1239 &info
->ssids
[info
->num_ssids
];
1240 s
->ssid
= nla_data(nl
);
1241 s
->ssid_len
= nla_len(nl
);
1243 if (info
->num_ssids
== WPAS_MAX_SCAN_SSIDS
)
1247 if (tb
[NL80211_ATTR_SCAN_FREQUENCIES
]) {
1248 nla_for_each_nested(nl
, tb
[NL80211_ATTR_SCAN_FREQUENCIES
], rem
)
1250 freqs
[num_freqs
] = nla_get_u32(nl
);
1252 if (num_freqs
== MAX_REPORT_FREQS
- 1)
1255 info
->freqs
= freqs
;
1256 info
->num_freqs
= num_freqs
;
1258 wpa_supplicant_event(drv
->ctx
, EVENT_SCAN_RESULTS
, &event
);
1262 static int get_link_signal(struct nl_msg
*msg
, void *arg
)
1264 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1265 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1266 struct nlattr
*sinfo
[NL80211_STA_INFO_MAX
+ 1];
1267 static struct nla_policy policy
[NL80211_STA_INFO_MAX
+ 1] = {
1268 [NL80211_STA_INFO_SIGNAL
] = { .type
= NLA_U8
},
1270 struct nlattr
*rinfo
[NL80211_RATE_INFO_MAX
+ 1];
1271 static struct nla_policy rate_policy
[NL80211_RATE_INFO_MAX
+ 1] = {
1272 [NL80211_RATE_INFO_BITRATE
] = { .type
= NLA_U16
},
1273 [NL80211_RATE_INFO_MCS
] = { .type
= NLA_U8
},
1274 [NL80211_RATE_INFO_40_MHZ_WIDTH
] = { .type
= NLA_FLAG
},
1275 [NL80211_RATE_INFO_SHORT_GI
] = { .type
= NLA_FLAG
},
1277 struct wpa_signal_info
*sig_change
= arg
;
1279 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1280 genlmsg_attrlen(gnlh
, 0), NULL
);
1281 if (!tb
[NL80211_ATTR_STA_INFO
] ||
1282 nla_parse_nested(sinfo
, NL80211_STA_INFO_MAX
,
1283 tb
[NL80211_ATTR_STA_INFO
], policy
))
1285 if (!sinfo
[NL80211_STA_INFO_SIGNAL
])
1288 sig_change
->current_signal
=
1289 (s8
) nla_get_u8(sinfo
[NL80211_STA_INFO_SIGNAL
]);
1291 if (sinfo
[NL80211_STA_INFO_TX_BITRATE
]) {
1292 if (nla_parse_nested(rinfo
, NL80211_RATE_INFO_MAX
,
1293 sinfo
[NL80211_STA_INFO_TX_BITRATE
],
1295 sig_change
->current_txrate
= 0;
1297 if (rinfo
[NL80211_RATE_INFO_BITRATE
]) {
1298 sig_change
->current_txrate
=
1300 NL80211_RATE_INFO_BITRATE
]) * 100;
1309 static int nl80211_get_link_signal(struct wpa_driver_nl80211_data
*drv
,
1310 struct wpa_signal_info
*sig
)
1314 sig
->current_signal
= -9999;
1315 sig
->current_txrate
= 0;
1317 msg
= nlmsg_alloc();
1321 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_STATION
);
1323 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1324 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, drv
->bssid
);
1326 return send_and_recv_msgs(drv
, msg
, get_link_signal
, sig
);
1332 static int get_link_noise(struct nl_msg
*msg
, void *arg
)
1334 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1335 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1336 struct nlattr
*sinfo
[NL80211_SURVEY_INFO_MAX
+ 1];
1337 static struct nla_policy survey_policy
[NL80211_SURVEY_INFO_MAX
+ 1] = {
1338 [NL80211_SURVEY_INFO_FREQUENCY
] = { .type
= NLA_U32
},
1339 [NL80211_SURVEY_INFO_NOISE
] = { .type
= NLA_U8
},
1341 struct wpa_signal_info
*sig_change
= arg
;
1343 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1344 genlmsg_attrlen(gnlh
, 0), NULL
);
1346 if (!tb
[NL80211_ATTR_SURVEY_INFO
]) {
1347 wpa_printf(MSG_DEBUG
, "nl80211: survey data missing!");
1351 if (nla_parse_nested(sinfo
, NL80211_SURVEY_INFO_MAX
,
1352 tb
[NL80211_ATTR_SURVEY_INFO
],
1354 wpa_printf(MSG_DEBUG
, "nl80211: failed to parse nested "
1359 if (!sinfo
[NL80211_SURVEY_INFO_FREQUENCY
])
1362 if (nla_get_u32(sinfo
[NL80211_SURVEY_INFO_FREQUENCY
]) !=
1363 sig_change
->frequency
)
1366 if (!sinfo
[NL80211_SURVEY_INFO_NOISE
])
1369 sig_change
->current_noise
=
1370 (s8
) nla_get_u8(sinfo
[NL80211_SURVEY_INFO_NOISE
]);
1376 static int nl80211_get_link_noise(struct wpa_driver_nl80211_data
*drv
,
1377 struct wpa_signal_info
*sig_change
)
1381 sig_change
->current_noise
= 9999;
1382 sig_change
->frequency
= drv
->assoc_freq
;
1384 msg
= nlmsg_alloc();
1388 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SURVEY
);
1390 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1392 return send_and_recv_msgs(drv
, msg
, get_link_noise
, sig_change
);
1398 static int get_noise_for_scan_results(struct nl_msg
*msg
, void *arg
)
1400 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1401 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1402 struct nlattr
*sinfo
[NL80211_SURVEY_INFO_MAX
+ 1];
1403 static struct nla_policy survey_policy
[NL80211_SURVEY_INFO_MAX
+ 1] = {
1404 [NL80211_SURVEY_INFO_FREQUENCY
] = { .type
= NLA_U32
},
1405 [NL80211_SURVEY_INFO_NOISE
] = { .type
= NLA_U8
},
1407 struct wpa_scan_results
*scan_results
= arg
;
1408 struct wpa_scan_res
*scan_res
;
1411 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1412 genlmsg_attrlen(gnlh
, 0), NULL
);
1414 if (!tb
[NL80211_ATTR_SURVEY_INFO
]) {
1415 wpa_printf(MSG_DEBUG
, "nl80211: Survey data missing");
1419 if (nla_parse_nested(sinfo
, NL80211_SURVEY_INFO_MAX
,
1420 tb
[NL80211_ATTR_SURVEY_INFO
],
1422 wpa_printf(MSG_DEBUG
, "nl80211: Failed to parse nested "
1427 if (!sinfo
[NL80211_SURVEY_INFO_NOISE
])
1430 if (!sinfo
[NL80211_SURVEY_INFO_FREQUENCY
])
1433 for (i
= 0; i
< scan_results
->num
; ++i
) {
1434 scan_res
= scan_results
->res
[i
];
1437 if ((int) nla_get_u32(sinfo
[NL80211_SURVEY_INFO_FREQUENCY
]) !=
1440 if (!(scan_res
->flags
& WPA_SCAN_NOISE_INVALID
))
1442 scan_res
->noise
= (s8
)
1443 nla_get_u8(sinfo
[NL80211_SURVEY_INFO_NOISE
]);
1444 scan_res
->flags
&= ~WPA_SCAN_NOISE_INVALID
;
1451 static int nl80211_get_noise_for_scan_results(
1452 struct wpa_driver_nl80211_data
*drv
,
1453 struct wpa_scan_results
*scan_res
)
1457 msg
= nlmsg_alloc();
1461 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SURVEY
);
1463 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
1465 return send_and_recv_msgs(drv
, msg
, get_noise_for_scan_results
,
1472 static void nl80211_cqm_event(struct wpa_driver_nl80211_data
*drv
,
1473 struct nlattr
*tb
[])
1475 static struct nla_policy cqm_policy
[NL80211_ATTR_CQM_MAX
+ 1] = {
1476 [NL80211_ATTR_CQM_RSSI_THOLD
] = { .type
= NLA_U32
},
1477 [NL80211_ATTR_CQM_RSSI_HYST
] = { .type
= NLA_U8
},
1478 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
] = { .type
= NLA_U32
},
1479 [NL80211_ATTR_CQM_PKT_LOSS_EVENT
] = { .type
= NLA_U32
},
1481 struct nlattr
*cqm
[NL80211_ATTR_CQM_MAX
+ 1];
1482 enum nl80211_cqm_rssi_threshold_event event
;
1483 union wpa_event_data ed
;
1484 struct wpa_signal_info sig
;
1487 if (tb
[NL80211_ATTR_CQM
] == NULL
||
1488 nla_parse_nested(cqm
, NL80211_ATTR_CQM_MAX
, tb
[NL80211_ATTR_CQM
],
1490 wpa_printf(MSG_DEBUG
, "nl80211: Ignore invalid CQM event");
1494 os_memset(&ed
, 0, sizeof(ed
));
1496 if (cqm
[NL80211_ATTR_CQM_PKT_LOSS_EVENT
]) {
1497 if (!tb
[NL80211_ATTR_MAC
])
1499 os_memcpy(ed
.low_ack
.addr
, nla_data(tb
[NL80211_ATTR_MAC
]),
1501 wpa_supplicant_event(drv
->ctx
, EVENT_STATION_LOW_ACK
, &ed
);
1505 if (cqm
[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
] == NULL
)
1507 event
= nla_get_u32(cqm
[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT
]);
1509 if (event
== NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH
) {
1510 wpa_printf(MSG_DEBUG
, "nl80211: Connection quality monitor "
1511 "event: RSSI high");
1512 ed
.signal_change
.above_threshold
= 1;
1513 } else if (event
== NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW
) {
1514 wpa_printf(MSG_DEBUG
, "nl80211: Connection quality monitor "
1516 ed
.signal_change
.above_threshold
= 0;
1520 res
= nl80211_get_link_signal(drv
, &sig
);
1522 ed
.signal_change
.current_signal
= sig
.current_signal
;
1523 ed
.signal_change
.current_txrate
= sig
.current_txrate
;
1524 wpa_printf(MSG_DEBUG
, "nl80211: Signal: %d dBm txrate: %d",
1525 sig
.current_signal
, sig
.current_txrate
);
1528 res
= nl80211_get_link_noise(drv
, &sig
);
1530 ed
.signal_change
.current_noise
= sig
.current_noise
;
1531 wpa_printf(MSG_DEBUG
, "nl80211: Noise: %d dBm",
1535 wpa_supplicant_event(drv
->ctx
, EVENT_SIGNAL_CHANGE
, &ed
);
1539 static void nl80211_new_station_event(struct wpa_driver_nl80211_data
*drv
,
1543 union wpa_event_data data
;
1545 if (tb
[NL80211_ATTR_MAC
] == NULL
)
1547 addr
= nla_data(tb
[NL80211_ATTR_MAC
]);
1548 wpa_printf(MSG_DEBUG
, "nl80211: New station " MACSTR
, MAC2STR(addr
));
1550 if (is_ap_interface(drv
->nlmode
) && drv
->device_ap_sme
) {
1553 if (tb
[NL80211_ATTR_IE
]) {
1554 ies
= nla_data(tb
[NL80211_ATTR_IE
]);
1555 ies_len
= nla_len(tb
[NL80211_ATTR_IE
]);
1557 wpa_hexdump(MSG_DEBUG
, "nl80211: Assoc Req IEs", ies
, ies_len
);
1558 drv_event_assoc(drv
->ctx
, addr
, ies
, ies_len
, 0);
1562 if (drv
->nlmode
!= NL80211_IFTYPE_ADHOC
)
1565 os_memset(&data
, 0, sizeof(data
));
1566 os_memcpy(data
.ibss_rsn_start
.peer
, addr
, ETH_ALEN
);
1567 wpa_supplicant_event(drv
->ctx
, EVENT_IBSS_RSN_START
, &data
);
1571 static void nl80211_del_station_event(struct wpa_driver_nl80211_data
*drv
,
1575 union wpa_event_data data
;
1577 if (tb
[NL80211_ATTR_MAC
] == NULL
)
1579 addr
= nla_data(tb
[NL80211_ATTR_MAC
]);
1580 wpa_printf(MSG_DEBUG
, "nl80211: Delete station " MACSTR
,
1583 if (is_ap_interface(drv
->nlmode
) && drv
->device_ap_sme
) {
1584 drv_event_disassoc(drv
->ctx
, addr
);
1588 if (drv
->nlmode
!= NL80211_IFTYPE_ADHOC
)
1591 os_memset(&data
, 0, sizeof(data
));
1592 os_memcpy(data
.ibss_peer_lost
.peer
, addr
, ETH_ALEN
);
1593 wpa_supplicant_event(drv
->ctx
, EVENT_IBSS_PEER_LOST
, &data
);
1597 static void nl80211_rekey_offload_event(struct wpa_driver_nl80211_data
*drv
,
1600 struct nlattr
*rekey_info
[NUM_NL80211_REKEY_DATA
];
1601 static struct nla_policy rekey_policy
[NUM_NL80211_REKEY_DATA
] = {
1602 [NL80211_REKEY_DATA_KEK
] = {
1603 .minlen
= NL80211_KEK_LEN
,
1604 .maxlen
= NL80211_KEK_LEN
,
1606 [NL80211_REKEY_DATA_KCK
] = {
1607 .minlen
= NL80211_KCK_LEN
,
1608 .maxlen
= NL80211_KCK_LEN
,
1610 [NL80211_REKEY_DATA_REPLAY_CTR
] = {
1611 .minlen
= NL80211_REPLAY_CTR_LEN
,
1612 .maxlen
= NL80211_REPLAY_CTR_LEN
,
1615 union wpa_event_data data
;
1617 if (!tb
[NL80211_ATTR_MAC
])
1619 if (!tb
[NL80211_ATTR_REKEY_DATA
])
1621 if (nla_parse_nested(rekey_info
, MAX_NL80211_REKEY_DATA
,
1622 tb
[NL80211_ATTR_REKEY_DATA
], rekey_policy
))
1624 if (!rekey_info
[NL80211_REKEY_DATA_REPLAY_CTR
])
1627 os_memset(&data
, 0, sizeof(data
));
1628 data
.driver_gtk_rekey
.bssid
= nla_data(tb
[NL80211_ATTR_MAC
]);
1629 wpa_printf(MSG_DEBUG
, "nl80211: Rekey offload event for BSSID " MACSTR
,
1630 MAC2STR(data
.driver_gtk_rekey
.bssid
));
1631 data
.driver_gtk_rekey
.replay_ctr
=
1632 nla_data(rekey_info
[NL80211_REKEY_DATA_REPLAY_CTR
]);
1633 wpa_hexdump(MSG_DEBUG
, "nl80211: Rekey offload - Replay Counter",
1634 data
.driver_gtk_rekey
.replay_ctr
, NL80211_REPLAY_CTR_LEN
);
1635 wpa_supplicant_event(drv
->ctx
, EVENT_DRIVER_GTK_REKEY
, &data
);
1639 static void nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data
*drv
,
1642 struct nlattr
*cand
[NUM_NL80211_PMKSA_CANDIDATE
];
1643 static struct nla_policy cand_policy
[NUM_NL80211_PMKSA_CANDIDATE
] = {
1644 [NL80211_PMKSA_CANDIDATE_INDEX
] = { .type
= NLA_U32
},
1645 [NL80211_PMKSA_CANDIDATE_BSSID
] = {
1649 [NL80211_PMKSA_CANDIDATE_PREAUTH
] = { .type
= NLA_FLAG
},
1651 union wpa_event_data data
;
1653 if (!tb
[NL80211_ATTR_PMKSA_CANDIDATE
])
1655 if (nla_parse_nested(cand
, MAX_NL80211_PMKSA_CANDIDATE
,
1656 tb
[NL80211_ATTR_PMKSA_CANDIDATE
], cand_policy
))
1658 if (!cand
[NL80211_PMKSA_CANDIDATE_INDEX
] ||
1659 !cand
[NL80211_PMKSA_CANDIDATE_BSSID
])
1662 os_memset(&data
, 0, sizeof(data
));
1663 os_memcpy(data
.pmkid_candidate
.bssid
,
1664 nla_data(cand
[NL80211_PMKSA_CANDIDATE_BSSID
]), ETH_ALEN
);
1665 data
.pmkid_candidate
.index
=
1666 nla_get_u32(cand
[NL80211_PMKSA_CANDIDATE_INDEX
]);
1667 data
.pmkid_candidate
.preauth
=
1668 cand
[NL80211_PMKSA_CANDIDATE_PREAUTH
] != NULL
;
1669 wpa_supplicant_event(drv
->ctx
, EVENT_PMKID_CANDIDATE
, &data
);
1673 static void nl80211_client_probe_event(struct wpa_driver_nl80211_data
*drv
,
1676 union wpa_event_data data
;
1678 if (!tb
[NL80211_ATTR_MAC
] || !tb
[NL80211_ATTR_ACK
])
1681 os_memset(&data
, 0, sizeof(data
));
1682 os_memcpy(data
.client_poll
.addr
,
1683 nla_data(tb
[NL80211_ATTR_MAC
]), ETH_ALEN
);
1685 wpa_supplicant_event(drv
->ctx
, EVENT_DRIVER_CLIENT_POLL_OK
, &data
);
1689 static int process_event(struct nl_msg
*msg
, void *arg
)
1691 struct wpa_driver_nl80211_data
*drv
= arg
;
1692 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1693 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1695 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1696 genlmsg_attrlen(gnlh
, 0), NULL
);
1698 if (tb
[NL80211_ATTR_IFINDEX
]) {
1699 int ifindex
= nla_get_u32(tb
[NL80211_ATTR_IFINDEX
]);
1700 if (ifindex
!= drv
->ifindex
&& !have_ifidx(drv
, ifindex
)) {
1701 wpa_printf(MSG_DEBUG
, "nl80211: Ignored event (cmd=%d)"
1702 " for foreign interface (ifindex %d)",
1703 gnlh
->cmd
, ifindex
);
1708 if (drv
->ap_scan_as_station
!= NL80211_IFTYPE_UNSPECIFIED
&&
1709 (gnlh
->cmd
== NL80211_CMD_NEW_SCAN_RESULTS
||
1710 gnlh
->cmd
== NL80211_CMD_SCAN_ABORTED
)) {
1711 wpa_driver_nl80211_set_mode(&drv
->first_bss
,
1712 drv
->ap_scan_as_station
);
1713 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
1716 switch (gnlh
->cmd
) {
1717 case NL80211_CMD_TRIGGER_SCAN
:
1718 wpa_printf(MSG_DEBUG
, "nl80211: Scan trigger");
1720 case NL80211_CMD_START_SCHED_SCAN
:
1721 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan started");
1723 case NL80211_CMD_SCHED_SCAN_STOPPED
:
1724 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stopped");
1725 wpa_supplicant_event(drv
->ctx
, EVENT_SCHED_SCAN_STOPPED
, NULL
);
1727 case NL80211_CMD_NEW_SCAN_RESULTS
:
1728 wpa_printf(MSG_DEBUG
, "nl80211: New scan results available");
1729 drv
->scan_complete_events
= 1;
1730 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
,
1732 send_scan_event(drv
, 0, tb
);
1734 case NL80211_CMD_SCHED_SCAN_RESULTS
:
1735 wpa_printf(MSG_DEBUG
,
1736 "nl80211: New sched scan results available");
1737 send_scan_event(drv
, 0, tb
);
1739 case NL80211_CMD_SCAN_ABORTED
:
1740 wpa_printf(MSG_DEBUG
, "nl80211: Scan aborted");
1742 * Need to indicate that scan results are available in order
1743 * not to make wpa_supplicant stop its scanning.
1745 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
,
1747 send_scan_event(drv
, 1, tb
);
1749 case NL80211_CMD_AUTHENTICATE
:
1750 case NL80211_CMD_ASSOCIATE
:
1751 case NL80211_CMD_DEAUTHENTICATE
:
1752 case NL80211_CMD_DISASSOCIATE
:
1753 case NL80211_CMD_FRAME
:
1754 case NL80211_CMD_FRAME_TX_STATUS
:
1755 case NL80211_CMD_UNPROT_DEAUTHENTICATE
:
1756 case NL80211_CMD_UNPROT_DISASSOCIATE
:
1757 mlme_event(drv
, gnlh
->cmd
, tb
[NL80211_ATTR_FRAME
],
1758 tb
[NL80211_ATTR_MAC
], tb
[NL80211_ATTR_TIMED_OUT
],
1759 tb
[NL80211_ATTR_WIPHY_FREQ
], tb
[NL80211_ATTR_ACK
],
1760 tb
[NL80211_ATTR_COOKIE
]);
1762 case NL80211_CMD_CONNECT
:
1763 case NL80211_CMD_ROAM
:
1764 mlme_event_connect(drv
, gnlh
->cmd
,
1765 tb
[NL80211_ATTR_STATUS_CODE
],
1766 tb
[NL80211_ATTR_MAC
],
1767 tb
[NL80211_ATTR_REQ_IE
],
1768 tb
[NL80211_ATTR_RESP_IE
]);
1770 case NL80211_CMD_DISCONNECT
:
1771 mlme_event_disconnect(drv
, tb
[NL80211_ATTR_REASON_CODE
],
1772 tb
[NL80211_ATTR_MAC
]);
1774 case NL80211_CMD_MICHAEL_MIC_FAILURE
:
1775 mlme_event_michael_mic_failure(drv
, tb
);
1777 case NL80211_CMD_JOIN_IBSS
:
1778 mlme_event_join_ibss(drv
, tb
);
1780 case NL80211_CMD_REMAIN_ON_CHANNEL
:
1781 mlme_event_remain_on_channel(drv
, 0, tb
);
1783 case NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL
:
1784 mlme_event_remain_on_channel(drv
, 1, tb
);
1786 case NL80211_CMD_NOTIFY_CQM
:
1787 nl80211_cqm_event(drv
, tb
);
1789 case NL80211_CMD_REG_CHANGE
:
1790 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory domain change");
1791 wpa_supplicant_event(drv
->ctx
, EVENT_CHANNEL_LIST_CHANGED
,
1794 case NL80211_CMD_REG_BEACON_HINT
:
1795 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory beacon hint");
1796 wpa_supplicant_event(drv
->ctx
, EVENT_CHANNEL_LIST_CHANGED
,
1799 case NL80211_CMD_NEW_STATION
:
1800 nl80211_new_station_event(drv
, tb
);
1802 case NL80211_CMD_DEL_STATION
:
1803 nl80211_del_station_event(drv
, tb
);
1805 case NL80211_CMD_SET_REKEY_OFFLOAD
:
1806 nl80211_rekey_offload_event(drv
, tb
);
1808 case NL80211_CMD_PMKSA_CANDIDATE
:
1809 nl80211_pmksa_candidate_event(drv
, tb
);
1811 case NL80211_CMD_PROBE_CLIENT
:
1812 nl80211_client_probe_event(drv
, tb
);
1815 wpa_printf(MSG_DEBUG
, "nl80211: Ignored unknown event "
1816 "(cmd=%d)", gnlh
->cmd
);
1824 static void wpa_driver_nl80211_event_receive(int sock
, void *eloop_ctx
,
1828 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
1830 wpa_printf(MSG_DEBUG
, "nl80211: Event message available");
1832 cb
= nl_cb_clone(drv
->global
->nl_cb
);
1835 nl_cb_set(cb
, NL_CB_SEQ_CHECK
, NL_CB_CUSTOM
, no_seq_check
, NULL
);
1836 nl_cb_set(cb
, NL_CB_VALID
, NL_CB_CUSTOM
, process_event
, drv
);
1837 nl_recvmsgs(handle
, cb
);
1843 * wpa_driver_nl80211_set_country - ask nl80211 to set the regulatory domain
1844 * @priv: driver_nl80211 private data
1845 * @alpha2_arg: country to which to switch to
1846 * Returns: 0 on success, -1 on failure
1848 * This asks nl80211 to set the regulatory domain for given
1849 * country ISO / IEC alpha2.
1851 static int wpa_driver_nl80211_set_country(void *priv
, const char *alpha2_arg
)
1853 struct i802_bss
*bss
= priv
;
1854 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
1858 msg
= nlmsg_alloc();
1862 alpha2
[0] = alpha2_arg
[0];
1863 alpha2
[1] = alpha2_arg
[1];
1866 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REQ_SET_REG
);
1868 NLA_PUT_STRING(msg
, NL80211_ATTR_REG_ALPHA2
, alpha2
);
1869 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
))
1877 struct wiphy_info_data
{
1878 struct wpa_driver_capa
*capa
;
1880 unsigned int error
:1;
1881 unsigned int device_ap_sme
:1;
1882 unsigned int poll_command_supported
:1;
1886 static int wiphy_info_handler(struct nl_msg
*msg
, void *arg
)
1888 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
1889 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
1890 struct wiphy_info_data
*info
= arg
;
1891 int p2p_go_supported
= 0, p2p_client_supported
= 0;
1892 int p2p_concurrent
= 0;
1893 int auth_supported
= 0, connect_supported
= 0;
1894 struct wpa_driver_capa
*capa
= info
->capa
;
1895 static struct nla_policy
1896 iface_combination_policy
[NUM_NL80211_IFACE_COMB
] = {
1897 [NL80211_IFACE_COMB_LIMITS
] = { .type
= NLA_NESTED
},
1898 [NL80211_IFACE_COMB_MAXNUM
] = { .type
= NLA_U32
},
1899 [NL80211_IFACE_COMB_STA_AP_BI_MATCH
] = { .type
= NLA_FLAG
},
1900 [NL80211_IFACE_COMB_NUM_CHANNELS
] = { .type
= NLA_U32
},
1902 iface_limit_policy
[NUM_NL80211_IFACE_LIMIT
] = {
1903 [NL80211_IFACE_LIMIT_TYPES
] = { .type
= NLA_NESTED
},
1904 [NL80211_IFACE_LIMIT_MAX
] = { .type
= NLA_U32
},
1907 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
1908 genlmsg_attrlen(gnlh
, 0), NULL
);
1910 if (tb
[NL80211_ATTR_MAX_NUM_SCAN_SSIDS
])
1911 capa
->max_scan_ssids
=
1912 nla_get_u8(tb
[NL80211_ATTR_MAX_NUM_SCAN_SSIDS
]);
1914 if (tb
[NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS
])
1915 capa
->max_sched_scan_ssids
=
1916 nla_get_u8(tb
[NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS
]);
1918 if (tb
[NL80211_ATTR_MAX_MATCH_SETS
])
1919 capa
->max_match_sets
=
1920 nla_get_u8(tb
[NL80211_ATTR_MAX_MATCH_SETS
]);
1922 if (tb
[NL80211_ATTR_SUPPORTED_IFTYPES
]) {
1923 struct nlattr
*nl_mode
;
1925 nla_for_each_nested(nl_mode
,
1926 tb
[NL80211_ATTR_SUPPORTED_IFTYPES
], i
) {
1927 switch (nla_type(nl_mode
)) {
1928 case NL80211_IFTYPE_AP
:
1929 capa
->flags
|= WPA_DRIVER_FLAGS_AP
;
1931 case NL80211_IFTYPE_P2P_GO
:
1932 p2p_go_supported
= 1;
1934 case NL80211_IFTYPE_P2P_CLIENT
:
1935 p2p_client_supported
= 1;
1941 if (tb
[NL80211_ATTR_INTERFACE_COMBINATIONS
]) {
1942 struct nlattr
*nl_combi
;
1945 nla_for_each_nested(nl_combi
,
1946 tb
[NL80211_ATTR_INTERFACE_COMBINATIONS
],
1948 struct nlattr
*tb_comb
[NUM_NL80211_IFACE_COMB
];
1949 struct nlattr
*tb_limit
[NUM_NL80211_IFACE_LIMIT
];
1950 struct nlattr
*nl_limit
, *nl_mode
;
1951 int err
, rem_limit
, rem_mode
;
1952 int combination_has_p2p
= 0, combination_has_mgd
= 0;
1954 err
= nla_parse_nested(tb_comb
, MAX_NL80211_IFACE_COMB
,
1956 iface_combination_policy
);
1957 if (err
|| !tb_comb
[NL80211_IFACE_COMB_LIMITS
] ||
1958 !tb_comb
[NL80211_IFACE_COMB_MAXNUM
] ||
1959 !tb_comb
[NL80211_IFACE_COMB_NUM_CHANNELS
])
1960 goto broken_combination
;
1962 nla_for_each_nested(nl_limit
,
1963 tb_comb
[NL80211_IFACE_COMB_LIMITS
],
1965 err
= nla_parse_nested(tb_limit
,
1966 MAX_NL80211_IFACE_LIMIT
,
1968 iface_limit_policy
);
1970 !tb_limit
[NL80211_IFACE_LIMIT_TYPES
])
1971 goto broken_combination
;
1973 nla_for_each_nested(
1975 tb_limit
[NL80211_IFACE_LIMIT_TYPES
],
1977 int ift
= nla_type(nl_mode
);
1978 if (ift
== NL80211_IFTYPE_P2P_GO
||
1979 ift
== NL80211_IFTYPE_P2P_CLIENT
)
1980 combination_has_p2p
= 1;
1981 if (ift
== NL80211_IFTYPE_STATION
)
1982 combination_has_mgd
= 1;
1984 if (combination_has_p2p
&& combination_has_mgd
)
1988 if (combination_has_p2p
&& combination_has_mgd
) {
1998 if (tb
[NL80211_ATTR_SUPPORTED_COMMANDS
]) {
1999 struct nlattr
*nl_cmd
;
2002 nla_for_each_nested(nl_cmd
,
2003 tb
[NL80211_ATTR_SUPPORTED_COMMANDS
], i
) {
2004 switch (nla_get_u32(nl_cmd
)) {
2005 case NL80211_CMD_AUTHENTICATE
:
2008 case NL80211_CMD_CONNECT
:
2009 connect_supported
= 1;
2011 case NL80211_CMD_START_SCHED_SCAN
:
2012 capa
->sched_scan_supported
= 1;
2014 case NL80211_CMD_PROBE_CLIENT
:
2015 info
->poll_command_supported
= 1;
2021 if (tb
[NL80211_ATTR_OFFCHANNEL_TX_OK
]) {
2022 wpa_printf(MSG_DEBUG
, "nl80211: Using driver-based "
2024 capa
->flags
|= WPA_DRIVER_FLAGS_OFFCHANNEL_TX
;
2027 if (tb
[NL80211_ATTR_ROAM_SUPPORT
]) {
2028 wpa_printf(MSG_DEBUG
, "nl80211: Using driver-based roaming");
2029 capa
->flags
|= WPA_DRIVER_FLAGS_BSS_SELECTION
;
2032 /* default to 5000 since early versions of mac80211 don't set it */
2033 capa
->max_remain_on_chan
= 5000;
2035 if (tb
[NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION
])
2036 capa
->max_remain_on_chan
=
2037 nla_get_u32(tb
[NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION
]);
2040 capa
->flags
|= WPA_DRIVER_FLAGS_SME
;
2041 else if (!connect_supported
) {
2042 wpa_printf(MSG_INFO
, "nl80211: Driver does not support "
2043 "authentication/association or connect commands");
2047 if (p2p_go_supported
&& p2p_client_supported
)
2048 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_CAPABLE
;
2049 if (p2p_concurrent
) {
2050 wpa_printf(MSG_DEBUG
, "nl80211: Use separate P2P group "
2051 "interface (driver advertised support)");
2052 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_CONCURRENT
;
2053 capa
->flags
|= WPA_DRIVER_FLAGS_P2P_MGMT_AND_NON_P2P
;
2056 if (tb
[NL80211_ATTR_TDLS_SUPPORT
]) {
2057 wpa_printf(MSG_DEBUG
, "nl80211: TDLS supported");
2058 capa
->flags
|= WPA_DRIVER_FLAGS_TDLS_SUPPORT
;
2060 if (tb
[NL80211_ATTR_TDLS_EXTERNAL_SETUP
]) {
2061 wpa_printf(MSG_DEBUG
, "nl80211: TDLS external setup");
2063 WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP
;
2067 if (tb
[NL80211_ATTR_DEVICE_AP_SME
])
2068 info
->device_ap_sme
= 1;
2074 static int wpa_driver_nl80211_get_info(struct wpa_driver_nl80211_data
*drv
,
2075 struct wiphy_info_data
*info
)
2079 os_memset(info
, 0, sizeof(*info
));
2080 info
->capa
= &drv
->capa
;
2082 msg
= nlmsg_alloc();
2086 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_WIPHY
);
2088 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->first_bss
.ifindex
);
2090 if (send_and_recv_msgs(drv
, msg
, wiphy_info_handler
, info
) == 0)
2099 static int wpa_driver_nl80211_capa(struct wpa_driver_nl80211_data
*drv
)
2101 struct wiphy_info_data info
;
2102 if (wpa_driver_nl80211_get_info(drv
, &info
))
2108 drv
->has_capability
= 1;
2109 /* For now, assume TKIP, CCMP, WPA, WPA2 are supported */
2110 drv
->capa
.key_mgmt
= WPA_DRIVER_CAPA_KEY_MGMT_WPA
|
2111 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK
|
2112 WPA_DRIVER_CAPA_KEY_MGMT_WPA2
|
2113 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK
;
2114 drv
->capa
.enc
= WPA_DRIVER_CAPA_ENC_WEP40
|
2115 WPA_DRIVER_CAPA_ENC_WEP104
|
2116 WPA_DRIVER_CAPA_ENC_TKIP
|
2117 WPA_DRIVER_CAPA_ENC_CCMP
;
2118 drv
->capa
.auth
= WPA_DRIVER_AUTH_OPEN
|
2119 WPA_DRIVER_AUTH_SHARED
|
2120 WPA_DRIVER_AUTH_LEAP
;
2122 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_SANE_ERROR_CODES
;
2123 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_SET_KEYS_AFTER_ASSOC_DONE
;
2124 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_EAPOL_TX_STATUS
;
2125 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_DEAUTH_TX_STATUS
;
2127 drv
->device_ap_sme
= info
.device_ap_sme
;
2128 drv
->poll_command_supported
= info
.poll_command_supported
;
2134 static int wpa_driver_nl80211_init_nl_global(struct nl80211_global
*global
)
2136 global
->nl_cb
= nl_cb_alloc(NL_CB_DEFAULT
);
2137 if (global
->nl_cb
== NULL
) {
2138 wpa_printf(MSG_ERROR
, "nl80211: Failed to allocate netlink "
2143 if (nl_create_handles(&global
->nl
, global
->nl_cb
, "nl"))
2146 global
->nl80211_id
= genl_ctrl_resolve(global
->nl
.handle
, "nl80211");
2147 if (global
->nl80211_id
< 0) {
2148 wpa_printf(MSG_ERROR
, "nl80211: 'nl80211' generic netlink not "
2157 static int wpa_driver_nl80211_init_nl(struct wpa_driver_nl80211_data
*drv
)
2159 struct nl80211_global
*global
= drv
->global
;
2162 /* Initialize generic netlink and nl80211 */
2164 if (nl_create_handles(&drv
->nl_event
, global
->nl_cb
, "event"))
2167 ret
= nl_get_multicast_id(drv
, "nl80211", "scan");
2169 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2171 wpa_printf(MSG_ERROR
, "nl80211: Could not add multicast "
2172 "membership for scan events: %d (%s)",
2173 ret
, strerror(-ret
));
2177 ret
= nl_get_multicast_id(drv
, "nl80211", "mlme");
2179 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2181 wpa_printf(MSG_ERROR
, "nl80211: Could not add multicast "
2182 "membership for mlme events: %d (%s)",
2183 ret
, strerror(-ret
));
2187 ret
= nl_get_multicast_id(drv
, "nl80211", "regulatory");
2189 ret
= nl_socket_add_membership(drv
->nl_event
.handle
, ret
);
2191 wpa_printf(MSG_DEBUG
, "nl80211: Could not add multicast "
2192 "membership for regulatory events: %d (%s)",
2193 ret
, strerror(-ret
));
2194 /* Continue without regulatory events */
2197 eloop_register_read_sock(nl_socket_get_fd(drv
->nl_event
.handle
),
2198 wpa_driver_nl80211_event_receive
, drv
,
2199 drv
->nl_event
.handle
);
2204 nl_destroy_handles(&drv
->nl_event
);
2210 static void wpa_driver_nl80211_rfkill_blocked(void *ctx
)
2212 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL blocked");
2214 * This may be for any interface; use ifdown event to disable
2220 static void wpa_driver_nl80211_rfkill_unblocked(void *ctx
)
2222 struct wpa_driver_nl80211_data
*drv
= ctx
;
2223 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL unblocked");
2224 if (linux_set_iface_flags(drv
->global
->ioctl_sock
,
2225 drv
->first_bss
.ifname
, 1)) {
2226 wpa_printf(MSG_DEBUG
, "nl80211: Could not set interface UP "
2227 "after rfkill unblock");
2230 /* rtnetlink ifup handler will report interface as enabled */
2234 static void nl80211_get_phy_name(struct wpa_driver_nl80211_data
*drv
)
2236 /* Find phy (radio) to which this interface belongs */
2240 drv
->phyname
[0] = '\0';
2241 snprintf(buf
, sizeof(buf
) - 1, "/sys/class/net/%s/phy80211/name",
2242 drv
->first_bss
.ifname
);
2243 f
= open(buf
, O_RDONLY
);
2245 wpa_printf(MSG_DEBUG
, "Could not open file %s: %s",
2246 buf
, strerror(errno
));
2250 rv
= read(f
, drv
->phyname
, sizeof(drv
->phyname
) - 1);
2253 wpa_printf(MSG_DEBUG
, "Could not read file %s: %s",
2254 buf
, strerror(errno
));
2258 drv
->phyname
[rv
] = '\0';
2259 pos
= os_strchr(drv
->phyname
, '\n');
2262 wpa_printf(MSG_DEBUG
, "nl80211: interface %s in phy %s",
2263 drv
->first_bss
.ifname
, drv
->phyname
);
2268 * wpa_driver_nl80211_init - Initialize nl80211 driver interface
2269 * @ctx: context to be used when calling wpa_supplicant functions,
2270 * e.g., wpa_supplicant_event()
2271 * @ifname: interface name, e.g., wlan0
2272 * @global_priv: private driver global data from global_init()
2273 * Returns: Pointer to private data, %NULL on failure
2275 static void * wpa_driver_nl80211_init(void *ctx
, const char *ifname
,
2278 struct wpa_driver_nl80211_data
*drv
;
2279 struct rfkill_config
*rcfg
;
2280 struct i802_bss
*bss
;
2282 if (global_priv
== NULL
)
2284 drv
= os_zalloc(sizeof(*drv
));
2287 drv
->global
= global_priv
;
2289 bss
= &drv
->first_bss
;
2291 os_strlcpy(bss
->ifname
, ifname
, sizeof(bss
->ifname
));
2292 drv
->monitor_ifidx
= -1;
2293 drv
->monitor_sock
= -1;
2295 drv
->eapol_tx_sock
= -1;
2296 #endif /* CONFIG_AP */
2297 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
2299 if (wpa_driver_nl80211_init_nl(drv
)) {
2304 nl80211_get_phy_name(drv
);
2306 rcfg
= os_zalloc(sizeof(*rcfg
));
2310 os_strlcpy(rcfg
->ifname
, ifname
, sizeof(rcfg
->ifname
));
2311 rcfg
->blocked_cb
= wpa_driver_nl80211_rfkill_blocked
;
2312 rcfg
->unblocked_cb
= wpa_driver_nl80211_rfkill_unblocked
;
2313 drv
->rfkill
= rfkill_init(rcfg
);
2314 if (drv
->rfkill
== NULL
) {
2315 wpa_printf(MSG_DEBUG
, "nl80211: RFKILL status not available");
2319 if (wpa_driver_nl80211_finish_drv_init(drv
))
2323 drv
->eapol_tx_sock
= socket(PF_PACKET
, SOCK_DGRAM
, 0);
2324 #endif /* CONFIG_AP */
2327 dl_list_add(&drv
->global
->interfaces
, &drv
->list
);
2328 drv
->in_interface_list
= 1;
2334 wpa_driver_nl80211_deinit(bss
);
2339 static int nl80211_register_frame(struct wpa_driver_nl80211_data
*drv
,
2340 struct nl_handle
*nl_handle
,
2341 u16 type
, const u8
*match
, size_t match_len
)
2346 msg
= nlmsg_alloc();
2350 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REGISTER_ACTION
);
2352 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2353 NLA_PUT_U16(msg
, NL80211_ATTR_FRAME_TYPE
, type
);
2354 NLA_PUT(msg
, NL80211_ATTR_FRAME_MATCH
, match_len
, match
);
2356 ret
= send_and_recv(drv
, nl_handle
, msg
, NULL
, NULL
);
2359 wpa_printf(MSG_DEBUG
, "nl80211: Register frame command "
2360 "failed (type=%u): ret=%d (%s)",
2361 type
, ret
, strerror(-ret
));
2362 wpa_hexdump(MSG_DEBUG
, "nl80211: Register frame match",
2364 goto nla_put_failure
;
2373 static int nl80211_register_action_frame(struct wpa_driver_nl80211_data
*drv
,
2374 const u8
*match
, size_t match_len
)
2376 u16 type
= (WLAN_FC_TYPE_MGMT
<< 2) | (WLAN_FC_STYPE_ACTION
<< 4);
2377 return nl80211_register_frame(drv
, drv
->nl_event
.handle
,
2378 type
, match
, match_len
);
2382 static int nl80211_register_action_frames(struct wpa_driver_nl80211_data
*drv
)
2384 #if defined(CONFIG_P2P) || defined(CONFIG_INTERWORKING)
2385 /* GAS Initial Request */
2386 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0a", 2) < 0)
2388 /* GAS Initial Response */
2389 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0b", 2) < 0)
2391 /* GAS Comeback Request */
2392 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0c", 2) < 0)
2394 /* GAS Comeback Response */
2395 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0d", 2) < 0)
2397 #endif /* CONFIG_P2P || CONFIG_INTERWORKING */
2399 /* P2P Public Action */
2400 if (nl80211_register_action_frame(drv
,
2401 (u8
*) "\x04\x09\x50\x6f\x9a\x09",
2405 if (nl80211_register_action_frame(drv
,
2406 (u8
*) "\x7f\x50\x6f\x9a\x09",
2409 #endif /* CONFIG_P2P */
2410 #ifdef CONFIG_IEEE80211W
2411 /* SA Query Response */
2412 if (nl80211_register_action_frame(drv
, (u8
*) "\x08\x01", 2) < 0)
2414 #endif /* CONFIG_IEEE80211W */
2416 if ((drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
)) {
2417 /* TDLS Discovery Response */
2418 if (nl80211_register_action_frame(drv
, (u8
*) "\x04\x0e", 2) <
2422 #endif /* CONFIG_TDLS */
2424 /* FT Action frames */
2425 if (nl80211_register_action_frame(drv
, (u8
*) "\x06", 1) < 0)
2428 drv
->capa
.key_mgmt
|= WPA_DRIVER_CAPA_KEY_MGMT_FT
|
2429 WPA_DRIVER_CAPA_KEY_MGMT_FT_PSK
;
2431 /* WNM - BSS Transition Management Request */
2432 if (nl80211_register_action_frame(drv
, (u8
*) "\x0a\x07", 2) < 0)
2439 static void wpa_driver_nl80211_send_rfkill(void *eloop_ctx
, void *timeout_ctx
)
2441 wpa_supplicant_event(timeout_ctx
, EVENT_INTERFACE_DISABLED
, NULL
);
2446 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data
*drv
)
2448 struct i802_bss
*bss
= &drv
->first_bss
;
2449 int send_rfkill_event
= 0;
2451 drv
->ifindex
= if_nametoindex(bss
->ifname
);
2452 drv
->first_bss
.ifindex
= drv
->ifindex
;
2456 * Make sure the interface starts up in station mode unless this is a
2457 * dynamically added interface (e.g., P2P) that was already configured
2458 * with proper iftype.
2460 if (drv
->ifindex
!= drv
->global
->if_add_ifindex
&&
2461 wpa_driver_nl80211_set_mode(bss
, NL80211_IFTYPE_STATION
) < 0) {
2462 wpa_printf(MSG_ERROR
, "nl80211: Could not configure driver to "
2463 "use managed mode");
2467 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1)) {
2468 if (rfkill_is_blocked(drv
->rfkill
)) {
2469 wpa_printf(MSG_DEBUG
, "nl80211: Could not yet enable "
2470 "interface '%s' due to rfkill",
2472 drv
->if_disabled
= 1;
2473 send_rfkill_event
= 1;
2475 wpa_printf(MSG_ERROR
, "nl80211: Could not set "
2476 "interface '%s' UP", bss
->ifname
);
2481 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
,
2482 1, IF_OPER_DORMANT
);
2483 #endif /* HOSTAPD */
2485 if (wpa_driver_nl80211_capa(drv
))
2488 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
2492 if (nl80211_register_action_frames(drv
) < 0) {
2493 wpa_printf(MSG_DEBUG
, "nl80211: Failed to register Action "
2494 "frame processing - ignore for now");
2496 * Older kernel versions did not support this, so ignore the
2497 * error for now. Some functionality may not be available
2502 if (send_rfkill_event
) {
2503 eloop_register_timeout(0, 0, wpa_driver_nl80211_send_rfkill
,
2511 static int wpa_driver_nl80211_del_beacon(struct wpa_driver_nl80211_data
*drv
)
2515 msg
= nlmsg_alloc();
2519 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_BEACON
);
2520 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2522 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2529 * wpa_driver_nl80211_deinit - Deinitialize nl80211 driver interface
2530 * @priv: Pointer to private nl80211 data from wpa_driver_nl80211_init()
2532 * Shut down driver interface and processing of driver events. Free
2533 * private data buffer if one was allocated in wpa_driver_nl80211_init().
2535 static void wpa_driver_nl80211_deinit(void *priv
)
2537 struct i802_bss
*bss
= priv
;
2538 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2541 if (drv
->eapol_tx_sock
>= 0)
2542 close(drv
->eapol_tx_sock
);
2543 #endif /* CONFIG_AP */
2545 if (drv
->nl_preq
.handle
)
2546 wpa_driver_nl80211_probe_req_report(bss
, 0);
2547 if (bss
->added_if_into_bridge
) {
2548 if (linux_br_del_if(drv
->global
->ioctl_sock
, bss
->brname
,
2550 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
2551 "interface %s from bridge %s: %s",
2552 bss
->ifname
, bss
->brname
, strerror(errno
));
2554 if (bss
->added_bridge
) {
2555 if (linux_br_del(drv
->global
->ioctl_sock
, bss
->brname
) < 0)
2556 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
2558 bss
->brname
, strerror(errno
));
2561 nl80211_remove_monitor_interface(drv
);
2563 if (is_ap_interface(drv
->nlmode
))
2564 wpa_driver_nl80211_del_beacon(drv
);
2567 if (drv
->last_freq_ht
) {
2568 /* Clear HT flags from the driver */
2569 struct hostapd_freq_params freq
;
2570 os_memset(&freq
, 0, sizeof(freq
));
2571 freq
.freq
= drv
->last_freq
;
2572 i802_set_freq(priv
, &freq
);
2575 if (drv
->eapol_sock
>= 0) {
2576 eloop_unregister_read_sock(drv
->eapol_sock
);
2577 close(drv
->eapol_sock
);
2580 if (drv
->if_indices
!= drv
->default_if_indices
)
2581 os_free(drv
->if_indices
);
2582 #endif /* HOSTAPD */
2584 if (drv
->disabled_11b_rates
)
2585 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 0);
2587 netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
, 0,
2589 rfkill_deinit(drv
->rfkill
);
2591 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
, drv
->ctx
);
2593 (void) linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 0);
2594 wpa_driver_nl80211_set_mode(bss
, NL80211_IFTYPE_STATION
);
2596 eloop_unregister_read_sock(nl_socket_get_fd(drv
->nl_event
.handle
));
2597 nl_destroy_handles(&drv
->nl_event
);
2599 os_free(drv
->filter_ssids
);
2601 if (drv
->in_interface_list
)
2602 dl_list_del(&drv
->list
);
2609 * wpa_driver_nl80211_scan_timeout - Scan timeout to report scan completion
2610 * @eloop_ctx: Driver private data
2611 * @timeout_ctx: ctx argument given to wpa_driver_nl80211_init()
2613 * This function can be used as registered timeout when starting a scan to
2614 * generate a scan completed event if the driver does not report this.
2616 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx
, void *timeout_ctx
)
2618 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
2619 if (drv
->ap_scan_as_station
!= NL80211_IFTYPE_UNSPECIFIED
) {
2620 wpa_driver_nl80211_set_mode(&drv
->first_bss
,
2621 drv
->ap_scan_as_station
);
2622 drv
->ap_scan_as_station
= NL80211_IFTYPE_UNSPECIFIED
;
2624 wpa_printf(MSG_DEBUG
, "Scan timeout - try to get results");
2625 wpa_supplicant_event(timeout_ctx
, EVENT_SCAN_RESULTS
, NULL
);
2630 * wpa_driver_nl80211_scan - Request the driver to initiate scan
2631 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2632 * @params: Scan parameters
2633 * Returns: 0 on success, -1 on failure
2635 static int wpa_driver_nl80211_scan(void *priv
,
2636 struct wpa_driver_scan_params
*params
)
2638 struct i802_bss
*bss
= priv
;
2639 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2640 int ret
= 0, timeout
;
2641 struct nl_msg
*msg
, *ssids
, *freqs
, *rates
;
2644 msg
= nlmsg_alloc();
2645 ssids
= nlmsg_alloc();
2646 freqs
= nlmsg_alloc();
2647 rates
= nlmsg_alloc();
2648 if (!msg
|| !ssids
|| !freqs
|| !rates
) {
2656 os_free(drv
->filter_ssids
);
2657 drv
->filter_ssids
= params
->filter_ssids
;
2658 params
->filter_ssids
= NULL
;
2659 drv
->num_filter_ssids
= params
->num_filter_ssids
;
2661 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TRIGGER_SCAN
);
2663 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2665 for (i
= 0; i
< params
->num_ssids
; i
++) {
2666 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Scan SSID",
2667 params
->ssids
[i
].ssid
,
2668 params
->ssids
[i
].ssid_len
);
2669 NLA_PUT(ssids
, i
+ 1, params
->ssids
[i
].ssid_len
,
2670 params
->ssids
[i
].ssid
);
2672 if (params
->num_ssids
)
2673 nla_put_nested(msg
, NL80211_ATTR_SCAN_SSIDS
, ssids
);
2675 if (params
->extra_ies
) {
2676 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Scan extra IEs",
2677 params
->extra_ies
, params
->extra_ies_len
);
2678 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->extra_ies_len
,
2682 if (params
->freqs
) {
2683 for (i
= 0; params
->freqs
[i
]; i
++) {
2684 wpa_printf(MSG_MSGDUMP
, "nl80211: Scan frequency %u "
2685 "MHz", params
->freqs
[i
]);
2686 NLA_PUT_U32(freqs
, i
+ 1, params
->freqs
[i
]);
2688 nla_put_nested(msg
, NL80211_ATTR_SCAN_FREQUENCIES
, freqs
);
2691 if (params
->p2p_probe
) {
2693 * Remove 2.4 GHz rates 1, 2, 5.5, 11 Mbps from supported rates
2694 * by masking out everything else apart from the OFDM rates 6,
2695 * 9, 12, 18, 24, 36, 48, 54 Mbps from non-MCS rates. All 5 GHz
2696 * rates are left enabled.
2698 NLA_PUT(rates
, NL80211_BAND_2GHZ
, 8,
2699 "\x0c\x12\x18\x24\x30\x48\x60\x6c");
2700 nla_put_nested(msg
, NL80211_ATTR_SCAN_SUPP_RATES
, rates
);
2702 NLA_PUT_FLAG(msg
, NL80211_ATTR_TX_NO_CCK_RATE
);
2705 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2708 wpa_printf(MSG_DEBUG
, "nl80211: Scan trigger failed: ret=%d "
2709 "(%s)", ret
, strerror(-ret
));
2711 if (is_ap_interface(drv
->nlmode
)) {
2713 * mac80211 does not allow scan requests in AP mode, so
2714 * try to do this in station mode.
2716 if (wpa_driver_nl80211_set_mode(
2717 bss
, NL80211_IFTYPE_STATION
))
2718 goto nla_put_failure
;
2720 if (wpa_driver_nl80211_scan(drv
, params
)) {
2721 wpa_driver_nl80211_set_mode(bss
, drv
->nlmode
);
2722 goto nla_put_failure
;
2725 /* Restore AP mode when processing scan results */
2726 drv
->ap_scan_as_station
= drv
->nlmode
;
2729 goto nla_put_failure
;
2731 goto nla_put_failure
;
2732 #endif /* HOSTAPD */
2735 /* Not all drivers generate "scan completed" wireless event, so try to
2736 * read results after a timeout. */
2738 if (drv
->scan_complete_events
) {
2740 * The driver seems to deliver events to notify when scan is
2741 * complete, so use longer timeout to avoid race conditions
2742 * with scanning and following association request.
2746 wpa_printf(MSG_DEBUG
, "Scan requested (ret=%d) - scan timeout %d "
2747 "seconds", ret
, timeout
);
2748 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout
, drv
, drv
->ctx
);
2749 eloop_register_timeout(timeout
, 0, wpa_driver_nl80211_scan_timeout
,
2762 * wpa_driver_nl80211_sched_scan - Initiate a scheduled scan
2763 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2764 * @params: Scan parameters
2765 * @interval: Interval between scan cycles in milliseconds
2766 * Returns: 0 on success, -1 on failure or if not supported
2768 static int wpa_driver_nl80211_sched_scan(void *priv
,
2769 struct wpa_driver_scan_params
*params
,
2772 struct i802_bss
*bss
= priv
;
2773 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2775 struct nl_msg
*msg
, *ssids
, *freqs
, *match_set_ssid
, *match_sets
;
2778 msg
= nlmsg_alloc();
2779 ssids
= nlmsg_alloc();
2780 freqs
= nlmsg_alloc();
2781 if (!msg
|| !ssids
|| !freqs
) {
2788 os_free(drv
->filter_ssids
);
2789 drv
->filter_ssids
= params
->filter_ssids
;
2790 params
->filter_ssids
= NULL
;
2791 drv
->num_filter_ssids
= params
->num_filter_ssids
;
2793 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_START_SCHED_SCAN
);
2795 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2797 NLA_PUT_U32(msg
, NL80211_ATTR_SCHED_SCAN_INTERVAL
, interval
);
2799 if (drv
->num_filter_ssids
) {
2800 match_sets
= nlmsg_alloc();
2802 for (i
= 0; i
< drv
->num_filter_ssids
; i
++) {
2803 wpa_hexdump_ascii(MSG_MSGDUMP
,
2804 "nl80211: Sched scan filter SSID",
2805 drv
->filter_ssids
[i
].ssid
,
2806 drv
->filter_ssids
[i
].ssid_len
);
2808 match_set_ssid
= nlmsg_alloc();
2809 nla_put(match_set_ssid
,
2810 NL80211_ATTR_SCHED_SCAN_MATCH_SSID
,
2811 drv
->filter_ssids
[i
].ssid_len
,
2812 drv
->filter_ssids
[i
].ssid
);
2814 nla_put_nested(match_sets
, i
+ 1, match_set_ssid
);
2816 nlmsg_free(match_set_ssid
);
2819 nla_put_nested(msg
, NL80211_ATTR_SCHED_SCAN_MATCH
,
2821 nlmsg_free(match_sets
);
2824 for (i
= 0; i
< params
->num_ssids
; i
++) {
2825 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Sched scan SSID",
2826 params
->ssids
[i
].ssid
,
2827 params
->ssids
[i
].ssid_len
);
2828 NLA_PUT(ssids
, i
+ 1, params
->ssids
[i
].ssid_len
,
2829 params
->ssids
[i
].ssid
);
2831 if (params
->num_ssids
)
2832 nla_put_nested(msg
, NL80211_ATTR_SCAN_SSIDS
, ssids
);
2834 if (params
->extra_ies
) {
2835 wpa_hexdump_ascii(MSG_MSGDUMP
, "nl80211: Sched scan extra IEs",
2836 params
->extra_ies
, params
->extra_ies_len
);
2837 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->extra_ies_len
,
2841 if (params
->freqs
) {
2842 for (i
= 0; params
->freqs
[i
]; i
++) {
2843 wpa_printf(MSG_MSGDUMP
, "nl80211: Scan frequency %u "
2844 "MHz", params
->freqs
[i
]);
2845 NLA_PUT_U32(freqs
, i
+ 1, params
->freqs
[i
]);
2847 nla_put_nested(msg
, NL80211_ATTR_SCAN_FREQUENCIES
, freqs
);
2850 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2852 /* TODO: if we get an error here, we should fall back to normal scan */
2856 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan start failed: "
2857 "ret=%d (%s)", ret
, strerror(-ret
));
2858 goto nla_put_failure
;
2861 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan requested (ret=%d) - "
2862 "scan interval %d msec", ret
, interval
);
2873 * wpa_driver_nl80211_stop_sched_scan - Stop a scheduled scan
2874 * @priv: Pointer to private driver data from wpa_driver_nl80211_init()
2875 * Returns: 0 on success, -1 on failure or if not supported
2877 static int wpa_driver_nl80211_stop_sched_scan(void *priv
)
2879 struct i802_bss
*bss
= priv
;
2880 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
2884 msg
= nlmsg_alloc();
2888 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_STOP_SCHED_SCAN
);
2890 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
2892 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
2895 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stop failed: "
2896 "ret=%d (%s)", ret
, strerror(-ret
));
2897 goto nla_put_failure
;
2900 wpa_printf(MSG_DEBUG
, "nl80211: Sched scan stop sent (ret=%d)", ret
);
2908 static const u8
* nl80211_get_ie(const u8
*ies
, size_t ies_len
, u8 ie
)
2910 const u8
*end
, *pos
;
2916 end
= ies
+ ies_len
;
2918 while (pos
+ 1 < end
) {
2919 if (pos
+ 2 + pos
[1] > end
)
2930 static int nl80211_scan_filtered(struct wpa_driver_nl80211_data
*drv
,
2931 const u8
*ie
, size_t ie_len
)
2936 if (drv
->filter_ssids
== NULL
)
2939 ssid
= nl80211_get_ie(ie
, ie_len
, WLAN_EID_SSID
);
2943 for (i
= 0; i
< drv
->num_filter_ssids
; i
++) {
2944 if (ssid
[1] == drv
->filter_ssids
[i
].ssid_len
&&
2945 os_memcmp(ssid
+ 2, drv
->filter_ssids
[i
].ssid
, ssid
[1]) ==
2954 static int bss_info_handler(struct nl_msg
*msg
, void *arg
)
2956 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
2957 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
2958 struct nlattr
*bss
[NL80211_BSS_MAX
+ 1];
2959 static struct nla_policy bss_policy
[NL80211_BSS_MAX
+ 1] = {
2960 [NL80211_BSS_BSSID
] = { .type
= NLA_UNSPEC
},
2961 [NL80211_BSS_FREQUENCY
] = { .type
= NLA_U32
},
2962 [NL80211_BSS_TSF
] = { .type
= NLA_U64
},
2963 [NL80211_BSS_BEACON_INTERVAL
] = { .type
= NLA_U16
},
2964 [NL80211_BSS_CAPABILITY
] = { .type
= NLA_U16
},
2965 [NL80211_BSS_INFORMATION_ELEMENTS
] = { .type
= NLA_UNSPEC
},
2966 [NL80211_BSS_SIGNAL_MBM
] = { .type
= NLA_U32
},
2967 [NL80211_BSS_SIGNAL_UNSPEC
] = { .type
= NLA_U8
},
2968 [NL80211_BSS_STATUS
] = { .type
= NLA_U32
},
2969 [NL80211_BSS_SEEN_MS_AGO
] = { .type
= NLA_U32
},
2970 [NL80211_BSS_BEACON_IES
] = { .type
= NLA_UNSPEC
},
2972 struct nl80211_bss_info_arg
*_arg
= arg
;
2973 struct wpa_scan_results
*res
= _arg
->res
;
2974 struct wpa_scan_res
**tmp
;
2975 struct wpa_scan_res
*r
;
2976 const u8
*ie
, *beacon_ie
;
2977 size_t ie_len
, beacon_ie_len
;
2981 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
2982 genlmsg_attrlen(gnlh
, 0), NULL
);
2983 if (!tb
[NL80211_ATTR_BSS
])
2985 if (nla_parse_nested(bss
, NL80211_BSS_MAX
, tb
[NL80211_ATTR_BSS
],
2988 if (bss
[NL80211_BSS_STATUS
]) {
2989 enum nl80211_bss_status status
;
2990 status
= nla_get_u32(bss
[NL80211_BSS_STATUS
]);
2991 if (status
== NL80211_BSS_STATUS_ASSOCIATED
&&
2992 bss
[NL80211_BSS_FREQUENCY
]) {
2994 nla_get_u32(bss
[NL80211_BSS_FREQUENCY
]);
2995 wpa_printf(MSG_DEBUG
, "nl80211: Associated on %u MHz",
2998 if (status
== NL80211_BSS_STATUS_ASSOCIATED
&&
2999 bss
[NL80211_BSS_BSSID
]) {
3000 os_memcpy(_arg
->assoc_bssid
,
3001 nla_data(bss
[NL80211_BSS_BSSID
]), ETH_ALEN
);
3002 wpa_printf(MSG_DEBUG
, "nl80211: Associated with "
3003 MACSTR
, MAC2STR(_arg
->assoc_bssid
));
3008 if (bss
[NL80211_BSS_INFORMATION_ELEMENTS
]) {
3009 ie
= nla_data(bss
[NL80211_BSS_INFORMATION_ELEMENTS
]);
3010 ie_len
= nla_len(bss
[NL80211_BSS_INFORMATION_ELEMENTS
]);
3015 if (bss
[NL80211_BSS_BEACON_IES
]) {
3016 beacon_ie
= nla_data(bss
[NL80211_BSS_BEACON_IES
]);
3017 beacon_ie_len
= nla_len(bss
[NL80211_BSS_BEACON_IES
]);
3023 if (nl80211_scan_filtered(_arg
->drv
, ie
? ie
: beacon_ie
,
3024 ie
? ie_len
: beacon_ie_len
))
3027 r
= os_zalloc(sizeof(*r
) + ie_len
+ beacon_ie_len
);
3030 if (bss
[NL80211_BSS_BSSID
])
3031 os_memcpy(r
->bssid
, nla_data(bss
[NL80211_BSS_BSSID
]),
3033 if (bss
[NL80211_BSS_FREQUENCY
])
3034 r
->freq
= nla_get_u32(bss
[NL80211_BSS_FREQUENCY
]);
3035 if (bss
[NL80211_BSS_BEACON_INTERVAL
])
3036 r
->beacon_int
= nla_get_u16(bss
[NL80211_BSS_BEACON_INTERVAL
]);
3037 if (bss
[NL80211_BSS_CAPABILITY
])
3038 r
->caps
= nla_get_u16(bss
[NL80211_BSS_CAPABILITY
]);
3039 r
->flags
|= WPA_SCAN_NOISE_INVALID
;
3040 if (bss
[NL80211_BSS_SIGNAL_MBM
]) {
3041 r
->level
= nla_get_u32(bss
[NL80211_BSS_SIGNAL_MBM
]);
3042 r
->level
/= 100; /* mBm to dBm */
3043 r
->flags
|= WPA_SCAN_LEVEL_DBM
| WPA_SCAN_QUAL_INVALID
;
3044 } else if (bss
[NL80211_BSS_SIGNAL_UNSPEC
]) {
3045 r
->level
= nla_get_u8(bss
[NL80211_BSS_SIGNAL_UNSPEC
]);
3046 r
->flags
|= WPA_SCAN_QUAL_INVALID
;
3048 r
->flags
|= WPA_SCAN_LEVEL_INVALID
| WPA_SCAN_QUAL_INVALID
;
3049 if (bss
[NL80211_BSS_TSF
])
3050 r
->tsf
= nla_get_u64(bss
[NL80211_BSS_TSF
]);
3051 if (bss
[NL80211_BSS_SEEN_MS_AGO
])
3052 r
->age
= nla_get_u32(bss
[NL80211_BSS_SEEN_MS_AGO
]);
3054 pos
= (u8
*) (r
+ 1);
3056 os_memcpy(pos
, ie
, ie_len
);
3059 r
->beacon_ie_len
= beacon_ie_len
;
3061 os_memcpy(pos
, beacon_ie
, beacon_ie_len
);
3063 if (bss
[NL80211_BSS_STATUS
]) {
3064 enum nl80211_bss_status status
;
3065 status
= nla_get_u32(bss
[NL80211_BSS_STATUS
]);
3067 case NL80211_BSS_STATUS_AUTHENTICATED
:
3068 r
->flags
|= WPA_SCAN_AUTHENTICATED
;
3070 case NL80211_BSS_STATUS_ASSOCIATED
:
3071 r
->flags
|= WPA_SCAN_ASSOCIATED
;
3079 * cfg80211 maintains separate BSS table entries for APs if the same
3080 * BSSID,SSID pair is seen on multiple channels. wpa_supplicant does
3081 * not use frequency as a separate key in the BSS table, so filter out
3082 * duplicated entries. Prefer associated BSS entry in such a case in
3083 * order to get the correct frequency into the BSS table.
3085 for (i
= 0; i
< res
->num
; i
++) {
3087 if (os_memcmp(res
->res
[i
]->bssid
, r
->bssid
, ETH_ALEN
) != 0)
3090 s1
= nl80211_get_ie((u8
*) (res
->res
[i
] + 1),
3091 res
->res
[i
]->ie_len
, WLAN_EID_SSID
);
3092 s2
= nl80211_get_ie((u8
*) (r
+ 1), r
->ie_len
, WLAN_EID_SSID
);
3093 if (s1
== NULL
|| s2
== NULL
|| s1
[1] != s2
[1] ||
3094 os_memcmp(s1
, s2
, 2 + s1
[1]) != 0)
3097 /* Same BSSID,SSID was already included in scan results */
3098 wpa_printf(MSG_DEBUG
, "nl80211: Remove duplicated scan result "
3099 "for " MACSTR
, MAC2STR(r
->bssid
));
3101 if ((r
->flags
& WPA_SCAN_ASSOCIATED
) &&
3102 !(res
->res
[i
]->flags
& WPA_SCAN_ASSOCIATED
)) {
3103 os_free(res
->res
[i
]);
3110 tmp
= os_realloc(res
->res
,
3111 (res
->num
+ 1) * sizeof(struct wpa_scan_res
*));
3116 tmp
[res
->num
++] = r
;
3123 static void clear_state_mismatch(struct wpa_driver_nl80211_data
*drv
,
3126 if (drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
) {
3127 wpa_printf(MSG_DEBUG
, "nl80211: Clear possible state "
3128 "mismatch (" MACSTR
")", MAC2STR(addr
));
3129 wpa_driver_nl80211_mlme(drv
, addr
,
3130 NL80211_CMD_DEAUTHENTICATE
,
3131 WLAN_REASON_PREV_AUTH_NOT_VALID
, 1);
3136 static void wpa_driver_nl80211_check_bss_status(
3137 struct wpa_driver_nl80211_data
*drv
, struct wpa_scan_results
*res
)
3141 for (i
= 0; i
< res
->num
; i
++) {
3142 struct wpa_scan_res
*r
= res
->res
[i
];
3143 if (r
->flags
& WPA_SCAN_AUTHENTICATED
) {
3144 wpa_printf(MSG_DEBUG
, "nl80211: Scan results "
3145 "indicates BSS status with " MACSTR
3146 " as authenticated",
3148 if (is_sta_interface(drv
->nlmode
) &&
3149 os_memcmp(r
->bssid
, drv
->bssid
, ETH_ALEN
) != 0 &&
3150 os_memcmp(r
->bssid
, drv
->auth_bssid
, ETH_ALEN
) !=
3152 wpa_printf(MSG_DEBUG
, "nl80211: Unknown BSSID"
3153 " in local state (auth=" MACSTR
3154 " assoc=" MACSTR
")",
3155 MAC2STR(drv
->auth_bssid
),
3156 MAC2STR(drv
->bssid
));
3157 clear_state_mismatch(drv
, r
->bssid
);
3161 if (r
->flags
& WPA_SCAN_ASSOCIATED
) {
3162 wpa_printf(MSG_DEBUG
, "nl80211: Scan results "
3163 "indicate BSS status with " MACSTR
3166 if (is_sta_interface(drv
->nlmode
) &&
3168 wpa_printf(MSG_DEBUG
, "nl80211: Local state "
3169 "(not associated) does not match "
3171 clear_state_mismatch(drv
, r
->bssid
);
3172 } else if (is_sta_interface(drv
->nlmode
) &&
3173 os_memcmp(drv
->bssid
, r
->bssid
, ETH_ALEN
) !=
3175 wpa_printf(MSG_DEBUG
, "nl80211: Local state "
3176 "(associated with " MACSTR
") does "
3177 "not match with BSS state",
3178 MAC2STR(drv
->bssid
));
3179 clear_state_mismatch(drv
, r
->bssid
);
3180 clear_state_mismatch(drv
, drv
->bssid
);
3187 static struct wpa_scan_results
*
3188 nl80211_get_scan_results(struct wpa_driver_nl80211_data
*drv
)
3191 struct wpa_scan_results
*res
;
3193 struct nl80211_bss_info_arg arg
;
3195 res
= os_zalloc(sizeof(*res
));
3198 msg
= nlmsg_alloc();
3200 goto nla_put_failure
;
3202 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
3203 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3207 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
3210 wpa_printf(MSG_DEBUG
, "nl80211: Received scan results (%lu "
3211 "BSSes)", (unsigned long) res
->num
);
3212 nl80211_get_noise_for_scan_results(drv
, res
);
3215 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
3216 "(%s)", ret
, strerror(-ret
));
3219 wpa_scan_results_free(res
);
3225 * wpa_driver_nl80211_get_scan_results - Fetch the latest scan results
3226 * @priv: Pointer to private wext data from wpa_driver_nl80211_init()
3227 * Returns: Scan results on success, -1 on failure
3229 static struct wpa_scan_results
*
3230 wpa_driver_nl80211_get_scan_results(void *priv
)
3232 struct i802_bss
*bss
= priv
;
3233 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3234 struct wpa_scan_results
*res
;
3236 res
= nl80211_get_scan_results(drv
);
3238 wpa_driver_nl80211_check_bss_status(drv
, res
);
3243 static void nl80211_dump_scan(struct wpa_driver_nl80211_data
*drv
)
3245 struct wpa_scan_results
*res
;
3248 res
= nl80211_get_scan_results(drv
);
3250 wpa_printf(MSG_DEBUG
, "nl80211: Failed to get scan results");
3254 wpa_printf(MSG_DEBUG
, "nl80211: Scan result dump");
3255 for (i
= 0; i
< res
->num
; i
++) {
3256 struct wpa_scan_res
*r
= res
->res
[i
];
3257 wpa_printf(MSG_DEBUG
, "nl80211: %d/%d " MACSTR
"%s%s",
3258 (int) i
, (int) res
->num
, MAC2STR(r
->bssid
),
3259 r
->flags
& WPA_SCAN_AUTHENTICATED
? " [auth]" : "",
3260 r
->flags
& WPA_SCAN_ASSOCIATED
? " [assoc]" : "");
3263 wpa_scan_results_free(res
);
3267 static int wpa_driver_nl80211_set_key(const char *ifname
, void *priv
,
3268 enum wpa_alg alg
, const u8
*addr
,
3269 int key_idx
, int set_tx
,
3270 const u8
*seq
, size_t seq_len
,
3271 const u8
*key
, size_t key_len
)
3273 struct i802_bss
*bss
= priv
;
3274 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3275 int ifindex
= if_nametoindex(ifname
);
3279 wpa_printf(MSG_DEBUG
, "%s: ifindex=%d alg=%d addr=%p key_idx=%d "
3280 "set_tx=%d seq_len=%lu key_len=%lu",
3281 __func__
, ifindex
, alg
, addr
, key_idx
, set_tx
,
3282 (unsigned long) seq_len
, (unsigned long) key_len
);
3286 #endif /* CONFIG_TDLS */
3288 msg
= nlmsg_alloc();
3292 if (alg
== WPA_ALG_NONE
) {
3293 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_KEY
);
3295 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_NEW_KEY
);
3296 NLA_PUT(msg
, NL80211_ATTR_KEY_DATA
, key_len
, key
);
3300 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3301 WLAN_CIPHER_SUITE_WEP40
);
3303 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3304 WLAN_CIPHER_SUITE_WEP104
);
3307 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3308 WLAN_CIPHER_SUITE_TKIP
);
3311 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3312 WLAN_CIPHER_SUITE_CCMP
);
3315 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_CIPHER
,
3316 WLAN_CIPHER_SUITE_AES_CMAC
);
3319 wpa_printf(MSG_ERROR
, "%s: Unsupported encryption "
3320 "algorithm %d", __func__
, alg
);
3327 NLA_PUT(msg
, NL80211_ATTR_KEY_SEQ
, seq_len
, seq
);
3329 if (addr
&& !is_broadcast_ether_addr(addr
)) {
3330 wpa_printf(MSG_DEBUG
, " addr=" MACSTR
, MAC2STR(addr
));
3331 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
3333 if (alg
!= WPA_ALG_WEP
&& key_idx
&& !set_tx
) {
3334 wpa_printf(MSG_DEBUG
, " RSN IBSS RX GTK");
3335 NLA_PUT_U32(msg
, NL80211_ATTR_KEY_TYPE
,
3336 NL80211_KEYTYPE_GROUP
);
3338 } else if (addr
&& is_broadcast_ether_addr(addr
)) {
3339 struct nl_msg
*types
;
3341 wpa_printf(MSG_DEBUG
, " broadcast key");
3342 types
= nlmsg_alloc();
3344 goto nla_put_failure
;
3345 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_MULTICAST
);
3346 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3350 goto nla_put_failure
;
3352 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, key_idx
);
3353 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
3355 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3356 if ((ret
== -ENOENT
|| ret
== -ENOLINK
) && alg
== WPA_ALG_NONE
)
3359 wpa_printf(MSG_DEBUG
, "nl80211: set_key failed; err=%d %s)",
3360 ret
, strerror(-ret
));
3363 * If we failed or don't need to set the default TX key (below),
3366 if (ret
|| !set_tx
|| alg
== WPA_ALG_NONE
)
3368 if (is_ap_interface(drv
->nlmode
) && addr
&&
3369 !is_broadcast_ether_addr(addr
))
3372 msg
= nlmsg_alloc();
3376 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_KEY
);
3377 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, key_idx
);
3378 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
3379 if (alg
== WPA_ALG_IGTK
)
3380 NLA_PUT_FLAG(msg
, NL80211_ATTR_KEY_DEFAULT_MGMT
);
3382 NLA_PUT_FLAG(msg
, NL80211_ATTR_KEY_DEFAULT
);
3383 if (addr
&& is_broadcast_ether_addr(addr
)) {
3384 struct nl_msg
*types
;
3386 types
= nlmsg_alloc();
3388 goto nla_put_failure
;
3389 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_MULTICAST
);
3390 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3394 goto nla_put_failure
;
3396 struct nl_msg
*types
;
3398 types
= nlmsg_alloc();
3400 goto nla_put_failure
;
3401 NLA_PUT_FLAG(types
, NL80211_KEY_DEFAULT_TYPE_UNICAST
);
3402 err
= nla_put_nested(msg
, NL80211_ATTR_KEY_DEFAULT_TYPES
,
3406 goto nla_put_failure
;
3409 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3413 wpa_printf(MSG_DEBUG
, "nl80211: set_key default failed; "
3414 "err=%d %s)", ret
, strerror(-ret
));
3422 static int nl_add_key(struct nl_msg
*msg
, enum wpa_alg alg
,
3423 int key_idx
, int defkey
,
3424 const u8
*seq
, size_t seq_len
,
3425 const u8
*key
, size_t key_len
)
3427 struct nlattr
*key_attr
= nla_nest_start(msg
, NL80211_ATTR_KEY
);
3431 if (defkey
&& alg
== WPA_ALG_IGTK
)
3432 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT_MGMT
);
3434 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT
);
3436 NLA_PUT_U8(msg
, NL80211_KEY_IDX
, key_idx
);
3441 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3442 WLAN_CIPHER_SUITE_WEP40
);
3444 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3445 WLAN_CIPHER_SUITE_WEP104
);
3448 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
, WLAN_CIPHER_SUITE_TKIP
);
3451 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
, WLAN_CIPHER_SUITE_CCMP
);
3454 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3455 WLAN_CIPHER_SUITE_AES_CMAC
);
3458 wpa_printf(MSG_ERROR
, "%s: Unsupported encryption "
3459 "algorithm %d", __func__
, alg
);
3464 NLA_PUT(msg
, NL80211_KEY_SEQ
, seq_len
, seq
);
3466 NLA_PUT(msg
, NL80211_KEY_DATA
, key_len
, key
);
3468 nla_nest_end(msg
, key_attr
);
3476 static int nl80211_set_conn_keys(struct wpa_driver_associate_params
*params
,
3480 struct nlattr
*nl_keys
, *nl_key
;
3482 for (i
= 0; i
< 4; i
++) {
3483 if (!params
->wep_key
[i
])
3488 if (params
->wps
== WPS_MODE_PRIVACY
)
3490 if (params
->pairwise_suite
&&
3491 params
->pairwise_suite
!= WPA_CIPHER_NONE
)
3497 NLA_PUT_FLAG(msg
, NL80211_ATTR_PRIVACY
);
3499 nl_keys
= nla_nest_start(msg
, NL80211_ATTR_KEYS
);
3501 goto nla_put_failure
;
3503 for (i
= 0; i
< 4; i
++) {
3504 if (!params
->wep_key
[i
])
3507 nl_key
= nla_nest_start(msg
, i
);
3509 goto nla_put_failure
;
3511 NLA_PUT(msg
, NL80211_KEY_DATA
, params
->wep_key_len
[i
],
3512 params
->wep_key
[i
]);
3513 if (params
->wep_key_len
[i
] == 5)
3514 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3515 WLAN_CIPHER_SUITE_WEP40
);
3517 NLA_PUT_U32(msg
, NL80211_KEY_CIPHER
,
3518 WLAN_CIPHER_SUITE_WEP104
);
3520 NLA_PUT_U8(msg
, NL80211_KEY_IDX
, i
);
3522 if (i
== params
->wep_tx_keyidx
)
3523 NLA_PUT_FLAG(msg
, NL80211_KEY_DEFAULT
);
3525 nla_nest_end(msg
, nl_key
);
3527 nla_nest_end(msg
, nl_keys
);
3536 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data
*drv
,
3537 const u8
*addr
, int cmd
, u16 reason_code
,
3538 int local_state_change
)
3543 msg
= nlmsg_alloc();
3547 nl80211_cmd(drv
, msg
, 0, cmd
);
3549 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3550 NLA_PUT_U16(msg
, NL80211_ATTR_REASON_CODE
, reason_code
);
3551 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
3552 if (local_state_change
)
3553 NLA_PUT_FLAG(msg
, NL80211_ATTR_LOCAL_STATE_CHANGE
);
3555 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3558 wpa_dbg(drv
->ctx
, MSG_DEBUG
,
3559 "nl80211: MLME command failed: reason=%u ret=%d (%s)",
3560 reason_code
, ret
, strerror(-ret
));
3561 goto nla_put_failure
;
3571 static int wpa_driver_nl80211_disconnect(struct wpa_driver_nl80211_data
*drv
,
3572 const u8
*addr
, int reason_code
)
3574 wpa_printf(MSG_DEBUG
, "%s(addr=" MACSTR
" reason_code=%d)",
3575 __func__
, MAC2STR(addr
), reason_code
);
3576 drv
->associated
= 0;
3577 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DISCONNECT
,
3582 static int wpa_driver_nl80211_deauthenticate(void *priv
, const u8
*addr
,
3585 struct i802_bss
*bss
= priv
;
3586 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3587 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
))
3588 return wpa_driver_nl80211_disconnect(drv
, addr
, reason_code
);
3589 wpa_printf(MSG_DEBUG
, "%s(addr=" MACSTR
" reason_code=%d)",
3590 __func__
, MAC2STR(addr
), reason_code
);
3591 drv
->associated
= 0;
3592 if (drv
->nlmode
== NL80211_IFTYPE_ADHOC
)
3593 return nl80211_leave_ibss(drv
);
3594 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DEAUTHENTICATE
,
3599 static int wpa_driver_nl80211_disassociate(void *priv
, const u8
*addr
,
3602 struct i802_bss
*bss
= priv
;
3603 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3604 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
))
3605 return wpa_driver_nl80211_disconnect(drv
, addr
, reason_code
);
3606 wpa_printf(MSG_DEBUG
, "%s", __func__
);
3607 drv
->associated
= 0;
3608 return wpa_driver_nl80211_mlme(drv
, addr
, NL80211_CMD_DISASSOCIATE
,
3613 static int wpa_driver_nl80211_authenticate(
3614 void *priv
, struct wpa_driver_auth_params
*params
)
3616 struct i802_bss
*bss
= priv
;
3617 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
3620 enum nl80211_auth_type type
;
3621 enum nl80211_iftype nlmode
;
3624 drv
->associated
= 0;
3625 os_memset(drv
->auth_bssid
, 0, ETH_ALEN
);
3626 /* FIX: IBSS mode */
3627 nlmode
= params
->p2p
?
3628 NL80211_IFTYPE_P2P_CLIENT
: NL80211_IFTYPE_STATION
;
3629 if (drv
->nlmode
!= nlmode
&&
3630 wpa_driver_nl80211_set_mode(priv
, nlmode
) < 0)
3634 msg
= nlmsg_alloc();
3638 wpa_printf(MSG_DEBUG
, "nl80211: Authenticate (ifindex=%d)",
3641 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_AUTHENTICATE
);
3643 for (i
= 0; i
< 4; i
++) {
3644 if (!params
->wep_key
[i
])
3646 wpa_driver_nl80211_set_key(bss
->ifname
, priv
, WPA_ALG_WEP
,
3648 i
== params
->wep_tx_keyidx
, NULL
, 0,
3650 params
->wep_key_len
[i
]);
3651 if (params
->wep_tx_keyidx
!= i
)
3653 if (nl_add_key(msg
, WPA_ALG_WEP
, i
, 1, NULL
, 0,
3654 params
->wep_key
[i
], params
->wep_key_len
[i
])) {
3660 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
3661 if (params
->bssid
) {
3662 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
3663 MAC2STR(params
->bssid
));
3664 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
3667 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
3668 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
3671 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
3672 params
->ssid
, params
->ssid_len
);
3673 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
3676 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->ie
, params
->ie_len
);
3678 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->ie_len
, params
->ie
);
3679 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
3680 type
= NL80211_AUTHTYPE_OPEN_SYSTEM
;
3681 else if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
3682 type
= NL80211_AUTHTYPE_SHARED_KEY
;
3683 else if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
3684 type
= NL80211_AUTHTYPE_NETWORK_EAP
;
3685 else if (params
->auth_alg
& WPA_AUTH_ALG_FT
)
3686 type
= NL80211_AUTHTYPE_FT
;
3688 goto nla_put_failure
;
3689 wpa_printf(MSG_DEBUG
, " * Auth Type %d", type
);
3690 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
, type
);
3691 if (params
->local_state_change
) {
3692 wpa_printf(MSG_DEBUG
, " * Local state change only");
3693 NLA_PUT_FLAG(msg
, NL80211_ATTR_LOCAL_STATE_CHANGE
);
3696 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
3699 wpa_dbg(drv
->ctx
, MSG_DEBUG
,
3700 "nl80211: MLME command failed (auth): ret=%d (%s)",
3701 ret
, strerror(-ret
));
3703 if (ret
== -EALREADY
&& count
== 1 && params
->bssid
&&
3704 !params
->local_state_change
) {
3706 * mac80211 does not currently accept new
3707 * authentication if we are already authenticated. As a
3708 * workaround, force deauthentication and try again.
3710 wpa_printf(MSG_DEBUG
, "nl80211: Retry authentication "
3711 "after forced deauthentication");
3712 wpa_driver_nl80211_deauthenticate(
3714 WLAN_REASON_PREV_AUTH_NOT_VALID
);
3718 goto nla_put_failure
;
3721 wpa_printf(MSG_DEBUG
, "nl80211: Authentication request send "
3730 struct phy_info_arg
{
3732 struct hostapd_hw_modes
*modes
;
3735 static int phy_info_handler(struct nl_msg
*msg
, void *arg
)
3737 struct nlattr
*tb_msg
[NL80211_ATTR_MAX
+ 1];
3738 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
3739 struct phy_info_arg
*phy_info
= arg
;
3741 struct nlattr
*tb_band
[NL80211_BAND_ATTR_MAX
+ 1];
3743 struct nlattr
*tb_freq
[NL80211_FREQUENCY_ATTR_MAX
+ 1];
3744 static struct nla_policy freq_policy
[NL80211_FREQUENCY_ATTR_MAX
+ 1] = {
3745 [NL80211_FREQUENCY_ATTR_FREQ
] = { .type
= NLA_U32
},
3746 [NL80211_FREQUENCY_ATTR_DISABLED
] = { .type
= NLA_FLAG
},
3747 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN
] = { .type
= NLA_FLAG
},
3748 [NL80211_FREQUENCY_ATTR_NO_IBSS
] = { .type
= NLA_FLAG
},
3749 [NL80211_FREQUENCY_ATTR_RADAR
] = { .type
= NLA_FLAG
},
3750 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER
] = { .type
= NLA_U32
},
3753 struct nlattr
*tb_rate
[NL80211_BITRATE_ATTR_MAX
+ 1];
3754 static struct nla_policy rate_policy
[NL80211_BITRATE_ATTR_MAX
+ 1] = {
3755 [NL80211_BITRATE_ATTR_RATE
] = { .type
= NLA_U32
},
3756 [NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE
] = { .type
= NLA_FLAG
},
3759 struct nlattr
*nl_band
;
3760 struct nlattr
*nl_freq
;
3761 struct nlattr
*nl_rate
;
3762 int rem_band
, rem_freq
, rem_rate
;
3763 struct hostapd_hw_modes
*mode
;
3764 int idx
, mode_is_set
;
3766 nla_parse(tb_msg
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
3767 genlmsg_attrlen(gnlh
, 0), NULL
);
3769 if (!tb_msg
[NL80211_ATTR_WIPHY_BANDS
])
3772 nla_for_each_nested(nl_band
, tb_msg
[NL80211_ATTR_WIPHY_BANDS
], rem_band
) {
3773 mode
= os_realloc(phy_info
->modes
, (*phy_info
->num_modes
+ 1) * sizeof(*mode
));
3776 phy_info
->modes
= mode
;
3780 mode
= &phy_info
->modes
[*(phy_info
->num_modes
)];
3781 memset(mode
, 0, sizeof(*mode
));
3782 mode
->flags
= HOSTAPD_MODE_FLAG_HT_INFO_KNOWN
;
3783 *(phy_info
->num_modes
) += 1;
3785 nla_parse(tb_band
, NL80211_BAND_ATTR_MAX
, nla_data(nl_band
),
3786 nla_len(nl_band
), NULL
);
3788 if (tb_band
[NL80211_BAND_ATTR_HT_CAPA
]) {
3789 mode
->ht_capab
= nla_get_u16(
3790 tb_band
[NL80211_BAND_ATTR_HT_CAPA
]);
3793 if (tb_band
[NL80211_BAND_ATTR_HT_AMPDU_FACTOR
]) {
3794 mode
->a_mpdu_params
|= nla_get_u8(
3795 tb_band
[NL80211_BAND_ATTR_HT_AMPDU_FACTOR
]) &
3799 if (tb_band
[NL80211_BAND_ATTR_HT_AMPDU_DENSITY
]) {
3800 mode
->a_mpdu_params
|= nla_get_u8(
3801 tb_band
[NL80211_BAND_ATTR_HT_AMPDU_DENSITY
]) <<
3805 if (tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
] &&
3806 nla_len(tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
])) {
3808 mcs
= nla_data(tb_band
[NL80211_BAND_ATTR_HT_MCS_SET
]);
3809 os_memcpy(mode
->mcs_set
, mcs
, 16);
3812 nla_for_each_nested(nl_freq
, tb_band
[NL80211_BAND_ATTR_FREQS
], rem_freq
) {
3813 nla_parse(tb_freq
, NL80211_FREQUENCY_ATTR_MAX
, nla_data(nl_freq
),
3814 nla_len(nl_freq
), freq_policy
);
3815 if (!tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
])
3817 mode
->num_channels
++;
3820 mode
->channels
= os_zalloc(mode
->num_channels
* sizeof(struct hostapd_channel_data
));
3821 if (!mode
->channels
)
3826 nla_for_each_nested(nl_freq
, tb_band
[NL80211_BAND_ATTR_FREQS
], rem_freq
) {
3827 nla_parse(tb_freq
, NL80211_FREQUENCY_ATTR_MAX
, nla_data(nl_freq
),
3828 nla_len(nl_freq
), freq_policy
);
3829 if (!tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
])
3832 mode
->channels
[idx
].freq
= nla_get_u32(tb_freq
[NL80211_FREQUENCY_ATTR_FREQ
]);
3833 mode
->channels
[idx
].flag
= 0;
3836 /* crude heuristic */
3837 if (mode
->channels
[idx
].freq
< 4000)
3838 mode
->mode
= HOSTAPD_MODE_IEEE80211B
;
3840 mode
->mode
= HOSTAPD_MODE_IEEE80211A
;
3844 /* crude heuristic */
3845 if (mode
->channels
[idx
].freq
< 4000)
3846 if (mode
->channels
[idx
].freq
== 2484)
3847 mode
->channels
[idx
].chan
= 14;
3849 mode
->channels
[idx
].chan
= (mode
->channels
[idx
].freq
- 2407) / 5;
3851 mode
->channels
[idx
].chan
= mode
->channels
[idx
].freq
/5 - 1000;
3853 if (tb_freq
[NL80211_FREQUENCY_ATTR_DISABLED
])
3854 mode
->channels
[idx
].flag
|=
3855 HOSTAPD_CHAN_DISABLED
;
3856 if (tb_freq
[NL80211_FREQUENCY_ATTR_PASSIVE_SCAN
])
3857 mode
->channels
[idx
].flag
|=
3858 HOSTAPD_CHAN_PASSIVE_SCAN
;
3859 if (tb_freq
[NL80211_FREQUENCY_ATTR_NO_IBSS
])
3860 mode
->channels
[idx
].flag
|=
3861 HOSTAPD_CHAN_NO_IBSS
;
3862 if (tb_freq
[NL80211_FREQUENCY_ATTR_RADAR
])
3863 mode
->channels
[idx
].flag
|=
3866 if (tb_freq
[NL80211_FREQUENCY_ATTR_MAX_TX_POWER
] &&
3867 !tb_freq
[NL80211_FREQUENCY_ATTR_DISABLED
])
3868 mode
->channels
[idx
].max_tx_power
=
3869 nla_get_u32(tb_freq
[NL80211_FREQUENCY_ATTR_MAX_TX_POWER
]) / 100;
3874 nla_for_each_nested(nl_rate
, tb_band
[NL80211_BAND_ATTR_RATES
], rem_rate
) {
3875 nla_parse(tb_rate
, NL80211_BITRATE_ATTR_MAX
, nla_data(nl_rate
),
3876 nla_len(nl_rate
), rate_policy
);
3877 if (!tb_rate
[NL80211_BITRATE_ATTR_RATE
])
3882 mode
->rates
= os_zalloc(mode
->num_rates
* sizeof(int));
3888 nla_for_each_nested(nl_rate
, tb_band
[NL80211_BAND_ATTR_RATES
], rem_rate
) {
3889 nla_parse(tb_rate
, NL80211_BITRATE_ATTR_MAX
, nla_data(nl_rate
),
3890 nla_len(nl_rate
), rate_policy
);
3891 if (!tb_rate
[NL80211_BITRATE_ATTR_RATE
])
3893 mode
->rates
[idx
] = nla_get_u32(tb_rate
[NL80211_BITRATE_ATTR_RATE
]);
3895 /* crude heuristic */
3896 if (mode
->mode
== HOSTAPD_MODE_IEEE80211B
&&
3897 mode
->rates
[idx
] > 200)
3898 mode
->mode
= HOSTAPD_MODE_IEEE80211G
;
3907 static struct hostapd_hw_modes
*
3908 wpa_driver_nl80211_add_11b(struct hostapd_hw_modes
*modes
, u16
*num_modes
)
3911 struct hostapd_hw_modes
*mode11g
= NULL
, *nmodes
, *mode
;
3912 int i
, mode11g_idx
= -1;
3914 /* If only 802.11g mode is included, use it to construct matching
3915 * 802.11b mode data. */
3917 for (m
= 0; m
< *num_modes
; m
++) {
3918 if (modes
[m
].mode
== HOSTAPD_MODE_IEEE80211B
)
3919 return modes
; /* 802.11b already included */
3920 if (modes
[m
].mode
== HOSTAPD_MODE_IEEE80211G
)
3924 if (mode11g_idx
< 0)
3925 return modes
; /* 2.4 GHz band not supported at all */
3927 nmodes
= os_realloc(modes
, (*num_modes
+ 1) * sizeof(*nmodes
));
3929 return modes
; /* Could not add 802.11b mode */
3931 mode
= &nmodes
[*num_modes
];
3932 os_memset(mode
, 0, sizeof(*mode
));
3936 mode
->mode
= HOSTAPD_MODE_IEEE80211B
;
3938 mode11g
= &modes
[mode11g_idx
];
3939 mode
->num_channels
= mode11g
->num_channels
;
3940 mode
->channels
= os_malloc(mode11g
->num_channels
*
3941 sizeof(struct hostapd_channel_data
));
3942 if (mode
->channels
== NULL
) {
3944 return modes
; /* Could not add 802.11b mode */
3946 os_memcpy(mode
->channels
, mode11g
->channels
,
3947 mode11g
->num_channels
* sizeof(struct hostapd_channel_data
));
3949 mode
->num_rates
= 0;
3950 mode
->rates
= os_malloc(4 * sizeof(int));
3951 if (mode
->rates
== NULL
) {
3952 os_free(mode
->channels
);
3954 return modes
; /* Could not add 802.11b mode */
3957 for (i
= 0; i
< mode11g
->num_rates
; i
++) {
3958 if (mode11g
->rates
[i
] != 10 && mode11g
->rates
[i
] != 20 &&
3959 mode11g
->rates
[i
] != 55 && mode11g
->rates
[i
] != 110)
3961 mode
->rates
[mode
->num_rates
] = mode11g
->rates
[i
];
3963 if (mode
->num_rates
== 4)
3967 if (mode
->num_rates
== 0) {
3968 os_free(mode
->channels
);
3969 os_free(mode
->rates
);
3971 return modes
; /* No 802.11b rates */
3974 wpa_printf(MSG_DEBUG
, "nl80211: Added 802.11b mode based on 802.11g "
3981 static void nl80211_set_ht40_mode(struct hostapd_hw_modes
*mode
, int start
,
3986 for (c
= 0; c
< mode
->num_channels
; c
++) {
3987 struct hostapd_channel_data
*chan
= &mode
->channels
[c
];
3988 if (chan
->freq
- 10 >= start
&& chan
->freq
+ 10 <= end
)
3989 chan
->flag
|= HOSTAPD_CHAN_HT40
;
3994 static void nl80211_set_ht40_mode_sec(struct hostapd_hw_modes
*mode
, int start
,
3999 for (c
= 0; c
< mode
->num_channels
; c
++) {
4000 struct hostapd_channel_data
*chan
= &mode
->channels
[c
];
4001 if (!(chan
->flag
& HOSTAPD_CHAN_HT40
))
4003 if (chan
->freq
- 30 >= start
&& chan
->freq
- 10 <= end
)
4004 chan
->flag
|= HOSTAPD_CHAN_HT40MINUS
;
4005 if (chan
->freq
+ 10 >= start
&& chan
->freq
+ 30 <= end
)
4006 chan
->flag
|= HOSTAPD_CHAN_HT40PLUS
;
4011 static void nl80211_reg_rule_ht40(struct nlattr
*tb
[],
4012 struct phy_info_arg
*results
)
4014 u32 start
, end
, max_bw
;
4017 if (tb
[NL80211_ATTR_FREQ_RANGE_START
] == NULL
||
4018 tb
[NL80211_ATTR_FREQ_RANGE_END
] == NULL
||
4019 tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
] == NULL
)
4022 start
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_START
]) / 1000;
4023 end
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_END
]) / 1000;
4024 max_bw
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
]) / 1000;
4026 wpa_printf(MSG_DEBUG
, "nl80211: %u-%u @ %u MHz",
4027 start
, end
, max_bw
);
4031 for (m
= 0; m
< *results
->num_modes
; m
++) {
4032 if (!(results
->modes
[m
].ht_capab
&
4033 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
))
4035 nl80211_set_ht40_mode(&results
->modes
[m
], start
, end
);
4040 static void nl80211_reg_rule_sec(struct nlattr
*tb
[],
4041 struct phy_info_arg
*results
)
4043 u32 start
, end
, max_bw
;
4046 if (tb
[NL80211_ATTR_FREQ_RANGE_START
] == NULL
||
4047 tb
[NL80211_ATTR_FREQ_RANGE_END
] == NULL
||
4048 tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
] == NULL
)
4051 start
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_START
]) / 1000;
4052 end
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_END
]) / 1000;
4053 max_bw
= nla_get_u32(tb
[NL80211_ATTR_FREQ_RANGE_MAX_BW
]) / 1000;
4058 for (m
= 0; m
< *results
->num_modes
; m
++) {
4059 if (!(results
->modes
[m
].ht_capab
&
4060 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
))
4062 nl80211_set_ht40_mode_sec(&results
->modes
[m
], start
, end
);
4067 static int nl80211_get_reg(struct nl_msg
*msg
, void *arg
)
4069 struct phy_info_arg
*results
= arg
;
4070 struct nlattr
*tb_msg
[NL80211_ATTR_MAX
+ 1];
4071 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
4072 struct nlattr
*nl_rule
;
4073 struct nlattr
*tb_rule
[NL80211_FREQUENCY_ATTR_MAX
+ 1];
4075 static struct nla_policy reg_policy
[NL80211_FREQUENCY_ATTR_MAX
+ 1] = {
4076 [NL80211_ATTR_REG_RULE_FLAGS
] = { .type
= NLA_U32
},
4077 [NL80211_ATTR_FREQ_RANGE_START
] = { .type
= NLA_U32
},
4078 [NL80211_ATTR_FREQ_RANGE_END
] = { .type
= NLA_U32
},
4079 [NL80211_ATTR_FREQ_RANGE_MAX_BW
] = { .type
= NLA_U32
},
4080 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN
] = { .type
= NLA_U32
},
4081 [NL80211_ATTR_POWER_RULE_MAX_EIRP
] = { .type
= NLA_U32
},
4084 nla_parse(tb_msg
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
4085 genlmsg_attrlen(gnlh
, 0), NULL
);
4086 if (!tb_msg
[NL80211_ATTR_REG_ALPHA2
] ||
4087 !tb_msg
[NL80211_ATTR_REG_RULES
]) {
4088 wpa_printf(MSG_DEBUG
, "nl80211: No regulatory information "
4093 wpa_printf(MSG_DEBUG
, "nl80211: Regulatory information - country=%s",
4094 (char *) nla_data(tb_msg
[NL80211_ATTR_REG_ALPHA2
]));
4096 nla_for_each_nested(nl_rule
, tb_msg
[NL80211_ATTR_REG_RULES
], rem_rule
)
4098 nla_parse(tb_rule
, NL80211_FREQUENCY_ATTR_MAX
,
4099 nla_data(nl_rule
), nla_len(nl_rule
), reg_policy
);
4100 nl80211_reg_rule_ht40(tb_rule
, results
);
4103 nla_for_each_nested(nl_rule
, tb_msg
[NL80211_ATTR_REG_RULES
], rem_rule
)
4105 nla_parse(tb_rule
, NL80211_FREQUENCY_ATTR_MAX
,
4106 nla_data(nl_rule
), nla_len(nl_rule
), reg_policy
);
4107 nl80211_reg_rule_sec(tb_rule
, results
);
4114 static int nl80211_set_ht40_flags(struct wpa_driver_nl80211_data
*drv
,
4115 struct phy_info_arg
*results
)
4119 msg
= nlmsg_alloc();
4123 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_REG
);
4124 return send_and_recv_msgs(drv
, msg
, nl80211_get_reg
, results
);
4128 static struct hostapd_hw_modes
*
4129 wpa_driver_nl80211_get_hw_feature_data(void *priv
, u16
*num_modes
, u16
*flags
)
4131 struct i802_bss
*bss
= priv
;
4132 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4134 struct phy_info_arg result
= {
4135 .num_modes
= num_modes
,
4142 msg
= nlmsg_alloc();
4146 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_WIPHY
);
4148 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4150 if (send_and_recv_msgs(drv
, msg
, phy_info_handler
, &result
) == 0) {
4151 nl80211_set_ht40_flags(drv
, &result
);
4152 return wpa_driver_nl80211_add_11b(result
.modes
, num_modes
);
4159 static int wpa_driver_nl80211_send_frame(struct wpa_driver_nl80211_data
*drv
,
4160 const void *data
, size_t len
,
4161 int encrypt
, int noack
)
4164 0x00, 0x00, /* radiotap version */
4165 0x0e, 0x00, /* radiotap length */
4166 0x02, 0xc0, 0x00, 0x00, /* bmap: flags, tx and rx flags */
4167 IEEE80211_RADIOTAP_F_FRAG
, /* F_FRAG (fragment if required) */
4169 0x00, 0x00, /* RX and TX flags to indicate that */
4170 0x00, 0x00, /* this is the injected frame directly */
4172 struct iovec iov
[2] = {
4174 .iov_base
= &rtap_hdr
,
4175 .iov_len
= sizeof(rtap_hdr
),
4178 .iov_base
= (void *) data
,
4182 struct msghdr msg
= {
4187 .msg_control
= NULL
,
4188 .msg_controllen
= 0,
4195 rtap_hdr
[8] |= IEEE80211_RADIOTAP_F_WEP
;
4197 if (drv
->monitor_sock
< 0) {
4198 wpa_printf(MSG_DEBUG
, "nl80211: No monitor socket available "
4199 "for %s", __func__
);
4204 txflags
|= IEEE80211_RADIOTAP_F_TX_NOACK
;
4205 *(le16
*) &rtap_hdr
[12] = host_to_le16(txflags
);
4207 res
= sendmsg(drv
->monitor_sock
, &msg
, 0);
4209 wpa_printf(MSG_INFO
, "nl80211: sendmsg: %s", strerror(errno
));
4216 static int wpa_driver_nl80211_send_mlme(void *priv
, const u8
*data
,
4217 size_t data_len
, int noack
)
4219 struct i802_bss
*bss
= priv
;
4220 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4221 struct ieee80211_mgmt
*mgmt
;
4225 mgmt
= (struct ieee80211_mgmt
*) data
;
4226 fc
= le_to_host16(mgmt
->frame_control
);
4228 if (is_sta_interface(drv
->nlmode
) &&
4229 WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
4230 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_PROBE_RESP
) {
4232 * The use of last_mgmt_freq is a bit of a hack,
4233 * but it works due to the single-threaded nature
4234 * of wpa_supplicant.
4236 return nl80211_send_frame_cmd(drv
, drv
->last_mgmt_freq
, 0,
4237 data
, data_len
, NULL
, 1, noack
);
4240 if (drv
->device_ap_sme
&& is_ap_interface(drv
->nlmode
)) {
4241 return nl80211_send_frame_cmd(drv
, drv
->ap_oper_freq
, 0,
4242 data
, data_len
, NULL
, 0, noack
);
4245 if (WLAN_FC_GET_TYPE(fc
) == WLAN_FC_TYPE_MGMT
&&
4246 WLAN_FC_GET_STYPE(fc
) == WLAN_FC_STYPE_AUTH
) {
4248 * Only one of the authentication frame types is encrypted.
4249 * In order for static WEP encryption to work properly (i.e.,
4250 * to not encrypt the frame), we need to tell mac80211 about
4251 * the frames that must not be encrypted.
4253 u16 auth_alg
= le_to_host16(mgmt
->u
.auth
.auth_alg
);
4254 u16 auth_trans
= le_to_host16(mgmt
->u
.auth
.auth_transaction
);
4255 if (auth_alg
!= WLAN_AUTH_SHARED_KEY
|| auth_trans
!= 3)
4259 return wpa_driver_nl80211_send_frame(drv
, data
, data_len
, encrypt
,
4264 static int nl80211_set_ap_isolate(struct i802_bss
*bss
, int enabled
)
4266 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4269 msg
= nlmsg_alloc();
4273 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
4275 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4276 NLA_PUT_U8(msg
, NL80211_ATTR_AP_ISOLATE
, enabled
);
4278 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4284 static int nl80211_set_bss(struct i802_bss
*bss
, int cts
, int preamble
,
4285 int slot
, int ht_opmode
)
4287 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4290 msg
= nlmsg_alloc();
4294 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
4297 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_CTS_PROT
, cts
);
4299 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_SHORT_PREAMBLE
, preamble
);
4301 NLA_PUT_U8(msg
, NL80211_ATTR_BSS_SHORT_SLOT_TIME
, slot
);
4303 NLA_PUT_U16(msg
, NL80211_ATTR_BSS_HT_OPMODE
, ht_opmode
);
4304 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4306 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4312 static int wpa_driver_nl80211_set_ap(void *priv
,
4313 struct wpa_driver_ap_params
*params
)
4315 struct i802_bss
*bss
= priv
;
4316 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4318 u8 cmd
= NL80211_CMD_NEW_BEACON
;
4321 int ifindex
= if_nametoindex(bss
->ifname
);
4326 beacon_set
= bss
->beacon_set
;
4328 msg
= nlmsg_alloc();
4332 wpa_printf(MSG_DEBUG
, "nl80211: Set beacon (beacon_set=%d)",
4335 cmd
= NL80211_CMD_SET_BEACON
;
4337 nl80211_cmd(drv
, msg
, 0, cmd
);
4338 NLA_PUT(msg
, NL80211_ATTR_BEACON_HEAD
, params
->head_len
, params
->head
);
4339 NLA_PUT(msg
, NL80211_ATTR_BEACON_TAIL
, params
->tail_len
, params
->tail
);
4340 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
4341 NLA_PUT_U32(msg
, NL80211_ATTR_BEACON_INTERVAL
, params
->beacon_int
);
4342 NLA_PUT_U32(msg
, NL80211_ATTR_DTIM_PERIOD
, params
->dtim_period
);
4343 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
4345 switch (params
->hide_ssid
) {
4346 case NO_SSID_HIDING
:
4347 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4348 NL80211_HIDDEN_SSID_NOT_IN_USE
);
4350 case HIDDEN_SSID_ZERO_LEN
:
4351 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4352 NL80211_HIDDEN_SSID_ZERO_LEN
);
4354 case HIDDEN_SSID_ZERO_CONTENTS
:
4355 NLA_PUT_U32(msg
, NL80211_ATTR_HIDDEN_SSID
,
4356 NL80211_HIDDEN_SSID_ZERO_CONTENTS
);
4359 if (params
->privacy
)
4360 NLA_PUT_FLAG(msg
, NL80211_ATTR_PRIVACY
);
4361 if ((params
->auth_algs
& (WPA_AUTH_ALG_OPEN
| WPA_AUTH_ALG_SHARED
)) ==
4362 (WPA_AUTH_ALG_OPEN
| WPA_AUTH_ALG_SHARED
)) {
4363 /* Leave out the attribute */
4364 } else if (params
->auth_algs
& WPA_AUTH_ALG_SHARED
)
4365 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
,
4366 NL80211_AUTHTYPE_SHARED_KEY
);
4368 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
,
4369 NL80211_AUTHTYPE_OPEN_SYSTEM
);
4372 if (params
->wpa_version
& WPA_PROTO_WPA
)
4373 ver
|= NL80211_WPA_VERSION_1
;
4374 if (params
->wpa_version
& WPA_PROTO_RSN
)
4375 ver
|= NL80211_WPA_VERSION_2
;
4377 NLA_PUT_U32(msg
, NL80211_ATTR_WPA_VERSIONS
, ver
);
4380 if (params
->key_mgmt_suites
& WPA_KEY_MGMT_IEEE8021X
)
4381 suites
[num_suites
++] = WLAN_AKM_SUITE_8021X
;
4382 if (params
->key_mgmt_suites
& WPA_KEY_MGMT_PSK
)
4383 suites
[num_suites
++] = WLAN_AKM_SUITE_PSK
;
4385 NLA_PUT(msg
, NL80211_ATTR_AKM_SUITES
,
4386 num_suites
* sizeof(u32
), suites
);
4390 if (params
->pairwise_ciphers
& WPA_CIPHER_CCMP
)
4391 suites
[num_suites
++] = WLAN_CIPHER_SUITE_CCMP
;
4392 if (params
->pairwise_ciphers
& WPA_CIPHER_TKIP
)
4393 suites
[num_suites
++] = WLAN_CIPHER_SUITE_TKIP
;
4394 if (params
->pairwise_ciphers
& WPA_CIPHER_WEP104
)
4395 suites
[num_suites
++] = WLAN_CIPHER_SUITE_WEP104
;
4396 if (params
->pairwise_ciphers
& WPA_CIPHER_WEP40
)
4397 suites
[num_suites
++] = WLAN_CIPHER_SUITE_WEP40
;
4399 NLA_PUT(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
,
4400 num_suites
* sizeof(u32
), suites
);
4403 switch (params
->group_cipher
) {
4404 case WPA_CIPHER_CCMP
:
4405 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4406 WLAN_CIPHER_SUITE_CCMP
);
4408 case WPA_CIPHER_TKIP
:
4409 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4410 WLAN_CIPHER_SUITE_TKIP
);
4412 case WPA_CIPHER_WEP104
:
4413 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4414 WLAN_CIPHER_SUITE_WEP104
);
4416 case WPA_CIPHER_WEP40
:
4417 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
,
4418 WLAN_CIPHER_SUITE_WEP40
);
4422 if (params
->beacon_ies
) {
4423 NLA_PUT(msg
, NL80211_ATTR_IE
, wpabuf_len(params
->beacon_ies
),
4424 wpabuf_head(params
->beacon_ies
));
4426 if (params
->proberesp_ies
) {
4427 NLA_PUT(msg
, NL80211_ATTR_IE_PROBE_RESP
,
4428 wpabuf_len(params
->proberesp_ies
),
4429 wpabuf_head(params
->proberesp_ies
));
4431 if (params
->assocresp_ies
) {
4432 NLA_PUT(msg
, NL80211_ATTR_IE_ASSOC_RESP
,
4433 wpabuf_len(params
->assocresp_ies
),
4434 wpabuf_head(params
->assocresp_ies
));
4437 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4439 wpa_printf(MSG_DEBUG
, "nl80211: Beacon set failed: %d (%s)",
4440 ret
, strerror(-ret
));
4442 bss
->beacon_set
= 1;
4443 ret
= nl80211_set_ap_isolate(bss
, params
->isolate
);
4444 if (!params
->isolate
&& ret
) {
4445 wpa_printf(MSG_DEBUG
, "nl80211: Ignore AP isolation "
4446 "configuration error since isolation is "
4451 nl80211_set_bss(bss
, params
->cts_protect
, params
->preamble
,
4452 params
->short_slot_time
, params
->ht_opmode
);
4460 static int wpa_driver_nl80211_set_freq(struct wpa_driver_nl80211_data
*drv
,
4461 int freq
, int ht_enabled
,
4462 int sec_channel_offset
)
4467 wpa_printf(MSG_DEBUG
, "nl80211: Set freq %d (ht_enabled=%d "
4468 "sec_channel_offset=%d)",
4469 freq
, ht_enabled
, sec_channel_offset
);
4470 msg
= nlmsg_alloc();
4474 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
4476 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4477 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
4479 switch (sec_channel_offset
) {
4481 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4482 NL80211_CHAN_HT40MINUS
);
4485 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4486 NL80211_CHAN_HT40PLUS
);
4489 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_CHANNEL_TYPE
,
4495 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4498 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set channel (freq=%d): "
4499 "%d (%s)", freq
, ret
, strerror(-ret
));
4505 static u32
sta_flags_nl80211(int flags
)
4509 if (flags
& WPA_STA_AUTHORIZED
)
4510 f
|= BIT(NL80211_STA_FLAG_AUTHORIZED
);
4511 if (flags
& WPA_STA_WMM
)
4512 f
|= BIT(NL80211_STA_FLAG_WME
);
4513 if (flags
& WPA_STA_SHORT_PREAMBLE
)
4514 f
|= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE
);
4515 if (flags
& WPA_STA_MFP
)
4516 f
|= BIT(NL80211_STA_FLAG_MFP
);
4517 if (flags
& WPA_STA_TDLS_PEER
)
4518 f
|= BIT(NL80211_STA_FLAG_TDLS_PEER
);
4524 static int wpa_driver_nl80211_sta_add(void *priv
,
4525 struct hostapd_sta_add_params
*params
)
4527 struct i802_bss
*bss
= priv
;
4528 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4530 struct nl80211_sta_flag_update upd
;
4533 if ((params
->flags
& WPA_STA_TDLS_PEER
) &&
4534 !(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
4537 msg
= nlmsg_alloc();
4541 nl80211_cmd(drv
, msg
, 0, params
->set
? NL80211_CMD_SET_STATION
:
4542 NL80211_CMD_NEW_STATION
);
4544 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
4545 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->addr
);
4546 NLA_PUT(msg
, NL80211_ATTR_STA_SUPPORTED_RATES
, params
->supp_rates_len
,
4547 params
->supp_rates
);
4549 NLA_PUT_U16(msg
, NL80211_ATTR_STA_AID
, params
->aid
);
4550 NLA_PUT_U16(msg
, NL80211_ATTR_STA_LISTEN_INTERVAL
,
4551 params
->listen_interval
);
4553 if (params
->ht_capabilities
) {
4554 NLA_PUT(msg
, NL80211_ATTR_HT_CAPABILITY
,
4555 sizeof(*params
->ht_capabilities
),
4556 params
->ht_capabilities
);
4559 os_memset(&upd
, 0, sizeof(upd
));
4560 upd
.mask
= sta_flags_nl80211(params
->flags
);
4562 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
4564 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4566 wpa_printf(MSG_DEBUG
, "nl80211: NL80211_CMD_%s_STATION "
4567 "result: %d (%s)", params
->set
? "SET" : "NEW", ret
,
4576 static int wpa_driver_nl80211_sta_remove(void *priv
, const u8
*addr
)
4578 struct i802_bss
*bss
= priv
;
4579 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
4583 msg
= nlmsg_alloc();
4587 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_STATION
);
4589 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
4590 if_nametoindex(bss
->ifname
));
4591 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
4593 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4602 static void nl80211_remove_iface(struct wpa_driver_nl80211_data
*drv
,
4607 wpa_printf(MSG_DEBUG
, "nl80211: Remove interface ifindex=%d", ifidx
);
4609 /* stop listening for EAPOL on this interface */
4610 del_ifidx(drv
, ifidx
);
4612 msg
= nlmsg_alloc();
4614 goto nla_put_failure
;
4616 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_INTERFACE
);
4617 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifidx
);
4619 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
4622 wpa_printf(MSG_ERROR
, "Failed to remove interface (ifidx=%d)", ifidx
);
4626 static const char * nl80211_iftype_str(enum nl80211_iftype mode
)
4629 case NL80211_IFTYPE_ADHOC
:
4631 case NL80211_IFTYPE_STATION
:
4633 case NL80211_IFTYPE_AP
:
4635 case NL80211_IFTYPE_MONITOR
:
4637 case NL80211_IFTYPE_P2P_CLIENT
:
4638 return "P2P_CLIENT";
4639 case NL80211_IFTYPE_P2P_GO
:
4647 static int nl80211_create_iface_once(struct wpa_driver_nl80211_data
*drv
,
4649 enum nl80211_iftype iftype
,
4650 const u8
*addr
, int wds
)
4652 struct nl_msg
*msg
, *flags
= NULL
;
4656 wpa_printf(MSG_DEBUG
, "nl80211: Create interface iftype %d (%s)",
4657 iftype
, nl80211_iftype_str(iftype
));
4659 msg
= nlmsg_alloc();
4663 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_NEW_INTERFACE
);
4664 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
4665 NLA_PUT_STRING(msg
, NL80211_ATTR_IFNAME
, ifname
);
4666 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, iftype
);
4668 if (iftype
== NL80211_IFTYPE_MONITOR
) {
4671 flags
= nlmsg_alloc();
4673 goto nla_put_failure
;
4675 NLA_PUT_FLAG(flags
, NL80211_MNTR_FLAG_COOK_FRAMES
);
4677 err
= nla_put_nested(msg
, NL80211_ATTR_MNTR_FLAGS
, flags
);
4682 goto nla_put_failure
;
4684 NLA_PUT_U8(msg
, NL80211_ATTR_4ADDR
, wds
);
4687 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
4690 wpa_printf(MSG_ERROR
, "Failed to create interface %s: %d (%s)",
4691 ifname
, ret
, strerror(-ret
));
4695 ifidx
= if_nametoindex(ifname
);
4696 wpa_printf(MSG_DEBUG
, "nl80211: New interface %s created: ifindex=%d",
4702 /* start listening for EAPOL on this interface */
4703 add_ifidx(drv
, ifidx
);
4705 if (addr
&& iftype
!= NL80211_IFTYPE_MONITOR
&&
4706 linux_set_ifhwaddr(drv
->global
->ioctl_sock
, ifname
, addr
)) {
4707 nl80211_remove_iface(drv
, ifidx
);
4715 static int nl80211_create_iface(struct wpa_driver_nl80211_data
*drv
,
4716 const char *ifname
, enum nl80211_iftype iftype
,
4717 const u8
*addr
, int wds
)
4721 ret
= nl80211_create_iface_once(drv
, ifname
, iftype
, addr
, wds
);
4723 /* if error occurred and interface exists already */
4724 if (ret
== -ENFILE
&& if_nametoindex(ifname
)) {
4725 wpa_printf(MSG_INFO
, "Try to remove and re-create %s", ifname
);
4727 /* Try to remove the interface that was already there. */
4728 nl80211_remove_iface(drv
, if_nametoindex(ifname
));
4730 /* Try to create the interface again */
4731 ret
= nl80211_create_iface_once(drv
, ifname
, iftype
, addr
,
4735 if (ret
>= 0 && is_p2p_interface(iftype
))
4736 nl80211_disable_11b_rates(drv
, ret
, 1);
4742 static void handle_tx_callback(void *ctx
, u8
*buf
, size_t len
, int ok
)
4744 struct ieee80211_hdr
*hdr
;
4746 union wpa_event_data event
;
4748 hdr
= (struct ieee80211_hdr
*) buf
;
4749 fc
= le_to_host16(hdr
->frame_control
);
4751 os_memset(&event
, 0, sizeof(event
));
4752 event
.tx_status
.type
= WLAN_FC_GET_TYPE(fc
);
4753 event
.tx_status
.stype
= WLAN_FC_GET_STYPE(fc
);
4754 event
.tx_status
.dst
= hdr
->addr1
;
4755 event
.tx_status
.data
= buf
;
4756 event
.tx_status
.data_len
= len
;
4757 event
.tx_status
.ack
= ok
;
4758 wpa_supplicant_event(ctx
, EVENT_TX_STATUS
, &event
);
4762 static void from_unknown_sta(struct wpa_driver_nl80211_data
*drv
,
4763 u8
*buf
, size_t len
)
4765 struct ieee80211_hdr
*hdr
= (void *)buf
;
4767 union wpa_event_data event
;
4769 if (len
< sizeof(*hdr
))
4772 fc
= le_to_host16(hdr
->frame_control
);
4774 os_memset(&event
, 0, sizeof(event
));
4775 event
.rx_from_unknown
.bssid
= get_hdr_bssid(hdr
, len
);
4776 event
.rx_from_unknown
.addr
= hdr
->addr2
;
4777 event
.rx_from_unknown
.wds
= (fc
& (WLAN_FC_FROMDS
| WLAN_FC_TODS
)) ==
4778 (WLAN_FC_FROMDS
| WLAN_FC_TODS
);
4779 wpa_supplicant_event(drv
->ctx
, EVENT_RX_FROM_UNKNOWN
, &event
);
4783 static void handle_frame(struct wpa_driver_nl80211_data
*drv
,
4784 u8
*buf
, size_t len
, int datarate
, int ssi_signal
)
4786 struct ieee80211_hdr
*hdr
;
4788 union wpa_event_data event
;
4790 hdr
= (struct ieee80211_hdr
*) buf
;
4791 fc
= le_to_host16(hdr
->frame_control
);
4793 switch (WLAN_FC_GET_TYPE(fc
)) {
4794 case WLAN_FC_TYPE_MGMT
:
4795 os_memset(&event
, 0, sizeof(event
));
4796 event
.rx_mgmt
.frame
= buf
;
4797 event
.rx_mgmt
.frame_len
= len
;
4798 event
.rx_mgmt
.datarate
= datarate
;
4799 event
.rx_mgmt
.ssi_signal
= ssi_signal
;
4800 wpa_supplicant_event(drv
->ctx
, EVENT_RX_MGMT
, &event
);
4802 case WLAN_FC_TYPE_CTRL
:
4803 /* can only get here with PS-Poll frames */
4804 wpa_printf(MSG_DEBUG
, "CTRL");
4805 from_unknown_sta(drv
, buf
, len
);
4807 case WLAN_FC_TYPE_DATA
:
4808 from_unknown_sta(drv
, buf
, len
);
4814 static void handle_monitor_read(int sock
, void *eloop_ctx
, void *sock_ctx
)
4816 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
4818 unsigned char buf
[3000];
4819 struct ieee80211_radiotap_iterator iter
;
4821 int datarate
= 0, ssi_signal
= 0;
4822 int injected
= 0, failed
= 0, rxflags
= 0;
4824 len
= recv(sock
, buf
, sizeof(buf
), 0);
4830 if (ieee80211_radiotap_iterator_init(&iter
, (void*)buf
, len
)) {
4831 printf("received invalid radiotap frame\n");
4836 ret
= ieee80211_radiotap_iterator_next(&iter
);
4840 printf("received invalid radiotap frame (%d)\n", ret
);
4843 switch (iter
.this_arg_index
) {
4844 case IEEE80211_RADIOTAP_FLAGS
:
4845 if (*iter
.this_arg
& IEEE80211_RADIOTAP_F_FCS
)
4848 case IEEE80211_RADIOTAP_RX_FLAGS
:
4851 case IEEE80211_RADIOTAP_TX_FLAGS
:
4853 failed
= le_to_host16((*(uint16_t *) iter
.this_arg
)) &
4854 IEEE80211_RADIOTAP_F_TX_FAIL
;
4856 case IEEE80211_RADIOTAP_DATA_RETRIES
:
4858 case IEEE80211_RADIOTAP_CHANNEL
:
4859 /* TODO: convert from freq/flags to channel number */
4861 case IEEE80211_RADIOTAP_RATE
:
4862 datarate
= *iter
.this_arg
* 5;
4864 case IEEE80211_RADIOTAP_DB_ANTSIGNAL
:
4865 ssi_signal
= *iter
.this_arg
;
4870 if (rxflags
&& injected
)
4874 handle_frame(drv
, buf
+ iter
.max_length
,
4875 len
- iter
.max_length
, datarate
, ssi_signal
);
4877 handle_tx_callback(drv
->ctx
, buf
+ iter
.max_length
,
4878 len
- iter
.max_length
, !failed
);
4883 * we post-process the filter code later and rewrite
4884 * this to the offset to the last instruction
4889 static struct sock_filter msock_filter_insns
[] = {
4891 * do a little-endian load of the radiotap length field
4893 /* load lower byte into A */
4894 BPF_STMT(BPF_LD
| BPF_B
| BPF_ABS
, 2),
4895 /* put it into X (== index register) */
4896 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4897 /* load upper byte into A */
4898 BPF_STMT(BPF_LD
| BPF_B
| BPF_ABS
, 3),
4899 /* left-shift it by 8 */
4900 BPF_STMT(BPF_ALU
| BPF_LSH
| BPF_K
, 8),
4902 BPF_STMT(BPF_ALU
| BPF_OR
| BPF_X
, 0),
4903 /* put result into X */
4904 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4907 * Allow management frames through, this also gives us those
4908 * management frames that we sent ourselves with status
4910 /* load the lower byte of the IEEE 802.11 frame control field */
4911 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4912 /* mask off frame type and version */
4913 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0xF),
4914 /* accept frame if it's both 0, fall through otherwise */
4915 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0, PASS
, 0),
4918 * TODO: add a bit to radiotap RX flags that indicates
4919 * that the sending station is not associated, then
4920 * add a filter here that filters on our DA and that flag
4921 * to allow us to deauth frames to that bad station.
4923 * For now allow all To DS data frames through.
4925 /* load the IEEE 802.11 frame control field */
4926 BPF_STMT(BPF_LD
| BPF_H
| BPF_IND
, 0),
4927 /* mask off frame type, version and DS status */
4928 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x0F03),
4929 /* accept frame if version 0, type 2 and To DS, fall through otherwise
4931 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0x0801, PASS
, 0),
4935 * drop non-data frames
4937 /* load the lower byte of the frame control field */
4938 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4939 /* mask off QoS bit */
4940 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x0c),
4941 /* drop non-data frames */
4942 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 8, 0, FAIL
),
4944 /* load the upper byte of the frame control field */
4945 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 1),
4946 /* mask off toDS/fromDS */
4947 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x03),
4948 /* accept WDS frames */
4949 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 3, PASS
, 0),
4952 * add header length to index
4954 /* load the lower byte of the frame control field */
4955 BPF_STMT(BPF_LD
| BPF_B
| BPF_IND
, 0),
4956 /* mask off QoS bit */
4957 BPF_STMT(BPF_ALU
| BPF_AND
| BPF_K
, 0x80),
4958 /* right shift it by 6 to give 0 or 2 */
4959 BPF_STMT(BPF_ALU
| BPF_RSH
| BPF_K
, 6),
4960 /* add data frame header length */
4961 BPF_STMT(BPF_ALU
| BPF_ADD
| BPF_K
, 24),
4962 /* add index, was start of 802.11 header */
4963 BPF_STMT(BPF_ALU
| BPF_ADD
| BPF_X
, 0),
4964 /* move to index, now start of LL header */
4965 BPF_STMT(BPF_MISC
| BPF_TAX
, 0),
4968 * Accept empty data frames, we use those for
4971 BPF_STMT(BPF_LD
| BPF_W
| BPF_LEN
, 0),
4972 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_X
, 0, PASS
, 0),
4975 * Accept EAPOL frames
4977 BPF_STMT(BPF_LD
| BPF_W
| BPF_IND
, 0),
4978 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0xAAAA0300, 0, FAIL
),
4979 BPF_STMT(BPF_LD
| BPF_W
| BPF_IND
, 4),
4980 BPF_JUMP(BPF_JMP
| BPF_JEQ
| BPF_K
, 0x0000888E, PASS
, FAIL
),
4982 /* keep these last two statements or change the code below */
4983 /* return 0 == "DROP" */
4984 BPF_STMT(BPF_RET
| BPF_K
, 0),
4985 /* return ~0 == "keep all" */
4986 BPF_STMT(BPF_RET
| BPF_K
, ~0),
4989 static struct sock_fprog msock_filter
= {
4990 .len
= sizeof(msock_filter_insns
)/sizeof(msock_filter_insns
[0]),
4991 .filter
= msock_filter_insns
,
4995 static int add_monitor_filter(int s
)
4999 /* rewrite all PASS/FAIL jump offsets */
5000 for (idx
= 0; idx
< msock_filter
.len
; idx
++) {
5001 struct sock_filter
*insn
= &msock_filter_insns
[idx
];
5003 if (BPF_CLASS(insn
->code
) == BPF_JMP
) {
5004 if (insn
->code
== (BPF_JMP
|BPF_JA
)) {
5005 if (insn
->k
== PASS
)
5006 insn
->k
= msock_filter
.len
- idx
- 2;
5007 else if (insn
->k
== FAIL
)
5008 insn
->k
= msock_filter
.len
- idx
- 3;
5011 if (insn
->jt
== PASS
)
5012 insn
->jt
= msock_filter
.len
- idx
- 2;
5013 else if (insn
->jt
== FAIL
)
5014 insn
->jt
= msock_filter
.len
- idx
- 3;
5016 if (insn
->jf
== PASS
)
5017 insn
->jf
= msock_filter
.len
- idx
- 2;
5018 else if (insn
->jf
== FAIL
)
5019 insn
->jf
= msock_filter
.len
- idx
- 3;
5023 if (setsockopt(s
, SOL_SOCKET
, SO_ATTACH_FILTER
,
5024 &msock_filter
, sizeof(msock_filter
))) {
5025 perror("SO_ATTACH_FILTER");
5033 static void nl80211_remove_monitor_interface(
5034 struct wpa_driver_nl80211_data
*drv
)
5036 if (drv
->monitor_ifidx
>= 0) {
5037 nl80211_remove_iface(drv
, drv
->monitor_ifidx
);
5038 drv
->monitor_ifidx
= -1;
5040 if (drv
->monitor_sock
>= 0) {
5041 eloop_unregister_read_sock(drv
->monitor_sock
);
5042 close(drv
->monitor_sock
);
5043 drv
->monitor_sock
= -1;
5049 nl80211_create_monitor_interface(struct wpa_driver_nl80211_data
*drv
)
5052 struct sockaddr_ll ll
;
5056 if (os_strncmp(drv
->first_bss
.ifname
, "p2p-", 4) == 0) {
5058 * P2P interface name is of the format p2p-%s-%d. For monitor
5059 * interface name corresponding to P2P GO, replace "p2p-" with
5060 * "mon-" to retain the same interface name length and to
5061 * indicate that it is a monitor interface.
5063 snprintf(buf
, IFNAMSIZ
, "mon-%s", drv
->first_bss
.ifname
+ 4);
5065 /* Non-P2P interface with AP functionality. */
5066 snprintf(buf
, IFNAMSIZ
, "mon.%s", drv
->first_bss
.ifname
);
5069 buf
[IFNAMSIZ
- 1] = '\0';
5071 drv
->monitor_ifidx
=
5072 nl80211_create_iface(drv
, buf
, NL80211_IFTYPE_MONITOR
, NULL
,
5075 if (drv
->monitor_ifidx
== -EOPNOTSUPP
) {
5077 * This is backward compatibility for a few versions of
5078 * the kernel only that didn't advertise the right
5079 * attributes for the only driver that then supported
5080 * AP mode w/o monitor -- ath6kl.
5082 wpa_printf(MSG_DEBUG
, "nl80211: Driver does not support "
5083 "monitor interface type - try to run without it");
5084 drv
->device_ap_sme
= 1;
5087 if (drv
->monitor_ifidx
< 0)
5090 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, buf
, 1))
5093 memset(&ll
, 0, sizeof(ll
));
5094 ll
.sll_family
= AF_PACKET
;
5095 ll
.sll_ifindex
= drv
->monitor_ifidx
;
5096 drv
->monitor_sock
= socket(PF_PACKET
, SOCK_RAW
, htons(ETH_P_ALL
));
5097 if (drv
->monitor_sock
< 0) {
5098 perror("socket[PF_PACKET,SOCK_RAW]");
5102 if (add_monitor_filter(drv
->monitor_sock
)) {
5103 wpa_printf(MSG_INFO
, "Failed to set socket filter for monitor "
5104 "interface; do filtering in user space");
5105 /* This works, but will cost in performance. */
5108 if (bind(drv
->monitor_sock
, (struct sockaddr
*) &ll
, sizeof(ll
)) < 0) {
5109 perror("monitor socket bind");
5113 optlen
= sizeof(optval
);
5116 (drv
->monitor_sock
, SOL_SOCKET
, SO_PRIORITY
, &optval
, optlen
)) {
5117 perror("Failed to set socket priority");
5121 if (eloop_register_read_sock(drv
->monitor_sock
, handle_monitor_read
,
5123 printf("Could not register monitor read socket\n");
5129 nl80211_remove_monitor_interface(drv
);
5135 static int nl80211_send_eapol_data(struct i802_bss
*bss
,
5136 const u8
*addr
, const u8
*data
,
5139 struct sockaddr_ll ll
;
5142 if (bss
->drv
->eapol_tx_sock
< 0) {
5143 wpa_printf(MSG_DEBUG
, "nl80211: No socket to send EAPOL");
5147 os_memset(&ll
, 0, sizeof(ll
));
5148 ll
.sll_family
= AF_PACKET
;
5149 ll
.sll_ifindex
= bss
->ifindex
;
5150 ll
.sll_protocol
= htons(ETH_P_PAE
);
5151 ll
.sll_halen
= ETH_ALEN
;
5152 os_memcpy(ll
.sll_addr
, addr
, ETH_ALEN
);
5153 ret
= sendto(bss
->drv
->eapol_tx_sock
, data
, data_len
, 0,
5154 (struct sockaddr
*) &ll
, sizeof(ll
));
5156 wpa_printf(MSG_ERROR
, "nl80211: EAPOL TX: %s",
5161 #endif /* CONFIG_AP */
5164 static const u8 rfc1042_header
[6] = { 0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00 };
5166 static int wpa_driver_nl80211_hapd_send_eapol(
5167 void *priv
, const u8
*addr
, const u8
*data
,
5168 size_t data_len
, int encrypt
, const u8
*own_addr
, u32 flags
)
5170 struct i802_bss
*bss
= priv
;
5171 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5172 struct ieee80211_hdr
*hdr
;
5176 int qos
= flags
& WPA_STA_WMM
;
5179 if (drv
->device_ap_sme
)
5180 return nl80211_send_eapol_data(bss
, addr
, data
, data_len
);
5181 #endif /* CONFIG_AP */
5183 len
= sizeof(*hdr
) + (qos
? 2 : 0) + sizeof(rfc1042_header
) + 2 +
5185 hdr
= os_zalloc(len
);
5187 printf("malloc() failed for i802_send_data(len=%lu)\n",
5188 (unsigned long) len
);
5192 hdr
->frame_control
=
5193 IEEE80211_FC(WLAN_FC_TYPE_DATA
, WLAN_FC_STYPE_DATA
);
5194 hdr
->frame_control
|= host_to_le16(WLAN_FC_FROMDS
);
5196 hdr
->frame_control
|= host_to_le16(WLAN_FC_ISWEP
);
5198 hdr
->frame_control
|=
5199 host_to_le16(WLAN_FC_STYPE_QOS_DATA
<< 4);
5202 memcpy(hdr
->IEEE80211_DA_FROMDS
, addr
, ETH_ALEN
);
5203 memcpy(hdr
->IEEE80211_BSSID_FROMDS
, own_addr
, ETH_ALEN
);
5204 memcpy(hdr
->IEEE80211_SA_FROMDS
, own_addr
, ETH_ALEN
);
5205 pos
= (u8
*) (hdr
+ 1);
5208 /* add an empty QoS header if needed */
5214 memcpy(pos
, rfc1042_header
, sizeof(rfc1042_header
));
5215 pos
+= sizeof(rfc1042_header
);
5216 WPA_PUT_BE16(pos
, ETH_P_PAE
);
5218 memcpy(pos
, data
, data_len
);
5220 res
= wpa_driver_nl80211_send_frame(drv
, (u8
*) hdr
, len
, encrypt
, 0);
5222 wpa_printf(MSG_ERROR
, "i802_send_eapol - packet len: %lu - "
5224 (unsigned long) len
, errno
, strerror(errno
));
5232 static int wpa_driver_nl80211_sta_set_flags(void *priv
, const u8
*addr
,
5234 int flags_or
, int flags_and
)
5236 struct i802_bss
*bss
= priv
;
5237 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5238 struct nl_msg
*msg
, *flags
= NULL
;
5239 struct nl80211_sta_flag_update upd
;
5241 msg
= nlmsg_alloc();
5245 flags
= nlmsg_alloc();
5251 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
5253 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
5254 if_nametoindex(bss
->ifname
));
5255 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
5258 * Backwards compatibility version using NL80211_ATTR_STA_FLAGS. This
5259 * can be removed eventually.
5261 if (total_flags
& WPA_STA_AUTHORIZED
)
5262 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_AUTHORIZED
);
5264 if (total_flags
& WPA_STA_WMM
)
5265 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_WME
);
5267 if (total_flags
& WPA_STA_SHORT_PREAMBLE
)
5268 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_SHORT_PREAMBLE
);
5270 if (total_flags
& WPA_STA_MFP
)
5271 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_MFP
);
5273 if (total_flags
& WPA_STA_TDLS_PEER
)
5274 NLA_PUT_FLAG(flags
, NL80211_STA_FLAG_TDLS_PEER
);
5276 if (nla_put_nested(msg
, NL80211_ATTR_STA_FLAGS
, flags
))
5277 goto nla_put_failure
;
5279 os_memset(&upd
, 0, sizeof(upd
));
5280 upd
.mask
= sta_flags_nl80211(flags_or
| ~flags_and
);
5281 upd
.set
= sta_flags_nl80211(flags_or
);
5282 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
5286 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5293 static int wpa_driver_nl80211_ap(struct wpa_driver_nl80211_data
*drv
,
5294 struct wpa_driver_associate_params
*params
)
5296 enum nl80211_iftype nlmode
;
5299 wpa_printf(MSG_DEBUG
, "nl80211: Setup AP operations for P2P "
5301 nlmode
= NL80211_IFTYPE_P2P_GO
;
5303 nlmode
= NL80211_IFTYPE_AP
;
5305 if (wpa_driver_nl80211_set_mode(&drv
->first_bss
, nlmode
) ||
5306 wpa_driver_nl80211_set_freq(drv
, params
->freq
, 0, 0)) {
5307 nl80211_remove_monitor_interface(drv
);
5311 if (drv
->device_ap_sme
) {
5312 if (wpa_driver_nl80211_probe_req_report(&drv
->first_bss
, 1) < 0)
5314 wpa_printf(MSG_DEBUG
, "nl80211: Failed to enable "
5315 "Probe Request frame reporting in AP mode");
5316 /* Try to survive without this */
5320 drv
->ap_oper_freq
= params
->freq
;
5326 static int nl80211_leave_ibss(struct wpa_driver_nl80211_data
*drv
)
5331 msg
= nlmsg_alloc();
5335 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_LEAVE_IBSS
);
5336 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5337 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5340 wpa_printf(MSG_DEBUG
, "nl80211: Leave IBSS failed: ret=%d "
5341 "(%s)", ret
, strerror(-ret
));
5342 goto nla_put_failure
;
5346 wpa_printf(MSG_DEBUG
, "nl80211: Leave IBSS request sent successfully");
5354 static int wpa_driver_nl80211_ibss(struct wpa_driver_nl80211_data
*drv
,
5355 struct wpa_driver_associate_params
*params
)
5361 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS (ifindex=%d)", drv
->ifindex
);
5363 if (wpa_driver_nl80211_set_mode(&drv
->first_bss
,
5364 NL80211_IFTYPE_ADHOC
)) {
5365 wpa_printf(MSG_INFO
, "nl80211: Failed to set interface into "
5371 msg
= nlmsg_alloc();
5375 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_JOIN_IBSS
);
5376 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5378 if (params
->ssid
== NULL
|| params
->ssid_len
> sizeof(drv
->ssid
))
5379 goto nla_put_failure
;
5381 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5382 params
->ssid
, params
->ssid_len
);
5383 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5385 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5386 drv
->ssid_len
= params
->ssid_len
;
5388 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5389 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5391 ret
= nl80211_set_conn_keys(params
, msg
);
5393 goto nla_put_failure
;
5395 if (params
->wpa_ie
) {
5396 wpa_hexdump(MSG_DEBUG
,
5397 " * Extra IEs for Beacon/Probe Response frames",
5398 params
->wpa_ie
, params
->wpa_ie_len
);
5399 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5403 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5406 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS failed: ret=%d (%s)",
5407 ret
, strerror(-ret
));
5409 if (ret
== -EALREADY
&& count
== 1) {
5410 wpa_printf(MSG_DEBUG
, "nl80211: Retry IBSS join after "
5412 nl80211_leave_ibss(drv
);
5417 goto nla_put_failure
;
5420 wpa_printf(MSG_DEBUG
, "nl80211: Join IBSS request sent successfully");
5428 static unsigned int nl80211_get_assoc_bssid(struct wpa_driver_nl80211_data
*drv
,
5433 struct nl80211_bss_info_arg arg
;
5435 os_memset(&arg
, 0, sizeof(arg
));
5436 msg
= nlmsg_alloc();
5438 goto nla_put_failure
;
5440 nl80211_cmd(drv
, msg
, NLM_F_DUMP
, NL80211_CMD_GET_SCAN
);
5441 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5444 ret
= send_and_recv_msgs(drv
, msg
, bss_info_handler
, &arg
);
5447 if (is_zero_ether_addr(arg
.assoc_bssid
))
5449 os_memcpy(bssid
, arg
.assoc_bssid
, ETH_ALEN
);
5452 wpa_printf(MSG_DEBUG
, "nl80211: Scan result fetch failed: ret=%d "
5453 "(%s)", ret
, strerror(-ret
));
5456 return drv
->assoc_freq
;
5460 static int nl80211_disconnect(struct wpa_driver_nl80211_data
*drv
,
5465 if (bssid
== NULL
) {
5466 int res
= nl80211_get_assoc_bssid(drv
, addr
);
5472 return wpa_driver_nl80211_disconnect(drv
, bssid
,
5473 WLAN_REASON_PREV_AUTH_NOT_VALID
);
5477 static int wpa_driver_nl80211_connect(
5478 struct wpa_driver_nl80211_data
*drv
,
5479 struct wpa_driver_associate_params
*params
)
5482 enum nl80211_auth_type type
;
5486 msg
= nlmsg_alloc();
5490 wpa_printf(MSG_DEBUG
, "nl80211: Connect (ifindex=%d)", drv
->ifindex
);
5491 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_CONNECT
);
5493 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5494 if (params
->bssid
) {
5495 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
5496 MAC2STR(params
->bssid
));
5497 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
5500 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5501 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5504 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5505 params
->ssid
, params
->ssid_len
);
5506 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5508 if (params
->ssid_len
> sizeof(drv
->ssid
))
5509 goto nla_put_failure
;
5510 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5511 drv
->ssid_len
= params
->ssid_len
;
5513 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->wpa_ie
, params
->wpa_ie_len
);
5515 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5519 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
5521 if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
5523 if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
5526 wpa_printf(MSG_DEBUG
, " * Leave out Auth Type for automatic "
5528 goto skip_auth_type
;
5531 if (params
->auth_alg
& WPA_AUTH_ALG_OPEN
)
5532 type
= NL80211_AUTHTYPE_OPEN_SYSTEM
;
5533 else if (params
->auth_alg
& WPA_AUTH_ALG_SHARED
)
5534 type
= NL80211_AUTHTYPE_SHARED_KEY
;
5535 else if (params
->auth_alg
& WPA_AUTH_ALG_LEAP
)
5536 type
= NL80211_AUTHTYPE_NETWORK_EAP
;
5537 else if (params
->auth_alg
& WPA_AUTH_ALG_FT
)
5538 type
= NL80211_AUTHTYPE_FT
;
5540 goto nla_put_failure
;
5542 wpa_printf(MSG_DEBUG
, " * Auth Type %d", type
);
5543 NLA_PUT_U32(msg
, NL80211_ATTR_AUTH_TYPE
, type
);
5546 if (params
->wpa_proto
) {
5547 enum nl80211_wpa_versions ver
= 0;
5549 if (params
->wpa_proto
& WPA_PROTO_WPA
)
5550 ver
|= NL80211_WPA_VERSION_1
;
5551 if (params
->wpa_proto
& WPA_PROTO_RSN
)
5552 ver
|= NL80211_WPA_VERSION_2
;
5554 wpa_printf(MSG_DEBUG
, " * WPA Versions 0x%x", ver
);
5555 NLA_PUT_U32(msg
, NL80211_ATTR_WPA_VERSIONS
, ver
);
5558 if (params
->pairwise_suite
!= CIPHER_NONE
) {
5561 switch (params
->pairwise_suite
) {
5563 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5566 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5569 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5573 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5576 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
, cipher
);
5579 if (params
->group_suite
!= CIPHER_NONE
) {
5582 switch (params
->group_suite
) {
5584 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5587 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5590 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5594 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5597 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
, cipher
);
5600 if (params
->key_mgmt_suite
== KEY_MGMT_802_1X
||
5601 params
->key_mgmt_suite
== KEY_MGMT_PSK
) {
5602 int mgmt
= WLAN_AKM_SUITE_PSK
;
5604 switch (params
->key_mgmt_suite
) {
5605 case KEY_MGMT_802_1X
:
5606 mgmt
= WLAN_AKM_SUITE_8021X
;
5610 mgmt
= WLAN_AKM_SUITE_PSK
;
5613 NLA_PUT_U32(msg
, NL80211_ATTR_AKM_SUITES
, mgmt
);
5616 ret
= nl80211_set_conn_keys(params
, msg
);
5618 goto nla_put_failure
;
5620 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5623 wpa_printf(MSG_DEBUG
, "nl80211: MLME connect failed: ret=%d "
5624 "(%s)", ret
, strerror(-ret
));
5626 * cfg80211 does not currently accept new connection if we are
5627 * already connected. As a workaround, force disconnection and
5628 * try again once the driver indicates it completed
5631 if (ret
== -EALREADY
)
5632 nl80211_disconnect(drv
, params
->bssid
);
5633 goto nla_put_failure
;
5636 wpa_printf(MSG_DEBUG
, "nl80211: Connect request send successfully");
5645 static int wpa_driver_nl80211_associate(
5646 void *priv
, struct wpa_driver_associate_params
*params
)
5648 struct i802_bss
*bss
= priv
;
5649 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5653 if (params
->mode
== IEEE80211_MODE_AP
)
5654 return wpa_driver_nl80211_ap(drv
, params
);
5656 if (params
->mode
== IEEE80211_MODE_IBSS
)
5657 return wpa_driver_nl80211_ibss(drv
, params
);
5659 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_SME
)) {
5660 enum nl80211_iftype nlmode
= params
->p2p
?
5661 NL80211_IFTYPE_P2P_CLIENT
: NL80211_IFTYPE_STATION
;
5663 if (wpa_driver_nl80211_set_mode(priv
, nlmode
) < 0)
5665 return wpa_driver_nl80211_connect(drv
, params
);
5668 drv
->associated
= 0;
5670 msg
= nlmsg_alloc();
5674 wpa_printf(MSG_DEBUG
, "nl80211: Associate (ifindex=%d)",
5676 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_ASSOCIATE
);
5678 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
5679 if (params
->bssid
) {
5680 wpa_printf(MSG_DEBUG
, " * bssid=" MACSTR
,
5681 MAC2STR(params
->bssid
));
5682 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, params
->bssid
);
5685 wpa_printf(MSG_DEBUG
, " * freq=%d", params
->freq
);
5686 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, params
->freq
);
5687 drv
->assoc_freq
= params
->freq
;
5689 drv
->assoc_freq
= 0;
5691 wpa_hexdump_ascii(MSG_DEBUG
, " * SSID",
5692 params
->ssid
, params
->ssid_len
);
5693 NLA_PUT(msg
, NL80211_ATTR_SSID
, params
->ssid_len
,
5695 if (params
->ssid_len
> sizeof(drv
->ssid
))
5696 goto nla_put_failure
;
5697 os_memcpy(drv
->ssid
, params
->ssid
, params
->ssid_len
);
5698 drv
->ssid_len
= params
->ssid_len
;
5700 wpa_hexdump(MSG_DEBUG
, " * IEs", params
->wpa_ie
, params
->wpa_ie_len
);
5702 NLA_PUT(msg
, NL80211_ATTR_IE
, params
->wpa_ie_len
,
5705 if (params
->pairwise_suite
!= CIPHER_NONE
) {
5708 switch (params
->pairwise_suite
) {
5710 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5713 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5716 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5720 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5723 wpa_printf(MSG_DEBUG
, " * pairwise=0x%x", cipher
);
5724 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITES_PAIRWISE
, cipher
);
5727 if (params
->group_suite
!= CIPHER_NONE
) {
5730 switch (params
->group_suite
) {
5732 cipher
= WLAN_CIPHER_SUITE_WEP40
;
5735 cipher
= WLAN_CIPHER_SUITE_WEP104
;
5738 cipher
= WLAN_CIPHER_SUITE_CCMP
;
5742 cipher
= WLAN_CIPHER_SUITE_TKIP
;
5745 wpa_printf(MSG_DEBUG
, " * group=0x%x", cipher
);
5746 NLA_PUT_U32(msg
, NL80211_ATTR_CIPHER_SUITE_GROUP
, cipher
);
5749 #ifdef CONFIG_IEEE80211W
5750 if (params
->mgmt_frame_protection
== MGMT_FRAME_PROTECTION_REQUIRED
)
5751 NLA_PUT_U32(msg
, NL80211_ATTR_USE_MFP
, NL80211_MFP_REQUIRED
);
5752 #endif /* CONFIG_IEEE80211W */
5754 NLA_PUT_FLAG(msg
, NL80211_ATTR_CONTROL_PORT
);
5756 if (params
->prev_bssid
) {
5757 wpa_printf(MSG_DEBUG
, " * prev_bssid=" MACSTR
,
5758 MAC2STR(params
->prev_bssid
));
5759 NLA_PUT(msg
, NL80211_ATTR_PREV_BSSID
, ETH_ALEN
,
5760 params
->prev_bssid
);
5764 wpa_printf(MSG_DEBUG
, " * P2P group");
5766 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5769 wpa_dbg(drv
->ctx
, MSG_DEBUG
,
5770 "nl80211: MLME command failed (assoc): ret=%d (%s)",
5771 ret
, strerror(-ret
));
5772 nl80211_dump_scan(drv
);
5773 goto nla_put_failure
;
5776 wpa_printf(MSG_DEBUG
, "nl80211: Association request send "
5785 static int nl80211_set_mode(struct wpa_driver_nl80211_data
*drv
,
5786 int ifindex
, enum nl80211_iftype mode
)
5791 wpa_printf(MSG_DEBUG
, "nl80211: Set mode ifindex %d iftype %d (%s)",
5792 ifindex
, mode
, nl80211_iftype_str(mode
));
5794 msg
= nlmsg_alloc();
5798 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_INTERFACE
);
5799 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
5800 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, mode
);
5802 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5806 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set interface %d to mode %d:"
5807 " %d (%s)", ifindex
, mode
, ret
, strerror(-ret
));
5812 static int wpa_driver_nl80211_set_mode(struct i802_bss
*bss
,
5813 enum nl80211_iftype nlmode
)
5815 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5818 int was_ap
= is_ap_interface(drv
->nlmode
);
5820 if (nl80211_set_mode(drv
, drv
->ifindex
, nlmode
) == 0) {
5821 drv
->nlmode
= nlmode
;
5826 if (nlmode
== drv
->nlmode
) {
5827 wpa_printf(MSG_DEBUG
, "nl80211: Interface already in "
5828 "requested mode - ignore error");
5830 goto done
; /* Already in the requested mode */
5833 /* mac80211 doesn't allow mode changes while the device is up, so
5834 * take the device down, try to set the mode again, and bring the
5837 wpa_printf(MSG_DEBUG
, "nl80211: Try mode change after setting "
5839 for (i
= 0; i
< 10; i
++) {
5841 res
= linux_set_iface_flags(drv
->global
->ioctl_sock
,
5843 if (res
== -EACCES
|| res
== -ENODEV
)
5846 /* Try to set the mode again while the interface is
5848 ret
= nl80211_set_mode(drv
, drv
->ifindex
, nlmode
);
5851 res
= linux_set_iface_flags(drv
->global
->ioctl_sock
,
5855 else if (ret
!= -EBUSY
)
5858 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set "
5860 os_sleep(0, 100000);
5864 wpa_printf(MSG_DEBUG
, "nl80211: Mode change succeeded while "
5865 "interface is down");
5866 drv
->nlmode
= nlmode
;
5867 drv
->ignore_if_down_event
= 1;
5871 if (!ret
&& is_ap_interface(nlmode
)) {
5872 /* Setup additional AP mode functionality if needed */
5873 if (!drv
->device_ap_sme
&& drv
->monitor_ifidx
< 0 &&
5874 nl80211_create_monitor_interface(drv
) &&
5875 !drv
->device_ap_sme
)
5877 } else if (!ret
&& !is_ap_interface(nlmode
)) {
5878 /* Remove additional AP mode functionality */
5879 if (was_ap
&& drv
->device_ap_sme
)
5880 wpa_driver_nl80211_probe_req_report(bss
, 0);
5881 nl80211_remove_monitor_interface(drv
);
5882 bss
->beacon_set
= 0;
5885 if (!ret
&& is_p2p_interface(drv
->nlmode
)) {
5886 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 1);
5887 drv
->disabled_11b_rates
= 1;
5888 } else if (!ret
&& drv
->disabled_11b_rates
) {
5889 nl80211_disable_11b_rates(drv
, drv
->ifindex
, 0);
5890 drv
->disabled_11b_rates
= 0;
5894 wpa_printf(MSG_DEBUG
, "nl80211: Interface mode change to %d "
5895 "from %d failed", nlmode
, drv
->nlmode
);
5901 static int wpa_driver_nl80211_get_capa(void *priv
,
5902 struct wpa_driver_capa
*capa
)
5904 struct i802_bss
*bss
= priv
;
5905 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5906 if (!drv
->has_capability
)
5908 os_memcpy(capa
, &drv
->capa
, sizeof(*capa
));
5913 static int wpa_driver_nl80211_set_operstate(void *priv
, int state
)
5915 struct i802_bss
*bss
= priv
;
5916 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5918 wpa_printf(MSG_DEBUG
, "%s: operstate %d->%d (%s)",
5919 __func__
, drv
->operstate
, state
, state
? "UP" : "DORMANT");
5920 drv
->operstate
= state
;
5921 return netlink_send_oper_ifla(drv
->global
->netlink
, drv
->ifindex
, -1,
5922 state
? IF_OPER_UP
: IF_OPER_DORMANT
);
5926 static int wpa_driver_nl80211_set_supp_port(void *priv
, int authorized
)
5928 struct i802_bss
*bss
= priv
;
5929 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5931 struct nl80211_sta_flag_update upd
;
5933 msg
= nlmsg_alloc();
5937 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
5939 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
5940 if_nametoindex(bss
->ifname
));
5941 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, drv
->bssid
);
5943 os_memset(&upd
, 0, sizeof(upd
));
5944 upd
.mask
= BIT(NL80211_STA_FLAG_AUTHORIZED
);
5946 upd
.set
= BIT(NL80211_STA_FLAG_AUTHORIZED
);
5947 NLA_PUT(msg
, NL80211_ATTR_STA_FLAGS2
, sizeof(upd
), &upd
);
5949 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
5955 /* Set kernel driver on given frequency (MHz) */
5956 static int i802_set_freq(void *priv
, struct hostapd_freq_params
*freq
)
5958 struct i802_bss
*bss
= priv
;
5959 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
5960 return wpa_driver_nl80211_set_freq(drv
, freq
->freq
, freq
->ht_enabled
,
5961 freq
->sec_channel_offset
);
5965 #if defined(HOSTAPD) || defined(CONFIG_AP)
5967 static inline int min_int(int a
, int b
)
5975 static int get_key_handler(struct nl_msg
*msg
, void *arg
)
5977 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
5978 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
5980 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
5981 genlmsg_attrlen(gnlh
, 0), NULL
);
5984 * TODO: validate the key index and mac address!
5985 * Otherwise, there's a race condition as soon as
5986 * the kernel starts sending key notifications.
5989 if (tb
[NL80211_ATTR_KEY_SEQ
])
5990 memcpy(arg
, nla_data(tb
[NL80211_ATTR_KEY_SEQ
]),
5991 min_int(nla_len(tb
[NL80211_ATTR_KEY_SEQ
]), 6));
5996 static int i802_get_seqnum(const char *iface
, void *priv
, const u8
*addr
,
5999 struct i802_bss
*bss
= priv
;
6000 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6003 msg
= nlmsg_alloc();
6007 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_KEY
);
6010 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6011 NLA_PUT_U8(msg
, NL80211_ATTR_KEY_IDX
, idx
);
6012 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(iface
));
6016 return send_and_recv_msgs(drv
, msg
, get_key_handler
, seq
);
6022 static int i802_set_rate_sets(void *priv
, int *supp_rates
, int *basic_rates
,
6025 struct i802_bss
*bss
= priv
;
6026 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6028 u8 rates
[NL80211_MAX_SUPP_RATES
];
6032 msg
= nlmsg_alloc();
6036 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_BSS
);
6038 for (i
= 0; i
< NL80211_MAX_SUPP_RATES
&& basic_rates
[i
] >= 0; i
++)
6039 rates
[rates_len
++] = basic_rates
[i
] / 5;
6041 NLA_PUT(msg
, NL80211_ATTR_BSS_BASIC_RATES
, rates_len
, rates
);
6043 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6045 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6051 static int i802_set_rts(void *priv
, int rts
)
6053 struct i802_bss
*bss
= priv
;
6054 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6059 msg
= nlmsg_alloc();
6068 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6069 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6070 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_RTS_THRESHOLD
, val
);
6072 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6076 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set RTS threshold %d: "
6077 "%d (%s)", rts
, ret
, strerror(-ret
));
6082 static int i802_set_frag(void *priv
, int frag
)
6084 struct i802_bss
*bss
= priv
;
6085 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6090 msg
= nlmsg_alloc();
6099 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6100 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6101 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FRAG_THRESHOLD
, val
);
6103 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6107 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set fragmentation threshold "
6108 "%d: %d (%s)", frag
, ret
, strerror(-ret
));
6113 static int i802_flush(void *priv
)
6115 struct i802_bss
*bss
= priv
;
6116 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6119 msg
= nlmsg_alloc();
6123 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_DEL_STATION
);
6126 * XXX: FIX! this needs to flush all VLANs too
6128 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
6129 if_nametoindex(bss
->ifname
));
6131 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6137 static int get_sta_handler(struct nl_msg
*msg
, void *arg
)
6139 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
6140 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
6141 struct hostap_sta_driver_data
*data
= arg
;
6142 struct nlattr
*stats
[NL80211_STA_INFO_MAX
+ 1];
6143 static struct nla_policy stats_policy
[NL80211_STA_INFO_MAX
+ 1] = {
6144 [NL80211_STA_INFO_INACTIVE_TIME
] = { .type
= NLA_U32
},
6145 [NL80211_STA_INFO_RX_BYTES
] = { .type
= NLA_U32
},
6146 [NL80211_STA_INFO_TX_BYTES
] = { .type
= NLA_U32
},
6147 [NL80211_STA_INFO_RX_PACKETS
] = { .type
= NLA_U32
},
6148 [NL80211_STA_INFO_TX_PACKETS
] = { .type
= NLA_U32
},
6151 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
6152 genlmsg_attrlen(gnlh
, 0), NULL
);
6155 * TODO: validate the interface and mac address!
6156 * Otherwise, there's a race condition as soon as
6157 * the kernel starts sending station notifications.
6160 if (!tb
[NL80211_ATTR_STA_INFO
]) {
6161 wpa_printf(MSG_DEBUG
, "sta stats missing!");
6164 if (nla_parse_nested(stats
, NL80211_STA_INFO_MAX
,
6165 tb
[NL80211_ATTR_STA_INFO
],
6167 wpa_printf(MSG_DEBUG
, "failed to parse nested attributes!");
6171 if (stats
[NL80211_STA_INFO_INACTIVE_TIME
])
6172 data
->inactive_msec
=
6173 nla_get_u32(stats
[NL80211_STA_INFO_INACTIVE_TIME
]);
6174 if (stats
[NL80211_STA_INFO_RX_BYTES
])
6175 data
->rx_bytes
= nla_get_u32(stats
[NL80211_STA_INFO_RX_BYTES
]);
6176 if (stats
[NL80211_STA_INFO_TX_BYTES
])
6177 data
->tx_bytes
= nla_get_u32(stats
[NL80211_STA_INFO_TX_BYTES
]);
6178 if (stats
[NL80211_STA_INFO_RX_PACKETS
])
6180 nla_get_u32(stats
[NL80211_STA_INFO_RX_PACKETS
]);
6181 if (stats
[NL80211_STA_INFO_TX_PACKETS
])
6183 nla_get_u32(stats
[NL80211_STA_INFO_TX_PACKETS
]);
6188 static int i802_read_sta_data(void *priv
, struct hostap_sta_driver_data
*data
,
6191 struct i802_bss
*bss
= priv
;
6192 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6195 os_memset(data
, 0, sizeof(*data
));
6196 msg
= nlmsg_alloc();
6200 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_GET_STATION
);
6202 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6203 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6205 return send_and_recv_msgs(drv
, msg
, get_sta_handler
, data
);
6211 static int i802_set_tx_queue_params(void *priv
, int queue
, int aifs
,
6212 int cw_min
, int cw_max
, int burst_time
)
6214 struct i802_bss
*bss
= priv
;
6215 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6217 struct nlattr
*txq
, *params
;
6219 msg
= nlmsg_alloc();
6223 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_WIPHY
);
6225 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
6227 txq
= nla_nest_start(msg
, NL80211_ATTR_WIPHY_TXQ_PARAMS
);
6229 goto nla_put_failure
;
6231 /* We are only sending parameters for a single TXQ at a time */
6232 params
= nla_nest_start(msg
, 1);
6234 goto nla_put_failure
;
6238 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_VO
);
6241 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_VI
);
6244 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_BE
);
6247 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_QUEUE
, NL80211_TXQ_Q_BK
);
6250 /* Burst time is configured in units of 0.1 msec and TXOP parameter in
6251 * 32 usec, so need to convert the value here. */
6252 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_TXOP
, (burst_time
* 100 + 16) / 32);
6253 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_CWMIN
, cw_min
);
6254 NLA_PUT_U16(msg
, NL80211_TXQ_ATTR_CWMAX
, cw_max
);
6255 NLA_PUT_U8(msg
, NL80211_TXQ_ATTR_AIFS
, aifs
);
6257 nla_nest_end(msg
, params
);
6259 nla_nest_end(msg
, txq
);
6261 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
6268 static int i802_set_sta_vlan(void *priv
, const u8
*addr
,
6269 const char *ifname
, int vlan_id
)
6271 struct i802_bss
*bss
= priv
;
6272 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6276 msg
= nlmsg_alloc();
6280 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_STATION
);
6282 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
,
6283 if_nametoindex(bss
->ifname
));
6284 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
6285 NLA_PUT_U32(msg
, NL80211_ATTR_STA_VLAN
,
6286 if_nametoindex(ifname
));
6288 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6290 wpa_printf(MSG_ERROR
, "nl80211: NL80211_ATTR_STA_VLAN (addr="
6291 MACSTR
" ifname=%s vlan_id=%d) failed: %d (%s)",
6292 MAC2STR(addr
), ifname
, vlan_id
, ret
,
6300 static int i802_get_inact_sec(void *priv
, const u8
*addr
)
6302 struct hostap_sta_driver_data data
;
6305 data
.inactive_msec
= (unsigned long) -1;
6306 ret
= i802_read_sta_data(priv
, &data
, addr
);
6307 if (ret
|| data
.inactive_msec
== (unsigned long) -1)
6309 return data
.inactive_msec
/ 1000;
6313 static int i802_sta_clear_stats(void *priv
, const u8
*addr
)
6322 static int i802_sta_deauth(void *priv
, const u8
*own_addr
, const u8
*addr
,
6325 struct i802_bss
*bss
= priv
;
6326 struct ieee80211_mgmt mgmt
;
6328 memset(&mgmt
, 0, sizeof(mgmt
));
6329 mgmt
.frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
6330 WLAN_FC_STYPE_DEAUTH
);
6331 memcpy(mgmt
.da
, addr
, ETH_ALEN
);
6332 memcpy(mgmt
.sa
, own_addr
, ETH_ALEN
);
6333 memcpy(mgmt
.bssid
, own_addr
, ETH_ALEN
);
6334 mgmt
.u
.deauth
.reason_code
= host_to_le16(reason
);
6335 return wpa_driver_nl80211_send_mlme(bss
, (u8
*) &mgmt
,
6337 sizeof(mgmt
.u
.deauth
), 0);
6341 static int i802_sta_disassoc(void *priv
, const u8
*own_addr
, const u8
*addr
,
6344 struct i802_bss
*bss
= priv
;
6345 struct ieee80211_mgmt mgmt
;
6347 memset(&mgmt
, 0, sizeof(mgmt
));
6348 mgmt
.frame_control
= IEEE80211_FC(WLAN_FC_TYPE_MGMT
,
6349 WLAN_FC_STYPE_DISASSOC
);
6350 memcpy(mgmt
.da
, addr
, ETH_ALEN
);
6351 memcpy(mgmt
.sa
, own_addr
, ETH_ALEN
);
6352 memcpy(mgmt
.bssid
, own_addr
, ETH_ALEN
);
6353 mgmt
.u
.disassoc
.reason_code
= host_to_le16(reason
);
6354 return wpa_driver_nl80211_send_mlme(bss
, (u8
*) &mgmt
,
6356 sizeof(mgmt
.u
.disassoc
), 0);
6359 #endif /* HOSTAPD || CONFIG_AP */
6363 static void add_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6368 wpa_printf(MSG_DEBUG
, "nl80211: Add own interface ifindex %d",
6370 for (i
= 0; i
< drv
->num_if_indices
; i
++) {
6371 if (drv
->if_indices
[i
] == 0) {
6372 drv
->if_indices
[i
] = ifidx
;
6377 if (drv
->if_indices
!= drv
->default_if_indices
)
6378 old
= drv
->if_indices
;
6382 drv
->if_indices
= os_realloc(old
,
6383 sizeof(int) * (drv
->num_if_indices
+ 1));
6384 if (!drv
->if_indices
) {
6386 drv
->if_indices
= drv
->default_if_indices
;
6388 drv
->if_indices
= old
;
6389 wpa_printf(MSG_ERROR
, "Failed to reallocate memory for "
6391 wpa_printf(MSG_ERROR
, "Ignoring EAPOL on interface %d", ifidx
);
6394 os_memcpy(drv
->if_indices
, drv
->default_if_indices
,
6395 sizeof(drv
->default_if_indices
));
6396 drv
->if_indices
[drv
->num_if_indices
] = ifidx
;
6397 drv
->num_if_indices
++;
6401 static void del_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6405 for (i
= 0; i
< drv
->num_if_indices
; i
++) {
6406 if (drv
->if_indices
[i
] == ifidx
) {
6407 drv
->if_indices
[i
] = 0;
6414 static int have_ifidx(struct wpa_driver_nl80211_data
*drv
, int ifidx
)
6418 for (i
= 0; i
< drv
->num_if_indices
; i
++)
6419 if (drv
->if_indices
[i
] == ifidx
)
6426 static int i802_set_wds_sta(void *priv
, const u8
*addr
, int aid
, int val
,
6427 const char *bridge_ifname
)
6429 struct i802_bss
*bss
= priv
;
6430 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6431 char name
[IFNAMSIZ
+ 1];
6433 os_snprintf(name
, sizeof(name
), "%s.sta%d", bss
->ifname
, aid
);
6434 wpa_printf(MSG_DEBUG
, "nl80211: Set WDS STA addr=" MACSTR
6435 " aid=%d val=%d name=%s", MAC2STR(addr
), aid
, val
, name
);
6437 if (!if_nametoindex(name
)) {
6438 if (nl80211_create_iface(drv
, name
,
6439 NL80211_IFTYPE_AP_VLAN
,
6442 if (bridge_ifname
&&
6443 linux_br_add_if(drv
->global
->ioctl_sock
,
6444 bridge_ifname
, name
) < 0)
6447 linux_set_iface_flags(drv
->global
->ioctl_sock
, name
, 1);
6448 return i802_set_sta_vlan(priv
, addr
, name
, 0);
6450 i802_set_sta_vlan(priv
, addr
, bss
->ifname
, 0);
6451 return wpa_driver_nl80211_if_remove(priv
, WPA_IF_AP_VLAN
,
6457 static void handle_eapol(int sock
, void *eloop_ctx
, void *sock_ctx
)
6459 struct wpa_driver_nl80211_data
*drv
= eloop_ctx
;
6460 struct sockaddr_ll lladdr
;
6461 unsigned char buf
[3000];
6463 socklen_t fromlen
= sizeof(lladdr
);
6465 len
= recvfrom(sock
, buf
, sizeof(buf
), 0,
6466 (struct sockaddr
*)&lladdr
, &fromlen
);
6472 if (have_ifidx(drv
, lladdr
.sll_ifindex
))
6473 drv_event_eapol_rx(drv
->ctx
, lladdr
.sll_addr
, buf
, len
);
6477 static int i802_check_bridge(struct wpa_driver_nl80211_data
*drv
,
6478 struct i802_bss
*bss
,
6479 const char *brname
, const char *ifname
)
6482 char in_br
[IFNAMSIZ
];
6484 os_strlcpy(bss
->brname
, brname
, IFNAMSIZ
);
6485 ifindex
= if_nametoindex(brname
);
6488 * Bridge was configured, but the bridge device does
6489 * not exist. Try to add it now.
6491 if (linux_br_add(drv
->global
->ioctl_sock
, brname
) < 0) {
6492 wpa_printf(MSG_ERROR
, "nl80211: Failed to add the "
6493 "bridge interface %s: %s",
6494 brname
, strerror(errno
));
6497 bss
->added_bridge
= 1;
6498 add_ifidx(drv
, if_nametoindex(brname
));
6501 if (linux_br_get(in_br
, ifname
) == 0) {
6502 if (os_strcmp(in_br
, brname
) == 0)
6503 return 0; /* already in the bridge */
6505 wpa_printf(MSG_DEBUG
, "nl80211: Removing interface %s from "
6506 "bridge %s", ifname
, in_br
);
6507 if (linux_br_del_if(drv
->global
->ioctl_sock
, in_br
, ifname
) <
6509 wpa_printf(MSG_ERROR
, "nl80211: Failed to "
6510 "remove interface %s from bridge "
6512 ifname
, brname
, strerror(errno
));
6517 wpa_printf(MSG_DEBUG
, "nl80211: Adding interface %s into bridge %s",
6519 if (linux_br_add_if(drv
->global
->ioctl_sock
, brname
, ifname
) < 0) {
6520 wpa_printf(MSG_ERROR
, "nl80211: Failed to add interface %s "
6521 "into bridge %s: %s",
6522 ifname
, brname
, strerror(errno
));
6525 bss
->added_if_into_bridge
= 1;
6531 static void *i802_init(struct hostapd_data
*hapd
,
6532 struct wpa_init_params
*params
)
6534 struct wpa_driver_nl80211_data
*drv
;
6535 struct i802_bss
*bss
;
6537 char brname
[IFNAMSIZ
];
6538 int ifindex
, br_ifindex
;
6541 bss
= wpa_driver_nl80211_init(hapd
, params
->ifname
,
6542 params
->global_priv
);
6547 drv
->nlmode
= NL80211_IFTYPE_AP
;
6548 drv
->eapol_sock
= -1;
6550 if (linux_br_get(brname
, params
->ifname
) == 0) {
6551 wpa_printf(MSG_DEBUG
, "nl80211: Interface %s is in bridge %s",
6552 params
->ifname
, brname
);
6553 br_ifindex
= if_nametoindex(brname
);
6559 drv
->num_if_indices
= sizeof(drv
->default_if_indices
) / sizeof(int);
6560 drv
->if_indices
= drv
->default_if_indices
;
6561 for (i
= 0; i
< params
->num_bridge
; i
++) {
6562 if (params
->bridge
[i
]) {
6563 ifindex
= if_nametoindex(params
->bridge
[i
]);
6565 add_ifidx(drv
, ifindex
);
6566 if (ifindex
== br_ifindex
)
6570 if (!br_added
&& br_ifindex
&&
6571 (params
->num_bridge
== 0 || !params
->bridge
[0]))
6572 add_ifidx(drv
, br_ifindex
);
6574 /* start listening for EAPOL on the default AP interface */
6575 add_ifidx(drv
, drv
->ifindex
);
6577 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 0))
6580 if (params
->bssid
) {
6581 if (linux_set_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6586 if (wpa_driver_nl80211_set_mode(bss
, drv
->nlmode
)) {
6587 wpa_printf(MSG_ERROR
, "nl80211: Failed to set interface %s "
6588 "into AP mode", bss
->ifname
);
6592 if (params
->num_bridge
&& params
->bridge
[0] &&
6593 i802_check_bridge(drv
, bss
, params
->bridge
[0], params
->ifname
) < 0)
6596 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1))
6599 drv
->eapol_sock
= socket(PF_PACKET
, SOCK_DGRAM
, htons(ETH_P_PAE
));
6600 if (drv
->eapol_sock
< 0) {
6601 perror("socket(PF_PACKET, SOCK_DGRAM, ETH_P_PAE)");
6605 if (eloop_register_read_sock(drv
->eapol_sock
, handle_eapol
, drv
, NULL
))
6607 printf("Could not register read socket for eapol\n");
6611 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6618 wpa_driver_nl80211_deinit(bss
);
6623 static void i802_deinit(void *priv
)
6625 wpa_driver_nl80211_deinit(priv
);
6628 #endif /* HOSTAPD */
6631 static enum nl80211_iftype
wpa_driver_nl80211_if_type(
6632 enum wpa_driver_if_type type
)
6635 case WPA_IF_STATION
:
6636 return NL80211_IFTYPE_STATION
;
6637 case WPA_IF_P2P_CLIENT
:
6638 case WPA_IF_P2P_GROUP
:
6639 return NL80211_IFTYPE_P2P_CLIENT
;
6640 case WPA_IF_AP_VLAN
:
6641 return NL80211_IFTYPE_AP_VLAN
;
6643 return NL80211_IFTYPE_AP
;
6645 return NL80211_IFTYPE_P2P_GO
;
6653 static int nl80211_addr_in_use(struct nl80211_global
*global
, const u8
*addr
)
6655 struct wpa_driver_nl80211_data
*drv
;
6656 dl_list_for_each(drv
, &global
->interfaces
,
6657 struct wpa_driver_nl80211_data
, list
) {
6658 if (os_memcmp(addr
, drv
->addr
, ETH_ALEN
) == 0)
6665 static int nl80211_p2p_interface_addr(struct wpa_driver_nl80211_data
*drv
,
6673 os_memcpy(new_addr
, drv
->addr
, ETH_ALEN
);
6674 for (idx
= 0; idx
< 64; idx
++) {
6675 new_addr
[0] = drv
->addr
[0] | 0x02;
6676 new_addr
[0] ^= idx
<< 2;
6677 if (!nl80211_addr_in_use(drv
->global
, new_addr
))
6683 wpa_printf(MSG_DEBUG
, "nl80211: Assigned new P2P Interface Address "
6684 MACSTR
, MAC2STR(new_addr
));
6689 #endif /* CONFIG_P2P */
6692 static int wpa_driver_nl80211_if_add(void *priv
, enum wpa_driver_if_type type
,
6693 const char *ifname
, const u8
*addr
,
6694 void *bss_ctx
, void **drv_priv
,
6695 char *force_ifname
, u8
*if_addr
,
6698 struct i802_bss
*bss
= priv
;
6699 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6702 struct i802_bss
*new_bss
= NULL
;
6704 if (type
== WPA_IF_AP_BSS
) {
6705 new_bss
= os_zalloc(sizeof(*new_bss
));
6706 if (new_bss
== NULL
)
6709 #endif /* HOSTAPD */
6712 os_memcpy(if_addr
, addr
, ETH_ALEN
);
6713 ifidx
= nl80211_create_iface(drv
, ifname
,
6714 wpa_driver_nl80211_if_type(type
), addr
,
6719 #endif /* HOSTAPD */
6724 linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6726 nl80211_remove_iface(drv
, ifidx
);
6732 (type
== WPA_IF_P2P_CLIENT
|| type
== WPA_IF_P2P_GROUP
||
6733 type
== WPA_IF_P2P_GO
)) {
6734 /* Enforce unique P2P Interface Address */
6735 u8 new_addr
[ETH_ALEN
], own_addr
[ETH_ALEN
];
6737 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
6739 linux_get_ifhwaddr(drv
->global
->ioctl_sock
, ifname
,
6741 nl80211_remove_iface(drv
, ifidx
);
6744 if (os_memcmp(own_addr
, new_addr
, ETH_ALEN
) == 0) {
6745 wpa_printf(MSG_DEBUG
, "nl80211: Allocate new address "
6746 "for P2P group interface");
6747 if (nl80211_p2p_interface_addr(drv
, new_addr
) < 0) {
6748 nl80211_remove_iface(drv
, ifidx
);
6751 if (linux_set_ifhwaddr(drv
->global
->ioctl_sock
, ifname
,
6753 nl80211_remove_iface(drv
, ifidx
);
6757 os_memcpy(if_addr
, new_addr
, ETH_ALEN
);
6759 #endif /* CONFIG_P2P */
6763 i802_check_bridge(drv
, new_bss
, bridge
, ifname
) < 0) {
6764 wpa_printf(MSG_ERROR
, "nl80211: Failed to add the new "
6765 "interface %s to a bridge %s", ifname
, bridge
);
6766 nl80211_remove_iface(drv
, ifidx
);
6771 if (type
== WPA_IF_AP_BSS
) {
6772 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, ifname
, 1))
6774 nl80211_remove_iface(drv
, ifidx
);
6778 os_strlcpy(new_bss
->ifname
, ifname
, IFNAMSIZ
);
6779 new_bss
->ifindex
= ifidx
;
6781 new_bss
->next
= drv
->first_bss
.next
;
6782 drv
->first_bss
.next
= new_bss
;
6784 *drv_priv
= new_bss
;
6786 #endif /* HOSTAPD */
6789 drv
->global
->if_add_ifindex
= ifidx
;
6795 static int wpa_driver_nl80211_if_remove(void *priv
,
6796 enum wpa_driver_if_type type
,
6799 struct i802_bss
*bss
= priv
;
6800 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6801 int ifindex
= if_nametoindex(ifname
);
6803 wpa_printf(MSG_DEBUG
, "nl80211: %s(type=%d ifname=%s) ifindex=%d",
6804 __func__
, type
, ifname
, ifindex
);
6809 if (bss
->added_if_into_bridge
) {
6810 if (linux_br_del_if(drv
->global
->ioctl_sock
, bss
->brname
,
6812 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
6813 "interface %s from bridge %s: %s",
6814 bss
->ifname
, bss
->brname
, strerror(errno
));
6816 if (bss
->added_bridge
) {
6817 if (linux_br_del(drv
->global
->ioctl_sock
, bss
->brname
) < 0)
6818 wpa_printf(MSG_INFO
, "nl80211: Failed to remove "
6820 bss
->brname
, strerror(errno
));
6822 #endif /* HOSTAPD */
6824 nl80211_remove_iface(drv
, ifindex
);
6827 if (type
!= WPA_IF_AP_BSS
)
6830 if (bss
!= &drv
->first_bss
) {
6831 struct i802_bss
*tbss
;
6833 for (tbss
= &drv
->first_bss
; tbss
; tbss
= tbss
->next
) {
6834 if (tbss
->next
== bss
) {
6835 tbss
->next
= bss
->next
;
6842 wpa_printf(MSG_INFO
, "nl80211: %s - could not find "
6843 "BSS %p in the list", __func__
, bss
);
6845 #endif /* HOSTAPD */
6851 static int cookie_handler(struct nl_msg
*msg
, void *arg
)
6853 struct nlattr
*tb
[NL80211_ATTR_MAX
+ 1];
6854 struct genlmsghdr
*gnlh
= nlmsg_data(nlmsg_hdr(msg
));
6856 nla_parse(tb
, NL80211_ATTR_MAX
, genlmsg_attrdata(gnlh
, 0),
6857 genlmsg_attrlen(gnlh
, 0), NULL
);
6858 if (tb
[NL80211_ATTR_COOKIE
])
6859 *cookie
= nla_get_u64(tb
[NL80211_ATTR_COOKIE
]);
6864 static int nl80211_send_frame_cmd(struct wpa_driver_nl80211_data
*drv
,
6865 unsigned int freq
, unsigned int wait
,
6866 const u8
*buf
, size_t buf_len
,
6867 u64
*cookie_out
, int no_cck
, int no_ack
)
6873 msg
= nlmsg_alloc();
6877 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_FRAME
);
6879 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6880 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
6882 NLA_PUT_U32(msg
, NL80211_ATTR_DURATION
, wait
);
6883 NLA_PUT_FLAG(msg
, NL80211_ATTR_OFFCHANNEL_TX_OK
);
6885 NLA_PUT_FLAG(msg
, NL80211_ATTR_TX_NO_CCK_RATE
);
6887 NLA_PUT_FLAG(msg
, NL80211_ATTR_DONT_WAIT_FOR_ACK
);
6889 NLA_PUT(msg
, NL80211_ATTR_FRAME
, buf_len
, buf
);
6892 ret
= send_and_recv_msgs(drv
, msg
, cookie_handler
, &cookie
);
6895 wpa_printf(MSG_DEBUG
, "nl80211: Frame command failed: ret=%d "
6896 "(%s) (freq=%u wait=%u)", ret
, strerror(-ret
),
6898 goto nla_put_failure
;
6900 wpa_printf(MSG_DEBUG
, "nl80211: Frame TX command accepted%s; "
6901 "cookie 0x%llx", no_ack
? " (no ACK)" : "",
6902 (long long unsigned int) cookie
);
6905 *cookie_out
= no_ack
? (u64
) -1 : cookie
;
6913 static int wpa_driver_nl80211_send_action(void *priv
, unsigned int freq
,
6914 unsigned int wait_time
,
6915 const u8
*dst
, const u8
*src
,
6917 const u8
*data
, size_t data_len
,
6920 struct i802_bss
*bss
= priv
;
6921 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6924 struct ieee80211_hdr
*hdr
;
6926 wpa_printf(MSG_DEBUG
, "nl80211: Send Action frame (ifindex=%d, "
6927 "wait=%d ms no_cck=%d)", drv
->ifindex
, wait_time
, no_cck
);
6929 buf
= os_zalloc(24 + data_len
);
6932 os_memcpy(buf
+ 24, data
, data_len
);
6933 hdr
= (struct ieee80211_hdr
*) buf
;
6934 hdr
->frame_control
=
6935 IEEE80211_FC(WLAN_FC_TYPE_MGMT
, WLAN_FC_STYPE_ACTION
);
6936 os_memcpy(hdr
->addr1
, dst
, ETH_ALEN
);
6937 os_memcpy(hdr
->addr2
, src
, ETH_ALEN
);
6938 os_memcpy(hdr
->addr3
, bssid
, ETH_ALEN
);
6940 if (is_ap_interface(drv
->nlmode
))
6941 ret
= wpa_driver_nl80211_send_mlme(priv
, buf
, 24 + data_len
,
6944 ret
= nl80211_send_frame_cmd(drv
, freq
, wait_time
, buf
,
6946 &drv
->send_action_cookie
,
6954 static void wpa_driver_nl80211_send_action_cancel_wait(void *priv
)
6956 struct i802_bss
*bss
= priv
;
6957 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6961 msg
= nlmsg_alloc();
6965 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_FRAME_WAIT_CANCEL
);
6967 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6968 NLA_PUT_U64(msg
, NL80211_ATTR_COOKIE
, drv
->send_action_cookie
);
6970 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
6973 wpa_printf(MSG_DEBUG
, "nl80211: wait cancel failed: ret=%d "
6974 "(%s)", ret
, strerror(-ret
));
6981 static int wpa_driver_nl80211_remain_on_channel(void *priv
, unsigned int freq
,
6982 unsigned int duration
)
6984 struct i802_bss
*bss
= priv
;
6985 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
6990 msg
= nlmsg_alloc();
6994 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_REMAIN_ON_CHANNEL
);
6996 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
6997 NLA_PUT_U32(msg
, NL80211_ATTR_WIPHY_FREQ
, freq
);
6998 NLA_PUT_U32(msg
, NL80211_ATTR_DURATION
, duration
);
7001 ret
= send_and_recv_msgs(drv
, msg
, cookie_handler
, &cookie
);
7003 wpa_printf(MSG_DEBUG
, "nl80211: Remain-on-channel cookie "
7004 "0x%llx for freq=%u MHz duration=%u",
7005 (long long unsigned int) cookie
, freq
, duration
);
7006 drv
->remain_on_chan_cookie
= cookie
;
7007 drv
->pending_remain_on_chan
= 1;
7010 wpa_printf(MSG_DEBUG
, "nl80211: Failed to request remain-on-channel "
7011 "(freq=%d duration=%u): %d (%s)",
7012 freq
, duration
, ret
, strerror(-ret
));
7018 static int wpa_driver_nl80211_cancel_remain_on_channel(void *priv
)
7020 struct i802_bss
*bss
= priv
;
7021 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7025 if (!drv
->pending_remain_on_chan
) {
7026 wpa_printf(MSG_DEBUG
, "nl80211: No pending remain-on-channel "
7031 wpa_printf(MSG_DEBUG
, "nl80211: Cancel remain-on-channel with cookie "
7033 (long long unsigned int) drv
->remain_on_chan_cookie
);
7035 msg
= nlmsg_alloc();
7039 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL
);
7041 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7042 NLA_PUT_U64(msg
, NL80211_ATTR_COOKIE
, drv
->remain_on_chan_cookie
);
7044 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7047 wpa_printf(MSG_DEBUG
, "nl80211: Failed to cancel remain-on-channel: "
7048 "%d (%s)", ret
, strerror(-ret
));
7054 static int wpa_driver_nl80211_probe_req_report(void *priv
, int report
)
7056 struct i802_bss
*bss
= priv
;
7057 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7060 if (drv
->nl_preq
.handle
) {
7061 eloop_unregister_read_sock(
7062 nl_socket_get_fd(drv
->nl_preq
.handle
));
7063 nl_destroy_handles(&drv
->nl_preq
);
7068 if (drv
->nl_preq
.handle
) {
7069 wpa_printf(MSG_DEBUG
, "nl80211: Probe Request reporting "
7074 if (nl_create_handles(&drv
->nl_preq
, drv
->global
->nl_cb
, "preq"))
7077 if (nl80211_register_frame(drv
, drv
->nl_preq
.handle
,
7078 (WLAN_FC_TYPE_MGMT
<< 2) |
7079 (WLAN_FC_STYPE_PROBE_REQ
<< 4),
7083 eloop_register_read_sock(nl_socket_get_fd(drv
->nl_preq
.handle
),
7084 wpa_driver_nl80211_event_receive
, drv
,
7085 drv
->nl_preq
.handle
);
7090 nl_destroy_handles(&drv
->nl_preq
);
7095 static int nl80211_disable_11b_rates(struct wpa_driver_nl80211_data
*drv
,
7096 int ifindex
, int disabled
)
7099 struct nlattr
*bands
, *band
;
7102 msg
= nlmsg_alloc();
7106 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_TX_BITRATE_MASK
);
7107 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
7109 bands
= nla_nest_start(msg
, NL80211_ATTR_TX_RATES
);
7111 goto nla_put_failure
;
7114 * Disable 2 GHz rates 1, 2, 5.5, 11 Mbps by masking out everything
7115 * else apart from 6, 9, 12, 18, 24, 36, 48, 54 Mbps from non-MCS
7116 * rates. All 5 GHz rates are left enabled.
7118 band
= nla_nest_start(msg
, NL80211_BAND_2GHZ
);
7120 goto nla_put_failure
;
7122 NLA_PUT(msg
, NL80211_TXRATE_LEGACY
, 8,
7123 "\x0c\x12\x18\x24\x30\x48\x60\x6c");
7125 nla_nest_end(msg
, band
);
7127 nla_nest_end(msg
, bands
);
7129 ret
= send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7132 wpa_printf(MSG_DEBUG
, "nl80211: Set TX rates failed: ret=%d "
7133 "(%s)", ret
, strerror(-ret
));
7144 static int wpa_driver_nl80211_deinit_ap(void *priv
)
7146 struct i802_bss
*bss
= priv
;
7147 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7148 if (!is_ap_interface(drv
->nlmode
))
7150 wpa_driver_nl80211_del_beacon(drv
);
7151 return wpa_driver_nl80211_set_mode(priv
, NL80211_IFTYPE_STATION
);
7155 static void wpa_driver_nl80211_resume(void *priv
)
7157 struct i802_bss
*bss
= priv
;
7158 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7159 if (linux_set_iface_flags(drv
->global
->ioctl_sock
, bss
->ifname
, 1)) {
7160 wpa_printf(MSG_DEBUG
, "nl80211: Failed to set interface up on "
7166 static int nl80211_send_ft_action(void *priv
, u8 action
, const u8
*target_ap
,
7167 const u8
*ies
, size_t ies_len
)
7169 struct i802_bss
*bss
= priv
;
7170 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7174 u8 own_addr
[ETH_ALEN
];
7176 if (linux_get_ifhwaddr(drv
->global
->ioctl_sock
, bss
->ifname
,
7181 wpa_printf(MSG_ERROR
, "nl80211: Unsupported send_ft_action "
7182 "action %d", action
);
7187 * Action frame payload:
7188 * Category[1] = 6 (Fast BSS Transition)
7189 * Action[1] = 1 (Fast BSS Transition Request)
7195 data_len
= 2 + 2 * ETH_ALEN
+ ies_len
;
7196 data
= os_malloc(data_len
);
7200 *pos
++ = 0x06; /* FT Action category */
7202 os_memcpy(pos
, own_addr
, ETH_ALEN
);
7204 os_memcpy(pos
, target_ap
, ETH_ALEN
);
7206 os_memcpy(pos
, ies
, ies_len
);
7208 ret
= wpa_driver_nl80211_send_action(bss
, drv
->assoc_freq
, 0,
7209 drv
->bssid
, own_addr
, drv
->bssid
,
7217 static int nl80211_signal_monitor(void *priv
, int threshold
, int hysteresis
)
7219 struct i802_bss
*bss
= priv
;
7220 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7221 struct nl_msg
*msg
, *cqm
= NULL
;
7223 wpa_printf(MSG_DEBUG
, "nl80211: Signal monitor threshold=%d "
7224 "hysteresis=%d", threshold
, hysteresis
);
7226 msg
= nlmsg_alloc();
7230 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_CQM
);
7232 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7234 cqm
= nlmsg_alloc();
7238 NLA_PUT_U32(cqm
, NL80211_ATTR_CQM_RSSI_THOLD
, threshold
);
7239 NLA_PUT_U32(cqm
, NL80211_ATTR_CQM_RSSI_HYST
, hysteresis
);
7240 nla_put_nested(msg
, NL80211_ATTR_CQM
, cqm
);
7242 if (send_and_recv_msgs(drv
, msg
, NULL
, NULL
) == 0)
7254 static int nl80211_signal_poll(void *priv
, struct wpa_signal_info
*si
)
7256 struct i802_bss
*bss
= priv
;
7257 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7260 os_memset(si
, 0, sizeof(*si
));
7261 res
= nl80211_get_link_signal(drv
, si
);
7265 return nl80211_get_link_noise(drv
, si
);
7269 static int wpa_driver_nl80211_shared_freq(void *priv
)
7271 struct i802_bss
*bss
= priv
;
7272 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7273 struct wpa_driver_nl80211_data
*driver
;
7277 * If the same PHY is in connected state with some other interface,
7278 * then retrieve the assoc freq.
7280 wpa_printf(MSG_DEBUG
, "nl80211: Get shared freq for PHY %s",
7283 dl_list_for_each(driver
, &drv
->global
->interfaces
,
7284 struct wpa_driver_nl80211_data
, list
) {
7285 if (drv
== driver
||
7286 os_strcmp(drv
->phyname
, driver
->phyname
) != 0 ||
7287 !driver
->associated
)
7290 wpa_printf(MSG_DEBUG
, "nl80211: Found a match for PHY %s - %s "
7292 driver
->phyname
, driver
->first_bss
.ifname
,
7293 MAC2STR(driver
->addr
));
7294 freq
= nl80211_get_assoc_freq(driver
);
7295 wpa_printf(MSG_DEBUG
, "nl80211: Shared freq for PHY %s: %d",
7296 drv
->phyname
, freq
);
7300 wpa_printf(MSG_DEBUG
, "nl80211: No shared interface for "
7301 "PHY (%s) in associated state", drv
->phyname
);
7307 static int nl80211_send_frame(void *priv
, const u8
*data
, size_t data_len
,
7310 struct i802_bss
*bss
= priv
;
7311 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7312 return wpa_driver_nl80211_send_frame(drv
, data
, data_len
, encrypt
, 0);
7316 static int nl80211_set_param(void *priv
, const char *param
)
7318 wpa_printf(MSG_DEBUG
, "nl80211: driver param='%s'", param
);
7323 if (os_strstr(param
, "use_p2p_group_interface=1")) {
7324 struct i802_bss
*bss
= priv
;
7325 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7327 wpa_printf(MSG_DEBUG
, "nl80211: Use separate P2P group "
7329 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_P2P_CONCURRENT
;
7330 drv
->capa
.flags
|= WPA_DRIVER_FLAGS_P2P_MGMT_AND_NON_P2P
;
7332 #endif /* CONFIG_P2P */
7338 static void * nl80211_global_init(void)
7340 struct nl80211_global
*global
;
7341 struct netlink_config
*cfg
;
7343 global
= os_zalloc(sizeof(*global
));
7346 global
->ioctl_sock
= -1;
7347 dl_list_init(&global
->interfaces
);
7348 global
->if_add_ifindex
= -1;
7350 cfg
= os_zalloc(sizeof(*cfg
));
7355 cfg
->newlink_cb
= wpa_driver_nl80211_event_rtm_newlink
;
7356 cfg
->dellink_cb
= wpa_driver_nl80211_event_rtm_dellink
;
7357 global
->netlink
= netlink_init(cfg
);
7358 if (global
->netlink
== NULL
) {
7363 if (wpa_driver_nl80211_init_nl_global(global
) < 0)
7366 global
->ioctl_sock
= socket(PF_INET
, SOCK_DGRAM
, 0);
7367 if (global
->ioctl_sock
< 0) {
7368 perror("socket(PF_INET,SOCK_DGRAM)");
7375 nl80211_global_deinit(global
);
7380 static void nl80211_global_deinit(void *priv
)
7382 struct nl80211_global
*global
= priv
;
7385 if (!dl_list_empty(&global
->interfaces
)) {
7386 wpa_printf(MSG_ERROR
, "nl80211: %u interface(s) remain at "
7387 "nl80211_global_deinit",
7388 dl_list_len(&global
->interfaces
));
7391 if (global
->netlink
)
7392 netlink_deinit(global
->netlink
);
7394 nl_destroy_handles(&global
->nl
);
7397 nl_cb_put(global
->nl_cb
);
7399 if (global
->ioctl_sock
>= 0)
7400 close(global
->ioctl_sock
);
7406 static const char * nl80211_get_radio_name(void *priv
)
7408 struct i802_bss
*bss
= priv
;
7409 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7410 return drv
->phyname
;
7414 static int nl80211_pmkid(struct i802_bss
*bss
, int cmd
, const u8
*bssid
,
7419 msg
= nlmsg_alloc();
7423 nl80211_cmd(bss
->drv
, msg
, 0, cmd
);
7425 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, if_nametoindex(bss
->ifname
));
7427 NLA_PUT(msg
, NL80211_ATTR_PMKID
, 16, pmkid
);
7429 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, bssid
);
7431 return send_and_recv_msgs(bss
->drv
, msg
, NULL
, NULL
);
7437 static int nl80211_add_pmkid(void *priv
, const u8
*bssid
, const u8
*pmkid
)
7439 struct i802_bss
*bss
= priv
;
7440 wpa_printf(MSG_DEBUG
, "nl80211: Add PMKID for " MACSTR
, MAC2STR(bssid
));
7441 return nl80211_pmkid(bss
, NL80211_CMD_SET_PMKSA
, bssid
, pmkid
);
7445 static int nl80211_remove_pmkid(void *priv
, const u8
*bssid
, const u8
*pmkid
)
7447 struct i802_bss
*bss
= priv
;
7448 wpa_printf(MSG_DEBUG
, "nl80211: Delete PMKID for " MACSTR
,
7450 return nl80211_pmkid(bss
, NL80211_CMD_DEL_PMKSA
, bssid
, pmkid
);
7454 static int nl80211_flush_pmkid(void *priv
)
7456 struct i802_bss
*bss
= priv
;
7457 wpa_printf(MSG_DEBUG
, "nl80211: Flush PMKIDs");
7458 return nl80211_pmkid(bss
, NL80211_CMD_FLUSH_PMKSA
, NULL
, NULL
);
7462 static void nl80211_set_rekey_info(void *priv
, const u8
*kek
, const u8
*kck
,
7463 const u8
*replay_ctr
)
7465 struct i802_bss
*bss
= priv
;
7466 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7467 struct nlattr
*replay_nested
;
7470 msg
= nlmsg_alloc();
7474 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_SET_REKEY_OFFLOAD
);
7476 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7478 replay_nested
= nla_nest_start(msg
, NL80211_ATTR_REKEY_DATA
);
7480 goto nla_put_failure
;
7482 NLA_PUT(msg
, NL80211_REKEY_DATA_KEK
, NL80211_KEK_LEN
, kek
);
7483 NLA_PUT(msg
, NL80211_REKEY_DATA_KCK
, NL80211_KCK_LEN
, kck
);
7484 NLA_PUT(msg
, NL80211_REKEY_DATA_REPLAY_CTR
, NL80211_REPLAY_CTR_LEN
,
7487 nla_nest_end(msg
, replay_nested
);
7489 send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7496 static void nl80211_send_null_frame(struct i802_bss
*bss
, const u8
*own_addr
,
7497 const u8
*addr
, int qos
)
7499 /* send data frame to poll STA and check whether
7500 * this frame is ACKed */
7502 struct ieee80211_hdr hdr
;
7504 } STRUCT_PACKED nulldata
;
7507 /* Send data frame to poll STA and check whether this frame is ACKed */
7509 os_memset(&nulldata
, 0, sizeof(nulldata
));
7512 nulldata
.hdr
.frame_control
=
7513 IEEE80211_FC(WLAN_FC_TYPE_DATA
,
7514 WLAN_FC_STYPE_QOS_NULL
);
7515 size
= sizeof(nulldata
);
7517 nulldata
.hdr
.frame_control
=
7518 IEEE80211_FC(WLAN_FC_TYPE_DATA
,
7519 WLAN_FC_STYPE_NULLFUNC
);
7520 size
= sizeof(struct ieee80211_hdr
);
7523 nulldata
.hdr
.frame_control
|= host_to_le16(WLAN_FC_FROMDS
);
7524 os_memcpy(nulldata
.hdr
.IEEE80211_DA_FROMDS
, addr
, ETH_ALEN
);
7525 os_memcpy(nulldata
.hdr
.IEEE80211_BSSID_FROMDS
, own_addr
, ETH_ALEN
);
7526 os_memcpy(nulldata
.hdr
.IEEE80211_SA_FROMDS
, own_addr
, ETH_ALEN
);
7528 if (wpa_driver_nl80211_send_mlme(bss
, (u8
*) &nulldata
, size
, 0) < 0)
7529 wpa_printf(MSG_DEBUG
, "nl80211_send_null_frame: Failed to "
7533 static void nl80211_poll_client(void *priv
, const u8
*own_addr
, const u8
*addr
,
7536 struct i802_bss
*bss
= priv
;
7537 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7540 if (!drv
->poll_command_supported
) {
7541 nl80211_send_null_frame(bss
, own_addr
, addr
, qos
);
7545 msg
= nlmsg_alloc();
7549 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_PROBE_CLIENT
);
7551 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, bss
->ifindex
);
7552 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, addr
);
7554 send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7563 static int nl80211_send_tdls_mgmt(void *priv
, const u8
*dst
, u8 action_code
,
7564 u8 dialog_token
, u16 status_code
,
7565 const u8
*buf
, size_t len
)
7567 struct i802_bss
*bss
= priv
;
7568 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7571 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
7577 msg
= nlmsg_alloc();
7581 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TDLS_MGMT
);
7582 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7583 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, dst
);
7584 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_ACTION
, action_code
);
7585 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_DIALOG_TOKEN
, dialog_token
);
7586 NLA_PUT_U16(msg
, NL80211_ATTR_STATUS_CODE
, status_code
);
7587 NLA_PUT(msg
, NL80211_ATTR_IE
, len
, buf
);
7589 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7597 static int nl80211_tdls_oper(void *priv
, enum tdls_oper oper
, const u8
*peer
)
7599 struct i802_bss
*bss
= priv
;
7600 struct wpa_driver_nl80211_data
*drv
= bss
->drv
;
7602 enum nl80211_tdls_operation nl80211_oper
;
7604 if (!(drv
->capa
.flags
& WPA_DRIVER_FLAGS_TDLS_SUPPORT
))
7608 case TDLS_DISCOVERY_REQ
:
7609 nl80211_oper
= NL80211_TDLS_DISCOVERY_REQ
;
7612 nl80211_oper
= NL80211_TDLS_SETUP
;
7615 nl80211_oper
= NL80211_TDLS_TEARDOWN
;
7617 case TDLS_ENABLE_LINK
:
7618 nl80211_oper
= NL80211_TDLS_ENABLE_LINK
;
7620 case TDLS_DISABLE_LINK
:
7621 nl80211_oper
= NL80211_TDLS_DISABLE_LINK
;
7631 msg
= nlmsg_alloc();
7635 nl80211_cmd(drv
, msg
, 0, NL80211_CMD_TDLS_OPER
);
7636 NLA_PUT_U8(msg
, NL80211_ATTR_TDLS_OPERATION
, nl80211_oper
);
7637 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, drv
->ifindex
);
7638 NLA_PUT(msg
, NL80211_ATTR_MAC
, ETH_ALEN
, peer
);
7640 return send_and_recv_msgs(drv
, msg
, NULL
, NULL
);
7647 #endif /* CONFIG TDLS */
7650 const struct wpa_driver_ops wpa_driver_nl80211_ops
= {
7652 .desc
= "Linux nl80211/cfg80211",
7653 .get_bssid
= wpa_driver_nl80211_get_bssid
,
7654 .get_ssid
= wpa_driver_nl80211_get_ssid
,
7655 .set_key
= wpa_driver_nl80211_set_key
,
7656 .scan2
= wpa_driver_nl80211_scan
,
7657 .sched_scan
= wpa_driver_nl80211_sched_scan
,
7658 .stop_sched_scan
= wpa_driver_nl80211_stop_sched_scan
,
7659 .get_scan_results2
= wpa_driver_nl80211_get_scan_results
,
7660 .deauthenticate
= wpa_driver_nl80211_deauthenticate
,
7661 .disassociate
= wpa_driver_nl80211_disassociate
,
7662 .authenticate
= wpa_driver_nl80211_authenticate
,
7663 .associate
= wpa_driver_nl80211_associate
,
7664 .global_init
= nl80211_global_init
,
7665 .global_deinit
= nl80211_global_deinit
,
7666 .init2
= wpa_driver_nl80211_init
,
7667 .deinit
= wpa_driver_nl80211_deinit
,
7668 .get_capa
= wpa_driver_nl80211_get_capa
,
7669 .set_operstate
= wpa_driver_nl80211_set_operstate
,
7670 .set_supp_port
= wpa_driver_nl80211_set_supp_port
,
7671 .set_country
= wpa_driver_nl80211_set_country
,
7672 .set_ap
= wpa_driver_nl80211_set_ap
,
7673 .if_add
= wpa_driver_nl80211_if_add
,
7674 .if_remove
= wpa_driver_nl80211_if_remove
,
7675 .send_mlme
= wpa_driver_nl80211_send_mlme
,
7676 .get_hw_feature_data
= wpa_driver_nl80211_get_hw_feature_data
,
7677 .sta_add
= wpa_driver_nl80211_sta_add
,
7678 .sta_remove
= wpa_driver_nl80211_sta_remove
,
7679 .hapd_send_eapol
= wpa_driver_nl80211_hapd_send_eapol
,
7680 .sta_set_flags
= wpa_driver_nl80211_sta_set_flags
,
7682 .hapd_init
= i802_init
,
7683 .hapd_deinit
= i802_deinit
,
7684 .set_wds_sta
= i802_set_wds_sta
,
7685 #endif /* HOSTAPD */
7686 #if defined(HOSTAPD) || defined(CONFIG_AP)
7687 .get_seqnum
= i802_get_seqnum
,
7688 .flush
= i802_flush
,
7689 .read_sta_data
= i802_read_sta_data
,
7690 .get_inact_sec
= i802_get_inact_sec
,
7691 .sta_clear_stats
= i802_sta_clear_stats
,
7692 .set_rts
= i802_set_rts
,
7693 .set_frag
= i802_set_frag
,
7694 .set_tx_queue_params
= i802_set_tx_queue_params
,
7695 .set_sta_vlan
= i802_set_sta_vlan
,
7696 .set_rate_sets
= i802_set_rate_sets
,
7697 .sta_deauth
= i802_sta_deauth
,
7698 .sta_disassoc
= i802_sta_disassoc
,
7699 #endif /* HOSTAPD || CONFIG_AP */
7700 .set_freq
= i802_set_freq
,
7701 .send_action
= wpa_driver_nl80211_send_action
,
7702 .send_action_cancel_wait
= wpa_driver_nl80211_send_action_cancel_wait
,
7703 .remain_on_channel
= wpa_driver_nl80211_remain_on_channel
,
7704 .cancel_remain_on_channel
=
7705 wpa_driver_nl80211_cancel_remain_on_channel
,
7706 .probe_req_report
= wpa_driver_nl80211_probe_req_report
,
7707 .deinit_ap
= wpa_driver_nl80211_deinit_ap
,
7708 .resume
= wpa_driver_nl80211_resume
,
7709 .send_ft_action
= nl80211_send_ft_action
,
7710 .signal_monitor
= nl80211_signal_monitor
,
7711 .signal_poll
= nl80211_signal_poll
,
7712 .send_frame
= nl80211_send_frame
,
7713 .shared_freq
= wpa_driver_nl80211_shared_freq
,
7714 .set_param
= nl80211_set_param
,
7715 .get_radio_name
= nl80211_get_radio_name
,
7716 .add_pmkid
= nl80211_add_pmkid
,
7717 .remove_pmkid
= nl80211_remove_pmkid
,
7718 .flush_pmkid
= nl80211_flush_pmkid
,
7719 .set_rekey_info
= nl80211_set_rekey_info
,
7720 .poll_client
= nl80211_poll_client
,
7722 .send_tdls_mgmt
= nl80211_send_tdls_mgmt
,
7723 .tdls_oper
= nl80211_tdls_oper
,
7724 #endif /* CONFIG_TDLS */