]> git.ipfire.org Git - thirdparty/hostap.git/blob - wpa_supplicant/mesh.c
Explicitly clear the temporary stack-based key for WPA-None
[thirdparty/hostap.git] / wpa_supplicant / mesh.c
1 /*
2 * WPA Supplicant - Basic mesh mode routines
3 * Copyright (c) 2013-2014, cozybit, Inc. All rights reserved.
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include "utils/includes.h"
10
11 #include "utils/common.h"
12 #include "utils/eloop.h"
13 #include "utils/uuid.h"
14 #include "common/ieee802_11_defs.h"
15 #include "common/wpa_ctrl.h"
16 #include "ap/sta_info.h"
17 #include "ap/hostapd.h"
18 #include "ap/ieee802_11.h"
19 #include "config_ssid.h"
20 #include "config.h"
21 #include "wpa_supplicant_i.h"
22 #include "driver_i.h"
23 #include "notify.h"
24 #include "ap.h"
25 #include "mesh_mpm.h"
26 #include "mesh_rsn.h"
27 #include "mesh.h"
28
29
30 static void wpa_supplicant_mesh_deinit(struct wpa_supplicant *wpa_s)
31 {
32 wpa_supplicant_mesh_iface_deinit(wpa_s, wpa_s->ifmsh);
33 wpa_s->ifmsh = NULL;
34 wpa_s->current_ssid = NULL;
35 os_free(wpa_s->mesh_rsn);
36 wpa_s->mesh_rsn = NULL;
37 /* TODO: leave mesh (stop beacon). This will happen on link down
38 * anyway, so it's not urgent */
39 }
40
41
42 void wpa_supplicant_mesh_iface_deinit(struct wpa_supplicant *wpa_s,
43 struct hostapd_iface *ifmsh)
44 {
45 if (!ifmsh)
46 return;
47
48 if (ifmsh->mconf) {
49 mesh_mpm_deinit(wpa_s, ifmsh);
50 if (ifmsh->mconf->ies) {
51 ifmsh->mconf->ies = NULL;
52 /* We cannot free this struct
53 * because wpa_authenticator on
54 * hostapd side is also using it
55 * for now just set to NULL and
56 * let hostapd code free it.
57 */
58 }
59 os_free(ifmsh->mconf);
60 ifmsh->mconf = NULL;
61 }
62
63 /* take care of shared data */
64 hostapd_interface_deinit(ifmsh);
65 hostapd_interface_free(ifmsh);
66 }
67
68
69 static struct mesh_conf * mesh_config_create(struct wpa_ssid *ssid)
70 {
71 struct mesh_conf *conf;
72
73 conf = os_zalloc(sizeof(struct mesh_conf));
74 if (!conf)
75 return NULL;
76
77 os_memcpy(conf->meshid, ssid->ssid, ssid->ssid_len);
78 conf->meshid_len = ssid->ssid_len;
79
80 if (ssid->key_mgmt & WPA_KEY_MGMT_SAE)
81 conf->security |= MESH_CONF_SEC_AUTH |
82 MESH_CONF_SEC_AMPE;
83 else
84 conf->security |= MESH_CONF_SEC_NONE;
85
86 /* defaults */
87 conf->mesh_pp_id = MESH_PATH_PROTOCOL_HWMP;
88 conf->mesh_pm_id = MESH_PATH_METRIC_AIRTIME;
89 conf->mesh_cc_id = 0;
90 conf->mesh_sp_id = MESH_SYNC_METHOD_NEIGHBOR_OFFSET;
91 conf->mesh_auth_id = (conf->security & MESH_CONF_SEC_AUTH) ? 1 : 0;
92 conf->dot11MeshMaxRetries = ssid->dot11MeshMaxRetries;
93 conf->dot11MeshRetryTimeout = ssid->dot11MeshRetryTimeout;
94 conf->dot11MeshConfirmTimeout = ssid->dot11MeshConfirmTimeout;
95 conf->dot11MeshHoldingTimeout = ssid->dot11MeshHoldingTimeout;
96
97 return conf;
98 }
99
100
101 static void wpas_mesh_copy_groups(struct hostapd_data *bss,
102 struct wpa_supplicant *wpa_s)
103 {
104 int num_groups;
105 size_t groups_size;
106
107 for (num_groups = 0; wpa_s->conf->sae_groups[num_groups] > 0;
108 num_groups++)
109 ;
110
111 groups_size = (num_groups + 1) * sizeof(wpa_s->conf->sae_groups[0]);
112 bss->conf->sae_groups = os_malloc(groups_size);
113 if (bss->conf->sae_groups)
114 os_memcpy(bss->conf->sae_groups, wpa_s->conf->sae_groups,
115 groups_size);
116 }
117
118
119 static int wpa_supplicant_mesh_init(struct wpa_supplicant *wpa_s,
120 struct wpa_ssid *ssid)
121 {
122 struct hostapd_iface *ifmsh;
123 struct hostapd_data *bss;
124 struct hostapd_config *conf;
125 struct mesh_conf *mconf;
126 int basic_rates_erp[] = { 10, 20, 55, 60, 110, 120, 240, -1 };
127 static int default_groups[] = { 19, 20, 21, 25, 26, -1 };
128 size_t len;
129 int rate_len;
130
131 if (!wpa_s->conf->user_mpm) {
132 /* not much for us to do here */
133 wpa_msg(wpa_s, MSG_WARNING,
134 "user_mpm is not enabled in configuration");
135 return 0;
136 }
137
138 wpa_s->ifmsh = ifmsh = os_zalloc(sizeof(*wpa_s->ifmsh));
139 if (!ifmsh)
140 return -ENOMEM;
141
142 ifmsh->drv_flags = wpa_s->drv_flags;
143 ifmsh->num_bss = 1;
144 ifmsh->bss = os_calloc(wpa_s->ifmsh->num_bss,
145 sizeof(struct hostapd_data *));
146 if (!ifmsh->bss)
147 goto out_free;
148
149 ifmsh->bss[0] = bss = os_zalloc(sizeof(struct hostapd_data));
150 if (!bss)
151 goto out_free;
152
153 os_memcpy(bss->own_addr, wpa_s->own_addr, ETH_ALEN);
154 bss->driver = wpa_s->driver;
155 bss->drv_priv = wpa_s->drv_priv;
156 bss->iface = ifmsh;
157 bss->mesh_sta_free_cb = mesh_mpm_free_sta;
158 wpa_s->assoc_freq = ssid->frequency;
159 wpa_s->current_ssid = ssid;
160
161 /* setup an AP config for auth processing */
162 conf = hostapd_config_defaults();
163 if (!conf)
164 goto out_free;
165
166 bss->conf = *conf->bss;
167 bss->conf->start_disabled = 1;
168 bss->conf->mesh = MESH_ENABLED;
169 bss->iconf = conf;
170 ifmsh->conf = conf;
171
172 ifmsh->bss[0]->max_plinks = wpa_s->conf->max_peer_links;
173 os_strlcpy(bss->conf->iface, wpa_s->ifname, sizeof(bss->conf->iface));
174
175 mconf = mesh_config_create(ssid);
176 if (!mconf)
177 goto out_free;
178 ifmsh->mconf = mconf;
179
180 /* need conf->hw_mode for supported rates. */
181 if (ssid->frequency == 0) {
182 conf->hw_mode = HOSTAPD_MODE_IEEE80211G;
183 conf->channel = 1;
184 } else {
185 conf->hw_mode = ieee80211_freq_to_chan(ssid->frequency,
186 &conf->channel);
187 }
188 if (conf->hw_mode == NUM_HOSTAPD_MODES) {
189 wpa_printf(MSG_ERROR, "Unsupported mesh mode frequency: %d MHz",
190 ssid->frequency);
191 goto out_free;
192 }
193
194 if (ssid->mesh_basic_rates == NULL) {
195 /*
196 * XXX: Hack! This is so an MPM which correctly sets the ERP
197 * mandatory rates as BSSBasicRateSet doesn't reject us. We
198 * could add a new hw_mode HOSTAPD_MODE_IEEE80211G_ERP, but
199 * this is way easier. This also makes our BSSBasicRateSet
200 * advertised in beacons match the one in peering frames, sigh.
201 */
202 if (conf->hw_mode == HOSTAPD_MODE_IEEE80211G) {
203 conf->basic_rates = os_malloc(sizeof(basic_rates_erp));
204 if (!conf->basic_rates)
205 goto out_free;
206 os_memcpy(conf->basic_rates, basic_rates_erp,
207 sizeof(basic_rates_erp));
208 }
209 } else {
210 rate_len = 0;
211 while (1) {
212 if (ssid->mesh_basic_rates[rate_len] < 1)
213 break;
214 rate_len++;
215 }
216 conf->basic_rates = os_calloc(rate_len + 1, sizeof(int));
217 if (conf->basic_rates == NULL)
218 goto out_free;
219 os_memcpy(conf->basic_rates, ssid->mesh_basic_rates,
220 rate_len * sizeof(int));
221 conf->basic_rates[rate_len] = -1;
222 }
223
224 if (hostapd_setup_interface(ifmsh)) {
225 wpa_printf(MSG_ERROR,
226 "Failed to initialize hostapd interface for mesh");
227 return -1;
228 }
229
230 if (wpa_drv_init_mesh(wpa_s)) {
231 wpa_msg(wpa_s, MSG_ERROR, "Failed to init mesh in driver");
232 return -1;
233 }
234
235 if (mconf->security != MESH_CONF_SEC_NONE) {
236 if (ssid->passphrase == NULL) {
237 wpa_printf(MSG_ERROR,
238 "mesh: Passphrase for SAE not configured");
239 goto out_free;
240 }
241
242 bss->conf->wpa = ssid->proto;
243 bss->conf->wpa_key_mgmt = ssid->key_mgmt;
244
245 if (wpa_s->conf->sae_groups &&
246 wpa_s->conf->sae_groups[0] > 0) {
247 wpas_mesh_copy_groups(bss, wpa_s);
248 } else {
249 bss->conf->sae_groups =
250 os_malloc(sizeof(default_groups));
251 if (!bss->conf->sae_groups)
252 goto out_free;
253 os_memcpy(bss->conf->sae_groups, default_groups,
254 sizeof(default_groups));
255 }
256
257 len = os_strlen(ssid->passphrase);
258 bss->conf->ssid.wpa_passphrase =
259 dup_binstr(ssid->passphrase, len);
260
261 wpa_s->mesh_rsn = mesh_rsn_auth_init(wpa_s, mconf);
262 if (!wpa_s->mesh_rsn)
263 goto out_free;
264 }
265
266 wpa_supplicant_conf_ap_ht(wpa_s, ssid, conf);
267
268 return 0;
269 out_free:
270 wpa_supplicant_mesh_deinit(wpa_s);
271 return -ENOMEM;
272 }
273
274
275 void wpa_mesh_notify_peer(struct wpa_supplicant *wpa_s, const u8 *addr,
276 const u8 *ies, size_t ie_len)
277 {
278 struct ieee802_11_elems elems;
279
280 wpa_msg(wpa_s, MSG_INFO,
281 "new peer notification for " MACSTR, MAC2STR(addr));
282
283 if (ieee802_11_parse_elems(ies, ie_len, &elems, 0) == ParseFailed) {
284 wpa_msg(wpa_s, MSG_INFO, "Could not parse beacon from " MACSTR,
285 MAC2STR(addr));
286 return;
287 }
288 wpa_mesh_new_mesh_peer(wpa_s, addr, &elems);
289 }
290
291
292 void wpa_supplicant_mesh_add_scan_ie(struct wpa_supplicant *wpa_s,
293 struct wpabuf **extra_ie)
294 {
295 /* EID + 0-length (wildcard) mesh-id */
296 size_t ielen = 2;
297
298 if (wpabuf_resize(extra_ie, ielen) == 0) {
299 wpabuf_put_u8(*extra_ie, WLAN_EID_MESH_ID);
300 wpabuf_put_u8(*extra_ie, 0);
301 }
302 }
303
304
305 int wpa_supplicant_join_mesh(struct wpa_supplicant *wpa_s,
306 struct wpa_ssid *ssid)
307 {
308 struct wpa_driver_mesh_join_params params;
309 int ret = 0;
310
311 if (!ssid || !ssid->ssid || !ssid->ssid_len || !ssid->frequency) {
312 ret = -ENOENT;
313 goto out;
314 }
315
316 wpa_supplicant_mesh_deinit(wpa_s);
317
318 os_memset(&params, 0, sizeof(params));
319 params.meshid = ssid->ssid;
320 params.meshid_len = ssid->ssid_len;
321 params.freq = ssid->frequency;
322 if (ssid->beacon_int > 0)
323 params.beacon_int = ssid->beacon_int;
324 else if (wpa_s->conf->beacon_int > 0)
325 params.beacon_int = wpa_s->conf->beacon_int;
326 params.max_peer_links = wpa_s->conf->max_peer_links;
327 #ifdef CONFIG_IEEE80211N
328 params.ht_mode = ssid->mesh_ht_mode;
329 #endif /* CONFIG_IEEE80211N */
330
331 if (ssid->key_mgmt & WPA_KEY_MGMT_SAE) {
332 params.flags |= WPA_DRIVER_MESH_FLAG_SAE_AUTH;
333 params.flags |= WPA_DRIVER_MESH_FLAG_AMPE;
334 wpa_s->conf->user_mpm = 1;
335 }
336
337 if (wpa_s->conf->user_mpm) {
338 params.flags |= WPA_DRIVER_MESH_FLAG_USER_MPM;
339 params.conf.flags &= ~WPA_DRIVER_MESH_CONF_FLAG_AUTO_PLINKS;
340 } else {
341 params.flags |= WPA_DRIVER_MESH_FLAG_DRIVER_MPM;
342 params.conf.flags |= WPA_DRIVER_MESH_CONF_FLAG_AUTO_PLINKS;
343 }
344
345 if (wpa_supplicant_mesh_init(wpa_s, ssid)) {
346 wpa_msg(wpa_s, MSG_ERROR, "Failed to init mesh");
347 ret = -1;
348 goto out;
349 }
350
351 if (wpa_s->ifmsh) {
352 params.ies = wpa_s->ifmsh->mconf->ies;
353 params.ie_len = wpa_s->ifmsh->mconf->ie_len;
354 params.basic_rates = wpa_s->ifmsh->basic_rates;
355 }
356
357 wpa_msg(wpa_s, MSG_INFO, "joining mesh %s",
358 wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
359 ret = wpa_drv_join_mesh(wpa_s, &params);
360 if (ret)
361 wpa_msg(wpa_s, MSG_ERROR, "mesh join error=%d\n", ret);
362
363 /* hostapd sets the interface down until we associate */
364 wpa_drv_set_operstate(wpa_s, 1);
365
366 out:
367 return ret;
368 }
369
370
371 int wpa_supplicant_leave_mesh(struct wpa_supplicant *wpa_s)
372 {
373 int ret = 0;
374
375 wpa_msg(wpa_s, MSG_INFO, "leaving mesh");
376
377 /* Need to send peering close messages first */
378 wpa_supplicant_mesh_deinit(wpa_s);
379
380 ret = wpa_drv_leave_mesh(wpa_s);
381 if (ret)
382 wpa_msg(wpa_s, MSG_ERROR, "mesh leave error=%d", ret);
383
384 wpa_drv_set_operstate(wpa_s, 1);
385
386 return ret;
387 }
388
389
390 static int mesh_attr_text(const u8 *ies, size_t ies_len, char *buf, char *end)
391 {
392 struct ieee802_11_elems elems;
393 char *mesh_id, *pos = buf;
394 u8 *bss_basic_rate_set;
395 int bss_basic_rate_set_len, ret, i;
396
397 if (ieee802_11_parse_elems(ies, ies_len, &elems, 0) == ParseFailed)
398 return -1;
399
400 if (elems.mesh_id_len < 1)
401 return 0;
402
403 mesh_id = os_malloc(elems.mesh_id_len + 1);
404 if (mesh_id == NULL)
405 return -1;
406
407 os_memcpy(mesh_id, elems.mesh_id, elems.mesh_id_len);
408 mesh_id[elems.mesh_id_len] = '\0';
409 ret = os_snprintf(pos, end - pos, "mesh_id=%s\n", mesh_id);
410 os_free(mesh_id);
411 if (os_snprintf_error(end - pos, ret))
412 return pos - buf;
413 pos += ret;
414
415 if (elems.mesh_config_len > 6) {
416 ret = os_snprintf(pos, end - pos,
417 "active_path_selection_protocol_id=0x%02x\n"
418 "active_path_selection_metric_id=0x%02x\n"
419 "congestion_control_mode_id=0x%02x\n"
420 "synchronization_method_id=0x%02x\n"
421 "authentication_protocol_id=0x%02x\n"
422 "mesh_formation_info=0x%02x\n"
423 "mesh_capability=0x%02x\n",
424 elems.mesh_config[0], elems.mesh_config[1],
425 elems.mesh_config[2], elems.mesh_config[3],
426 elems.mesh_config[4], elems.mesh_config[5],
427 elems.mesh_config[6]);
428 if (os_snprintf_error(end - pos, ret))
429 return pos - buf;
430 pos += ret;
431 }
432
433 bss_basic_rate_set = os_malloc(elems.supp_rates_len +
434 elems.ext_supp_rates_len);
435 if (bss_basic_rate_set == NULL)
436 return -1;
437
438 bss_basic_rate_set_len = 0;
439 for (i = 0; i < elems.supp_rates_len; i++) {
440 if (elems.supp_rates[i] & 0x80) {
441 bss_basic_rate_set[bss_basic_rate_set_len++] =
442 (elems.supp_rates[i] & 0x7f) * 5;
443 }
444 }
445 for (i = 0; i < elems.ext_supp_rates_len; i++) {
446 if (elems.ext_supp_rates[i] & 0x80) {
447 bss_basic_rate_set[bss_basic_rate_set_len++] =
448 (elems.ext_supp_rates[i] & 0x7f) * 5;
449 }
450 }
451 if (bss_basic_rate_set_len > 0) {
452 ret = os_snprintf(pos, end - pos, "bss_basic_rate_set=%d",
453 bss_basic_rate_set[0]);
454 if (os_snprintf_error(end - pos, ret))
455 return pos - buf;
456 pos += ret;
457
458 for (i = 1; i < bss_basic_rate_set_len; i++) {
459 ret = os_snprintf(pos, end - pos, " %d",
460 bss_basic_rate_set[i]);
461 if (os_snprintf_error(end - pos, ret))
462 return pos - buf;
463 pos += ret;
464 }
465
466 ret = os_snprintf(pos, end - pos, "\n");
467 if (os_snprintf_error(end - pos, ret))
468 return pos - buf;
469 pos += ret;
470 }
471 os_free(bss_basic_rate_set);
472
473 return pos - buf;
474 }
475
476
477 int wpas_mesh_scan_result_text(const u8 *ies, size_t ies_len, char *buf,
478 char *end)
479 {
480 return mesh_attr_text(ies, ies_len, buf, end);
481 }
482
483
484 static int wpas_mesh_get_ifname(struct wpa_supplicant *wpa_s, char *ifname,
485 size_t len)
486 {
487 char *ifname_ptr = wpa_s->ifname;
488 int res;
489
490 res = os_snprintf(ifname, len, "mesh-%s-%d", ifname_ptr,
491 wpa_s->mesh_if_idx);
492 if (os_snprintf_error(len, res) ||
493 (os_strlen(ifname) >= IFNAMSIZ &&
494 os_strlen(wpa_s->ifname) < IFNAMSIZ)) {
495 /* Try to avoid going over the IFNAMSIZ length limit */
496 res = os_snprintf(ifname, len, "mesh-%d", wpa_s->mesh_if_idx);
497 if (os_snprintf_error(len, res))
498 return -1;
499 }
500 wpa_s->mesh_if_idx++;
501 return 0;
502 }
503
504
505 int wpas_mesh_add_interface(struct wpa_supplicant *wpa_s, char *ifname,
506 size_t len)
507 {
508 struct wpa_interface iface;
509 struct wpa_supplicant *mesh_wpa_s;
510 u8 addr[ETH_ALEN];
511
512 if (ifname[0] == '\0' && wpas_mesh_get_ifname(wpa_s, ifname, len) < 0)
513 return -1;
514
515 if (wpa_drv_if_add(wpa_s, WPA_IF_MESH, ifname, NULL, NULL, NULL, addr,
516 NULL) < 0) {
517 wpa_printf(MSG_ERROR,
518 "mesh: Failed to create new mesh interface");
519 return -1;
520 }
521 wpa_printf(MSG_INFO, "mesh: Created virtual interface %s addr "
522 MACSTR, ifname, MAC2STR(addr));
523
524 os_memset(&iface, 0, sizeof(iface));
525 iface.ifname = ifname;
526 iface.driver = wpa_s->driver->name;
527 iface.driver_param = wpa_s->conf->driver_param;
528 iface.ctrl_interface = wpa_s->conf->ctrl_interface;
529
530 mesh_wpa_s = wpa_supplicant_add_iface(wpa_s->global, &iface);
531 if (!mesh_wpa_s) {
532 wpa_printf(MSG_ERROR,
533 "mesh: Failed to create new wpa_supplicant interface");
534 wpa_supplicant_remove_iface(wpa_s->global, wpa_s, 0);
535 return -1;
536 }
537 mesh_wpa_s->mesh_if_created = 1;
538 mesh_wpa_s->parent = wpa_s;
539 return 0;
540 }