]>
Commit | Line | Data |
---|---|---|
6fc6879b JM |
1 | /* |
2 | * WPA Supplicant - Scanning | |
dd43aaa5 | 3 | * Copyright (c) 2003-2014, Jouni Malinen <j@w1.fi> |
6fc6879b | 4 | * |
0f3d578e JM |
5 | * This software may be distributed under the terms of the BSD license. |
6 | * See README for more details. | |
6fc6879b JM |
7 | */ |
8 | ||
9ba9fa07 | 9 | #include "utils/includes.h" |
6fc6879b | 10 | |
9ba9fa07 JM |
11 | #include "utils/common.h" |
12 | #include "utils/eloop.h" | |
13 | #include "common/ieee802_11_defs.h" | |
66fe0f70 | 14 | #include "common/wpa_ctrl.h" |
6fc6879b JM |
15 | #include "config.h" |
16 | #include "wpa_supplicant_i.h" | |
2d5b792d | 17 | #include "driver_i.h" |
b01c18a8 | 18 | #include "wps_supplicant.h" |
0e65037c JM |
19 | #include "p2p_supplicant.h" |
20 | #include "p2p/p2p.h" | |
c923b8a5 | 21 | #include "hs20_supplicant.h" |
8bac466b | 22 | #include "notify.h" |
9ba9fa07 JM |
23 | #include "bss.h" |
24 | #include "scan.h" | |
6fc6879b JM |
25 | |
26 | ||
27 | static void wpa_supplicant_gen_assoc_event(struct wpa_supplicant *wpa_s) | |
28 | { | |
29 | struct wpa_ssid *ssid; | |
30 | union wpa_event_data data; | |
31 | ||
32 | ssid = wpa_supplicant_get_ssid(wpa_s); | |
33 | if (ssid == NULL) | |
34 | return; | |
35 | ||
8bac466b | 36 | if (wpa_s->current_ssid == NULL) { |
6fc6879b | 37 | wpa_s->current_ssid = ssid; |
8bac466b JM |
38 | if (wpa_s->current_ssid != NULL) |
39 | wpas_notify_network_changed(wpa_s); | |
40 | } | |
6fc6879b | 41 | wpa_supplicant_initiate_eapol(wpa_s); |
f049052b BG |
42 | wpa_dbg(wpa_s, MSG_DEBUG, "Already associated with a configured " |
43 | "network - generating associated event"); | |
6fc6879b JM |
44 | os_memset(&data, 0, sizeof(data)); |
45 | wpa_supplicant_event(wpa_s, EVENT_ASSOC, &data); | |
46 | } | |
47 | ||
48 | ||
ad08c363 | 49 | #ifdef CONFIG_WPS |
5f738a21 | 50 | static int wpas_wps_in_use(struct wpa_supplicant *wpa_s, |
f90c86d4 | 51 | enum wps_request_type *req_type) |
ad08c363 JM |
52 | { |
53 | struct wpa_ssid *ssid; | |
54 | int wps = 0; | |
ad08c363 | 55 | |
5f738a21 | 56 | for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { |
ad08c363 JM |
57 | if (!(ssid->key_mgmt & WPA_KEY_MGMT_WPS)) |
58 | continue; | |
59 | ||
60 | wps = 1; | |
b01c18a8 | 61 | *req_type = wpas_wps_get_req_type(ssid); |
ad08c363 JM |
62 | if (!ssid->eap.phase1) |
63 | continue; | |
64 | ||
ad08c363 JM |
65 | if (os_strstr(ssid->eap.phase1, "pbc=1")) |
66 | return 2; | |
67 | } | |
68 | ||
5f738a21 | 69 | #ifdef CONFIG_P2P |
7a808c7e JM |
70 | if (!wpa_s->global->p2p_disabled && wpa_s->global->p2p && |
71 | !wpa_s->conf->p2p_disabled) { | |
b21ff9cb JM |
72 | wpa_s->wps->dev.p2p = 1; |
73 | if (!wps) { | |
74 | wps = 1; | |
75 | *req_type = WPS_REQ_ENROLLEE_INFO; | |
76 | } | |
5f738a21 LC |
77 | } |
78 | #endif /* CONFIG_P2P */ | |
79 | ||
ad08c363 JM |
80 | return wps; |
81 | } | |
82 | #endif /* CONFIG_WPS */ | |
83 | ||
e76baaac | 84 | |
2c09af30 JM |
85 | /** |
86 | * wpa_supplicant_enabled_networks - Check whether there are enabled networks | |
87 | * @wpa_s: Pointer to wpa_supplicant data | |
88 | * Returns: 0 if no networks are enabled, >0 if networks are enabled | |
89 | * | |
90 | * This function is used to figure out whether any networks (or Interworking | |
91 | * with enabled credentials and auto_interworking) are present in the current | |
92 | * configuration. | |
93 | */ | |
349493bd | 94 | int wpa_supplicant_enabled_networks(struct wpa_supplicant *wpa_s) |
e76baaac | 95 | { |
349493bd | 96 | struct wpa_ssid *ssid = wpa_s->conf->ssid; |
d4534bde | 97 | int count = 0, disabled = 0; |
e76baaac | 98 | while (ssid) { |
349493bd | 99 | if (!wpas_network_disabled(wpa_s, ssid)) |
5471c343 | 100 | count++; |
d4534bde JM |
101 | else |
102 | disabled++; | |
e76baaac JM |
103 | ssid = ssid->next; |
104 | } | |
4d5bda5f JM |
105 | if (wpa_s->conf->cred && wpa_s->conf->interworking && |
106 | wpa_s->conf->auto_interworking) | |
107 | count++; | |
d4534bde JM |
108 | if (count == 0 && disabled > 0) { |
109 | wpa_dbg(wpa_s, MSG_DEBUG, "No enabled networks (%d disabled " | |
110 | "networks)", disabled); | |
111 | } | |
5471c343 | 112 | return count; |
e76baaac JM |
113 | } |
114 | ||
115 | ||
116 | static void wpa_supplicant_assoc_try(struct wpa_supplicant *wpa_s, | |
117 | struct wpa_ssid *ssid) | |
118 | { | |
119 | while (ssid) { | |
349493bd | 120 | if (!wpas_network_disabled(wpa_s, ssid)) |
e76baaac JM |
121 | break; |
122 | ssid = ssid->next; | |
123 | } | |
124 | ||
125 | /* ap_scan=2 mode - try to associate with each SSID. */ | |
126 | if (ssid == NULL) { | |
f049052b BG |
127 | wpa_dbg(wpa_s, MSG_DEBUG, "wpa_supplicant_assoc_try: Reached " |
128 | "end of scan list - go back to beginning"); | |
ba2a573c | 129 | wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN; |
e76baaac JM |
130 | wpa_supplicant_req_scan(wpa_s, 0, 0); |
131 | return; | |
132 | } | |
133 | if (ssid->next) { | |
134 | /* Continue from the next SSID on the next attempt. */ | |
135 | wpa_s->prev_scan_ssid = ssid; | |
136 | } else { | |
137 | /* Start from the beginning of the SSID list. */ | |
ba2a573c | 138 | wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN; |
e76baaac JM |
139 | } |
140 | wpa_supplicant_associate(wpa_s, NULL, ssid); | |
141 | } | |
142 | ||
143 | ||
d12a51b5 | 144 | static void wpas_trigger_scan_cb(struct wpa_radio_work *work, int deinit) |
60b94c98 | 145 | { |
d12a51b5 JM |
146 | struct wpa_supplicant *wpa_s = work->wpa_s; |
147 | struct wpa_driver_scan_params *params = work->ctx; | |
60b94c98 JM |
148 | int ret; |
149 | ||
d12a51b5 JM |
150 | if (deinit) { |
151 | wpa_scan_free_params(params); | |
152 | return; | |
153 | } | |
154 | ||
60b94c98 JM |
155 | wpa_supplicant_notify_scanning(wpa_s, 1); |
156 | ||
949938aa JM |
157 | if (wpa_s->clear_driver_scan_cache) |
158 | params->only_new_results = 1; | |
17fbb751 | 159 | ret = wpa_drv_scan(wpa_s, params); |
d12a51b5 JM |
160 | wpa_scan_free_params(params); |
161 | work->ctx = NULL; | |
60b94c98 JM |
162 | if (ret) { |
163 | wpa_supplicant_notify_scanning(wpa_s, 0); | |
164 | wpas_notify_scan_done(wpa_s, 0); | |
d12a51b5 JM |
165 | radio_work_done(work); |
166 | return; | |
0b7a25c0 | 167 | } |
60b94c98 | 168 | |
d12a51b5 JM |
169 | os_get_reltime(&wpa_s->scan_trigger_time); |
170 | wpa_s->scan_runs++; | |
171 | wpa_s->normal_scans++; | |
172 | wpa_s->own_scan_requested = 1; | |
173 | wpa_s->clear_driver_scan_cache = 0; | |
174 | wpa_s->scan_work = work; | |
175 | } | |
176 | ||
177 | ||
178 | /** | |
179 | * wpa_supplicant_trigger_scan - Request driver to start a scan | |
180 | * @wpa_s: Pointer to wpa_supplicant data | |
181 | * @params: Scan parameters | |
182 | * Returns: 0 on success, -1 on failure | |
183 | */ | |
184 | int wpa_supplicant_trigger_scan(struct wpa_supplicant *wpa_s, | |
185 | struct wpa_driver_scan_params *params) | |
186 | { | |
187 | struct wpa_driver_scan_params *ctx; | |
188 | ||
189 | if (wpa_s->scan_work) { | |
190 | wpa_dbg(wpa_s, MSG_INFO, "Reject scan trigger since one is already pending"); | |
191 | return -1; | |
192 | } | |
193 | ||
194 | ctx = wpa_scan_clone_params(params); | |
195 | if (ctx == NULL) | |
196 | return -1; | |
197 | ||
198 | if (radio_add_work(wpa_s, 0, "scan", 0, wpas_trigger_scan_cb, ctx) < 0) | |
199 | { | |
200 | wpa_scan_free_params(ctx); | |
201 | return -1; | |
202 | } | |
203 | ||
204 | return 0; | |
60b94c98 JM |
205 | } |
206 | ||
207 | ||
6a90053c LC |
208 | static void |
209 | wpa_supplicant_delayed_sched_scan_timeout(void *eloop_ctx, void *timeout_ctx) | |
210 | { | |
211 | struct wpa_supplicant *wpa_s = eloop_ctx; | |
212 | ||
213 | wpa_dbg(wpa_s, MSG_DEBUG, "Starting delayed sched scan"); | |
214 | ||
215 | if (wpa_supplicant_req_sched_scan(wpa_s)) | |
216 | wpa_supplicant_req_scan(wpa_s, 0, 0); | |
217 | } | |
218 | ||
219 | ||
cbdf3507 LC |
220 | static void |
221 | wpa_supplicant_sched_scan_timeout(void *eloop_ctx, void *timeout_ctx) | |
222 | { | |
223 | struct wpa_supplicant *wpa_s = eloop_ctx; | |
224 | ||
225 | wpa_dbg(wpa_s, MSG_DEBUG, "Sched scan timeout - stopping it"); | |
226 | ||
227 | wpa_s->sched_scan_timed_out = 1; | |
228 | wpa_supplicant_cancel_sched_scan(wpa_s); | |
229 | } | |
230 | ||
231 | ||
f86d282f JJ |
232 | int wpa_supplicant_start_sched_scan(struct wpa_supplicant *wpa_s, |
233 | struct wpa_driver_scan_params *params, | |
234 | int interval) | |
cbdf3507 LC |
235 | { |
236 | int ret; | |
237 | ||
cbdf3507 LC |
238 | wpa_supplicant_notify_scanning(wpa_s, 1); |
239 | ret = wpa_drv_sched_scan(wpa_s, params, interval * 1000); | |
240 | if (ret) | |
241 | wpa_supplicant_notify_scanning(wpa_s, 0); | |
242 | else | |
243 | wpa_s->sched_scanning = 1; | |
244 | ||
245 | return ret; | |
246 | } | |
247 | ||
248 | ||
f86d282f | 249 | int wpa_supplicant_stop_sched_scan(struct wpa_supplicant *wpa_s) |
cbdf3507 LC |
250 | { |
251 | int ret; | |
252 | ||
253 | ret = wpa_drv_stop_sched_scan(wpa_s); | |
254 | if (ret) { | |
255 | wpa_dbg(wpa_s, MSG_DEBUG, "stopping sched_scan failed!"); | |
256 | /* TODO: what to do if stopping fails? */ | |
257 | return -1; | |
258 | } | |
259 | ||
260 | return ret; | |
261 | } | |
262 | ||
263 | ||
3812464c JM |
264 | static struct wpa_driver_scan_filter * |
265 | wpa_supplicant_build_filter_ssids(struct wpa_config *conf, size_t *num_ssids) | |
266 | { | |
267 | struct wpa_driver_scan_filter *ssids; | |
268 | struct wpa_ssid *ssid; | |
269 | size_t count; | |
270 | ||
271 | *num_ssids = 0; | |
272 | if (!conf->filter_ssids) | |
273 | return NULL; | |
274 | ||
275 | for (count = 0, ssid = conf->ssid; ssid; ssid = ssid->next) { | |
276 | if (ssid->ssid && ssid->ssid_len) | |
277 | count++; | |
278 | } | |
279 | if (count == 0) | |
280 | return NULL; | |
281 | ssids = os_zalloc(count * sizeof(struct wpa_driver_scan_filter)); | |
282 | if (ssids == NULL) | |
283 | return NULL; | |
284 | ||
285 | for (ssid = conf->ssid; ssid; ssid = ssid->next) { | |
286 | if (!ssid->ssid || !ssid->ssid_len) | |
287 | continue; | |
288 | os_memcpy(ssids[*num_ssids].ssid, ssid->ssid, ssid->ssid_len); | |
289 | ssids[*num_ssids].ssid_len = ssid->ssid_len; | |
290 | (*num_ssids)++; | |
291 | } | |
292 | ||
293 | return ssids; | |
294 | } | |
295 | ||
296 | ||
5f738a21 LC |
297 | static void wpa_supplicant_optimize_freqs( |
298 | struct wpa_supplicant *wpa_s, struct wpa_driver_scan_params *params) | |
299 | { | |
300 | #ifdef CONFIG_P2P | |
301 | if (params->freqs == NULL && wpa_s->p2p_in_provisioning && | |
302 | wpa_s->go_params) { | |
303 | /* Optimize provisioning state scan based on GO information */ | |
304 | if (wpa_s->p2p_in_provisioning < 5 && | |
305 | wpa_s->go_params->freq > 0) { | |
306 | wpa_dbg(wpa_s, MSG_DEBUG, "P2P: Scan only GO " | |
307 | "preferred frequency %d MHz", | |
308 | wpa_s->go_params->freq); | |
309 | params->freqs = os_zalloc(2 * sizeof(int)); | |
310 | if (params->freqs) | |
311 | params->freqs[0] = wpa_s->go_params->freq; | |
312 | } else if (wpa_s->p2p_in_provisioning < 8 && | |
313 | wpa_s->go_params->freq_list[0]) { | |
314 | wpa_dbg(wpa_s, MSG_DEBUG, "P2P: Scan only common " | |
315 | "channels"); | |
316 | int_array_concat(¶ms->freqs, | |
317 | wpa_s->go_params->freq_list); | |
318 | if (params->freqs) | |
319 | int_array_sort_unique(params->freqs); | |
320 | } | |
321 | wpa_s->p2p_in_provisioning++; | |
322 | } | |
323 | #endif /* CONFIG_P2P */ | |
324 | ||
325 | #ifdef CONFIG_WPS | |
326 | if (params->freqs == NULL && wpa_s->after_wps && wpa_s->wps_freq) { | |
327 | /* | |
328 | * Optimize post-provisioning scan based on channel used | |
329 | * during provisioning. | |
330 | */ | |
331 | wpa_dbg(wpa_s, MSG_DEBUG, "WPS: Scan only frequency %u MHz " | |
332 | "that was used during provisioning", wpa_s->wps_freq); | |
333 | params->freqs = os_zalloc(2 * sizeof(int)); | |
334 | if (params->freqs) | |
335 | params->freqs[0] = wpa_s->wps_freq; | |
336 | wpa_s->after_wps--; | |
662b40b1 JM |
337 | } else if (wpa_s->after_wps) |
338 | wpa_s->after_wps--; | |
5f738a21 | 339 | |
1e7fb4f1 JM |
340 | if (params->freqs == NULL && wpa_s->known_wps_freq && wpa_s->wps_freq) |
341 | { | |
342 | /* Optimize provisioning scan based on already known channel */ | |
343 | wpa_dbg(wpa_s, MSG_DEBUG, "WPS: Scan only frequency %u MHz", | |
344 | wpa_s->wps_freq); | |
345 | params->freqs = os_zalloc(2 * sizeof(int)); | |
346 | if (params->freqs) | |
347 | params->freqs[0] = wpa_s->wps_freq; | |
348 | wpa_s->known_wps_freq = 0; /* only do this once */ | |
349 | } | |
5f738a21 LC |
350 | #endif /* CONFIG_WPS */ |
351 | } | |
352 | ||
353 | ||
46ee0427 JM |
354 | #ifdef CONFIG_INTERWORKING |
355 | static void wpas_add_interworking_elements(struct wpa_supplicant *wpa_s, | |
356 | struct wpabuf *buf) | |
357 | { | |
358 | if (wpa_s->conf->interworking == 0) | |
359 | return; | |
360 | ||
361 | wpabuf_put_u8(buf, WLAN_EID_EXT_CAPAB); | |
362 | wpabuf_put_u8(buf, 4); | |
363 | wpabuf_put_u8(buf, 0x00); | |
364 | wpabuf_put_u8(buf, 0x00); | |
365 | wpabuf_put_u8(buf, 0x00); | |
366 | wpabuf_put_u8(buf, 0x80); /* Bit 31 - Interworking */ | |
367 | ||
368 | wpabuf_put_u8(buf, WLAN_EID_INTERWORKING); | |
369 | wpabuf_put_u8(buf, is_zero_ether_addr(wpa_s->conf->hessid) ? 1 : | |
370 | 1 + ETH_ALEN); | |
11540c0b | 371 | wpabuf_put_u8(buf, wpa_s->conf->access_network_type); |
46ee0427 JM |
372 | /* No Venue Info */ |
373 | if (!is_zero_ether_addr(wpa_s->conf->hessid)) | |
374 | wpabuf_put_data(buf, wpa_s->conf->hessid, ETH_ALEN); | |
375 | } | |
376 | #endif /* CONFIG_INTERWORKING */ | |
377 | ||
378 | ||
a13e07ec | 379 | static struct wpabuf * wpa_supplicant_extra_ies(struct wpa_supplicant *wpa_s) |
6fc6879b | 380 | { |
46ee0427 | 381 | struct wpabuf *extra_ie = NULL; |
b01c18a8 | 382 | #ifdef CONFIG_WPS |
509a3972 | 383 | int wps = 0; |
f90c86d4 | 384 | enum wps_request_type req_type = WPS_REQ_ENROLLEE_INFO; |
46ee0427 JM |
385 | #endif /* CONFIG_WPS */ |
386 | ||
387 | #ifdef CONFIG_INTERWORKING | |
388 | if (wpa_s->conf->interworking && | |
389 | wpabuf_resize(&extra_ie, 100) == 0) | |
390 | wpas_add_interworking_elements(wpa_s, extra_ie); | |
391 | #endif /* CONFIG_INTERWORKING */ | |
5f738a21 | 392 | |
46ee0427 | 393 | #ifdef CONFIG_WPS |
5f738a21 LC |
394 | wps = wpas_wps_in_use(wpa_s, &req_type); |
395 | ||
396 | if (wps) { | |
46ee0427 | 397 | struct wpabuf *wps_ie; |
360182ed JM |
398 | wps_ie = wps_build_probe_req_ie(wps == 2 ? DEV_PW_PUSHBUTTON : |
399 | DEV_PW_DEFAULT, | |
400 | &wpa_s->wps->dev, | |
5f738a21 LC |
401 | wpa_s->wps->uuid, req_type, |
402 | 0, NULL); | |
403 | if (wps_ie) { | |
46ee0427 JM |
404 | if (wpabuf_resize(&extra_ie, wpabuf_len(wps_ie)) == 0) |
405 | wpabuf_put_buf(extra_ie, wps_ie); | |
406 | wpabuf_free(wps_ie); | |
5f738a21 LC |
407 | } |
408 | } | |
409 | ||
410 | #ifdef CONFIG_P2P | |
46ee0427 | 411 | if (wps) { |
5f738a21 | 412 | size_t ielen = p2p_scan_ie_buf_len(wpa_s->global->p2p); |
46ee0427 JM |
413 | if (wpabuf_resize(&extra_ie, ielen) == 0) |
414 | wpas_p2p_scan_ie(wpa_s, extra_ie); | |
5f738a21 LC |
415 | } |
416 | #endif /* CONFIG_P2P */ | |
417 | ||
b01c18a8 | 418 | #endif /* CONFIG_WPS */ |
5f738a21 | 419 | |
0f105f9e JM |
420 | #ifdef CONFIG_HS20 |
421 | if (wpa_s->conf->hs20 && wpabuf_resize(&extra_ie, 7) == 0) | |
422 | wpas_hs20_add_indication(extra_ie); | |
423 | #endif /* CONFIG_HS20 */ | |
424 | ||
46ee0427 | 425 | return extra_ie; |
5f738a21 LC |
426 | } |
427 | ||
428 | ||
5cc70322 JM |
429 | #ifdef CONFIG_P2P |
430 | ||
431 | /* | |
432 | * Check whether there are any enabled networks or credentials that could be | |
433 | * used for a non-P2P connection. | |
434 | */ | |
435 | static int non_p2p_network_enabled(struct wpa_supplicant *wpa_s) | |
436 | { | |
437 | struct wpa_ssid *ssid; | |
438 | ||
439 | for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { | |
440 | if (wpas_network_disabled(wpa_s, ssid)) | |
441 | continue; | |
442 | if (!ssid->p2p_group) | |
443 | return 1; | |
444 | } | |
445 | ||
446 | if (wpa_s->conf->cred && wpa_s->conf->interworking && | |
447 | wpa_s->conf->auto_interworking) | |
448 | return 1; | |
449 | ||
450 | return 0; | |
451 | } | |
452 | ||
6124e858 | 453 | #endif /* CONFIG_P2P */ |
5cc70322 | 454 | |
5cc70322 | 455 | |
faf9a858 JM |
456 | static struct hostapd_hw_modes * get_mode(struct hostapd_hw_modes *modes, |
457 | u16 num_modes, | |
458 | enum hostapd_hw_mode mode) | |
459 | { | |
460 | u16 i; | |
461 | ||
462 | for (i = 0; i < num_modes; i++) { | |
463 | if (modes[i].mode == mode) | |
464 | return &modes[i]; | |
465 | } | |
466 | ||
467 | return NULL; | |
468 | } | |
469 | ||
470 | ||
471 | static void wpa_setband_scan_freqs_list(struct wpa_supplicant *wpa_s, | |
472 | enum hostapd_hw_mode band, | |
473 | struct wpa_driver_scan_params *params) | |
474 | { | |
475 | /* Include only supported channels for the specified band */ | |
476 | struct hostapd_hw_modes *mode; | |
477 | int count, i; | |
478 | ||
479 | mode = get_mode(wpa_s->hw.modes, wpa_s->hw.num_modes, band); | |
480 | if (mode == NULL) { | |
481 | /* No channels supported in this band - use empty list */ | |
482 | params->freqs = os_zalloc(sizeof(int)); | |
483 | return; | |
484 | } | |
485 | ||
486 | params->freqs = os_zalloc((mode->num_channels + 1) * sizeof(int)); | |
487 | if (params->freqs == NULL) | |
488 | return; | |
489 | for (count = 0, i = 0; i < mode->num_channels; i++) { | |
490 | if (mode->channels[i].flag & HOSTAPD_CHAN_DISABLED) | |
491 | continue; | |
492 | params->freqs[count++] = mode->channels[i].freq; | |
493 | } | |
494 | } | |
495 | ||
496 | ||
497 | static void wpa_setband_scan_freqs(struct wpa_supplicant *wpa_s, | |
498 | struct wpa_driver_scan_params *params) | |
499 | { | |
500 | if (wpa_s->hw.modes == NULL) | |
501 | return; /* unknown what channels the driver supports */ | |
502 | if (params->freqs) | |
503 | return; /* already using a limited channel set */ | |
504 | if (wpa_s->setband == WPA_SETBAND_5G) | |
505 | wpa_setband_scan_freqs_list(wpa_s, HOSTAPD_MODE_IEEE80211A, | |
506 | params); | |
507 | else if (wpa_s->setband == WPA_SETBAND_2G) | |
508 | wpa_setband_scan_freqs_list(wpa_s, HOSTAPD_MODE_IEEE80211G, | |
509 | params); | |
510 | } | |
511 | ||
512 | ||
5f738a21 LC |
513 | static void wpa_supplicant_scan(void *eloop_ctx, void *timeout_ctx) |
514 | { | |
515 | struct wpa_supplicant *wpa_s = eloop_ctx; | |
516 | struct wpa_ssid *ssid; | |
4115303b | 517 | int ret; |
b9b12d02 | 518 | struct wpabuf *extra_ie = NULL; |
e76baaac | 519 | struct wpa_driver_scan_params params; |
7c865c68 | 520 | struct wpa_driver_scan_params *scan_params; |
e76baaac | 521 | size_t max_ssids; |
207ef3fb | 522 | enum wpa_states prev_state; |
6fc6879b | 523 | |
8401a6b0 | 524 | if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) { |
f049052b | 525 | wpa_dbg(wpa_s, MSG_DEBUG, "Skip scan - interface disabled"); |
8401a6b0 JM |
526 | return; |
527 | } | |
528 | ||
4115303b | 529 | if (wpa_s->disconnected && wpa_s->scan_req == NORMAL_SCAN_REQ) { |
ac06fb12 | 530 | wpa_dbg(wpa_s, MSG_DEBUG, "Disconnected - do not scan"); |
3180d7a2 | 531 | wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED); |
6fc6879b | 532 | return; |
3180d7a2 | 533 | } |
6fc6879b | 534 | |
f86d282f JJ |
535 | if (wpa_s->scanning) { |
536 | /* | |
537 | * If we are already in scanning state, we shall reschedule the | |
538 | * the incoming scan request. | |
539 | */ | |
540 | wpa_dbg(wpa_s, MSG_DEBUG, "Already scanning - Reschedule the incoming scan req"); | |
541 | wpa_supplicant_req_scan(wpa_s, 1, 0); | |
542 | return; | |
543 | } | |
544 | ||
349493bd | 545 | if (!wpa_supplicant_enabled_networks(wpa_s) && |
4115303b | 546 | wpa_s->scan_req == NORMAL_SCAN_REQ) { |
f049052b | 547 | wpa_dbg(wpa_s, MSG_DEBUG, "No enabled networks - do not scan"); |
6fc6879b JM |
548 | wpa_supplicant_set_state(wpa_s, WPA_INACTIVE); |
549 | return; | |
550 | } | |
6fc6879b | 551 | |
c2a04078 JM |
552 | if (wpa_s->conf->ap_scan != 0 && |
553 | (wpa_s->drv_flags & WPA_DRIVER_FLAGS_WIRED)) { | |
f049052b BG |
554 | wpa_dbg(wpa_s, MSG_DEBUG, "Using wired authentication - " |
555 | "overriding ap_scan configuration"); | |
6fc6879b | 556 | wpa_s->conf->ap_scan = 0; |
8bac466b | 557 | wpas_notify_ap_scan_changed(wpa_s); |
6fc6879b JM |
558 | } |
559 | ||
560 | if (wpa_s->conf->ap_scan == 0) { | |
561 | wpa_supplicant_gen_assoc_event(wpa_s); | |
562 | return; | |
563 | } | |
564 | ||
303f60d3 | 565 | #ifdef CONFIG_P2P |
6470f471 | 566 | if (wpas_p2p_in_progress(wpa_s)) { |
1b5d4714 JM |
567 | wpa_dbg(wpa_s, MSG_DEBUG, "Delay station mode scan while P2P operation is in progress"); |
568 | wpa_supplicant_req_scan(wpa_s, 5, 0); | |
569 | return; | |
303f60d3 JM |
570 | } |
571 | #endif /* CONFIG_P2P */ | |
572 | ||
17fbb751 | 573 | if (wpa_s->conf->ap_scan == 2) |
e76baaac JM |
574 | max_ssids = 1; |
575 | else { | |
576 | max_ssids = wpa_s->max_scan_ssids; | |
577 | if (max_ssids > WPAS_MAX_SCAN_SSIDS) | |
578 | max_ssids = WPAS_MAX_SCAN_SSIDS; | |
579 | } | |
580 | ||
12455031 | 581 | wpa_s->last_scan_req = wpa_s->scan_req; |
4115303b | 582 | wpa_s->scan_req = NORMAL_SCAN_REQ; |
e76baaac JM |
583 | |
584 | os_memset(¶ms, 0, sizeof(params)); | |
585 | ||
207ef3fb | 586 | prev_state = wpa_s->wpa_state; |
6fc6879b JM |
587 | if (wpa_s->wpa_state == WPA_DISCONNECTED || |
588 | wpa_s->wpa_state == WPA_INACTIVE) | |
589 | wpa_supplicant_set_state(wpa_s, WPA_SCANNING); | |
590 | ||
7c865c68 TB |
591 | /* |
592 | * If autoscan has set its own scanning parameters | |
593 | */ | |
594 | if (wpa_s->autoscan_params != NULL) { | |
595 | scan_params = wpa_s->autoscan_params; | |
596 | goto scan; | |
597 | } | |
598 | ||
12455031 LP |
599 | if (wpa_s->last_scan_req != MANUAL_SCAN_REQ && |
600 | wpa_s->connect_without_scan) { | |
7dcdcfd6 JM |
601 | for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { |
602 | if (ssid == wpa_s->connect_without_scan) | |
603 | break; | |
604 | } | |
605 | wpa_s->connect_without_scan = NULL; | |
606 | if (ssid) { | |
607 | wpa_printf(MSG_DEBUG, "Start a pre-selected network " | |
608 | "without scan step"); | |
609 | wpa_supplicant_associate(wpa_s, NULL, ssid); | |
610 | return; | |
611 | } | |
612 | } | |
613 | ||
a21c05db | 614 | #ifdef CONFIG_P2P |
85ea132a JM |
615 | if ((wpa_s->p2p_in_provisioning || wpa_s->show_group_started) && |
616 | wpa_s->go_params) { | |
9100b660 JM |
617 | wpa_printf(MSG_DEBUG, "P2P: Use specific SSID for scan during P2P group formation (p2p_in_provisioning=%d show_group_started=%d)", |
618 | wpa_s->p2p_in_provisioning, | |
619 | wpa_s->show_group_started); | |
a21c05db JM |
620 | params.ssids[0].ssid = wpa_s->go_params->ssid; |
621 | params.ssids[0].ssid_len = wpa_s->go_params->ssid_len; | |
622 | params.num_ssids = 1; | |
623 | goto ssid_list_set; | |
624 | } | |
625 | #endif /* CONFIG_P2P */ | |
626 | ||
e76baaac | 627 | /* Find the starting point from which to continue scanning */ |
6fc6879b | 628 | ssid = wpa_s->conf->ssid; |
ba2a573c | 629 | if (wpa_s->prev_scan_ssid != WILDCARD_SSID_SCAN) { |
6fc6879b JM |
630 | while (ssid) { |
631 | if (ssid == wpa_s->prev_scan_ssid) { | |
632 | ssid = ssid->next; | |
633 | break; | |
634 | } | |
635 | ssid = ssid->next; | |
636 | } | |
637 | } | |
6fc6879b | 638 | |
12455031 LP |
639 | if (wpa_s->last_scan_req != MANUAL_SCAN_REQ && |
640 | wpa_s->conf->ap_scan == 2) { | |
7dcdcfd6 | 641 | wpa_s->connect_without_scan = NULL; |
b3aa456b | 642 | wpa_s->prev_scan_wildcard = 0; |
e76baaac JM |
643 | wpa_supplicant_assoc_try(wpa_s, ssid); |
644 | return; | |
645 | } else if (wpa_s->conf->ap_scan == 2) { | |
6fc6879b | 646 | /* |
ba2a573c JM |
647 | * User-initiated scan request in ap_scan == 2; scan with |
648 | * wildcard SSID. | |
6fc6879b | 649 | */ |
e76baaac JM |
650 | ssid = NULL; |
651 | } else { | |
5be45e2e | 652 | struct wpa_ssid *start = ssid, *tssid; |
d3a98225 | 653 | int freqs_set = 0; |
e76baaac JM |
654 | if (ssid == NULL && max_ssids > 1) |
655 | ssid = wpa_s->conf->ssid; | |
656 | while (ssid) { | |
349493bd JM |
657 | if (!wpas_network_disabled(wpa_s, ssid) && |
658 | ssid->scan_ssid) { | |
e76baaac JM |
659 | wpa_hexdump_ascii(MSG_DEBUG, "Scan SSID", |
660 | ssid->ssid, ssid->ssid_len); | |
661 | params.ssids[params.num_ssids].ssid = | |
662 | ssid->ssid; | |
663 | params.ssids[params.num_ssids].ssid_len = | |
664 | ssid->ssid_len; | |
665 | params.num_ssids++; | |
666 | if (params.num_ssids + 1 >= max_ssids) | |
667 | break; | |
668 | } | |
669 | ssid = ssid->next; | |
670 | if (ssid == start) | |
671 | break; | |
672 | if (ssid == NULL && max_ssids > 1 && | |
673 | start != wpa_s->conf->ssid) | |
674 | ssid = wpa_s->conf->ssid; | |
6fc6879b | 675 | } |
d3a98225 | 676 | |
5be45e2e | 677 | for (tssid = wpa_s->conf->ssid; tssid; tssid = tssid->next) { |
349493bd | 678 | if (wpas_network_disabled(wpa_s, tssid)) |
d3a98225 | 679 | continue; |
5be45e2e | 680 | if ((params.freqs || !freqs_set) && tssid->scan_freq) { |
d3a98225 | 681 | int_array_concat(¶ms.freqs, |
5be45e2e | 682 | tssid->scan_freq); |
d3a98225 JM |
683 | } else { |
684 | os_free(params.freqs); | |
685 | params.freqs = NULL; | |
686 | } | |
687 | freqs_set = 1; | |
688 | } | |
689 | int_array_sort_unique(params.freqs); | |
6fc6879b JM |
690 | } |
691 | ||
b3aa456b ES |
692 | if (ssid && max_ssids == 1) { |
693 | /* | |
694 | * If the driver is limited to 1 SSID at a time interleave | |
695 | * wildcard SSID scans with specific SSID scans to avoid | |
696 | * waiting a long time for a wildcard scan. | |
697 | */ | |
698 | if (!wpa_s->prev_scan_wildcard) { | |
699 | params.ssids[0].ssid = NULL; | |
700 | params.ssids[0].ssid_len = 0; | |
701 | wpa_s->prev_scan_wildcard = 1; | |
702 | wpa_dbg(wpa_s, MSG_DEBUG, "Starting AP scan for " | |
703 | "wildcard SSID (Interleave with specific)"); | |
704 | } else { | |
705 | wpa_s->prev_scan_ssid = ssid; | |
706 | wpa_s->prev_scan_wildcard = 0; | |
707 | wpa_dbg(wpa_s, MSG_DEBUG, | |
708 | "Starting AP scan for specific SSID: %s", | |
709 | wpa_ssid_txt(ssid->ssid, ssid->ssid_len)); | |
e76baaac | 710 | } |
b3aa456b ES |
711 | } else if (ssid) { |
712 | /* max_ssids > 1 */ | |
713 | ||
714 | wpa_s->prev_scan_ssid = ssid; | |
715 | wpa_dbg(wpa_s, MSG_DEBUG, "Include wildcard SSID in " | |
716 | "the scan request"); | |
717 | params.num_ssids++; | |
88c2d488 JM |
718 | } else if (wpa_s->last_scan_req == MANUAL_SCAN_REQ && |
719 | wpa_s->manual_scan_passive && params.num_ssids == 0) { | |
720 | wpa_dbg(wpa_s, MSG_DEBUG, "Use passive scan based on manual request"); | |
e76baaac | 721 | } else { |
ba2a573c | 722 | wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN; |
e76baaac | 723 | params.num_ssids++; |
f049052b BG |
724 | wpa_dbg(wpa_s, MSG_DEBUG, "Starting AP scan for wildcard " |
725 | "SSID"); | |
6fc6879b | 726 | } |
a21c05db JM |
727 | #ifdef CONFIG_P2P |
728 | ssid_list_set: | |
729 | #endif /* CONFIG_P2P */ | |
6fc6879b | 730 | |
5f738a21 | 731 | wpa_supplicant_optimize_freqs(wpa_s, ¶ms); |
a13e07ec | 732 | extra_ie = wpa_supplicant_extra_ies(wpa_s); |
0e65037c | 733 | |
949938aa JM |
734 | if (wpa_s->last_scan_req == MANUAL_SCAN_REQ && |
735 | wpa_s->manual_scan_only_new) | |
736 | params.only_new_results = 1; | |
737 | ||
fee52342 JM |
738 | if (wpa_s->last_scan_req == MANUAL_SCAN_REQ && params.freqs == NULL && |
739 | wpa_s->manual_scan_freqs) { | |
740 | wpa_dbg(wpa_s, MSG_DEBUG, "Limit manual scan to specified channels"); | |
741 | params.freqs = wpa_s->manual_scan_freqs; | |
742 | wpa_s->manual_scan_freqs = NULL; | |
743 | } | |
744 | ||
f47d639d | 745 | if (params.freqs == NULL && wpa_s->next_scan_freqs) { |
f049052b BG |
746 | wpa_dbg(wpa_s, MSG_DEBUG, "Optimize scan based on previously " |
747 | "generated frequency list"); | |
f47d639d JM |
748 | params.freqs = wpa_s->next_scan_freqs; |
749 | } else | |
750 | os_free(wpa_s->next_scan_freqs); | |
751 | wpa_s->next_scan_freqs = NULL; | |
faf9a858 | 752 | wpa_setband_scan_freqs(wpa_s, ¶ms); |
f47d639d | 753 | |
f5ffc348 BG |
754 | /* See if user specified frequencies. If so, scan only those. */ |
755 | if (wpa_s->conf->freq_list && !params.freqs) { | |
756 | wpa_dbg(wpa_s, MSG_DEBUG, | |
757 | "Optimize scan based on conf->freq_list"); | |
758 | int_array_concat(¶ms.freqs, wpa_s->conf->freq_list); | |
759 | } | |
760 | ||
6124e858 BG |
761 | /* Use current associated channel? */ |
762 | if (wpa_s->conf->scan_cur_freq && !params.freqs) { | |
53c5dfc2 IP |
763 | unsigned int num = wpa_s->num_multichan_concurrent; |
764 | ||
765 | params.freqs = os_calloc(num + 1, sizeof(int)); | |
766 | if (params.freqs) { | |
767 | num = get_shared_radio_freqs(wpa_s, params.freqs, num); | |
768 | if (num > 0) { | |
769 | wpa_dbg(wpa_s, MSG_DEBUG, "Scan only the " | |
770 | "current operating channels since " | |
771 | "scan_cur_freq is enabled"); | |
772 | } else { | |
773 | os_free(params.freqs); | |
774 | params.freqs = NULL; | |
775 | } | |
6124e858 BG |
776 | } |
777 | } | |
778 | ||
3812464c JM |
779 | params.filter_ssids = wpa_supplicant_build_filter_ssids( |
780 | wpa_s->conf, ¶ms.num_filter_ssids); | |
46ee0427 JM |
781 | if (extra_ie) { |
782 | params.extra_ies = wpabuf_head(extra_ie); | |
783 | params.extra_ies_len = wpabuf_len(extra_ie); | |
784 | } | |
3812464c | 785 | |
d1dd48e3 | 786 | #ifdef CONFIG_P2P |
85ea132a JM |
787 | if (wpa_s->p2p_in_provisioning || |
788 | (wpa_s->show_group_started && wpa_s->go_params)) { | |
d1dd48e3 JM |
789 | /* |
790 | * The interface may not yet be in P2P mode, so we have to | |
791 | * explicitly request P2P probe to disable CCK rates. | |
792 | */ | |
793 | params.p2p_probe = 1; | |
794 | } | |
795 | #endif /* CONFIG_P2P */ | |
796 | ||
7c865c68 TB |
797 | scan_params = ¶ms; |
798 | ||
799 | scan: | |
5cc70322 JM |
800 | #ifdef CONFIG_P2P |
801 | /* | |
802 | * If the driver does not support multi-channel concurrency and a | |
803 | * virtual interface that shares the same radio with the wpa_s interface | |
804 | * is operating there may not be need to scan other channels apart from | |
805 | * the current operating channel on the other virtual interface. Filter | |
806 | * out other channels in case we are trying to find a connection for a | |
807 | * station interface when we are not configured to prefer station | |
808 | * connection and a concurrent operation is already in process. | |
809 | */ | |
12455031 LP |
810 | if (wpa_s->scan_for_connection && |
811 | wpa_s->last_scan_req == NORMAL_SCAN_REQ && | |
5cc70322 JM |
812 | !scan_params->freqs && !params.freqs && |
813 | wpas_is_p2p_prioritized(wpa_s) && | |
5cc70322 JM |
814 | wpa_s->p2p_group_interface == NOT_P2P_GROUP_INTERFACE && |
815 | non_p2p_network_enabled(wpa_s)) { | |
53c5dfc2 IP |
816 | unsigned int num = wpa_s->num_multichan_concurrent; |
817 | ||
818 | params.freqs = os_calloc(num + 1, sizeof(int)); | |
819 | if (params.freqs) { | |
820 | num = get_shared_radio_freqs(wpa_s, params.freqs, num); | |
821 | if (num > 0 && num == wpa_s->num_multichan_concurrent) { | |
822 | wpa_dbg(wpa_s, MSG_DEBUG, "Scan only the current operating channels since all channels are already used"); | |
823 | } else { | |
824 | os_free(params.freqs); | |
825 | params.freqs = NULL; | |
826 | } | |
5cc70322 JM |
827 | } |
828 | } | |
829 | #endif /* CONFIG_P2P */ | |
830 | ||
7c865c68 | 831 | ret = wpa_supplicant_trigger_scan(wpa_s, scan_params); |
6fc6879b | 832 | |
fee52342 JM |
833 | if (ret && wpa_s->last_scan_req == MANUAL_SCAN_REQ && params.freqs && |
834 | !wpa_s->manual_scan_freqs) { | |
835 | /* Restore manual_scan_freqs for the next attempt */ | |
836 | wpa_s->manual_scan_freqs = params.freqs; | |
837 | params.freqs = NULL; | |
838 | } | |
839 | ||
46ee0427 | 840 | wpabuf_free(extra_ie); |
d3a98225 | 841 | os_free(params.freqs); |
3812464c | 842 | os_free(params.filter_ssids); |
ad08c363 | 843 | |
6fc6879b | 844 | if (ret) { |
f049052b | 845 | wpa_msg(wpa_s, MSG_WARNING, "Failed to initiate AP scan"); |
207ef3fb JM |
846 | if (prev_state != wpa_s->wpa_state) |
847 | wpa_supplicant_set_state(wpa_s, prev_state); | |
23270cd8 | 848 | /* Restore scan_req since we will try to scan again */ |
12455031 | 849 | wpa_s->scan_req = wpa_s->last_scan_req; |
1c4c9c50 | 850 | wpa_supplicant_req_scan(wpa_s, 1, 0); |
5cc70322 JM |
851 | } else { |
852 | wpa_s->scan_for_connection = 0; | |
d902a9c1 | 853 | } |
6fc6879b JM |
854 | } |
855 | ||
856 | ||
9e737f08 PF |
857 | void wpa_supplicant_update_scan_int(struct wpa_supplicant *wpa_s, int sec) |
858 | { | |
594516b4 | 859 | struct os_reltime remaining, new_int; |
9e737f08 PF |
860 | int cancelled; |
861 | ||
862 | cancelled = eloop_cancel_timeout_one(wpa_supplicant_scan, wpa_s, NULL, | |
863 | &remaining); | |
864 | ||
865 | new_int.sec = sec; | |
866 | new_int.usec = 0; | |
594516b4 | 867 | if (cancelled && os_reltime_before(&remaining, &new_int)) { |
9e737f08 PF |
868 | new_int.sec = remaining.sec; |
869 | new_int.usec = remaining.usec; | |
870 | } | |
871 | ||
c6f5dec9 PF |
872 | if (cancelled) { |
873 | eloop_register_timeout(new_int.sec, new_int.usec, | |
874 | wpa_supplicant_scan, wpa_s, NULL); | |
875 | } | |
9e737f08 PF |
876 | wpa_s->scan_interval = sec; |
877 | } | |
878 | ||
879 | ||
6fc6879b JM |
880 | /** |
881 | * wpa_supplicant_req_scan - Schedule a scan for neighboring access points | |
882 | * @wpa_s: Pointer to wpa_supplicant data | |
883 | * @sec: Number of seconds after which to scan | |
884 | * @usec: Number of microseconds after which to scan | |
885 | * | |
886 | * This function is used to schedule a scan for neighboring access points after | |
887 | * the specified time. | |
888 | */ | |
889 | void wpa_supplicant_req_scan(struct wpa_supplicant *wpa_s, int sec, int usec) | |
890 | { | |
e2f5a988 DS |
891 | if (eloop_deplete_timeout(sec, usec, wpa_supplicant_scan, wpa_s, NULL)) |
892 | { | |
893 | wpa_dbg(wpa_s, MSG_DEBUG, "Rescheduling scan request: %d sec %d usec", | |
894 | sec, usec); | |
895 | return; | |
896 | } | |
897 | ||
f049052b | 898 | wpa_dbg(wpa_s, MSG_DEBUG, "Setting scan request: %d sec %d usec", |
6fc6879b JM |
899 | sec, usec); |
900 | eloop_cancel_timeout(wpa_supplicant_scan, wpa_s, NULL); | |
901 | eloop_register_timeout(sec, usec, wpa_supplicant_scan, wpa_s, NULL); | |
902 | } | |
903 | ||
904 | ||
6a90053c LC |
905 | /** |
906 | * wpa_supplicant_delayed_sched_scan - Request a delayed scheduled scan | |
907 | * @wpa_s: Pointer to wpa_supplicant data | |
908 | * @sec: Number of seconds after which to scan | |
909 | * @usec: Number of microseconds after which to scan | |
2c09af30 | 910 | * Returns: 0 on success or -1 otherwise |
6a90053c LC |
911 | * |
912 | * This function is used to schedule periodic scans for neighboring | |
913 | * access points after the specified time. | |
914 | */ | |
915 | int wpa_supplicant_delayed_sched_scan(struct wpa_supplicant *wpa_s, | |
916 | int sec, int usec) | |
917 | { | |
918 | if (!wpa_s->sched_scan_supported) | |
919 | return -1; | |
920 | ||
921 | eloop_register_timeout(sec, usec, | |
922 | wpa_supplicant_delayed_sched_scan_timeout, | |
923 | wpa_s, NULL); | |
924 | ||
925 | return 0; | |
926 | } | |
927 | ||
928 | ||
cbdf3507 LC |
929 | /** |
930 | * wpa_supplicant_req_sched_scan - Start a periodic scheduled scan | |
931 | * @wpa_s: Pointer to wpa_supplicant data | |
2c09af30 | 932 | * Returns: 0 is sched_scan was started or -1 otherwise |
cbdf3507 LC |
933 | * |
934 | * This function is used to schedule periodic scans for neighboring | |
935 | * access points repeating the scan continuously. | |
936 | */ | |
937 | int wpa_supplicant_req_sched_scan(struct wpa_supplicant *wpa_s) | |
938 | { | |
939 | struct wpa_driver_scan_params params; | |
7c865c68 | 940 | struct wpa_driver_scan_params *scan_params; |
cbdf3507 | 941 | enum wpa_states prev_state; |
7c865c68 | 942 | struct wpa_ssid *ssid = NULL; |
a13e07ec | 943 | struct wpabuf *extra_ie = NULL; |
cbdf3507 | 944 | int ret; |
cbdf3507 | 945 | unsigned int max_sched_scan_ssids; |
76a5249e | 946 | int wildcard = 0; |
0b7a25c0 | 947 | int need_ssids; |
cbdf3507 LC |
948 | |
949 | if (!wpa_s->sched_scan_supported) | |
950 | return -1; | |
951 | ||
952 | if (wpa_s->max_sched_scan_ssids > WPAS_MAX_SCAN_SSIDS) | |
953 | max_sched_scan_ssids = WPAS_MAX_SCAN_SSIDS; | |
954 | else | |
955 | max_sched_scan_ssids = wpa_s->max_sched_scan_ssids; | |
54ddd743 | 956 | if (max_sched_scan_ssids < 1 || wpa_s->conf->disable_scan_offload) |
76a5249e | 957 | return -1; |
cbdf3507 | 958 | |
1966e3d1 ES |
959 | if (wpa_s->sched_scanning) { |
960 | wpa_dbg(wpa_s, MSG_DEBUG, "Already sched scanning"); | |
cbdf3507 | 961 | return 0; |
1966e3d1 | 962 | } |
cbdf3507 | 963 | |
0b7a25c0 JM |
964 | need_ssids = 0; |
965 | for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { | |
349493bd | 966 | if (!wpas_network_disabled(wpa_s, ssid) && !ssid->scan_ssid) { |
0b7a25c0 JM |
967 | /* Use wildcard SSID to find this network */ |
968 | wildcard = 1; | |
349493bd JM |
969 | } else if (!wpas_network_disabled(wpa_s, ssid) && |
970 | ssid->ssid_len) | |
0b7a25c0 | 971 | need_ssids++; |
aa283ddd JM |
972 | |
973 | #ifdef CONFIG_WPS | |
349493bd | 974 | if (!wpas_network_disabled(wpa_s, ssid) && |
fea7c3a0 | 975 | ssid->key_mgmt == WPA_KEY_MGMT_WPS) { |
aa283ddd JM |
976 | /* |
977 | * Normal scan is more reliable and faster for WPS | |
978 | * operations and since these are for short periods of | |
979 | * time, the benefit of trying to use sched_scan would | |
980 | * be limited. | |
981 | */ | |
982 | wpa_dbg(wpa_s, MSG_DEBUG, "Use normal scan instead of " | |
983 | "sched_scan for WPS"); | |
984 | return -1; | |
985 | } | |
986 | #endif /* CONFIG_WPS */ | |
0b7a25c0 JM |
987 | } |
988 | if (wildcard) | |
989 | need_ssids++; | |
990 | ||
991 | if (wpa_s->normal_scans < 3 && | |
992 | (need_ssids <= wpa_s->max_scan_ssids || | |
993 | wpa_s->max_scan_ssids >= (int) max_sched_scan_ssids)) { | |
994 | /* | |
995 | * When normal scan can speed up operations, use that for the | |
996 | * first operations before starting the sched_scan to allow | |
997 | * user space sleep more. We do this only if the normal scan | |
998 | * has functionality that is suitable for this or if the | |
999 | * sched_scan does not have better support for multiple SSIDs. | |
1000 | */ | |
1001 | wpa_dbg(wpa_s, MSG_DEBUG, "Use normal scan instead of " | |
1002 | "sched_scan for initial scans (normal_scans=%d)", | |
1003 | wpa_s->normal_scans); | |
1004 | return -1; | |
1005 | } | |
1006 | ||
cbdf3507 LC |
1007 | os_memset(¶ms, 0, sizeof(params)); |
1008 | ||
b59e6f26 LC |
1009 | /* If we can't allocate space for the filters, we just don't filter */ |
1010 | params.filter_ssids = os_zalloc(wpa_s->max_match_sets * | |
1011 | sizeof(struct wpa_driver_scan_filter)); | |
1012 | ||
cbdf3507 LC |
1013 | prev_state = wpa_s->wpa_state; |
1014 | if (wpa_s->wpa_state == WPA_DISCONNECTED || | |
1015 | wpa_s->wpa_state == WPA_INACTIVE) | |
1016 | wpa_supplicant_set_state(wpa_s, WPA_SCANNING); | |
1017 | ||
7c865c68 TB |
1018 | if (wpa_s->autoscan_params != NULL) { |
1019 | scan_params = wpa_s->autoscan_params; | |
1020 | goto scan; | |
1021 | } | |
1022 | ||
cbdf3507 LC |
1023 | /* Find the starting point from which to continue scanning */ |
1024 | ssid = wpa_s->conf->ssid; | |
1025 | if (wpa_s->prev_sched_ssid) { | |
1026 | while (ssid) { | |
1027 | if (ssid == wpa_s->prev_sched_ssid) { | |
1028 | ssid = ssid->next; | |
1029 | break; | |
1030 | } | |
1031 | ssid = ssid->next; | |
1032 | } | |
1033 | } | |
1034 | ||
1035 | if (!ssid || !wpa_s->prev_sched_ssid) { | |
1036 | wpa_dbg(wpa_s, MSG_DEBUG, "Beginning of SSID list"); | |
4aa81868 SF |
1037 | if (wpa_s->conf->sched_scan_interval) |
1038 | wpa_s->sched_scan_interval = | |
1039 | wpa_s->conf->sched_scan_interval; | |
7c865c68 TB |
1040 | if (wpa_s->sched_scan_interval == 0) |
1041 | wpa_s->sched_scan_interval = 10; | |
cbdf3507 LC |
1042 | wpa_s->sched_scan_timeout = max_sched_scan_ssids * 2; |
1043 | wpa_s->first_sched_scan = 1; | |
1044 | ssid = wpa_s->conf->ssid; | |
1045 | wpa_s->prev_sched_ssid = ssid; | |
1046 | } | |
1047 | ||
76a5249e JM |
1048 | if (wildcard) { |
1049 | wpa_dbg(wpa_s, MSG_DEBUG, "Add wildcard SSID to sched_scan"); | |
1050 | params.num_ssids++; | |
1051 | } | |
1052 | ||
cbdf3507 | 1053 | while (ssid) { |
349493bd | 1054 | if (wpas_network_disabled(wpa_s, ssid)) |
5edddf41 | 1055 | goto next; |
cbdf3507 | 1056 | |
fcd16847 JM |
1057 | if (params.num_filter_ssids < wpa_s->max_match_sets && |
1058 | params.filter_ssids && ssid->ssid && ssid->ssid_len) { | |
1966e3d1 ES |
1059 | wpa_dbg(wpa_s, MSG_DEBUG, "add to filter ssid: %s", |
1060 | wpa_ssid_txt(ssid->ssid, ssid->ssid_len)); | |
b59e6f26 LC |
1061 | os_memcpy(params.filter_ssids[params.num_filter_ssids].ssid, |
1062 | ssid->ssid, ssid->ssid_len); | |
1063 | params.filter_ssids[params.num_filter_ssids].ssid_len = | |
1064 | ssid->ssid_len; | |
1065 | params.num_filter_ssids++; | |
86b47aaf JM |
1066 | } else if (params.filter_ssids && ssid->ssid && ssid->ssid_len) |
1067 | { | |
1068 | wpa_dbg(wpa_s, MSG_DEBUG, "Not enough room for SSID " | |
1069 | "filter for sched_scan - drop filter"); | |
1070 | os_free(params.filter_ssids); | |
1071 | params.filter_ssids = NULL; | |
1072 | params.num_filter_ssids = 0; | |
b59e6f26 LC |
1073 | } |
1074 | ||
3f56f3a4 | 1075 | if (ssid->scan_ssid && ssid->ssid && ssid->ssid_len) { |
76a5249e JM |
1076 | if (params.num_ssids == max_sched_scan_ssids) |
1077 | break; /* only room for broadcast SSID */ | |
3f56f3a4 JM |
1078 | wpa_dbg(wpa_s, MSG_DEBUG, |
1079 | "add to active scan ssid: %s", | |
1966e3d1 | 1080 | wpa_ssid_txt(ssid->ssid, ssid->ssid_len)); |
cbdf3507 LC |
1081 | params.ssids[params.num_ssids].ssid = |
1082 | ssid->ssid; | |
1083 | params.ssids[params.num_ssids].ssid_len = | |
1084 | ssid->ssid_len; | |
1085 | params.num_ssids++; | |
b59e6f26 | 1086 | if (params.num_ssids >= max_sched_scan_ssids) { |
cbdf3507 | 1087 | wpa_s->prev_sched_ssid = ssid; |
b55aca46 JM |
1088 | do { |
1089 | ssid = ssid->next; | |
1090 | } while (ssid && | |
349493bd | 1091 | (wpas_network_disabled(wpa_s, ssid) || |
fea7c3a0 | 1092 | !ssid->scan_ssid)); |
cbdf3507 LC |
1093 | break; |
1094 | } | |
1095 | } | |
b59e6f26 | 1096 | |
5edddf41 | 1097 | next: |
cbdf3507 LC |
1098 | wpa_s->prev_sched_ssid = ssid; |
1099 | ssid = ssid->next; | |
1100 | } | |
1101 | ||
7c6a266c JM |
1102 | if (params.num_filter_ssids == 0) { |
1103 | os_free(params.filter_ssids); | |
1104 | params.filter_ssids = NULL; | |
1105 | } | |
1106 | ||
a13e07ec ES |
1107 | extra_ie = wpa_supplicant_extra_ies(wpa_s); |
1108 | if (extra_ie) { | |
1109 | params.extra_ies = wpabuf_head(extra_ie); | |
1110 | params.extra_ies_len = wpabuf_len(extra_ie); | |
1111 | } | |
cbdf3507 | 1112 | |
7c865c68 TB |
1113 | scan_params = ¶ms; |
1114 | ||
1115 | scan: | |
a8cb5a88 | 1116 | if (ssid || !wpa_s->first_sched_scan) { |
a8cb5a88 JM |
1117 | wpa_dbg(wpa_s, MSG_DEBUG, |
1118 | "Starting sched scan: interval %d timeout %d", | |
1119 | wpa_s->sched_scan_interval, wpa_s->sched_scan_timeout); | |
7d21a223 JM |
1120 | } else { |
1121 | wpa_dbg(wpa_s, MSG_DEBUG, | |
1122 | "Starting sched scan: interval %d (no timeout)", | |
1123 | wpa_s->sched_scan_interval); | |
a8cb5a88 | 1124 | } |
cbdf3507 | 1125 | |
faf9a858 JM |
1126 | wpa_setband_scan_freqs(wpa_s, scan_params); |
1127 | ||
7c865c68 | 1128 | ret = wpa_supplicant_start_sched_scan(wpa_s, scan_params, |
cbdf3507 | 1129 | wpa_s->sched_scan_interval); |
a13e07ec | 1130 | wpabuf_free(extra_ie); |
b59e6f26 | 1131 | os_free(params.filter_ssids); |
cbdf3507 LC |
1132 | if (ret) { |
1133 | wpa_msg(wpa_s, MSG_WARNING, "Failed to initiate sched scan"); | |
1134 | if (prev_state != wpa_s->wpa_state) | |
1135 | wpa_supplicant_set_state(wpa_s, prev_state); | |
1136 | return ret; | |
1137 | } | |
1138 | ||
1139 | /* If we have more SSIDs to scan, add a timeout so we scan them too */ | |
1140 | if (ssid || !wpa_s->first_sched_scan) { | |
1141 | wpa_s->sched_scan_timed_out = 0; | |
1142 | eloop_register_timeout(wpa_s->sched_scan_timeout, 0, | |
1143 | wpa_supplicant_sched_scan_timeout, | |
1144 | wpa_s, NULL); | |
1145 | wpa_s->first_sched_scan = 0; | |
1146 | wpa_s->sched_scan_timeout /= 2; | |
1147 | wpa_s->sched_scan_interval *= 2; | |
a09fc1cc DS |
1148 | if (wpa_s->sched_scan_timeout < wpa_s->sched_scan_interval) { |
1149 | wpa_s->sched_scan_interval = 10; | |
1150 | wpa_s->sched_scan_timeout = max_sched_scan_ssids * 2; | |
1151 | } | |
cbdf3507 LC |
1152 | } |
1153 | ||
7ed52f67 DS |
1154 | /* If there is no more ssids, start next time from the beginning */ |
1155 | if (!ssid) | |
1156 | wpa_s->prev_sched_ssid = NULL; | |
1157 | ||
cbdf3507 LC |
1158 | return 0; |
1159 | } | |
1160 | ||
1161 | ||
6fc6879b JM |
1162 | /** |
1163 | * wpa_supplicant_cancel_scan - Cancel a scheduled scan request | |
1164 | * @wpa_s: Pointer to wpa_supplicant data | |
1165 | * | |
1166 | * This function is used to cancel a scan request scheduled with | |
1167 | * wpa_supplicant_req_scan(). | |
1168 | */ | |
1169 | void wpa_supplicant_cancel_scan(struct wpa_supplicant *wpa_s) | |
1170 | { | |
f049052b | 1171 | wpa_dbg(wpa_s, MSG_DEBUG, "Cancelling scan request"); |
6fc6879b JM |
1172 | eloop_cancel_timeout(wpa_supplicant_scan, wpa_s, NULL); |
1173 | } | |
cb8564b1 DW |
1174 | |
1175 | ||
831770bf CZ |
1176 | /** |
1177 | * wpa_supplicant_cancel_delayed_sched_scan - Stop a delayed scheduled scan | |
1178 | * @wpa_s: Pointer to wpa_supplicant data | |
1179 | * | |
1180 | * This function is used to stop a delayed scheduled scan. | |
1181 | */ | |
1182 | void wpa_supplicant_cancel_delayed_sched_scan(struct wpa_supplicant *wpa_s) | |
1183 | { | |
1184 | if (!wpa_s->sched_scan_supported) | |
1185 | return; | |
1186 | ||
1187 | wpa_dbg(wpa_s, MSG_DEBUG, "Cancelling delayed sched scan"); | |
1188 | eloop_cancel_timeout(wpa_supplicant_delayed_sched_scan_timeout, | |
1189 | wpa_s, NULL); | |
1190 | } | |
1191 | ||
1192 | ||
cbdf3507 LC |
1193 | /** |
1194 | * wpa_supplicant_cancel_sched_scan - Stop running scheduled scans | |
1195 | * @wpa_s: Pointer to wpa_supplicant data | |
1196 | * | |
1197 | * This function is used to stop a periodic scheduled scan. | |
1198 | */ | |
1199 | void wpa_supplicant_cancel_sched_scan(struct wpa_supplicant *wpa_s) | |
1200 | { | |
1201 | if (!wpa_s->sched_scanning) | |
1202 | return; | |
1203 | ||
1204 | wpa_dbg(wpa_s, MSG_DEBUG, "Cancelling sched scan"); | |
1205 | eloop_cancel_timeout(wpa_supplicant_sched_scan_timeout, wpa_s, NULL); | |
1206 | wpa_supplicant_stop_sched_scan(wpa_s); | |
1207 | } | |
1208 | ||
1209 | ||
2c09af30 JM |
1210 | /** |
1211 | * wpa_supplicant_notify_scanning - Indicate possible scan state change | |
1212 | * @wpa_s: Pointer to wpa_supplicant data | |
1213 | * @scanning: Whether scanning is currently in progress | |
1214 | * | |
1215 | * This function is to generate scanning notifycations. It is called whenever | |
1216 | * there may have been a change in scanning (scan started, completed, stopped). | |
1217 | * wpas_notify_scanning() is called whenever the scanning state changed from the | |
1218 | * previously notified state. | |
1219 | */ | |
cb8564b1 DW |
1220 | void wpa_supplicant_notify_scanning(struct wpa_supplicant *wpa_s, |
1221 | int scanning) | |
1222 | { | |
1223 | if (wpa_s->scanning != scanning) { | |
1224 | wpa_s->scanning = scanning; | |
8bac466b | 1225 | wpas_notify_scanning(wpa_s); |
cb8564b1 DW |
1226 | } |
1227 | } | |
1228 | ||
9ba9fa07 JM |
1229 | |
1230 | static int wpa_scan_get_max_rate(const struct wpa_scan_res *res) | |
1231 | { | |
1232 | int rate = 0; | |
1233 | const u8 *ie; | |
1234 | int i; | |
1235 | ||
1236 | ie = wpa_scan_get_ie(res, WLAN_EID_SUPP_RATES); | |
1237 | for (i = 0; ie && i < ie[1]; i++) { | |
1238 | if ((ie[i + 2] & 0x7f) > rate) | |
1239 | rate = ie[i + 2] & 0x7f; | |
1240 | } | |
1241 | ||
1242 | ie = wpa_scan_get_ie(res, WLAN_EID_EXT_SUPP_RATES); | |
1243 | for (i = 0; ie && i < ie[1]; i++) { | |
1244 | if ((ie[i + 2] & 0x7f) > rate) | |
1245 | rate = ie[i + 2] & 0x7f; | |
1246 | } | |
1247 | ||
1248 | return rate; | |
1249 | } | |
1250 | ||
1251 | ||
2c09af30 JM |
1252 | /** |
1253 | * wpa_scan_get_ie - Fetch a specified information element from a scan result | |
1254 | * @res: Scan result entry | |
1255 | * @ie: Information element identitifier (WLAN_EID_*) | |
1256 | * Returns: Pointer to the information element (id field) or %NULL if not found | |
1257 | * | |
1258 | * This function returns the first matching information element in the scan | |
1259 | * result. | |
1260 | */ | |
d1f9c410 JM |
1261 | const u8 * wpa_scan_get_ie(const struct wpa_scan_res *res, u8 ie) |
1262 | { | |
1263 | const u8 *end, *pos; | |
1264 | ||
1265 | pos = (const u8 *) (res + 1); | |
1266 | end = pos + res->ie_len; | |
1267 | ||
1268 | while (pos + 1 < end) { | |
1269 | if (pos + 2 + pos[1] > end) | |
1270 | break; | |
1271 | if (pos[0] == ie) | |
1272 | return pos; | |
1273 | pos += 2 + pos[1]; | |
1274 | } | |
1275 | ||
1276 | return NULL; | |
1277 | } | |
1278 | ||
1279 | ||
2c09af30 JM |
1280 | /** |
1281 | * wpa_scan_get_vendor_ie - Fetch vendor information element from a scan result | |
1282 | * @res: Scan result entry | |
1283 | * @vendor_type: Vendor type (four octets starting the IE payload) | |
1284 | * Returns: Pointer to the information element (id field) or %NULL if not found | |
1285 | * | |
1286 | * This function returns the first matching information element in the scan | |
1287 | * result. | |
1288 | */ | |
9ba9fa07 JM |
1289 | const u8 * wpa_scan_get_vendor_ie(const struct wpa_scan_res *res, |
1290 | u32 vendor_type) | |
1291 | { | |
1292 | const u8 *end, *pos; | |
1293 | ||
1294 | pos = (const u8 *) (res + 1); | |
1295 | end = pos + res->ie_len; | |
1296 | ||
1297 | while (pos + 1 < end) { | |
1298 | if (pos + 2 + pos[1] > end) | |
1299 | break; | |
1300 | if (pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 && | |
1301 | vendor_type == WPA_GET_BE32(&pos[2])) | |
1302 | return pos; | |
1303 | pos += 2 + pos[1]; | |
1304 | } | |
1305 | ||
1306 | return NULL; | |
1307 | } | |
1308 | ||
1309 | ||
aaeb9c98 JM |
1310 | /** |
1311 | * wpa_scan_get_vendor_ie_beacon - Fetch vendor information from a scan result | |
1312 | * @res: Scan result entry | |
1313 | * @vendor_type: Vendor type (four octets starting the IE payload) | |
1314 | * Returns: Pointer to the information element (id field) or %NULL if not found | |
1315 | * | |
1316 | * This function returns the first matching information element in the scan | |
1317 | * result. | |
1318 | * | |
1319 | * This function is like wpa_scan_get_vendor_ie(), but uses IE buffer only | |
1320 | * from Beacon frames instead of either Beacon or Probe Response frames. | |
1321 | */ | |
1322 | const u8 * wpa_scan_get_vendor_ie_beacon(const struct wpa_scan_res *res, | |
1323 | u32 vendor_type) | |
1324 | { | |
1325 | const u8 *end, *pos; | |
1326 | ||
1327 | if (res->beacon_ie_len == 0) | |
1328 | return NULL; | |
1329 | ||
1330 | pos = (const u8 *) (res + 1); | |
1331 | pos += res->ie_len; | |
1332 | end = pos + res->beacon_ie_len; | |
1333 | ||
1334 | while (pos + 1 < end) { | |
1335 | if (pos + 2 + pos[1] > end) | |
1336 | break; | |
1337 | if (pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 && | |
1338 | vendor_type == WPA_GET_BE32(&pos[2])) | |
1339 | return pos; | |
1340 | pos += 2 + pos[1]; | |
1341 | } | |
1342 | ||
1343 | return NULL; | |
1344 | } | |
1345 | ||
1346 | ||
2c09af30 JM |
1347 | /** |
1348 | * wpa_scan_get_vendor_ie_multi - Fetch vendor IE data from a scan result | |
1349 | * @res: Scan result entry | |
1350 | * @vendor_type: Vendor type (four octets starting the IE payload) | |
1351 | * Returns: Pointer to the information element payload or %NULL if not found | |
1352 | * | |
1353 | * This function returns concatenated payload of possibly fragmented vendor | |
1354 | * specific information elements in the scan result. The caller is responsible | |
1355 | * for freeing the returned buffer. | |
1356 | */ | |
9ba9fa07 JM |
1357 | struct wpabuf * wpa_scan_get_vendor_ie_multi(const struct wpa_scan_res *res, |
1358 | u32 vendor_type) | |
1359 | { | |
1360 | struct wpabuf *buf; | |
1361 | const u8 *end, *pos; | |
1362 | ||
1363 | buf = wpabuf_alloc(res->ie_len); | |
1364 | if (buf == NULL) | |
1365 | return NULL; | |
1366 | ||
1367 | pos = (const u8 *) (res + 1); | |
1368 | end = pos + res->ie_len; | |
1369 | ||
54f489be JM |
1370 | while (pos + 1 < end) { |
1371 | if (pos + 2 + pos[1] > end) | |
1372 | break; | |
1373 | if (pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 && | |
1374 | vendor_type == WPA_GET_BE32(&pos[2])) | |
1375 | wpabuf_put_data(buf, pos + 2 + 4, pos[1] - 4); | |
1376 | pos += 2 + pos[1]; | |
1377 | } | |
1378 | ||
1379 | if (wpabuf_len(buf) == 0) { | |
1380 | wpabuf_free(buf); | |
1381 | buf = NULL; | |
1382 | } | |
1383 | ||
1384 | return buf; | |
1385 | } | |
1386 | ||
1387 | ||
577db0ae GM |
1388 | /* |
1389 | * Channels with a great SNR can operate at full rate. What is a great SNR? | |
1390 | * This doc https://supportforums.cisco.com/docs/DOC-12954 says, "the general | |
1391 | * rule of thumb is that any SNR above 20 is good." This one | |
1392 | * http://www.cisco.com/en/US/tech/tk722/tk809/technologies_q_and_a_item09186a00805e9a96.shtml#qa23 | |
1393 | * recommends 25 as a minimum SNR for 54 Mbps data rate. 30 is chosen here as a | |
1394 | * conservative value. | |
1395 | */ | |
1396 | #define GREAT_SNR 30 | |
1397 | ||
9ba9fa07 JM |
1398 | /* Compare function for sorting scan results. Return >0 if @b is considered |
1399 | * better. */ | |
1400 | static int wpa_scan_result_compar(const void *a, const void *b) | |
1401 | { | |
577db0ae GM |
1402 | #define IS_5GHZ(n) (n > 4000) |
1403 | #define MIN(a,b) a < b ? a : b | |
9ba9fa07 JM |
1404 | struct wpa_scan_res **_wa = (void *) a; |
1405 | struct wpa_scan_res **_wb = (void *) b; | |
1406 | struct wpa_scan_res *wa = *_wa; | |
1407 | struct wpa_scan_res *wb = *_wb; | |
1408 | int wpa_a, wpa_b, maxrate_a, maxrate_b; | |
577db0ae | 1409 | int snr_a, snr_b; |
9ba9fa07 JM |
1410 | |
1411 | /* WPA/WPA2 support preferred */ | |
1412 | wpa_a = wpa_scan_get_vendor_ie(wa, WPA_IE_VENDOR_TYPE) != NULL || | |
1413 | wpa_scan_get_ie(wa, WLAN_EID_RSN) != NULL; | |
1414 | wpa_b = wpa_scan_get_vendor_ie(wb, WPA_IE_VENDOR_TYPE) != NULL || | |
1415 | wpa_scan_get_ie(wb, WLAN_EID_RSN) != NULL; | |
1416 | ||
1417 | if (wpa_b && !wpa_a) | |
1418 | return 1; | |
1419 | if (!wpa_b && wpa_a) | |
1420 | return -1; | |
1421 | ||
1422 | /* privacy support preferred */ | |
1423 | if ((wa->caps & IEEE80211_CAP_PRIVACY) == 0 && | |
1424 | (wb->caps & IEEE80211_CAP_PRIVACY)) | |
1425 | return 1; | |
1426 | if ((wa->caps & IEEE80211_CAP_PRIVACY) && | |
1427 | (wb->caps & IEEE80211_CAP_PRIVACY) == 0) | |
1428 | return -1; | |
1429 | ||
577db0ae GM |
1430 | if ((wa->flags & wb->flags & WPA_SCAN_LEVEL_DBM) && |
1431 | !((wa->flags | wb->flags) & WPA_SCAN_NOISE_INVALID)) { | |
1432 | snr_a = MIN(wa->level - wa->noise, GREAT_SNR); | |
1433 | snr_b = MIN(wb->level - wb->noise, GREAT_SNR); | |
1434 | } else { | |
1435 | /* Not suitable information to calculate SNR, so use level */ | |
1436 | snr_a = wa->level; | |
1437 | snr_b = wb->level; | |
1438 | } | |
1439 | ||
577db0ae GM |
1440 | /* best/max rate preferred if SNR close enough */ |
1441 | if ((snr_a && snr_b && abs(snr_b - snr_a) < 5) || | |
9ba9fa07 JM |
1442 | (wa->qual && wb->qual && abs(wb->qual - wa->qual) < 10)) { |
1443 | maxrate_a = wpa_scan_get_max_rate(wa); | |
1444 | maxrate_b = wpa_scan_get_max_rate(wb); | |
1445 | if (maxrate_a != maxrate_b) | |
1446 | return maxrate_b - maxrate_a; | |
577db0ae GM |
1447 | if (IS_5GHZ(wa->freq) ^ IS_5GHZ(wb->freq)) |
1448 | return IS_5GHZ(wa->freq) ? -1 : 1; | |
9ba9fa07 JM |
1449 | } |
1450 | ||
1451 | /* use freq for channel preference */ | |
1452 | ||
577db0ae | 1453 | /* all things being equal, use SNR; if SNRs are |
9ba9fa07 JM |
1454 | * identical, use quality values since some drivers may only report |
1455 | * that value and leave the signal level zero */ | |
577db0ae | 1456 | if (snr_b == snr_a) |
9ba9fa07 | 1457 | return wb->qual - wa->qual; |
577db0ae GM |
1458 | return snr_b - snr_a; |
1459 | #undef MIN | |
1460 | #undef IS_5GHZ | |
9ba9fa07 JM |
1461 | } |
1462 | ||
1463 | ||
41e650ae JM |
1464 | #ifdef CONFIG_WPS |
1465 | /* Compare function for sorting scan results when searching a WPS AP for | |
1466 | * provisioning. Return >0 if @b is considered better. */ | |
1467 | static int wpa_scan_result_wps_compar(const void *a, const void *b) | |
1468 | { | |
1469 | struct wpa_scan_res **_wa = (void *) a; | |
1470 | struct wpa_scan_res **_wb = (void *) b; | |
1471 | struct wpa_scan_res *wa = *_wa; | |
1472 | struct wpa_scan_res *wb = *_wb; | |
1473 | int uses_wps_a, uses_wps_b; | |
1474 | struct wpabuf *wps_a, *wps_b; | |
1475 | int res; | |
1476 | ||
1477 | /* Optimization - check WPS IE existence before allocated memory and | |
1478 | * doing full reassembly. */ | |
1479 | uses_wps_a = wpa_scan_get_vendor_ie(wa, WPS_IE_VENDOR_TYPE) != NULL; | |
1480 | uses_wps_b = wpa_scan_get_vendor_ie(wb, WPS_IE_VENDOR_TYPE) != NULL; | |
1481 | if (uses_wps_a && !uses_wps_b) | |
1482 | return -1; | |
1483 | if (!uses_wps_a && uses_wps_b) | |
1484 | return 1; | |
1485 | ||
1486 | if (uses_wps_a && uses_wps_b) { | |
1487 | wps_a = wpa_scan_get_vendor_ie_multi(wa, WPS_IE_VENDOR_TYPE); | |
1488 | wps_b = wpa_scan_get_vendor_ie_multi(wb, WPS_IE_VENDOR_TYPE); | |
1489 | res = wps_ap_priority_compar(wps_a, wps_b); | |
1490 | wpabuf_free(wps_a); | |
1491 | wpabuf_free(wps_b); | |
1492 | if (res) | |
1493 | return res; | |
1494 | } | |
1495 | ||
1496 | /* | |
1497 | * Do not use current AP security policy as a sorting criteria during | |
1498 | * WPS provisioning step since the AP may get reconfigured at the | |
1499 | * completion of provisioning. | |
1500 | */ | |
1501 | ||
1502 | /* all things being equal, use signal level; if signal levels are | |
1503 | * identical, use quality values since some drivers may only report | |
1504 | * that value and leave the signal level zero */ | |
1505 | if (wb->level == wa->level) | |
1506 | return wb->qual - wa->qual; | |
1507 | return wb->level - wa->level; | |
1508 | } | |
1509 | #endif /* CONFIG_WPS */ | |
1510 | ||
1511 | ||
aa820e02 JM |
1512 | static void dump_scan_res(struct wpa_scan_results *scan_res) |
1513 | { | |
76202aed | 1514 | #ifndef CONFIG_NO_STDOUT_DEBUG |
aa820e02 JM |
1515 | size_t i; |
1516 | ||
1517 | if (scan_res->res == NULL || scan_res->num == 0) | |
1518 | return; | |
1519 | ||
1520 | wpa_printf(MSG_EXCESSIVE, "Sorted scan results"); | |
1521 | ||
1522 | for (i = 0; i < scan_res->num; i++) { | |
1523 | struct wpa_scan_res *r = scan_res->res[i]; | |
1cbe86e2 | 1524 | u8 *pos; |
aa820e02 JM |
1525 | if ((r->flags & (WPA_SCAN_LEVEL_DBM | WPA_SCAN_NOISE_INVALID)) |
1526 | == WPA_SCAN_LEVEL_DBM) { | |
1527 | int snr = r->level - r->noise; | |
1528 | wpa_printf(MSG_EXCESSIVE, MACSTR " freq=%d qual=%d " | |
c5f10e80 JM |
1529 | "noise=%d level=%d snr=%d%s flags=0x%x " |
1530 | "age=%u", | |
aa820e02 JM |
1531 | MAC2STR(r->bssid), r->freq, r->qual, |
1532 | r->noise, r->level, snr, | |
c5f10e80 JM |
1533 | snr >= GREAT_SNR ? "*" : "", r->flags, |
1534 | r->age); | |
aa820e02 JM |
1535 | } else { |
1536 | wpa_printf(MSG_EXCESSIVE, MACSTR " freq=%d qual=%d " | |
c5f10e80 | 1537 | "noise=%d level=%d flags=0x%x age=%u", |
aa820e02 | 1538 | MAC2STR(r->bssid), r->freq, r->qual, |
c5f10e80 | 1539 | r->noise, r->level, r->flags, r->age); |
aa820e02 | 1540 | } |
1cbe86e2 JM |
1541 | pos = (u8 *) (r + 1); |
1542 | if (r->ie_len) | |
1543 | wpa_hexdump(MSG_EXCESSIVE, "IEs", pos, r->ie_len); | |
1544 | pos += r->ie_len; | |
1545 | if (r->beacon_ie_len) | |
1546 | wpa_hexdump(MSG_EXCESSIVE, "Beacon IEs", | |
1547 | pos, r->beacon_ie_len); | |
aa820e02 | 1548 | } |
76202aed | 1549 | #endif /* CONFIG_NO_STDOUT_DEBUG */ |
aa820e02 JM |
1550 | } |
1551 | ||
1552 | ||
2c09af30 JM |
1553 | /** |
1554 | * wpa_supplicant_filter_bssid_match - Is the specified BSSID allowed | |
1555 | * @wpa_s: Pointer to wpa_supplicant data | |
1556 | * @bssid: BSSID to check | |
1557 | * Returns: 0 if the BSSID is filtered or 1 if not | |
1558 | * | |
1559 | * This function is used to filter out specific BSSIDs from scan reslts mainly | |
1560 | * for testing purposes (SET bssid_filter ctrl_iface command). | |
1561 | */ | |
d445a5cd JM |
1562 | int wpa_supplicant_filter_bssid_match(struct wpa_supplicant *wpa_s, |
1563 | const u8 *bssid) | |
1564 | { | |
1565 | size_t i; | |
1566 | ||
1567 | if (wpa_s->bssid_filter == NULL) | |
1568 | return 1; | |
1569 | ||
1570 | for (i = 0; i < wpa_s->bssid_filter_count; i++) { | |
1571 | if (os_memcmp(wpa_s->bssid_filter + i * ETH_ALEN, bssid, | |
1572 | ETH_ALEN) == 0) | |
1573 | return 1; | |
1574 | } | |
1575 | ||
1576 | return 0; | |
1577 | } | |
1578 | ||
1579 | ||
1580 | static void filter_scan_res(struct wpa_supplicant *wpa_s, | |
1581 | struct wpa_scan_results *res) | |
1582 | { | |
1583 | size_t i, j; | |
1584 | ||
1585 | if (wpa_s->bssid_filter == NULL) | |
1586 | return; | |
1587 | ||
1588 | for (i = 0, j = 0; i < res->num; i++) { | |
1589 | if (wpa_supplicant_filter_bssid_match(wpa_s, | |
1590 | res->res[i]->bssid)) { | |
1591 | res->res[j++] = res->res[i]; | |
1592 | } else { | |
1593 | os_free(res->res[i]); | |
1594 | res->res[i] = NULL; | |
1595 | } | |
1596 | } | |
1597 | ||
1598 | if (res->num != j) { | |
1599 | wpa_printf(MSG_DEBUG, "Filtered out %d scan results", | |
1600 | (int) (res->num - j)); | |
1601 | res->num = j; | |
1602 | } | |
1603 | } | |
1604 | ||
1605 | ||
9ba9fa07 JM |
1606 | /** |
1607 | * wpa_supplicant_get_scan_results - Get scan results | |
1608 | * @wpa_s: Pointer to wpa_supplicant data | |
1609 | * @info: Information about what was scanned or %NULL if not available | |
1610 | * @new_scan: Whether a new scan was performed | |
1611 | * Returns: Scan results, %NULL on failure | |
1612 | * | |
1613 | * This function request the current scan results from the driver and updates | |
1614 | * the local BSS list wpa_s->bss. The caller is responsible for freeing the | |
1615 | * results with wpa_scan_results_free(). | |
1616 | */ | |
1617 | struct wpa_scan_results * | |
1618 | wpa_supplicant_get_scan_results(struct wpa_supplicant *wpa_s, | |
1619 | struct scan_info *info, int new_scan) | |
1620 | { | |
1621 | struct wpa_scan_results *scan_res; | |
1622 | size_t i; | |
41e650ae | 1623 | int (*compar)(const void *, const void *) = wpa_scan_result_compar; |
9ba9fa07 | 1624 | |
17fbb751 | 1625 | scan_res = wpa_drv_get_scan_results2(wpa_s); |
9ba9fa07 | 1626 | if (scan_res == NULL) { |
f049052b | 1627 | wpa_dbg(wpa_s, MSG_DEBUG, "Failed to get scan results"); |
9ba9fa07 JM |
1628 | return NULL; |
1629 | } | |
c5f10e80 JM |
1630 | if (scan_res->fetch_time.sec == 0) { |
1631 | /* | |
1632 | * Make sure we have a valid timestamp if the driver wrapper | |
1633 | * does not set this. | |
1634 | */ | |
acb69cec | 1635 | os_get_reltime(&scan_res->fetch_time); |
c5f10e80 | 1636 | } |
d445a5cd | 1637 | filter_scan_res(wpa_s, scan_res); |
9ba9fa07 | 1638 | |
41e650ae | 1639 | #ifdef CONFIG_WPS |
3187fd90 | 1640 | if (wpas_wps_searching(wpa_s)) { |
f049052b BG |
1641 | wpa_dbg(wpa_s, MSG_DEBUG, "WPS: Order scan results with WPS " |
1642 | "provisioning rules"); | |
41e650ae JM |
1643 | compar = wpa_scan_result_wps_compar; |
1644 | } | |
1645 | #endif /* CONFIG_WPS */ | |
1646 | ||
9ba9fa07 | 1647 | qsort(scan_res->res, scan_res->num, sizeof(struct wpa_scan_res *), |
41e650ae | 1648 | compar); |
aa820e02 | 1649 | dump_scan_res(scan_res); |
9ba9fa07 JM |
1650 | |
1651 | wpa_bss_update_start(wpa_s); | |
1652 | for (i = 0; i < scan_res->num; i++) | |
c5f10e80 JM |
1653 | wpa_bss_update_scan_res(wpa_s, scan_res->res[i], |
1654 | &scan_res->fetch_time); | |
9ba9fa07 JM |
1655 | wpa_bss_update_end(wpa_s, info, new_scan); |
1656 | ||
1657 | return scan_res; | |
1658 | } | |
1659 | ||
1660 | ||
2c09af30 JM |
1661 | /** |
1662 | * wpa_supplicant_update_scan_results - Update scan results from the driver | |
1663 | * @wpa_s: Pointer to wpa_supplicant data | |
1664 | * Returns: 0 on success, -1 on failure | |
1665 | * | |
1666 | * This function updates the BSS table within wpa_supplicant based on the | |
1667 | * currently available scan results from the driver without requesting a new | |
1668 | * scan. This is used in cases where the driver indicates an association | |
1669 | * (including roaming within ESS) and wpa_supplicant does not yet have the | |
1670 | * needed information to complete the connection (e.g., to perform validation | |
1671 | * steps in 4-way handshake). | |
1672 | */ | |
9ba9fa07 JM |
1673 | int wpa_supplicant_update_scan_results(struct wpa_supplicant *wpa_s) |
1674 | { | |
1675 | struct wpa_scan_results *scan_res; | |
1676 | scan_res = wpa_supplicant_get_scan_results(wpa_s, NULL, 0); | |
1677 | if (scan_res == NULL) | |
1678 | return -1; | |
1679 | wpa_scan_results_free(scan_res); | |
1680 | ||
1681 | return 0; | |
1682 | } | |
66fe0f70 DS |
1683 | |
1684 | ||
1685 | /** | |
1686 | * scan_only_handler - Reports scan results | |
1687 | */ | |
1688 | void scan_only_handler(struct wpa_supplicant *wpa_s, | |
1689 | struct wpa_scan_results *scan_res) | |
1690 | { | |
1691 | wpa_dbg(wpa_s, MSG_DEBUG, "Scan-only results received"); | |
d81c73be JM |
1692 | if (wpa_s->last_scan_req == MANUAL_SCAN_REQ && |
1693 | wpa_s->manual_scan_use_id && wpa_s->own_scan_running) { | |
1694 | wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_SCAN_RESULTS "id=%u", | |
1695 | wpa_s->manual_scan_id); | |
1696 | wpa_s->manual_scan_use_id = 0; | |
1697 | } else { | |
1698 | wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_SCAN_RESULTS); | |
1699 | } | |
66fe0f70 DS |
1700 | wpas_notify_scan_results(wpa_s); |
1701 | wpas_notify_scan_done(wpa_s, 1); | |
d12a51b5 JM |
1702 | if (wpa_s->scan_work) { |
1703 | struct wpa_radio_work *work = wpa_s->scan_work; | |
1704 | wpa_s->scan_work = NULL; | |
1705 | radio_work_done(work); | |
1706 | } | |
66fe0f70 | 1707 | } |
407be00b JM |
1708 | |
1709 | ||
1710 | int wpas_scan_scheduled(struct wpa_supplicant *wpa_s) | |
1711 | { | |
1712 | return eloop_is_timeout_registered(wpa_supplicant_scan, wpa_s, NULL); | |
1713 | } | |
dd43aaa5 JM |
1714 | |
1715 | ||
1716 | struct wpa_driver_scan_params * | |
1717 | wpa_scan_clone_params(const struct wpa_driver_scan_params *src) | |
1718 | { | |
1719 | struct wpa_driver_scan_params *params; | |
1720 | size_t i; | |
1721 | u8 *n; | |
1722 | ||
1723 | params = os_zalloc(sizeof(*params)); | |
1724 | if (params == NULL) | |
1725 | return NULL; | |
1726 | ||
1727 | for (i = 0; i < src->num_ssids; i++) { | |
1728 | if (src->ssids[i].ssid) { | |
1729 | n = os_malloc(src->ssids[i].ssid_len); | |
1730 | if (n == NULL) | |
1731 | goto failed; | |
1732 | os_memcpy(n, src->ssids[i].ssid, | |
1733 | src->ssids[i].ssid_len); | |
1734 | params->ssids[i].ssid = n; | |
1735 | params->ssids[i].ssid_len = src->ssids[i].ssid_len; | |
1736 | } | |
1737 | } | |
1738 | params->num_ssids = src->num_ssids; | |
1739 | ||
1740 | if (src->extra_ies) { | |
1741 | n = os_malloc(src->extra_ies_len); | |
1742 | if (n == NULL) | |
1743 | goto failed; | |
1744 | os_memcpy(n, src->extra_ies, src->extra_ies_len); | |
1745 | params->extra_ies = n; | |
1746 | params->extra_ies_len = src->extra_ies_len; | |
1747 | } | |
1748 | ||
1749 | if (src->freqs) { | |
1750 | int len = int_array_len(src->freqs); | |
1751 | params->freqs = os_malloc((len + 1) * sizeof(int)); | |
1752 | if (params->freqs == NULL) | |
1753 | goto failed; | |
1754 | os_memcpy(params->freqs, src->freqs, (len + 1) * sizeof(int)); | |
1755 | } | |
1756 | ||
1757 | if (src->filter_ssids) { | |
1758 | params->filter_ssids = os_malloc(sizeof(params->filter_ssids) * | |
1759 | src->num_filter_ssids); | |
1760 | if (params->filter_ssids == NULL) | |
1761 | goto failed; | |
1762 | os_memcpy(params->filter_ssids, src->filter_ssids, | |
1763 | sizeof(params->filter_ssids) * src->num_filter_ssids); | |
1764 | params->num_filter_ssids = src->num_filter_ssids; | |
1765 | } | |
1766 | ||
1767 | params->filter_rssi = src->filter_rssi; | |
1768 | params->p2p_probe = src->p2p_probe; | |
1769 | params->only_new_results = src->only_new_results; | |
1770 | ||
1771 | return params; | |
1772 | ||
1773 | failed: | |
1774 | wpa_scan_free_params(params); | |
1775 | return NULL; | |
1776 | } | |
1777 | ||
1778 | ||
1779 | void wpa_scan_free_params(struct wpa_driver_scan_params *params) | |
1780 | { | |
1781 | size_t i; | |
1782 | ||
1783 | if (params == NULL) | |
1784 | return; | |
1785 | ||
1786 | for (i = 0; i < params->num_ssids; i++) | |
1787 | os_free((u8 *) params->ssids[i].ssid); | |
1788 | os_free((u8 *) params->extra_ies); | |
1789 | os_free(params->freqs); | |
1790 | os_free(params->filter_ssids); | |
1791 | os_free(params); | |
1792 | } |