drv_callbacks.c

Go to the documentation of this file.

#include "includes.h"

#include "hostapd.h"
#include "driver_i.h"
#include "ieee802_11.h"
#include "radius/radius.h"
#include "sta_info.h"
#include "accounting.h"
#include "tkip_countermeasures.h"
#include "ieee802_1x.h"
#include "wpa.h"
#include "iapp.h"
#include "wme.h"
#include "wps_hostapd.h"


struct prune_data {
        struct hostapd_data *hapd;
        const u8 *addr;
};

static int prune_associations(struct hostapd_iface *iface, void *ctx)
{
        struct prune_data *data = ctx;
        struct sta_info *osta;
        struct hostapd_data *ohapd;
        size_t j;

        for (j = 0; j < iface->num_bss; j++) {
                ohapd = iface->bss[j];
                if (ohapd == data->hapd)
                        continue;
                osta = ap_get_sta(ohapd, data->addr);
                if (!osta)
                        continue;

                ap_sta_disassociate(ohapd, osta, WLAN_REASON_UNSPECIFIED);
        }

        return 0;
}

static void hostapd_prune_associations(struct hostapd_data *hapd,
                                       struct sta_info *sta)
{
        struct prune_data data;
        data.hapd = hapd;
        data.addr = sta->addr;
        hostapd_for_each_interface(prune_associations, &data);
}


void hostapd_new_assoc_sta(struct hostapd_data *hapd, struct sta_info *sta,
                           int reassoc)
{
        if (hapd->tkip_countermeasures) {
                hostapd_sta_deauth(hapd, sta->addr,
                                   WLAN_REASON_MICHAEL_MIC_FAILURE);
                return;
        }

        hostapd_prune_associations(hapd, sta);

        /* IEEE 802.11F (IAPP) */
        if (hapd->conf->ieee802_11f)
                iapp_new_station(hapd->iapp, sta);

        /* Start accounting here, if IEEE 802.1X and WPA are not used.
         * IEEE 802.1X/WPA code will start accounting after the station has
         * been authorized. */
        if (!hapd->conf->ieee802_1x && !hapd->conf->wpa)
                accounting_sta_start(hapd, sta);

        hostapd_wmm_sta_config(hapd, sta);

        /* Start IEEE 802.1X authentication process for new stations */
        ieee802_1x_new_station(hapd, sta);
        if (reassoc) {
                if (sta->auth_alg != WLAN_AUTH_FT &&
                    !(sta->flags & (WLAN_STA_WPS | WLAN_STA_MAYBE_WPS)))
                        wpa_auth_sm_event(sta->wpa_sm, WPA_REAUTH);
        } else
                wpa_auth_sta_associated(hapd->wpa_auth, sta->wpa_sm);
}


void hostapd_tx_status(struct hostapd_data *hapd, const u8 *addr,
                       const u8 *buf, size_t len, int ack)
{
        struct sta_info *sta;
        struct hostapd_iface *iface = hapd->iface;

        sta = ap_get_sta(hapd, addr);
        if (sta == NULL && iface->num_bss > 1) {
                size_t j;
                for (j = 0; j < iface->num_bss; j++) {
                        hapd = iface->bss[j];
                        sta = ap_get_sta(hapd, addr);
                        if (sta)
                                break;
                }
        }
        if (sta == NULL)
                return;
        if (sta->flags & WLAN_STA_PENDING_POLL) {
                wpa_printf(MSG_DEBUG, "STA " MACSTR " %s pending "
                           "activity poll", MAC2STR(sta->addr),
                           ack ? "ACKed" : "did not ACK");
                if (ack)
                        sta->flags &= ~WLAN_STA_PENDING_POLL;
        }

        ieee802_1x_tx_status(hapd, sta, buf, len, ack);
}


static const u8 * get_hdr_bssid(const struct ieee80211_hdr *hdr, size_t len)
{
        u16 fc, type, stype;

        /*
         * PS-Poll frames are 16 bytes. All other frames are
         * 24 bytes or longer.
         */
        if (len < 16)
                return NULL;

        fc = le_to_host16(hdr->frame_control);
        type = WLAN_FC_GET_TYPE(fc);
        stype = WLAN_FC_GET_STYPE(fc);

        switch (type) {
        case WLAN_FC_TYPE_DATA:
                if (len < 24)
                        return NULL;
                switch (fc & (WLAN_FC_FROMDS | WLAN_FC_TODS)) {
                case WLAN_FC_TODS:
                        return hdr->addr1;
                case WLAN_FC_FROMDS:
                        return hdr->addr2;
                default:
                        return NULL;
                }
        case WLAN_FC_TYPE_CTRL:
                if (stype != WLAN_FC_STYPE_PSPOLL)
                        return NULL;
                return hdr->addr1;
        case WLAN_FC_TYPE_MGMT:
                return hdr->addr3;
        default:
                return NULL;
        }
}


#define HAPD_BROADCAST ((struct hostapd_data *) -1)

static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
                                            const u8 *bssid)
{
        size_t i;

        if (bssid == NULL)
                return NULL;
        if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
            bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
                return HAPD_BROADCAST;

        for (i = 0; i < iface->num_bss; i++) {
                if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
                        return iface->bss[i];
        }

        return NULL;
}


void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
                                 const struct ieee80211_hdr *hdr, size_t len)
{
        struct sta_info *sta;
        const u8 *addr;

        hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
        if (hapd == NULL || hapd == HAPD_BROADCAST)
                return;

        addr = hdr->addr2;
        sta = ap_get_sta(hapd, addr);
        if (!sta || !(sta->flags & WLAN_STA_ASSOC)) {
                wpa_printf(MSG_DEBUG, "Data/PS-poll frame from not associated "
                           "STA " MACSTR, MAC2STR(addr));
                if (sta && (sta->flags & WLAN_STA_AUTH))
                        hostapd_sta_disassoc(
                                hapd, addr,
                                WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
                else
                        hostapd_sta_deauth(
                                hapd, addr,
                                WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA);
        }
}


int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
                        const u8 *ie, size_t ielen)
{
        struct sta_info *sta;
        int new_assoc, res;

        hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
                       HOSTAPD_LEVEL_INFO, "associated");

        sta = ap_get_sta(hapd, addr);
        if (sta) {
                accounting_sta_stop(hapd, sta);
        } else {
                sta = ap_sta_add(hapd, addr);
                if (sta == NULL)
                        return -1;
        }
        sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS);

        if (hapd->conf->wpa) {
                if (ie == NULL || ielen == 0) {
                        if (hapd->conf->wps_state) {
                                wpa_printf(MSG_DEBUG, "STA did not include "
                                           "WPA/RSN IE in (Re)Association "
                                           "Request - possible WPS use");
                                sta->flags |= WLAN_STA_MAYBE_WPS;
                                goto skip_wpa_check;
                        }

                        wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
                        return -1;
                }
                if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
                    os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
                        sta->flags |= WLAN_STA_WPS;
                        goto skip_wpa_check;
                }

                if (sta->wpa_sm == NULL)
                        sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
                                                        sta->addr);
                if (sta->wpa_sm == NULL) {
                        wpa_printf(MSG_ERROR, "Failed to initialize WPA state "
                                   "machine");
                        return -1;
                }
                res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
                                          ie, ielen, NULL, 0);
                if (res != WPA_IE_OK) {
                        int resp;
                        wpa_printf(MSG_DEBUG, "WPA/RSN information element "
                                   "rejected? (res %u)", res);
                        wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
                        if (res == WPA_INVALID_GROUP)
                                resp = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
                        else if (res == WPA_INVALID_PAIRWISE)
                                resp = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
                        else if (res == WPA_INVALID_AKMP)
                                resp = WLAN_REASON_AKMP_NOT_VALID;
#ifdef CONFIG_IEEE80211W
                        else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION)
                                resp = WLAN_REASON_INVALID_IE;
                        else if (res == WPA_INVALID_MGMT_GROUP_CIPHER)
                                resp = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
#endif /* CONFIG_IEEE80211W */
                        else
                                resp = WLAN_REASON_INVALID_IE;
                        hostapd_sta_disassoc(hapd, sta->addr, resp);
                        ap_free_sta(hapd, sta);
                        return -1;
                }
        } else if (hapd->conf->wps_state) {
                if (ie && ielen > 4 && ie[0] == 0xdd && ie[1] >= 4 &&
                    os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
                        sta->flags |= WLAN_STA_WPS;
                } else
                        sta->flags |= WLAN_STA_MAYBE_WPS;
        }
skip_wpa_check:

        new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
        sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
        wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);

        hostapd_new_assoc_sta(hapd, sta, !new_assoc);

        ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);

        return 0;
}


void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
{
        struct sta_info *sta;

        hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
                       HOSTAPD_LEVEL_INFO, "disassociated");

        sta = ap_get_sta(hapd, addr);
        if (sta == NULL) {
                wpa_printf(MSG_DEBUG, "Disassociation notification for "
                           "unknown STA " MACSTR, MAC2STR(addr));
                return;
        }

        sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
        wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
        sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
        ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
        ap_free_sta(hapd, sta);
}


void hostapd_eapol_receive(struct hostapd_data *hapd, const u8 *sa,
                           const u8 *buf, size_t len)
{
        ieee802_1x_receive(hapd, sa, buf, len);
}


#ifdef NEED_AP_MLME
void hostapd_mgmt_rx(struct hostapd_data *hapd, u8 *buf, size_t len,
                     u16 stype, struct hostapd_frame_info *fi)
{
        struct hostapd_iface *iface = hapd->iface;
        struct ieee80211_hdr *hdr;
        const u8 *bssid;

        hdr = (struct ieee80211_hdr *) buf;
        bssid = get_hdr_bssid(hdr, len);
        if (bssid == NULL)
                return;

        hapd = get_hapd_bssid(iface, bssid);
        if (hapd == NULL) {
                u16 fc;
                fc = le_to_host16(hdr->frame_control);

                /*
                 * Drop frames to unknown BSSIDs except for Beacon frames which
                 * could be used to update neighbor information.
                 */
                if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
                    WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
                        hapd = iface->bss[0];
                else
                        return;
        }

        if (hapd == HAPD_BROADCAST) {
                size_t i;
                for (i = 0; i < iface->num_bss; i++)
                        ieee802_11_mgmt(iface->bss[i], buf, len, stype, fi);
        } else
                ieee802_11_mgmt(hapd, buf, len, stype, fi);
}


void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, u8 *buf, size_t len,
                        u16 stype, int ok)
{
        struct ieee80211_hdr *hdr;
        hdr = (struct ieee80211_hdr *) buf;
        hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
        if (hapd == NULL || hapd == HAPD_BROADCAST)
                return;
        ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
}
#endif /* NEED_AP_MLME */


void hostapd_michael_mic_failure(struct hostapd_data *hapd, const u8 *addr)
{
        michael_mic_failure(hapd, addr, 1);
}


struct hostapd_data * hostapd_sta_get_bss(struct hostapd_data *hapd,
                                          const u8 *addr)
{
        struct hostapd_iface *iface = hapd->iface;
        size_t j;

        for (j = 0; j < iface->num_bss; j++) {
                hapd = iface->bss[j];
                if (ap_get_sta(hapd, addr))
                        return hapd;
        }

        return NULL;
}


#ifndef CONFIG_AP
void wpa_supplicant_event(void *ctx, wpa_event_type event,
                          union wpa_event_data *data)
{
        struct hostapd_data *hapd = ctx;

        switch (event) {
        case EVENT_MICHAEL_MIC_FAILURE:
                michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
                break;
        case EVENT_SCAN_RESULTS:
                if (hapd->iface->scan_cb)
                        hapd->iface->scan_cb(hapd->iface);
                break;
        default:
                wpa_printf(MSG_DEBUG, "Unknown event %d", event);
                break;
        }
}
#endif /* CONFIG_AP */


void hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa,
                         const u8 *ie, size_t ie_len)
{
        size_t i;

        for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++)
                hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
                                        sa, ie, ie_len);
}