2009-01-09 10:27:03 -05:00
|
|
|
/*
|
|
|
|
* hostapd / Callback functions for driver wrappers
|
|
|
|
* Copyright (c) 2002-2009, Jouni Malinen <j@w1.fi>
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License version 2 as
|
|
|
|
* published by the Free Software Foundation.
|
|
|
|
*
|
|
|
|
* Alternatively, this software may be distributed under the terms of BSD
|
|
|
|
* license.
|
|
|
|
*
|
|
|
|
* See README and COPYING for more details.
|
|
|
|
*/
|
|
|
|
|
2009-12-25 17:05:40 -05:00
|
|
|
#include "utils/includes.h"
|
2009-01-09 10:27:03 -05:00
|
|
|
|
2009-12-25 17:05:40 -05:00
|
|
|
#include "utils/common.h"
|
2009-01-09 10:27:03 -05:00
|
|
|
#include "radius/radius.h"
|
2009-12-25 17:21:22 -05:00
|
|
|
#include "drivers/driver.h"
|
2009-12-25 17:31:51 -05:00
|
|
|
#include "common/ieee802_11_defs.h"
|
2010-04-03 14:03:13 -04:00
|
|
|
#include "common/ieee802_11_common.h"
|
Maintain internal entropy pool for augmenting random number generation
By default, make hostapd and wpa_supplicant maintain an internal
entropy pool that is fed with following information:
hostapd:
- Probe Request frames (timing, RSSI)
- Association events (timing)
- SNonce from Supplicants
wpa_supplicant:
- Scan results (timing, signal/noise)
- Association events (timing)
The internal pool is used to augment the random numbers generated
with the OS mechanism (os_get_random()). While the internal
implementation is not expected to be very strong due to limited
amount of generic (non-platform specific) information to feed the
pool, this may strengthen key derivation on some devices that are
not configured to provide strong random numbers through
os_get_random() (e.g., /dev/urandom on Linux/BSD).
This new mechanism is not supposed to replace proper OS provided
random number generation mechanism. The OS mechanism needs to be
initialized properly (e.g., hw random number generator,
maintaining entropy pool over reboots, etc.) for any of the
security assumptions to hold.
If the os_get_random() is known to provide strong ramdom data (e.g., on
Linux/BSD, the board in question is known to have reliable source of
random data from /dev/urandom), the internal hostapd random pool can be
disabled. This will save some in binary size and CPU use. However, this
should only be considered for builds that are known to be used on
devices that meet the requirements described above. The internal pool
is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-23 18:29:40 -05:00
|
|
|
#include "crypto/random.h"
|
2010-07-18 17:30:25 -04:00
|
|
|
#include "p2p/p2p.h"
|
2010-05-26 10:16:14 -04:00
|
|
|
#include "wps/wps.h"
|
2009-12-25 17:05:40 -05:00
|
|
|
#include "hostapd.h"
|
|
|
|
#include "ieee802_11.h"
|
|
|
|
#include "sta_info.h"
|
|
|
|
#include "accounting.h"
|
|
|
|
#include "tkip_countermeasures.h"
|
|
|
|
#include "ieee802_1x.h"
|
|
|
|
#include "wpa_auth.h"
|
|
|
|
#include "wps_hostapd.h"
|
2010-11-24 08:36:02 -05:00
|
|
|
#include "ap_drv_ops.h"
|
2009-12-25 17:12:25 -05:00
|
|
|
#include "ap_config.h"
|
2009-01-09 10:27:03 -05:00
|
|
|
|
|
|
|
|
|
|
|
int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
|
2011-10-16 10:49:02 -04:00
|
|
|
const u8 *req_ies, size_t req_ies_len, int reassoc)
|
2009-01-09 10:27:03 -05:00
|
|
|
{
|
|
|
|
struct sta_info *sta;
|
|
|
|
int new_assoc, res;
|
2010-04-03 14:03:13 -04:00
|
|
|
struct ieee802_11_elems elems;
|
2011-10-16 10:49:02 -04:00
|
|
|
const u8 *ie;
|
|
|
|
size_t ielen;
|
2011-10-16 10:57:27 -04:00
|
|
|
u16 reason = WLAN_REASON_UNSPECIFIED;
|
2009-01-09 10:27:03 -05:00
|
|
|
|
2010-04-07 03:01:49 -04:00
|
|
|
if (addr == NULL) {
|
|
|
|
/*
|
|
|
|
* This could potentially happen with unexpected event from the
|
|
|
|
* driver wrapper. This was seen at least in one case where the
|
|
|
|
* driver ended up being set to station mode while hostapd was
|
|
|
|
* running, so better make sure we stop processing such an
|
|
|
|
* event here.
|
|
|
|
*/
|
|
|
|
wpa_printf(MSG_DEBUG, "hostapd_notif_assoc: Skip event with "
|
|
|
|
"no address");
|
|
|
|
return -1;
|
|
|
|
}
|
Maintain internal entropy pool for augmenting random number generation
By default, make hostapd and wpa_supplicant maintain an internal
entropy pool that is fed with following information:
hostapd:
- Probe Request frames (timing, RSSI)
- Association events (timing)
- SNonce from Supplicants
wpa_supplicant:
- Scan results (timing, signal/noise)
- Association events (timing)
The internal pool is used to augment the random numbers generated
with the OS mechanism (os_get_random()). While the internal
implementation is not expected to be very strong due to limited
amount of generic (non-platform specific) information to feed the
pool, this may strengthen key derivation on some devices that are
not configured to provide strong random numbers through
os_get_random() (e.g., /dev/urandom on Linux/BSD).
This new mechanism is not supposed to replace proper OS provided
random number generation mechanism. The OS mechanism needs to be
initialized properly (e.g., hw random number generator,
maintaining entropy pool over reboots, etc.) for any of the
security assumptions to hold.
If the os_get_random() is known to provide strong ramdom data (e.g., on
Linux/BSD, the board in question is known to have reliable source of
random data from /dev/urandom), the internal hostapd random pool can be
disabled. This will save some in binary size and CPU use. However, this
should only be considered for builds that are known to be used on
devices that meet the requirements described above. The internal pool
is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-23 18:29:40 -05:00
|
|
|
random_add_randomness(addr, ETH_ALEN);
|
2010-04-07 03:01:49 -04:00
|
|
|
|
2009-01-09 10:27:03 -05:00
|
|
|
hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
|
|
|
|
HOSTAPD_LEVEL_INFO, "associated");
|
|
|
|
|
2011-10-16 10:49:02 -04:00
|
|
|
ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0);
|
2010-04-03 14:03:13 -04:00
|
|
|
if (elems.wps_ie) {
|
|
|
|
ie = elems.wps_ie - 2;
|
|
|
|
ielen = elems.wps_ie_len + 2;
|
|
|
|
wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq");
|
|
|
|
} else if (elems.rsn_ie) {
|
|
|
|
ie = elems.rsn_ie - 2;
|
|
|
|
ielen = elems.rsn_ie_len + 2;
|
|
|
|
wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq");
|
|
|
|
} else if (elems.wpa_ie) {
|
|
|
|
ie = elems.wpa_ie - 2;
|
|
|
|
ielen = elems.wpa_ie_len + 2;
|
|
|
|
wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq");
|
|
|
|
} else {
|
|
|
|
ie = NULL;
|
|
|
|
ielen = 0;
|
|
|
|
wpa_printf(MSG_DEBUG, "STA did not include WPS/RSN/WPA IE in "
|
|
|
|
"(Re)AssocReq");
|
|
|
|
}
|
|
|
|
|
2009-01-09 10:27:03 -05:00
|
|
|
sta = ap_get_sta(hapd, addr);
|
|
|
|
if (sta) {
|
|
|
|
accounting_sta_stop(hapd, sta);
|
|
|
|
} else {
|
|
|
|
sta = ap_sta_add(hapd, addr);
|
|
|
|
if (sta == NULL)
|
|
|
|
return -1;
|
|
|
|
}
|
2011-08-28 12:16:59 -04:00
|
|
|
sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
|
2009-01-09 10:27:03 -05:00
|
|
|
|
2010-07-18 17:30:25 -04:00
|
|
|
#ifdef CONFIG_P2P
|
|
|
|
if (elems.p2p) {
|
|
|
|
wpabuf_free(sta->p2p_ie);
|
2011-10-16 10:49:02 -04:00
|
|
|
sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
|
2010-07-18 17:30:25 -04:00
|
|
|
P2P_IE_VENDOR_TYPE);
|
|
|
|
}
|
|
|
|
#endif /* CONFIG_P2P */
|
|
|
|
|
2009-01-09 10:27:03 -05:00
|
|
|
if (hapd->conf->wpa) {
|
|
|
|
if (ie == NULL || ielen == 0) {
|
2011-09-12 15:23:45 -04:00
|
|
|
#ifdef CONFIG_WPS
|
2009-01-09 10:27:03 -05:00
|
|
|
if (hapd->conf->wps_state) {
|
|
|
|
wpa_printf(MSG_DEBUG, "STA did not include "
|
|
|
|
"WPA/RSN IE in (Re)Association "
|
|
|
|
"Request - possible WPS use");
|
|
|
|
sta->flags |= WLAN_STA_MAYBE_WPS;
|
|
|
|
goto skip_wpa_check;
|
|
|
|
}
|
2011-09-12 15:23:45 -04:00
|
|
|
#endif /* CONFIG_WPS */
|
2009-01-09 10:27:03 -05:00
|
|
|
|
|
|
|
wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
|
|
|
|
return -1;
|
|
|
|
}
|
2011-09-12 15:23:45 -04:00
|
|
|
#ifdef CONFIG_WPS
|
2009-01-09 10:27:03 -05:00
|
|
|
if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
|
|
|
|
os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
|
2011-08-28 12:16:59 -04:00
|
|
|
struct wpabuf *wps;
|
2009-01-09 10:27:03 -05:00
|
|
|
sta->flags |= WLAN_STA_WPS;
|
2011-08-28 12:16:59 -04:00
|
|
|
wps = ieee802_11_vendor_ie_concat(ie, ielen,
|
|
|
|
WPS_IE_VENDOR_TYPE);
|
|
|
|
if (wps) {
|
|
|
|
if (wps_is_20(wps)) {
|
|
|
|
wpa_printf(MSG_DEBUG, "WPS: STA "
|
|
|
|
"supports WPS 2.0");
|
|
|
|
sta->flags |= WLAN_STA_WPS2;
|
|
|
|
}
|
|
|
|
wpabuf_free(wps);
|
|
|
|
}
|
2009-01-09 10:27:03 -05:00
|
|
|
goto skip_wpa_check;
|
|
|
|
}
|
2011-09-12 15:23:45 -04:00
|
|
|
#endif /* CONFIG_WPS */
|
2009-01-09 10:27:03 -05:00
|
|
|
|
|
|
|
if (sta->wpa_sm == NULL)
|
|
|
|
sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
|
|
|
|
sta->addr);
|
|
|
|
if (sta->wpa_sm == NULL) {
|
|
|
|
wpa_printf(MSG_ERROR, "Failed to initialize WPA state "
|
|
|
|
"machine");
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
|
|
|
|
ie, ielen, NULL, 0);
|
|
|
|
if (res != WPA_IE_OK) {
|
|
|
|
wpa_printf(MSG_DEBUG, "WPA/RSN information element "
|
|
|
|
"rejected? (res %u)", res);
|
|
|
|
wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
|
2009-11-11 10:33:55 -05:00
|
|
|
if (res == WPA_INVALID_GROUP)
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
|
2009-11-11 10:33:55 -05:00
|
|
|
else if (res == WPA_INVALID_PAIRWISE)
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
|
2009-11-11 10:33:55 -05:00
|
|
|
else if (res == WPA_INVALID_AKMP)
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_AKMP_NOT_VALID;
|
2009-11-11 10:33:55 -05:00
|
|
|
#ifdef CONFIG_IEEE80211W
|
|
|
|
else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION)
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_INVALID_IE;
|
2009-11-11 10:33:55 -05:00
|
|
|
else if (res == WPA_INVALID_MGMT_GROUP_CIPHER)
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
|
2009-11-11 10:33:55 -05:00
|
|
|
#endif /* CONFIG_IEEE80211W */
|
|
|
|
else
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_INVALID_IE;
|
|
|
|
goto fail;
|
2009-01-09 10:27:03 -05:00
|
|
|
}
|
2009-02-23 13:57:07 -05:00
|
|
|
} else if (hapd->conf->wps_state) {
|
2011-09-12 15:23:45 -04:00
|
|
|
#ifdef CONFIG_WPS
|
2011-08-28 12:16:59 -04:00
|
|
|
struct wpabuf *wps;
|
2011-10-16 10:49:02 -04:00
|
|
|
if (req_ies)
|
|
|
|
wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
|
2011-10-16 09:41:51 -04:00
|
|
|
WPS_IE_VENDOR_TYPE);
|
|
|
|
else
|
|
|
|
wps = NULL;
|
2010-05-26 10:16:14 -04:00
|
|
|
#ifdef CONFIG_WPS_STRICT
|
2011-10-16 09:41:51 -04:00
|
|
|
if (wps && wps_validate_assoc_req(wps) < 0) {
|
2011-10-16 10:57:27 -04:00
|
|
|
reason = WLAN_REASON_INVALID_IE;
|
2011-10-16 09:41:51 -04:00
|
|
|
wpabuf_free(wps);
|
2011-10-16 10:57:27 -04:00
|
|
|
goto fail;
|
2010-05-26 10:16:14 -04:00
|
|
|
}
|
|
|
|
#endif /* CONFIG_WPS_STRICT */
|
2011-10-16 09:41:51 -04:00
|
|
|
if (wps) {
|
2009-02-23 13:57:07 -05:00
|
|
|
sta->flags |= WLAN_STA_WPS;
|
2011-10-16 09:41:51 -04:00
|
|
|
if (wps_is_20(wps)) {
|
2011-08-28 12:16:59 -04:00
|
|
|
wpa_printf(MSG_DEBUG, "WPS: STA supports "
|
|
|
|
"WPS 2.0");
|
|
|
|
sta->flags |= WLAN_STA_WPS2;
|
|
|
|
}
|
2009-02-23 13:57:07 -05:00
|
|
|
} else
|
|
|
|
sta->flags |= WLAN_STA_MAYBE_WPS;
|
2011-08-28 12:16:59 -04:00
|
|
|
wpabuf_free(wps);
|
2011-09-12 15:23:45 -04:00
|
|
|
#endif /* CONFIG_WPS */
|
2009-01-09 10:27:03 -05:00
|
|
|
}
|
2011-09-12 15:23:45 -04:00
|
|
|
#ifdef CONFIG_WPS
|
2009-01-09 10:27:03 -05:00
|
|
|
skip_wpa_check:
|
2011-09-12 15:23:45 -04:00
|
|
|
#endif /* CONFIG_WPS */
|
2009-01-09 10:27:03 -05:00
|
|
|
|
|
|
|
new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
|
|
|
|
sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
|
|
|
|
wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
|
|
|
|
|
|
|
|
hostapd_new_assoc_sta(hapd, sta, !new_assoc);
|
|
|
|
|
|
|
|
ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
|
|
|
|
|
2010-07-18 17:30:25 -04:00
|
|
|
#ifdef CONFIG_P2P
|
2011-11-13 15:33:32 -05:00
|
|
|
if (req_ies) {
|
|
|
|
p2p_group_notif_assoc(hapd->p2p_group, sta->addr,
|
|
|
|
req_ies, req_ies_len);
|
|
|
|
}
|
2010-07-18 17:30:25 -04:00
|
|
|
#endif /* CONFIG_P2P */
|
|
|
|
|
2009-01-09 10:27:03 -05:00
|
|
|
return 0;
|
2011-10-16 10:57:27 -04:00
|
|
|
|
|
|
|
fail:
|
|
|
|
hostapd_drv_sta_disassoc(hapd, sta->addr, reason);
|
|
|
|
ap_free_sta(hapd, sta);
|
|
|
|
return -1;
|
2009-01-09 10:27:03 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
|
|
|
|
{
|
|
|
|
struct sta_info *sta;
|
|
|
|
|
2010-10-22 10:43:23 -04:00
|
|
|
if (addr == NULL) {
|
|
|
|
/*
|
|
|
|
* This could potentially happen with unexpected event from the
|
|
|
|
* driver wrapper. This was seen at least in one case where the
|
|
|
|
* driver ended up reporting a station mode event while hostapd
|
|
|
|
* was running, so better make sure we stop processing such an
|
|
|
|
* event here.
|
|
|
|
*/
|
|
|
|
wpa_printf(MSG_DEBUG, "hostapd_notif_disassoc: Skip event "
|
|
|
|
"with no address");
|
2010-10-25 06:38:06 -04:00
|
|
|
return;
|
2010-10-22 10:43:23 -04:00
|
|
|
}
|
|
|
|
|
2009-01-09 10:27:03 -05:00
|
|
|
hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
|
|
|
|
HOSTAPD_LEVEL_INFO, "disassociated");
|
|
|
|
|
|
|
|
sta = ap_get_sta(hapd, addr);
|
|
|
|
if (sta == NULL) {
|
|
|
|
wpa_printf(MSG_DEBUG, "Disassociation notification for "
|
|
|
|
"unknown STA " MACSTR, MAC2STR(addr));
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2011-11-03 16:17:41 -04:00
|
|
|
ap_sta_set_authorized(hapd, sta, 0);
|
2009-01-09 10:27:03 -05:00
|
|
|
sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
|
|
|
|
wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
|
|
|
|
sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
|
|
|
|
ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
|
|
|
|
ap_free_sta(hapd, sta);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2010-12-28 10:15:01 -05:00
|
|
|
void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr)
|
|
|
|
{
|
|
|
|
struct sta_info *sta = ap_get_sta(hapd, addr);
|
|
|
|
|
|
|
|
if (!sta || !hapd->conf->disassoc_low_ack)
|
|
|
|
return;
|
|
|
|
|
|
|
|
hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
|
|
|
|
HOSTAPD_LEVEL_INFO, "disconnected due to excessive "
|
|
|
|
"missing ACKs");
|
|
|
|
hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK);
|
|
|
|
if (sta)
|
|
|
|
ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2011-07-15 13:25:53 -04:00
|
|
|
int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da,
|
|
|
|
const u8 *bssid, const u8 *ie, size_t ie_len)
|
2011-02-08 07:32:35 -05:00
|
|
|
{
|
|
|
|
size_t i;
|
|
|
|
int ret = 0;
|
|
|
|
|
2011-04-13 19:39:25 -04:00
|
|
|
if (sa == NULL || ie == NULL)
|
|
|
|
return -1;
|
|
|
|
|
|
|
|
random_add_randomness(sa, ETH_ALEN);
|
2011-02-08 07:32:35 -05:00
|
|
|
for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) {
|
|
|
|
if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
|
2011-07-15 13:25:53 -04:00
|
|
|
sa, da, bssid, ie, ie_len) > 0) {
|
2011-02-08 07:32:35 -05:00
|
|
|
ret = 1;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2009-12-13 16:05:39 -05:00
|
|
|
#ifdef HOSTAPD
|
|
|
|
|
2009-08-14 13:01:41 -04:00
|
|
|
#ifdef NEED_AP_MLME
|
2009-12-13 16:05:39 -05:00
|
|
|
|
|
|
|
#define HAPD_BROADCAST ((struct hostapd_data *) -1)
|
|
|
|
|
|
|
|
static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
|
|
|
|
const u8 *bssid)
|
|
|
|
{
|
|
|
|
size_t i;
|
|
|
|
|
|
|
|
if (bssid == NULL)
|
|
|
|
return NULL;
|
|
|
|
if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
|
|
|
|
bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
|
|
|
|
return HAPD_BROADCAST;
|
|
|
|
|
|
|
|
for (i = 0; i < iface->num_bss; i++) {
|
|
|
|
if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
|
|
|
|
return iface->bss[i];
|
|
|
|
}
|
|
|
|
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
|
2011-10-20 14:51:32 -04:00
|
|
|
const u8 *bssid, const u8 *addr,
|
|
|
|
int wds)
|
2009-12-13 16:05:39 -05:00
|
|
|
{
|
2011-10-20 14:51:32 -04:00
|
|
|
hapd = get_hapd_bssid(hapd->iface, bssid);
|
2009-12-13 16:05:39 -05:00
|
|
|
if (hapd == NULL || hapd == HAPD_BROADCAST)
|
|
|
|
return;
|
|
|
|
|
2011-10-20 14:51:32 -04:00
|
|
|
ieee802_11_rx_from_unknown(hapd, addr, wds);
|
2009-12-13 16:05:39 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
|
2010-01-03 05:37:02 -05:00
|
|
|
static void hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt)
|
2009-01-09 10:27:03 -05:00
|
|
|
{
|
2009-04-17 06:29:29 -04:00
|
|
|
struct hostapd_iface *iface = hapd->iface;
|
2009-12-13 16:25:30 -05:00
|
|
|
const struct ieee80211_hdr *hdr;
|
2009-04-17 06:29:29 -04:00
|
|
|
const u8 *bssid;
|
2010-01-03 05:37:02 -05:00
|
|
|
struct hostapd_frame_info fi;
|
2009-04-17 06:29:29 -04:00
|
|
|
|
2010-01-03 05:37:02 -05:00
|
|
|
hdr = (const struct ieee80211_hdr *) rx_mgmt->frame;
|
|
|
|
bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len);
|
2009-04-17 06:29:29 -04:00
|
|
|
if (bssid == NULL)
|
|
|
|
return;
|
|
|
|
|
|
|
|
hapd = get_hapd_bssid(iface, bssid);
|
|
|
|
if (hapd == NULL) {
|
|
|
|
u16 fc;
|
|
|
|
fc = le_to_host16(hdr->frame_control);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Drop frames to unknown BSSIDs except for Beacon frames which
|
|
|
|
* could be used to update neighbor information.
|
|
|
|
*/
|
|
|
|
if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
|
|
|
|
WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
|
|
|
|
hapd = iface->bss[0];
|
|
|
|
else
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2010-01-03 05:37:02 -05:00
|
|
|
os_memset(&fi, 0, sizeof(fi));
|
|
|
|
fi.datarate = rx_mgmt->datarate;
|
|
|
|
fi.ssi_signal = rx_mgmt->ssi_signal;
|
|
|
|
|
2009-04-17 06:29:29 -04:00
|
|
|
if (hapd == HAPD_BROADCAST) {
|
|
|
|
size_t i;
|
|
|
|
for (i = 0; i < iface->num_bss; i++)
|
2010-01-03 05:37:02 -05:00
|
|
|
ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame,
|
|
|
|
rx_mgmt->frame_len, &fi);
|
2009-04-17 06:29:29 -04:00
|
|
|
} else
|
2010-01-03 05:37:02 -05:00
|
|
|
ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len, &fi);
|
Maintain internal entropy pool for augmenting random number generation
By default, make hostapd and wpa_supplicant maintain an internal
entropy pool that is fed with following information:
hostapd:
- Probe Request frames (timing, RSSI)
- Association events (timing)
- SNonce from Supplicants
wpa_supplicant:
- Scan results (timing, signal/noise)
- Association events (timing)
The internal pool is used to augment the random numbers generated
with the OS mechanism (os_get_random()). While the internal
implementation is not expected to be very strong due to limited
amount of generic (non-platform specific) information to feed the
pool, this may strengthen key derivation on some devices that are
not configured to provide strong random numbers through
os_get_random() (e.g., /dev/urandom on Linux/BSD).
This new mechanism is not supposed to replace proper OS provided
random number generation mechanism. The OS mechanism needs to be
initialized properly (e.g., hw random number generator,
maintaining entropy pool over reboots, etc.) for any of the
security assumptions to hold.
If the os_get_random() is known to provide strong ramdom data (e.g., on
Linux/BSD, the board in question is known to have reliable source of
random data from /dev/urandom), the internal hostapd random pool can be
disabled. This will save some in binary size and CPU use. However, this
should only be considered for builds that are known to be used on
devices that meet the requirements described above. The internal pool
is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-23 18:29:40 -05:00
|
|
|
|
|
|
|
random_add_randomness(&fi, sizeof(fi));
|
2009-01-09 10:27:03 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
|
2011-06-21 13:55:46 -04:00
|
|
|
static void hostapd_rx_action(struct hostapd_data *hapd,
|
|
|
|
struct rx_action *rx_action)
|
|
|
|
{
|
|
|
|
struct rx_mgmt rx_mgmt;
|
|
|
|
u8 *buf;
|
|
|
|
struct ieee80211_hdr *hdr;
|
|
|
|
|
|
|
|
wpa_printf(MSG_DEBUG, "EVENT_RX_ACTION DA=" MACSTR " SA=" MACSTR
|
|
|
|
" BSSID=" MACSTR " category=%u",
|
|
|
|
MAC2STR(rx_action->da), MAC2STR(rx_action->sa),
|
|
|
|
MAC2STR(rx_action->bssid), rx_action->category);
|
|
|
|
wpa_hexdump(MSG_MSGDUMP, "Received action frame contents",
|
|
|
|
rx_action->data, rx_action->len);
|
|
|
|
|
|
|
|
buf = os_zalloc(24 + 1 + rx_action->len);
|
|
|
|
if (buf == NULL)
|
|
|
|
return;
|
|
|
|
hdr = (struct ieee80211_hdr *) buf;
|
|
|
|
hdr->frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT,
|
|
|
|
WLAN_FC_STYPE_ACTION);
|
|
|
|
if (rx_action->category == WLAN_ACTION_SA_QUERY) {
|
|
|
|
/*
|
|
|
|
* Assume frame was protected; it would have been dropped if
|
|
|
|
* not.
|
|
|
|
*/
|
|
|
|
hdr->frame_control |= host_to_le16(WLAN_FC_ISWEP);
|
|
|
|
}
|
|
|
|
os_memcpy(hdr->addr1, rx_action->da, ETH_ALEN);
|
|
|
|
os_memcpy(hdr->addr2, rx_action->sa, ETH_ALEN);
|
|
|
|
os_memcpy(hdr->addr3, rx_action->bssid, ETH_ALEN);
|
|
|
|
buf[24] = rx_action->category;
|
|
|
|
os_memcpy(buf + 24 + 1, rx_action->data, rx_action->len);
|
|
|
|
os_memset(&rx_mgmt, 0, sizeof(rx_mgmt));
|
|
|
|
rx_mgmt.frame = buf;
|
|
|
|
rx_mgmt.frame_len = 24 + 1 + rx_action->len;
|
|
|
|
hostapd_mgmt_rx(hapd, &rx_mgmt);
|
|
|
|
os_free(buf);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2009-12-13 16:05:39 -05:00
|
|
|
static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf,
|
|
|
|
size_t len, u16 stype, int ok)
|
2009-01-09 10:27:03 -05:00
|
|
|
{
|
2009-04-17 06:29:29 -04:00
|
|
|
struct ieee80211_hdr *hdr;
|
|
|
|
hdr = (struct ieee80211_hdr *) buf;
|
|
|
|
hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
|
|
|
|
if (hapd == NULL || hapd == HAPD_BROADCAST)
|
|
|
|
return;
|
2009-01-09 10:27:03 -05:00
|
|
|
ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
|
|
|
|
}
|
2009-04-03 14:04:25 -04:00
|
|
|
|
2009-12-13 16:05:39 -05:00
|
|
|
#endif /* NEED_AP_MLME */
|
2009-04-16 09:22:40 -04:00
|
|
|
|
|
|
|
|
2010-01-03 10:44:40 -05:00
|
|
|
static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr)
|
|
|
|
{
|
|
|
|
struct sta_info *sta = ap_get_sta(hapd, addr);
|
|
|
|
if (sta)
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR
|
|
|
|
" - adding a new STA", MAC2STR(addr));
|
|
|
|
sta = ap_sta_add(hapd, addr);
|
|
|
|
if (sta) {
|
|
|
|
hostapd_new_assoc_sta(hapd, sta, 0);
|
|
|
|
} else {
|
|
|
|
wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR,
|
|
|
|
MAC2STR(addr));
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src,
|
|
|
|
const u8 *data, size_t data_len)
|
|
|
|
{
|
|
|
|
struct hostapd_iface *iface = hapd->iface;
|
|
|
|
size_t j;
|
|
|
|
|
|
|
|
for (j = 0; j < iface->num_bss; j++) {
|
|
|
|
if (ap_get_sta(iface->bss[j], src)) {
|
|
|
|
hapd = iface->bss[j];
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
ieee802_1x_receive(hapd, src, data, data_len);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2010-01-03 06:10:12 -05:00
|
|
|
void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
|
2009-04-16 09:22:40 -04:00
|
|
|
union wpa_event_data *data)
|
|
|
|
{
|
|
|
|
struct hostapd_data *hapd = ctx;
|
|
|
|
|
|
|
|
switch (event) {
|
|
|
|
case EVENT_MICHAEL_MIC_FAILURE:
|
|
|
|
michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
|
|
|
|
break;
|
|
|
|
case EVENT_SCAN_RESULTS:
|
|
|
|
if (hapd->iface->scan_cb)
|
|
|
|
hapd->iface->scan_cb(hapd->iface);
|
|
|
|
break;
|
2009-12-12 15:43:26 -05:00
|
|
|
#ifdef CONFIG_IEEE80211R
|
2009-12-13 14:19:02 -05:00
|
|
|
case EVENT_FT_RRB_RX:
|
2009-12-12 15:43:26 -05:00
|
|
|
wpa_ft_rrb_rx(hapd->wpa_auth, data->ft_rrb_rx.src,
|
|
|
|
data->ft_rrb_rx.data, data->ft_rrb_rx.data_len);
|
|
|
|
break;
|
|
|
|
#endif /* CONFIG_IEEE80211R */
|
2009-12-13 14:21:10 -05:00
|
|
|
case EVENT_WPS_BUTTON_PUSHED:
|
2011-02-07 11:28:36 -05:00
|
|
|
hostapd_wps_button_pushed(hapd, NULL);
|
2009-12-13 14:21:10 -05:00
|
|
|
break;
|
2009-12-13 16:05:39 -05:00
|
|
|
#ifdef NEED_AP_MLME
|
|
|
|
case EVENT_TX_STATUS:
|
|
|
|
switch (data->tx_status.type) {
|
|
|
|
case WLAN_FC_TYPE_MGMT:
|
|
|
|
hostapd_mgmt_tx_cb(hapd, data->tx_status.data,
|
|
|
|
data->tx_status.data_len,
|
|
|
|
data->tx_status.stype,
|
|
|
|
data->tx_status.ack);
|
|
|
|
break;
|
|
|
|
case WLAN_FC_TYPE_DATA:
|
|
|
|
hostapd_tx_status(hapd, data->tx_status.dst,
|
|
|
|
data->tx_status.data,
|
|
|
|
data->tx_status.data_len,
|
|
|
|
data->tx_status.ack);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
break;
|
2011-11-19 06:00:30 -05:00
|
|
|
case EVENT_EAPOL_TX_STATUS:
|
|
|
|
hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst,
|
|
|
|
data->eapol_tx_status.data,
|
|
|
|
data->eapol_tx_status.data_len,
|
|
|
|
data->eapol_tx_status.ack);
|
|
|
|
break;
|
2011-10-20 14:03:08 -04:00
|
|
|
case EVENT_DRIVER_CLIENT_POLL_OK:
|
|
|
|
hostapd_client_poll_ok(hapd, data->client_poll.addr);
|
|
|
|
break;
|
2009-12-13 16:05:39 -05:00
|
|
|
case EVENT_RX_FROM_UNKNOWN:
|
2011-10-20 14:51:32 -04:00
|
|
|
hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid,
|
|
|
|
data->rx_from_unknown.addr,
|
|
|
|
data->rx_from_unknown.wds);
|
2009-12-13 16:05:39 -05:00
|
|
|
break;
|
|
|
|
case EVENT_RX_MGMT:
|
2010-01-03 05:37:02 -05:00
|
|
|
hostapd_mgmt_rx(hapd, &data->rx_mgmt);
|
2009-12-13 16:05:39 -05:00
|
|
|
break;
|
|
|
|
#endif /* NEED_AP_MLME */
|
2010-01-03 05:11:44 -05:00
|
|
|
case EVENT_RX_PROBE_REQ:
|
2011-04-13 19:39:25 -04:00
|
|
|
if (data->rx_probe_req.sa == NULL ||
|
|
|
|
data->rx_probe_req.ie == NULL)
|
|
|
|
break;
|
2010-01-03 05:11:44 -05:00
|
|
|
hostapd_probe_req_rx(hapd, data->rx_probe_req.sa,
|
2011-07-15 13:25:53 -04:00
|
|
|
data->rx_probe_req.da,
|
|
|
|
data->rx_probe_req.bssid,
|
2010-01-03 05:11:44 -05:00
|
|
|
data->rx_probe_req.ie,
|
|
|
|
data->rx_probe_req.ie_len);
|
|
|
|
break;
|
2010-01-03 09:46:18 -05:00
|
|
|
case EVENT_NEW_STA:
|
2010-01-03 10:44:40 -05:00
|
|
|
hostapd_event_new_sta(hapd, data->new_sta.addr);
|
|
|
|
break;
|
|
|
|
case EVENT_EAPOL_RX:
|
|
|
|
hostapd_event_eapol_rx(hapd, data->eapol_rx.src,
|
|
|
|
data->eapol_rx.data,
|
|
|
|
data->eapol_rx.data_len);
|
|
|
|
break;
|
2010-01-03 11:22:22 -05:00
|
|
|
case EVENT_ASSOC:
|
|
|
|
hostapd_notif_assoc(hapd, data->assoc_info.addr,
|
|
|
|
data->assoc_info.req_ies,
|
2010-10-25 06:50:34 -04:00
|
|
|
data->assoc_info.req_ies_len,
|
|
|
|
data->assoc_info.reassoc);
|
2010-01-03 11:22:22 -05:00
|
|
|
break;
|
|
|
|
case EVENT_DISASSOC:
|
|
|
|
if (data)
|
|
|
|
hostapd_notif_disassoc(hapd, data->disassoc_info.addr);
|
|
|
|
break;
|
|
|
|
case EVENT_DEAUTH:
|
|
|
|
if (data)
|
|
|
|
hostapd_notif_disassoc(hapd, data->deauth_info.addr);
|
|
|
|
break;
|
2010-12-28 10:15:01 -05:00
|
|
|
case EVENT_STATION_LOW_ACK:
|
|
|
|
if (!data)
|
|
|
|
break;
|
|
|
|
hostapd_event_sta_low_ack(hapd, data->low_ack.addr);
|
|
|
|
break;
|
2011-06-22 14:45:14 -04:00
|
|
|
#ifdef NEED_AP_MLME
|
2011-06-21 13:55:46 -04:00
|
|
|
case EVENT_RX_ACTION:
|
|
|
|
if (data->rx_action.da == NULL || data->rx_action.sa == NULL ||
|
|
|
|
data->rx_action.bssid == NULL)
|
|
|
|
break;
|
|
|
|
hostapd_rx_action(hapd, &data->rx_action);
|
|
|
|
break;
|
2011-06-22 14:45:14 -04:00
|
|
|
#endif /* NEED_AP_MLME */
|
2009-04-16 09:22:40 -04:00
|
|
|
default:
|
|
|
|
wpa_printf(MSG_DEBUG, "Unknown event %d", event);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
2009-12-13 16:05:39 -05:00
|
|
|
|
|
|
|
#endif /* HOSTAPD */
|