mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-29 02:38:22 -05:00
4905f1ebfe
There is no need to wait for the longer fixed duration for each STA when an event message or an earlier wait for another STA can be used instead. Signed-off-by: Jouni Malinen <j@w1.fi>
398 lines
14 KiB
Python
398 lines
14 KiB
Python
# Test cases for dynamic BSS changes with hostapd
|
|
# Copyright (c) 2013, Qualcomm Atheros, Inc.
|
|
#
|
|
# This software may be distributed under the terms of the BSD license.
|
|
# See README for more details.
|
|
|
|
import time
|
|
import subprocess
|
|
import logging
|
|
logger = logging.getLogger()
|
|
import os
|
|
|
|
import hwsim_utils
|
|
import hostapd
|
|
|
|
def test_ap_change_ssid(dev, apdev):
|
|
"""Dynamic SSID change with hostapd and WPA2-PSK"""
|
|
params = hostapd.wpa2_params(ssid="test-wpa2-psk-start",
|
|
passphrase="12345678")
|
|
hostapd.add_ap(apdev[0]['ifname'], params)
|
|
id = dev[0].connect("test-wpa2-psk-start", psk="12345678",
|
|
scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
|
|
logger.info("Change SSID dynamically")
|
|
hapd = hostapd.Hostapd(apdev[0]['ifname'])
|
|
res = hapd.request("SET ssid test-wpa2-psk-new")
|
|
if "OK" not in res:
|
|
raise Exception("SET command failed")
|
|
res = hapd.request("RELOAD")
|
|
if "OK" not in res:
|
|
raise Exception("RELOAD command failed")
|
|
|
|
dev[0].set_network_quoted(id, "ssid", "test-wpa2-psk-new")
|
|
dev[0].connect_network(id)
|
|
|
|
def multi_check(dev, check):
|
|
id = []
|
|
num_bss = len(check)
|
|
for i in range(0, num_bss):
|
|
dev[i].request("BSS_FLUSH 0")
|
|
dev[i].dump_monitor()
|
|
for i in range(0, num_bss):
|
|
if check[i]:
|
|
continue
|
|
id.append(dev[i].connect("bss-" + str(i + 1), key_mgmt="NONE",
|
|
scan_freq="2412", wait_connect=False))
|
|
for i in range(num_bss):
|
|
if not check[i]:
|
|
continue
|
|
id.append(dev[i].connect("bss-" + str(i + 1), key_mgmt="NONE",
|
|
scan_freq="2412", wait_connect=True))
|
|
first = True
|
|
for i in range(num_bss):
|
|
if not check[i]:
|
|
timeout=0.2 if first else 0.01
|
|
first = False
|
|
ev = dev[i].wait_event(["CTRL-EVENT-CONNECTED"], timeout=timeout)
|
|
if ev:
|
|
raise Exception("Unexpected connection")
|
|
|
|
for i in range(0, num_bss):
|
|
dev[i].remove_network(id[i])
|
|
for i in range(num_bss):
|
|
if check[i]:
|
|
dev[i].wait_disconnected(timeout=5)
|
|
|
|
res = ''
|
|
for i in range(0, num_bss):
|
|
res = res + dev[i].request("BSS RANGE=ALL MASK=0x2")
|
|
|
|
for i in range(0, num_bss):
|
|
if not check[i]:
|
|
bssid = '02:00:00:00:03:0' + str(i)
|
|
if bssid in res:
|
|
raise Exception("Unexpected BSS" + str(i) + " in scan results")
|
|
|
|
def test_ap_bss_add_remove(dev, apdev):
|
|
"""Dynamic BSS add/remove operations with hostapd"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
ifname3 = apdev[0]['ifname'] + '-3'
|
|
logger.info("Set up three BSSes one by one")
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove the last BSS and re-add it")
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove the middle BSS and re-add it")
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, True ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove the first BSS and re-add it and other BSSs")
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove two BSSes and re-add them")
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, True ])
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove three BSSes in and re-add them")
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Test error handling if a duplicate ifname is tried")
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf', ignore_error=True)
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
def test_ap_bss_add_remove_during_ht_scan(dev, apdev):
|
|
"""Dynamic BSS add during HT40 co-ex scan"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
hostapd.add_bss('phy3', ifname1, 'bss-ht40-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-ht40-2.conf')
|
|
multi_check(dev, [ True, True ])
|
|
hostapd.remove_bss(ifname2)
|
|
hostapd.remove_bss(ifname1)
|
|
|
|
hostapd.add_bss('phy3', ifname1, 'bss-ht40-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-ht40-2.conf')
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False ])
|
|
hostapd.remove_bss(ifname1)
|
|
|
|
hostapd.add_bss('phy3', ifname1, 'bss-ht40-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-ht40-2.conf')
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False ])
|
|
|
|
def test_ap_multi_bss_config(dev, apdev):
|
|
"""hostapd start with a multi-BSS configuration file"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
ifname3 = apdev[0]['ifname'] + '-3'
|
|
logger.info("Set up three BSSes with one configuration file")
|
|
hostapd.add_iface(ifname1, 'multi-bss.conf')
|
|
hapd = hostapd.Hostapd(ifname1)
|
|
hapd.enable()
|
|
multi_check(dev, [ True, True, True ])
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, True ])
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
|
|
hostapd.add_iface(ifname1, 'multi-bss.conf')
|
|
hapd = hostapd.Hostapd(ifname1)
|
|
hapd.enable()
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
|
|
def invalid_ap(hapd_global, ifname):
|
|
logger.info("Trying to start AP " + ifname + " with invalid configuration")
|
|
hapd_global.remove(ifname)
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
if not hapd.ping():
|
|
raise Exception("Could not ping hostapd")
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "invalid-config")
|
|
hapd.set("channel", "12345")
|
|
try:
|
|
hapd.enable()
|
|
started = True
|
|
except Exception, e:
|
|
started = False
|
|
if started:
|
|
raise Exception("ENABLE command succeeded unexpectedly")
|
|
return hapd
|
|
|
|
def test_ap_invalid_config(dev, apdev):
|
|
"""Try to start AP with invalid configuration and fix configuration"""
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
ifname = apdev[0]['ifname']
|
|
hapd = invalid_ap(hapd_global, ifname)
|
|
|
|
logger.info("Fix configuration and start AP again")
|
|
hapd.set("channel", "1")
|
|
hapd.enable()
|
|
dev[0].connect("invalid-config", key_mgmt="NONE", scan_freq="2412")
|
|
|
|
def test_ap_invalid_config2(dev, apdev):
|
|
"""Try to start AP with invalid configuration and remove interface"""
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
ifname = apdev[0]['ifname']
|
|
hapd = invalid_ap(hapd_global, ifname)
|
|
logger.info("Remove interface with failed configuration")
|
|
hapd_global.remove(ifname)
|
|
|
|
def test_ap_remove_during_acs(dev, apdev):
|
|
"""Remove interface during ACS"""
|
|
params = hostapd.wpa2_params(ssid="test-acs-remove", passphrase="12345678")
|
|
params['channel'] = '0'
|
|
ifname = apdev[0]['ifname']
|
|
hapd = hostapd.HostapdGlobal()
|
|
hostapd.add_ap(ifname, params)
|
|
hapd.remove(ifname)
|
|
|
|
def test_ap_remove_during_acs2(dev, apdev):
|
|
"""Remove BSS during ACS in multi-BSS configuration"""
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-acs-remove")
|
|
hapd.set("channel", "0")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-acs-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname)
|
|
|
|
def test_ap_remove_during_acs3(dev, apdev):
|
|
"""Remove second BSS during ACS in multi-BSS configuration"""
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-acs-remove")
|
|
hapd.set("channel", "0")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-acs-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname2)
|
|
|
|
def test_ap_remove_during_ht_coex_scan(dev, apdev):
|
|
"""Remove interface during HT co-ex scan"""
|
|
params = hostapd.wpa2_params(ssid="test-ht-remove", passphrase="12345678")
|
|
params['channel'] = '1'
|
|
params['ht_capab'] = "[HT40+]"
|
|
ifname = apdev[0]['ifname']
|
|
hapd = hostapd.HostapdGlobal()
|
|
hostapd.add_ap(ifname, params)
|
|
hapd.remove(ifname)
|
|
|
|
def test_ap_remove_during_ht_coex_scan2(dev, apdev):
|
|
"""Remove BSS during HT co-ex scan in multi-BSS configuration"""
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-ht-remove")
|
|
hapd.set("channel", "1")
|
|
hapd.set("ht_capab", "[HT40+]")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-ht-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname)
|
|
|
|
def test_ap_remove_during_ht_coex_scan3(dev, apdev):
|
|
"""Remove second BSS during HT co-ex scan in multi-BSS configuration"""
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-ht-remove")
|
|
hapd.set("channel", "1")
|
|
hapd.set("ht_capab", "[HT40+]")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-ht-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname2)
|
|
|
|
def test_ap_enable_disable_reenable(dev, apdev):
|
|
"""Enable, disable, re-enable AP"""
|
|
ifname = apdev[0]['ifname']
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "dynamic")
|
|
hapd.enable()
|
|
ev = hapd.wait_event(["AP-ENABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP startup timed out")
|
|
dev[0].connect("dynamic", key_mgmt="NONE", scan_freq="2412")
|
|
hapd.disable()
|
|
ev = hapd.wait_event(["AP-DISABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP disabling timed out")
|
|
dev[0].wait_disconnected(timeout=10)
|
|
hapd.enable()
|
|
ev = hapd.wait_event(["AP-ENABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP startup timed out")
|
|
dev[1].connect("dynamic", key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].wait_connected(timeout=10)
|
|
|
|
def test_ap_double_disable(dev, apdev):
|
|
"""Double DISABLE regression test"""
|
|
hostapd.add_bss('phy3', apdev[0]['ifname'], 'bss-1.conf')
|
|
hostapd.add_bss('phy3', apdev[0]['ifname'] + '-2', 'bss-2.conf')
|
|
hapd = hostapd.Hostapd(apdev[0]['ifname'])
|
|
hapd.disable()
|
|
if "FAIL" not in hapd.request("DISABLE"):
|
|
raise Exception("Second DISABLE accepted unexpectedly")
|
|
hapd.enable()
|
|
hapd.disable()
|
|
if "FAIL" not in hapd.request("DISABLE"):
|
|
raise Exception("Second DISABLE accepted unexpectedly")
|
|
|
|
def test_ap_bss_add_many(dev, apdev):
|
|
"""Large number of BSS add operations with hostapd"""
|
|
try:
|
|
_test_ap_bss_add_many(dev, apdev)
|
|
finally:
|
|
dev[0].request("SCAN_INTERVAL 5")
|
|
ifname = apdev[0]['ifname']
|
|
hapd = hostapd.HostapdGlobal()
|
|
hapd.flush()
|
|
for i in range(16):
|
|
ifname2 = ifname + '-' + str(i)
|
|
hapd.remove(ifname2)
|
|
try:
|
|
os.remove('/tmp/hwsim-bss.conf')
|
|
except:
|
|
pass
|
|
|
|
def _test_ap_bss_add_many(dev, apdev):
|
|
ifname = apdev[0]['ifname']
|
|
phy = 'phy3'
|
|
hostapd.add_bss(phy, ifname, 'bss-1.conf')
|
|
hapd = hostapd.HostapdGlobal()
|
|
fname = '/tmp/hwsim-bss.conf'
|
|
for i in range(16):
|
|
ifname2 = ifname + '-' + str(i)
|
|
with open(fname, 'w') as f:
|
|
f.write("driver=nl80211\n")
|
|
f.write("hw_mode=g\n")
|
|
f.write("channel=1\n")
|
|
f.write("ieee80211n=1\n")
|
|
f.write("interface=%s\n" % ifname2)
|
|
f.write("bssid=02:00:00:00:03:%02x\n" % (i + 1))
|
|
f.write("ctrl_interface=/var/run/hostapd\n")
|
|
f.write("ssid=test-%d\n" % i)
|
|
hostapd.add_bss(phy, ifname2, fname)
|
|
os.remove(fname)
|
|
|
|
dev[0].request("SCAN_INTERVAL 1")
|
|
dev[0].connect("bss-1", key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected(timeout=5)
|
|
for i in range(16):
|
|
dev[0].connect("test-%d" % i, key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected(timeout=5)
|
|
ifname2 = ifname + '-' + str(i)
|
|
hapd.remove(ifname2)
|
|
|
|
def test_ap_bss_add_reuse_existing(dev, apdev):
|
|
"""Dynamic BSS add operation reusing existing interface"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
subprocess.check_call(["iw", "dev", ifname1, "interface", "add", ifname2,
|
|
"type", "__ap"])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
hostapd.remove_bss(ifname2)
|
|
subprocess.check_call(["iw", "dev", ifname2, "del"])
|