mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-12-01 11:48:23 -05:00
486 lines
17 KiB
Python
486 lines
17 KiB
Python
# Test cases for dynamic BSS changes with hostapd
|
|
# Copyright (c) 2013, Qualcomm Atheros, Inc.
|
|
#
|
|
# This software may be distributed under the terms of the BSD license.
|
|
# See README for more details.
|
|
|
|
import time
|
|
import subprocess
|
|
import logging
|
|
logger = logging.getLogger()
|
|
import os
|
|
|
|
import hwsim_utils
|
|
import hostapd
|
|
from utils import alloc_fail
|
|
from test_ap_acs import force_prev_ap_on_24g
|
|
|
|
def test_ap_change_ssid(dev, apdev):
|
|
"""Dynamic SSID change with hostapd and WPA2-PSK"""
|
|
params = hostapd.wpa2_params(ssid="test-wpa2-psk-start",
|
|
passphrase="12345678")
|
|
hostapd.add_ap(apdev[0]['ifname'], params)
|
|
id = dev[0].connect("test-wpa2-psk-start", psk="12345678",
|
|
scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
|
|
logger.info("Change SSID dynamically")
|
|
hapd = hostapd.Hostapd(apdev[0]['ifname'])
|
|
res = hapd.request("SET ssid test-wpa2-psk-new")
|
|
if "OK" not in res:
|
|
raise Exception("SET command failed")
|
|
res = hapd.request("RELOAD")
|
|
if "OK" not in res:
|
|
raise Exception("RELOAD command failed")
|
|
|
|
dev[0].set_network_quoted(id, "ssid", "test-wpa2-psk-new")
|
|
dev[0].connect_network(id)
|
|
|
|
def multi_check(dev, check, scan_opt=True):
|
|
id = []
|
|
num_bss = len(check)
|
|
for i in range(0, num_bss):
|
|
dev[i].request("BSS_FLUSH 0")
|
|
dev[i].dump_monitor()
|
|
for i in range(0, num_bss):
|
|
if check[i]:
|
|
continue
|
|
id.append(dev[i].connect("bss-" + str(i + 1), key_mgmt="NONE",
|
|
scan_freq="2412", wait_connect=False))
|
|
for i in range(num_bss):
|
|
if not check[i]:
|
|
continue
|
|
bssid = '02:00:00:00:03:0' + str(i)
|
|
if scan_opt:
|
|
dev[i].scan_for_bss(bssid, freq=2412)
|
|
id.append(dev[i].connect("bss-" + str(i + 1), key_mgmt="NONE",
|
|
scan_freq="2412", wait_connect=True))
|
|
first = True
|
|
for i in range(num_bss):
|
|
if not check[i]:
|
|
timeout=0.2 if first else 0.01
|
|
first = False
|
|
ev = dev[i].wait_event(["CTRL-EVENT-CONNECTED"], timeout=timeout)
|
|
if ev:
|
|
raise Exception("Unexpected connection")
|
|
|
|
for i in range(0, num_bss):
|
|
dev[i].remove_network(id[i])
|
|
for i in range(num_bss):
|
|
if check[i]:
|
|
dev[i].wait_disconnected(timeout=5)
|
|
|
|
res = ''
|
|
for i in range(0, num_bss):
|
|
res = res + dev[i].request("BSS RANGE=ALL MASK=0x2")
|
|
|
|
for i in range(0, num_bss):
|
|
if not check[i]:
|
|
bssid = '02:00:00:00:03:0' + str(i)
|
|
if bssid in res:
|
|
raise Exception("Unexpected BSS" + str(i) + " in scan results")
|
|
|
|
def test_ap_bss_add_remove(dev, apdev):
|
|
"""Dynamic BSS add/remove operations with hostapd"""
|
|
try:
|
|
_test_ap_bss_add_remove(dev, apdev)
|
|
finally:
|
|
for i in range(3):
|
|
dev[i].request("SCAN_INTERVAL 5")
|
|
|
|
def _test_ap_bss_add_remove(dev, apdev):
|
|
for i in range(3):
|
|
dev[i].request("SCAN_INTERVAL 1")
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
ifname3 = apdev[0]['ifname'] + '-3'
|
|
logger.info("Set up three BSSes one by one")
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove the last BSS and re-add it")
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove the middle BSS and re-add it")
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, True ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove the first BSS and re-add it and other BSSs")
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove two BSSes and re-add them")
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, True ])
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Remove three BSSes in and re-add them")
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
multi_check(dev, [ True, True, False ])
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf')
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
logger.info("Test error handling if a duplicate ifname is tried")
|
|
hostapd.add_bss('phy3', ifname3, 'bss-3.conf', ignore_error=True)
|
|
multi_check(dev, [ True, True, True ])
|
|
|
|
def test_ap_bss_add_remove_during_ht_scan(dev, apdev):
|
|
"""Dynamic BSS add during HT40 co-ex scan"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
hostapd.add_bss('phy3', ifname1, 'bss-ht40-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-ht40-2.conf')
|
|
multi_check(dev, [ True, True ], scan_opt=False)
|
|
hostapd.remove_bss(ifname2)
|
|
hostapd.remove_bss(ifname1)
|
|
|
|
hostapd.add_bss('phy3', ifname1, 'bss-ht40-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-ht40-2.conf')
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False ], scan_opt=False)
|
|
hostapd.remove_bss(ifname1)
|
|
|
|
hostapd.add_bss('phy3', ifname1, 'bss-ht40-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-ht40-2.conf')
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False ])
|
|
|
|
def test_ap_multi_bss_config(dev, apdev):
|
|
"""hostapd start with a multi-BSS configuration file"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
ifname3 = apdev[0]['ifname'] + '-3'
|
|
logger.info("Set up three BSSes with one configuration file")
|
|
hostapd.add_iface(ifname1, 'multi-bss.conf')
|
|
hapd = hostapd.Hostapd(ifname1)
|
|
hapd.enable()
|
|
multi_check(dev, [ True, True, True ])
|
|
hostapd.remove_bss(ifname2)
|
|
multi_check(dev, [ True, False, True ])
|
|
hostapd.remove_bss(ifname3)
|
|
multi_check(dev, [ True, False, False ])
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
|
|
hostapd.add_iface(ifname1, 'multi-bss.conf')
|
|
hapd = hostapd.Hostapd(ifname1)
|
|
hapd.enable()
|
|
hostapd.remove_bss(ifname1)
|
|
multi_check(dev, [ False, False, False ])
|
|
|
|
def invalid_ap(hapd_global, ifname):
|
|
logger.info("Trying to start AP " + ifname + " with invalid configuration")
|
|
hapd_global.remove(ifname)
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
if not hapd.ping():
|
|
raise Exception("Could not ping hostapd")
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "invalid-config")
|
|
hapd.set("channel", "12345")
|
|
try:
|
|
hapd.enable()
|
|
started = True
|
|
except Exception, e:
|
|
started = False
|
|
if started:
|
|
raise Exception("ENABLE command succeeded unexpectedly")
|
|
return hapd
|
|
|
|
def test_ap_invalid_config(dev, apdev):
|
|
"""Try to start AP with invalid configuration and fix configuration"""
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
ifname = apdev[0]['ifname']
|
|
hapd = invalid_ap(hapd_global, ifname)
|
|
|
|
logger.info("Fix configuration and start AP again")
|
|
hapd.set("channel", "1")
|
|
hapd.enable()
|
|
dev[0].connect("invalid-config", key_mgmt="NONE", scan_freq="2412")
|
|
|
|
def test_ap_invalid_config2(dev, apdev):
|
|
"""Try to start AP with invalid configuration and remove interface"""
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
ifname = apdev[0]['ifname']
|
|
hapd = invalid_ap(hapd_global, ifname)
|
|
logger.info("Remove interface with failed configuration")
|
|
hapd_global.remove(ifname)
|
|
|
|
def test_ap_remove_during_acs(dev, apdev):
|
|
"""Remove interface during ACS"""
|
|
force_prev_ap_on_24g(apdev[0])
|
|
params = hostapd.wpa2_params(ssid="test-acs-remove", passphrase="12345678")
|
|
params['channel'] = '0'
|
|
ifname = apdev[0]['ifname']
|
|
hapd = hostapd.HostapdGlobal()
|
|
hostapd.add_ap(ifname, params)
|
|
hapd.remove(ifname)
|
|
|
|
def test_ap_remove_during_acs2(dev, apdev):
|
|
"""Remove BSS during ACS in multi-BSS configuration"""
|
|
force_prev_ap_on_24g(apdev[0])
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-acs-remove")
|
|
hapd.set("channel", "0")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-acs-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname)
|
|
|
|
def test_ap_remove_during_acs3(dev, apdev):
|
|
"""Remove second BSS during ACS in multi-BSS configuration"""
|
|
force_prev_ap_on_24g(apdev[0])
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-acs-remove")
|
|
hapd.set("channel", "0")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-acs-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname2)
|
|
|
|
def test_ap_remove_during_ht_coex_scan(dev, apdev):
|
|
"""Remove interface during HT co-ex scan"""
|
|
params = hostapd.wpa2_params(ssid="test-ht-remove", passphrase="12345678")
|
|
params['channel'] = '1'
|
|
params['ht_capab'] = "[HT40+]"
|
|
ifname = apdev[0]['ifname']
|
|
hapd = hostapd.HostapdGlobal()
|
|
hostapd.add_ap(ifname, params)
|
|
hapd.remove(ifname)
|
|
|
|
def test_ap_remove_during_ht_coex_scan2(dev, apdev):
|
|
"""Remove BSS during HT co-ex scan in multi-BSS configuration"""
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-ht-remove")
|
|
hapd.set("channel", "1")
|
|
hapd.set("ht_capab", "[HT40+]")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-ht-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname)
|
|
|
|
def test_ap_remove_during_ht_coex_scan3(dev, apdev):
|
|
"""Remove second BSS during HT co-ex scan in multi-BSS configuration"""
|
|
ifname = apdev[0]['ifname']
|
|
ifname2 = ifname + "-2"
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "test-ht-remove")
|
|
hapd.set("channel", "1")
|
|
hapd.set("ht_capab", "[HT40+]")
|
|
hapd.set("bss", ifname2)
|
|
hapd.set("ssid", "test-ht-remove2")
|
|
hapd.enable()
|
|
hapd_global.remove(ifname2)
|
|
|
|
def test_ap_enable_disable_reenable(dev, apdev):
|
|
"""Enable, disable, re-enable AP"""
|
|
ifname = apdev[0]['ifname']
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname)
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "dynamic")
|
|
hapd.enable()
|
|
ev = hapd.wait_event(["AP-ENABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP startup timed out")
|
|
dev[0].connect("dynamic", key_mgmt="NONE", scan_freq="2412")
|
|
hapd.disable()
|
|
ev = hapd.wait_event(["AP-DISABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP disabling timed out")
|
|
dev[0].wait_disconnected(timeout=10)
|
|
hapd.enable()
|
|
ev = hapd.wait_event(["AP-ENABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP startup timed out")
|
|
dev[1].connect("dynamic", key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].wait_connected(timeout=10)
|
|
|
|
def test_ap_double_disable(dev, apdev):
|
|
"""Double DISABLE regression test"""
|
|
hostapd.add_bss('phy3', apdev[0]['ifname'], 'bss-1.conf')
|
|
hostapd.add_bss('phy3', apdev[0]['ifname'] + '-2', 'bss-2.conf')
|
|
hapd = hostapd.Hostapd(apdev[0]['ifname'])
|
|
hapd.disable()
|
|
if "FAIL" not in hapd.request("DISABLE"):
|
|
raise Exception("Second DISABLE accepted unexpectedly")
|
|
hapd.enable()
|
|
hapd.disable()
|
|
if "FAIL" not in hapd.request("DISABLE"):
|
|
raise Exception("Second DISABLE accepted unexpectedly")
|
|
|
|
def test_ap_bss_add_many(dev, apdev):
|
|
"""Large number of BSS add operations with hostapd"""
|
|
try:
|
|
_test_ap_bss_add_many(dev, apdev)
|
|
finally:
|
|
dev[0].request("SCAN_INTERVAL 5")
|
|
ifname = apdev[0]['ifname']
|
|
hapd = hostapd.HostapdGlobal()
|
|
hapd.flush()
|
|
for i in range(16):
|
|
ifname2 = ifname + '-' + str(i)
|
|
hapd.remove(ifname2)
|
|
try:
|
|
os.remove('/tmp/hwsim-bss.conf')
|
|
except:
|
|
pass
|
|
|
|
def _test_ap_bss_add_many(dev, apdev):
|
|
ifname = apdev[0]['ifname']
|
|
phy = 'phy3'
|
|
hostapd.add_bss(phy, ifname, 'bss-1.conf')
|
|
hapd = hostapd.HostapdGlobal()
|
|
fname = '/tmp/hwsim-bss.conf'
|
|
for i in range(16):
|
|
ifname2 = ifname + '-' + str(i)
|
|
with open(fname, 'w') as f:
|
|
f.write("driver=nl80211\n")
|
|
f.write("hw_mode=g\n")
|
|
f.write("channel=1\n")
|
|
f.write("ieee80211n=1\n")
|
|
f.write("interface=%s\n" % ifname2)
|
|
f.write("bssid=02:00:00:00:03:%02x\n" % (i + 1))
|
|
f.write("ctrl_interface=/var/run/hostapd\n")
|
|
f.write("ssid=test-%d\n" % i)
|
|
hostapd.add_bss(phy, ifname2, fname)
|
|
os.remove(fname)
|
|
|
|
dev[0].request("SCAN_INTERVAL 1")
|
|
dev[0].connect("bss-1", key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected(timeout=5)
|
|
for i in range(16):
|
|
dev[0].connect("test-%d" % i, key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected(timeout=5)
|
|
ifname2 = ifname + '-' + str(i)
|
|
hapd.remove(ifname2)
|
|
|
|
def test_ap_bss_add_reuse_existing(dev, apdev):
|
|
"""Dynamic BSS add operation reusing existing interface"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
subprocess.check_call(["iw", "dev", ifname1, "interface", "add", ifname2,
|
|
"type", "__ap"])
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
hostapd.remove_bss(ifname2)
|
|
subprocess.check_call(["iw", "dev", ifname2, "del"])
|
|
|
|
def hapd_bss_out_of_mem(hapd, phy, confname, count, func):
|
|
with alloc_fail(hapd, count, func):
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
res = hapd_global.ctrl.request("ADD bss_config=" + phy + ":" + confname)
|
|
if "OK" in res:
|
|
raise Exception("add_bss succeeded")
|
|
|
|
def test_ap_bss_add_out_of_memory(dev, apdev):
|
|
"""Running out of memory while adding a BSS"""
|
|
hapd2 = hostapd.add_ap(apdev[1]['ifname'], { "ssid": "open" })
|
|
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
|
|
hapd_bss_out_of_mem(hapd2, 'phy3', 'bss-1.conf', 1, 'hostapd_add_iface')
|
|
for i in range(1, 3):
|
|
hapd_bss_out_of_mem(hapd2, 'phy3', 'bss-1.conf',
|
|
i, 'hostapd_interface_init_bss')
|
|
hapd_bss_out_of_mem(hapd2, 'phy3', 'bss-1.conf',
|
|
1, 'ieee802_11_build_ap_params')
|
|
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
|
|
hapd_bss_out_of_mem(hapd2, 'phy3', 'bss-2.conf',
|
|
1, 'hostapd_interface_init_bss')
|
|
hapd_bss_out_of_mem(hapd2, 'phy3', 'bss-2.conf',
|
|
1, 'ieee802_11_build_ap_params')
|
|
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
hostapd.remove_bss(ifname2)
|
|
hostapd.remove_bss(ifname1)
|
|
|
|
def test_ap_multi_bss(dev, apdev):
|
|
"""Multiple BSSes with hostapd"""
|
|
ifname1 = apdev[0]['ifname']
|
|
ifname2 = apdev[0]['ifname'] + '-2'
|
|
hostapd.add_bss('phy3', ifname1, 'bss-1.conf')
|
|
hostapd.add_bss('phy3', ifname2, 'bss-2.conf')
|
|
dev[0].connect("bss-1", key_mgmt="NONE", scan_freq="2412")
|
|
dev[1].connect("bss-2", key_mgmt="NONE", scan_freq="2412")
|
|
|
|
hapd1 = hostapd.Hostapd(ifname1)
|
|
hapd2 = hostapd.Hostapd(ifname2)
|
|
|
|
hwsim_utils.test_connectivity(dev[0], hapd1)
|
|
hwsim_utils.test_connectivity(dev[1], hapd2)
|
|
|
|
sta0 = hapd1.get_sta(dev[0].own_addr())
|
|
sta1 = hapd2.get_sta(dev[1].own_addr())
|
|
if 'rx_packets' not in sta0 or int(sta0['rx_packets']) < 1:
|
|
raise Exception("sta0 did not report receiving packets")
|
|
if 'rx_packets' not in sta1 or int(sta1['rx_packets']) < 1:
|
|
raise Exception("sta1 did not report receiving packets")
|
|
|
|
def test_ap_add_with_driver(dev, apdev):
|
|
"""Add hostapd interface with driver specified"""
|
|
ifname = apdev[0]['ifname']
|
|
hapd_global = hostapd.HostapdGlobal()
|
|
hapd_global.add(ifname, driver="nl80211")
|
|
hapd = hostapd.Hostapd(ifname)
|
|
hapd.set_defaults()
|
|
hapd.set("ssid", "dynamic")
|
|
hapd.enable()
|
|
ev = hapd.wait_event(["AP-ENABLED"], timeout=30)
|
|
if ev is None:
|
|
raise Exception("AP startup timed out")
|
|
dev[0].connect("dynamic", key_mgmt="NONE", scan_freq="2412")
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected()
|
|
hapd.disable()
|