xref: /freebsd/contrib/wpa/src/ap/drv_callbacks.c (revision cc426dd31990b8b50b210efc450e404596548ca1)
1 /*
2  * hostapd / Callback functions for driver wrappers
3  * Copyright (c) 2002-2013, Jouni Malinen <j@w1.fi>
4  *
5  * This software may be distributed under the terms of the BSD license.
6  * See README for more details.
7  */
8 
9 #include "utils/includes.h"
10 
11 #include "utils/common.h"
12 #include "utils/eloop.h"
13 #include "radius/radius.h"
14 #include "drivers/driver.h"
15 #include "common/ieee802_11_defs.h"
16 #include "common/ieee802_11_common.h"
17 #include "common/wpa_ctrl.h"
18 #include "crypto/random.h"
19 #include "p2p/p2p.h"
20 #include "wps/wps.h"
21 #include "fst/fst.h"
22 #include "wnm_ap.h"
23 #include "hostapd.h"
24 #include "ieee802_11.h"
25 #include "ieee802_11_auth.h"
26 #include "sta_info.h"
27 #include "accounting.h"
28 #include "tkip_countermeasures.h"
29 #include "ieee802_1x.h"
30 #include "wpa_auth.h"
31 #include "wps_hostapd.h"
32 #include "ap_drv_ops.h"
33 #include "ap_config.h"
34 #include "ap_mlme.h"
35 #include "hw_features.h"
36 #include "dfs.h"
37 #include "beacon.h"
38 #include "mbo_ap.h"
39 #include "dpp_hostapd.h"
40 #include "fils_hlp.h"
41 
42 
43 #ifdef CONFIG_FILS
44 void hostapd_notify_assoc_fils_finish(struct hostapd_data *hapd,
45 				      struct sta_info *sta)
46 {
47 	u16 reply_res = WLAN_STATUS_SUCCESS;
48 	struct ieee802_11_elems elems;
49 	u8 buf[IEEE80211_MAX_MMPDU_SIZE], *p = buf;
50 	int new_assoc;
51 
52 	wpa_printf(MSG_DEBUG, "%s FILS: Finish association with " MACSTR,
53 		   __func__, MAC2STR(sta->addr));
54 	eloop_cancel_timeout(fils_hlp_timeout, hapd, sta);
55 	if (!sta->fils_pending_assoc_req)
56 		return;
57 
58 	ieee802_11_parse_elems(sta->fils_pending_assoc_req,
59 			       sta->fils_pending_assoc_req_len, &elems, 0);
60 	if (!elems.fils_session) {
61 		wpa_printf(MSG_DEBUG, "%s failed to find FILS Session element",
62 			   __func__);
63 		return;
64 	}
65 
66 	p = hostapd_eid_assoc_fils_session(sta->wpa_sm, p,
67 					   elems.fils_session,
68 					   sta->fils_hlp_resp);
69 
70 	reply_res = hostapd_sta_assoc(hapd, sta->addr,
71 				      sta->fils_pending_assoc_is_reassoc,
72 				      WLAN_STATUS_SUCCESS,
73 				      buf, p - buf);
74 	ap_sta_set_authorized(hapd, sta, 1);
75 	new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
76 	sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
77 	sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE;
78 	hostapd_set_sta_flags(hapd, sta);
79 	wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FILS);
80 	ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
81 	hostapd_new_assoc_sta(hapd, sta, !new_assoc);
82 	os_free(sta->fils_pending_assoc_req);
83 	sta->fils_pending_assoc_req = NULL;
84 	sta->fils_pending_assoc_req_len = 0;
85 	wpabuf_free(sta->fils_hlp_resp);
86 	sta->fils_hlp_resp = NULL;
87 	wpabuf_free(sta->hlp_dhcp_discover);
88 	sta->hlp_dhcp_discover = NULL;
89 	fils_hlp_deinit(hapd);
90 
91 	/*
92 	 * Remove the station in case transmission of a success response fails
93 	 * (the STA was added associated to the driver) or if the station was
94 	 * previously added unassociated.
95 	 */
96 	if (reply_res != WLAN_STATUS_SUCCESS || sta->added_unassoc) {
97 		hostapd_drv_sta_remove(hapd, sta->addr);
98 		sta->added_unassoc = 0;
99 	}
100 }
101 #endif /* CONFIG_FILS */
102 
103 
104 int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
105 			const u8 *req_ies, size_t req_ies_len, int reassoc)
106 {
107 	struct sta_info *sta;
108 	int new_assoc, res;
109 	struct ieee802_11_elems elems;
110 	const u8 *ie;
111 	size_t ielen;
112 #if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_IEEE80211W) || defined(CONFIG_FILS) || defined(CONFIG_OWE)
113 	u8 buf[sizeof(struct ieee80211_mgmt) + 1024];
114 	u8 *p = buf;
115 #endif /* CONFIG_IEEE80211R_AP || CONFIG_IEEE80211W || CONFIG_FILS || CONFIG_OWE */
116 	u16 reason = WLAN_REASON_UNSPECIFIED;
117 	u16 status = WLAN_STATUS_SUCCESS;
118 	const u8 *p2p_dev_addr = NULL;
119 
120 	if (addr == NULL) {
121 		/*
122 		 * This could potentially happen with unexpected event from the
123 		 * driver wrapper. This was seen at least in one case where the
124 		 * driver ended up being set to station mode while hostapd was
125 		 * running, so better make sure we stop processing such an
126 		 * event here.
127 		 */
128 		wpa_printf(MSG_DEBUG,
129 			   "hostapd_notif_assoc: Skip event with no address");
130 		return -1;
131 	}
132 	random_add_randomness(addr, ETH_ALEN);
133 
134 	hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
135 		       HOSTAPD_LEVEL_INFO, "associated");
136 
137 	ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0);
138 	if (elems.wps_ie) {
139 		ie = elems.wps_ie - 2;
140 		ielen = elems.wps_ie_len + 2;
141 		wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq");
142 	} else if (elems.rsn_ie) {
143 		ie = elems.rsn_ie - 2;
144 		ielen = elems.rsn_ie_len + 2;
145 		wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq");
146 	} else if (elems.wpa_ie) {
147 		ie = elems.wpa_ie - 2;
148 		ielen = elems.wpa_ie_len + 2;
149 		wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq");
150 #ifdef CONFIG_HS20
151 	} else if (elems.osen) {
152 		ie = elems.osen - 2;
153 		ielen = elems.osen_len + 2;
154 		wpa_printf(MSG_DEBUG, "STA included OSEN IE in (Re)AssocReq");
155 #endif /* CONFIG_HS20 */
156 	} else {
157 		ie = NULL;
158 		ielen = 0;
159 		wpa_printf(MSG_DEBUG,
160 			   "STA did not include WPS/RSN/WPA IE in (Re)AssocReq");
161 	}
162 
163 	sta = ap_get_sta(hapd, addr);
164 	if (sta) {
165 		ap_sta_no_session_timeout(hapd, sta);
166 		accounting_sta_stop(hapd, sta);
167 
168 		/*
169 		 * Make sure that the previously registered inactivity timer
170 		 * will not remove the STA immediately.
171 		 */
172 		sta->timeout_next = STA_NULLFUNC;
173 	} else {
174 		sta = ap_sta_add(hapd, addr);
175 		if (sta == NULL) {
176 			hostapd_drv_sta_disassoc(hapd, addr,
177 						 WLAN_REASON_DISASSOC_AP_BUSY);
178 			return -1;
179 		}
180 	}
181 	sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
182 
183 	/*
184 	 * ACL configurations to the drivers (implementing AP SME and ACL
185 	 * offload) without hostapd's knowledge, can result in a disconnection
186 	 * though the driver accepts the connection. Skip the hostapd check for
187 	 * ACL if the driver supports ACL offload to avoid potentially
188 	 * conflicting ACL rules.
189 	 */
190 	if (hapd->iface->drv_max_acl_mac_addrs == 0 &&
191 	    hostapd_check_acl(hapd, addr, NULL) != HOSTAPD_ACL_ACCEPT) {
192 		wpa_printf(MSG_INFO, "STA " MACSTR " not allowed to connect",
193 			   MAC2STR(addr));
194 		reason = WLAN_REASON_UNSPECIFIED;
195 		goto fail;
196 	}
197 
198 #ifdef CONFIG_P2P
199 	if (elems.p2p) {
200 		wpabuf_free(sta->p2p_ie);
201 		sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
202 							  P2P_IE_VENDOR_TYPE);
203 		if (sta->p2p_ie)
204 			p2p_dev_addr = p2p_get_go_dev_addr(sta->p2p_ie);
205 	}
206 #endif /* CONFIG_P2P */
207 
208 #ifdef CONFIG_IEEE80211N
209 #ifdef NEED_AP_MLME
210 	if (elems.ht_capabilities &&
211 	    (hapd->iface->conf->ht_capab &
212 	     HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET)) {
213 		struct ieee80211_ht_capabilities *ht_cap =
214 			(struct ieee80211_ht_capabilities *)
215 			elems.ht_capabilities;
216 
217 		if (le_to_host16(ht_cap->ht_capabilities_info) &
218 		    HT_CAP_INFO_40MHZ_INTOLERANT)
219 			ht40_intolerant_add(hapd->iface, sta);
220 	}
221 #endif /* NEED_AP_MLME */
222 #endif /* CONFIG_IEEE80211N */
223 
224 #ifdef CONFIG_INTERWORKING
225 	if (elems.ext_capab && elems.ext_capab_len > 4) {
226 		if (elems.ext_capab[4] & 0x01)
227 			sta->qos_map_enabled = 1;
228 	}
229 #endif /* CONFIG_INTERWORKING */
230 
231 #ifdef CONFIG_HS20
232 	wpabuf_free(sta->hs20_ie);
233 	if (elems.hs20 && elems.hs20_len > 4) {
234 		sta->hs20_ie = wpabuf_alloc_copy(elems.hs20 + 4,
235 						 elems.hs20_len - 4);
236 	} else
237 		sta->hs20_ie = NULL;
238 
239 	wpabuf_free(sta->roaming_consortium);
240 	if (elems.roaming_cons_sel)
241 		sta->roaming_consortium = wpabuf_alloc_copy(
242 			elems.roaming_cons_sel + 4,
243 			elems.roaming_cons_sel_len - 4);
244 	else
245 		sta->roaming_consortium = NULL;
246 #endif /* CONFIG_HS20 */
247 
248 #ifdef CONFIG_FST
249 	wpabuf_free(sta->mb_ies);
250 	if (hapd->iface->fst)
251 		sta->mb_ies = mb_ies_by_info(&elems.mb_ies);
252 	else
253 		sta->mb_ies = NULL;
254 #endif /* CONFIG_FST */
255 
256 	mbo_ap_check_sta_assoc(hapd, sta, &elems);
257 
258 	ap_copy_sta_supp_op_classes(sta, elems.supp_op_classes,
259 				    elems.supp_op_classes_len);
260 
261 	if (hapd->conf->wpa) {
262 		if (ie == NULL || ielen == 0) {
263 #ifdef CONFIG_WPS
264 			if (hapd->conf->wps_state) {
265 				wpa_printf(MSG_DEBUG,
266 					   "STA did not include WPA/RSN IE in (Re)Association Request - possible WPS use");
267 				sta->flags |= WLAN_STA_MAYBE_WPS;
268 				goto skip_wpa_check;
269 			}
270 #endif /* CONFIG_WPS */
271 
272 			wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
273 			reason = WLAN_REASON_INVALID_IE;
274 			status = WLAN_STATUS_INVALID_IE;
275 			goto fail;
276 		}
277 #ifdef CONFIG_WPS
278 		if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
279 		    os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
280 			struct wpabuf *wps;
281 
282 			sta->flags |= WLAN_STA_WPS;
283 			wps = ieee802_11_vendor_ie_concat(ie, ielen,
284 							  WPS_IE_VENDOR_TYPE);
285 			if (wps) {
286 				if (wps_is_20(wps)) {
287 					wpa_printf(MSG_DEBUG,
288 						   "WPS: STA supports WPS 2.0");
289 					sta->flags |= WLAN_STA_WPS2;
290 				}
291 				wpabuf_free(wps);
292 			}
293 			goto skip_wpa_check;
294 		}
295 #endif /* CONFIG_WPS */
296 
297 		if (sta->wpa_sm == NULL)
298 			sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
299 							sta->addr,
300 							p2p_dev_addr);
301 		if (sta->wpa_sm == NULL) {
302 			wpa_printf(MSG_ERROR,
303 				   "Failed to initialize WPA state machine");
304 			return -1;
305 		}
306 		res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
307 					  ie, ielen,
308 					  elems.mdie, elems.mdie_len,
309 					  elems.owe_dh, elems.owe_dh_len);
310 		if (res != WPA_IE_OK) {
311 			wpa_printf(MSG_DEBUG,
312 				   "WPA/RSN information element rejected? (res %u)",
313 				   res);
314 			wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
315 			if (res == WPA_INVALID_GROUP) {
316 				reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
317 				status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID;
318 			} else if (res == WPA_INVALID_PAIRWISE) {
319 				reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
320 				status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID;
321 			} else if (res == WPA_INVALID_AKMP) {
322 				reason = WLAN_REASON_AKMP_NOT_VALID;
323 				status = WLAN_STATUS_AKMP_NOT_VALID;
324 			}
325 #ifdef CONFIG_IEEE80211W
326 			else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION) {
327 				reason = WLAN_REASON_INVALID_IE;
328 				status = WLAN_STATUS_INVALID_IE;
329 			} else if (res == WPA_INVALID_MGMT_GROUP_CIPHER) {
330 				reason = WLAN_REASON_CIPHER_SUITE_REJECTED;
331 				status = WLAN_STATUS_CIPHER_REJECTED_PER_POLICY;
332 			}
333 #endif /* CONFIG_IEEE80211W */
334 			else {
335 				reason = WLAN_REASON_INVALID_IE;
336 				status = WLAN_STATUS_INVALID_IE;
337 			}
338 			goto fail;
339 		}
340 #ifdef CONFIG_IEEE80211W
341 		if ((sta->flags & (WLAN_STA_ASSOC | WLAN_STA_MFP)) ==
342 		    (WLAN_STA_ASSOC | WLAN_STA_MFP) &&
343 		    !sta->sa_query_timed_out &&
344 		    sta->sa_query_count > 0)
345 			ap_check_sa_query_timeout(hapd, sta);
346 		if ((sta->flags & (WLAN_STA_ASSOC | WLAN_STA_MFP)) ==
347 		    (WLAN_STA_ASSOC | WLAN_STA_MFP) &&
348 		    !sta->sa_query_timed_out &&
349 		    (sta->auth_alg != WLAN_AUTH_FT)) {
350 			/*
351 			 * STA has already been associated with MFP and SA
352 			 * Query timeout has not been reached. Reject the
353 			 * association attempt temporarily and start SA Query,
354 			 * if one is not pending.
355 			 */
356 
357 			if (sta->sa_query_count == 0)
358 				ap_sta_start_sa_query(hapd, sta);
359 
360 			status = WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY;
361 
362 			p = hostapd_eid_assoc_comeback_time(hapd, sta, p);
363 
364 			hostapd_sta_assoc(hapd, addr, reassoc, status, buf,
365 					  p - buf);
366 			return 0;
367 		}
368 
369 		if (wpa_auth_uses_mfp(sta->wpa_sm))
370 			sta->flags |= WLAN_STA_MFP;
371 		else
372 			sta->flags &= ~WLAN_STA_MFP;
373 #endif /* CONFIG_IEEE80211W */
374 
375 #ifdef CONFIG_IEEE80211R_AP
376 		if (sta->auth_alg == WLAN_AUTH_FT) {
377 			status = wpa_ft_validate_reassoc(sta->wpa_sm, req_ies,
378 							 req_ies_len);
379 			if (status != WLAN_STATUS_SUCCESS) {
380 				if (status == WLAN_STATUS_INVALID_PMKID)
381 					reason = WLAN_REASON_INVALID_IE;
382 				if (status == WLAN_STATUS_INVALID_MDIE)
383 					reason = WLAN_REASON_INVALID_IE;
384 				if (status == WLAN_STATUS_INVALID_FTIE)
385 					reason = WLAN_REASON_INVALID_IE;
386 				goto fail;
387 			}
388 		}
389 #endif /* CONFIG_IEEE80211R_AP */
390 	} else if (hapd->conf->wps_state) {
391 #ifdef CONFIG_WPS
392 		struct wpabuf *wps;
393 
394 		if (req_ies)
395 			wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
396 							  WPS_IE_VENDOR_TYPE);
397 		else
398 			wps = NULL;
399 #ifdef CONFIG_WPS_STRICT
400 		if (wps && wps_validate_assoc_req(wps) < 0) {
401 			reason = WLAN_REASON_INVALID_IE;
402 			status = WLAN_STATUS_INVALID_IE;
403 			wpabuf_free(wps);
404 			goto fail;
405 		}
406 #endif /* CONFIG_WPS_STRICT */
407 		if (wps) {
408 			sta->flags |= WLAN_STA_WPS;
409 			if (wps_is_20(wps)) {
410 				wpa_printf(MSG_DEBUG,
411 					   "WPS: STA supports WPS 2.0");
412 				sta->flags |= WLAN_STA_WPS2;
413 			}
414 		} else
415 			sta->flags |= WLAN_STA_MAYBE_WPS;
416 		wpabuf_free(wps);
417 #endif /* CONFIG_WPS */
418 #ifdef CONFIG_HS20
419 	} else if (hapd->conf->osen) {
420 		if (elems.osen == NULL) {
421 			hostapd_logger(
422 				hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
423 				HOSTAPD_LEVEL_INFO,
424 				"No HS 2.0 OSEN element in association request");
425 			return WLAN_STATUS_INVALID_IE;
426 		}
427 
428 		wpa_printf(MSG_DEBUG, "HS 2.0: OSEN association");
429 		if (sta->wpa_sm == NULL)
430 			sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
431 							sta->addr, NULL);
432 		if (sta->wpa_sm == NULL) {
433 			wpa_printf(MSG_WARNING,
434 				   "Failed to initialize WPA state machine");
435 			return WLAN_STATUS_UNSPECIFIED_FAILURE;
436 		}
437 		if (wpa_validate_osen(hapd->wpa_auth, sta->wpa_sm,
438 				      elems.osen - 2, elems.osen_len + 2) < 0)
439 			return WLAN_STATUS_INVALID_IE;
440 #endif /* CONFIG_HS20 */
441 	}
442 
443 #ifdef CONFIG_MBO
444 	if (hapd->conf->mbo_enabled && (hapd->conf->wpa & 2) &&
445 	    elems.mbo && sta->cell_capa && !(sta->flags & WLAN_STA_MFP) &&
446 	    hapd->conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) {
447 		wpa_printf(MSG_INFO,
448 			   "MBO: Reject WPA2 association without PMF");
449 		return WLAN_STATUS_UNSPECIFIED_FAILURE;
450 	}
451 #endif /* CONFIG_MBO */
452 
453 #ifdef CONFIG_WPS
454 skip_wpa_check:
455 #endif /* CONFIG_WPS */
456 
457 #ifdef CONFIG_IEEE80211R_AP
458 	p = wpa_sm_write_assoc_resp_ies(sta->wpa_sm, buf, sizeof(buf),
459 					sta->auth_alg, req_ies, req_ies_len);
460 	if (!p) {
461 		wpa_printf(MSG_DEBUG, "FT: Failed to write AssocResp IEs");
462 		return WLAN_STATUS_UNSPECIFIED_FAILURE;
463 	}
464 #endif /* CONFIG_IEEE80211R_AP */
465 
466 #ifdef CONFIG_FILS
467 	if (sta->auth_alg == WLAN_AUTH_FILS_SK ||
468 	    sta->auth_alg == WLAN_AUTH_FILS_SK_PFS ||
469 	    sta->auth_alg == WLAN_AUTH_FILS_PK) {
470 		int delay_assoc = 0;
471 
472 		if (!req_ies)
473 			return WLAN_STATUS_UNSPECIFIED_FAILURE;
474 
475 		if (!wpa_fils_validate_fils_session(sta->wpa_sm, req_ies,
476 						    req_ies_len,
477 						    sta->fils_session)) {
478 			wpa_printf(MSG_DEBUG,
479 				   "FILS: Session validation failed");
480 			return WLAN_STATUS_UNSPECIFIED_FAILURE;
481 		}
482 
483 		res = wpa_fils_validate_key_confirm(sta->wpa_sm, req_ies,
484 						    req_ies_len);
485 		if (res < 0) {
486 			wpa_printf(MSG_DEBUG,
487 				   "FILS: Key Confirm validation failed");
488 			return WLAN_STATUS_UNSPECIFIED_FAILURE;
489 		}
490 
491 		if (fils_process_hlp(hapd, sta, req_ies, req_ies_len) > 0) {
492 			wpa_printf(MSG_DEBUG,
493 				   "FILS: Delaying Assoc Response (HLP)");
494 			delay_assoc = 1;
495 		} else {
496 			wpa_printf(MSG_DEBUG,
497 				   "FILS: Going ahead with Assoc Response (no HLP)");
498 		}
499 
500 		if (sta) {
501 			wpa_printf(MSG_DEBUG, "FILS: HLP callback cleanup");
502 			eloop_cancel_timeout(fils_hlp_timeout, hapd, sta);
503 			os_free(sta->fils_pending_assoc_req);
504 			sta->fils_pending_assoc_req = NULL;
505 			sta->fils_pending_assoc_req_len = 0;
506 			wpabuf_free(sta->fils_hlp_resp);
507 			sta->fils_hlp_resp = NULL;
508 			sta->fils_drv_assoc_finish = 0;
509 		}
510 
511 		if (sta && delay_assoc && status == WLAN_STATUS_SUCCESS) {
512 			u8 *req_tmp;
513 
514 			req_tmp = os_malloc(req_ies_len);
515 			if (!req_tmp) {
516 				wpa_printf(MSG_DEBUG,
517 					   "FILS: buffer allocation failed for assoc req");
518 				goto fail;
519 			}
520 			os_memcpy(req_tmp, req_ies, req_ies_len);
521 			sta->fils_pending_assoc_req = req_tmp;
522 			sta->fils_pending_assoc_req_len = req_ies_len;
523 			sta->fils_pending_assoc_is_reassoc = reassoc;
524 			sta->fils_drv_assoc_finish = 1;
525 			wpa_printf(MSG_DEBUG,
526 				   "FILS: Waiting for HLP processing before sending (Re)Association Response frame to "
527 				   MACSTR, MAC2STR(sta->addr));
528 			eloop_register_timeout(
529 				0, hapd->conf->fils_hlp_wait_time * 1024,
530 				fils_hlp_timeout, hapd, sta);
531 			return 0;
532 		}
533 		p = hostapd_eid_assoc_fils_session(sta->wpa_sm, p,
534 						   elems.fils_session,
535 						   sta->fils_hlp_resp);
536 		wpa_hexdump(MSG_DEBUG, "FILS Assoc Resp BUF (IEs)",
537 			    buf, p - buf);
538 	}
539 #endif /* CONFIG_FILS */
540 
541 #ifdef CONFIG_OWE
542 	if ((hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_OWE) &&
543 	    wpa_auth_sta_key_mgmt(sta->wpa_sm) == WPA_KEY_MGMT_OWE &&
544 	    elems.owe_dh) {
545 		u8 *npos;
546 
547 		npos = owe_assoc_req_process(hapd, sta,
548 					     elems.owe_dh, elems.owe_dh_len,
549 					     p, sizeof(buf) - (p - buf),
550 					     &reason);
551 		if (npos)
552 			p = npos;
553 		if (!npos &&
554 		    reason == WLAN_STATUS_FINITE_CYCLIC_GROUP_NOT_SUPPORTED) {
555 			status = WLAN_STATUS_FINITE_CYCLIC_GROUP_NOT_SUPPORTED;
556 			hostapd_sta_assoc(hapd, addr, reassoc, status, buf,
557 					  p - buf);
558 			return 0;
559 		}
560 
561 		if (!npos || reason != WLAN_STATUS_SUCCESS)
562 			goto fail;
563 	}
564 #endif /* CONFIG_OWE */
565 
566 #if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_FILS) || defined(CONFIG_OWE)
567 	hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
568 
569 	if (sta->auth_alg == WLAN_AUTH_FT ||
570 	    sta->auth_alg == WLAN_AUTH_FILS_SK ||
571 	    sta->auth_alg == WLAN_AUTH_FILS_SK_PFS ||
572 	    sta->auth_alg == WLAN_AUTH_FILS_PK)
573 		ap_sta_set_authorized(hapd, sta, 1);
574 #else /* CONFIG_IEEE80211R_AP || CONFIG_FILS */
575 	/* Keep compiler silent about unused variables */
576 	if (status) {
577 	}
578 #endif /* CONFIG_IEEE80211R_AP || CONFIG_FILS */
579 
580 	new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
581 	sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
582 	sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE;
583 
584 	hostapd_set_sta_flags(hapd, sta);
585 
586 	if (reassoc && (sta->auth_alg == WLAN_AUTH_FT))
587 		wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FT);
588 #ifdef CONFIG_FILS
589 	else if (sta->auth_alg == WLAN_AUTH_FILS_SK ||
590 		 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS ||
591 		 sta->auth_alg == WLAN_AUTH_FILS_PK)
592 		wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FILS);
593 #endif /* CONFIG_FILS */
594 	else
595 		wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
596 
597 	hostapd_new_assoc_sta(hapd, sta, !new_assoc);
598 
599 	ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
600 
601 #ifdef CONFIG_P2P
602 	if (req_ies) {
603 		p2p_group_notif_assoc(hapd->p2p_group, sta->addr,
604 				      req_ies, req_ies_len);
605 	}
606 #endif /* CONFIG_P2P */
607 
608 	return 0;
609 
610 fail:
611 #ifdef CONFIG_IEEE80211R_AP
612 	hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf);
613 #endif /* CONFIG_IEEE80211R_AP */
614 	hostapd_drv_sta_disassoc(hapd, sta->addr, reason);
615 	ap_free_sta(hapd, sta);
616 	return -1;
617 }
618 
619 
620 void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
621 {
622 	struct sta_info *sta;
623 
624 	if (addr == NULL) {
625 		/*
626 		 * This could potentially happen with unexpected event from the
627 		 * driver wrapper. This was seen at least in one case where the
628 		 * driver ended up reporting a station mode event while hostapd
629 		 * was running, so better make sure we stop processing such an
630 		 * event here.
631 		 */
632 		wpa_printf(MSG_DEBUG,
633 			   "hostapd_notif_disassoc: Skip event with no address");
634 		return;
635 	}
636 
637 	hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
638 		       HOSTAPD_LEVEL_INFO, "disassociated");
639 
640 	sta = ap_get_sta(hapd, addr);
641 	if (sta == NULL) {
642 		wpa_printf(MSG_DEBUG,
643 			   "Disassociation notification for unknown STA "
644 			   MACSTR, MAC2STR(addr));
645 		return;
646 	}
647 
648 	ap_sta_set_authorized(hapd, sta, 0);
649 	sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
650 	wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
651 	sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
652 	ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
653 	ap_free_sta(hapd, sta);
654 }
655 
656 
657 void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr)
658 {
659 	struct sta_info *sta = ap_get_sta(hapd, addr);
660 
661 	if (!sta || !hapd->conf->disassoc_low_ack || sta->agreed_to_steer)
662 		return;
663 
664 	hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
665 		       HOSTAPD_LEVEL_INFO,
666 		       "disconnected due to excessive missing ACKs");
667 	hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK);
668 	ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK);
669 }
670 
671 
672 void hostapd_event_sta_opmode_changed(struct hostapd_data *hapd, const u8 *addr,
673 				      enum smps_mode smps_mode,
674 				      enum chan_width chan_width, u8 rx_nss)
675 {
676 	struct sta_info *sta = ap_get_sta(hapd, addr);
677 	const char *txt;
678 
679 	if (!sta)
680 		return;
681 
682 	switch (smps_mode) {
683 	case SMPS_AUTOMATIC:
684 		txt = "automatic";
685 		break;
686 	case SMPS_OFF:
687 		txt = "off";
688 		break;
689 	case SMPS_DYNAMIC:
690 		txt = "dynamic";
691 		break;
692 	case SMPS_STATIC:
693 		txt = "static";
694 		break;
695 	default:
696 		txt = NULL;
697 		break;
698 	}
699 	if (txt) {
700 		wpa_msg(hapd->msg_ctx, MSG_INFO, STA_OPMODE_SMPS_MODE_CHANGED
701 			MACSTR " %s", MAC2STR(addr), txt);
702 	}
703 
704 	switch (chan_width) {
705 	case CHAN_WIDTH_20_NOHT:
706 		txt = "20(no-HT)";
707 		break;
708 	case CHAN_WIDTH_20:
709 		txt = "20";
710 		break;
711 	case CHAN_WIDTH_40:
712 		txt = "40";
713 		break;
714 	case CHAN_WIDTH_80:
715 		txt = "80";
716 		break;
717 	case CHAN_WIDTH_80P80:
718 		txt = "80+80";
719 		break;
720 	case CHAN_WIDTH_160:
721 		txt = "160";
722 		break;
723 	default:
724 		txt = NULL;
725 		break;
726 	}
727 	if (txt) {
728 		wpa_msg(hapd->msg_ctx, MSG_INFO, STA_OPMODE_MAX_BW_CHANGED
729 			MACSTR " %s", MAC2STR(addr), txt);
730 	}
731 
732 	if (rx_nss != 0xff) {
733 		wpa_msg(hapd->msg_ctx, MSG_INFO, STA_OPMODE_N_SS_CHANGED
734 			MACSTR " %d", MAC2STR(addr), rx_nss);
735 	}
736 }
737 
738 
739 void hostapd_event_ch_switch(struct hostapd_data *hapd, int freq, int ht,
740 			     int offset, int width, int cf1, int cf2)
741 {
742 #ifdef NEED_AP_MLME
743 	int channel, chwidth, is_dfs;
744 	u8 seg0_idx = 0, seg1_idx = 0;
745 
746 	hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
747 		       HOSTAPD_LEVEL_INFO,
748 		       "driver had channel switch: freq=%d, ht=%d, vht_ch=0x%x, offset=%d, width=%d (%s), cf1=%d, cf2=%d",
749 		       freq, ht, hapd->iconf->ch_switch_vht_config, offset,
750 		       width, channel_width_to_string(width), cf1, cf2);
751 
752 	hapd->iface->freq = freq;
753 
754 	channel = hostapd_hw_get_channel(hapd, freq);
755 	if (!channel) {
756 		hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
757 			       HOSTAPD_LEVEL_WARNING,
758 			       "driver switched to bad channel!");
759 		return;
760 	}
761 
762 	switch (width) {
763 	case CHAN_WIDTH_80:
764 		chwidth = VHT_CHANWIDTH_80MHZ;
765 		break;
766 	case CHAN_WIDTH_80P80:
767 		chwidth = VHT_CHANWIDTH_80P80MHZ;
768 		break;
769 	case CHAN_WIDTH_160:
770 		chwidth = VHT_CHANWIDTH_160MHZ;
771 		break;
772 	case CHAN_WIDTH_20_NOHT:
773 	case CHAN_WIDTH_20:
774 	case CHAN_WIDTH_40:
775 	default:
776 		chwidth = VHT_CHANWIDTH_USE_HT;
777 		break;
778 	}
779 
780 	switch (hapd->iface->current_mode->mode) {
781 	case HOSTAPD_MODE_IEEE80211A:
782 		if (cf1 > 5000)
783 			seg0_idx = (cf1 - 5000) / 5;
784 		if (cf2 > 5000)
785 			seg1_idx = (cf2 - 5000) / 5;
786 		break;
787 	default:
788 		ieee80211_freq_to_chan(cf1, &seg0_idx);
789 		ieee80211_freq_to_chan(cf2, &seg1_idx);
790 		break;
791 	}
792 
793 	hapd->iconf->channel = channel;
794 	hapd->iconf->ieee80211n = ht;
795 	if (!ht) {
796 		hapd->iconf->ieee80211ac = 0;
797 	} else if (hapd->iconf->ch_switch_vht_config) {
798 		/* CHAN_SWITCH VHT config */
799 		if (hapd->iconf->ch_switch_vht_config &
800 		    CH_SWITCH_VHT_ENABLED)
801 			hapd->iconf->ieee80211ac = 1;
802 		else if (hapd->iconf->ch_switch_vht_config &
803 			 CH_SWITCH_VHT_DISABLED)
804 			hapd->iconf->ieee80211ac = 0;
805 	}
806 	hapd->iconf->ch_switch_vht_config = 0;
807 
808 	hapd->iconf->secondary_channel = offset;
809 	hapd->iconf->vht_oper_chwidth = chwidth;
810 	hapd->iconf->vht_oper_centr_freq_seg0_idx = seg0_idx;
811 	hapd->iconf->vht_oper_centr_freq_seg1_idx = seg1_idx;
812 
813 	is_dfs = ieee80211_is_dfs(freq, hapd->iface->hw_features,
814 				  hapd->iface->num_hw_features);
815 
816 	if (hapd->csa_in_progress &&
817 	    freq == hapd->cs_freq_params.freq) {
818 		hostapd_cleanup_cs_params(hapd);
819 		ieee802_11_set_beacon(hapd);
820 
821 		wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED
822 			"freq=%d dfs=%d", freq, is_dfs);
823 	} else if (hapd->iface->drv_flags & WPA_DRIVER_FLAGS_DFS_OFFLOAD) {
824 		wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED
825 			"freq=%d dfs=%d", freq, is_dfs);
826 	}
827 #endif /* NEED_AP_MLME */
828 }
829 
830 
831 void hostapd_event_connect_failed_reason(struct hostapd_data *hapd,
832 					 const u8 *addr, int reason_code)
833 {
834 	switch (reason_code) {
835 	case MAX_CLIENT_REACHED:
836 		wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_MAX_STA MACSTR,
837 			MAC2STR(addr));
838 		break;
839 	case BLOCKED_CLIENT:
840 		wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_BLOCKED_STA MACSTR,
841 			MAC2STR(addr));
842 		break;
843 	}
844 }
845 
846 
847 #ifdef CONFIG_ACS
848 void hostapd_acs_channel_selected(struct hostapd_data *hapd,
849 				  struct acs_selected_channels *acs_res)
850 {
851 	int ret, i;
852 	int err = 0;
853 
854 	if (hapd->iconf->channel) {
855 		wpa_printf(MSG_INFO, "ACS: Channel was already set to %d",
856 			   hapd->iconf->channel);
857 		return;
858 	}
859 
860 	if (!hapd->iface->current_mode) {
861 		for (i = 0; i < hapd->iface->num_hw_features; i++) {
862 			struct hostapd_hw_modes *mode =
863 				&hapd->iface->hw_features[i];
864 
865 			if (mode->mode == acs_res->hw_mode) {
866 				hapd->iface->current_mode = mode;
867 				break;
868 			}
869 		}
870 		if (!hapd->iface->current_mode) {
871 			hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
872 				       HOSTAPD_LEVEL_WARNING,
873 				       "driver selected to bad hw_mode");
874 			err = 1;
875 			goto out;
876 		}
877 	}
878 
879 	hapd->iface->freq = hostapd_hw_get_freq(hapd, acs_res->pri_channel);
880 
881 	if (!acs_res->pri_channel) {
882 		hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
883 			       HOSTAPD_LEVEL_WARNING,
884 			       "driver switched to bad channel");
885 		err = 1;
886 		goto out;
887 	}
888 
889 	hapd->iconf->channel = acs_res->pri_channel;
890 	hapd->iconf->acs = 1;
891 
892 	if (acs_res->sec_channel == 0)
893 		hapd->iconf->secondary_channel = 0;
894 	else if (acs_res->sec_channel < acs_res->pri_channel)
895 		hapd->iconf->secondary_channel = -1;
896 	else if (acs_res->sec_channel > acs_res->pri_channel)
897 		hapd->iconf->secondary_channel = 1;
898 	else {
899 		wpa_printf(MSG_ERROR, "Invalid secondary channel!");
900 		err = 1;
901 		goto out;
902 	}
903 
904 	if (hapd->iface->conf->ieee80211ac) {
905 		/* set defaults for backwards compatibility */
906 		hapd->iconf->vht_oper_centr_freq_seg1_idx = 0;
907 		hapd->iconf->vht_oper_centr_freq_seg0_idx = 0;
908 		hapd->iconf->vht_oper_chwidth = VHT_CHANWIDTH_USE_HT;
909 		if (acs_res->ch_width == 80) {
910 			hapd->iconf->vht_oper_centr_freq_seg0_idx =
911 				acs_res->vht_seg0_center_ch;
912 			hapd->iconf->vht_oper_chwidth = VHT_CHANWIDTH_80MHZ;
913 		} else if (acs_res->ch_width == 160) {
914 			if (acs_res->vht_seg1_center_ch == 0) {
915 				hapd->iconf->vht_oper_centr_freq_seg0_idx =
916 					acs_res->vht_seg0_center_ch;
917 				hapd->iconf->vht_oper_chwidth =
918 					VHT_CHANWIDTH_160MHZ;
919 			} else {
920 				hapd->iconf->vht_oper_centr_freq_seg0_idx =
921 					acs_res->vht_seg0_center_ch;
922 				hapd->iconf->vht_oper_centr_freq_seg1_idx =
923 					acs_res->vht_seg1_center_ch;
924 				hapd->iconf->vht_oper_chwidth =
925 					VHT_CHANWIDTH_80P80MHZ;
926 			}
927 		}
928 	}
929 
930 out:
931 	ret = hostapd_acs_completed(hapd->iface, err);
932 	if (ret) {
933 		wpa_printf(MSG_ERROR,
934 			   "ACS: Possibly channel configuration is invalid");
935 	}
936 }
937 #endif /* CONFIG_ACS */
938 
939 
940 int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da,
941 			 const u8 *bssid, const u8 *ie, size_t ie_len,
942 			 int ssi_signal)
943 {
944 	size_t i;
945 	int ret = 0;
946 
947 	if (sa == NULL || ie == NULL)
948 		return -1;
949 
950 	random_add_randomness(sa, ETH_ALEN);
951 	for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) {
952 		if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
953 					    sa, da, bssid, ie, ie_len,
954 					    ssi_signal) > 0) {
955 			ret = 1;
956 			break;
957 		}
958 	}
959 	return ret;
960 }
961 
962 
963 #ifdef HOSTAPD
964 
965 #ifdef CONFIG_IEEE80211R_AP
966 static void hostapd_notify_auth_ft_finish(void *ctx, const u8 *dst,
967 					  const u8 *bssid,
968 					  u16 auth_transaction, u16 status,
969 					  const u8 *ies, size_t ies_len)
970 {
971 	struct hostapd_data *hapd = ctx;
972 	struct sta_info *sta;
973 
974 	sta = ap_get_sta(hapd, dst);
975 	if (sta == NULL)
976 		return;
977 
978 	hostapd_logger(hapd, dst, HOSTAPD_MODULE_IEEE80211,
979 		       HOSTAPD_LEVEL_DEBUG, "authentication OK (FT)");
980 	sta->flags |= WLAN_STA_AUTH;
981 
982 	hostapd_sta_auth(hapd, dst, auth_transaction, status, ies, ies_len);
983 }
984 #endif /* CONFIG_IEEE80211R_AP */
985 
986 
987 #ifdef CONFIG_FILS
988 static void hostapd_notify_auth_fils_finish(struct hostapd_data *hapd,
989 					    struct sta_info *sta, u16 resp,
990 					    struct wpabuf *data, int pub)
991 {
992 	if (resp == WLAN_STATUS_SUCCESS) {
993 		hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
994 			       HOSTAPD_LEVEL_DEBUG, "authentication OK (FILS)");
995 		sta->flags |= WLAN_STA_AUTH;
996 		wpa_auth_sm_event(sta->wpa_sm, WPA_AUTH);
997 		sta->auth_alg = WLAN_AUTH_FILS_SK;
998 		mlme_authenticate_indication(hapd, sta);
999 	} else {
1000 		hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,
1001 			       HOSTAPD_LEVEL_DEBUG,
1002 			       "authentication failed (FILS)");
1003 	}
1004 
1005 	hostapd_sta_auth(hapd, sta->addr, 2, resp,
1006 			 data ? wpabuf_head(data) : NULL,
1007 			 data ? wpabuf_len(data) : 0);
1008 	wpabuf_free(data);
1009 }
1010 #endif /* CONFIG_FILS */
1011 
1012 
1013 static void hostapd_notif_auth(struct hostapd_data *hapd,
1014 			       struct auth_info *rx_auth)
1015 {
1016 	struct sta_info *sta;
1017 	u16 status = WLAN_STATUS_SUCCESS;
1018 	u8 resp_ies[2 + WLAN_AUTH_CHALLENGE_LEN];
1019 	size_t resp_ies_len = 0;
1020 
1021 	sta = ap_get_sta(hapd, rx_auth->peer);
1022 	if (!sta) {
1023 		sta = ap_sta_add(hapd, rx_auth->peer);
1024 		if (sta == NULL) {
1025 			status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA;
1026 			goto fail;
1027 		}
1028 	}
1029 	sta->flags &= ~WLAN_STA_PREAUTH;
1030 	ieee802_1x_notify_pre_auth(sta->eapol_sm, 0);
1031 #ifdef CONFIG_IEEE80211R_AP
1032 	if (rx_auth->auth_type == WLAN_AUTH_FT && hapd->wpa_auth) {
1033 		sta->auth_alg = WLAN_AUTH_FT;
1034 		if (sta->wpa_sm == NULL)
1035 			sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
1036 							sta->addr, NULL);
1037 		if (sta->wpa_sm == NULL) {
1038 			wpa_printf(MSG_DEBUG,
1039 				   "FT: Failed to initialize WPA state machine");
1040 			status = WLAN_STATUS_UNSPECIFIED_FAILURE;
1041 			goto fail;
1042 		}
1043 		wpa_ft_process_auth(sta->wpa_sm, rx_auth->bssid,
1044 				    rx_auth->auth_transaction, rx_auth->ies,
1045 				    rx_auth->ies_len,
1046 				    hostapd_notify_auth_ft_finish, hapd);
1047 		return;
1048 	}
1049 #endif /* CONFIG_IEEE80211R_AP */
1050 
1051 #ifdef CONFIG_FILS
1052 	if (rx_auth->auth_type == WLAN_AUTH_FILS_SK) {
1053 		sta->auth_alg = WLAN_AUTH_FILS_SK;
1054 		handle_auth_fils(hapd, sta, rx_auth->ies, rx_auth->ies_len,
1055 				 rx_auth->auth_type, rx_auth->auth_transaction,
1056 				 rx_auth->status_code,
1057 				 hostapd_notify_auth_fils_finish);
1058 		return;
1059 	}
1060 #endif /* CONFIG_FILS */
1061 
1062 fail:
1063 	hostapd_sta_auth(hapd, rx_auth->peer, rx_auth->auth_transaction + 1,
1064 			 status, resp_ies, resp_ies_len);
1065 }
1066 
1067 
1068 static void hostapd_action_rx(struct hostapd_data *hapd,
1069 			      struct rx_mgmt *drv_mgmt)
1070 {
1071 	struct ieee80211_mgmt *mgmt;
1072 	struct sta_info *sta;
1073 	size_t plen __maybe_unused;
1074 	u16 fc;
1075 	u8 *action __maybe_unused;
1076 
1077 	if (drv_mgmt->frame_len < IEEE80211_HDRLEN + 2 + 1)
1078 		return;
1079 
1080 	plen = drv_mgmt->frame_len - IEEE80211_HDRLEN - 1;
1081 
1082 	mgmt = (struct ieee80211_mgmt *) drv_mgmt->frame;
1083 	fc = le_to_host16(mgmt->frame_control);
1084 	if (WLAN_FC_GET_STYPE(fc) != WLAN_FC_STYPE_ACTION)
1085 		return; /* handled by the driver */
1086 
1087 	action = (u8 *) &mgmt->u.action.u;
1088 	wpa_printf(MSG_DEBUG, "RX_ACTION category %u action %u sa " MACSTR
1089 		   " da " MACSTR " plen %d",
1090 		   mgmt->u.action.category, *action,
1091 		   MAC2STR(mgmt->sa), MAC2STR(mgmt->da), (int) plen);
1092 
1093 	sta = ap_get_sta(hapd, mgmt->sa);
1094 	if (sta == NULL) {
1095 		wpa_printf(MSG_DEBUG, "%s: station not found", __func__);
1096 		return;
1097 	}
1098 #ifdef CONFIG_IEEE80211R_AP
1099 	if (mgmt->u.action.category == WLAN_ACTION_FT) {
1100 		const u8 *payload = drv_mgmt->frame + 24 + 1;
1101 
1102 		wpa_ft_action_rx(sta->wpa_sm, payload, plen);
1103 	}
1104 #endif /* CONFIG_IEEE80211R_AP */
1105 #ifdef CONFIG_IEEE80211W
1106 	if (mgmt->u.action.category == WLAN_ACTION_SA_QUERY && plen >= 4) {
1107 		ieee802_11_sa_query_action(
1108 			hapd, mgmt->sa,
1109 			mgmt->u.action.u.sa_query_resp.action,
1110 			mgmt->u.action.u.sa_query_resp.trans_id);
1111 	}
1112 #endif /* CONFIG_IEEE80211W */
1113 #ifdef CONFIG_WNM_AP
1114 	if (mgmt->u.action.category == WLAN_ACTION_WNM) {
1115 		ieee802_11_rx_wnm_action_ap(hapd, mgmt, drv_mgmt->frame_len);
1116 	}
1117 #endif /* CONFIG_WNM_AP */
1118 #ifdef CONFIG_FST
1119 	if (mgmt->u.action.category == WLAN_ACTION_FST && hapd->iface->fst) {
1120 		fst_rx_action(hapd->iface->fst, mgmt, drv_mgmt->frame_len);
1121 		return;
1122 	}
1123 #endif /* CONFIG_FST */
1124 #ifdef CONFIG_DPP
1125 	if (plen >= 1 + 4 &&
1126 	    mgmt->u.action.u.vs_public_action.action ==
1127 	    WLAN_PA_VENDOR_SPECIFIC &&
1128 	    WPA_GET_BE24(mgmt->u.action.u.vs_public_action.oui) ==
1129 	    OUI_WFA &&
1130 	    mgmt->u.action.u.vs_public_action.variable[0] ==
1131 	    DPP_OUI_TYPE) {
1132 		const u8 *pos, *end;
1133 
1134 		pos = mgmt->u.action.u.vs_public_action.oui;
1135 		end = drv_mgmt->frame + drv_mgmt->frame_len;
1136 		hostapd_dpp_rx_action(hapd, mgmt->sa, pos, end - pos,
1137 				      drv_mgmt->freq);
1138 		return;
1139 	}
1140 #endif /* CONFIG_DPP */
1141 }
1142 
1143 
1144 #ifdef NEED_AP_MLME
1145 
1146 #define HAPD_BROADCAST ((struct hostapd_data *) -1)
1147 
1148 static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
1149 					    const u8 *bssid)
1150 {
1151 	size_t i;
1152 
1153 	if (bssid == NULL)
1154 		return NULL;
1155 	if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
1156 	    bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
1157 		return HAPD_BROADCAST;
1158 
1159 	for (i = 0; i < iface->num_bss; i++) {
1160 		if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
1161 			return iface->bss[i];
1162 	}
1163 
1164 	return NULL;
1165 }
1166 
1167 
1168 static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
1169 					const u8 *bssid, const u8 *addr,
1170 					int wds)
1171 {
1172 	hapd = get_hapd_bssid(hapd->iface, bssid);
1173 	if (hapd == NULL || hapd == HAPD_BROADCAST)
1174 		return;
1175 
1176 	ieee802_11_rx_from_unknown(hapd, addr, wds);
1177 }
1178 
1179 
1180 static int hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt)
1181 {
1182 	struct hostapd_iface *iface = hapd->iface;
1183 	const struct ieee80211_hdr *hdr;
1184 	const u8 *bssid;
1185 	struct hostapd_frame_info fi;
1186 	int ret;
1187 
1188 #ifdef CONFIG_TESTING_OPTIONS
1189 	if (hapd->ext_mgmt_frame_handling) {
1190 		size_t hex_len = 2 * rx_mgmt->frame_len + 1;
1191 		char *hex = os_malloc(hex_len);
1192 
1193 		if (hex) {
1194 			wpa_snprintf_hex(hex, hex_len, rx_mgmt->frame,
1195 					 rx_mgmt->frame_len);
1196 			wpa_msg(hapd->msg_ctx, MSG_INFO, "MGMT-RX %s", hex);
1197 			os_free(hex);
1198 		}
1199 		return 1;
1200 	}
1201 #endif /* CONFIG_TESTING_OPTIONS */
1202 
1203 	hdr = (const struct ieee80211_hdr *) rx_mgmt->frame;
1204 	bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len);
1205 	if (bssid == NULL)
1206 		return 0;
1207 
1208 	hapd = get_hapd_bssid(iface, bssid);
1209 	if (hapd == NULL) {
1210 		u16 fc = le_to_host16(hdr->frame_control);
1211 
1212 		/*
1213 		 * Drop frames to unknown BSSIDs except for Beacon frames which
1214 		 * could be used to update neighbor information.
1215 		 */
1216 		if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1217 		    WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
1218 			hapd = iface->bss[0];
1219 		else
1220 			return 0;
1221 	}
1222 
1223 	os_memset(&fi, 0, sizeof(fi));
1224 	fi.freq = rx_mgmt->freq;
1225 	fi.datarate = rx_mgmt->datarate;
1226 	fi.ssi_signal = rx_mgmt->ssi_signal;
1227 
1228 	if (hapd == HAPD_BROADCAST) {
1229 		size_t i;
1230 
1231 		ret = 0;
1232 		for (i = 0; i < iface->num_bss; i++) {
1233 			/* if bss is set, driver will call this function for
1234 			 * each bss individually. */
1235 			if (rx_mgmt->drv_priv &&
1236 			    (iface->bss[i]->drv_priv != rx_mgmt->drv_priv))
1237 				continue;
1238 
1239 			if (ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame,
1240 					    rx_mgmt->frame_len, &fi) > 0)
1241 				ret = 1;
1242 		}
1243 	} else
1244 		ret = ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len,
1245 				      &fi);
1246 
1247 	random_add_randomness(&fi, sizeof(fi));
1248 
1249 	return ret;
1250 }
1251 
1252 
1253 static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf,
1254 			       size_t len, u16 stype, int ok)
1255 {
1256 	struct ieee80211_hdr *hdr;
1257 	struct hostapd_data *orig_hapd = hapd;
1258 
1259 	hdr = (struct ieee80211_hdr *) buf;
1260 	hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
1261 	if (!hapd)
1262 		return;
1263 	if (hapd == HAPD_BROADCAST) {
1264 		if (stype != WLAN_FC_STYPE_ACTION || len <= 25 ||
1265 		    buf[24] != WLAN_ACTION_PUBLIC)
1266 			return;
1267 		hapd = get_hapd_bssid(orig_hapd->iface, hdr->addr2);
1268 		if (!hapd || hapd == HAPD_BROADCAST)
1269 			return;
1270 		/*
1271 		 * Allow processing of TX status for a Public Action frame that
1272 		 * used wildcard BBSID.
1273 		 */
1274 	}
1275 	ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
1276 }
1277 
1278 #endif /* NEED_AP_MLME */
1279 
1280 
1281 static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr)
1282 {
1283 	struct sta_info *sta = ap_get_sta(hapd, addr);
1284 
1285 	if (sta)
1286 		return 0;
1287 
1288 	wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR
1289 		   " - adding a new STA", MAC2STR(addr));
1290 	sta = ap_sta_add(hapd, addr);
1291 	if (sta) {
1292 		hostapd_new_assoc_sta(hapd, sta, 0);
1293 	} else {
1294 		wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR,
1295 			   MAC2STR(addr));
1296 		return -1;
1297 	}
1298 
1299 	return 0;
1300 }
1301 
1302 
1303 static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src,
1304 				   const u8 *data, size_t data_len)
1305 {
1306 	struct hostapd_iface *iface = hapd->iface;
1307 	struct sta_info *sta;
1308 	size_t j;
1309 
1310 	for (j = 0; j < iface->num_bss; j++) {
1311 		sta = ap_get_sta(iface->bss[j], src);
1312 		if (sta && sta->flags & WLAN_STA_ASSOC) {
1313 			hapd = iface->bss[j];
1314 			break;
1315 		}
1316 	}
1317 
1318 	ieee802_1x_receive(hapd, src, data, data_len);
1319 }
1320 
1321 #endif /* HOSTAPD */
1322 
1323 
1324 static struct hostapd_channel_data * hostapd_get_mode_channel(
1325 	struct hostapd_iface *iface, unsigned int freq)
1326 {
1327 	int i;
1328 	struct hostapd_channel_data *chan;
1329 
1330 	for (i = 0; i < iface->current_mode->num_channels; i++) {
1331 		chan = &iface->current_mode->channels[i];
1332 		if ((unsigned int) chan->freq == freq)
1333 			return chan;
1334 	}
1335 
1336 	return NULL;
1337 }
1338 
1339 
1340 static void hostapd_update_nf(struct hostapd_iface *iface,
1341 			      struct hostapd_channel_data *chan,
1342 			      struct freq_survey *survey)
1343 {
1344 	if (!iface->chans_surveyed) {
1345 		chan->min_nf = survey->nf;
1346 		iface->lowest_nf = survey->nf;
1347 	} else {
1348 		if (dl_list_empty(&chan->survey_list))
1349 			chan->min_nf = survey->nf;
1350 		else if (survey->nf < chan->min_nf)
1351 			chan->min_nf = survey->nf;
1352 		if (survey->nf < iface->lowest_nf)
1353 			iface->lowest_nf = survey->nf;
1354 	}
1355 }
1356 
1357 
1358 static void hostapd_single_channel_get_survey(struct hostapd_iface *iface,
1359 					      struct survey_results *survey_res)
1360 {
1361 	struct hostapd_channel_data *chan;
1362 	struct freq_survey *survey;
1363 	u64 divisor, dividend;
1364 
1365 	survey = dl_list_first(&survey_res->survey_list, struct freq_survey,
1366 			       list);
1367 	if (!survey || !survey->freq)
1368 		return;
1369 
1370 	chan = hostapd_get_mode_channel(iface, survey->freq);
1371 	if (!chan || chan->flag & HOSTAPD_CHAN_DISABLED)
1372 		return;
1373 
1374 	wpa_printf(MSG_DEBUG,
1375 		   "Single Channel Survey: (freq=%d channel_time=%ld channel_time_busy=%ld)",
1376 		   survey->freq,
1377 		   (unsigned long int) survey->channel_time,
1378 		   (unsigned long int) survey->channel_time_busy);
1379 
1380 	if (survey->channel_time > iface->last_channel_time &&
1381 	    survey->channel_time > survey->channel_time_busy) {
1382 		dividend = survey->channel_time_busy -
1383 			iface->last_channel_time_busy;
1384 		divisor = survey->channel_time - iface->last_channel_time;
1385 
1386 		iface->channel_utilization = dividend * 255 / divisor;
1387 		wpa_printf(MSG_DEBUG, "Channel Utilization: %d",
1388 			   iface->channel_utilization);
1389 	}
1390 	iface->last_channel_time = survey->channel_time;
1391 	iface->last_channel_time_busy = survey->channel_time_busy;
1392 }
1393 
1394 
1395 void hostapd_event_get_survey(struct hostapd_iface *iface,
1396 			      struct survey_results *survey_results)
1397 {
1398 	struct freq_survey *survey, *tmp;
1399 	struct hostapd_channel_data *chan;
1400 
1401 	if (dl_list_empty(&survey_results->survey_list)) {
1402 		wpa_printf(MSG_DEBUG, "No survey data received");
1403 		return;
1404 	}
1405 
1406 	if (survey_results->freq_filter) {
1407 		hostapd_single_channel_get_survey(iface, survey_results);
1408 		return;
1409 	}
1410 
1411 	dl_list_for_each_safe(survey, tmp, &survey_results->survey_list,
1412 			      struct freq_survey, list) {
1413 		chan = hostapd_get_mode_channel(iface, survey->freq);
1414 		if (!chan)
1415 			continue;
1416 		if (chan->flag & HOSTAPD_CHAN_DISABLED)
1417 			continue;
1418 
1419 		dl_list_del(&survey->list);
1420 		dl_list_add_tail(&chan->survey_list, &survey->list);
1421 
1422 		hostapd_update_nf(iface, chan, survey);
1423 
1424 		iface->chans_surveyed++;
1425 	}
1426 }
1427 
1428 
1429 #ifdef HOSTAPD
1430 #ifdef NEED_AP_MLME
1431 
1432 static void hostapd_event_iface_unavailable(struct hostapd_data *hapd)
1433 {
1434 	wpa_printf(MSG_DEBUG, "Interface %s is unavailable -- stopped",
1435 		   hapd->conf->iface);
1436 
1437 	if (hapd->csa_in_progress) {
1438 		wpa_printf(MSG_INFO, "CSA failed (%s was stopped)",
1439 			   hapd->conf->iface);
1440 		hostapd_switch_channel_fallback(hapd->iface,
1441 						&hapd->cs_freq_params);
1442 	}
1443 }
1444 
1445 
1446 static void hostapd_event_dfs_radar_detected(struct hostapd_data *hapd,
1447 					     struct dfs_event *radar)
1448 {
1449 	wpa_printf(MSG_DEBUG, "DFS radar detected on %d MHz", radar->freq);
1450 	hostapd_dfs_radar_detected(hapd->iface, radar->freq, radar->ht_enabled,
1451 				   radar->chan_offset, radar->chan_width,
1452 				   radar->cf1, radar->cf2);
1453 }
1454 
1455 
1456 static void hostapd_event_dfs_pre_cac_expired(struct hostapd_data *hapd,
1457 					      struct dfs_event *radar)
1458 {
1459 	wpa_printf(MSG_DEBUG, "DFS Pre-CAC expired on %d MHz", radar->freq);
1460 	hostapd_dfs_pre_cac_expired(hapd->iface, radar->freq, radar->ht_enabled,
1461 				    radar->chan_offset, radar->chan_width,
1462 				    radar->cf1, radar->cf2);
1463 }
1464 
1465 
1466 static void hostapd_event_dfs_cac_finished(struct hostapd_data *hapd,
1467 					   struct dfs_event *radar)
1468 {
1469 	wpa_printf(MSG_DEBUG, "DFS CAC finished on %d MHz", radar->freq);
1470 	hostapd_dfs_complete_cac(hapd->iface, 1, radar->freq, radar->ht_enabled,
1471 				 radar->chan_offset, radar->chan_width,
1472 				 radar->cf1, radar->cf2);
1473 }
1474 
1475 
1476 static void hostapd_event_dfs_cac_aborted(struct hostapd_data *hapd,
1477 					  struct dfs_event *radar)
1478 {
1479 	wpa_printf(MSG_DEBUG, "DFS CAC aborted on %d MHz", radar->freq);
1480 	hostapd_dfs_complete_cac(hapd->iface, 0, radar->freq, radar->ht_enabled,
1481 				 radar->chan_offset, radar->chan_width,
1482 				 radar->cf1, radar->cf2);
1483 }
1484 
1485 
1486 static void hostapd_event_dfs_nop_finished(struct hostapd_data *hapd,
1487 					   struct dfs_event *radar)
1488 {
1489 	wpa_printf(MSG_DEBUG, "DFS NOP finished on %d MHz", radar->freq);
1490 	hostapd_dfs_nop_finished(hapd->iface, radar->freq, radar->ht_enabled,
1491 				 radar->chan_offset, radar->chan_width,
1492 				 radar->cf1, radar->cf2);
1493 }
1494 
1495 
1496 static void hostapd_event_dfs_cac_started(struct hostapd_data *hapd,
1497 					  struct dfs_event *radar)
1498 {
1499 	wpa_printf(MSG_DEBUG, "DFS offload CAC started on %d MHz", radar->freq);
1500 	hostapd_dfs_start_cac(hapd->iface, radar->freq, radar->ht_enabled,
1501 			      radar->chan_offset, radar->chan_width,
1502 			      radar->cf1, radar->cf2);
1503 }
1504 
1505 #endif /* NEED_AP_MLME */
1506 
1507 
1508 static void hostapd_event_wds_sta_interface_status(struct hostapd_data *hapd,
1509 						   int istatus,
1510 						   const char *ifname,
1511 						   const u8 *addr)
1512 {
1513 	struct sta_info *sta = ap_get_sta(hapd, addr);
1514 
1515 	if (sta) {
1516 		os_free(sta->ifname_wds);
1517 		if (istatus == INTERFACE_ADDED)
1518 			sta->ifname_wds = os_strdup(ifname);
1519 		else
1520 			sta->ifname_wds = NULL;
1521 	}
1522 
1523 	wpa_msg(hapd->msg_ctx, MSG_INFO, "%sifname=%s sta_addr=" MACSTR,
1524 		istatus == INTERFACE_ADDED ?
1525 		WDS_STA_INTERFACE_ADDED : WDS_STA_INTERFACE_REMOVED,
1526 		ifname, MAC2STR(addr));
1527 }
1528 
1529 
1530 void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
1531 			  union wpa_event_data *data)
1532 {
1533 	struct hostapd_data *hapd = ctx;
1534 #ifndef CONFIG_NO_STDOUT_DEBUG
1535 	int level = MSG_DEBUG;
1536 
1537 	if (event == EVENT_RX_MGMT && data->rx_mgmt.frame &&
1538 	    data->rx_mgmt.frame_len >= 24) {
1539 		const struct ieee80211_hdr *hdr;
1540 		u16 fc;
1541 
1542 		hdr = (const struct ieee80211_hdr *) data->rx_mgmt.frame;
1543 		fc = le_to_host16(hdr->frame_control);
1544 		if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1545 		    WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
1546 			level = MSG_EXCESSIVE;
1547 		if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1548 		    WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ)
1549 			level = MSG_EXCESSIVE;
1550 	}
1551 
1552 	wpa_dbg(hapd->msg_ctx, level, "Event %s (%d) received",
1553 		event_to_string(event), event);
1554 #endif /* CONFIG_NO_STDOUT_DEBUG */
1555 
1556 	switch (event) {
1557 	case EVENT_MICHAEL_MIC_FAILURE:
1558 		michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
1559 		break;
1560 	case EVENT_SCAN_RESULTS:
1561 		if (hapd->iface->scan_cb)
1562 			hapd->iface->scan_cb(hapd->iface);
1563 		break;
1564 	case EVENT_WPS_BUTTON_PUSHED:
1565 		hostapd_wps_button_pushed(hapd, NULL);
1566 		break;
1567 #ifdef NEED_AP_MLME
1568 	case EVENT_TX_STATUS:
1569 		switch (data->tx_status.type) {
1570 		case WLAN_FC_TYPE_MGMT:
1571 			hostapd_mgmt_tx_cb(hapd, data->tx_status.data,
1572 					   data->tx_status.data_len,
1573 					   data->tx_status.stype,
1574 					   data->tx_status.ack);
1575 			break;
1576 		case WLAN_FC_TYPE_DATA:
1577 			hostapd_tx_status(hapd, data->tx_status.dst,
1578 					  data->tx_status.data,
1579 					  data->tx_status.data_len,
1580 					  data->tx_status.ack);
1581 			break;
1582 		}
1583 		break;
1584 	case EVENT_EAPOL_TX_STATUS:
1585 		hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst,
1586 					data->eapol_tx_status.data,
1587 					data->eapol_tx_status.data_len,
1588 					data->eapol_tx_status.ack);
1589 		break;
1590 	case EVENT_DRIVER_CLIENT_POLL_OK:
1591 		hostapd_client_poll_ok(hapd, data->client_poll.addr);
1592 		break;
1593 	case EVENT_RX_FROM_UNKNOWN:
1594 		hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid,
1595 					    data->rx_from_unknown.addr,
1596 					    data->rx_from_unknown.wds);
1597 		break;
1598 #endif /* NEED_AP_MLME */
1599 	case EVENT_RX_MGMT:
1600 		if (!data->rx_mgmt.frame)
1601 			break;
1602 #ifdef NEED_AP_MLME
1603 		if (hostapd_mgmt_rx(hapd, &data->rx_mgmt) > 0)
1604 			break;
1605 #endif /* NEED_AP_MLME */
1606 		hostapd_action_rx(hapd, &data->rx_mgmt);
1607 		break;
1608 	case EVENT_RX_PROBE_REQ:
1609 		if (data->rx_probe_req.sa == NULL ||
1610 		    data->rx_probe_req.ie == NULL)
1611 			break;
1612 		hostapd_probe_req_rx(hapd, data->rx_probe_req.sa,
1613 				     data->rx_probe_req.da,
1614 				     data->rx_probe_req.bssid,
1615 				     data->rx_probe_req.ie,
1616 				     data->rx_probe_req.ie_len,
1617 				     data->rx_probe_req.ssi_signal);
1618 		break;
1619 	case EVENT_NEW_STA:
1620 		hostapd_event_new_sta(hapd, data->new_sta.addr);
1621 		break;
1622 	case EVENT_EAPOL_RX:
1623 		hostapd_event_eapol_rx(hapd, data->eapol_rx.src,
1624 				       data->eapol_rx.data,
1625 				       data->eapol_rx.data_len);
1626 		break;
1627 	case EVENT_ASSOC:
1628 		if (!data)
1629 			return;
1630 		hostapd_notif_assoc(hapd, data->assoc_info.addr,
1631 				    data->assoc_info.req_ies,
1632 				    data->assoc_info.req_ies_len,
1633 				    data->assoc_info.reassoc);
1634 		break;
1635 	case EVENT_DISASSOC:
1636 		if (data)
1637 			hostapd_notif_disassoc(hapd, data->disassoc_info.addr);
1638 		break;
1639 	case EVENT_DEAUTH:
1640 		if (data)
1641 			hostapd_notif_disassoc(hapd, data->deauth_info.addr);
1642 		break;
1643 	case EVENT_STATION_LOW_ACK:
1644 		if (!data)
1645 			break;
1646 		hostapd_event_sta_low_ack(hapd, data->low_ack.addr);
1647 		break;
1648 	case EVENT_AUTH:
1649 		hostapd_notif_auth(hapd, &data->auth);
1650 		break;
1651 	case EVENT_CH_SWITCH:
1652 		if (!data)
1653 			break;
1654 		hostapd_event_ch_switch(hapd, data->ch_switch.freq,
1655 					data->ch_switch.ht_enabled,
1656 					data->ch_switch.ch_offset,
1657 					data->ch_switch.ch_width,
1658 					data->ch_switch.cf1,
1659 					data->ch_switch.cf2);
1660 		break;
1661 	case EVENT_CONNECT_FAILED_REASON:
1662 		if (!data)
1663 			break;
1664 		hostapd_event_connect_failed_reason(
1665 			hapd, data->connect_failed_reason.addr,
1666 			data->connect_failed_reason.code);
1667 		break;
1668 	case EVENT_SURVEY:
1669 		hostapd_event_get_survey(hapd->iface, &data->survey_results);
1670 		break;
1671 #ifdef NEED_AP_MLME
1672 	case EVENT_INTERFACE_UNAVAILABLE:
1673 		hostapd_event_iface_unavailable(hapd);
1674 		break;
1675 	case EVENT_DFS_RADAR_DETECTED:
1676 		if (!data)
1677 			break;
1678 		hostapd_event_dfs_radar_detected(hapd, &data->dfs_event);
1679 		break;
1680 	case EVENT_DFS_PRE_CAC_EXPIRED:
1681 		if (!data)
1682 			break;
1683 		hostapd_event_dfs_pre_cac_expired(hapd, &data->dfs_event);
1684 		break;
1685 	case EVENT_DFS_CAC_FINISHED:
1686 		if (!data)
1687 			break;
1688 		hostapd_event_dfs_cac_finished(hapd, &data->dfs_event);
1689 		break;
1690 	case EVENT_DFS_CAC_ABORTED:
1691 		if (!data)
1692 			break;
1693 		hostapd_event_dfs_cac_aborted(hapd, &data->dfs_event);
1694 		break;
1695 	case EVENT_DFS_NOP_FINISHED:
1696 		if (!data)
1697 			break;
1698 		hostapd_event_dfs_nop_finished(hapd, &data->dfs_event);
1699 		break;
1700 	case EVENT_CHANNEL_LIST_CHANGED:
1701 		/* channel list changed (regulatory?), update channel list */
1702 		/* TODO: check this. hostapd_get_hw_features() initializes
1703 		 * too much stuff. */
1704 		/* hostapd_get_hw_features(hapd->iface); */
1705 		hostapd_channel_list_updated(
1706 			hapd->iface, data->channel_list_changed.initiator);
1707 		break;
1708 	case EVENT_DFS_CAC_STARTED:
1709 		if (!data)
1710 			break;
1711 		hostapd_event_dfs_cac_started(hapd, &data->dfs_event);
1712 		break;
1713 #endif /* NEED_AP_MLME */
1714 	case EVENT_INTERFACE_ENABLED:
1715 		wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_ENABLED);
1716 		if (hapd->disabled && hapd->started) {
1717 			hapd->disabled = 0;
1718 			/*
1719 			 * Try to re-enable interface if the driver stopped it
1720 			 * when the interface got disabled.
1721 			 */
1722 			if (hapd->wpa_auth)
1723 				wpa_auth_reconfig_group_keys(hapd->wpa_auth);
1724 			else
1725 				hostapd_reconfig_encryption(hapd);
1726 			hapd->reenable_beacon = 1;
1727 			ieee802_11_set_beacon(hapd);
1728 		}
1729 		break;
1730 	case EVENT_INTERFACE_DISABLED:
1731 		hostapd_free_stas(hapd);
1732 		wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_DISABLED);
1733 		hapd->disabled = 1;
1734 		break;
1735 #ifdef CONFIG_ACS
1736 	case EVENT_ACS_CHANNEL_SELECTED:
1737 		hostapd_acs_channel_selected(hapd,
1738 					     &data->acs_selected_channels);
1739 		break;
1740 #endif /* CONFIG_ACS */
1741 	case EVENT_STATION_OPMODE_CHANGED:
1742 		hostapd_event_sta_opmode_changed(hapd, data->sta_opmode.addr,
1743 						 data->sta_opmode.smps_mode,
1744 						 data->sta_opmode.chan_width,
1745 						 data->sta_opmode.rx_nss);
1746 		break;
1747 	case EVENT_WDS_STA_INTERFACE_STATUS:
1748 		hostapd_event_wds_sta_interface_status(
1749 			hapd, data->wds_sta_interface.istatus,
1750 			data->wds_sta_interface.ifname,
1751 			data->wds_sta_interface.sta_addr);
1752 		break;
1753 	default:
1754 		wpa_printf(MSG_DEBUG, "Unknown event %d", event);
1755 		break;
1756 	}
1757 }
1758 
1759 
1760 void wpa_supplicant_event_global(void *ctx, enum wpa_event_type event,
1761 				 union wpa_event_data *data)
1762 {
1763 	struct hapd_interfaces *interfaces = ctx;
1764 	struct hostapd_data *hapd;
1765 
1766 	if (event != EVENT_INTERFACE_STATUS)
1767 		return;
1768 
1769 	hapd = hostapd_get_iface(interfaces, data->interface_status.ifname);
1770 	if (hapd && hapd->driver && hapd->driver->get_ifindex &&
1771 	    hapd->drv_priv) {
1772 		unsigned int ifindex;
1773 
1774 		ifindex = hapd->driver->get_ifindex(hapd->drv_priv);
1775 		if (ifindex != data->interface_status.ifindex) {
1776 			wpa_dbg(hapd->msg_ctx, MSG_DEBUG,
1777 				"interface status ifindex %d mismatch (%d)",
1778 				ifindex, data->interface_status.ifindex);
1779 			return;
1780 		}
1781 	}
1782 	if (hapd)
1783 		wpa_supplicant_event(hapd, event, data);
1784 }
1785 
1786 #endif /* HOSTAPD */
1787