1 /* 2 * hostapd / IEEE 802.11 Management 3 * Copyright (c) 2002-2012, Jouni Malinen <j@w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "utils/includes.h" 10 11 #include "utils/common.h" 12 #include "common/ieee802_11_defs.h" 13 #include "hostapd.h" 14 #include "sta_info.h" 15 #include "ap_config.h" 16 #include "ap_drv_ops.h" 17 #include "ieee802_11.h" 18 19 20 #ifdef CONFIG_IEEE80211W 21 22 u8 * hostapd_eid_assoc_comeback_time(struct hostapd_data *hapd, 23 struct sta_info *sta, u8 *eid) 24 { 25 u8 *pos = eid; 26 u32 timeout, tu; 27 struct os_reltime now, passed; 28 29 *pos++ = WLAN_EID_TIMEOUT_INTERVAL; 30 *pos++ = 5; 31 *pos++ = WLAN_TIMEOUT_ASSOC_COMEBACK; 32 os_get_reltime(&now); 33 os_reltime_sub(&now, &sta->sa_query_start, &passed); 34 tu = (passed.sec * 1000000 + passed.usec) / 1024; 35 if (hapd->conf->assoc_sa_query_max_timeout > tu) 36 timeout = hapd->conf->assoc_sa_query_max_timeout - tu; 37 else 38 timeout = 0; 39 if (timeout < hapd->conf->assoc_sa_query_max_timeout) 40 timeout++; /* add some extra time for local timers */ 41 WPA_PUT_LE32(pos, timeout); 42 pos += 4; 43 44 return pos; 45 } 46 47 48 /* MLME-SAQuery.request */ 49 void ieee802_11_send_sa_query_req(struct hostapd_data *hapd, 50 const u8 *addr, const u8 *trans_id) 51 { 52 struct ieee80211_mgmt mgmt; 53 u8 *end; 54 55 wpa_printf(MSG_DEBUG, "IEEE 802.11: Sending SA Query Request to " 56 MACSTR, MAC2STR(addr)); 57 wpa_hexdump(MSG_DEBUG, "IEEE 802.11: SA Query Transaction ID", 58 trans_id, WLAN_SA_QUERY_TR_ID_LEN); 59 60 os_memset(&mgmt, 0, sizeof(mgmt)); 61 mgmt.frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT, 62 WLAN_FC_STYPE_ACTION); 63 os_memcpy(mgmt.da, addr, ETH_ALEN); 64 os_memcpy(mgmt.sa, hapd->own_addr, ETH_ALEN); 65 os_memcpy(mgmt.bssid, hapd->own_addr, ETH_ALEN); 66 mgmt.u.action.category = WLAN_ACTION_SA_QUERY; 67 mgmt.u.action.u.sa_query_req.action = WLAN_SA_QUERY_REQUEST; 68 os_memcpy(mgmt.u.action.u.sa_query_req.trans_id, trans_id, 69 WLAN_SA_QUERY_TR_ID_LEN); 70 end = mgmt.u.action.u.sa_query_req.trans_id + WLAN_SA_QUERY_TR_ID_LEN; 71 if (hostapd_drv_send_mlme(hapd, &mgmt, end - (u8 *) &mgmt, 0) < 0) 72 wpa_printf(MSG_INFO, "ieee802_11_send_sa_query_req: send failed"); 73 } 74 75 76 static void ieee802_11_send_sa_query_resp(struct hostapd_data *hapd, 77 const u8 *sa, const u8 *trans_id) 78 { 79 struct sta_info *sta; 80 struct ieee80211_mgmt resp; 81 u8 *end; 82 83 wpa_printf(MSG_DEBUG, "IEEE 802.11: Received SA Query Request from " 84 MACSTR, MAC2STR(sa)); 85 wpa_hexdump(MSG_DEBUG, "IEEE 802.11: SA Query Transaction ID", 86 trans_id, WLAN_SA_QUERY_TR_ID_LEN); 87 88 sta = ap_get_sta(hapd, sa); 89 if (sta == NULL || !(sta->flags & WLAN_STA_ASSOC)) { 90 wpa_printf(MSG_DEBUG, "IEEE 802.11: Ignore SA Query Request " 91 "from unassociated STA " MACSTR, MAC2STR(sa)); 92 return; 93 } 94 95 wpa_printf(MSG_DEBUG, "IEEE 802.11: Sending SA Query Response to " 96 MACSTR, MAC2STR(sa)); 97 98 os_memset(&resp, 0, sizeof(resp)); 99 resp.frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT, 100 WLAN_FC_STYPE_ACTION); 101 os_memcpy(resp.da, sa, ETH_ALEN); 102 os_memcpy(resp.sa, hapd->own_addr, ETH_ALEN); 103 os_memcpy(resp.bssid, hapd->own_addr, ETH_ALEN); 104 resp.u.action.category = WLAN_ACTION_SA_QUERY; 105 resp.u.action.u.sa_query_req.action = WLAN_SA_QUERY_RESPONSE; 106 os_memcpy(resp.u.action.u.sa_query_req.trans_id, trans_id, 107 WLAN_SA_QUERY_TR_ID_LEN); 108 end = resp.u.action.u.sa_query_req.trans_id + WLAN_SA_QUERY_TR_ID_LEN; 109 if (hostapd_drv_send_mlme(hapd, &resp, end - (u8 *) &resp, 0) < 0) 110 wpa_printf(MSG_INFO, "ieee80211_mgmt_sa_query_request: send failed"); 111 } 112 113 114 void ieee802_11_sa_query_action(struct hostapd_data *hapd, const u8 *sa, 115 const u8 action_type, const u8 *trans_id) 116 { 117 struct sta_info *sta; 118 int i; 119 120 if (action_type == WLAN_SA_QUERY_REQUEST) { 121 ieee802_11_send_sa_query_resp(hapd, sa, trans_id); 122 return; 123 } 124 125 if (action_type != WLAN_SA_QUERY_RESPONSE) { 126 wpa_printf(MSG_DEBUG, "IEEE 802.11: Unexpected SA Query " 127 "Action %d", action_type); 128 return; 129 } 130 131 wpa_printf(MSG_DEBUG, "IEEE 802.11: Received SA Query Response from " 132 MACSTR, MAC2STR(sa)); 133 wpa_hexdump(MSG_DEBUG, "IEEE 802.11: SA Query Transaction ID", 134 trans_id, WLAN_SA_QUERY_TR_ID_LEN); 135 136 /* MLME-SAQuery.confirm */ 137 138 sta = ap_get_sta(hapd, sa); 139 if (sta == NULL || sta->sa_query_trans_id == NULL) { 140 wpa_printf(MSG_DEBUG, "IEEE 802.11: No matching STA with " 141 "pending SA Query request found"); 142 return; 143 } 144 145 for (i = 0; i < sta->sa_query_count; i++) { 146 if (os_memcmp(sta->sa_query_trans_id + 147 i * WLAN_SA_QUERY_TR_ID_LEN, 148 trans_id, WLAN_SA_QUERY_TR_ID_LEN) == 0) 149 break; 150 } 151 152 if (i >= sta->sa_query_count) { 153 wpa_printf(MSG_DEBUG, "IEEE 802.11: No matching SA Query " 154 "transaction identifier found"); 155 return; 156 } 157 158 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211, 159 HOSTAPD_LEVEL_DEBUG, 160 "Reply to pending SA Query received"); 161 ap_sta_stop_sa_query(hapd, sta); 162 } 163 164 #endif /* CONFIG_IEEE80211W */ 165 166 167 static void hostapd_ext_capab_byte(struct hostapd_data *hapd, u8 *pos, int idx) 168 { 169 *pos = 0x00; 170 171 switch (idx) { 172 case 0: /* Bits 0-7 */ 173 if (hapd->iconf->obss_interval) 174 *pos |= 0x01; /* Bit 0 - Coexistence management */ 175 if (hapd->iface->drv_flags & WPA_DRIVER_FLAGS_AP_CSA) 176 *pos |= 0x04; /* Bit 2 - Extended Channel Switching */ 177 break; 178 case 1: /* Bits 8-15 */ 179 if (hapd->conf->proxy_arp) 180 *pos |= 0x10; /* Bit 12 - Proxy ARP */ 181 break; 182 case 2: /* Bits 16-23 */ 183 if (hapd->conf->wnm_sleep_mode) 184 *pos |= 0x02; /* Bit 17 - WNM-Sleep Mode */ 185 if (hapd->conf->bss_transition) 186 *pos |= 0x08; /* Bit 19 - BSS Transition */ 187 break; 188 case 3: /* Bits 24-31 */ 189 #ifdef CONFIG_WNM 190 *pos |= 0x02; /* Bit 25 - SSID List */ 191 #endif /* CONFIG_WNM */ 192 if (hapd->conf->time_advertisement == 2) 193 *pos |= 0x08; /* Bit 27 - UTC TSF Offset */ 194 if (hapd->conf->interworking) 195 *pos |= 0x80; /* Bit 31 - Interworking */ 196 break; 197 case 4: /* Bits 32-39 */ 198 if (hapd->conf->qos_map_set_len) 199 *pos |= 0x01; /* Bit 32 - QoS Map */ 200 if (hapd->conf->tdls & TDLS_PROHIBIT) 201 *pos |= 0x40; /* Bit 38 - TDLS Prohibited */ 202 if (hapd->conf->tdls & TDLS_PROHIBIT_CHAN_SWITCH) { 203 /* Bit 39 - TDLS Channel Switching Prohibited */ 204 *pos |= 0x80; 205 } 206 break; 207 case 5: /* Bits 40-47 */ 208 #ifdef CONFIG_HS20 209 if (hapd->conf->hs20) 210 *pos |= 0x40; /* Bit 46 - WNM-Notification */ 211 #endif /* CONFIG_HS20 */ 212 #ifdef CONFIG_MBO 213 if (hapd->conf->mbo_enabled) 214 *pos |= 0x40; /* Bit 46 - WNM-Notification */ 215 #endif /* CONFIG_MBO */ 216 break; 217 case 6: /* Bits 48-55 */ 218 if (hapd->conf->ssid.utf8_ssid) 219 *pos |= 0x01; /* Bit 48 - UTF-8 SSID */ 220 break; 221 case 8: /* Bits 64-71 */ 222 if (hapd->conf->ftm_responder) 223 *pos |= 0x40; /* Bit 70 - FTM responder */ 224 if (hapd->conf->ftm_initiator) 225 *pos |= 0x80; /* Bit 71 - FTM initiator */ 226 break; 227 } 228 } 229 230 231 u8 * hostapd_eid_ext_capab(struct hostapd_data *hapd, u8 *eid) 232 { 233 u8 *pos = eid; 234 u8 len = 0, i; 235 236 if (hapd->conf->tdls & (TDLS_PROHIBIT | TDLS_PROHIBIT_CHAN_SWITCH)) 237 len = 5; 238 if (len < 4 && hapd->conf->interworking) 239 len = 4; 240 if (len < 3 && hapd->conf->wnm_sleep_mode) 241 len = 3; 242 if (len < 1 && hapd->iconf->obss_interval) 243 len = 1; 244 if (len < 7 && hapd->conf->ssid.utf8_ssid) 245 len = 7; 246 if (len < 9 && 247 (hapd->conf->ftm_initiator || hapd->conf->ftm_responder)) 248 len = 9; 249 #ifdef CONFIG_WNM 250 if (len < 4) 251 len = 4; 252 #endif /* CONFIG_WNM */ 253 #ifdef CONFIG_HS20 254 if (hapd->conf->hs20 && len < 6) 255 len = 6; 256 #endif /* CONFIG_HS20 */ 257 #ifdef CONFIG_MBO 258 if (hapd->conf->mbo_enabled && len < 6) 259 len = 6; 260 #endif /* CONFIG_MBO */ 261 if (len < hapd->iface->extended_capa_len) 262 len = hapd->iface->extended_capa_len; 263 if (len == 0) 264 return eid; 265 266 *pos++ = WLAN_EID_EXT_CAPAB; 267 *pos++ = len; 268 for (i = 0; i < len; i++, pos++) { 269 hostapd_ext_capab_byte(hapd, pos, i); 270 271 if (i < hapd->iface->extended_capa_len) { 272 *pos &= ~hapd->iface->extended_capa_mask[i]; 273 *pos |= hapd->iface->extended_capa[i]; 274 } 275 } 276 277 while (len > 0 && eid[1 + len] == 0) { 278 len--; 279 eid[1] = len; 280 } 281 if (len == 0) 282 return eid; 283 284 return eid + 2 + len; 285 } 286 287 288 u8 * hostapd_eid_qos_map_set(struct hostapd_data *hapd, u8 *eid) 289 { 290 u8 *pos = eid; 291 u8 len = hapd->conf->qos_map_set_len; 292 293 if (!len) 294 return eid; 295 296 *pos++ = WLAN_EID_QOS_MAP_SET; 297 *pos++ = len; 298 os_memcpy(pos, hapd->conf->qos_map_set, len); 299 pos += len; 300 301 return pos; 302 } 303 304 305 u8 * hostapd_eid_interworking(struct hostapd_data *hapd, u8 *eid) 306 { 307 u8 *pos = eid; 308 #ifdef CONFIG_INTERWORKING 309 u8 *len; 310 311 if (!hapd->conf->interworking) 312 return eid; 313 314 *pos++ = WLAN_EID_INTERWORKING; 315 len = pos++; 316 317 *pos = hapd->conf->access_network_type; 318 if (hapd->conf->internet) 319 *pos |= INTERWORKING_ANO_INTERNET; 320 if (hapd->conf->asra) 321 *pos |= INTERWORKING_ANO_ASRA; 322 if (hapd->conf->esr) 323 *pos |= INTERWORKING_ANO_ESR; 324 if (hapd->conf->uesa) 325 *pos |= INTERWORKING_ANO_UESA; 326 pos++; 327 328 if (hapd->conf->venue_info_set) { 329 *pos++ = hapd->conf->venue_group; 330 *pos++ = hapd->conf->venue_type; 331 } 332 333 if (!is_zero_ether_addr(hapd->conf->hessid)) { 334 os_memcpy(pos, hapd->conf->hessid, ETH_ALEN); 335 pos += ETH_ALEN; 336 } 337 338 *len = pos - len - 1; 339 #endif /* CONFIG_INTERWORKING */ 340 341 return pos; 342 } 343 344 345 u8 * hostapd_eid_adv_proto(struct hostapd_data *hapd, u8 *eid) 346 { 347 u8 *pos = eid; 348 #ifdef CONFIG_INTERWORKING 349 350 /* TODO: Separate configuration for ANQP? */ 351 if (!hapd->conf->interworking) 352 return eid; 353 354 *pos++ = WLAN_EID_ADV_PROTO; 355 *pos++ = 2; 356 *pos++ = 0x7F; /* Query Response Length Limit | PAME-BI */ 357 *pos++ = ACCESS_NETWORK_QUERY_PROTOCOL; 358 #endif /* CONFIG_INTERWORKING */ 359 360 return pos; 361 } 362 363 364 u8 * hostapd_eid_roaming_consortium(struct hostapd_data *hapd, u8 *eid) 365 { 366 u8 *pos = eid; 367 #ifdef CONFIG_INTERWORKING 368 u8 *len; 369 unsigned int i, count; 370 371 if (!hapd->conf->interworking || 372 hapd->conf->roaming_consortium == NULL || 373 hapd->conf->roaming_consortium_count == 0) 374 return eid; 375 376 *pos++ = WLAN_EID_ROAMING_CONSORTIUM; 377 len = pos++; 378 379 /* Number of ANQP OIs (in addition to the max 3 listed here) */ 380 if (hapd->conf->roaming_consortium_count > 3 + 255) 381 *pos++ = 255; 382 else if (hapd->conf->roaming_consortium_count > 3) 383 *pos++ = hapd->conf->roaming_consortium_count - 3; 384 else 385 *pos++ = 0; 386 387 /* OU #1 and #2 Lengths */ 388 *pos = hapd->conf->roaming_consortium[0].len; 389 if (hapd->conf->roaming_consortium_count > 1) 390 *pos |= hapd->conf->roaming_consortium[1].len << 4; 391 pos++; 392 393 if (hapd->conf->roaming_consortium_count > 3) 394 count = 3; 395 else 396 count = hapd->conf->roaming_consortium_count; 397 398 for (i = 0; i < count; i++) { 399 os_memcpy(pos, hapd->conf->roaming_consortium[i].oi, 400 hapd->conf->roaming_consortium[i].len); 401 pos += hapd->conf->roaming_consortium[i].len; 402 } 403 404 *len = pos - len - 1; 405 #endif /* CONFIG_INTERWORKING */ 406 407 return pos; 408 } 409 410 411 u8 * hostapd_eid_time_adv(struct hostapd_data *hapd, u8 *eid) 412 { 413 if (hapd->conf->time_advertisement != 2) 414 return eid; 415 416 if (hapd->time_adv == NULL && 417 hostapd_update_time_adv(hapd) < 0) 418 return eid; 419 420 if (hapd->time_adv == NULL) 421 return eid; 422 423 os_memcpy(eid, wpabuf_head(hapd->time_adv), 424 wpabuf_len(hapd->time_adv)); 425 eid += wpabuf_len(hapd->time_adv); 426 427 return eid; 428 } 429 430 431 u8 * hostapd_eid_time_zone(struct hostapd_data *hapd, u8 *eid) 432 { 433 size_t len; 434 435 if (hapd->conf->time_advertisement != 2) 436 return eid; 437 438 len = os_strlen(hapd->conf->time_zone); 439 440 *eid++ = WLAN_EID_TIME_ZONE; 441 *eid++ = len; 442 os_memcpy(eid, hapd->conf->time_zone, len); 443 eid += len; 444 445 return eid; 446 } 447 448 449 int hostapd_update_time_adv(struct hostapd_data *hapd) 450 { 451 const int elen = 2 + 1 + 10 + 5 + 1; 452 struct os_time t; 453 struct os_tm tm; 454 u8 *pos; 455 456 if (hapd->conf->time_advertisement != 2) 457 return 0; 458 459 if (os_get_time(&t) < 0 || os_gmtime(t.sec, &tm) < 0) 460 return -1; 461 462 if (!hapd->time_adv) { 463 hapd->time_adv = wpabuf_alloc(elen); 464 if (hapd->time_adv == NULL) 465 return -1; 466 pos = wpabuf_put(hapd->time_adv, elen); 467 } else 468 pos = wpabuf_mhead_u8(hapd->time_adv); 469 470 *pos++ = WLAN_EID_TIME_ADVERTISEMENT; 471 *pos++ = 1 + 10 + 5 + 1; 472 473 *pos++ = 2; /* UTC time at which the TSF timer is 0 */ 474 475 /* Time Value at TSF 0 */ 476 /* FIX: need to calculate this based on the current TSF value */ 477 WPA_PUT_LE16(pos, tm.year); /* Year */ 478 pos += 2; 479 *pos++ = tm.month; /* Month */ 480 *pos++ = tm.day; /* Day of month */ 481 *pos++ = tm.hour; /* Hours */ 482 *pos++ = tm.min; /* Minutes */ 483 *pos++ = tm.sec; /* Seconds */ 484 WPA_PUT_LE16(pos, 0); /* Milliseconds (not used) */ 485 pos += 2; 486 *pos++ = 0; /* Reserved */ 487 488 /* Time Error */ 489 /* TODO: fill in an estimate on the error */ 490 *pos++ = 0; 491 *pos++ = 0; 492 *pos++ = 0; 493 *pos++ = 0; 494 *pos++ = 0; 495 496 *pos++ = hapd->time_update_counter++; 497 498 return 0; 499 } 500 501 502 u8 * hostapd_eid_bss_max_idle_period(struct hostapd_data *hapd, u8 *eid) 503 { 504 u8 *pos = eid; 505 506 #ifdef CONFIG_WNM 507 if (hapd->conf->ap_max_inactivity > 0) { 508 unsigned int val; 509 *pos++ = WLAN_EID_BSS_MAX_IDLE_PERIOD; 510 *pos++ = 3; 511 val = hapd->conf->ap_max_inactivity; 512 if (val > 68000) 513 val = 68000; 514 val *= 1000; 515 val /= 1024; 516 if (val == 0) 517 val = 1; 518 if (val > 65535) 519 val = 65535; 520 WPA_PUT_LE16(pos, val); 521 pos += 2; 522 *pos++ = 0x00; /* TODO: Protected Keep-Alive Required */ 523 } 524 #endif /* CONFIG_WNM */ 525 526 return pos; 527 } 528 529 530 #ifdef CONFIG_MBO 531 532 u8 * hostapd_eid_mbo(struct hostapd_data *hapd, u8 *eid, size_t len) 533 { 534 u8 mbo[6], *mbo_pos = mbo; 535 u8 *pos = eid; 536 537 if (!hapd->conf->mbo_enabled) 538 return eid; 539 540 *mbo_pos++ = MBO_ATTR_ID_AP_CAPA_IND; 541 *mbo_pos++ = 1; 542 /* Not Cellular aware */ 543 *mbo_pos++ = 0; 544 545 if (hapd->mbo_assoc_disallow) { 546 *mbo_pos++ = MBO_ATTR_ID_ASSOC_DISALLOW; 547 *mbo_pos++ = 1; 548 *mbo_pos++ = hapd->mbo_assoc_disallow; 549 } 550 551 pos += mbo_add_ie(pos, len, mbo, mbo_pos - mbo); 552 553 return pos; 554 } 555 556 557 u8 hostapd_mbo_ie_len(struct hostapd_data *hapd) 558 { 559 if (!hapd->conf->mbo_enabled) 560 return 0; 561 562 /* 563 * MBO IE header (6) + Capability Indication attribute (3) + 564 * Association Disallowed attribute (3) = 12 565 */ 566 return 6 + 3 + (hapd->mbo_assoc_disallow ? 3 : 0); 567 } 568 569 #endif /* CONFIG_MBO */ 570 571 572 void ap_copy_sta_supp_op_classes(struct sta_info *sta, 573 const u8 *supp_op_classes, 574 size_t supp_op_classes_len) 575 { 576 if (!supp_op_classes) 577 return; 578 os_free(sta->supp_op_classes); 579 sta->supp_op_classes = os_malloc(1 + supp_op_classes_len); 580 if (!sta->supp_op_classes) 581 return; 582 583 sta->supp_op_classes[0] = supp_op_classes_len; 584 os_memcpy(sta->supp_op_classes + 1, supp_op_classes, 585 supp_op_classes_len); 586 } 587