xref: /freebsd/contrib/wpa/src/ap/vlan_init.c (revision 8d20be1e22095c27faf8fe8b2f0d089739cc742e)
1 /*
2  * hostapd / VLAN initialization
3  * Copyright 2003, Instant802 Networks, Inc.
4  * Copyright 2005-2006, Devicescape Software, Inc.
5  * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License version 2 as
9  * published by the Free Software Foundation.
10  *
11  * Alternatively, this software may be distributed under the terms of BSD
12  * license.
13  *
14  * See README and COPYING for more details.
15  */
16 
17 #include "utils/includes.h"
18 
19 #include "utils/common.h"
20 #include "hostapd.h"
21 #include "ap_config.h"
22 #include "ap_drv_ops.h"
23 #include "vlan_init.h"
24 #include "vlan_util.h"
25 
26 
27 #ifdef CONFIG_FULL_DYNAMIC_VLAN
28 
29 #include <net/if.h>
30 #include <sys/ioctl.h>
31 #include <linux/sockios.h>
32 #include <linux/if_vlan.h>
33 #include <linux/if_bridge.h>
34 
35 #include "drivers/priv_netlink.h"
36 #include "utils/eloop.h"
37 
38 
39 struct full_dynamic_vlan {
40 	int s; /* socket on which to listen for new/removed interfaces. */
41 };
42 
43 
44 static int ifconfig_helper(const char *if_name, int up)
45 {
46 	int fd;
47 	struct ifreq ifr;
48 
49 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
50 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
51 			   "failed: %s", __func__, strerror(errno));
52 		return -1;
53 	}
54 
55 	os_memset(&ifr, 0, sizeof(ifr));
56 	os_strlcpy(ifr.ifr_name, if_name, IFNAMSIZ);
57 
58 	if (ioctl(fd, SIOCGIFFLAGS, &ifr) != 0) {
59 		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl(SIOCGIFFLAGS) failed "
60 			   "for interface %s: %s",
61 			   __func__, if_name, strerror(errno));
62 		close(fd);
63 		return -1;
64 	}
65 
66 	if (up)
67 		ifr.ifr_flags |= IFF_UP;
68 	else
69 		ifr.ifr_flags &= ~IFF_UP;
70 
71 	if (ioctl(fd, SIOCSIFFLAGS, &ifr) != 0) {
72 		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl(SIOCSIFFLAGS) failed "
73 			   "for interface %s (up=%d): %s",
74 			   __func__, if_name, up, strerror(errno));
75 		close(fd);
76 		return -1;
77 	}
78 
79 	close(fd);
80 	return 0;
81 }
82 
83 
84 static int ifconfig_up(const char *if_name)
85 {
86 	wpa_printf(MSG_DEBUG, "VLAN: Set interface %s up", if_name);
87 	return ifconfig_helper(if_name, 1);
88 }
89 
90 
91 static int ifconfig_down(const char *if_name)
92 {
93 	wpa_printf(MSG_DEBUG, "VLAN: Set interface %s down", if_name);
94 	return ifconfig_helper(if_name, 0);
95 }
96 
97 
98 /*
99  * These are only available in recent linux headers (without the leading
100  * underscore).
101  */
102 #define _GET_VLAN_REALDEV_NAME_CMD	8
103 #define _GET_VLAN_VID_CMD		9
104 
105 /* This value should be 256 ONLY. If it is something else, then hostapd
106  * might crash!, as this value has been hard-coded in 2.4.x kernel
107  * bridging code.
108  */
109 #define MAX_BR_PORTS      		256
110 
111 static int br_delif(const char *br_name, const char *if_name)
112 {
113 	int fd;
114 	struct ifreq ifr;
115 	unsigned long args[2];
116 	int if_index;
117 
118 	wpa_printf(MSG_DEBUG, "VLAN: br_delif(%s, %s)", br_name, if_name);
119 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
120 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
121 			   "failed: %s", __func__, strerror(errno));
122 		return -1;
123 	}
124 
125 	if_index = if_nametoindex(if_name);
126 
127 	if (if_index == 0) {
128 		wpa_printf(MSG_ERROR, "VLAN: %s: Failure determining "
129 			   "interface index for '%s'",
130 			   __func__, if_name);
131 		close(fd);
132 		return -1;
133 	}
134 
135 	args[0] = BRCTL_DEL_IF;
136 	args[1] = if_index;
137 
138 	os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
139 	ifr.ifr_data = (__caddr_t) args;
140 
141 	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0 && errno != EINVAL) {
142 		/* No error if interface already removed. */
143 		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl[SIOCDEVPRIVATE,"
144 			   "BRCTL_DEL_IF] failed for br_name=%s if_name=%s: "
145 			   "%s", __func__, br_name, if_name, strerror(errno));
146 		close(fd);
147 		return -1;
148 	}
149 
150 	close(fd);
151 	return 0;
152 }
153 
154 
155 /*
156 	Add interface 'if_name' to the bridge 'br_name'
157 
158 	returns -1 on error
159 	returns 1 if the interface is already part of the bridge
160 	returns 0 otherwise
161 */
162 static int br_addif(const char *br_name, const char *if_name)
163 {
164 	int fd;
165 	struct ifreq ifr;
166 	unsigned long args[2];
167 	int if_index;
168 
169 	wpa_printf(MSG_DEBUG, "VLAN: br_addif(%s, %s)", br_name, if_name);
170 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
171 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
172 			   "failed: %s", __func__, strerror(errno));
173 		return -1;
174 	}
175 
176 	if_index = if_nametoindex(if_name);
177 
178 	if (if_index == 0) {
179 		wpa_printf(MSG_ERROR, "VLAN: %s: Failure determining "
180 			   "interface index for '%s'",
181 			   __func__, if_name);
182 		close(fd);
183 		return -1;
184 	}
185 
186 	args[0] = BRCTL_ADD_IF;
187 	args[1] = if_index;
188 
189 	os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
190 	ifr.ifr_data = (__caddr_t) args;
191 
192 	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
193 		if (errno == EBUSY) {
194 			/* The interface is already added. */
195 			close(fd);
196 			return 1;
197 		}
198 
199 		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl[SIOCDEVPRIVATE,"
200 			   "BRCTL_ADD_IF] failed for br_name=%s if_name=%s: "
201 			   "%s", __func__, br_name, if_name, strerror(errno));
202 		close(fd);
203 		return -1;
204 	}
205 
206 	close(fd);
207 	return 0;
208 }
209 
210 
211 static int br_delbr(const char *br_name)
212 {
213 	int fd;
214 	unsigned long arg[2];
215 
216 	wpa_printf(MSG_DEBUG, "VLAN: br_delbr(%s)", br_name);
217 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
218 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
219 			   "failed: %s", __func__, strerror(errno));
220 		return -1;
221 	}
222 
223 	arg[0] = BRCTL_DEL_BRIDGE;
224 	arg[1] = (unsigned long) br_name;
225 
226 	if (ioctl(fd, SIOCGIFBR, arg) < 0 && errno != ENXIO) {
227 		/* No error if bridge already removed. */
228 		wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_DEL_BRIDGE failed for "
229 			   "%s: %s", __func__, br_name, strerror(errno));
230 		close(fd);
231 		return -1;
232 	}
233 
234 	close(fd);
235 	return 0;
236 }
237 
238 
239 /*
240 	Add a bridge with the name 'br_name'.
241 
242 	returns -1 on error
243 	returns 1 if the bridge already exists
244 	returns 0 otherwise
245 */
246 static int br_addbr(const char *br_name)
247 {
248 	int fd;
249 	unsigned long arg[4];
250 	struct ifreq ifr;
251 
252 	wpa_printf(MSG_DEBUG, "VLAN: br_addbr(%s)", br_name);
253 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
254 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
255 			   "failed: %s", __func__, strerror(errno));
256 		return -1;
257 	}
258 
259 	arg[0] = BRCTL_ADD_BRIDGE;
260 	arg[1] = (unsigned long) br_name;
261 
262 	if (ioctl(fd, SIOCGIFBR, arg) < 0) {
263  		if (errno == EEXIST) {
264 			/* The bridge is already added. */
265 			close(fd);
266 			return 1;
267 		} else {
268 			wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_ADD_BRIDGE "
269 				   "failed for %s: %s",
270 				   __func__, br_name, strerror(errno));
271 			close(fd);
272 			return -1;
273 		}
274 	}
275 
276 	/* Decrease forwarding delay to avoid EAPOL timeouts. */
277 	os_memset(&ifr, 0, sizeof(ifr));
278 	os_strlcpy(ifr.ifr_name, br_name, IFNAMSIZ);
279 	arg[0] = BRCTL_SET_BRIDGE_FORWARD_DELAY;
280 	arg[1] = 1;
281 	arg[2] = 0;
282 	arg[3] = 0;
283 	ifr.ifr_data = (char *) &arg;
284 	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
285 		wpa_printf(MSG_ERROR, "VLAN: %s: "
286 			   "BRCTL_SET_BRIDGE_FORWARD_DELAY (1 sec) failed for "
287 			   "%s: %s", __func__, br_name, strerror(errno));
288 		/* Continue anyway */
289 	}
290 
291 	close(fd);
292 	return 0;
293 }
294 
295 
296 static int br_getnumports(const char *br_name)
297 {
298 	int fd;
299 	int i;
300 	int port_cnt = 0;
301 	unsigned long arg[4];
302 	int ifindices[MAX_BR_PORTS];
303 	struct ifreq ifr;
304 
305 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
306 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
307 			   "failed: %s", __func__, strerror(errno));
308 		return -1;
309 	}
310 
311 	arg[0] = BRCTL_GET_PORT_LIST;
312 	arg[1] = (unsigned long) ifindices;
313 	arg[2] = MAX_BR_PORTS;
314 	arg[3] = 0;
315 
316 	os_memset(ifindices, 0, sizeof(ifindices));
317 	os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
318 	ifr.ifr_data = (__caddr_t) arg;
319 
320 	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
321 		wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_GET_PORT_LIST "
322 			   "failed for %s: %s",
323 			   __func__, br_name, strerror(errno));
324 		close(fd);
325 		return -1;
326 	}
327 
328 	for (i = 1; i < MAX_BR_PORTS; i++) {
329 		if (ifindices[i] > 0) {
330 			port_cnt++;
331 		}
332 	}
333 
334 	close(fd);
335 	return port_cnt;
336 }
337 
338 
339 #ifndef CONFIG_VLAN_NETLINK
340 
341 int vlan_rem(const char *if_name)
342 {
343 	int fd;
344 	struct vlan_ioctl_args if_request;
345 
346 	wpa_printf(MSG_DEBUG, "VLAN: vlan_rem(%s)", if_name);
347 	if ((os_strlen(if_name) + 1) > sizeof(if_request.device1)) {
348 		wpa_printf(MSG_ERROR, "VLAN: Interface name too long: '%s'",
349 			   if_name);
350 		return -1;
351 	}
352 
353 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
354 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
355 			   "failed: %s", __func__, strerror(errno));
356 		return -1;
357 	}
358 
359 	os_memset(&if_request, 0, sizeof(if_request));
360 
361 	os_strlcpy(if_request.device1, if_name, sizeof(if_request.device1));
362 	if_request.cmd = DEL_VLAN_CMD;
363 
364 	if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
365 		wpa_printf(MSG_ERROR, "VLAN: %s: DEL_VLAN_CMD failed for %s: "
366 			   "%s", __func__, if_name, strerror(errno));
367 		close(fd);
368 		return -1;
369 	}
370 
371 	close(fd);
372 	return 0;
373 }
374 
375 
376 /*
377 	Add a vlan interface with VLAN ID 'vid' and tagged interface
378 	'if_name'.
379 
380 	returns -1 on error
381 	returns 1 if the interface already exists
382 	returns 0 otherwise
383 */
384 int vlan_add(const char *if_name, int vid, const char *vlan_if_name)
385 {
386 	int fd;
387 	struct vlan_ioctl_args if_request;
388 
389 	wpa_printf(MSG_DEBUG, "VLAN: vlan_add(if_name=%s, vid=%d)",
390 		   if_name, vid);
391 	ifconfig_up(if_name);
392 
393 	if ((os_strlen(if_name) + 1) > sizeof(if_request.device1)) {
394 		wpa_printf(MSG_ERROR, "VLAN: Interface name too long: '%s'",
395 			   if_name);
396 		return -1;
397 	}
398 
399 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
400 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
401 			   "failed: %s", __func__, strerror(errno));
402 		return -1;
403 	}
404 
405 	os_memset(&if_request, 0, sizeof(if_request));
406 
407 	/* Determine if a suitable vlan device already exists. */
408 
409 	os_snprintf(if_request.device1, sizeof(if_request.device1), "vlan%d",
410 		    vid);
411 
412 	if_request.cmd = _GET_VLAN_VID_CMD;
413 
414 	if (ioctl(fd, SIOCSIFVLAN, &if_request) == 0) {
415 
416 		if (if_request.u.VID == vid) {
417 			if_request.cmd = _GET_VLAN_REALDEV_NAME_CMD;
418 
419 			if (ioctl(fd, SIOCSIFVLAN, &if_request) == 0 &&
420 			    os_strncmp(if_request.u.device2, if_name,
421 				       sizeof(if_request.u.device2)) == 0) {
422 				close(fd);
423 				wpa_printf(MSG_DEBUG, "VLAN: vlan_add: "
424 					   "if_name %s exists already",
425 					   if_request.device1);
426 				return 1;
427 			}
428 		}
429 	}
430 
431 	/* A suitable vlan device does not already exist, add one. */
432 
433 	os_memset(&if_request, 0, sizeof(if_request));
434 	os_strlcpy(if_request.device1, if_name, sizeof(if_request.device1));
435 	if_request.u.VID = vid;
436 	if_request.cmd = ADD_VLAN_CMD;
437 
438 	if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
439 		wpa_printf(MSG_ERROR, "VLAN: %s: ADD_VLAN_CMD failed for %s: "
440 			   "%s",
441 			   __func__, if_request.device1, strerror(errno));
442 		close(fd);
443 		return -1;
444 	}
445 
446 	close(fd);
447 	return 0;
448 }
449 
450 
451 static int vlan_set_name_type(unsigned int name_type)
452 {
453 	int fd;
454 	struct vlan_ioctl_args if_request;
455 
456 	wpa_printf(MSG_DEBUG, "VLAN: vlan_set_name_type(name_type=%u)",
457 		   name_type);
458 	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
459 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
460 			   "failed: %s", __func__, strerror(errno));
461 		return -1;
462 	}
463 
464 	os_memset(&if_request, 0, sizeof(if_request));
465 
466 	if_request.u.name_type = name_type;
467 	if_request.cmd = SET_VLAN_NAME_TYPE_CMD;
468 	if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
469 		wpa_printf(MSG_ERROR, "VLAN: %s: SET_VLAN_NAME_TYPE_CMD "
470 			   "name_type=%u failed: %s",
471 			   __func__, name_type, strerror(errno));
472 		close(fd);
473 		return -1;
474 	}
475 
476 	close(fd);
477 	return 0;
478 }
479 
480 #endif /* CONFIG_VLAN_NETLINK */
481 
482 
483 static void vlan_newlink(char *ifname, struct hostapd_data *hapd)
484 {
485 	char vlan_ifname[IFNAMSIZ];
486 	char br_name[IFNAMSIZ];
487 	struct hostapd_vlan *vlan = hapd->conf->vlan;
488 	char *tagged_interface = hapd->conf->ssid.vlan_tagged_interface;
489 	int vlan_naming = hapd->conf->ssid.vlan_naming;
490 
491 	wpa_printf(MSG_DEBUG, "VLAN: vlan_newlink(%s)", ifname);
492 
493 	while (vlan) {
494 		if (os_strcmp(ifname, vlan->ifname) == 0) {
495 
496 			os_snprintf(br_name, sizeof(br_name), "brvlan%d",
497 				    vlan->vlan_id);
498 
499 			if (!br_addbr(br_name))
500 				vlan->clean |= DVLAN_CLEAN_BR;
501 
502 			ifconfig_up(br_name);
503 
504 			if (tagged_interface) {
505 				if (vlan_naming ==
506 				    DYNAMIC_VLAN_NAMING_WITH_DEVICE)
507 					os_snprintf(vlan_ifname,
508 						    sizeof(vlan_ifname),
509 						    "%s.%d", tagged_interface,
510 						    vlan->vlan_id);
511 				else
512 					os_snprintf(vlan_ifname,
513 						    sizeof(vlan_ifname),
514 						    "vlan%d", vlan->vlan_id);
515 
516 				ifconfig_up(tagged_interface);
517 				if (!vlan_add(tagged_interface, vlan->vlan_id,
518 					      vlan_ifname))
519 					vlan->clean |= DVLAN_CLEAN_VLAN;
520 
521 				if (!br_addif(br_name, vlan_ifname))
522 					vlan->clean |= DVLAN_CLEAN_VLAN_PORT;
523 
524 				ifconfig_up(vlan_ifname);
525 			}
526 
527 			if (!br_addif(br_name, ifname))
528 				vlan->clean |= DVLAN_CLEAN_WLAN_PORT;
529 
530 			ifconfig_up(ifname);
531 
532 			break;
533 		}
534 		vlan = vlan->next;
535 	}
536 }
537 
538 
539 static void vlan_dellink(char *ifname, struct hostapd_data *hapd)
540 {
541 	char vlan_ifname[IFNAMSIZ];
542 	char br_name[IFNAMSIZ];
543 	struct hostapd_vlan *first, *prev, *vlan = hapd->conf->vlan;
544 	char *tagged_interface = hapd->conf->ssid.vlan_tagged_interface;
545 	int vlan_naming = hapd->conf->ssid.vlan_naming;
546 
547 	wpa_printf(MSG_DEBUG, "VLAN: vlan_dellink(%s)", ifname);
548 
549 	first = prev = vlan;
550 
551 	while (vlan) {
552 		if (os_strcmp(ifname, vlan->ifname) == 0) {
553 			os_snprintf(br_name, sizeof(br_name), "brvlan%d",
554 				    vlan->vlan_id);
555 
556 			if (vlan->clean & DVLAN_CLEAN_WLAN_PORT)
557 				br_delif(br_name, vlan->ifname);
558 
559 			if (tagged_interface) {
560 				if (vlan_naming ==
561 				    DYNAMIC_VLAN_NAMING_WITH_DEVICE)
562 					os_snprintf(vlan_ifname,
563 						    sizeof(vlan_ifname),
564 						    "%s.%d", tagged_interface,
565 						    vlan->vlan_id);
566 				else
567 					os_snprintf(vlan_ifname,
568 						    sizeof(vlan_ifname),
569 						    "vlan%d", vlan->vlan_id);
570 				if (vlan->clean & DVLAN_CLEAN_VLAN_PORT)
571 					br_delif(br_name, vlan_ifname);
572 				ifconfig_down(vlan_ifname);
573 
574 				if (vlan->clean & DVLAN_CLEAN_VLAN)
575 					vlan_rem(vlan_ifname);
576 			}
577 
578 			if ((vlan->clean & DVLAN_CLEAN_BR) &&
579 			    br_getnumports(br_name) == 0) {
580 				ifconfig_down(br_name);
581 				br_delbr(br_name);
582 			}
583 
584 			if (vlan == first) {
585 				hapd->conf->vlan = vlan->next;
586 			} else {
587 				prev->next = vlan->next;
588 			}
589 			os_free(vlan);
590 
591 			break;
592 		}
593 		prev = vlan;
594 		vlan = vlan->next;
595 	}
596 }
597 
598 
599 static void
600 vlan_read_ifnames(struct nlmsghdr *h, size_t len, int del,
601 		  struct hostapd_data *hapd)
602 {
603 	struct ifinfomsg *ifi;
604 	int attrlen, nlmsg_len, rta_len;
605 	struct rtattr *attr;
606 
607 	if (len < sizeof(*ifi))
608 		return;
609 
610 	ifi = NLMSG_DATA(h);
611 
612 	nlmsg_len = NLMSG_ALIGN(sizeof(struct ifinfomsg));
613 
614 	attrlen = h->nlmsg_len - nlmsg_len;
615 	if (attrlen < 0)
616 		return;
617 
618 	attr = (struct rtattr *) (((char *) ifi) + nlmsg_len);
619 
620 	rta_len = RTA_ALIGN(sizeof(struct rtattr));
621 	while (RTA_OK(attr, attrlen)) {
622 		char ifname[IFNAMSIZ + 1];
623 
624 		if (attr->rta_type == IFLA_IFNAME) {
625 			int n = attr->rta_len - rta_len;
626 			if (n < 0)
627 				break;
628 
629 			os_memset(ifname, 0, sizeof(ifname));
630 
631 			if ((size_t) n > sizeof(ifname))
632 				n = sizeof(ifname);
633 			os_memcpy(ifname, ((char *) attr) + rta_len, n);
634 
635 			if (del)
636 				vlan_dellink(ifname, hapd);
637 			else
638 				vlan_newlink(ifname, hapd);
639 		}
640 
641 		attr = RTA_NEXT(attr, attrlen);
642 	}
643 }
644 
645 
646 static void vlan_event_receive(int sock, void *eloop_ctx, void *sock_ctx)
647 {
648 	char buf[8192];
649 	int left;
650 	struct sockaddr_nl from;
651 	socklen_t fromlen;
652 	struct nlmsghdr *h;
653 	struct hostapd_data *hapd = eloop_ctx;
654 
655 	fromlen = sizeof(from);
656 	left = recvfrom(sock, buf, sizeof(buf), MSG_DONTWAIT,
657 			(struct sockaddr *) &from, &fromlen);
658 	if (left < 0) {
659 		if (errno != EINTR && errno != EAGAIN)
660 			wpa_printf(MSG_ERROR, "VLAN: %s: recvfrom failed: %s",
661 				   __func__, strerror(errno));
662 		return;
663 	}
664 
665 	h = (struct nlmsghdr *) buf;
666 	while (left >= (int) sizeof(*h)) {
667 		int len, plen;
668 
669 		len = h->nlmsg_len;
670 		plen = len - sizeof(*h);
671 		if (len > left || plen < 0) {
672 			wpa_printf(MSG_DEBUG, "VLAN: Malformed netlink "
673 				   "message: len=%d left=%d plen=%d",
674 				   len, left, plen);
675 			break;
676 		}
677 
678 		switch (h->nlmsg_type) {
679 		case RTM_NEWLINK:
680 			vlan_read_ifnames(h, plen, 0, hapd);
681 			break;
682 		case RTM_DELLINK:
683 			vlan_read_ifnames(h, plen, 1, hapd);
684 			break;
685 		}
686 
687 		len = NLMSG_ALIGN(len);
688 		left -= len;
689 		h = (struct nlmsghdr *) ((char *) h + len);
690 	}
691 
692 	if (left > 0) {
693 		wpa_printf(MSG_DEBUG, "VLAN: %s: %d extra bytes in the end of "
694 			   "netlink message", __func__, left);
695 	}
696 }
697 
698 
699 static struct full_dynamic_vlan *
700 full_dynamic_vlan_init(struct hostapd_data *hapd)
701 {
702 	struct sockaddr_nl local;
703 	struct full_dynamic_vlan *priv;
704 
705 	priv = os_zalloc(sizeof(*priv));
706 	if (priv == NULL)
707 		return NULL;
708 
709 #ifndef CONFIG_VLAN_NETLINK
710 	vlan_set_name_type(hapd->conf->ssid.vlan_naming ==
711 			   DYNAMIC_VLAN_NAMING_WITH_DEVICE ?
712 			   VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD :
713 			   VLAN_NAME_TYPE_PLUS_VID_NO_PAD);
714 #endif /* CONFIG_VLAN_NETLINK */
715 
716 	priv->s = socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
717 	if (priv->s < 0) {
718 		wpa_printf(MSG_ERROR, "VLAN: %s: socket(PF_NETLINK,SOCK_RAW,"
719 			   "NETLINK_ROUTE) failed: %s",
720 			   __func__, strerror(errno));
721 		os_free(priv);
722 		return NULL;
723 	}
724 
725 	os_memset(&local, 0, sizeof(local));
726 	local.nl_family = AF_NETLINK;
727 	local.nl_groups = RTMGRP_LINK;
728 	if (bind(priv->s, (struct sockaddr *) &local, sizeof(local)) < 0) {
729 		wpa_printf(MSG_ERROR, "VLAN: %s: bind(netlink) failed: %s",
730 			   __func__, strerror(errno));
731 		close(priv->s);
732 		os_free(priv);
733 		return NULL;
734 	}
735 
736 	if (eloop_register_read_sock(priv->s, vlan_event_receive, hapd, NULL))
737 	{
738 		close(priv->s);
739 		os_free(priv);
740 		return NULL;
741 	}
742 
743 	return priv;
744 }
745 
746 
747 static void full_dynamic_vlan_deinit(struct full_dynamic_vlan *priv)
748 {
749 	if (priv == NULL)
750 		return;
751 	eloop_unregister_read_sock(priv->s);
752 	close(priv->s);
753 	os_free(priv);
754 }
755 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
756 
757 
758 int vlan_setup_encryption_dyn(struct hostapd_data *hapd,
759 			      struct hostapd_ssid *mssid, const char *dyn_vlan)
760 {
761         int i;
762 
763         if (dyn_vlan == NULL)
764 		return 0;
765 
766 	/* Static WEP keys are set here; IEEE 802.1X and WPA uses their own
767 	 * functions for setting up dynamic broadcast keys. */
768 	for (i = 0; i < 4; i++) {
769 		if (mssid->wep.key[i] &&
770 		    hostapd_drv_set_key(dyn_vlan, hapd, WPA_ALG_WEP, NULL, i,
771 					i == mssid->wep.idx, NULL, 0,
772 					mssid->wep.key[i], mssid->wep.len[i]))
773 		{
774 			wpa_printf(MSG_ERROR, "VLAN: Could not set WEP "
775 				   "encryption for dynamic VLAN");
776 			return -1;
777 		}
778 	}
779 
780 	return 0;
781 }
782 
783 
784 static int vlan_dynamic_add(struct hostapd_data *hapd,
785 			    struct hostapd_vlan *vlan)
786 {
787 	while (vlan) {
788 		if (vlan->vlan_id != VLAN_ID_WILDCARD) {
789 			if (hostapd_vlan_if_add(hapd, vlan->ifname)) {
790 				if (errno != EEXIST) {
791 					wpa_printf(MSG_ERROR, "VLAN: Could "
792 						   "not add VLAN %s: %s",
793 						   vlan->ifname,
794 						   strerror(errno));
795 					return -1;
796 				}
797 			}
798 #ifdef CONFIG_FULL_DYNAMIC_VLAN
799 			ifconfig_up(vlan->ifname);
800 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
801 		}
802 
803 		vlan = vlan->next;
804 	}
805 
806 	return 0;
807 }
808 
809 
810 static void vlan_dynamic_remove(struct hostapd_data *hapd,
811 				struct hostapd_vlan *vlan)
812 {
813 	struct hostapd_vlan *next;
814 
815 	while (vlan) {
816 		next = vlan->next;
817 
818 		if (vlan->vlan_id != VLAN_ID_WILDCARD &&
819 		    hostapd_vlan_if_remove(hapd, vlan->ifname)) {
820 			wpa_printf(MSG_ERROR, "VLAN: Could not remove VLAN "
821 				   "iface: %s: %s",
822 				   vlan->ifname, strerror(errno));
823 		}
824 #ifdef CONFIG_FULL_DYNAMIC_VLAN
825 		if (vlan->clean)
826 			vlan_dellink(vlan->ifname, hapd);
827 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
828 
829 		vlan = next;
830 	}
831 }
832 
833 
834 int vlan_init(struct hostapd_data *hapd)
835 {
836 #ifdef CONFIG_FULL_DYNAMIC_VLAN
837 	hapd->full_dynamic_vlan = full_dynamic_vlan_init(hapd);
838 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
839 
840 	if (vlan_dynamic_add(hapd, hapd->conf->vlan))
841 		return -1;
842 
843         return 0;
844 }
845 
846 
847 void vlan_deinit(struct hostapd_data *hapd)
848 {
849 	vlan_dynamic_remove(hapd, hapd->conf->vlan);
850 
851 #ifdef CONFIG_FULL_DYNAMIC_VLAN
852 	full_dynamic_vlan_deinit(hapd->full_dynamic_vlan);
853 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
854 }
855 
856 
857 struct hostapd_vlan * vlan_add_dynamic(struct hostapd_data *hapd,
858 				       struct hostapd_vlan *vlan,
859 				       int vlan_id)
860 {
861 	struct hostapd_vlan *n;
862 	char *ifname, *pos;
863 
864 	if (vlan == NULL || vlan_id <= 0 || vlan_id > MAX_VLAN_ID ||
865 	    vlan->vlan_id != VLAN_ID_WILDCARD)
866 		return NULL;
867 
868 	wpa_printf(MSG_DEBUG, "VLAN: %s(vlan_id=%d ifname=%s)",
869 		   __func__, vlan_id, vlan->ifname);
870 	ifname = os_strdup(vlan->ifname);
871 	if (ifname == NULL)
872 		return NULL;
873 	pos = os_strchr(ifname, '#');
874 	if (pos == NULL) {
875 		os_free(ifname);
876 		return NULL;
877 	}
878 	*pos++ = '\0';
879 
880 	n = os_zalloc(sizeof(*n));
881 	if (n == NULL) {
882 		os_free(ifname);
883 		return NULL;
884 	}
885 
886 	n->vlan_id = vlan_id;
887 	n->dynamic_vlan = 1;
888 
889 	os_snprintf(n->ifname, sizeof(n->ifname), "%s%d%s", ifname, vlan_id,
890 		    pos);
891 	os_free(ifname);
892 
893 	if (hostapd_vlan_if_add(hapd, n->ifname)) {
894 		os_free(n);
895 		return NULL;
896 	}
897 
898 	n->next = hapd->conf->vlan;
899 	hapd->conf->vlan = n;
900 
901 #ifdef CONFIG_FULL_DYNAMIC_VLAN
902 	ifconfig_up(n->ifname);
903 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
904 
905 	return n;
906 }
907 
908 
909 int vlan_remove_dynamic(struct hostapd_data *hapd, int vlan_id)
910 {
911 	struct hostapd_vlan *vlan;
912 
913 	if (vlan_id <= 0 || vlan_id > MAX_VLAN_ID)
914 		return 1;
915 
916 	wpa_printf(MSG_DEBUG, "VLAN: %s(vlan_id=%d)", __func__, vlan_id);
917 
918 	vlan = hapd->conf->vlan;
919 	while (vlan) {
920 		if (vlan->vlan_id == vlan_id && vlan->dynamic_vlan > 0) {
921 			vlan->dynamic_vlan--;
922 			break;
923 		}
924 		vlan = vlan->next;
925 	}
926 
927 	if (vlan == NULL)
928 		return 1;
929 
930 	if (vlan->dynamic_vlan == 0)
931 		hostapd_vlan_if_remove(hapd, vlan->ifname);
932 
933 	return 0;
934 }
935