1f05cddf9SRui Paulo /*
2f05cddf9SRui Paulo * Generic advertisement service (GAS) (IEEE 802.11u)
3f05cddf9SRui Paulo * Copyright (c) 2009, Atheros Communications
4f05cddf9SRui Paulo * Copyright (c) 2011-2012, Qualcomm Atheros
5f05cddf9SRui Paulo *
6f05cddf9SRui Paulo * This software may be distributed under the terms of the BSD license.
7f05cddf9SRui Paulo * See README for more details.
8f05cddf9SRui Paulo */
9f05cddf9SRui Paulo
10f05cddf9SRui Paulo #include "includes.h"
11f05cddf9SRui Paulo
12f05cddf9SRui Paulo #include "common.h"
13f05cddf9SRui Paulo #include "ieee802_11_defs.h"
14f05cddf9SRui Paulo #include "gas.h"
15f05cddf9SRui Paulo
16f05cddf9SRui Paulo
17f05cddf9SRui Paulo static struct wpabuf *
gas_build_req(u8 action,u8 dialog_token,size_t size)18f05cddf9SRui Paulo gas_build_req(u8 action, u8 dialog_token, size_t size)
19f05cddf9SRui Paulo {
20f05cddf9SRui Paulo struct wpabuf *buf;
21f05cddf9SRui Paulo
22f05cddf9SRui Paulo buf = wpabuf_alloc(100 + size);
23f05cddf9SRui Paulo if (buf == NULL)
24f05cddf9SRui Paulo return NULL;
25f05cddf9SRui Paulo
26f05cddf9SRui Paulo wpabuf_put_u8(buf, WLAN_ACTION_PUBLIC);
27f05cddf9SRui Paulo wpabuf_put_u8(buf, action);
28f05cddf9SRui Paulo wpabuf_put_u8(buf, dialog_token);
29f05cddf9SRui Paulo
30f05cddf9SRui Paulo return buf;
31f05cddf9SRui Paulo }
32f05cddf9SRui Paulo
33f05cddf9SRui Paulo
gas_build_initial_req(u8 dialog_token,size_t size)34f05cddf9SRui Paulo struct wpabuf * gas_build_initial_req(u8 dialog_token, size_t size)
35f05cddf9SRui Paulo {
36f05cddf9SRui Paulo return gas_build_req(WLAN_PA_GAS_INITIAL_REQ, dialog_token,
37f05cddf9SRui Paulo size);
38f05cddf9SRui Paulo }
39f05cddf9SRui Paulo
40f05cddf9SRui Paulo
gas_build_comeback_req(u8 dialog_token)41f05cddf9SRui Paulo struct wpabuf * gas_build_comeback_req(u8 dialog_token)
42f05cddf9SRui Paulo {
43f05cddf9SRui Paulo return gas_build_req(WLAN_PA_GAS_COMEBACK_REQ, dialog_token, 0);
44f05cddf9SRui Paulo }
45f05cddf9SRui Paulo
46f05cddf9SRui Paulo
47f05cddf9SRui Paulo static struct wpabuf *
gas_build_resp(u8 action,u8 dialog_token,u16 status_code,u8 frag_id,u8 more,u16 comeback_delay,size_t size)48f05cddf9SRui Paulo gas_build_resp(u8 action, u8 dialog_token, u16 status_code, u8 frag_id,
49f05cddf9SRui Paulo u8 more, u16 comeback_delay, size_t size)
50f05cddf9SRui Paulo {
51f05cddf9SRui Paulo struct wpabuf *buf;
52f05cddf9SRui Paulo
53f05cddf9SRui Paulo buf = wpabuf_alloc(100 + size);
54f05cddf9SRui Paulo if (buf == NULL)
55f05cddf9SRui Paulo return NULL;
56f05cddf9SRui Paulo
57f05cddf9SRui Paulo wpabuf_put_u8(buf, WLAN_ACTION_PUBLIC);
58f05cddf9SRui Paulo wpabuf_put_u8(buf, action);
59f05cddf9SRui Paulo wpabuf_put_u8(buf, dialog_token);
60f05cddf9SRui Paulo wpabuf_put_le16(buf, status_code);
61f05cddf9SRui Paulo if (action == WLAN_PA_GAS_COMEBACK_RESP)
62f05cddf9SRui Paulo wpabuf_put_u8(buf, frag_id | (more ? 0x80 : 0));
63f05cddf9SRui Paulo wpabuf_put_le16(buf, comeback_delay);
64f05cddf9SRui Paulo
65f05cddf9SRui Paulo return buf;
66f05cddf9SRui Paulo }
67f05cddf9SRui Paulo
68f05cddf9SRui Paulo
69f05cddf9SRui Paulo struct wpabuf *
gas_build_initial_resp(u8 dialog_token,u16 status_code,u16 comeback_delay,size_t size)70f05cddf9SRui Paulo gas_build_initial_resp(u8 dialog_token, u16 status_code, u16 comeback_delay,
71f05cddf9SRui Paulo size_t size)
72f05cddf9SRui Paulo {
73f05cddf9SRui Paulo return gas_build_resp(WLAN_PA_GAS_INITIAL_RESP, dialog_token,
74f05cddf9SRui Paulo status_code, 0, 0, comeback_delay, size);
75f05cddf9SRui Paulo }
76f05cddf9SRui Paulo
77f05cddf9SRui Paulo
78*85732ac8SCy Schubert struct wpabuf *
gas_build_comeback_resp(u8 dialog_token,u16 status_code,u8 frag_id,u8 more,u16 comeback_delay,size_t size)79f05cddf9SRui Paulo gas_build_comeback_resp(u8 dialog_token, u16 status_code, u8 frag_id, u8 more,
80f05cddf9SRui Paulo u16 comeback_delay, size_t size)
81f05cddf9SRui Paulo {
82f05cddf9SRui Paulo return gas_build_resp(WLAN_PA_GAS_COMEBACK_RESP, dialog_token,
83f05cddf9SRui Paulo status_code, frag_id, more, comeback_delay,
84f05cddf9SRui Paulo size);
85f05cddf9SRui Paulo }
86f05cddf9SRui Paulo
87f05cddf9SRui Paulo
88f05cddf9SRui Paulo /**
89f05cddf9SRui Paulo * gas_add_adv_proto_anqp - Add an Advertisement Protocol element
90f05cddf9SRui Paulo * @buf: Buffer to which the element is added
91f05cddf9SRui Paulo * @query_resp_len_limit: Query Response Length Limit in units of 256 octets
92f05cddf9SRui Paulo * @pame_bi: Pre-Association Message Exchange BSSID Independent (0/1)
93f05cddf9SRui Paulo *
94f05cddf9SRui Paulo *
95f05cddf9SRui Paulo * @query_resp_len_limit is 0 for request and 1-0x7f for response. 0x7f means
96f05cddf9SRui Paulo * that the maximum limit is determined by the maximum allowable number of
97f05cddf9SRui Paulo * fragments in the GAS Query Response Fragment ID.
98f05cddf9SRui Paulo */
gas_add_adv_proto_anqp(struct wpabuf * buf,u8 query_resp_len_limit,u8 pame_bi)99f05cddf9SRui Paulo static void gas_add_adv_proto_anqp(struct wpabuf *buf, u8 query_resp_len_limit,
100f05cddf9SRui Paulo u8 pame_bi)
101f05cddf9SRui Paulo {
102f05cddf9SRui Paulo /* Advertisement Protocol IE */
103f05cddf9SRui Paulo wpabuf_put_u8(buf, WLAN_EID_ADV_PROTO);
104f05cddf9SRui Paulo wpabuf_put_u8(buf, 2); /* Length */
105f05cddf9SRui Paulo wpabuf_put_u8(buf, (query_resp_len_limit & 0x7f) |
106f05cddf9SRui Paulo (pame_bi ? 0x80 : 0));
107f05cddf9SRui Paulo /* Advertisement Protocol */
108f05cddf9SRui Paulo wpabuf_put_u8(buf, ACCESS_NETWORK_QUERY_PROTOCOL);
109f05cddf9SRui Paulo }
110f05cddf9SRui Paulo
111f05cddf9SRui Paulo
gas_anqp_build_initial_req(u8 dialog_token,size_t size)112f05cddf9SRui Paulo struct wpabuf * gas_anqp_build_initial_req(u8 dialog_token, size_t size)
113f05cddf9SRui Paulo {
114f05cddf9SRui Paulo struct wpabuf *buf;
115f05cddf9SRui Paulo
116f05cddf9SRui Paulo buf = gas_build_initial_req(dialog_token, 4 + size);
117f05cddf9SRui Paulo if (buf == NULL)
118f05cddf9SRui Paulo return NULL;
119f05cddf9SRui Paulo
120f05cddf9SRui Paulo gas_add_adv_proto_anqp(buf, 0, 0);
121f05cddf9SRui Paulo
122f05cddf9SRui Paulo wpabuf_put(buf, 2); /* Query Request Length to be filled */
123f05cddf9SRui Paulo
124f05cddf9SRui Paulo return buf;
125f05cddf9SRui Paulo }
126f05cddf9SRui Paulo
127f05cddf9SRui Paulo
gas_anqp_build_initial_resp(u8 dialog_token,u16 status_code,u16 comeback_delay,size_t size)128f05cddf9SRui Paulo struct wpabuf * gas_anqp_build_initial_resp(u8 dialog_token, u16 status_code,
129f05cddf9SRui Paulo u16 comeback_delay, size_t size)
130f05cddf9SRui Paulo {
131f05cddf9SRui Paulo struct wpabuf *buf;
132f05cddf9SRui Paulo
133f05cddf9SRui Paulo buf = gas_build_initial_resp(dialog_token, status_code, comeback_delay,
134f05cddf9SRui Paulo 4 + size);
135f05cddf9SRui Paulo if (buf == NULL)
136f05cddf9SRui Paulo return NULL;
137f05cddf9SRui Paulo
138f05cddf9SRui Paulo gas_add_adv_proto_anqp(buf, 0x7f, 0);
139f05cddf9SRui Paulo
140f05cddf9SRui Paulo wpabuf_put(buf, 2); /* Query Response Length to be filled */
141f05cddf9SRui Paulo
142f05cddf9SRui Paulo return buf;
143f05cddf9SRui Paulo }
144f05cddf9SRui Paulo
145f05cddf9SRui Paulo
gas_anqp_build_initial_resp_buf(u8 dialog_token,u16 status_code,u16 comeback_delay,struct wpabuf * payload)146f05cddf9SRui Paulo struct wpabuf * gas_anqp_build_initial_resp_buf(u8 dialog_token,
147f05cddf9SRui Paulo u16 status_code,
148f05cddf9SRui Paulo u16 comeback_delay,
149f05cddf9SRui Paulo struct wpabuf *payload)
150f05cddf9SRui Paulo {
151f05cddf9SRui Paulo struct wpabuf *buf;
152f05cddf9SRui Paulo
153f05cddf9SRui Paulo buf = gas_anqp_build_initial_resp(dialog_token, status_code,
154f05cddf9SRui Paulo comeback_delay,
155f05cddf9SRui Paulo payload ? wpabuf_len(payload) : 0);
156f05cddf9SRui Paulo if (buf == NULL)
157f05cddf9SRui Paulo return NULL;
158f05cddf9SRui Paulo
159f05cddf9SRui Paulo if (payload)
160f05cddf9SRui Paulo wpabuf_put_buf(buf, payload);
161f05cddf9SRui Paulo
162f05cddf9SRui Paulo gas_anqp_set_len(buf);
163f05cddf9SRui Paulo
164f05cddf9SRui Paulo return buf;
165f05cddf9SRui Paulo }
166f05cddf9SRui Paulo
167f05cddf9SRui Paulo
gas_anqp_build_comeback_resp(u8 dialog_token,u16 status_code,u8 frag_id,u8 more,u16 comeback_delay,size_t size)168f05cddf9SRui Paulo struct wpabuf * gas_anqp_build_comeback_resp(u8 dialog_token, u16 status_code,
169f05cddf9SRui Paulo u8 frag_id, u8 more,
170f05cddf9SRui Paulo u16 comeback_delay, size_t size)
171f05cddf9SRui Paulo {
172f05cddf9SRui Paulo struct wpabuf *buf;
173f05cddf9SRui Paulo
174f05cddf9SRui Paulo buf = gas_build_comeback_resp(dialog_token, status_code,
175f05cddf9SRui Paulo frag_id, more, comeback_delay, 4 + size);
176f05cddf9SRui Paulo if (buf == NULL)
177f05cddf9SRui Paulo return NULL;
178f05cddf9SRui Paulo
179f05cddf9SRui Paulo gas_add_adv_proto_anqp(buf, 0x7f, 0);
180f05cddf9SRui Paulo
181f05cddf9SRui Paulo wpabuf_put(buf, 2); /* Query Response Length to be filled */
182f05cddf9SRui Paulo
183f05cddf9SRui Paulo return buf;
184f05cddf9SRui Paulo }
185f05cddf9SRui Paulo
186f05cddf9SRui Paulo
gas_anqp_build_comeback_resp_buf(u8 dialog_token,u16 status_code,u8 frag_id,u8 more,u16 comeback_delay,struct wpabuf * payload)187f05cddf9SRui Paulo struct wpabuf * gas_anqp_build_comeback_resp_buf(u8 dialog_token,
188f05cddf9SRui Paulo u16 status_code,
189f05cddf9SRui Paulo u8 frag_id, u8 more,
190f05cddf9SRui Paulo u16 comeback_delay,
191f05cddf9SRui Paulo struct wpabuf *payload)
192f05cddf9SRui Paulo {
193f05cddf9SRui Paulo struct wpabuf *buf;
194f05cddf9SRui Paulo
195f05cddf9SRui Paulo buf = gas_anqp_build_comeback_resp(dialog_token, status_code, frag_id,
196f05cddf9SRui Paulo more, comeback_delay,
197f05cddf9SRui Paulo payload ? wpabuf_len(payload) : 0);
198f05cddf9SRui Paulo if (buf == NULL)
199f05cddf9SRui Paulo return NULL;
200f05cddf9SRui Paulo
201f05cddf9SRui Paulo if (payload)
202f05cddf9SRui Paulo wpabuf_put_buf(buf, payload);
203f05cddf9SRui Paulo
204f05cddf9SRui Paulo gas_anqp_set_len(buf);
205f05cddf9SRui Paulo
206f05cddf9SRui Paulo return buf;
207f05cddf9SRui Paulo }
208f05cddf9SRui Paulo
209f05cddf9SRui Paulo
210f05cddf9SRui Paulo /**
211f05cddf9SRui Paulo * gas_anqp_set_len - Set Query Request/Response Length
212f05cddf9SRui Paulo * @buf: GAS message
213f05cddf9SRui Paulo *
214f05cddf9SRui Paulo * This function is used to update the Query Request/Response Length field once
215f05cddf9SRui Paulo * the payload has been filled.
216f05cddf9SRui Paulo */
gas_anqp_set_len(struct wpabuf * buf)217f05cddf9SRui Paulo void gas_anqp_set_len(struct wpabuf *buf)
218f05cddf9SRui Paulo {
219f05cddf9SRui Paulo u8 action;
220f05cddf9SRui Paulo size_t offset;
221f05cddf9SRui Paulo u8 *len;
222f05cddf9SRui Paulo
223f05cddf9SRui Paulo if (buf == NULL || wpabuf_len(buf) < 2)
224f05cddf9SRui Paulo return;
225f05cddf9SRui Paulo
226f05cddf9SRui Paulo action = *(wpabuf_head_u8(buf) + 1);
227f05cddf9SRui Paulo switch (action) {
228f05cddf9SRui Paulo case WLAN_PA_GAS_INITIAL_REQ:
229f05cddf9SRui Paulo offset = 3 + 4;
230f05cddf9SRui Paulo break;
231f05cddf9SRui Paulo case WLAN_PA_GAS_INITIAL_RESP:
232f05cddf9SRui Paulo offset = 7 + 4;
233f05cddf9SRui Paulo break;
234f05cddf9SRui Paulo case WLAN_PA_GAS_COMEBACK_RESP:
235f05cddf9SRui Paulo offset = 8 + 4;
236f05cddf9SRui Paulo break;
237f05cddf9SRui Paulo default:
238f05cddf9SRui Paulo return;
239f05cddf9SRui Paulo }
240f05cddf9SRui Paulo
241f05cddf9SRui Paulo if (wpabuf_len(buf) < offset + 2)
242f05cddf9SRui Paulo return;
243f05cddf9SRui Paulo
244f05cddf9SRui Paulo len = wpabuf_mhead_u8(buf) + offset;
245f05cddf9SRui Paulo WPA_PUT_LE16(len, (u8 *) wpabuf_put(buf, 0) - len - 2);
246f05cddf9SRui Paulo }
247f05cddf9SRui Paulo
248f05cddf9SRui Paulo
249f05cddf9SRui Paulo /**
250f05cddf9SRui Paulo * gas_anqp_add_element - Add ANQP element header
251f05cddf9SRui Paulo * @buf: GAS message
252f05cddf9SRui Paulo * @info_id: ANQP Info ID
253f05cddf9SRui Paulo * Returns: Pointer to the Length field for gas_anqp_set_element_len()
254f05cddf9SRui Paulo */
gas_anqp_add_element(struct wpabuf * buf,u16 info_id)255f05cddf9SRui Paulo u8 * gas_anqp_add_element(struct wpabuf *buf, u16 info_id)
256f05cddf9SRui Paulo {
257f05cddf9SRui Paulo wpabuf_put_le16(buf, info_id);
258f05cddf9SRui Paulo return wpabuf_put(buf, 2); /* Length to be filled */
259f05cddf9SRui Paulo }
260f05cddf9SRui Paulo
261f05cddf9SRui Paulo
262f05cddf9SRui Paulo /**
263f05cddf9SRui Paulo * gas_anqp_set_element_len - Update ANQP element Length field
264f05cddf9SRui Paulo * @buf: GAS message
265f05cddf9SRui Paulo * @len_pos: Length field position from gas_anqp_add_element()
266f05cddf9SRui Paulo *
267f05cddf9SRui Paulo * This function is called after the ANQP element payload has been added to the
268f05cddf9SRui Paulo * buffer.
269f05cddf9SRui Paulo */
gas_anqp_set_element_len(struct wpabuf * buf,u8 * len_pos)270f05cddf9SRui Paulo void gas_anqp_set_element_len(struct wpabuf *buf, u8 *len_pos)
271f05cddf9SRui Paulo {
272f05cddf9SRui Paulo WPA_PUT_LE16(len_pos, (u8 *) wpabuf_put(buf, 0) - len_pos - 2);
273f05cddf9SRui Paulo }
274