1 /*
2 * Driver interaction with Linux nl80211/cfg80211 - Event processing
3 * Copyright (c) 2002-2017, Jouni Malinen <[email protected]>
4 * Copyright (c) 2007, Johannes Berg <[email protected]>
5 * Copyright (c) 2009-2010, Atheros Communications
6 *
7 * This software may be distributed under the terms of the BSD license.
8 * See README for more details.
9 */
10
11 #include "includes.h"
12 #include <netlink/genl/genl.h>
13
14 #include "utils/common.h"
15 #include "utils/eloop.h"
16 #include "common/qca-vendor.h"
17 #include "common/qca-vendor-attr.h"
18 #include "common/brcm_vendor.h"
19 #include "common/ieee802_11_defs.h"
20 #include "common/ieee802_11_common.h"
21 #include "driver_nl80211.h"
22
23 static void
24 nl80211_control_port_frame_tx_status(struct i802_bss *bss,
25 const u8 *frame, size_t len,
26 struct nlattr *ack, struct nlattr *cookie);
27
28
nl80211_command_to_string(enum nl80211_commands cmd)29 static const char * nl80211_command_to_string(enum nl80211_commands cmd)
30 {
31 #define C2S(x) case x: return #x;
32 switch (cmd) {
33 C2S(NL80211_CMD_UNSPEC)
34 C2S(NL80211_CMD_GET_WIPHY)
35 C2S(NL80211_CMD_SET_WIPHY)
36 C2S(NL80211_CMD_NEW_WIPHY)
37 C2S(NL80211_CMD_DEL_WIPHY)
38 C2S(NL80211_CMD_GET_INTERFACE)
39 C2S(NL80211_CMD_SET_INTERFACE)
40 C2S(NL80211_CMD_NEW_INTERFACE)
41 C2S(NL80211_CMD_DEL_INTERFACE)
42 C2S(NL80211_CMD_GET_KEY)
43 C2S(NL80211_CMD_SET_KEY)
44 C2S(NL80211_CMD_NEW_KEY)
45 C2S(NL80211_CMD_DEL_KEY)
46 C2S(NL80211_CMD_GET_BEACON)
47 C2S(NL80211_CMD_SET_BEACON)
48 C2S(NL80211_CMD_START_AP)
49 C2S(NL80211_CMD_STOP_AP)
50 C2S(NL80211_CMD_GET_STATION)
51 C2S(NL80211_CMD_SET_STATION)
52 C2S(NL80211_CMD_NEW_STATION)
53 C2S(NL80211_CMD_DEL_STATION)
54 C2S(NL80211_CMD_GET_MPATH)
55 C2S(NL80211_CMD_SET_MPATH)
56 C2S(NL80211_CMD_NEW_MPATH)
57 C2S(NL80211_CMD_DEL_MPATH)
58 C2S(NL80211_CMD_SET_BSS)
59 C2S(NL80211_CMD_SET_REG)
60 C2S(NL80211_CMD_REQ_SET_REG)
61 C2S(NL80211_CMD_GET_MESH_CONFIG)
62 C2S(NL80211_CMD_SET_MESH_CONFIG)
63 C2S(NL80211_CMD_SET_MGMT_EXTRA_IE)
64 C2S(NL80211_CMD_GET_REG)
65 C2S(NL80211_CMD_GET_SCAN)
66 C2S(NL80211_CMD_TRIGGER_SCAN)
67 C2S(NL80211_CMD_NEW_SCAN_RESULTS)
68 C2S(NL80211_CMD_SCAN_ABORTED)
69 C2S(NL80211_CMD_REG_CHANGE)
70 C2S(NL80211_CMD_AUTHENTICATE)
71 C2S(NL80211_CMD_ASSOCIATE)
72 C2S(NL80211_CMD_DEAUTHENTICATE)
73 C2S(NL80211_CMD_DISASSOCIATE)
74 C2S(NL80211_CMD_MICHAEL_MIC_FAILURE)
75 C2S(NL80211_CMD_REG_BEACON_HINT)
76 C2S(NL80211_CMD_JOIN_IBSS)
77 C2S(NL80211_CMD_LEAVE_IBSS)
78 C2S(NL80211_CMD_TESTMODE)
79 C2S(NL80211_CMD_CONNECT)
80 C2S(NL80211_CMD_ROAM)
81 C2S(NL80211_CMD_DISCONNECT)
82 C2S(NL80211_CMD_SET_WIPHY_NETNS)
83 C2S(NL80211_CMD_GET_SURVEY)
84 C2S(NL80211_CMD_NEW_SURVEY_RESULTS)
85 C2S(NL80211_CMD_SET_PMKSA)
86 C2S(NL80211_CMD_DEL_PMKSA)
87 C2S(NL80211_CMD_FLUSH_PMKSA)
88 C2S(NL80211_CMD_REMAIN_ON_CHANNEL)
89 C2S(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL)
90 C2S(NL80211_CMD_SET_TX_BITRATE_MASK)
91 C2S(NL80211_CMD_REGISTER_FRAME)
92 C2S(NL80211_CMD_FRAME)
93 C2S(NL80211_CMD_FRAME_TX_STATUS)
94 C2S(NL80211_CMD_SET_POWER_SAVE)
95 C2S(NL80211_CMD_GET_POWER_SAVE)
96 C2S(NL80211_CMD_SET_CQM)
97 C2S(NL80211_CMD_NOTIFY_CQM)
98 C2S(NL80211_CMD_SET_CHANNEL)
99 C2S(NL80211_CMD_SET_WDS_PEER)
100 C2S(NL80211_CMD_FRAME_WAIT_CANCEL)
101 C2S(NL80211_CMD_JOIN_MESH)
102 C2S(NL80211_CMD_LEAVE_MESH)
103 C2S(NL80211_CMD_UNPROT_DEAUTHENTICATE)
104 C2S(NL80211_CMD_UNPROT_DISASSOCIATE)
105 C2S(NL80211_CMD_NEW_PEER_CANDIDATE)
106 C2S(NL80211_CMD_GET_WOWLAN)
107 C2S(NL80211_CMD_SET_WOWLAN)
108 C2S(NL80211_CMD_START_SCHED_SCAN)
109 C2S(NL80211_CMD_STOP_SCHED_SCAN)
110 C2S(NL80211_CMD_SCHED_SCAN_RESULTS)
111 C2S(NL80211_CMD_SCHED_SCAN_STOPPED)
112 C2S(NL80211_CMD_SET_REKEY_OFFLOAD)
113 C2S(NL80211_CMD_PMKSA_CANDIDATE)
114 C2S(NL80211_CMD_TDLS_OPER)
115 C2S(NL80211_CMD_TDLS_MGMT)
116 C2S(NL80211_CMD_UNEXPECTED_FRAME)
117 C2S(NL80211_CMD_PROBE_CLIENT)
118 C2S(NL80211_CMD_REGISTER_BEACONS)
119 C2S(NL80211_CMD_UNEXPECTED_4ADDR_FRAME)
120 C2S(NL80211_CMD_SET_NOACK_MAP)
121 C2S(NL80211_CMD_CH_SWITCH_NOTIFY)
122 C2S(NL80211_CMD_START_P2P_DEVICE)
123 C2S(NL80211_CMD_STOP_P2P_DEVICE)
124 C2S(NL80211_CMD_CONN_FAILED)
125 C2S(NL80211_CMD_SET_MCAST_RATE)
126 C2S(NL80211_CMD_SET_MAC_ACL)
127 C2S(NL80211_CMD_RADAR_DETECT)
128 C2S(NL80211_CMD_GET_PROTOCOL_FEATURES)
129 C2S(NL80211_CMD_UPDATE_FT_IES)
130 C2S(NL80211_CMD_FT_EVENT)
131 C2S(NL80211_CMD_CRIT_PROTOCOL_START)
132 C2S(NL80211_CMD_CRIT_PROTOCOL_STOP)
133 C2S(NL80211_CMD_GET_COALESCE)
134 C2S(NL80211_CMD_SET_COALESCE)
135 C2S(NL80211_CMD_CHANNEL_SWITCH)
136 C2S(NL80211_CMD_VENDOR)
137 C2S(NL80211_CMD_SET_QOS_MAP)
138 C2S(NL80211_CMD_ADD_TX_TS)
139 C2S(NL80211_CMD_DEL_TX_TS)
140 C2S(NL80211_CMD_GET_MPP)
141 C2S(NL80211_CMD_JOIN_OCB)
142 C2S(NL80211_CMD_LEAVE_OCB)
143 C2S(NL80211_CMD_CH_SWITCH_STARTED_NOTIFY)
144 C2S(NL80211_CMD_TDLS_CHANNEL_SWITCH)
145 C2S(NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH)
146 C2S(NL80211_CMD_WIPHY_REG_CHANGE)
147 C2S(NL80211_CMD_ABORT_SCAN)
148 C2S(NL80211_CMD_START_NAN)
149 C2S(NL80211_CMD_STOP_NAN)
150 C2S(NL80211_CMD_ADD_NAN_FUNCTION)
151 C2S(NL80211_CMD_DEL_NAN_FUNCTION)
152 C2S(NL80211_CMD_CHANGE_NAN_CONFIG)
153 C2S(NL80211_CMD_NAN_MATCH)
154 C2S(NL80211_CMD_SET_MULTICAST_TO_UNICAST)
155 C2S(NL80211_CMD_UPDATE_CONNECT_PARAMS)
156 C2S(NL80211_CMD_SET_PMK)
157 C2S(NL80211_CMD_DEL_PMK)
158 C2S(NL80211_CMD_PORT_AUTHORIZED)
159 C2S(NL80211_CMD_RELOAD_REGDB)
160 C2S(NL80211_CMD_EXTERNAL_AUTH)
161 C2S(NL80211_CMD_STA_OPMODE_CHANGED)
162 C2S(NL80211_CMD_CONTROL_PORT_FRAME)
163 C2S(NL80211_CMD_GET_FTM_RESPONDER_STATS)
164 C2S(NL80211_CMD_PEER_MEASUREMENT_START)
165 C2S(NL80211_CMD_PEER_MEASUREMENT_RESULT)
166 C2S(NL80211_CMD_PEER_MEASUREMENT_COMPLETE)
167 C2S(NL80211_CMD_NOTIFY_RADAR)
168 C2S(NL80211_CMD_UPDATE_OWE_INFO)
169 C2S(NL80211_CMD_PROBE_MESH_LINK)
170 C2S(NL80211_CMD_SET_TID_CONFIG)
171 C2S(NL80211_CMD_UNPROT_BEACON)
172 C2S(NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS)
173 C2S(NL80211_CMD_SET_SAR_SPECS)
174 C2S(NL80211_CMD_OBSS_COLOR_COLLISION)
175 C2S(NL80211_CMD_COLOR_CHANGE_REQUEST)
176 C2S(NL80211_CMD_COLOR_CHANGE_STARTED)
177 C2S(NL80211_CMD_COLOR_CHANGE_ABORTED)
178 C2S(NL80211_CMD_COLOR_CHANGE_COMPLETED)
179 C2S(NL80211_CMD_SET_FILS_AAD)
180 C2S(NL80211_CMD_ASSOC_COMEBACK)
181 C2S(NL80211_CMD_ADD_LINK)
182 C2S(NL80211_CMD_REMOVE_LINK)
183 C2S(NL80211_CMD_ADD_LINK_STA)
184 C2S(NL80211_CMD_MODIFY_LINK_STA)
185 C2S(NL80211_CMD_REMOVE_LINK_STA)
186 C2S(NL80211_CMD_SET_HW_TIMESTAMP)
187 C2S(NL80211_CMD_LINKS_REMOVED)
188 C2S(NL80211_CMD_SET_TID_TO_LINK_MAPPING)
189 C2S(__NL80211_CMD_AFTER_LAST)
190 }
191 #undef C2S
192
193 return "NL80211_CMD_UNKNOWN";
194 }
195
196
mlme_event_auth(struct wpa_driver_nl80211_data * drv,const u8 * frame,size_t len)197 static void mlme_event_auth(struct wpa_driver_nl80211_data *drv,
198 const u8 *frame, size_t len)
199 {
200 const struct ieee80211_mgmt *mgmt;
201 union wpa_event_data event;
202
203 if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
204 drv->force_connect_cmd) {
205 /*
206 * Avoid reporting two association events that would confuse
207 * the core code.
208 */
209 wpa_printf(MSG_DEBUG,
210 "nl80211: Ignore auth event when using driver SME");
211 return;
212 }
213
214 wpa_printf(MSG_DEBUG, "nl80211: Authenticate event");
215 mgmt = (const struct ieee80211_mgmt *) frame;
216 if (len < 24 + sizeof(mgmt->u.auth)) {
217 wpa_printf(MSG_DEBUG, "nl80211: Too short association event "
218 "frame");
219 return;
220 }
221
222 os_memcpy(drv->auth_bssid, mgmt->sa, ETH_ALEN);
223 os_memset(drv->auth_attempt_bssid, 0, ETH_ALEN);
224 os_memset(&event, 0, sizeof(event));
225 os_memcpy(event.auth.peer, mgmt->sa, ETH_ALEN);
226 event.auth.auth_type = le_to_host16(mgmt->u.auth.auth_alg);
227 event.auth.auth_transaction =
228 le_to_host16(mgmt->u.auth.auth_transaction);
229 event.auth.status_code = le_to_host16(mgmt->u.auth.status_code);
230 if (len > 24 + sizeof(mgmt->u.auth)) {
231 event.auth.ies = mgmt->u.auth.variable;
232 event.auth.ies_len = len - 24 - sizeof(mgmt->u.auth);
233 }
234
235 wpa_supplicant_event(drv->ctx, EVENT_AUTH, &event);
236 }
237
238
nl80211_parse_wmm_params(struct nlattr * wmm_attr,struct wmm_params * wmm_params)239 static void nl80211_parse_wmm_params(struct nlattr *wmm_attr,
240 struct wmm_params *wmm_params)
241 {
242 struct nlattr *wmm_info[NL80211_STA_WME_MAX + 1];
243 static struct nla_policy wme_policy[NL80211_STA_WME_MAX + 1] = {
244 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
245 };
246
247 if (!wmm_attr ||
248 nla_parse_nested(wmm_info, NL80211_STA_WME_MAX, wmm_attr,
249 wme_policy) ||
250 !wmm_info[NL80211_STA_WME_UAPSD_QUEUES])
251 return;
252
253 wmm_params->uapsd_queues =
254 nla_get_u8(wmm_info[NL80211_STA_WME_UAPSD_QUEUES]);
255 wmm_params->info_bitmap |= WMM_PARAMS_UAPSD_QUEUES_INFO;
256 }
257
258
mlme_event_assoc(struct wpa_driver_nl80211_data * drv,const u8 * frame,size_t len,struct nlattr * wmm,struct nlattr * req_ie)259 static void mlme_event_assoc(struct wpa_driver_nl80211_data *drv,
260 const u8 *frame, size_t len, struct nlattr *wmm,
261 struct nlattr *req_ie)
262 {
263 const struct ieee80211_mgmt *mgmt;
264 union wpa_event_data event;
265 u16 status;
266 int ssid_len;
267
268 if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
269 drv->force_connect_cmd) {
270 /*
271 * Avoid reporting two association events that would confuse
272 * the core code.
273 */
274 wpa_printf(MSG_DEBUG,
275 "nl80211: Ignore assoc event when using driver SME");
276 return;
277 }
278
279 wpa_printf(MSG_DEBUG, "nl80211: Associate event");
280 mgmt = (const struct ieee80211_mgmt *) frame;
281 if (len < 24 + sizeof(mgmt->u.assoc_resp)) {
282 wpa_printf(MSG_DEBUG, "nl80211: Too short association event "
283 "frame");
284 return;
285 }
286
287 status = le_to_host16(mgmt->u.assoc_resp.status_code);
288 if (status != WLAN_STATUS_SUCCESS) {
289 os_memset(&event, 0, sizeof(event));
290 event.assoc_reject.bssid = mgmt->bssid;
291 if (len > 24 + sizeof(mgmt->u.assoc_resp)) {
292 event.assoc_reject.resp_ies =
293 (u8 *) mgmt->u.assoc_resp.variable;
294 event.assoc_reject.resp_ies_len =
295 len - 24 - sizeof(mgmt->u.assoc_resp);
296 }
297 event.assoc_reject.status_code = status;
298
299 wpa_supplicant_event(drv->ctx, EVENT_ASSOC_REJECT, &event);
300 return;
301 }
302
303 drv->associated = 1;
304 os_memcpy(drv->bssid, mgmt->sa, ETH_ALEN);
305 os_memcpy(drv->prev_bssid, mgmt->sa, ETH_ALEN);
306
307 os_memset(&event, 0, sizeof(event));
308 event.assoc_info.resp_frame = frame;
309 event.assoc_info.resp_frame_len = len;
310 if (len > 24 + sizeof(mgmt->u.assoc_resp)) {
311 event.assoc_info.resp_ies = (u8 *) mgmt->u.assoc_resp.variable;
312 event.assoc_info.resp_ies_len =
313 len - 24 - sizeof(mgmt->u.assoc_resp);
314 }
315
316 if (req_ie) {
317 event.assoc_info.req_ies = nla_data(req_ie);
318 event.assoc_info.req_ies_len = nla_len(req_ie);
319 }
320
321 /* When this association was initiated outside of wpa_supplicant,
322 * drv->ssid needs to be set here to satisfy later checking. */
323 ssid_len = nl80211_get_assoc_ssid(drv, drv->ssid);
324 if (ssid_len > 0) {
325 drv->ssid_len = ssid_len;
326 wpa_printf(MSG_DEBUG,
327 "nl80211: Set drv->ssid based on scan res info to '%s'",
328 wpa_ssid_txt(drv->ssid, drv->ssid_len));
329 }
330
331 event.assoc_info.freq = drv->assoc_freq;
332 drv->first_bss->flink->freq = drv->assoc_freq;
333
334 nl80211_parse_wmm_params(wmm, &event.assoc_info.wmm_params);
335
336 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, &event);
337 }
338
339
340 #ifdef CONFIG_DRIVER_NL80211_QCA
341
qca_drv_connect_fail_reason_code_handler(struct nl_msg * msg,void * arg)342 static int qca_drv_connect_fail_reason_code_handler(struct nl_msg *msg,
343 void *arg)
344 {
345 struct nlattr *tb[NL80211_ATTR_MAX + 1];
346 struct nlattr *tb_sta_info[QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_MAX + 1];
347 struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
348 u32 *reason_code = arg;
349
350 *reason_code = 0;
351 nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
352 genlmsg_attrlen(gnlh, 0), NULL);
353
354 if (!tb[NL80211_ATTR_VENDOR_DATA]) {
355 wpa_printf(MSG_ERROR, "%s: Vendor data not found", __func__);
356 return NL_SKIP;
357 }
358
359 nla_parse(tb_sta_info, QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_MAX,
360 nla_data(tb[NL80211_ATTR_VENDOR_DATA]),
361 nla_len(tb[NL80211_ATTR_VENDOR_DATA]), NULL);
362
363 if (!tb_sta_info[QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_CONNECT_FAIL_REASON_CODE]) {
364 wpa_printf(MSG_INFO, "%s: Vendor attr not found", __func__);
365 return NL_SKIP;
366 }
367
368 *reason_code = nla_get_u32(tb_sta_info[QCA_WLAN_VENDOR_ATTR_GET_STA_INFO_CONNECT_FAIL_REASON_CODE]);
369
370 return NL_SKIP;
371 }
372
373
374 static enum qca_sta_connect_fail_reason_codes
drv_get_connect_fail_reason_code(struct wpa_driver_nl80211_data * drv)375 drv_get_connect_fail_reason_code(struct wpa_driver_nl80211_data *drv)
376 {
377 enum qca_sta_connect_fail_reason_codes reason_code;
378 struct nl_msg *msg;
379 int ret;
380
381 msg = nl80211_drv_msg(drv, 0, NL80211_CMD_VENDOR);
382 if (!msg || nla_put_u32(msg, NL80211_ATTR_VENDOR_ID, OUI_QCA) ||
383 nla_put_u32(msg, NL80211_ATTR_VENDOR_SUBCMD,
384 QCA_NL80211_VENDOR_SUBCMD_GET_STA_INFO)) {
385 nlmsg_free(msg);
386 return 0;
387 }
388
389 ret = send_and_recv_resp(drv, msg,
390 qca_drv_connect_fail_reason_code_handler,
391 &reason_code);
392 if (ret)
393 wpa_printf(MSG_DEBUG,
394 "nl80211: Get connect fail reason_code failed: ret=%d (%s)",
395 ret, strerror(-ret));
396
397 return reason_code;
398 }
399
400
401 static enum sta_connect_fail_reason_codes
convert_connect_fail_reason_codes(enum qca_sta_connect_fail_reason_codes reason_code)402 convert_connect_fail_reason_codes(enum qca_sta_connect_fail_reason_codes
403 reason_code)
404 {
405 switch (reason_code) {
406 case QCA_STA_CONNECT_FAIL_REASON_NO_BSS_FOUND:
407 return STA_CONNECT_FAIL_REASON_NO_BSS_FOUND;
408 case QCA_STA_CONNECT_FAIL_REASON_AUTH_TX_FAIL:
409 return STA_CONNECT_FAIL_REASON_AUTH_TX_FAIL;
410 case QCA_STA_CONNECT_FAIL_REASON_AUTH_NO_ACK_RECEIVED:
411 return STA_CONNECT_FAIL_REASON_AUTH_NO_ACK_RECEIVED;
412 case QCA_STA_CONNECT_FAIL_REASON_AUTH_NO_RESP_RECEIVED:
413 return STA_CONNECT_FAIL_REASON_AUTH_NO_RESP_RECEIVED;
414 case QCA_STA_CONNECT_FAIL_REASON_ASSOC_REQ_TX_FAIL:
415 return STA_CONNECT_FAIL_REASON_ASSOC_REQ_TX_FAIL;
416 case QCA_STA_CONNECT_FAIL_REASON_ASSOC_NO_ACK_RECEIVED:
417 return STA_CONNECT_FAIL_REASON_ASSOC_NO_ACK_RECEIVED;
418 case QCA_STA_CONNECT_FAIL_REASON_ASSOC_NO_RESP_RECEIVED:
419 return STA_CONNECT_FAIL_REASON_ASSOC_NO_RESP_RECEIVED;
420 default:
421 return STA_CONNECT_FAIL_REASON_UNSPECIFIED;
422 }
423 }
424
425
qca_nl80211_link_reconfig_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)426 static void qca_nl80211_link_reconfig_event(struct wpa_driver_nl80211_data *drv,
427 u8 *data, size_t len)
428 {
429 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_MAX + 1];
430 u16 removed_links;
431 u8 *ap_mld;
432 int i;
433
434 if (!data)
435 return;
436
437 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_MAX,
438 (struct nlattr *) data, len, NULL) ||
439 !tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_AP_MLD_ADDR])
440 return;
441
442 ap_mld = nla_data(tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_AP_MLD_ADDR]);
443 wpa_printf(MSG_DEBUG, "nl80211: AP MLD address " MACSTR
444 " received in link reconfig event", MAC2STR(ap_mld));
445 if (!drv->sta_mlo_info.valid_links ||
446 !ether_addr_equal(drv->sta_mlo_info.ap_mld_addr, ap_mld)) {
447 if (drv->pending_link_reconfig_data == data) {
448 wpa_printf(MSG_DEBUG,
449 "nl80211: Drop pending link reconfig event since AP MLD not matched even after new connect/roam event");
450 os_free(drv->pending_link_reconfig_data);
451 drv->pending_link_reconfig_data = NULL;
452 return;
453 }
454
455 wpa_printf(MSG_DEBUG,
456 "nl80211: Cache new link reconfig event till next connect/roam event");
457 if (drv->pending_link_reconfig_data) {
458 wpa_printf(MSG_DEBUG, "nl80211: Override old link reconfig event data");
459 os_free(drv->pending_link_reconfig_data);
460 }
461 drv->pending_link_reconfig_data = os_memdup(data, len);
462 if (!drv->pending_link_reconfig_data)
463 return;
464 drv->pending_link_reconfig_data_len = len;
465 return;
466 }
467
468 if (!tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_REMOVED_LINKS])
469 return;
470 removed_links = nla_get_u16(
471 tb[QCA_WLAN_VENDOR_ATTR_LINK_RECONFIG_REMOVED_LINKS]);
472
473 drv->sta_mlo_info.valid_links &= ~removed_links;
474
475 /*
476 * Set default BSSID to the BSSID of the lowest link ID of remaining
477 * links when the link used for (re)association is removed.
478 */
479 if (removed_links & BIT(drv->sta_mlo_info.assoc_link_id)) {
480 for_each_link(drv->sta_mlo_info.valid_links, i) {
481 os_memcpy(drv->bssid, drv->sta_mlo_info.links[i].bssid,
482 ETH_ALEN);
483 drv->sta_mlo_info.assoc_link_id = i;
484 break;
485 }
486 }
487
488 wpa_printf(MSG_DEBUG, "nl80211: Removed MLO links bitmap: 0x%x",
489 removed_links);
490
491 wpa_supplicant_event(drv->ctx, EVENT_LINK_RECONFIG, NULL);
492 }
493
494
495 static void
nl80211_parse_qca_vendor_mlo_link_info(struct driver_sta_mlo_info * mlo,struct nlattr * mlo_links)496 nl80211_parse_qca_vendor_mlo_link_info(struct driver_sta_mlo_info *mlo,
497 struct nlattr *mlo_links)
498 {
499 struct nlattr *link;
500 int rem_links;
501
502 nla_for_each_nested(link, mlo_links, rem_links) {
503 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAX + 1];
504 int link_id;
505
506 nla_parse(tb,QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAX, nla_data(link),
507 nla_len(link), NULL);
508
509 if (!tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_ID] ||
510 !tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAC_ADDR] ||
511 !tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_BSSID])
512 continue;
513
514 link_id = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_ID]);
515 if (link_id >= MAX_NUM_MLD_LINKS)
516 continue;
517
518 mlo->valid_links |= BIT(link_id);
519 os_memcpy(mlo->links[link_id].addr,
520 nla_data(tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_MAC_ADDR]),
521 ETH_ALEN);
522 os_memcpy(mlo->links[link_id].bssid,
523 nla_data(tb[QCA_WLAN_VENDOR_ATTR_MLO_LINK_BSSID]),
524 ETH_ALEN);
525 wpa_printf(MSG_DEBUG, "nl80211: MLO link[%u] addr " MACSTR
526 " bssid " MACSTR,
527 link_id, MAC2STR(mlo->links[link_id].addr),
528 MAC2STR(mlo->links[link_id].bssid));
529 }
530 }
531
532 #endif /* CONFIG_DRIVER_NL80211_QCA */
533
534
nl80211_parse_mlo_link_info(struct driver_sta_mlo_info * mlo,struct nlattr * mlo_links)535 static void nl80211_parse_mlo_link_info(struct driver_sta_mlo_info *mlo,
536 struct nlattr *mlo_links)
537 {
538 struct nlattr *link;
539 int rem_links;
540
541 nla_for_each_nested(link, mlo_links, rem_links) {
542 struct nlattr *tb[NL80211_ATTR_MAX + 1];
543 int link_id;
544
545 nla_parse(tb, NL80211_ATTR_MAX, nla_data(link), nla_len(link),
546 NULL);
547
548 if (!tb[NL80211_ATTR_MLO_LINK_ID] || !tb[NL80211_ATTR_MAC] ||
549 !tb[NL80211_ATTR_BSSID])
550 continue;
551
552 link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
553 if (link_id >= MAX_NUM_MLD_LINKS)
554 continue;
555
556 if (tb[NL80211_ATTR_STATUS_CODE]) {
557 /* Set requested links only when status indicated */
558 mlo->req_links |= BIT(link_id);
559 if (nla_get_u16(tb[NL80211_ATTR_STATUS_CODE]) ==
560 WLAN_STATUS_SUCCESS)
561 mlo->valid_links |= BIT(link_id);
562 } else {
563 mlo->valid_links |= BIT(link_id);
564 }
565
566 os_memcpy(mlo->links[link_id].addr,
567 nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
568 os_memcpy(mlo->links[link_id].bssid,
569 nla_data(tb[NL80211_ATTR_BSSID]), ETH_ALEN);
570 wpa_printf(MSG_DEBUG, "nl80211: MLO link[%u] addr " MACSTR
571 " bssid " MACSTR,
572 link_id, MAC2STR(mlo->links[link_id].addr),
573 MAC2STR(mlo->links[link_id].bssid));
574 }
575 }
576
577
578 struct links_info {
579 /* bitmap of link IDs in Per-STA profile subelements */
580 u16 non_assoc_links;
581 u8 addr[MAX_NUM_MLD_LINKS][ETH_ALEN];
582 };
583
584
nl80211_get_basic_mle_links_info(const u8 * mle,size_t mle_len,struct links_info * info)585 static void nl80211_get_basic_mle_links_info(const u8 *mle, size_t mle_len,
586 struct links_info *info)
587 {
588 size_t rem_len;
589 const u8 *pos;
590
591 if (mle_len < MULTI_LINK_CONTROL_LEN + 1 ||
592 mle_len - MULTI_LINK_CONTROL_LEN < mle[MULTI_LINK_CONTROL_LEN])
593 return;
594
595 /* Skip Common Info */
596 pos = mle + MULTI_LINK_CONTROL_LEN + mle[MULTI_LINK_CONTROL_LEN];
597 rem_len = mle_len -
598 (MULTI_LINK_CONTROL_LEN + mle[MULTI_LINK_CONTROL_LEN]);
599
600 /* Parse Subelements */
601 while (rem_len > 2) {
602 size_t ie_len = 2 + pos[1];
603
604 if (rem_len < ie_len)
605 break;
606
607 if (pos[0] == MULTI_LINK_SUB_ELEM_ID_PER_STA_PROFILE) {
608 u8 link_id;
609 const u8 *sta_profile;
610 u16 sta_ctrl;
611
612 if (pos[1] < BASIC_MLE_STA_PROF_STA_MAC_IDX + ETH_ALEN)
613 goto next_subelem;
614
615 sta_profile = &pos[2];
616 sta_ctrl = WPA_GET_LE16(sta_profile);
617 link_id = sta_ctrl & BASIC_MLE_STA_CTRL_LINK_ID_MASK;
618 if (link_id >= MAX_NUM_MLD_LINKS)
619 goto next_subelem;
620
621 if (!(sta_ctrl & BASIC_MLE_STA_CTRL_PRES_STA_MAC))
622 goto next_subelem;
623
624 info->non_assoc_links |= BIT(link_id);
625 os_memcpy(info->addr[link_id],
626 &sta_profile[BASIC_MLE_STA_PROF_STA_MAC_IDX],
627 ETH_ALEN);
628 }
629 next_subelem:
630 pos += ie_len;
631 rem_len -= ie_len;
632 }
633 }
634
635
nl80211_update_rejected_links_info(struct driver_sta_mlo_info * mlo,struct nlattr * req_ie,struct nlattr * resp_ie)636 static int nl80211_update_rejected_links_info(struct driver_sta_mlo_info *mlo,
637 struct nlattr *req_ie,
638 struct nlattr *resp_ie)
639 {
640 int i;
641 struct wpabuf *mle;
642 struct ieee802_11_elems req_elems, resp_elems;
643 struct links_info req_info, resp_info;
644
645 if (!req_ie || !resp_ie) {
646 wpa_printf(MSG_INFO,
647 "nl80211: MLO: (Re)Association Request/Response frame elements not available");
648 return -1;
649 }
650
651 if (ieee802_11_parse_elems(nla_data(req_ie), nla_len(req_ie),
652 &req_elems, 0) == ParseFailed ||
653 ieee802_11_parse_elems(nla_data(resp_ie), nla_len(resp_ie),
654 &resp_elems, 0) == ParseFailed) {
655 wpa_printf(MSG_INFO,
656 "nl80211: MLO: Failed to parse (Re)Association Request/Response elements");
657 return -1;
658 }
659
660 mle = ieee802_11_defrag(req_elems.basic_mle, req_elems.basic_mle_len,
661 true);
662 if (!mle) {
663 wpa_printf(MSG_INFO,
664 "nl80211: MLO: Basic Multi-Link element not found in Association Request");
665 return -1;
666 }
667 os_memset(&req_info, 0, sizeof(req_info));
668 nl80211_get_basic_mle_links_info(wpabuf_head(mle), wpabuf_len(mle),
669 &req_info);
670 wpabuf_free(mle);
671
672 mle = ieee802_11_defrag(resp_elems.basic_mle, resp_elems.basic_mle_len,
673 true);
674 if (!mle) {
675 wpa_printf(MSG_ERROR,
676 "nl80211: MLO: Basic Multi-Link element not found in Association Response");
677 return -1;
678 }
679 os_memset(&resp_info, 0, sizeof(resp_info));
680 nl80211_get_basic_mle_links_info(wpabuf_head(mle), wpabuf_len(mle),
681 &resp_info);
682 wpabuf_free(mle);
683
684 if (req_info.non_assoc_links != resp_info.non_assoc_links) {
685 wpa_printf(MSG_ERROR,
686 "nl80211: MLO: Association Request and Response links bitmaps not equal (0x%x != 0x%x)",
687 req_info.non_assoc_links,
688 resp_info.non_assoc_links);
689 return -1;
690 }
691
692 mlo->req_links = BIT(mlo->assoc_link_id) | req_info.non_assoc_links;
693 if ((mlo->req_links & mlo->valid_links) != mlo->valid_links) {
694 wpa_printf(MSG_ERROR,
695 "nl80211: MLO: Accepted links are not a subset of requested links (req_links=0x%x valid_links=0x%x non_assoc_links=0x%x assoc_link_id=0x%x)",
696 mlo->req_links, mlo->valid_links,
697 req_info.non_assoc_links, BIT(mlo->assoc_link_id));
698 return -1;
699 }
700
701 /* Get MLO links info for rejected links */
702 for_each_link((mlo->req_links & ~mlo->valid_links), i) {
703 os_memcpy(mlo->links[i].bssid, resp_info.addr[i], ETH_ALEN);
704 os_memcpy(mlo->links[i].addr, req_info.addr[i], ETH_ALEN);
705 }
706
707 return 0;
708 }
709
710
nl80211_get_assoc_link_id(const u8 * data,u8 len)711 static int nl80211_get_assoc_link_id(const u8 *data, u8 len)
712 {
713 u16 control;
714
715 if (len < 2)
716 return -1;
717
718 control = WPA_GET_LE16(data);
719 if (!(control & BASIC_MULTI_LINK_CTRL_PRES_LINK_ID))
720 return -1;
721
722 #define BASIC_ML_IE_COMMON_INFO_LINK_ID_IDX \
723 (2 + /* Multi-Link Control field */ \
724 1 + /* Common Info Length field (Basic) */ \
725 ETH_ALEN) /* MLD MAC Address field (Basic) */
726 if (len <= BASIC_ML_IE_COMMON_INFO_LINK_ID_IDX)
727 return -1;
728
729 return data[BASIC_ML_IE_COMMON_INFO_LINK_ID_IDX] & 0x0F;
730 }
731
732
nl80211_parse_mlo_info(struct wpa_driver_nl80211_data * drv,bool qca_roam_auth,struct nlattr * addr,struct nlattr * mlo_links,struct nlattr * req_ie,struct nlattr * resp_ie)733 static void nl80211_parse_mlo_info(struct wpa_driver_nl80211_data *drv,
734 bool qca_roam_auth,
735 struct nlattr *addr,
736 struct nlattr *mlo_links,
737 struct nlattr *req_ie,
738 struct nlattr *resp_ie)
739 {
740 const u8 *ml_ie;
741 struct driver_sta_mlo_info *mlo = &drv->sta_mlo_info;
742 int res;
743
744 if (!addr || !mlo_links || !resp_ie)
745 return;
746
747 ml_ie = get_ml_ie(nla_data(resp_ie), nla_len(resp_ie),
748 MULTI_LINK_CONTROL_TYPE_BASIC);
749 if (!ml_ie)
750 return;
751
752 res = nl80211_get_assoc_link_id(&ml_ie[3], ml_ie[1] - 1);
753 if (res < 0 || res >= MAX_NUM_MLD_LINKS) {
754 wpa_printf(MSG_DEBUG,
755 "nl80211: Could not find a valid association Link ID (res=%d)",
756 res);
757 return;
758 }
759 drv->sta_mlo_info.assoc_link_id = res;
760
761 os_memcpy(mlo->ap_mld_addr, nla_data(addr), ETH_ALEN);
762 wpa_printf(MSG_DEBUG, "nl80211: AP MLD MAC Address " MACSTR,
763 MAC2STR(mlo->ap_mld_addr));
764
765 if (!qca_roam_auth)
766 nl80211_parse_mlo_link_info(mlo, mlo_links);
767 #ifdef CONFIG_DRIVER_NL80211_QCA
768 if (qca_roam_auth)
769 nl80211_parse_qca_vendor_mlo_link_info(mlo, mlo_links);
770 #endif /* CONFIG_DRIVER_NL80211_QCA */
771
772 if (!(mlo->valid_links & BIT(mlo->assoc_link_id)) ||
773 (!mlo->req_links &&
774 nl80211_update_rejected_links_info(mlo, req_ie, resp_ie))) {
775 wpa_printf(MSG_INFO, "nl80211: Invalid MLO connection info");
776 mlo->valid_links = 0;
777 return;
778 }
779
780 os_memcpy(drv->bssid, mlo->links[drv->sta_mlo_info.assoc_link_id].bssid,
781 ETH_ALEN);
782 os_memcpy(drv->prev_bssid, drv->bssid, ETH_ALEN);
783 }
784
785
786 #ifdef CONFIG_DRIVER_NL80211_QCA
787 static void
qca_nl80211_tid_to_link_map_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)788 qca_nl80211_tid_to_link_map_event(struct wpa_driver_nl80211_data *drv,
789 u8 *data, size_t len)
790 {
791 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_MAX + 1];
792 struct nlattr *tids;
793 union wpa_event_data event;
794 u8 *ap_mld;
795 int i, rem, tidnum = 0;
796
797 os_memset(&event, 0, sizeof(event));
798
799 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_MAX,
800 (struct nlattr *) data, len, NULL) ||
801 !tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_AP_MLD_ADDR])
802 return;
803
804 ap_mld = nla_data(tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_AP_MLD_ADDR]);
805
806 wpa_printf(MSG_DEBUG, "nl80211: AP MLD address " MACSTR
807 " received in TID to link mapping event", MAC2STR(ap_mld));
808 if (!drv->sta_mlo_info.valid_links ||
809 !ether_addr_equal(drv->sta_mlo_info.ap_mld_addr, ap_mld)) {
810 if (drv->pending_t2lm_data == data) {
811 wpa_printf(MSG_DEBUG,
812 "nl80211: Drop pending TID-to-link mapping event since AP MLD not matched even after new connect/roam event");
813 os_free(drv->pending_t2lm_data);
814 drv->pending_t2lm_data = NULL;
815 return;
816 }
817 wpa_printf(MSG_DEBUG,
818 "nl80211: Cache new TID-to-link map event until the next connect/roam event");
819 if (drv->pending_t2lm_data) {
820 wpa_printf(MSG_DEBUG,
821 "nl80211: Override old TID-to-link map event data");
822 os_free(drv->pending_t2lm_data);
823 }
824 drv->pending_t2lm_data = os_memdup(data, len);
825 if (!drv->pending_t2lm_data)
826 return;
827 drv->pending_t2lm_data_len = len;
828 return;
829 }
830
831 if (!tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_STATUS]) {
832 wpa_printf(MSG_DEBUG, "nl80211: Default TID-to-link map");
833 event.t2l_map_info.default_map = true;
834 goto out;
835 }
836
837 event.t2l_map_info.default_map = false;
838
839 nla_for_each_nested(tids,
840 tb[QCA_WLAN_VENDOR_ATTR_TID_TO_LINK_MAP_STATUS],
841 rem) {
842 u16 uplink, downlink;
843 struct nlattr *tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_MAX + 1];
844
845 if (nla_parse_nested(
846 tid, QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_MAX,
847 tids, NULL)) {
848 wpa_printf(MSG_DEBUG,
849 "nl80211: TID-to-link: nla_parse_nested() failed");
850 return;
851 }
852
853 if (!tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_UPLINK]) {
854 wpa_printf(MSG_DEBUG,
855 "nl80211: TID-to-link: uplink not present for tid: %d",
856 tidnum);
857 return;
858 }
859 uplink = nla_get_u16(tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_UPLINK]);
860
861 if (!tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_DOWNLINK]) {
862 wpa_printf(MSG_DEBUG,
863 "nl80211: TID-to-link: downlink not present for tid: %d",
864 tidnum);
865 return;
866 }
867 downlink = nla_get_u16(tid[QCA_WLAN_VENDOR_ATTR_LINK_TID_MAP_STATUS_DOWNLINK]);
868
869 wpa_printf(MSG_DEBUG,
870 "nl80211: TID-to-link: Received uplink %x downlink %x",
871 uplink, downlink);
872 for_each_link(drv->sta_mlo_info.valid_links, i) {
873 if (uplink & BIT(i))
874 event.t2l_map_info.t2lmap[i].uplink |=
875 BIT(tidnum);
876 if (downlink & BIT(i))
877 event.t2l_map_info.t2lmap[i].downlink |=
878 BIT(tidnum);
879 }
880
881 tidnum++;
882 }
883
884 out:
885 drv->sta_mlo_info.default_map = event.t2l_map_info.default_map;
886
887 event.t2l_map_info.valid_links = drv->sta_mlo_info.valid_links;
888 for (i = 0; i < MAX_NUM_MLD_LINKS && !drv->sta_mlo_info.default_map;
889 i++) {
890 if (!(drv->sta_mlo_info.valid_links & BIT(i)))
891 continue;
892
893 drv->sta_mlo_info.links[i].t2lmap.uplink =
894 event.t2l_map_info.t2lmap[i].uplink;
895 drv->sta_mlo_info.links[i].t2lmap.downlink =
896 event.t2l_map_info.t2lmap[i].downlink;
897 }
898
899 wpa_supplicant_event(drv->ctx, EVENT_TID_LINK_MAP, &event);
900 }
901 #endif /* CONFIG_DRIVER_NL80211_QCA */
902
903
mlme_event_connect(struct wpa_driver_nl80211_data * drv,enum nl80211_commands cmd,bool qca_roam_auth,struct nlattr * status,struct nlattr * addr,struct nlattr * req_ie,struct nlattr * resp_ie,struct nlattr * timed_out,struct nlattr * timeout_reason,struct nlattr * authorized,struct nlattr * key_replay_ctr,struct nlattr * ptk_kck,struct nlattr * ptk_kek,struct nlattr * subnet_status,struct nlattr * fils_erp_next_seq_num,struct nlattr * fils_pmk,struct nlattr * fils_pmkid,struct nlattr * mlo_links)904 static void mlme_event_connect(struct wpa_driver_nl80211_data *drv,
905 enum nl80211_commands cmd, bool qca_roam_auth,
906 struct nlattr *status,
907 struct nlattr *addr, struct nlattr *req_ie,
908 struct nlattr *resp_ie,
909 struct nlattr *timed_out,
910 struct nlattr *timeout_reason,
911 struct nlattr *authorized,
912 struct nlattr *key_replay_ctr,
913 struct nlattr *ptk_kck,
914 struct nlattr *ptk_kek,
915 struct nlattr *subnet_status,
916 struct nlattr *fils_erp_next_seq_num,
917 struct nlattr *fils_pmk,
918 struct nlattr *fils_pmkid,
919 struct nlattr *mlo_links)
920 {
921 union wpa_event_data event;
922 const u8 *ssid = NULL;
923 u16 status_code;
924 int ssid_len;
925
926 if (drv->capa.flags & WPA_DRIVER_FLAGS_SME) {
927 /*
928 * Avoid reporting two association events that would confuse
929 * the core code.
930 */
931 wpa_printf(MSG_DEBUG, "nl80211: Ignore connect event (cmd=%d) "
932 "when using userspace SME", cmd);
933 return;
934 }
935
936 drv->connect_reassoc = 0;
937
938 status_code = status ? nla_get_u16(status) : WLAN_STATUS_SUCCESS;
939
940 if (cmd == NL80211_CMD_CONNECT) {
941 wpa_printf(MSG_DEBUG,
942 "nl80211: Connect event (status=%u ignore_next_local_disconnect=%d)",
943 status_code, drv->ignore_next_local_disconnect);
944 } else if (cmd == NL80211_CMD_ROAM) {
945 wpa_printf(MSG_DEBUG, "nl80211: Roam event");
946 }
947
948 os_memset(&event, 0, sizeof(event));
949 if (cmd == NL80211_CMD_CONNECT && status_code != WLAN_STATUS_SUCCESS) {
950 if (addr)
951 event.assoc_reject.bssid = nla_data(addr);
952 if (drv->ignore_next_local_disconnect) {
953 drv->ignore_next_local_disconnect = 0;
954 if (!event.assoc_reject.bssid ||
955 !ether_addr_equal(event.assoc_reject.bssid,
956 drv->auth_attempt_bssid)) {
957 /*
958 * Ignore the event that came without a BSSID or
959 * for the old connection since this is likely
960 * not relevant to the new Connect command.
961 */
962 wpa_printf(MSG_DEBUG,
963 "nl80211: Ignore connection failure event triggered during reassociation");
964 return;
965 }
966 }
967 if (resp_ie) {
968 event.assoc_reject.resp_ies = nla_data(resp_ie);
969 event.assoc_reject.resp_ies_len = nla_len(resp_ie);
970 }
971 event.assoc_reject.status_code = status_code;
972 event.assoc_reject.timed_out = timed_out != NULL;
973 if (timed_out && timeout_reason) {
974 enum nl80211_timeout_reason reason;
975
976 reason = nla_get_u32(timeout_reason);
977 switch (reason) {
978 case NL80211_TIMEOUT_SCAN:
979 event.assoc_reject.timeout_reason = "scan";
980 break;
981 case NL80211_TIMEOUT_AUTH:
982 event.assoc_reject.timeout_reason = "auth";
983 break;
984 case NL80211_TIMEOUT_ASSOC:
985 event.assoc_reject.timeout_reason = "assoc";
986 break;
987 default:
988 break;
989 }
990 }
991 if (fils_erp_next_seq_num)
992 event.assoc_reject.fils_erp_next_seq_num =
993 nla_get_u16(fils_erp_next_seq_num);
994
995 #ifdef CONFIG_DRIVER_NL80211_QCA
996 if (drv->get_sta_info_vendor_cmd_avail) {
997 enum qca_sta_connect_fail_reason_codes reason_code;
998
999 reason_code = drv_get_connect_fail_reason_code(drv);
1000 event.assoc_reject.reason_code =
1001 convert_connect_fail_reason_codes(reason_code);
1002 }
1003 #endif /* CONFIG_DRIVER_NL80211_QCA */
1004
1005 wpa_supplicant_event(drv->ctx, EVENT_ASSOC_REJECT, &event);
1006 return;
1007 }
1008
1009 drv->associated = 1;
1010 os_memset(&drv->sta_mlo_info, 0, sizeof(drv->sta_mlo_info));
1011 nl80211_parse_mlo_info(drv, qca_roam_auth, addr, mlo_links, req_ie,
1012 resp_ie);
1013 if (!drv->sta_mlo_info.valid_links && addr) {
1014 os_memcpy(drv->bssid, nla_data(addr), ETH_ALEN);
1015 os_memcpy(drv->prev_bssid, drv->bssid, ETH_ALEN);
1016 }
1017
1018 if (req_ie) {
1019 event.assoc_info.req_ies = nla_data(req_ie);
1020 event.assoc_info.req_ies_len = nla_len(req_ie);
1021
1022 if (cmd == NL80211_CMD_ROAM) {
1023 ssid = get_ie(event.assoc_info.req_ies,
1024 event.assoc_info.req_ies_len,
1025 WLAN_EID_SSID);
1026 if (ssid && ssid[1] > 0 && ssid[1] <= 32) {
1027 drv->ssid_len = ssid[1];
1028 os_memcpy(drv->ssid, ssid + 2, ssid[1]);
1029 wpa_printf(MSG_DEBUG,
1030 "nl80211: Set drv->ssid based on req_ie to '%s'",
1031 wpa_ssid_txt(drv->ssid,
1032 drv->ssid_len));
1033 }
1034 }
1035 }
1036 if (resp_ie) {
1037 event.assoc_info.resp_ies = nla_data(resp_ie);
1038 event.assoc_info.resp_ies_len = nla_len(resp_ie);
1039 }
1040
1041 event.assoc_info.freq = nl80211_get_assoc_freq(drv);
1042 drv->first_bss->flink->freq = drv->assoc_freq;
1043
1044 if ((!ssid || ssid[1] == 0 || ssid[1] > 32) &&
1045 (ssid_len = nl80211_get_assoc_ssid(drv, drv->ssid)) > 0) {
1046 /* When this connection was initiated outside of wpa_supplicant,
1047 * drv->ssid needs to be set here to satisfy later checking. */
1048 drv->ssid_len = ssid_len;
1049 wpa_printf(MSG_DEBUG,
1050 "nl80211: Set drv->ssid based on scan res info to '%s'",
1051 wpa_ssid_txt(drv->ssid, drv->ssid_len));
1052 }
1053
1054 if (authorized && nla_get_u8(authorized)) {
1055 event.assoc_info.authorized = 1;
1056 wpa_printf(MSG_DEBUG, "nl80211: connection authorized");
1057 }
1058 if (key_replay_ctr) {
1059 event.assoc_info.key_replay_ctr = nla_data(key_replay_ctr);
1060 event.assoc_info.key_replay_ctr_len = nla_len(key_replay_ctr);
1061 }
1062 if (ptk_kck) {
1063 event.assoc_info.ptk_kck = nla_data(ptk_kck);
1064 event.assoc_info.ptk_kck_len = nla_len(ptk_kck);
1065 }
1066 if (ptk_kek) {
1067 event.assoc_info.ptk_kek = nla_data(ptk_kek);
1068 event.assoc_info.ptk_kek_len = nla_len(ptk_kek);
1069 }
1070
1071 if (subnet_status) {
1072 /*
1073 * At least for now, this is only available from
1074 * QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_SUBNET_STATUS and that
1075 * attribute has the same values 0, 1, 2 as are used in the
1076 * variable here, so no mapping between different values are
1077 * needed.
1078 */
1079 event.assoc_info.subnet_status = nla_get_u8(subnet_status);
1080 }
1081
1082 if (fils_erp_next_seq_num)
1083 event.assoc_info.fils_erp_next_seq_num =
1084 nla_get_u16(fils_erp_next_seq_num);
1085
1086 if (fils_pmk) {
1087 event.assoc_info.fils_pmk = nla_data(fils_pmk);
1088 event.assoc_info.fils_pmk_len = nla_len(fils_pmk);
1089 }
1090
1091 if (fils_pmkid)
1092 event.assoc_info.fils_pmkid = nla_data(fils_pmkid);
1093
1094 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, &event);
1095
1096 /* Avoid a race condition by stopping to ignore any following
1097 * disconnection events now that the driver has indicated it is
1098 * connected since that connection could have been triggered by a roam
1099 * operation that happened in parallel with the disconnection request.
1100 */
1101 drv->ignore_next_local_disconnect = 0;
1102 drv->sta_mlo_info.default_map = true;
1103
1104 #ifdef CONFIG_DRIVER_NL80211_QCA
1105 if (drv->pending_t2lm_data)
1106 qca_nl80211_tid_to_link_map_event(drv, drv->pending_t2lm_data,
1107 drv->pending_t2lm_data_len);
1108 else
1109 drv->sta_mlo_info.default_map = true;
1110
1111 if (drv->pending_link_reconfig_data)
1112 qca_nl80211_link_reconfig_event(
1113 drv, drv->pending_link_reconfig_data,
1114 drv->pending_link_reconfig_data_len);
1115 #endif /* CONFIG_DRIVER_NL80211_QCA */
1116 }
1117
1118
mlme_event_disconnect(struct wpa_driver_nl80211_data * drv,struct nlattr * reason,struct nlattr * addr,struct nlattr * by_ap)1119 static void mlme_event_disconnect(struct wpa_driver_nl80211_data *drv,
1120 struct nlattr *reason, struct nlattr *addr,
1121 struct nlattr *by_ap)
1122 {
1123 union wpa_event_data data;
1124 unsigned int locally_generated = by_ap == NULL;
1125
1126 if (drv->capa.flags & WPA_DRIVER_FLAGS_SME) {
1127 /*
1128 * Avoid reporting two disassociation events that could
1129 * confuse the core code.
1130 */
1131 wpa_printf(MSG_DEBUG, "nl80211: Ignore disconnect "
1132 "event when using userspace SME");
1133 return;
1134 }
1135
1136 if (drv->ignore_next_local_disconnect) {
1137 drv->ignore_next_local_disconnect = 0;
1138 if (locally_generated) {
1139 wpa_printf(MSG_DEBUG, "nl80211: Ignore disconnect "
1140 "event triggered during reassociation");
1141 return;
1142 }
1143 wpa_printf(MSG_WARNING, "nl80211: Was expecting local "
1144 "disconnect but got another disconnect "
1145 "event first");
1146 }
1147
1148 wpa_printf(MSG_DEBUG, "nl80211: Disconnect event");
1149 nl80211_mark_disconnected(drv);
1150 os_memset(&data, 0, sizeof(data));
1151 if (reason)
1152 data.deauth_info.reason_code = nla_get_u16(reason);
1153 data.deauth_info.locally_generated = by_ap == NULL;
1154 wpa_supplicant_event(drv->ctx, EVENT_DEAUTH, &data);
1155 }
1156
1157
calculate_chan_offset(int width,int freq,int cf1,int cf2)1158 static int calculate_chan_offset(int width, int freq, int cf1, int cf2)
1159 {
1160 int freq1 = 0;
1161
1162 switch (convert2width(width)) {
1163 case CHAN_WIDTH_20_NOHT:
1164 case CHAN_WIDTH_20:
1165 return 0;
1166 case CHAN_WIDTH_40:
1167 freq1 = cf1 - 10;
1168 break;
1169 case CHAN_WIDTH_80:
1170 freq1 = cf1 - 30;
1171 break;
1172 case CHAN_WIDTH_160:
1173 freq1 = cf1 - 70;
1174 break;
1175 case CHAN_WIDTH_80P80:
1176 freq1 = cf1 - 30;
1177 break;
1178 case CHAN_WIDTH_320:
1179 freq1 = cf1 - 150;
1180 break;
1181 case CHAN_WIDTH_UNKNOWN:
1182 case CHAN_WIDTH_2160:
1183 case CHAN_WIDTH_4320:
1184 case CHAN_WIDTH_6480:
1185 case CHAN_WIDTH_8640:
1186 /* FIXME: implement this */
1187 return 0;
1188 }
1189
1190 return (abs(freq - freq1) / 20) % 2 == 0 ? 1 : -1;
1191 }
1192
1193
mlme_event_ch_switch(struct wpa_driver_nl80211_data * drv,struct nlattr * ifindex,struct nlattr * link,struct nlattr * freq,struct nlattr * type,struct nlattr * bw,struct nlattr * cf1,struct nlattr * cf2,struct nlattr * punct_bitmap,int finished)1194 static void mlme_event_ch_switch(struct wpa_driver_nl80211_data *drv,
1195 struct nlattr *ifindex, struct nlattr *link,
1196 struct nlattr *freq, struct nlattr *type,
1197 struct nlattr *bw, struct nlattr *cf1,
1198 struct nlattr *cf2,
1199 struct nlattr *punct_bitmap,
1200 int finished)
1201 {
1202 struct i802_bss *bss;
1203 union wpa_event_data data;
1204 int ht_enabled = 1;
1205 int chan_offset = 0;
1206 int ifidx;
1207
1208 if (!freq)
1209 return;
1210
1211 ifidx = nla_get_u32(ifindex);
1212 bss = get_bss_ifindex(drv, ifidx);
1213 if (bss == NULL) {
1214 wpa_printf(MSG_WARNING, "nl80211: Unknown ifindex (%d) for channel switch, ignoring",
1215 ifidx);
1216 return;
1217 }
1218
1219 wpa_printf(MSG_DEBUG, "nl80211: Channel switch%s event for %s",
1220 finished ? "" : " started", bss->ifname);
1221
1222 if (type) {
1223 enum nl80211_channel_type ch_type = nla_get_u32(type);
1224
1225 wpa_printf(MSG_DEBUG, "nl80211: Channel type: %d", ch_type);
1226 switch (ch_type) {
1227 case NL80211_CHAN_NO_HT:
1228 ht_enabled = 0;
1229 break;
1230 case NL80211_CHAN_HT20:
1231 break;
1232 case NL80211_CHAN_HT40PLUS:
1233 chan_offset = 1;
1234 break;
1235 case NL80211_CHAN_HT40MINUS:
1236 chan_offset = -1;
1237 break;
1238 }
1239 } else if (bw && cf1) {
1240 /* This can happen for example with VHT80 ch switch */
1241 chan_offset = calculate_chan_offset(nla_get_u32(bw),
1242 nla_get_u32(freq),
1243 nla_get_u32(cf1),
1244 cf2 ? nla_get_u32(cf2) : 0);
1245 wpa_printf(MSG_DEBUG, "nl80211: Calculated channel offset: %d",
1246 chan_offset);
1247 } else {
1248 wpa_printf(MSG_WARNING, "nl80211: Unknown secondary channel information - following channel definition calculations may fail");
1249 }
1250
1251 os_memset(&data, 0, sizeof(data));
1252 data.ch_switch.freq = nla_get_u32(freq);
1253 data.ch_switch.ht_enabled = ht_enabled;
1254 data.ch_switch.ch_offset = chan_offset;
1255 if (punct_bitmap)
1256 data.ch_switch.punct_bitmap = (u16) nla_get_u32(punct_bitmap);
1257 if (bw)
1258 data.ch_switch.ch_width = convert2width(nla_get_u32(bw));
1259 if (cf1)
1260 data.ch_switch.cf1 = nla_get_u32(cf1);
1261 if (cf2)
1262 data.ch_switch.cf2 = nla_get_u32(cf2);
1263
1264 if (link) {
1265 data.ch_switch.link_id = nla_get_u8(link);
1266 wpa_printf(MSG_DEBUG, "nl80211: Link ID: %d",
1267 data.ch_switch.link_id);
1268 } else {
1269 data.ch_switch.link_id = NL80211_DRV_LINK_ID_NA;
1270 }
1271
1272 if (finished) {
1273 if (data.ch_switch.link_id != NL80211_DRV_LINK_ID_NA) {
1274 struct i802_link *mld_link;
1275
1276 mld_link = nl80211_get_link(bss,
1277 data.ch_switch.link_id);
1278 mld_link->freq = data.ch_switch.freq;
1279 if (bw)
1280 mld_link->bandwidth = channel_width_to_int(
1281 data.ch_switch.ch_width);
1282 } else {
1283 bss->flink->freq = data.ch_switch.freq;
1284 if (bw)
1285 bss->flink->bandwidth = channel_width_to_int(
1286 data.ch_switch.ch_width);
1287 }
1288 }
1289
1290 if (link && is_sta_interface(drv->nlmode)) {
1291 u8 link_id = data.ch_switch.link_id;
1292
1293 if (link_id < MAX_NUM_MLD_LINKS &&
1294 drv->sta_mlo_info.valid_links & BIT(link_id)) {
1295 drv->sta_mlo_info.links[link_id].freq =
1296 data.ch_switch.freq;
1297 wpa_supplicant_event(
1298 bss->ctx,
1299 finished ? EVENT_LINK_CH_SWITCH :
1300 EVENT_LINK_CH_SWITCH_STARTED, &data);
1301 }
1302
1303 if (link_id != drv->sta_mlo_info.assoc_link_id)
1304 return;
1305 }
1306
1307 if (link && is_ap_interface(drv->nlmode) &&
1308 !nl80211_link_valid(bss->valid_links, data.ch_switch.link_id)) {
1309 wpa_printf(MSG_WARNING,
1310 "nl80211: Unknown link ID (%d) for channel switch (%s), ignoring",
1311 data.ch_switch.link_id, bss->ifname);
1312 return;
1313 }
1314
1315 drv->assoc_freq = data.ch_switch.freq;
1316
1317 wpa_supplicant_event(bss->ctx, finished ?
1318 EVENT_CH_SWITCH : EVENT_CH_SWITCH_STARTED, &data);
1319 }
1320
1321
mlme_timeout_event(struct wpa_driver_nl80211_data * drv,enum nl80211_commands cmd,struct nlattr * addr)1322 static void mlme_timeout_event(struct wpa_driver_nl80211_data *drv,
1323 enum nl80211_commands cmd, struct nlattr *addr)
1324 {
1325 union wpa_event_data event;
1326 enum wpa_event_type ev;
1327
1328 if (nla_len(addr) != ETH_ALEN)
1329 return;
1330
1331 wpa_printf(MSG_DEBUG, "nl80211: MLME event %d; timeout with " MACSTR,
1332 cmd, MAC2STR((u8 *) nla_data(addr)));
1333
1334 if (cmd == NL80211_CMD_AUTHENTICATE)
1335 ev = EVENT_AUTH_TIMED_OUT;
1336 else if (cmd == NL80211_CMD_ASSOCIATE)
1337 ev = EVENT_ASSOC_TIMED_OUT;
1338 else
1339 return;
1340
1341 os_memset(&event, 0, sizeof(event));
1342 os_memcpy(event.timeout_event.addr, nla_data(addr), ETH_ALEN);
1343 wpa_supplicant_event(drv->ctx, ev, &event);
1344 }
1345
1346
mlme_event_mgmt(struct i802_bss * bss,struct nlattr * freq,struct nlattr * sig,const u8 * frame,size_t len,int link_id)1347 static void mlme_event_mgmt(struct i802_bss *bss,
1348 struct nlattr *freq, struct nlattr *sig,
1349 const u8 *frame, size_t len,
1350 int link_id)
1351 {
1352 struct wpa_driver_nl80211_data *drv = bss->drv;
1353 const struct ieee80211_mgmt *mgmt;
1354 union wpa_event_data event;
1355 u16 fc, stype;
1356 int ssi_signal = 0;
1357 int rx_freq = 0;
1358
1359 wpa_printf(MSG_MSGDUMP, "nl80211: Frame event");
1360 mgmt = (const struct ieee80211_mgmt *) frame;
1361 if (len < 24) {
1362 wpa_printf(MSG_DEBUG, "nl80211: Too short management frame");
1363 return;
1364 }
1365
1366 fc = le_to_host16(mgmt->frame_control);
1367 stype = WLAN_FC_GET_STYPE(fc);
1368
1369 if (sig)
1370 ssi_signal = (s32) nla_get_u32(sig);
1371
1372 os_memset(&event, 0, sizeof(event));
1373 if (freq) {
1374 event.rx_mgmt.freq = nla_get_u32(freq);
1375 rx_freq = drv->last_mgmt_freq = event.rx_mgmt.freq;
1376 }
1377 wpa_printf(MSG_DEBUG,
1378 "nl80211: RX frame da=" MACSTR " sa=" MACSTR " bssid=" MACSTR
1379 " freq=%d ssi_signal=%d fc=0x%x seq_ctrl=0x%x stype=%u (%s) len=%u",
1380 MAC2STR(mgmt->da), MAC2STR(mgmt->sa), MAC2STR(mgmt->bssid),
1381 rx_freq, ssi_signal, fc,
1382 le_to_host16(mgmt->seq_ctrl), stype, fc2str(fc),
1383 (unsigned int) len);
1384 event.rx_mgmt.frame = frame;
1385 event.rx_mgmt.frame_len = len;
1386 event.rx_mgmt.ssi_signal = ssi_signal;
1387 event.rx_mgmt.drv_priv = bss;
1388 event.rx_mgmt.ctx = bss->ctx;
1389 event.rx_mgmt.link_id = link_id;
1390
1391 wpa_supplicant_event(drv->ctx, EVENT_RX_MGMT, &event);
1392 }
1393
1394
mlme_event_mgmt_tx_status(struct i802_bss * bss,struct nlattr * cookie,const u8 * frame,size_t len,struct nlattr * ack)1395 static void mlme_event_mgmt_tx_status(struct i802_bss *bss,
1396 struct nlattr *cookie, const u8 *frame,
1397 size_t len, struct nlattr *ack)
1398 {
1399 union wpa_event_data event;
1400 const struct ieee80211_hdr *hdr = (const struct ieee80211_hdr *) frame;
1401 struct wpa_driver_nl80211_data *drv = bss->drv;
1402 u16 fc = le_to_host16(hdr->frame_control);
1403 u64 cookie_val = 0;
1404
1405 if (cookie)
1406 cookie_val = nla_get_u64(cookie);
1407 wpa_printf(MSG_DEBUG,
1408 "nl80211: Frame TX status event A1=" MACSTR
1409 " %sstype=%d cookie=0x%llx%s ack=%d",
1410 MAC2STR(hdr->addr1),
1411 WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT ? "not-mgmt " : "",
1412 WLAN_FC_GET_STYPE(fc), (long long unsigned int) cookie_val,
1413 cookie ? "" : "(N/A)", ack != NULL);
1414
1415 if (cookie_val && cookie_val == drv->eapol_tx_cookie &&
1416 len >= ETH_HLEN &&
1417 WPA_GET_BE16(frame + 2 * ETH_ALEN) == ETH_P_PAE) {
1418 wpa_printf(MSG_DEBUG,
1419 "nl80211: Work around misdelivered control port TX status for EAPOL");
1420 nl80211_control_port_frame_tx_status(bss, frame, len, ack,
1421 cookie);
1422 return;
1423 }
1424
1425 if (WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT)
1426 return;
1427
1428 if (!is_ap_interface(drv->nlmode) &&
1429 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_ACTION) {
1430 if (!cookie)
1431 return;
1432
1433 wpa_printf(MSG_DEBUG,
1434 "nl80211: Frame TX status: cookie=0x%llx%s (ack=%d)",
1435 (long long unsigned int) cookie_val,
1436 cookie_val == drv->send_frame_cookie ?
1437 " (match)" : " (unknown)", ack != NULL);
1438 if (cookie_val != drv->send_frame_cookie)
1439 return;
1440 } else if (!is_ap_interface(drv->nlmode) &&
1441 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_AUTH) {
1442 wpa_printf(MSG_DEBUG,
1443 "nl80211: Authentication frame TX status: ack=%d",
1444 !!ack);
1445 }
1446
1447 os_memset(&event, 0, sizeof(event));
1448 event.tx_status.type = WLAN_FC_GET_TYPE(fc);
1449 event.tx_status.stype = WLAN_FC_GET_STYPE(fc);
1450 event.tx_status.dst = hdr->addr1;
1451 event.tx_status.data = frame;
1452 event.tx_status.data_len = len;
1453 event.tx_status.ack = ack != NULL;
1454 event.tx_status.link_id = cookie_val == drv->send_frame_cookie ?
1455 drv->send_frame_link_id : NL80211_DRV_LINK_ID_NA;
1456 wpa_supplicant_event(bss->ctx, EVENT_TX_STATUS, &event);
1457 }
1458
1459
mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data * drv,enum wpa_event_type type,const u8 * frame,size_t len)1460 static void mlme_event_deauth_disassoc(struct wpa_driver_nl80211_data *drv,
1461 enum wpa_event_type type,
1462 const u8 *frame, size_t len)
1463 {
1464 const struct ieee80211_mgmt *mgmt;
1465 union wpa_event_data event;
1466 const u8 *bssid = NULL;
1467 u16 reason_code = 0;
1468
1469 if (type == EVENT_DEAUTH)
1470 wpa_printf(MSG_DEBUG, "nl80211: Deauthenticate event");
1471 else
1472 wpa_printf(MSG_DEBUG, "nl80211: Disassociate event");
1473
1474 mgmt = (const struct ieee80211_mgmt *) frame;
1475 if (len >= 24) {
1476 bssid = mgmt->bssid;
1477
1478 if ((drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
1479 !drv->associated &&
1480 !ether_addr_equal(bssid, drv->auth_bssid) &&
1481 !ether_addr_equal(bssid, drv->auth_attempt_bssid) &&
1482 ether_addr_equal(bssid, drv->prev_bssid)) {
1483 /*
1484 * Avoid issues with some roaming cases where
1485 * disconnection event for the old AP may show up after
1486 * we have started connection with the new AP.
1487 * In case of locally generated event clear
1488 * ignore_next_local_deauth as well, to avoid next local
1489 * deauth event be wrongly ignored.
1490 */
1491 if (ether_addr_equal(mgmt->sa, drv->first_bss->addr) ||
1492 (!is_zero_ether_addr(drv->first_bss->prev_addr) &&
1493 ether_addr_equal(mgmt->sa,
1494 drv->first_bss->prev_addr))) {
1495 wpa_printf(MSG_DEBUG,
1496 "nl80211: Received a locally generated deauth event. Clear ignore_next_local_deauth flag");
1497 drv->ignore_next_local_deauth = 0;
1498 } else {
1499 wpa_printf(MSG_DEBUG,
1500 "nl80211: Ignore deauth/disassoc event from old AP " MACSTR " when already authenticating with " MACSTR,
1501 MAC2STR(bssid),
1502 MAC2STR(drv->auth_attempt_bssid));
1503 }
1504 return;
1505 }
1506
1507 if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME) &&
1508 drv->connect_reassoc && drv->associated &&
1509 ether_addr_equal(bssid, drv->prev_bssid) &&
1510 !ether_addr_equal(bssid, drv->auth_attempt_bssid)) {
1511 /*
1512 * Avoid issues with some roaming cases where
1513 * disconnection event for the old AP may show up after
1514 * we have started connection with the new AP.
1515 */
1516 wpa_printf(MSG_DEBUG,
1517 "nl80211: Ignore deauth/disassoc event from old AP "
1518 MACSTR
1519 " when already connecting with " MACSTR,
1520 MAC2STR(bssid),
1521 MAC2STR(drv->auth_attempt_bssid));
1522 return;
1523 }
1524
1525 if (drv->associated != 0 &&
1526 !ether_addr_equal(bssid, drv->bssid) &&
1527 !ether_addr_equal(bssid, drv->auth_bssid)) {
1528 /*
1529 * We have presumably received this deauth as a
1530 * response to a clear_state_mismatch() outgoing
1531 * deauth. Don't let it take us offline!
1532 */
1533 wpa_printf(MSG_DEBUG, "nl80211: Deauth received "
1534 "from Unknown BSSID " MACSTR " -- ignoring",
1535 MAC2STR(bssid));
1536 return;
1537 }
1538 }
1539
1540 nl80211_mark_disconnected(drv);
1541 os_memset(&event, 0, sizeof(event));
1542
1543 /* Note: Same offset for Reason Code in both frame subtypes */
1544 if (len >= 24 + sizeof(mgmt->u.deauth))
1545 reason_code = le_to_host16(mgmt->u.deauth.reason_code);
1546
1547 if (type == EVENT_DISASSOC) {
1548 event.disassoc_info.locally_generated =
1549 ether_addr_equal(mgmt->sa, drv->first_bss->addr);
1550 event.disassoc_info.addr = bssid;
1551 event.disassoc_info.reason_code = reason_code;
1552 if (frame + len > mgmt->u.disassoc.variable) {
1553 event.disassoc_info.ie = mgmt->u.disassoc.variable;
1554 event.disassoc_info.ie_len = frame + len -
1555 mgmt->u.disassoc.variable;
1556 }
1557 } else {
1558 event.deauth_info.locally_generated =
1559 ether_addr_equal(mgmt->sa, drv->first_bss->addr);
1560 if (drv->ignore_deauth_event) {
1561 wpa_printf(MSG_DEBUG, "nl80211: Ignore deauth event due to previous forced deauth-during-auth");
1562 drv->ignore_deauth_event = 0;
1563 if (event.deauth_info.locally_generated)
1564 drv->ignore_next_local_deauth = 0;
1565 return;
1566 }
1567 if (drv->ignore_next_local_deauth) {
1568 drv->ignore_next_local_deauth = 0;
1569 if (event.deauth_info.locally_generated) {
1570 wpa_printf(MSG_DEBUG, "nl80211: Ignore deauth event triggered due to own deauth request");
1571 return;
1572 }
1573 wpa_printf(MSG_WARNING, "nl80211: Was expecting local deauth but got another disconnect event first");
1574 }
1575 event.deauth_info.addr = bssid;
1576 event.deauth_info.reason_code = reason_code;
1577 if (frame + len > mgmt->u.deauth.variable) {
1578 event.deauth_info.ie = mgmt->u.deauth.variable;
1579 event.deauth_info.ie_len = frame + len -
1580 mgmt->u.deauth.variable;
1581 }
1582 }
1583
1584 wpa_supplicant_event(drv->ctx, type, &event);
1585 }
1586
1587
mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data * drv,enum wpa_event_type type,const u8 * frame,size_t len)1588 static void mlme_event_unprot_disconnect(struct wpa_driver_nl80211_data *drv,
1589 enum wpa_event_type type,
1590 const u8 *frame, size_t len)
1591 {
1592 const struct ieee80211_mgmt *mgmt;
1593 union wpa_event_data event;
1594 u16 reason_code = 0;
1595
1596 if (type == EVENT_UNPROT_DEAUTH)
1597 wpa_printf(MSG_DEBUG, "nl80211: Unprot Deauthenticate event");
1598 else
1599 wpa_printf(MSG_DEBUG, "nl80211: Unprot Disassociate event");
1600
1601 if (len < 24)
1602 return;
1603
1604 mgmt = (const struct ieee80211_mgmt *) frame;
1605
1606 os_memset(&event, 0, sizeof(event));
1607 /* Note: Same offset for Reason Code in both frame subtypes */
1608 if (len >= 24 + sizeof(mgmt->u.deauth))
1609 reason_code = le_to_host16(mgmt->u.deauth.reason_code);
1610
1611 if (type == EVENT_UNPROT_DISASSOC) {
1612 event.unprot_disassoc.sa = mgmt->sa;
1613 event.unprot_disassoc.da = mgmt->da;
1614 event.unprot_disassoc.reason_code = reason_code;
1615 } else {
1616 event.unprot_deauth.sa = mgmt->sa;
1617 event.unprot_deauth.da = mgmt->da;
1618 event.unprot_deauth.reason_code = reason_code;
1619 }
1620
1621 wpa_supplicant_event(drv->ctx, type, &event);
1622 }
1623
1624
mlme_event_unprot_beacon(struct wpa_driver_nl80211_data * drv,const u8 * frame,size_t len)1625 static void mlme_event_unprot_beacon(struct wpa_driver_nl80211_data *drv,
1626 const u8 *frame, size_t len)
1627 {
1628 const struct ieee80211_mgmt *mgmt;
1629 union wpa_event_data event;
1630
1631 if (len < 24)
1632 return;
1633
1634 mgmt = (const struct ieee80211_mgmt *) frame;
1635
1636 os_memset(&event, 0, sizeof(event));
1637 event.unprot_beacon.sa = mgmt->sa;
1638 wpa_supplicant_event(drv->ctx, EVENT_UNPROT_BEACON, &event);
1639 }
1640
1641
1642 static s8
nl80211_get_link_id_by_freq(struct i802_bss * bss,unsigned int freq)1643 nl80211_get_link_id_by_freq(struct i802_bss *bss, unsigned int freq)
1644 {
1645 unsigned int i;
1646
1647 for_each_link(bss->valid_links, i) {
1648 if ((unsigned int) bss->links[i].freq == freq)
1649 return i;
1650 }
1651
1652 return NL80211_DRV_LINK_ID_NA;
1653 }
1654
1655
mlme_event(struct i802_bss * bss,enum nl80211_commands cmd,struct nlattr * frame,struct nlattr * addr,struct nlattr * timed_out,struct nlattr * freq,struct nlattr * ack,struct nlattr * cookie,struct nlattr * sig,struct nlattr * wmm,struct nlattr * req_ie,struct nlattr * link)1656 static void mlme_event(struct i802_bss *bss,
1657 enum nl80211_commands cmd, struct nlattr *frame,
1658 struct nlattr *addr, struct nlattr *timed_out,
1659 struct nlattr *freq, struct nlattr *ack,
1660 struct nlattr *cookie, struct nlattr *sig,
1661 struct nlattr *wmm, struct nlattr *req_ie,
1662 struct nlattr *link)
1663 {
1664 struct wpa_driver_nl80211_data *drv = bss->drv;
1665 u16 stype = 0, auth_type = 0;
1666 const u8 *data;
1667 size_t len;
1668 int link_id = -1;
1669 struct i802_link *mld_link = NULL;
1670
1671 if (timed_out && addr) {
1672 mlme_timeout_event(drv, cmd, addr);
1673 return;
1674 }
1675
1676 if (frame == NULL) {
1677 wpa_printf(MSG_DEBUG,
1678 "nl80211: MLME event %d (%s) without frame data",
1679 cmd, nl80211_command_to_string(cmd));
1680 return;
1681 }
1682
1683 /* Determine the MLD link either by an explicitly provided link id or
1684 * finding a match based on the frequency. */
1685 if (link)
1686 link_id = nla_get_u8(link);
1687 else if (freq)
1688 link_id = nl80211_get_link_id_by_freq(bss, nla_get_u32(freq));
1689
1690 if (nl80211_link_valid(bss->valid_links, link_id))
1691 mld_link = nl80211_get_link(bss, link_id);
1692
1693 data = nla_data(frame);
1694 len = nla_len(frame);
1695 if (len < 4 + 2 * ETH_ALEN) {
1696 wpa_printf(MSG_MSGDUMP, "nl80211: MLME event %d (%s) on %s("
1697 MACSTR ") - too short",
1698 cmd, nl80211_command_to_string(cmd), bss->ifname,
1699 MAC2STR(bss->addr));
1700 return;
1701 }
1702 wpa_printf(MSG_MSGDUMP, "nl80211: MLME event %d (%s) on %s(" MACSTR
1703 ") A1=" MACSTR " A2=" MACSTR " on link_id=%d", cmd,
1704 nl80211_command_to_string(cmd), bss->ifname,
1705 MAC2STR(bss->addr), MAC2STR(data + 4),
1706 MAC2STR(data + 4 + ETH_ALEN), link_id);
1707
1708 /* PASN Authentication frame can be received with a different source MAC
1709 * address. Allow NL80211_CMD_FRAME event with foreign addresses also.
1710 */
1711 if (cmd == NL80211_CMD_FRAME && len >= 24) {
1712 const struct ieee80211_mgmt *mgmt;
1713 u16 fc;
1714
1715 mgmt = (const struct ieee80211_mgmt *) data;
1716 fc = le_to_host16(mgmt->frame_control);
1717 stype = WLAN_FC_GET_STYPE(fc);
1718 auth_type = le_to_host16(mgmt->u.auth.auth_alg);
1719 }
1720
1721 if (cmd == NL80211_CMD_FRAME && stype == WLAN_FC_STYPE_AUTH &&
1722 auth_type == host_to_le16(WLAN_AUTH_PASN)) {
1723 wpa_printf(MSG_DEBUG,
1724 "nl80211: %s: Allow PASN frame for foreign address",
1725 bss->ifname);
1726 } else if (cmd != NL80211_CMD_FRAME_TX_STATUS &&
1727 !(data[4] & 0x01) &&
1728 !ether_addr_equal(bss->addr, data + 4) &&
1729 (is_zero_ether_addr(bss->rand_addr) ||
1730 !ether_addr_equal(bss->rand_addr, data + 4)) &&
1731 !ether_addr_equal(bss->addr, data + 4 + ETH_ALEN) &&
1732 (is_zero_ether_addr(drv->first_bss->prev_addr) ||
1733 !ether_addr_equal(bss->prev_addr, data + 4 + ETH_ALEN)) &&
1734 (!mld_link ||
1735 !ether_addr_equal(mld_link->addr, data + 4))) {
1736 wpa_printf(MSG_MSGDUMP, "nl80211: %s: Ignore MLME frame event "
1737 "for foreign address", bss->ifname);
1738 return;
1739 }
1740 wpa_hexdump(MSG_MSGDUMP, "nl80211: MLME event frame",
1741 nla_data(frame), nla_len(frame));
1742
1743 switch (cmd) {
1744 case NL80211_CMD_AUTHENTICATE:
1745 mlme_event_auth(drv, nla_data(frame), nla_len(frame));
1746 break;
1747 case NL80211_CMD_ASSOCIATE:
1748 mlme_event_assoc(drv, nla_data(frame), nla_len(frame), wmm,
1749 req_ie);
1750 break;
1751 case NL80211_CMD_DEAUTHENTICATE:
1752 mlme_event_deauth_disassoc(drv, EVENT_DEAUTH,
1753 nla_data(frame), nla_len(frame));
1754 break;
1755 case NL80211_CMD_DISASSOCIATE:
1756 mlme_event_deauth_disassoc(drv, EVENT_DISASSOC,
1757 nla_data(frame), nla_len(frame));
1758 break;
1759 case NL80211_CMD_FRAME:
1760 mlme_event_mgmt(bss, freq, sig, nla_data(frame),
1761 nla_len(frame), link_id);
1762 break;
1763 case NL80211_CMD_FRAME_TX_STATUS:
1764 mlme_event_mgmt_tx_status(bss, cookie, nla_data(frame),
1765 nla_len(frame), ack);
1766 break;
1767 case NL80211_CMD_UNPROT_DEAUTHENTICATE:
1768 mlme_event_unprot_disconnect(drv, EVENT_UNPROT_DEAUTH,
1769 nla_data(frame), nla_len(frame));
1770 break;
1771 case NL80211_CMD_UNPROT_DISASSOCIATE:
1772 mlme_event_unprot_disconnect(drv, EVENT_UNPROT_DISASSOC,
1773 nla_data(frame), nla_len(frame));
1774 break;
1775 case NL80211_CMD_UNPROT_BEACON:
1776 mlme_event_unprot_beacon(drv, nla_data(frame), nla_len(frame));
1777 break;
1778 default:
1779 break;
1780 }
1781 }
1782
1783
mlme_event_michael_mic_failure(struct i802_bss * bss,struct nlattr * tb[])1784 static void mlme_event_michael_mic_failure(struct i802_bss *bss,
1785 struct nlattr *tb[])
1786 {
1787 union wpa_event_data data;
1788
1789 wpa_printf(MSG_DEBUG, "nl80211: MLME event Michael MIC failure");
1790 os_memset(&data, 0, sizeof(data));
1791 if (tb[NL80211_ATTR_MAC]) {
1792 wpa_hexdump(MSG_DEBUG, "nl80211: Source MAC address",
1793 nla_data(tb[NL80211_ATTR_MAC]),
1794 nla_len(tb[NL80211_ATTR_MAC]));
1795 data.michael_mic_failure.src = nla_data(tb[NL80211_ATTR_MAC]);
1796 }
1797 if (tb[NL80211_ATTR_KEY_SEQ]) {
1798 wpa_hexdump(MSG_DEBUG, "nl80211: TSC",
1799 nla_data(tb[NL80211_ATTR_KEY_SEQ]),
1800 nla_len(tb[NL80211_ATTR_KEY_SEQ]));
1801 }
1802 if (tb[NL80211_ATTR_KEY_TYPE]) {
1803 enum nl80211_key_type key_type =
1804 nla_get_u32(tb[NL80211_ATTR_KEY_TYPE]);
1805 wpa_printf(MSG_DEBUG, "nl80211: Key Type %d", key_type);
1806 if (key_type == NL80211_KEYTYPE_PAIRWISE)
1807 data.michael_mic_failure.unicast = 1;
1808 } else
1809 data.michael_mic_failure.unicast = 1;
1810
1811 if (tb[NL80211_ATTR_KEY_IDX]) {
1812 u8 key_id = nla_get_u8(tb[NL80211_ATTR_KEY_IDX]);
1813 wpa_printf(MSG_DEBUG, "nl80211: Key Id %d", key_id);
1814 }
1815
1816 wpa_supplicant_event(bss->ctx, EVENT_MICHAEL_MIC_FAILURE, &data);
1817 }
1818
1819
mlme_event_join_ibss(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])1820 static void mlme_event_join_ibss(struct wpa_driver_nl80211_data *drv,
1821 struct nlattr *tb[])
1822 {
1823 unsigned int freq;
1824 union wpa_event_data event;
1825
1826 if (tb[NL80211_ATTR_MAC] == NULL) {
1827 wpa_printf(MSG_DEBUG, "nl80211: No address in IBSS joined "
1828 "event");
1829 return;
1830 }
1831 os_memcpy(drv->bssid, nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
1832
1833 drv->associated = 1;
1834 wpa_printf(MSG_DEBUG, "nl80211: IBSS " MACSTR " joined",
1835 MAC2STR(drv->bssid));
1836
1837 freq = nl80211_get_assoc_freq(drv);
1838 if (freq) {
1839 wpa_printf(MSG_DEBUG, "nl80211: IBSS on frequency %u MHz",
1840 freq);
1841 drv->first_bss->flink->freq = freq;
1842 }
1843
1844 os_memset(&event, 0, sizeof(event));
1845 event.assoc_info.freq = freq;
1846
1847 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, &event);
1848 }
1849
1850
mlme_event_remain_on_channel(struct wpa_driver_nl80211_data * drv,int cancel_event,struct nlattr * tb[])1851 static void mlme_event_remain_on_channel(struct wpa_driver_nl80211_data *drv,
1852 int cancel_event, struct nlattr *tb[])
1853 {
1854 unsigned int freq, chan_type, duration;
1855 union wpa_event_data data;
1856 u64 cookie;
1857
1858 if (tb[NL80211_ATTR_WIPHY_FREQ])
1859 freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
1860 else
1861 freq = 0;
1862
1863 if (tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE])
1864 chan_type = nla_get_u32(tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1865 else
1866 chan_type = 0;
1867
1868 if (tb[NL80211_ATTR_DURATION])
1869 duration = nla_get_u32(tb[NL80211_ATTR_DURATION]);
1870 else
1871 duration = 0;
1872
1873 if (tb[NL80211_ATTR_COOKIE])
1874 cookie = nla_get_u64(tb[NL80211_ATTR_COOKIE]);
1875 else
1876 cookie = 0;
1877
1878 wpa_printf(MSG_DEBUG, "nl80211: Remain-on-channel event (cancel=%d "
1879 "freq=%u channel_type=%u duration=%u cookie=0x%llx (%s))",
1880 cancel_event, freq, chan_type, duration,
1881 (long long unsigned int) cookie,
1882 cookie == drv->remain_on_chan_cookie ? "match" : "unknown");
1883
1884 if (cookie != drv->remain_on_chan_cookie)
1885 return; /* not for us */
1886
1887 if (cancel_event)
1888 drv->pending_remain_on_chan = 0;
1889
1890 os_memset(&data, 0, sizeof(data));
1891 data.remain_on_channel.freq = freq;
1892 data.remain_on_channel.duration = duration;
1893 wpa_supplicant_event(drv->ctx, cancel_event ?
1894 EVENT_CANCEL_REMAIN_ON_CHANNEL :
1895 EVENT_REMAIN_ON_CHANNEL, &data);
1896 }
1897
1898
mlme_event_ft_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])1899 static void mlme_event_ft_event(struct wpa_driver_nl80211_data *drv,
1900 struct nlattr *tb[])
1901 {
1902 union wpa_event_data data;
1903
1904 os_memset(&data, 0, sizeof(data));
1905
1906 if (tb[NL80211_ATTR_IE]) {
1907 data.ft_ies.ies = nla_data(tb[NL80211_ATTR_IE]);
1908 data.ft_ies.ies_len = nla_len(tb[NL80211_ATTR_IE]);
1909 }
1910
1911 if (tb[NL80211_ATTR_IE_RIC]) {
1912 data.ft_ies.ric_ies = nla_data(tb[NL80211_ATTR_IE_RIC]);
1913 data.ft_ies.ric_ies_len = nla_len(tb[NL80211_ATTR_IE_RIC]);
1914 }
1915
1916 if (tb[NL80211_ATTR_MAC])
1917 os_memcpy(data.ft_ies.target_ap,
1918 nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
1919
1920 wpa_printf(MSG_DEBUG, "nl80211: FT event target_ap " MACSTR,
1921 MAC2STR(data.ft_ies.target_ap));
1922
1923 wpa_supplicant_event(drv->ctx, EVENT_FT_RESPONSE, &data);
1924 }
1925
1926
mlme_event_dh_event(struct wpa_driver_nl80211_data * drv,struct i802_bss * bss,struct nlattr * tb[])1927 static void mlme_event_dh_event(struct wpa_driver_nl80211_data *drv,
1928 struct i802_bss *bss,
1929 struct nlattr *tb[])
1930 {
1931 union wpa_event_data data;
1932 u8 *addr, *link_addr = NULL;
1933 int assoc_link_id = -1;
1934
1935 if (!is_ap_interface(drv->nlmode))
1936 return;
1937 if (!tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_IE])
1938 return;
1939
1940 os_memset(&data, 0, sizeof(data));
1941 addr = nla_data(tb[NL80211_ATTR_MAC]);
1942
1943 if (!bss->valid_links &&
1944 (tb[NL80211_ATTR_MLO_LINK_ID] ||
1945 tb[NL80211_ATTR_MLD_ADDR])) {
1946 wpa_printf(MSG_ERROR,
1947 "nl80211: Link info not expected for DH event for non-MLD AP");
1948 return;
1949 }
1950
1951 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
1952 assoc_link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
1953 wpa_printf(MSG_DEBUG,
1954 "nl80211: STA assoc link ID %d in UPDATE_OWE_INFO event",
1955 assoc_link_id);
1956
1957 if (assoc_link_id != NL80211_DRV_LINK_ID_NA &&
1958 tb[NL80211_ATTR_MLD_ADDR]) {
1959 link_addr = addr;
1960 addr = nla_data(tb[NL80211_ATTR_MLD_ADDR]);
1961 wpa_printf(MSG_DEBUG,
1962 "nl80211: STA assoc link addr " MACSTR,
1963 MAC2STR(link_addr));
1964 }
1965 }
1966
1967 data.update_dh.peer = addr;
1968 data.update_dh.ie = nla_data(tb[NL80211_ATTR_IE]);
1969 data.update_dh.ie_len = nla_len(tb[NL80211_ATTR_IE]);
1970 data.update_dh.assoc_link_id = assoc_link_id;
1971 data.update_dh.link_addr = link_addr;
1972
1973 wpa_printf(MSG_DEBUG, "nl80211: DH event - peer " MACSTR,
1974 MAC2STR(data.update_dh.peer));
1975
1976 wpa_supplicant_event(bss->ctx, EVENT_UPDATE_DH, &data);
1977 }
1978
1979
send_scan_event(struct i802_bss * bss,int aborted,struct nlattr * tb[],int external_scan)1980 static void send_scan_event(struct i802_bss *bss, int aborted,
1981 struct nlattr *tb[], int external_scan)
1982 {
1983 struct wpa_driver_nl80211_data *drv = bss->drv;
1984 union wpa_event_data event;
1985 struct nlattr *nl;
1986 int rem;
1987 struct scan_info *info;
1988 #define MAX_REPORT_FREQS 110
1989 int freqs[MAX_REPORT_FREQS];
1990 int num_freqs = 0;
1991 struct i802_link *mld_link;
1992 void *ctx = bss->ctx;
1993
1994 if (!external_scan && drv->scan_for_auth) {
1995 drv->scan_for_auth = 0;
1996 wpa_printf(MSG_DEBUG, "nl80211: Scan results for missing "
1997 "cfg80211 BSS entry");
1998 wpa_driver_nl80211_authenticate_retry(drv);
1999 return;
2000 }
2001
2002 os_memset(&event, 0, sizeof(event));
2003 info = &event.scan_info;
2004 info->aborted = aborted;
2005 info->external_scan = external_scan;
2006 info->nl_scan_event = 1;
2007
2008 if (tb[NL80211_ATTR_SCAN_SSIDS]) {
2009 nla_for_each_nested(nl, tb[NL80211_ATTR_SCAN_SSIDS], rem) {
2010 struct wpa_driver_scan_ssid *s =
2011 &info->ssids[info->num_ssids];
2012 s->ssid = nla_data(nl);
2013 s->ssid_len = nla_len(nl);
2014 wpa_printf(MSG_DEBUG, "nl80211: Scan probed for SSID '%s'",
2015 wpa_ssid_txt(s->ssid, s->ssid_len));
2016 info->num_ssids++;
2017 if (info->num_ssids == WPAS_MAX_SCAN_SSIDS)
2018 break;
2019 }
2020 }
2021 if (tb[NL80211_ATTR_SCAN_FREQUENCIES]) {
2022 char msg[MAX_REPORT_FREQS * 5 + 1], *pos, *end;
2023 int res;
2024
2025 pos = msg;
2026 end = pos + sizeof(msg);
2027 *pos = '\0';
2028
2029 nla_for_each_nested(nl, tb[NL80211_ATTR_SCAN_FREQUENCIES], rem)
2030 {
2031 freqs[num_freqs] = nla_get_u32(nl);
2032 res = os_snprintf(pos, end - pos, " %d",
2033 freqs[num_freqs]);
2034 if (!os_snprintf_error(end - pos, res))
2035 pos += res;
2036 num_freqs++;
2037 if (num_freqs == MAX_REPORT_FREQS)
2038 break;
2039 }
2040 info->freqs = freqs;
2041 info->num_freqs = num_freqs;
2042 msg[sizeof(msg) - 1] = '\0';
2043 wpa_printf(MSG_DEBUG, "nl80211: Scan included frequencies:%s",
2044 msg);
2045 }
2046
2047 if (tb[NL80211_ATTR_SCAN_START_TIME_TSF] &&
2048 tb[NL80211_ATTR_SCAN_START_TIME_TSF_BSSID]) {
2049 info->scan_start_tsf =
2050 nla_get_u64(tb[NL80211_ATTR_SCAN_START_TIME_TSF]);
2051 os_memcpy(info->scan_start_tsf_bssid,
2052 nla_data(tb[NL80211_ATTR_SCAN_START_TIME_TSF_BSSID]),
2053 ETH_ALEN);
2054 }
2055
2056 /* Need to pass to the correct link ctx during AP MLD operation */
2057 if (is_ap_interface(drv->nlmode)) {
2058 mld_link = bss->scan_link;
2059 if (!mld_link) {
2060 wpa_printf(MSG_DEBUG,
2061 "nl80211: Scan event on unknown link");
2062 } else if (mld_link->ctx) {
2063 u8 link_id = nl80211_get_link_id_from_link(bss,
2064 mld_link);
2065
2066 wpa_printf(MSG_DEBUG,
2067 "nl80211: Scan event for link_id %d",
2068 link_id);
2069 ctx = mld_link->ctx;
2070 }
2071 }
2072
2073 wpa_supplicant_event(ctx, EVENT_SCAN_RESULTS, &event);
2074 }
2075
2076
nl80211_cqm_event(struct i802_bss * bss,struct nlattr * tb[])2077 static void nl80211_cqm_event(struct i802_bss *bss, struct nlattr *tb[])
2078 {
2079 struct wpa_driver_nl80211_data *drv = bss->drv;
2080 static struct nla_policy cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
2081 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
2082 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U8 },
2083 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
2084 [NL80211_ATTR_CQM_PKT_LOSS_EVENT] = { .type = NLA_U32 },
2085 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
2086 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
2087 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
2088 [NL80211_ATTR_CQM_BEACON_LOSS_EVENT] = { .type = NLA_FLAG },
2089 };
2090 struct nlattr *cqm[NL80211_ATTR_CQM_MAX + 1];
2091 enum nl80211_cqm_rssi_threshold_event event;
2092 union wpa_event_data ed;
2093 int res;
2094
2095 if (tb[NL80211_ATTR_CQM] == NULL ||
2096 nla_parse_nested(cqm, NL80211_ATTR_CQM_MAX, tb[NL80211_ATTR_CQM],
2097 cqm_policy)) {
2098 wpa_printf(MSG_DEBUG, "nl80211: Ignore invalid CQM event");
2099 return;
2100 }
2101
2102 os_memset(&ed, 0, sizeof(ed));
2103
2104 if (cqm[NL80211_ATTR_CQM_PKT_LOSS_EVENT]) {
2105 if (!tb[NL80211_ATTR_MAC])
2106 return;
2107 os_memcpy(ed.low_ack.addr, nla_data(tb[NL80211_ATTR_MAC]),
2108 ETH_ALEN);
2109 ed.low_ack.num_packets =
2110 nla_get_u32(cqm[NL80211_ATTR_CQM_PKT_LOSS_EVENT]);
2111 wpa_printf(MSG_DEBUG, "nl80211: Packet loss event for " MACSTR
2112 " (num_packets %u)",
2113 MAC2STR(ed.low_ack.addr), ed.low_ack.num_packets);
2114 wpa_supplicant_event(bss->ctx, EVENT_STATION_LOW_ACK, &ed);
2115 return;
2116 }
2117
2118 if (cqm[NL80211_ATTR_CQM_BEACON_LOSS_EVENT]) {
2119 wpa_printf(MSG_DEBUG, "nl80211: Beacon loss event");
2120 wpa_supplicant_event(drv->ctx, EVENT_BEACON_LOSS, NULL);
2121 return;
2122 }
2123
2124 if (cqm[NL80211_ATTR_CQM_TXE_RATE] &&
2125 cqm[NL80211_ATTR_CQM_TXE_PKTS] &&
2126 cqm[NL80211_ATTR_CQM_TXE_INTVL] &&
2127 cqm[NL80211_ATTR_MAC]) {
2128 wpa_printf(MSG_DEBUG, "nl80211: CQM TXE event for " MACSTR
2129 " (rate: %u pkts: %u interval: %u)",
2130 MAC2STR((u8 *) nla_data(cqm[NL80211_ATTR_MAC])),
2131 nla_get_u32(cqm[NL80211_ATTR_CQM_TXE_RATE]),
2132 nla_get_u32(cqm[NL80211_ATTR_CQM_TXE_PKTS]),
2133 nla_get_u32(cqm[NL80211_ATTR_CQM_TXE_INTVL]));
2134 return;
2135 }
2136
2137 if (cqm[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] == NULL) {
2138 wpa_printf(MSG_DEBUG,
2139 "nl80211: Not a CQM RSSI threshold event");
2140 return;
2141 }
2142 event = nla_get_u32(cqm[NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT]);
2143
2144 if (event == NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH) {
2145 wpa_printf(MSG_DEBUG, "nl80211: Connection quality monitor "
2146 "event: RSSI high");
2147 ed.signal_change.above_threshold = 1;
2148 } else if (event == NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW) {
2149 wpa_printf(MSG_DEBUG, "nl80211: Connection quality monitor "
2150 "event: RSSI low");
2151 ed.signal_change.above_threshold = 0;
2152 } else {
2153 wpa_printf(MSG_DEBUG,
2154 "nl80211: Unknown CQM RSSI threshold event: %d",
2155 event);
2156 return;
2157 }
2158
2159 /*
2160 * nl80211_get_link_signal() and nl80211_get_link_noise() set default
2161 * values in case querying the driver fails.
2162 */
2163 res = nl80211_get_link_signal(drv, drv->bssid, &ed.signal_change.data);
2164 if (res == 0) {
2165 wpa_printf(MSG_DEBUG, "nl80211: Signal: %d dBm txrate: %lu",
2166 ed.signal_change.data.signal,
2167 ed.signal_change.data.current_tx_rate);
2168 } else {
2169 wpa_printf(MSG_DEBUG,
2170 "nl80211: Querying the driver for signal info failed");
2171 }
2172
2173 res = nl80211_get_link_noise(drv, &ed.signal_change);
2174 if (res == 0) {
2175 wpa_printf(MSG_DEBUG, "nl80211: Noise: %d dBm",
2176 ed.signal_change.current_noise);
2177 } else {
2178 wpa_printf(MSG_DEBUG,
2179 "nl80211: Querying the driver for noise info failed");
2180 }
2181
2182 wpa_supplicant_event(drv->ctx, EVENT_SIGNAL_CHANGE, &ed);
2183 }
2184
2185
nl80211_new_peer_candidate(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2186 static void nl80211_new_peer_candidate(struct wpa_driver_nl80211_data *drv,
2187 struct nlattr **tb)
2188 {
2189 const u8 *addr;
2190 union wpa_event_data data;
2191
2192 if (drv->nlmode != NL80211_IFTYPE_MESH_POINT ||
2193 !tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_IE])
2194 return;
2195
2196 addr = nla_data(tb[NL80211_ATTR_MAC]);
2197 wpa_printf(MSG_DEBUG, "nl80211: New peer candidate " MACSTR,
2198 MAC2STR(addr));
2199
2200 os_memset(&data, 0, sizeof(data));
2201 data.mesh_peer.peer = addr;
2202 data.mesh_peer.ies = nla_data(tb[NL80211_ATTR_IE]);
2203 data.mesh_peer.ie_len = nla_len(tb[NL80211_ATTR_IE]);
2204 wpa_supplicant_event(drv->ctx, EVENT_NEW_PEER_CANDIDATE, &data);
2205 }
2206
2207
nl80211_new_station_event(struct wpa_driver_nl80211_data * drv,struct i802_bss * bss,struct nlattr ** tb)2208 static void nl80211_new_station_event(struct wpa_driver_nl80211_data *drv,
2209 struct i802_bss *bss,
2210 struct nlattr **tb)
2211 {
2212 u8 *peer_addr;
2213 union wpa_event_data data;
2214
2215 if (tb[NL80211_ATTR_MAC] == NULL)
2216 return;
2217 peer_addr = nla_data(tb[NL80211_ATTR_MAC]);
2218 wpa_printf(MSG_DEBUG, "nl80211: New station " MACSTR,
2219 MAC2STR(peer_addr));
2220
2221 if (is_ap_interface(drv->nlmode) && drv->device_ap_sme) {
2222 u8 *link_addr = NULL;
2223 int assoc_link_id = -1;
2224 u8 *req_ies = NULL, *resp_ies = NULL;
2225 size_t req_ies_len = 0, resp_ies_len = 0;
2226
2227 if (!bss->valid_links &&
2228 (tb[NL80211_ATTR_MLO_LINK_ID] ||
2229 tb[NL80211_ATTR_MLD_ADDR])) {
2230 wpa_printf(MSG_ERROR,
2231 "nl80211: MLO info not expected for new station event for non-MLD AP");
2232 return;
2233 }
2234
2235 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2236 assoc_link_id =
2237 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2238 wpa_printf(MSG_DEBUG, "nl80211: STA assoc link ID %d",
2239 assoc_link_id);
2240 if (tb[NL80211_ATTR_MLD_ADDR]) {
2241 peer_addr = nla_data(tb[NL80211_ATTR_MLD_ADDR]);
2242 link_addr = nla_data(tb[NL80211_ATTR_MAC]);
2243 wpa_printf(MSG_DEBUG,
2244 "nl80211: STA MLD address " MACSTR,
2245 MAC2STR(peer_addr));
2246 }
2247 }
2248
2249 if (tb[NL80211_ATTR_IE]) {
2250 req_ies = nla_data(tb[NL80211_ATTR_IE]);
2251 req_ies_len = nla_len(tb[NL80211_ATTR_IE]);
2252 wpa_hexdump(MSG_DEBUG, "nl80211: Assoc Req IEs",
2253 req_ies, req_ies_len);
2254 }
2255
2256 if (tb[NL80211_ATTR_RESP_IE]) {
2257 resp_ies = nla_data(tb[NL80211_ATTR_RESP_IE]);
2258 resp_ies_len = nla_len(tb[NL80211_ATTR_RESP_IE]);
2259 wpa_hexdump(MSG_DEBUG, "nl80211: Assoc Resp IEs",
2260 resp_ies, resp_ies_len);
2261 }
2262
2263 drv_event_assoc(bss->ctx, peer_addr, req_ies, req_ies_len,
2264 resp_ies, resp_ies_len, link_addr,
2265 assoc_link_id, 0);
2266 return;
2267 }
2268
2269 if (drv->nlmode != NL80211_IFTYPE_ADHOC)
2270 return;
2271
2272 os_memset(&data, 0, sizeof(data));
2273 os_memcpy(data.ibss_rsn_start.peer, peer_addr, ETH_ALEN);
2274 wpa_supplicant_event(bss->ctx, EVENT_IBSS_RSN_START, &data);
2275 }
2276
2277
nl80211_del_station_event(struct wpa_driver_nl80211_data * drv,struct i802_bss * bss,struct nlattr ** tb)2278 static void nl80211_del_station_event(struct wpa_driver_nl80211_data *drv,
2279 struct i802_bss *bss,
2280 struct nlattr **tb)
2281 {
2282 u8 *addr;
2283 union wpa_event_data data;
2284
2285 if (tb[NL80211_ATTR_MAC] == NULL)
2286 return;
2287 addr = nla_data(tb[NL80211_ATTR_MAC]);
2288 wpa_printf(MSG_DEBUG, "nl80211: Delete station " MACSTR,
2289 MAC2STR(addr));
2290
2291 if (is_ap_interface(drv->nlmode) && drv->device_ap_sme) {
2292 drv_event_disassoc(bss->ctx, addr);
2293 return;
2294 }
2295
2296 if (drv->nlmode != NL80211_IFTYPE_ADHOC)
2297 return;
2298
2299 os_memset(&data, 0, sizeof(data));
2300 os_memcpy(data.ibss_peer_lost.peer, addr, ETH_ALEN);
2301 wpa_supplicant_event(bss->ctx, EVENT_IBSS_PEER_LOST, &data);
2302 }
2303
2304
nl80211_rekey_offload_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2305 static void nl80211_rekey_offload_event(struct wpa_driver_nl80211_data *drv,
2306 struct nlattr **tb)
2307 {
2308 struct nlattr *rekey_info[NUM_NL80211_REKEY_DATA];
2309 static struct nla_policy rekey_policy[NUM_NL80211_REKEY_DATA] = {
2310 [NL80211_REKEY_DATA_KEK] = {
2311 .minlen = NL80211_KEK_LEN,
2312 .maxlen = NL80211_KEK_LEN,
2313 },
2314 [NL80211_REKEY_DATA_KCK] = {
2315 .minlen = NL80211_KCK_LEN,
2316 .maxlen = NL80211_KCK_LEN,
2317 },
2318 [NL80211_REKEY_DATA_REPLAY_CTR] = {
2319 .minlen = NL80211_REPLAY_CTR_LEN,
2320 .maxlen = NL80211_REPLAY_CTR_LEN,
2321 },
2322 };
2323 union wpa_event_data data;
2324
2325 if (!tb[NL80211_ATTR_MAC] ||
2326 !tb[NL80211_ATTR_REKEY_DATA] ||
2327 nla_parse_nested(rekey_info, MAX_NL80211_REKEY_DATA,
2328 tb[NL80211_ATTR_REKEY_DATA], rekey_policy) ||
2329 !rekey_info[NL80211_REKEY_DATA_REPLAY_CTR])
2330 return;
2331
2332 os_memset(&data, 0, sizeof(data));
2333 data.driver_gtk_rekey.bssid = nla_data(tb[NL80211_ATTR_MAC]);
2334 wpa_printf(MSG_DEBUG, "nl80211: Rekey offload event for BSSID " MACSTR,
2335 MAC2STR(data.driver_gtk_rekey.bssid));
2336 data.driver_gtk_rekey.replay_ctr =
2337 nla_data(rekey_info[NL80211_REKEY_DATA_REPLAY_CTR]);
2338 wpa_hexdump(MSG_DEBUG, "nl80211: Rekey offload - Replay Counter",
2339 data.driver_gtk_rekey.replay_ctr, NL80211_REPLAY_CTR_LEN);
2340 wpa_supplicant_event(drv->ctx, EVENT_DRIVER_GTK_REKEY, &data);
2341 }
2342
2343
nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2344 static void nl80211_pmksa_candidate_event(struct wpa_driver_nl80211_data *drv,
2345 struct nlattr **tb)
2346 {
2347 struct nlattr *cand[NUM_NL80211_PMKSA_CANDIDATE];
2348 static struct nla_policy cand_policy[NUM_NL80211_PMKSA_CANDIDATE] = {
2349 [NL80211_PMKSA_CANDIDATE_INDEX] = { .type = NLA_U32 },
2350 [NL80211_PMKSA_CANDIDATE_BSSID] = {
2351 .minlen = ETH_ALEN,
2352 .maxlen = ETH_ALEN,
2353 },
2354 [NL80211_PMKSA_CANDIDATE_PREAUTH] = { .type = NLA_FLAG },
2355 };
2356 union wpa_event_data data;
2357
2358 wpa_printf(MSG_DEBUG, "nl80211: PMKSA candidate event");
2359
2360 if (!tb[NL80211_ATTR_PMKSA_CANDIDATE] ||
2361 nla_parse_nested(cand, MAX_NL80211_PMKSA_CANDIDATE,
2362 tb[NL80211_ATTR_PMKSA_CANDIDATE], cand_policy) ||
2363 !cand[NL80211_PMKSA_CANDIDATE_INDEX] ||
2364 !cand[NL80211_PMKSA_CANDIDATE_BSSID])
2365 return;
2366
2367 os_memset(&data, 0, sizeof(data));
2368 os_memcpy(data.pmkid_candidate.bssid,
2369 nla_data(cand[NL80211_PMKSA_CANDIDATE_BSSID]), ETH_ALEN);
2370 data.pmkid_candidate.index =
2371 nla_get_u32(cand[NL80211_PMKSA_CANDIDATE_INDEX]);
2372 data.pmkid_candidate.preauth =
2373 cand[NL80211_PMKSA_CANDIDATE_PREAUTH] != NULL;
2374 wpa_supplicant_event(drv->ctx, EVENT_PMKID_CANDIDATE, &data);
2375 }
2376
2377
nl80211_client_probe_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2378 static void nl80211_client_probe_event(struct wpa_driver_nl80211_data *drv,
2379 struct nlattr **tb)
2380 {
2381 union wpa_event_data data;
2382 const u8 *addr;
2383 u64 cookie = 0;
2384
2385 addr = nla_data(tb[NL80211_ATTR_MAC]);
2386 if (!addr)
2387 return;
2388 if (tb[NL80211_ATTR_COOKIE])
2389 cookie = nla_get_u64(tb[NL80211_ATTR_COOKIE]);
2390 wpa_printf(MSG_DEBUG, "nl80211: Probe client event (addr=" MACSTR
2391 " ack=%d cookie=%llu)", MAC2STR(addr),
2392 tb[NL80211_ATTR_ACK] != NULL,
2393 (long long unsigned int) cookie);
2394 if (!tb[NL80211_ATTR_ACK])
2395 return;
2396
2397 os_memset(&data, 0, sizeof(data));
2398 os_memcpy(data.client_poll.addr, addr, ETH_ALEN);
2399 wpa_supplicant_event(drv->ctx, EVENT_DRIVER_CLIENT_POLL_OK, &data);
2400 }
2401
2402
nl80211_tdls_oper_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2403 static void nl80211_tdls_oper_event(struct wpa_driver_nl80211_data *drv,
2404 struct nlattr **tb)
2405 {
2406 union wpa_event_data data;
2407
2408 wpa_printf(MSG_DEBUG, "nl80211: TDLS operation event");
2409
2410 if (!tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_TDLS_OPERATION])
2411 return;
2412
2413 os_memset(&data, 0, sizeof(data));
2414 os_memcpy(data.tdls.peer, nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
2415 switch (nla_get_u8(tb[NL80211_ATTR_TDLS_OPERATION])) {
2416 case NL80211_TDLS_SETUP:
2417 wpa_printf(MSG_DEBUG, "nl80211: TDLS setup request for peer "
2418 MACSTR, MAC2STR(data.tdls.peer));
2419 data.tdls.oper = TDLS_REQUEST_SETUP;
2420 break;
2421 case NL80211_TDLS_TEARDOWN:
2422 wpa_printf(MSG_DEBUG, "nl80211: TDLS teardown request for peer "
2423 MACSTR, MAC2STR(data.tdls.peer));
2424 data.tdls.oper = TDLS_REQUEST_TEARDOWN;
2425 break;
2426 case NL80211_TDLS_DISCOVERY_REQ:
2427 wpa_printf(MSG_DEBUG,
2428 "nl80211: TDLS discovery request for peer " MACSTR,
2429 MAC2STR(data.tdls.peer));
2430 data.tdls.oper = TDLS_REQUEST_DISCOVER;
2431 break;
2432 default:
2433 wpa_printf(MSG_DEBUG, "nl80211: Unsupported TDLS operatione "
2434 "event");
2435 return;
2436 }
2437 if (tb[NL80211_ATTR_REASON_CODE]) {
2438 data.tdls.reason_code =
2439 nla_get_u16(tb[NL80211_ATTR_REASON_CODE]);
2440 }
2441
2442 wpa_supplicant_event(drv->ctx, EVENT_TDLS, &data);
2443 }
2444
2445
nl80211_stop_ap(struct i802_bss * bss,struct nlattr ** tb)2446 static void nl80211_stop_ap(struct i802_bss *bss, struct nlattr **tb)
2447 {
2448 struct i802_link *mld_link = NULL;
2449 void *ctx = bss->ctx;
2450 int link_id = -1;
2451
2452 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2453 link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2454 if (!nl80211_link_valid(bss->valid_links, link_id)) {
2455 wpa_printf(MSG_DEBUG,
2456 "nl80211: Ignoring STOP_AP event for invalid link ID %d (valid: 0x%04x)",
2457 link_id, bss->valid_links);
2458 return;
2459 }
2460
2461 mld_link = nl80211_get_link(bss, link_id);
2462 wpa_printf(MSG_DEBUG,
2463 "nl80211: STOP_AP event on link %d", link_id);
2464 ctx = mld_link->ctx;
2465
2466 /* The driver would have already deleted the link and this call
2467 * will return an error. Ignore that since nl80211_remove_link()
2468 * is called here only to update the bss->links[] state. */
2469 nl80211_remove_link(bss, link_id);
2470 }
2471
2472 wpa_supplicant_event(ctx, EVENT_INTERFACE_UNAVAILABLE, NULL);
2473 }
2474
2475
nl80211_connect_failed_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2476 static void nl80211_connect_failed_event(struct wpa_driver_nl80211_data *drv,
2477 struct nlattr **tb)
2478 {
2479 union wpa_event_data data;
2480 u32 reason;
2481
2482 wpa_printf(MSG_DEBUG, "nl80211: Connect failed event");
2483
2484 if (!tb[NL80211_ATTR_MAC] || !tb[NL80211_ATTR_CONN_FAILED_REASON])
2485 return;
2486
2487 os_memset(&data, 0, sizeof(data));
2488 os_memcpy(data.connect_failed_reason.addr,
2489 nla_data(tb[NL80211_ATTR_MAC]), ETH_ALEN);
2490
2491 reason = nla_get_u32(tb[NL80211_ATTR_CONN_FAILED_REASON]);
2492 switch (reason) {
2493 case NL80211_CONN_FAIL_MAX_CLIENTS:
2494 wpa_printf(MSG_DEBUG, "nl80211: Max client reached");
2495 data.connect_failed_reason.code = MAX_CLIENT_REACHED;
2496 break;
2497 case NL80211_CONN_FAIL_BLOCKED_CLIENT:
2498 wpa_printf(MSG_DEBUG, "nl80211: Blocked client " MACSTR
2499 " tried to connect",
2500 MAC2STR(data.connect_failed_reason.addr));
2501 data.connect_failed_reason.code = BLOCKED_CLIENT;
2502 break;
2503 default:
2504 wpa_printf(MSG_DEBUG, "nl8021l: Unknown connect failed reason "
2505 "%u", reason);
2506 return;
2507 }
2508
2509 wpa_supplicant_event(drv->ctx, EVENT_CONNECT_FAILED_REASON, &data);
2510 }
2511
2512
nl80211_radar_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)2513 static void nl80211_radar_event(struct wpa_driver_nl80211_data *drv,
2514 struct nlattr **tb)
2515 {
2516 union wpa_event_data data;
2517 enum nl80211_radar_event event_type;
2518
2519 if (!tb[NL80211_ATTR_WIPHY_FREQ] || !tb[NL80211_ATTR_RADAR_EVENT])
2520 return;
2521
2522 os_memset(&data, 0, sizeof(data));
2523 data.dfs_event.link_id = NL80211_DRV_LINK_ID_NA;
2524 data.dfs_event.freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
2525 event_type = nla_get_u32(tb[NL80211_ATTR_RADAR_EVENT]);
2526
2527 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2528 data.dfs_event.link_id =
2529 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2530 } else if (data.dfs_event.freq) {
2531 data.dfs_event.link_id =
2532 nl80211_get_link_id_by_freq(drv->first_bss,
2533 data.dfs_event.freq);
2534 }
2535
2536 /* Check HT params */
2537 if (tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
2538 data.dfs_event.ht_enabled = 1;
2539 data.dfs_event.chan_offset = 0;
2540
2541 switch (nla_get_u32(tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE])) {
2542 case NL80211_CHAN_NO_HT:
2543 data.dfs_event.ht_enabled = 0;
2544 break;
2545 case NL80211_CHAN_HT20:
2546 break;
2547 case NL80211_CHAN_HT40PLUS:
2548 data.dfs_event.chan_offset = 1;
2549 break;
2550 case NL80211_CHAN_HT40MINUS:
2551 data.dfs_event.chan_offset = -1;
2552 break;
2553 }
2554 }
2555
2556 /* Get VHT params */
2557 if (tb[NL80211_ATTR_CHANNEL_WIDTH])
2558 data.dfs_event.chan_width =
2559 convert2width(nla_get_u32(
2560 tb[NL80211_ATTR_CHANNEL_WIDTH]));
2561 if (tb[NL80211_ATTR_CENTER_FREQ1])
2562 data.dfs_event.cf1 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ1]);
2563 if (tb[NL80211_ATTR_CENTER_FREQ2])
2564 data.dfs_event.cf2 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ2]);
2565
2566 wpa_printf(MSG_DEBUG,
2567 "nl80211: DFS event on freq %d MHz, ht: %d, offset: %d, width: %d, cf1: %dMHz, cf2: %dMHz, link_id=%d",
2568 data.dfs_event.freq, data.dfs_event.ht_enabled,
2569 data.dfs_event.chan_offset, data.dfs_event.chan_width,
2570 data.dfs_event.cf1, data.dfs_event.cf2,
2571 data.dfs_event.link_id);
2572
2573 switch (event_type) {
2574 case NL80211_RADAR_DETECTED:
2575 wpa_supplicant_event(drv->ctx, EVENT_DFS_RADAR_DETECTED, &data);
2576 break;
2577 case NL80211_RADAR_CAC_FINISHED:
2578 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_FINISHED, &data);
2579 break;
2580 case NL80211_RADAR_CAC_ABORTED:
2581 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_ABORTED, &data);
2582 break;
2583 case NL80211_RADAR_NOP_FINISHED:
2584 wpa_supplicant_event(drv->ctx, EVENT_DFS_NOP_FINISHED, &data);
2585 break;
2586 case NL80211_RADAR_PRE_CAC_EXPIRED:
2587 wpa_supplicant_event(drv->ctx, EVENT_DFS_PRE_CAC_EXPIRED,
2588 &data);
2589 break;
2590 case NL80211_RADAR_CAC_STARTED:
2591 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_STARTED, &data);
2592 break;
2593 default:
2594 wpa_printf(MSG_DEBUG, "nl80211: Unknown radar event %d "
2595 "received", event_type);
2596 break;
2597 }
2598 }
2599
2600
nl80211_spurious_frame(struct i802_bss * bss,struct nlattr ** tb,int wds)2601 static void nl80211_spurious_frame(struct i802_bss *bss, struct nlattr **tb,
2602 int wds)
2603 {
2604 struct wpa_driver_nl80211_data *drv = bss->drv;
2605 union wpa_event_data event;
2606
2607 if (!tb[NL80211_ATTR_MAC])
2608 return;
2609
2610 os_memset(&event, 0, sizeof(event));
2611 event.rx_from_unknown.bssid = bss->addr;
2612 event.rx_from_unknown.addr = nla_data(tb[NL80211_ATTR_MAC]);
2613 event.rx_from_unknown.wds = wds;
2614
2615 wpa_supplicant_event(drv->ctx, EVENT_RX_FROM_UNKNOWN, &event);
2616 }
2617
2618 #ifdef CONFIG_DRIVER_NL80211_QCA
2619
qca_nl80211_avoid_freq(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2620 static void qca_nl80211_avoid_freq(struct wpa_driver_nl80211_data *drv,
2621 const u8 *data, size_t len)
2622 {
2623 u32 i, count;
2624 union wpa_event_data event;
2625 struct wpa_freq_range *range = NULL;
2626 const struct qca_avoid_freq_list *freq_range;
2627
2628 freq_range = (const struct qca_avoid_freq_list *) data;
2629 if (len < sizeof(freq_range->count))
2630 return;
2631
2632 count = freq_range->count;
2633 if (len < sizeof(freq_range->count) +
2634 count * sizeof(struct qca_avoid_freq_range)) {
2635 wpa_printf(MSG_DEBUG, "nl80211: Ignored too short avoid frequency list (len=%u)",
2636 (unsigned int) len);
2637 return;
2638 }
2639
2640 if (count > 0) {
2641 range = os_calloc(count, sizeof(struct wpa_freq_range));
2642 if (range == NULL)
2643 return;
2644 }
2645
2646 os_memset(&event, 0, sizeof(event));
2647 for (i = 0; i < count; i++) {
2648 unsigned int idx = event.freq_range.num;
2649 range[idx].min = freq_range->range[i].start_freq;
2650 range[idx].max = freq_range->range[i].end_freq;
2651 wpa_printf(MSG_DEBUG, "nl80211: Avoid frequency range: %u-%u",
2652 range[idx].min, range[idx].max);
2653 if (range[idx].min > range[idx].max) {
2654 wpa_printf(MSG_DEBUG, "nl80211: Ignore invalid frequency range");
2655 continue;
2656 }
2657 event.freq_range.num++;
2658 }
2659 event.freq_range.range = range;
2660
2661 wpa_supplicant_event(drv->ctx, EVENT_AVOID_FREQUENCIES, &event);
2662
2663 os_free(range);
2664 }
2665
2666
get_qca_hw_mode(u8 hw_mode)2667 static enum hostapd_hw_mode get_qca_hw_mode(u8 hw_mode)
2668 {
2669 switch (hw_mode) {
2670 case QCA_ACS_MODE_IEEE80211B:
2671 return HOSTAPD_MODE_IEEE80211B;
2672 case QCA_ACS_MODE_IEEE80211G:
2673 return HOSTAPD_MODE_IEEE80211G;
2674 case QCA_ACS_MODE_IEEE80211A:
2675 return HOSTAPD_MODE_IEEE80211A;
2676 case QCA_ACS_MODE_IEEE80211AD:
2677 return HOSTAPD_MODE_IEEE80211AD;
2678 case QCA_ACS_MODE_IEEE80211ANY:
2679 return HOSTAPD_MODE_IEEE80211ANY;
2680 default:
2681 return NUM_HOSTAPD_MODES;
2682 }
2683 }
2684
2685
chan_to_freq(struct wpa_driver_nl80211_data * drv,u8 chan,enum hostapd_hw_mode hw_mode)2686 static unsigned int chan_to_freq(struct wpa_driver_nl80211_data *drv,
2687 u8 chan, enum hostapd_hw_mode hw_mode)
2688 {
2689 if (hw_mode == NUM_HOSTAPD_MODES) {
2690 /* For drivers that do not report ACS_HW_MODE */
2691 u16 num_modes, flags;
2692 struct hostapd_hw_modes *modes;
2693 u8 dfs_domain;
2694 int i;
2695
2696 modes = nl80211_get_hw_feature_data(drv->first_bss, &num_modes,
2697 &flags, &dfs_domain);
2698 if (!modes) {
2699 wpa_printf(MSG_DEBUG,
2700 "nl80211: Fetching hardware mode failed");
2701 goto try_2_4_or_5;
2702 }
2703 if (num_modes == 1)
2704 hw_mode = modes[0].mode;
2705
2706 for (i = 0; i < num_modes; i++) {
2707 os_free(modes[i].channels);
2708 os_free(modes[i].rates);
2709 }
2710
2711 os_free(modes);
2712 }
2713
2714 if (hw_mode == HOSTAPD_MODE_IEEE80211AD) {
2715 if (chan >= 1 && chan <= 6)
2716 return 56160 + (2160 * chan);
2717 return 0;
2718 }
2719
2720 try_2_4_or_5:
2721 if (chan >= 1 && chan <= 13)
2722 return 2407 + 5 * chan;
2723 if (chan == 14)
2724 return 2484;
2725 if (chan >= 36 && chan <= 177)
2726 return 5000 + 5 * chan;
2727
2728 return 0;
2729 }
2730
2731
qca_nl80211_acs_select_ch(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2732 static void qca_nl80211_acs_select_ch(struct wpa_driver_nl80211_data *drv,
2733 const u8 *data, size_t len)
2734 {
2735 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_ACS_MAX + 1];
2736 union wpa_event_data event;
2737 u8 chan;
2738
2739 wpa_printf(MSG_DEBUG,
2740 "nl80211: ACS channel selection vendor event received");
2741
2742 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_ACS_MAX,
2743 (struct nlattr *) data, len, NULL) ||
2744 (!tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_FREQUENCY] &&
2745 !tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_CHANNEL]) ||
2746 (!tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_FREQUENCY] &&
2747 !tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_CHANNEL]))
2748 return;
2749
2750 os_memset(&event, 0, sizeof(event));
2751 event.acs_selected_channels.hw_mode = NUM_HOSTAPD_MODES;
2752
2753 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_HW_MODE]) {
2754 u8 hw_mode = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_HW_MODE]);
2755
2756 event.acs_selected_channels.hw_mode = get_qca_hw_mode(hw_mode);
2757 if (event.acs_selected_channels.hw_mode == NUM_HOSTAPD_MODES ||
2758 event.acs_selected_channels.hw_mode ==
2759 HOSTAPD_MODE_IEEE80211ANY) {
2760 wpa_printf(MSG_DEBUG,
2761 "nl80211: Invalid hw_mode %d in ACS selection event",
2762 hw_mode);
2763 return;
2764 }
2765 }
2766
2767 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_FREQUENCY]) {
2768 event.acs_selected_channels.pri_freq = nla_get_u32(
2769 tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_FREQUENCY]);
2770 } else {
2771 chan = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_PRIMARY_CHANNEL]);
2772 event.acs_selected_channels.pri_freq =
2773 chan_to_freq(drv, chan,
2774 event.acs_selected_channels.hw_mode);
2775 }
2776
2777 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_FREQUENCY]) {
2778 event.acs_selected_channels.sec_freq = nla_get_u32(
2779 tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_FREQUENCY]);
2780 } else {
2781 chan = nla_get_u8(
2782 tb[QCA_WLAN_VENDOR_ATTR_ACS_SECONDARY_CHANNEL]);
2783 event.acs_selected_channels.sec_freq =
2784 chan_to_freq(drv, chan,
2785 event.acs_selected_channels.hw_mode);
2786 }
2787
2788 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_EDMG_CHANNEL])
2789 event.acs_selected_channels.edmg_channel =
2790 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_EDMG_CHANNEL]);
2791 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL])
2792 event.acs_selected_channels.vht_seg0_center_ch =
2793 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL]);
2794 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG1_CENTER_CHANNEL])
2795 event.acs_selected_channels.vht_seg1_center_ch =
2796 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_VHT_SEG1_CENTER_CHANNEL]);
2797 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_CHWIDTH])
2798 event.acs_selected_channels.ch_width =
2799 nla_get_u16(tb[QCA_WLAN_VENDOR_ATTR_ACS_CHWIDTH]);
2800 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_PUNCTURE_BITMAP])
2801 event.acs_selected_channels.puncture_bitmap =
2802 nla_get_u16(tb[QCA_WLAN_VENDOR_ATTR_ACS_PUNCTURE_BITMAP]);
2803 if (tb[QCA_WLAN_VENDOR_ATTR_ACS_LINK_ID])
2804 event.acs_selected_channels.link_id =
2805 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_ACS_LINK_ID]);
2806 else
2807 event.acs_selected_channels.link_id = -1;
2808
2809 wpa_printf(MSG_INFO,
2810 "nl80211: ACS Results: PFreq: %d SFreq: %d BW: %d VHT0: %d VHT1: %d HW_MODE: %d EDMGCH: %d PUNCBITMAP: 0x%x, LinkId: %d",
2811 event.acs_selected_channels.pri_freq,
2812 event.acs_selected_channels.sec_freq,
2813 event.acs_selected_channels.ch_width,
2814 event.acs_selected_channels.vht_seg0_center_ch,
2815 event.acs_selected_channels.vht_seg1_center_ch,
2816 event.acs_selected_channels.hw_mode,
2817 event.acs_selected_channels.edmg_channel,
2818 event.acs_selected_channels.puncture_bitmap,
2819 event.acs_selected_channels.link_id);
2820
2821 /* Ignore ACS channel list check for backwards compatibility */
2822
2823 wpa_supplicant_event(drv->ctx, EVENT_ACS_CHANNEL_SELECTED, &event);
2824 }
2825
2826
qca_nl80211_key_mgmt_auth(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2827 static void qca_nl80211_key_mgmt_auth(struct wpa_driver_nl80211_data *drv,
2828 const u8 *data, size_t len)
2829 {
2830 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_MAX + 1];
2831 u8 *bssid;
2832
2833 wpa_printf(MSG_DEBUG,
2834 "nl80211: Key management roam+auth vendor event received");
2835
2836 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_MAX,
2837 (struct nlattr *) data, len, NULL) ||
2838 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID] ||
2839 nla_len(tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID]) != ETH_ALEN ||
2840 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_REQ_IE] ||
2841 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_RESP_IE] ||
2842 !tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_AUTHORIZED])
2843 return;
2844
2845 bssid = nla_data(tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID]);
2846 wpa_printf(MSG_DEBUG, " * roam BSSID " MACSTR, MAC2STR(bssid));
2847
2848 mlme_event_connect(drv, NL80211_CMD_ROAM, true, NULL,
2849 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_BSSID],
2850 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_REQ_IE],
2851 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_RESP_IE],
2852 NULL, NULL,
2853 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_AUTHORIZED],
2854 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_KEY_REPLAY_CTR],
2855 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PTK_KCK],
2856 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PTK_KEK],
2857 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_SUBNET_STATUS],
2858 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_FILS_ERP_NEXT_SEQ_NUM],
2859 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PMK],
2860 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PMKID],
2861 tb[QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_MLO_LINKS]);
2862
2863 #ifdef ANDROID
2864 #ifdef ANDROID_LIB_EVENT
2865 wpa_driver_nl80211_driver_event(
2866 drv, OUI_QCA, QCA_NL80211_VENDOR_SUBCMD_KEY_MGMT_ROAM_AUTH,
2867 data, len);
2868 #endif /* ANDROID_LIB_EVENT */
2869 #endif /* ANDROID */
2870 }
2871
2872
2873 static void
qca_nl80211_key_mgmt_auth_handler(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)2874 qca_nl80211_key_mgmt_auth_handler(struct wpa_driver_nl80211_data *drv,
2875 const u8 *data, size_t len)
2876 {
2877 if (!drv->roam_indication_done) {
2878 wpa_printf(MSG_DEBUG,
2879 "nl80211: Pending roam indication, delay processing roam+auth vendor event");
2880
2881 os_free(drv->pending_roam_data);
2882 drv->pending_roam_data = os_memdup(data, len);
2883 if (!drv->pending_roam_data)
2884 return;
2885 drv->pending_roam_data_len = len;
2886 return;
2887 }
2888 drv->roam_indication_done = false;
2889 qca_nl80211_key_mgmt_auth(drv, data, len);
2890 }
2891
2892
qca_nl80211_dfs_offload_radar_event(struct wpa_driver_nl80211_data * drv,u32 subcmd,u8 * msg,int length)2893 static void qca_nl80211_dfs_offload_radar_event(
2894 struct wpa_driver_nl80211_data *drv, u32 subcmd, u8 *msg, int length)
2895 {
2896 union wpa_event_data data;
2897 struct nlattr *tb[NL80211_ATTR_MAX + 1];
2898
2899 wpa_printf(MSG_DEBUG,
2900 "nl80211: DFS offload radar vendor event received");
2901
2902 if (nla_parse(tb, NL80211_ATTR_MAX,
2903 (struct nlattr *) msg, length, NULL))
2904 return;
2905
2906 if (!tb[NL80211_ATTR_WIPHY_FREQ]) {
2907 wpa_printf(MSG_INFO,
2908 "nl80211: Error parsing WIPHY_FREQ in FS offload radar vendor event");
2909 return;
2910 }
2911
2912 os_memset(&data, 0, sizeof(data));
2913 data.dfs_event.freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
2914 data.dfs_event.link_id = NL80211_DRV_LINK_ID_NA;
2915
2916 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
2917 data.dfs_event.link_id =
2918 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
2919 } else if (data.dfs_event.freq) {
2920 data.dfs_event.link_id =
2921 nl80211_get_link_id_by_freq(drv->first_bss,
2922 data.dfs_event.freq);
2923 }
2924
2925 wpa_printf(MSG_DEBUG, "nl80211: DFS event on freq %d MHz, link=%d",
2926 data.dfs_event.freq, data.dfs_event.link_id);
2927
2928 /* Check HT params */
2929 if (tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
2930 data.dfs_event.ht_enabled = 1;
2931 data.dfs_event.chan_offset = 0;
2932
2933 switch (nla_get_u32(tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE])) {
2934 case NL80211_CHAN_NO_HT:
2935 data.dfs_event.ht_enabled = 0;
2936 break;
2937 case NL80211_CHAN_HT20:
2938 break;
2939 case NL80211_CHAN_HT40PLUS:
2940 data.dfs_event.chan_offset = 1;
2941 break;
2942 case NL80211_CHAN_HT40MINUS:
2943 data.dfs_event.chan_offset = -1;
2944 break;
2945 }
2946 }
2947
2948 /* Get VHT params */
2949 if (tb[NL80211_ATTR_CHANNEL_WIDTH])
2950 data.dfs_event.chan_width =
2951 convert2width(nla_get_u32(
2952 tb[NL80211_ATTR_CHANNEL_WIDTH]));
2953 if (tb[NL80211_ATTR_CENTER_FREQ1])
2954 data.dfs_event.cf1 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ1]);
2955 if (tb[NL80211_ATTR_CENTER_FREQ2])
2956 data.dfs_event.cf2 = nla_get_u32(tb[NL80211_ATTR_CENTER_FREQ2]);
2957
2958 wpa_printf(MSG_DEBUG, "nl80211: DFS event on freq %d MHz, ht: %d, "
2959 "offset: %d, width: %d, cf1: %dMHz, cf2: %dMHz",
2960 data.dfs_event.freq, data.dfs_event.ht_enabled,
2961 data.dfs_event.chan_offset, data.dfs_event.chan_width,
2962 data.dfs_event.cf1, data.dfs_event.cf2);
2963
2964 switch (subcmd) {
2965 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_RADAR_DETECTED:
2966 wpa_supplicant_event(drv->ctx, EVENT_DFS_RADAR_DETECTED, &data);
2967 break;
2968 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_STARTED:
2969 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_STARTED, &data);
2970 break;
2971 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_FINISHED:
2972 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_FINISHED, &data);
2973 break;
2974 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_ABORTED:
2975 wpa_supplicant_event(drv->ctx, EVENT_DFS_CAC_ABORTED, &data);
2976 break;
2977 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_NOP_FINISHED:
2978 wpa_supplicant_event(drv->ctx, EVENT_DFS_NOP_FINISHED, &data);
2979 break;
2980 default:
2981 wpa_printf(MSG_DEBUG,
2982 "nl80211: Unknown DFS offload radar event %d received",
2983 subcmd);
2984 break;
2985 }
2986 }
2987
2988
qca_nl80211_scan_trigger_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)2989 static void qca_nl80211_scan_trigger_event(struct wpa_driver_nl80211_data *drv,
2990 u8 *data, size_t len)
2991 {
2992 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_SCAN_MAX + 1];
2993 u64 cookie = 0;
2994 union wpa_event_data event;
2995 struct scan_info *info;
2996
2997 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_SCAN_MAX,
2998 (struct nlattr *) data, len, NULL) ||
2999 !tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE])
3000 return;
3001
3002 cookie = nla_get_u64(tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE]);
3003 if (cookie != drv->vendor_scan_cookie) {
3004 /* External scan trigger event, ignore */
3005 return;
3006 }
3007
3008 /* Cookie match, own scan */
3009 os_memset(&event, 0, sizeof(event));
3010 info = &event.scan_info;
3011 info->external_scan = 0;
3012 info->nl_scan_event = 0;
3013
3014 drv->scan_state = SCAN_STARTED;
3015 wpa_supplicant_event(drv->ctx, EVENT_SCAN_STARTED, &event);
3016 }
3017
3018
send_vendor_scan_event(struct wpa_driver_nl80211_data * drv,int aborted,struct nlattr * tb[],int external_scan)3019 static void send_vendor_scan_event(struct wpa_driver_nl80211_data *drv,
3020 int aborted, struct nlattr *tb[],
3021 int external_scan)
3022 {
3023 union wpa_event_data event;
3024 struct nlattr *nl;
3025 int rem;
3026 struct scan_info *info;
3027 int freqs[MAX_REPORT_FREQS];
3028 int num_freqs = 0;
3029
3030 os_memset(&event, 0, sizeof(event));
3031 info = &event.scan_info;
3032 info->aborted = aborted;
3033 info->external_scan = external_scan;
3034 info->scan_cookie = nla_get_u64(tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE]);
3035
3036 if (tb[QCA_WLAN_VENDOR_ATTR_SCAN_SSIDS]) {
3037 nla_for_each_nested(nl,
3038 tb[QCA_WLAN_VENDOR_ATTR_SCAN_SSIDS], rem) {
3039 struct wpa_driver_scan_ssid *s =
3040 &info->ssids[info->num_ssids];
3041 s->ssid = nla_data(nl);
3042 s->ssid_len = nla_len(nl);
3043 wpa_printf(MSG_DEBUG,
3044 "nl80211: Scan probed for SSID '%s'",
3045 wpa_ssid_txt(s->ssid, s->ssid_len));
3046 info->num_ssids++;
3047 if (info->num_ssids == WPAS_MAX_SCAN_SSIDS)
3048 break;
3049 }
3050 }
3051
3052 if (tb[QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES]) {
3053 char msg[500], *pos, *end;
3054 int res;
3055
3056 pos = msg;
3057 end = pos + sizeof(msg);
3058 *pos = '\0';
3059
3060 nla_for_each_nested(nl,
3061 tb[QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES],
3062 rem) {
3063 freqs[num_freqs] = nla_get_u32(nl);
3064 res = os_snprintf(pos, end - pos, " %d",
3065 freqs[num_freqs]);
3066 if (!os_snprintf_error(end - pos, res))
3067 pos += res;
3068 num_freqs++;
3069 if (num_freqs == MAX_REPORT_FREQS - 1)
3070 break;
3071 }
3072
3073 info->freqs = freqs;
3074 info->num_freqs = num_freqs;
3075 wpa_printf(MSG_DEBUG, "nl80211: Scan included frequencies:%s",
3076 msg);
3077 }
3078 wpa_supplicant_event(drv->ctx, EVENT_SCAN_RESULTS, &event);
3079 }
3080
3081
qca_nl80211_scan_done_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)3082 static void qca_nl80211_scan_done_event(struct wpa_driver_nl80211_data *drv,
3083 u8 *data, size_t len)
3084 {
3085 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_SCAN_MAX + 1];
3086 u64 cookie = 0;
3087 enum scan_status status;
3088 int external_scan;
3089
3090 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_SCAN_MAX,
3091 (struct nlattr *) data, len, NULL) ||
3092 !tb[QCA_WLAN_VENDOR_ATTR_SCAN_STATUS] ||
3093 !tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE])
3094 return;
3095
3096 status = nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_SCAN_STATUS]);
3097 if (status >= VENDOR_SCAN_STATUS_MAX)
3098 return; /* invalid status */
3099
3100 cookie = nla_get_u64(tb[QCA_WLAN_VENDOR_ATTR_SCAN_COOKIE]);
3101 if (cookie != drv->vendor_scan_cookie) {
3102 /* Event from an external scan, get scan results */
3103 external_scan = 1;
3104 } else {
3105 external_scan = 0;
3106 if (status == VENDOR_SCAN_STATUS_NEW_RESULTS)
3107 drv->scan_state = SCAN_COMPLETED;
3108 else
3109 drv->scan_state = SCAN_ABORTED;
3110
3111 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout, drv,
3112 drv->first_bss->ctx);
3113 drv->vendor_scan_cookie = 0;
3114 drv->last_scan_cmd = 0;
3115 }
3116
3117 send_vendor_scan_event(drv, (status == VENDOR_SCAN_STATUS_ABORTED), tb,
3118 external_scan);
3119 }
3120
3121
qca_nl80211_p2p_lo_stop_event(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)3122 static void qca_nl80211_p2p_lo_stop_event(struct wpa_driver_nl80211_data *drv,
3123 u8 *data, size_t len)
3124 {
3125 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_MAX + 1];
3126 union wpa_event_data event;
3127
3128 wpa_printf(MSG_DEBUG,
3129 "nl80211: P2P listen offload stop vendor event received");
3130
3131 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_MAX,
3132 (struct nlattr *) data, len, NULL) ||
3133 !tb[QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_STOP_REASON])
3134 return;
3135
3136 os_memset(&event, 0, sizeof(event));
3137 event.p2p_lo_stop.reason_code =
3138 nla_get_u8(tb[QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_STOP_REASON]);
3139
3140 wpa_printf(MSG_DEBUG,
3141 "nl80211: P2P Listen offload stop reason: %d",
3142 event.p2p_lo_stop.reason_code);
3143 wpa_supplicant_event(drv->ctx, EVENT_P2P_LO_STOP, &event);
3144 }
3145
3146
3147 #ifdef CONFIG_PASN
3148
qca_nl80211_pasn_auth(struct wpa_driver_nl80211_data * drv,u8 * data,size_t len)3149 static void qca_nl80211_pasn_auth(struct wpa_driver_nl80211_data *drv,
3150 u8 *data, size_t len)
3151 {
3152 int ret = -EINVAL;
3153 struct nlattr *attr;
3154 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MAX + 1];
3155 struct nlattr *cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_MAX + 1];
3156 unsigned int n_peers = 0, idx = 0;
3157 int rem_conf;
3158 enum qca_wlan_vendor_pasn_action action;
3159 union wpa_event_data event;
3160
3161 if (nla_parse(tb, QCA_WLAN_VENDOR_ATTR_PASN_MAX,
3162 (struct nlattr *) data, len, NULL) ||
3163 !tb[QCA_WLAN_VENDOR_ATTR_PASN_PEERS] ||
3164 !tb[QCA_WLAN_VENDOR_ATTR_PASN_ACTION]) {
3165 return;
3166 }
3167
3168 os_memset(&event, 0, sizeof(event));
3169 action = nla_get_u32(tb[QCA_WLAN_VENDOR_ATTR_PASN_ACTION]);
3170 switch (action) {
3171 case QCA_WLAN_VENDOR_PASN_ACTION_AUTH:
3172 event.pasn_auth.action = PASN_ACTION_AUTH;
3173 break;
3174 case QCA_WLAN_VENDOR_PASN_ACTION_DELETE_SECURE_RANGING_CONTEXT:
3175 event.pasn_auth.action =
3176 PASN_ACTION_DELETE_SECURE_RANGING_CONTEXT;
3177 break;
3178 default:
3179 return;
3180 }
3181
3182 nla_for_each_nested(attr, tb[QCA_WLAN_VENDOR_ATTR_PASN_PEERS], rem_conf)
3183 n_peers++;
3184
3185 if (n_peers > WPAS_MAX_PASN_PEERS) {
3186 wpa_printf(MSG_DEBUG, "nl80211: PASN auth: too many peers (%d)",
3187 n_peers);
3188 return;
3189 }
3190
3191 nla_for_each_nested(attr, tb[QCA_WLAN_VENDOR_ATTR_PASN_PEERS],
3192 rem_conf) {
3193 struct nlattr *nl_src, *nl_peer;
3194
3195 ret = nla_parse_nested(cfg, QCA_WLAN_VENDOR_ATTR_PASN_PEER_MAX,
3196 attr, NULL);
3197 if (ret)
3198 return;
3199 nl_src = cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_SRC_ADDR];
3200 nl_peer = cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_MAC_ADDR];
3201 if (nl_src)
3202 os_memcpy(event.pasn_auth.peer[idx].own_addr,
3203 nla_data(nl_src), ETH_ALEN);
3204 if (nl_peer)
3205 os_memcpy(event.pasn_auth.peer[idx].peer_addr,
3206 nla_data(nl_peer), ETH_ALEN);
3207 if (cfg[QCA_WLAN_VENDOR_ATTR_PASN_PEER_LTF_KEYSEED_REQUIRED])
3208 event.pasn_auth.peer[idx].ltf_keyseed_required = true;
3209 idx++;
3210 }
3211 event.pasn_auth.num_peers = n_peers;
3212
3213 wpa_printf(MSG_DEBUG,
3214 "nl80211: PASN auth action: %u, num_bssids: %d",
3215 event.pasn_auth.action,
3216 event.pasn_auth.num_peers);
3217 wpa_supplicant_event(drv->ctx, EVENT_PASN_AUTH, &event);
3218 }
3219
3220 #endif /* CONFIG_PASN */
3221
3222 #endif /* CONFIG_DRIVER_NL80211_QCA */
3223
3224
nl80211_vendor_event_qca(struct wpa_driver_nl80211_data * drv,u32 subcmd,u8 * data,size_t len)3225 static void nl80211_vendor_event_qca(struct wpa_driver_nl80211_data *drv,
3226 u32 subcmd, u8 *data, size_t len)
3227 {
3228 switch (subcmd) {
3229 case QCA_NL80211_VENDOR_SUBCMD_TEST:
3230 wpa_hexdump(MSG_DEBUG, "nl80211: QCA test event", data, len);
3231 break;
3232 #ifdef CONFIG_DRIVER_NL80211_QCA
3233 case QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY:
3234 qca_nl80211_avoid_freq(drv, data, len);
3235 break;
3236 case QCA_NL80211_VENDOR_SUBCMD_KEY_MGMT_ROAM_AUTH:
3237 qca_nl80211_key_mgmt_auth_handler(drv, data, len);
3238 break;
3239 case QCA_NL80211_VENDOR_SUBCMD_DO_ACS:
3240 qca_nl80211_acs_select_ch(drv, data, len);
3241 break;
3242 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_STARTED:
3243 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_FINISHED:
3244 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_ABORTED:
3245 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_CAC_NOP_FINISHED:
3246 case QCA_NL80211_VENDOR_SUBCMD_DFS_OFFLOAD_RADAR_DETECTED:
3247 qca_nl80211_dfs_offload_radar_event(drv, subcmd, data, len);
3248 break;
3249 case QCA_NL80211_VENDOR_SUBCMD_TRIGGER_SCAN:
3250 qca_nl80211_scan_trigger_event(drv, data, len);
3251 break;
3252 case QCA_NL80211_VENDOR_SUBCMD_SCAN_DONE:
3253 qca_nl80211_scan_done_event(drv, data, len);
3254 break;
3255 case QCA_NL80211_VENDOR_SUBCMD_P2P_LISTEN_OFFLOAD_STOP:
3256 qca_nl80211_p2p_lo_stop_event(drv, data, len);
3257 break;
3258 #ifdef CONFIG_PASN
3259 case QCA_NL80211_VENDOR_SUBCMD_PASN:
3260 qca_nl80211_pasn_auth(drv, data, len);
3261 break;
3262 #endif /* CONFIG_PASN */
3263 case QCA_NL80211_VENDOR_SUBCMD_TID_TO_LINK_MAP:
3264 qca_nl80211_tid_to_link_map_event(drv, data, len);
3265 break;
3266 case QCA_NL80211_VENDOR_SUBCMD_LINK_RECONFIG:
3267 qca_nl80211_link_reconfig_event(drv, data, len);
3268 break;
3269 #endif /* CONFIG_DRIVER_NL80211_QCA */
3270 default:
3271 wpa_printf(MSG_DEBUG,
3272 "nl80211: Ignore unsupported QCA vendor event %u",
3273 subcmd);
3274 break;
3275 }
3276 }
3277
3278
3279 #if defined(CONFIG_DRIVER_NL80211_BRCM) || defined(CONFIG_DRIVER_NL80211_SYNA)
3280
brcm_nl80211_acs_select_ch(struct wpa_driver_nl80211_data * drv,const u8 * data,size_t len)3281 static void brcm_nl80211_acs_select_ch(struct wpa_driver_nl80211_data *drv,
3282 const u8 *data, size_t len)
3283 {
3284 struct nlattr *tb[BRCM_VENDOR_ATTR_ACS_LAST + 1];
3285 union wpa_event_data event;
3286
3287 wpa_printf(MSG_DEBUG,
3288 "nl80211: BRCM ACS channel selection vendor event received");
3289
3290 if (nla_parse(tb, BRCM_VENDOR_ATTR_ACS_LAST, (struct nlattr *) data,
3291 len, NULL) ||
3292 !tb[BRCM_VENDOR_ATTR_ACS_PRIMARY_FREQ] ||
3293 !tb[BRCM_VENDOR_ATTR_ACS_SECONDARY_FREQ])
3294 return;
3295
3296 os_memset(&event, 0, sizeof(event));
3297 if (tb[BRCM_VENDOR_ATTR_ACS_PRIMARY_FREQ])
3298 event.acs_selected_channels.pri_freq =
3299 nla_get_u32(tb[BRCM_VENDOR_ATTR_ACS_PRIMARY_FREQ]);
3300 if (tb[BRCM_VENDOR_ATTR_ACS_SECONDARY_FREQ])
3301 event.acs_selected_channels.sec_freq =
3302 nla_get_u32(tb[BRCM_VENDOR_ATTR_ACS_SECONDARY_FREQ]);
3303 if (tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL])
3304 event.acs_selected_channels.vht_seg0_center_ch =
3305 nla_get_u8(tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL]);
3306 if (tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG0_CENTER_CHANNEL])
3307 event.acs_selected_channels.vht_seg1_center_ch =
3308 nla_get_u8(tb[BRCM_VENDOR_ATTR_ACS_VHT_SEG1_CENTER_CHANNEL]);
3309 if (tb[BRCM_VENDOR_ATTR_ACS_CHWIDTH])
3310 event.acs_selected_channels.ch_width =
3311 nla_get_u16(tb[BRCM_VENDOR_ATTR_ACS_CHWIDTH]);
3312 if (tb[BRCM_VENDOR_ATTR_ACS_HW_MODE]) {
3313 event.acs_selected_channels.hw_mode = nla_get_u8(tb[BRCM_VENDOR_ATTR_ACS_HW_MODE]);
3314 if (event.acs_selected_channels.hw_mode == NUM_HOSTAPD_MODES ||
3315 event.acs_selected_channels.hw_mode ==
3316 HOSTAPD_MODE_IEEE80211ANY) {
3317 wpa_printf(MSG_DEBUG,
3318 "nl80211: Invalid hw_mode %d in ACS selection event",
3319 event.acs_selected_channels.hw_mode);
3320 return;
3321 }
3322 }
3323
3324 wpa_printf(MSG_DEBUG,
3325 "nl80211: ACS Results: PCH: %d SCH: %d BW: %d VHT0: %d VHT1: %d HW_MODE: %d",
3326 event.acs_selected_channels.pri_freq,
3327 event.acs_selected_channels.sec_freq,
3328 event.acs_selected_channels.ch_width,
3329 event.acs_selected_channels.vht_seg0_center_ch,
3330 event.acs_selected_channels.vht_seg1_center_ch,
3331 event.acs_selected_channels.hw_mode);
3332 wpa_supplicant_event(drv->ctx, EVENT_ACS_CHANNEL_SELECTED, &event);
3333 }
3334
3335
nl80211_vendor_event_brcm(struct wpa_driver_nl80211_data * drv,u32 subcmd,u8 * data,size_t len)3336 static void nl80211_vendor_event_brcm(struct wpa_driver_nl80211_data *drv,
3337 u32 subcmd, u8 *data, size_t len)
3338 {
3339 wpa_printf(MSG_DEBUG, "nl80211: Got BRCM vendor event %u", subcmd);
3340 switch (subcmd) {
3341 case BRCM_VENDOR_EVENT_PRIV_STR:
3342 case BRCM_VENDOR_EVENT_HANGED:
3343 /* Dump the event on to the console */
3344 wpa_msg(NULL, MSG_INFO, "%s", data);
3345 break;
3346 case BRCM_VENDOR_EVENT_ACS:
3347 brcm_nl80211_acs_select_ch(drv, data, len);
3348 break;
3349 default:
3350 wpa_printf(MSG_DEBUG,
3351 "%s: Ignore unsupported BRCM vendor event %u",
3352 __func__, subcmd);
3353 break;
3354 }
3355 }
3356
3357 #endif /* CONFIG_DRIVER_NL80211_BRCM || CONFIG_DRIVER_NL80211_SYNA */
3358
3359
nl80211_vendor_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3360 static void nl80211_vendor_event(struct wpa_driver_nl80211_data *drv,
3361 struct nlattr **tb)
3362 {
3363 u32 vendor_id, subcmd, wiphy = 0;
3364 int wiphy_idx;
3365 u8 *data = NULL;
3366 size_t len = 0;
3367
3368 if (!tb[NL80211_ATTR_VENDOR_ID] ||
3369 !tb[NL80211_ATTR_VENDOR_SUBCMD])
3370 return;
3371
3372 vendor_id = nla_get_u32(tb[NL80211_ATTR_VENDOR_ID]);
3373 subcmd = nla_get_u32(tb[NL80211_ATTR_VENDOR_SUBCMD]);
3374
3375 if (tb[NL80211_ATTR_WIPHY])
3376 wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
3377
3378 wpa_printf(MSG_DEBUG, "nl80211: Vendor event: wiphy=%u vendor_id=0x%x subcmd=%u",
3379 wiphy, vendor_id, subcmd);
3380
3381 if (tb[NL80211_ATTR_VENDOR_DATA]) {
3382 data = nla_data(tb[NL80211_ATTR_VENDOR_DATA]);
3383 len = nla_len(tb[NL80211_ATTR_VENDOR_DATA]);
3384 wpa_hexdump(MSG_MSGDUMP, "nl80211: Vendor data", data, len);
3385 }
3386
3387 wiphy_idx = nl80211_get_wiphy_index(drv->first_bss);
3388 if (wiphy_idx >= 0 && wiphy_idx != (int) wiphy) {
3389 wpa_printf(MSG_DEBUG, "nl80211: Ignore vendor event for foreign wiphy %u (own: %d)",
3390 wiphy, wiphy_idx);
3391 return;
3392 }
3393
3394 #ifdef ANDROID
3395 #ifdef ANDROID_LIB_EVENT
3396 /* Postpone QCA roam+auth event indication to the point when both that
3397 * and the NL80211_CMD_ROAM event have been received (see calls to
3398 * qca_nl80211_key_mgmt_auth() and drv->pending_roam_data). */
3399 if (!(vendor_id == OUI_QCA &&
3400 subcmd == QCA_NL80211_VENDOR_SUBCMD_KEY_MGMT_ROAM_AUTH))
3401 wpa_driver_nl80211_driver_event(drv, vendor_id, subcmd, data,
3402 len);
3403 #endif /* ANDROID_LIB_EVENT */
3404 #endif /* ANDROID */
3405
3406 switch (vendor_id) {
3407 case OUI_QCA:
3408 nl80211_vendor_event_qca(drv, subcmd, data, len);
3409 break;
3410 #if defined(CONFIG_DRIVER_NL80211_BRCM) || defined(CONFIG_DRIVER_NL80211_SYNA)
3411 case OUI_BRCM:
3412 nl80211_vendor_event_brcm(drv, subcmd, data, len);
3413 break;
3414 #endif /* CONFIG_DRIVER_NL80211_BRCM || CONFIG_DRIVER_NL80211_SYNA */
3415 default:
3416 wpa_printf(MSG_DEBUG, "nl80211: Ignore unsupported vendor event");
3417 break;
3418 }
3419 }
3420
3421
nl80211_reg_change_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])3422 static void nl80211_reg_change_event(struct wpa_driver_nl80211_data *drv,
3423 struct nlattr *tb[])
3424 {
3425 union wpa_event_data data;
3426 enum nl80211_reg_initiator init;
3427
3428 wpa_printf(MSG_DEBUG, "nl80211: Regulatory domain change");
3429
3430 if (tb[NL80211_ATTR_REG_INITIATOR] == NULL)
3431 return;
3432
3433 os_memset(&data, 0, sizeof(data));
3434 init = nla_get_u8(tb[NL80211_ATTR_REG_INITIATOR]);
3435 wpa_printf(MSG_DEBUG, " * initiator=%d", init);
3436 switch (init) {
3437 case NL80211_REGDOM_SET_BY_CORE:
3438 data.channel_list_changed.initiator = REGDOM_SET_BY_CORE;
3439 break;
3440 case NL80211_REGDOM_SET_BY_USER:
3441 data.channel_list_changed.initiator = REGDOM_SET_BY_USER;
3442 break;
3443 case NL80211_REGDOM_SET_BY_DRIVER:
3444 data.channel_list_changed.initiator = REGDOM_SET_BY_DRIVER;
3445 break;
3446 case NL80211_REGDOM_SET_BY_COUNTRY_IE:
3447 data.channel_list_changed.initiator = REGDOM_SET_BY_COUNTRY_IE;
3448 break;
3449 }
3450
3451 if (tb[NL80211_ATTR_REG_TYPE]) {
3452 enum nl80211_reg_type type;
3453 type = nla_get_u8(tb[NL80211_ATTR_REG_TYPE]);
3454 wpa_printf(MSG_DEBUG, " * type=%d", type);
3455 switch (type) {
3456 case NL80211_REGDOM_TYPE_COUNTRY:
3457 data.channel_list_changed.type = REGDOM_TYPE_COUNTRY;
3458 break;
3459 case NL80211_REGDOM_TYPE_WORLD:
3460 data.channel_list_changed.type = REGDOM_TYPE_WORLD;
3461 break;
3462 case NL80211_REGDOM_TYPE_CUSTOM_WORLD:
3463 data.channel_list_changed.type =
3464 REGDOM_TYPE_CUSTOM_WORLD;
3465 break;
3466 case NL80211_REGDOM_TYPE_INTERSECTION:
3467 data.channel_list_changed.type =
3468 REGDOM_TYPE_INTERSECTION;
3469 break;
3470 }
3471 }
3472
3473 if (tb[NL80211_ATTR_REG_ALPHA2]) {
3474 os_strlcpy(data.channel_list_changed.alpha2,
3475 nla_get_string(tb[NL80211_ATTR_REG_ALPHA2]),
3476 sizeof(data.channel_list_changed.alpha2));
3477 wpa_printf(MSG_DEBUG, " * alpha2=%s",
3478 data.channel_list_changed.alpha2);
3479 }
3480
3481 wpa_supplicant_event(drv->ctx, EVENT_CHANNEL_LIST_CHANGED, &data);
3482 }
3483
3484
nl80211_parse_freq_attrs(const char * title,struct nlattr * nl_freq,struct frequency_attrs * attrs)3485 static void nl80211_parse_freq_attrs(const char *title, struct nlattr *nl_freq,
3486 struct frequency_attrs *attrs)
3487 {
3488 static struct nla_policy freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1] = {
3489 [NL80211_FREQUENCY_ATTR_FREQ] = { .type = NLA_U32 },
3490 [NL80211_FREQUENCY_ATTR_DISABLED] = { .type = NLA_FLAG },
3491 [NL80211_FREQUENCY_ATTR_NO_IR] = { .type = NLA_FLAG },
3492 [NL80211_FREQUENCY_ATTR_RADAR] = { .type = NLA_FLAG },
3493 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER] = { .type = NLA_U32 },
3494 };
3495 struct nlattr *tb[NL80211_FREQUENCY_ATTR_MAX + 1];
3496 u32 freq = 0, max_tx_power = 0;
3497
3498 nla_parse(tb, NL80211_FREQUENCY_ATTR_MAX,
3499 nla_data(nl_freq), nla_len(nl_freq), freq_policy);
3500
3501 if (tb[NL80211_FREQUENCY_ATTR_FREQ])
3502 freq = nla_get_u32(tb[NL80211_FREQUENCY_ATTR_FREQ]);
3503 if (tb[NL80211_FREQUENCY_ATTR_MAX_TX_POWER])
3504 max_tx_power =
3505 nla_get_u32(tb[NL80211_FREQUENCY_ATTR_MAX_TX_POWER]);
3506
3507 wpa_printf(MSG_DEBUG,
3508 "nl80211: Channel (%s): freq=%u max_tx_power=%u%s%s%s",
3509 title, freq, max_tx_power,
3510 tb[NL80211_FREQUENCY_ATTR_DISABLED] ? " disabled" : "",
3511 tb[NL80211_FREQUENCY_ATTR_NO_IR] ? " no-IR" : "",
3512 tb[NL80211_FREQUENCY_ATTR_RADAR] ? " radar" : "");
3513
3514 attrs->freq = freq;
3515 attrs->max_tx_power = max_tx_power;
3516 if (tb[NL80211_FREQUENCY_ATTR_DISABLED])
3517 attrs->disabled = true;
3518 if (tb[NL80211_FREQUENCY_ATTR_NO_IR])
3519 attrs->no_ir = true;
3520 if (tb[NL80211_FREQUENCY_ATTR_RADAR])
3521 attrs->radar = true;
3522 }
3523
3524
nl80211_reg_beacon_hint_event(struct wpa_driver_nl80211_data * drv,struct nlattr * tb[])3525 static void nl80211_reg_beacon_hint_event(struct wpa_driver_nl80211_data *drv,
3526 struct nlattr *tb[])
3527 {
3528 union wpa_event_data data;
3529
3530 wpa_printf(MSG_DEBUG, "nl80211: Regulatory beacon hint");
3531 os_memset(&data, 0, sizeof(data));
3532 data.channel_list_changed.initiator = REGDOM_BEACON_HINT;
3533
3534 if (tb[NL80211_ATTR_FREQ_BEFORE])
3535 nl80211_parse_freq_attrs(
3536 "before", tb[NL80211_ATTR_FREQ_BEFORE],
3537 &data.channel_list_changed.beacon_hint_before);
3538 if (tb[NL80211_ATTR_FREQ_AFTER])
3539 nl80211_parse_freq_attrs(
3540 "after", tb[NL80211_ATTR_FREQ_AFTER],
3541 &data.channel_list_changed.beacon_hint_after);
3542
3543 wpa_supplicant_event(drv->ctx, EVENT_CHANNEL_LIST_CHANGED, &data);
3544 }
3545
3546
nl80211_external_auth(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3547 static void nl80211_external_auth(struct wpa_driver_nl80211_data *drv,
3548 struct nlattr **tb)
3549 {
3550 union wpa_event_data event;
3551 enum nl80211_external_auth_action act;
3552 char mld_addr[50];
3553
3554 if (!tb[NL80211_ATTR_AKM_SUITES] ||
3555 !tb[NL80211_ATTR_EXTERNAL_AUTH_ACTION] ||
3556 !tb[NL80211_ATTR_BSSID] ||
3557 !tb[NL80211_ATTR_SSID])
3558 return;
3559
3560 os_memset(&event, 0, sizeof(event));
3561 act = nla_get_u32(tb[NL80211_ATTR_EXTERNAL_AUTH_ACTION]);
3562 switch (act) {
3563 case NL80211_EXTERNAL_AUTH_START:
3564 event.external_auth.action = EXT_AUTH_START;
3565 break;
3566 case NL80211_EXTERNAL_AUTH_ABORT:
3567 event.external_auth.action = EXT_AUTH_ABORT;
3568 break;
3569 default:
3570 return;
3571 }
3572
3573 event.external_auth.key_mgmt_suite =
3574 nla_get_u32(tb[NL80211_ATTR_AKM_SUITES]);
3575
3576 event.external_auth.ssid_len = nla_len(tb[NL80211_ATTR_SSID]);
3577 if (event.external_auth.ssid_len > SSID_MAX_LEN)
3578 return;
3579 event.external_auth.ssid = nla_data(tb[NL80211_ATTR_SSID]);
3580
3581 event.external_auth.bssid = nla_data(tb[NL80211_ATTR_BSSID]);
3582
3583 mld_addr[0] = '\0';
3584 if (tb[NL80211_ATTR_MLD_ADDR]) {
3585 event.external_auth.mld_addr =
3586 nla_data(tb[NL80211_ATTR_MLD_ADDR]);
3587 os_snprintf(mld_addr, sizeof(mld_addr), ", MLD ADDR: " MACSTR,
3588 MAC2STR(event.external_auth.mld_addr));
3589 }
3590
3591 wpa_printf(MSG_DEBUG,
3592 "nl80211: External auth action: %u, AKM: 0x%x, SSID: %s, BSSID: " MACSTR "%s",
3593 event.external_auth.action,
3594 event.external_auth.key_mgmt_suite,
3595 wpa_ssid_txt(event.external_auth.ssid,
3596 event.external_auth.ssid_len),
3597 MAC2STR(event.external_auth.bssid), mld_addr);
3598 wpa_supplicant_event(drv->ctx, EVENT_EXTERNAL_AUTH, &event);
3599 }
3600
3601
nl80211_port_authorized(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3602 static void nl80211_port_authorized(struct wpa_driver_nl80211_data *drv,
3603 struct nlattr **tb)
3604 {
3605 const u8 *addr;
3606 union wpa_event_data event;
3607
3608 os_memset(&event, 0, sizeof(event));
3609
3610 if (!tb[NL80211_ATTR_MAC] ||
3611 nla_len(tb[NL80211_ATTR_MAC]) != ETH_ALEN) {
3612 wpa_printf(MSG_DEBUG,
3613 "nl80211: Ignore port authorized event without BSSID");
3614 return;
3615 }
3616
3617 addr = nla_data(tb[NL80211_ATTR_MAC]);
3618 if (is_ap_interface(drv->nlmode) && drv->device_ap_sme) {
3619 event.port_authorized.sta_addr = addr;
3620 wpa_printf(MSG_DEBUG,
3621 "nl80211: Port authorized for STA addr " MACSTR,
3622 MAC2STR(addr));
3623 } else if (is_sta_interface(drv->nlmode)) {
3624 const u8 *connected_addr;
3625
3626 connected_addr = drv->sta_mlo_info.valid_links ?
3627 drv->sta_mlo_info.ap_mld_addr : drv->bssid;
3628 if (!ether_addr_equal(addr, connected_addr)) {
3629 wpa_printf(MSG_DEBUG,
3630 "nl80211: Ignore port authorized event for "
3631 MACSTR " (not the currently connected BSSID "
3632 MACSTR ")",
3633 MAC2STR(addr), MAC2STR(connected_addr));
3634 return;
3635 }
3636 }
3637
3638 if (tb[NL80211_ATTR_TD_BITMAP]) {
3639 event.port_authorized.td_bitmap_len =
3640 nla_len(tb[NL80211_ATTR_TD_BITMAP]);
3641 if (event.port_authorized.td_bitmap_len > 0)
3642 event.port_authorized.td_bitmap =
3643 nla_data(tb[NL80211_ATTR_TD_BITMAP]);
3644 }
3645
3646 wpa_supplicant_event(drv->ctx, EVENT_PORT_AUTHORIZED, &event);
3647 }
3648
3649
nl80211_sta_opmode_change_event(struct wpa_driver_nl80211_data * drv,struct nlattr ** tb)3650 static void nl80211_sta_opmode_change_event(struct wpa_driver_nl80211_data *drv,
3651 struct nlattr **tb)
3652 {
3653 union wpa_event_data ed;
3654 u8 smps_mode, max_bw;
3655
3656 if (!tb[NL80211_ATTR_MAC] ||
3657 (!tb[NL80211_ATTR_CHANNEL_WIDTH] &&
3658 !tb[NL80211_ATTR_SMPS_MODE] &&
3659 !tb[NL80211_ATTR_NSS]))
3660 return;
3661
3662 ed.sta_opmode.smps_mode = SMPS_INVALID;
3663 ed.sta_opmode.chan_width = CHAN_WIDTH_UNKNOWN;
3664 ed.sta_opmode.rx_nss = 0xff;
3665 ed.sta_opmode.addr = nla_data(tb[NL80211_ATTR_MAC]);
3666
3667 if (tb[NL80211_ATTR_SMPS_MODE]) {
3668 smps_mode = nla_get_u8(tb[NL80211_ATTR_SMPS_MODE]);
3669 switch (smps_mode) {
3670 case NL80211_SMPS_OFF:
3671 ed.sta_opmode.smps_mode = SMPS_OFF;
3672 break;
3673 case NL80211_SMPS_STATIC:
3674 ed.sta_opmode.smps_mode = SMPS_STATIC;
3675 break;
3676 case NL80211_SMPS_DYNAMIC:
3677 ed.sta_opmode.smps_mode = SMPS_DYNAMIC;
3678 break;
3679 default:
3680 ed.sta_opmode.smps_mode = SMPS_INVALID;
3681 break;
3682 }
3683 }
3684
3685 if (tb[NL80211_ATTR_CHANNEL_WIDTH]) {
3686 max_bw = nla_get_u32(tb[NL80211_ATTR_CHANNEL_WIDTH]);
3687 switch (max_bw) {
3688 case NL80211_CHAN_WIDTH_20_NOHT:
3689 ed.sta_opmode.chan_width = CHAN_WIDTH_20_NOHT;
3690 break;
3691 case NL80211_CHAN_WIDTH_20:
3692 ed.sta_opmode.chan_width = CHAN_WIDTH_20;
3693 break;
3694 case NL80211_CHAN_WIDTH_40:
3695 ed.sta_opmode.chan_width = CHAN_WIDTH_40;
3696 break;
3697 case NL80211_CHAN_WIDTH_80:
3698 ed.sta_opmode.chan_width = CHAN_WIDTH_80;
3699 break;
3700 case NL80211_CHAN_WIDTH_80P80:
3701 ed.sta_opmode.chan_width = CHAN_WIDTH_80P80;
3702 break;
3703 case NL80211_CHAN_WIDTH_160:
3704 ed.sta_opmode.chan_width = CHAN_WIDTH_160;
3705 break;
3706 case NL80211_CHAN_WIDTH_320:
3707 ed.sta_opmode.chan_width = CHAN_WIDTH_320;
3708 break;
3709 default:
3710 ed.sta_opmode.chan_width = CHAN_WIDTH_UNKNOWN;
3711 break;
3712
3713 }
3714 }
3715
3716 if (tb[NL80211_ATTR_NSS])
3717 ed.sta_opmode.rx_nss = nla_get_u8(tb[NL80211_ATTR_NSS]);
3718
3719 wpa_supplicant_event(drv->ctx, EVENT_STATION_OPMODE_CHANGED, &ed);
3720 }
3721
3722
nl80211_control_port_frame(struct i802_bss * bss,struct nlattr ** tb)3723 static void nl80211_control_port_frame(struct i802_bss *bss, struct nlattr **tb)
3724 {
3725 u8 *src_addr;
3726 u16 ethertype;
3727 enum frame_encryption encrypted;
3728 int link_id;
3729
3730 if (!tb[NL80211_ATTR_MAC] ||
3731 !tb[NL80211_ATTR_FRAME] ||
3732 !tb[NL80211_ATTR_CONTROL_PORT_ETHERTYPE])
3733 return;
3734
3735 src_addr = nla_data(tb[NL80211_ATTR_MAC]);
3736 ethertype = nla_get_u16(tb[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
3737 encrypted = nla_get_flag(tb[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]) ?
3738 FRAME_NOT_ENCRYPTED : FRAME_ENCRYPTED;
3739
3740 if (tb[NL80211_ATTR_MLO_LINK_ID])
3741 link_id = nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
3742 else
3743 link_id = -1;
3744
3745 switch (ethertype) {
3746 case ETH_P_RSN_PREAUTH:
3747 wpa_printf(MSG_INFO, "nl80211: Got pre-auth frame from "
3748 MACSTR " over control port unexpectedly",
3749 MAC2STR(src_addr));
3750 break;
3751 case ETH_P_PAE:
3752 drv_event_eapol_rx2(bss->ctx, src_addr,
3753 nla_data(tb[NL80211_ATTR_FRAME]),
3754 nla_len(tb[NL80211_ATTR_FRAME]),
3755 encrypted, link_id);
3756 break;
3757 default:
3758 wpa_printf(MSG_INFO,
3759 "nl80211: Unexpected ethertype 0x%04x from "
3760 MACSTR " over control port",
3761 ethertype, MAC2STR(src_addr));
3762 break;
3763 }
3764 }
3765
3766
3767 static void
nl80211_control_port_frame_tx_status(struct i802_bss * bss,const u8 * frame,size_t len,struct nlattr * ack,struct nlattr * cookie)3768 nl80211_control_port_frame_tx_status(struct i802_bss *bss,
3769 const u8 *frame, size_t len,
3770 struct nlattr *ack, struct nlattr *cookie)
3771 {
3772 struct wpa_driver_nl80211_data *drv = bss->drv;
3773 union wpa_event_data event;
3774
3775 if (!cookie || len < ETH_HLEN)
3776 return;
3777
3778 wpa_printf(MSG_DEBUG,
3779 "nl80211: Control port TX status (ack=%d), cookie=%llu",
3780 ack != NULL, (long long unsigned int) nla_get_u64(cookie));
3781
3782 os_memset(&event, 0, sizeof(event));
3783 event.eapol_tx_status.dst = frame;
3784 event.eapol_tx_status.data = frame + ETH_HLEN;
3785 event.eapol_tx_status.data_len = len - ETH_HLEN;
3786 event.eapol_tx_status.ack = ack != NULL;
3787 event.eapol_tx_status.link_id =
3788 nla_get_u64(cookie) == drv->eapol_tx_cookie ?
3789 drv->eapol_tx_link_id : NL80211_DRV_LINK_ID_NA;
3790
3791 wpa_supplicant_event(bss->ctx, EVENT_EAPOL_TX_STATUS, &event);
3792 }
3793
3794
nl80211_frame_wait_cancel(struct wpa_driver_nl80211_data * drv,struct nlattr * cookie_attr)3795 static void nl80211_frame_wait_cancel(struct wpa_driver_nl80211_data *drv,
3796 struct nlattr *cookie_attr)
3797 {
3798 unsigned int i;
3799 u64 cookie;
3800 bool match = false;
3801
3802 if (!cookie_attr)
3803 return;
3804 cookie = nla_get_u64(cookie_attr);
3805
3806 for (i = 0; i < drv->num_send_frame_cookies; i++) {
3807 if (cookie == drv->send_frame_cookies[i]) {
3808 match = true;
3809 break;
3810 }
3811 }
3812 wpa_printf(MSG_DEBUG,
3813 "nl80211: TX frame wait expired for cookie 0x%llx%s%s",
3814 (long long unsigned int) cookie,
3815 match ? " (match)" : "",
3816 drv->send_frame_cookie == cookie ? " (match-saved)" : "");
3817 if (drv->send_frame_cookie == cookie) {
3818 drv->send_frame_cookie = (u64) -1;
3819 if (!match)
3820 goto send_event;
3821 }
3822 if (!match)
3823 return;
3824
3825 if (i < drv->num_send_frame_cookies - 1)
3826 os_memmove(&drv->send_frame_cookies[i],
3827 &drv->send_frame_cookies[i + 1],
3828 (drv->num_send_frame_cookies - i - 1) * sizeof(u64));
3829 drv->num_send_frame_cookies--;
3830
3831 send_event:
3832 wpa_supplicant_event(drv->ctx, EVENT_TX_WAIT_EXPIRE, NULL);
3833 }
3834
3835
nl80211_assoc_comeback(struct wpa_driver_nl80211_data * drv,struct nlattr * mac,struct nlattr * timeout)3836 static void nl80211_assoc_comeback(struct wpa_driver_nl80211_data *drv,
3837 struct nlattr *mac, struct nlattr *timeout)
3838 {
3839 if (!mac || !timeout)
3840 return;
3841 wpa_printf(MSG_DEBUG, "nl80211: Association comeback requested by "
3842 MACSTR " (timeout: %u ms)",
3843 MAC2STR((u8 *) nla_data(mac)), nla_get_u32(timeout));
3844 }
3845
3846
3847 #ifdef CONFIG_IEEE80211AX
3848
nl80211_obss_color_event(struct i802_bss * bss,enum nl80211_commands cmd,struct nlattr * tb[])3849 static void nl80211_obss_color_event(struct i802_bss *bss,
3850 enum nl80211_commands cmd,
3851 struct nlattr *tb[])
3852 {
3853 union wpa_event_data data;
3854 enum wpa_event_type event_type;
3855
3856 os_memset(&data, 0, sizeof(data));
3857 data.bss_color_collision.link_id = NL80211_DRV_LINK_ID_NA;
3858
3859 switch (cmd) {
3860 case NL80211_CMD_OBSS_COLOR_COLLISION:
3861 event_type = EVENT_BSS_COLOR_COLLISION;
3862 if (!tb[NL80211_ATTR_OBSS_COLOR_BITMAP])
3863 return;
3864 data.bss_color_collision.bitmap =
3865 nla_get_u64(tb[NL80211_ATTR_OBSS_COLOR_BITMAP]);
3866 wpa_printf(MSG_DEBUG,
3867 "nl80211: BSS color collision - bitmap %08llx",
3868 (long long unsigned int)
3869 data.bss_color_collision.bitmap);
3870 break;
3871 case NL80211_CMD_COLOR_CHANGE_STARTED:
3872 event_type = EVENT_CCA_STARTED_NOTIFY;
3873 wpa_printf(MSG_DEBUG, "nl80211: CCA started");
3874 break;
3875 case NL80211_CMD_COLOR_CHANGE_ABORTED:
3876 event_type = EVENT_CCA_ABORTED_NOTIFY;
3877 wpa_printf(MSG_DEBUG, "nl80211: CCA aborted");
3878 break;
3879 case NL80211_CMD_COLOR_CHANGE_COMPLETED:
3880 event_type = EVENT_CCA_NOTIFY;
3881 wpa_printf(MSG_DEBUG, "nl80211: CCA completed");
3882 break;
3883 default:
3884 wpa_printf(MSG_DEBUG, "nl80211: Unknown CCA command %d", cmd);
3885 return;
3886 }
3887
3888 if (tb[NL80211_ATTR_MLO_LINK_ID]) {
3889 data.bss_color_collision.link_id =
3890 nla_get_u8(tb[NL80211_ATTR_MLO_LINK_ID]);
3891
3892 if (!nl80211_link_valid(bss->valid_links,
3893 data.bss_color_collision.link_id)) {
3894 wpa_printf(MSG_DEBUG,
3895 "nl80211: Invalid BSS color event link ID %d",
3896 data.bss_color_collision.link_id);
3897 return;
3898 }
3899
3900 wpa_printf(MSG_DEBUG, "nl80211: BSS color event - Link ID %d",
3901 data.bss_color_collision.link_id);
3902 }
3903
3904 wpa_supplicant_event(bss->ctx, event_type, &data);
3905 }
3906
3907 #endif /* CONFIG_IEEE80211AX */
3908
3909
do_process_drv_event(struct i802_bss * bss,int cmd,struct nlattr ** tb)3910 static void do_process_drv_event(struct i802_bss *bss, int cmd,
3911 struct nlattr **tb)
3912 {
3913 struct wpa_driver_nl80211_data *drv = bss->drv;
3914 int external_scan_event = 0;
3915 struct nlattr *frame = tb[NL80211_ATTR_FRAME];
3916
3917 wpa_printf(MSG_DEBUG, "nl80211: Drv Event %d (%s) received for %s",
3918 cmd, nl80211_command_to_string(cmd), bss->ifname);
3919
3920 #ifdef CONFIG_DRIVER_NL80211_QCA
3921 if (cmd == NL80211_CMD_ROAM &&
3922 (drv->capa.flags & WPA_DRIVER_FLAGS_KEY_MGMT_OFFLOAD)) {
3923 if (drv->pending_roam_data) {
3924 wpa_printf(MSG_DEBUG,
3925 "nl80211: Process pending roam+auth vendor event");
3926 qca_nl80211_key_mgmt_auth(drv, drv->pending_roam_data,
3927 drv->pending_roam_data_len);
3928 os_free(drv->pending_roam_data);
3929 drv->pending_roam_data = NULL;
3930 return;
3931 }
3932 /*
3933 * Device will use roam+auth vendor event to indicate
3934 * roaming, so ignore the regular roam event.
3935 */
3936 drv->roam_indication_done = true;
3937 wpa_printf(MSG_DEBUG,
3938 "nl80211: Ignore roam event (cmd=%d), device will use vendor event roam+auth",
3939 cmd);
3940 return;
3941 }
3942 #endif /* CONFIG_DRIVER_NL80211_QCA */
3943
3944 if (drv->ap_scan_as_station != NL80211_IFTYPE_UNSPECIFIED &&
3945 (cmd == NL80211_CMD_NEW_SCAN_RESULTS ||
3946 cmd == NL80211_CMD_SCAN_ABORTED))
3947 nl80211_restore_ap_mode(bss);
3948
3949 switch (cmd) {
3950 case NL80211_CMD_TRIGGER_SCAN:
3951 wpa_dbg(bss->ctx, MSG_DEBUG, "nl80211: Scan trigger");
3952 drv->scan_state = SCAN_STARTED;
3953 if (drv->scan_for_auth) {
3954 /*
3955 * Cannot indicate EVENT_SCAN_STARTED here since we skip
3956 * EVENT_SCAN_RESULTS in scan_for_auth case and the
3957 * upper layer implementation could get confused about
3958 * scanning state.
3959 */
3960 wpa_printf(MSG_DEBUG, "nl80211: Do not indicate scan-start event due to internal scan_for_auth");
3961 break;
3962 }
3963 wpa_supplicant_event(bss->ctx, EVENT_SCAN_STARTED, NULL);
3964 break;
3965 case NL80211_CMD_START_SCHED_SCAN:
3966 wpa_dbg(bss->ctx, MSG_DEBUG, "nl80211: Sched scan started");
3967 drv->scan_state = SCHED_SCAN_STARTED;
3968 break;
3969 case NL80211_CMD_SCHED_SCAN_STOPPED:
3970 wpa_dbg(bss->ctx, MSG_DEBUG, "nl80211: Sched scan stopped");
3971 drv->scan_state = SCHED_SCAN_STOPPED;
3972 wpa_supplicant_event(bss->ctx, EVENT_SCHED_SCAN_STOPPED, NULL);
3973 break;
3974 case NL80211_CMD_NEW_SCAN_RESULTS:
3975 wpa_dbg(bss->ctx, MSG_DEBUG,
3976 "nl80211: New scan results available");
3977 if (drv->last_scan_cmd != NL80211_CMD_VENDOR)
3978 drv->scan_state = SCAN_COMPLETED;
3979 drv->scan_complete_events = 1;
3980 if (drv->last_scan_cmd == NL80211_CMD_TRIGGER_SCAN) {
3981 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout,
3982 drv, bss->ctx);
3983 drv->last_scan_cmd = 0;
3984 } else {
3985 external_scan_event = 1;
3986 }
3987 send_scan_event(bss, 0, tb, external_scan_event);
3988 break;
3989 case NL80211_CMD_SCHED_SCAN_RESULTS:
3990 wpa_dbg(bss->ctx, MSG_DEBUG,
3991 "nl80211: New sched scan results available");
3992 drv->scan_state = SCHED_SCAN_RESULTS;
3993 send_scan_event(bss, 0, tb, 0);
3994 break;
3995 case NL80211_CMD_SCAN_ABORTED:
3996 wpa_dbg(bss->ctx, MSG_DEBUG, "nl80211: Scan aborted");
3997 if (drv->last_scan_cmd != NL80211_CMD_VENDOR)
3998 drv->scan_state = SCAN_ABORTED;
3999 if (drv->last_scan_cmd == NL80211_CMD_TRIGGER_SCAN) {
4000 /*
4001 * Need to indicate that scan results are available in
4002 * order not to make wpa_supplicant stop its scanning.
4003 */
4004 eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout,
4005 drv, bss->ctx);
4006 drv->last_scan_cmd = 0;
4007 } else {
4008 external_scan_event = 1;
4009 }
4010 send_scan_event(bss, 1, tb, external_scan_event);
4011 break;
4012 case NL80211_CMD_AUTHENTICATE:
4013 case NL80211_CMD_ASSOCIATE:
4014 case NL80211_CMD_DEAUTHENTICATE:
4015 case NL80211_CMD_DISASSOCIATE:
4016 case NL80211_CMD_FRAME:
4017 case NL80211_CMD_FRAME_TX_STATUS:
4018 case NL80211_CMD_UNPROT_DEAUTHENTICATE:
4019 case NL80211_CMD_UNPROT_DISASSOCIATE:
4020 mlme_event(bss, cmd, tb[NL80211_ATTR_FRAME],
4021 tb[NL80211_ATTR_MAC], tb[NL80211_ATTR_TIMED_OUT],
4022 tb[NL80211_ATTR_WIPHY_FREQ], tb[NL80211_ATTR_ACK],
4023 tb[NL80211_ATTR_COOKIE],
4024 tb[NL80211_ATTR_RX_SIGNAL_DBM],
4025 tb[NL80211_ATTR_STA_WME],
4026 tb[NL80211_ATTR_REQ_IE],
4027 tb[NL80211_ATTR_MLO_LINK_ID]);
4028 break;
4029 case NL80211_CMD_CONNECT:
4030 case NL80211_CMD_ROAM:
4031 mlme_event_connect(drv, cmd, false,
4032 tb[NL80211_ATTR_STATUS_CODE],
4033 tb[NL80211_ATTR_MAC],
4034 tb[NL80211_ATTR_REQ_IE],
4035 tb[NL80211_ATTR_RESP_IE],
4036 tb[NL80211_ATTR_TIMED_OUT],
4037 tb[NL80211_ATTR_TIMEOUT_REASON],
4038 NULL, NULL, NULL,
4039 tb[NL80211_ATTR_FILS_KEK],
4040 NULL,
4041 tb[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM],
4042 tb[NL80211_ATTR_PMK],
4043 tb[NL80211_ATTR_PMKID],
4044 tb[NL80211_ATTR_MLO_LINKS]);
4045 break;
4046 case NL80211_CMD_CH_SWITCH_STARTED_NOTIFY:
4047 mlme_event_ch_switch(drv,
4048 tb[NL80211_ATTR_IFINDEX],
4049 tb[NL80211_ATTR_MLO_LINK_ID],
4050 tb[NL80211_ATTR_WIPHY_FREQ],
4051 tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
4052 tb[NL80211_ATTR_CHANNEL_WIDTH],
4053 tb[NL80211_ATTR_CENTER_FREQ1],
4054 tb[NL80211_ATTR_CENTER_FREQ2],
4055 tb[NL80211_ATTR_PUNCT_BITMAP],
4056 0);
4057 break;
4058 case NL80211_CMD_CH_SWITCH_NOTIFY:
4059 mlme_event_ch_switch(drv,
4060 tb[NL80211_ATTR_IFINDEX],
4061 tb[NL80211_ATTR_MLO_LINK_ID],
4062 tb[NL80211_ATTR_WIPHY_FREQ],
4063 tb[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
4064 tb[NL80211_ATTR_CHANNEL_WIDTH],
4065 tb[NL80211_ATTR_CENTER_FREQ1],
4066 tb[NL80211_ATTR_CENTER_FREQ2],
4067 tb[NL80211_ATTR_PUNCT_BITMAP],
4068 1);
4069 break;
4070 case NL80211_CMD_DISCONNECT:
4071 mlme_event_disconnect(drv, tb[NL80211_ATTR_REASON_CODE],
4072 tb[NL80211_ATTR_MAC],
4073 tb[NL80211_ATTR_DISCONNECTED_BY_AP]);
4074 break;
4075 case NL80211_CMD_MICHAEL_MIC_FAILURE:
4076 mlme_event_michael_mic_failure(bss, tb);
4077 break;
4078 case NL80211_CMD_JOIN_IBSS:
4079 mlme_event_join_ibss(drv, tb);
4080 break;
4081 case NL80211_CMD_REMAIN_ON_CHANNEL:
4082 mlme_event_remain_on_channel(drv, 0, tb);
4083 break;
4084 case NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL:
4085 mlme_event_remain_on_channel(drv, 1, tb);
4086 break;
4087 case NL80211_CMD_NOTIFY_CQM:
4088 nl80211_cqm_event(bss, tb);
4089 break;
4090 case NL80211_CMD_REG_CHANGE:
4091 case NL80211_CMD_WIPHY_REG_CHANGE:
4092 nl80211_reg_change_event(drv, tb);
4093 break;
4094 case NL80211_CMD_REG_BEACON_HINT:
4095 nl80211_reg_beacon_hint_event(drv, tb);
4096 break;
4097 case NL80211_CMD_NEW_STATION:
4098 nl80211_new_station_event(drv, bss, tb);
4099 break;
4100 case NL80211_CMD_DEL_STATION:
4101 nl80211_del_station_event(drv, bss, tb);
4102 break;
4103 case NL80211_CMD_SET_REKEY_OFFLOAD:
4104 nl80211_rekey_offload_event(drv, tb);
4105 break;
4106 case NL80211_CMD_PMKSA_CANDIDATE:
4107 nl80211_pmksa_candidate_event(drv, tb);
4108 break;
4109 case NL80211_CMD_PROBE_CLIENT:
4110 nl80211_client_probe_event(drv, tb);
4111 break;
4112 case NL80211_CMD_TDLS_OPER:
4113 nl80211_tdls_oper_event(drv, tb);
4114 break;
4115 case NL80211_CMD_CONN_FAILED:
4116 nl80211_connect_failed_event(drv, tb);
4117 break;
4118 case NL80211_CMD_FT_EVENT:
4119 mlme_event_ft_event(drv, tb);
4120 break;
4121 case NL80211_CMD_RADAR_DETECT:
4122 nl80211_radar_event(drv, tb);
4123 break;
4124 case NL80211_CMD_STOP_AP:
4125 nl80211_stop_ap(bss, tb);
4126 break;
4127 case NL80211_CMD_VENDOR:
4128 nl80211_vendor_event(drv, tb);
4129 break;
4130 case NL80211_CMD_NEW_PEER_CANDIDATE:
4131 nl80211_new_peer_candidate(drv, tb);
4132 break;
4133 case NL80211_CMD_PORT_AUTHORIZED:
4134 nl80211_port_authorized(drv, tb);
4135 break;
4136 case NL80211_CMD_STA_OPMODE_CHANGED:
4137 nl80211_sta_opmode_change_event(drv, tb);
4138 break;
4139 case NL80211_CMD_UPDATE_OWE_INFO:
4140 mlme_event_dh_event(drv, bss, tb);
4141 break;
4142 case NL80211_CMD_UNPROT_BEACON:
4143 if (frame)
4144 mlme_event_unprot_beacon(drv, nla_data(frame),
4145 nla_len(frame));
4146 break;
4147 case NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS:
4148 if (!frame)
4149 break;
4150 nl80211_control_port_frame_tx_status(bss,
4151 nla_data(frame),
4152 nla_len(frame),
4153 tb[NL80211_ATTR_ACK],
4154 tb[NL80211_ATTR_COOKIE]);
4155 break;
4156 case NL80211_CMD_FRAME_WAIT_CANCEL:
4157 nl80211_frame_wait_cancel(drv, tb[NL80211_ATTR_COOKIE]);
4158 break;
4159 case NL80211_CMD_ASSOC_COMEBACK:
4160 nl80211_assoc_comeback(drv, tb[NL80211_ATTR_MAC],
4161 tb[NL80211_ATTR_TIMEOUT]);
4162 break;
4163 #ifdef CONFIG_IEEE80211AX
4164 case NL80211_CMD_OBSS_COLOR_COLLISION:
4165 case NL80211_CMD_COLOR_CHANGE_STARTED:
4166 case NL80211_CMD_COLOR_CHANGE_ABORTED:
4167 case NL80211_CMD_COLOR_CHANGE_COMPLETED:
4168 nl80211_obss_color_event(bss, cmd, tb);
4169 break;
4170 #endif /* CONFIG_IEEE80211AX */
4171 case NL80211_CMD_LINKS_REMOVED:
4172 wpa_supplicant_event(drv->ctx, EVENT_LINK_RECONFIG, NULL);
4173 break;
4174 default:
4175 wpa_dbg(drv->ctx, MSG_DEBUG, "nl80211: Ignored unknown event "
4176 "(cmd=%d)", cmd);
4177 break;
4178 }
4179 }
4180
4181
nl80211_drv_in_list(struct nl80211_global * global,struct wpa_driver_nl80211_data * drv)4182 static bool nl80211_drv_in_list(struct nl80211_global *global,
4183 struct wpa_driver_nl80211_data *drv)
4184 {
4185 struct wpa_driver_nl80211_data *tmp;
4186
4187 dl_list_for_each(tmp, &global->interfaces,
4188 struct wpa_driver_nl80211_data, list) {
4189 if (drv == tmp)
4190 return true;
4191 }
4192
4193 return false;
4194 }
4195
4196
process_global_event(struct nl_msg * msg,void * arg)4197 int process_global_event(struct nl_msg *msg, void *arg)
4198 {
4199 struct nl80211_global *global = arg;
4200 struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
4201 struct nlattr *tb[NL80211_ATTR_MAX + 1];
4202 struct wpa_driver_nl80211_data *drv, *tmp;
4203 int ifidx = -1, wiphy_idx = -1, wiphy_idx_rx = -1;
4204 struct i802_bss *bss;
4205 u64 wdev_id = 0;
4206 int wdev_id_set = 0;
4207 int wiphy_idx_set = 0;
4208 bool processed = false;
4209
4210 /* Event marker, all prior events have been processed */
4211 if (gnlh->cmd == NL80211_CMD_GET_PROTOCOL_FEATURES) {
4212 u32 seq = nlmsg_hdr(msg)->nlmsg_seq;
4213
4214 dl_list_for_each_safe(drv, tmp, &global->interfaces,
4215 struct wpa_driver_nl80211_data, list) {
4216 if (drv->ignore_next_local_deauth > 0 &&
4217 drv->ignore_next_local_deauth <= seq) {
4218 wpa_printf(MSG_DEBUG,
4219 "nl80211: No DEAUTHENTICATE event was ignored");
4220 drv->ignore_next_local_deauth = 0;
4221 }
4222
4223 if (drv->ignore_next_local_disconnect > 0 &&
4224 drv->ignore_next_local_disconnect <= seq) {
4225 wpa_printf(MSG_DEBUG,
4226 "nl80211: No DISCONNECT event was ignored");
4227 drv->ignore_next_local_disconnect = 0;
4228 }
4229 }
4230
4231 return NL_SKIP;
4232 }
4233
4234 nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
4235 genlmsg_attrlen(gnlh, 0), NULL);
4236
4237 if (tb[NL80211_ATTR_IFINDEX])
4238 ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
4239 else if (tb[NL80211_ATTR_WDEV]) {
4240 wdev_id = nla_get_u64(tb[NL80211_ATTR_WDEV]);
4241 wdev_id_set = 1;
4242 } else if (tb[NL80211_ATTR_WIPHY]) {
4243 wiphy_idx_rx = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
4244 wiphy_idx_set = 1;
4245 }
4246
4247 dl_list_for_each_safe(drv, tmp, &global->interfaces,
4248 struct wpa_driver_nl80211_data, list) {
4249 for (bss = drv->first_bss; bss; bss = bss->next) {
4250 if (wiphy_idx_set)
4251 wiphy_idx = nl80211_get_wiphy_index(bss);
4252 if ((ifidx == -1 && !wiphy_idx_set && !wdev_id_set) ||
4253 ifidx == bss->ifindex ||
4254 (wiphy_idx_set && wiphy_idx == wiphy_idx_rx) ||
4255 (wdev_id_set && bss->wdev_id_set &&
4256 wdev_id == bss->wdev_id)) {
4257 processed = true;
4258 do_process_drv_event(bss, gnlh->cmd, tb);
4259 /* There are two types of events that may need
4260 * to be delivered to multiple interfaces:
4261 * 1. Events for a wiphy, as it can have
4262 * multiple interfaces.
4263 * 2. "Global" events, like
4264 * NL80211_CMD_REG_CHANGE.
4265 *
4266 * Terminate early only if the event is directed
4267 * to a specific interface or wdev. */
4268 if (ifidx != -1 || wdev_id_set)
4269 return NL_SKIP;
4270 /* The driver instance could have been removed,
4271 * e.g., due to NL80211_CMD_RADAR_DETECT event,
4272 * so need to stop the loop if that has
4273 * happened. */
4274 if (!nl80211_drv_in_list(global, drv))
4275 break;
4276 }
4277 }
4278 }
4279
4280 if (processed)
4281 return NL_SKIP;
4282
4283 wpa_printf(MSG_DEBUG,
4284 "nl80211: Ignored event %d (%s) for foreign interface (ifindex %d wdev 0x%llx wiphy %d)",
4285 gnlh->cmd, nl80211_command_to_string(gnlh->cmd),
4286 ifidx, (long long unsigned int) wdev_id, wiphy_idx_rx);
4287
4288 return NL_SKIP;
4289 }
4290
4291
process_bss_event(struct nl_msg * msg,void * arg)4292 int process_bss_event(struct nl_msg *msg, void *arg)
4293 {
4294 struct i802_bss *bss = arg;
4295 struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
4296 struct nlattr *tb[NL80211_ATTR_MAX + 1];
4297
4298 nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
4299 genlmsg_attrlen(gnlh, 0), NULL);
4300
4301 wpa_printf(MSG_DEBUG, "nl80211: BSS Event %d (%s) received for %s",
4302 gnlh->cmd, nl80211_command_to_string(gnlh->cmd),
4303 bss->ifname);
4304
4305 switch (gnlh->cmd) {
4306 case NL80211_CMD_FRAME:
4307 case NL80211_CMD_FRAME_TX_STATUS:
4308 mlme_event(bss, gnlh->cmd, tb[NL80211_ATTR_FRAME],
4309 tb[NL80211_ATTR_MAC], tb[NL80211_ATTR_TIMED_OUT],
4310 tb[NL80211_ATTR_WIPHY_FREQ], tb[NL80211_ATTR_ACK],
4311 tb[NL80211_ATTR_COOKIE],
4312 tb[NL80211_ATTR_RX_SIGNAL_DBM],
4313 tb[NL80211_ATTR_STA_WME], NULL,
4314 tb[NL80211_ATTR_MLO_LINK_ID]);
4315 break;
4316 case NL80211_CMD_UNEXPECTED_FRAME:
4317 nl80211_spurious_frame(bss, tb, 0);
4318 break;
4319 case NL80211_CMD_UNEXPECTED_4ADDR_FRAME:
4320 nl80211_spurious_frame(bss, tb, 1);
4321 break;
4322 case NL80211_CMD_EXTERNAL_AUTH:
4323 nl80211_external_auth(bss->drv, tb);
4324 break;
4325 case NL80211_CMD_CONTROL_PORT_FRAME:
4326 nl80211_control_port_frame(bss, tb);
4327 break;
4328 default:
4329 wpa_printf(MSG_DEBUG, "nl80211: Ignored unknown event "
4330 "(cmd=%d)", gnlh->cmd);
4331 break;
4332 }
4333
4334 return NL_SKIP;
4335 }
4336