hostapd: Update vendor branch to 0.6.10
[dragonfly.git] / contrib / hostapd / hostapd / driver_test.c
1 /*
2  * hostapd / Driver interface for development testing
3  * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi>
4  *
5  * This program is free software; you can redistribute it and/or modify
6  * it under the terms of the GNU General Public License version 2 as
7  * published by the Free Software Foundation.
8  *
9  * Alternatively, this software may be distributed under the terms of BSD
10  * license.
11  *
12  * See README and COPYING for more details.
13  */
14
15 #include "includes.h"
16 #include <sys/un.h>
17 #include <dirent.h>
18
19 #include "hostapd.h"
20 #include "driver.h"
21 #include "sha1.h"
22 #include "eloop.h"
23 #include "ieee802_1x.h"
24 #include "sta_info.h"
25 #include "wpa.h"
26 #include "accounting.h"
27 #include "radius/radius.h"
28 #include "l2_packet/l2_packet.h"
29 #include "ieee802_11.h"
30 #include "hw_features.h"
31 #include "wps_hostapd.h"
32
33
34 struct test_client_socket {
35         struct test_client_socket *next;
36         u8 addr[ETH_ALEN];
37         struct sockaddr_un un;
38         socklen_t unlen;
39         struct test_driver_bss *bss;
40 };
41
42 struct test_driver_bss {
43         struct test_driver_bss *next;
44         char ifname[IFNAMSIZ + 1];
45         u8 bssid[ETH_ALEN];
46         u8 *ie;
47         size_t ielen;
48         u8 *wps_beacon_ie;
49         size_t wps_beacon_ie_len;
50         u8 *wps_probe_resp_ie;
51         size_t wps_probe_resp_ie_len;
52         u8 ssid[32];
53         size_t ssid_len;
54         int privacy;
55 };
56
57 struct test_driver_data {
58         struct hostapd_data *hapd;
59         struct test_client_socket *cli;
60         int test_socket;
61         struct test_driver_bss *bss;
62         char *socket_dir;
63         char *own_socket_path;
64         int udp_port;
65 };
66
67
68 static void test_driver_free_bss(struct test_driver_bss *bss)
69 {
70         free(bss->ie);
71         free(bss->wps_beacon_ie);
72         free(bss->wps_probe_resp_ie);
73         free(bss);
74 }
75
76
77 static void test_driver_free_priv(struct test_driver_data *drv)
78 {
79         struct test_driver_bss *bss, *prev;
80
81         if (drv == NULL)
82                 return;
83
84         bss = drv->bss;
85         while (bss) {
86                 prev = bss;
87                 bss = bss->next;
88                 test_driver_free_bss(prev);
89         }
90         free(drv->own_socket_path);
91         free(drv->socket_dir);
92         free(drv);
93 }
94
95
96 static struct test_client_socket *
97 test_driver_get_cli(struct test_driver_data *drv, struct sockaddr_un *from,
98                     socklen_t fromlen)
99 {
100         struct test_client_socket *cli = drv->cli;
101
102         while (cli) {
103                 if (cli->unlen == fromlen &&
104                     strncmp(cli->un.sun_path, from->sun_path,
105                             fromlen - sizeof(cli->un.sun_family)) == 0)
106                         return cli;
107                 cli = cli->next;
108         }
109
110         return NULL;
111 }
112
113
114 static int test_driver_send_eapol(void *priv, const u8 *addr, const u8 *data,
115                                   size_t data_len, int encrypt,
116                                   const u8 *own_addr)
117 {
118         struct test_driver_data *drv = priv;
119         struct test_client_socket *cli;
120         struct msghdr msg;
121         struct iovec io[3];
122         struct l2_ethhdr eth;
123
124         if (drv->test_socket < 0)
125                 return -1;
126
127         cli = drv->cli;
128         while (cli) {
129                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
130                         break;
131                 cli = cli->next;
132         }
133
134         if (!cli) {
135                 wpa_printf(MSG_DEBUG, "%s: no destination client entry",
136                            __func__);
137                 return -1;
138         }
139
140         memcpy(eth.h_dest, addr, ETH_ALEN);
141         memcpy(eth.h_source, own_addr, ETH_ALEN);
142         eth.h_proto = host_to_be16(ETH_P_EAPOL);
143
144         io[0].iov_base = "EAPOL ";
145         io[0].iov_len = 6;
146         io[1].iov_base = &eth;
147         io[1].iov_len = sizeof(eth);
148         io[2].iov_base = (u8 *) data;
149         io[2].iov_len = data_len;
150
151         memset(&msg, 0, sizeof(msg));
152         msg.msg_iov = io;
153         msg.msg_iovlen = 3;
154         msg.msg_name = &cli->un;
155         msg.msg_namelen = cli->unlen;
156         return sendmsg(drv->test_socket, &msg, 0);
157 }
158
159
160 static int test_driver_send_ether(void *priv, const u8 *dst, const u8 *src,
161                                   u16 proto, const u8 *data, size_t data_len)
162 {
163         struct test_driver_data *drv = priv;
164         struct msghdr msg;
165         struct iovec io[3];
166         struct l2_ethhdr eth;
167         char desttxt[30];
168         struct sockaddr_un addr;
169         struct dirent *dent;
170         DIR *dir;
171         int ret = 0, broadcast = 0, count = 0;
172
173         if (drv->test_socket < 0 || drv->socket_dir == NULL) {
174                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d "
175                            "socket_dir=%p)",
176                            __func__, drv->test_socket, drv->socket_dir);
177                 return -1;
178         }
179
180         broadcast = memcmp(dst, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
181         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dst));
182
183         memcpy(eth.h_dest, dst, ETH_ALEN);
184         memcpy(eth.h_source, src, ETH_ALEN);
185         eth.h_proto = host_to_be16(proto);
186
187         io[0].iov_base = "ETHER ";
188         io[0].iov_len = 6;
189         io[1].iov_base = &eth;
190         io[1].iov_len = sizeof(eth);
191         io[2].iov_base = (u8 *) data;
192         io[2].iov_len = data_len;
193
194         memset(&msg, 0, sizeof(msg));
195         msg.msg_iov = io;
196         msg.msg_iovlen = 3;
197
198         dir = opendir(drv->socket_dir);
199         if (dir == NULL) {
200                 perror("test_driver: opendir");
201                 return -1;
202         }
203         while ((dent = readdir(dir))) {
204 #ifdef _DIRENT_HAVE_D_TYPE
205                 /* Skip the file if it is not a socket. Also accept
206                  * DT_UNKNOWN (0) in case the C library or underlying file
207                  * system does not support d_type. */
208                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
209                         continue;
210 #endif /* _DIRENT_HAVE_D_TYPE */
211                 if (strcmp(dent->d_name, ".") == 0 ||
212                     strcmp(dent->d_name, "..") == 0)
213                         continue;
214
215                 memset(&addr, 0, sizeof(addr));
216                 addr.sun_family = AF_UNIX;
217                 snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
218                          drv->socket_dir, dent->d_name);
219
220                 if (strcmp(addr.sun_path, drv->own_socket_path) == 0)
221                         continue;
222                 if (!broadcast && strstr(dent->d_name, desttxt) == NULL)
223                         continue;
224
225                 wpa_printf(MSG_DEBUG, "%s: Send ether frame to %s",
226                            __func__, dent->d_name);
227
228                 msg.msg_name = &addr;
229                 msg.msg_namelen = sizeof(addr);
230                 ret = sendmsg(drv->test_socket, &msg, 0);
231                 if (ret < 0)
232                         perror("driver_test: sendmsg");
233                 count++;
234         }
235         closedir(dir);
236
237         if (!broadcast && count == 0) {
238                 wpa_printf(MSG_DEBUG, "%s: Destination " MACSTR " not found",
239                            __func__, MAC2STR(dst));
240                 return -1;
241         }
242
243         return ret;
244 }
245
246
247 static int test_driver_send_mgmt_frame(void *priv, const void *buf,
248                                        size_t len, int flags)
249 {
250         struct test_driver_data *drv = priv;
251         struct msghdr msg;
252         struct iovec io[2];
253         const u8 *dest;
254         int ret = 0, broadcast = 0;
255         char desttxt[30];
256         struct sockaddr_un addr;
257         struct dirent *dent;
258         DIR *dir;
259         struct ieee80211_hdr *hdr;
260         u16 fc;
261
262         if (drv->test_socket < 0 || len < 10 || drv->socket_dir == NULL) {
263                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d len=%lu"
264                            " socket_dir=%p)",
265                            __func__, drv->test_socket, (unsigned long) len,
266                            drv->socket_dir);
267                 return -1;
268         }
269
270         dest = buf;
271         dest += 4;
272         broadcast = memcmp(dest, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
273         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dest));
274
275         io[0].iov_base = "MLME ";
276         io[0].iov_len = 5;
277         io[1].iov_base = (void *) buf;
278         io[1].iov_len = len;
279
280         memset(&msg, 0, sizeof(msg));
281         msg.msg_iov = io;
282         msg.msg_iovlen = 2;
283
284         dir = opendir(drv->socket_dir);
285         if (dir == NULL) {
286                 perror("test_driver: opendir");
287                 return -1;
288         }
289         while ((dent = readdir(dir))) {
290 #ifdef _DIRENT_HAVE_D_TYPE
291                 /* Skip the file if it is not a socket. Also accept
292                  * DT_UNKNOWN (0) in case the C library or underlying file
293                  * system does not support d_type. */
294                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
295                         continue;
296 #endif /* _DIRENT_HAVE_D_TYPE */
297                 if (strcmp(dent->d_name, ".") == 0 ||
298                     strcmp(dent->d_name, "..") == 0)
299                         continue;
300
301                 memset(&addr, 0, sizeof(addr));
302                 addr.sun_family = AF_UNIX;
303                 snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
304                          drv->socket_dir, dent->d_name);
305
306                 if (strcmp(addr.sun_path, drv->own_socket_path) == 0)
307                         continue;
308                 if (!broadcast && strstr(dent->d_name, desttxt) == NULL)
309                         continue;
310
311                 wpa_printf(MSG_DEBUG, "%s: Send management frame to %s",
312                            __func__, dent->d_name);
313
314                 msg.msg_name = &addr;
315                 msg.msg_namelen = sizeof(addr);
316                 ret = sendmsg(drv->test_socket, &msg, 0);
317                 if (ret < 0)
318                         perror("driver_test: sendmsg");
319         }
320         closedir(dir);
321
322         hdr = (struct ieee80211_hdr *) buf;
323         fc = le_to_host16(hdr->frame_control);
324         ieee802_11_mgmt_cb(drv->hapd, (u8 *) buf, len, WLAN_FC_GET_STYPE(fc),
325                            ret >= 0);
326
327         return ret;
328 }
329
330
331 static void test_driver_scan(struct test_driver_data *drv,
332                              struct sockaddr_un *from, socklen_t fromlen,
333                              char *data)
334 {
335         char buf[512], *pos, *end;
336         int ret;
337         struct test_driver_bss *bss;
338         u8 sa[ETH_ALEN];
339         u8 ie[512];
340         size_t ielen;
341
342         /* data: optional [ ' ' | STA-addr | ' ' | IEs(hex) ] */
343
344         wpa_printf(MSG_DEBUG, "test_driver: SCAN");
345
346         if (*data) {
347                 if (*data != ' ' ||
348                     hwaddr_aton(data + 1, sa)) {
349                         wpa_printf(MSG_DEBUG, "test_driver: Unexpected SCAN "
350                                    "command format");
351                         return;
352                 }
353
354                 data += 18;
355                 while (*data == ' ')
356                         data++;
357                 ielen = os_strlen(data) / 2;
358                 if (ielen > sizeof(ie))
359                         ielen = sizeof(ie);
360                 if (hexstr2bin(data, ie, ielen) < 0)
361                         ielen = 0;
362
363                 wpa_printf(MSG_DEBUG, "test_driver: Scan from " MACSTR,
364                            MAC2STR(sa));
365                 wpa_hexdump(MSG_MSGDUMP, "test_driver: scan IEs", ie, ielen);
366
367                 hostapd_wps_probe_req_rx(drv->hapd, sa, ie, ielen);
368         }
369
370         for (bss = drv->bss; bss; bss = bss->next) {
371                 pos = buf;
372                 end = buf + sizeof(buf);
373
374                 /* reply: SCANRESP BSSID SSID IEs */
375                 ret = snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
376                                MAC2STR(bss->bssid));
377                 if (ret < 0 || ret >= end - pos)
378                         return;
379                 pos += ret;
380                 pos += wpa_snprintf_hex(pos, end - pos,
381                                         bss->ssid, bss->ssid_len);
382                 ret = snprintf(pos, end - pos, " ");
383                 if (ret < 0 || ret >= end - pos)
384                         return;
385                 pos += ret;
386                 pos += wpa_snprintf_hex(pos, end - pos, bss->ie, bss->ielen);
387                 pos += wpa_snprintf_hex(pos, end - pos, bss->wps_probe_resp_ie,
388                                         bss->wps_probe_resp_ie_len);
389
390                 if (bss->privacy) {
391                         ret = snprintf(pos, end - pos, " PRIVACY");
392                         if (ret < 0 || ret >= end - pos)
393                                 return;
394                         pos += ret;
395                 }
396
397                 sendto(drv->test_socket, buf, pos - buf, 0,
398                        (struct sockaddr *) from, fromlen);
399         }
400 }
401
402
403 static struct hostapd_data * test_driver_get_hapd(struct test_driver_data *drv,
404                                                   struct test_driver_bss *bss)
405 {
406         struct hostapd_iface *iface = drv->hapd->iface;
407         struct hostapd_data *hapd = NULL;
408         size_t i;
409
410         if (bss == NULL) {
411                 wpa_printf(MSG_DEBUG, "%s: bss == NULL", __func__);
412                 return NULL;
413         }
414
415         for (i = 0; i < iface->num_bss; i++) {
416                 hapd = iface->bss[i];
417                 if (memcmp(hapd->own_addr, bss->bssid, ETH_ALEN) == 0)
418                         break;
419         }
420         if (i == iface->num_bss) {
421                 wpa_printf(MSG_DEBUG, "%s: no matching interface entry found "
422                            "for BSSID " MACSTR, __func__, MAC2STR(bss->bssid));
423                 return NULL;
424         }
425
426         return hapd;
427 }
428
429
430 static int test_driver_new_sta(struct test_driver_data *drv,
431                                struct test_driver_bss *bss, const u8 *addr,
432                                const u8 *ie, size_t ielen)
433 {
434         struct hostapd_data *hapd;
435         struct sta_info *sta;
436         int new_assoc, res;
437
438         hapd = test_driver_get_hapd(drv, bss);
439         if (hapd == NULL)
440                 return -1;
441
442         hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
443                 HOSTAPD_LEVEL_INFO, "associated");
444
445         sta = ap_get_sta(hapd, addr);
446         if (sta) {
447                 accounting_sta_stop(hapd, sta);
448         } else {
449                 sta = ap_sta_add(hapd, addr);
450                 if (sta == NULL)
451                         return -1;
452         }
453         sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS);
454
455         if (hapd->conf->wpa) {
456                 if (ie == NULL || ielen == 0) {
457                         if (hapd->conf->wps_state) {
458                                 sta->flags |= WLAN_STA_WPS;
459                                 goto skip_wpa_check;
460                         }
461
462                         printf("test_driver: no IE from STA\n");
463                         return -1;
464                 }
465                 if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
466                     os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
467                         sta->flags |= WLAN_STA_WPS;
468                         goto skip_wpa_check;
469                 }
470
471                 if (sta->wpa_sm == NULL)
472                         sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
473                                                         sta->addr);
474                 if (sta->wpa_sm == NULL) {
475                         printf("test_driver: Failed to initialize WPA state "
476                                "machine\n");
477                         return -1;
478                 }
479                 res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
480                                           ie, ielen, NULL, 0);
481                 if (res != WPA_IE_OK) {
482                         printf("WPA/RSN information element rejected? "
483                                "(res %u)\n", res);
484                         wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
485                         return -1;
486                 }
487         }
488 skip_wpa_check:
489
490         new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
491         sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
492         wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
493
494         hostapd_new_assoc_sta(hapd, sta, !new_assoc);
495
496         ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
497
498         return 0;
499 }
500
501
502 static void test_driver_assoc(struct test_driver_data *drv,
503                               struct sockaddr_un *from, socklen_t fromlen,
504                               char *data)
505 {
506         struct test_client_socket *cli;
507         u8 ie[256], ssid[32];
508         size_t ielen, ssid_len = 0;
509         char *pos, *pos2, cmd[50];
510         struct test_driver_bss *bss;
511
512         /* data: STA-addr SSID(hex) IEs(hex) */
513
514         cli = os_zalloc(sizeof(*cli));
515         if (cli == NULL)
516                 return;
517
518         if (hwaddr_aton(data, cli->addr)) {
519                 printf("test_socket: Invalid MAC address '%s' in ASSOC\n",
520                        data);
521                 free(cli);
522                 return;
523         }
524         pos = data + 17;
525         while (*pos == ' ')
526                 pos++;
527         pos2 = strchr(pos, ' ');
528         ielen = 0;
529         if (pos2) {
530                 ssid_len = (pos2 - pos) / 2;
531                 if (hexstr2bin(pos, ssid, ssid_len) < 0) {
532                         wpa_printf(MSG_DEBUG, "%s: Invalid SSID", __func__);
533                         free(cli);
534                         return;
535                 }
536                 wpa_hexdump_ascii(MSG_DEBUG, "test_driver_assoc: SSID",
537                                   ssid, ssid_len);
538
539                 pos = pos2 + 1;
540                 ielen = strlen(pos) / 2;
541                 if (ielen > sizeof(ie))
542                         ielen = sizeof(ie);
543                 if (hexstr2bin(pos, ie, ielen) < 0)
544                         ielen = 0;
545         }
546
547         for (bss = drv->bss; bss; bss = bss->next) {
548                 if (bss->ssid_len == ssid_len &&
549                     memcmp(bss->ssid, ssid, ssid_len) == 0)
550                         break;
551         }
552         if (bss == NULL) {
553                 wpa_printf(MSG_DEBUG, "%s: No matching SSID found from "
554                            "configured BSSes", __func__);
555                 free(cli);
556                 return;
557         }
558
559         cli->bss = bss;
560         memcpy(&cli->un, from, sizeof(cli->un));
561         cli->unlen = fromlen;
562         cli->next = drv->cli;
563         drv->cli = cli;
564         wpa_hexdump_ascii(MSG_DEBUG, "test_socket: ASSOC sun_path",
565                           (const u8 *) cli->un.sun_path,
566                           cli->unlen - sizeof(cli->un.sun_family));
567
568         snprintf(cmd, sizeof(cmd), "ASSOCRESP " MACSTR " 0",
569                  MAC2STR(bss->bssid));
570         sendto(drv->test_socket, cmd, strlen(cmd), 0,
571                (struct sockaddr *) from, fromlen);
572
573         if (test_driver_new_sta(drv, bss, cli->addr, ie, ielen) < 0) {
574                 wpa_printf(MSG_DEBUG, "test_driver: failed to add new STA");
575         }
576 }
577
578
579 static void test_driver_disassoc(struct test_driver_data *drv,
580                                  struct sockaddr_un *from, socklen_t fromlen)
581 {
582         struct test_client_socket *cli;
583         struct sta_info *sta;
584
585         cli = test_driver_get_cli(drv, from, fromlen);
586         if (!cli)
587                 return;
588
589         hostapd_logger(drv->hapd, cli->addr, HOSTAPD_MODULE_IEEE80211,
590                        HOSTAPD_LEVEL_INFO, "disassociated");
591
592         sta = ap_get_sta(drv->hapd, cli->addr);
593         if (sta != NULL) {
594                 sta->flags &= ~WLAN_STA_ASSOC;
595                 wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
596                 sta->acct_terminate_cause =
597                         RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
598                 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
599                 ap_free_sta(drv->hapd, sta);
600         }
601 }
602
603
604 static void test_driver_eapol(struct test_driver_data *drv,
605                               struct sockaddr_un *from, socklen_t fromlen,
606                               u8 *data, size_t datalen)
607 {
608         struct test_client_socket *cli;
609         if (datalen > 14) {
610                 /* Skip Ethernet header */
611                 wpa_printf(MSG_DEBUG, "test_driver: dst=" MACSTR " src="
612                            MACSTR " proto=%04x",
613                            MAC2STR(data), MAC2STR(data + ETH_ALEN),
614                            WPA_GET_BE16(data + 2 * ETH_ALEN));
615                 data += 14;
616                 datalen -= 14;
617         }
618         cli = test_driver_get_cli(drv, from, fromlen);
619         if (cli) {
620                 struct hostapd_data *hapd;
621                 hapd = test_driver_get_hapd(drv, cli->bss);
622                 if (hapd == NULL)
623                         return;
624                 ieee802_1x_receive(hapd, cli->addr, data, datalen);
625         } else {
626                 wpa_printf(MSG_DEBUG, "test_socket: EAPOL from unknown "
627                            "client");
628         }
629 }
630
631
632 static void test_driver_ether(struct test_driver_data *drv,
633                               struct sockaddr_un *from, socklen_t fromlen,
634                               u8 *data, size_t datalen)
635 {
636         struct l2_ethhdr *eth;
637
638         if (datalen < sizeof(*eth))
639                 return;
640
641         eth = (struct l2_ethhdr *) data;
642         wpa_printf(MSG_DEBUG, "test_driver: RX ETHER dst=" MACSTR " src="
643                    MACSTR " proto=%04x",
644                    MAC2STR(eth->h_dest), MAC2STR(eth->h_source),
645                    be_to_host16(eth->h_proto));
646
647 #ifdef CONFIG_IEEE80211R
648         if (be_to_host16(eth->h_proto) == ETH_P_RRB) {
649                 wpa_ft_rrb_rx(drv->hapd->wpa_auth, eth->h_source,
650                               data + sizeof(*eth), datalen - sizeof(*eth));
651         }
652 #endif /* CONFIG_IEEE80211R */
653 }
654
655
656 static void test_driver_mlme(struct test_driver_data *drv,
657                              struct sockaddr_un *from, socklen_t fromlen,
658                              u8 *data, size_t datalen)
659 {
660         struct ieee80211_hdr *hdr;
661         u16 fc;
662
663         hdr = (struct ieee80211_hdr *) data;
664
665         if (test_driver_get_cli(drv, from, fromlen) == NULL && datalen >= 16) {
666                 struct test_client_socket *cli;
667                 cli = os_zalloc(sizeof(*cli));
668                 if (cli == NULL)
669                         return;
670                 wpa_printf(MSG_DEBUG, "Adding client entry for " MACSTR,
671                            MAC2STR(hdr->addr2));
672                 memcpy(cli->addr, hdr->addr2, ETH_ALEN);
673                 memcpy(&cli->un, from, sizeof(cli->un));
674                 cli->unlen = fromlen;
675                 cli->next = drv->cli;
676                 drv->cli = cli;
677         }
678
679         wpa_hexdump(MSG_MSGDUMP, "test_driver_mlme: received frame",
680                     data, datalen);
681         fc = le_to_host16(hdr->frame_control);
682         if (WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT) {
683                 wpa_printf(MSG_ERROR, "%s: received non-mgmt frame",
684                            __func__);
685                 return;
686         }
687         ieee802_11_mgmt(drv->hapd, data, datalen, WLAN_FC_GET_STYPE(fc), NULL);
688 }
689
690
691 static void test_driver_receive_unix(int sock, void *eloop_ctx, void *sock_ctx)
692 {
693         struct test_driver_data *drv = eloop_ctx;
694         char buf[2000];
695         int res;
696         struct sockaddr_un from;
697         socklen_t fromlen = sizeof(from);
698
699         res = recvfrom(sock, buf, sizeof(buf) - 1, 0,
700                        (struct sockaddr *) &from, &fromlen);
701         if (res < 0) {
702                 perror("recvfrom(test_socket)");
703                 return;
704         }
705         buf[res] = '\0';
706
707         wpa_printf(MSG_DEBUG, "test_driver: received %u bytes", res);
708
709         if (strncmp(buf, "SCAN", 4) == 0) {
710                 test_driver_scan(drv, &from, fromlen, buf + 4);
711         } else if (strncmp(buf, "ASSOC ", 6) == 0) {
712                 test_driver_assoc(drv, &from, fromlen, buf + 6);
713         } else if (strcmp(buf, "DISASSOC") == 0) {
714                 test_driver_disassoc(drv, &from, fromlen);
715         } else if (strncmp(buf, "EAPOL ", 6) == 0) {
716                 test_driver_eapol(drv, &from, fromlen, (u8 *) buf + 6,
717                                   res - 6);
718         } else if (strncmp(buf, "ETHER ", 6) == 0) {
719                 test_driver_ether(drv, &from, fromlen, (u8 *) buf + 6,
720                                   res - 6);
721         } else if (strncmp(buf, "MLME ", 5) == 0) {
722                 test_driver_mlme(drv, &from, fromlen, (u8 *) buf + 5, res - 5);
723         } else {
724                 wpa_hexdump_ascii(MSG_DEBUG, "Unknown test_socket command",
725                                   (u8 *) buf, res);
726         }
727 }
728
729
730 static struct test_driver_bss *
731 test_driver_get_bss(struct test_driver_data *drv, const char *ifname)
732 {
733         struct test_driver_bss *bss;
734
735         for (bss = drv->bss; bss; bss = bss->next) {
736                 if (strcmp(bss->ifname, ifname) == 0)
737                         return bss;
738         }
739         return NULL;
740 }
741
742
743 static int test_driver_set_generic_elem(const char *ifname, void *priv,
744                                         const u8 *elem, size_t elem_len)
745 {
746         struct test_driver_data *drv = priv;
747         struct test_driver_bss *bss;
748
749         bss = test_driver_get_bss(drv, ifname);
750         if (bss == NULL)
751                 return -1;
752
753         free(bss->ie);
754
755         if (elem == NULL) {
756                 bss->ie = NULL;
757                 bss->ielen = 0;
758                 return 0;
759         }
760
761         bss->ie = malloc(elem_len);
762         if (bss->ie == NULL) {
763                 bss->ielen = 0;
764                 return -1;
765         }
766
767         memcpy(bss->ie, elem, elem_len);
768         bss->ielen = elem_len;
769         return 0;
770 }
771
772
773 static int test_driver_set_wps_beacon_ie(const char *ifname, void *priv,
774                                          const u8 *ie, size_t len)
775 {
776         struct test_driver_data *drv = priv;
777         struct test_driver_bss *bss;
778
779         wpa_hexdump(MSG_DEBUG, "test_driver: Beacon WPS IE", ie, len);
780         bss = test_driver_get_bss(drv, ifname);
781         if (bss == NULL)
782                 return -1;
783
784         free(bss->wps_beacon_ie);
785
786         if (ie == NULL) {
787                 bss->wps_beacon_ie = NULL;
788                 bss->wps_beacon_ie_len = 0;
789                 return 0;
790         }
791
792         bss->wps_beacon_ie = malloc(len);
793         if (bss->wps_beacon_ie == NULL) {
794                 bss->wps_beacon_ie_len = 0;
795                 return -1;
796         }
797
798         memcpy(bss->wps_beacon_ie, ie, len);
799         bss->wps_beacon_ie_len = len;
800         return 0;
801 }
802
803
804 static int test_driver_set_wps_probe_resp_ie(const char *ifname, void *priv,
805                                              const u8 *ie, size_t len)
806 {
807         struct test_driver_data *drv = priv;
808         struct test_driver_bss *bss;
809
810         wpa_hexdump(MSG_DEBUG, "test_driver: ProbeResp WPS IE", ie, len);
811         bss = test_driver_get_bss(drv, ifname);
812         if (bss == NULL)
813                 return -1;
814
815         free(bss->wps_probe_resp_ie);
816
817         if (ie == NULL) {
818                 bss->wps_probe_resp_ie = NULL;
819                 bss->wps_probe_resp_ie_len = 0;
820                 return 0;
821         }
822
823         bss->wps_probe_resp_ie = malloc(len);
824         if (bss->wps_probe_resp_ie == NULL) {
825                 bss->wps_probe_resp_ie_len = 0;
826                 return -1;
827         }
828
829         memcpy(bss->wps_probe_resp_ie, ie, len);
830         bss->wps_probe_resp_ie_len = len;
831         return 0;
832 }
833
834
835 static int test_driver_sta_deauth(void *priv, const u8 *addr, int reason)
836 {
837         struct test_driver_data *drv = priv;
838         struct test_client_socket *cli;
839
840         if (drv->test_socket < 0)
841                 return -1;
842
843         cli = drv->cli;
844         while (cli) {
845                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
846                         break;
847                 cli = cli->next;
848         }
849
850         if (!cli)
851                 return -1;
852
853         return sendto(drv->test_socket, "DEAUTH", 6, 0,
854                       (struct sockaddr *) &cli->un, cli->unlen);
855 }
856
857
858 static int test_driver_sta_disassoc(void *priv, const u8 *addr, int reason)
859 {
860         struct test_driver_data *drv = priv;
861         struct test_client_socket *cli;
862
863         if (drv->test_socket < 0)
864                 return -1;
865
866         cli = drv->cli;
867         while (cli) {
868                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
869                         break;
870                 cli = cli->next;
871         }
872
873         if (!cli)
874                 return -1;
875
876         return sendto(drv->test_socket, "DISASSOC", 8, 0,
877                       (struct sockaddr *) &cli->un, cli->unlen);
878 }
879
880
881 static struct hostapd_hw_modes *
882 test_driver_get_hw_feature_data(void *priv, u16 *num_modes, u16 *flags)
883 {
884         struct hostapd_hw_modes *modes;
885
886         *num_modes = 3;
887         *flags = 0;
888         modes = os_zalloc(*num_modes * sizeof(struct hostapd_hw_modes));
889         if (modes == NULL)
890                 return NULL;
891         modes[0].mode = HOSTAPD_MODE_IEEE80211G;
892         modes[0].num_channels = 1;
893         modes[0].num_rates = 1;
894         modes[0].channels = os_zalloc(sizeof(struct hostapd_channel_data));
895         modes[0].rates = os_zalloc(sizeof(struct hostapd_rate_data));
896         if (modes[0].channels == NULL || modes[0].rates == NULL) {
897                 hostapd_free_hw_features(modes, *num_modes);
898                 return NULL;
899         }
900         modes[0].channels[0].chan = 1;
901         modes[0].channels[0].freq = 2412;
902         modes[0].channels[0].flag = 0;
903         modes[0].rates[0].rate = 10;
904         modes[0].rates[0].flags = HOSTAPD_RATE_BASIC | HOSTAPD_RATE_SUPPORTED |
905                 HOSTAPD_RATE_CCK | HOSTAPD_RATE_MANDATORY;
906
907         modes[1].mode = HOSTAPD_MODE_IEEE80211B;
908         modes[1].num_channels = 1;
909         modes[1].num_rates = 1;
910         modes[1].channels = os_zalloc(sizeof(struct hostapd_channel_data));
911         modes[1].rates = os_zalloc(sizeof(struct hostapd_rate_data));
912         if (modes[1].channels == NULL || modes[1].rates == NULL) {
913                 hostapd_free_hw_features(modes, *num_modes);
914                 return NULL;
915         }
916         modes[1].channels[0].chan = 1;
917         modes[1].channels[0].freq = 2412;
918         modes[1].channels[0].flag = 0;
919         modes[1].rates[0].rate = 10;
920         modes[1].rates[0].flags = HOSTAPD_RATE_BASIC | HOSTAPD_RATE_SUPPORTED |
921                 HOSTAPD_RATE_CCK | HOSTAPD_RATE_MANDATORY;
922
923         modes[2].mode = HOSTAPD_MODE_IEEE80211A;
924         modes[2].num_channels = 1;
925         modes[2].num_rates = 1;
926         modes[2].channels = os_zalloc(sizeof(struct hostapd_channel_data));
927         modes[2].rates = os_zalloc(sizeof(struct hostapd_rate_data));
928         if (modes[2].channels == NULL || modes[2].rates == NULL) {
929                 hostapd_free_hw_features(modes, *num_modes);
930                 return NULL;
931         }
932         modes[2].channels[0].chan = 60;
933         modes[2].channels[0].freq = 5300;
934         modes[2].channels[0].flag = 0;
935         modes[2].rates[0].rate = 60;
936         modes[2].rates[0].flags = HOSTAPD_RATE_BASIC | HOSTAPD_RATE_SUPPORTED |
937                 HOSTAPD_RATE_MANDATORY;
938
939         return modes;
940 }
941
942
943 static int test_driver_bss_add(void *priv, const char *ifname, const u8 *bssid)
944 {
945         struct test_driver_data *drv = priv;
946         struct test_driver_bss *bss;
947
948         wpa_printf(MSG_DEBUG, "%s(ifname=%s bssid=" MACSTR ")",
949                    __func__, ifname, MAC2STR(bssid));
950
951         bss = os_zalloc(sizeof(*bss));
952         if (bss == NULL)
953                 return -1;
954
955         os_strlcpy(bss->ifname, ifname, IFNAMSIZ);
956         memcpy(bss->bssid, bssid, ETH_ALEN);
957
958         bss->next = drv->bss;
959         drv->bss = bss;
960
961         return 0;
962 }
963
964
965 static int test_driver_bss_remove(void *priv, const char *ifname)
966 {
967         struct test_driver_data *drv = priv;
968         struct test_driver_bss *bss, *prev;
969         struct test_client_socket *cli, *prev_c;
970
971         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
972
973         for (prev = NULL, bss = drv->bss; bss; prev = bss, bss = bss->next) {
974                 if (strcmp(bss->ifname, ifname) != 0)
975                         continue;
976
977                 if (prev)
978                         prev->next = bss->next;
979                 else
980                         drv->bss = bss->next;
981
982                 for (prev_c = NULL, cli = drv->cli; cli;
983                      prev_c = cli, cli = cli->next) {
984                         if (cli->bss != bss)
985                                 continue;
986                         if (prev_c)
987                                 prev_c->next = cli->next;
988                         else
989                                 drv->cli = cli->next;
990                         free(cli);
991                         break;
992                 }
993
994                 test_driver_free_bss(bss);
995                 return 0;
996         }
997
998         return -1;
999 }
1000
1001
1002 static int test_driver_if_add(const char *iface, void *priv,
1003                               enum hostapd_driver_if_type type, char *ifname,
1004                               const u8 *addr)
1005 {
1006         wpa_printf(MSG_DEBUG, "%s(iface=%s type=%d ifname=%s)",
1007                    __func__, iface, type, ifname);
1008         return 0;
1009 }
1010
1011
1012 static int test_driver_if_update(void *priv, enum hostapd_driver_if_type type,
1013                                  char *ifname, const u8 *addr)
1014 {
1015         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s)", __func__, type, ifname);
1016         return 0;
1017 }
1018
1019
1020 static int test_driver_if_remove(void *priv, enum hostapd_driver_if_type type,
1021                                  const char *ifname, const u8 *addr)
1022 {
1023         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s)", __func__, type, ifname);
1024         return 0;
1025 }
1026
1027
1028 static int test_driver_valid_bss_mask(void *priv, const u8 *addr,
1029                                       const u8 *mask)
1030 {
1031         return 0;
1032 }
1033
1034
1035 static int test_driver_set_ssid(const char *ifname, void *priv, const u8 *buf,
1036                                 int len)
1037 {
1038         struct test_driver_data *drv = priv;
1039         struct test_driver_bss *bss;
1040
1041         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
1042         wpa_hexdump_ascii(MSG_DEBUG, "test_driver_set_ssid: SSID", buf, len);
1043
1044         for (bss = drv->bss; bss; bss = bss->next) {
1045                 if (strcmp(bss->ifname, ifname) != 0)
1046                         continue;
1047
1048                 if (len < 0 || (size_t) len > sizeof(bss->ssid))
1049                         return -1;
1050
1051                 memcpy(bss->ssid, buf, len);
1052                 bss->ssid_len = len;
1053
1054                 return 0;
1055         }
1056
1057         return -1;
1058 }
1059
1060
1061 static int test_driver_set_privacy(const char *ifname, void *priv, int enabled)
1062 {
1063         struct test_driver_data *drv = priv;
1064         struct test_driver_bss *bss;
1065
1066         wpa_printf(MSG_DEBUG, "%s(ifname=%s enabled=%d)",
1067                    __func__, ifname, enabled);
1068
1069         for (bss = drv->bss; bss; bss = bss->next) {
1070                 if (strcmp(bss->ifname, ifname) != 0)
1071                         continue;
1072
1073                 bss->privacy = enabled;
1074
1075                 return 0;
1076         }
1077
1078         return -1;
1079 }
1080
1081
1082 static int test_driver_set_encryption(const char *iface, void *priv,
1083                                       const char *alg, const u8 *addr, int idx,
1084                                       const u8 *key, size_t key_len, int txkey)
1085 {
1086         wpa_printf(MSG_DEBUG, "%s(iface=%s alg=%s idx=%d txkey=%d)",
1087                    __func__, iface, alg, idx, txkey);
1088         if (addr)
1089                 wpa_printf(MSG_DEBUG, "   addr=" MACSTR, MAC2STR(addr));
1090         if (key)
1091                 wpa_hexdump_key(MSG_DEBUG, "   key", key, key_len);
1092         return 0;
1093 }
1094
1095
1096 static int test_driver_set_sta_vlan(void *priv, const u8 *addr,
1097                                     const char *ifname, int vlan_id)
1098 {
1099         wpa_printf(MSG_DEBUG, "%s(addr=" MACSTR " ifname=%s vlan_id=%d)",
1100                    __func__, MAC2STR(addr), ifname, vlan_id);
1101         return 0;
1102 }
1103
1104
1105 static int test_driver_sta_add(const char *ifname, void *priv, const u8 *addr,
1106                                u16 aid, u16 capability, u8 *supp_rates,
1107                                size_t supp_rates_len, int flags,
1108                                u16 listen_interval)
1109 {
1110         struct test_driver_data *drv = priv;
1111         struct test_client_socket *cli;
1112         struct test_driver_bss *bss;
1113
1114         wpa_printf(MSG_DEBUG, "%s(ifname=%s addr=" MACSTR " aid=%d "
1115                    "capability=0x%x flags=0x%x listen_interval=%d)",
1116                    __func__, ifname, MAC2STR(addr), aid, capability, flags,
1117                    listen_interval);
1118         wpa_hexdump(MSG_DEBUG, "test_driver_sta_add - supp_rates",
1119                     supp_rates, supp_rates_len);
1120
1121         cli = drv->cli;
1122         while (cli) {
1123                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
1124                         break;
1125                 cli = cli->next;
1126         }
1127         if (!cli) {
1128                 wpa_printf(MSG_DEBUG, "%s: no matching client entry",
1129                            __func__);
1130                 return -1;
1131         }
1132
1133         for (bss = drv->bss; bss; bss = bss->next) {
1134                 if (strcmp(ifname, bss->ifname) == 0)
1135                         break;
1136         }
1137         if (bss == NULL) {
1138                 wpa_printf(MSG_DEBUG, "%s: No matching interface found from "
1139                            "configured BSSes", __func__);
1140                 return -1;
1141         }
1142
1143         cli->bss = bss;
1144
1145         return 0;
1146 }
1147
1148
1149 static void * test_driver_init(struct hostapd_data *hapd)
1150 {
1151         struct test_driver_data *drv;
1152         struct sockaddr_un addr_un;
1153         struct sockaddr_in addr_in;
1154         struct sockaddr *addr;
1155         socklen_t alen;
1156
1157         drv = os_zalloc(sizeof(struct test_driver_data));
1158         if (drv == NULL) {
1159                 printf("Could not allocate memory for test driver data\n");
1160                 return NULL;
1161         }
1162         drv->bss = os_zalloc(sizeof(*drv->bss));
1163         if (drv->bss == NULL) {
1164                 printf("Could not allocate memory for test driver BSS data\n");
1165                 free(drv);
1166                 return NULL;
1167         }
1168
1169         drv->hapd = hapd;
1170
1171         /* Generate a MAC address to help testing with multiple APs */
1172         hapd->own_addr[0] = 0x02; /* locally administered */
1173         sha1_prf((const u8 *) hapd->conf->iface, strlen(hapd->conf->iface),
1174                  "hostapd test bssid generation",
1175                  (const u8 *) hapd->conf->ssid.ssid, hapd->conf->ssid.ssid_len,
1176                  hapd->own_addr + 1, ETH_ALEN - 1);
1177
1178         os_strlcpy(drv->bss->ifname, hapd->conf->iface, IFNAMSIZ);
1179         memcpy(drv->bss->bssid, hapd->own_addr, ETH_ALEN);
1180
1181         if (hapd->conf->test_socket) {
1182                 if (strlen(hapd->conf->test_socket) >=
1183                     sizeof(addr_un.sun_path)) {
1184                         printf("Too long test_socket path\n");
1185                         test_driver_free_priv(drv);
1186                         return NULL;
1187                 }
1188                 if (strncmp(hapd->conf->test_socket, "DIR:", 4) == 0) {
1189                         size_t len = strlen(hapd->conf->test_socket) + 30;
1190                         drv->socket_dir = strdup(hapd->conf->test_socket + 4);
1191                         drv->own_socket_path = malloc(len);
1192                         if (drv->own_socket_path) {
1193                                 snprintf(drv->own_socket_path, len,
1194                                          "%s/AP-" MACSTR,
1195                                          hapd->conf->test_socket + 4,
1196                                          MAC2STR(hapd->own_addr));
1197                         }
1198                 } else if (strncmp(hapd->conf->test_socket, "UDP:", 4) == 0) {
1199                         drv->udp_port = atoi(hapd->conf->test_socket + 4);
1200                 } else {
1201                         drv->own_socket_path = strdup(hapd->conf->test_socket);
1202                 }
1203                 if (drv->own_socket_path == NULL && drv->udp_port == 0) {
1204                         test_driver_free_priv(drv);
1205                         return NULL;
1206                 }
1207
1208                 drv->test_socket = socket(drv->udp_port ? PF_INET : PF_UNIX,
1209                                           SOCK_DGRAM, 0);
1210                 if (drv->test_socket < 0) {
1211                         perror("socket");
1212                         test_driver_free_priv(drv);
1213                         return NULL;
1214                 }
1215
1216                 if (drv->udp_port) {
1217                         os_memset(&addr_in, 0, sizeof(addr_in));
1218                         addr_in.sin_family = AF_INET;
1219                         addr_in.sin_port = htons(drv->udp_port);
1220                         addr = (struct sockaddr *) &addr_in;
1221                         alen = sizeof(addr_in);
1222                 } else {
1223                         os_memset(&addr_un, 0, sizeof(addr_un));
1224                         addr_un.sun_family = AF_UNIX;
1225                         os_strlcpy(addr_un.sun_path, drv->own_socket_path,
1226                                    sizeof(addr_un.sun_path));
1227                         addr = (struct sockaddr *) &addr_un;
1228                         alen = sizeof(addr_un);
1229                 }
1230                 if (bind(drv->test_socket, addr, alen) < 0) {
1231                         perror("bind(PF_UNIX)");
1232                         close(drv->test_socket);
1233                         if (drv->own_socket_path)
1234                                 unlink(drv->own_socket_path);
1235                         test_driver_free_priv(drv);
1236                         return NULL;
1237                 }
1238                 eloop_register_read_sock(drv->test_socket,
1239                                          test_driver_receive_unix, drv, NULL);
1240         } else
1241                 drv->test_socket = -1;
1242
1243         return drv;
1244 }
1245
1246
1247 static void test_driver_deinit(void *priv)
1248 {
1249         struct test_driver_data *drv = priv;
1250         struct test_client_socket *cli, *prev;
1251
1252         cli = drv->cli;
1253         while (cli) {
1254                 prev = cli;
1255                 cli = cli->next;
1256                 free(prev);
1257         }
1258
1259         if (drv->test_socket >= 0) {
1260                 eloop_unregister_read_sock(drv->test_socket);
1261                 close(drv->test_socket);
1262                 if (drv->own_socket_path)
1263                         unlink(drv->own_socket_path);
1264         }
1265
1266         /* There should be only one BSS remaining at this point. */
1267         if (drv->bss == NULL)
1268                 wpa_printf(MSG_ERROR, "%s: drv->bss == NULL", __func__);
1269         else if (drv->bss->next)
1270                 wpa_printf(MSG_ERROR, "%s: drv->bss->next != NULL", __func__);
1271
1272         test_driver_free_priv(drv);
1273 }
1274
1275
1276 const struct wpa_driver_ops wpa_driver_test_ops = {
1277         .name = "test",
1278         .init = test_driver_init,
1279         .deinit = test_driver_deinit,
1280         .send_eapol = test_driver_send_eapol,
1281         .send_mgmt_frame = test_driver_send_mgmt_frame,
1282         .set_generic_elem = test_driver_set_generic_elem,
1283         .sta_deauth = test_driver_sta_deauth,
1284         .sta_disassoc = test_driver_sta_disassoc,
1285         .get_hw_feature_data = test_driver_get_hw_feature_data,
1286         .bss_add = test_driver_bss_add,
1287         .bss_remove = test_driver_bss_remove,
1288         .if_add = test_driver_if_add,
1289         .if_update = test_driver_if_update,
1290         .if_remove = test_driver_if_remove,
1291         .valid_bss_mask = test_driver_valid_bss_mask,
1292         .set_ssid = test_driver_set_ssid,
1293         .set_privacy = test_driver_set_privacy,
1294         .set_encryption = test_driver_set_encryption,
1295         .set_sta_vlan = test_driver_set_sta_vlan,
1296         .sta_add = test_driver_sta_add,
1297         .send_ether = test_driver_send_ether,
1298         .set_wps_beacon_ie = test_driver_set_wps_beacon_ie,
1299         .set_wps_probe_resp_ie = test_driver_set_wps_probe_resp_ie,
1300 };