vcs.maemo.org Git - wpasupplicant/blob - src/drivers/driver_bsd.c

   1 /*
   2  * WPA Supplicant - driver interaction with BSD net80211 layer
   3  * Copyright (c) 2004, Sam Leffler <sam@errno.com>
   4  * Copyright (c) 2004, 2Wire, Inc
   5  *
   6  * This program is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 2 as
   8  * published by the Free Software Foundation.
   9  *
  10  * Alternatively, this software may be distributed under the terms of BSD
  11  * license.
  12  *
  13  * See README and COPYING for more details.
  14  */
  15
  16 #include "includes.h"
  17 #include <sys/ioctl.h>
  18
  19 #include "common.h"
  20 #include "driver.h"
  21 #include "eloop.h"
  22 #include "ieee802_11_defs.h"
  23
  24 #include <net/if.h>
  25
  26 #ifdef __NetBSD__
  27 #include <net/if_ether.h>
  28 #define COMPAT_FREEBSD_NET80211
  29 #else
  30 #include <net/ethernet.h>
  31 #endif
  32 #include <net/route.h>
  33
  34 #include <net80211/ieee80211.h>
  35 #include <net80211/ieee80211_crypto.h>
  36 #include <net80211/ieee80211_ioctl.h>
  37 #if __FreeBSD__
  38 #include <net80211/ieee80211_freebsd.h>
  39 #endif
  40 #if __NetBSD__
  41 #include <net80211/ieee80211_netbsd.h>
  42 #endif
  43
  44 #ifdef HOSTAPD
  45
  46 /*
  47  * Avoid conflicts with hostapd definitions by undefining couple of defines
  48  * from net80211 header files.
  49  */
  50 #undef RSN_VERSION
  51 #undef WPA_VERSION
  52 #undef WPA_OUI_TYPE
  53
  54 #include "l2_packet/l2_packet.h"
  55 #include "../../hostapd/hostapd.h"
  56 #include "../../hostapd/config.h"
  57 #include "../../hostapd/eapol_sm.h"
  58 #include "../../hostapd/sta_flags.h"
  59
  60 struct bsd_driver_data {
  61         struct hostapd_data *hapd;              /* back pointer */
  62
  63         char    iface[IFNAMSIZ + 1];
  64         struct l2_packet_data *sock_xmit;       /* raw packet xmit socket */
  65         int     ioctl_sock;                     /* socket for ioctl() use */
  66         int     wext_sock;                      /* socket for wireless events */
  67 };
  68
  69 static int bsd_sta_deauth(void *priv, const u8 *own_addr, const u8 *addr,
  70                           int reason_code);
  71
  72 static int
  73 set80211var(struct bsd_driver_data *drv, int op, const void *arg, int arg_len)
  74 {
  75         struct ieee80211req ireq;
  76
  77         memset(&ireq, 0, sizeof(ireq));
  78         os_strlcpy(ireq.i_name, drv->iface, IFNAMSIZ);
  79         ireq.i_type = op;
  80         ireq.i_len = arg_len;
  81         ireq.i_data = (void *) arg;
  82
  83         if (ioctl(drv->ioctl_sock, SIOCS80211, &ireq) < 0) {
  84                 perror("ioctl[SIOCS80211]");
  85                 return -1;
  86         }
  87         return 0;
  88 }
  89
  90 static int
  91 get80211var(struct bsd_driver_data *drv, int op, void *arg, int arg_len)
  92 {
  93         struct ieee80211req ireq;
  94
  95         memset(&ireq, 0, sizeof(ireq));
  96         os_strlcpy(ireq.i_name, drv->iface, IFNAMSIZ);
  97         ireq.i_type = op;
  98         ireq.i_len = arg_len;
  99         ireq.i_data = arg;
 100
 101         if (ioctl(drv->ioctl_sock, SIOCG80211, &ireq) < 0) {
 102                 perror("ioctl[SIOCG80211]");
 103                 return -1;
 104         }
 105         return ireq.i_len;
 106 }
 107
 108 static int
 109 set80211param(struct bsd_driver_data *drv, int op, int arg)
 110 {
 111         struct ieee80211req ireq;
 112
 113         memset(&ireq, 0, sizeof(ireq));
 114         os_strlcpy(ireq.i_name, drv->iface, IFNAMSIZ);
 115         ireq.i_type = op;
 116         ireq.i_val = arg;
 117
 118         if (ioctl(drv->ioctl_sock, SIOCS80211, &ireq) < 0) {
 119                 perror("ioctl[SIOCS80211]");
 120                 return -1;
 121         }
 122         return 0;
 123 }
 124
 125 static const char *
 126 ether_sprintf(const u8 *addr)
 127 {
 128         static char buf[sizeof(MACSTR)];
 129
 130         if (addr != NULL)
 131                 snprintf(buf, sizeof(buf), MACSTR, MAC2STR(addr));
 132         else
 133                 snprintf(buf, sizeof(buf), MACSTR, 0,0,0,0,0,0);
 134         return buf;
 135 }
 136
 137 /*
 138  * Configure WPA parameters.
 139  */
 140 static int
 141 bsd_configure_wpa(struct bsd_driver_data *drv)
 142 {
 143         static const char *ciphernames[] =
 144                 { "WEP", "TKIP", "AES-OCB", "AES-CCM", "CKIP", "NONE" };
 145         struct hostapd_data *hapd = drv->hapd;
 146         struct hostapd_bss_config *conf = hapd->conf;
 147         int v;
 148
 149         switch (conf->wpa_group) {
 150         case WPA_CIPHER_CCMP:
 151                 v = IEEE80211_CIPHER_AES_CCM;
 152                 break;
 153         case WPA_CIPHER_TKIP:
 154                 v = IEEE80211_CIPHER_TKIP;
 155                 break;
 156         case WPA_CIPHER_WEP104:
 157                 v = IEEE80211_CIPHER_WEP;
 158                 break;
 159         case WPA_CIPHER_WEP40:
 160                 v = IEEE80211_CIPHER_WEP;
 161                 break;
 162         case WPA_CIPHER_NONE:
 163                 v = IEEE80211_CIPHER_NONE;
 164                 break;
 165         default:
 166                 printf("Unknown group key cipher %u\n",
 167                         conf->wpa_group);
 168                 return -1;
 169         }
 170         wpa_printf(MSG_DEBUG, "%s: group key cipher=%s (%u)",
 171                    __func__, ciphernames[v], v);
 172         if (set80211param(drv, IEEE80211_IOC_MCASTCIPHER, v)) {
 173                 printf("Unable to set group key cipher to %u (%s)\n",
 174                         v, ciphernames[v]);
 175                 return -1;
 176         }
 177         if (v == IEEE80211_CIPHER_WEP) {
 178                 /* key length is done only for specific ciphers */
 179                 v = (conf->wpa_group == WPA_CIPHER_WEP104 ? 13 : 5);
 180                 if (set80211param(drv, IEEE80211_IOC_MCASTKEYLEN, v)) {
 181                         printf("Unable to set group key length to %u\n", v);
 182                         return -1;
 183                 }
 184         }
 185
 186         v = 0;
 187         if (conf->wpa_pairwise & WPA_CIPHER_CCMP)
 188                 v |= 1<<IEEE80211_CIPHER_AES_CCM;
 189         if (conf->wpa_pairwise & WPA_CIPHER_TKIP)
 190                 v |= 1<<IEEE80211_CIPHER_TKIP;
 191         if (conf->wpa_pairwise & WPA_CIPHER_NONE)
 192                 v |= 1<<IEEE80211_CIPHER_NONE;
 193         wpa_printf(MSG_DEBUG, "%s: pairwise key ciphers=0x%x", __func__, v);
 194         if (set80211param(drv, IEEE80211_IOC_UCASTCIPHERS, v)) {
 195                 printf("Unable to set pairwise key ciphers to 0x%x\n", v);
 196                 return -1;
 197         }
 198
 199         wpa_printf(MSG_DEBUG, "%s: key management algorithms=0x%x",
 200                    __func__, conf->wpa_key_mgmt);
 201         if (set80211param(drv, IEEE80211_IOC_KEYMGTALGS, conf->wpa_key_mgmt)) {
 202                 printf("Unable to set key management algorithms to 0x%x\n",
 203                         conf->wpa_key_mgmt);
 204                 return -1;
 205         }
 206
 207         v = 0;
 208         if (conf->rsn_preauth)
 209                 v |= BIT(0);
 210         wpa_printf(MSG_DEBUG, "%s: rsn capabilities=0x%x",
 211                    __func__, conf->rsn_preauth);
 212         if (set80211param(drv, IEEE80211_IOC_RSNCAPS, v)) {
 213                 printf("Unable to set RSN capabilities to 0x%x\n", v);
 214                 return -1;
 215         }
 216
 217         wpa_printf(MSG_DEBUG, "%s: enable WPA= 0x%x", __func__, conf->wpa);
 218         if (set80211param(drv, IEEE80211_IOC_WPA, conf->wpa)) {
 219                 printf("Unable to set WPA to %u\n", conf->wpa);
 220                 return -1;
 221         }
 222         return 0;
 223 }
 224
 225
 226 static int
 227 bsd_set_iface_flags(void *priv, int dev_up)
 228 {
 229         struct bsd_driver_data *drv = priv;
 230         struct ifreq ifr;
 231
 232         wpa_printf(MSG_DEBUG, "%s: dev_up=%d", __func__, dev_up);
 233
 234         if (drv->ioctl_sock < 0)
 235                 return -1;
 236
 237         memset(&ifr, 0, sizeof(ifr));
 238         os_strlcpy(ifr.ifr_name, drv->iface, IFNAMSIZ);
 239
 240         if (ioctl(drv->ioctl_sock, SIOCGIFFLAGS, &ifr) != 0) {
 241                 perror("ioctl[SIOCGIFFLAGS]");
 242                 return -1;
 243         }
 244
 245         if (dev_up)
 246                 ifr.ifr_flags |= IFF_UP;
 247         else
 248                 ifr.ifr_flags &= ~IFF_UP;
 249
 250         if (ioctl(drv->ioctl_sock, SIOCSIFFLAGS, &ifr) != 0) {
 251                 perror("ioctl[SIOCSIFFLAGS]");
 252                 return -1;
 253         }
 254
 255         if (dev_up) {
 256                 memset(&ifr, 0, sizeof(ifr));
 257                 os_strlcpy(ifr.ifr_name, drv->iface, IFNAMSIZ);
 258                 ifr.ifr_mtu = HOSTAPD_MTU;
 259                 if (ioctl(drv->ioctl_sock, SIOCSIFMTU, &ifr) != 0) {
 260                         perror("ioctl[SIOCSIFMTU]");
 261                         printf("Setting MTU failed - trying to survive with "
 262                                "current value\n");
 263                 }
 264         }
 265
 266         return 0;
 267 }
 268
 269 static int
 270 bsd_set_ieee8021x(const char *ifname, void *priv, int enabled)
 271 {
 272         struct bsd_driver_data *drv = priv;
 273         struct hostapd_data *hapd = drv->hapd;
 274         struct hostapd_bss_config *conf = hapd->conf;
 275
 276         wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
 277
 278         if (!enabled) {
 279                 /* XXX restore state */
 280                 return set80211param(priv, IEEE80211_IOC_AUTHMODE,
 281                         IEEE80211_AUTH_AUTO);
 282         }
 283         if (!conf->wpa && !conf->ieee802_1x) {
 284                 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_DRIVER,
 285                         HOSTAPD_LEVEL_WARNING, "No 802.1X or WPA enabled!");
 286                 return -1;
 287         }
 288         if (conf->wpa && bsd_configure_wpa(drv) != 0) {
 289                 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_DRIVER,
 290                         HOSTAPD_LEVEL_WARNING, "Error configuring WPA state!");
 291                 return -1;
 292         }
 293         if (set80211param(priv, IEEE80211_IOC_AUTHMODE,
 294                 (conf->wpa ?  IEEE80211_AUTH_WPA : IEEE80211_AUTH_8021X))) {
 295                 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_DRIVER,
 296                         HOSTAPD_LEVEL_WARNING, "Error enabling WPA/802.1X!");
 297                 return -1;
 298         }
 299         return bsd_set_iface_flags(priv, 1);
 300 }
 301
 302 static int
 303 bsd_set_privacy(const char *ifname, void *priv, int enabled)
 304 {
 305         struct bsd_driver_data *drv = priv;
 306
 307         wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
 308
 309         return set80211param(drv, IEEE80211_IOC_PRIVACY, enabled);
 310 }
 311
 312 static int
 313 bsd_set_sta_authorized(void *priv, const u8 *addr, int authorized)
 314 {
 315         struct bsd_driver_data *drv = priv;
 316         struct ieee80211req_mlme mlme;
 317
 318         wpa_printf(MSG_DEBUG, "%s: addr=%s authorized=%d",
 319                    __func__, ether_sprintf(addr), authorized);
 320
 321         if (authorized)
 322                 mlme.im_op = IEEE80211_MLME_AUTHORIZE;
 323         else
 324                 mlme.im_op = IEEE80211_MLME_UNAUTHORIZE;
 325         mlme.im_reason = 0;
 326         memcpy(mlme.im_macaddr, addr, IEEE80211_ADDR_LEN);
 327         return set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme));
 328 }
 329
 330 static int
 331 bsd_sta_set_flags(void *priv, const u8 *addr, int total_flags, int flags_or,
 332                   int flags_and)
 333 {
 334         /* For now, only support setting Authorized flag */
 335         if (flags_or & WLAN_STA_AUTHORIZED)
 336                 return bsd_set_sta_authorized(priv, addr, 1);
 337         if (!(flags_and & WLAN_STA_AUTHORIZED))
 338                 return bsd_set_sta_authorized(priv, addr, 0);
 339         return 0;
 340 }
 341
 342 static int
 343 bsd_del_key(void *priv, const u8 *addr, int key_idx)
 344 {
 345         struct bsd_driver_data *drv = priv;
 346         struct ieee80211req_del_key wk;
 347
 348         wpa_printf(MSG_DEBUG, "%s: addr=%s key_idx=%d",
 349                    __func__, ether_sprintf(addr), key_idx);
 350
 351         memset(&wk, 0, sizeof(wk));
 352         if (addr != NULL) {
 353                 memcpy(wk.idk_macaddr, addr, IEEE80211_ADDR_LEN);
 354                 wk.idk_keyix = (u_int8_t) IEEE80211_KEYIX_NONE; /* XXX */
 355         } else {
 356                 wk.idk_keyix = key_idx;
 357         }
 358
 359         return set80211var(drv, IEEE80211_IOC_DELKEY, &wk, sizeof(wk));
 360 }
 361
 362 static int
 363 bsd_set_key(const char *ifname, void *priv, wpa_alg alg,
 364             const u8 *addr, int key_idx, int set_tx, const u8 *seq,
 365             size_t seq_len, const u8 *key, size_t key_len)
 366 {
 367         struct bsd_driver_data *drv = priv;
 368         struct ieee80211req_key wk;
 369         u_int8_t cipher;
 370
 371         if (alg == WPA_ALG_NONE)
 372                 return bsd_del_key(drv, addr, key_idx);
 373
 374         wpa_printf(MSG_DEBUG, "%s: alg=%d addr=%s key_idx=%d",
 375                    __func__, alg, ether_sprintf(addr), key_idx);
 376
 377         if (alg == WPA_ALG_WEP)
 378                 cipher = IEEE80211_CIPHER_WEP;
 379         else if (alg == WPA_ALG_TKIP)
 380                 cipher = IEEE80211_CIPHER_TKIP;
 381         else if (alg == WPA_ALG_CCMP)
 382                 cipher = IEEE80211_CIPHER_AES_CCM;
 383         else {
 384                 printf("%s: unknown/unsupported algorithm %d\n",
 385                         __func__, alg);
 386                 return -1;
 387         }
 388
 389         if (key_len > sizeof(wk.ik_keydata)) {
 390                 printf("%s: key length %d too big\n", __func__, key_len);
 391                 return -3;
 392         }
 393
 394         memset(&wk, 0, sizeof(wk));
 395         wk.ik_type = cipher;
 396         wk.ik_flags = IEEE80211_KEY_RECV | IEEE80211_KEY_XMIT;
 397         if (addr == NULL) {
 398                 memset(wk.ik_macaddr, 0xff, IEEE80211_ADDR_LEN);
 399                 wk.ik_keyix = key_idx;
 400                 wk.ik_flags |= IEEE80211_KEY_DEFAULT;
 401         } else {
 402                 memcpy(wk.ik_macaddr, addr, IEEE80211_ADDR_LEN);
 403                 wk.ik_keyix = IEEE80211_KEYIX_NONE;
 404         }
 405         wk.ik_keylen = key_len;
 406         memcpy(wk.ik_keydata, key, key_len);
 407
 408         return set80211var(drv, IEEE80211_IOC_WPAKEY, &wk, sizeof(wk));
 409 }
 410
 411
 412 static int
 413 bsd_get_seqnum(const char *ifname, void *priv, const u8 *addr, int idx,
 414                u8 *seq)
 415 {
 416         struct bsd_driver_data *drv = priv;
 417         struct ieee80211req_key wk;
 418
 419         wpa_printf(MSG_DEBUG, "%s: addr=%s idx=%d",
 420                    __func__, ether_sprintf(addr), idx);
 421
 422         memset(&wk, 0, sizeof(wk));
 423         if (addr == NULL)
 424                 memset(wk.ik_macaddr, 0xff, IEEE80211_ADDR_LEN);
 425         else
 426                 memcpy(wk.ik_macaddr, addr, IEEE80211_ADDR_LEN);
 427         wk.ik_keyix = idx;
 428
 429         if (get80211var(drv, IEEE80211_IOC_WPAKEY, &wk, sizeof(wk)) < 0) {
 430                 printf("Failed to get encryption.\n");
 431                 return -1;
 432         }
 433
 434 #ifdef WORDS_BIGENDIAN
 435         {
 436                 /*
 437                  * wk.ik_keytsc is in host byte order (big endian), need to
 438                  * swap it to match with the byte order used in WPA.
 439                  */
 440                 int i;
 441                 u8 tmp[WPA_KEY_RSC_LEN];
 442                 memcpy(tmp, &wk.ik_keytsc, sizeof(wk.ik_keytsc));
 443                 for (i = 0; i < WPA_KEY_RSC_LEN; i++) {
 444                         seq[i] = tmp[WPA_KEY_RSC_LEN - i - 1];
 445                 }
 446         }
 447 #else /* WORDS_BIGENDIAN */
 448         memcpy(seq, &wk.ik_keytsc, sizeof(wk.ik_keytsc));
 449 #endif /* WORDS_BIGENDIAN */
 450         return 0;
 451 }
 452
 453
 454 static int
 455 bsd_flush(void *priv)
 456 {
 457         u8 allsta[IEEE80211_ADDR_LEN];
 458
 459         memset(allsta, 0xff, IEEE80211_ADDR_LEN);
 460         return bsd_sta_deauth(priv, NULL, allsta, IEEE80211_REASON_AUTH_LEAVE);
 461 }
 462
 463
 464 static int
 465 bsd_read_sta_driver_data(void *priv, struct hostap_sta_driver_data *data,
 466                          const u8 *addr)
 467 {
 468         struct bsd_driver_data *drv = priv;
 469         struct ieee80211req_sta_stats stats;
 470
 471         memcpy(stats.is_u.macaddr, addr, IEEE80211_ADDR_LEN);
 472         if (get80211var(drv, IEEE80211_IOC_STA_STATS, &stats, sizeof(stats)) > 0) {
 473                 /* XXX? do packets counts include non-data frames? */
 474                 data->rx_packets = stats.is_stats.ns_rx_data;
 475                 data->rx_bytes = stats.is_stats.ns_rx_bytes;
 476                 data->tx_packets = stats.is_stats.ns_tx_data;
 477                 data->tx_bytes = stats.is_stats.ns_tx_bytes;
 478         }
 479         return 0;
 480 }
 481
 482 static int
 483 bsd_set_opt_ie(const char *ifname, void *priv, const u8 *ie, size_t ie_len)
 484 {
 485         /*
 486          * Do nothing; we setup parameters at startup that define the
 487          * contents of the beacon information element.
 488          */
 489         return 0;
 490 }
 491
 492 static int
 493 bsd_sta_deauth(void *priv, const u8 *own_addr, const u8 *addr, int reason_code)
 494 {
 495         struct bsd_driver_data *drv = priv;
 496         struct ieee80211req_mlme mlme;
 497
 498         wpa_printf(MSG_DEBUG, "%s: addr=%s reason_code=%d",
 499                    __func__, ether_sprintf(addr), reason_code);
 500
 501         mlme.im_op = IEEE80211_MLME_DEAUTH;
 502         mlme.im_reason = reason_code;
 503         memcpy(mlme.im_macaddr, addr, IEEE80211_ADDR_LEN);
 504         return set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme));
 505 }
 506
 507 static int
 508 bsd_sta_disassoc(void *priv, const u8 *own_addr, const u8 *addr,
 509                  int reason_code)
 510 {
 511         struct bsd_driver_data *drv = priv;
 512         struct ieee80211req_mlme mlme;
 513
 514         wpa_printf(MSG_DEBUG, "%s: addr=%s reason_code=%d",
 515                    __func__, ether_sprintf(addr), reason_code);
 516
 517         mlme.im_op = IEEE80211_MLME_DISASSOC;
 518         mlme.im_reason = reason_code;
 519         memcpy(mlme.im_macaddr, addr, IEEE80211_ADDR_LEN);
 520         return set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme));
 521 }
 522
 523 static int
 524 bsd_new_sta(struct bsd_driver_data *drv, u8 addr[IEEE80211_ADDR_LEN])
 525 {
 526         struct hostapd_data *hapd = drv->hapd;
 527         struct ieee80211req_wpaie ie;
 528         int ielen = 0;
 529         u8 *iebuf = NULL;
 530
 531         /*
 532          * Fetch and validate any negotiated WPA/RSN parameters.
 533          */
 534         memset(&ie, 0, sizeof(ie));
 535         memcpy(ie.wpa_macaddr, addr, IEEE80211_ADDR_LEN);
 536         if (get80211var(drv, IEEE80211_IOC_WPAIE, &ie, sizeof(ie)) < 0) {
 537                 printf("Failed to get WPA/RSN information element.\n");
 538                 goto no_ie;
 539         }
 540         iebuf = ie.wpa_ie;
 541         ielen = ie.wpa_ie[1];
 542         if (ielen == 0)
 543                 iebuf = NULL;
 544         else
 545                 ielen += 2;
 546
 547 no_ie:
 548         return hostapd_notif_assoc(hapd, addr, iebuf, ielen);
 549 }
 550
 551 static void
 552 bsd_wireless_event_receive(int sock, void *ctx, void *sock_ctx)
 553 {
 554         struct bsd_driver_data *drv = ctx;
 555         struct hostapd_data *hapd = drv->hapd;
 556         char buf[2048];
 557         struct if_announcemsghdr *ifan;
 558         struct rt_msghdr *rtm;
 559         struct ieee80211_michael_event *mic;
 560         struct ieee80211_join_event *join;
 561         struct ieee80211_leave_event *leave;
 562         int n;
 563
 564         n = read(sock, buf, sizeof(buf));
 565         if (n < 0) {
 566                 if (errno != EINTR && errno != EAGAIN)
 567                         perror("read(PF_ROUTE)");
 568                 return;
 569         }
 570
 571         rtm = (struct rt_msghdr *) buf;
 572         if (rtm->rtm_version != RTM_VERSION) {
 573                 wpa_printf(MSG_DEBUG, "Routing message version %d not "
 574                         "understood\n", rtm->rtm_version);
 575                 return;
 576         }
 577         ifan = (struct if_announcemsghdr *) rtm;
 578         switch (rtm->rtm_type) {
 579         case RTM_IEEE80211:
 580                 switch (ifan->ifan_what) {
 581                 case RTM_IEEE80211_ASSOC:
 582                 case RTM_IEEE80211_REASSOC:
 583                 case RTM_IEEE80211_DISASSOC:
 584                 case RTM_IEEE80211_SCAN:
 585                         break;
 586                 case RTM_IEEE80211_LEAVE:
 587                         leave = (struct ieee80211_leave_event *) &ifan[1];
 588                         hostapd_notif_disassoc(drv->hapd, leave->iev_addr);
 589                         break;
 590                 case RTM_IEEE80211_JOIN:
 591 #ifdef RTM_IEEE80211_REJOIN
 592                 case RTM_IEEE80211_REJOIN:
 593 #endif
 594                         join = (struct ieee80211_join_event *) &ifan[1];
 595                         bsd_new_sta(drv, join->iev_addr);
 596                         break;
 597                 case RTM_IEEE80211_REPLAY:
 598                         /* ignore */
 599                         break;
 600                 case RTM_IEEE80211_MICHAEL:
 601                         mic = (struct ieee80211_michael_event *) &ifan[1];
 602                         wpa_printf(MSG_DEBUG,
 603                                 "Michael MIC failure wireless event: "
 604                                 "keyix=%u src_addr=" MACSTR, mic->iev_keyix,
 605                                 MAC2STR(mic->iev_src));
 606                         hostapd_michael_mic_failure(hapd, mic->iev_src);
 607                         break;
 608                 }
 609                 break;
 610         }
 611 }
 612
 613 static int
 614 bsd_wireless_event_init(struct bsd_driver_data *drv)
 615 {
 616         int s;
 617
 618         drv->wext_sock = -1;
 619
 620         s = socket(PF_ROUTE, SOCK_RAW, 0);
 621         if (s < 0) {
 622                 perror("socket(PF_ROUTE,SOCK_RAW)");
 623                 return -1;
 624         }
 625         eloop_register_read_sock(s, bsd_wireless_event_receive, drv, NULL);
 626         drv->wext_sock = s;
 627
 628         return 0;
 629 }
 630
 631 static void
 632 bsd_wireless_event_deinit(struct bsd_driver_data *drv)
 633 {
 634         if (drv->wext_sock < 0)
 635                 return;
 636         eloop_unregister_read_sock(drv->wext_sock);
 637         close(drv->wext_sock);
 638 }
 639
 640
 641 static int
 642 bsd_send_eapol(void *priv, const u8 *addr, const u8 *data, size_t data_len,
 643                int encrypt, const u8 *own_addr)
 644 {
 645         struct bsd_driver_data *drv = priv;
 646         unsigned char buf[3000];
 647         unsigned char *bp = buf;
 648         struct l2_ethhdr *eth;
 649         size_t len;
 650         int status;
 651
 652         /*
 653          * Prepend the Etherent header.  If the caller left us
 654          * space at the front we could just insert it but since
 655          * we don't know we copy to a local buffer.  Given the frequency
 656          * and size of frames this probably doesn't matter.
 657          */
 658         len = data_len + sizeof(struct l2_ethhdr);
 659         if (len > sizeof(buf)) {
 660                 bp = malloc(len);
 661                 if (bp == NULL) {
 662                         printf("EAPOL frame discarded, cannot malloc temp "
 663                                 "buffer of size %u!\n", len);
 664                         return -1;
 665                 }
 666         }
 667         eth = (struct l2_ethhdr *) bp;
 668         memcpy(eth->h_dest, addr, ETH_ALEN);
 669         memcpy(eth->h_source, own_addr, ETH_ALEN);
 670         eth->h_proto = htons(ETH_P_EAPOL);
 671         memcpy(eth+1, data, data_len);
 672
 673         wpa_hexdump(MSG_MSGDUMP, "TX EAPOL", bp, len);
 674
 675         status = l2_packet_send(drv->sock_xmit, addr, ETH_P_EAPOL, bp, len);
 676
 677         if (bp != buf)
 678                 free(bp);
 679         return status;
 680 }
 681
 682 static void
 683 handle_read(void *ctx, const u8 *src_addr, const u8 *buf, size_t len)
 684 {
 685         struct bsd_driver_data *drv = ctx;
 686         hostapd_eapol_receive(drv->hapd, src_addr,
 687                               buf + sizeof(struct l2_ethhdr),
 688                               len - sizeof(struct l2_ethhdr));
 689 }
 690
 691 static int
 692 bsd_get_ssid(const char *ifname, void *priv, u8 *buf, int len)
 693 {
 694         struct bsd_driver_data *drv = priv;
 695         int ssid_len = get80211var(drv, IEEE80211_IOC_SSID, buf, len);
 696
 697         wpa_printf(MSG_DEBUG, "%s: ssid=\"%.*s\"", __func__, ssid_len, buf);
 698
 699         return ssid_len;
 700 }
 701
 702 static int
 703 bsd_set_ssid(const char *ifname, void *priv, const u8 *buf, int len)
 704 {
 705         struct bsd_driver_data *drv = priv;
 706
 707         wpa_printf(MSG_DEBUG, "%s: ssid=\"%.*s\"", __func__, len, buf);
 708
 709         return set80211var(drv, IEEE80211_IOC_SSID, buf, len);
 710 }
 711
 712 static void *
 713 bsd_init(struct hostapd_data *hapd, struct wpa_init_params *params)
 714 {
 715         struct bsd_driver_data *drv;
 716
 717         drv = os_zalloc(sizeof(struct bsd_driver_data));
 718         if (drv == NULL) {
 719                 printf("Could not allocate memory for bsd driver data\n");
 720                 goto bad;
 721         }
 722
 723         drv->hapd = hapd;
 724         drv->ioctl_sock = socket(PF_INET, SOCK_DGRAM, 0);
 725         if (drv->ioctl_sock < 0) {
 726                 perror("socket[PF_INET,SOCK_DGRAM]");
 727                 goto bad;
 728         }
 729         memcpy(drv->iface, params->ifname, sizeof(drv->iface));
 730
 731         drv->sock_xmit = l2_packet_init(drv->iface, NULL, ETH_P_EAPOL,
 732                                         handle_read, drv, 1);
 733         if (drv->sock_xmit == NULL)
 734                 goto bad;
 735         if (l2_packet_get_own_addr(drv->sock_xmit, params->own_addr))
 736                 goto bad;
 737
 738         bsd_set_iface_flags(drv, 0);    /* mark down during setup */
 739         if (bsd_wireless_event_init(drv))
 740                 goto bad;
 741
 742         return drv;
 743 bad:
 744         if (drv->sock_xmit != NULL)
 745                 l2_packet_deinit(drv->sock_xmit);
 746         if (drv->ioctl_sock >= 0)
 747                 close(drv->ioctl_sock);
 748         if (drv != NULL)
 749                 free(drv);
 750         return NULL;
 751 }
 752
 753
 754 static void
 755 bsd_deinit(void *priv)
 756 {
 757         struct bsd_driver_data *drv = priv;
 758
 759         bsd_wireless_event_deinit(drv);
 760         (void) bsd_set_iface_flags(drv, 0);
 761         if (drv->ioctl_sock >= 0)
 762                 close(drv->ioctl_sock);
 763         if (drv->sock_xmit != NULL)
 764                 l2_packet_deinit(drv->sock_xmit);
 765         free(drv);
 766 }
 767
 768 const struct wpa_driver_ops wpa_driver_bsd_ops = {
 769         .name                   = "bsd",
 770         .hapd_init              = bsd_init,
 771         .hapd_deinit            = bsd_deinit,
 772         .set_ieee8021x          = bsd_set_ieee8021x,
 773         .set_privacy            = bsd_set_privacy,
 774         .hapd_set_key           = bsd_set_key,
 775         .get_seqnum             = bsd_get_seqnum,
 776         .flush                  = bsd_flush,
 777         .set_generic_elem       = bsd_set_opt_ie,
 778         .sta_set_flags          = bsd_sta_set_flags,
 779         .read_sta_data          = bsd_read_sta_driver_data,
 780         .hapd_send_eapol        = bsd_send_eapol,
 781         .sta_disassoc           = bsd_sta_disassoc,
 782         .sta_deauth             = bsd_sta_deauth,
 783         .hapd_set_ssid          = bsd_set_ssid,
 784         .hapd_get_ssid          = bsd_get_ssid,
 785 };
 786
 787 #else /* HOSTAPD */
 788
 789 struct wpa_driver_bsd_data {
 790         int     sock;                   /* open socket for 802.11 ioctls */
 791         int     route;                  /* routing socket for events */
 792         char    ifname[IFNAMSIZ+1];     /* interface name */
 793         unsigned int ifindex;           /* interface index */
 794         void    *ctx;
 795         int     prev_roaming;           /* roaming state to restore on deinit */
 796         int     prev_privacy;           /* privacy state to restore on deinit */
 797         int     prev_wpa;               /* wpa state to restore on deinit */
 798 };
 799
 800 static int
 801 set80211var(struct wpa_driver_bsd_data *drv, int op, const void *arg, int arg_len)
 802 {
 803         struct ieee80211req ireq;
 804
 805         os_memset(&ireq, 0, sizeof(ireq));
 806         os_strlcpy(ireq.i_name, drv->ifname, IFNAMSIZ);
 807         ireq.i_type = op;
 808         ireq.i_len = arg_len;
 809         ireq.i_data = (void *) arg;
 810
 811         if (ioctl(drv->sock, SIOCS80211, &ireq) < 0) {
 812                 fprintf(stderr, "ioctl[SIOCS80211, op %u, len %u]: %s\n",
 813                         op, arg_len, strerror(errno));
 814                 return -1;
 815         }
 816         return 0;
 817 }
 818
 819 static int
 820 get80211var(struct wpa_driver_bsd_data *drv, int op, void *arg, int arg_len)
 821 {
 822         struct ieee80211req ireq;
 823
 824         os_memset(&ireq, 0, sizeof(ireq));
 825         os_strlcpy(ireq.i_name, drv->ifname, IFNAMSIZ);
 826         ireq.i_type = op;
 827         ireq.i_len = arg_len;
 828         ireq.i_data = arg;
 829
 830         if (ioctl(drv->sock, SIOCG80211, &ireq) < 0) {
 831                 fprintf(stderr, "ioctl[SIOCG80211, op %u, len %u]: %s\n",
 832                         op, arg_len, strerror(errno));
 833                 return -1;
 834         }
 835         return ireq.i_len;
 836 }
 837
 838 static int
 839 set80211param(struct wpa_driver_bsd_data *drv, int op, int arg)
 840 {
 841         struct ieee80211req ireq;
 842
 843         os_memset(&ireq, 0, sizeof(ireq));
 844         os_strlcpy(ireq.i_name, drv->ifname, IFNAMSIZ);
 845         ireq.i_type = op;
 846         ireq.i_val = arg;
 847
 848         if (ioctl(drv->sock, SIOCS80211, &ireq) < 0) {
 849                 fprintf(stderr, "ioctl[SIOCS80211, op %u, arg 0x%x]: %s\n",
 850                         op, arg, strerror(errno));
 851                 return -1;
 852         }
 853         return 0;
 854 }
 855
 856 static int
 857 get80211param(struct wpa_driver_bsd_data *drv, int op)
 858 {
 859         struct ieee80211req ireq;
 860
 861         os_memset(&ireq, 0, sizeof(ireq));
 862         os_strlcpy(ireq.i_name, drv->ifname, IFNAMSIZ);
 863         ireq.i_type = op;
 864
 865         if (ioctl(drv->sock, SIOCG80211, &ireq) < 0) {
 866                 fprintf(stderr, "ioctl[SIOCG80211, op %u]: %s\n",
 867                         op, strerror(errno));
 868                 return -1;
 869         }
 870         return ireq.i_val;
 871 }
 872
 873 static int
 874 getifflags(struct wpa_driver_bsd_data *drv, int *flags)
 875 {
 876         struct ifreq ifr;
 877
 878         os_memset(&ifr, 0, sizeof(ifr));
 879         os_strlcpy(ifr.ifr_name, drv->ifname, sizeof(ifr.ifr_name));
 880         if (ioctl(drv->sock, SIOCGIFFLAGS, (caddr_t)&ifr) < 0) {
 881                 perror("SIOCGIFFLAGS");
 882                 return errno;
 883         }
 884         *flags = ifr.ifr_flags & 0xffff;
 885         return 0;
 886 }
 887
 888 static int
 889 setifflags(struct wpa_driver_bsd_data *drv, int flags)
 890 {
 891         struct ifreq ifr;
 892
 893         os_memset(&ifr, 0, sizeof(ifr));
 894         os_strlcpy(ifr.ifr_name, drv->ifname, sizeof(ifr.ifr_name));
 895         ifr.ifr_flags = flags & 0xffff;
 896         if (ioctl(drv->sock, SIOCSIFFLAGS, (caddr_t)&ifr) < 0) {
 897                 perror("SIOCSIFFLAGS");
 898                 return errno;
 899         }
 900         return 0;
 901 }
 902
 903 static int
 904 wpa_driver_bsd_get_bssid(void *priv, u8 *bssid)
 905 {
 906         struct wpa_driver_bsd_data *drv = priv;
 907
 908         return get80211var(drv, IEEE80211_IOC_BSSID,
 909                 bssid, IEEE80211_ADDR_LEN) < 0 ? -1 : 0;
 910 }
 911
 912 #if 0
 913 static int
 914 wpa_driver_bsd_set_bssid(void *priv, const char *bssid)
 915 {
 916         struct wpa_driver_bsd_data *drv = priv;
 917
 918         return set80211var(drv, IEEE80211_IOC_BSSID,
 919                 bssid, IEEE80211_ADDR_LEN);
 920 }
 921 #endif
 922
 923 static int
 924 wpa_driver_bsd_get_ssid(void *priv, u8 *ssid)
 925 {
 926         struct wpa_driver_bsd_data *drv = priv;
 927
 928         return get80211var(drv, IEEE80211_IOC_SSID,
 929                 ssid, IEEE80211_NWID_LEN);
 930 }
 931
 932 static int
 933 wpa_driver_bsd_set_ssid(void *priv, const u8 *ssid,
 934                              size_t ssid_len)
 935 {
 936         struct wpa_driver_bsd_data *drv = priv;
 937
 938         return set80211var(drv, IEEE80211_IOC_SSID, ssid, ssid_len);
 939 }
 940
 941 static int
 942 wpa_driver_bsd_set_wpa_ie(struct wpa_driver_bsd_data *drv,
 943         const u8 *wpa_ie, size_t wpa_ie_len)
 944 {
 945         return set80211var(drv, IEEE80211_IOC_OPTIE, wpa_ie, wpa_ie_len);
 946 }
 947
 948 static int
 949 wpa_driver_bsd_set_wpa_internal(void *priv, int wpa, int privacy)
 950 {
 951         struct wpa_driver_bsd_data *drv = priv;
 952         int ret = 0;
 953
 954         wpa_printf(MSG_DEBUG, "%s: wpa=%d privacy=%d",
 955                 __FUNCTION__, wpa, privacy);
 956
 957         if (!wpa && wpa_driver_bsd_set_wpa_ie(drv, NULL, 0) < 0)
 958                 ret = -1;
 959         if (set80211param(drv, IEEE80211_IOC_PRIVACY, privacy) < 0)
 960                 ret = -1;
 961         if (set80211param(drv, IEEE80211_IOC_WPA, wpa) < 0)
 962                 ret = -1;
 963
 964         return ret;
 965 }
 966
 967 static int
 968 wpa_driver_bsd_set_wpa(void *priv, int enabled)
 969 {
 970         wpa_printf(MSG_DEBUG, "%s: enabled=%d", __FUNCTION__, enabled);
 971
 972         return wpa_driver_bsd_set_wpa_internal(priv, enabled ? 3 : 0, enabled);
 973 }
 974
 975 static int
 976 wpa_driver_bsd_del_key(struct wpa_driver_bsd_data *drv, int key_idx,
 977                        const unsigned char *addr)
 978 {
 979         struct ieee80211req_del_key wk;
 980
 981         os_memset(&wk, 0, sizeof(wk));
 982         if (addr != NULL &&
 983             bcmp(addr, "\xff\xff\xff\xff\xff\xff", IEEE80211_ADDR_LEN) != 0) {
 984                 struct ether_addr ea;
 985
 986                 os_memcpy(&ea, addr, IEEE80211_ADDR_LEN);
 987                 wpa_printf(MSG_DEBUG, "%s: addr=%s keyidx=%d",
 988                         __func__, ether_ntoa(&ea), key_idx);
 989                 os_memcpy(wk.idk_macaddr, addr, IEEE80211_ADDR_LEN);
 990                 wk.idk_keyix = (uint8_t) IEEE80211_KEYIX_NONE;
 991         } else {
 992                 wpa_printf(MSG_DEBUG, "%s: keyidx=%d", __func__, key_idx);
 993                 wk.idk_keyix = key_idx;
 994         }
 995         return set80211var(drv, IEEE80211_IOC_DELKEY, &wk, sizeof(wk));
 996 }
 997
 998 static int
 999 wpa_driver_bsd_set_key(void *priv, wpa_alg alg,
1000                        const unsigned char *addr, int key_idx, int set_tx,
1001                        const u8 *seq, size_t seq_len,
1002                        const u8 *key, size_t key_len)
1003 {
1004         struct wpa_driver_bsd_data *drv = priv;
1005         struct ieee80211req_key wk;
1006         struct ether_addr ea;
1007         char *alg_name;
1008         u_int8_t cipher;
1009
1010         if (alg == WPA_ALG_NONE)
1011                 return wpa_driver_bsd_del_key(drv, key_idx, addr);
1012
1013         switch (alg) {
1014         case WPA_ALG_WEP:
1015                 alg_name = "WEP";
1016                 cipher = IEEE80211_CIPHER_WEP;
1017                 break;
1018         case WPA_ALG_TKIP:
1019                 alg_name = "TKIP";
1020                 cipher = IEEE80211_CIPHER_TKIP;
1021                 break;
1022         case WPA_ALG_CCMP:
1023                 alg_name = "CCMP";
1024                 cipher = IEEE80211_CIPHER_AES_CCM;
1025                 break;
1026         default:
1027                 wpa_printf(MSG_DEBUG, "%s: unknown/unsupported algorithm %d",
1028                         __func__, alg);
1029                 return -1;
1030         }
1031
1032         os_memcpy(&ea, addr, IEEE80211_ADDR_LEN);
1033         wpa_printf(MSG_DEBUG,
1034                 "%s: alg=%s addr=%s key_idx=%d set_tx=%d seq_len=%zu key_len=%zu",
1035                 __func__, alg_name, ether_ntoa(&ea), key_idx, set_tx,
1036                 seq_len, key_len);
1037
1038         if (seq_len > sizeof(u_int64_t)) {
1039                 wpa_printf(MSG_DEBUG, "%s: seq_len %zu too big",
1040                         __func__, seq_len);
1041                 return -2;
1042         }
1043         if (key_len > sizeof(wk.ik_keydata)) {
1044                 wpa_printf(MSG_DEBUG, "%s: key length %zu too big",
1045                         __func__, key_len);
1046                 return -3;
1047         }
1048
1049         os_memset(&wk, 0, sizeof(wk));
1050         wk.ik_type = cipher;
1051         wk.ik_flags = IEEE80211_KEY_RECV;
1052         if (set_tx)
1053                 wk.ik_flags |= IEEE80211_KEY_XMIT;
1054         os_memcpy(wk.ik_macaddr, addr, IEEE80211_ADDR_LEN);
1055         /*
1056          * Deduce whether group/global or unicast key by checking
1057          * the address (yech).  Note also that we can only mark global
1058          * keys default; doing this for a unicast key is an error.
1059          */
1060         if (bcmp(addr, "\xff\xff\xff\xff\xff\xff", IEEE80211_ADDR_LEN) == 0) {
1061                 wk.ik_flags |= IEEE80211_KEY_GROUP;
1062                 wk.ik_keyix = key_idx;
1063         } else {
1064                 wk.ik_keyix = (key_idx == 0 ? IEEE80211_KEYIX_NONE : key_idx);
1065         }
1066         if (wk.ik_keyix != IEEE80211_KEYIX_NONE && set_tx)
1067                 wk.ik_flags |= IEEE80211_KEY_DEFAULT;
1068         wk.ik_keylen = key_len;
1069         os_memcpy(&wk.ik_keyrsc, seq, seq_len);
1070         os_memcpy(wk.ik_keydata, key, key_len);
1071
1072         return set80211var(drv, IEEE80211_IOC_WPAKEY, &wk, sizeof(wk));
1073 }
1074
1075 static int
1076 wpa_driver_bsd_set_countermeasures(void *priv, int enabled)
1077 {
1078         struct wpa_driver_bsd_data *drv = priv;
1079
1080         wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
1081         return set80211param(drv, IEEE80211_IOC_COUNTERMEASURES, enabled);
1082 }
1083
1084
1085 static int
1086 wpa_driver_bsd_set_drop_unencrypted(void *priv, int enabled)
1087 {
1088         struct wpa_driver_bsd_data *drv = priv;
1089
1090         wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
1091         return set80211param(drv, IEEE80211_IOC_DROPUNENCRYPTED, enabled);
1092 }
1093
1094 static int
1095 wpa_driver_bsd_deauthenticate(void *priv, const u8 *addr, int reason_code)
1096 {
1097         struct wpa_driver_bsd_data *drv = priv;
1098         struct ieee80211req_mlme mlme;
1099
1100         wpa_printf(MSG_DEBUG, "%s", __func__);
1101         os_memset(&mlme, 0, sizeof(mlme));
1102         mlme.im_op = IEEE80211_MLME_DEAUTH;
1103         mlme.im_reason = reason_code;
1104         os_memcpy(mlme.im_macaddr, addr, IEEE80211_ADDR_LEN);
1105         return set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme));
1106 }
1107
1108 static int
1109 wpa_driver_bsd_disassociate(void *priv, const u8 *addr, int reason_code)
1110 {
1111         struct wpa_driver_bsd_data *drv = priv;
1112         struct ieee80211req_mlme mlme;
1113
1114         wpa_printf(MSG_DEBUG, "%s", __func__);
1115         os_memset(&mlme, 0, sizeof(mlme));
1116         mlme.im_op = IEEE80211_MLME_DISASSOC;
1117         mlme.im_reason = reason_code;
1118         os_memcpy(mlme.im_macaddr, addr, IEEE80211_ADDR_LEN);
1119         return set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme));
1120 }
1121
1122 static int
1123 wpa_driver_bsd_associate(void *priv, struct wpa_driver_associate_params *params)
1124 {
1125         struct wpa_driver_bsd_data *drv = priv;
1126         struct ieee80211req_mlme mlme;
1127         int privacy;
1128
1129         wpa_printf(MSG_DEBUG,
1130                 "%s: ssid '%.*s' wpa ie len %u pairwise %u group %u key mgmt %u"
1131                 , __func__
1132                 , params->ssid_len, params->ssid
1133                 , params->wpa_ie_len
1134                 , params->pairwise_suite
1135                 , params->group_suite
1136                 , params->key_mgmt_suite
1137         );
1138
1139         /* XXX error handling is wrong but unclear what to do... */
1140         if (wpa_driver_bsd_set_wpa_ie(drv, params->wpa_ie, params->wpa_ie_len) < 0)
1141                 return -1;
1142 #ifndef NEW_FREEBSD_MLME_ASSOC
1143         if (wpa_driver_bsd_set_ssid(drv, params->ssid, params->ssid_len) < 0)
1144                 return -1;
1145 #endif
1146
1147         privacy = !(params->pairwise_suite == CIPHER_NONE &&
1148             params->group_suite == CIPHER_NONE &&
1149             params->key_mgmt_suite == KEY_MGMT_NONE &&
1150             params->wpa_ie_len == 0);
1151         wpa_printf(MSG_DEBUG, "%s: set PRIVACY %u", __func__, privacy);
1152
1153         if (set80211param(drv, IEEE80211_IOC_PRIVACY, privacy) < 0)
1154                 return -1;
1155
1156         if (params->wpa_ie_len &&
1157             set80211param(drv, IEEE80211_IOC_WPA,
1158                           params->wpa_ie[0] == WLAN_EID_RSN ? 2 : 1) < 0)
1159                 return -1;
1160
1161         os_memset(&mlme, 0, sizeof(mlme));
1162         mlme.im_op = IEEE80211_MLME_ASSOC;
1163 #ifdef NEW_FREEBSD_MLME_ASSOC
1164         if (params->ssid != NULL)
1165                 os_memcpy(mlme.im_ssid, params->ssid, params->ssid_len);
1166         mlme.im_ssid_len = params->ssid_len;
1167 #endif
1168         if (params->bssid != NULL)
1169                 os_memcpy(mlme.im_macaddr, params->bssid, IEEE80211_ADDR_LEN);
1170         if (set80211var(drv, IEEE80211_IOC_MLME, &mlme, sizeof(mlme)) < 0)
1171                 return -1;
1172         return 0;
1173 }
1174
1175 static int
1176 wpa_driver_bsd_set_auth_alg(void *priv, int auth_alg)
1177 {
1178         struct wpa_driver_bsd_data *drv = priv;
1179         int authmode;
1180
1181         if ((auth_alg & AUTH_ALG_OPEN_SYSTEM) &&
1182             (auth_alg & AUTH_ALG_SHARED_KEY))
1183                 authmode = IEEE80211_AUTH_AUTO;
1184         else if (auth_alg & AUTH_ALG_SHARED_KEY)
1185                 authmode = IEEE80211_AUTH_SHARED;
1186         else
1187                 authmode = IEEE80211_AUTH_OPEN;
1188
1189         return set80211param(drv, IEEE80211_IOC_AUTHMODE, authmode);
1190 }
1191
1192 static int
1193 wpa_driver_bsd_scan(void *priv, const u8 *ssid, size_t ssid_len)
1194 {
1195         struct wpa_driver_bsd_data *drv = priv;
1196         int flags;
1197
1198         /* NB: interface must be marked UP to do a scan */
1199         if (getifflags(drv, &flags) != 0 || setifflags(drv, flags | IFF_UP) != 0)
1200                 return -1;
1201
1202         /* set desired ssid before scan */
1203         if (wpa_driver_bsd_set_ssid(drv, ssid, ssid_len) < 0)
1204                 return -1;
1205
1206         /* NB: net80211 delivers a scan complete event so no need to poll */
1207         return set80211param(drv, IEEE80211_IOC_SCAN_REQ, 0);
1208 }
1209
1210 static void
1211 wpa_driver_bsd_event_receive(int sock, void *ctx, void *sock_ctx)
1212 {
1213         struct wpa_driver_bsd_data *drv = sock_ctx;
1214         char buf[2048];
1215         struct if_announcemsghdr *ifan;
1216         struct if_msghdr *ifm;
1217         struct rt_msghdr *rtm;
1218         union wpa_event_data event;
1219         struct ieee80211_michael_event *mic;
1220         int n;
1221
1222         n = read(sock, buf, sizeof(buf));
1223         if (n < 0) {
1224                 if (errno != EINTR && errno != EAGAIN)
1225                         perror("read(PF_ROUTE)");
1226                 return;
1227         }
1228
1229         rtm = (struct rt_msghdr *) buf;
1230         if (rtm->rtm_version != RTM_VERSION) {
1231                 wpa_printf(MSG_DEBUG, "Routing message version %d not "
1232                         "understood\n", rtm->rtm_version);
1233                 return;
1234         }
1235         os_memset(&event, 0, sizeof(event));
1236         switch (rtm->rtm_type) {
1237         case RTM_IFANNOUNCE:
1238                 ifan = (struct if_announcemsghdr *) rtm;
1239                 if (ifan->ifan_index != drv->ifindex)
1240                         break;
1241                 strlcpy(event.interface_status.ifname, drv->ifname,
1242                         sizeof(event.interface_status.ifname));
1243                 switch (ifan->ifan_what) {
1244                 case IFAN_DEPARTURE:
1245                         event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1246                 default:
1247                         return;
1248                 }
1249                 wpa_printf(MSG_DEBUG, "RTM_IFANNOUNCE: Interface '%s' %s",
1250                            event.interface_status.ifname,
1251                            ifan->ifan_what == IFAN_DEPARTURE ?
1252                                 "removed" : "added");
1253                 wpa_supplicant_event(ctx, EVENT_INTERFACE_STATUS, &event);
1254                 break;
1255         case RTM_IEEE80211:
1256                 ifan = (struct if_announcemsghdr *) rtm;
1257                 if (ifan->ifan_index != drv->ifindex)
1258                         break;
1259                 switch (ifan->ifan_what) {
1260                 case RTM_IEEE80211_ASSOC:
1261                 case RTM_IEEE80211_REASSOC:
1262                         wpa_supplicant_event(ctx, EVENT_ASSOC, NULL);
1263                         break;
1264                 case RTM_IEEE80211_DISASSOC:
1265                         wpa_supplicant_event(ctx, EVENT_DISASSOC, NULL);
1266                         break;
1267                 case RTM_IEEE80211_SCAN:
1268                         wpa_supplicant_event(ctx, EVENT_SCAN_RESULTS, NULL);
1269                         break;
1270                 case RTM_IEEE80211_REPLAY:
1271                         /* ignore */
1272                         break;
1273                 case RTM_IEEE80211_MICHAEL:
1274                         mic = (struct ieee80211_michael_event *) &ifan[1];
1275                         wpa_printf(MSG_DEBUG,
1276                                 "Michael MIC failure wireless event: "
1277                                 "keyix=%u src_addr=" MACSTR, mic->iev_keyix,
1278                                 MAC2STR(mic->iev_src));
1279
1280                         os_memset(&event, 0, sizeof(event));
1281                         event.michael_mic_failure.unicast =
1282                                 !IEEE80211_IS_MULTICAST(mic->iev_dst);
1283                         wpa_supplicant_event(ctx, EVENT_MICHAEL_MIC_FAILURE,
1284                                 &event);
1285                         break;
1286                 }
1287                 break;
1288         case RTM_IFINFO:
1289                 ifm = (struct if_msghdr *) rtm;
1290                 if (ifm->ifm_index != drv->ifindex)
1291                         break;
1292                 if ((rtm->rtm_flags & RTF_UP) == 0) {
1293                         strlcpy(event.interface_status.ifname, drv->ifname,
1294                                 sizeof(event.interface_status.ifname));
1295                         event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1296                         wpa_printf(MSG_DEBUG, "RTM_IFINFO: Interface '%s' DOWN",
1297                                    event.interface_status.ifname);
1298                         wpa_supplicant_event(ctx, EVENT_INTERFACE_STATUS, &event);
1299                 }
1300                 break;
1301         }
1302 }
1303
1304 /* Compare function for sorting scan results. Return >0 if @b is consider
1305  * better. */
1306 static int
1307 wpa_scan_result_compar(const void *a, const void *b)
1308 {
1309         const struct wpa_scan_result *wa = a;
1310         const struct wpa_scan_result *wb = b;
1311
1312         /* WPA/WPA2 support preferred */
1313         if ((wb->wpa_ie_len || wb->rsn_ie_len) &&
1314             !(wa->wpa_ie_len || wa->rsn_ie_len))
1315                 return 1;
1316         if (!(wb->wpa_ie_len || wb->rsn_ie_len) &&
1317             (wa->wpa_ie_len || wa->rsn_ie_len))
1318                 return -1;
1319
1320         /* privacy support preferred */
1321         if ((wa->caps & IEEE80211_CAPINFO_PRIVACY) &&
1322             (wb->caps & IEEE80211_CAPINFO_PRIVACY) == 0)
1323                 return 1;
1324         if ((wa->caps & IEEE80211_CAPINFO_PRIVACY) == 0 &&
1325             (wb->caps & IEEE80211_CAPINFO_PRIVACY))
1326                 return -1;
1327
1328         /* best/max rate preferred if signal level close enough XXX */
1329         if (wa->maxrate != wb->maxrate && abs(wb->level - wa->level) < 5)
1330                 return wb->maxrate - wa->maxrate;
1331
1332         /* use freq for channel preference */
1333
1334         /* all things being equal, use signal level */
1335         return wb->level - wa->level;
1336 }
1337
1338 static int
1339 getmaxrate(uint8_t rates[15], uint8_t nrates)
1340 {
1341         int i, maxrate = -1;
1342
1343         for (i = 0; i < nrates; i++) {
1344                 int rate = rates[i] & IEEE80211_RATE_VAL;
1345                 if (rate > maxrate)
1346                         rate = maxrate;
1347         }
1348         return maxrate;
1349 }
1350
1351 /* unalligned little endian access */
1352 #define LE_READ_4(p)                                    \
1353         ((u_int32_t)                                    \
1354          ((((const u_int8_t *)(p))[0]      ) |          \
1355           (((const u_int8_t *)(p))[1] <<  8) |          \
1356           (((const u_int8_t *)(p))[2] << 16) |          \
1357           (((const u_int8_t *)(p))[3] << 24)))
1358
1359 static int __inline
1360 iswpaoui(const u_int8_t *frm)
1361 {
1362         return frm[1] > 3 && LE_READ_4(frm+2) == ((WPA_OUI_TYPE<<24)|WPA_OUI);
1363 }
1364
1365 static int
1366 wpa_driver_bsd_get_scan_results(void *priv,
1367                                      struct wpa_scan_result *results,
1368                                      size_t max_size)
1369 {
1370 #define min(a,b)        ((a)>(b)?(b):(a))
1371         struct wpa_driver_bsd_data *drv = priv;
1372         uint8_t buf[24*1024];
1373         uint8_t *cp, *vp;
1374         struct ieee80211req_scan_result *sr;
1375         struct wpa_scan_result *wsr;
1376         int len, ielen;
1377
1378         os_memset(results, 0, max_size * sizeof(struct wpa_scan_result));
1379
1380         len = get80211var(drv, IEEE80211_IOC_SCAN_RESULTS, buf, sizeof(buf));
1381         if (len < 0)
1382                 return -1;
1383         cp = buf;
1384         wsr = results;
1385         while (len >= sizeof(struct ieee80211req_scan_result)) {
1386                 sr = (struct ieee80211req_scan_result *) cp;
1387                 os_memcpy(wsr->bssid, sr->isr_bssid, IEEE80211_ADDR_LEN);
1388                 wsr->ssid_len = sr->isr_ssid_len;
1389                 wsr->freq = sr->isr_freq;
1390                 wsr->noise = sr->isr_noise;
1391                 wsr->qual = sr->isr_rssi;
1392                 wsr->level = 0;         /* XXX? */
1393                 wsr->caps = sr->isr_capinfo;
1394                 wsr->maxrate = getmaxrate(sr->isr_rates, sr->isr_nrates);
1395                 vp = (u_int8_t *)(sr+1);
1396                 os_memcpy(wsr->ssid, vp, sr->isr_ssid_len);
1397                 if (sr->isr_ie_len > 0) {
1398                         vp += sr->isr_ssid_len;
1399                         ielen = sr->isr_ie_len;
1400                         while (ielen > 0) {
1401                                 switch (vp[0]) {
1402                                 case IEEE80211_ELEMID_VENDOR:
1403                                         if (!iswpaoui(vp))
1404                                                 break;
1405                                         wsr->wpa_ie_len =
1406                                             min(2+vp[1], SSID_MAX_WPA_IE_LEN);
1407                                         os_memcpy(wsr->wpa_ie, vp,
1408                                                   wsr->wpa_ie_len);
1409                                         break;
1410                                 case IEEE80211_ELEMID_RSN:
1411                                         wsr->rsn_ie_len =
1412                                             min(2+vp[1], SSID_MAX_WPA_IE_LEN);
1413                                         os_memcpy(wsr->rsn_ie, vp,
1414                                                   wsr->rsn_ie_len);
1415                                         break;
1416                                 }
1417                                 ielen -= 2+vp[1];
1418                                 vp += 2+vp[1];
1419                         }
1420                 }
1421
1422                 cp += sr->isr_len, len -= sr->isr_len;
1423                 wsr++;
1424         }
1425         qsort(results, wsr - results, sizeof(struct wpa_scan_result),
1426               wpa_scan_result_compar);
1427
1428         wpa_printf(MSG_DEBUG, "Received %d bytes of scan results (%d BSSes)",
1429                    len, wsr - results);
1430
1431         return wsr - results;
1432 #undef min
1433 }
1434
1435 static void *
1436 wpa_driver_bsd_init(void *ctx, const char *ifname)
1437 {
1438 #define GETPARAM(drv, param, v) \
1439         (((v) = get80211param(drv, param)) != -1)
1440         struct wpa_driver_bsd_data *drv;
1441
1442         drv = os_zalloc(sizeof(*drv));
1443         if (drv == NULL)
1444                 return NULL;
1445         /*
1446          * NB: We require the interface name be mappable to an index.
1447          *     This implies we do not support having wpa_supplicant
1448          *     wait for an interface to appear.  This seems ok; that
1449          *     doesn't belong here; it's really the job of devd.
1450          */
1451         drv->ifindex = if_nametoindex(ifname);
1452         if (drv->ifindex == 0) {
1453                 wpa_printf(MSG_DEBUG, "%s: interface %s does not exist",
1454                            __func__, ifname);
1455                 goto fail1;
1456         }
1457         drv->sock = socket(PF_INET, SOCK_DGRAM, 0);
1458         if (drv->sock < 0)
1459                 goto fail1;
1460         drv->route = socket(PF_ROUTE, SOCK_RAW, 0);
1461         if (drv->route < 0)
1462                 goto fail;
1463         eloop_register_read_sock(drv->route,
1464                 wpa_driver_bsd_event_receive, ctx, drv);
1465
1466         drv->ctx = ctx;
1467         os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
1468
1469         if (!GETPARAM(drv, IEEE80211_IOC_ROAMING, drv->prev_roaming)) {
1470                 wpa_printf(MSG_DEBUG, "%s: failed to get roaming state: %s",
1471                         __func__, strerror(errno));
1472                 goto fail;
1473         }
1474         if (!GETPARAM(drv, IEEE80211_IOC_PRIVACY, drv->prev_privacy)) {
1475                 wpa_printf(MSG_DEBUG, "%s: failed to get privacy state: %s",
1476                         __func__, strerror(errno));
1477                 goto fail;
1478         }
1479         if (!GETPARAM(drv, IEEE80211_IOC_WPA, drv->prev_wpa)) {
1480                 wpa_printf(MSG_DEBUG, "%s: failed to get wpa state: %s",
1481                         __func__, strerror(errno));
1482                 goto fail;
1483         }
1484         if (set80211param(drv, IEEE80211_IOC_ROAMING, IEEE80211_ROAMING_MANUAL) < 0) {
1485                 wpa_printf(MSG_DEBUG, "%s: failed to set wpa_supplicant-based "
1486                            "roaming: %s", __func__, strerror(errno));
1487                 goto fail;
1488         }
1489
1490         if (set80211param(drv, IEEE80211_IOC_WPA, 1+2) < 0) {
1491                 wpa_printf(MSG_DEBUG, "%s: failed to enable WPA support %s",
1492                            __func__, strerror(errno));
1493                 goto fail;
1494         }
1495
1496         return drv;
1497 fail:
1498         close(drv->sock);
1499 fail1:
1500         os_free(drv);
1501         return NULL;
1502 #undef GETPARAM
1503 }
1504
1505 static void
1506 wpa_driver_bsd_deinit(void *priv)
1507 {
1508         struct wpa_driver_bsd_data *drv = priv;
1509         int flags;
1510
1511         eloop_unregister_read_sock(drv->route);
1512
1513         /* NB: mark interface down */
1514         if (getifflags(drv, &flags) == 0)
1515                 (void) setifflags(drv, flags &~ IFF_UP);
1516
1517         wpa_driver_bsd_set_wpa_internal(drv, drv->prev_wpa, drv->prev_privacy);
1518         if (set80211param(drv, IEEE80211_IOC_ROAMING, drv->prev_roaming) < 0)
1519                 wpa_printf(MSG_DEBUG, "%s: failed to restore roaming state",
1520                         __func__);
1521
1522         (void) close(drv->route);               /* ioctl socket */
1523         (void) close(drv->sock);                /* event socket */
1524         os_free(drv);
1525 }
1526
1527
1528 const struct wpa_driver_ops wpa_driver_bsd_ops = {
1529         .name                   = "bsd",
1530         .desc                   = "BSD 802.11 support (Atheros, etc.)",
1531         .init                   = wpa_driver_bsd_init,
1532         .deinit                 = wpa_driver_bsd_deinit,
1533         .get_bssid              = wpa_driver_bsd_get_bssid,
1534         .get_ssid               = wpa_driver_bsd_get_ssid,
1535         .set_wpa                = wpa_driver_bsd_set_wpa,
1536         .set_key                = wpa_driver_bsd_set_key,
1537         .set_countermeasures    = wpa_driver_bsd_set_countermeasures,
1538         .set_drop_unencrypted   = wpa_driver_bsd_set_drop_unencrypted,
1539         .scan                   = wpa_driver_bsd_scan,
1540         .get_scan_results       = wpa_driver_bsd_get_scan_results,
1541         .deauthenticate         = wpa_driver_bsd_deauthenticate,
1542         .disassociate           = wpa_driver_bsd_disassociate,
1543         .associate              = wpa_driver_bsd_associate,
1544         .set_auth_alg           = wpa_driver_bsd_set_auth_alg,
1545 };
1546
1547 #endif /* HOSTAPD */