2 * WPA Supplicant - Windows/NDIS driver interface
3 * Copyright (c) 2004-2007, Jouni Malinen <j@w1.fi>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
9 * Alternatively, this software may be distributed under the terms of BSD
12 * See README and COPYING for more details.
16 /* Avoid some header file conflicts by not including standard headers for
17 * cygwin builds when Packet32.h is included. */
18 #include "build_config.h"
20 #else /* __CYGWIN__ */
22 #endif /* __CYGWIN__ */
23 #ifdef CONFIG_USE_NDISUIO
25 #else /* CONFIG_USE_NDISUIO */
27 #endif /* CONFIG_USE_NDISUIO */
34 #endif /* _WIN32_WCE */
39 #include "ieee802_11_defs.h"
40 #include "driver_ndis.h"
42 int wpa_driver_register_event_cb(struct wpa_driver_ndis_data *drv);
43 void wpa_driver_ndis_event_pipe_cb(void *eloop_data, void *user_data);
45 static void wpa_driver_ndis_deinit(void *priv);
46 static void wpa_driver_ndis_poll(void *drv);
47 static void wpa_driver_ndis_poll_timeout(void *eloop_ctx, void *timeout_ctx);
48 static int wpa_driver_ndis_adapter_init(struct wpa_driver_ndis_data *drv);
49 static int wpa_driver_ndis_adapter_open(struct wpa_driver_ndis_data *drv);
50 static void wpa_driver_ndis_adapter_close(struct wpa_driver_ndis_data *drv);
53 /* FIX: to be removed once this can be compiled with the complete NDIS
55 #ifndef OID_802_11_BSSID
56 #define OID_802_11_BSSID 0x0d010101
57 #define OID_802_11_SSID 0x0d010102
58 #define OID_802_11_INFRASTRUCTURE_MODE 0x0d010108
59 #define OID_802_11_ADD_WEP 0x0D010113
60 #define OID_802_11_REMOVE_WEP 0x0D010114
61 #define OID_802_11_DISASSOCIATE 0x0D010115
62 #define OID_802_11_BSSID_LIST 0x0d010217
63 #define OID_802_11_AUTHENTICATION_MODE 0x0d010118
64 #define OID_802_11_PRIVACY_FILTER 0x0d010119
65 #define OID_802_11_BSSID_LIST_SCAN 0x0d01011A
66 #define OID_802_11_WEP_STATUS 0x0d01011B
67 #define OID_802_11_ENCRYPTION_STATUS OID_802_11_WEP_STATUS
68 #define OID_802_11_ADD_KEY 0x0d01011D
69 #define OID_802_11_REMOVE_KEY 0x0d01011E
70 #define OID_802_11_ASSOCIATION_INFORMATION 0x0d01011F
71 #define OID_802_11_TEST 0x0d010120
72 #define OID_802_11_CAPABILITY 0x0d010122
73 #define OID_802_11_PMKID 0x0d010123
75 #define NDIS_802_11_LENGTH_SSID 32
76 #define NDIS_802_11_LENGTH_RATES 8
77 #define NDIS_802_11_LENGTH_RATES_EX 16
79 typedef UCHAR NDIS_802_11_MAC_ADDRESS[6];
81 typedef struct NDIS_802_11_SSID {
83 UCHAR Ssid[NDIS_802_11_LENGTH_SSID];
86 typedef LONG NDIS_802_11_RSSI;
88 typedef enum NDIS_802_11_NETWORK_TYPE {
93 Ndis802_11NetworkTypeMax
94 } NDIS_802_11_NETWORK_TYPE;
96 typedef struct NDIS_802_11_CONFIGURATION_FH {
101 } NDIS_802_11_CONFIGURATION_FH;
103 typedef struct NDIS_802_11_CONFIGURATION {
108 NDIS_802_11_CONFIGURATION_FH FHConfig;
109 } NDIS_802_11_CONFIGURATION;
111 typedef enum NDIS_802_11_NETWORK_INFRASTRUCTURE {
113 Ndis802_11Infrastructure,
114 Ndis802_11AutoUnknown,
115 Ndis802_11InfrastructureMax
116 } NDIS_802_11_NETWORK_INFRASTRUCTURE;
118 typedef enum NDIS_802_11_AUTHENTICATION_MODE {
119 Ndis802_11AuthModeOpen,
120 Ndis802_11AuthModeShared,
121 Ndis802_11AuthModeAutoSwitch,
122 Ndis802_11AuthModeWPA,
123 Ndis802_11AuthModeWPAPSK,
124 Ndis802_11AuthModeWPANone,
125 Ndis802_11AuthModeWPA2,
126 Ndis802_11AuthModeWPA2PSK,
127 Ndis802_11AuthModeMax
128 } NDIS_802_11_AUTHENTICATION_MODE;
130 typedef enum NDIS_802_11_WEP_STATUS {
131 Ndis802_11WEPEnabled,
132 Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
133 Ndis802_11WEPDisabled,
134 Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
135 Ndis802_11WEPKeyAbsent,
136 Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
137 Ndis802_11WEPNotSupported,
138 Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
139 Ndis802_11Encryption2Enabled,
140 Ndis802_11Encryption2KeyAbsent,
141 Ndis802_11Encryption3Enabled,
142 Ndis802_11Encryption3KeyAbsent
143 } NDIS_802_11_WEP_STATUS, NDIS_802_11_ENCRYPTION_STATUS;
145 typedef enum NDIS_802_11_PRIVACY_FILTER {
146 Ndis802_11PrivFilterAcceptAll,
147 Ndis802_11PrivFilter8021xWEP
148 } NDIS_802_11_PRIVACY_FILTER;
150 typedef UCHAR NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];
151 typedef UCHAR NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];
153 typedef struct NDIS_WLAN_BSSID_EX {
155 NDIS_802_11_MAC_ADDRESS MacAddress; /* BSSID */
157 NDIS_802_11_SSID Ssid;
159 NDIS_802_11_RSSI Rssi;
160 NDIS_802_11_NETWORK_TYPE NetworkTypeInUse;
161 NDIS_802_11_CONFIGURATION Configuration;
162 NDIS_802_11_NETWORK_INFRASTRUCTURE InfrastructureMode;
163 NDIS_802_11_RATES_EX SupportedRates;
166 } NDIS_WLAN_BSSID_EX;
168 typedef struct NDIS_802_11_BSSID_LIST_EX {
170 NDIS_WLAN_BSSID_EX Bssid[1];
171 } NDIS_802_11_BSSID_LIST_EX;
173 typedef struct NDIS_802_11_FIXED_IEs {
175 USHORT BeaconInterval;
177 } NDIS_802_11_FIXED_IEs;
179 typedef struct NDIS_802_11_WEP {
183 UCHAR KeyMaterial[1];
186 typedef ULONG NDIS_802_11_KEY_INDEX;
187 typedef ULONGLONG NDIS_802_11_KEY_RSC;
189 typedef struct NDIS_802_11_KEY {
193 NDIS_802_11_MAC_ADDRESS BSSID;
194 NDIS_802_11_KEY_RSC KeyRSC;
195 UCHAR KeyMaterial[1];
198 typedef struct NDIS_802_11_REMOVE_KEY {
201 NDIS_802_11_MAC_ADDRESS BSSID;
202 } NDIS_802_11_REMOVE_KEY;
204 typedef struct NDIS_802_11_AI_REQFI {
206 USHORT ListenInterval;
207 NDIS_802_11_MAC_ADDRESS CurrentAPAddress;
208 } NDIS_802_11_AI_REQFI;
210 typedef struct NDIS_802_11_AI_RESFI {
213 USHORT AssociationId;
214 } NDIS_802_11_AI_RESFI;
216 typedef struct NDIS_802_11_ASSOCIATION_INFORMATION {
218 USHORT AvailableRequestFixedIEs;
219 NDIS_802_11_AI_REQFI RequestFixedIEs;
220 ULONG RequestIELength;
221 ULONG OffsetRequestIEs;
222 USHORT AvailableResponseFixedIEs;
223 NDIS_802_11_AI_RESFI ResponseFixedIEs;
224 ULONG ResponseIELength;
225 ULONG OffsetResponseIEs;
226 } NDIS_802_11_ASSOCIATION_INFORMATION;
228 typedef struct NDIS_802_11_AUTHENTICATION_ENCRYPTION {
229 NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
230 NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
231 } NDIS_802_11_AUTHENTICATION_ENCRYPTION;
233 typedef struct NDIS_802_11_CAPABILITY {
237 ULONG NoOfAuthEncryptPairsSupported;
238 NDIS_802_11_AUTHENTICATION_ENCRYPTION
239 AuthenticationEncryptionSupported[1];
240 } NDIS_802_11_CAPABILITY;
242 typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
244 typedef struct BSSID_INFO {
245 NDIS_802_11_MAC_ADDRESS BSSID;
246 NDIS_802_11_PMKID_VALUE PMKID;
249 typedef struct NDIS_802_11_PMKID {
251 ULONG BSSIDInfoCount;
252 BSSID_INFO BSSIDInfo[1];
255 typedef enum NDIS_802_11_STATUS_TYPE {
256 Ndis802_11StatusType_Authentication,
257 Ndis802_11StatusType_PMKID_CandidateList = 2,
258 Ndis802_11StatusTypeMax
259 } NDIS_802_11_STATUS_TYPE;
261 typedef struct NDIS_802_11_STATUS_INDICATION {
262 NDIS_802_11_STATUS_TYPE StatusType;
263 } NDIS_802_11_STATUS_INDICATION;
265 typedef struct PMKID_CANDIDATE {
266 NDIS_802_11_MAC_ADDRESS BSSID;
270 #define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
272 typedef struct NDIS_802_11_PMKID_CANDIDATE_LIST {
275 PMKID_CANDIDATE CandidateList[1];
276 } NDIS_802_11_PMKID_CANDIDATE_LIST;
278 typedef struct NDIS_802_11_AUTHENTICATION_REQUEST {
280 NDIS_802_11_MAC_ADDRESS Bssid;
282 } NDIS_802_11_AUTHENTICATION_REQUEST;
284 #define NDIS_802_11_AUTH_REQUEST_REAUTH 0x01
285 #define NDIS_802_11_AUTH_REQUEST_KEYUPDATE 0x02
286 #define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR 0x06
287 #define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR 0x0E
289 #endif /* OID_802_11_BSSID */
292 #ifndef OID_802_11_PMKID
293 /* Platform SDK for XP did not include WPA2, so add needed definitions */
295 #define OID_802_11_CAPABILITY 0x0d010122
296 #define OID_802_11_PMKID 0x0d010123
298 #define Ndis802_11AuthModeWPA2 6
299 #define Ndis802_11AuthModeWPA2PSK 7
301 #define Ndis802_11StatusType_PMKID_CandidateList 2
303 typedef struct NDIS_802_11_AUTHENTICATION_ENCRYPTION {
304 NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
305 NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
306 } NDIS_802_11_AUTHENTICATION_ENCRYPTION;
308 typedef struct NDIS_802_11_CAPABILITY {
312 ULONG NoOfAuthEncryptPairsSupported;
313 NDIS_802_11_AUTHENTICATION_ENCRYPTION
314 AuthenticationEncryptionSupported[1];
315 } NDIS_802_11_CAPABILITY;
317 typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
319 typedef struct BSSID_INFO {
320 NDIS_802_11_MAC_ADDRESS BSSID;
321 NDIS_802_11_PMKID_VALUE PMKID;
324 typedef struct NDIS_802_11_PMKID {
326 ULONG BSSIDInfoCount;
327 BSSID_INFO BSSIDInfo[1];
330 typedef struct PMKID_CANDIDATE {
331 NDIS_802_11_MAC_ADDRESS BSSID;
335 #define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
337 typedef struct NDIS_802_11_PMKID_CANDIDATE_LIST {
340 PMKID_CANDIDATE CandidateList[1];
341 } NDIS_802_11_PMKID_CANDIDATE_LIST;
343 #endif /* OID_802_11_CAPABILITY */
346 #ifdef CONFIG_USE_NDISUIO
348 #ifdef __MINGW32_VERSION
349 typedef ULONG NDIS_OID;
350 #endif /* __MINGW32_VERSION */
351 /* from nuiouser.h */
352 #define FSCTL_NDISUIO_BASE FILE_DEVICE_NETWORK
354 #define _NDISUIO_CTL_CODE(_Function, _Method, _Access) \
355 CTL_CODE(FSCTL_NDISUIO_BASE, _Function, _Method, _Access)
357 #define IOCTL_NDISUIO_OPEN_DEVICE \
358 _NDISUIO_CTL_CODE(0x200, METHOD_BUFFERED, \
359 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
361 #define IOCTL_NDISUIO_QUERY_OID_VALUE \
362 _NDISUIO_CTL_CODE(0x201, METHOD_BUFFERED, \
363 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
365 #define IOCTL_NDISUIO_SET_OID_VALUE \
366 _NDISUIO_CTL_CODE(0x205, METHOD_BUFFERED, \
367 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
369 #define IOCTL_NDISUIO_SET_ETHER_TYPE \
370 _NDISUIO_CTL_CODE(0x202, METHOD_BUFFERED, \
371 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
373 #define IOCTL_NDISUIO_QUERY_BINDING \
374 _NDISUIO_CTL_CODE(0x203, METHOD_BUFFERED, \
375 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
377 #define IOCTL_NDISUIO_BIND_WAIT \
378 _NDISUIO_CTL_CODE(0x204, METHOD_BUFFERED, \
379 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
381 typedef struct _NDISUIO_QUERY_OID
384 UCHAR Data[sizeof(ULONG)];
385 } NDISUIO_QUERY_OID, *PNDISUIO_QUERY_OID;
387 typedef struct _NDISUIO_SET_OID
390 UCHAR Data[sizeof(ULONG)];
391 } NDISUIO_SET_OID, *PNDISUIO_SET_OID;
393 typedef struct _NDISUIO_QUERY_BINDING
396 ULONG DeviceNameOffset;
397 ULONG DeviceNameLength;
398 ULONG DeviceDescrOffset;
399 ULONG DeviceDescrLength;
400 } NDISUIO_QUERY_BINDING, *PNDISUIO_QUERY_BINDING;
401 #endif /* _WIN32_WCE */
402 #endif /* CONFIG_USE_NDISUIO */
405 static int ndis_get_oid(struct wpa_driver_ndis_data *drv, unsigned int oid,
406 char *data, size_t len)
408 #ifdef CONFIG_USE_NDISUIO
409 NDISUIO_QUERY_OID *o;
410 size_t buflen = sizeof(*o) + len;
415 o = os_zalloc(buflen);
420 o->ptcDeviceName = drv->adapter_name;
421 #endif /* _WIN32_WCE */
422 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_QUERY_OID_VALUE,
423 o, sizeof(NDISUIO_QUERY_OID), o, buflen, &written,
425 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDISUIO_QUERY_OID_VALUE "
426 "failed (oid=%08x): %d", oid, (int) GetLastError());
430 hdrlen = sizeof(NDISUIO_QUERY_OID) - sizeof(o->Data);
431 if (written < hdrlen) {
432 wpa_printf(MSG_DEBUG, "NDIS: query oid=%08x written (%d); "
433 "too short", oid, (unsigned int) written);
439 wpa_printf(MSG_DEBUG, "NDIS: query oid=%08x written (%d) > "
440 "len (%d)",oid, (unsigned int) written, len);
444 os_memcpy(data, o->Data, written);
448 #else /* CONFIG_USE_NDISUIO */
453 buf = os_zalloc(sizeof(*o) + len);
456 o = (PACKET_OID_DATA *) buf;
460 if (!PacketRequest(drv->adapter, FALSE, o)) {
461 wpa_printf(MSG_DEBUG, "%s: oid=0x%x len (%d) failed",
466 if (o->Length > len) {
467 wpa_printf(MSG_DEBUG, "%s: oid=0x%x Length (%d) > len (%d)",
468 __func__, oid, (unsigned int) o->Length, len);
472 os_memcpy(data, o->Data, o->Length);
476 #endif /* CONFIG_USE_NDISUIO */
480 static int ndis_set_oid(struct wpa_driver_ndis_data *drv, unsigned int oid,
481 const char *data, size_t len)
483 #ifdef CONFIG_USE_NDISUIO
485 size_t buflen, reallen;
489 os_snprintf(txt, sizeof(txt), "NDIS: Set OID %08x", oid);
490 wpa_hexdump_key(MSG_MSGDUMP, txt, data, len);
492 buflen = sizeof(*o) + len;
493 reallen = buflen - sizeof(o->Data);
494 o = os_zalloc(buflen);
499 o->ptcDeviceName = drv->adapter_name;
500 #endif /* _WIN32_WCE */
502 os_memcpy(o->Data, data, len);
503 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_SET_OID_VALUE,
504 o, reallen, NULL, 0, &written, NULL)) {
505 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDISUIO_SET_OID_VALUE "
506 "(oid=%08x) failed: %d", oid, (int) GetLastError());
512 #else /* CONFIG_USE_NDISUIO */
517 os_snprintf(txt, sizeof(txt), "NDIS: Set OID %08x", oid);
518 wpa_hexdump_key(MSG_MSGDUMP, txt, data, len);
520 buf = os_zalloc(sizeof(*o) + len);
523 o = (PACKET_OID_DATA *) buf;
527 os_memcpy(o->Data, data, len);
529 if (!PacketRequest(drv->adapter, TRUE, o)) {
530 wpa_printf(MSG_DEBUG, "%s: oid=0x%x len (%d) failed",
537 #endif /* CONFIG_USE_NDISUIO */
541 static int ndis_set_auth_mode(struct wpa_driver_ndis_data *drv, int mode)
543 u32 auth_mode = mode;
544 if (ndis_set_oid(drv, OID_802_11_AUTHENTICATION_MODE,
545 (char *) &auth_mode, sizeof(auth_mode)) < 0) {
546 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
547 "OID_802_11_AUTHENTICATION_MODE (%d)",
555 static int ndis_get_auth_mode(struct wpa_driver_ndis_data *drv)
559 res = ndis_get_oid(drv, OID_802_11_AUTHENTICATION_MODE,
560 (char *) &auth_mode, sizeof(auth_mode));
561 if (res != sizeof(auth_mode)) {
562 wpa_printf(MSG_DEBUG, "NDIS: Failed to get "
563 "OID_802_11_AUTHENTICATION_MODE");
570 static int ndis_set_encr_status(struct wpa_driver_ndis_data *drv, int encr)
572 u32 encr_status = encr;
573 if (ndis_set_oid(drv, OID_802_11_ENCRYPTION_STATUS,
574 (char *) &encr_status, sizeof(encr_status)) < 0) {
575 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
576 "OID_802_11_ENCRYPTION_STATUS (%d)", encr);
583 static int ndis_get_encr_status(struct wpa_driver_ndis_data *drv)
587 res = ndis_get_oid(drv, OID_802_11_ENCRYPTION_STATUS,
588 (char *) &encr, sizeof(encr));
589 if (res != sizeof(encr)) {
590 wpa_printf(MSG_DEBUG, "NDIS: Failed to get "
591 "OID_802_11_ENCRYPTION_STATUS");
598 static int wpa_driver_ndis_get_bssid(void *priv, u8 *bssid)
600 struct wpa_driver_ndis_data *drv = priv;
604 * Report PAE group address as the "BSSID" for wired
616 return ndis_get_oid(drv, OID_802_11_BSSID, bssid, ETH_ALEN) < 0 ?
621 static int wpa_driver_ndis_get_ssid(void *priv, u8 *ssid)
623 struct wpa_driver_ndis_data *drv = priv;
624 NDIS_802_11_SSID buf;
627 res = ndis_get_oid(drv, OID_802_11_SSID, (char *) &buf, sizeof(buf));
629 wpa_printf(MSG_DEBUG, "NDIS: Failed to get SSID");
631 wpa_printf(MSG_DEBUG, "NDIS: Allow get_ssid failure "
632 "with a wired interface");
637 os_memcpy(ssid, buf.Ssid, buf.SsidLength);
638 return buf.SsidLength;
642 static int wpa_driver_ndis_set_ssid(struct wpa_driver_ndis_data *drv,
643 const u8 *ssid, size_t ssid_len)
645 NDIS_802_11_SSID buf;
647 os_memset(&buf, 0, sizeof(buf));
648 buf.SsidLength = ssid_len;
649 os_memcpy(buf.Ssid, ssid, ssid_len);
651 * Make sure radio is marked enabled here so that scan request will not
652 * force SSID to be changed to a random one in order to enable radio at
655 drv->radio_enabled = 1;
656 return ndis_set_oid(drv, OID_802_11_SSID, (char *) &buf, sizeof(buf));
660 /* Disconnect using OID_802_11_DISASSOCIATE. This will also turn the radio off.
662 static int wpa_driver_ndis_radio_off(struct wpa_driver_ndis_data *drv)
664 drv->radio_enabled = 0;
665 return ndis_set_oid(drv, OID_802_11_DISASSOCIATE, " ", 4);
669 /* Disconnect by setting SSID to random (i.e., likely not used). */
670 static int wpa_driver_ndis_disconnect(struct wpa_driver_ndis_data *drv)
674 for (i = 0; i < 32; i++)
675 ssid[i] = rand() & 0xff;
676 return wpa_driver_ndis_set_ssid(drv, ssid, 32);
680 static int wpa_driver_ndis_deauthenticate(void *priv, const u8 *addr,
683 struct wpa_driver_ndis_data *drv = priv;
684 return wpa_driver_ndis_disconnect(drv);
688 static int wpa_driver_ndis_disassociate(void *priv, const u8 *addr,
691 struct wpa_driver_ndis_data *drv = priv;
692 return wpa_driver_ndis_disconnect(drv);
696 static int wpa_driver_ndis_set_wpa(void *priv, int enabled)
698 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
703 static void wpa_driver_ndis_scan_timeout(void *eloop_ctx, void *timeout_ctx)
705 wpa_printf(MSG_DEBUG, "Scan timeout - try to get results");
706 wpa_supplicant_event(timeout_ctx, EVENT_SCAN_RESULTS, NULL);
710 static int wpa_driver_ndis_scan(void *priv, const u8 *ssid, size_t ssid_len)
712 struct wpa_driver_ndis_data *drv = priv;
715 if (!drv->radio_enabled) {
716 wpa_printf(MSG_DEBUG, "NDIS: turning radio on before the first"
718 if (wpa_driver_ndis_disconnect(drv) < 0) {
719 wpa_printf(MSG_DEBUG, "NDIS: failed to enable radio");
721 drv->radio_enabled = 1;
724 res = ndis_set_oid(drv, OID_802_11_BSSID_LIST_SCAN, " ", 4);
725 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
726 eloop_register_timeout(7, 0, wpa_driver_ndis_scan_timeout, drv,
732 static struct wpa_scan_results * wpa_driver_ndis_get_scan_results(void *priv)
734 struct wpa_driver_ndis_data *drv = priv;
735 NDIS_802_11_BSSID_LIST_EX *b;
736 size_t blen, count, i;
739 struct wpa_scan_results *results;
740 struct wpa_scan_res *r;
746 len = ndis_get_oid(drv, OID_802_11_BSSID_LIST, (char *) b, blen);
748 wpa_printf(MSG_DEBUG, "NDIS: failed to get scan results");
752 count = b->NumberOfItems;
754 results = os_zalloc(sizeof(*results));
755 if (results == NULL) {
759 results->res = os_zalloc(count * sizeof(struct wpa_scan_res *));
760 if (results->res == NULL) {
766 pos = (char *) &b->Bssid[0];
767 for (i = 0; i < count; i++) {
768 NDIS_WLAN_BSSID_EX *bss = (NDIS_WLAN_BSSID_EX *) pos;
769 NDIS_802_11_FIXED_IEs *fixed;
771 if (bss->IELength < sizeof(NDIS_802_11_FIXED_IEs)) {
772 wpa_printf(MSG_DEBUG, "NDIS: too small IELength=%d",
773 (int) bss->IELength);
776 if (((char *) bss->IEs) + bss->IELength > (char *) b + blen) {
778 * Some NDIS drivers have been reported to include an
779 * entry with an invalid IELength in scan results and
780 * this has crashed wpa_supplicant, so validate the
781 * returned value before using it.
783 wpa_printf(MSG_DEBUG, "NDIS: skipped invalid scan "
784 "result IE (BSSID=" MACSTR ") IELength=%d",
785 MAC2STR(bss->MacAddress),
786 (int) bss->IELength);
790 r = os_zalloc(sizeof(*r) + bss->IELength -
791 sizeof(NDIS_802_11_FIXED_IEs));
795 os_memcpy(r->bssid, bss->MacAddress, ETH_ALEN);
796 r->level = (int) bss->Rssi;
797 r->freq = bss->Configuration.DSConfig / 1000;
798 fixed = (NDIS_802_11_FIXED_IEs *) bss->IEs;
799 r->beacon_int = WPA_GET_LE16((u8 *) &fixed->BeaconInterval);
800 r->caps = WPA_GET_LE16((u8 *) &fixed->Capabilities);
801 r->tsf = WPA_GET_LE64(fixed->Timestamp);
802 os_memcpy(r + 1, bss->IEs + sizeof(NDIS_802_11_FIXED_IEs),
803 bss->IELength - sizeof(NDIS_802_11_FIXED_IEs));
804 r->ie_len = bss->IELength - sizeof(NDIS_802_11_FIXED_IEs);
806 results->res[results->num++] = r;
809 if (pos > (char *) b + blen)
819 static int wpa_driver_ndis_remove_key(struct wpa_driver_ndis_data *drv,
820 int key_idx, const u8 *addr,
821 const u8 *bssid, int pairwise)
823 NDIS_802_11_REMOVE_KEY rkey;
824 NDIS_802_11_KEY_INDEX index;
827 os_memset(&rkey, 0, sizeof(rkey));
829 rkey.Length = sizeof(rkey);
830 rkey.KeyIndex = key_idx;
832 rkey.KeyIndex |= 1 << 30;
833 os_memcpy(rkey.BSSID, bssid, ETH_ALEN);
835 res = ndis_set_oid(drv, OID_802_11_REMOVE_KEY, (char *) &rkey,
839 res2 = ndis_set_oid(drv, OID_802_11_REMOVE_WEP,
840 (char *) &index, sizeof(index));
844 if (res < 0 && res2 < 0)
850 static int wpa_driver_ndis_add_wep(struct wpa_driver_ndis_data *drv,
851 int pairwise, int key_idx, int set_tx,
852 const u8 *key, size_t key_len)
854 NDIS_802_11_WEP *wep;
859 wep = os_zalloc(len);
863 wep->KeyIndex = key_idx;
865 wep->KeyIndex |= 1 << 31;
866 #if 0 /* Setting bit30 does not seem to work with some NDIS drivers */
868 wep->KeyIndex |= 1 << 30;
870 wep->KeyLength = key_len;
871 os_memcpy(wep->KeyMaterial, key, key_len);
873 wpa_hexdump_key(MSG_MSGDUMP, "NDIS: OID_802_11_ADD_WEP",
875 res = ndis_set_oid(drv, OID_802_11_ADD_WEP, (char *) wep, len);
883 static int wpa_driver_ndis_set_key(void *priv, wpa_alg alg, const u8 *addr,
884 int key_idx, int set_tx,
885 const u8 *seq, size_t seq_len,
886 const u8 *key, size_t key_len)
888 struct wpa_driver_ndis_data *drv = priv;
890 NDIS_802_11_KEY *nkey;
894 if (addr == NULL || os_memcmp(addr, "\xff\xff\xff\xff\xff\xff",
898 if (wpa_driver_ndis_get_bssid(drv, bssid) < 0)
899 os_memset(bssid, 0xff, ETH_ALEN);
903 os_memcpy(bssid, addr, ETH_ALEN);
906 if (alg == WPA_ALG_NONE || key_len == 0) {
907 return wpa_driver_ndis_remove_key(drv, key_idx, addr, bssid,
911 if (alg == WPA_ALG_WEP) {
912 return wpa_driver_ndis_add_wep(drv, pairwise, key_idx, set_tx,
916 len = 12 + 6 + 6 + 8 + key_len;
918 nkey = os_zalloc(len);
923 nkey->KeyIndex = key_idx;
925 nkey->KeyIndex |= 1 << 31;
927 nkey->KeyIndex |= 1 << 30;
929 nkey->KeyIndex |= 1 << 29;
930 nkey->KeyLength = key_len;
931 os_memcpy(nkey->BSSID, bssid, ETH_ALEN);
932 if (seq && seq_len) {
933 for (i = 0; i < seq_len; i++)
934 nkey->KeyRSC |= (ULONGLONG) seq[i] << (i * 8);
936 if (alg == WPA_ALG_TKIP && key_len == 32) {
937 os_memcpy(nkey->KeyMaterial, key, 16);
938 os_memcpy(nkey->KeyMaterial + 16, key + 24, 8);
939 os_memcpy(nkey->KeyMaterial + 24, key + 16, 8);
941 os_memcpy(nkey->KeyMaterial, key, key_len);
944 wpa_hexdump_key(MSG_MSGDUMP, "NDIS: OID_802_11_ADD_KEY",
946 res = ndis_set_oid(drv, OID_802_11_ADD_KEY, (char *) nkey, len);
954 wpa_driver_ndis_associate(void *priv,
955 struct wpa_driver_associate_params *params)
957 struct wpa_driver_ndis_data *drv = priv;
958 u32 auth_mode, encr, priv_mode, mode;
960 drv->mode = params->mode;
962 /* Note: Setting OID_802_11_INFRASTRUCTURE_MODE clears current keys,
963 * so static WEP keys needs to be set again after this. */
964 if (params->mode == IEEE80211_MODE_IBSS) {
965 mode = Ndis802_11IBSS;
966 /* Need to make sure that BSSID polling is enabled for
968 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
969 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout,
972 mode = Ndis802_11Infrastructure;
973 if (ndis_set_oid(drv, OID_802_11_INFRASTRUCTURE_MODE,
974 (char *) &mode, sizeof(mode)) < 0) {
975 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
976 "OID_802_11_INFRASTRUCTURE_MODE (%d)",
978 /* Try to continue anyway */
981 if (params->key_mgmt_suite == KEY_MGMT_NONE ||
982 params->key_mgmt_suite == KEY_MGMT_802_1X_NO_WPA) {
983 /* Re-set WEP keys if static WEP configuration is used. */
984 u8 bcast[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
986 for (i = 0; i < 4; i++) {
987 if (!params->wep_key[i])
989 wpa_printf(MSG_DEBUG, "NDIS: Re-setting static WEP "
991 wpa_driver_ndis_set_key(drv, WPA_ALG_WEP, bcast, i,
992 i == params->wep_tx_keyidx,
993 NULL, 0, params->wep_key[i],
994 params->wep_key_len[i]);
998 if (params->wpa_ie == NULL || params->wpa_ie_len == 0) {
999 if (params->auth_alg & AUTH_ALG_SHARED_KEY) {
1000 if (params->auth_alg & AUTH_ALG_OPEN_SYSTEM)
1001 auth_mode = Ndis802_11AuthModeAutoSwitch;
1003 auth_mode = Ndis802_11AuthModeShared;
1005 auth_mode = Ndis802_11AuthModeOpen;
1006 priv_mode = Ndis802_11PrivFilterAcceptAll;
1007 } else if (params->wpa_ie[0] == WLAN_EID_RSN) {
1008 priv_mode = Ndis802_11PrivFilter8021xWEP;
1009 if (params->key_mgmt_suite == KEY_MGMT_PSK)
1010 auth_mode = Ndis802_11AuthModeWPA2PSK;
1012 auth_mode = Ndis802_11AuthModeWPA2;
1014 priv_mode = Ndis802_11PrivFilter8021xWEP;
1015 if (params->key_mgmt_suite == KEY_MGMT_WPA_NONE)
1016 auth_mode = Ndis802_11AuthModeWPANone;
1017 else if (params->key_mgmt_suite == KEY_MGMT_PSK)
1018 auth_mode = Ndis802_11AuthModeWPAPSK;
1020 auth_mode = Ndis802_11AuthModeWPA;
1023 switch (params->pairwise_suite) {
1025 encr = Ndis802_11Encryption3Enabled;
1028 encr = Ndis802_11Encryption2Enabled;
1032 encr = Ndis802_11Encryption1Enabled;
1035 if (params->group_suite == CIPHER_CCMP)
1036 encr = Ndis802_11Encryption3Enabled;
1037 else if (params->group_suite == CIPHER_TKIP)
1038 encr = Ndis802_11Encryption2Enabled;
1040 encr = Ndis802_11EncryptionDisabled;
1043 encr = Ndis802_11EncryptionDisabled;
1046 if (ndis_set_oid(drv, OID_802_11_PRIVACY_FILTER,
1047 (char *) &priv_mode, sizeof(priv_mode)) < 0) {
1048 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
1049 "OID_802_11_PRIVACY_FILTER (%d)",
1051 /* Try to continue anyway */
1054 ndis_set_auth_mode(drv, auth_mode);
1055 ndis_set_encr_status(drv, encr);
1057 if (params->bssid) {
1058 ndis_set_oid(drv, OID_802_11_BSSID, params->bssid, ETH_ALEN);
1059 drv->oid_bssid_set = 1;
1060 } else if (drv->oid_bssid_set) {
1061 ndis_set_oid(drv, OID_802_11_BSSID, "\xff\xff\xff\xff\xff\xff",
1063 drv->oid_bssid_set = 0;
1066 return wpa_driver_ndis_set_ssid(drv, params->ssid, params->ssid_len);
1070 static int wpa_driver_ndis_set_pmkid(struct wpa_driver_ndis_data *drv)
1072 int len, count, i, ret;
1073 struct ndis_pmkid_entry *entry;
1074 NDIS_802_11_PMKID *p;
1080 if (count >= drv->no_of_pmkid)
1082 entry = entry->next;
1084 len = 8 + count * sizeof(BSSID_INFO);
1090 p->BSSIDInfoCount = count;
1092 for (i = 0; i < count; i++) {
1093 os_memcpy(&p->BSSIDInfo[i].BSSID, entry->bssid, ETH_ALEN);
1094 os_memcpy(&p->BSSIDInfo[i].PMKID, entry->pmkid, 16);
1095 entry = entry->next;
1097 wpa_hexdump(MSG_MSGDUMP, "NDIS: OID_802_11_PMKID", (char *) p, len);
1098 ret = ndis_set_oid(drv, OID_802_11_PMKID, (char *) p, len);
1104 static int wpa_driver_ndis_add_pmkid(void *priv, const u8 *bssid,
1107 struct wpa_driver_ndis_data *drv = priv;
1108 struct ndis_pmkid_entry *entry, *prev;
1110 if (drv->no_of_pmkid == 0)
1116 if (os_memcmp(entry->bssid, bssid, ETH_ALEN) == 0)
1119 entry = entry->next;
1123 /* Replace existing entry for this BSSID and move it into the
1124 * beginning of the list. */
1125 os_memcpy(entry->pmkid, pmkid, 16);
1127 prev->next = entry->next;
1128 entry->next = drv->pmkid;
1132 entry = os_malloc(sizeof(*entry));
1134 os_memcpy(entry->bssid, bssid, ETH_ALEN);
1135 os_memcpy(entry->pmkid, pmkid, 16);
1136 entry->next = drv->pmkid;
1141 return wpa_driver_ndis_set_pmkid(drv);
1145 static int wpa_driver_ndis_remove_pmkid(void *priv, const u8 *bssid,
1148 struct wpa_driver_ndis_data *drv = priv;
1149 struct ndis_pmkid_entry *entry, *prev;
1151 if (drv->no_of_pmkid == 0)
1157 if (os_memcmp(entry->bssid, bssid, ETH_ALEN) == 0 &&
1158 os_memcmp(entry->pmkid, pmkid, 16) == 0) {
1160 prev->next = entry->next;
1162 drv->pmkid = entry->next;
1167 entry = entry->next;
1169 return wpa_driver_ndis_set_pmkid(drv);
1173 static int wpa_driver_ndis_flush_pmkid(void *priv)
1175 struct wpa_driver_ndis_data *drv = priv;
1176 NDIS_802_11_PMKID p;
1177 struct ndis_pmkid_entry *pmkid, *prev;
1179 if (drv->no_of_pmkid == 0)
1186 pmkid = pmkid->next;
1190 os_memset(&p, 0, sizeof(p));
1192 p.BSSIDInfoCount = 0;
1193 wpa_hexdump(MSG_MSGDUMP, "NDIS: OID_802_11_PMKID (flush)",
1195 return ndis_set_oid(drv, OID_802_11_PMKID, (char *) &p, 8);
1199 static int wpa_driver_ndis_get_associnfo(struct wpa_driver_ndis_data *drv)
1201 char buf[512], *pos;
1202 NDIS_802_11_ASSOCIATION_INFORMATION *ai;
1204 union wpa_event_data data;
1205 NDIS_802_11_BSSID_LIST_EX *b;
1208 len = ndis_get_oid(drv, OID_802_11_ASSOCIATION_INFORMATION, buf,
1211 wpa_printf(MSG_DEBUG, "NDIS: failed to get association "
1215 if (len > sizeof(buf)) {
1216 /* Some drivers seem to be producing incorrect length for this
1217 * data. Limit the length to the current buffer size to avoid
1218 * crashing in hexdump. The data seems to be otherwise valid,
1219 * so better try to use it. */
1220 wpa_printf(MSG_DEBUG, "NDIS: ignored bogus association "
1221 "information length %d", len);
1222 len = ndis_get_oid(drv, OID_802_11_ASSOCIATION_INFORMATION,
1225 wpa_printf(MSG_DEBUG, "NDIS: re-reading association "
1226 "information failed");
1229 if (len > sizeof(buf)) {
1230 wpa_printf(MSG_DEBUG, "NDIS: ignored bogus association"
1231 " information length %d (re-read)", len);
1235 wpa_hexdump(MSG_MSGDUMP, "NDIS: association information", buf, len);
1236 if (len < sizeof(*ai)) {
1237 wpa_printf(MSG_DEBUG, "NDIS: too short association "
1241 ai = (NDIS_802_11_ASSOCIATION_INFORMATION *) buf;
1242 wpa_printf(MSG_DEBUG, "NDIS: ReqFixed=0x%x RespFixed=0x%x off_req=%d "
1243 "off_resp=%d len_req=%d len_resp=%d",
1244 ai->AvailableRequestFixedIEs, ai->AvailableResponseFixedIEs,
1245 (int) ai->OffsetRequestIEs, (int) ai->OffsetResponseIEs,
1246 (int) ai->RequestIELength, (int) ai->ResponseIELength);
1248 if (ai->OffsetRequestIEs + ai->RequestIELength > (unsigned) len ||
1249 ai->OffsetResponseIEs + ai->ResponseIELength > (unsigned) len) {
1250 wpa_printf(MSG_DEBUG, "NDIS: association information - "
1255 wpa_hexdump(MSG_MSGDUMP, "NDIS: Request IEs",
1256 buf + ai->OffsetRequestIEs, ai->RequestIELength);
1257 wpa_hexdump(MSG_MSGDUMP, "NDIS: Response IEs",
1258 buf + ai->OffsetResponseIEs, ai->ResponseIELength);
1260 os_memset(&data, 0, sizeof(data));
1261 data.assoc_info.req_ies = buf + ai->OffsetRequestIEs;
1262 data.assoc_info.req_ies_len = ai->RequestIELength;
1263 data.assoc_info.resp_ies = buf + ai->OffsetResponseIEs;
1264 data.assoc_info.resp_ies_len = ai->ResponseIELength;
1267 b = os_zalloc(blen);
1269 goto skip_scan_results;
1270 len = ndis_get_oid(drv, OID_802_11_BSSID_LIST, (char *) b, blen);
1272 wpa_printf(MSG_DEBUG, "NDIS: failed to get scan results");
1275 goto skip_scan_results;
1277 wpa_printf(MSG_DEBUG, "NDIS: %d BSSID items to process for AssocInfo",
1278 (unsigned int) b->NumberOfItems);
1280 pos = (char *) &b->Bssid[0];
1281 for (i = 0; i < b->NumberOfItems; i++) {
1282 NDIS_WLAN_BSSID_EX *bss = (NDIS_WLAN_BSSID_EX *) pos;
1283 if (os_memcmp(drv->bssid, bss->MacAddress, ETH_ALEN) == 0 &&
1284 bss->IELength > sizeof(NDIS_802_11_FIXED_IEs)) {
1285 data.assoc_info.beacon_ies =
1287 sizeof(NDIS_802_11_FIXED_IEs);
1288 data.assoc_info.beacon_ies_len =
1289 bss->IELength - sizeof(NDIS_802_11_FIXED_IEs);
1290 wpa_hexdump(MSG_MSGDUMP, "NDIS: Beacon IEs",
1291 data.assoc_info.beacon_ies,
1292 data.assoc_info.beacon_ies_len);
1296 if (pos > (char *) b + blen)
1301 wpa_supplicant_event(drv->ctx, EVENT_ASSOCINFO, &data);
1309 static void wpa_driver_ndis_poll_timeout(void *eloop_ctx, void *timeout_ctx)
1311 struct wpa_driver_ndis_data *drv = eloop_ctx;
1318 if (wpa_driver_ndis_get_bssid(drv, bssid)) {
1320 if (os_memcmp(drv->bssid, "\x00\x00\x00\x00\x00\x00", ETH_ALEN)
1322 os_memset(drv->bssid, 0, ETH_ALEN);
1323 wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1327 if (os_memcmp(drv->bssid, bssid, ETH_ALEN) != 0) {
1328 os_memcpy(drv->bssid, bssid, ETH_ALEN);
1329 wpa_driver_ndis_get_associnfo(drv);
1330 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1334 /* When using integrated NDIS event receiver, we can skip BSSID
1335 * polling when using infrastructure network. However, when using
1336 * IBSS mode, many driver do not seem to generate connection event,
1337 * so we need to enable BSSID polling to figure out when IBSS network
1340 poll = drv->mode == IEEE80211_MODE_IBSS;
1341 #ifndef CONFIG_NDIS_EVENTS_INTEGRATED
1344 #endif /* _WIN32_WCE */
1345 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
1348 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout,
1354 static void wpa_driver_ndis_poll(void *priv)
1356 struct wpa_driver_ndis_data *drv = priv;
1357 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
1358 wpa_driver_ndis_poll_timeout(drv, NULL);
1362 /* Called when driver generates Media Connect Event by calling
1363 * NdisMIndicateStatus() with NDIS_STATUS_MEDIA_CONNECT */
1364 void wpa_driver_ndis_event_connect(struct wpa_driver_ndis_data *drv)
1366 wpa_printf(MSG_DEBUG, "NDIS: Media Connect Event");
1367 if (wpa_driver_ndis_get_bssid(drv, drv->bssid) == 0) {
1368 wpa_driver_ndis_get_associnfo(drv);
1369 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1374 /* Called when driver generates Media Disconnect Event by calling
1375 * NdisMIndicateStatus() with NDIS_STATUS_MEDIA_DISCONNECT */
1376 void wpa_driver_ndis_event_disconnect(struct wpa_driver_ndis_data *drv)
1378 wpa_printf(MSG_DEBUG, "NDIS: Media Disconnect Event");
1379 os_memset(drv->bssid, 0, ETH_ALEN);
1380 wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1384 static void wpa_driver_ndis_event_auth(struct wpa_driver_ndis_data *drv,
1385 const u8 *data, size_t data_len)
1387 NDIS_802_11_AUTHENTICATION_REQUEST *req;
1388 int pairwise = 0, group = 0;
1389 union wpa_event_data event;
1391 if (data_len < sizeof(*req)) {
1392 wpa_printf(MSG_DEBUG, "NDIS: Too short Authentication Request "
1393 "Event (len=%d)", data_len);
1396 req = (NDIS_802_11_AUTHENTICATION_REQUEST *) data;
1398 wpa_printf(MSG_DEBUG, "NDIS: Authentication Request Event: "
1399 "Bssid " MACSTR " Flags 0x%x",
1400 MAC2STR(req->Bssid), (int) req->Flags);
1402 if ((req->Flags & NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR) ==
1403 NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR)
1405 else if ((req->Flags & NDIS_802_11_AUTH_REQUEST_GROUP_ERROR) ==
1406 NDIS_802_11_AUTH_REQUEST_GROUP_ERROR)
1409 if (pairwise || group) {
1410 os_memset(&event, 0, sizeof(event));
1411 event.michael_mic_failure.unicast = pairwise;
1412 wpa_supplicant_event(drv->ctx, EVENT_MICHAEL_MIC_FAILURE,
1418 static void wpa_driver_ndis_event_pmkid(struct wpa_driver_ndis_data *drv,
1419 const u8 *data, size_t data_len)
1421 NDIS_802_11_PMKID_CANDIDATE_LIST *pmkid;
1423 union wpa_event_data event;
1426 wpa_printf(MSG_DEBUG, "NDIS: Too short PMKID Candidate List "
1427 "Event (len=%d)", data_len);
1430 pmkid = (NDIS_802_11_PMKID_CANDIDATE_LIST *) data;
1431 wpa_printf(MSG_DEBUG, "NDIS: PMKID Candidate List Event - Version %d "
1433 (int) pmkid->Version, (int) pmkid->NumCandidates);
1435 if (pmkid->Version != 1) {
1436 wpa_printf(MSG_DEBUG, "NDIS: Unsupported PMKID Candidate List "
1437 "Version %d", (int) pmkid->Version);
1441 if (data_len < 8 + pmkid->NumCandidates * sizeof(PMKID_CANDIDATE)) {
1442 wpa_printf(MSG_DEBUG, "NDIS: PMKID Candidate List underflow");
1446 os_memset(&event, 0, sizeof(event));
1447 for (i = 0; i < pmkid->NumCandidates; i++) {
1448 PMKID_CANDIDATE *p = &pmkid->CandidateList[i];
1449 wpa_printf(MSG_DEBUG, "NDIS: %d: " MACSTR " Flags 0x%x",
1450 i, MAC2STR(p->BSSID), (int) p->Flags);
1451 os_memcpy(event.pmkid_candidate.bssid, p->BSSID, ETH_ALEN);
1452 event.pmkid_candidate.index = i;
1453 event.pmkid_candidate.preauth =
1454 p->Flags & NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED;
1455 wpa_supplicant_event(drv->ctx, EVENT_PMKID_CANDIDATE,
1461 /* Called when driver calls NdisMIndicateStatus() with
1462 * NDIS_STATUS_MEDIA_SPECIFIC_INDICATION */
1463 void wpa_driver_ndis_event_media_specific(struct wpa_driver_ndis_data *drv,
1464 const u8 *data, size_t data_len)
1466 NDIS_802_11_STATUS_INDICATION *status;
1468 if (data == NULL || data_len < sizeof(*status))
1471 wpa_hexdump(MSG_DEBUG, "NDIS: Media Specific Indication",
1474 status = (NDIS_802_11_STATUS_INDICATION *) data;
1475 data += sizeof(status);
1476 data_len -= sizeof(status);
1478 switch (status->StatusType) {
1479 case Ndis802_11StatusType_Authentication:
1480 wpa_driver_ndis_event_auth(drv, data, data_len);
1482 case Ndis802_11StatusType_PMKID_CandidateList:
1483 wpa_driver_ndis_event_pmkid(drv, data, data_len);
1486 wpa_printf(MSG_DEBUG, "NDIS: Unknown StatusType %d",
1487 (int) status->StatusType);
1493 /* Called when an adapter is added */
1494 void wpa_driver_ndis_event_adapter_arrival(struct wpa_driver_ndis_data *drv)
1496 union wpa_event_data event;
1499 wpa_printf(MSG_DEBUG, "NDIS: Notify Adapter Arrival");
1501 for (i = 0; i < 30; i++) {
1502 /* Re-open Packet32/NDISUIO connection */
1503 wpa_driver_ndis_adapter_close(drv);
1504 if (wpa_driver_ndis_adapter_init(drv) < 0 ||
1505 wpa_driver_ndis_adapter_open(drv) < 0) {
1506 wpa_printf(MSG_DEBUG, "NDIS: Driver re-initialization "
1510 wpa_printf(MSG_DEBUG, "NDIS: Driver re-initialized");
1515 os_memset(&event, 0, sizeof(event));
1516 os_strlcpy(event.interface_status.ifname, drv->ifname,
1517 sizeof(event.interface_status.ifname));
1518 event.interface_status.ievent = EVENT_INTERFACE_ADDED;
1519 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_STATUS, &event);
1523 /* Called when an adapter is removed */
1524 void wpa_driver_ndis_event_adapter_removal(struct wpa_driver_ndis_data *drv)
1526 union wpa_event_data event;
1528 wpa_printf(MSG_DEBUG, "NDIS: Notify Adapter Removal");
1529 os_memset(&event, 0, sizeof(event));
1530 os_strlcpy(event.interface_status.ifname, drv->ifname,
1531 sizeof(event.interface_status.ifname));
1532 event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1533 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_STATUS, &event);
1538 wpa_driver_ndis_get_wpa_capability(struct wpa_driver_ndis_data *drv)
1540 wpa_printf(MSG_DEBUG, "NDIS: verifying driver WPA capability");
1542 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeWPA) == 0 &&
1543 ndis_get_auth_mode(drv) == Ndis802_11AuthModeWPA) {
1544 wpa_printf(MSG_DEBUG, "NDIS: WPA key management supported");
1545 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA;
1548 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeWPAPSK) == 0 &&
1549 ndis_get_auth_mode(drv) == Ndis802_11AuthModeWPAPSK) {
1550 wpa_printf(MSG_DEBUG, "NDIS: WPA-PSK key management "
1552 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1555 if (ndis_set_encr_status(drv, Ndis802_11Encryption3Enabled) == 0 &&
1556 ndis_get_encr_status(drv) == Ndis802_11Encryption3KeyAbsent) {
1557 wpa_printf(MSG_DEBUG, "NDIS: CCMP encryption supported");
1558 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1561 if (ndis_set_encr_status(drv, Ndis802_11Encryption2Enabled) == 0 &&
1562 ndis_get_encr_status(drv) == Ndis802_11Encryption2KeyAbsent) {
1563 wpa_printf(MSG_DEBUG, "NDIS: TKIP encryption supported");
1564 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1567 if (ndis_set_encr_status(drv, Ndis802_11Encryption1Enabled) == 0 &&
1568 ndis_get_encr_status(drv) == Ndis802_11Encryption1KeyAbsent) {
1569 wpa_printf(MSG_DEBUG, "NDIS: WEP encryption supported");
1570 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40 |
1571 WPA_DRIVER_CAPA_ENC_WEP104;
1574 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeShared) == 0 &&
1575 ndis_get_auth_mode(drv) == Ndis802_11AuthModeShared) {
1576 drv->capa.auth |= WPA_DRIVER_AUTH_SHARED;
1579 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeOpen) == 0 &&
1580 ndis_get_auth_mode(drv) == Ndis802_11AuthModeOpen) {
1581 drv->capa.auth |= WPA_DRIVER_AUTH_OPEN;
1584 ndis_set_encr_status(drv, Ndis802_11EncryptionDisabled);
1586 /* Could also verify OID_802_11_ADD_KEY error reporting and
1587 * support for OID_802_11_ASSOCIATION_INFORMATION. */
1589 if (drv->capa.key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA &&
1590 drv->capa.enc & (WPA_DRIVER_CAPA_ENC_TKIP |
1591 WPA_DRIVER_CAPA_ENC_CCMP)) {
1592 wpa_printf(MSG_DEBUG, "NDIS: driver supports WPA");
1593 drv->has_capability = 1;
1595 wpa_printf(MSG_DEBUG, "NDIS: no WPA support found");
1598 wpa_printf(MSG_DEBUG, "NDIS: driver capabilities: key_mgmt 0x%x "
1599 "enc 0x%x auth 0x%x",
1600 drv->capa.key_mgmt, drv->capa.enc, drv->capa.auth);
1604 static void wpa_driver_ndis_get_capability(struct wpa_driver_ndis_data *drv)
1609 NDIS_802_11_CAPABILITY *c;
1611 drv->capa.flags = WPA_DRIVER_FLAGS_DRIVER_IE;
1613 len = ndis_get_oid(drv, OID_802_11_CAPABILITY, buf, sizeof(buf));
1615 wpa_driver_ndis_get_wpa_capability(drv);
1619 wpa_hexdump(MSG_MSGDUMP, "OID_802_11_CAPABILITY", buf, len);
1620 c = (NDIS_802_11_CAPABILITY *) buf;
1621 if (len < sizeof(*c) || c->Version != 2) {
1622 wpa_printf(MSG_DEBUG, "NDIS: unsupported "
1623 "OID_802_11_CAPABILITY data");
1626 wpa_printf(MSG_DEBUG, "NDIS: Driver supports OID_802_11_CAPABILITY - "
1627 "NoOfPMKIDs %d NoOfAuthEncrPairs %d",
1628 (int) c->NoOfPMKIDs,
1629 (int) c->NoOfAuthEncryptPairsSupported);
1630 drv->has_capability = 1;
1631 drv->no_of_pmkid = c->NoOfPMKIDs;
1632 for (i = 0; i < c->NoOfAuthEncryptPairsSupported; i++) {
1633 NDIS_802_11_AUTHENTICATION_ENCRYPTION *ae;
1634 ae = &c->AuthenticationEncryptionSupported[i];
1635 if ((char *) (ae + 1) > buf + len) {
1636 wpa_printf(MSG_DEBUG, "NDIS: auth/encr pair list "
1640 wpa_printf(MSG_MSGDUMP, "NDIS: %d - auth %d encr %d",
1641 i, (int) ae->AuthModeSupported,
1642 (int) ae->EncryptStatusSupported);
1643 switch (ae->AuthModeSupported) {
1644 case Ndis802_11AuthModeOpen:
1645 drv->capa.auth |= WPA_DRIVER_AUTH_OPEN;
1647 case Ndis802_11AuthModeShared:
1648 drv->capa.auth |= WPA_DRIVER_AUTH_SHARED;
1650 case Ndis802_11AuthModeWPA:
1651 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA;
1653 case Ndis802_11AuthModeWPAPSK:
1654 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1656 case Ndis802_11AuthModeWPA2:
1657 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA2;
1659 case Ndis802_11AuthModeWPA2PSK:
1660 drv->capa.key_mgmt |=
1661 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
1663 case Ndis802_11AuthModeWPANone:
1664 drv->capa.key_mgmt |=
1665 WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE;
1670 switch (ae->EncryptStatusSupported) {
1671 case Ndis802_11Encryption1Enabled:
1672 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40;
1673 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP104;
1675 case Ndis802_11Encryption2Enabled:
1676 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1678 case Ndis802_11Encryption3Enabled:
1679 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1686 wpa_printf(MSG_DEBUG, "NDIS: driver capabilities: key_mgmt 0x%x "
1687 "enc 0x%x auth 0x%x",
1688 drv->capa.key_mgmt, drv->capa.enc, drv->capa.auth);
1692 static int wpa_driver_ndis_get_capa(void *priv, struct wpa_driver_capa *capa)
1694 struct wpa_driver_ndis_data *drv = priv;
1695 if (!drv->has_capability)
1697 os_memcpy(capa, &drv->capa, sizeof(*capa));
1702 static const char * wpa_driver_ndis_get_ifname(void *priv)
1704 struct wpa_driver_ndis_data *drv = priv;
1709 static const u8 * wpa_driver_ndis_get_mac_addr(void *priv)
1711 struct wpa_driver_ndis_data *drv = priv;
1712 return drv->own_addr;
1718 #define NDISUIO_MSG_SIZE (sizeof(NDISUIO_DEVICE_NOTIFICATION) + 512)
1720 static void ndisuio_notification_receive(void *eloop_data, void *user_ctx)
1722 struct wpa_driver_ndis_data *drv = eloop_data;
1723 NDISUIO_DEVICE_NOTIFICATION *hdr;
1724 u8 buf[NDISUIO_MSG_SIZE];
1727 if (!ReadMsgQueue(drv->event_queue, buf, NDISUIO_MSG_SIZE, &len, 0,
1729 wpa_printf(MSG_DEBUG, "ndisuio_notification_receive: "
1730 "ReadMsgQueue failed: %d", (int) GetLastError());
1734 if (len < sizeof(NDISUIO_DEVICE_NOTIFICATION)) {
1735 wpa_printf(MSG_DEBUG, "ndisuio_notification_receive: "
1736 "Too short message (len=%d)", (int) len);
1740 hdr = (NDISUIO_DEVICE_NOTIFICATION *) buf;
1741 wpa_printf(MSG_DEBUG, "NDIS: Notification received: len=%d type=0x%x",
1742 (int) len, hdr->dwNotificationType);
1744 switch (hdr->dwNotificationType) {
1745 #ifdef NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL
1746 case NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL:
1747 wpa_printf(MSG_DEBUG, "NDIS: ADAPTER_ARRIVAL");
1748 wpa_driver_ndis_event_adapter_arrival(drv);
1751 #ifdef NDISUIO_NOTIFICATION_ADAPTER_REMOVAL
1752 case NDISUIO_NOTIFICATION_ADAPTER_REMOVAL:
1753 wpa_printf(MSG_DEBUG, "NDIS: ADAPTER_REMOVAL");
1754 wpa_driver_ndis_event_adapter_removal(drv);
1757 case NDISUIO_NOTIFICATION_MEDIA_CONNECT:
1758 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_CONNECT");
1759 SetEvent(drv->connected_event);
1760 wpa_driver_ndis_event_connect(drv);
1762 case NDISUIO_NOTIFICATION_MEDIA_DISCONNECT:
1763 ResetEvent(drv->connected_event);
1764 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_DISCONNECT");
1765 wpa_driver_ndis_event_disconnect(drv);
1767 case NDISUIO_NOTIFICATION_MEDIA_SPECIFIC_NOTIFICATION:
1768 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_SPECIFIC_NOTIFICATION");
1769 #if _WIN32_WCE == 420 || _WIN32_WCE == 0x420
1770 wpa_driver_ndis_event_media_specific(
1771 drv, hdr->pvStatusBuffer, hdr->uiStatusBufferSize);
1773 wpa_driver_ndis_event_media_specific(
1774 drv, ((const u8 *) hdr) + hdr->uiOffsetToStatusBuffer,
1775 (size_t) hdr->uiStatusBufferSize);
1779 wpa_printf(MSG_DEBUG, "NDIS: Unknown notification type 0x%x",
1780 hdr->dwNotificationType);
1786 static void ndisuio_notification_deinit(struct wpa_driver_ndis_data *drv)
1788 NDISUIO_REQUEST_NOTIFICATION req;
1790 memset(&req, 0, sizeof(req));
1791 req.hMsgQueue = drv->event_queue;
1792 req.dwNotificationTypes = 0;
1794 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_REQUEST_NOTIFICATION,
1795 &req, sizeof(req), NULL, 0, NULL, NULL)) {
1796 wpa_printf(MSG_INFO, "ndisuio_notification_deinit: "
1797 "IOCTL_NDISUIO_REQUEST_NOTIFICATION failed: %d",
1798 (int) GetLastError());
1801 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_CANCEL_NOTIFICATION,
1802 NULL, 0, NULL, 0, NULL, NULL)) {
1803 wpa_printf(MSG_INFO, "ndisuio_notification_deinit: "
1804 "IOCTL_NDISUIO_CANCEL_NOTIFICATION failed: %d",
1805 (int) GetLastError());
1808 if (drv->event_queue) {
1809 eloop_unregister_event(drv->event_queue,
1810 sizeof(drv->event_queue));
1811 CloseHandle(drv->event_queue);
1812 drv->event_queue = NULL;
1815 if (drv->connected_event) {
1816 CloseHandle(drv->connected_event);
1817 drv->connected_event = NULL;
1822 static int ndisuio_notification_init(struct wpa_driver_ndis_data *drv)
1824 MSGQUEUEOPTIONS opt;
1825 NDISUIO_REQUEST_NOTIFICATION req;
1827 drv->connected_event =
1828 CreateEvent(NULL, TRUE, FALSE, TEXT("WpaSupplicantConnected"));
1829 if (drv->connected_event == NULL) {
1830 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1831 "CreateEvent failed: %d",
1832 (int) GetLastError());
1836 memset(&opt, 0, sizeof(opt));
1837 opt.dwSize = sizeof(opt);
1838 opt.dwMaxMessages = 5;
1839 opt.cbMaxMessage = NDISUIO_MSG_SIZE;
1840 opt.bReadAccess = TRUE;
1842 drv->event_queue = CreateMsgQueue(NULL, &opt);
1843 if (drv->event_queue == NULL) {
1844 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1845 "CreateMsgQueue failed: %d",
1846 (int) GetLastError());
1847 ndisuio_notification_deinit(drv);
1851 memset(&req, 0, sizeof(req));
1852 req.hMsgQueue = drv->event_queue;
1853 req.dwNotificationTypes =
1854 #ifdef NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL
1855 NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL |
1857 #ifdef NDISUIO_NOTIFICATION_ADAPTER_REMOVAL
1858 NDISUIO_NOTIFICATION_ADAPTER_REMOVAL |
1860 NDISUIO_NOTIFICATION_MEDIA_CONNECT |
1861 NDISUIO_NOTIFICATION_MEDIA_DISCONNECT |
1862 NDISUIO_NOTIFICATION_MEDIA_SPECIFIC_NOTIFICATION;
1864 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_REQUEST_NOTIFICATION,
1865 &req, sizeof(req), NULL, 0, NULL, NULL)) {
1866 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1867 "IOCTL_NDISUIO_REQUEST_NOTIFICATION failed: %d",
1868 (int) GetLastError());
1869 ndisuio_notification_deinit(drv);
1873 eloop_register_event(drv->event_queue, sizeof(drv->event_queue),
1874 ndisuio_notification_receive, drv, NULL);
1878 #endif /* _WIN32_WCE */
1881 static int wpa_driver_ndis_get_names(struct wpa_driver_ndis_data *drv)
1883 #ifdef CONFIG_USE_NDISUIO
1884 NDISUIO_QUERY_BINDING *b;
1885 size_t blen = sizeof(*b) + 1024;
1886 int i, error, found = 0;
1888 char name[256], desc[256], *dpos;
1890 size_t j, len, dlen;
1892 b = os_malloc(blen);
1896 for (i = 0; ; i++) {
1897 os_memset(b, 0, blen);
1898 b->BindingIndex = i;
1899 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_QUERY_BINDING,
1900 b, sizeof(NDISUIO_QUERY_BINDING), b, blen,
1902 error = (int) GetLastError();
1903 if (error == ERROR_NO_MORE_ITEMS)
1905 wpa_printf(MSG_DEBUG, "IOCTL_NDISUIO_QUERY_BINDING "
1906 "failed: %d", error);
1910 pos = (WCHAR *) ((char *) b + b->DeviceNameOffset);
1911 len = b->DeviceNameLength;
1912 if (len >= sizeof(name))
1913 len = sizeof(name) - 1;
1914 for (j = 0; j < len; j++)
1915 name[j] = (char) pos[j];
1918 pos = (WCHAR *) ((char *) b + b->DeviceDescrOffset);
1919 len = b->DeviceDescrLength;
1920 if (len >= sizeof(desc))
1921 len = sizeof(desc) - 1;
1922 for (j = 0; j < len; j++)
1923 desc[j] = (char) pos[j];
1926 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s", i, name, desc);
1928 if (os_strstr(name, drv->ifname)) {
1929 wpa_printf(MSG_DEBUG, "NDIS: Interface name match");
1934 if (os_strncmp(desc, drv->ifname, os_strlen(drv->ifname)) == 0)
1936 wpa_printf(MSG_DEBUG, "NDIS: Interface description "
1944 wpa_printf(MSG_DEBUG, "NDIS: Could not find interface '%s'",
1950 os_strlcpy(drv->ifname,
1951 os_strncmp(name, "\\DEVICE\\", 8) == 0 ? name + 8 : name,
1952 sizeof(drv->ifname));
1954 drv->adapter_name = wpa_strdup_tchar(drv->ifname);
1955 if (drv->adapter_name == NULL) {
1956 wpa_printf(MSG_ERROR, "NDIS: Failed to allocate memory for "
1961 #endif /* _WIN32_WCE */
1963 dpos = os_strstr(desc, " - ");
1967 dlen = os_strlen(desc);
1968 drv->adapter_desc = os_malloc(dlen + 1);
1969 if (drv->adapter_desc) {
1970 os_memcpy(drv->adapter_desc, desc, dlen);
1971 drv->adapter_desc[dlen] = '\0';
1976 if (drv->adapter_desc == NULL)
1979 wpa_printf(MSG_DEBUG, "NDIS: Adapter description prefix '%s'",
1983 #else /* CONFIG_USE_NDISUIO */
1985 char *names, *pos, *pos2;
1988 #define MAX_ADAPTERS 32
1989 char *name[MAX_ADAPTERS];
1990 char *desc[MAX_ADAPTERS];
1991 int num_name, num_desc, i, found_name, found_desc;
1994 wpa_printf(MSG_DEBUG, "NDIS: Packet.dll version: %s",
1995 PacketGetVersion());
1998 _names = os_zalloc(len);
2002 res = PacketGetAdapterNames(_names, &len);
2003 if (!res && len > 8192) {
2005 _names = os_zalloc(len);
2008 res = PacketGetAdapterNames(_names, &len);
2012 wpa_printf(MSG_ERROR, "NDIS: Failed to get adapter list "
2013 "(PacketGetAdapterNames)");
2018 names = (char *) _names;
2019 if (names[0] && names[1] == '\0' && names[2] && names[3] == '\0') {
2020 wpa_printf(MSG_DEBUG, "NDIS: Looks like adapter names are in "
2022 /* Convert to ASCII */
2024 while (pos2 < names + len) {
2025 if (pos2[0] == '\0' && pos2[1] == '\0' &&
2026 pos2[2] == '\0' && pos2[3] == '\0') {
2033 os_memcpy(pos + 2, names, pos - names);
2039 while (pos < names + len) {
2040 name[num_name] = pos;
2041 while (*pos && pos < names + len)
2043 if (pos + 1 >= names + len) {
2049 if (num_name >= MAX_ADAPTERS) {
2050 wpa_printf(MSG_DEBUG, "NDIS: Too many adapters");
2055 wpa_printf(MSG_DEBUG, "NDIS: %d adapter names found",
2063 while (pos < names + len) {
2064 desc[num_desc] = pos;
2065 while (*pos && pos < names + len)
2067 if (pos + 1 >= names + len) {
2073 if (num_desc >= MAX_ADAPTERS) {
2074 wpa_printf(MSG_DEBUG, "NDIS: Too many adapter "
2080 wpa_printf(MSG_DEBUG, "NDIS: %d adapter descriptions "
2088 * Windows 98 with Packet.dll 3.0 alpha3 does not include adapter
2089 * descriptions. Fill in dummy descriptors to work around this.
2091 while (num_desc < num_name)
2092 desc[num_desc++] = "dummy description";
2094 if (num_name != num_desc) {
2095 wpa_printf(MSG_DEBUG, "NDIS: mismatch in adapter name and "
2096 "description counts (%d != %d)",
2097 num_name, num_desc);
2102 found_name = found_desc = -1;
2103 for (i = 0; i < num_name; i++) {
2104 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s",
2105 i, name[i], desc[i]);
2106 if (found_name == -1 && os_strstr(name[i], drv->ifname))
2108 if (found_desc == -1 &&
2109 os_strncmp(desc[i], drv->ifname, os_strlen(drv->ifname)) ==
2114 if (found_name < 0 && found_desc >= 0) {
2115 wpa_printf(MSG_DEBUG, "NDIS: Matched interface '%s' based on "
2117 name[found_desc], desc[found_desc]);
2118 found_name = found_desc;
2119 os_strlcpy(drv->ifname,
2120 os_strncmp(name[found_desc], "\\Device\\NPF_", 12)
2121 == 0 ? name[found_desc] + 12 : name[found_desc],
2122 sizeof(drv->ifname));
2125 if (found_name < 0) {
2126 wpa_printf(MSG_DEBUG, "NDIS: Could not find interface '%s'",
2133 pos = os_strrchr(desc[i], '(');
2135 dlen = pos - desc[i];
2137 if (pos > desc[i] && *pos == ' ')
2140 dlen = os_strlen(desc[i]);
2142 drv->adapter_desc = os_malloc(dlen + 1);
2143 if (drv->adapter_desc) {
2144 os_memcpy(drv->adapter_desc, desc[i], dlen);
2145 drv->adapter_desc[dlen] = '\0';
2150 if (drv->adapter_desc == NULL)
2153 wpa_printf(MSG_DEBUG, "NDIS: Adapter description prefix '%s'",
2157 #endif /* CONFIG_USE_NDISUIO */
2161 #if defined(CONFIG_NATIVE_WINDOWS) || defined(__CYGWIN__)
2164 * These structures are undocumented for WinXP; only WinCE version is
2165 * documented. These would be included wzcsapi.h if it were available. Some
2166 * changes here have been needed to make the structures match with WinXP SP2.
2167 * It is unclear whether these work with any other version.
2172 } INTF_KEY_ENTRY, *PINTF_KEY_ENTRY;
2176 PINTF_KEY_ENTRY pIntfs;
2177 } INTFS_KEY_TABLE, *PINTFS_KEY_TABLE;
2182 } RAW_DATA, *PRAW_DATA;
2189 ULONG ulPhysicalMediaType;
2194 u8 pad[2]; /* why is this needed? */
2195 #endif /* _WIN32_WCE */
2197 DWORD dwCapabilities; /* something added for WinXP SP2(?) */
2200 RAW_DATA rdBSSIDList;
2201 RAW_DATA rdStSSIDList;
2202 RAW_DATA rdCtrlData;
2206 DWORD nWPAMCastCipher;
2207 /* add some extra buffer for later additions since this interface is
2208 * far from stable */
2209 u8 later_additions[100];
2210 } INTF_ENTRY, *PINTF_ENTRY;
2212 #define INTF_ALL 0xffffffff
2213 #define INTF_ALL_FLAGS 0x0000ffff
2214 #define INTF_CTLFLAGS 0x00000010
2215 #define INTFCTL_ENABLED 0x8000
2216 #endif /* _WIN32_WCE */
2220 static int wpa_driver_ndis_rebind_adapter(struct wpa_driver_ndis_data *drv)
2226 len = _tcslen(drv->adapter_name);
2230 ndis = CreateFile(DD_NDIS_DEVICE_NAME, GENERIC_READ | GENERIC_WRITE,
2231 0, NULL, OPEN_EXISTING, 0, NULL);
2232 if (ndis == INVALID_HANDLE_VALUE) {
2233 wpa_printf(MSG_DEBUG, "NDIS: Failed to open file to NDIS "
2234 "device: %d", (int) GetLastError());
2239 memcpy(multi, drv->adapter_name, len * sizeof(TCHAR));
2240 memcpy(&multi[len], TEXT("NDISUIO\0"), 9 * sizeof(TCHAR));
2243 if (!DeviceIoControl(ndis, IOCTL_NDIS_REBIND_ADAPTER,
2244 multi, len * sizeof(TCHAR), NULL, 0, NULL, NULL))
2246 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDIS_REBIND_ADAPTER "
2247 "failed: 0x%x", (int) GetLastError());
2248 wpa_hexdump_ascii(MSG_DEBUG, "NDIS: rebind multi_sz",
2249 (u8 *) multi, len * sizeof(TCHAR));
2256 wpa_printf(MSG_DEBUG, "NDIS: Requested NDIS rebind of NDISUIO "
2261 #endif /* _WIN32_WCE */
2264 static int wpa_driver_ndis_set_wzc(struct wpa_driver_ndis_data *drv,
2271 TCHAR keyname[256], devname[256];
2273 #define WZC_DRIVER TEXT("Drivers\\BuiltIn\\ZeroConfig")
2277 h = ActivateDeviceEx(WZC_DRIVER, NULL, 0, NULL);
2278 if (h == INVALID_HANDLE_VALUE || h == 0) {
2279 wpa_printf(MSG_DEBUG, "NDIS: Failed to re-enable WZC "
2280 "- ActivateDeviceEx failed: %d",
2281 (int) GetLastError());
2285 wpa_printf(MSG_DEBUG, "NDIS: WZC re-enabled");
2286 return wpa_driver_ndis_rebind_adapter(drv);
2290 * Unfortunately, just disabling the WZC for an interface is not enough
2291 * to free NDISUIO for us, so need to disable and unload WZC completely
2292 * for now when using WinCE with NDISUIO. In addition, must request
2293 * NDISUIO protocol to be rebound to the adapter in order to free the
2294 * NDISUIO binding that WZC hold before us.
2297 /* Enumerate HKLM\Drivers\Active\* to find a handle to WZC. */
2298 ret = RegOpenKeyEx(HKEY_LOCAL_MACHINE, DEVLOAD_ACTIVE_KEY, 0, 0, &hk);
2299 if (ret != ERROR_SUCCESS) {
2300 wpa_printf(MSG_DEBUG, "NDIS: RegOpenKeyEx(DEVLOAD_ACTIVE_KEY) "
2301 "failed: %d %d", (int) ret, (int) GetLastError());
2305 for (i = 0; ; i++) {
2306 len = sizeof(keyname);
2307 ret = RegEnumKeyEx(hk, i, keyname, &len, NULL, NULL, NULL,
2309 if (ret != ERROR_SUCCESS) {
2310 wpa_printf(MSG_DEBUG, "NDIS: Could not find active "
2311 "WZC - assuming it is not running.");
2316 ret = RegOpenKeyEx(hk, keyname, 0, 0, &hk2);
2317 if (ret != ERROR_SUCCESS) {
2318 wpa_printf(MSG_DEBUG, "NDIS: RegOpenKeyEx(active dev) "
2320 (int) ret, (int) GetLastError());
2324 len = sizeof(devname);
2325 ret = RegQueryValueEx(hk2, DEVLOAD_DEVKEY_VALNAME, NULL, NULL,
2326 (LPBYTE) devname, &len);
2327 if (ret != ERROR_SUCCESS) {
2328 wpa_printf(MSG_DEBUG, "NDIS: RegQueryValueEx("
2329 "DEVKEY_VALNAME) failed: %d %d",
2330 (int) ret, (int) GetLastError());
2335 if (_tcscmp(devname, WZC_DRIVER) == 0)
2343 /* Found WZC - get handle to it. */
2345 ret = RegQueryValueEx(hk2, DEVLOAD_HANDLE_VALNAME, NULL, NULL,
2346 (PUCHAR) &hnd, &len);
2347 if (ret != ERROR_SUCCESS) {
2348 wpa_printf(MSG_DEBUG, "NDIS: RegQueryValueEx(HANDLE_VALNAME) "
2349 "failed: %d %d", (int) ret, (int) GetLastError());
2356 /* Deactivate WZC */
2357 if (!DeactivateDevice((HANDLE) hnd)) {
2358 wpa_printf(MSG_DEBUG, "NDIS: DeactivateDevice failed: %d",
2359 (int) GetLastError());
2363 wpa_printf(MSG_DEBUG, "NDIS: Disabled WZC temporarily");
2364 drv->wzc_disabled = 1;
2365 return wpa_driver_ndis_rebind_adapter(drv);
2367 #else /* _WIN32_WCE */
2370 DWORD (WINAPI *wzc_enum_interf)(LPWSTR pSrvAddr,
2371 PINTFS_KEY_TABLE pIntfs);
2372 DWORD (WINAPI *wzc_query_interf)(LPWSTR pSrvAddr, DWORD dwInFlags,
2374 LPDWORD pdwOutFlags);
2375 DWORD (WINAPI *wzc_set_interf)(LPWSTR pSrvAddr, DWORD dwInFlags,
2376 PINTF_ENTRY pIntf, LPDWORD pdwOutFlags);
2379 INTFS_KEY_TABLE guids;
2385 hm = LoadLibrary(TEXT("wzcsapi.dll"));
2387 wpa_printf(MSG_DEBUG, "NDIS: Failed to load wzcsapi.dll (%u) "
2388 "- WZC probably not running",
2389 (unsigned int) GetLastError());
2394 wzc_enum_interf = (void *) GetProcAddressA(hm, "WZCEnumInterfaces");
2395 wzc_query_interf = (void *) GetProcAddressA(hm, "WZCQueryInterface");
2396 wzc_set_interf = (void *) GetProcAddressA(hm, "WZCSetInterface");
2397 #else /* _WIN32_WCE */
2398 wzc_enum_interf = (void *) GetProcAddress(hm, "WZCEnumInterfaces");
2399 wzc_query_interf = (void *) GetProcAddress(hm, "WZCQueryInterface");
2400 wzc_set_interf = (void *) GetProcAddress(hm, "WZCSetInterface");
2401 #endif /* _WIN32_WCE */
2403 if (wzc_enum_interf == NULL || wzc_query_interf == NULL ||
2404 wzc_set_interf == NULL) {
2405 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces, "
2406 "WZCQueryInterface, or WZCSetInterface not found "
2411 os_memset(&guids, 0, sizeof(guids));
2412 res = wzc_enum_interf(NULL, &guids);
2414 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces failed: %d; "
2415 "WZC service is apparently not running",
2420 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces: %d interfaces",
2421 (int) guids.dwNumIntfs);
2423 for (i = 0; i < guids.dwNumIntfs; i++) {
2424 pos = guids.pIntfs[i].wszGuid;
2425 for (j = 0; j < sizeof(guid); j++) {
2426 guid[j] = (char) *pos;
2431 guid[sizeof(guid) - 1] = '\0';
2432 wpa_printf(MSG_DEBUG, "NDIS: intfs %d GUID '%s'",
2434 if (os_strstr(drv->ifname, guid) == NULL)
2437 wpa_printf(MSG_DEBUG, "NDIS: Current interface found from "
2442 if (i >= guids.dwNumIntfs) {
2443 wpa_printf(MSG_DEBUG, "NDIS: Current interface not found from "
2448 os_memset(&intf, 0, sizeof(intf));
2449 intf.wszGuid = guids.pIntfs[i].wszGuid;
2450 /* Set flags to verify that the structure has not changed. */
2451 intf.dwCtlFlags = -1;
2453 res = wzc_query_interf(NULL, INTFCTL_ENABLED, &intf, &flags);
2455 wpa_printf(MSG_DEBUG, "NDIS: Could not query flags for the "
2456 "WZC interface: %d (0x%x)",
2457 (int) res, (int) res);
2458 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2459 (unsigned int) GetLastError());
2463 wpa_printf(MSG_DEBUG, "NDIS: WZC interface flags 0x%x dwCtlFlags 0x%x",
2464 (int) flags, (int) intf.dwCtlFlags);
2466 if (intf.dwCtlFlags == -1) {
2467 wpa_printf(MSG_DEBUG, "NDIS: Looks like wzcsapi has changed "
2468 "again - could not disable WZC");
2469 wpa_hexdump(MSG_MSGDUMP, "NDIS: intf",
2470 (u8 *) &intf, sizeof(intf));
2475 if (!(intf.dwCtlFlags & INTFCTL_ENABLED)) {
2476 wpa_printf(MSG_DEBUG, "NDIS: Enabling WZC for this "
2478 intf.dwCtlFlags |= INTFCTL_ENABLED;
2479 res = wzc_set_interf(NULL, INTFCTL_ENABLED, &intf,
2482 wpa_printf(MSG_DEBUG, "NDIS: Failed to enable "
2484 (int) res, (int) res);
2485 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2486 (unsigned int) GetLastError());
2489 wpa_printf(MSG_DEBUG, "NDIS: Re-enabled WZC for this "
2491 drv->wzc_disabled = 0;
2494 if (intf.dwCtlFlags & INTFCTL_ENABLED) {
2495 wpa_printf(MSG_DEBUG, "NDIS: Disabling WZC for this "
2497 intf.dwCtlFlags &= ~INTFCTL_ENABLED;
2498 res = wzc_set_interf(NULL, INTFCTL_ENABLED, &intf,
2501 wpa_printf(MSG_DEBUG, "NDIS: Failed to "
2502 "disable WZC: %d (0x%x)",
2503 (int) res, (int) res);
2504 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2505 (unsigned int) GetLastError());
2508 wpa_printf(MSG_DEBUG, "NDIS: Disabled WZC temporarily "
2509 "for this interface");
2510 drv->wzc_disabled = 1;
2512 wpa_printf(MSG_DEBUG, "NDIS: WZC was not enabled for "
2523 #endif /* _WIN32_WCE */
2526 #else /* CONFIG_NATIVE_WINDOWS || __CYGWIN__ */
2528 static int wpa_driver_ndis_set_wzc(struct wpa_driver_ndis_data *drv,
2534 #endif /* CONFIG_NATIVE_WINDOWS || __CYGWIN__ */
2537 #ifdef CONFIG_USE_NDISUIO
2539 * l2_packet_ndis.c is sharing the same handle to NDISUIO, so we must be able
2540 * to export this handle. This is somewhat ugly, but there is no better
2541 * mechanism available to pass data from driver interface to l2_packet wrapper.
2543 static HANDLE driver_ndis_ndisuio_handle = INVALID_HANDLE_VALUE;
2545 HANDLE driver_ndis_get_ndisuio_handle(void)
2547 return driver_ndis_ndisuio_handle;
2549 #endif /* CONFIG_USE_NDISUIO */
2552 static int wpa_driver_ndis_adapter_init(struct wpa_driver_ndis_data *drv)
2554 #ifdef CONFIG_USE_NDISUIO
2556 #define NDISUIO_DEVICE_NAME TEXT("\\\\.\\\\Ndisuio")
2558 #endif /* _WIN32_WCE */
2559 drv->ndisuio = CreateFile(NDISUIO_DEVICE_NAME,
2560 GENERIC_READ | GENERIC_WRITE, 0, NULL,
2562 FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
2563 INVALID_HANDLE_VALUE);
2564 if (drv->ndisuio == INVALID_HANDLE_VALUE) {
2565 wpa_printf(MSG_ERROR, "NDIS: Failed to open connection to "
2566 "NDISUIO: %d", (int) GetLastError());
2569 driver_ndis_ndisuio_handle = drv->ndisuio;
2572 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_BIND_WAIT, NULL, 0,
2573 NULL, 0, &written, NULL)) {
2574 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_BIND_WAIT failed: "
2575 "%d", (int) GetLastError());
2576 CloseHandle(drv->ndisuio);
2577 drv->ndisuio = INVALID_HANDLE_VALUE;
2580 #endif /* _WIN32_WCE */
2583 #else /* CONFIG_USE_NDISUIO */
2585 #endif /* CONFIG_USE_NDISUIO */
2589 static int wpa_driver_ndis_adapter_open(struct wpa_driver_ndis_data *drv)
2591 #ifdef CONFIG_USE_NDISUIO
2593 #define MAX_NDIS_DEVICE_NAME_LEN 256
2594 WCHAR ifname[MAX_NDIS_DEVICE_NAME_LEN];
2596 const char *prefix = "\\DEVICE\\";
2600 #else /* _WIN32_WCE */
2602 #endif /* _WIN32_WCE */
2603 len = pos + os_strlen(drv->ifname);
2604 if (len >= MAX_NDIS_DEVICE_NAME_LEN)
2606 for (i = 0; i < pos; i++)
2607 ifname[i] = (WCHAR) prefix[i];
2608 for (i = pos; i < len; i++)
2609 ifname[i] = (WCHAR) drv->ifname[i - pos];
2612 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_OPEN_DEVICE,
2613 ifname, len * sizeof(WCHAR), NULL, 0, &written,
2615 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_OPEN_DEVICE "
2616 "failed: %d", (int) GetLastError());
2617 wpa_hexdump_ascii(MSG_DEBUG, "NDIS: ifname",
2618 (const u8 *) ifname, len * sizeof(WCHAR));
2619 CloseHandle(drv->ndisuio);
2620 drv->ndisuio = INVALID_HANDLE_VALUE;
2624 wpa_printf(MSG_DEBUG, "NDIS: Opened NDISUIO device successfully");
2627 #else /* CONFIG_USE_NDISUIO */
2629 os_snprintf(ifname, sizeof(ifname), "\\Device\\NPF_%s", drv->ifname);
2630 drv->adapter = PacketOpenAdapter(ifname);
2631 if (drv->adapter == NULL) {
2632 wpa_printf(MSG_DEBUG, "NDIS: PacketOpenAdapter failed for "
2637 #endif /* CONFIG_USE_NDISUIO */
2641 static void wpa_driver_ndis_adapter_close(struct wpa_driver_ndis_data *drv)
2643 #ifdef CONFIG_USE_NDISUIO
2644 driver_ndis_ndisuio_handle = INVALID_HANDLE_VALUE;
2645 if (drv->ndisuio != INVALID_HANDLE_VALUE)
2646 CloseHandle(drv->ndisuio);
2647 #else /* CONFIG_USE_NDISUIO */
2649 PacketCloseAdapter(drv->adapter);
2650 #endif /* CONFIG_USE_NDISUIO */
2654 static void * wpa_driver_ndis_init(void *ctx, const char *ifname)
2656 struct wpa_driver_ndis_data *drv;
2659 drv = os_zalloc(sizeof(*drv));
2664 * Compatibility code to strip possible prefix from the GUID. Previous
2665 * versions include \Device\NPF_ prefix for all names, but the internal
2666 * interface name is now only the GUI. Both Packet32 and NDISUIO
2667 * prefixes are supported.
2669 if (os_strncmp(ifname, "\\Device\\NPF_", 12) == 0)
2671 else if (os_strncmp(ifname, "\\DEVICE\\", 8) == 0)
2673 os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
2675 if (wpa_driver_ndis_adapter_init(drv) < 0) {
2680 if (wpa_driver_ndis_get_names(drv) < 0) {
2681 wpa_driver_ndis_adapter_close(drv);
2686 wpa_driver_ndis_set_wzc(drv, 0);
2688 if (wpa_driver_ndis_adapter_open(drv) < 0) {
2689 wpa_driver_ndis_adapter_close(drv);
2694 if (ndis_get_oid(drv, OID_802_3_CURRENT_ADDRESS,
2695 drv->own_addr, ETH_ALEN) < 0) {
2696 wpa_printf(MSG_DEBUG, "NDIS: Get OID_802_3_CURRENT_ADDRESS "
2698 wpa_driver_ndis_adapter_close(drv);
2702 wpa_driver_ndis_get_capability(drv);
2704 /* Make sure that the driver does not have any obsolete PMKID entries.
2706 wpa_driver_ndis_flush_pmkid(drv);
2709 * Disconnect to make sure that driver re-associates if it was
2712 wpa_driver_ndis_disconnect(drv);
2714 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout, drv, NULL);
2716 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
2717 drv->events = ndis_events_init(&drv->events_pipe, &drv->event_avail,
2718 drv->ifname, drv->adapter_desc);
2719 if (drv->events == NULL) {
2720 wpa_driver_ndis_deinit(drv);
2723 eloop_register_event(drv->event_avail, sizeof(drv->event_avail),
2724 wpa_driver_ndis_event_pipe_cb, drv, NULL);
2725 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
2728 if (ndisuio_notification_init(drv) < 0) {
2729 wpa_driver_ndis_deinit(drv);
2732 #endif /* _WIN32_WCE */
2734 /* Set mode here in case card was configured for ad-hoc mode
2736 mode = Ndis802_11Infrastructure;
2737 if (ndis_set_oid(drv, OID_802_11_INFRASTRUCTURE_MODE,
2738 (char *) &mode, sizeof(mode)) < 0) {
2739 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
2740 "OID_802_11_INFRASTRUCTURE_MODE (%d)",
2742 /* Try to continue anyway */
2744 if (!drv->has_capability && drv->capa.enc == 0) {
2745 wpa_printf(MSG_DEBUG, "NDIS: Driver did not provide "
2746 "any wireless capabilities - assume it is "
2747 "a wired interface");
2756 static void wpa_driver_ndis_deinit(void *priv)
2758 struct wpa_driver_ndis_data *drv = priv;
2760 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
2762 eloop_unregister_event(drv->event_avail,
2763 sizeof(drv->event_avail));
2764 ndis_events_deinit(drv->events);
2766 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
2769 ndisuio_notification_deinit(drv);
2770 #endif /* _WIN32_WCE */
2772 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
2773 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
2774 wpa_driver_ndis_flush_pmkid(drv);
2775 wpa_driver_ndis_disconnect(drv);
2776 if (wpa_driver_ndis_radio_off(drv) < 0) {
2777 wpa_printf(MSG_DEBUG, "NDIS: failed to disassociate and turn "
2781 wpa_driver_ndis_adapter_close(drv);
2783 if (drv->wzc_disabled)
2784 wpa_driver_ndis_set_wzc(drv, 1);
2787 os_free(drv->adapter_name);
2788 #endif /* _WIN32_WCE */
2789 os_free(drv->adapter_desc);
2794 const struct wpa_driver_ops wpa_driver_ndis_ops = {
2796 "Windows NDIS driver",
2797 wpa_driver_ndis_get_bssid,
2798 wpa_driver_ndis_get_ssid,
2799 wpa_driver_ndis_set_wpa,
2800 wpa_driver_ndis_set_key,
2801 wpa_driver_ndis_init,
2802 wpa_driver_ndis_deinit,
2803 NULL /* set_param */,
2804 NULL /* set_countermeasures */,
2805 NULL /* set_drop_unencrypted */,
2806 wpa_driver_ndis_scan,
2807 NULL /* get_scan_results */,
2808 wpa_driver_ndis_deauthenticate,
2809 wpa_driver_ndis_disassociate,
2810 wpa_driver_ndis_associate,
2811 NULL /* set_auth_alg */,
2812 wpa_driver_ndis_add_pmkid,
2813 wpa_driver_ndis_remove_pmkid,
2814 wpa_driver_ndis_flush_pmkid,
2815 wpa_driver_ndis_get_capa,
2816 wpa_driver_ndis_poll,
2817 wpa_driver_ndis_get_ifname,
2818 wpa_driver_ndis_get_mac_addr,
2819 NULL /* send_eapol */,
2820 NULL /* set_operstate */,
2821 NULL /* mlme_setprotection */,
2822 NULL /* get_hw_feature_data */,
2823 NULL /* set_channel */,
2824 NULL /* set_ssid */,
2825 NULL /* set_bssid */,
2826 NULL /* send_mlme */,
2827 NULL /* mlme_add_sta */,
2828 NULL /* mlme_remove_sta */,
2829 NULL /* update_ft_ies */,
2830 NULL /* send_ft_action */,
2831 wpa_driver_ndis_get_scan_results