2 * hostapd / UNIX domain socket -based control interface
3 * Copyright (c) 2004-2018, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
9 #include "utils/includes.h"
11 #ifndef CONFIG_NATIVE_WINDOWS
13 #ifdef CONFIG_TESTING_OPTIONS
14 #include <net/ethernet.h>
15 #include <netinet/ip.h>
16 #endif /* CONFIG_TESTING_OPTIONS */
22 #ifdef CONFIG_CTRL_IFACE_UDP
24 #endif /* CONFIG_CTRL_IFACE_UDP */
26 #include "utils/common.h"
27 #include "utils/eloop.h"
28 #include "utils/module_tests.h"
29 #include "common/version.h"
30 #include "common/ieee802_11_defs.h"
31 #include "common/ctrl_iface_common.h"
33 #include "common/dpp.h"
34 #endif /* CONFIG_DPP */
35 #include "common/wpa_ctrl.h"
36 #include "crypto/tls.h"
37 #include "drivers/driver.h"
38 #include "eapol_auth/eapol_auth_sm.h"
39 #include "radius/radius_client.h"
40 #include "radius/radius_server.h"
41 #include "l2_packet/l2_packet.h"
42 #include "ap/hostapd.h"
43 #include "ap/ap_config.h"
44 #include "ap/ieee802_1x.h"
45 #include "ap/wpa_auth.h"
46 #include "ap/ieee802_11.h"
47 #include "ap/sta_info.h"
48 #include "ap/wps_hostapd.h"
49 #include "ap/ctrl_iface_ap.h"
50 #include "ap/ap_drv_ops.h"
52 #include "ap/wnm_ap.h"
53 #include "ap/wpa_auth.h"
54 #include "ap/beacon.h"
55 #include "ap/neighbor_db.h"
57 #include "ap/dpp_hostapd.h"
58 #include "wps/wps_defs.h"
60 #include "fst/fst_ctrl_iface.h"
61 #include "config_file.h"
62 #include "ctrl_iface.h"
65 #define HOSTAPD_CLI_DUP_VALUE_MAX_LEN 256
67 #ifdef CONFIG_CTRL_IFACE_UDP
69 static unsigned char cookie[COOKIE_LEN];
70 static unsigned char gcookie[COOKIE_LEN];
71 #define HOSTAPD_CTRL_IFACE_PORT 8877
72 #define HOSTAPD_CTRL_IFACE_PORT_LIMIT 50
73 #define HOSTAPD_GLOBAL_CTRL_IFACE_PORT 8878
74 #define HOSTAPD_GLOBAL_CTRL_IFACE_PORT_LIMIT 50
75 #endif /* CONFIG_CTRL_IFACE_UDP */
77 static void hostapd_ctrl_iface_send(struct hostapd_data *hapd, int level,
78 enum wpa_msg_type type,
79 const char *buf, size_t len);
82 static int hostapd_ctrl_iface_attach(struct hostapd_data *hapd,
83 struct sockaddr_storage *from,
84 socklen_t fromlen, const char *input)
86 return ctrl_iface_attach(&hapd->ctrl_dst, from, fromlen, input);
90 static int hostapd_ctrl_iface_detach(struct hostapd_data *hapd,
91 struct sockaddr_storage *from,
94 return ctrl_iface_detach(&hapd->ctrl_dst, from, fromlen);
98 static int hostapd_ctrl_iface_level(struct hostapd_data *hapd,
99 struct sockaddr_storage *from,
103 return ctrl_iface_level(&hapd->ctrl_dst, from, fromlen, level);
107 static int hostapd_ctrl_iface_new_sta(struct hostapd_data *hapd,
111 struct sta_info *sta;
113 wpa_printf(MSG_DEBUG, "CTRL_IFACE NEW_STA %s", txtaddr);
115 if (hwaddr_aton(txtaddr, addr))
118 sta = ap_get_sta(hapd, addr);
122 wpa_printf(MSG_DEBUG, "Add new STA " MACSTR " based on ctrl_iface "
123 "notification", MAC2STR(addr));
124 sta = ap_sta_add(hapd, addr);
128 hostapd_new_assoc_sta(hapd, sta, 0);
133 #ifdef CONFIG_IEEE80211W
135 static int hostapd_ctrl_iface_sa_query(struct hostapd_data *hapd,
139 u8 trans_id[WLAN_SA_QUERY_TR_ID_LEN];
141 wpa_printf(MSG_DEBUG, "CTRL_IFACE SA_QUERY %s", txtaddr);
143 if (hwaddr_aton(txtaddr, addr) ||
144 os_get_random(trans_id, WLAN_SA_QUERY_TR_ID_LEN) < 0)
147 ieee802_11_send_sa_query_req(hapd, addr, trans_id);
151 #endif /* NEED_AP_MLME */
152 #endif /* CONFIG_IEEE80211W */
156 static int hostapd_ctrl_iface_wps_pin(struct hostapd_data *hapd, char *txt)
158 char *pin = os_strchr(txt, ' ');
161 u8 addr_buf[ETH_ALEN], *addr = NULL;
168 timeout_txt = os_strchr(pin, ' ');
170 *timeout_txt++ = '\0';
171 timeout = atoi(timeout_txt);
172 pos = os_strchr(timeout_txt, ' ');
175 if (hwaddr_aton(pos, addr_buf) == 0)
181 return hostapd_wps_add_pin(hapd, addr, txt, pin, timeout);
185 static int hostapd_ctrl_iface_wps_check_pin(
186 struct hostapd_data *hapd, char *cmd, char *buf, size_t buflen)
193 wpa_hexdump_ascii_key(MSG_DEBUG, "WPS_CHECK_PIN",
194 (u8 *) cmd, os_strlen(cmd));
195 for (pos = cmd, len = 0; *pos != '\0'; pos++) {
196 if (*pos < '0' || *pos > '9')
200 wpa_printf(MSG_DEBUG, "WPS: Too long PIN");
204 if (len != 4 && len != 8) {
205 wpa_printf(MSG_DEBUG, "WPS: Invalid PIN length %d", (int) len);
211 unsigned int pin_val;
213 if (!wps_pin_valid(pin_val)) {
214 wpa_printf(MSG_DEBUG, "WPS: Invalid checksum digit");
215 ret = os_snprintf(buf, buflen, "FAIL-CHECKSUM\n");
216 if (os_snprintf_error(buflen, ret))
222 ret = os_snprintf(buf, buflen, "%s", pin);
223 if (os_snprintf_error(buflen, ret))
230 #ifdef CONFIG_WPS_NFC
231 static int hostapd_ctrl_iface_wps_nfc_tag_read(struct hostapd_data *hapd,
238 len = os_strlen(pos);
243 buf = wpabuf_alloc(len);
246 if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
251 ret = hostapd_wps_nfc_tag_read(hapd, buf);
258 static int hostapd_ctrl_iface_wps_nfc_config_token(struct hostapd_data *hapd,
259 char *cmd, char *reply,
266 if (os_strcmp(cmd, "WPS") == 0)
268 else if (os_strcmp(cmd, "NDEF") == 0)
273 buf = hostapd_wps_nfc_config_token(hapd, ndef);
277 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
288 static int hostapd_ctrl_iface_wps_nfc_token_gen(struct hostapd_data *hapd,
289 char *reply, size_t max_len,
295 buf = hostapd_wps_nfc_token_gen(hapd, ndef);
299 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
310 static int hostapd_ctrl_iface_wps_nfc_token(struct hostapd_data *hapd,
311 char *cmd, char *reply,
314 if (os_strcmp(cmd, "WPS") == 0)
315 return hostapd_ctrl_iface_wps_nfc_token_gen(hapd, reply,
318 if (os_strcmp(cmd, "NDEF") == 0)
319 return hostapd_ctrl_iface_wps_nfc_token_gen(hapd, reply,
322 if (os_strcmp(cmd, "enable") == 0)
323 return hostapd_wps_nfc_token_enable(hapd);
325 if (os_strcmp(cmd, "disable") == 0) {
326 hostapd_wps_nfc_token_disable(hapd);
334 static int hostapd_ctrl_iface_nfc_get_handover_sel(struct hostapd_data *hapd,
335 char *cmd, char *reply,
343 pos = os_strchr(cmd, ' ');
348 if (os_strcmp(cmd, "WPS") == 0)
350 else if (os_strcmp(cmd, "NDEF") == 0)
355 if (os_strcmp(pos, "WPS-CR") == 0)
356 buf = hostapd_wps_nfc_hs_cr(hapd, ndef);
362 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
373 static int hostapd_ctrl_iface_nfc_report_handover(struct hostapd_data *hapd,
377 struct wpabuf *req, *sel;
379 char *pos, *role, *type, *pos2;
382 pos = os_strchr(role, ' ');
388 pos = os_strchr(type, ' ');
393 pos2 = os_strchr(pos, ' ');
398 len = os_strlen(pos);
403 req = wpabuf_alloc(len);
406 if (hexstr2bin(pos, wpabuf_put(req, len), len) < 0) {
411 len = os_strlen(pos2);
418 sel = wpabuf_alloc(len);
423 if (hexstr2bin(pos2, wpabuf_put(sel, len), len) < 0) {
429 if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "WPS") == 0) {
430 ret = hostapd_wps_nfc_report_handover(hapd, req, sel);
432 wpa_printf(MSG_DEBUG, "NFC: Unsupported connection handover "
433 "reported: role=%s type=%s", role, type);
442 #endif /* CONFIG_WPS_NFC */
445 static int hostapd_ctrl_iface_wps_ap_pin(struct hostapd_data *hapd, char *txt,
446 char *buf, size_t buflen)
452 pos = os_strchr(txt, ' ');
456 if (os_strcmp(txt, "disable") == 0) {
457 hostapd_wps_ap_pin_disable(hapd);
458 return os_snprintf(buf, buflen, "OK\n");
461 if (os_strcmp(txt, "random") == 0) {
464 pin_txt = hostapd_wps_ap_pin_random(hapd, timeout);
467 return os_snprintf(buf, buflen, "%s", pin_txt);
470 if (os_strcmp(txt, "get") == 0) {
471 pin_txt = hostapd_wps_ap_pin_get(hapd);
474 return os_snprintf(buf, buflen, "%s", pin_txt);
477 if (os_strcmp(txt, "set") == 0) {
482 pos = os_strchr(pos, ' ');
487 if (os_strlen(pin) > buflen)
489 if (hostapd_wps_ap_pin_set(hapd, pin, timeout) < 0)
491 return os_snprintf(buf, buflen, "%s", pin);
498 static int hostapd_ctrl_iface_wps_config(struct hostapd_data *hapd, char *txt)
501 char *ssid, *auth, *encr = NULL, *key = NULL;
504 pos = os_strchr(txt, ' ');
510 pos = os_strchr(pos, ' ');
514 pos = os_strchr(pos, ' ');
521 return hostapd_wps_config_ap(hapd, ssid, auth, encr, key);
525 static const char * pbc_status_str(enum pbc_status status)
528 case WPS_PBC_STATUS_DISABLE:
530 case WPS_PBC_STATUS_ACTIVE:
532 case WPS_PBC_STATUS_TIMEOUT:
534 case WPS_PBC_STATUS_OVERLAP:
542 static int hostapd_ctrl_iface_wps_get_status(struct hostapd_data *hapd,
543 char *buf, size_t buflen)
551 ret = os_snprintf(pos, end - pos, "PBC Status: %s\n",
552 pbc_status_str(hapd->wps_stats.pbc_status));
554 if (os_snprintf_error(end - pos, ret))
558 ret = os_snprintf(pos, end - pos, "Last WPS result: %s\n",
559 (hapd->wps_stats.status == WPS_STATUS_SUCCESS ?
561 (hapd->wps_stats.status == WPS_STATUS_FAILURE ?
562 "Failed" : "None")));
564 if (os_snprintf_error(end - pos, ret))
568 /* If status == Failure - Add possible Reasons */
569 if(hapd->wps_stats.status == WPS_STATUS_FAILURE &&
570 hapd->wps_stats.failure_reason > 0) {
571 ret = os_snprintf(pos, end - pos,
572 "Failure Reason: %s\n",
573 wps_ei_str(hapd->wps_stats.failure_reason));
575 if (os_snprintf_error(end - pos, ret))
580 if (hapd->wps_stats.status) {
581 ret = os_snprintf(pos, end - pos, "Peer Address: " MACSTR "\n",
582 MAC2STR(hapd->wps_stats.peer_addr));
584 if (os_snprintf_error(end - pos, ret))
592 #endif /* CONFIG_WPS */
596 static int hostapd_ctrl_iface_hs20_wnm_notif(struct hostapd_data *hapd,
602 if (hwaddr_aton(cmd, addr))
615 return hs20_send_wnm_notification(hapd, addr, 1, url);
619 static int hostapd_ctrl_iface_hs20_deauth_req(struct hostapd_data *hapd,
623 int code, reauth_delay, ret;
628 /* <STA MAC Addr> <Code(0/1)> <Re-auth-Delay(sec)> [URL] */
629 if (hwaddr_aton(cmd, addr))
632 pos = os_strchr(cmd, ' ');
638 pos = os_strchr(pos, ' ');
642 reauth_delay = atoi(pos);
645 pos = os_strchr(pos, ' ');
648 url_len = os_strlen(pos);
651 req = wpabuf_alloc(4 + url_len);
654 wpabuf_put_u8(req, code);
655 wpabuf_put_le16(req, reauth_delay);
656 wpabuf_put_u8(req, url_len);
658 wpabuf_put_data(req, pos, url_len);
660 wpa_printf(MSG_DEBUG, "HS 2.0: Send WNM-Notification to " MACSTR
661 " to indicate imminent deauthentication (code=%d "
662 "reauth_delay=%d)", MAC2STR(addr), code, reauth_delay);
663 ret = hs20_send_wnm_notification_deauth_req(hapd, addr, req);
668 #endif /* CONFIG_HS20 */
671 #ifdef CONFIG_INTERWORKING
673 static int hostapd_ctrl_iface_set_qos_map_set(struct hostapd_data *hapd,
676 u8 qos_map_set[16 + 2 * 21], count = 0;
677 const char *pos = cmd;
681 if (count == sizeof(qos_map_set)) {
682 wpa_printf(MSG_ERROR, "Too many qos_map_set parameters");
687 if (val < 0 || val > 255) {
688 wpa_printf(MSG_INFO, "Invalid QoS Map Set");
692 qos_map_set[count++] = val;
693 pos = os_strchr(pos, ',');
699 if (count < 16 || count & 1) {
700 wpa_printf(MSG_INFO, "Invalid QoS Map Set");
704 ret = hostapd_drv_set_qos_map(hapd, qos_map_set, count);
706 wpa_printf(MSG_INFO, "Failed to set QoS Map Set");
710 os_memcpy(hapd->conf->qos_map_set, qos_map_set, count);
711 hapd->conf->qos_map_set_len = count;
717 static int hostapd_ctrl_iface_send_qos_map_conf(struct hostapd_data *hapd,
721 struct sta_info *sta;
723 u8 *qos_map_set = hapd->conf->qos_map_set;
724 u8 qos_map_set_len = hapd->conf->qos_map_set_len;
727 if (!qos_map_set_len) {
728 wpa_printf(MSG_INFO, "QoS Map Set is not set");
732 if (hwaddr_aton(cmd, addr))
735 sta = ap_get_sta(hapd, addr);
737 wpa_printf(MSG_DEBUG, "Station " MACSTR " not found "
738 "for QoS Map Configuration message",
743 if (!sta->qos_map_enabled) {
744 wpa_printf(MSG_DEBUG, "Station " MACSTR " did not indicate "
745 "support for QoS Map", MAC2STR(addr));
749 buf = wpabuf_alloc(2 + 2 + qos_map_set_len);
753 wpabuf_put_u8(buf, WLAN_ACTION_QOS);
754 wpabuf_put_u8(buf, QOS_QOS_MAP_CONFIG);
756 /* QoS Map Set Element */
757 wpabuf_put_u8(buf, WLAN_EID_QOS_MAP_SET);
758 wpabuf_put_u8(buf, qos_map_set_len);
759 wpabuf_put_data(buf, qos_map_set, qos_map_set_len);
761 ret = hostapd_drv_send_action(hapd, hapd->iface->freq, 0, addr,
762 wpabuf_head(buf), wpabuf_len(buf));
768 #endif /* CONFIG_INTERWORKING */
773 static int hostapd_ctrl_iface_disassoc_imminent(struct hostapd_data *hapd,
778 struct sta_info *sta;
780 if (hwaddr_aton(cmd, addr))
784 disassoc_timer = atoi(cmd + 17);
786 sta = ap_get_sta(hapd, addr);
788 wpa_printf(MSG_DEBUG, "Station " MACSTR
789 " not found for disassociation imminent message",
794 return wnm_send_disassoc_imminent(hapd, sta, disassoc_timer);
798 static int hostapd_ctrl_iface_ess_disassoc(struct hostapd_data *hapd,
802 const char *url, *timerstr;
804 struct sta_info *sta;
806 if (hwaddr_aton(cmd, addr))
809 sta = ap_get_sta(hapd, addr);
811 wpa_printf(MSG_DEBUG, "Station " MACSTR
812 " not found for ESS disassociation imminent message",
818 if (*timerstr != ' ')
821 disassoc_timer = atoi(timerstr);
822 if (disassoc_timer < 0 || disassoc_timer > 65535)
825 url = os_strchr(timerstr, ' ');
830 return wnm_send_ess_disassoc_imminent(hapd, sta, url, disassoc_timer);
834 static int hostapd_ctrl_iface_bss_tm_req(struct hostapd_data *hapd,
838 const char *pos, *end;
839 int disassoc_timer = 0;
840 struct sta_info *sta;
841 u8 req_mode = 0, valid_int = 0x01;
850 if (hwaddr_aton(cmd, addr)) {
851 wpa_printf(MSG_DEBUG, "Invalid STA MAC address");
855 sta = ap_get_sta(hapd, addr);
857 wpa_printf(MSG_DEBUG, "Station " MACSTR
858 " not found for BSS TM Request message",
863 pos = os_strstr(cmd, " disassoc_timer=");
866 disassoc_timer = atoi(pos);
867 if (disassoc_timer < 0 || disassoc_timer > 65535) {
868 wpa_printf(MSG_DEBUG, "Invalid disassoc_timer");
873 pos = os_strstr(cmd, " valid_int=");
876 valid_int = atoi(pos);
879 pos = os_strstr(cmd, " bss_term=");
882 req_mode |= WNM_BSS_TM_REQ_BSS_TERMINATION_INCLUDED;
883 /* TODO: TSF configurable/learnable */
884 bss_term_dur[0] = 4; /* Subelement ID */
885 bss_term_dur[1] = 10; /* Length */
886 os_memset(bss_term_dur, 2, 8);
887 end = os_strchr(pos, ',');
889 wpa_printf(MSG_DEBUG, "Invalid bss_term data");
893 WPA_PUT_LE16(&bss_term_dur[10], atoi(end));
896 nei_len = ieee802_11_parse_candidate_list(cmd, nei_rep,
901 pos = os_strstr(cmd, " url=");
905 end = os_strchr(pos, ' ');
909 len = os_strlen(pos);
910 url = os_malloc(len + 1);
913 os_memcpy(url, pos, len);
915 req_mode |= WNM_BSS_TM_REQ_ESS_DISASSOC_IMMINENT;
918 if (os_strstr(cmd, " pref=1"))
919 req_mode |= WNM_BSS_TM_REQ_PREF_CAND_LIST_INCLUDED;
920 if (os_strstr(cmd, " abridged=1"))
921 req_mode |= WNM_BSS_TM_REQ_ABRIDGED;
922 if (os_strstr(cmd, " disassoc_imminent=1"))
923 req_mode |= WNM_BSS_TM_REQ_DISASSOC_IMMINENT;
926 pos = os_strstr(cmd, "mbo=");
928 unsigned int mbo_reason, cell_pref, reassoc_delay;
931 ret = sscanf(pos, "mbo=%u:%u:%u", &mbo_reason,
932 &reassoc_delay, &cell_pref);
934 wpa_printf(MSG_DEBUG,
935 "MBO requires three arguments: mbo=<reason>:<reassoc_delay>:<cell_pref>");
940 if (mbo_reason > MBO_TRANSITION_REASON_PREMIUM_AP) {
941 wpa_printf(MSG_DEBUG,
942 "Invalid MBO transition reason code %u",
948 /* Valid values for Cellular preference are: 0, 1, 255 */
949 if (cell_pref != 0 && cell_pref != 1 && cell_pref != 255) {
950 wpa_printf(MSG_DEBUG,
951 "Invalid MBO cellular capability %u",
957 if (reassoc_delay > 65535 ||
959 !(req_mode & WNM_BSS_TM_REQ_DISASSOC_IMMINENT))) {
960 wpa_printf(MSG_DEBUG,
961 "MBO: Assoc retry delay is only valid in disassoc imminent mode");
966 *mbo_pos++ = MBO_ATTR_ID_TRANSITION_REASON;
968 *mbo_pos++ = mbo_reason;
969 *mbo_pos++ = MBO_ATTR_ID_CELL_DATA_PREF;
971 *mbo_pos++ = cell_pref;
974 *mbo_pos++ = MBO_ATTR_ID_ASSOC_RETRY_DELAY;
976 WPA_PUT_LE16(mbo_pos, reassoc_delay);
980 mbo_len = mbo_pos - mbo;
982 #endif /* CONFIG_MBO */
984 ret = wnm_send_bss_tm_req(hapd, sta, req_mode, disassoc_timer,
985 valid_int, bss_term_dur, url,
986 nei_len ? nei_rep : NULL, nei_len,
987 mbo_len ? mbo : NULL, mbo_len);
990 #endif /* CONFIG_MBO */
996 static int hostapd_ctrl_iface_coloc_intf_req(struct hostapd_data *hapd,
1000 struct sta_info *sta;
1002 unsigned int auto_report, timeout;
1004 if (hwaddr_aton(cmd, addr)) {
1005 wpa_printf(MSG_DEBUG, "Invalid STA MAC address");
1009 sta = ap_get_sta(hapd, addr);
1011 wpa_printf(MSG_DEBUG, "Station " MACSTR
1012 " not found for Collocated Interference Request",
1021 auto_report = atoi(pos);
1022 pos = os_strchr(pos, ' ');
1026 timeout = atoi(pos);
1028 return wnm_send_coloc_intf_req(hapd, sta, auto_report, timeout);
1031 #endif /* CONFIG_WNM_AP */
1034 static int hostapd_ctrl_iface_get_key_mgmt(struct hostapd_data *hapd,
1035 char *buf, size_t buflen)
1043 WPA_ASSERT(hapd->conf->wpa_key_mgmt);
1045 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_PSK) {
1046 ret = os_snprintf(pos, end - pos, "WPA-PSK ");
1047 if (os_snprintf_error(end - pos, ret))
1051 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
1052 ret = os_snprintf(pos, end - pos, "WPA-EAP ");
1053 if (os_snprintf_error(end - pos, ret))
1057 #ifdef CONFIG_IEEE80211R_AP
1058 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_PSK) {
1059 ret = os_snprintf(pos, end - pos, "FT-PSK ");
1060 if (os_snprintf_error(end - pos, ret))
1064 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
1065 ret = os_snprintf(pos, end - pos, "FT-EAP ");
1066 if (os_snprintf_error(end - pos, ret))
1070 #ifdef CONFIG_SHA384
1071 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X_SHA384) {
1072 ret = os_snprintf(pos, end - pos, "FT-EAP-SHA384 ");
1073 if (os_snprintf_error(end - pos, ret))
1077 #endif /* CONFIG_SHA384 */
1079 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_SAE) {
1080 ret = os_snprintf(pos, end - pos, "FT-SAE ");
1081 if (os_snprintf_error(end - pos, ret))
1085 #endif /* CONFIG_SAE */
1087 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA256) {
1088 ret = os_snprintf(pos, end - pos, "FT-FILS-SHA256 ");
1089 if (os_snprintf_error(end - pos, ret))
1093 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA384) {
1094 ret = os_snprintf(pos, end - pos, "FT-FILS-SHA384 ");
1095 if (os_snprintf_error(end - pos, ret))
1099 #endif /* CONFIG_FILS */
1100 #endif /* CONFIG_IEEE80211R_AP */
1101 #ifdef CONFIG_IEEE80211W
1102 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
1103 ret = os_snprintf(pos, end - pos, "WPA-PSK-SHA256 ");
1104 if (os_snprintf_error(end - pos, ret))
1108 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
1109 ret = os_snprintf(pos, end - pos, "WPA-EAP-SHA256 ");
1110 if (os_snprintf_error(end - pos, ret))
1114 #endif /* CONFIG_IEEE80211W */
1116 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_SAE) {
1117 ret = os_snprintf(pos, end - pos, "SAE ");
1118 if (os_snprintf_error(end - pos, ret))
1122 #endif /* CONFIG_SAE */
1123 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) {
1124 ret = os_snprintf(pos, end - pos, "WPA-EAP-SUITE-B ");
1125 if (os_snprintf_error(end - pos, ret))
1129 if (hapd->conf->wpa_key_mgmt &
1130 WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) {
1131 ret = os_snprintf(pos, end - pos,
1132 "WPA-EAP-SUITE-B-192 ");
1133 if (os_snprintf_error(end - pos, ret))
1138 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FILS_SHA256) {
1139 ret = os_snprintf(pos, end - pos, "FILS-SHA256 ");
1140 if (os_snprintf_error(end - pos, ret))
1144 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_FILS_SHA384) {
1145 ret = os_snprintf(pos, end - pos, "FILS-SHA384 ");
1146 if (os_snprintf_error(end - pos, ret))
1150 #endif /* CONFIG_FILS */
1153 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_OWE) {
1154 ret = os_snprintf(pos, end - pos, "OWE ");
1155 if (os_snprintf_error(end - pos, ret))
1159 #endif /* CONFIG_OWE */
1162 if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_DPP) {
1163 ret = os_snprintf(pos, end - pos, "DPP ");
1164 if (os_snprintf_error(end - pos, ret))
1168 #endif /* CONFIG_DPP */
1170 if (pos > buf && *(pos - 1) == ' ') {
1179 static int hostapd_ctrl_iface_get_config(struct hostapd_data *hapd,
1180 char *buf, size_t buflen)
1188 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n"
1190 MAC2STR(hapd->own_addr),
1191 wpa_ssid_txt(hapd->conf->ssid.ssid,
1192 hapd->conf->ssid.ssid_len));
1193 if (os_snprintf_error(end - pos, ret))
1198 ret = os_snprintf(pos, end - pos, "wps_state=%s\n",
1199 hapd->conf->wps_state == 0 ? "disabled" :
1200 (hapd->conf->wps_state == 1 ? "not configured" :
1202 if (os_snprintf_error(end - pos, ret))
1206 if (hapd->conf->wps_state && hapd->conf->wpa &&
1207 hapd->conf->ssid.wpa_passphrase) {
1208 ret = os_snprintf(pos, end - pos, "passphrase=%s\n",
1209 hapd->conf->ssid.wpa_passphrase);
1210 if (os_snprintf_error(end - pos, ret))
1215 if (hapd->conf->wps_state && hapd->conf->wpa &&
1216 hapd->conf->ssid.wpa_psk &&
1217 hapd->conf->ssid.wpa_psk->group) {
1218 char hex[PMK_LEN * 2 + 1];
1219 wpa_snprintf_hex(hex, sizeof(hex),
1220 hapd->conf->ssid.wpa_psk->psk, PMK_LEN);
1221 ret = os_snprintf(pos, end - pos, "psk=%s\n", hex);
1222 if (os_snprintf_error(end - pos, ret))
1226 #endif /* CONFIG_WPS */
1228 if (hapd->conf->wpa) {
1229 ret = os_snprintf(pos, end - pos, "wpa=%d\n", hapd->conf->wpa);
1230 if (os_snprintf_error(end - pos, ret))
1235 if (hapd->conf->wpa && hapd->conf->wpa_key_mgmt) {
1236 ret = os_snprintf(pos, end - pos, "key_mgmt=");
1237 if (os_snprintf_error(end - pos, ret))
1241 pos += hostapd_ctrl_iface_get_key_mgmt(hapd, pos, end - pos);
1243 ret = os_snprintf(pos, end - pos, "\n");
1244 if (os_snprintf_error(end - pos, ret))
1249 if (hapd->conf->wpa) {
1250 ret = os_snprintf(pos, end - pos, "group_cipher=%s\n",
1251 wpa_cipher_txt(hapd->conf->wpa_group));
1252 if (os_snprintf_error(end - pos, ret))
1257 if ((hapd->conf->wpa & WPA_PROTO_RSN) && hapd->conf->rsn_pairwise) {
1258 ret = os_snprintf(pos, end - pos, "rsn_pairwise_cipher=");
1259 if (os_snprintf_error(end - pos, ret))
1263 ret = wpa_write_ciphers(pos, end, hapd->conf->rsn_pairwise,
1269 ret = os_snprintf(pos, end - pos, "\n");
1270 if (os_snprintf_error(end - pos, ret))
1275 if ((hapd->conf->wpa & WPA_PROTO_WPA) && hapd->conf->wpa_pairwise) {
1276 ret = os_snprintf(pos, end - pos, "wpa_pairwise_cipher=");
1277 if (os_snprintf_error(end - pos, ret))
1281 ret = wpa_write_ciphers(pos, end, hapd->conf->wpa_pairwise,
1287 ret = os_snprintf(pos, end - pos, "\n");
1288 if (os_snprintf_error(end - pos, ret))
1297 static void hostapd_disassoc_accept_mac(struct hostapd_data *hapd)
1299 struct sta_info *sta;
1300 struct vlan_description vlan_id;
1302 if (hapd->conf->macaddr_acl != DENY_UNLESS_ACCEPTED)
1305 for (sta = hapd->sta_list; sta; sta = sta->next) {
1306 if (!hostapd_maclist_found(hapd->conf->accept_mac,
1307 hapd->conf->num_accept_mac,
1308 sta->addr, &vlan_id) ||
1309 (vlan_id.notempty &&
1310 vlan_compare(&vlan_id, sta->vlan_desc)))
1311 ap_sta_disconnect(hapd, sta, sta->addr,
1312 WLAN_REASON_UNSPECIFIED);
1317 static void hostapd_disassoc_deny_mac(struct hostapd_data *hapd)
1319 struct sta_info *sta;
1320 struct vlan_description vlan_id;
1322 for (sta = hapd->sta_list; sta; sta = sta->next) {
1323 if (hostapd_maclist_found(hapd->conf->deny_mac,
1324 hapd->conf->num_deny_mac, sta->addr,
1326 (!vlan_id.notempty ||
1327 !vlan_compare(&vlan_id, sta->vlan_desc)))
1328 ap_sta_disconnect(hapd, sta, sta->addr,
1329 WLAN_REASON_UNSPECIFIED);
1333 static int hostapd_ctrl_iface_set(struct hostapd_data *hapd, char *cmd)
1338 value = os_strchr(cmd, ' ');
1343 wpa_printf(MSG_DEBUG, "CTRL_IFACE SET '%s'='%s'", cmd, value);
1345 #ifdef CONFIG_WPS_TESTING
1346 } else if (os_strcasecmp(cmd, "wps_version_number") == 0) {
1348 val = strtol(value, NULL, 0);
1349 if (val < 0 || val > 0xff) {
1351 wpa_printf(MSG_DEBUG, "WPS: Invalid "
1352 "wps_version_number %ld", val);
1354 wps_version_number = val;
1355 wpa_printf(MSG_DEBUG, "WPS: Testing - force WPS "
1357 (wps_version_number & 0xf0) >> 4,
1358 wps_version_number & 0x0f);
1359 hostapd_wps_update_ie(hapd);
1361 } else if (os_strcasecmp(cmd, "wps_testing_dummy_cred") == 0) {
1362 wps_testing_dummy_cred = atoi(value);
1363 wpa_printf(MSG_DEBUG, "WPS: Testing - dummy_cred=%d",
1364 wps_testing_dummy_cred);
1365 } else if (os_strcasecmp(cmd, "wps_corrupt_pkhash") == 0) {
1366 wps_corrupt_pkhash = atoi(value);
1367 wpa_printf(MSG_DEBUG, "WPS: Testing - wps_corrupt_pkhash=%d",
1368 wps_corrupt_pkhash);
1369 #endif /* CONFIG_WPS_TESTING */
1370 #ifdef CONFIG_TESTING_OPTIONS
1371 } else if (os_strcasecmp(cmd, "ext_mgmt_frame_handling") == 0) {
1372 hapd->ext_mgmt_frame_handling = atoi(value);
1373 } else if (os_strcasecmp(cmd, "ext_eapol_frame_io") == 0) {
1374 hapd->ext_eapol_frame_io = atoi(value);
1376 } else if (os_strcasecmp(cmd, "dpp_config_obj_override") == 0) {
1377 os_free(hapd->dpp_config_obj_override);
1378 hapd->dpp_config_obj_override = os_strdup(value);
1379 } else if (os_strcasecmp(cmd, "dpp_discovery_override") == 0) {
1380 os_free(hapd->dpp_discovery_override);
1381 hapd->dpp_discovery_override = os_strdup(value);
1382 } else if (os_strcasecmp(cmd, "dpp_groups_override") == 0) {
1383 os_free(hapd->dpp_groups_override);
1384 hapd->dpp_groups_override = os_strdup(value);
1385 } else if (os_strcasecmp(cmd,
1386 "dpp_ignore_netaccesskey_mismatch") == 0) {
1387 hapd->dpp_ignore_netaccesskey_mismatch = atoi(value);
1388 } else if (os_strcasecmp(cmd, "dpp_test") == 0) {
1389 dpp_test = atoi(value);
1390 #endif /* CONFIG_DPP */
1391 #endif /* CONFIG_TESTING_OPTIONS */
1393 } else if (os_strcasecmp(cmd, "mbo_assoc_disallow") == 0) {
1396 if (!hapd->conf->mbo_enabled)
1400 if (val < 0 || val > 1)
1403 hapd->mbo_assoc_disallow = val;
1404 ieee802_11_update_beacons(hapd->iface);
1407 * TODO: Need to configure drivers that do AP MLME offload with
1408 * disallowing station logic.
1410 #endif /* CONFIG_MBO */
1412 } else if (os_strcasecmp(cmd, "dpp_configurator_params") == 0) {
1413 os_free(hapd->dpp_configurator_params);
1414 hapd->dpp_configurator_params = os_strdup(value);
1415 #endif /* CONFIG_DPP */
1417 ret = hostapd_set_iface(hapd->iconf, hapd->conf, cmd, value);
1421 if (os_strcasecmp(cmd, "deny_mac_file") == 0) {
1422 hostapd_disassoc_deny_mac(hapd);
1423 } else if (os_strcasecmp(cmd, "accept_mac_file") == 0) {
1424 hostapd_disassoc_accept_mac(hapd);
1425 } else if (os_strncmp(cmd, "wme_ac_", 7) == 0 ||
1426 os_strncmp(cmd, "wmm_ac_", 7) == 0) {
1427 hapd->parameter_set_count++;
1428 if (ieee802_11_update_beacons(hapd->iface))
1429 wpa_printf(MSG_DEBUG,
1430 "Failed to update beacons with WMM parameters");
1438 static int hostapd_ctrl_iface_get(struct hostapd_data *hapd, char *cmd,
1439 char *buf, size_t buflen)
1443 wpa_printf(MSG_DEBUG, "CTRL_IFACE GET '%s'", cmd);
1445 if (os_strcmp(cmd, "version") == 0) {
1446 res = os_snprintf(buf, buflen, "%s", VERSION_STR);
1447 if (os_snprintf_error(buflen, res))
1450 } else if (os_strcmp(cmd, "tls_library") == 0) {
1451 res = tls_get_library_version(buf, buflen);
1452 if (os_snprintf_error(buflen, res))
1461 static int hostapd_ctrl_iface_enable(struct hostapd_iface *iface)
1463 if (hostapd_enable_iface(iface) < 0) {
1464 wpa_printf(MSG_ERROR, "Enabling of interface failed");
1471 static int hostapd_ctrl_iface_reload(struct hostapd_iface *iface)
1473 if (hostapd_reload_iface(iface) < 0) {
1474 wpa_printf(MSG_ERROR, "Reloading of interface failed");
1481 static int hostapd_ctrl_iface_disable(struct hostapd_iface *iface)
1483 if (hostapd_disable_iface(iface) < 0) {
1484 wpa_printf(MSG_ERROR, "Disabling of interface failed");
1491 #ifdef CONFIG_TESTING_OPTIONS
1493 static int hostapd_ctrl_iface_radar(struct hostapd_data *hapd, char *cmd)
1495 union wpa_event_data data;
1497 enum wpa_event_type event;
1499 wpa_printf(MSG_DEBUG, "RADAR TEST: %s", cmd);
1501 os_memset(&data, 0, sizeof(data));
1503 param = os_strchr(cmd, ' ');
1508 if (os_strcmp(cmd, "DETECTED") == 0)
1509 event = EVENT_DFS_RADAR_DETECTED;
1510 else if (os_strcmp(cmd, "CAC-FINISHED") == 0)
1511 event = EVENT_DFS_CAC_FINISHED;
1512 else if (os_strcmp(cmd, "CAC-ABORTED") == 0)
1513 event = EVENT_DFS_CAC_ABORTED;
1514 else if (os_strcmp(cmd, "NOP-FINISHED") == 0)
1515 event = EVENT_DFS_NOP_FINISHED;
1517 wpa_printf(MSG_DEBUG, "Unsupported RADAR test command: %s",
1522 pos = os_strstr(param, "freq=");
1524 data.dfs_event.freq = atoi(pos + 5);
1526 pos = os_strstr(param, "ht_enabled=1");
1528 data.dfs_event.ht_enabled = 1;
1530 pos = os_strstr(param, "chan_offset=");
1532 data.dfs_event.chan_offset = atoi(pos + 12);
1534 pos = os_strstr(param, "chan_width=");
1536 data.dfs_event.chan_width = atoi(pos + 11);
1538 pos = os_strstr(param, "cf1=");
1540 data.dfs_event.cf1 = atoi(pos + 4);
1542 pos = os_strstr(param, "cf2=");
1544 data.dfs_event.cf2 = atoi(pos + 4);
1546 wpa_supplicant_event(hapd, event, &data);
1552 static int hostapd_ctrl_iface_mgmt_tx(struct hostapd_data *hapd, char *cmd)
1558 wpa_printf(MSG_DEBUG, "External MGMT TX: %s", cmd);
1560 len = os_strlen(cmd);
1565 buf = os_malloc(len);
1569 if (hexstr2bin(cmd, buf, len) < 0) {
1574 res = hostapd_drv_send_mlme(hapd, buf, len, 0);
1580 static int hostapd_ctrl_iface_mgmt_tx_status_process(struct hostapd_data *hapd,
1586 int stype = 0, ok = 0;
1587 union wpa_event_data event;
1589 if (!hapd->ext_mgmt_frame_handling)
1592 /* stype=<val> ok=<0/1> buf=<frame hexdump> */
1594 wpa_printf(MSG_DEBUG, "External MGMT TX status process: %s", cmd);
1597 param = os_strstr(pos, "stype=");
1600 stype = atoi(param);
1603 param = os_strstr(pos, " ok=");
1609 param = os_strstr(pos, " buf=");
1614 len = os_strlen(param);
1619 buf = os_malloc(len);
1620 if (!buf || hexstr2bin(param, buf, len) < 0) {
1625 os_memset(&event, 0, sizeof(event));
1626 event.tx_status.type = WLAN_FC_TYPE_MGMT;
1627 event.tx_status.data = buf;
1628 event.tx_status.data_len = len;
1629 event.tx_status.stype = stype;
1630 event.tx_status.ack = ok;
1631 hapd->ext_mgmt_frame_handling = 0;
1632 wpa_supplicant_event(hapd, EVENT_TX_STATUS, &event);
1633 hapd->ext_mgmt_frame_handling = 1;
1641 static int hostapd_ctrl_iface_mgmt_rx_process(struct hostapd_data *hapd,
1647 int freq = 0, datarate = 0, ssi_signal = 0;
1648 union wpa_event_data event;
1650 if (!hapd->ext_mgmt_frame_handling)
1653 /* freq=<MHz> datarate=<val> ssi_signal=<val> frame=<frame hexdump> */
1655 wpa_printf(MSG_DEBUG, "External MGMT RX process: %s", cmd);
1658 param = os_strstr(pos, "freq=");
1664 param = os_strstr(pos, " datarate=");
1667 datarate = atoi(param);
1670 param = os_strstr(pos, " ssi_signal=");
1673 ssi_signal = atoi(param);
1676 param = os_strstr(pos, " frame=");
1681 len = os_strlen(param);
1686 buf = os_malloc(len);
1690 if (hexstr2bin(param, buf, len) < 0) {
1695 os_memset(&event, 0, sizeof(event));
1696 event.rx_mgmt.freq = freq;
1697 event.rx_mgmt.frame = buf;
1698 event.rx_mgmt.frame_len = len;
1699 event.rx_mgmt.ssi_signal = ssi_signal;
1700 event.rx_mgmt.datarate = datarate;
1701 hapd->ext_mgmt_frame_handling = 0;
1702 wpa_supplicant_event(hapd, EVENT_RX_MGMT, &event);
1703 hapd->ext_mgmt_frame_handling = 1;
1711 static int hostapd_ctrl_iface_eapol_rx(struct hostapd_data *hapd, char *cmd)
1714 u8 src[ETH_ALEN], *buf;
1718 wpa_printf(MSG_DEBUG, "External EAPOL RX: %s", cmd);
1721 used = hwaddr_aton2(pos, src);
1728 len = os_strlen(pos);
1733 buf = os_malloc(len);
1737 if (hexstr2bin(pos, buf, len) < 0) {
1742 ieee802_1x_receive(hapd, src, buf, len);
1749 static u16 ipv4_hdr_checksum(const void *buf, size_t len)
1753 const u16 *pos = buf;
1755 for (i = 0; i < len / 2; i++)
1759 sum = (sum & 0xffff) + (sum >> 16);
1761 return sum ^ 0xffff;
1765 #define HWSIM_PACKETLEN 1500
1766 #define HWSIM_IP_LEN (HWSIM_PACKETLEN - sizeof(struct ether_header))
1768 static void hostapd_data_test_rx(void *ctx, const u8 *src_addr, const u8 *buf,
1771 struct hostapd_data *hapd = ctx;
1772 const struct ether_header *eth;
1777 if (len != HWSIM_PACKETLEN)
1780 eth = (const struct ether_header *) buf;
1781 os_memcpy(&ip, eth + 1, sizeof(ip));
1782 pos = &buf[sizeof(*eth) + sizeof(ip)];
1784 if (ip.ihl != 5 || ip.version != 4 ||
1785 ntohs(ip.tot_len) != HWSIM_IP_LEN)
1788 for (i = 0; i < HWSIM_IP_LEN - sizeof(ip); i++) {
1794 wpa_msg(hapd->msg_ctx, MSG_INFO, "DATA-TEST-RX " MACSTR " " MACSTR,
1795 MAC2STR(eth->ether_dhost), MAC2STR(eth->ether_shost));
1799 static int hostapd_ctrl_iface_data_test_config(struct hostapd_data *hapd,
1802 int enabled = atoi(cmd);
1807 if (hapd->l2_test) {
1808 l2_packet_deinit(hapd->l2_test);
1809 hapd->l2_test = NULL;
1810 wpa_dbg(hapd->msg_ctx, MSG_DEBUG,
1811 "test data: Disabled");
1819 pos = os_strstr(cmd, " ifname=");
1823 ifname = hapd->conf->iface;
1825 hapd->l2_test = l2_packet_init(ifname, hapd->own_addr,
1826 ETHERTYPE_IP, hostapd_data_test_rx,
1828 if (hapd->l2_test == NULL)
1831 wpa_dbg(hapd->msg_ctx, MSG_DEBUG, "test data: Enabled");
1837 static int hostapd_ctrl_iface_data_test_tx(struct hostapd_data *hapd, char *cmd)
1839 u8 dst[ETH_ALEN], src[ETH_ALEN];
1844 u8 buf[2 + HWSIM_PACKETLEN];
1845 struct ether_header *eth;
1850 if (hapd->l2_test == NULL)
1853 /* format: <dst> <src> <tos> */
1856 used = hwaddr_aton2(pos, dst);
1862 used = hwaddr_aton2(pos, src);
1867 val = strtol(pos, NULL, 0);
1868 if (val < 0 || val > 0xff)
1872 eth = (struct ether_header *) &buf[2];
1873 os_memcpy(eth->ether_dhost, dst, ETH_ALEN);
1874 os_memcpy(eth->ether_shost, src, ETH_ALEN);
1875 eth->ether_type = htons(ETHERTYPE_IP);
1876 ip = (struct iphdr *) (eth + 1);
1877 os_memset(ip, 0, sizeof(*ip));
1882 ip->tot_len = htons(HWSIM_IP_LEN);
1884 ip->saddr = htonl(192U << 24 | 168 << 16 | 1 << 8 | 1);
1885 ip->daddr = htonl(192U << 24 | 168 << 16 | 1 << 8 | 2);
1886 ip->check = ipv4_hdr_checksum(ip, sizeof(*ip));
1887 dpos = (u8 *) (ip + 1);
1888 for (i = 0; i < HWSIM_IP_LEN - sizeof(*ip); i++)
1891 if (l2_packet_send(hapd->l2_test, dst, ETHERTYPE_IP, &buf[2],
1892 HWSIM_PACKETLEN) < 0)
1895 wpa_dbg(hapd->msg_ctx, MSG_DEBUG, "test data: TX dst=" MACSTR
1896 " src=" MACSTR " tos=0x%x", MAC2STR(dst), MAC2STR(src), tos);
1902 static int hostapd_ctrl_iface_data_test_frame(struct hostapd_data *hapd,
1906 struct ether_header *eth;
1907 struct l2_packet_data *l2 = NULL;
1911 const char *ifname = hapd->conf->iface;
1913 if (os_strncmp(cmd, "ifname=", 7) == 0) {
1916 cmd = os_strchr(cmd, ' ');
1922 len = os_strlen(cmd);
1923 if (len & 1 || len < ETH_HLEN * 2)
1927 buf = os_malloc(len);
1931 if (hexstr2bin(cmd, buf, len) < 0)
1934 eth = (struct ether_header *) buf;
1935 ethertype = ntohs(eth->ether_type);
1937 l2 = l2_packet_init(ifname, hapd->own_addr, ethertype,
1938 hostapd_data_test_rx, hapd, 1);
1942 res = l2_packet_send(l2, eth->ether_dhost, ethertype, buf, len);
1943 wpa_dbg(hapd->msg_ctx, MSG_DEBUG, "test data: TX frame res=%d", res);
1946 l2_packet_deinit(l2);
1949 return res < 0 ? -1 : 0;
1953 static int hostapd_ctrl_test_alloc_fail(struct hostapd_data *hapd, char *cmd)
1955 #ifdef WPA_TRACE_BFD
1958 wpa_trace_fail_after = atoi(cmd);
1959 pos = os_strchr(cmd, ':');
1962 os_strlcpy(wpa_trace_fail_func, pos,
1963 sizeof(wpa_trace_fail_func));
1965 wpa_trace_fail_after = 0;
1969 #else /* WPA_TRACE_BFD */
1971 #endif /* WPA_TRACE_BFD */
1975 static int hostapd_ctrl_get_alloc_fail(struct hostapd_data *hapd,
1976 char *buf, size_t buflen)
1978 #ifdef WPA_TRACE_BFD
1979 return os_snprintf(buf, buflen, "%u:%s", wpa_trace_fail_after,
1980 wpa_trace_fail_func);
1981 #else /* WPA_TRACE_BFD */
1983 #endif /* WPA_TRACE_BFD */
1987 static int hostapd_ctrl_test_fail(struct hostapd_data *hapd, char *cmd)
1989 #ifdef WPA_TRACE_BFD
1992 wpa_trace_test_fail_after = atoi(cmd);
1993 pos = os_strchr(cmd, ':');
1996 os_strlcpy(wpa_trace_test_fail_func, pos,
1997 sizeof(wpa_trace_test_fail_func));
1999 wpa_trace_test_fail_after = 0;
2003 #else /* WPA_TRACE_BFD */
2005 #endif /* WPA_TRACE_BFD */
2009 static int hostapd_ctrl_get_fail(struct hostapd_data *hapd,
2010 char *buf, size_t buflen)
2012 #ifdef WPA_TRACE_BFD
2013 return os_snprintf(buf, buflen, "%u:%s", wpa_trace_test_fail_after,
2014 wpa_trace_test_fail_func);
2015 #else /* WPA_TRACE_BFD */
2017 #endif /* WPA_TRACE_BFD */
2021 static int hostapd_ctrl_reset_pn(struct hostapd_data *hapd, const char *cmd)
2023 struct sta_info *sta;
2025 u8 zero[WPA_TK_MAX_LEN];
2027 os_memset(zero, 0, sizeof(zero));
2029 if (hwaddr_aton(cmd, addr))
2032 #ifdef CONFIG_IEEE80211W
2033 if (is_broadcast_ether_addr(addr) && os_strstr(cmd, "IGTK")) {
2034 if (hapd->last_igtk_alg == WPA_ALG_NONE)
2037 wpa_printf(MSG_INFO, "TESTING: Reset IPN for IGTK");
2039 /* First, use a zero key to avoid any possible duplicate key
2040 * avoidance in the driver. */
2041 if (hostapd_drv_set_key(hapd->conf->iface, hapd,
2042 hapd->last_igtk_alg,
2043 broadcast_ether_addr,
2044 hapd->last_igtk_key_idx, 1, NULL, 0,
2045 zero, hapd->last_igtk_len) < 0)
2048 /* Set the previously configured key to reset its TSC */
2049 return hostapd_drv_set_key(hapd->conf->iface, hapd,
2050 hapd->last_igtk_alg,
2051 broadcast_ether_addr,
2052 hapd->last_igtk_key_idx, 1, NULL, 0,
2054 hapd->last_igtk_len);
2056 #endif /* CONFIG_IEEE80211W */
2058 if (is_broadcast_ether_addr(addr)) {
2059 if (hapd->last_gtk_alg == WPA_ALG_NONE)
2062 wpa_printf(MSG_INFO, "TESTING: Reset PN for GTK");
2064 /* First, use a zero key to avoid any possible duplicate key
2065 * avoidance in the driver. */
2066 if (hostapd_drv_set_key(hapd->conf->iface, hapd,
2068 broadcast_ether_addr,
2069 hapd->last_gtk_key_idx, 1, NULL, 0,
2070 zero, hapd->last_gtk_len) < 0)
2073 /* Set the previously configured key to reset its TSC */
2074 return hostapd_drv_set_key(hapd->conf->iface, hapd,
2076 broadcast_ether_addr,
2077 hapd->last_gtk_key_idx, 1, NULL, 0,
2078 hapd->last_gtk, hapd->last_gtk_len);
2081 sta = ap_get_sta(hapd, addr);
2085 if (sta->last_tk_alg == WPA_ALG_NONE)
2088 wpa_printf(MSG_INFO, "TESTING: Reset PN for " MACSTR,
2089 MAC2STR(sta->addr));
2091 /* First, use a zero key to avoid any possible duplicate key avoidance
2093 if (hostapd_drv_set_key(hapd->conf->iface, hapd, sta->last_tk_alg,
2094 sta->addr, sta->last_tk_key_idx, 1, NULL, 0,
2095 zero, sta->last_tk_len) < 0)
2098 /* Set the previously configured key to reset its TSC/RSC */
2099 return hostapd_drv_set_key(hapd->conf->iface, hapd, sta->last_tk_alg,
2100 sta->addr, sta->last_tk_key_idx, 1, NULL, 0,
2101 sta->last_tk, sta->last_tk_len);
2105 static int hostapd_ctrl_set_key(struct hostapd_data *hapd, const char *cmd)
2108 const char *pos = cmd;
2111 u8 seq[6], key[WPA_TK_MAX_LEN];
2114 /* parameters: alg addr idx set_tx seq key */
2117 pos = os_strchr(pos, ' ');
2121 if (hwaddr_aton(pos, addr))
2128 pos = os_strchr(pos, ' ');
2133 pos = os_strchr(pos, ' ');
2137 if (hexstr2bin(pos, seq, sizeof(seq)) < 0)
2143 key_len = os_strlen(pos) / 2;
2144 if (hexstr2bin(pos, key, key_len) < 0)
2147 wpa_printf(MSG_INFO, "TESTING: Set key");
2148 return hostapd_drv_set_key(hapd->conf->iface, hapd, alg, addr, idx,
2149 set_tx, seq, 6, key, key_len);
2153 static void restore_tk(void *ctx1, void *ctx2)
2155 struct hostapd_data *hapd = ctx1;
2156 struct sta_info *sta = ctx2;
2158 wpa_printf(MSG_INFO, "TESTING: Restore TK for " MACSTR,
2159 MAC2STR(sta->addr));
2160 /* This does not really restore the TSC properly, so this will result
2161 * in replay protection issues for now since there is no clean way of
2162 * preventing encryption of a single EAPOL frame. */
2163 hostapd_drv_set_key(hapd->conf->iface, hapd, sta->last_tk_alg,
2164 sta->addr, sta->last_tk_key_idx, 1, NULL, 0,
2165 sta->last_tk, sta->last_tk_len);
2169 static int hostapd_ctrl_resend_m1(struct hostapd_data *hapd, const char *cmd)
2171 struct sta_info *sta;
2173 int plain = os_strstr(cmd, "plaintext") != NULL;
2175 if (hwaddr_aton(cmd, addr))
2178 sta = ap_get_sta(hapd, addr);
2179 if (!sta || !sta->wpa_sm)
2182 if (plain && sta->last_tk_alg == WPA_ALG_NONE)
2183 plain = 0; /* no need for special processing */
2185 wpa_printf(MSG_INFO, "TESTING: Clear TK for " MACSTR,
2186 MAC2STR(sta->addr));
2187 hostapd_drv_set_key(hapd->conf->iface, hapd, WPA_ALG_NONE,
2188 sta->addr, sta->last_tk_key_idx, 0, NULL, 0,
2192 wpa_printf(MSG_INFO, "TESTING: Send M1 to " MACSTR, MAC2STR(sta->addr));
2193 return wpa_auth_resend_m1(sta->wpa_sm,
2194 os_strstr(cmd, "change-anonce") != NULL,
2195 plain ? restore_tk : NULL, hapd, sta);
2199 static int hostapd_ctrl_resend_m3(struct hostapd_data *hapd, const char *cmd)
2201 struct sta_info *sta;
2203 int plain = os_strstr(cmd, "plaintext") != NULL;
2205 if (hwaddr_aton(cmd, addr))
2208 sta = ap_get_sta(hapd, addr);
2209 if (!sta || !sta->wpa_sm)
2212 if (plain && sta->last_tk_alg == WPA_ALG_NONE)
2213 plain = 0; /* no need for special processing */
2215 wpa_printf(MSG_INFO, "TESTING: Clear TK for " MACSTR,
2216 MAC2STR(sta->addr));
2217 hostapd_drv_set_key(hapd->conf->iface, hapd, WPA_ALG_NONE,
2218 sta->addr, sta->last_tk_key_idx, 0, NULL, 0,
2222 wpa_printf(MSG_INFO, "TESTING: Send M3 to " MACSTR, MAC2STR(sta->addr));
2223 return wpa_auth_resend_m3(sta->wpa_sm,
2224 plain ? restore_tk : NULL, hapd, sta);
2228 static int hostapd_ctrl_resend_group_m1(struct hostapd_data *hapd,
2231 struct sta_info *sta;
2233 int plain = os_strstr(cmd, "plaintext") != NULL;
2235 if (hwaddr_aton(cmd, addr))
2238 sta = ap_get_sta(hapd, addr);
2239 if (!sta || !sta->wpa_sm)
2242 if (plain && sta->last_tk_alg == WPA_ALG_NONE)
2243 plain = 0; /* no need for special processing */
2245 wpa_printf(MSG_INFO, "TESTING: Clear TK for " MACSTR,
2246 MAC2STR(sta->addr));
2247 hostapd_drv_set_key(hapd->conf->iface, hapd, WPA_ALG_NONE,
2248 sta->addr, sta->last_tk_key_idx, 0, NULL, 0,
2252 wpa_printf(MSG_INFO,
2253 "TESTING: Send group M1 for the same GTK and zero RSC to "
2254 MACSTR, MAC2STR(sta->addr));
2255 return wpa_auth_resend_group_m1(sta->wpa_sm,
2256 plain ? restore_tk : NULL, hapd, sta);
2259 #endif /* CONFIG_TESTING_OPTIONS */
2262 static int hostapd_ctrl_iface_chan_switch(struct hostapd_iface *iface,
2266 struct csa_settings settings;
2270 ret = hostapd_parse_csa_settings(pos, &settings);
2274 for (i = 0; i < iface->num_bss; i++) {
2276 /* Save CHAN_SWITCH VHT config */
2277 hostapd_chan_switch_vht_config(
2278 iface->bss[i], settings.freq_params.vht_enabled);
2280 ret = hostapd_switch_channel(iface->bss[i], &settings);
2282 /* FIX: What do we do if CSA fails in the middle of
2283 * submitting multi-BSS CSA requests? */
2289 #else /* NEED_AP_MLME */
2291 #endif /* NEED_AP_MLME */
2295 static int hostapd_ctrl_iface_mib(struct hostapd_data *hapd, char *reply,
2296 int reply_size, const char *param)
2298 #ifdef RADIUS_SERVER
2299 if (os_strcmp(param, "radius_server") == 0) {
2300 return radius_server_get_mib(hapd->radius_srv, reply,
2303 #endif /* RADIUS_SERVER */
2308 static int hostapd_ctrl_iface_vendor(struct hostapd_data *hapd, char *cmd,
2309 char *buf, size_t buflen)
2314 unsigned int vendor_id, subcmd;
2315 struct wpabuf *reply;
2316 size_t data_len = 0;
2318 /* cmd: <vendor id> <subcommand id> [<hex formatted data>] */
2319 vendor_id = strtoul(cmd, &pos, 16);
2320 if (!isblank((unsigned char) *pos))
2323 subcmd = strtoul(pos, &pos, 10);
2326 if (!isblank((unsigned char) *pos++))
2328 data_len = os_strlen(pos);
2333 data = os_malloc(data_len);
2337 if (hexstr2bin(pos, data, data_len)) {
2338 wpa_printf(MSG_DEBUG,
2339 "Vendor command: wrong parameter format");
2345 reply = wpabuf_alloc((buflen - 1) / 2);
2351 ret = hostapd_drv_vendor_cmd(hapd, vendor_id, subcmd, data, data_len,
2355 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(reply),
2365 static int hostapd_ctrl_iface_eapol_reauth(struct hostapd_data *hapd,
2369 struct sta_info *sta;
2371 if (hwaddr_aton(cmd, addr))
2374 sta = ap_get_sta(hapd, addr);
2375 if (!sta || !sta->eapol_sm)
2378 eapol_auth_reauthenticate(sta->eapol_sm);
2383 static int hostapd_ctrl_iface_eapol_set(struct hostapd_data *hapd, char *cmd)
2386 struct sta_info *sta;
2387 char *pos = cmd, *param;
2389 if (hwaddr_aton(pos, addr) || pos[17] != ' ')
2393 pos = os_strchr(pos, ' ');
2398 sta = ap_get_sta(hapd, addr);
2399 if (!sta || !sta->eapol_sm)
2402 return eapol_auth_set_conf(sta->eapol_sm, param, pos);
2406 static int hostapd_ctrl_iface_log_level(struct hostapd_data *hapd, char *cmd,
2407 char *buf, size_t buflen)
2409 char *pos, *end, *stamp;
2412 /* cmd: "LOG_LEVEL [<level>]" */
2416 ret = os_snprintf(pos, end - pos, "Current level: %s\n"
2418 debug_level_str(wpa_debug_level),
2419 wpa_debug_timestamp);
2420 if (os_snprintf_error(end - pos, ret))
2429 stamp = os_strchr(cmd, ' ');
2432 while (*stamp == ' ') {
2437 if (os_strlen(cmd)) {
2438 int level = str_to_debug_level(cmd);
2441 wpa_debug_level = level;
2444 if (stamp && os_strlen(stamp))
2445 wpa_debug_timestamp = atoi(stamp);
2447 os_memcpy(buf, "OK\n", 3);
2453 static int hostapd_ctrl_iface_track_sta_list(struct hostapd_data *hapd,
2454 char *buf, size_t buflen)
2456 struct hostapd_iface *iface = hapd->iface;
2458 struct hostapd_sta_info *info;
2459 struct os_reltime now;
2461 if (!iface->num_sta_seen)
2464 sta_track_expire(iface, 0);
2469 os_get_reltime(&now);
2470 dl_list_for_each_reverse(info, &iface->sta_seen,
2471 struct hostapd_sta_info, list) {
2472 struct os_reltime age;
2475 os_reltime_sub(&now, &info->last_seen, &age);
2476 ret = os_snprintf(pos, end - pos, MACSTR " %u %d\n",
2477 MAC2STR(info->addr), (unsigned int) age.sec,
2479 if (os_snprintf_error(end - pos, ret))
2486 #endif /* NEED_AP_MLME */
2489 static int hostapd_ctrl_iface_req_lci(struct hostapd_data *hapd,
2494 if (hwaddr_aton(cmd, addr)) {
2495 wpa_printf(MSG_INFO, "CTRL: REQ_LCI: Invalid MAC address");
2499 return hostapd_send_lci_req(hapd, addr);
2503 static int hostapd_ctrl_iface_req_range(struct hostapd_data *hapd, char *cmd)
2506 char *token, *context = NULL;
2507 int random_interval, min_ap;
2508 u8 responders[ETH_ALEN * RRM_RANGE_REQ_MAX_RESPONDERS];
2509 unsigned int n_responders;
2511 token = str_token(cmd, " ", &context);
2512 if (!token || hwaddr_aton(token, addr)) {
2513 wpa_printf(MSG_INFO,
2514 "CTRL: REQ_RANGE - Bad destination address");
2518 token = str_token(cmd, " ", &context);
2522 random_interval = atoi(token);
2523 if (random_interval < 0 || random_interval > 0xffff)
2526 token = str_token(cmd, " ", &context);
2530 min_ap = atoi(token);
2531 if (min_ap <= 0 || min_ap > WLAN_RRM_RANGE_REQ_MAX_MIN_AP)
2535 while ((token = str_token(cmd, " ", &context))) {
2536 if (n_responders == RRM_RANGE_REQ_MAX_RESPONDERS) {
2537 wpa_printf(MSG_INFO,
2538 "CTRL: REQ_RANGE: Too many responders");
2542 if (hwaddr_aton(token, responders + n_responders * ETH_ALEN)) {
2543 wpa_printf(MSG_INFO,
2544 "CTRL: REQ_RANGE: Bad responder address");
2551 if (!n_responders) {
2552 wpa_printf(MSG_INFO,
2553 "CTRL: REQ_RANGE - No FTM responder address");
2557 return hostapd_send_range_req(hapd, addr, random_interval, min_ap,
2558 responders, n_responders);
2562 static int hostapd_ctrl_iface_req_beacon(struct hostapd_data *hapd,
2563 const char *cmd, char *reply,
2572 if (hwaddr_aton(cmd, addr))
2574 pos = os_strchr(cmd, ' ');
2578 if (os_strncmp(pos, "req_mode=", 9) == 0) {
2579 int val = hex2byte(pos + 9);
2585 pos = os_strchr(pos, ' ');
2590 req = wpabuf_parse_bin(pos);
2594 ret = hostapd_send_beacon_req(hapd, addr, req_mode, req);
2597 ret = os_snprintf(reply, reply_size, "%d", ret);
2602 static int hostapd_ctrl_iface_set_neighbor(struct hostapd_data *hapd, char *buf)
2604 struct wpa_ssid_value ssid;
2606 struct wpabuf *nr, *lci = NULL, *civic = NULL;
2611 if (!(hapd->conf->radio_measurements[0] &
2612 WLAN_RRM_CAPS_NEIGHBOR_REPORT)) {
2613 wpa_printf(MSG_ERROR,
2614 "CTRL: SET_NEIGHBOR: Neighbor report is not enabled");
2618 if (hwaddr_aton(buf, bssid)) {
2619 wpa_printf(MSG_ERROR, "CTRL: SET_NEIGHBOR: Bad BSSID");
2623 tmp = os_strstr(buf, "ssid=");
2624 if (!tmp || ssid_parse(tmp + 5, &ssid)) {
2625 wpa_printf(MSG_ERROR,
2626 "CTRL: SET_NEIGHBOR: Bad or missing SSID");
2629 buf = os_strchr(tmp + 6, tmp[5] == '"' ? '"' : ' ');
2633 tmp = os_strstr(buf, "nr=");
2635 wpa_printf(MSG_ERROR,
2636 "CTRL: SET_NEIGHBOR: Missing Neighbor Report element");
2640 buf = os_strchr(tmp, ' ');
2644 nr = wpabuf_parse_bin(tmp + 3);
2646 wpa_printf(MSG_ERROR,
2647 "CTRL: SET_NEIGHBOR: Bad Neighbor Report element");
2654 tmp = os_strstr(buf, "lci=");
2656 buf = os_strchr(tmp, ' ');
2659 lci = wpabuf_parse_bin(tmp + 4);
2661 wpa_printf(MSG_ERROR,
2662 "CTRL: SET_NEIGHBOR: Bad LCI subelement");
2671 tmp = os_strstr(buf, "civic=");
2673 buf = os_strchr(tmp, ' ');
2676 civic = wpabuf_parse_bin(tmp + 6);
2678 wpa_printf(MSG_ERROR,
2679 "CTRL: SET_NEIGHBOR: Bad civic subelement");
2689 if (os_strstr(buf, "stat"))
2693 ret = hostapd_neighbor_set(hapd, bssid, &ssid, nr, lci, civic,
2704 static int hostapd_ctrl_iface_remove_neighbor(struct hostapd_data *hapd,
2707 struct wpa_ssid_value ssid;
2711 if (hwaddr_aton(buf, bssid)) {
2712 wpa_printf(MSG_ERROR, "CTRL: REMOVE_NEIGHBOR: Bad BSSID");
2716 tmp = os_strstr(buf, "ssid=");
2717 if (!tmp || ssid_parse(tmp + 5, &ssid)) {
2718 wpa_printf(MSG_ERROR,
2719 "CTRL: REMOVE_NEIGHBORr: Bad or missing SSID");
2723 return hostapd_neighbor_remove(hapd, bssid, &ssid);
2727 static int hostapd_ctrl_driver_flags(struct hostapd_iface *iface, char *buf,
2733 ret = os_snprintf(buf, buflen, "%016llX:\n",
2734 (long long unsigned) iface->drv_flags);
2735 if (os_snprintf_error(buflen, ret))
2741 for (i = 0; i < 64; i++) {
2742 if (iface->drv_flags & (1LLU << i)) {
2743 ret = os_snprintf(pos, end - pos, "%s\n",
2744 driver_flag_to_string(1LLU << i));
2745 if (os_snprintf_error(end - pos, ret))
2755 static int hostapd_ctrl_iface_acl_del_mac(struct mac_acl_entry **acl, int *num,
2756 const char *txtaddr)
2759 struct vlan_description vlan_id;
2764 if (hwaddr_aton(txtaddr, addr))
2767 if (hostapd_maclist_found(*acl, *num, addr, &vlan_id))
2768 hostapd_remove_acl_mac(acl, num, addr);
2774 static void hostapd_ctrl_iface_acl_clear_list(struct mac_acl_entry **acl,
2778 hostapd_remove_acl_mac(acl, num, (*acl)[0].addr);
2782 static int hostapd_ctrl_iface_acl_show_mac(struct mac_acl_entry *acl, int num,
2783 char *buf, size_t buflen)
2785 int i = 0, len = 0, ret = 0;
2791 ret = os_snprintf(buf + len, buflen - len,
2792 MACSTR " VLAN_ID=%d\n",
2793 MAC2STR(acl[i].addr),
2794 acl[i].vlan_id.untagged);
2795 if (ret < 0 || (size_t) ret >= buflen - len)
2804 static int hostapd_ctrl_iface_acl_add_mac(struct mac_acl_entry **acl, int *num,
2808 struct vlan_description vlan_id;
2809 int ret = 0, vlanid = 0;
2812 if (hwaddr_aton(cmd, addr))
2815 pos = os_strstr(cmd, "VLAN_ID=");
2817 vlanid = atoi(pos + 8);
2819 if (!hostapd_maclist_found(*acl, *num, addr, &vlan_id)) {
2820 ret = hostapd_add_acl_maclist(acl, num, vlanid, addr);
2821 if (ret != -1 && *acl)
2822 qsort(*acl, *num, sizeof(**acl), hostapd_acl_comp);
2825 return ret < 0 ? -1 : 0;
2829 static int hostapd_ctrl_iface_receive_process(struct hostapd_data *hapd,
2830 char *buf, char *reply,
2832 struct sockaddr_storage *from,
2837 os_memcpy(reply, "OK\n", 3);
2840 if (os_strcmp(buf, "PING") == 0) {
2841 os_memcpy(reply, "PONG\n", 5);
2843 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
2844 if (wpa_debug_reopen_file() < 0)
2846 } else if (os_strncmp(buf, "NOTE ", 5) == 0) {
2847 wpa_printf(MSG_INFO, "NOTE: %s", buf + 5);
2848 } else if (os_strcmp(buf, "STATUS") == 0) {
2849 reply_len = hostapd_ctrl_iface_status(hapd, reply,
2851 } else if (os_strcmp(buf, "STATUS-DRIVER") == 0) {
2852 reply_len = hostapd_drv_status(hapd, reply, reply_size);
2853 } else if (os_strcmp(buf, "MIB") == 0) {
2854 reply_len = ieee802_11_get_mib(hapd, reply, reply_size);
2855 if (reply_len >= 0) {
2856 res = wpa_get_mib(hapd->wpa_auth, reply + reply_len,
2857 reply_size - reply_len);
2863 if (reply_len >= 0) {
2864 res = ieee802_1x_get_mib(hapd, reply + reply_len,
2865 reply_size - reply_len);
2871 #ifndef CONFIG_NO_RADIUS
2872 if (reply_len >= 0) {
2873 res = radius_client_get_mib(hapd->radius,
2875 reply_size - reply_len);
2881 #endif /* CONFIG_NO_RADIUS */
2882 } else if (os_strncmp(buf, "MIB ", 4) == 0) {
2883 reply_len = hostapd_ctrl_iface_mib(hapd, reply, reply_size,
2885 } else if (os_strcmp(buf, "STA-FIRST") == 0) {
2886 reply_len = hostapd_ctrl_iface_sta_first(hapd, reply,
2888 } else if (os_strncmp(buf, "STA ", 4) == 0) {
2889 reply_len = hostapd_ctrl_iface_sta(hapd, buf + 4, reply,
2891 } else if (os_strncmp(buf, "STA-NEXT ", 9) == 0) {
2892 reply_len = hostapd_ctrl_iface_sta_next(hapd, buf + 9, reply,
2894 } else if (os_strcmp(buf, "ATTACH") == 0) {
2895 if (hostapd_ctrl_iface_attach(hapd, from, fromlen, NULL))
2897 } else if (os_strncmp(buf, "ATTACH ", 7) == 0) {
2898 if (hostapd_ctrl_iface_attach(hapd, from, fromlen, buf + 7))
2900 } else if (os_strcmp(buf, "DETACH") == 0) {
2901 if (hostapd_ctrl_iface_detach(hapd, from, fromlen))
2903 } else if (os_strncmp(buf, "LEVEL ", 6) == 0) {
2904 if (hostapd_ctrl_iface_level(hapd, from, fromlen,
2907 } else if (os_strncmp(buf, "NEW_STA ", 8) == 0) {
2908 if (hostapd_ctrl_iface_new_sta(hapd, buf + 8))
2910 } else if (os_strncmp(buf, "DEAUTHENTICATE ", 15) == 0) {
2911 if (hostapd_ctrl_iface_deauthenticate(hapd, buf + 15))
2913 } else if (os_strncmp(buf, "DISASSOCIATE ", 13) == 0) {
2914 if (hostapd_ctrl_iface_disassociate(hapd, buf + 13))
2916 #ifdef CONFIG_TAXONOMY
2917 } else if (os_strncmp(buf, "SIGNATURE ", 10) == 0) {
2918 reply_len = hostapd_ctrl_iface_signature(hapd, buf + 10,
2920 #endif /* CONFIG_TAXONOMY */
2921 } else if (os_strncmp(buf, "POLL_STA ", 9) == 0) {
2922 if (hostapd_ctrl_iface_poll_sta(hapd, buf + 9))
2924 } else if (os_strcmp(buf, "STOP_AP") == 0) {
2925 if (hostapd_ctrl_iface_stop_ap(hapd))
2927 #ifdef CONFIG_IEEE80211W
2929 } else if (os_strncmp(buf, "SA_QUERY ", 9) == 0) {
2930 if (hostapd_ctrl_iface_sa_query(hapd, buf + 9))
2932 #endif /* NEED_AP_MLME */
2933 #endif /* CONFIG_IEEE80211W */
2935 } else if (os_strncmp(buf, "WPS_PIN ", 8) == 0) {
2936 if (hostapd_ctrl_iface_wps_pin(hapd, buf + 8))
2938 } else if (os_strncmp(buf, "WPS_CHECK_PIN ", 14) == 0) {
2939 reply_len = hostapd_ctrl_iface_wps_check_pin(
2940 hapd, buf + 14, reply, reply_size);
2941 } else if (os_strcmp(buf, "WPS_PBC") == 0) {
2942 if (hostapd_wps_button_pushed(hapd, NULL))
2944 } else if (os_strcmp(buf, "WPS_CANCEL") == 0) {
2945 if (hostapd_wps_cancel(hapd))
2947 } else if (os_strncmp(buf, "WPS_AP_PIN ", 11) == 0) {
2948 reply_len = hostapd_ctrl_iface_wps_ap_pin(hapd, buf + 11,
2950 } else if (os_strncmp(buf, "WPS_CONFIG ", 11) == 0) {
2951 if (hostapd_ctrl_iface_wps_config(hapd, buf + 11) < 0)
2953 } else if (os_strncmp(buf, "WPS_GET_STATUS", 13) == 0) {
2954 reply_len = hostapd_ctrl_iface_wps_get_status(hapd, reply,
2956 #ifdef CONFIG_WPS_NFC
2957 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ ", 17) == 0) {
2958 if (hostapd_ctrl_iface_wps_nfc_tag_read(hapd, buf + 17))
2960 } else if (os_strncmp(buf, "WPS_NFC_CONFIG_TOKEN ", 21) == 0) {
2961 reply_len = hostapd_ctrl_iface_wps_nfc_config_token(
2962 hapd, buf + 21, reply, reply_size);
2963 } else if (os_strncmp(buf, "WPS_NFC_TOKEN ", 14) == 0) {
2964 reply_len = hostapd_ctrl_iface_wps_nfc_token(
2965 hapd, buf + 14, reply, reply_size);
2966 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_SEL ", 21) == 0) {
2967 reply_len = hostapd_ctrl_iface_nfc_get_handover_sel(
2968 hapd, buf + 21, reply, reply_size);
2969 } else if (os_strncmp(buf, "NFC_REPORT_HANDOVER ", 20) == 0) {
2970 if (hostapd_ctrl_iface_nfc_report_handover(hapd, buf + 20))
2972 #endif /* CONFIG_WPS_NFC */
2973 #endif /* CONFIG_WPS */
2974 #ifdef CONFIG_INTERWORKING
2975 } else if (os_strncmp(buf, "SET_QOS_MAP_SET ", 16) == 0) {
2976 if (hostapd_ctrl_iface_set_qos_map_set(hapd, buf + 16))
2978 } else if (os_strncmp(buf, "SEND_QOS_MAP_CONF ", 18) == 0) {
2979 if (hostapd_ctrl_iface_send_qos_map_conf(hapd, buf + 18))
2981 #endif /* CONFIG_INTERWORKING */
2983 } else if (os_strncmp(buf, "HS20_WNM_NOTIF ", 15) == 0) {
2984 if (hostapd_ctrl_iface_hs20_wnm_notif(hapd, buf + 15))
2986 } else if (os_strncmp(buf, "HS20_DEAUTH_REQ ", 16) == 0) {
2987 if (hostapd_ctrl_iface_hs20_deauth_req(hapd, buf + 16))
2989 #endif /* CONFIG_HS20 */
2990 #ifdef CONFIG_WNM_AP
2991 } else if (os_strncmp(buf, "DISASSOC_IMMINENT ", 18) == 0) {
2992 if (hostapd_ctrl_iface_disassoc_imminent(hapd, buf + 18))
2994 } else if (os_strncmp(buf, "ESS_DISASSOC ", 13) == 0) {
2995 if (hostapd_ctrl_iface_ess_disassoc(hapd, buf + 13))
2997 } else if (os_strncmp(buf, "BSS_TM_REQ ", 11) == 0) {
2998 if (hostapd_ctrl_iface_bss_tm_req(hapd, buf + 11))
3000 } else if (os_strncmp(buf, "COLOC_INTF_REQ ", 15) == 0) {
3001 if (hostapd_ctrl_iface_coloc_intf_req(hapd, buf + 15))
3003 #endif /* CONFIG_WNM_AP */
3004 } else if (os_strcmp(buf, "GET_CONFIG") == 0) {
3005 reply_len = hostapd_ctrl_iface_get_config(hapd, reply,
3007 } else if (os_strncmp(buf, "SET ", 4) == 0) {
3008 if (hostapd_ctrl_iface_set(hapd, buf + 4))
3010 } else if (os_strncmp(buf, "GET ", 4) == 0) {
3011 reply_len = hostapd_ctrl_iface_get(hapd, buf + 4, reply,
3013 } else if (os_strncmp(buf, "ENABLE", 6) == 0) {
3014 if (hostapd_ctrl_iface_enable(hapd->iface))
3016 } else if (os_strncmp(buf, "RELOAD", 6) == 0) {
3017 if (hostapd_ctrl_iface_reload(hapd->iface))
3019 } else if (os_strncmp(buf, "DISABLE", 7) == 0) {
3020 if (hostapd_ctrl_iface_disable(hapd->iface))
3022 } else if (os_strcmp(buf, "UPDATE_BEACON") == 0) {
3023 if (ieee802_11_set_beacon(hapd))
3025 #ifdef CONFIG_TESTING_OPTIONS
3026 } else if (os_strncmp(buf, "RADAR ", 6) == 0) {
3027 if (hostapd_ctrl_iface_radar(hapd, buf + 6))
3029 } else if (os_strncmp(buf, "MGMT_TX ", 8) == 0) {
3030 if (hostapd_ctrl_iface_mgmt_tx(hapd, buf + 8))
3032 } else if (os_strncmp(buf, "MGMT_TX_STATUS_PROCESS ", 23) == 0) {
3033 if (hostapd_ctrl_iface_mgmt_tx_status_process(hapd,
3036 } else if (os_strncmp(buf, "MGMT_RX_PROCESS ", 16) == 0) {
3037 if (hostapd_ctrl_iface_mgmt_rx_process(hapd, buf + 16) < 0)
3039 } else if (os_strncmp(buf, "EAPOL_RX ", 9) == 0) {
3040 if (hostapd_ctrl_iface_eapol_rx(hapd, buf + 9) < 0)
3042 } else if (os_strncmp(buf, "DATA_TEST_CONFIG ", 17) == 0) {
3043 if (hostapd_ctrl_iface_data_test_config(hapd, buf + 17) < 0)
3045 } else if (os_strncmp(buf, "DATA_TEST_TX ", 13) == 0) {
3046 if (hostapd_ctrl_iface_data_test_tx(hapd, buf + 13) < 0)
3048 } else if (os_strncmp(buf, "DATA_TEST_FRAME ", 16) == 0) {
3049 if (hostapd_ctrl_iface_data_test_frame(hapd, buf + 16) < 0)
3051 } else if (os_strncmp(buf, "TEST_ALLOC_FAIL ", 16) == 0) {
3052 if (hostapd_ctrl_test_alloc_fail(hapd, buf + 16) < 0)
3054 } else if (os_strcmp(buf, "GET_ALLOC_FAIL") == 0) {
3055 reply_len = hostapd_ctrl_get_alloc_fail(hapd, reply,
3057 } else if (os_strncmp(buf, "TEST_FAIL ", 10) == 0) {
3058 if (hostapd_ctrl_test_fail(hapd, buf + 10) < 0)
3060 } else if (os_strcmp(buf, "GET_FAIL") == 0) {
3061 reply_len = hostapd_ctrl_get_fail(hapd, reply, reply_size);
3062 } else if (os_strncmp(buf, "RESET_PN ", 9) == 0) {
3063 if (hostapd_ctrl_reset_pn(hapd, buf + 9) < 0)
3065 } else if (os_strncmp(buf, "SET_KEY ", 8) == 0) {
3066 if (hostapd_ctrl_set_key(hapd, buf + 8) < 0)
3068 } else if (os_strncmp(buf, "RESEND_M1 ", 10) == 0) {
3069 if (hostapd_ctrl_resend_m1(hapd, buf + 10) < 0)
3071 } else if (os_strncmp(buf, "RESEND_M3 ", 10) == 0) {
3072 if (hostapd_ctrl_resend_m3(hapd, buf + 10) < 0)
3074 } else if (os_strncmp(buf, "RESEND_GROUP_M1 ", 16) == 0) {
3075 if (hostapd_ctrl_resend_group_m1(hapd, buf + 16) < 0)
3077 } else if (os_strcmp(buf, "REKEY_GTK") == 0) {
3078 if (wpa_auth_rekey_gtk(hapd->wpa_auth) < 0)
3080 #endif /* CONFIG_TESTING_OPTIONS */
3081 } else if (os_strncmp(buf, "CHAN_SWITCH ", 12) == 0) {
3082 if (hostapd_ctrl_iface_chan_switch(hapd->iface, buf + 12))
3084 } else if (os_strncmp(buf, "VENDOR ", 7) == 0) {
3085 reply_len = hostapd_ctrl_iface_vendor(hapd, buf + 7, reply,
3087 } else if (os_strcmp(buf, "ERP_FLUSH") == 0) {
3088 ieee802_1x_erp_flush(hapd);
3089 #ifdef RADIUS_SERVER
3090 radius_server_erp_flush(hapd->radius_srv);
3091 #endif /* RADIUS_SERVER */
3092 } else if (os_strncmp(buf, "EAPOL_REAUTH ", 13) == 0) {
3093 if (hostapd_ctrl_iface_eapol_reauth(hapd, buf + 13))
3095 } else if (os_strncmp(buf, "EAPOL_SET ", 10) == 0) {
3096 if (hostapd_ctrl_iface_eapol_set(hapd, buf + 10))
3098 } else if (os_strncmp(buf, "LOG_LEVEL", 9) == 0) {
3099 reply_len = hostapd_ctrl_iface_log_level(
3100 hapd, buf + 9, reply, reply_size);
3102 } else if (os_strcmp(buf, "TRACK_STA_LIST") == 0) {
3103 reply_len = hostapd_ctrl_iface_track_sta_list(
3104 hapd, reply, reply_size);
3105 #endif /* NEED_AP_MLME */
3106 } else if (os_strcmp(buf, "PMKSA") == 0) {
3107 reply_len = hostapd_ctrl_iface_pmksa_list(hapd, reply,
3109 } else if (os_strcmp(buf, "PMKSA_FLUSH") == 0) {
3110 hostapd_ctrl_iface_pmksa_flush(hapd);
3111 } else if (os_strncmp(buf, "PMKSA_ADD ", 10) == 0) {
3112 if (hostapd_ctrl_iface_pmksa_add(hapd, buf + 10) < 0)
3114 } else if (os_strncmp(buf, "SET_NEIGHBOR ", 13) == 0) {
3115 if (hostapd_ctrl_iface_set_neighbor(hapd, buf + 13))
3117 } else if (os_strncmp(buf, "REMOVE_NEIGHBOR ", 16) == 0) {
3118 if (hostapd_ctrl_iface_remove_neighbor(hapd, buf + 16))
3120 } else if (os_strncmp(buf, "REQ_LCI ", 8) == 0) {
3121 if (hostapd_ctrl_iface_req_lci(hapd, buf + 8))
3123 } else if (os_strncmp(buf, "REQ_RANGE ", 10) == 0) {
3124 if (hostapd_ctrl_iface_req_range(hapd, buf + 10))
3126 } else if (os_strncmp(buf, "REQ_BEACON ", 11) == 0) {
3127 reply_len = hostapd_ctrl_iface_req_beacon(hapd, buf + 11,
3129 } else if (os_strcmp(buf, "DRIVER_FLAGS") == 0) {
3130 reply_len = hostapd_ctrl_driver_flags(hapd->iface, reply,
3132 } else if (os_strcmp(buf, "TERMINATE") == 0) {
3134 } else if (os_strncmp(buf, "ACCEPT_ACL ", 11) == 0) {
3135 if (os_strncmp(buf + 11, "ADD_MAC ", 8) == 0) {
3136 if (!hostapd_ctrl_iface_acl_add_mac(
3137 &hapd->conf->accept_mac,
3138 &hapd->conf->num_accept_mac, buf + 19))
3139 hostapd_disassoc_accept_mac(hapd);
3142 } else if (os_strncmp((buf + 11), "DEL_MAC ", 8) == 0) {
3143 hostapd_ctrl_iface_acl_del_mac(
3144 &hapd->conf->accept_mac,
3145 &hapd->conf->num_accept_mac, buf + 19);
3146 } else if (os_strcmp(buf + 11, "SHOW") == 0) {
3147 reply_len = hostapd_ctrl_iface_acl_show_mac(
3148 hapd->conf->accept_mac,
3149 hapd->conf->num_accept_mac, reply, reply_size);
3150 } else if (os_strcmp(buf + 11, "CLEAR") == 0) {
3151 hostapd_ctrl_iface_acl_clear_list(
3152 &hapd->conf->accept_mac,
3153 &hapd->conf->num_accept_mac);
3155 } else if (os_strncmp(buf, "DENY_ACL ", 9) == 0) {
3156 if (os_strncmp(buf + 9, "ADD_MAC ", 8) == 0) {
3157 if (!hostapd_ctrl_iface_acl_add_mac(
3158 &hapd->conf->deny_mac,
3159 &hapd->conf->num_deny_mac, buf + 17))
3160 hostapd_disassoc_deny_mac(hapd);
3161 } else if (os_strncmp(buf + 9, "DEL_MAC ", 8) == 0) {
3162 hostapd_ctrl_iface_acl_del_mac(
3163 &hapd->conf->deny_mac,
3164 &hapd->conf->num_deny_mac, buf + 17);
3165 } else if (os_strcmp(buf + 9, "SHOW") == 0) {
3166 reply_len = hostapd_ctrl_iface_acl_show_mac(
3167 hapd->conf->deny_mac,
3168 hapd->conf->num_deny_mac, reply, reply_size);
3169 } else if (os_strcmp(buf + 9, "CLEAR") == 0) {
3170 hostapd_ctrl_iface_acl_clear_list(
3171 &hapd->conf->deny_mac,
3172 &hapd->conf->num_deny_mac);
3175 } else if (os_strncmp(buf, "DPP_QR_CODE ", 12) == 0) {
3176 res = hostapd_dpp_qr_code(hapd, buf + 12);
3180 reply_len = os_snprintf(reply, reply_size, "%d", res);
3181 if (os_snprintf_error(reply_size, reply_len))
3184 } else if (os_strncmp(buf, "DPP_BOOTSTRAP_GEN ", 18) == 0) {
3185 res = hostapd_dpp_bootstrap_gen(hapd, buf + 18);
3189 reply_len = os_snprintf(reply, reply_size, "%d", res);
3190 if (os_snprintf_error(reply_size, reply_len))
3193 } else if (os_strncmp(buf, "DPP_BOOTSTRAP_REMOVE ", 21) == 0) {
3194 if (hostapd_dpp_bootstrap_remove(hapd, buf + 21) < 0)
3196 } else if (os_strncmp(buf, "DPP_BOOTSTRAP_GET_URI ", 22) == 0) {
3199 uri = hostapd_dpp_bootstrap_get_uri(hapd, atoi(buf + 22));
3203 reply_len = os_snprintf(reply, reply_size, "%s", uri);
3204 if (os_snprintf_error(reply_size, reply_len))
3207 } else if (os_strncmp(buf, "DPP_BOOTSTRAP_INFO ", 19) == 0) {
3208 reply_len = hostapd_dpp_bootstrap_info(hapd, atoi(buf + 19),
3210 } else if (os_strncmp(buf, "DPP_AUTH_INIT ", 14) == 0) {
3211 if (hostapd_dpp_auth_init(hapd, buf + 13) < 0)
3213 } else if (os_strncmp(buf, "DPP_LISTEN ", 11) == 0) {
3214 if (hostapd_dpp_listen(hapd, buf + 11) < 0)
3216 } else if (os_strcmp(buf, "DPP_STOP_LISTEN") == 0) {
3217 hostapd_dpp_stop(hapd);
3218 hostapd_dpp_listen_stop(hapd);
3219 } else if (os_strncmp(buf, "DPP_CONFIGURATOR_ADD", 20) == 0) {
3220 res = hostapd_dpp_configurator_add(hapd, buf + 20);
3224 reply_len = os_snprintf(reply, reply_size, "%d", res);
3225 if (os_snprintf_error(reply_size, reply_len))
3228 } else if (os_strncmp(buf, "DPP_CONFIGURATOR_REMOVE ", 24) == 0) {
3229 if (hostapd_dpp_configurator_remove(hapd, buf + 24) < 0)
3231 } else if (os_strncmp(buf, "DPP_CONFIGURATOR_SIGN ", 22) == 0) {
3232 if (hostapd_dpp_configurator_sign(hapd, buf + 22) < 0)
3234 } else if (os_strncmp(buf, "DPP_CONFIGURATOR_GET_KEY ", 25) == 0) {
3235 reply_len = hostapd_dpp_configurator_get_key(hapd,
3238 } else if (os_strncmp(buf, "DPP_PKEX_ADD ", 13) == 0) {
3239 res = hostapd_dpp_pkex_add(hapd, buf + 12);
3243 reply_len = os_snprintf(reply, reply_size, "%d", res);
3244 if (os_snprintf_error(reply_size, reply_len))
3247 } else if (os_strncmp(buf, "DPP_PKEX_REMOVE ", 16) == 0) {
3248 if (hostapd_dpp_pkex_remove(hapd, buf + 16) < 0)
3250 #endif /* CONFIG_DPP */
3251 #ifdef RADIUS_SERVER
3252 } else if (os_strncmp(buf, "DAC_REQUEST ", 12) == 0) {
3253 if (radius_server_dac_request(hapd->radius_srv, buf + 12) < 0)
3255 #endif /* RADIUS_SERVER */
3257 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
3261 if (reply_len < 0) {
3262 os_memcpy(reply, "FAIL\n", 5);
3270 static void hostapd_ctrl_iface_receive(int sock, void *eloop_ctx,
3273 struct hostapd_data *hapd = eloop_ctx;
3276 struct sockaddr_storage from;
3277 socklen_t fromlen = sizeof(from);
3278 char *reply, *pos = buf;
3279 const int reply_size = 4096;
3281 int level = MSG_DEBUG;
3282 #ifdef CONFIG_CTRL_IFACE_UDP
3283 unsigned char lcookie[COOKIE_LEN];
3284 #endif /* CONFIG_CTRL_IFACE_UDP */
3286 res = recvfrom(sock, buf, sizeof(buf) - 1, 0,
3287 (struct sockaddr *) &from, &fromlen);
3289 wpa_printf(MSG_ERROR, "recvfrom(ctrl_iface): %s",
3295 reply = os_malloc(reply_size);
3296 if (reply == NULL) {
3297 if (sendto(sock, "FAIL\n", 5, 0, (struct sockaddr *) &from,
3299 wpa_printf(MSG_DEBUG, "CTRL: sendto failed: %s",
3305 #ifdef CONFIG_CTRL_IFACE_UDP
3306 if (os_strcmp(buf, "GET_COOKIE") == 0) {
3307 os_memcpy(reply, "COOKIE=", 7);
3308 wpa_snprintf_hex(reply + 7, 2 * COOKIE_LEN + 1,
3309 cookie, COOKIE_LEN);
3310 reply_len = 7 + 2 * COOKIE_LEN;
3314 if (os_strncmp(buf, "COOKIE=", 7) != 0 ||
3315 hexstr2bin(buf + 7, lcookie, COOKIE_LEN) < 0) {
3316 wpa_printf(MSG_DEBUG,
3317 "CTRL: No cookie in the request - drop request");
3322 if (os_memcmp(cookie, lcookie, COOKIE_LEN) != 0) {
3323 wpa_printf(MSG_DEBUG,
3324 "CTRL: Invalid cookie in the request - drop request");
3329 pos = buf + 7 + 2 * COOKIE_LEN;
3332 #endif /* CONFIG_CTRL_IFACE_UDP */
3334 if (os_strcmp(pos, "PING") == 0)
3335 level = MSG_EXCESSIVE;
3336 wpa_hexdump_ascii(level, "RX ctrl_iface", pos, res);
3338 reply_len = hostapd_ctrl_iface_receive_process(hapd, pos,
3342 #ifdef CONFIG_CTRL_IFACE_UDP
3344 #endif /* CONFIG_CTRL_IFACE_UDP */
3345 if (sendto(sock, reply, reply_len, 0, (struct sockaddr *) &from,
3347 wpa_printf(MSG_DEBUG, "CTRL: sendto failed: %s",
3354 #ifndef CONFIG_CTRL_IFACE_UDP
3355 static char * hostapd_ctrl_iface_path(struct hostapd_data *hapd)
3360 if (hapd->conf->ctrl_interface == NULL)
3363 len = os_strlen(hapd->conf->ctrl_interface) +
3364 os_strlen(hapd->conf->iface) + 2;
3365 buf = os_malloc(len);
3369 os_snprintf(buf, len, "%s/%s",
3370 hapd->conf->ctrl_interface, hapd->conf->iface);
3371 buf[len - 1] = '\0';
3374 #endif /* CONFIG_CTRL_IFACE_UDP */
3377 static void hostapd_ctrl_iface_msg_cb(void *ctx, int level,
3378 enum wpa_msg_type type,
3379 const char *txt, size_t len)
3381 struct hostapd_data *hapd = ctx;
3384 hostapd_ctrl_iface_send(hapd, level, type, txt, len);
3388 int hostapd_ctrl_iface_init(struct hostapd_data *hapd)
3390 #ifdef CONFIG_CTRL_IFACE_UDP
3391 int port = HOSTAPD_CTRL_IFACE_PORT;
3393 char port_str[40], *tmp;
3395 struct addrinfo hints = { 0 }, *res, *saveres;
3398 if (hapd->ctrl_sock > -1) {
3399 wpa_printf(MSG_DEBUG, "ctrl_iface already exists!");
3403 if (hapd->conf->ctrl_interface == NULL)
3406 pos = os_strstr(hapd->conf->ctrl_interface, "udp:");
3411 wpa_printf(MSG_ERROR, "Invalid ctrl_iface UDP port");
3416 dl_list_init(&hapd->ctrl_dst);
3417 hapd->ctrl_sock = -1;
3418 os_get_random(cookie, COOKIE_LEN);
3420 #ifdef CONFIG_CTRL_IFACE_UDP_REMOTE
3421 hints.ai_flags = AI_PASSIVE;
3422 #endif /* CONFIG_CTRL_IFACE_UDP_REMOTE */
3424 #ifdef CONFIG_CTRL_IFACE_UDP_IPV6
3425 hints.ai_family = AF_INET6;
3426 #else /* CONFIG_CTRL_IFACE_UDP_IPV6 */
3427 hints.ai_family = AF_INET;
3428 #endif /* CONFIG_CTRL_IFACE_UDP_IPV6 */
3429 hints.ai_socktype = SOCK_DGRAM;
3432 os_snprintf(p, sizeof(p), "%d", port);
3433 n = getaddrinfo(NULL, p, &hints, &res);
3435 wpa_printf(MSG_ERROR, "getaddrinfo(): %s", gai_strerror(n));
3440 hapd->ctrl_sock = socket(res->ai_family, res->ai_socktype,
3442 if (hapd->ctrl_sock < 0) {
3443 wpa_printf(MSG_ERROR, "socket(PF_INET): %s", strerror(errno));
3447 if (bind(hapd->ctrl_sock, res->ai_addr, res->ai_addrlen) < 0) {
3449 if ((HOSTAPD_CTRL_IFACE_PORT - port) <
3450 HOSTAPD_CTRL_IFACE_PORT_LIMIT && !pos)
3452 wpa_printf(MSG_ERROR, "bind(AF_INET): %s", strerror(errno));
3456 freeaddrinfo(saveres);
3458 os_snprintf(port_str, sizeof(port_str), "udp:%d", port);
3459 tmp = os_strdup(port_str);
3461 os_free(hapd->conf->ctrl_interface);
3462 hapd->conf->ctrl_interface = tmp;
3464 wpa_printf(MSG_DEBUG, "ctrl_iface_init UDP port: %d", port);
3466 if (eloop_register_read_sock(hapd->ctrl_sock,
3467 hostapd_ctrl_iface_receive, hapd, NULL) <
3469 hostapd_ctrl_iface_deinit(hapd);
3473 hapd->msg_ctx = hapd;
3474 wpa_msg_register_cb(hostapd_ctrl_iface_msg_cb);
3479 if (hapd->ctrl_sock >= 0)
3480 close(hapd->ctrl_sock);
3482 #else /* CONFIG_CTRL_IFACE_UDP */
3483 struct sockaddr_un addr;
3487 if (hapd->ctrl_sock > -1) {
3488 wpa_printf(MSG_DEBUG, "ctrl_iface already exists!");
3492 dl_list_init(&hapd->ctrl_dst);
3494 if (hapd->conf->ctrl_interface == NULL)
3497 if (mkdir(hapd->conf->ctrl_interface, S_IRWXU | S_IRWXG) < 0) {
3498 if (errno == EEXIST) {
3499 wpa_printf(MSG_DEBUG, "Using existing control "
3500 "interface directory.");
3502 wpa_printf(MSG_ERROR, "mkdir[ctrl_interface]: %s",
3508 if (hapd->conf->ctrl_interface_gid_set &&
3509 chown(hapd->conf->ctrl_interface, -1,
3510 hapd->conf->ctrl_interface_gid) < 0) {
3511 wpa_printf(MSG_ERROR, "chown[ctrl_interface]: %s",
3516 if (!hapd->conf->ctrl_interface_gid_set &&
3517 hapd->iface->interfaces->ctrl_iface_group &&
3518 chown(hapd->conf->ctrl_interface, -1,
3519 hapd->iface->interfaces->ctrl_iface_group) < 0) {
3520 wpa_printf(MSG_ERROR, "chown[ctrl_interface]: %s",
3527 * Android is using umask 0077 which would leave the control interface
3528 * directory without group access. This breaks things since Wi-Fi
3529 * framework assumes that this directory can be accessed by other
3530 * applications in the wifi group. Fix this by adding group access even
3531 * if umask value would prevent this.
3533 if (chmod(hapd->conf->ctrl_interface, S_IRWXU | S_IRWXG) < 0) {
3534 wpa_printf(MSG_ERROR, "CTRL: Could not chmod directory: %s",
3536 /* Try to continue anyway */
3538 #endif /* ANDROID */
3540 if (os_strlen(hapd->conf->ctrl_interface) + 1 +
3541 os_strlen(hapd->conf->iface) >= sizeof(addr.sun_path))
3544 s = socket(PF_UNIX, SOCK_DGRAM, 0);
3546 wpa_printf(MSG_ERROR, "socket(PF_UNIX): %s", strerror(errno));
3550 os_memset(&addr, 0, sizeof(addr));
3552 addr.sun_len = sizeof(addr);
3553 #endif /* __FreeBSD__ */
3554 addr.sun_family = AF_UNIX;
3555 fname = hostapd_ctrl_iface_path(hapd);
3558 os_strlcpy(addr.sun_path, fname, sizeof(addr.sun_path));
3559 if (bind(s, (struct sockaddr *) &addr, sizeof(addr)) < 0) {
3560 wpa_printf(MSG_DEBUG, "ctrl_iface bind(PF_UNIX) failed: %s",
3562 if (connect(s, (struct sockaddr *) &addr, sizeof(addr)) < 0) {
3563 wpa_printf(MSG_DEBUG, "ctrl_iface exists, but does not"
3564 " allow connections - assuming it was left"
3565 "over from forced program termination");
3566 if (unlink(fname) < 0) {
3567 wpa_printf(MSG_ERROR,
3568 "Could not unlink existing ctrl_iface socket '%s': %s",
3569 fname, strerror(errno));
3572 if (bind(s, (struct sockaddr *) &addr, sizeof(addr)) <
3574 wpa_printf(MSG_ERROR,
3575 "hostapd-ctrl-iface: bind(PF_UNIX): %s",
3579 wpa_printf(MSG_DEBUG, "Successfully replaced leftover "
3580 "ctrl_iface socket '%s'", fname);
3582 wpa_printf(MSG_INFO, "ctrl_iface exists and seems to "
3583 "be in use - cannot override it");
3584 wpa_printf(MSG_INFO, "Delete '%s' manually if it is "
3585 "not used anymore", fname);
3592 if (hapd->conf->ctrl_interface_gid_set &&
3593 chown(fname, -1, hapd->conf->ctrl_interface_gid) < 0) {
3594 wpa_printf(MSG_ERROR, "chown[ctrl_interface/ifname]: %s",
3599 if (!hapd->conf->ctrl_interface_gid_set &&
3600 hapd->iface->interfaces->ctrl_iface_group &&
3601 chown(fname, -1, hapd->iface->interfaces->ctrl_iface_group) < 0) {
3602 wpa_printf(MSG_ERROR, "chown[ctrl_interface/ifname]: %s",
3607 if (chmod(fname, S_IRWXU | S_IRWXG) < 0) {
3608 wpa_printf(MSG_ERROR, "chmod[ctrl_interface/ifname]: %s",
3614 hapd->ctrl_sock = s;
3615 if (eloop_register_read_sock(s, hostapd_ctrl_iface_receive, hapd,
3617 hostapd_ctrl_iface_deinit(hapd);
3620 hapd->msg_ctx = hapd;
3621 wpa_msg_register_cb(hostapd_ctrl_iface_msg_cb);
3633 #endif /* CONFIG_CTRL_IFACE_UDP */
3637 void hostapd_ctrl_iface_deinit(struct hostapd_data *hapd)
3639 struct wpa_ctrl_dst *dst, *prev;
3641 if (hapd->ctrl_sock > -1) {
3642 #ifndef CONFIG_CTRL_IFACE_UDP
3644 #endif /* !CONFIG_CTRL_IFACE_UDP */
3646 eloop_unregister_read_sock(hapd->ctrl_sock);
3647 close(hapd->ctrl_sock);
3648 hapd->ctrl_sock = -1;
3649 #ifndef CONFIG_CTRL_IFACE_UDP
3650 fname = hostapd_ctrl_iface_path(hapd);
3655 if (hapd->conf->ctrl_interface &&
3656 rmdir(hapd->conf->ctrl_interface) < 0) {
3657 if (errno == ENOTEMPTY) {
3658 wpa_printf(MSG_DEBUG, "Control interface "
3659 "directory not empty - leaving it "
3662 wpa_printf(MSG_ERROR,
3663 "rmdir[ctrl_interface=%s]: %s",
3664 hapd->conf->ctrl_interface,
3668 #endif /* !CONFIG_CTRL_IFACE_UDP */
3671 dl_list_for_each_safe(dst, prev, &hapd->ctrl_dst, struct wpa_ctrl_dst,
3675 #ifdef CONFIG_TESTING_OPTIONS
3676 l2_packet_deinit(hapd->l2_test);
3677 hapd->l2_test = NULL;
3678 #endif /* CONFIG_TESTING_OPTIONS */
3682 static int hostapd_ctrl_iface_add(struct hapd_interfaces *interfaces,
3685 if (hostapd_add_iface(interfaces, buf) < 0) {
3686 wpa_printf(MSG_ERROR, "Adding interface %s failed", buf);
3693 static int hostapd_ctrl_iface_remove(struct hapd_interfaces *interfaces,
3696 if (hostapd_remove_iface(interfaces, buf) < 0) {
3697 wpa_printf(MSG_ERROR, "Removing interface %s failed", buf);
3704 static int hostapd_global_ctrl_iface_attach(struct hapd_interfaces *interfaces,
3705 struct sockaddr_storage *from,
3706 socklen_t fromlen, char *input)
3708 return ctrl_iface_attach(&interfaces->global_ctrl_dst, from, fromlen,
3713 static int hostapd_global_ctrl_iface_detach(struct hapd_interfaces *interfaces,
3714 struct sockaddr_storage *from,
3717 return ctrl_iface_detach(&interfaces->global_ctrl_dst, from, fromlen);
3721 static void hostapd_ctrl_iface_flush(struct hapd_interfaces *interfaces)
3723 #ifdef CONFIG_WPS_TESTING
3724 wps_version_number = 0x20;
3725 wps_testing_dummy_cred = 0;
3726 wps_corrupt_pkhash = 0;
3727 #endif /* CONFIG_WPS_TESTING */
3729 #ifdef CONFIG_TESTING_OPTIONS
3731 dpp_test = DPP_TEST_DISABLED;
3732 #endif /* CONFIG_DPP */
3733 #endif /* CONFIG_TESTING_OPTIONS */
3736 hostapd_dpp_deinit_global(interfaces);
3737 #endif /* CONFIG_DPP */
3744 hostapd_global_ctrl_iface_fst_attach(struct hapd_interfaces *interfaces,
3747 char ifname[IFNAMSIZ + 1];
3748 struct fst_iface_cfg cfg;
3749 struct hostapd_data *hapd;
3750 struct fst_wpa_obj iface_obj;
3752 if (!fst_parse_attach_command(cmd, ifname, sizeof(ifname), &cfg)) {
3753 hapd = hostapd_get_iface(interfaces, ifname);
3755 if (hapd->iface->fst) {
3756 wpa_printf(MSG_INFO, "FST: Already attached");
3759 fst_hostapd_fill_iface_obj(hapd, &iface_obj);
3760 hapd->iface->fst = fst_attach(ifname, hapd->own_addr,
3762 if (hapd->iface->fst)
3772 hostapd_global_ctrl_iface_fst_detach(struct hapd_interfaces *interfaces,
3775 char ifname[IFNAMSIZ + 1];
3776 struct hostapd_data * hapd;
3778 if (!fst_parse_detach_command(cmd, ifname, sizeof(ifname))) {
3779 hapd = hostapd_get_iface(interfaces, ifname);
3781 if (!fst_iface_detach(ifname)) {
3782 hapd->iface->fst = NULL;
3783 hapd->iface->fst_ies = NULL;
3792 #endif /* CONFIG_FST */
3795 static struct hostapd_data *
3796 hostapd_interfaces_get_hapd(struct hapd_interfaces *interfaces,
3801 for (i = 0; i < interfaces->count; i++) {
3802 struct hostapd_iface *iface = interfaces->iface[i];
3804 for (j = 0; j < iface->num_bss; j++) {
3805 struct hostapd_data *hapd;
3807 hapd = iface->bss[j];
3808 if (os_strcmp(ifname, hapd->conf->iface) == 0)
3817 static int hostapd_ctrl_iface_dup_param(struct hostapd_data *src_hapd,
3818 struct hostapd_data *dst_hapd,
3824 value = os_zalloc(HOSTAPD_CLI_DUP_VALUE_MAX_LEN);
3826 wpa_printf(MSG_ERROR,
3827 "DUP: cannot allocate buffer to stringify %s",
3832 if (os_strcmp(param, "wpa") == 0) {
3833 os_snprintf(value, HOSTAPD_CLI_DUP_VALUE_MAX_LEN, "%d",
3834 src_hapd->conf->wpa);
3835 } else if (os_strcmp(param, "wpa_key_mgmt") == 0 &&
3836 src_hapd->conf->wpa_key_mgmt) {
3837 res = hostapd_ctrl_iface_get_key_mgmt(
3838 src_hapd, value, HOSTAPD_CLI_DUP_VALUE_MAX_LEN);
3839 if (os_snprintf_error(HOSTAPD_CLI_DUP_VALUE_MAX_LEN, res))
3840 goto error_stringify;
3841 } else if (os_strcmp(param, "wpa_pairwise") == 0 &&
3842 src_hapd->conf->wpa_pairwise) {
3843 res = wpa_write_ciphers(value,
3844 value + HOSTAPD_CLI_DUP_VALUE_MAX_LEN,
3845 src_hapd->conf->wpa_pairwise, " ");
3847 goto error_stringify;
3848 } else if (os_strcmp(param, "rsn_pairwise") == 0 &&
3849 src_hapd->conf->rsn_pairwise) {
3850 res = wpa_write_ciphers(value,
3851 value + HOSTAPD_CLI_DUP_VALUE_MAX_LEN,
3852 src_hapd->conf->rsn_pairwise, " ");
3854 goto error_stringify;
3855 } else if (os_strcmp(param, "wpa_passphrase") == 0 &&
3856 src_hapd->conf->ssid.wpa_passphrase) {
3857 os_snprintf(value, HOSTAPD_CLI_DUP_VALUE_MAX_LEN, "%s",
3858 src_hapd->conf->ssid.wpa_passphrase);
3859 } else if (os_strcmp(param, "wpa_psk") == 0 &&
3860 src_hapd->conf->ssid.wpa_psk_set) {
3861 wpa_snprintf_hex(value, HOSTAPD_CLI_DUP_VALUE_MAX_LEN,
3862 src_hapd->conf->ssid.wpa_psk->psk, PMK_LEN);
3864 wpa_printf(MSG_WARNING, "DUP: %s cannot be duplicated", param);
3868 res = hostapd_set_iface(dst_hapd->iconf, dst_hapd->conf, param, value);
3873 wpa_printf(MSG_ERROR, "DUP: cannot stringify %s", param);
3881 hostapd_global_ctrl_iface_interfaces(struct hapd_interfaces *interfaces,
3883 char *reply, int reply_size)
3888 struct hostapd_iface *iface;
3892 show_ctrl = !!os_strstr(input, "ctrl");
3895 end = reply + reply_size;
3897 for (i = 0; i < interfaces->count; i++) {
3898 iface = interfaces->iface[i];
3900 for (j = 0; j < iface->num_bss; j++) {
3901 struct hostapd_bss_config *conf;
3903 conf = iface->conf->bss[j];
3905 res = os_snprintf(pos, end - pos,
3906 "%s ctrl_iface=%s\n",
3908 conf->ctrl_interface ?
3909 conf->ctrl_interface : "N/A");
3911 res = os_snprintf(pos, end - pos, "%s\n",
3913 if (os_snprintf_error(end - pos, res)) {
3926 hostapd_global_ctrl_iface_dup_network(struct hapd_interfaces *interfaces,
3929 char *p_start = cmd, *p_end;
3930 struct hostapd_data *src_hapd, *dst_hapd;
3932 /* cmd: "<src ifname> <dst ifname> <variable name> */
3934 p_end = os_strchr(p_start, ' ');
3936 wpa_printf(MSG_ERROR, "DUP: no src ifname found in cmd: '%s'",
3942 src_hapd = hostapd_interfaces_get_hapd(interfaces, p_start);
3944 wpa_printf(MSG_ERROR, "DUP: no src ifname found: '%s'",
3949 p_start = p_end + 1;
3950 p_end = os_strchr(p_start, ' ');
3952 wpa_printf(MSG_ERROR, "DUP: no dst ifname found in cmd: '%s'",
3958 dst_hapd = hostapd_interfaces_get_hapd(interfaces, p_start);
3960 wpa_printf(MSG_ERROR, "DUP: no dst ifname found: '%s'",
3965 p_start = p_end + 1;
3966 return hostapd_ctrl_iface_dup_param(src_hapd, dst_hapd, p_start);
3970 static int hostapd_global_ctrl_iface_ifname(struct hapd_interfaces *interfaces,
3972 char *buf, char *reply,
3974 struct sockaddr_storage *from,
3977 struct hostapd_data *hapd;
3979 hapd = hostapd_interfaces_get_hapd(interfaces, ifname);
3983 res = os_snprintf(reply, reply_size, "FAIL-NO-IFNAME-MATCH\n");
3984 if (os_snprintf_error(reply_size, res))
3989 return hostapd_ctrl_iface_receive_process(hapd, buf, reply,reply_size,
3994 static void hostapd_global_ctrl_iface_receive(int sock, void *eloop_ctx,
3997 void *interfaces = eloop_ctx;
3998 char buffer[256], *buf = buffer;
4000 struct sockaddr_storage from;
4001 socklen_t fromlen = sizeof(from);
4004 const int reply_size = 4096;
4005 #ifdef CONFIG_CTRL_IFACE_UDP
4006 unsigned char lcookie[COOKIE_LEN];
4007 #endif /* CONFIG_CTRL_IFACE_UDP */
4009 res = recvfrom(sock, buffer, sizeof(buffer) - 1, 0,
4010 (struct sockaddr *) &from, &fromlen);
4012 wpa_printf(MSG_ERROR, "recvfrom(ctrl_iface): %s",
4017 wpa_printf(MSG_DEBUG, "Global ctrl_iface command: %s", buf);
4019 reply = os_malloc(reply_size);
4020 if (reply == NULL) {
4021 if (sendto(sock, "FAIL\n", 5, 0, (struct sockaddr *) &from,
4023 wpa_printf(MSG_DEBUG, "CTRL: sendto failed: %s",
4029 os_memcpy(reply, "OK\n", 3);
4032 #ifdef CONFIG_CTRL_IFACE_UDP
4033 if (os_strcmp(buf, "GET_COOKIE") == 0) {
4034 os_memcpy(reply, "COOKIE=", 7);
4035 wpa_snprintf_hex(reply + 7, 2 * COOKIE_LEN + 1,
4036 gcookie, COOKIE_LEN);
4037 reply_len = 7 + 2 * COOKIE_LEN;
4041 if (os_strncmp(buf, "COOKIE=", 7) != 0 ||
4042 hexstr2bin(buf + 7, lcookie, COOKIE_LEN) < 0) {
4043 wpa_printf(MSG_DEBUG,
4044 "CTRL: No cookie in the request - drop request");
4049 if (os_memcmp(gcookie, lcookie, COOKIE_LEN) != 0) {
4050 wpa_printf(MSG_DEBUG,
4051 "CTRL: Invalid cookie in the request - drop request");
4056 buf += 7 + 2 * COOKIE_LEN;
4059 #endif /* CONFIG_CTRL_IFACE_UDP */
4061 if (os_strncmp(buf, "IFNAME=", 7) == 0) {
4062 char *pos = os_strchr(buf + 7, ' ');
4066 reply_len = hostapd_global_ctrl_iface_ifname(
4067 interfaces, buf + 7, pos, reply, reply_size,
4073 if (os_strcmp(buf, "PING") == 0) {
4074 os_memcpy(reply, "PONG\n", 5);
4076 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
4077 if (wpa_debug_reopen_file() < 0)
4079 } else if (os_strcmp(buf, "FLUSH") == 0) {
4080 hostapd_ctrl_iface_flush(interfaces);
4081 } else if (os_strncmp(buf, "ADD ", 4) == 0) {
4082 if (hostapd_ctrl_iface_add(interfaces, buf + 4) < 0)
4084 } else if (os_strncmp(buf, "REMOVE ", 7) == 0) {
4085 if (hostapd_ctrl_iface_remove(interfaces, buf + 7) < 0)
4087 } else if (os_strcmp(buf, "ATTACH") == 0) {
4088 if (hostapd_global_ctrl_iface_attach(interfaces, &from,
4091 } else if (os_strncmp(buf, "ATTACH ", 7) == 0) {
4092 if (hostapd_global_ctrl_iface_attach(interfaces, &from,
4095 } else if (os_strcmp(buf, "DETACH") == 0) {
4096 if (hostapd_global_ctrl_iface_detach(interfaces, &from,
4099 #ifdef CONFIG_MODULE_TESTS
4100 } else if (os_strcmp(buf, "MODULE_TESTS") == 0) {
4101 if (hapd_module_tests() < 0)
4103 #endif /* CONFIG_MODULE_TESTS */
4105 } else if (os_strncmp(buf, "FST-ATTACH ", 11) == 0) {
4106 if (!hostapd_global_ctrl_iface_fst_attach(interfaces, buf + 11))
4107 reply_len = os_snprintf(reply, reply_size, "OK\n");
4110 } else if (os_strncmp(buf, "FST-DETACH ", 11) == 0) {
4111 if (!hostapd_global_ctrl_iface_fst_detach(interfaces, buf + 11))
4112 reply_len = os_snprintf(reply, reply_size, "OK\n");
4115 } else if (os_strncmp(buf, "FST-MANAGER ", 12) == 0) {
4116 reply_len = fst_ctrl_iface_receive(buf + 12, reply, reply_size);
4117 #endif /* CONFIG_FST */
4118 } else if (os_strncmp(buf, "DUP_NETWORK ", 12) == 0) {
4119 if (!hostapd_global_ctrl_iface_dup_network(interfaces,
4121 reply_len = os_snprintf(reply, reply_size, "OK\n");
4124 } else if (os_strncmp(buf, "INTERFACES", 10) == 0) {
4125 reply_len = hostapd_global_ctrl_iface_interfaces(
4126 interfaces, buf + 10, reply, sizeof(buffer));
4127 } else if (os_strcmp(buf, "TERMINATE") == 0) {
4130 wpa_printf(MSG_DEBUG, "Unrecognized global ctrl_iface command "
4136 if (reply_len < 0) {
4137 os_memcpy(reply, "FAIL\n", 5);
4141 if (sendto(sock, reply, reply_len, 0, (struct sockaddr *) &from,
4143 wpa_printf(MSG_DEBUG, "CTRL: sendto failed: %s",
4150 #ifndef CONFIG_CTRL_IFACE_UDP
4151 static char * hostapd_global_ctrl_iface_path(struct hapd_interfaces *interface)
4156 if (interface->global_iface_path == NULL)
4159 len = os_strlen(interface->global_iface_path) +
4160 os_strlen(interface->global_iface_name) + 2;
4161 buf = os_malloc(len);
4165 os_snprintf(buf, len, "%s/%s", interface->global_iface_path,
4166 interface->global_iface_name);
4167 buf[len - 1] = '\0';
4170 #endif /* CONFIG_CTRL_IFACE_UDP */
4173 int hostapd_global_ctrl_iface_init(struct hapd_interfaces *interface)
4175 #ifdef CONFIG_CTRL_IFACE_UDP
4176 int port = HOSTAPD_GLOBAL_CTRL_IFACE_PORT;
4179 struct addrinfo hints = { 0 }, *res, *saveres;
4182 if (interface->global_ctrl_sock > -1) {
4183 wpa_printf(MSG_DEBUG, "ctrl_iface already exists!");
4187 if (interface->global_iface_path == NULL)
4190 pos = os_strstr(interface->global_iface_path, "udp:");
4195 wpa_printf(MSG_ERROR, "Invalid global ctrl UDP port");
4200 os_get_random(gcookie, COOKIE_LEN);
4202 #ifdef CONFIG_CTRL_IFACE_UDP_REMOTE
4203 hints.ai_flags = AI_PASSIVE;
4204 #endif /* CONFIG_CTRL_IFACE_UDP_REMOTE */
4206 #ifdef CONFIG_CTRL_IFACE_UDP_IPV6
4207 hints.ai_family = AF_INET6;
4208 #else /* CONFIG_CTRL_IFACE_UDP_IPV6 */
4209 hints.ai_family = AF_INET;
4210 #endif /* CONFIG_CTRL_IFACE_UDP_IPV6 */
4211 hints.ai_socktype = SOCK_DGRAM;
4214 os_snprintf(p, sizeof(p), "%d", port);
4215 n = getaddrinfo(NULL, p, &hints, &res);
4217 wpa_printf(MSG_ERROR, "getaddrinfo(): %s", gai_strerror(n));
4222 interface->global_ctrl_sock = socket(res->ai_family, res->ai_socktype,
4224 if (interface->global_ctrl_sock < 0) {
4225 wpa_printf(MSG_ERROR, "socket(PF_INET): %s", strerror(errno));
4229 if (bind(interface->global_ctrl_sock, res->ai_addr, res->ai_addrlen) <
4232 if ((port - HOSTAPD_GLOBAL_CTRL_IFACE_PORT) <
4233 HOSTAPD_GLOBAL_CTRL_IFACE_PORT_LIMIT && !pos)
4235 wpa_printf(MSG_ERROR, "bind(AF_INET): %s", strerror(errno));
4239 freeaddrinfo(saveres);
4241 wpa_printf(MSG_DEBUG, "global ctrl_iface_init UDP port: %d", port);
4243 if (eloop_register_read_sock(interface->global_ctrl_sock,
4244 hostapd_global_ctrl_iface_receive,
4245 interface, NULL) < 0) {
4246 hostapd_global_ctrl_iface_deinit(interface);
4253 if (interface->global_ctrl_sock >= 0)
4254 close(interface->global_ctrl_sock);
4256 #else /* CONFIG_CTRL_IFACE_UDP */
4257 struct sockaddr_un addr;
4261 if (interface->global_iface_path == NULL) {
4262 wpa_printf(MSG_DEBUG, "ctrl_iface not configured!");
4266 if (mkdir(interface->global_iface_path, S_IRWXU | S_IRWXG) < 0) {
4267 if (errno == EEXIST) {
4268 wpa_printf(MSG_DEBUG, "Using existing control "
4269 "interface directory.");
4271 wpa_printf(MSG_ERROR, "mkdir[ctrl_interface]: %s",
4275 } else if (interface->ctrl_iface_group &&
4276 chown(interface->global_iface_path, -1,
4277 interface->ctrl_iface_group) < 0) {
4278 wpa_printf(MSG_ERROR, "chown[ctrl_interface]: %s",
4283 if (os_strlen(interface->global_iface_path) + 1 +
4284 os_strlen(interface->global_iface_name) >= sizeof(addr.sun_path))
4287 s = socket(PF_UNIX, SOCK_DGRAM, 0);
4289 wpa_printf(MSG_ERROR, "socket(PF_UNIX): %s", strerror(errno));
4293 os_memset(&addr, 0, sizeof(addr));
4295 addr.sun_len = sizeof(addr);
4296 #endif /* __FreeBSD__ */
4297 addr.sun_family = AF_UNIX;
4298 fname = hostapd_global_ctrl_iface_path(interface);
4301 os_strlcpy(addr.sun_path, fname, sizeof(addr.sun_path));
4302 if (bind(s, (struct sockaddr *) &addr, sizeof(addr)) < 0) {
4303 wpa_printf(MSG_DEBUG, "ctrl_iface bind(PF_UNIX) failed: %s",
4305 if (connect(s, (struct sockaddr *) &addr, sizeof(addr)) < 0) {
4306 wpa_printf(MSG_DEBUG, "ctrl_iface exists, but does not"
4307 " allow connections - assuming it was left"
4308 "over from forced program termination");
4309 if (unlink(fname) < 0) {
4310 wpa_printf(MSG_ERROR,
4311 "Could not unlink existing ctrl_iface socket '%s': %s",
4312 fname, strerror(errno));
4315 if (bind(s, (struct sockaddr *) &addr, sizeof(addr)) <
4317 wpa_printf(MSG_ERROR, "bind(PF_UNIX): %s",
4321 wpa_printf(MSG_DEBUG, "Successfully replaced leftover "
4322 "ctrl_iface socket '%s'", fname);
4324 wpa_printf(MSG_INFO, "ctrl_iface exists and seems to "
4325 "be in use - cannot override it");
4326 wpa_printf(MSG_INFO, "Delete '%s' manually if it is "
4327 "not used anymore", fname);
4334 if (interface->ctrl_iface_group &&
4335 chown(fname, -1, interface->ctrl_iface_group) < 0) {
4336 wpa_printf(MSG_ERROR, "chown[ctrl_interface]: %s",
4341 if (chmod(fname, S_IRWXU | S_IRWXG) < 0) {
4342 wpa_printf(MSG_ERROR, "chmod[ctrl_interface/ifname]: %s",
4348 interface->global_ctrl_sock = s;
4349 eloop_register_read_sock(s, hostapd_global_ctrl_iface_receive,
4362 #endif /* CONFIG_CTRL_IFACE_UDP */
4366 void hostapd_global_ctrl_iface_deinit(struct hapd_interfaces *interfaces)
4368 #ifndef CONFIG_CTRL_IFACE_UDP
4370 #endif /* CONFIG_CTRL_IFACE_UDP */
4371 struct wpa_ctrl_dst *dst, *prev;
4373 if (interfaces->global_ctrl_sock > -1) {
4374 eloop_unregister_read_sock(interfaces->global_ctrl_sock);
4375 close(interfaces->global_ctrl_sock);
4376 interfaces->global_ctrl_sock = -1;
4377 #ifndef CONFIG_CTRL_IFACE_UDP
4378 fname = hostapd_global_ctrl_iface_path(interfaces);
4384 if (interfaces->global_iface_path &&
4385 rmdir(interfaces->global_iface_path) < 0) {
4386 if (errno == ENOTEMPTY) {
4387 wpa_printf(MSG_DEBUG, "Control interface "
4388 "directory not empty - leaving it "
4391 wpa_printf(MSG_ERROR,
4392 "rmdir[ctrl_interface=%s]: %s",
4393 interfaces->global_iface_path,
4397 #endif /* CONFIG_CTRL_IFACE_UDP */
4400 os_free(interfaces->global_iface_path);
4401 interfaces->global_iface_path = NULL;
4403 dl_list_for_each_safe(dst, prev, &interfaces->global_ctrl_dst,
4404 struct wpa_ctrl_dst, list)
4409 static int hostapd_ctrl_check_event_enabled(struct wpa_ctrl_dst *dst,
4412 /* Enable Probe Request events based on explicit request.
4413 * Other events are enabled by default.
4415 if (str_starts(buf, RX_PROBE_REQUEST))
4416 return !!(dst->events & WPA_EVENT_RX_PROBE_REQUEST);
4421 static void hostapd_ctrl_iface_send(struct hostapd_data *hapd, int level,
4422 enum wpa_msg_type type,
4423 const char *buf, size_t len)
4425 struct wpa_ctrl_dst *dst, *next;
4426 struct dl_list *ctrl_dst;
4433 if (type != WPA_MSG_ONLY_GLOBAL) {
4434 s = hapd->ctrl_sock;
4435 ctrl_dst = &hapd->ctrl_dst;
4437 s = hapd->iface->interfaces->global_ctrl_sock;
4438 ctrl_dst = &hapd->iface->interfaces->global_ctrl_dst;
4441 if (s < 0 || dl_list_empty(ctrl_dst))
4444 os_snprintf(levelstr, sizeof(levelstr), "<%d>", level);
4445 io[0].iov_base = levelstr;
4446 io[0].iov_len = os_strlen(levelstr);
4447 io[1].iov_base = (char *) buf;
4448 io[1].iov_len = len;
4449 os_memset(&msg, 0, sizeof(msg));
4454 dl_list_for_each_safe(dst, next, ctrl_dst, struct wpa_ctrl_dst, list) {
4455 if ((level >= dst->debug_level) &&
4456 hostapd_ctrl_check_event_enabled(dst, buf)) {
4457 sockaddr_print(MSG_DEBUG, "CTRL_IFACE monitor send",
4458 &dst->addr, dst->addrlen);
4459 msg.msg_name = &dst->addr;
4460 msg.msg_namelen = dst->addrlen;
4461 if (sendmsg(s, &msg, 0) < 0) {
4463 wpa_printf(MSG_INFO, "CTRL_IFACE monitor[%d]: "
4465 idx, errno, strerror(errno));
4467 if (dst->errors > 10 || _errno == ENOENT) {
4468 if (type != WPA_MSG_ONLY_GLOBAL)
4469 hostapd_ctrl_iface_detach(
4473 hostapd_global_ctrl_iface_detach(
4474 hapd->iface->interfaces,
4485 #endif /* CONFIG_NATIVE_WINDOWS */