]> CyberLeo.Net >> Repos - FreeBSD/releng/10.0.git/blob - contrib/wpa/src/ap/vlan_init.c
- Copy stable/10 (r259064) to releng/10.0 as part of the
[FreeBSD/releng/10.0.git] / contrib / wpa / src / ap / vlan_init.c
1 /*
2  * hostapd / VLAN initialization
3  * Copyright 2003, Instant802 Networks, Inc.
4  * Copyright 2005-2006, Devicescape Software, Inc.
5  * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License version 2 as
9  * published by the Free Software Foundation.
10  *
11  * Alternatively, this software may be distributed under the terms of BSD
12  * license.
13  *
14  * See README and COPYING for more details.
15  */
16
17 #include "utils/includes.h"
18
19 #include "utils/common.h"
20 #include "hostapd.h"
21 #include "ap_config.h"
22 #include "ap_drv_ops.h"
23 #include "vlan_init.h"
24 #include "vlan_util.h"
25
26
27 #ifdef CONFIG_FULL_DYNAMIC_VLAN
28
29 #include <net/if.h>
30 #include <sys/ioctl.h>
31 #include <linux/sockios.h>
32 #include <linux/if_vlan.h>
33 #include <linux/if_bridge.h>
34
35 #include "drivers/priv_netlink.h"
36 #include "utils/eloop.h"
37
38
39 struct full_dynamic_vlan {
40         int s; /* socket on which to listen for new/removed interfaces. */
41 };
42
43
44 static int ifconfig_helper(const char *if_name, int up)
45 {
46         int fd;
47         struct ifreq ifr;
48
49         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
50                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
51                            "failed: %s", __func__, strerror(errno));
52                 return -1;
53         }
54
55         os_memset(&ifr, 0, sizeof(ifr));
56         os_strlcpy(ifr.ifr_name, if_name, IFNAMSIZ);
57
58         if (ioctl(fd, SIOCGIFFLAGS, &ifr) != 0) {
59                 wpa_printf(MSG_ERROR, "VLAN: %s: ioctl(SIOCGIFFLAGS) failed "
60                            "for interface %s: %s",
61                            __func__, if_name, strerror(errno));
62                 close(fd);
63                 return -1;
64         }
65
66         if (up)
67                 ifr.ifr_flags |= IFF_UP;
68         else
69                 ifr.ifr_flags &= ~IFF_UP;
70
71         if (ioctl(fd, SIOCSIFFLAGS, &ifr) != 0) {
72                 wpa_printf(MSG_ERROR, "VLAN: %s: ioctl(SIOCSIFFLAGS) failed "
73                            "for interface %s (up=%d): %s",
74                            __func__, if_name, up, strerror(errno));
75                 close(fd);
76                 return -1;
77         }
78
79         close(fd);
80         return 0;
81 }
82
83
84 static int ifconfig_up(const char *if_name)
85 {
86         wpa_printf(MSG_DEBUG, "VLAN: Set interface %s up", if_name);
87         return ifconfig_helper(if_name, 1);
88 }
89
90
91 static int ifconfig_down(const char *if_name)
92 {
93         wpa_printf(MSG_DEBUG, "VLAN: Set interface %s down", if_name);
94         return ifconfig_helper(if_name, 0);
95 }
96
97
98 /*
99  * These are only available in recent linux headers (without the leading
100  * underscore).
101  */
102 #define _GET_VLAN_REALDEV_NAME_CMD      8
103 #define _GET_VLAN_VID_CMD               9
104
105 /* This value should be 256 ONLY. If it is something else, then hostapd
106  * might crash!, as this value has been hard-coded in 2.4.x kernel
107  * bridging code.
108  */
109 #define MAX_BR_PORTS                    256
110
111 static int br_delif(const char *br_name, const char *if_name)
112 {
113         int fd;
114         struct ifreq ifr;
115         unsigned long args[2];
116         int if_index;
117
118         wpa_printf(MSG_DEBUG, "VLAN: br_delif(%s, %s)", br_name, if_name);
119         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
120                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
121                            "failed: %s", __func__, strerror(errno));
122                 return -1;
123         }
124
125         if_index = if_nametoindex(if_name);
126
127         if (if_index == 0) {
128                 wpa_printf(MSG_ERROR, "VLAN: %s: Failure determining "
129                            "interface index for '%s'",
130                            __func__, if_name);
131                 close(fd);
132                 return -1;
133         }
134
135         args[0] = BRCTL_DEL_IF;
136         args[1] = if_index;
137
138         os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
139         ifr.ifr_data = (__caddr_t) args;
140
141         if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0 && errno != EINVAL) {
142                 /* No error if interface already removed. */
143                 wpa_printf(MSG_ERROR, "VLAN: %s: ioctl[SIOCDEVPRIVATE,"
144                            "BRCTL_DEL_IF] failed for br_name=%s if_name=%s: "
145                            "%s", __func__, br_name, if_name, strerror(errno));
146                 close(fd);
147                 return -1;
148         }
149
150         close(fd);
151         return 0;
152 }
153
154
155 /*
156         Add interface 'if_name' to the bridge 'br_name'
157
158         returns -1 on error
159         returns 1 if the interface is already part of the bridge
160         returns 0 otherwise
161 */
162 static int br_addif(const char *br_name, const char *if_name)
163 {
164         int fd;
165         struct ifreq ifr;
166         unsigned long args[2];
167         int if_index;
168
169         wpa_printf(MSG_DEBUG, "VLAN: br_addif(%s, %s)", br_name, if_name);
170         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
171                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
172                            "failed: %s", __func__, strerror(errno));
173                 return -1;
174         }
175
176         if_index = if_nametoindex(if_name);
177
178         if (if_index == 0) {
179                 wpa_printf(MSG_ERROR, "VLAN: %s: Failure determining "
180                            "interface index for '%s'",
181                            __func__, if_name);
182                 close(fd);
183                 return -1;
184         }
185
186         args[0] = BRCTL_ADD_IF;
187         args[1] = if_index;
188
189         os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
190         ifr.ifr_data = (__caddr_t) args;
191
192         if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
193                 if (errno == EBUSY) {
194                         /* The interface is already added. */
195                         close(fd);
196                         return 1;
197                 }
198
199                 wpa_printf(MSG_ERROR, "VLAN: %s: ioctl[SIOCDEVPRIVATE,"
200                            "BRCTL_ADD_IF] failed for br_name=%s if_name=%s: "
201                            "%s", __func__, br_name, if_name, strerror(errno));
202                 close(fd);
203                 return -1;
204         }
205
206         close(fd);
207         return 0;
208 }
209
210
211 static int br_delbr(const char *br_name)
212 {
213         int fd;
214         unsigned long arg[2];
215
216         wpa_printf(MSG_DEBUG, "VLAN: br_delbr(%s)", br_name);
217         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
218                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
219                            "failed: %s", __func__, strerror(errno));
220                 return -1;
221         }
222
223         arg[0] = BRCTL_DEL_BRIDGE;
224         arg[1] = (unsigned long) br_name;
225
226         if (ioctl(fd, SIOCGIFBR, arg) < 0 && errno != ENXIO) {
227                 /* No error if bridge already removed. */
228                 wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_DEL_BRIDGE failed for "
229                            "%s: %s", __func__, br_name, strerror(errno));
230                 close(fd);
231                 return -1;
232         }
233
234         close(fd);
235         return 0;
236 }
237
238
239 /*
240         Add a bridge with the name 'br_name'.
241
242         returns -1 on error
243         returns 1 if the bridge already exists
244         returns 0 otherwise
245 */
246 static int br_addbr(const char *br_name)
247 {
248         int fd;
249         unsigned long arg[4];
250         struct ifreq ifr;
251
252         wpa_printf(MSG_DEBUG, "VLAN: br_addbr(%s)", br_name);
253         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
254                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
255                            "failed: %s", __func__, strerror(errno));
256                 return -1;
257         }
258
259         arg[0] = BRCTL_ADD_BRIDGE;
260         arg[1] = (unsigned long) br_name;
261
262         if (ioctl(fd, SIOCGIFBR, arg) < 0) {
263                 if (errno == EEXIST) {
264                         /* The bridge is already added. */
265                         close(fd);
266                         return 1;
267                 } else {
268                         wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_ADD_BRIDGE "
269                                    "failed for %s: %s",
270                                    __func__, br_name, strerror(errno));
271                         close(fd);
272                         return -1;
273                 }
274         }
275
276         /* Decrease forwarding delay to avoid EAPOL timeouts. */
277         os_memset(&ifr, 0, sizeof(ifr));
278         os_strlcpy(ifr.ifr_name, br_name, IFNAMSIZ);
279         arg[0] = BRCTL_SET_BRIDGE_FORWARD_DELAY;
280         arg[1] = 1;
281         arg[2] = 0;
282         arg[3] = 0;
283         ifr.ifr_data = (char *) &arg;
284         if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
285                 wpa_printf(MSG_ERROR, "VLAN: %s: "
286                            "BRCTL_SET_BRIDGE_FORWARD_DELAY (1 sec) failed for "
287                            "%s: %s", __func__, br_name, strerror(errno));
288                 /* Continue anyway */
289         }
290
291         close(fd);
292         return 0;
293 }
294
295
296 static int br_getnumports(const char *br_name)
297 {
298         int fd;
299         int i;
300         int port_cnt = 0;
301         unsigned long arg[4];
302         int ifindices[MAX_BR_PORTS];
303         struct ifreq ifr;
304
305         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
306                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
307                            "failed: %s", __func__, strerror(errno));
308                 return -1;
309         }
310
311         arg[0] = BRCTL_GET_PORT_LIST;
312         arg[1] = (unsigned long) ifindices;
313         arg[2] = MAX_BR_PORTS;
314         arg[3] = 0;
315
316         os_memset(ifindices, 0, sizeof(ifindices));
317         os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
318         ifr.ifr_data = (__caddr_t) arg;
319
320         if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
321                 wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_GET_PORT_LIST "
322                            "failed for %s: %s",
323                            __func__, br_name, strerror(errno));
324                 close(fd);
325                 return -1;
326         }
327
328         for (i = 1; i < MAX_BR_PORTS; i++) {
329                 if (ifindices[i] > 0) {
330                         port_cnt++;
331                 }
332         }
333
334         close(fd);
335         return port_cnt;
336 }
337
338
339 #ifndef CONFIG_VLAN_NETLINK
340
341 int vlan_rem(const char *if_name)
342 {
343         int fd;
344         struct vlan_ioctl_args if_request;
345
346         wpa_printf(MSG_DEBUG, "VLAN: vlan_rem(%s)", if_name);
347         if ((os_strlen(if_name) + 1) > sizeof(if_request.device1)) {
348                 wpa_printf(MSG_ERROR, "VLAN: Interface name too long: '%s'",
349                            if_name);
350                 return -1;
351         }
352
353         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
354                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
355                            "failed: %s", __func__, strerror(errno));
356                 return -1;
357         }
358
359         os_memset(&if_request, 0, sizeof(if_request));
360
361         os_strlcpy(if_request.device1, if_name, sizeof(if_request.device1));
362         if_request.cmd = DEL_VLAN_CMD;
363
364         if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
365                 wpa_printf(MSG_ERROR, "VLAN: %s: DEL_VLAN_CMD failed for %s: "
366                            "%s", __func__, if_name, strerror(errno));
367                 close(fd);
368                 return -1;
369         }
370
371         close(fd);
372         return 0;
373 }
374
375
376 /*
377         Add a vlan interface with VLAN ID 'vid' and tagged interface
378         'if_name'.
379
380         returns -1 on error
381         returns 1 if the interface already exists
382         returns 0 otherwise
383 */
384 int vlan_add(const char *if_name, int vid, const char *vlan_if_name)
385 {
386         int fd;
387         struct vlan_ioctl_args if_request;
388
389         wpa_printf(MSG_DEBUG, "VLAN: vlan_add(if_name=%s, vid=%d)",
390                    if_name, vid);
391         ifconfig_up(if_name);
392
393         if ((os_strlen(if_name) + 1) > sizeof(if_request.device1)) {
394                 wpa_printf(MSG_ERROR, "VLAN: Interface name too long: '%s'",
395                            if_name);
396                 return -1;
397         }
398
399         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
400                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
401                            "failed: %s", __func__, strerror(errno));
402                 return -1;
403         }
404
405         os_memset(&if_request, 0, sizeof(if_request));
406
407         /* Determine if a suitable vlan device already exists. */
408
409         os_snprintf(if_request.device1, sizeof(if_request.device1), "vlan%d",
410                     vid);
411
412         if_request.cmd = _GET_VLAN_VID_CMD;
413
414         if (ioctl(fd, SIOCSIFVLAN, &if_request) == 0) {
415
416                 if (if_request.u.VID == vid) {
417                         if_request.cmd = _GET_VLAN_REALDEV_NAME_CMD;
418
419                         if (ioctl(fd, SIOCSIFVLAN, &if_request) == 0 &&
420                             os_strncmp(if_request.u.device2, if_name,
421                                        sizeof(if_request.u.device2)) == 0) {
422                                 close(fd);
423                                 wpa_printf(MSG_DEBUG, "VLAN: vlan_add: "
424                                            "if_name %s exists already",
425                                            if_request.device1);
426                                 return 1;
427                         }
428                 }
429         }
430
431         /* A suitable vlan device does not already exist, add one. */
432
433         os_memset(&if_request, 0, sizeof(if_request));
434         os_strlcpy(if_request.device1, if_name, sizeof(if_request.device1));
435         if_request.u.VID = vid;
436         if_request.cmd = ADD_VLAN_CMD;
437
438         if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
439                 wpa_printf(MSG_ERROR, "VLAN: %s: ADD_VLAN_CMD failed for %s: "
440                            "%s",
441                            __func__, if_request.device1, strerror(errno));
442                 close(fd);
443                 return -1;
444         }
445
446         close(fd);
447         return 0;
448 }
449
450
451 static int vlan_set_name_type(unsigned int name_type)
452 {
453         int fd;
454         struct vlan_ioctl_args if_request;
455
456         wpa_printf(MSG_DEBUG, "VLAN: vlan_set_name_type(name_type=%u)",
457                    name_type);
458         if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
459                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
460                            "failed: %s", __func__, strerror(errno));
461                 return -1;
462         }
463
464         os_memset(&if_request, 0, sizeof(if_request));
465
466         if_request.u.name_type = name_type;
467         if_request.cmd = SET_VLAN_NAME_TYPE_CMD;
468         if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
469                 wpa_printf(MSG_ERROR, "VLAN: %s: SET_VLAN_NAME_TYPE_CMD "
470                            "name_type=%u failed: %s",
471                            __func__, name_type, strerror(errno));
472                 close(fd);
473                 return -1;
474         }
475
476         close(fd);
477         return 0;
478 }
479
480 #endif /* CONFIG_VLAN_NETLINK */
481
482
483 static void vlan_newlink(char *ifname, struct hostapd_data *hapd)
484 {
485         char vlan_ifname[IFNAMSIZ];
486         char br_name[IFNAMSIZ];
487         struct hostapd_vlan *vlan = hapd->conf->vlan;
488         char *tagged_interface = hapd->conf->ssid.vlan_tagged_interface;
489         int vlan_naming = hapd->conf->ssid.vlan_naming;
490
491         wpa_printf(MSG_DEBUG, "VLAN: vlan_newlink(%s)", ifname);
492
493         while (vlan) {
494                 if (os_strcmp(ifname, vlan->ifname) == 0) {
495
496                         os_snprintf(br_name, sizeof(br_name), "brvlan%d",
497                                     vlan->vlan_id);
498
499                         if (!br_addbr(br_name))
500                                 vlan->clean |= DVLAN_CLEAN_BR;
501
502                         ifconfig_up(br_name);
503
504                         if (tagged_interface) {
505                                 if (vlan_naming ==
506                                     DYNAMIC_VLAN_NAMING_WITH_DEVICE)
507                                         os_snprintf(vlan_ifname,
508                                                     sizeof(vlan_ifname),
509                                                     "%s.%d", tagged_interface,
510                                                     vlan->vlan_id);
511                                 else
512                                         os_snprintf(vlan_ifname,
513                                                     sizeof(vlan_ifname),
514                                                     "vlan%d", vlan->vlan_id);
515
516                                 ifconfig_up(tagged_interface);
517                                 if (!vlan_add(tagged_interface, vlan->vlan_id,
518                                               vlan_ifname))
519                                         vlan->clean |= DVLAN_CLEAN_VLAN;
520
521                                 if (!br_addif(br_name, vlan_ifname))
522                                         vlan->clean |= DVLAN_CLEAN_VLAN_PORT;
523
524                                 ifconfig_up(vlan_ifname);
525                         }
526
527                         if (!br_addif(br_name, ifname))
528                                 vlan->clean |= DVLAN_CLEAN_WLAN_PORT;
529
530                         ifconfig_up(ifname);
531
532                         break;
533                 }
534                 vlan = vlan->next;
535         }
536 }
537
538
539 static void vlan_dellink(char *ifname, struct hostapd_data *hapd)
540 {
541         char vlan_ifname[IFNAMSIZ];
542         char br_name[IFNAMSIZ];
543         struct hostapd_vlan *first, *prev, *vlan = hapd->conf->vlan;
544         char *tagged_interface = hapd->conf->ssid.vlan_tagged_interface;
545         int vlan_naming = hapd->conf->ssid.vlan_naming;
546
547         wpa_printf(MSG_DEBUG, "VLAN: vlan_dellink(%s)", ifname);
548
549         first = prev = vlan;
550
551         while (vlan) {
552                 if (os_strcmp(ifname, vlan->ifname) == 0) {
553                         os_snprintf(br_name, sizeof(br_name), "brvlan%d",
554                                     vlan->vlan_id);
555
556                         if (vlan->clean & DVLAN_CLEAN_WLAN_PORT)
557                                 br_delif(br_name, vlan->ifname);
558
559                         if (tagged_interface) {
560                                 if (vlan_naming ==
561                                     DYNAMIC_VLAN_NAMING_WITH_DEVICE)
562                                         os_snprintf(vlan_ifname,
563                                                     sizeof(vlan_ifname),
564                                                     "%s.%d", tagged_interface,
565                                                     vlan->vlan_id);
566                                 else
567                                         os_snprintf(vlan_ifname,
568                                                     sizeof(vlan_ifname),
569                                                     "vlan%d", vlan->vlan_id);
570                                 if (vlan->clean & DVLAN_CLEAN_VLAN_PORT)
571                                         br_delif(br_name, vlan_ifname);
572                                 ifconfig_down(vlan_ifname);
573
574                                 if (vlan->clean & DVLAN_CLEAN_VLAN)
575                                         vlan_rem(vlan_ifname);
576                         }
577
578                         if ((vlan->clean & DVLAN_CLEAN_BR) &&
579                             br_getnumports(br_name) == 0) {
580                                 ifconfig_down(br_name);
581                                 br_delbr(br_name);
582                         }
583
584                         if (vlan == first) {
585                                 hapd->conf->vlan = vlan->next;
586                         } else {
587                                 prev->next = vlan->next;
588                         }
589                         os_free(vlan);
590
591                         break;
592                 }
593                 prev = vlan;
594                 vlan = vlan->next;
595         }
596 }
597
598
599 static void
600 vlan_read_ifnames(struct nlmsghdr *h, size_t len, int del,
601                   struct hostapd_data *hapd)
602 {
603         struct ifinfomsg *ifi;
604         int attrlen, nlmsg_len, rta_len;
605         struct rtattr *attr;
606
607         if (len < sizeof(*ifi))
608                 return;
609
610         ifi = NLMSG_DATA(h);
611
612         nlmsg_len = NLMSG_ALIGN(sizeof(struct ifinfomsg));
613
614         attrlen = h->nlmsg_len - nlmsg_len;
615         if (attrlen < 0)
616                 return;
617
618         attr = (struct rtattr *) (((char *) ifi) + nlmsg_len);
619
620         rta_len = RTA_ALIGN(sizeof(struct rtattr));
621         while (RTA_OK(attr, attrlen)) {
622                 char ifname[IFNAMSIZ + 1];
623
624                 if (attr->rta_type == IFLA_IFNAME) {
625                         int n = attr->rta_len - rta_len;
626                         if (n < 0)
627                                 break;
628
629                         os_memset(ifname, 0, sizeof(ifname));
630
631                         if ((size_t) n > sizeof(ifname))
632                                 n = sizeof(ifname);
633                         os_memcpy(ifname, ((char *) attr) + rta_len, n);
634
635                         if (del)
636                                 vlan_dellink(ifname, hapd);
637                         else
638                                 vlan_newlink(ifname, hapd);
639                 }
640
641                 attr = RTA_NEXT(attr, attrlen);
642         }
643 }
644
645
646 static void vlan_event_receive(int sock, void *eloop_ctx, void *sock_ctx)
647 {
648         char buf[8192];
649         int left;
650         struct sockaddr_nl from;
651         socklen_t fromlen;
652         struct nlmsghdr *h;
653         struct hostapd_data *hapd = eloop_ctx;
654
655         fromlen = sizeof(from);
656         left = recvfrom(sock, buf, sizeof(buf), MSG_DONTWAIT,
657                         (struct sockaddr *) &from, &fromlen);
658         if (left < 0) {
659                 if (errno != EINTR && errno != EAGAIN)
660                         wpa_printf(MSG_ERROR, "VLAN: %s: recvfrom failed: %s",
661                                    __func__, strerror(errno));
662                 return;
663         }
664
665         h = (struct nlmsghdr *) buf;
666         while (left >= (int) sizeof(*h)) {
667                 int len, plen;
668
669                 len = h->nlmsg_len;
670                 plen = len - sizeof(*h);
671                 if (len > left || plen < 0) {
672                         wpa_printf(MSG_DEBUG, "VLAN: Malformed netlink "
673                                    "message: len=%d left=%d plen=%d",
674                                    len, left, plen);
675                         break;
676                 }
677
678                 switch (h->nlmsg_type) {
679                 case RTM_NEWLINK:
680                         vlan_read_ifnames(h, plen, 0, hapd);
681                         break;
682                 case RTM_DELLINK:
683                         vlan_read_ifnames(h, plen, 1, hapd);
684                         break;
685                 }
686
687                 len = NLMSG_ALIGN(len);
688                 left -= len;
689                 h = (struct nlmsghdr *) ((char *) h + len);
690         }
691
692         if (left > 0) {
693                 wpa_printf(MSG_DEBUG, "VLAN: %s: %d extra bytes in the end of "
694                            "netlink message", __func__, left);
695         }
696 }
697
698
699 static struct full_dynamic_vlan *
700 full_dynamic_vlan_init(struct hostapd_data *hapd)
701 {
702         struct sockaddr_nl local;
703         struct full_dynamic_vlan *priv;
704
705         priv = os_zalloc(sizeof(*priv));
706         if (priv == NULL)
707                 return NULL;
708
709 #ifndef CONFIG_VLAN_NETLINK
710         vlan_set_name_type(hapd->conf->ssid.vlan_naming ==
711                            DYNAMIC_VLAN_NAMING_WITH_DEVICE ?
712                            VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD :
713                            VLAN_NAME_TYPE_PLUS_VID_NO_PAD);
714 #endif /* CONFIG_VLAN_NETLINK */
715
716         priv->s = socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
717         if (priv->s < 0) {
718                 wpa_printf(MSG_ERROR, "VLAN: %s: socket(PF_NETLINK,SOCK_RAW,"
719                            "NETLINK_ROUTE) failed: %s",
720                            __func__, strerror(errno));
721                 os_free(priv);
722                 return NULL;
723         }
724
725         os_memset(&local, 0, sizeof(local));
726         local.nl_family = AF_NETLINK;
727         local.nl_groups = RTMGRP_LINK;
728         if (bind(priv->s, (struct sockaddr *) &local, sizeof(local)) < 0) {
729                 wpa_printf(MSG_ERROR, "VLAN: %s: bind(netlink) failed: %s",
730                            __func__, strerror(errno));
731                 close(priv->s);
732                 os_free(priv);
733                 return NULL;
734         }
735
736         if (eloop_register_read_sock(priv->s, vlan_event_receive, hapd, NULL))
737         {
738                 close(priv->s);
739                 os_free(priv);
740                 return NULL;
741         }
742
743         return priv;
744 }
745
746
747 static void full_dynamic_vlan_deinit(struct full_dynamic_vlan *priv)
748 {
749         if (priv == NULL)
750                 return;
751         eloop_unregister_read_sock(priv->s);
752         close(priv->s);
753         os_free(priv);
754 }
755 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
756
757
758 int vlan_setup_encryption_dyn(struct hostapd_data *hapd,
759                               struct hostapd_ssid *mssid, const char *dyn_vlan)
760 {
761         int i;
762
763         if (dyn_vlan == NULL)
764                 return 0;
765
766         /* Static WEP keys are set here; IEEE 802.1X and WPA uses their own
767          * functions for setting up dynamic broadcast keys. */
768         for (i = 0; i < 4; i++) {
769                 if (mssid->wep.key[i] &&
770                     hostapd_drv_set_key(dyn_vlan, hapd, WPA_ALG_WEP, NULL, i,
771                                         i == mssid->wep.idx, NULL, 0,
772                                         mssid->wep.key[i], mssid->wep.len[i]))
773                 {
774                         wpa_printf(MSG_ERROR, "VLAN: Could not set WEP "
775                                    "encryption for dynamic VLAN");
776                         return -1;
777                 }
778         }
779
780         return 0;
781 }
782
783
784 static int vlan_dynamic_add(struct hostapd_data *hapd,
785                             struct hostapd_vlan *vlan)
786 {
787         while (vlan) {
788                 if (vlan->vlan_id != VLAN_ID_WILDCARD) {
789                         if (hostapd_vlan_if_add(hapd, vlan->ifname)) {
790                                 if (errno != EEXIST) {
791                                         wpa_printf(MSG_ERROR, "VLAN: Could "
792                                                    "not add VLAN %s: %s",
793                                                    vlan->ifname,
794                                                    strerror(errno));
795                                         return -1;
796                                 }
797                         }
798 #ifdef CONFIG_FULL_DYNAMIC_VLAN
799                         ifconfig_up(vlan->ifname);
800 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
801                 }
802
803                 vlan = vlan->next;
804         }
805
806         return 0;
807 }
808
809
810 static void vlan_dynamic_remove(struct hostapd_data *hapd,
811                                 struct hostapd_vlan *vlan)
812 {
813         struct hostapd_vlan *next;
814
815         while (vlan) {
816                 next = vlan->next;
817
818                 if (vlan->vlan_id != VLAN_ID_WILDCARD &&
819                     hostapd_vlan_if_remove(hapd, vlan->ifname)) {
820                         wpa_printf(MSG_ERROR, "VLAN: Could not remove VLAN "
821                                    "iface: %s: %s",
822                                    vlan->ifname, strerror(errno));
823                 }
824 #ifdef CONFIG_FULL_DYNAMIC_VLAN
825                 if (vlan->clean)
826                         vlan_dellink(vlan->ifname, hapd);
827 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
828
829                 vlan = next;
830         }
831 }
832
833
834 int vlan_init(struct hostapd_data *hapd)
835 {
836 #ifdef CONFIG_FULL_DYNAMIC_VLAN
837         hapd->full_dynamic_vlan = full_dynamic_vlan_init(hapd);
838 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
839
840         if (vlan_dynamic_add(hapd, hapd->conf->vlan))
841                 return -1;
842
843         return 0;
844 }
845
846
847 void vlan_deinit(struct hostapd_data *hapd)
848 {
849         vlan_dynamic_remove(hapd, hapd->conf->vlan);
850
851 #ifdef CONFIG_FULL_DYNAMIC_VLAN
852         full_dynamic_vlan_deinit(hapd->full_dynamic_vlan);
853 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
854 }
855
856
857 struct hostapd_vlan * vlan_add_dynamic(struct hostapd_data *hapd,
858                                        struct hostapd_vlan *vlan,
859                                        int vlan_id)
860 {
861         struct hostapd_vlan *n;
862         char *ifname, *pos;
863
864         if (vlan == NULL || vlan_id <= 0 || vlan_id > MAX_VLAN_ID ||
865             vlan->vlan_id != VLAN_ID_WILDCARD)
866                 return NULL;
867
868         wpa_printf(MSG_DEBUG, "VLAN: %s(vlan_id=%d ifname=%s)",
869                    __func__, vlan_id, vlan->ifname);
870         ifname = os_strdup(vlan->ifname);
871         if (ifname == NULL)
872                 return NULL;
873         pos = os_strchr(ifname, '#');
874         if (pos == NULL) {
875                 os_free(ifname);
876                 return NULL;
877         }
878         *pos++ = '\0';
879
880         n = os_zalloc(sizeof(*n));
881         if (n == NULL) {
882                 os_free(ifname);
883                 return NULL;
884         }
885
886         n->vlan_id = vlan_id;
887         n->dynamic_vlan = 1;
888
889         os_snprintf(n->ifname, sizeof(n->ifname), "%s%d%s", ifname, vlan_id,
890                     pos);
891         os_free(ifname);
892
893         if (hostapd_vlan_if_add(hapd, n->ifname)) {
894                 os_free(n);
895                 return NULL;
896         }
897
898         n->next = hapd->conf->vlan;
899         hapd->conf->vlan = n;
900
901 #ifdef CONFIG_FULL_DYNAMIC_VLAN
902         ifconfig_up(n->ifname);
903 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
904
905         return n;
906 }
907
908
909 int vlan_remove_dynamic(struct hostapd_data *hapd, int vlan_id)
910 {
911         struct hostapd_vlan *vlan;
912
913         if (vlan_id <= 0 || vlan_id > MAX_VLAN_ID)
914                 return 1;
915
916         wpa_printf(MSG_DEBUG, "VLAN: %s(vlan_id=%d)", __func__, vlan_id);
917
918         vlan = hapd->conf->vlan;
919         while (vlan) {
920                 if (vlan->vlan_id == vlan_id && vlan->dynamic_vlan > 0) {
921                         vlan->dynamic_vlan--;
922                         break;
923                 }
924                 vlan = vlan->next;
925         }
926
927         if (vlan == NULL)
928                 return 1;
929
930         if (vlan->dynamic_vlan == 0)
931                 hostapd_vlan_if_remove(hapd, vlan->ifname);
932
933         return 0;
934 }