p2p.c revision 96be6222df414a7dde5c5b1b72df22e67b1a77fc
1/*
2 * Wi-Fi Direct - P2P module
3 * Copyright (c) 2009-2010, Atheros Communications
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9#include "includes.h"
10
11#include "common.h"
12#include "eloop.h"
13#include "common/ieee802_11_defs.h"
14#include "common/ieee802_11_common.h"
15#include "wps/wps_i.h"
16#include "p2p_i.h"
17#include "p2p.h"
18
19
20static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx);
21static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev);
22static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
23				     const u8 *sa, const u8 *data, size_t len,
24				     int rx_freq);
25static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
26				      const u8 *sa, const u8 *data,
27				      size_t len);
28static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx);
29static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx);
30
31
32/*
33 * p2p_scan recovery timeout
34 *
35 * Many drivers are using 30 second timeout on scan results. Allow a bit larger
36 * timeout for this to avoid hitting P2P timeout unnecessarily.
37 */
38#define P2P_SCAN_TIMEOUT 35
39
40/**
41 * P2P_PEER_EXPIRATION_AGE - Number of seconds after which inactive peer
42 * entries will be removed
43 */
44#ifndef P2P_PEER_EXPIRATION_AGE
45#define P2P_PEER_EXPIRATION_AGE 60
46#endif /* P2P_PEER_EXPIRATION_AGE */
47
48#define P2P_PEER_EXPIRATION_INTERVAL (P2P_PEER_EXPIRATION_AGE / 2)
49
50static void p2p_expire_peers(struct p2p_data *p2p)
51{
52	struct p2p_device *dev, *n;
53	struct os_reltime now;
54	size_t i;
55
56	os_get_reltime(&now);
57	dl_list_for_each_safe(dev, n, &p2p->devices, struct p2p_device, list) {
58		if (dev->last_seen.sec + P2P_PEER_EXPIRATION_AGE >= now.sec)
59			continue;
60
61		if (dev == p2p->go_neg_peer) {
62			/*
63			 * GO Negotiation is in progress with the peer, so
64			 * don't expire the peer entry until GO Negotiation
65			 * fails or times out.
66			 */
67			continue;
68		}
69
70		if (p2p->cfg->go_connected &&
71		    p2p->cfg->go_connected(p2p->cfg->cb_ctx,
72					   dev->info.p2p_device_addr)) {
73			/*
74			 * We are connected as a client to a group in which the
75			 * peer is the GO, so do not expire the peer entry.
76			 */
77			os_get_reltime(&dev->last_seen);
78			continue;
79		}
80
81		for (i = 0; i < p2p->num_groups; i++) {
82			if (p2p_group_is_client_connected(
83				    p2p->groups[i], dev->info.p2p_device_addr))
84				break;
85		}
86		if (i < p2p->num_groups) {
87			/*
88			 * The peer is connected as a client in a group where
89			 * we are the GO, so do not expire the peer entry.
90			 */
91			os_get_reltime(&dev->last_seen);
92			continue;
93		}
94
95		p2p_dbg(p2p, "Expiring old peer entry " MACSTR,
96			MAC2STR(dev->info.p2p_device_addr));
97		dl_list_del(&dev->list);
98		p2p_device_free(p2p, dev);
99	}
100}
101
102
103static void p2p_expiration_timeout(void *eloop_ctx, void *timeout_ctx)
104{
105	struct p2p_data *p2p = eloop_ctx;
106	p2p_expire_peers(p2p);
107	eloop_register_timeout(P2P_PEER_EXPIRATION_INTERVAL, 0,
108			       p2p_expiration_timeout, p2p, NULL);
109}
110
111
112static const char * p2p_state_txt(int state)
113{
114	switch (state) {
115	case P2P_IDLE:
116		return "IDLE";
117	case P2P_SEARCH:
118		return "SEARCH";
119	case P2P_CONNECT:
120		return "CONNECT";
121	case P2P_CONNECT_LISTEN:
122		return "CONNECT_LISTEN";
123	case P2P_GO_NEG:
124		return "GO_NEG";
125	case P2P_LISTEN_ONLY:
126		return "LISTEN_ONLY";
127	case P2P_WAIT_PEER_CONNECT:
128		return "WAIT_PEER_CONNECT";
129	case P2P_WAIT_PEER_IDLE:
130		return "WAIT_PEER_IDLE";
131	case P2P_SD_DURING_FIND:
132		return "SD_DURING_FIND";
133	case P2P_PROVISIONING:
134		return "PROVISIONING";
135	case P2P_PD_DURING_FIND:
136		return "PD_DURING_FIND";
137	case P2P_INVITE:
138		return "INVITE";
139	case P2P_INVITE_LISTEN:
140		return "INVITE_LISTEN";
141	default:
142		return "?";
143	}
144}
145
146
147const char * p2p_get_state_txt(struct p2p_data *p2p)
148{
149	return p2p_state_txt(p2p->state);
150}
151
152
153u16 p2p_get_provisioning_info(struct p2p_data *p2p, const u8 *addr)
154{
155	struct p2p_device *dev = NULL;
156
157	if (!addr || !p2p)
158		return 0;
159
160	dev = p2p_get_device(p2p, addr);
161	if (dev)
162		return dev->wps_prov_info;
163	else
164		return 0;
165}
166
167
168void p2p_clear_provisioning_info(struct p2p_data *p2p, const u8 *addr)
169{
170	struct p2p_device *dev = NULL;
171
172	if (!addr || !p2p)
173		return;
174
175	dev = p2p_get_device(p2p, addr);
176	if (dev)
177		dev->wps_prov_info = 0;
178}
179
180
181void p2p_set_state(struct p2p_data *p2p, int new_state)
182{
183	p2p_dbg(p2p, "State %s -> %s",
184		p2p_state_txt(p2p->state), p2p_state_txt(new_state));
185	p2p->state = new_state;
186}
187
188
189void p2p_set_timeout(struct p2p_data *p2p, unsigned int sec, unsigned int usec)
190{
191	p2p_dbg(p2p, "Set timeout (state=%s): %u.%06u sec",
192		p2p_state_txt(p2p->state), sec, usec);
193	eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
194	eloop_register_timeout(sec, usec, p2p_state_timeout, p2p, NULL);
195}
196
197
198void p2p_clear_timeout(struct p2p_data *p2p)
199{
200	p2p_dbg(p2p, "Clear timeout (state=%s)", p2p_state_txt(p2p->state));
201	eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
202}
203
204
205void p2p_go_neg_failed(struct p2p_data *p2p, struct p2p_device *peer,
206		       int status)
207{
208	struct p2p_go_neg_results res;
209	p2p_clear_timeout(p2p);
210	p2p_set_state(p2p, P2P_IDLE);
211	if (p2p->go_neg_peer) {
212		p2p->go_neg_peer->flags &= ~P2P_DEV_PEER_WAITING_RESPONSE;
213		p2p->go_neg_peer->wps_method = WPS_NOT_READY;
214		p2p->go_neg_peer->oob_pw_id = 0;
215	}
216	p2p->go_neg_peer = NULL;
217
218	os_memset(&res, 0, sizeof(res));
219	res.status = status;
220	if (peer) {
221		os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr,
222			  ETH_ALEN);
223		os_memcpy(res.peer_interface_addr, peer->intended_addr,
224			  ETH_ALEN);
225	}
226	p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
227}
228
229
230static void p2p_listen_in_find(struct p2p_data *p2p, int dev_disc)
231{
232	unsigned int r, tu;
233	int freq;
234	struct wpabuf *ies;
235
236	p2p_dbg(p2p, "Starting short listen state (state=%s)",
237		p2p_state_txt(p2p->state));
238
239	freq = p2p_channel_to_freq(p2p->cfg->reg_class, p2p->cfg->channel);
240	if (freq < 0) {
241		p2p_dbg(p2p, "Unknown regulatory class/channel");
242		return;
243	}
244
245	os_get_random((u8 *) &r, sizeof(r));
246	tu = (r % ((p2p->max_disc_int - p2p->min_disc_int) + 1) +
247	      p2p->min_disc_int) * 100;
248	if (p2p->max_disc_tu >= 0 && tu > (unsigned int) p2p->max_disc_tu)
249		tu = p2p->max_disc_tu;
250	if (!dev_disc && tu < 100)
251		tu = 100; /* Need to wait in non-device discovery use cases */
252	if (p2p->cfg->max_listen && 1024 * tu / 1000 > p2p->cfg->max_listen)
253		tu = p2p->cfg->max_listen * 1000 / 1024;
254
255	if (tu == 0) {
256		p2p_dbg(p2p, "Skip listen state since duration was 0 TU");
257		p2p_set_timeout(p2p, 0, 0);
258		return;
259	}
260
261	p2p->pending_listen_freq = freq;
262	p2p->pending_listen_sec = 0;
263	p2p->pending_listen_usec = 1024 * tu;
264
265	ies = p2p_build_probe_resp_ies(p2p);
266	if (ies == NULL)
267		return;
268
269	if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, 1024 * tu / 1000,
270		    ies) < 0) {
271		p2p_dbg(p2p, "Failed to start listen mode");
272		p2p->pending_listen_freq = 0;
273	}
274	wpabuf_free(ies);
275}
276
277
278int p2p_listen(struct p2p_data *p2p, unsigned int timeout)
279{
280	int freq;
281	struct wpabuf *ies;
282
283	p2p_dbg(p2p, "Going to listen(only) state");
284
285	freq = p2p_channel_to_freq(p2p->cfg->reg_class, p2p->cfg->channel);
286	if (freq < 0) {
287		p2p_dbg(p2p, "Unknown regulatory class/channel");
288		return -1;
289	}
290
291	p2p->pending_listen_freq = freq;
292	p2p->pending_listen_sec = timeout / 1000;
293	p2p->pending_listen_usec = (timeout % 1000) * 1000;
294
295	if (p2p->p2p_scan_running) {
296		if (p2p->start_after_scan == P2P_AFTER_SCAN_CONNECT) {
297			p2p_dbg(p2p, "p2p_scan running - connect is already pending - skip listen");
298			return 0;
299		}
300		p2p_dbg(p2p, "p2p_scan running - delay start of listen state");
301		p2p->start_after_scan = P2P_AFTER_SCAN_LISTEN;
302		return 0;
303	}
304
305	ies = p2p_build_probe_resp_ies(p2p);
306	if (ies == NULL)
307		return -1;
308
309	if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, timeout, ies) < 0) {
310		p2p_dbg(p2p, "Failed to start listen mode");
311		p2p->pending_listen_freq = 0;
312		wpabuf_free(ies);
313		return -1;
314	}
315	wpabuf_free(ies);
316
317	p2p_set_state(p2p, P2P_LISTEN_ONLY);
318
319	return 0;
320}
321
322
323static void p2p_device_clear_reported(struct p2p_data *p2p)
324{
325	struct p2p_device *dev;
326	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list)
327		dev->flags &= ~P2P_DEV_REPORTED;
328}
329
330
331/**
332 * p2p_get_device - Fetch a peer entry
333 * @p2p: P2P module context from p2p_init()
334 * @addr: P2P Device Address of the peer
335 * Returns: Pointer to the device entry or %NULL if not found
336 */
337struct p2p_device * p2p_get_device(struct p2p_data *p2p, const u8 *addr)
338{
339	struct p2p_device *dev;
340	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
341		if (os_memcmp(dev->info.p2p_device_addr, addr, ETH_ALEN) == 0)
342			return dev;
343	}
344	return NULL;
345}
346
347
348/**
349 * p2p_get_device_interface - Fetch a peer entry based on P2P Interface Address
350 * @p2p: P2P module context from p2p_init()
351 * @addr: P2P Interface Address of the peer
352 * Returns: Pointer to the device entry or %NULL if not found
353 */
354struct p2p_device * p2p_get_device_interface(struct p2p_data *p2p,
355					     const u8 *addr)
356{
357	struct p2p_device *dev;
358	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
359		if (os_memcmp(dev->interface_addr, addr, ETH_ALEN) == 0)
360			return dev;
361	}
362	return NULL;
363}
364
365
366/**
367 * p2p_create_device - Create a peer entry
368 * @p2p: P2P module context from p2p_init()
369 * @addr: P2P Device Address of the peer
370 * Returns: Pointer to the device entry or %NULL on failure
371 *
372 * If there is already an entry for the peer, it will be returned instead of
373 * creating a new one.
374 */
375static struct p2p_device * p2p_create_device(struct p2p_data *p2p,
376					     const u8 *addr)
377{
378	struct p2p_device *dev, *oldest = NULL;
379	size_t count = 0;
380
381	dev = p2p_get_device(p2p, addr);
382	if (dev)
383		return dev;
384
385	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
386		count++;
387		if (oldest == NULL ||
388		    os_reltime_before(&dev->last_seen, &oldest->last_seen))
389			oldest = dev;
390	}
391	if (count + 1 > p2p->cfg->max_peers && oldest) {
392		p2p_dbg(p2p, "Remove oldest peer entry to make room for a new peer");
393		dl_list_del(&oldest->list);
394		p2p_device_free(p2p, oldest);
395	}
396
397	dev = os_zalloc(sizeof(*dev));
398	if (dev == NULL)
399		return NULL;
400	dl_list_add(&p2p->devices, &dev->list);
401	os_memcpy(dev->info.p2p_device_addr, addr, ETH_ALEN);
402
403	return dev;
404}
405
406
407static void p2p_copy_client_info(struct p2p_device *dev,
408				 struct p2p_client_info *cli)
409{
410	os_memcpy(dev->info.device_name, cli->dev_name, cli->dev_name_len);
411	dev->info.device_name[cli->dev_name_len] = '\0';
412	dev->info.dev_capab = cli->dev_capab;
413	dev->info.config_methods = cli->config_methods;
414	os_memcpy(dev->info.pri_dev_type, cli->pri_dev_type, 8);
415	dev->info.wps_sec_dev_type_list_len = 8 * cli->num_sec_dev_types;
416	os_memcpy(dev->info.wps_sec_dev_type_list, cli->sec_dev_types,
417		  dev->info.wps_sec_dev_type_list_len);
418}
419
420
421static int p2p_add_group_clients(struct p2p_data *p2p, const u8 *go_dev_addr,
422				 const u8 *go_interface_addr, int freq,
423				 const u8 *gi, size_t gi_len)
424{
425	struct p2p_group_info info;
426	size_t c;
427	struct p2p_device *dev;
428
429	if (gi == NULL)
430		return 0;
431
432	if (p2p_group_info_parse(gi, gi_len, &info) < 0)
433		return -1;
434
435	/*
436	 * Clear old data for this group; if the devices are still in the
437	 * group, the information will be restored in the loop following this.
438	 */
439	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
440		if (os_memcmp(dev->member_in_go_iface, go_interface_addr,
441			      ETH_ALEN) == 0) {
442			os_memset(dev->member_in_go_iface, 0, ETH_ALEN);
443			os_memset(dev->member_in_go_dev, 0, ETH_ALEN);
444		}
445	}
446
447	for (c = 0; c < info.num_clients; c++) {
448		struct p2p_client_info *cli = &info.client[c];
449		if (os_memcmp(cli->p2p_device_addr, p2p->cfg->dev_addr,
450			      ETH_ALEN) == 0)
451			continue; /* ignore our own entry */
452		dev = p2p_get_device(p2p, cli->p2p_device_addr);
453		if (dev) {
454			if (dev->flags & (P2P_DEV_GROUP_CLIENT_ONLY |
455					  P2P_DEV_PROBE_REQ_ONLY)) {
456				/*
457				 * Update information since we have not
458				 * received this directly from the client.
459				 */
460				p2p_copy_client_info(dev, cli);
461			} else {
462				/*
463				 * Need to update P2P Client Discoverability
464				 * flag since it is valid only in P2P Group
465				 * Info attribute.
466				 */
467				dev->info.dev_capab &=
468					~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
469				dev->info.dev_capab |=
470					cli->dev_capab &
471					P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
472			}
473			if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
474				dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
475			}
476		} else {
477			dev = p2p_create_device(p2p, cli->p2p_device_addr);
478			if (dev == NULL)
479				continue;
480			dev->flags |= P2P_DEV_GROUP_CLIENT_ONLY;
481			p2p_copy_client_info(dev, cli);
482			dev->oper_freq = freq;
483			p2p->cfg->dev_found(p2p->cfg->cb_ctx,
484					    dev->info.p2p_device_addr,
485					    &dev->info, 1);
486			dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
487		}
488
489		os_memcpy(dev->interface_addr, cli->p2p_interface_addr,
490			  ETH_ALEN);
491		os_get_reltime(&dev->last_seen);
492		os_memcpy(dev->member_in_go_dev, go_dev_addr, ETH_ALEN);
493		os_memcpy(dev->member_in_go_iface, go_interface_addr,
494			  ETH_ALEN);
495	}
496
497	return 0;
498}
499
500
501static void p2p_copy_wps_info(struct p2p_data *p2p, struct p2p_device *dev,
502			      int probe_req, const struct p2p_message *msg)
503{
504	os_memcpy(dev->info.device_name, msg->device_name,
505		  sizeof(dev->info.device_name));
506
507	if (msg->manufacturer &&
508	    msg->manufacturer_len < sizeof(dev->info.manufacturer)) {
509		os_memset(dev->info.manufacturer, 0,
510			  sizeof(dev->info.manufacturer));
511		os_memcpy(dev->info.manufacturer, msg->manufacturer,
512			  msg->manufacturer_len);
513	}
514
515	if (msg->model_name &&
516	    msg->model_name_len < sizeof(dev->info.model_name)) {
517		os_memset(dev->info.model_name, 0,
518			  sizeof(dev->info.model_name));
519		os_memcpy(dev->info.model_name, msg->model_name,
520			  msg->model_name_len);
521	}
522
523	if (msg->model_number &&
524	    msg->model_number_len < sizeof(dev->info.model_number)) {
525		os_memset(dev->info.model_number, 0,
526			  sizeof(dev->info.model_number));
527		os_memcpy(dev->info.model_number, msg->model_number,
528			  msg->model_number_len);
529	}
530
531	if (msg->serial_number &&
532	    msg->serial_number_len < sizeof(dev->info.serial_number)) {
533		os_memset(dev->info.serial_number, 0,
534			  sizeof(dev->info.serial_number));
535		os_memcpy(dev->info.serial_number, msg->serial_number,
536			  msg->serial_number_len);
537	}
538
539	if (msg->pri_dev_type)
540		os_memcpy(dev->info.pri_dev_type, msg->pri_dev_type,
541			  sizeof(dev->info.pri_dev_type));
542	else if (msg->wps_pri_dev_type)
543		os_memcpy(dev->info.pri_dev_type, msg->wps_pri_dev_type,
544			  sizeof(dev->info.pri_dev_type));
545
546	if (msg->wps_sec_dev_type_list) {
547		os_memcpy(dev->info.wps_sec_dev_type_list,
548			  msg->wps_sec_dev_type_list,
549			  msg->wps_sec_dev_type_list_len);
550		dev->info.wps_sec_dev_type_list_len =
551			msg->wps_sec_dev_type_list_len;
552	}
553
554	if (msg->capability) {
555		/*
556		 * P2P Client Discoverability bit is reserved in all frames
557		 * that use this function, so do not change its value here.
558		 */
559		dev->info.dev_capab &= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
560		dev->info.dev_capab |= msg->capability[0] &
561			~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
562		dev->info.group_capab = msg->capability[1];
563	}
564
565	if (msg->ext_listen_timing) {
566		dev->ext_listen_period = WPA_GET_LE16(msg->ext_listen_timing);
567		dev->ext_listen_interval =
568			WPA_GET_LE16(msg->ext_listen_timing + 2);
569	}
570
571	if (!probe_req) {
572		u16 new_config_methods;
573		new_config_methods = msg->config_methods ?
574			msg->config_methods : msg->wps_config_methods;
575		if (new_config_methods &&
576		    dev->info.config_methods != new_config_methods) {
577			p2p_dbg(p2p, "Update peer " MACSTR
578				" config_methods 0x%x -> 0x%x",
579				MAC2STR(dev->info.p2p_device_addr),
580				dev->info.config_methods,
581				new_config_methods);
582			dev->info.config_methods = new_config_methods;
583		}
584	}
585}
586
587
588/**
589 * p2p_add_device - Add peer entries based on scan results or P2P frames
590 * @p2p: P2P module context from p2p_init()
591 * @addr: Source address of Beacon or Probe Response frame (may be either
592 *	P2P Device Address or P2P Interface Address)
593 * @level: Signal level (signal strength of the received frame from the peer)
594 * @freq: Frequency on which the Beacon or Probe Response frame was received
595 * @rx_time: Time when the result was received
596 * @ies: IEs from the Beacon or Probe Response frame
597 * @ies_len: Length of ies buffer in octets
598 * @scan_res: Whether this was based on scan results
599 * Returns: 0 on success, -1 on failure
600 *
601 * If the scan result is for a GO, the clients in the group will also be added
602 * to the peer table. This function can also be used with some other frames
603 * like Provision Discovery Request that contains P2P Capability and P2P Device
604 * Info attributes.
605 */
606int p2p_add_device(struct p2p_data *p2p, const u8 *addr, int freq,
607		   struct os_reltime *rx_time, int level, const u8 *ies,
608		   size_t ies_len, int scan_res)
609{
610	struct p2p_device *dev;
611	struct p2p_message msg;
612	const u8 *p2p_dev_addr;
613	int i;
614	struct os_reltime time_now;
615
616	os_memset(&msg, 0, sizeof(msg));
617	if (p2p_parse_ies(ies, ies_len, &msg)) {
618		p2p_dbg(p2p, "Failed to parse P2P IE for a device entry");
619		p2p_parse_free(&msg);
620		return -1;
621	}
622
623	if (msg.p2p_device_addr)
624		p2p_dev_addr = msg.p2p_device_addr;
625	else if (msg.device_id)
626		p2p_dev_addr = msg.device_id;
627	else {
628		p2p_dbg(p2p, "Ignore scan data without P2P Device Info or P2P Device Id");
629		p2p_parse_free(&msg);
630		return -1;
631	}
632
633	if (!is_zero_ether_addr(p2p->peer_filter) &&
634	    os_memcmp(p2p_dev_addr, p2p->peer_filter, ETH_ALEN) != 0) {
635		p2p_dbg(p2p, "Do not add peer filter for " MACSTR
636			" due to peer filter", MAC2STR(p2p_dev_addr));
637		p2p_parse_free(&msg);
638		return 0;
639	}
640
641	dev = p2p_create_device(p2p, p2p_dev_addr);
642	if (dev == NULL) {
643		p2p_parse_free(&msg);
644		return -1;
645	}
646
647	if (rx_time == NULL) {
648		os_get_reltime(&time_now);
649		rx_time = &time_now;
650	}
651
652	/*
653	 * Update the device entry only if the new peer
654	 * entry is newer than the one previously stored.
655	 */
656	if (dev->last_seen.sec > 0 &&
657	    os_reltime_before(rx_time, &dev->last_seen)) {
658		p2p_dbg(p2p, "Do not update peer entry based on old frame (rx_time=%u.%06u last_seen=%u.%06u)",
659			(unsigned int) rx_time->sec,
660			(unsigned int) rx_time->usec,
661			(unsigned int) dev->last_seen.sec,
662			(unsigned int) dev->last_seen.usec);
663		p2p_parse_free(&msg);
664		return -1;
665	}
666
667	os_memcpy(&dev->last_seen, rx_time, sizeof(struct os_reltime));
668
669	dev->flags &= ~(P2P_DEV_PROBE_REQ_ONLY | P2P_DEV_GROUP_CLIENT_ONLY);
670
671	if (os_memcmp(addr, p2p_dev_addr, ETH_ALEN) != 0)
672		os_memcpy(dev->interface_addr, addr, ETH_ALEN);
673	if (msg.ssid &&
674	    (msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
675	     os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
676	     != 0)) {
677		os_memcpy(dev->oper_ssid, msg.ssid + 2, msg.ssid[1]);
678		dev->oper_ssid_len = msg.ssid[1];
679	}
680
681	if (freq >= 2412 && freq <= 2484 && msg.ds_params &&
682	    *msg.ds_params >= 1 && *msg.ds_params <= 14) {
683		int ds_freq;
684		if (*msg.ds_params == 14)
685			ds_freq = 2484;
686		else
687			ds_freq = 2407 + *msg.ds_params * 5;
688		if (freq != ds_freq) {
689			p2p_dbg(p2p, "Update Listen frequency based on DS Parameter Set IE: %d -> %d MHz",
690				freq, ds_freq);
691			freq = ds_freq;
692		}
693	}
694
695	if (dev->listen_freq && dev->listen_freq != freq && scan_res) {
696		p2p_dbg(p2p, "Update Listen frequency based on scan results ("
697			MACSTR " %d -> %d MHz (DS param %d)",
698			MAC2STR(dev->info.p2p_device_addr), dev->listen_freq,
699			freq, msg.ds_params ? *msg.ds_params : -1);
700	}
701	if (scan_res) {
702		dev->listen_freq = freq;
703		if (msg.group_info)
704			dev->oper_freq = freq;
705	}
706	dev->info.level = level;
707
708	p2p_copy_wps_info(p2p, dev, 0, &msg);
709
710	for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
711		wpabuf_free(dev->info.wps_vendor_ext[i]);
712		dev->info.wps_vendor_ext[i] = NULL;
713	}
714
715	for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
716		if (msg.wps_vendor_ext[i] == NULL)
717			break;
718		dev->info.wps_vendor_ext[i] = wpabuf_alloc_copy(
719			msg.wps_vendor_ext[i], msg.wps_vendor_ext_len[i]);
720		if (dev->info.wps_vendor_ext[i] == NULL)
721			break;
722	}
723
724	if (msg.wfd_subelems) {
725		wpabuf_free(dev->info.wfd_subelems);
726		dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
727	}
728
729	if (scan_res) {
730		p2p_add_group_clients(p2p, p2p_dev_addr, addr, freq,
731				      msg.group_info, msg.group_info_len);
732	}
733
734	p2p_parse_free(&msg);
735
736	if (p2p_pending_sd_req(p2p, dev))
737		dev->flags |= P2P_DEV_SD_SCHEDULE;
738
739	if (dev->flags & P2P_DEV_REPORTED)
740		return 0;
741
742	p2p_dbg(p2p, "Peer found with Listen frequency %d MHz (rx_time=%u.%06u)",
743		freq, (unsigned int) rx_time->sec,
744		(unsigned int) rx_time->usec);
745	if (dev->flags & P2P_DEV_USER_REJECTED) {
746		p2p_dbg(p2p, "Do not report rejected device");
747		return 0;
748	}
749
750	if (dev->info.config_methods == 0 &&
751	    (freq == 2412 || freq == 2437 || freq == 2462)) {
752		/*
753		 * If we have only seen a Beacon frame from a GO, we do not yet
754		 * know what WPS config methods it supports. Since some
755		 * applications use config_methods value from P2P-DEVICE-FOUND
756		 * events, postpone reporting this peer until we've fully
757		 * discovered its capabilities.
758		 *
759		 * At least for now, do this only if the peer was detected on
760		 * one of the social channels since that peer can be easily be
761		 * found again and there are no limitations of having to use
762		 * passive scan on this channels, so this can be done through
763		 * Probe Response frame that includes the config_methods
764		 * information.
765		 */
766		p2p_dbg(p2p, "Do not report peer " MACSTR
767			" with unknown config methods", MAC2STR(addr));
768		return 0;
769	}
770
771	p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
772			    !(dev->flags & P2P_DEV_REPORTED_ONCE));
773	dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
774
775	return 0;
776}
777
778
779static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev)
780{
781	int i;
782
783	if (p2p->go_neg_peer == dev) {
784		/*
785		 * If GO Negotiation is in progress, report that it has failed.
786		 */
787		p2p_go_neg_failed(p2p, dev, -1);
788		p2p->go_neg_peer = NULL;
789	}
790	if (p2p->invite_peer == dev)
791		p2p->invite_peer = NULL;
792	if (p2p->sd_peer == dev)
793		p2p->sd_peer = NULL;
794	if (p2p->pending_client_disc_go == dev)
795		p2p->pending_client_disc_go = NULL;
796
797	/* dev_lost() device, but only if it was previously dev_found() */
798	if (dev->flags & P2P_DEV_REPORTED_ONCE)
799		p2p->cfg->dev_lost(p2p->cfg->cb_ctx,
800				   dev->info.p2p_device_addr);
801
802	for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
803		wpabuf_free(dev->info.wps_vendor_ext[i]);
804		dev->info.wps_vendor_ext[i] = NULL;
805	}
806
807	wpabuf_free(dev->info.wfd_subelems);
808
809	os_free(dev);
810}
811
812
813static int p2p_get_next_prog_freq(struct p2p_data *p2p)
814{
815	struct p2p_channels *c;
816	struct p2p_reg_class *cla;
817	size_t cl, ch;
818	int found = 0;
819	u8 reg_class;
820	u8 channel;
821	int freq;
822
823	c = &p2p->cfg->channels;
824	for (cl = 0; cl < c->reg_classes; cl++) {
825		cla = &c->reg_class[cl];
826		if (cla->reg_class != p2p->last_prog_scan_class)
827			continue;
828		for (ch = 0; ch < cla->channels; ch++) {
829			if (cla->channel[ch] == p2p->last_prog_scan_chan) {
830				found = 1;
831				break;
832			}
833		}
834		if (found)
835			break;
836	}
837
838	if (!found) {
839		/* Start from beginning */
840		reg_class = c->reg_class[0].reg_class;
841		channel = c->reg_class[0].channel[0];
842	} else {
843		/* Pick the next channel */
844		ch++;
845		if (ch == cla->channels) {
846			cl++;
847			if (cl == c->reg_classes)
848				cl = 0;
849			ch = 0;
850		}
851		reg_class = c->reg_class[cl].reg_class;
852		channel = c->reg_class[cl].channel[ch];
853	}
854
855	freq = p2p_channel_to_freq(reg_class, channel);
856	p2p_dbg(p2p, "Next progressive search channel: reg_class %u channel %u -> %d MHz",
857		reg_class, channel, freq);
858	p2p->last_prog_scan_class = reg_class;
859	p2p->last_prog_scan_chan = channel;
860
861	if (freq == 2412 || freq == 2437 || freq == 2462)
862		return 0; /* No need to add social channels */
863	return freq;
864}
865
866
867static void p2p_search(struct p2p_data *p2p)
868{
869	int freq = 0;
870	enum p2p_scan_type type;
871	u16 pw_id = DEV_PW_DEFAULT;
872	int res;
873
874	if (p2p->drv_in_listen) {
875		p2p_dbg(p2p, "Driver is still in Listen state - wait for it to end before continuing");
876		return;
877	}
878	p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
879
880	if (p2p->find_type == P2P_FIND_PROGRESSIVE &&
881	    (freq = p2p_get_next_prog_freq(p2p)) > 0) {
882		type = P2P_SCAN_SOCIAL_PLUS_ONE;
883		p2p_dbg(p2p, "Starting search (+ freq %u)", freq);
884	} else {
885		type = P2P_SCAN_SOCIAL;
886		p2p_dbg(p2p, "Starting search");
887	}
888
889	res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, type, freq,
890				 p2p->num_req_dev_types, p2p->req_dev_types,
891				 p2p->find_dev_id, pw_id);
892	if (res < 0) {
893		p2p_dbg(p2p, "Scan request failed");
894		p2p_continue_find(p2p);
895	} else {
896		p2p_dbg(p2p, "Running p2p_scan");
897		p2p->p2p_scan_running = 1;
898		eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
899		eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
900				       p2p, NULL);
901	}
902}
903
904
905static void p2p_find_timeout(void *eloop_ctx, void *timeout_ctx)
906{
907	struct p2p_data *p2p = eloop_ctx;
908	p2p_dbg(p2p, "Find timeout -> stop");
909	p2p_stop_find(p2p);
910}
911
912
913static int p2p_run_after_scan(struct p2p_data *p2p)
914{
915	struct p2p_device *dev;
916	enum p2p_after_scan op;
917
918	if (p2p->after_scan_tx) {
919		p2p->after_scan_tx_in_progress = 1;
920		p2p_dbg(p2p, "Send pending Action frame at p2p_scan completion");
921		p2p->cfg->send_action(p2p->cfg->cb_ctx,
922				      p2p->after_scan_tx->freq,
923				      p2p->after_scan_tx->dst,
924				      p2p->after_scan_tx->src,
925				      p2p->after_scan_tx->bssid,
926				      (u8 *) (p2p->after_scan_tx + 1),
927				      p2p->after_scan_tx->len,
928				      p2p->after_scan_tx->wait_time);
929		os_free(p2p->after_scan_tx);
930		p2p->after_scan_tx = NULL;
931		return 1;
932	}
933
934	op = p2p->start_after_scan;
935	p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
936	switch (op) {
937	case P2P_AFTER_SCAN_NOTHING:
938		break;
939	case P2P_AFTER_SCAN_LISTEN:
940		p2p_dbg(p2p, "Start previously requested Listen state");
941		p2p_listen(p2p, p2p->pending_listen_sec * 1000 +
942			   p2p->pending_listen_usec / 1000);
943		return 1;
944	case P2P_AFTER_SCAN_CONNECT:
945		p2p_dbg(p2p, "Start previously requested connect with " MACSTR,
946			MAC2STR(p2p->after_scan_peer));
947		dev = p2p_get_device(p2p, p2p->after_scan_peer);
948		if (dev == NULL) {
949			p2p_dbg(p2p, "Peer not known anymore");
950			break;
951		}
952		p2p_connect_send(p2p, dev);
953		return 1;
954	}
955
956	return 0;
957}
958
959
960static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx)
961{
962	struct p2p_data *p2p = eloop_ctx;
963	int running;
964	p2p_dbg(p2p, "p2p_scan timeout (running=%d)", p2p->p2p_scan_running);
965	running = p2p->p2p_scan_running;
966	/* Make sure we recover from missed scan results callback */
967	p2p->p2p_scan_running = 0;
968
969	if (running)
970		p2p_run_after_scan(p2p);
971}
972
973
974static void p2p_free_req_dev_types(struct p2p_data *p2p)
975{
976	p2p->num_req_dev_types = 0;
977	os_free(p2p->req_dev_types);
978	p2p->req_dev_types = NULL;
979}
980
981
982int p2p_find(struct p2p_data *p2p, unsigned int timeout,
983	     enum p2p_discovery_type type,
984	     unsigned int num_req_dev_types, const u8 *req_dev_types,
985	     const u8 *dev_id, unsigned int search_delay)
986{
987	int res;
988
989	p2p_dbg(p2p, "Starting find (type=%d)", type);
990	os_get_reltime(&p2p->find_start);
991	if (p2p->p2p_scan_running) {
992		p2p_dbg(p2p, "p2p_scan is already running");
993	}
994
995	p2p_free_req_dev_types(p2p);
996	if (req_dev_types && num_req_dev_types) {
997		p2p->req_dev_types = os_malloc(num_req_dev_types *
998					       WPS_DEV_TYPE_LEN);
999		if (p2p->req_dev_types == NULL)
1000			return -1;
1001		os_memcpy(p2p->req_dev_types, req_dev_types,
1002			  num_req_dev_types * WPS_DEV_TYPE_LEN);
1003		p2p->num_req_dev_types = num_req_dev_types;
1004	}
1005
1006	if (dev_id) {
1007		os_memcpy(p2p->find_dev_id_buf, dev_id, ETH_ALEN);
1008		p2p->find_dev_id = p2p->find_dev_id_buf;
1009	} else
1010		p2p->find_dev_id = NULL;
1011
1012	p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1013	p2p_clear_timeout(p2p);
1014	p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1015	p2p->find_type = type;
1016	p2p_device_clear_reported(p2p);
1017	p2p_set_state(p2p, P2P_SEARCH);
1018	p2p->search_delay = search_delay;
1019	p2p->in_search_delay = 0;
1020	eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1021	p2p->last_p2p_find_timeout = timeout;
1022	if (timeout)
1023		eloop_register_timeout(timeout, 0, p2p_find_timeout,
1024				       p2p, NULL);
1025	switch (type) {
1026	case P2P_FIND_START_WITH_FULL:
1027	case P2P_FIND_PROGRESSIVE:
1028		res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_FULL, 0,
1029					 p2p->num_req_dev_types,
1030					 p2p->req_dev_types, dev_id,
1031					 DEV_PW_DEFAULT);
1032		break;
1033	case P2P_FIND_ONLY_SOCIAL:
1034		res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_SOCIAL, 0,
1035					 p2p->num_req_dev_types,
1036					 p2p->req_dev_types, dev_id,
1037					 DEV_PW_DEFAULT);
1038		break;
1039	default:
1040		return -1;
1041	}
1042
1043	if (res == 0) {
1044		p2p_dbg(p2p, "Running p2p_scan");
1045		p2p->p2p_scan_running = 1;
1046		eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
1047		eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
1048				       p2p, NULL);
1049	} else if (p2p->p2p_scan_running) {
1050		p2p_dbg(p2p, "Failed to start p2p_scan - another p2p_scan was already running");
1051		/* wait for the previous p2p_scan to complete */
1052		res = 0; /* do not report failure */
1053	} else {
1054		p2p_dbg(p2p, "Failed to start p2p_scan");
1055		p2p_set_state(p2p, P2P_IDLE);
1056		eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1057	}
1058
1059	return res;
1060}
1061
1062
1063void p2p_stop_find_for_freq(struct p2p_data *p2p, int freq)
1064{
1065	p2p_dbg(p2p, "Stopping find");
1066	eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1067	p2p_clear_timeout(p2p);
1068	if (p2p->state == P2P_SEARCH)
1069		p2p->cfg->find_stopped(p2p->cfg->cb_ctx);
1070	p2p_set_state(p2p, P2P_IDLE);
1071	p2p_free_req_dev_types(p2p);
1072	p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1073	if (p2p->go_neg_peer)
1074		p2p->go_neg_peer->flags &= ~P2P_DEV_PEER_WAITING_RESPONSE;
1075	p2p->go_neg_peer = NULL;
1076	p2p->sd_peer = NULL;
1077	p2p->invite_peer = NULL;
1078	p2p_stop_listen_for_freq(p2p, freq);
1079}
1080
1081
1082void p2p_stop_listen_for_freq(struct p2p_data *p2p, int freq)
1083{
1084	if (freq > 0 && p2p->drv_in_listen == freq && p2p->in_listen) {
1085		p2p_dbg(p2p, "Skip stop_listen since we are on correct channel for response");
1086		return;
1087	}
1088	if (p2p->in_listen) {
1089		p2p->in_listen = 0;
1090		p2p_clear_timeout(p2p);
1091	}
1092	if (p2p->drv_in_listen) {
1093		/*
1094		 * The driver may not deliver callback to p2p_listen_end()
1095		 * when the operation gets canceled, so clear the internal
1096		 * variable that is tracking driver state.
1097		 */
1098		p2p_dbg(p2p, "Clear drv_in_listen (%d)", p2p->drv_in_listen);
1099		p2p->drv_in_listen = 0;
1100	}
1101	p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1102}
1103
1104
1105void p2p_stop_listen(struct p2p_data *p2p)
1106{
1107	if (p2p->state != P2P_LISTEN_ONLY) {
1108		p2p_dbg(p2p, "Skip stop_listen since not in listen_only state.");
1109		return;
1110	}
1111
1112	p2p_stop_listen_for_freq(p2p, 0);
1113	p2p_set_state(p2p, P2P_IDLE);
1114}
1115
1116
1117void p2p_stop_find(struct p2p_data *p2p)
1118{
1119	p2p_stop_find_for_freq(p2p, 0);
1120}
1121
1122
1123static int p2p_prepare_channel_pref(struct p2p_data *p2p,
1124				    unsigned int force_freq,
1125				    unsigned int pref_freq, int go)
1126{
1127	u8 op_class, op_channel;
1128	unsigned int freq = force_freq ? force_freq : pref_freq;
1129
1130	p2p_dbg(p2p, "Prepare channel pref - force_freq=%u pref_freq=%u go=%d",
1131		force_freq, pref_freq, go);
1132	if (p2p_freq_to_channel(freq, &op_class, &op_channel) < 0) {
1133		p2p_dbg(p2p, "Unsupported frequency %u MHz", freq);
1134		return -1;
1135	}
1136
1137	if (!p2p_channels_includes(&p2p->cfg->channels, op_class, op_channel) &&
1138	    (go || !p2p_channels_includes(&p2p->cfg->cli_channels, op_class,
1139					  op_channel))) {
1140		p2p_dbg(p2p, "Frequency %u MHz (oper_class %u channel %u) not allowed for P2P",
1141			freq, op_class, op_channel);
1142		return -1;
1143	}
1144
1145	p2p->op_reg_class = op_class;
1146	p2p->op_channel = op_channel;
1147
1148	if (force_freq) {
1149		p2p->channels.reg_classes = 1;
1150		p2p->channels.reg_class[0].channels = 1;
1151		p2p->channels.reg_class[0].reg_class = p2p->op_reg_class;
1152		p2p->channels.reg_class[0].channel[0] = p2p->op_channel;
1153	} else {
1154		os_memcpy(&p2p->channels, &p2p->cfg->channels,
1155			  sizeof(struct p2p_channels));
1156	}
1157
1158	return 0;
1159}
1160
1161
1162static void p2p_prepare_channel_best(struct p2p_data *p2p)
1163{
1164	u8 op_class, op_channel;
1165	const int op_classes_5ghz[] = { 124, 115, 0 };
1166	const int op_classes_ht40[] = { 126, 127, 116, 117, 0 };
1167	const int op_classes_vht[] = { 128, 0 };
1168
1169	p2p_dbg(p2p, "Prepare channel best");
1170
1171	if (!p2p->cfg->cfg_op_channel && p2p->best_freq_overall > 0 &&
1172	    p2p_supported_freq(p2p, p2p->best_freq_overall) &&
1173	    p2p_freq_to_channel(p2p->best_freq_overall, &op_class, &op_channel)
1174	    == 0) {
1175		p2p_dbg(p2p, "Select best overall channel as operating channel preference");
1176		p2p->op_reg_class = op_class;
1177		p2p->op_channel = op_channel;
1178	} else if (!p2p->cfg->cfg_op_channel && p2p->best_freq_5 > 0 &&
1179		   p2p_supported_freq(p2p, p2p->best_freq_5) &&
1180		   p2p_freq_to_channel(p2p->best_freq_5, &op_class, &op_channel)
1181		   == 0) {
1182		p2p_dbg(p2p, "Select best 5 GHz channel as operating channel preference");
1183		p2p->op_reg_class = op_class;
1184		p2p->op_channel = op_channel;
1185	} else if (!p2p->cfg->cfg_op_channel && p2p->best_freq_24 > 0 &&
1186		   p2p_supported_freq(p2p, p2p->best_freq_24) &&
1187		   p2p_freq_to_channel(p2p->best_freq_24, &op_class,
1188				       &op_channel) == 0) {
1189		p2p_dbg(p2p, "Select best 2.4 GHz channel as operating channel preference");
1190		p2p->op_reg_class = op_class;
1191		p2p->op_channel = op_channel;
1192	} else if (p2p->cfg->num_pref_chan > 0 &&
1193		   p2p_channels_includes(&p2p->cfg->channels,
1194					 p2p->cfg->pref_chan[0].op_class,
1195					 p2p->cfg->pref_chan[0].chan)) {
1196		p2p_dbg(p2p, "Select first pref_chan entry as operating channel preference");
1197		p2p->op_reg_class = p2p->cfg->pref_chan[0].op_class;
1198		p2p->op_channel = p2p->cfg->pref_chan[0].chan;
1199	} else if (p2p_channel_select(&p2p->cfg->channels, op_classes_vht,
1200				      &p2p->op_reg_class, &p2p->op_channel) ==
1201		   0) {
1202		p2p_dbg(p2p, "Select possible VHT channel (op_class %u channel %u) as operating channel preference",
1203			p2p->op_reg_class, p2p->op_channel);
1204	} else if (p2p_channel_select(&p2p->cfg->channels, op_classes_ht40,
1205				      &p2p->op_reg_class, &p2p->op_channel) ==
1206		   0) {
1207		p2p_dbg(p2p, "Select possible HT40 channel (op_class %u channel %u) as operating channel preference",
1208			p2p->op_reg_class, p2p->op_channel);
1209	} else if (p2p_channel_select(&p2p->cfg->channels, op_classes_5ghz,
1210				      &p2p->op_reg_class, &p2p->op_channel) ==
1211		   0) {
1212		p2p_dbg(p2p, "Select possible 5 GHz channel (op_class %u channel %u) as operating channel preference",
1213			p2p->op_reg_class, p2p->op_channel);
1214	} else {
1215		p2p_dbg(p2p, "Select pre-configured channel as operating channel preference");
1216		p2p->op_reg_class = p2p->cfg->op_reg_class;
1217		p2p->op_channel = p2p->cfg->op_channel;
1218	}
1219
1220	os_memcpy(&p2p->channels, &p2p->cfg->channels,
1221		  sizeof(struct p2p_channels));
1222}
1223
1224
1225/**
1226 * p2p_prepare_channel - Select operating channel for GO Negotiation
1227 * @p2p: P2P module context from p2p_init()
1228 * @dev: Selected peer device
1229 * @force_freq: Forced frequency in MHz or 0 if not forced
1230 * @pref_freq: Preferred frequency in MHz or 0 if no preference
1231 * @go: Whether the local end will be forced to be GO
1232 * Returns: 0 on success, -1 on failure (channel not supported for P2P)
1233 *
1234 * This function is used to do initial operating channel selection for GO
1235 * Negotiation prior to having received peer information. The selected channel
1236 * may be further optimized in p2p_reselect_channel() once the peer information
1237 * is available.
1238 */
1239int p2p_prepare_channel(struct p2p_data *p2p, struct p2p_device *dev,
1240			unsigned int force_freq, unsigned int pref_freq, int go)
1241{
1242	p2p_dbg(p2p, "Prepare channel - force_freq=%u pref_freq=%u go=%d",
1243		force_freq, pref_freq, go);
1244	if (force_freq || pref_freq) {
1245		if (p2p_prepare_channel_pref(p2p, force_freq, pref_freq, go) <
1246		    0)
1247			return -1;
1248	} else {
1249		p2p_prepare_channel_best(p2p);
1250	}
1251	p2p_channels_dump(p2p, "prepared channels", &p2p->channels);
1252	if (go)
1253		p2p_channels_remove_freqs(&p2p->channels, &p2p->no_go_freq);
1254	else if (!force_freq)
1255		p2p_channels_union(&p2p->channels, &p2p->cfg->cli_channels,
1256				   &p2p->channels);
1257	p2p_channels_dump(p2p, "after go/cli filter/add", &p2p->channels);
1258
1259	p2p_dbg(p2p, "Own preference for operation channel: Operating Class %u Channel %u%s",
1260		p2p->op_reg_class, p2p->op_channel,
1261		force_freq ? " (forced)" : "");
1262
1263	if (force_freq)
1264		dev->flags |= P2P_DEV_FORCE_FREQ;
1265	else
1266		dev->flags &= ~P2P_DEV_FORCE_FREQ;
1267
1268	return 0;
1269}
1270
1271
1272static void p2p_set_dev_persistent(struct p2p_device *dev,
1273				   int persistent_group)
1274{
1275	switch (persistent_group) {
1276	case 0:
1277		dev->flags &= ~(P2P_DEV_PREFER_PERSISTENT_GROUP |
1278				P2P_DEV_PREFER_PERSISTENT_RECONN);
1279		break;
1280	case 1:
1281		dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP;
1282		dev->flags &= ~P2P_DEV_PREFER_PERSISTENT_RECONN;
1283		break;
1284	case 2:
1285		dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP |
1286			P2P_DEV_PREFER_PERSISTENT_RECONN;
1287		break;
1288	}
1289}
1290
1291
1292int p2p_connect(struct p2p_data *p2p, const u8 *peer_addr,
1293		enum p2p_wps_method wps_method,
1294		int go_intent, const u8 *own_interface_addr,
1295		unsigned int force_freq, int persistent_group,
1296		const u8 *force_ssid, size_t force_ssid_len,
1297		int pd_before_go_neg, unsigned int pref_freq, u16 oob_pw_id)
1298{
1299	struct p2p_device *dev;
1300
1301	p2p_dbg(p2p, "Request to start group negotiation - peer=" MACSTR
1302		"  GO Intent=%d  Intended Interface Address=" MACSTR
1303		" wps_method=%d persistent_group=%d pd_before_go_neg=%d "
1304		"oob_pw_id=%u",
1305		MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1306		wps_method, persistent_group, pd_before_go_neg, oob_pw_id);
1307
1308	dev = p2p_get_device(p2p, peer_addr);
1309	if (dev == NULL || (dev->flags & P2P_DEV_PROBE_REQ_ONLY)) {
1310		p2p_dbg(p2p, "Cannot connect to unknown P2P Device " MACSTR,
1311			MAC2STR(peer_addr));
1312		return -1;
1313	}
1314
1315	if (p2p_prepare_channel(p2p, dev, force_freq, pref_freq,
1316				go_intent == 15) < 0)
1317		return -1;
1318
1319	if (dev->flags & P2P_DEV_GROUP_CLIENT_ONLY) {
1320		if (!(dev->info.dev_capab &
1321		      P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY)) {
1322			p2p_dbg(p2p, "Cannot connect to P2P Device " MACSTR
1323				" that is in a group and is not discoverable",
1324				MAC2STR(peer_addr));
1325			return -1;
1326		}
1327		if (dev->oper_freq <= 0) {
1328			p2p_dbg(p2p, "Cannot connect to P2P Device " MACSTR
1329				" with incomplete information",
1330				MAC2STR(peer_addr));
1331			return -1;
1332		}
1333
1334		/*
1335		 * First, try to connect directly. If the peer does not
1336		 * acknowledge frames, assume it is sleeping and use device
1337		 * discoverability via the GO at that point.
1338		 */
1339	}
1340
1341	p2p->ssid_set = 0;
1342	if (force_ssid) {
1343		wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1344				  force_ssid, force_ssid_len);
1345		os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1346		p2p->ssid_len = force_ssid_len;
1347		p2p->ssid_set = 1;
1348	}
1349
1350	dev->flags &= ~P2P_DEV_NOT_YET_READY;
1351	dev->flags &= ~P2P_DEV_USER_REJECTED;
1352	dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
1353	dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
1354	if (pd_before_go_neg)
1355		dev->flags |= P2P_DEV_PD_BEFORE_GO_NEG;
1356	else {
1357		dev->flags &= ~P2P_DEV_PD_BEFORE_GO_NEG;
1358		/*
1359		 * Assign dialog token and tie breaker here to use the same
1360		 * values in each retry within the same GO Negotiation exchange.
1361		 */
1362		dev->dialog_token++;
1363		if (dev->dialog_token == 0)
1364			dev->dialog_token = 1;
1365		dev->tie_breaker = p2p->next_tie_breaker;
1366		p2p->next_tie_breaker = !p2p->next_tie_breaker;
1367	}
1368	dev->connect_reqs = 0;
1369	dev->go_neg_req_sent = 0;
1370	dev->go_state = UNKNOWN_GO;
1371	p2p_set_dev_persistent(dev, persistent_group);
1372	p2p->go_intent = go_intent;
1373	os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1374
1375	if (p2p->state != P2P_IDLE)
1376		p2p_stop_find(p2p);
1377
1378	if (p2p->after_scan_tx) {
1379		/*
1380		 * We need to drop the pending frame to avoid issues with the
1381		 * new GO Negotiation, e.g., when the pending frame was from a
1382		 * previous attempt at starting a GO Negotiation.
1383		 */
1384		p2p_dbg(p2p, "Dropped previous pending Action frame TX that was waiting for p2p_scan completion");
1385		os_free(p2p->after_scan_tx);
1386		p2p->after_scan_tx = NULL;
1387	}
1388
1389	dev->wps_method = wps_method;
1390	dev->oob_pw_id = oob_pw_id;
1391	dev->status = P2P_SC_SUCCESS;
1392
1393	if (p2p->p2p_scan_running) {
1394		p2p_dbg(p2p, "p2p_scan running - delay connect send");
1395		p2p->start_after_scan = P2P_AFTER_SCAN_CONNECT;
1396		os_memcpy(p2p->after_scan_peer, peer_addr, ETH_ALEN);
1397		return 0;
1398	}
1399	p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1400
1401	return p2p_connect_send(p2p, dev);
1402}
1403
1404
1405int p2p_authorize(struct p2p_data *p2p, const u8 *peer_addr,
1406		  enum p2p_wps_method wps_method,
1407		  int go_intent, const u8 *own_interface_addr,
1408		  unsigned int force_freq, int persistent_group,
1409		  const u8 *force_ssid, size_t force_ssid_len,
1410		  unsigned int pref_freq, u16 oob_pw_id)
1411{
1412	struct p2p_device *dev;
1413
1414	p2p_dbg(p2p, "Request to authorize group negotiation - peer=" MACSTR
1415		"  GO Intent=%d  Intended Interface Address=" MACSTR
1416		" wps_method=%d  persistent_group=%d oob_pw_id=%u",
1417		MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1418		wps_method, persistent_group, oob_pw_id);
1419
1420	dev = p2p_get_device(p2p, peer_addr);
1421	if (dev == NULL) {
1422		p2p_dbg(p2p, "Cannot authorize unknown P2P Device " MACSTR,
1423			MAC2STR(peer_addr));
1424		return -1;
1425	}
1426
1427	if (p2p_prepare_channel(p2p, dev, force_freq, pref_freq, go_intent ==
1428				15) < 0)
1429		return -1;
1430
1431	p2p->ssid_set = 0;
1432	if (force_ssid) {
1433		wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1434				  force_ssid, force_ssid_len);
1435		os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1436		p2p->ssid_len = force_ssid_len;
1437		p2p->ssid_set = 1;
1438	}
1439
1440	dev->flags &= ~P2P_DEV_NOT_YET_READY;
1441	dev->flags &= ~P2P_DEV_USER_REJECTED;
1442	dev->go_neg_req_sent = 0;
1443	dev->go_state = UNKNOWN_GO;
1444	p2p_set_dev_persistent(dev, persistent_group);
1445	p2p->go_intent = go_intent;
1446	os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1447
1448	dev->wps_method = wps_method;
1449	dev->oob_pw_id = oob_pw_id;
1450	dev->status = P2P_SC_SUCCESS;
1451
1452	return 0;
1453}
1454
1455
1456void p2p_add_dev_info(struct p2p_data *p2p, const u8 *addr,
1457		      struct p2p_device *dev, struct p2p_message *msg)
1458{
1459	os_get_reltime(&dev->last_seen);
1460
1461	p2p_copy_wps_info(p2p, dev, 0, msg);
1462
1463	if (msg->listen_channel) {
1464		int freq;
1465		freq = p2p_channel_to_freq(msg->listen_channel[3],
1466					   msg->listen_channel[4]);
1467		if (freq < 0) {
1468			p2p_dbg(p2p, "Unknown peer Listen channel: "
1469				"country=%c%c(0x%02x) reg_class=%u channel=%u",
1470				msg->listen_channel[0],
1471				msg->listen_channel[1],
1472				msg->listen_channel[2],
1473				msg->listen_channel[3],
1474				msg->listen_channel[4]);
1475		} else {
1476			p2p_dbg(p2p, "Update peer " MACSTR
1477				" Listen channel: %u -> %u MHz",
1478				MAC2STR(dev->info.p2p_device_addr),
1479				dev->listen_freq, freq);
1480			dev->listen_freq = freq;
1481		}
1482	}
1483
1484	if (msg->wfd_subelems) {
1485		wpabuf_free(dev->info.wfd_subelems);
1486		dev->info.wfd_subelems = wpabuf_dup(msg->wfd_subelems);
1487	}
1488
1489	if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
1490		dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
1491		p2p_dbg(p2p, "Completed device entry based on data from GO Negotiation Request");
1492	} else {
1493		p2p_dbg(p2p, "Created device entry based on GO Neg Req: "
1494			MACSTR " dev_capab=0x%x group_capab=0x%x name='%s' "
1495			"listen_freq=%d",
1496			MAC2STR(dev->info.p2p_device_addr),
1497			dev->info.dev_capab, dev->info.group_capab,
1498			dev->info.device_name, dev->listen_freq);
1499	}
1500
1501	dev->flags &= ~P2P_DEV_GROUP_CLIENT_ONLY;
1502
1503	if (dev->flags & P2P_DEV_USER_REJECTED) {
1504		p2p_dbg(p2p, "Do not report rejected device");
1505		return;
1506	}
1507
1508	p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
1509			    !(dev->flags & P2P_DEV_REPORTED_ONCE));
1510	dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
1511}
1512
1513
1514void p2p_build_ssid(struct p2p_data *p2p, u8 *ssid, size_t *ssid_len)
1515{
1516	os_memcpy(ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
1517	p2p_random((char *) &ssid[P2P_WILDCARD_SSID_LEN], 2);
1518	os_memcpy(&ssid[P2P_WILDCARD_SSID_LEN + 2],
1519		  p2p->cfg->ssid_postfix, p2p->cfg->ssid_postfix_len);
1520	*ssid_len = P2P_WILDCARD_SSID_LEN + 2 + p2p->cfg->ssid_postfix_len;
1521}
1522
1523
1524int p2p_go_params(struct p2p_data *p2p, struct p2p_go_neg_results *params)
1525{
1526	p2p_build_ssid(p2p, params->ssid, &params->ssid_len);
1527	p2p_random(params->passphrase, 8);
1528	return 0;
1529}
1530
1531
1532void p2p_go_complete(struct p2p_data *p2p, struct p2p_device *peer)
1533{
1534	struct p2p_go_neg_results res;
1535	int go = peer->go_state == LOCAL_GO;
1536	struct p2p_channels intersection;
1537	int freqs;
1538	size_t i, j;
1539
1540	p2p_dbg(p2p, "GO Negotiation with " MACSTR " completed (%s will be GO)",
1541		MAC2STR(peer->info.p2p_device_addr), go ? "local end" : "peer");
1542
1543	os_memset(&res, 0, sizeof(res));
1544	res.role_go = go;
1545	os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr, ETH_ALEN);
1546	os_memcpy(res.peer_interface_addr, peer->intended_addr, ETH_ALEN);
1547	res.wps_method = peer->wps_method;
1548	if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
1549		if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
1550			res.persistent_group = 2;
1551		else
1552			res.persistent_group = 1;
1553	}
1554
1555	if (go) {
1556		/* Setup AP mode for WPS provisioning */
1557		res.freq = p2p_channel_to_freq(p2p->op_reg_class,
1558					       p2p->op_channel);
1559		os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1560		res.ssid_len = p2p->ssid_len;
1561		p2p_random(res.passphrase, 8);
1562	} else {
1563		res.freq = peer->oper_freq;
1564		if (p2p->ssid_len) {
1565			os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1566			res.ssid_len = p2p->ssid_len;
1567		}
1568	}
1569
1570	p2p_channels_dump(p2p, "own channels", &p2p->channels);
1571	p2p_channels_dump(p2p, "peer channels", &peer->channels);
1572	p2p_channels_intersect(&p2p->channels, &peer->channels,
1573			       &intersection);
1574	if (go) {
1575		p2p_channels_remove_freqs(&intersection, &p2p->no_go_freq);
1576		p2p_channels_dump(p2p, "intersection after no-GO removal",
1577				  &intersection);
1578	}
1579	freqs = 0;
1580	for (i = 0; i < intersection.reg_classes; i++) {
1581		struct p2p_reg_class *c = &intersection.reg_class[i];
1582		if (freqs + 1 == P2P_MAX_CHANNELS)
1583			break;
1584		for (j = 0; j < c->channels; j++) {
1585			int freq;
1586			if (freqs + 1 == P2P_MAX_CHANNELS)
1587				break;
1588			freq = p2p_channel_to_freq(c->reg_class, c->channel[j]);
1589			if (freq < 0)
1590				continue;
1591			res.freq_list[freqs++] = freq;
1592		}
1593	}
1594
1595	res.peer_config_timeout = go ? peer->client_timeout : peer->go_timeout;
1596
1597	p2p_clear_timeout(p2p);
1598	p2p->ssid_set = 0;
1599	peer->go_neg_req_sent = 0;
1600	peer->wps_method = WPS_NOT_READY;
1601	peer->oob_pw_id = 0;
1602
1603	p2p_set_state(p2p, P2P_PROVISIONING);
1604	p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
1605}
1606
1607
1608static void p2p_rx_p2p_action(struct p2p_data *p2p, const u8 *sa,
1609			      const u8 *data, size_t len, int rx_freq)
1610{
1611	p2p_dbg(p2p, "RX P2P Public Action from " MACSTR, MAC2STR(sa));
1612	wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Public Action contents", data, len);
1613
1614	if (len < 1)
1615		return;
1616
1617	switch (data[0]) {
1618	case P2P_GO_NEG_REQ:
1619		p2p_process_go_neg_req(p2p, sa, data + 1, len - 1, rx_freq);
1620		break;
1621	case P2P_GO_NEG_RESP:
1622		p2p_process_go_neg_resp(p2p, sa, data + 1, len - 1, rx_freq);
1623		break;
1624	case P2P_GO_NEG_CONF:
1625		p2p_process_go_neg_conf(p2p, sa, data + 1, len - 1);
1626		break;
1627	case P2P_INVITATION_REQ:
1628		p2p_process_invitation_req(p2p, sa, data + 1, len - 1,
1629					   rx_freq);
1630		break;
1631	case P2P_INVITATION_RESP:
1632		p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
1633		p2p_process_invitation_resp(p2p, sa, data + 1, len - 1);
1634		break;
1635	case P2P_PROV_DISC_REQ:
1636		p2p_process_prov_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1637		break;
1638	case P2P_PROV_DISC_RESP:
1639		p2p_process_prov_disc_resp(p2p, sa, data + 1, len - 1);
1640		break;
1641	case P2P_DEV_DISC_REQ:
1642		p2p_process_dev_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1643		break;
1644	case P2P_DEV_DISC_RESP:
1645		p2p_process_dev_disc_resp(p2p, sa, data + 1, len - 1);
1646		break;
1647	default:
1648		p2p_dbg(p2p, "Unsupported P2P Public Action frame type %d",
1649			data[0]);
1650		break;
1651	}
1652}
1653
1654
1655static void p2p_rx_action_public(struct p2p_data *p2p, const u8 *da,
1656				 const u8 *sa, const u8 *bssid, const u8 *data,
1657				 size_t len, int freq)
1658{
1659	if (len < 1)
1660		return;
1661
1662	switch (data[0]) {
1663	case WLAN_PA_VENDOR_SPECIFIC:
1664		data++;
1665		len--;
1666		if (len < 3)
1667			return;
1668		if (WPA_GET_BE24(data) != OUI_WFA)
1669			return;
1670
1671		data += 3;
1672		len -= 3;
1673		if (len < 1)
1674			return;
1675
1676		if (*data != P2P_OUI_TYPE)
1677			return;
1678
1679		p2p_rx_p2p_action(p2p, sa, data + 1, len - 1, freq);
1680		break;
1681	case WLAN_PA_GAS_INITIAL_REQ:
1682		p2p_rx_gas_initial_req(p2p, sa, data + 1, len - 1, freq);
1683		break;
1684	case WLAN_PA_GAS_INITIAL_RESP:
1685		p2p_rx_gas_initial_resp(p2p, sa, data + 1, len - 1, freq);
1686		break;
1687	case WLAN_PA_GAS_COMEBACK_REQ:
1688		p2p_rx_gas_comeback_req(p2p, sa, data + 1, len - 1, freq);
1689		break;
1690	case WLAN_PA_GAS_COMEBACK_RESP:
1691		p2p_rx_gas_comeback_resp(p2p, sa, data + 1, len - 1, freq);
1692		break;
1693	}
1694}
1695
1696
1697void p2p_rx_action(struct p2p_data *p2p, const u8 *da, const u8 *sa,
1698		   const u8 *bssid, u8 category,
1699		   const u8 *data, size_t len, int freq)
1700{
1701	if (category == WLAN_ACTION_PUBLIC) {
1702		p2p_rx_action_public(p2p, da, sa, bssid, data, len, freq);
1703		return;
1704	}
1705
1706	if (category != WLAN_ACTION_VENDOR_SPECIFIC)
1707		return;
1708
1709	if (len < 4)
1710		return;
1711
1712	if (WPA_GET_BE24(data) != OUI_WFA)
1713		return;
1714	data += 3;
1715	len -= 3;
1716
1717	if (*data != P2P_OUI_TYPE)
1718		return;
1719	data++;
1720	len--;
1721
1722	/* P2P action frame */
1723	p2p_dbg(p2p, "RX P2P Action from " MACSTR, MAC2STR(sa));
1724	wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Action contents", data, len);
1725
1726	if (len < 1)
1727		return;
1728	switch (data[0]) {
1729	case P2P_NOA:
1730		p2p_dbg(p2p, "Received P2P Action - Notice of Absence");
1731		/* TODO */
1732		break;
1733	case P2P_PRESENCE_REQ:
1734		p2p_process_presence_req(p2p, da, sa, data + 1, len - 1, freq);
1735		break;
1736	case P2P_PRESENCE_RESP:
1737		p2p_process_presence_resp(p2p, da, sa, data + 1, len - 1);
1738		break;
1739	case P2P_GO_DISC_REQ:
1740		p2p_process_go_disc_req(p2p, da, sa, data + 1, len - 1, freq);
1741		break;
1742	default:
1743		p2p_dbg(p2p, "Received P2P Action - unknown type %u", data[0]);
1744		break;
1745	}
1746}
1747
1748
1749static void p2p_go_neg_start(void *eloop_ctx, void *timeout_ctx)
1750{
1751	struct p2p_data *p2p = eloop_ctx;
1752	if (p2p->go_neg_peer == NULL)
1753		return;
1754	p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1755	p2p->go_neg_peer->status = P2P_SC_SUCCESS;
1756	p2p_connect_send(p2p, p2p->go_neg_peer);
1757}
1758
1759
1760static void p2p_invite_start(void *eloop_ctx, void *timeout_ctx)
1761{
1762	struct p2p_data *p2p = eloop_ctx;
1763	if (p2p->invite_peer == NULL)
1764		return;
1765	p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1766	p2p_invite_send(p2p, p2p->invite_peer, p2p->invite_go_dev_addr,
1767			p2p->invite_dev_pw_id);
1768}
1769
1770
1771static void p2p_add_dev_from_probe_req(struct p2p_data *p2p, const u8 *addr,
1772				       const u8 *ie, size_t ie_len)
1773{
1774	struct p2p_message msg;
1775	struct p2p_device *dev;
1776
1777	os_memset(&msg, 0, sizeof(msg));
1778	if (p2p_parse_ies(ie, ie_len, &msg) < 0 || msg.p2p_attributes == NULL)
1779	{
1780		p2p_parse_free(&msg);
1781		return; /* not a P2P probe */
1782	}
1783
1784	if (msg.ssid == NULL || msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
1785	    os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
1786	    != 0) {
1787		/* The Probe Request is not part of P2P Device Discovery. It is
1788		 * not known whether the source address of the frame is the P2P
1789		 * Device Address or P2P Interface Address. Do not add a new
1790		 * peer entry based on this frames.
1791		 */
1792		p2p_parse_free(&msg);
1793		return;
1794	}
1795
1796	dev = p2p_get_device(p2p, addr);
1797	if (dev) {
1798		if (dev->country[0] == 0 && msg.listen_channel)
1799			os_memcpy(dev->country, msg.listen_channel, 3);
1800		os_get_reltime(&dev->last_seen);
1801		p2p_parse_free(&msg);
1802		return; /* already known */
1803	}
1804
1805	dev = p2p_create_device(p2p, addr);
1806	if (dev == NULL) {
1807		p2p_parse_free(&msg);
1808		return;
1809	}
1810
1811	os_get_reltime(&dev->last_seen);
1812	dev->flags |= P2P_DEV_PROBE_REQ_ONLY;
1813
1814	if (msg.listen_channel) {
1815		os_memcpy(dev->country, msg.listen_channel, 3);
1816		dev->listen_freq = p2p_channel_to_freq(msg.listen_channel[3],
1817						       msg.listen_channel[4]);
1818	}
1819
1820	p2p_copy_wps_info(p2p, dev, 1, &msg);
1821
1822	if (msg.wfd_subelems) {
1823		wpabuf_free(dev->info.wfd_subelems);
1824		dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
1825	}
1826
1827	p2p_parse_free(&msg);
1828
1829	p2p_dbg(p2p, "Created device entry based on Probe Req: " MACSTR
1830		" dev_capab=0x%x group_capab=0x%x name='%s' listen_freq=%d",
1831		MAC2STR(dev->info.p2p_device_addr), dev->info.dev_capab,
1832		dev->info.group_capab, dev->info.device_name,
1833		dev->listen_freq);
1834}
1835
1836
1837struct p2p_device * p2p_add_dev_from_go_neg_req(struct p2p_data *p2p,
1838						const u8 *addr,
1839						struct p2p_message *msg)
1840{
1841	struct p2p_device *dev;
1842
1843	dev = p2p_get_device(p2p, addr);
1844	if (dev) {
1845		os_get_reltime(&dev->last_seen);
1846		return dev; /* already known */
1847	}
1848
1849	dev = p2p_create_device(p2p, addr);
1850	if (dev == NULL)
1851		return NULL;
1852
1853	p2p_add_dev_info(p2p, addr, dev, msg);
1854
1855	return dev;
1856}
1857
1858
1859static int dev_type_match(const u8 *dev_type, const u8 *req_dev_type)
1860{
1861	if (os_memcmp(dev_type, req_dev_type, WPS_DEV_TYPE_LEN) == 0)
1862		return 1;
1863	if (os_memcmp(dev_type, req_dev_type, 2) == 0 &&
1864	    WPA_GET_BE32(&req_dev_type[2]) == 0 &&
1865	    WPA_GET_BE16(&req_dev_type[6]) == 0)
1866		return 1; /* Category match with wildcard OUI/sub-category */
1867	return 0;
1868}
1869
1870
1871int dev_type_list_match(const u8 *dev_type, const u8 *req_dev_type[],
1872			size_t num_req_dev_type)
1873{
1874	size_t i;
1875	for (i = 0; i < num_req_dev_type; i++) {
1876		if (dev_type_match(dev_type, req_dev_type[i]))
1877			return 1;
1878	}
1879	return 0;
1880}
1881
1882
1883/**
1884 * p2p_match_dev_type - Match local device type with requested type
1885 * @p2p: P2P module context from p2p_init()
1886 * @wps: WPS TLVs from Probe Request frame (concatenated WPS IEs)
1887 * Returns: 1 on match, 0 on mismatch
1888 *
1889 * This function can be used to match the Requested Device Type attribute in
1890 * WPS IE with the local device types for deciding whether to reply to a Probe
1891 * Request frame.
1892 */
1893int p2p_match_dev_type(struct p2p_data *p2p, struct wpabuf *wps)
1894{
1895	struct wps_parse_attr attr;
1896	size_t i;
1897
1898	if (wps_parse_msg(wps, &attr))
1899		return 1; /* assume no Requested Device Type attributes */
1900
1901	if (attr.num_req_dev_type == 0)
1902		return 1; /* no Requested Device Type attributes -> match */
1903
1904	if (dev_type_list_match(p2p->cfg->pri_dev_type, attr.req_dev_type,
1905				attr.num_req_dev_type))
1906		return 1; /* Own Primary Device Type matches */
1907
1908	for (i = 0; i < p2p->cfg->num_sec_dev_types; i++)
1909		if (dev_type_list_match(p2p->cfg->sec_dev_type[i],
1910					attr.req_dev_type,
1911					attr.num_req_dev_type))
1912		return 1; /* Own Secondary Device Type matches */
1913
1914	/* No matching device type found */
1915	return 0;
1916}
1917
1918
1919struct wpabuf * p2p_build_probe_resp_ies(struct p2p_data *p2p)
1920{
1921	struct wpabuf *buf;
1922	u8 *len;
1923	int pw_id = -1;
1924	size_t extra = 0;
1925
1926#ifdef CONFIG_WIFI_DISPLAY
1927	if (p2p->wfd_ie_probe_resp)
1928		extra = wpabuf_len(p2p->wfd_ie_probe_resp);
1929#endif /* CONFIG_WIFI_DISPLAY */
1930
1931	buf = wpabuf_alloc(1000 + extra);
1932	if (buf == NULL)
1933		return NULL;
1934
1935	if (p2p->go_neg_peer) {
1936		/* Advertise immediate availability of WPS credential */
1937		pw_id = p2p_wps_method_pw_id(p2p->go_neg_peer->wps_method);
1938	}
1939
1940	if (p2p_build_wps_ie(p2p, buf, pw_id, 1) < 0) {
1941		p2p_dbg(p2p, "Failed to build WPS IE for Probe Response");
1942		wpabuf_free(buf);
1943		return NULL;
1944	}
1945
1946#ifdef CONFIG_WIFI_DISPLAY
1947	if (p2p->wfd_ie_probe_resp)
1948		wpabuf_put_buf(buf, p2p->wfd_ie_probe_resp);
1949#endif /* CONFIG_WIFI_DISPLAY */
1950
1951	/* P2P IE */
1952	len = p2p_buf_add_ie_hdr(buf);
1953	p2p_buf_add_capability(buf, p2p->dev_capab &
1954			       ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
1955	if (p2p->ext_listen_interval)
1956		p2p_buf_add_ext_listen_timing(buf, p2p->ext_listen_period,
1957					      p2p->ext_listen_interval);
1958	p2p_buf_add_device_info(buf, p2p, NULL);
1959	p2p_buf_update_ie_hdr(buf, len);
1960
1961	return buf;
1962}
1963
1964
1965static enum p2p_probe_req_status
1966p2p_reply_probe(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
1967		const u8 *bssid, const u8 *ie, size_t ie_len)
1968{
1969	struct ieee802_11_elems elems;
1970	struct wpabuf *buf;
1971	struct ieee80211_mgmt *resp;
1972	struct p2p_message msg;
1973	struct wpabuf *ies;
1974
1975	if (!p2p->in_listen || !p2p->drv_in_listen) {
1976		/* not in Listen state - ignore Probe Request */
1977		return P2P_PREQ_NOT_LISTEN;
1978	}
1979
1980	if (ieee802_11_parse_elems((u8 *) ie, ie_len, &elems, 0) ==
1981	    ParseFailed) {
1982		/* Ignore invalid Probe Request frames */
1983		return P2P_PREQ_MALFORMED;
1984	}
1985
1986	if (elems.p2p == NULL) {
1987		/* not a P2P probe - ignore it */
1988		return P2P_PREQ_NOT_P2P;
1989	}
1990
1991	if (dst && !is_broadcast_ether_addr(dst) &&
1992	    os_memcmp(dst, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
1993		/* Not sent to the broadcast address or our P2P Device Address
1994		 */
1995		return P2P_PREQ_NOT_PROCESSED;
1996	}
1997
1998	if (bssid && !is_broadcast_ether_addr(bssid)) {
1999		/* Not sent to the Wildcard BSSID */
2000		return P2P_PREQ_NOT_PROCESSED;
2001	}
2002
2003	if (elems.ssid == NULL || elems.ssid_len != P2P_WILDCARD_SSID_LEN ||
2004	    os_memcmp(elems.ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) !=
2005	    0) {
2006		/* not using P2P Wildcard SSID - ignore */
2007		return P2P_PREQ_NOT_PROCESSED;
2008	}
2009
2010	if (supp_rates_11b_only(&elems)) {
2011		/* Indicates support for 11b rates only */
2012		return P2P_PREQ_NOT_P2P;
2013	}
2014
2015	os_memset(&msg, 0, sizeof(msg));
2016	if (p2p_parse_ies(ie, ie_len, &msg) < 0) {
2017		/* Could not parse P2P attributes */
2018		return P2P_PREQ_NOT_P2P;
2019	}
2020
2021	if (msg.device_id &&
2022	    os_memcmp(msg.device_id, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
2023		/* Device ID did not match */
2024		p2p_parse_free(&msg);
2025		return P2P_PREQ_NOT_PROCESSED;
2026	}
2027
2028	/* Check Requested Device Type match */
2029	if (msg.wps_attributes &&
2030	    !p2p_match_dev_type(p2p, msg.wps_attributes)) {
2031		/* No match with Requested Device Type */
2032		p2p_parse_free(&msg);
2033		return P2P_PREQ_NOT_PROCESSED;
2034	}
2035	p2p_parse_free(&msg);
2036
2037	if (!p2p->cfg->send_probe_resp) {
2038		/* Response generated elsewhere */
2039		return P2P_PREQ_NOT_PROCESSED;
2040	}
2041
2042	p2p_dbg(p2p, "Reply to P2P Probe Request in Listen state");
2043
2044	/*
2045	 * We do not really have a specific BSS that this frame is advertising,
2046	 * so build a frame that has some information in valid format. This is
2047	 * really only used for discovery purposes, not to learn exact BSS
2048	 * parameters.
2049	 */
2050	ies = p2p_build_probe_resp_ies(p2p);
2051	if (ies == NULL)
2052		return P2P_PREQ_NOT_PROCESSED;
2053
2054	buf = wpabuf_alloc(200 + wpabuf_len(ies));
2055	if (buf == NULL) {
2056		wpabuf_free(ies);
2057		return P2P_PREQ_NOT_PROCESSED;
2058	}
2059
2060	resp = NULL;
2061	resp = wpabuf_put(buf, resp->u.probe_resp.variable - (u8 *) resp);
2062
2063	resp->frame_control = host_to_le16((WLAN_FC_TYPE_MGMT << 2) |
2064					   (WLAN_FC_STYPE_PROBE_RESP << 4));
2065	os_memcpy(resp->da, addr, ETH_ALEN);
2066	os_memcpy(resp->sa, p2p->cfg->dev_addr, ETH_ALEN);
2067	os_memcpy(resp->bssid, p2p->cfg->dev_addr, ETH_ALEN);
2068	resp->u.probe_resp.beacon_int = host_to_le16(100);
2069	/* hardware or low-level driver will setup seq_ctrl and timestamp */
2070	resp->u.probe_resp.capab_info =
2071		host_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE |
2072			     WLAN_CAPABILITY_PRIVACY |
2073			     WLAN_CAPABILITY_SHORT_SLOT_TIME);
2074
2075	wpabuf_put_u8(buf, WLAN_EID_SSID);
2076	wpabuf_put_u8(buf, P2P_WILDCARD_SSID_LEN);
2077	wpabuf_put_data(buf, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
2078
2079	wpabuf_put_u8(buf, WLAN_EID_SUPP_RATES);
2080	wpabuf_put_u8(buf, 8);
2081	wpabuf_put_u8(buf, (60 / 5) | 0x80);
2082	wpabuf_put_u8(buf, 90 / 5);
2083	wpabuf_put_u8(buf, (120 / 5) | 0x80);
2084	wpabuf_put_u8(buf, 180 / 5);
2085	wpabuf_put_u8(buf, (240 / 5) | 0x80);
2086	wpabuf_put_u8(buf, 360 / 5);
2087	wpabuf_put_u8(buf, 480 / 5);
2088	wpabuf_put_u8(buf, 540 / 5);
2089
2090	wpabuf_put_u8(buf, WLAN_EID_DS_PARAMS);
2091	wpabuf_put_u8(buf, 1);
2092	wpabuf_put_u8(buf, p2p->cfg->channel);
2093
2094	wpabuf_put_buf(buf, ies);
2095	wpabuf_free(ies);
2096
2097	p2p->cfg->send_probe_resp(p2p->cfg->cb_ctx, buf);
2098
2099	wpabuf_free(buf);
2100
2101	return P2P_PREQ_NOT_PROCESSED;
2102}
2103
2104
2105enum p2p_probe_req_status
2106p2p_probe_req_rx(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
2107		 const u8 *bssid, const u8 *ie, size_t ie_len)
2108{
2109	enum p2p_probe_req_status res;
2110
2111	p2p_add_dev_from_probe_req(p2p, addr, ie, ie_len);
2112
2113	res = p2p_reply_probe(p2p, addr, dst, bssid, ie, ie_len);
2114
2115	if ((p2p->state == P2P_CONNECT || p2p->state == P2P_CONNECT_LISTEN) &&
2116	    p2p->go_neg_peer &&
2117	    os_memcmp(addr, p2p->go_neg_peer->info.p2p_device_addr, ETH_ALEN)
2118	    == 0 &&
2119	    !(p2p->go_neg_peer->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM)) {
2120		/* Received a Probe Request from GO Negotiation peer */
2121		p2p_dbg(p2p, "Found GO Negotiation peer - try to start GO negotiation from timeout");
2122		eloop_cancel_timeout(p2p_go_neg_start, p2p, NULL);
2123		eloop_register_timeout(0, 0, p2p_go_neg_start, p2p, NULL);
2124		return P2P_PREQ_PROCESSED;
2125	}
2126
2127	if ((p2p->state == P2P_INVITE || p2p->state == P2P_INVITE_LISTEN) &&
2128	    p2p->invite_peer &&
2129	    (p2p->invite_peer->flags & P2P_DEV_WAIT_INV_REQ_ACK) &&
2130	    os_memcmp(addr, p2p->invite_peer->info.p2p_device_addr, ETH_ALEN)
2131	    == 0) {
2132		/* Received a Probe Request from Invite peer */
2133		p2p_dbg(p2p, "Found Invite peer - try to start Invite from timeout");
2134		eloop_register_timeout(0, 0, p2p_invite_start, p2p, NULL);
2135		return P2P_PREQ_PROCESSED;
2136	}
2137
2138	return res;
2139}
2140
2141
2142static int p2p_assoc_req_ie_wlan_ap(struct p2p_data *p2p, const u8 *bssid,
2143				    u8 *buf, size_t len, struct wpabuf *p2p_ie)
2144{
2145	struct wpabuf *tmp;
2146	u8 *lpos;
2147	size_t tmplen;
2148	int res;
2149	u8 group_capab;
2150
2151	if (p2p_ie == NULL)
2152		return 0; /* WLAN AP is not a P2P manager */
2153
2154	/*
2155	 * (Re)Association Request - P2P IE
2156	 * P2P Capability attribute (shall be present)
2157	 * P2P Interface attribute (present if concurrent device and
2158	 *	P2P Management is enabled)
2159	 */
2160	tmp = wpabuf_alloc(200);
2161	if (tmp == NULL)
2162		return -1;
2163
2164	lpos = p2p_buf_add_ie_hdr(tmp);
2165	group_capab = 0;
2166	if (p2p->num_groups > 0) {
2167		group_capab |= P2P_GROUP_CAPAB_GROUP_OWNER;
2168		if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2169		    (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED) &&
2170		    p2p->cross_connect)
2171			group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
2172	}
2173	p2p_buf_add_capability(tmp, p2p->dev_capab, group_capab);
2174	if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2175	    (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED))
2176		p2p_buf_add_p2p_interface(tmp, p2p);
2177	p2p_buf_update_ie_hdr(tmp, lpos);
2178
2179	tmplen = wpabuf_len(tmp);
2180	if (tmplen > len)
2181		res = -1;
2182	else {
2183		os_memcpy(buf, wpabuf_head(tmp), tmplen);
2184		res = tmplen;
2185	}
2186	wpabuf_free(tmp);
2187
2188	return res;
2189}
2190
2191
2192int p2p_assoc_req_ie(struct p2p_data *p2p, const u8 *bssid, u8 *buf,
2193		     size_t len, int p2p_group, struct wpabuf *p2p_ie)
2194{
2195	struct wpabuf *tmp;
2196	u8 *lpos;
2197	struct p2p_device *peer;
2198	size_t tmplen;
2199	int res;
2200	size_t extra = 0;
2201
2202	if (!p2p_group)
2203		return p2p_assoc_req_ie_wlan_ap(p2p, bssid, buf, len, p2p_ie);
2204
2205#ifdef CONFIG_WIFI_DISPLAY
2206	if (p2p->wfd_ie_assoc_req)
2207		extra = wpabuf_len(p2p->wfd_ie_assoc_req);
2208#endif /* CONFIG_WIFI_DISPLAY */
2209
2210	/*
2211	 * (Re)Association Request - P2P IE
2212	 * P2P Capability attribute (shall be present)
2213	 * Extended Listen Timing (may be present)
2214	 * P2P Device Info attribute (shall be present)
2215	 */
2216	tmp = wpabuf_alloc(200 + extra);
2217	if (tmp == NULL)
2218		return -1;
2219
2220#ifdef CONFIG_WIFI_DISPLAY
2221	if (p2p->wfd_ie_assoc_req)
2222		wpabuf_put_buf(tmp, p2p->wfd_ie_assoc_req);
2223#endif /* CONFIG_WIFI_DISPLAY */
2224
2225	peer = bssid ? p2p_get_device(p2p, bssid) : NULL;
2226
2227	lpos = p2p_buf_add_ie_hdr(tmp);
2228	p2p_buf_add_capability(tmp, p2p->dev_capab, 0);
2229	if (p2p->ext_listen_interval)
2230		p2p_buf_add_ext_listen_timing(tmp, p2p->ext_listen_period,
2231					      p2p->ext_listen_interval);
2232	p2p_buf_add_device_info(tmp, p2p, peer);
2233	p2p_buf_update_ie_hdr(tmp, lpos);
2234
2235	tmplen = wpabuf_len(tmp);
2236	if (tmplen > len)
2237		res = -1;
2238	else {
2239		os_memcpy(buf, wpabuf_head(tmp), tmplen);
2240		res = tmplen;
2241	}
2242	wpabuf_free(tmp);
2243
2244	return res;
2245}
2246
2247
2248int p2p_scan_result_text(const u8 *ies, size_t ies_len, char *buf, char *end)
2249{
2250	struct wpabuf *p2p_ie;
2251	int ret;
2252
2253	p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len, P2P_IE_VENDOR_TYPE);
2254	if (p2p_ie == NULL)
2255		return 0;
2256
2257	ret = p2p_attr_text(p2p_ie, buf, end);
2258	wpabuf_free(p2p_ie);
2259	return ret;
2260}
2261
2262
2263int p2p_parse_dev_addr_in_p2p_ie(struct wpabuf *p2p_ie, u8 *dev_addr)
2264{
2265	struct p2p_message msg;
2266
2267	os_memset(&msg, 0, sizeof(msg));
2268	if (p2p_parse_p2p_ie(p2p_ie, &msg))
2269		return -1;
2270
2271	if (msg.p2p_device_addr) {
2272		os_memcpy(dev_addr, msg.p2p_device_addr, ETH_ALEN);
2273		return 0;
2274	} else if (msg.device_id) {
2275		os_memcpy(dev_addr, msg.device_id, ETH_ALEN);
2276		return 0;
2277	}
2278	return -1;
2279}
2280
2281
2282int p2p_parse_dev_addr(const u8 *ies, size_t ies_len, u8 *dev_addr)
2283{
2284	struct wpabuf *p2p_ie;
2285	int ret;
2286
2287	p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len,
2288					     P2P_IE_VENDOR_TYPE);
2289	if (p2p_ie == NULL)
2290		return -1;
2291	ret = p2p_parse_dev_addr_in_p2p_ie(p2p_ie, dev_addr);
2292	wpabuf_free(p2p_ie);
2293	return ret;
2294}
2295
2296
2297static void p2p_clear_go_neg(struct p2p_data *p2p)
2298{
2299	p2p->go_neg_peer = NULL;
2300	p2p_clear_timeout(p2p);
2301	p2p_set_state(p2p, P2P_IDLE);
2302}
2303
2304
2305void p2p_wps_success_cb(struct p2p_data *p2p, const u8 *mac_addr)
2306{
2307	if (p2p->go_neg_peer == NULL) {
2308		p2p_dbg(p2p, "No pending Group Formation - ignore WPS registration success notification");
2309		return; /* No pending Group Formation */
2310	}
2311
2312	if (os_memcmp(mac_addr, p2p->go_neg_peer->intended_addr, ETH_ALEN) !=
2313	    0) {
2314		p2p_dbg(p2p, "Ignore WPS registration success notification for "
2315			MACSTR " (GO Negotiation peer " MACSTR ")",
2316			MAC2STR(mac_addr),
2317			MAC2STR(p2p->go_neg_peer->intended_addr));
2318		return; /* Ignore unexpected peer address */
2319	}
2320
2321	p2p_dbg(p2p, "Group Formation completed successfully with " MACSTR,
2322		MAC2STR(mac_addr));
2323
2324	p2p_clear_go_neg(p2p);
2325}
2326
2327
2328void p2p_group_formation_failed(struct p2p_data *p2p)
2329{
2330	if (p2p->go_neg_peer == NULL) {
2331		p2p_dbg(p2p, "No pending Group Formation - ignore group formation failure notification");
2332		return; /* No pending Group Formation */
2333	}
2334
2335	p2p_dbg(p2p, "Group Formation failed with " MACSTR,
2336		MAC2STR(p2p->go_neg_peer->intended_addr));
2337
2338	p2p_clear_go_neg(p2p);
2339}
2340
2341
2342struct p2p_data * p2p_init(const struct p2p_config *cfg)
2343{
2344	struct p2p_data *p2p;
2345
2346	if (cfg->max_peers < 1)
2347		return NULL;
2348
2349	p2p = os_zalloc(sizeof(*p2p) + sizeof(*cfg));
2350	if (p2p == NULL)
2351		return NULL;
2352	p2p->cfg = (struct p2p_config *) (p2p + 1);
2353	os_memcpy(p2p->cfg, cfg, sizeof(*cfg));
2354	if (cfg->dev_name)
2355		p2p->cfg->dev_name = os_strdup(cfg->dev_name);
2356	if (cfg->manufacturer)
2357		p2p->cfg->manufacturer = os_strdup(cfg->manufacturer);
2358	if (cfg->model_name)
2359		p2p->cfg->model_name = os_strdup(cfg->model_name);
2360	if (cfg->model_number)
2361		p2p->cfg->model_number = os_strdup(cfg->model_number);
2362	if (cfg->serial_number)
2363		p2p->cfg->serial_number = os_strdup(cfg->serial_number);
2364	if (cfg->pref_chan) {
2365		p2p->cfg->pref_chan = os_malloc(cfg->num_pref_chan *
2366						sizeof(struct p2p_channel));
2367		if (p2p->cfg->pref_chan) {
2368			os_memcpy(p2p->cfg->pref_chan, cfg->pref_chan,
2369				  cfg->num_pref_chan *
2370				  sizeof(struct p2p_channel));
2371		} else
2372			p2p->cfg->num_pref_chan = 0;
2373	}
2374
2375	p2p->min_disc_int = 1;
2376	p2p->max_disc_int = 3;
2377	p2p->max_disc_tu = -1;
2378
2379	os_get_random(&p2p->next_tie_breaker, 1);
2380	p2p->next_tie_breaker &= 0x01;
2381	if (cfg->sd_request)
2382		p2p->dev_capab |= P2P_DEV_CAPAB_SERVICE_DISCOVERY;
2383	p2p->dev_capab |= P2P_DEV_CAPAB_INVITATION_PROCEDURE;
2384	if (cfg->concurrent_operations)
2385		p2p->dev_capab |= P2P_DEV_CAPAB_CONCURRENT_OPER;
2386	p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
2387
2388	dl_list_init(&p2p->devices);
2389
2390	eloop_register_timeout(P2P_PEER_EXPIRATION_INTERVAL, 0,
2391			       p2p_expiration_timeout, p2p, NULL);
2392
2393	p2p->go_timeout = 100;
2394	p2p->client_timeout = 20;
2395
2396	p2p_dbg(p2p, "initialized");
2397	p2p_channels_dump(p2p, "channels", &p2p->cfg->channels);
2398	p2p_channels_dump(p2p, "cli_channels", &p2p->cfg->cli_channels);
2399
2400	return p2p;
2401}
2402
2403
2404void p2p_deinit(struct p2p_data *p2p)
2405{
2406#ifdef CONFIG_WIFI_DISPLAY
2407	wpabuf_free(p2p->wfd_ie_beacon);
2408	wpabuf_free(p2p->wfd_ie_probe_req);
2409	wpabuf_free(p2p->wfd_ie_probe_resp);
2410	wpabuf_free(p2p->wfd_ie_assoc_req);
2411	wpabuf_free(p2p->wfd_ie_invitation);
2412	wpabuf_free(p2p->wfd_ie_prov_disc_req);
2413	wpabuf_free(p2p->wfd_ie_prov_disc_resp);
2414	wpabuf_free(p2p->wfd_ie_go_neg);
2415	wpabuf_free(p2p->wfd_dev_info);
2416	wpabuf_free(p2p->wfd_assoc_bssid);
2417	wpabuf_free(p2p->wfd_coupled_sink_info);
2418#endif /* CONFIG_WIFI_DISPLAY */
2419
2420	eloop_cancel_timeout(p2p_expiration_timeout, p2p, NULL);
2421	eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
2422	eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
2423	eloop_cancel_timeout(p2p_go_neg_start, p2p, NULL);
2424	p2p_flush(p2p);
2425	p2p_free_req_dev_types(p2p);
2426	os_free(p2p->cfg->dev_name);
2427	os_free(p2p->cfg->manufacturer);
2428	os_free(p2p->cfg->model_name);
2429	os_free(p2p->cfg->model_number);
2430	os_free(p2p->cfg->serial_number);
2431	os_free(p2p->cfg->pref_chan);
2432	os_free(p2p->groups);
2433	wpabuf_free(p2p->sd_resp);
2434	os_free(p2p->after_scan_tx);
2435	p2p_remove_wps_vendor_extensions(p2p);
2436	os_free(p2p->no_go_freq.range);
2437	os_free(p2p);
2438}
2439
2440
2441void p2p_flush(struct p2p_data *p2p)
2442{
2443	struct p2p_device *dev, *prev;
2444	p2p_stop_find(p2p);
2445	dl_list_for_each_safe(dev, prev, &p2p->devices, struct p2p_device,
2446			      list) {
2447		dl_list_del(&dev->list);
2448		p2p_device_free(p2p, dev);
2449	}
2450	p2p_free_sd_queries(p2p);
2451	os_free(p2p->after_scan_tx);
2452	p2p->after_scan_tx = NULL;
2453}
2454
2455
2456int p2p_unauthorize(struct p2p_data *p2p, const u8 *addr)
2457{
2458	struct p2p_device *dev;
2459
2460	dev = p2p_get_device(p2p, addr);
2461	if (dev == NULL)
2462		return -1;
2463
2464	p2p_dbg(p2p, "Unauthorizing " MACSTR, MAC2STR(addr));
2465
2466	if (p2p->go_neg_peer == dev)
2467		p2p->go_neg_peer = NULL;
2468
2469	dev->wps_method = WPS_NOT_READY;
2470	dev->oob_pw_id = 0;
2471	dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
2472	dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
2473
2474	/* Check if after_scan_tx is for this peer. If so free it */
2475	if (p2p->after_scan_tx &&
2476	    os_memcmp(addr, p2p->after_scan_tx->dst, ETH_ALEN) == 0) {
2477		os_free(p2p->after_scan_tx);
2478		p2p->after_scan_tx = NULL;
2479	}
2480
2481	return 0;
2482}
2483
2484
2485int p2p_set_dev_name(struct p2p_data *p2p, const char *dev_name)
2486{
2487	os_free(p2p->cfg->dev_name);
2488	if (dev_name) {
2489		p2p->cfg->dev_name = os_strdup(dev_name);
2490		if (p2p->cfg->dev_name == NULL)
2491			return -1;
2492	} else
2493		p2p->cfg->dev_name = NULL;
2494	return 0;
2495}
2496
2497
2498int p2p_set_manufacturer(struct p2p_data *p2p, const char *manufacturer)
2499{
2500	os_free(p2p->cfg->manufacturer);
2501	p2p->cfg->manufacturer = NULL;
2502	if (manufacturer) {
2503		p2p->cfg->manufacturer = os_strdup(manufacturer);
2504		if (p2p->cfg->manufacturer == NULL)
2505			return -1;
2506	}
2507
2508	return 0;
2509}
2510
2511
2512int p2p_set_model_name(struct p2p_data *p2p, const char *model_name)
2513{
2514	os_free(p2p->cfg->model_name);
2515	p2p->cfg->model_name = NULL;
2516	if (model_name) {
2517		p2p->cfg->model_name = os_strdup(model_name);
2518		if (p2p->cfg->model_name == NULL)
2519			return -1;
2520	}
2521
2522	return 0;
2523}
2524
2525
2526int p2p_set_model_number(struct p2p_data *p2p, const char *model_number)
2527{
2528	os_free(p2p->cfg->model_number);
2529	p2p->cfg->model_number = NULL;
2530	if (model_number) {
2531		p2p->cfg->model_number = os_strdup(model_number);
2532		if (p2p->cfg->model_number == NULL)
2533			return -1;
2534	}
2535
2536	return 0;
2537}
2538
2539
2540int p2p_set_serial_number(struct p2p_data *p2p, const char *serial_number)
2541{
2542	os_free(p2p->cfg->serial_number);
2543	p2p->cfg->serial_number = NULL;
2544	if (serial_number) {
2545		p2p->cfg->serial_number = os_strdup(serial_number);
2546		if (p2p->cfg->serial_number == NULL)
2547			return -1;
2548	}
2549
2550	return 0;
2551}
2552
2553
2554void p2p_set_config_methods(struct p2p_data *p2p, u16 config_methods)
2555{
2556	p2p->cfg->config_methods = config_methods;
2557}
2558
2559
2560void p2p_set_uuid(struct p2p_data *p2p, const u8 *uuid)
2561{
2562	os_memcpy(p2p->cfg->uuid, uuid, 16);
2563}
2564
2565
2566int p2p_set_pri_dev_type(struct p2p_data *p2p, const u8 *pri_dev_type)
2567{
2568	os_memcpy(p2p->cfg->pri_dev_type, pri_dev_type, 8);
2569	return 0;
2570}
2571
2572
2573int p2p_set_sec_dev_types(struct p2p_data *p2p, const u8 dev_types[][8],
2574			  size_t num_dev_types)
2575{
2576	if (num_dev_types > P2P_SEC_DEVICE_TYPES)
2577		num_dev_types = P2P_SEC_DEVICE_TYPES;
2578	p2p->cfg->num_sec_dev_types = num_dev_types;
2579	os_memcpy(p2p->cfg->sec_dev_type, dev_types, num_dev_types * 8);
2580	return 0;
2581}
2582
2583
2584void p2p_remove_wps_vendor_extensions(struct p2p_data *p2p)
2585{
2586	int i;
2587
2588	for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
2589		wpabuf_free(p2p->wps_vendor_ext[i]);
2590		p2p->wps_vendor_ext[i] = NULL;
2591	}
2592}
2593
2594
2595int p2p_add_wps_vendor_extension(struct p2p_data *p2p,
2596				 const struct wpabuf *vendor_ext)
2597{
2598	int i;
2599
2600	if (vendor_ext == NULL)
2601		return -1;
2602
2603	for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
2604		if (p2p->wps_vendor_ext[i] == NULL)
2605			break;
2606	}
2607	if (i >= P2P_MAX_WPS_VENDOR_EXT)
2608		return -1;
2609
2610	p2p->wps_vendor_ext[i] = wpabuf_dup(vendor_ext);
2611	if (p2p->wps_vendor_ext[i] == NULL)
2612		return -1;
2613
2614	return 0;
2615}
2616
2617
2618int p2p_set_country(struct p2p_data *p2p, const char *country)
2619{
2620	os_memcpy(p2p->cfg->country, country, 3);
2621	return 0;
2622}
2623
2624
2625void p2p_continue_find(struct p2p_data *p2p)
2626{
2627	struct p2p_device *dev;
2628	p2p_set_state(p2p, P2P_SEARCH);
2629	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
2630		if (dev->flags & P2P_DEV_SD_SCHEDULE) {
2631			if (p2p_start_sd(p2p, dev) == 0)
2632				return;
2633			else
2634				break;
2635		} else if (dev->req_config_methods &&
2636			   !(dev->flags & P2P_DEV_PD_FOR_JOIN)) {
2637			p2p_dbg(p2p, "Send pending Provision Discovery Request to "
2638				MACSTR " (config methods 0x%x)",
2639				MAC2STR(dev->info.p2p_device_addr),
2640				dev->req_config_methods);
2641			if (p2p_send_prov_disc_req(p2p, dev, 0, 0) == 0)
2642				return;
2643		}
2644	}
2645
2646	p2p_listen_in_find(p2p, 1);
2647}
2648
2649
2650static void p2p_sd_cb(struct p2p_data *p2p, int success)
2651{
2652	p2p_dbg(p2p, "Service Discovery Query TX callback: success=%d",
2653		success);
2654	p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2655
2656	if (!success) {
2657		if (p2p->sd_peer) {
2658			p2p->sd_peer->flags &= ~P2P_DEV_SD_SCHEDULE;
2659			p2p->sd_peer = NULL;
2660		}
2661		p2p_continue_find(p2p);
2662		return;
2663	}
2664
2665	if (p2p->sd_peer == NULL) {
2666		p2p_dbg(p2p, "No SD peer entry known");
2667		p2p_continue_find(p2p);
2668		return;
2669	}
2670
2671	/* Wait for response from the peer */
2672	p2p_set_state(p2p, P2P_SD_DURING_FIND);
2673	p2p_set_timeout(p2p, 0, 200000);
2674}
2675
2676
2677/**
2678 * p2p_retry_pd - Retry any pending provision disc requests in IDLE state
2679 * @p2p: P2P module context from p2p_init()
2680 */
2681static void p2p_retry_pd(struct p2p_data *p2p)
2682{
2683	struct p2p_device *dev;
2684
2685	if (p2p->state != P2P_IDLE)
2686		return;
2687
2688	/*
2689	 * Retry the prov disc req attempt only for the peer that the user had
2690	 * requested.
2691	 */
2692
2693	dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
2694		if (os_memcmp(p2p->pending_pd_devaddr,
2695			      dev->info.p2p_device_addr, ETH_ALEN) != 0)
2696			continue;
2697		if (!dev->req_config_methods)
2698			continue;
2699
2700		p2p_dbg(p2p, "Send pending Provision Discovery Request to "
2701			MACSTR " (config methods 0x%x)",
2702			MAC2STR(dev->info.p2p_device_addr),
2703			dev->req_config_methods);
2704		p2p_send_prov_disc_req(p2p, dev,
2705				       dev->flags & P2P_DEV_PD_FOR_JOIN,
2706				       p2p->pd_force_freq);
2707		return;
2708	}
2709}
2710
2711
2712static void p2p_prov_disc_cb(struct p2p_data *p2p, int success)
2713{
2714	p2p_dbg(p2p, "Provision Discovery Request TX callback: success=%d",
2715		success);
2716
2717	/*
2718	 * Postpone resetting the pending action state till after we actually
2719	 * time out. This allows us to take some action like notifying any
2720	 * interested parties about no response to the request.
2721	 *
2722	 * When the timer (below) goes off we check in IDLE, SEARCH, or
2723	 * LISTEN_ONLY state, which are the only allowed states to issue a PD
2724	 * requests in, if this was still pending and then raise notification.
2725	 */
2726
2727	if (!success) {
2728		p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2729
2730		if (p2p->user_initiated_pd &&
2731		    (p2p->state == P2P_SEARCH || p2p->state == P2P_LISTEN_ONLY))
2732		{
2733			/* Retry request from timeout to avoid busy loops */
2734			p2p->pending_action_state = P2P_PENDING_PD;
2735			p2p_set_timeout(p2p, 0, 50000);
2736		} else if (p2p->state != P2P_IDLE)
2737			p2p_continue_find(p2p);
2738		else if (p2p->user_initiated_pd) {
2739			p2p->pending_action_state = P2P_PENDING_PD;
2740			p2p_set_timeout(p2p, 0, 300000);
2741		}
2742		return;
2743	}
2744
2745	/*
2746	 * This postponing, of resetting pending_action_state, needs to be
2747	 * done only for user initiated PD requests and not internal ones.
2748	 */
2749	if (p2p->user_initiated_pd)
2750		p2p->pending_action_state = P2P_PENDING_PD;
2751	else
2752		p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2753
2754	/* Wait for response from the peer */
2755	if (p2p->state == P2P_SEARCH)
2756		p2p_set_state(p2p, P2P_PD_DURING_FIND);
2757	p2p_set_timeout(p2p, 0, 200000);
2758}
2759
2760
2761int p2p_scan_res_handler(struct p2p_data *p2p, const u8 *bssid, int freq,
2762			 struct os_reltime *rx_time, int level, const u8 *ies,
2763			 size_t ies_len)
2764{
2765	if (os_reltime_before(rx_time, &p2p->find_start)) {
2766		/*
2767		 * The driver may have cached (e.g., in cfg80211 BSS table) the
2768		 * scan results for relatively long time. To avoid reporting
2769		 * stale information, update P2P peers only based on results
2770		 * that have based on frames received after the last p2p_find
2771		 * operation was started.
2772		 */
2773		p2p_dbg(p2p, "Ignore old scan result for " MACSTR
2774			" (rx_time=%u.%06u)",
2775			MAC2STR(bssid), (unsigned int) rx_time->sec,
2776			(unsigned int) rx_time->usec);
2777		return 0;
2778	}
2779
2780	p2p_add_device(p2p, bssid, freq, rx_time, level, ies, ies_len, 1);
2781
2782	return 0;
2783}
2784
2785
2786void p2p_scan_res_handled(struct p2p_data *p2p)
2787{
2788	if (!p2p->p2p_scan_running) {
2789		p2p_dbg(p2p, "p2p_scan was not running, but scan results received");
2790	}
2791	p2p->p2p_scan_running = 0;
2792	eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
2793
2794	if (p2p_run_after_scan(p2p))
2795		return;
2796	if (p2p->state == P2P_SEARCH)
2797		p2p_continue_find(p2p);
2798}
2799
2800
2801void p2p_scan_ie(struct p2p_data *p2p, struct wpabuf *ies, const u8 *dev_id)
2802{
2803	u8 *len;
2804
2805#ifdef CONFIG_WIFI_DISPLAY
2806	if (p2p->wfd_ie_probe_req)
2807		wpabuf_put_buf(ies, p2p->wfd_ie_probe_req);
2808#endif /* CONFIG_WIFI_DISPLAY */
2809
2810	len = p2p_buf_add_ie_hdr(ies);
2811	p2p_buf_add_capability(ies, p2p->dev_capab &
2812			       ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
2813	if (dev_id)
2814		p2p_buf_add_device_id(ies, dev_id);
2815	if (p2p->cfg->reg_class && p2p->cfg->channel)
2816		p2p_buf_add_listen_channel(ies, p2p->cfg->country,
2817					   p2p->cfg->reg_class,
2818					   p2p->cfg->channel);
2819	if (p2p->ext_listen_interval)
2820		p2p_buf_add_ext_listen_timing(ies, p2p->ext_listen_period,
2821					      p2p->ext_listen_interval);
2822	/* TODO: p2p_buf_add_operating_channel() if GO */
2823	p2p_buf_update_ie_hdr(ies, len);
2824}
2825
2826
2827size_t p2p_scan_ie_buf_len(struct p2p_data *p2p)
2828{
2829	size_t len = 100;
2830
2831#ifdef CONFIG_WIFI_DISPLAY
2832	if (p2p && p2p->wfd_ie_probe_req)
2833		len += wpabuf_len(p2p->wfd_ie_probe_req);
2834#endif /* CONFIG_WIFI_DISPLAY */
2835
2836	return len;
2837}
2838
2839
2840int p2p_ie_text(struct wpabuf *p2p_ie, char *buf, char *end)
2841{
2842	return p2p_attr_text(p2p_ie, buf, end);
2843}
2844
2845
2846static void p2p_go_neg_req_cb(struct p2p_data *p2p, int success)
2847{
2848	struct p2p_device *dev = p2p->go_neg_peer;
2849	int timeout;
2850
2851	p2p_dbg(p2p, "GO Negotiation Request TX callback: success=%d", success);
2852
2853	if (dev == NULL) {
2854		p2p_dbg(p2p, "No pending GO Negotiation");
2855		return;
2856	}
2857
2858	if (success) {
2859		if (dev->flags & P2P_DEV_USER_REJECTED) {
2860			p2p_set_state(p2p, P2P_IDLE);
2861			return;
2862		}
2863	} else if (dev->go_neg_req_sent) {
2864		/* Cancel the increment from p2p_connect_send() on failure */
2865		dev->go_neg_req_sent--;
2866	}
2867
2868	if (!success &&
2869	    (dev->info.dev_capab & P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY) &&
2870	    !is_zero_ether_addr(dev->member_in_go_dev)) {
2871		p2p_dbg(p2p, "Peer " MACSTR " did not acknowledge request - try to use device discoverability through its GO",
2872			MAC2STR(dev->info.p2p_device_addr));
2873		p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
2874		p2p_send_dev_disc_req(p2p, dev);
2875		return;
2876	}
2877
2878	/*
2879	 * Use P2P find, if needed, to find the other device from its listen
2880	 * channel.
2881	 */
2882	p2p_set_state(p2p, P2P_CONNECT);
2883	timeout = success ? 500000 : 100000;
2884	if (!success && p2p->go_neg_peer &&
2885	    (p2p->go_neg_peer->flags & P2P_DEV_PEER_WAITING_RESPONSE)) {
2886		unsigned int r;
2887		/*
2888		 * Peer is expected to wait our response and we will skip the
2889		 * listen phase. Add some randomness to the wait time here to
2890		 * make it less likely to hit cases where we could end up in
2891		 * sync with peer not listening.
2892		 */
2893		os_get_random((u8 *) &r, sizeof(r));
2894		timeout += r % 100000;
2895	}
2896	p2p_set_timeout(p2p, 0, timeout);
2897}
2898
2899
2900static void p2p_go_neg_resp_cb(struct p2p_data *p2p, int success)
2901{
2902	p2p_dbg(p2p, "GO Negotiation Response TX callback: success=%d",
2903		success);
2904	if (!p2p->go_neg_peer && p2p->state == P2P_PROVISIONING) {
2905		p2p_dbg(p2p, "Ignore TX callback event - GO Negotiation is not running anymore");
2906		return;
2907	}
2908	p2p_set_state(p2p, P2P_CONNECT);
2909	p2p_set_timeout(p2p, 0, 500000);
2910}
2911
2912
2913static void p2p_go_neg_resp_failure_cb(struct p2p_data *p2p, int success,
2914				       const u8 *addr)
2915{
2916	p2p_dbg(p2p, "GO Negotiation Response (failure) TX callback: success=%d", success);
2917	if (p2p->go_neg_peer && p2p->go_neg_peer->status != P2P_SC_SUCCESS) {
2918		p2p_go_neg_failed(p2p, p2p->go_neg_peer,
2919				  p2p->go_neg_peer->status);
2920	} else if (success) {
2921		struct p2p_device *dev;
2922		dev = p2p_get_device(p2p, addr);
2923		if (dev &&
2924		    dev->status == P2P_SC_FAIL_INFO_CURRENTLY_UNAVAILABLE)
2925			dev->flags |= P2P_DEV_PEER_WAITING_RESPONSE;
2926	}
2927}
2928
2929
2930static void p2p_go_neg_conf_cb(struct p2p_data *p2p,
2931			       enum p2p_send_action_result result)
2932{
2933	struct p2p_device *dev;
2934
2935	p2p_dbg(p2p, "GO Negotiation Confirm TX callback: result=%d", result);
2936	p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
2937	if (result == P2P_SEND_ACTION_FAILED) {
2938		p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
2939		return;
2940	}
2941	if (result == P2P_SEND_ACTION_NO_ACK) {
2942		/*
2943		 * It looks like the TX status for GO Negotiation Confirm is
2944		 * often showing failure even when the peer has actually
2945		 * received the frame. Since the peer may change channels
2946		 * immediately after having received the frame, we may not see
2947		 * an Ack for retries, so just dropping a single frame may
2948		 * trigger this. To allow the group formation to succeed if the
2949		 * peer did indeed receive the frame, continue regardless of
2950		 * the TX status.
2951		 */
2952		p2p_dbg(p2p, "Assume GO Negotiation Confirm TX was actually received by the peer even though Ack was not reported");
2953	}
2954
2955	dev = p2p->go_neg_peer;
2956	if (dev == NULL)
2957		return;
2958
2959	p2p_go_complete(p2p, dev);
2960}
2961
2962
2963void p2p_send_action_cb(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
2964			const u8 *src, const u8 *bssid,
2965			enum p2p_send_action_result result)
2966{
2967	enum p2p_pending_action_state state;
2968	int success;
2969
2970	p2p_dbg(p2p, "Action frame TX callback (state=%d freq=%u dst=" MACSTR
2971		" src=" MACSTR " bssid=" MACSTR " result=%d",
2972		p2p->pending_action_state, freq, MAC2STR(dst), MAC2STR(src),
2973		MAC2STR(bssid), result);
2974	success = result == P2P_SEND_ACTION_SUCCESS;
2975	state = p2p->pending_action_state;
2976	p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2977	switch (state) {
2978	case P2P_NO_PENDING_ACTION:
2979		if (p2p->after_scan_tx_in_progress) {
2980			p2p->after_scan_tx_in_progress = 0;
2981			if (p2p->start_after_scan != P2P_AFTER_SCAN_NOTHING &&
2982			    p2p_run_after_scan(p2p))
2983				break;
2984			if (p2p->state == P2P_SEARCH) {
2985				p2p_dbg(p2p, "Continue find after after_scan_tx completion");
2986				p2p_continue_find(p2p);
2987			}
2988		}
2989		break;
2990	case P2P_PENDING_GO_NEG_REQUEST:
2991		p2p_go_neg_req_cb(p2p, success);
2992		break;
2993	case P2P_PENDING_GO_NEG_RESPONSE:
2994		p2p_go_neg_resp_cb(p2p, success);
2995		break;
2996	case P2P_PENDING_GO_NEG_RESPONSE_FAILURE:
2997		p2p_go_neg_resp_failure_cb(p2p, success, dst);
2998		break;
2999	case P2P_PENDING_GO_NEG_CONFIRM:
3000		p2p_go_neg_conf_cb(p2p, result);
3001		break;
3002	case P2P_PENDING_SD:
3003		p2p_sd_cb(p2p, success);
3004		break;
3005	case P2P_PENDING_PD:
3006		p2p_prov_disc_cb(p2p, success);
3007		break;
3008	case P2P_PENDING_INVITATION_REQUEST:
3009		p2p_invitation_req_cb(p2p, success);
3010		break;
3011	case P2P_PENDING_INVITATION_RESPONSE:
3012		p2p_invitation_resp_cb(p2p, success);
3013		break;
3014	case P2P_PENDING_DEV_DISC_REQUEST:
3015		p2p_dev_disc_req_cb(p2p, success);
3016		break;
3017	case P2P_PENDING_DEV_DISC_RESPONSE:
3018		p2p_dev_disc_resp_cb(p2p, success);
3019		break;
3020	case P2P_PENDING_GO_DISC_REQ:
3021		p2p_go_disc_req_cb(p2p, success);
3022		break;
3023	}
3024
3025	p2p->after_scan_tx_in_progress = 0;
3026}
3027
3028
3029void p2p_listen_cb(struct p2p_data *p2p, unsigned int freq,
3030		   unsigned int duration)
3031{
3032	if (freq == p2p->pending_client_disc_freq) {
3033		p2p_dbg(p2p, "Client discoverability remain-awake completed");
3034		p2p->pending_client_disc_freq = 0;
3035		return;
3036	}
3037
3038	if (freq != p2p->pending_listen_freq) {
3039		p2p_dbg(p2p, "Unexpected listen callback for freq=%u duration=%u (pending_listen_freq=%u)",
3040			freq, duration, p2p->pending_listen_freq);
3041		return;
3042	}
3043
3044	p2p_dbg(p2p, "Starting Listen timeout(%u,%u) on freq=%u based on callback",
3045		p2p->pending_listen_sec, p2p->pending_listen_usec,
3046		p2p->pending_listen_freq);
3047	p2p->in_listen = 1;
3048	p2p->drv_in_listen = freq;
3049	if (p2p->pending_listen_sec || p2p->pending_listen_usec) {
3050		/*
3051		 * Add 20 msec extra wait to avoid race condition with driver
3052		 * remain-on-channel end event, i.e., give driver more time to
3053		 * complete the operation before our timeout expires.
3054		 */
3055		p2p_set_timeout(p2p, p2p->pending_listen_sec,
3056				p2p->pending_listen_usec + 20000);
3057	}
3058
3059	p2p->pending_listen_freq = 0;
3060}
3061
3062
3063int p2p_listen_end(struct p2p_data *p2p, unsigned int freq)
3064{
3065	p2p_dbg(p2p, "Driver ended Listen state (freq=%u)", freq);
3066	p2p->drv_in_listen = 0;
3067	if (p2p->in_listen)
3068		return 0; /* Internal timeout will trigger the next step */
3069
3070	if (p2p->state == P2P_CONNECT_LISTEN && p2p->go_neg_peer) {
3071		if (p2p->go_neg_peer->connect_reqs >= 120) {
3072			p2p_dbg(p2p, "Timeout on sending GO Negotiation Request without getting response");
3073			p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3074			return 0;
3075		}
3076
3077		p2p_set_state(p2p, P2P_CONNECT);
3078		p2p_connect_send(p2p, p2p->go_neg_peer);
3079		return 1;
3080	} else if (p2p->state == P2P_SEARCH) {
3081		if (p2p->p2p_scan_running) {
3082			 /*
3083			  * Search is already in progress. This can happen if
3084			  * an Action frame RX is reported immediately after
3085			  * the end of a remain-on-channel operation and the
3086			  * response frame to that is sent using an offchannel
3087			  * operation while in p2p_find. Avoid an attempt to
3088			  * restart a scan here.
3089			  */
3090			p2p_dbg(p2p, "p2p_scan already in progress - do not try to start a new one");
3091			return 1;
3092		}
3093		if (p2p->pending_listen_freq) {
3094			/*
3095			 * Better wait a bit if the driver is unable to start
3096			 * offchannel operation for some reason. p2p_search()
3097			 * will be started from internal timeout.
3098			 */
3099			p2p_dbg(p2p, "Listen operation did not seem to start - delay search phase to avoid busy loop");
3100			p2p_set_timeout(p2p, 0, 100000);
3101			return 1;
3102		}
3103		if (p2p->search_delay) {
3104			p2p_dbg(p2p, "Delay search operation by %u ms",
3105				p2p->search_delay);
3106			p2p_set_timeout(p2p, p2p->search_delay / 1000,
3107					(p2p->search_delay % 1000) * 1000);
3108			return 1;
3109		}
3110		p2p_search(p2p);
3111		return 1;
3112	}
3113
3114	return 0;
3115}
3116
3117
3118static void p2p_timeout_connect(struct p2p_data *p2p)
3119{
3120	p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3121	if (p2p->go_neg_peer &&
3122	    (p2p->go_neg_peer->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM)) {
3123		p2p_dbg(p2p, "Wait for GO Negotiation Confirm timed out - assume GO Negotiation failed");
3124		p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3125		return;
3126	}
3127	if (p2p->go_neg_peer &&
3128	    (p2p->go_neg_peer->flags & P2P_DEV_PEER_WAITING_RESPONSE) &&
3129	    p2p->go_neg_peer->connect_reqs < 120) {
3130		p2p_dbg(p2p, "Peer expected to wait our response - skip listen");
3131		p2p_connect_send(p2p, p2p->go_neg_peer);
3132		return;
3133	}
3134	if (p2p->go_neg_peer && p2p->go_neg_peer->oob_go_neg_freq > 0) {
3135		p2p_dbg(p2p, "Skip connect-listen since GO Neg channel known (OOB)");
3136		p2p_set_state(p2p, P2P_CONNECT_LISTEN);
3137		p2p_set_timeout(p2p, 0, 30000);
3138		return;
3139	}
3140	p2p_set_state(p2p, P2P_CONNECT_LISTEN);
3141	p2p_listen_in_find(p2p, 0);
3142}
3143
3144
3145static void p2p_timeout_connect_listen(struct p2p_data *p2p)
3146{
3147	if (p2p->go_neg_peer) {
3148		if (p2p->drv_in_listen) {
3149			p2p_dbg(p2p, "Driver is still in Listen state; wait for it to complete");
3150			return;
3151		}
3152
3153		if (p2p->go_neg_peer->connect_reqs >= 120) {
3154			p2p_dbg(p2p, "Timeout on sending GO Negotiation Request without getting response");
3155			p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3156			return;
3157		}
3158
3159		p2p_set_state(p2p, P2P_CONNECT);
3160		p2p_connect_send(p2p, p2p->go_neg_peer);
3161	} else
3162		p2p_set_state(p2p, P2P_IDLE);
3163}
3164
3165
3166static void p2p_timeout_wait_peer_connect(struct p2p_data *p2p)
3167{
3168	p2p_set_state(p2p, P2P_WAIT_PEER_IDLE);
3169
3170	if (p2p->cfg->is_concurrent_session_active &&
3171	    p2p->cfg->is_concurrent_session_active(p2p->cfg->cb_ctx))
3172		p2p_set_timeout(p2p, 0, 500000);
3173	else
3174		p2p_set_timeout(p2p, 0, 200000);
3175}
3176
3177
3178static void p2p_timeout_wait_peer_idle(struct p2p_data *p2p)
3179{
3180	struct p2p_device *dev = p2p->go_neg_peer;
3181
3182	if (dev == NULL) {
3183		p2p_dbg(p2p, "Unknown GO Neg peer - stop GO Neg wait");
3184		return;
3185	}
3186
3187	dev->wait_count++;
3188	if (dev->wait_count >= 120) {
3189		p2p_dbg(p2p, "Timeout on waiting peer to become ready for GO Negotiation");
3190		p2p_go_neg_failed(p2p, dev, -1);
3191		return;
3192	}
3193
3194	p2p_dbg(p2p, "Go to Listen state while waiting for the peer to become ready for GO Negotiation");
3195	p2p_set_state(p2p, P2P_WAIT_PEER_CONNECT);
3196	p2p_listen_in_find(p2p, 0);
3197}
3198
3199
3200static void p2p_timeout_sd_during_find(struct p2p_data *p2p)
3201{
3202	p2p_dbg(p2p, "Service Discovery Query timeout");
3203	if (p2p->sd_peer) {
3204		p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3205		p2p->sd_peer->flags &= ~P2P_DEV_SD_SCHEDULE;
3206		p2p->sd_peer = NULL;
3207	}
3208	p2p_continue_find(p2p);
3209}
3210
3211
3212static void p2p_timeout_prov_disc_during_find(struct p2p_data *p2p)
3213{
3214	p2p_dbg(p2p, "Provision Discovery Request timeout");
3215	p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3216	p2p_continue_find(p2p);
3217}
3218
3219
3220static void p2p_timeout_prov_disc_req(struct p2p_data *p2p)
3221{
3222	p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3223
3224	/*
3225	 * For user initiated PD requests that we have not gotten any responses
3226	 * for while in IDLE state, we retry them a couple of times before
3227	 * giving up.
3228	 */
3229	if (!p2p->user_initiated_pd)
3230		return;
3231
3232	p2p_dbg(p2p, "User initiated Provision Discovery Request timeout");
3233
3234	if (p2p->pd_retries) {
3235		p2p->pd_retries--;
3236		p2p_retry_pd(p2p);
3237	} else {
3238		struct p2p_device *dev;
3239		int for_join = 0;
3240
3241		dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
3242			if (os_memcmp(p2p->pending_pd_devaddr,
3243				      dev->info.p2p_device_addr, ETH_ALEN) != 0)
3244				continue;
3245			if (dev->req_config_methods &&
3246			    (dev->flags & P2P_DEV_PD_FOR_JOIN))
3247				for_join = 1;
3248		}
3249
3250		if (p2p->cfg->prov_disc_fail)
3251			p2p->cfg->prov_disc_fail(p2p->cfg->cb_ctx,
3252						 p2p->pending_pd_devaddr,
3253						 for_join ?
3254						 P2P_PROV_DISC_TIMEOUT_JOIN :
3255						 P2P_PROV_DISC_TIMEOUT);
3256		p2p_reset_pending_pd(p2p);
3257	}
3258}
3259
3260
3261static void p2p_timeout_invite(struct p2p_data *p2p)
3262{
3263	p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3264	p2p_set_state(p2p, P2P_INVITE_LISTEN);
3265	if (p2p->inv_role == P2P_INVITE_ROLE_ACTIVE_GO) {
3266		/*
3267		 * Better remain on operating channel instead of listen channel
3268		 * when running a group.
3269		 */
3270		p2p_dbg(p2p, "Inviting in active GO role - wait on operating channel");
3271		p2p_set_timeout(p2p, 0, 100000);
3272		return;
3273	}
3274	p2p_listen_in_find(p2p, 0);
3275}
3276
3277
3278static void p2p_timeout_invite_listen(struct p2p_data *p2p)
3279{
3280	if (p2p->invite_peer && p2p->invite_peer->invitation_reqs < 100) {
3281		p2p_set_state(p2p, P2P_INVITE);
3282		p2p_invite_send(p2p, p2p->invite_peer,
3283				p2p->invite_go_dev_addr, p2p->invite_dev_pw_id);
3284	} else {
3285		if (p2p->invite_peer) {
3286			p2p_dbg(p2p, "Invitation Request retry limit reached");
3287			if (p2p->cfg->invitation_result)
3288				p2p->cfg->invitation_result(
3289					p2p->cfg->cb_ctx, -1, NULL, NULL,
3290					p2p->invite_peer->info.p2p_device_addr,
3291					0);
3292		}
3293		p2p_set_state(p2p, P2P_IDLE);
3294	}
3295}
3296
3297
3298static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx)
3299{
3300	struct p2p_data *p2p = eloop_ctx;
3301
3302	p2p_dbg(p2p, "Timeout (state=%s)", p2p_state_txt(p2p->state));
3303
3304	p2p->in_listen = 0;
3305
3306	switch (p2p->state) {
3307	case P2P_IDLE:
3308		/* Check if we timed out waiting for PD req */
3309		if (p2p->pending_action_state == P2P_PENDING_PD)
3310			p2p_timeout_prov_disc_req(p2p);
3311		break;
3312	case P2P_SEARCH:
3313		/* Check if we timed out waiting for PD req */
3314		if (p2p->pending_action_state == P2P_PENDING_PD)
3315			p2p_timeout_prov_disc_req(p2p);
3316		if (p2p->search_delay && !p2p->in_search_delay) {
3317			p2p_dbg(p2p, "Delay search operation by %u ms",
3318				p2p->search_delay);
3319			p2p->in_search_delay = 1;
3320			p2p_set_timeout(p2p, p2p->search_delay / 1000,
3321					(p2p->search_delay % 1000) * 1000);
3322			break;
3323		}
3324		p2p->in_search_delay = 0;
3325		p2p_search(p2p);
3326		break;
3327	case P2P_CONNECT:
3328		p2p_timeout_connect(p2p);
3329		break;
3330	case P2P_CONNECT_LISTEN:
3331		p2p_timeout_connect_listen(p2p);
3332		break;
3333	case P2P_GO_NEG:
3334		break;
3335	case P2P_LISTEN_ONLY:
3336		/* Check if we timed out waiting for PD req */
3337		if (p2p->pending_action_state == P2P_PENDING_PD)
3338			p2p_timeout_prov_disc_req(p2p);
3339
3340		if (p2p->ext_listen_only) {
3341			p2p_dbg(p2p, "Extended Listen Timing - Listen State completed");
3342			p2p->ext_listen_only = 0;
3343			p2p_set_state(p2p, P2P_IDLE);
3344		}
3345		break;
3346	case P2P_WAIT_PEER_CONNECT:
3347		p2p_timeout_wait_peer_connect(p2p);
3348		break;
3349	case P2P_WAIT_PEER_IDLE:
3350		p2p_timeout_wait_peer_idle(p2p);
3351		break;
3352	case P2P_SD_DURING_FIND:
3353		p2p_timeout_sd_during_find(p2p);
3354		break;
3355	case P2P_PROVISIONING:
3356		break;
3357	case P2P_PD_DURING_FIND:
3358		p2p_timeout_prov_disc_during_find(p2p);
3359		break;
3360	case P2P_INVITE:
3361		p2p_timeout_invite(p2p);
3362		break;
3363	case P2P_INVITE_LISTEN:
3364		p2p_timeout_invite_listen(p2p);
3365		break;
3366	}
3367}
3368
3369
3370int p2p_reject(struct p2p_data *p2p, const u8 *peer_addr)
3371{
3372	struct p2p_device *dev;
3373
3374	dev = p2p_get_device(p2p, peer_addr);
3375	p2p_dbg(p2p, "Local request to reject connection attempts by peer "
3376		MACSTR, MAC2STR(peer_addr));
3377	if (dev == NULL) {
3378		p2p_dbg(p2p, "Peer " MACSTR " unknown", MAC2STR(peer_addr));
3379		return -1;
3380	}
3381	dev->status = P2P_SC_FAIL_REJECTED_BY_USER;
3382	dev->flags |= P2P_DEV_USER_REJECTED;
3383	return 0;
3384}
3385
3386
3387const char * p2p_wps_method_text(enum p2p_wps_method method)
3388{
3389	switch (method) {
3390	case WPS_NOT_READY:
3391		return "not-ready";
3392	case WPS_PIN_DISPLAY:
3393		return "Display";
3394	case WPS_PIN_KEYPAD:
3395		return "Keypad";
3396	case WPS_PBC:
3397		return "PBC";
3398	case WPS_NFC:
3399		return "NFC";
3400	}
3401
3402	return "??";
3403}
3404
3405
3406static const char * p2p_go_state_text(enum p2p_go_state go_state)
3407{
3408	switch (go_state) {
3409	case UNKNOWN_GO:
3410		return "unknown";
3411	case LOCAL_GO:
3412		return "local";
3413	case  REMOTE_GO:
3414		return "remote";
3415	}
3416
3417	return "??";
3418}
3419
3420
3421const struct p2p_peer_info * p2p_get_peer_info(struct p2p_data *p2p,
3422					       const u8 *addr, int next)
3423{
3424	struct p2p_device *dev;
3425
3426	if (addr)
3427		dev = p2p_get_device(p2p, addr);
3428	else
3429		dev = dl_list_first(&p2p->devices, struct p2p_device, list);
3430
3431	if (dev && next) {
3432		dev = dl_list_first(&dev->list, struct p2p_device, list);
3433		if (&dev->list == &p2p->devices)
3434			dev = NULL;
3435	}
3436
3437	if (dev == NULL)
3438		return NULL;
3439
3440	return &dev->info;
3441}
3442
3443
3444int p2p_get_peer_info_txt(const struct p2p_peer_info *info,
3445			  char *buf, size_t buflen)
3446{
3447	struct p2p_device *dev;
3448	int res;
3449	char *pos, *end;
3450	struct os_reltime now;
3451
3452	if (info == NULL)
3453		return -1;
3454
3455	dev = (struct p2p_device *) (((u8 *) info) -
3456				     offsetof(struct p2p_device, info));
3457
3458	pos = buf;
3459	end = buf + buflen;
3460
3461	os_get_reltime(&now);
3462	res = os_snprintf(pos, end - pos,
3463			  "age=%d\n"
3464			  "listen_freq=%d\n"
3465			  "wps_method=%s\n"
3466			  "interface_addr=" MACSTR "\n"
3467			  "member_in_go_dev=" MACSTR "\n"
3468			  "member_in_go_iface=" MACSTR "\n"
3469			  "go_neg_req_sent=%d\n"
3470			  "go_state=%s\n"
3471			  "dialog_token=%u\n"
3472			  "intended_addr=" MACSTR "\n"
3473			  "country=%c%c\n"
3474			  "oper_freq=%d\n"
3475			  "req_config_methods=0x%x\n"
3476			  "flags=%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s\n"
3477			  "status=%d\n"
3478			  "wait_count=%u\n"
3479			  "invitation_reqs=%u\n",
3480			  (int) (now.sec - dev->last_seen.sec),
3481			  dev->listen_freq,
3482			  p2p_wps_method_text(dev->wps_method),
3483			  MAC2STR(dev->interface_addr),
3484			  MAC2STR(dev->member_in_go_dev),
3485			  MAC2STR(dev->member_in_go_iface),
3486			  dev->go_neg_req_sent,
3487			  p2p_go_state_text(dev->go_state),
3488			  dev->dialog_token,
3489			  MAC2STR(dev->intended_addr),
3490			  dev->country[0] ? dev->country[0] : '_',
3491			  dev->country[1] ? dev->country[1] : '_',
3492			  dev->oper_freq,
3493			  dev->req_config_methods,
3494			  dev->flags & P2P_DEV_PROBE_REQ_ONLY ?
3495			  "[PROBE_REQ_ONLY]" : "",
3496			  dev->flags & P2P_DEV_REPORTED ? "[REPORTED]" : "",
3497			  dev->flags & P2P_DEV_NOT_YET_READY ?
3498			  "[NOT_YET_READY]" : "",
3499			  dev->flags & P2P_DEV_SD_INFO ? "[SD_INFO]" : "",
3500			  dev->flags & P2P_DEV_SD_SCHEDULE ? "[SD_SCHEDULE]" :
3501			  "",
3502			  dev->flags & P2P_DEV_PD_PEER_DISPLAY ?
3503			  "[PD_PEER_DISPLAY]" : "",
3504			  dev->flags & P2P_DEV_PD_PEER_KEYPAD ?
3505			  "[PD_PEER_KEYPAD]" : "",
3506			  dev->flags & P2P_DEV_USER_REJECTED ?
3507			  "[USER_REJECTED]" : "",
3508			  dev->flags & P2P_DEV_PEER_WAITING_RESPONSE ?
3509			  "[PEER_WAITING_RESPONSE]" : "",
3510			  dev->flags & P2P_DEV_PREFER_PERSISTENT_GROUP ?
3511			  "[PREFER_PERSISTENT_GROUP]" : "",
3512			  dev->flags & P2P_DEV_WAIT_GO_NEG_RESPONSE ?
3513			  "[WAIT_GO_NEG_RESPONSE]" : "",
3514			  dev->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM ?
3515			  "[WAIT_GO_NEG_CONFIRM]" : "",
3516			  dev->flags & P2P_DEV_GROUP_CLIENT_ONLY ?
3517			  "[GROUP_CLIENT_ONLY]" : "",
3518			  dev->flags & P2P_DEV_FORCE_FREQ ?
3519			  "[FORCE_FREQ]" : "",
3520			  dev->flags & P2P_DEV_PD_FOR_JOIN ?
3521			  "[PD_FOR_JOIN]" : "",
3522			  dev->status,
3523			  dev->wait_count,
3524			  dev->invitation_reqs);
3525	if (res < 0 || res >= end - pos)
3526		return pos - buf;
3527	pos += res;
3528
3529	if (dev->ext_listen_period) {
3530		res = os_snprintf(pos, end - pos,
3531				  "ext_listen_period=%u\n"
3532				  "ext_listen_interval=%u\n",
3533				  dev->ext_listen_period,
3534				  dev->ext_listen_interval);
3535		if (res < 0 || res >= end - pos)
3536			return pos - buf;
3537		pos += res;
3538	}
3539
3540	if (dev->oper_ssid_len) {
3541		res = os_snprintf(pos, end - pos,
3542				  "oper_ssid=%s\n",
3543				  wpa_ssid_txt(dev->oper_ssid,
3544					       dev->oper_ssid_len));
3545		if (res < 0 || res >= end - pos)
3546			return pos - buf;
3547		pos += res;
3548	}
3549
3550#ifdef CONFIG_WIFI_DISPLAY
3551	if (dev->info.wfd_subelems) {
3552		res = os_snprintf(pos, end - pos, "wfd_subelems=");
3553		if (res < 0 || res >= end - pos)
3554			return pos - buf;
3555		pos += res;
3556
3557		pos += wpa_snprintf_hex(pos, end - pos,
3558					wpabuf_head(dev->info.wfd_subelems),
3559					wpabuf_len(dev->info.wfd_subelems));
3560
3561		res = os_snprintf(pos, end - pos, "\n");
3562		if (res < 0 || res >= end - pos)
3563			return pos - buf;
3564		pos += res;
3565	}
3566#endif /* CONFIG_WIFI_DISPLAY */
3567
3568	return pos - buf;
3569}
3570
3571
3572int p2p_peer_known(struct p2p_data *p2p, const u8 *addr)
3573{
3574	return p2p_get_device(p2p, addr) != NULL;
3575}
3576
3577
3578void p2p_set_client_discoverability(struct p2p_data *p2p, int enabled)
3579{
3580	if (enabled) {
3581		p2p_dbg(p2p, "Client discoverability enabled");
3582		p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3583	} else {
3584		p2p_dbg(p2p, "Client discoverability disabled");
3585		p2p->dev_capab &= ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3586	}
3587}
3588
3589
3590static struct wpabuf * p2p_build_presence_req(u32 duration1, u32 interval1,
3591					      u32 duration2, u32 interval2)
3592{
3593	struct wpabuf *req;
3594	struct p2p_noa_desc desc1, desc2, *ptr1 = NULL, *ptr2 = NULL;
3595	u8 *len;
3596
3597	req = wpabuf_alloc(100);
3598	if (req == NULL)
3599		return NULL;
3600
3601	if (duration1 || interval1) {
3602		os_memset(&desc1, 0, sizeof(desc1));
3603		desc1.count_type = 1;
3604		desc1.duration = duration1;
3605		desc1.interval = interval1;
3606		ptr1 = &desc1;
3607
3608		if (duration2 || interval2) {
3609			os_memset(&desc2, 0, sizeof(desc2));
3610			desc2.count_type = 2;
3611			desc2.duration = duration2;
3612			desc2.interval = interval2;
3613			ptr2 = &desc2;
3614		}
3615	}
3616
3617	p2p_buf_add_action_hdr(req, P2P_PRESENCE_REQ, 1);
3618	len = p2p_buf_add_ie_hdr(req);
3619	p2p_buf_add_noa(req, 0, 0, 0, ptr1, ptr2);
3620	p2p_buf_update_ie_hdr(req, len);
3621
3622	return req;
3623}
3624
3625
3626int p2p_presence_req(struct p2p_data *p2p, const u8 *go_interface_addr,
3627		     const u8 *own_interface_addr, unsigned int freq,
3628		     u32 duration1, u32 interval1, u32 duration2,
3629		     u32 interval2)
3630{
3631	struct wpabuf *req;
3632
3633	p2p_dbg(p2p, "Send Presence Request to GO " MACSTR
3634		" (own interface " MACSTR ") freq=%u dur1=%u int1=%u "
3635		"dur2=%u int2=%u",
3636		MAC2STR(go_interface_addr), MAC2STR(own_interface_addr),
3637		freq, duration1, interval1, duration2, interval2);
3638
3639	req = p2p_build_presence_req(duration1, interval1, duration2,
3640				     interval2);
3641	if (req == NULL)
3642		return -1;
3643
3644	p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3645	if (p2p_send_action(p2p, freq, go_interface_addr, own_interface_addr,
3646			    go_interface_addr,
3647			    wpabuf_head(req), wpabuf_len(req), 200) < 0) {
3648		p2p_dbg(p2p, "Failed to send Action frame");
3649	}
3650	wpabuf_free(req);
3651
3652	return 0;
3653}
3654
3655
3656static struct wpabuf * p2p_build_presence_resp(u8 status, const u8 *noa,
3657					       size_t noa_len, u8 dialog_token)
3658{
3659	struct wpabuf *resp;
3660	u8 *len;
3661
3662	resp = wpabuf_alloc(100 + noa_len);
3663	if (resp == NULL)
3664		return NULL;
3665
3666	p2p_buf_add_action_hdr(resp, P2P_PRESENCE_RESP, dialog_token);
3667	len = p2p_buf_add_ie_hdr(resp);
3668	p2p_buf_add_status(resp, status);
3669	if (noa) {
3670		wpabuf_put_u8(resp, P2P_ATTR_NOTICE_OF_ABSENCE);
3671		wpabuf_put_le16(resp, noa_len);
3672		wpabuf_put_data(resp, noa, noa_len);
3673	} else
3674		p2p_buf_add_noa(resp, 0, 0, 0, NULL, NULL);
3675	p2p_buf_update_ie_hdr(resp, len);
3676
3677	return resp;
3678}
3679
3680
3681static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
3682				     const u8 *sa, const u8 *data, size_t len,
3683				     int rx_freq)
3684{
3685	struct p2p_message msg;
3686	u8 status;
3687	struct wpabuf *resp;
3688	size_t g;
3689	struct p2p_group *group = NULL;
3690	int parsed = 0;
3691	u8 noa[50];
3692	int noa_len;
3693
3694	p2p_dbg(p2p, "Received P2P Action - P2P Presence Request");
3695
3696	for (g = 0; g < p2p->num_groups; g++) {
3697		if (os_memcmp(da, p2p_group_get_interface_addr(p2p->groups[g]),
3698			      ETH_ALEN) == 0) {
3699			group = p2p->groups[g];
3700			break;
3701		}
3702	}
3703	if (group == NULL) {
3704		p2p_dbg(p2p, "Ignore P2P Presence Request for unknown group "
3705			MACSTR, MAC2STR(da));
3706		return;
3707	}
3708
3709	if (p2p_parse(data, len, &msg) < 0) {
3710		p2p_dbg(p2p, "Failed to parse P2P Presence Request");
3711		status = P2P_SC_FAIL_INVALID_PARAMS;
3712		goto fail;
3713	}
3714	parsed = 1;
3715
3716	if (msg.noa == NULL) {
3717		p2p_dbg(p2p, "No NoA attribute in P2P Presence Request");
3718		status = P2P_SC_FAIL_INVALID_PARAMS;
3719		goto fail;
3720	}
3721
3722	status = p2p_group_presence_req(group, sa, msg.noa, msg.noa_len);
3723
3724fail:
3725	if (p2p->cfg->get_noa)
3726		noa_len = p2p->cfg->get_noa(p2p->cfg->cb_ctx, da, noa,
3727					    sizeof(noa));
3728	else
3729		noa_len = -1;
3730	resp = p2p_build_presence_resp(status, noa_len > 0 ? noa : NULL,
3731				       noa_len > 0 ? noa_len : 0,
3732				       msg.dialog_token);
3733	if (parsed)
3734		p2p_parse_free(&msg);
3735	if (resp == NULL)
3736		return;
3737
3738	p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3739	if (p2p_send_action(p2p, rx_freq, sa, da, da,
3740			    wpabuf_head(resp), wpabuf_len(resp), 200) < 0) {
3741		p2p_dbg(p2p, "Failed to send Action frame");
3742	}
3743	wpabuf_free(resp);
3744}
3745
3746
3747static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
3748				      const u8 *sa, const u8 *data, size_t len)
3749{
3750	struct p2p_message msg;
3751
3752	p2p_dbg(p2p, "Received P2P Action - P2P Presence Response");
3753
3754	if (p2p_parse(data, len, &msg) < 0) {
3755		p2p_dbg(p2p, "Failed to parse P2P Presence Response");
3756		return;
3757	}
3758
3759	if (msg.status == NULL || msg.noa == NULL) {
3760		p2p_dbg(p2p, "No Status or NoA attribute in P2P Presence Response");
3761		p2p_parse_free(&msg);
3762		return;
3763	}
3764
3765	if (p2p->cfg->presence_resp) {
3766		p2p->cfg->presence_resp(p2p->cfg->cb_ctx, sa, *msg.status,
3767					msg.noa, msg.noa_len);
3768	}
3769
3770	if (*msg.status) {
3771		p2p_dbg(p2p, "P2P Presence Request was rejected: status %u",
3772			*msg.status);
3773		p2p_parse_free(&msg);
3774		return;
3775	}
3776
3777	p2p_dbg(p2p, "P2P Presence Request was accepted");
3778	wpa_hexdump(MSG_DEBUG, "P2P: P2P Presence Response - NoA",
3779		    msg.noa, msg.noa_len);
3780	/* TODO: process NoA */
3781	p2p_parse_free(&msg);
3782}
3783
3784
3785static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx)
3786{
3787	struct p2p_data *p2p = eloop_ctx;
3788
3789	if (p2p->ext_listen_interval) {
3790		/* Schedule next extended listen timeout */
3791		eloop_register_timeout(p2p->ext_listen_interval_sec,
3792				       p2p->ext_listen_interval_usec,
3793				       p2p_ext_listen_timeout, p2p, NULL);
3794	}
3795
3796	if (p2p->state == P2P_LISTEN_ONLY && p2p->ext_listen_only) {
3797		/*
3798		 * This should not really happen, but it looks like the Listen
3799		 * command may fail is something else (e.g., a scan) was
3800		 * running at an inconvenient time. As a workaround, allow new
3801		 * Extended Listen operation to be started.
3802		 */
3803		p2p_dbg(p2p, "Previous Extended Listen operation had not been completed - try again");
3804		p2p->ext_listen_only = 0;
3805		p2p_set_state(p2p, P2P_IDLE);
3806	}
3807
3808	if (p2p->state != P2P_IDLE) {
3809		p2p_dbg(p2p, "Skip Extended Listen timeout in active state (%s)", p2p_state_txt(p2p->state));
3810		return;
3811	}
3812
3813	p2p_dbg(p2p, "Extended Listen timeout");
3814	p2p->ext_listen_only = 1;
3815	if (p2p_listen(p2p, p2p->ext_listen_period) < 0) {
3816		p2p_dbg(p2p, "Failed to start Listen state for Extended Listen Timing");
3817		p2p->ext_listen_only = 0;
3818	}
3819}
3820
3821
3822int p2p_ext_listen(struct p2p_data *p2p, unsigned int period,
3823		   unsigned int interval)
3824{
3825	if (period > 65535 || interval > 65535 || period > interval ||
3826	    (period == 0 && interval > 0) || (period > 0 && interval == 0)) {
3827		p2p_dbg(p2p, "Invalid Extended Listen Timing request: period=%u interval=%u",
3828			period, interval);
3829		return -1;
3830	}
3831
3832	eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
3833
3834	if (interval == 0) {
3835		p2p_dbg(p2p, "Disabling Extended Listen Timing");
3836		p2p->ext_listen_period = 0;
3837		p2p->ext_listen_interval = 0;
3838		return 0;
3839	}
3840
3841	p2p_dbg(p2p, "Enabling Extended Listen Timing: period %u msec, interval %u msec",
3842		period, interval);
3843	p2p->ext_listen_period = period;
3844	p2p->ext_listen_interval = interval;
3845	p2p->ext_listen_interval_sec = interval / 1000;
3846	p2p->ext_listen_interval_usec = (interval % 1000) * 1000;
3847
3848	eloop_register_timeout(p2p->ext_listen_interval_sec,
3849			       p2p->ext_listen_interval_usec,
3850			       p2p_ext_listen_timeout, p2p, NULL);
3851
3852	return 0;
3853}
3854
3855
3856void p2p_deauth_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
3857		      const u8 *ie, size_t ie_len)
3858{
3859	struct p2p_message msg;
3860
3861	if (bssid == NULL || ie == NULL)
3862		return;
3863
3864	os_memset(&msg, 0, sizeof(msg));
3865	if (p2p_parse_ies(ie, ie_len, &msg))
3866		return;
3867	if (msg.minor_reason_code == NULL) {
3868		p2p_parse_free(&msg);
3869		return;
3870	}
3871
3872	p2p_dbg(p2p, "Deauthentication notification BSSID " MACSTR
3873		" reason_code=%u minor_reason_code=%u",
3874		MAC2STR(bssid), reason_code, *msg.minor_reason_code);
3875
3876	p2p_parse_free(&msg);
3877}
3878
3879
3880void p2p_disassoc_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
3881			const u8 *ie, size_t ie_len)
3882{
3883	struct p2p_message msg;
3884
3885	if (bssid == NULL || ie == NULL)
3886		return;
3887
3888	os_memset(&msg, 0, sizeof(msg));
3889	if (p2p_parse_ies(ie, ie_len, &msg))
3890		return;
3891	if (msg.minor_reason_code == NULL) {
3892		p2p_parse_free(&msg);
3893		return;
3894	}
3895
3896	p2p_dbg(p2p, "Disassociation notification BSSID " MACSTR
3897		" reason_code=%u minor_reason_code=%u",
3898		MAC2STR(bssid), reason_code, *msg.minor_reason_code);
3899
3900	p2p_parse_free(&msg);
3901}
3902
3903
3904void p2p_set_managed_oper(struct p2p_data *p2p, int enabled)
3905{
3906	if (enabled) {
3907		p2p_dbg(p2p, "Managed P2P Device operations enabled");
3908		p2p->dev_capab |= P2P_DEV_CAPAB_INFRA_MANAGED;
3909	} else {
3910		p2p_dbg(p2p, "Managed P2P Device operations disabled");
3911		p2p->dev_capab &= ~P2P_DEV_CAPAB_INFRA_MANAGED;
3912	}
3913}
3914
3915
3916int p2p_set_listen_channel(struct p2p_data *p2p, u8 reg_class, u8 channel)
3917{
3918	if (p2p_channel_to_freq(reg_class, channel) < 0)
3919		return -1;
3920
3921	p2p_dbg(p2p, "Set Listen channel: reg_class %u channel %u",
3922		reg_class, channel);
3923	p2p->cfg->reg_class = reg_class;
3924	p2p->cfg->channel = channel;
3925
3926	return 0;
3927}
3928
3929
3930int p2p_set_ssid_postfix(struct p2p_data *p2p, const u8 *postfix, size_t len)
3931{
3932	p2p_dbg(p2p, "New SSID postfix: %s", wpa_ssid_txt(postfix, len));
3933	if (postfix == NULL) {
3934		p2p->cfg->ssid_postfix_len = 0;
3935		return 0;
3936	}
3937	if (len > sizeof(p2p->cfg->ssid_postfix))
3938		return -1;
3939	os_memcpy(p2p->cfg->ssid_postfix, postfix, len);
3940	p2p->cfg->ssid_postfix_len = len;
3941	return 0;
3942}
3943
3944
3945int p2p_set_oper_channel(struct p2p_data *p2p, u8 op_reg_class, u8 op_channel,
3946			 int cfg_op_channel)
3947{
3948	if (p2p_channel_to_freq(op_reg_class, op_channel) < 0)
3949		return -1;
3950
3951	p2p_dbg(p2p, "Set Operating channel: reg_class %u channel %u",
3952		op_reg_class, op_channel);
3953	p2p->cfg->op_reg_class = op_reg_class;
3954	p2p->cfg->op_channel = op_channel;
3955	p2p->cfg->cfg_op_channel = cfg_op_channel;
3956	return 0;
3957}
3958
3959
3960int p2p_set_pref_chan(struct p2p_data *p2p, unsigned int num_pref_chan,
3961		      const struct p2p_channel *pref_chan)
3962{
3963	struct p2p_channel *n;
3964
3965	if (pref_chan) {
3966		n = os_malloc(num_pref_chan * sizeof(struct p2p_channel));
3967		if (n == NULL)
3968			return -1;
3969		os_memcpy(n, pref_chan,
3970			  num_pref_chan * sizeof(struct p2p_channel));
3971	} else
3972		n = NULL;
3973
3974	os_free(p2p->cfg->pref_chan);
3975	p2p->cfg->pref_chan = n;
3976	p2p->cfg->num_pref_chan = num_pref_chan;
3977
3978	return 0;
3979}
3980
3981
3982int p2p_set_no_go_freq(struct p2p_data *p2p,
3983		       const struct wpa_freq_range_list *list)
3984{
3985	struct wpa_freq_range *tmp;
3986
3987	if (list == NULL || list->num == 0) {
3988		os_free(p2p->no_go_freq.range);
3989		p2p->no_go_freq.range = NULL;
3990		p2p->no_go_freq.num = 0;
3991		return 0;
3992	}
3993
3994	tmp = os_calloc(list->num, sizeof(struct wpa_freq_range));
3995	if (tmp == NULL)
3996		return -1;
3997	os_memcpy(tmp, list->range, list->num * sizeof(struct wpa_freq_range));
3998	os_free(p2p->no_go_freq.range);
3999	p2p->no_go_freq.range = tmp;
4000	p2p->no_go_freq.num = list->num;
4001	p2p_dbg(p2p, "Updated no GO chan list");
4002
4003	return 0;
4004}
4005
4006
4007int p2p_get_interface_addr(struct p2p_data *p2p, const u8 *dev_addr,
4008			   u8 *iface_addr)
4009{
4010	struct p2p_device *dev = p2p_get_device(p2p, dev_addr);
4011	if (dev == NULL || is_zero_ether_addr(dev->interface_addr))
4012		return -1;
4013	os_memcpy(iface_addr, dev->interface_addr, ETH_ALEN);
4014	return 0;
4015}
4016
4017
4018int p2p_get_dev_addr(struct p2p_data *p2p, const u8 *iface_addr,
4019			   u8 *dev_addr)
4020{
4021	struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
4022	if (dev == NULL)
4023		return -1;
4024	os_memcpy(dev_addr, dev->info.p2p_device_addr, ETH_ALEN);
4025	return 0;
4026}
4027
4028
4029void p2p_set_peer_filter(struct p2p_data *p2p, const u8 *addr)
4030{
4031	os_memcpy(p2p->peer_filter, addr, ETH_ALEN);
4032	if (is_zero_ether_addr(p2p->peer_filter))
4033		p2p_dbg(p2p, "Disable peer filter");
4034	else
4035		p2p_dbg(p2p, "Enable peer filter for " MACSTR,
4036			MAC2STR(p2p->peer_filter));
4037}
4038
4039
4040void p2p_set_cross_connect(struct p2p_data *p2p, int enabled)
4041{
4042	p2p_dbg(p2p, "Cross connection %s", enabled ? "enabled" : "disabled");
4043	if (p2p->cross_connect == enabled)
4044		return;
4045	p2p->cross_connect = enabled;
4046	/* TODO: may need to tear down any action group where we are GO(?) */
4047}
4048
4049
4050int p2p_get_oper_freq(struct p2p_data *p2p, const u8 *iface_addr)
4051{
4052	struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
4053	if (dev == NULL)
4054		return -1;
4055	if (dev->oper_freq <= 0)
4056		return -1;
4057	return dev->oper_freq;
4058}
4059
4060
4061void p2p_set_intra_bss_dist(struct p2p_data *p2p, int enabled)
4062{
4063	p2p_dbg(p2p, "Intra BSS distribution %s",
4064		enabled ? "enabled" : "disabled");
4065	p2p->cfg->p2p_intra_bss = enabled;
4066}
4067
4068
4069void p2p_update_channel_list(struct p2p_data *p2p,
4070			     const struct p2p_channels *chan,
4071			     const struct p2p_channels *cli_chan)
4072{
4073	p2p_dbg(p2p, "Update channel list");
4074	os_memcpy(&p2p->cfg->channels, chan, sizeof(struct p2p_channels));
4075	p2p_channels_dump(p2p, "channels", &p2p->cfg->channels);
4076	os_memcpy(&p2p->cfg->cli_channels, cli_chan,
4077		  sizeof(struct p2p_channels));
4078	p2p_channels_dump(p2p, "cli_channels", &p2p->cfg->cli_channels);
4079}
4080
4081
4082int p2p_send_action(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
4083		    const u8 *src, const u8 *bssid, const u8 *buf,
4084		    size_t len, unsigned int wait_time)
4085{
4086	if (p2p->p2p_scan_running) {
4087		p2p_dbg(p2p, "Delay Action frame TX until p2p_scan completes");
4088		if (p2p->after_scan_tx) {
4089			p2p_dbg(p2p, "Dropped previous pending Action frame TX");
4090			os_free(p2p->after_scan_tx);
4091		}
4092		p2p->after_scan_tx = os_malloc(sizeof(*p2p->after_scan_tx) +
4093					       len);
4094		if (p2p->after_scan_tx == NULL)
4095			return -1;
4096		p2p->after_scan_tx->freq = freq;
4097		os_memcpy(p2p->after_scan_tx->dst, dst, ETH_ALEN);
4098		os_memcpy(p2p->after_scan_tx->src, src, ETH_ALEN);
4099		os_memcpy(p2p->after_scan_tx->bssid, bssid, ETH_ALEN);
4100		p2p->after_scan_tx->len = len;
4101		p2p->after_scan_tx->wait_time = wait_time;
4102		os_memcpy(p2p->after_scan_tx + 1, buf, len);
4103		return 0;
4104	}
4105
4106	return p2p->cfg->send_action(p2p->cfg->cb_ctx, freq, dst, src, bssid,
4107				     buf, len, wait_time);
4108}
4109
4110
4111void p2p_set_best_channels(struct p2p_data *p2p, int freq_24, int freq_5,
4112			   int freq_overall)
4113{
4114	p2p_dbg(p2p, "Best channel: 2.4 GHz: %d,  5 GHz: %d,  overall: %d",
4115		freq_24, freq_5, freq_overall);
4116	p2p->best_freq_24 = freq_24;
4117	p2p->best_freq_5 = freq_5;
4118	p2p->best_freq_overall = freq_overall;
4119}
4120
4121
4122void p2p_set_own_freq_preference(struct p2p_data *p2p, int freq)
4123{
4124	p2p_dbg(p2p, "Own frequency preference: %d MHz", freq);
4125	p2p->own_freq_preference = freq;
4126}
4127
4128
4129const u8 * p2p_get_go_neg_peer(struct p2p_data *p2p)
4130{
4131	if (p2p == NULL || p2p->go_neg_peer == NULL)
4132		return NULL;
4133	return p2p->go_neg_peer->info.p2p_device_addr;
4134}
4135
4136
4137const struct p2p_peer_info *
4138p2p_get_peer_found(struct p2p_data *p2p, const u8 *addr, int next)
4139{
4140	struct p2p_device *dev;
4141
4142	if (addr) {
4143		dev = p2p_get_device(p2p, addr);
4144		if (!dev)
4145			return NULL;
4146
4147		if (!next) {
4148			if (dev->flags & P2P_DEV_PROBE_REQ_ONLY)
4149				return NULL;
4150
4151			return &dev->info;
4152		} else {
4153			do {
4154				dev = dl_list_first(&dev->list,
4155						    struct p2p_device,
4156						    list);
4157				if (&dev->list == &p2p->devices)
4158					return NULL;
4159			} while (dev->flags & P2P_DEV_PROBE_REQ_ONLY);
4160		}
4161	} else {
4162		dev = dl_list_first(&p2p->devices, struct p2p_device, list);
4163		if (!dev)
4164			return NULL;
4165		while (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
4166			dev = dl_list_first(&dev->list,
4167					    struct p2p_device,
4168					    list);
4169			if (&dev->list == &p2p->devices)
4170				return NULL;
4171		}
4172	}
4173
4174	return &dev->info;
4175}
4176
4177
4178int p2p_in_progress(struct p2p_data *p2p)
4179{
4180	if (p2p == NULL)
4181		return 0;
4182	if (p2p->state == P2P_SEARCH)
4183		return 2;
4184	return p2p->state != P2P_IDLE && p2p->state != P2P_PROVISIONING;
4185}
4186
4187
4188void p2p_set_config_timeout(struct p2p_data *p2p, u8 go_timeout,
4189			    u8 client_timeout)
4190{
4191	if (p2p) {
4192		p2p->go_timeout = go_timeout;
4193		p2p->client_timeout = client_timeout;
4194	}
4195}
4196
4197
4198#ifdef CONFIG_WIFI_DISPLAY
4199
4200static void p2p_update_wfd_ie_groups(struct p2p_data *p2p)
4201{
4202	size_t g;
4203	struct p2p_group *group;
4204
4205	for (g = 0; g < p2p->num_groups; g++) {
4206		group = p2p->groups[g];
4207		p2p_group_force_beacon_update_ies(group);
4208	}
4209}
4210
4211
4212int p2p_set_wfd_ie_beacon(struct p2p_data *p2p, struct wpabuf *ie)
4213{
4214	wpabuf_free(p2p->wfd_ie_beacon);
4215	p2p->wfd_ie_beacon = ie;
4216	p2p_update_wfd_ie_groups(p2p);
4217	return 0;
4218}
4219
4220
4221int p2p_set_wfd_ie_probe_req(struct p2p_data *p2p, struct wpabuf *ie)
4222{
4223	wpabuf_free(p2p->wfd_ie_probe_req);
4224	p2p->wfd_ie_probe_req = ie;
4225	return 0;
4226}
4227
4228
4229int p2p_set_wfd_ie_probe_resp(struct p2p_data *p2p, struct wpabuf *ie)
4230{
4231	wpabuf_free(p2p->wfd_ie_probe_resp);
4232	p2p->wfd_ie_probe_resp = ie;
4233	p2p_update_wfd_ie_groups(p2p);
4234	return 0;
4235}
4236
4237
4238int p2p_set_wfd_ie_assoc_req(struct p2p_data *p2p, struct wpabuf *ie)
4239{
4240	wpabuf_free(p2p->wfd_ie_assoc_req);
4241	p2p->wfd_ie_assoc_req = ie;
4242	return 0;
4243}
4244
4245
4246int p2p_set_wfd_ie_invitation(struct p2p_data *p2p, struct wpabuf *ie)
4247{
4248	wpabuf_free(p2p->wfd_ie_invitation);
4249	p2p->wfd_ie_invitation = ie;
4250	return 0;
4251}
4252
4253
4254int p2p_set_wfd_ie_prov_disc_req(struct p2p_data *p2p, struct wpabuf *ie)
4255{
4256	wpabuf_free(p2p->wfd_ie_prov_disc_req);
4257	p2p->wfd_ie_prov_disc_req = ie;
4258	return 0;
4259}
4260
4261
4262int p2p_set_wfd_ie_prov_disc_resp(struct p2p_data *p2p, struct wpabuf *ie)
4263{
4264	wpabuf_free(p2p->wfd_ie_prov_disc_resp);
4265	p2p->wfd_ie_prov_disc_resp = ie;
4266	return 0;
4267}
4268
4269
4270int p2p_set_wfd_ie_go_neg(struct p2p_data *p2p, struct wpabuf *ie)
4271{
4272	wpabuf_free(p2p->wfd_ie_go_neg);
4273	p2p->wfd_ie_go_neg = ie;
4274	return 0;
4275}
4276
4277
4278int p2p_set_wfd_dev_info(struct p2p_data *p2p, const struct wpabuf *elem)
4279{
4280	wpabuf_free(p2p->wfd_dev_info);
4281	if (elem) {
4282		p2p->wfd_dev_info = wpabuf_dup(elem);
4283		if (p2p->wfd_dev_info == NULL)
4284			return -1;
4285	} else
4286		p2p->wfd_dev_info = NULL;
4287
4288	return 0;
4289}
4290
4291
4292int p2p_set_wfd_assoc_bssid(struct p2p_data *p2p, const struct wpabuf *elem)
4293{
4294	wpabuf_free(p2p->wfd_assoc_bssid);
4295	if (elem) {
4296		p2p->wfd_assoc_bssid = wpabuf_dup(elem);
4297		if (p2p->wfd_assoc_bssid == NULL)
4298			return -1;
4299	} else
4300		p2p->wfd_assoc_bssid = NULL;
4301
4302	return 0;
4303}
4304
4305
4306int p2p_set_wfd_coupled_sink_info(struct p2p_data *p2p,
4307				  const struct wpabuf *elem)
4308{
4309	wpabuf_free(p2p->wfd_coupled_sink_info);
4310	if (elem) {
4311		p2p->wfd_coupled_sink_info = wpabuf_dup(elem);
4312		if (p2p->wfd_coupled_sink_info == NULL)
4313			return -1;
4314	} else
4315		p2p->wfd_coupled_sink_info = NULL;
4316
4317	return 0;
4318}
4319
4320#endif /* CONFIG_WIFI_DISPLAY */
4321
4322
4323int p2p_set_disc_int(struct p2p_data *p2p, int min_disc_int, int max_disc_int,
4324		     int max_disc_tu)
4325{
4326	if (min_disc_int > max_disc_int || min_disc_int < 0 || max_disc_int < 0)
4327		return -1;
4328
4329	p2p->min_disc_int = min_disc_int;
4330	p2p->max_disc_int = max_disc_int;
4331	p2p->max_disc_tu = max_disc_tu;
4332	p2p_dbg(p2p, "Set discoverable interval: min=%d max=%d max_tu=%d",
4333		min_disc_int, max_disc_int, max_disc_tu);
4334
4335	return 0;
4336}
4337
4338
4339void p2p_dbg(struct p2p_data *p2p, const char *fmt, ...)
4340{
4341	va_list ap;
4342	char buf[500];
4343
4344	if (!p2p->cfg->debug_print)
4345		return;
4346
4347	va_start(ap, fmt);
4348	vsnprintf(buf, sizeof(buf), fmt, ap);
4349	buf[sizeof(buf) - 1] = '\0';
4350	va_end(ap);
4351	p2p->cfg->debug_print(p2p->cfg->cb_ctx, MSG_DEBUG, buf);
4352}
4353
4354
4355void p2p_info(struct p2p_data *p2p, const char *fmt, ...)
4356{
4357	va_list ap;
4358	char buf[500];
4359
4360	if (!p2p->cfg->debug_print)
4361		return;
4362
4363	va_start(ap, fmt);
4364	vsnprintf(buf, sizeof(buf), fmt, ap);
4365	buf[sizeof(buf) - 1] = '\0';
4366	va_end(ap);
4367	p2p->cfg->debug_print(p2p->cfg->cb_ctx, MSG_INFO, buf);
4368}
4369
4370
4371void p2p_err(struct p2p_data *p2p, const char *fmt, ...)
4372{
4373	va_list ap;
4374	char buf[500];
4375
4376	if (!p2p->cfg->debug_print)
4377		return;
4378
4379	va_start(ap, fmt);
4380	vsnprintf(buf, sizeof(buf), fmt, ap);
4381	buf[sizeof(buf) - 1] = '\0';
4382	va_end(ap);
4383	p2p->cfg->debug_print(p2p->cfg->cb_ctx, MSG_ERROR, buf);
4384}
4385
4386
4387#ifdef CONFIG_WPS_NFC
4388
4389static struct wpabuf * p2p_build_nfc_handover(struct p2p_data *p2p,
4390					      int client_freq,
4391					      const u8 *go_dev_addr,
4392					      const u8 *ssid, size_t ssid_len)
4393{
4394	struct wpabuf *buf;
4395	u8 op_class, channel;
4396	enum p2p_role_indication role = P2P_DEVICE_NOT_IN_GROUP;
4397
4398	buf = wpabuf_alloc(1000);
4399	if (buf == NULL)
4400		return NULL;
4401
4402	op_class = p2p->cfg->reg_class;
4403	channel = p2p->cfg->channel;
4404
4405	p2p_buf_add_capability(buf, p2p->dev_capab &
4406			       ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
4407	p2p_buf_add_device_info(buf, p2p, NULL);
4408
4409	if (p2p->num_groups > 0) {
4410		role = P2P_GO_IN_A_GROUP;
4411		p2p_freq_to_channel(p2p_group_get_freq(p2p->groups[0]),
4412				    &op_class, &channel);
4413	} else if (client_freq > 0) {
4414		role = P2P_CLIENT_IN_A_GROUP;
4415		p2p_freq_to_channel(client_freq, &op_class, &channel);
4416	}
4417
4418	p2p_buf_add_oob_go_neg_channel(buf, p2p->cfg->country, op_class,
4419				       channel, role);
4420
4421	if (p2p->num_groups > 0) {
4422		/* Limit number of clients to avoid very long message */
4423		p2p_buf_add_group_info(p2p->groups[0], buf, 5);
4424		p2p_group_buf_add_id(p2p->groups[0], buf);
4425	} else if (client_freq > 0 &&
4426		   go_dev_addr && !is_zero_ether_addr(go_dev_addr) &&
4427		   ssid && ssid_len > 0) {
4428		/*
4429		 * Add the optional P2P Group ID to indicate in which group this
4430		 * device is a P2P Client.
4431		 */
4432		p2p_buf_add_group_id(buf, go_dev_addr, ssid, ssid_len);
4433	}
4434
4435	return buf;
4436}
4437
4438
4439struct wpabuf * p2p_build_nfc_handover_req(struct p2p_data *p2p,
4440					   int client_freq,
4441					   const u8 *go_dev_addr,
4442					   const u8 *ssid, size_t ssid_len)
4443{
4444	return p2p_build_nfc_handover(p2p, client_freq, go_dev_addr, ssid,
4445				      ssid_len);
4446}
4447
4448
4449struct wpabuf * p2p_build_nfc_handover_sel(struct p2p_data *p2p,
4450					   int client_freq,
4451					   const u8 *go_dev_addr,
4452					   const u8 *ssid, size_t ssid_len)
4453{
4454	return p2p_build_nfc_handover(p2p, client_freq, go_dev_addr, ssid,
4455				      ssid_len);
4456}
4457
4458
4459int p2p_process_nfc_connection_handover(struct p2p_data *p2p,
4460					struct p2p_nfc_params *params)
4461{
4462	struct p2p_message msg;
4463	struct p2p_device *dev;
4464	const u8 *p2p_dev_addr;
4465	int freq;
4466	enum p2p_role_indication role;
4467
4468	params->next_step = NO_ACTION;
4469
4470	if (p2p_parse_ies_separate(params->wsc_attr, params->wsc_len,
4471				   params->p2p_attr, params->p2p_len, &msg)) {
4472		p2p_dbg(p2p, "Failed to parse WSC/P2P attributes from NFC");
4473		p2p_parse_free(&msg);
4474		return -1;
4475	}
4476
4477	if (msg.p2p_device_addr)
4478		p2p_dev_addr = msg.p2p_device_addr;
4479	else if (msg.device_id)
4480		p2p_dev_addr = msg.device_id;
4481	else {
4482		p2p_dbg(p2p, "Ignore scan data without P2P Device Info or P2P Device Id");
4483		p2p_parse_free(&msg);
4484		return -1;
4485	}
4486
4487	if (msg.oob_dev_password) {
4488		os_memcpy(params->oob_dev_pw, msg.oob_dev_password,
4489			  msg.oob_dev_password_len);
4490		params->oob_dev_pw_len = msg.oob_dev_password_len;
4491	}
4492
4493	dev = p2p_create_device(p2p, p2p_dev_addr);
4494	if (dev == NULL) {
4495		p2p_parse_free(&msg);
4496		return -1;
4497	}
4498
4499	params->peer = &dev->info;
4500
4501	os_get_reltime(&dev->last_seen);
4502	dev->flags &= ~(P2P_DEV_PROBE_REQ_ONLY | P2P_DEV_GROUP_CLIENT_ONLY);
4503	p2p_copy_wps_info(p2p, dev, 0, &msg);
4504
4505	if (!msg.oob_go_neg_channel) {
4506		p2p_dbg(p2p, "OOB GO Negotiation Channel attribute not included");
4507		return -1;
4508	}
4509
4510	if (msg.oob_go_neg_channel[3] == 0 &&
4511	    msg.oob_go_neg_channel[4] == 0)
4512		freq = 0;
4513	else
4514		freq = p2p_channel_to_freq(msg.oob_go_neg_channel[3],
4515					   msg.oob_go_neg_channel[4]);
4516	if (freq < 0) {
4517		p2p_dbg(p2p, "Unknown peer OOB GO Neg channel");
4518		return -1;
4519	}
4520	role = msg.oob_go_neg_channel[5];
4521
4522	if (role == P2P_GO_IN_A_GROUP) {
4523		p2p_dbg(p2p, "Peer OOB GO operating channel: %u MHz", freq);
4524		params->go_freq = freq;
4525	} else if (role == P2P_CLIENT_IN_A_GROUP) {
4526		p2p_dbg(p2p, "Peer (client) OOB GO operating channel: %u MHz",
4527			freq);
4528		params->go_freq = freq;
4529	} else
4530		p2p_dbg(p2p, "Peer OOB GO Neg channel: %u MHz", freq);
4531	dev->oob_go_neg_freq = freq;
4532
4533	if (!params->sel && role != P2P_GO_IN_A_GROUP) {
4534		freq = p2p_channel_to_freq(p2p->cfg->reg_class,
4535					   p2p->cfg->channel);
4536		if (freq < 0) {
4537			p2p_dbg(p2p, "Own listen channel not known");
4538			return -1;
4539		}
4540		p2p_dbg(p2p, "Use own Listen channel as OOB GO Neg channel: %u MHz", freq);
4541		dev->oob_go_neg_freq = freq;
4542	}
4543
4544	if (msg.group_id) {
4545		os_memcpy(params->go_dev_addr, msg.group_id, ETH_ALEN);
4546		params->go_ssid_len = msg.group_id_len - ETH_ALEN;
4547		os_memcpy(params->go_ssid, msg.group_id + ETH_ALEN,
4548			  params->go_ssid_len);
4549	}
4550
4551	p2p_parse_free(&msg);
4552
4553	if (dev->flags & P2P_DEV_USER_REJECTED) {
4554		p2p_dbg(p2p, "Do not report rejected device");
4555		return 0;
4556	}
4557
4558	if (!(dev->flags & P2P_DEV_REPORTED)) {
4559		p2p->cfg->dev_found(p2p->cfg->cb_ctx, p2p_dev_addr, &dev->info,
4560				    !(dev->flags & P2P_DEV_REPORTED_ONCE));
4561		dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
4562	}
4563
4564	if (role == P2P_GO_IN_A_GROUP && p2p->num_groups > 0)
4565		params->next_step = BOTH_GO;
4566	else if (role == P2P_GO_IN_A_GROUP)
4567		params->next_step = JOIN_GROUP;
4568	else if (role == P2P_CLIENT_IN_A_GROUP) {
4569		dev->flags |= P2P_DEV_GROUP_CLIENT_ONLY;
4570		params->next_step = PEER_CLIENT;
4571	} else if (p2p->num_groups > 0)
4572		params->next_step = AUTH_JOIN;
4573	else if (params->sel)
4574		params->next_step = INIT_GO_NEG;
4575	else
4576		params->next_step = RESP_GO_NEG;
4577
4578	return 0;
4579}
4580
4581
4582void p2p_set_authorized_oob_dev_pw_id(struct p2p_data *p2p, u16 dev_pw_id,
4583				      int go_intent,
4584				      const u8 *own_interface_addr)
4585{
4586
4587	p2p->authorized_oob_dev_pw_id = dev_pw_id;
4588	if (dev_pw_id == 0) {
4589		p2p_dbg(p2p, "NFC OOB Password unauthorized for static handover");
4590		return;
4591	}
4592
4593	p2p_dbg(p2p, "NFC OOB Password (id=%u) authorized for static handover",
4594		dev_pw_id);
4595
4596	p2p->go_intent = go_intent;
4597	os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
4598}
4599
4600#endif /* CONFIG_WPS_NFC */
4601