tdls.c revision 1f69aa52ea2e0a73ac502565df8c666ee49cab6a
18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_supplicant - TDLS 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2010-2011, Atheros Communications 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 58d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This program is free software; you can redistribute it and/or modify 68d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * it under the terms of the GNU General Public License version 2 as 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * published by the Free Software Foundation. 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Alternatively, this software may be distributed under the terms of BSD 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * license. 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * See README and COPYING for more details. 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/includes.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/common.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/eloop.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/os.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common/ieee802_11_defs.h" 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/sha256.h" 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/crypto.h" 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/aes_wrap.h" 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "rsn_supp/wpa.h" 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "rsn_supp/wpa_ie.h" 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "rsn_supp/wpa_i.h" 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "drivers/driver.h" 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "l2_packet/l2_packet.h" 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_LONG_FRAME BIT(0) 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_ALT_RSN_IE BIT(1) 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_DIFF_BSSID BIT(2) 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_SHORT_LIFETIME BIT(3) 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_WRONG_LIFETIME_RESP BIT(4) 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_WRONG_LIFETIME_CONF BIT(5) 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_LONG_LIFETIME BIT(6) 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_CONCURRENT_INIT BIT(7) 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_NO_TPK_EXPIRATION BIT(8) 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_DECLINE_RESP BIT(9) 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TESTING_IGNORE_AP_PROHIBIT BIT(10) 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtunsigned int tdls_testing = 0; 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TPK_LIFETIME 43200 /* 12 hours */ 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TPK_RETRY_COUNT 3 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TPK_TIMEOUT 5000 /* in milliseconds */ 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_MIC_LEN 16 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_TIMEOUT_LEN 4 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpa_tdls_ftie { 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ie_type; /* FTIE */ 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ie_len; 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 mic_ctrl[2]; 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 mic[TDLS_MIC_LEN]; 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 Anonce[WPA_NONCE_LEN]; /* Responder Nonce in TDLS */ 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 Snonce[WPA_NONCE_LEN]; /* Initiator Nonce in TDLS */ 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* followed by optional elements */ 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} STRUCT_PACKED; 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpa_tdls_timeoutie { 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ie_type; /* Timeout IE */ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ie_len; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 interval_type; 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 value[TDLS_TIMEOUT_LEN]; 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} STRUCT_PACKED; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpa_tdls_lnkid { 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ie_type; /* Link Identifier IE */ 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ie_len; 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 bssid[ETH_ALEN]; 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 init_sta[ETH_ALEN]; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 resp_sta[ETH_ALEN]; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} STRUCT_PACKED; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* TDLS frame headers as per IEEE Std 802.11z-2010 */ 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpa_tdls_frame { 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 payloadtype; /* IEEE80211_TDLS_RFTYPE */ 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 category; /* Category */ 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 action; /* Action (enum tdls_frame_type) */ 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} STRUCT_PACKED; 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * wpa_add_tdls_timeoutie(u8 *pos, u8 *ie, size_t ie_len, u32 tsecs); 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_tpk_retry_timeout(void *eloop_ctx, void *timeout_ctx); 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_peer_free(struct wpa_sm *sm, struct wpa_tdls_peer *peer); 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TDLS_MAX_IE_LEN 80 911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#define IEEE80211_MAX_SUPP_RATES 32 921f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpa_tdls_peer { 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *next; 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int initiator; /* whether this end was initiator for TDLS setup */ 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 addr[ETH_ALEN]; /* other end MAC address */ 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 inonce[WPA_NONCE_LEN]; /* Initiator Nonce */ 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 rnonce[WPA_NONCE_LEN]; /* Responder Nonce */ 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 rsnie_i[TDLS_MAX_IE_LEN]; /* Initiator RSN IE */ 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rsnie_i_len; 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 rsnie_p[TDLS_MAX_IE_LEN]; /* Peer RSN IE */ 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t rsnie_p_len; 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime; 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int cipher; /* Selected cipher (WPA_CIPHER_*) */ 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dtoken; 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tpk { 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 kck[16]; /* TPK-KCK */ 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 tk[16]; /* TPK-TK; assuming only CCMP will be used */ 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } tpk; 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int tpk_set; 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int tpk_success; 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct tpk_timer { 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dest[ETH_ALEN]; 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int count; /* Retry Count */ 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int timer; /* Timeout in milliseconds */ 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 action_code; /* TDLS frame type */ 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dialog_token; 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 status_code; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int buf_len; /* length of TPK message for retransmission */ 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *buf; /* buffer for TPK message */ 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } sm_tmr; 1241f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 1251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u16 capability; 1261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 1271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 supp_rates[IEEE80211_MAX_SUPP_RATES]; 1281f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt size_t supp_rates_len; 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_get_privacy(struct wpa_sm *sm) 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Get info needed from supplicant to check if the current BSS supports 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * security. Other than OPEN mode, rest are considered secured 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * WEP/WPA/WPA2 hence TDLS frames are processed for TPK handshake. 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return sm->pairwise_cipher != WPA_CIPHER_NONE; 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * wpa_add_ie(u8 *pos, const u8 *ie, size_t ie_len) 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ie, ie_len); 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pos + ie_len; 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_del_key(struct wpa_sm *sm, struct wpa_tdls_peer *peer) 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_sm_set_key(sm, WPA_ALG_NONE, peer->addr, 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0, 0, NULL, 0, NULL, 0) < 0) { 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TDLS: Failed to delete TPK-TK from " 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "the driver"); 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_set_key(struct wpa_sm *sm, struct wpa_tdls_peer *peer) 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 key_len; 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 rsc[6]; 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum wpa_alg alg; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(rsc, 0, 6); 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (peer->cipher) { 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WPA_CIPHER_CCMP: 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alg = WPA_ALG_CCMP; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt key_len = 16; 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WPA_CIPHER_NONE: 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Pairwise Cipher Suite: " 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "NONE - do not use pairwise keys"); 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TDLS: Unsupported pairwise cipher %d", 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pairwise_cipher); 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_sm_set_key(sm, alg, peer->addr, -1, 1, 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsc, sizeof(rsc), peer->tpk.tk, key_len) < 0) { 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TDLS: Failed to set TPK to the " 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "driver"); 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_send_tpk_msg(struct wpa_sm *sm, const u8 *dst, 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 action_code, u8 dialog_token, 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 status_code, const u8 *buf, size_t len) 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_sm_send_tdls_mgmt(sm, dst, action_code, dialog_token, 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status_code, buf, len); 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_tpk_send(struct wpa_sm *sm, const u8 *dest, u8 action_code, 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dialog_token, u16 status_code, 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *msg, size_t msg_len) 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK send dest=" MACSTR " action_code=%u " 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "dialog_token=%u status_code=%u msg_len=%u", 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(dest), action_code, dialog_token, status_code, 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned int) msg_len); 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_send_tpk_msg(sm, dest, action_code, dialog_token, 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status_code, msg, msg_len)) { 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to send message " 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(action_code=%u)", action_code); 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (action_code == WLAN_TDLS_SETUP_CONFIRM || 2241f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt action_code == WLAN_TDLS_TEARDOWN || 2251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt action_code == WLAN_TDLS_DISCOVERY_REQUEST || 2261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt action_code == WLAN_TDLS_DISCOVERY_RESPONSE) 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; /* No retries */ 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, dest, ETH_ALEN) == 0) 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No matching entry found for " 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "retry " MACSTR, MAC2STR(dest)); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_retry_timeout, sm, peer); 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.count = TPK_RETRY_COUNT; 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.timer = TPK_TIMEOUT; 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Copy message to resend on timeout */ 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->sm_tmr.dest, dest, ETH_ALEN); 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.action_code = action_code; 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.dialog_token = dialog_token; 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.status_code = status_code; 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf_len = msg_len; 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(peer->sm_tmr.buf); 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf = os_malloc(msg_len); 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->sm_tmr.buf == NULL) 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->sm_tmr.buf, msg, msg_len); 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Retry timeout registered " 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(action_code=%u)", action_code); 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(peer->sm_tmr.timer / 1000, 0, 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_retry_timeout, sm, peer); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtstatic int wpa_tdls_do_teardown(struct wpa_sm *sm, struct wpa_tdls_peer *peer, 2661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u16 reason_code, int free_peer) 2671f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 2681f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt int ret; 2691f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2701f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) { 2711f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt ret = wpa_tdls_send_teardown(sm, peer->addr, reason_code); 2721f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2731f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* disable the link after teardown was sent */ 2741f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, peer->addr); 2751f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } else { 2761f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt ret = wpa_sm_tdls_oper(sm, TDLS_TEARDOWN, peer->addr); 2771f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 2781f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup || free_peer) 2801f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_peer_free(sm, peer); 2811f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2821f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return ret; 2831f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 2841f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_tpk_retry_timeout(void *eloop_ctx, void *timeout_ctx) 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_sm *sm = eloop_ctx; 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer = timeout_ctx; 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->sm_tmr.count) { 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.count--; 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.timer = TPK_TIMEOUT; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Retrying sending of message " 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(action_code=%u)", 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.action_code); 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->sm_tmr.buf == NULL) { 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No retry buffer available " 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "for action_code=%u", 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.action_code); 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_retry_timeout, sm, 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer); 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* resend TPK Handshake Message to Peer */ 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_send_tpk_msg(sm, peer->sm_tmr.dest, 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.action_code, 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.dialog_token, 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.status_code, 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf, 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf_len)) { 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to retry " 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "transmission"); 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_retry_timeout, sm, peer); 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(peer->sm_tmr.timer / 1000, 0, 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_retry_timeout, sm, peer); 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_retry_timeout, sm, peer); 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending Teardown Request"); 3271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_do_teardown(sm, peer, 3281f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED, 1); 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_tpk_retry_timeout_cancel(struct wpa_sm *sm, 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer, 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 action_code) 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (action_code == peer->sm_tmr.action_code) { 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Retry timeout cancelled for " 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "action_code=%u", action_code); 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Cancel Timeout registered */ 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_retry_timeout, sm, peer); 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* free all resources meant for retry */ 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(peer->sm_tmr.buf); 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf = NULL; 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.count = 0; 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.timer = 0; 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf_len = 0; 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.action_code = 0xff; 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Error in cancelling retry timeout " 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(Unknown action_code=%u)", action_code); 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_generate_tpk(struct wpa_tdls_peer *peer, 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *own_addr, const u8 *bssid) 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 key_input[SHA256_MAC_LEN]; 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce[2]; 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 data[3 * ETH_ALEN]; 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* IEEE Std 802.11z-2010 8.5.9.1: 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TPK-Key-Input = SHA-256(min(SNonce, ANonce) || max(SNonce, ANonce)) 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = WPA_NONCE_LEN; 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = WPA_NONCE_LEN; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->inonce, peer->rnonce, WPA_NONCE_LEN) < 0) { 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nonce[0] = peer->inonce; 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nonce[1] = peer->rnonce; 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nonce[0] = peer->rnonce; 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nonce[1] = peer->inonce; 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: min(Nonce)", nonce[0], WPA_NONCE_LEN); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: max(Nonce)", nonce[1], WPA_NONCE_LEN); 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha256_vector(2, nonce, len, key_input); 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TDLS: TPK-Key-Input", 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt key_input, SHA256_MAC_LEN); 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TPK-Key-Data = KDF-N_KEY(TPK-Key-Input, "TDLS PMK", 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * min(MAC_I, MAC_R) || max(MAC_I, MAC_R) || BSSID || N_KEY) 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TODO: is N_KEY really included in KDF Context and if so, in which 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * presentation format (little endian 16-bit?) is it used? It gets 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * added by the KDF anyway.. 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(own_addr, peer->addr, ETH_ALEN) < 0) { 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data, own_addr, ETH_ALEN); 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data + ETH_ALEN, peer->addr, ETH_ALEN); 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data, peer->addr, ETH_ALEN); 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data + ETH_ALEN, own_addr, ETH_ALEN); 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data + 2 * ETH_ALEN, bssid, ETH_ALEN); 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: KDF Context", data, sizeof(data)); 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha256_prf(key_input, SHA256_MAC_LEN, "TDLS PMK", data, sizeof(data), 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) &peer->tpk, sizeof(peer->tpk)); 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TDLS: TPK-KCK", 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->tpk.kck, sizeof(peer->tpk.kck)); 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TDLS: TPK-TK", 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->tpk.tk, sizeof(peer->tpk.tk)); 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->tpk_set = 1; 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_tdls_ftie_mic - Calculate TDLS FTIE MIC 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @kck: TPK-KCK 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @lnkid: Pointer to the beginning of Link Identifier IE 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @rsnie: Pointer to the beginning of RSN IE used for handshake 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @timeoutie: Pointer to the beginning of Timeout IE used for handshake 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ftie: Pointer to the beginning of FT IE 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mic: Pointer for writing MIC 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Calculate MIC for TDLS frame. 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_ftie_mic(const u8 *kck, u8 trans_seq, const u8 *lnkid, 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *rsnie, const u8 *timeoutie, 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ftie, u8 *mic) 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *buf, *pos; 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *_ftie; 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpa_tdls_lnkid *_lnkid; 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len = 2 * ETH_ALEN + 1 + 2 + lnkid[1] + 2 + rsnie[1] + 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2 + timeoutie[1] + 2 + ftie[1]; 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_zalloc(len); 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!buf) { 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TDLS: No memory for MIC calculation"); 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _lnkid = (const struct wpa_tdls_lnkid *) lnkid; 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 1) TDLS initiator STA MAC address */ 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, _lnkid->init_sta, ETH_ALEN); 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += ETH_ALEN; 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2) TDLS responder STA MAC address */ 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, _lnkid->resp_sta, ETH_ALEN); 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += ETH_ALEN; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3) Transaction Sequence number */ 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = trans_seq; 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 4) Link Identifier IE */ 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, lnkid, 2 + lnkid[1]); 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + lnkid[1]; 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5) RSN IE */ 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, rsnie, 2 + rsnie[1]); 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + rsnie[1]; 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 6) Timeout Interval IE */ 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, timeoutie, 2 + timeoutie[1]); 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + timeoutie[1]; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 7) FTIE, with the MIC field of the FTIE set to 0 */ 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ftie, 2 + ftie[1]); 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _ftie = (struct wpa_tdls_ftie *) pos; 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(_ftie->mic, 0, TDLS_MIC_LEN); 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + ftie[1]; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Data for FTIE MIC", buf, pos - buf); 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TDLS: KCK", kck, 16); 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = omac1_aes_128(kck, buf, pos - buf, mic); 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE MIC", mic, 16); 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_tdls_key_mic_teardown - Calculate TDLS FTIE MIC for Teardown frame 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @kck: TPK-KCK 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @trans_seq: Transaction Sequence Number (4 - Teardown) 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @rcode: Reason code for Teardown 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @dtoken: Dialog Token used for that particular link 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @lnkid: Pointer to the beginning of Link Identifier IE 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ftie: Pointer to the beginning of FT IE 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mic: Pointer for writing MIC 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Calculate MIC for TDLS frame. 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_key_mic_teardown(const u8 *kck, u8 trans_seq, u16 rcode, 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dtoken, const u8 *lnkid, 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ftie, u8 *mic) 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *buf, *pos; 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *_ftie; 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret; 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len; 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (lnkid == NULL) 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = 2 + lnkid[1] + sizeof(rcode) + sizeof(dtoken) + 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(trans_seq) + 2 + ftie[1]; 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_zalloc(len); 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!buf) { 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TDLS: No memory for MIC calculation"); 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 1) Link Identifier IE */ 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, lnkid, 2 + lnkid[1]); 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + lnkid[1]; 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2) Reason Code */ 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, rcode); 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += sizeof(rcode); 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3) Dialog token */ 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = dtoken; 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 4) Transaction Sequence number */ 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = trans_seq; 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 7) FTIE, with the MIC field of the FTIE set to 0 */ 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ftie, 2 + ftie[1]); 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _ftie = (struct wpa_tdls_ftie *) pos; 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(_ftie->mic, 0, TDLS_MIC_LEN); 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + ftie[1]; 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Data for FTIE MIC", buf, pos - buf); 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "TDLS: KCK", kck, 16); 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = omac1_aes_128(kck, buf, pos - buf, mic); 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE MIC", mic, 16); 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_supplicant_verify_tdls_mic(u8 trans_seq, 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer, 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *lnkid, const u8 *timeoutie, 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpa_tdls_ftie *ftie) 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 mic[16]; 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->tpk_set) { 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_ftie_mic(peer->tpk.kck, trans_seq, lnkid, 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p, timeoutie, (u8 *) ftie, 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mic); 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(mic, ftie->mic, 16) != 0) { 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Invalid MIC in FTIE - " 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "dropping packet"); 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Received MIC", 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->mic, 16); 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Calculated MIC", 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mic, 16); 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "TDLS: Could not verify TDLS MIC, " 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK not set - dropping packet"); 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_supplicant_verify_tdls_mic_teardown( 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 trans_seq, u16 rcode, u8 dtoken, struct wpa_tdls_peer *peer, 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *lnkid, const struct wpa_tdls_ftie *ftie) 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 mic[16]; 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->tpk_set) { 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_key_mic_teardown(peer->tpk.kck, trans_seq, rcode, 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dtoken, lnkid, (u8 *) ftie, mic); 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(mic, ftie->mic, 16) != 0) { 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Invalid MIC in Teardown - " 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "dropping packet"); 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Could not verify TDLS Teardown " 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "MIC, TPK not set - dropping packet"); 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_tpk_timeout(void *eloop_ctx, void *timeout_ctx) 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_sm *sm = eloop_ctx; 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer = timeout_ctx; 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * On TPK lifetime expiration, we have an option of either tearing down 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the direct link or trying to re-initiate it. The selection of what 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to do is not strictly speaking controlled by our role in the expired 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * link, but for now, use that to select whether to renew or tear down 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the link. 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->initiator) { 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime expired for " MACSTR 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " - try to renew", MAC2STR(peer->addr)); 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_start(sm, peer->addr); 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime expired for " MACSTR 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " - tear down", MAC2STR(peer->addr)); 6051f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_do_teardown(sm, peer, 6061f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED, 1); 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_peer_free(struct wpa_sm *sm, struct wpa_tdls_peer *peer) 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Clear state for peer " MACSTR, 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(peer->addr)); 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_timeout, sm, peer); 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_retry_timeout, sm, peer); 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->initiator = 0; 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(peer->sm_tmr.buf); 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->sm_tmr.buf = NULL; 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i_len = peer->rsnie_p_len = 0; 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->cipher = 0; 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->tpk_set = peer->tpk_success = 0; 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&peer->tpk, 0, sizeof(peer->tpk)); 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(peer->inonce, 0, WPA_NONCE_LEN); 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(peer->rnonce, 0, WPA_NONCE_LEN); 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_linkid(struct wpa_sm *sm, struct wpa_tdls_peer *peer, 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid) 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lnkid->ie_type = WLAN_EID_LINK_ID; 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lnkid->ie_len = 3 * ETH_ALEN; 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(lnkid->bssid, sm->bssid, ETH_ALEN); 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->initiator) { 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(lnkid->init_sta, sm->own_addr, ETH_ALEN); 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(lnkid->resp_sta, peer->addr, ETH_ALEN); 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(lnkid->init_sta, peer->addr, ETH_ALEN); 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(lnkid->resp_sta, sm->own_addr, ETH_ALEN); 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtint wpa_tdls_send_teardown(struct wpa_sm *sm, const u8 *addr, u16 reason_code) 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid lnkid; 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dialog_token; 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *rbuf, *pos; 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ielen; 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6541f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_disabled || !sm->tdls_supported) 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Find the node and free from the list */ 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, addr, ETH_ALEN) == 0) 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No matching entry found for " 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Teardown " MACSTR, MAC2STR(addr)); 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dialog_token = peer->dtoken; 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS Teardown for " MACSTR, 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(addr)); 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen = 0; 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_get_privacy(sm) && peer->tpk_set && peer->tpk_success) { 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* To add FTIE for Teardown request and compute MIC */ 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen += sizeof(*ftie); 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen += 170; 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf = os_zalloc(ielen + 1); 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rbuf == NULL) 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rbuf; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm) || !peer->tpk_set || !peer->tpk_success) 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_ies; 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) pos; 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_type = WLAN_EID_FAST_BSS_TRANSITION; 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Using the recent nonce which should be for CONFIRM frame */ 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Anonce, peer->rnonce, WPA_NONCE_LEN); 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Snonce, peer->inonce, WPA_NONCE_LEN); 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len = sizeof(struct wpa_tdls_ftie) - 2; 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (ftie + 1); 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) { 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - add extra subelem to " 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "FTIE"); 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len += 170; 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 255; /* FTIE subelem */ 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 168; /* FTIE subelem length */ 7061f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt pos += 168; 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE for TDLS Teardown handshake", 7101f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt (u8 *) ftie, pos - (u8 *) ftie); 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* compute MIC before sending */ 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_linkid(sm, peer, &lnkid); 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_key_mic_teardown(peer->tpk.kck, 4, reason_code, 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dialog_token, (u8 *) &lnkid, (u8 *) ftie, 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->mic); 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_ies: 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: register for a Timeout handler, if Teardown is not received at 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the other end, then try again another time */ 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* request driver to send Teardown using this FTIE */ 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_send(sm, addr, WLAN_TDLS_TEARDOWN, 0, 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED, rbuf, 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos - rbuf); 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rbuf); 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* clear the Peerkey statemachine */ 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7351f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtint wpa_tdls_teardown_link(struct wpa_sm *sm, const u8 *addr, u16 reason_code) 7361f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 7371f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_tdls_peer *peer; 7381f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7391f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_disabled || !sm->tdls_supported) 7401f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 7411f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7421f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 7431f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (os_memcmp(peer->addr, addr, ETH_ALEN) == 0) 7441f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt break; 7451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 7461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer == NULL) { 7481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Could not find peer " MACSTR 7491f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt " for link Teardown", MAC2STR(addr)); 7501f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 7511f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 7521f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7531f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (!peer->tpk_success) { 7541f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Peer " MACSTR 7551f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt " not connected - cannot Teardown link", MAC2STR(addr)); 7561f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 7571f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 7581f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7591f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return wpa_tdls_do_teardown(sm, peer, reason_code, 0); 7601f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 7611f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7621f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7631f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtvoid wpa_tdls_disable_link(struct wpa_sm *sm, const u8 *addr) 7641f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 7651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_tdls_peer *peer; 7661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7671f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 7681f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (os_memcmp(peer->addr, addr, ETH_ALEN) == 0) 7691f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt break; 7701f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 7711f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7721f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer) { 7731f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, addr); 7741f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_peer_free(sm, peer); 7751f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 7761f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 7771f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7781f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_recv_teardown(struct wpa_sm *sm, const u8 *src_addr, 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer = NULL; 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid; 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_eapol_ie_parse kde; 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 reason_code; 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos; 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ielen; 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Find the node and free from the list */ 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, src_addr, ETH_ALEN) == 0) 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No matching entry found for " 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Teardown " MACSTR, MAC2STR(src_addr)); 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 1 /* pkt_type */ + 1 /* Category */ + 1 /* Action */; 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt reason_code = WPA_GET_LE16(pos); 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS Teardown Request from " MACSTR 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (reason code %u)", MAC2STR(src_addr), reason_code); 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen = len - (pos - buf); /* start of IE in buf */ 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_parse_ies((const u8 *) pos, ielen, &kde) < 0) { 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to parse IEs in Teardown"); 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.lnkid == NULL || kde.lnkid_len < 3 * ETH_ALEN) { 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No Link Identifier IE in TDLS " 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Teardown"); 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lnkid = (struct wpa_tdls_lnkid *) kde.lnkid; 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm) || !peer->tpk_set || !peer->tpk_success) 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_ftie; 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.ftie == NULL || kde.ftie_len < sizeof(*ftie)) { 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No FTIE in TDLS Teardown"); 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) kde.ftie; 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Process MIC check to see if TDLS Teardown is right */ 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_verify_tdls_mic_teardown(4, reason_code, 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->dtoken, peer, 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) lnkid, ftie) < 0) { 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: MIC failure for TDLS " 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Teardown Request from " MACSTR, MAC2STR(src_addr)); 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_ftie: 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Request the driver to disable the direct link and clear associated 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * keys. 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* clear the Peerkey statemachine */ 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_tdls_send_error - To send suitable TDLS status response with 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * appropriate status code mentioning reason for error/failure. 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @dst - MAC addr of Peer station 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @tdls_action - TDLS frame type for which error code is sent 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @status - status code mentioning reason 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_send_error(struct wpa_sm *sm, const u8 *dst, 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 tdls_action, u8 dialog_token, u16 status) 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending error to " MACSTR 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (action=%u status=%u)", 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(dst), tdls_action, status); 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_tdls_tpk_send(sm, dst, tdls_action, dialog_token, status, 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, 0); 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8761f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtstatic struct wpa_tdls_peer * 8771f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtwpa_tdls_add_peer(struct wpa_sm *sm, const u8 *addr) 8781f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 8791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_tdls_peer *peer; 8801f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 8811f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Creating peer entry for " MACSTR, 8821f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt MAC2STR(addr)); 8831f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 8841f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer = os_zalloc(sizeof(*peer)); 8851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer == NULL) 8861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return NULL; 8871f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 8881f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt os_memcpy(peer->addr, addr, ETH_ALEN); 8891f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->next = sm->tdls; 8901f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt sm->tdls = peer; 8911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 8921f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return peer; 8931f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 8941f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 8951f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_send_tpk_m1(struct wpa_sm *sm, 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer) 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buf_len; 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie timeoutie; 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 rsn_capab; 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *rbuf, *pos, *count_pos; 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 count; 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_ie_hdr *hdr; 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) { 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: No security used on the link"); 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i_len = 0; 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_rsnie; 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TPK Handshake Message 1: 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * FTIE: ANonce=0, SNonce=initiator nonce MIC=0, DataKDs=(RSNIE_I, 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Timeout Interval IE)) 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Filling RSN IE */ 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = (struct rsn_ie_hdr *) peer->rsnie_i; 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->elem_id = WLAN_EID_RSN; 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(hdr->version, RSN_VERSION); 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (hdr + 1); 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED); 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count_pos = pos; 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count = 0; 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * AES-CCMP is the default Encryption preferred for TDLS, so 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RSN IE is filled only with CCMP CIPHER 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Note: TKIP is not used to encrypt TDLS link. 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Regardless of the cipher used on the AP connection, select CCMP 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * here. 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_CCMP); 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count++; 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(count_pos, count); 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, 1); 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_TPK_HANDSHAKE); 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_capab = WPA_CAPABILITY_PEERKEY_ENABLED; 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_capab |= RSN_NUM_REPLAY_COUNTERS_16 << 2; 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_ALT_RSN_IE) { 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Use alternative RSN IE for " 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "testing"); 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_capab = WPA_CAPABILITY_PEERKEY_ENABLED; 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, rsn_capab); 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_ALT_RSN_IE) { 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Number of PMKIDs */ 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 0x00; 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 0x00; 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->len = (pos - peer->rsnie_i) - 2; 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i_len = pos - peer->rsnie_i; 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: RSN IE for TPK handshake", 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i, peer->rsnie_i_len); 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_rsnie: 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len = 0; 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_get_privacy(sm)) 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += peer->rsnie_i_len + sizeof(struct wpa_tdls_ftie) + 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct wpa_tdls_timeoutie); 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_get_privacy(sm) && 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (tdls_testing & TDLS_TESTING_LONG_FRAME)) 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += 170; 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_DIFF_BSSID) 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += sizeof(struct wpa_tdls_lnkid); 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf = os_zalloc(buf_len + 1); 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rbuf == NULL) { 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rbuf; 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_ies; 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Initiator RSN IE */ 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpa_add_ie(pos, peer->rsnie_i, peer->rsnie_i_len); 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) pos; 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_type = WLAN_EID_FAST_BSS_TRANSITION; 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len = sizeof(struct wpa_tdls_ftie) - 2; 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_get_random(peer->inonce, WPA_NONCE_LEN)) { 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_msg(sm->ctx->msg_ctx, MSG_WARNING, 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TDLS: Failed to get random data for initiator Nonce"); 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rbuf); 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Initiator Nonce for TPK handshake", 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->inonce, WPA_NONCE_LEN); 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Snonce, peer->inonce, WPA_NONCE_LEN); 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE for TPK Handshake M1", 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) ftie, sizeof(struct wpa_tdls_ftie)); 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (ftie + 1); 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) { 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - add extra subelem to " 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "FTIE"); 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len += 170; 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 255; /* FTIE subelem */ 10268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 168; /* FTIE subelem length */ 10278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 168; 10288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Lifetime */ 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->lifetime = TPK_LIFETIME; 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_SHORT_LIFETIME) { 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - use short TPK " 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "lifetime"); 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->lifetime = 301; 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_LIFETIME) { 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - use long TPK " 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "lifetime"); 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->lifetime = 0xffffffff; 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpa_add_tdls_timeoutie(pos, (u8 *) &timeoutie, 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(timeoutie), peer->lifetime); 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime %u seconds", peer->lifetime); 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_ies: 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_DIFF_BSSID) { 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - use incorrect BSSID in " 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Link Identifier"); 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *l = (struct wpa_tdls_lnkid *) pos; 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_linkid(sm, peer, l); 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt l->bssid[5] ^= 0x01; 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += sizeof(*l); 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending TDLS Setup Request / TPK " 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Handshake Message 1 (peer " MACSTR ")", 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(peer->addr)); 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_tpk_send(sm, peer->addr, WLAN_TDLS_SETUP_REQUEST, 1, 0, 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf, pos - rbuf); 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rbuf); 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_send_tpk_m2(struct wpa_sm *sm, 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const unsigned char *src_addr, u8 dtoken, 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid, 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpa_tdls_peer *peer) 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *rbuf, *pos; 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buf_len; 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime; 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie timeoutie; 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len = 0; 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_get_privacy(sm)) { 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Peer RSN IE, FTIE(Initiator Nonce, Responder Nonce), 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Lifetime */ 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += peer->rsnie_i_len + sizeof(struct wpa_tdls_ftie) + 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct wpa_tdls_timeoutie); 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) 10938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += 170; 10948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 10958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf = os_zalloc(buf_len + 1); 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rbuf == NULL) 10998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rbuf; 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_ies; 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Peer RSN IE */ 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpa_add_ie(pos, peer->rsnie_p, peer->rsnie_p_len); 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) pos; 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_type = WLAN_EID_FAST_BSS_TRANSITION; 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: ftie->mic_control to set 2-RESPONSE */ 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Anonce, peer->rnonce, WPA_NONCE_LEN); 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Snonce, peer->inonce, WPA_NONCE_LEN); 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len = sizeof(struct wpa_tdls_ftie) - 2; 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE for TPK M2", 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) ftie, sizeof(*ftie)); 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (ftie + 1); 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) { 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - add extra subelem to " 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "FTIE"); 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len += 170; 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 255; /* FTIE subelem */ 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 168; /* FTIE subelem length */ 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 168; 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Lifetime */ 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime = peer->lifetime; 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_WRONG_LIFETIME_RESP) { 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - use wrong TPK " 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "lifetime in response"); 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime++; 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpa_add_tdls_timeoutie(pos, (u8 *) &timeoutie, 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(timeoutie), lifetime); 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime %u seconds from initiator", 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime); 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* compute MIC before sending */ 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_ftie_mic(peer->tpk.kck, 2, (u8 *) lnkid, peer->rsnie_p, 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) &timeoutie, (u8 *) ftie, ftie->mic); 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_ies: 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_send(sm, src_addr, WLAN_TDLS_SETUP_RESPONSE, dtoken, 0, 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf, pos - rbuf); 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rbuf); 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_send_tpk_m3(struct wpa_sm *sm, 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const unsigned char *src_addr, u8 dtoken, 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid, 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpa_tdls_peer *peer) 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *rbuf, *pos; 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buf_len; 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie timeoutie; 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime; 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len = 0; 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_get_privacy(sm)) { 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Peer RSN IE, FTIE(Initiator Nonce, Responder Nonce), 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Lifetime */ 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += peer->rsnie_i_len + sizeof(struct wpa_tdls_ftie) + 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct wpa_tdls_timeoutie); 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len += 170; 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf = os_zalloc(buf_len + 1); 11818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rbuf == NULL) 11828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = rbuf; 11848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) 11868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_ies; 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Peer RSN IE */ 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpa_add_ie(pos, peer->rsnie_p, peer->rsnie_p_len); 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) pos; 11928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_type = WLAN_EID_FAST_BSS_TRANSITION; 11938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /*TODO: ftie->mic_control to set 3-CONFIRM */ 11948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Anonce, peer->rnonce, WPA_NONCE_LEN); 11958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->Snonce, peer->inonce, WPA_NONCE_LEN); 11968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len = sizeof(struct wpa_tdls_ftie) - 2; 11978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (ftie + 1); 11998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_LONG_FRAME) { 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - add extra subelem to " 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "FTIE"); 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->ie_len += 170; 12058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 255; /* FTIE subelem */ 12068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 168; /* FTIE subelem length */ 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 168; 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 12108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Lifetime */ 12128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime = peer->lifetime; 12138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 12148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_WRONG_LIFETIME_CONF) { 12158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - use wrong TPK " 12168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "lifetime in confirm"); 12178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime++; 12188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 12208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpa_add_tdls_timeoutie(pos, (u8 *) &timeoutie, 12218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(timeoutie), lifetime); 12228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime %u seconds", 12238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime); 12248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* compute MIC before sending */ 12268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_ftie_mic(peer->tpk.kck, 3, (u8 *) lnkid, peer->rsnie_p, 12278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) &timeoutie, (u8 *) ftie, ftie->mic); 12288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_ies: 12308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_send(sm, src_addr, WLAN_TDLS_SETUP_CONFIRM, dtoken, 0, 12318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rbuf, pos - rbuf); 12328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(rbuf); 12338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 12358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 12368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12381f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtstatic int wpa_tdls_send_discovery_response(struct wpa_sm *sm, 12391f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_tdls_peer *peer, 12401f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 dialog_token) 12411f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 12421f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending TDLS Discovery Response " 12431f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "(peer " MACSTR ")", MAC2STR(peer->addr)); 12441f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return wpa_tdls_tpk_send(sm, peer->addr, WLAN_TDLS_DISCOVERY_RESPONSE, 12461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt dialog_token, 0, NULL, 0); 12471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 12481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12491f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12501f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtstatic int 12511f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtwpa_tdls_process_discovery_request(struct wpa_sm *sm, const u8 *addr, 12521f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt const u8 *buf, size_t len) 12531f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 12541f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_eapol_ie_parse kde; 12551f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt const struct wpa_tdls_lnkid *lnkid; 12561f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_tdls_peer *peer; 12571f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt size_t min_req_len = sizeof(struct wpa_tdls_frame) + 12581f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 1 /* dialog token */ + sizeof(struct wpa_tdls_lnkid); 12591f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u8 dialog_token; 12601f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12611f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Discovery Request from " MACSTR, 12621f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt MAC2STR(addr)); 12631f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12641f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (len < min_req_len) { 12651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS Discovery Request is too short: " 12661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "%d", (int) len); 12671f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 12681f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 12691f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12701f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt dialog_token = buf[sizeof(struct wpa_tdls_frame)]; 12711f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12721f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (wpa_supplicant_parse_ies(buf + sizeof(struct wpa_tdls_frame) + 1, 12731f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt len - (sizeof(struct wpa_tdls_frame) + 1), 12741f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &kde) < 0) 12751f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 12761f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12771f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (!kde.lnkid) { 12781f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Link ID not found in Discovery " 12791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "Request"); 12801f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 12811f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 12821f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12831f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt lnkid = (const struct wpa_tdls_lnkid *) kde.lnkid; 12841f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (os_memcmp(sm->bssid, lnkid->bssid, ETH_ALEN) != 0) { 12861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Discovery Request from different " 12871f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt " BSS " MACSTR, MAC2STR(lnkid->bssid)); 12881f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 12891f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 12901f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12911f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer = wpa_tdls_add_peer(sm, addr); 12921f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer == NULL) 12931f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 12941f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12951f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return wpa_tdls_send_discovery_response(sm, peer, dialog_token); 12961f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 12971f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12981f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 12991f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtint wpa_tdls_send_discovery_request(struct wpa_sm *sm, const u8 *addr) 13001f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 13011f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_disabled || !sm->tdls_supported) 13021f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 13031f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13041f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending Discovery Request to peer " 13051f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt MACSTR, MAC2STR(addr)); 13061f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return wpa_tdls_tpk_send(sm, addr, WLAN_TDLS_DISCOVERY_REQUEST, 13071f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 1, 0, NULL, 0); 13081f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 13091f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13101f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13111f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtstatic int copy_supp_rates(const struct wpa_eapol_ie_parse *kde, 13121f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt struct wpa_tdls_peer *peer) 13131f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 13141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (!kde->supp_rates) { 13151f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: No supported rates received"); 13161f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 13171f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 13181f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13191f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->supp_rates_len = kde->supp_rates_len - 2; 13201f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer->supp_rates_len > IEEE80211_MAX_SUPP_RATES) 13211f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->supp_rates_len = IEEE80211_MAX_SUPP_RATES; 13221f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt os_memcpy(peer->supp_rates, kde->supp_rates + 2, peer->supp_rates_len); 13231f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13241f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (kde->ext_supp_rates) { 13251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt int clen = kde->ext_supp_rates_len - 2; 13261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer->supp_rates_len + clen > IEEE80211_MAX_SUPP_RATES) 13271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt clen = IEEE80211_MAX_SUPP_RATES - peer->supp_rates_len; 13281f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt os_memcpy(peer->supp_rates + peer->supp_rates_len, 13291f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt kde->ext_supp_rates + 2, clen); 13301f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->supp_rates_len += clen; 13311f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 13321f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13331f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return 0; 13341f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 13351f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13361f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_process_tpk_m1(struct wpa_sm *sm, const u8 *src_addr, 13388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 13398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 13418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_eapol_ie_parse kde; 13428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_ie_data ie; 13438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int cipher; 13448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *cpos; 13458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie = NULL; 13468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie *timeoutie; 13478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid; 13488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime = 0; 13498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if 0 13508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_ie_hdr *hdr; 13518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 13528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 rsn_capab; 13538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 rsn_ver; 13548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 13558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dtoken; 13568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 ielen; 13578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 status = WLAN_STATUS_UNSPECIFIED_FAILURE; 13588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int tdls_prohibited = sm->tdls_prohibited; 13591f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt int existing_peer = 0; 13608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3 + 3) 13628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cpos = buf; 13658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cpos += 1 /* pkt_type */ + 1 /* Category */ + 1 /* Action */; 13668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* driver had already verified the frame format */ 13688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dtoken = *cpos++; /* dialog token */ 13698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Dialog Token in TPK M1 %d", dtoken); 13718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13721f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 13731f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (os_memcmp(peer->addr, src_addr, ETH_ALEN) == 0) { 13741f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt existing_peer = 1; 13751f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt break; 13761f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 13771f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 13781f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer == NULL) { 13801f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer = wpa_tdls_add_peer(sm, src_addr); 13811f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (peer == NULL) 13821f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt goto error; 13831f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 13841f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 13851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* capability information */ 13861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->capability = WPA_GET_LE16(cpos); 13871f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt cpos += 2; 13888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen = len - (cpos - buf); /* start of IE in buf */ 13908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_parse_ies(cpos, ielen, &kde) < 0) { 13918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to parse IEs in TPK M1"); 13928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 13938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.lnkid == NULL || kde.lnkid_len < 3 * ETH_ALEN) { 13968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No valid Link Identifier IE in " 13978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M1"); 13988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 13998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Link ID Received from TPK M1", 14018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.lnkid, kde.lnkid_len); 14028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lnkid = (struct wpa_tdls_lnkid *) kde.lnkid; 14038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(sm->bssid, lnkid->bssid, ETH_ALEN) != 0) { 14048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: TPK M1 from diff BSS"); 14058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_NOT_IN_SAME_BSS; 14068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK M1 - TPK initiator " MACSTR, 14108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(src_addr)); 14118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14121f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (copy_supp_rates(&kde, peer) < 0) 14131f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt goto error; 14141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 14158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 14168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_CONCURRENT_INIT) { 14178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 14188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, src_addr, ETH_ALEN) == 0) 14198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 14208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 14221f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer = wpa_tdls_add_peer(sm, src_addr); 14238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) 14248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing concurrent initiation of " 14278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TDLS setup - send own request"); 14288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->initiator = 1; 14298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_send_tpk_m1(sm, peer); 14308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((tdls_testing & TDLS_TESTING_IGNORE_AP_PROHIBIT) && 14338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tdls_prohibited) { 14348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - ignore AP prohibition " 14358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "on TDLS"); 14368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tdls_prohibited = 0; 14378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 14398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_prohibited) { 14418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: TDLS prohibited in this BSS"); 14428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_REQUEST_DECLINED; 14438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) { 14478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.rsn_ie) { 14488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: RSN IE in TPK M1 while " 14498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "security is disabled"); 14508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_SECURITY_DISABLED; 14518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_rsn; 14548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.ftie == NULL || kde.ftie_len < sizeof(*ftie) || 14578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.rsn_ie == NULL) { 14588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No FTIE or RSN IE in TPK M1"); 14598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_PARAMETERS; 14608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.rsn_ie_len > TDLS_MAX_IE_LEN) { 14648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Too long Initiator RSN IE in " 14658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M1"); 14668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_RSNIE; 14678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_parse_wpa_ie_rsn(kde.rsn_ie, kde.rsn_ie_len, &ie) < 0) { 14718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to parse RSN IE in TPK M1"); 14728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_RSNIE; 14738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cipher = ie.pairwise_cipher; 14778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cipher & WPA_CIPHER_CCMP) { 14788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Using CCMP for direct link"); 14798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cipher = WPA_CIPHER_CCMP; 14808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 14818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No acceptable cipher in TPK M1"); 14828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID; 14838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((ie.capabilities & 14878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (WPA_CAPABILITY_NO_PAIRWISE | WPA_CAPABILITY_PEERKEY_ENABLED)) != 14888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_CAPABILITY_PEERKEY_ENABLED) { 14898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Invalid RSN Capabilities in " 14908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M1"); 14918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_RSN_IE_CAPAB; 14928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 14938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Lifetime */ 14968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.key_lifetime == NULL) { 14978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No Key Lifetime IE in TPK M1"); 14988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_UNACCEPTABLE_LIFETIME; 14998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 15008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt timeoutie = (struct wpa_tdls_timeoutie *) kde.key_lifetime; 15028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime = WPA_GET_LE32(timeoutie->value); 15038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime %u seconds", lifetime); 15048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (lifetime < 300) { 15058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Too short TPK lifetime"); 15068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_UNACCEPTABLE_LIFETIME; 15078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 15088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_rsn: 15111f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* If found, use existing entry instead of adding a new one; 15121f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * how to handle the case where both ends initiate at the 15138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * same time? */ 15141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (existing_peer) { 15158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->tpk_success) { 15168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS Setup Request while " 15178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "direct link is enabled - tear down the " 15188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "old link first"); 15198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if 0 15208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: Disabling the link would be more proper 15218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * operation here, but it seems to trigger a race with 15228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * some drivers handling the new request frame. */ 15238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 15248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else 15251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) 15261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, 15271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt src_addr); 15281f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt else 15291f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_del_key(sm, peer); 15308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 15318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 15328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 15358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * An entry is already present, so check if we already sent a 15368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TDLS Setup Request. If so, compare MAC addresses and let the 15378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * STA with the lower MAC address continue as the initiator. 15388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The other negotiation is terminated. 15398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 15408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->initiator) { 15418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(sm->own_addr, src_addr, ETH_ALEN) < 0) { 15428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Discard request " 15438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "from peer with higher address " 15448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MACSTR, MAC2STR(src_addr)); 15458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 15468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 15478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Accept request " 15488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "from peer with lower address " 15498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MACSTR " (terminate previously " 15508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "initiated negotiation", 15518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(src_addr)); 15528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 15538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15571f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_TDLS_TESTING 15581f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (tdls_testing & TDLS_TESTING_CONCURRENT_INIT) { 15591f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (os_memcmp(sm->own_addr, peer->addr, ETH_ALEN) < 0) { 15601f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* 15611f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * The request frame from us is going to win, so do not 15621f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * replace information based on this request frame from 15631f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * the peer. 15641f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt */ 15651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt goto skip_rsn_check; 15661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 15671f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 15681f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 15691f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 15708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->initiator = 0; /* Need to check */ 15718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->dtoken = dtoken; 15728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) { 15748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i_len = 0; 15758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p_len = 0; 15768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->cipher = WPA_CIPHER_NONE; 15778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_rsn_check; 15788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) kde.ftie; 15818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->inonce, ftie->Snonce, WPA_NONCE_LEN); 15828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->rsnie_i, kde.rsn_ie, kde.rsn_ie_len); 15838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i_len = kde.rsn_ie_len; 15848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->cipher = cipher; 15858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_get_random(peer->rnonce, WPA_NONCE_LEN)) { 15878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_WARNING, 15888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TDLS: Failed to get random data for responder nonce"); 15898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 15908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 15918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if 0 15948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* get version info from RSNIE received from Peer */ 15958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = (struct rsn_ie_hdr *) kde.rsn_ie; 15968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_ver = WPA_GET_LE16(hdr->version); 15978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* use min(peer's version, out version) */ 15998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rsn_ver > RSN_VERSION) 16008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_ver = RSN_VERSION; 16018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = (struct rsn_ie_hdr *) peer->rsnie_p; 16038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->elem_id = WLAN_EID_RSN; 16058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(hdr->version, rsn_ver); 16068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (hdr + 1); 16078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED); 16098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 16108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Include only the selected cipher in pairwise cipher suite */ 16118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, 1); 16128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 16138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cipher == WPA_CIPHER_CCMP) 16148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_CCMP); 16158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 16168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, 1); 16188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 16198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_TPK_HANDSHAKE); 16208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 16218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_capab = WPA_CAPABILITY_PEERKEY_ENABLED; 16238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_capab |= RSN_NUM_REPLAY_COUNTERS_16 << 2; 16248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, rsn_capab); 16258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 16268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->len = (pos - peer->rsnie_p) - 2; 16288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p_len = pos - peer->rsnie_p; 16298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 16308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* temp fix: validation of RSNIE later */ 16328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->rsnie_p, peer->rsnie_i, peer->rsnie_i_len); 16338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p_len = peer->rsnie_i_len; 16348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: RSN IE for TPK handshake", 16368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p, peer->rsnie_p_len); 16378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->lifetime = lifetime; 16398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_generate_tpk(peer, sm->own_addr, sm->bssid); 16418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_rsn_check: 16431f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* add the peer to the driver as a "setup in progress" peer */ 16441f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_peer_addset(sm, peer->addr, 1, 0, NULL, 0); 16451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 16468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending TDLS Setup Response / TPK M2"); 16471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (wpa_tdls_send_tpk_m2(sm, src_addr, dtoken, lnkid, peer) < 0) { 16481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_disable_link(sm, peer->addr); 16491f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt goto error; 16501f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 16518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 16538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidterror: 16558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_send_error(sm, src_addr, WLAN_TDLS_SETUP_RESPONSE, dtoken, 16568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status); 16578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 16588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 16598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_enable_link(struct wpa_sm *sm, struct wpa_tdls_peer *peer) 16628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 16638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->tpk_success = 1; 16648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_timeout, sm, peer); 16658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_get_privacy(sm)) { 16668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime = peer->lifetime; 16678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 16688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Start the initiator process a bit earlier to avoid race 16698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * condition with the responder sending teardown request. 16708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 16718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (lifetime > 3 && peer->initiator) 16728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime -= 3; 16738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(lifetime, 0, wpa_tdls_tpk_timeout, 16748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm, peer); 16758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 16768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_NO_TPK_EXPIRATION) { 16778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - disable TPK " 16788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "expiration"); 16798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(wpa_tdls_tpk_timeout, sm, peer); 16808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 16828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16831f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 16841f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* add supported rates and capabilities to the TDLS peer */ 16851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_peer_addset(sm, peer->addr, 0, peer->capability, 16861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->supp_rates, peer->supp_rates_len); 16871f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 16888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_ENABLE_LINK, peer->addr); 16898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 16908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_process_tpk_m2(struct wpa_sm *sm, const u8 *src_addr, 16938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 16948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 16958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 16968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_eapol_ie_parse kde; 16978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_ie_data ie; 16988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int cipher; 16998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 17008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie *timeoutie; 17018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid; 17028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime; 17038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 dtoken; 17048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ielen; 17058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 status; 17068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos; 17078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Received TDLS Setup Response / TPK M2 " 17098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(Peer " MACSTR ")", MAC2STR(src_addr)); 17108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 17118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, src_addr, ETH_ALEN) == 0) 17128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 17138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 17158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No matching peer found for " 17168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M2: " MACSTR, MAC2STR(src_addr)); 17178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_retry_timeout_cancel(sm, peer, WLAN_TDLS_SETUP_REQUEST); 17208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3 + 2 + 1) 17228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 17248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 1 /* pkt_type */ + 1 /* Category */ + 1 /* Action */; 17258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WPA_GET_LE16(pos); 17268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 /* status code */; 17278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (status != WLAN_STATUS_SUCCESS) { 17298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Status code in TPK M2: %u", 17308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status); 17311f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) 17321f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 17338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_UNSPECIFIED_FAILURE; 17378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: need to verify dialog token matches here or in kernel */ 17398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dtoken = *pos++; /* dialog token */ 17408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Dialog Token in TPK M2 %d", dtoken); 17428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3 + 2 + 1 + 2) 17448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 17451f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 17461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* capability information */ 17471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer->capability = WPA_GET_LE16(pos); 17481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt pos += 2; 17498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen = len - (pos - buf); /* start of IE in buf */ 17518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_parse_ies(pos, ielen, &kde) < 0) { 17528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to parse IEs in TPK M2"); 17538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 17548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 17578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_testing & TDLS_TESTING_DECLINE_RESP) { 17588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - decline response"); 17598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_REQUEST_DECLINED; 17608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 17618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 17638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.lnkid == NULL || kde.lnkid_len < 3 * ETH_ALEN) { 17658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No valid Link Identifier IE in " 17668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M2"); 17678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 17688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Link ID Received from TPK M2", 17708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.lnkid, kde.lnkid_len); 17718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lnkid = (struct wpa_tdls_lnkid *) kde.lnkid; 17728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(sm->bssid, lnkid->bssid, ETH_ALEN) != 0) { 17748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: TPK M2 from different BSS"); 17758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_NOT_IN_SAME_BSS; 17768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 17778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17791f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (copy_supp_rates(&kde, peer) < 0) 17801f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt goto error; 17811f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 17828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) { 17838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p_len = 0; 17848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->cipher = WPA_CIPHER_NONE; 17858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_rsn; 17868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.ftie == NULL || kde.ftie_len < sizeof(*ftie) || 17898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.rsn_ie == NULL) { 17908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No FTIE or RSN IE in TPK M2"); 17918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_PARAMETERS; 17928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 17938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 17948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: RSN IE Received from TPK M2", 17958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.rsn_ie, kde.rsn_ie_len); 17968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 17988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * FIX: bitwise comparison of RSN IE is not the correct way of 17998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * validation this. It can be different, but certain fields must 18008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * match. Since we list only a single pairwise cipher in TPK M1, the 18018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * memcmp is likely to work in most cases, though. 18028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 18038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.rsn_ie_len != peer->rsnie_i_len || 18048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(peer->rsnie_i, kde.rsn_ie, peer->rsnie_i_len) != 0) { 18058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: RSN IE in TPK M2 does " 18068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "not match with RSN IE used in TPK M1"); 18078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: RSN IE Sent in TPK M1", 18088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_i, peer->rsnie_i_len); 18098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: RSN IE Received from TPK M2", 18108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.rsn_ie, kde.rsn_ie_len); 18118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_RSNIE; 18128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 18138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_parse_wpa_ie_rsn(kde.rsn_ie, kde.rsn_ie_len, &ie) < 0) { 18168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to parse RSN IE in TPK M2"); 18178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_INVALID_RSNIE; 18188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 18198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cipher = ie.pairwise_cipher; 18228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cipher == WPA_CIPHER_CCMP) { 18238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Using CCMP for direct link"); 18248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cipher = WPA_CIPHER_CCMP; 18258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 18268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No acceptable cipher in TPK M2"); 18278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID; 18288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 18298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE Received from TPK M2", 18328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.ftie, sizeof(*ftie)); 18338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) kde.ftie; 18348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!os_memcmp(peer->inonce, ftie->Snonce, WPA_NONCE_LEN) == 0) { 18368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: FTIE SNonce in TPK M2 does " 18378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "not match with FTIE SNonce used in TPK M1"); 18388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Silently discard the frame */ 18398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Responder Nonce and RSN IE */ 18438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->rnonce, ftie->Anonce, WPA_NONCE_LEN); 18448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->rsnie_p, kde.rsn_ie, kde.rsn_ie_len); 18458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->rsnie_p_len = kde.rsn_ie_len; 18468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->cipher = cipher; 18478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Lifetime */ 18498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.key_lifetime == NULL) { 18508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No Key Lifetime IE in TPK M2"); 18518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_UNACCEPTABLE_LIFETIME; 18528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 18538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt timeoutie = (struct wpa_tdls_timeoutie *) kde.key_lifetime; 18558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime = WPA_GET_LE32(timeoutie->value); 18568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime %u seconds in TPK M2", 18578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime); 18588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (lifetime != peer->lifetime) { 18598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Unexpected TPK lifetime %u in " 18608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M2 (expected %u)", lifetime, peer->lifetime); 18618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WLAN_STATUS_UNACCEPTABLE_LIFETIME; 18628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto error; 18638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_generate_tpk(peer, sm->own_addr, sm->bssid); 18668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Process MIC check to see if TPK M2 is right */ 18688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_verify_tdls_mic(2, peer, (u8 *) lnkid, 18698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) timeoutie, ftie) < 0) { 18708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Discard the frame */ 18718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_del_key(sm, peer); 18728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 18731f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) 18741f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 18758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 18778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_set_key(sm, peer); 18798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_rsn: 18818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->dtoken = dtoken; 18828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Sending TDLS Setup Confirm / " 18848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK Handshake Message 3"); 18858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_send_tpk_m3(sm, src_addr, dtoken, lnkid, peer); 18868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_enable_link(sm, peer); 18888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 18908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidterror: 18928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_send_error(sm, src_addr, WLAN_TDLS_SETUP_CONFIRM, dtoken, 18938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status); 18941f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) 18951f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 18968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 18978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 18988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 18998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_process_tpk_m3(struct wpa_sm *sm, const u8 *src_addr, 19018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 19028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 19038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 19048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_eapol_ie_parse kde; 19058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_ftie *ftie; 19068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie *timeoutie; 19078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_lnkid *lnkid; 19088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ielen; 19098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 status; 19108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos; 19118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 lifetime; 19128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Received TDLS Setup Confirm / TPK M3 " 19148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(Peer " MACSTR ")", MAC2STR(src_addr)); 19158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 19168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, src_addr, ETH_ALEN) == 0) 19178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 19188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 19208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No matching peer found for " 19218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M3: " MACSTR, MAC2STR(src_addr)); 19228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_tpk_retry_timeout_cancel(sm, peer, WLAN_TDLS_SETUP_RESPONSE); 19258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3 + 3) 19278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 19298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 1 /* pkt_type */ + 1 /* Category */ + 1 /* Action */; 19308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status = WPA_GET_LE16(pos); 19328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (status != 0) { 19348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Status code in TPK M3: %u", 19358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt status); 19361f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) 19371f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 19388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 /* status code */ + 1 /* dialog token */; 19418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ielen = len - (pos - buf); /* start of IE in buf */ 19438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_parse_ies((const u8 *) pos, ielen, &kde) < 0) { 19448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Failed to parse KDEs in TPK M3"); 19458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.lnkid == NULL || kde.lnkid_len < 3 * ETH_ALEN) { 19498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No Link Identifier IE in TPK M3"); 19508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Link ID Received from TPK M3", 19538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) kde.lnkid, kde.lnkid_len); 19548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lnkid = (struct wpa_tdls_lnkid *) kde.lnkid; 19558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(sm->bssid, lnkid->bssid, ETH_ALEN) != 0) { 19578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: TPK M3 from diff BSS"); 19588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!wpa_tdls_get_privacy(sm)) 19628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto skip_rsn; 19638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.ftie == NULL || kde.ftie_len < sizeof(*ftie)) { 19658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No FTIE in TPK M3"); 19668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: FTIE Received from TPK M3", 19698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.ftie, sizeof(*ftie)); 19708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct wpa_tdls_ftie *) kde.ftie; 19718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.rsn_ie == NULL) { 19738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No RSN IE in TPK M3"); 19748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: RSN IE Received from TPK M3", 19778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt kde.rsn_ie, kde.rsn_ie_len); 19788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.rsn_ie_len != peer->rsnie_p_len || 19798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(kde.rsn_ie, peer->rsnie_p, peer->rsnie_p_len) != 0) { 19808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: RSN IE in TPK M3 does not match " 19818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "with the one sent in TPK M2"); 19828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!os_memcmp(peer->rnonce, ftie->Anonce, WPA_NONCE_LEN) == 0) { 19868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: FTIE ANonce in TPK M3 does " 19878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "not match with FTIE ANonce used in TPK M2"); 19888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!os_memcmp(peer->inonce, ftie->Snonce, WPA_NONCE_LEN) == 0) { 19928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: FTIE SNonce in TPK M3 does not " 19938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "match with FTIE SNonce used in TPK M1"); 19948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 19958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 19968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 19978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kde.key_lifetime == NULL) { 19988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: No Key Lifetime IE in TPK M3"); 19998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt timeoutie = (struct wpa_tdls_timeoutie *) kde.key_lifetime; 20028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Timeout IE Received from TPK M3", 20038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) timeoutie, sizeof(*timeoutie)); 20048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime = WPA_GET_LE32(timeoutie->value); 20058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TPK lifetime %u seconds in TPK M3", 20068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime); 20078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (lifetime != peer->lifetime) { 20088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Unexpected TPK lifetime %u in " 20098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "TPK M3 (expected %u)", lifetime, peer->lifetime); 20101f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) 20111f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, src_addr); 20128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_verify_tdls_mic(3, peer, (u8 *) lnkid, 20168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) timeoutie, ftie) < 0) { 20178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_del_key(sm, peer); 20188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 20198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_tdls_set_key(sm, peer) < 0) 20238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtskip_rsn: 20268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_enable_link(sm, peer); 20278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 20298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 20308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * wpa_add_tdls_timeoutie(u8 *pos, u8 *ie, size_t ie_len, u32 tsecs) 20338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 20348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_timeoutie *lifetime = (struct wpa_tdls_timeoutie *) ie; 20358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(lifetime, 0, ie_len); 20378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime->ie_type = WLAN_EID_TIMEOUT_INTERVAL; 20388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime->ie_len = sizeof(struct wpa_tdls_timeoutie) - 2; 20398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt lifetime->interval_type = WLAN_TIMEOUT_KEY_LIFETIME; 20408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE32(lifetime->value, tsecs); 20418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ie, ie_len); 20428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pos + ie_len; 20438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 20448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 20478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_tdls_start - Initiate TDLS handshake (send TPK Handshake Message 1) 20488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 20498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @peer: MAC address of the peer STA 20508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, or -1 on failure 20518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 20528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Send TPK Handshake Message 1 info to driver to start TDLS 20538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * handshake with the peer. 20548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 20558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_tdls_start(struct wpa_sm *sm, const u8 *addr) 20568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 20578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 20588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int tdls_prohibited = sm->tdls_prohibited; 20598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20601f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_disabled || !sm->tdls_supported) 20618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_TDLS_TESTING 20648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((tdls_testing & TDLS_TESTING_IGNORE_AP_PROHIBIT) && 20658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tdls_prohibited) { 20668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Testing - ignore AP prohibition " 20678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "on TDLS"); 20688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tdls_prohibited = 0; 20698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_TDLS_TESTING */ 20718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tdls_prohibited) { 20738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS is prohibited in this BSS - " 20748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "reject request to start setup"); 20758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Find existing entry and if found, use that instead of adding 20798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * a new one */ 20808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 20818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, addr, ETH_ALEN) == 0) 20828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 20838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) { 20861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt peer = wpa_tdls_add_peer(sm, addr); 20878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) 20888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 20898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 20908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->initiator = 1; 20928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 20931f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* add the peer to the driver as a "setup in progress" peer */ 20941f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_peer_addset(sm, peer->addr, 1, 0, NULL, 0); 20951f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 20961f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (wpa_tdls_send_tpk_m1(sm, peer) < 0) { 20971f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_disable_link(sm, peer->addr); 20981f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return -1; 20991f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 21001f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 21011f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return 0; 21028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 21038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_tdls_reneg(struct wpa_sm *sm, const u8 *addr) 21068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 21078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer; 21088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21091f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_disabled || !sm->tdls_supported) 21108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = sm->tdls; peer; peer = peer->next) { 21138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->addr, addr, ETH_ALEN) == 0) 21148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL || !peer->tpk_success) 21188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 21198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21201f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_external_setup) { 21211f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* 21221f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * Disable previous link to allow renegotiation to be completed 21231f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * on AP path. 21241f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt */ 21251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, peer->addr); 21261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 21271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 21288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_tdls_start(sm, addr); 21298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 21308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 21338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_supplicant_rx_tdls - Receive TDLS data frame 21348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 21358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is called to receive TDLS (ethertype = 0x890d) data frames. 21368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 21378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_supplicant_rx_tdls(void *ctx, const u8 *src_addr, 21388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 21398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 21408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_sm *sm = ctx; 21418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_frame *tf; 21428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "TDLS: Received Data frame encapsulation", 21448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf, len); 21458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (sm->tdls_disabled || !sm->tdls_supported) { 21471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Discard message - TDLS disabled " 21481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "or unsupported by driver"); 21498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 21508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(src_addr, sm->own_addr, ETH_ALEN) == 0) { 21538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Discard copy of own message"); 21548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 21558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < sizeof(*tf)) { 21588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Drop too short frame"); 21598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 21608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Check to make sure its a valid encapsulated TDLS frame */ 21638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tf = (struct wpa_tdls_frame *) buf; 21648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tf->payloadtype != 2 /* TDLS_RFTYPE */ || 21658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tf->category != WLAN_ACTION_TDLS) { 21668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "TDLS: Invalid frame - payloadtype=%u " 21678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "category=%u action=%u", 21688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tf->payloadtype, tf->category, tf->action); 21698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 21708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (tf->action) { 21738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WLAN_TDLS_SETUP_REQUEST: 21748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_process_tpk_m1(sm, src_addr, buf, len); 21758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WLAN_TDLS_SETUP_RESPONSE: 21778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_process_tpk_m2(sm, src_addr, buf, len); 21788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WLAN_TDLS_SETUP_CONFIRM: 21808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_process_tpk_m3(sm, src_addr, buf, len); 21818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WLAN_TDLS_TEARDOWN: 21838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_recv_teardown(sm, src_addr, buf, len); 21848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21851f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt case WLAN_TDLS_DISCOVERY_REQUEST: 21861f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_tdls_process_discovery_request(sm, src_addr, buf, len); 21871f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt break; 21888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 21898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Kernel code will process remaining frames */ 21908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Ignore TDLS frame action code %u", 21918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tf->action); 21928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 21938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 21948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 21958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 21978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 21988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_tdls_init - Initialize driver interface parameters for TDLS 21998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @wpa_s: Pointer to wpa_supplicant data 22008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 22018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 22028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is called to initialize driver interface parameters for TDLS. 22038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_drv_init() must have been called before this function to initialize the 22048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * driver interface. 22058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 22068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_tdls_init(struct wpa_sm *sm) 22078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm == NULL) 22098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->l2_tdls = l2_packet_init(sm->ifname, sm->own_addr, 22128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ETH_P_80211_ENCAP, wpa_supplicant_rx_tdls, 22138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm, 0); 22148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->l2_tdls == NULL) { 22158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "TDLS: Failed to open l2_packet " 22168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "connection"); 22178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 22188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22201f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt /* 22211f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * Drivers that support TDLS but don't implement the get_capa callback 22221f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * are assumed to perform everything internally 22231f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt */ 22241f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (wpa_sm_tdls_get_capa(sm, &sm->tdls_supported, 22251f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt &sm->tdls_external_setup) < 0) { 22261f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt sm->tdls_supported = 1; 22271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt sm->tdls_external_setup = 0; 22281f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt } 22291f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 22301f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS operation%s supported by " 22311f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt "driver", sm->tdls_supported ? "" : " not"); 22321f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Driver uses %s link setup", 22331f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt sm->tdls_external_setup ? "external" : "internal"); 22341f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 22358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 22368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wpa_tdls_remove_peers(struct wpa_sm *sm) 22408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_tdls_peer *peer, *tmp; 22428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = sm->tdls; 22448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->tdls = NULL; 22458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (peer) { 22478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int res; 22488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = peer->next; 22498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = wpa_sm_tdls_oper(sm, TDLS_DISABLE_LINK, peer->addr); 22508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Remove peer " MACSTR " (res=%d)", 22518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(peer->addr), res); 22528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_peer_free(sm, peer); 22538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(peer); 22548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = tmp; 22558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 22568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 22608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_tdls_deinit - Deinitialize driver interface parameters for TDLS 22618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 22628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is called to recover driver interface parameters for TDLS 22638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * and frees resources allocated for it. 22648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 22658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wpa_tdls_deinit(struct wpa_sm *sm) 22668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm == NULL) 22688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 22698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->l2_tdls) 22718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt l2_packet_deinit(sm->l2_tdls); 22728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->l2_tdls = NULL; 22738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_remove_peers(sm); 22758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wpa_tdls_assoc(struct wpa_sm *sm) 22798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Remove peers on association"); 22818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_remove_peers(sm); 22828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wpa_tdls_disassoc(struct wpa_sm *sm) 22868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: Remove peers on disassociation"); 22888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_tdls_remove_peers(sm); 22898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 22908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_tdls_prohibited(const u8 *ies, size_t len) 22938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 22948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_eapol_ie_parse elems; 22958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ies == NULL) 22978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 22988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 22998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_supplicant_parse_ies(ies, len, &elems) < 0) 23008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 23018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (elems.ext_capab == NULL || elems.ext_capab_len < 2 + 5) 23038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 23048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* bit 38 - TDLS Prohibited */ 23068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return !!(elems.ext_capab[2 + 4] & 0x40); 23078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 23088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wpa_tdls_ap_ies(struct wpa_sm *sm, const u8 *ies, size_t len) 23118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 23128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->tdls_prohibited = wpa_tdls_prohibited(ies, len); 23138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS is %s in the target BSS", 23148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->tdls_prohibited ? "prohibited" : "allowed"); 23158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 23168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wpa_tdls_assoc_resp_ies(struct wpa_sm *sm, const u8 *ies, size_t len) 23198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 23208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!sm->tdls_prohibited && wpa_tdls_prohibited(ies, len)) { 23218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: TDLS prohibited based on " 23228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(Re)Association Response IEs"); 23238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->tdls_prohibited = 1; 23248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 23258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 23268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 23288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wpa_tdls_enable(struct wpa_sm *sm, int enabled) 23298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 23308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "TDLS: %s", enabled ? "enabled" : "disabled"); 23318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->tdls_disabled = !enabled; 23328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 23331f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 23341f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 23351f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidtint wpa_tdls_is_external_setup(struct wpa_sm *sm) 23361f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt{ 23371f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt return sm->tdls_external_setup; 23381f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt} 2339