wps_attr_parse.c revision 7f93d6fa14a343127754c33a03cf2f641b6ff6e4
18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Wi-Fi Protected Setup - attribute parsing 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2008, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 1204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "wps_defs.h" 1304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "wps_attr_parse.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_WPS_STRICT 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define WPS_WORKAROUNDS 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_WPS_STRICT */ 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_set_vendor_ext_wfa_subelem(struct wps_parse_attr *attr, 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id, u8 len, const u8 *pos) 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_EXCESSIVE, "WPS: WFA subelement id=%u len=%u", 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt id, len); 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (id) { 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_VERSION2: 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Version2 length " 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version2 = pos; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_AUTHORIZEDMACS: 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->authorized_macs = pos; 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->authorized_macs_len = len; 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_NETWORK_KEY_SHAREABLE: 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Network Key " 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Shareable length %u", len); 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key_shareable = pos; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_REQUEST_TO_ENROLL: 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Request to Enroll " 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->request_to_enroll = pos; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_SETTINGS_DELAY_TIME: 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Settings Delay " 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Time length %u", len); 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->settings_delay_time = pos; 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "WPS: Skipped unknown WFA Vendor " 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Extension subelement %u", id); 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_parse_vendor_ext_wfa(struct wps_parse_attr *attr, const u8 *pos, 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 len) 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *end = pos + len; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id, elen; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 787f93d6fa14a343127754c33a03cf2f641b6ff6e4Dmitry Shmidt while (pos + 2 <= end) { 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt id = *pos++; 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt elen = *pos++; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + elen > end) 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wps_set_vendor_ext_wfa_subelem(attr, id, elen, pos) < 0) 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += elen; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_parse_vendor_ext(struct wps_parse_attr *attr, const u8 *pos, 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 len) 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 vendor_id; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3) { 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skip invalid Vendor Extension"); 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt vendor_id = WPA_GET_BE24(pos); 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (vendor_id) { 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WPS_VENDOR_ID_WFA: 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wps_parse_vendor_ext_wfa(attr, pos + 3, len - 3); 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handle unknown vendor extensions */ 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "WPS: Unknown Vendor Extension (Vendor ID %u)", 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt vendor_id); 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len > WPS_MAX_VENDOR_EXT_LEN) { 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Too long Vendor Extension (%u)", 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->num_vendor_ext >= MAX_WPS_PARSE_VENDOR_EXT) { 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skipped Vendor Extension " 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "attribute (max %d vendor extensions)", 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAX_WPS_PARSE_VENDOR_EXT); 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->vendor_ext[attr->num_vendor_ext] = pos; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->vendor_ext_len[attr->num_vendor_ext] = len; 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_vendor_ext++; 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_set_attr(struct wps_parse_attr *attr, u16 type, 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos, u16 len) 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (type) { 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_VERSION: 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Version length %u", 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version = pos; 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MSG_TYPE: 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Message Type " 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->msg_type = pos; 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENROLLEE_NONCE: 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_NONCE_LEN) { 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Enrollee Nonce " 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->enrollee_nonce = pos; 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_REGISTRAR_NONCE: 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_NONCE_LEN) { 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Registrar Nonce " 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->registrar_nonce = pos; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_UUID_E: 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_UUID_LEN) { 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid UUID-E length %u", 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->uuid_e = pos; 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_UUID_R: 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_UUID_LEN) { 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid UUID-R length %u", 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->uuid_r = pos; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AUTH_TYPE_FLAGS: 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Authentication " 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type Flags length %u", len); 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->auth_type_flags = pos; 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENCR_TYPE_FLAGS: 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Encryption Type " 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Flags length %u", len); 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_type_flags = pos; 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CONN_TYPE_FLAGS: 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Connection Type " 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Flags length %u", len); 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->conn_type_flags = pos; 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CONFIG_METHODS: 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Config Methods " 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->config_methods = pos; 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SELECTED_REGISTRAR_CONFIG_METHODS: 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Selected " 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Registrar Config Methods length %u", len); 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->sel_reg_config_methods = pos; 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_PRIMARY_DEV_TYPE: 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_DEV_TYPE_LEN) { 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Primary Device " 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->primary_dev_type = pos; 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_RF_BANDS: 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid RF Bands length " 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->rf_bands = pos; 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ASSOC_STATE: 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Association State " 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->assoc_state = pos; 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CONFIG_ERROR: 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Configuration " 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Error length %u", len); 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->config_error = pos; 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_DEV_PASSWORD_ID: 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Device Password " 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ID length %u", len); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dev_password_id = pos; 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_OOB_DEVICE_PASSWORD: 266cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt if (len < WPS_OOB_PUBKEY_HASH_LEN + 2 || 26704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt len > WPS_OOB_PUBKEY_HASH_LEN + 2 + 268cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt WPS_OOB_DEVICE_PASSWORD_LEN || 269cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt (len < WPS_OOB_PUBKEY_HASH_LEN + 2 + 270cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt WPS_OOB_DEVICE_PASSWORD_MIN_LEN && 271cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt WPA_GET_BE16(pos + WPS_OOB_PUBKEY_HASH_LEN) != 272cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt DEV_PW_NFC_CONNECTION_HANDOVER)) { 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid OOB Device " 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Password length %u", len); 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->oob_dev_password = pos; 27804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt attr->oob_dev_password_len = len; 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_OS_VERSION: 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 4) { 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid OS Version length " 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->os_version = pos; 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_WPS_STATE: 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Wi-Fi Protected " 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Setup State length %u", len); 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->wps_state = pos; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AUTHENTICATOR: 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_AUTHENTICATOR_LEN) { 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Authenticator " 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->authenticator = pos; 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_HASH1: 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-Hash1 length %u", 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_hash1 = pos; 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_HASH2: 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-Hash2 length %u", 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_hash2 = pos; 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_HASH1: 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-Hash1 length %u", 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_hash1 = pos; 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_HASH2: 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-Hash2 length %u", 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_hash2 = pos; 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_SNONCE1: 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-SNonce1 length " 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_snonce1 = pos; 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_SNONCE2: 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-SNonce2 length " 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_snonce2 = pos; 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_SNONCE1: 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-SNonce1 length " 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_snonce1 = pos; 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_SNONCE2: 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-SNonce2 length " 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_snonce2 = pos; 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_KEY_WRAP_AUTH: 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_KWA_LEN) { 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Key Wrap " 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Authenticator length %u", len); 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->key_wrap_auth = pos; 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AUTH_TYPE: 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Authentication " 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->auth_type = pos; 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENCR_TYPE: 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Encryption " 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_type = pos; 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_NETWORK_INDEX: 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Network Index " 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_idx = pos; 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_NETWORK_KEY_INDEX: 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Network Key Index " 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key_idx = pos; 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MAC_ADDR: 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != ETH_ALEN) { 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid MAC Address " 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->mac_addr = pos; 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SELECTED_REGISTRAR: 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Selected Registrar" 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " length %u", len); 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->selected_registrar = pos; 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_REQUEST_TYPE: 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Request Type " 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->request_type = pos; 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_RESPONSE_TYPE: 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Response Type " 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->response_type = pos; 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MANUFACTURER: 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->manufacturer = pos; 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->manufacturer_len = len; 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MODEL_NAME: 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_name = pos; 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_name_len = len; 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MODEL_NUMBER: 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_number = pos; 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_number_len = len; 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SERIAL_NUMBER: 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->serial_number = pos; 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->serial_number_len = len; 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_DEV_NAME: 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dev_name = pos; 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dev_name_len = len; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_PUBLIC_KEY: 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->public_key = pos; 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->public_key_len = len; 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENCR_SETTINGS: 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_settings = pos; 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_settings_len = len; 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CRED: 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->num_cred >= MAX_CRED_COUNT) { 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skipped Credential " 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "attribute (max %d credentials)", 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAX_CRED_COUNT); 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->cred[attr->num_cred] = pos; 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->cred_len[attr->num_cred] = len; 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_cred++; 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SSID: 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->ssid = pos; 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->ssid_len = len; 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_NETWORK_KEY: 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key = pos; 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key_len = len; 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AP_SETUP_LOCKED: 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid AP Setup Locked " 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->ap_setup_locked = pos; 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_REQUESTED_DEV_TYPE: 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_DEV_TYPE_LEN) { 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Requested Device " 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->num_req_dev_type >= MAX_REQ_DEV_TYPE_COUNT) { 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skipped Requested Device " 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type attribute (max %u types)", 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAX_REQ_DEV_TYPE_COUNT); 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->req_dev_type[attr->num_req_dev_type] = pos; 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_req_dev_type++; 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SECONDARY_DEV_TYPE_LIST: 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len > WPS_SEC_DEV_TYPE_MAX_LEN || 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (len % WPS_DEV_TYPE_LEN) > 0) { 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Secondary Device " 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->sec_dev_type_list = pos; 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->sec_dev_type_list_len = len; 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_VENDOR_EXT: 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wps_parse_vendor_ext(attr, pos, len) < 0) 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 524d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt case ATTR_AP_CHANNEL: 525d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt if (len != 2) { 526d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid AP Channel " 527d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt "length %u", len); 528d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt return -1; 529d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt } 530d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt attr->ap_channel = pos; 531d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt break; 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Unsupported attribute type 0x%x " 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "len=%u", type, len); 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wps_parse_msg(const struct wpabuf *msg, struct wps_parse_attr *attr) 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos, *end; 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 type, len; 5461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef WPS_WORKAROUNDS 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 prev_type = 0; 5481f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* WPS_WORKAROUNDS */ 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(attr, 0, sizeof(*attr)); 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpabuf_head(msg); 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = pos + wpabuf_len(msg); 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos < end) { 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (end - pos < 4) { 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid message - " 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%lu bytes remaining", 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) (end - pos)); 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type = WPA_GET_BE16(pos); 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = WPA_GET_BE16(pos); 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_EXCESSIVE, "WPS: attr type=0x%x len=%u", 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type, len); 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len > end - pos) { 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Attribute overflow"); 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_buf(MSG_MSGDUMP, "WPS: Message data", msg); 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef WPS_WORKAROUNDS 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Some deployed APs seem to have a bug in encoding of 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Network Key attribute in the Credential attribute 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * where they add an extra octet after the Network Key 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * attribute at least when open network is being 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * provisioned. 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((type & 0xff00) != 0x1000 && 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_type == ATTR_NETWORK_KEY) { 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Workaround - try " 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "to skip unexpected octet after " 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Network Key"); 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos -= 3; 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* WPS_WORKAROUNDS */ 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef WPS_WORKAROUNDS 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (type == 0 && len == 0) { 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Mac OS X 10.6 seems to be adding 0x00 padding to the 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * end of M1. Skip those to avoid interop issues. 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < end - pos; i++) { 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[i]) 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (i == end - pos) { 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Workaround - skip " 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "unexpected message padding"); 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* WPS_WORKAROUNDS */ 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wps_set_attr(attr, type, pos, len) < 0) 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6131f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef WPS_WORKAROUNDS 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_type = type; 6151f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* WPS_WORKAROUNDS */ 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += len; 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 621