wps_attr_parse.c revision cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50e
18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Wi-Fi Protected Setup - attribute parsing 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2008, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 1204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "wps_defs.h" 1304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "wps_attr_parse.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_WPS_STRICT 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define WPS_WORKAROUNDS 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_WPS_STRICT */ 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_set_vendor_ext_wfa_subelem(struct wps_parse_attr *attr, 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id, u8 len, const u8 *pos) 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_EXCESSIVE, "WPS: WFA subelement id=%u len=%u", 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt id, len); 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (id) { 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_VERSION2: 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Version2 length " 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version2 = pos; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_AUTHORIZEDMACS: 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->authorized_macs = pos; 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->authorized_macs_len = len; 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_NETWORK_KEY_SHAREABLE: 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Network Key " 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Shareable length %u", len); 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key_shareable = pos; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_REQUEST_TO_ENROLL: 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Request to Enroll " 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->request_to_enroll = pos; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WFA_ELEM_SETTINGS_DELAY_TIME: 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Settings Delay " 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Time length %u", len); 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->settings_delay_time = pos; 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "WPS: Skipped unknown WFA Vendor " 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Extension subelement %u", id); 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_parse_vendor_ext_wfa(struct wps_parse_attr *attr, const u8 *pos, 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 len) 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *end = pos + len; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id, elen; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos + 2 < end) { 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt id = *pos++; 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt elen = *pos++; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + elen > end) 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wps_set_vendor_ext_wfa_subelem(attr, id, elen, pos) < 0) 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += elen; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_parse_vendor_ext(struct wps_parse_attr *attr, const u8 *pos, 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 len) 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 vendor_id; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3) { 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skip invalid Vendor Extension"); 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt vendor_id = WPA_GET_BE24(pos); 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (vendor_id) { 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case WPS_VENDOR_ID_WFA: 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wps_parse_vendor_ext_wfa(attr, pos + 3, len - 3); 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Handle unknown vendor extensions */ 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "WPS: Unknown Vendor Extension (Vendor ID %u)", 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt vendor_id); 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len > WPS_MAX_VENDOR_EXT_LEN) { 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Too long Vendor Extension (%u)", 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->num_vendor_ext >= MAX_WPS_PARSE_VENDOR_EXT) { 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skipped Vendor Extension " 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "attribute (max %d vendor extensions)", 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAX_WPS_PARSE_VENDOR_EXT); 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->vendor_ext[attr->num_vendor_ext] = pos; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->vendor_ext_len[attr->num_vendor_ext] = len; 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_vendor_ext++; 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wps_set_attr(struct wps_parse_attr *attr, u16 type, 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos, u16 len) 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (type) { 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_VERSION: 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Version length %u", 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version = pos; 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MSG_TYPE: 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Message Type " 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->msg_type = pos; 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENROLLEE_NONCE: 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_NONCE_LEN) { 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Enrollee Nonce " 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->enrollee_nonce = pos; 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_REGISTRAR_NONCE: 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_NONCE_LEN) { 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Registrar Nonce " 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->registrar_nonce = pos; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_UUID_E: 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_UUID_LEN) { 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid UUID-E length %u", 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->uuid_e = pos; 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_UUID_R: 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_UUID_LEN) { 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid UUID-R length %u", 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->uuid_r = pos; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AUTH_TYPE_FLAGS: 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Authentication " 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type Flags length %u", len); 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->auth_type_flags = pos; 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENCR_TYPE_FLAGS: 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Encryption Type " 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Flags length %u", len); 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_type_flags = pos; 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CONN_TYPE_FLAGS: 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Connection Type " 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Flags length %u", len); 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->conn_type_flags = pos; 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CONFIG_METHODS: 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Config Methods " 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->config_methods = pos; 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SELECTED_REGISTRAR_CONFIG_METHODS: 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Selected " 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Registrar Config Methods length %u", len); 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->sel_reg_config_methods = pos; 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_PRIMARY_DEV_TYPE: 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_DEV_TYPE_LEN) { 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Primary Device " 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->primary_dev_type = pos; 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_RF_BANDS: 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid RF Bands length " 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->rf_bands = pos; 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ASSOC_STATE: 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Association State " 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->assoc_state = pos; 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CONFIG_ERROR: 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Configuration " 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Error length %u", len); 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->config_error = pos; 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_DEV_PASSWORD_ID: 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Device Password " 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ID length %u", len); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dev_password_id = pos; 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_OOB_DEVICE_PASSWORD: 266cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt if (len < WPS_OOB_PUBKEY_HASH_LEN + 2 || 26704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt len > WPS_OOB_PUBKEY_HASH_LEN + 2 + 268cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt WPS_OOB_DEVICE_PASSWORD_LEN || 269cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt (len < WPS_OOB_PUBKEY_HASH_LEN + 2 + 270cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt WPS_OOB_DEVICE_PASSWORD_MIN_LEN && 271cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt WPA_GET_BE16(pos + WPS_OOB_PUBKEY_HASH_LEN) != 272cf32e60fa7e0d33fe1551a6dba8dcbbec47ea50eDmitry Shmidt DEV_PW_NFC_CONNECTION_HANDOVER)) { 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid OOB Device " 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Password length %u", len); 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->oob_dev_password = pos; 27804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt attr->oob_dev_password_len = len; 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_OS_VERSION: 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 4) { 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid OS Version length " 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->os_version = pos; 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_WPS_STATE: 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Wi-Fi Protected " 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Setup State length %u", len); 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->wps_state = pos; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AUTHENTICATOR: 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_AUTHENTICATOR_LEN) { 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Authenticator " 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->authenticator = pos; 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_HASH1: 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-Hash1 length %u", 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_hash1 = pos; 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_HASH2: 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-Hash2 length %u", 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_hash2 = pos; 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_HASH1: 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-Hash1 length %u", 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_hash1 = pos; 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_HASH2: 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_HASH_LEN) { 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-Hash2 length %u", 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len); 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_hash2 = pos; 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_SNONCE1: 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-SNonce1 length " 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_snonce1 = pos; 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_R_SNONCE2: 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid R-SNonce2 length " 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->r_snonce2 = pos; 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_SNONCE1: 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-SNonce1 length " 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_snonce1 = pos; 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_E_SNONCE2: 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_SECRET_NONCE_LEN) { 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid E-SNonce2 length " 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%u", len); 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->e_snonce2 = pos; 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_KEY_WRAP_AUTH: 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_KWA_LEN) { 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Key Wrap " 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Authenticator length %u", len); 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->key_wrap_auth = pos; 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AUTH_TYPE: 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Authentication " 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->auth_type = pos; 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENCR_TYPE: 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Encryption " 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_type = pos; 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_NETWORK_INDEX: 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Network Index " 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_idx = pos; 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_NETWORK_KEY_INDEX: 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Network Key Index " 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key_idx = pos; 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MAC_ADDR: 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != ETH_ALEN) { 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid MAC Address " 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->mac_addr = pos; 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_KEY_PROVIDED_AUTO: 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Key Provided " 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Automatically length %u", len); 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->key_prov_auto = pos; 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_802_1X_ENABLED: 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid 802.1X Enabled " 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dot1x_enabled = pos; 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SELECTED_REGISTRAR: 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Selected Registrar" 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " length %u", len); 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->selected_registrar = pos; 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_REQUEST_TYPE: 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Request Type " 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->request_type = pos; 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_RESPONSE_TYPE: 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Response Type " 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->response_type = pos; 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MANUFACTURER: 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->manufacturer = pos; 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->manufacturer_len = len; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MODEL_NAME: 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_name = pos; 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_name_len = len; 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_MODEL_NUMBER: 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_number = pos; 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->model_number_len = len; 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SERIAL_NUMBER: 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->serial_number = pos; 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->serial_number_len = len; 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_DEV_NAME: 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dev_name = pos; 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->dev_name_len = len; 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_PUBLIC_KEY: 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->public_key = pos; 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->public_key_len = len; 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_ENCR_SETTINGS: 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_settings = pos; 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_settings_len = len; 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_CRED: 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->num_cred >= MAX_CRED_COUNT) { 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skipped Credential " 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "attribute (max %d credentials)", 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAX_CRED_COUNT); 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->cred[attr->num_cred] = pos; 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->cred_len[attr->num_cred] = len; 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_cred++; 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SSID: 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->ssid = pos; 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->ssid_len = len; 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_NETWORK_KEY: 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key = pos; 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->network_key_len = len; 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_EAP_TYPE: 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->eap_type = pos; 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->eap_type_len = len; 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_EAP_IDENTITY: 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->eap_identity = pos; 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->eap_identity_len = len; 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_AP_SETUP_LOCKED: 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1) { 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid AP Setup Locked " 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %u", len); 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->ap_setup_locked = pos; 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_REQUESTED_DEV_TYPE: 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != WPS_DEV_TYPE_LEN) { 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Requested Device " 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->num_req_dev_type >= MAX_REQ_DEV_TYPE_COUNT) { 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Skipped Requested Device " 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type attribute (max %u types)", 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAX_REQ_DEV_TYPE_COUNT); 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->req_dev_type[attr->num_req_dev_type] = pos; 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_req_dev_type++; 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_SECONDARY_DEV_TYPE_LIST: 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len > WPS_SEC_DEV_TYPE_MAX_LEN || 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (len % WPS_DEV_TYPE_LEN) > 0) { 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid Secondary Device " 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Type length %u", len); 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->sec_dev_type_list = pos; 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->sec_dev_type_list_len = len; 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case ATTR_VENDOR_EXT: 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wps_parse_vendor_ext(attr, pos, len) < 0) 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 548d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt case ATTR_AP_CHANNEL: 549d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt if (len != 2) { 550d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid AP Channel " 551d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt "length %u", len); 552d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt return -1; 553d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt } 554d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt attr->ap_channel = pos; 555d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt break; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Unsupported attribute type 0x%x " 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "len=%u", type, len); 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wps_parse_msg(const struct wpabuf *msg, struct wps_parse_attr *attr) 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos, *end; 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 type, len; 5701f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef WPS_WORKAROUNDS 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 prev_type = 0; 5721f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* WPS_WORKAROUNDS */ 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(attr, 0, sizeof(*attr)); 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpabuf_head(msg); 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = pos + wpabuf_len(msg); 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos < end) { 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (end - pos < 4) { 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Invalid message - " 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%lu bytes remaining", 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) (end - pos)); 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type = WPA_GET_BE16(pos); 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = WPA_GET_BE16(pos); 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_EXCESSIVE, "WPS: attr type=0x%x len=%u", 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type, len); 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len > end - pos) { 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Attribute overflow"); 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_buf(MSG_MSGDUMP, "WPS: Message data", msg); 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef WPS_WORKAROUNDS 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Some deployed APs seem to have a bug in encoding of 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Network Key attribute in the Credential attribute 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * where they add an extra octet after the Network Key 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * attribute at least when open network is being 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * provisioned. 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((type & 0xff00) != 0x1000 && 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_type == ATTR_NETWORK_KEY) { 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Workaround - try " 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "to skip unexpected octet after " 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Network Key"); 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos -= 3; 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* WPS_WORKAROUNDS */ 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef WPS_WORKAROUNDS 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (type == 0 && len == 0) { 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Mac OS X 10.6 seems to be adding 0x00 padding to the 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * end of M1. Skip those to avoid interop issues. 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < end - pos; i++) { 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[i]) 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (i == end - pos) { 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WPS: Workaround - skip " 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "unexpected message padding"); 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* WPS_WORKAROUNDS */ 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wps_set_attr(attr, type, pos, len) < 0) 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6371f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef WPS_WORKAROUNDS 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_type = type; 6391f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* WPS_WORKAROUNDS */ 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += len; 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 645