18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/*
28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Wi-Fi Protected Setup - External Registrar (SSDP)
38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *
5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license.
6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details.
78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */
88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h"
108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h"
128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "uuid.h"
138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eloop.h"
148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wps_i.h"
158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wps_upnp.h"
168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wps_upnp_i.h"
178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wps_er.h"
188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void wps_er_ssdp_rx(int sd, void *eloop_ctx, void *sock_ctx)
218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{
228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	struct wps_er *er = eloop_ctx;
238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	struct sockaddr_in addr; /* client address */
248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	socklen_t addr_len;
258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	int nread;
268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	char buf[MULTICAST_MAX_READ], *pos, *pos2, *start;
278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	int wfa = 0, byebye = 0;
288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	int max_age = -1;
298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	char *location = NULL;
308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 uuid[WPS_UUID_LEN];
318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	addr_len = sizeof(addr);
338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	nread = recvfrom(sd, buf, sizeof(buf) - 1, 0,
348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			 (struct sockaddr *) &addr, &addr_len);
358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (nread <= 0)
368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return;
378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	buf[nread] = '\0';
388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (er->filter_addr.s_addr &&
398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	    er->filter_addr.s_addr != addr.sin_addr.s_addr)
408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return;
418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wpa_printf(MSG_DEBUG, "WPS ER: Received SSDP from %s",
438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		   inet_ntoa(addr.sin_addr));
448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wpa_hexdump_ascii(MSG_MSGDUMP, "WPS ER: Received SSDP contents",
458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			  (u8 *) buf, nread);
468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (sd == er->multicast_sd) {
488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		/* Reply to M-SEARCH */
498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		if (os_strncmp(buf, "HTTP/1.1 200 OK", 15) != 0)
508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			return; /* unexpected response header */
518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	} else {
528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		/* Unsolicited message (likely NOTIFY or M-SEARCH) */
538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		if (os_strncmp(buf, "NOTIFY ", 7) != 0)
548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			return; /* only process notifications */
558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	os_memset(uuid, 0, sizeof(uuid));
588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	for (start = buf; start && *start; start = pos) {
608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		pos = os_strchr(start, '\n');
618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		if (pos) {
628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			if (pos[-1] == '\r')
638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				pos[-1] = '\0';
648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			*pos++ = '\0';
658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		}
668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		if (os_strstr(start, "schemas-wifialliance-org:device:"
678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			      "WFADevice:1"))
688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			wfa = 1;
698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		if (os_strstr(start, "schemas-wifialliance-org:service:"
708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			      "WFAWLANConfig:1"))
718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			wfa = 1;
728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		if (os_strncasecmp(start, "LOCATION:", 9) == 0) {
738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			start += 9;
748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			while (*start == ' ')
758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				start++;
768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			location = start;
778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		} else if (os_strncasecmp(start, "NTS:", 4) == 0) {
788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			if (os_strstr(start, "ssdp:byebye"))
798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				byebye = 1;
808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		} else if (os_strncasecmp(start, "CACHE-CONTROL:", 14) == 0) {
818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			start += 9;
828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			while (*start == ' ')
838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				start++;
848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			pos2 = os_strstr(start, "max-age=");
858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			if (pos2 == NULL)
868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				continue;
878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			pos2 += 8;
888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			max_age = atoi(pos2);
898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		} else if (os_strncasecmp(start, "USN:", 4) == 0) {
908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			start += 4;
918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			pos2 = os_strstr(start, "uuid:");
928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			if (pos2) {
938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				pos2 += 5;
948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				while (*pos2 == ' ')
958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt					pos2++;
968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				if (uuid_str2bin(pos2, uuid) < 0) {
978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt					wpa_printf(MSG_DEBUG, "WPS ER: "
988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt						   "Invalid UUID in USN: %s",
998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt						   pos2);
1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt					return;
1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				}
1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			}
1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		}
1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (!wfa)
1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return; /* Not WPS advertisement/reply */
1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (byebye) {
1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		wps_er_ap_cache_settings(er, &addr.sin_addr);
1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		wps_er_ap_remove(er, &addr.sin_addr);
1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return;
1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (!location)
1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return; /* Unknown location */
1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (max_age < 1)
1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return; /* No max-age reported */
1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wpa_printf(MSG_DEBUG, "WPS ER: AP discovered: %s "
1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		   "(packet source: %s  max-age: %d)",
1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		   location, inet_ntoa(addr.sin_addr), max_age);
1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wps_er_ap_add(er, uuid, &addr.sin_addr, location, max_age);
1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}
1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wps_er_send_ssdp_msearch(struct wps_er *er)
1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{
1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	struct wpabuf *msg;
1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	struct sockaddr_in dest;
1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	msg = wpabuf_alloc(500);
1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (msg == NULL)
1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return;
1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wpabuf_put_str(msg,
1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "M-SEARCH * HTTP/1.1\r\n"
1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "HOST: 239.255.255.250:1900\r\n"
1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "MAN: \"ssdp:discover\"\r\n"
1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "MX: 3\r\n"
1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "ST: urn:schemas-wifialliance-org:device:WFADevice:1"
1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "\r\n"
1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		       "\r\n");
1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	os_memset(&dest, 0, sizeof(dest));
1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	dest.sin_family = AF_INET;
1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	dest.sin_addr.s_addr = inet_addr(UPNP_MULTICAST_ADDRESS);
1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	dest.sin_port = htons(UPNP_MULTICAST_PORT);
1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (sendto(er->multicast_sd, wpabuf_head(msg), wpabuf_len(msg), 0,
1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		   (struct sockaddr *) &dest, sizeof(dest)) < 0)
1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		wpa_printf(MSG_DEBUG, "WPS ER: M-SEARCH sendto failed: "
1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			   "%d (%s)", errno, strerror(errno));
1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wpabuf_free(msg);
1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}
1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wps_er_ssdp_init(struct wps_er *er)
1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{
1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (add_ssdp_network(er->ifname)) {
1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		wpa_printf(MSG_INFO, "WPS ER: Failed to add routing entry for "
1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			   "SSDP");
1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return -1;
1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1694b06059785b935dd1f4f09314e4e12c417d2c6a4Dmitry Shmidt	er->multicast_sd = ssdp_open_multicast_sock(er->ip_addr,
1704b06059785b935dd1f4f09314e4e12c417d2c6a4Dmitry Shmidt						    er->forced_ifname ?
1714b06059785b935dd1f4f09314e4e12c417d2c6a4Dmitry Shmidt						    er->ifname : NULL);
1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (er->multicast_sd < 0) {
1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		wpa_printf(MSG_INFO, "WPS ER: Failed to open multicast socket "
1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			   "for SSDP");
1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return -1;
1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	er->ssdp_sd = ssdp_listener_open();
1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (er->ssdp_sd < 0) {
1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		wpa_printf(MSG_INFO, "WPS ER: Failed to open SSDP listener "
1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			   "socket");
1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return -1;
1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (eloop_register_sock(er->multicast_sd, EVENT_TYPE_READ,
1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				wps_er_ssdp_rx, er, NULL) ||
1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	    eloop_register_sock(er->ssdp_sd, EVENT_TYPE_READ,
1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				wps_er_ssdp_rx, er, NULL))
1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		return -1;
1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	wps_er_send_ssdp_msearch(er);
1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	return 0;
1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}
1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid wps_er_ssdp_deinit(struct wps_er *er)
1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{
1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (er->multicast_sd >= 0) {
2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		eloop_unregister_sock(er->multicast_sd, EVENT_TYPE_READ);
2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		close(er->multicast_sd);
2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	if (er->ssdp_sd >= 0) {
2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		eloop_unregister_sock(er->ssdp_sd, EVENT_TYPE_READ);
2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt		close(er->ssdp_sd);
2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	}
2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}
208