WifiConfigStore.java revision 84649ea634d480be6bee19f155a1da5a4ec93e60
1/*
2 * Copyright (C) 2010 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17package com.android.server.wifi;
18
19import android.app.AppGlobals;
20import android.app.admin.DeviceAdminInfo;
21import android.app.admin.DevicePolicyManagerInternal;
22import android.content.ContentResolver;
23import android.content.Context;
24import android.content.Intent;
25import android.content.pm.ApplicationInfo;
26import android.content.pm.PackageManager;
27import android.net.IpConfiguration;
28import android.net.IpConfiguration.IpAssignment;
29import android.net.IpConfiguration.ProxySettings;
30import android.net.NetworkInfo.DetailedState;
31import android.net.ProxyInfo;
32import android.net.StaticIpConfiguration;
33import android.net.wifi.ScanResult;
34import android.net.wifi.WifiConfiguration;
35import android.net.wifi.WifiConfiguration.KeyMgmt;
36import android.net.wifi.WifiConfiguration.Status;
37import android.net.wifi.WifiEnterpriseConfig;
38import android.net.wifi.WifiInfo;
39import android.net.wifi.WifiManager;
40import android.net.wifi.WifiSsid;
41import android.net.wifi.WpsInfo;
42import android.net.wifi.WpsResult;
43import android.os.Environment;
44import android.os.FileObserver;
45import android.os.Process;
46import android.os.RemoteException;
47import android.os.SystemClock;
48import android.os.UserHandle;
49import android.provider.Settings;
50import android.security.Credentials;
51import android.security.KeyChain;
52import android.security.KeyStore;
53import android.text.TextUtils;
54import android.util.LocalLog;
55import android.util.Log;
56import android.util.SparseArray;
57
58import com.android.server.LocalServices;
59import com.android.internal.R;
60import com.android.server.net.DelayedDiskWrite;
61import com.android.server.net.IpConfigStore;
62import com.android.server.wifi.anqp.ANQPElement;
63import com.android.server.wifi.anqp.Constants;
64import com.android.server.wifi.hotspot2.ANQPData;
65import com.android.server.wifi.hotspot2.AnqpCache;
66import com.android.server.wifi.hotspot2.NetworkDetail;
67import com.android.server.wifi.hotspot2.PasspointMatch;
68import com.android.server.wifi.hotspot2.SupplicantBridge;
69import com.android.server.wifi.hotspot2.Utils;
70import com.android.server.wifi.hotspot2.omadm.MOManager;
71import com.android.server.wifi.hotspot2.pps.Credential;
72import com.android.server.wifi.hotspot2.pps.HomeSP;
73
74import java.io.BufferedInputStream;
75import java.io.BufferedReader;
76import java.io.DataInputStream;
77import java.io.DataOutputStream;
78import java.io.EOFException;
79import java.io.File;
80import java.io.FileDescriptor;
81import java.io.FileInputStream;
82import java.io.FileNotFoundException;
83import java.io.FileReader;
84import java.io.IOException;
85import java.io.PrintWriter;
86import java.nio.charset.StandardCharsets;
87import java.security.PrivateKey;
88import java.security.cert.Certificate;
89import java.security.cert.CertificateException;
90import java.util.ArrayList;
91import java.util.BitSet;
92import java.util.Calendar;
93import java.util.Collection;
94import java.util.Collections;
95import java.util.Comparator;
96import java.util.HashMap;
97import java.util.HashSet;
98import java.util.List;
99import java.util.Map;
100import java.util.Objects;
101import java.util.Set;
102import java.util.concurrent.atomic.AtomicBoolean;
103import java.util.concurrent.atomic.AtomicInteger;
104import java.util.regex.Matcher;
105import java.util.regex.Pattern;
106import java.util.zip.CRC32;
107import java.util.zip.Checksum;
108
109import static android.net.wifi.WifiConfiguration.INVALID_NETWORK_ID;
110
111
112/**
113 * This class provides the API to manage configured
114 * wifi networks. The API is not thread safe is being
115 * used only from WifiStateMachine.
116 *
117 * It deals with the following
118 * - Add/update/remove a WifiConfiguration
119 *   The configuration contains two types of information.
120 *     = IP and proxy configuration that is handled by WifiConfigStore and
121 *       is saved to disk on any change.
122 *
123 *       The format of configuration file is as follows:
124 *       <version>
125 *       <netA_key1><netA_value1><netA_key2><netA_value2>...<EOS>
126 *       <netB_key1><netB_value1><netB_key2><netB_value2>...<EOS>
127 *       ..
128 *
129 *       (key, value) pairs for a given network are grouped together and can
130 *       be in any order. A EOS at the end of a set of (key, value) pairs
131 *       indicates that the next set of (key, value) pairs are for a new
132 *       network. A network is identified by a unique ID_KEY. If there is no
133 *       ID_KEY in the (key, value) pairs, the data is discarded.
134 *
135 *       An invalid version on read would result in discarding the contents of
136 *       the file. On the next write, the latest version is written to file.
137 *
138 *       Any failures during read or write to the configuration file are ignored
139 *       without reporting to the user since the likelihood of these errors are
140 *       low and the impact on connectivity is low.
141 *
142 *     = SSID & security details that is pushed to the supplicant.
143 *       supplicant saves these details to the disk on calling
144 *       saveConfigCommand().
145 *
146 *       We have two kinds of APIs exposed:
147 *        > public API calls that provide fine grained control
148 *          - enableNetwork, disableNetwork, addOrUpdateNetwork(),
149 *          removeNetwork(). For these calls, the config is not persisted
150 *          to the disk. (TODO: deprecate these calls in WifiManager)
151 *        > The new API calls - selectNetwork(), saveNetwork() & forgetNetwork().
152 *          These calls persist the supplicant config to disk.
153 *
154 * - Maintain a list of configured networks for quick access
155 *
156 */
157public class WifiConfigStore extends IpConfigStore {
158
159    private Context mContext;
160    public static final String TAG = "WifiConfigStore";
161    private static final boolean DBG = true;
162    private static boolean VDBG = false;
163    private static boolean VVDBG = false;
164
165    private static final String SUPPLICANT_CONFIG_FILE = "/data/misc/wifi/wpa_supplicant.conf";
166    private static final String SUPPLICANT_CONFIG_FILE_BACKUP = SUPPLICANT_CONFIG_FILE + ".tmp";
167    private static final String PPS_FILE = "/data/misc/wifi/PerProviderSubscription.conf";
168
169    /* configured networks with network id as the key */
170    private final ConfigurationMap mConfiguredNetworks = new ConfigurationMap();
171
172    /* A network id is a unique identifier for a network configured in the
173     * supplicant. Network ids are generated when the supplicant reads
174     * the configuration file at start and can thus change for networks.
175     * We store the IP configuration for networks along with a unique id
176     * that is generated from SSID and security type of the network. A mapping
177     * from the generated unique id to network id of the network is needed to
178     * map supplicant config to IP configuration. */
179
180    /* Stores a map of NetworkId to ScanCache */
181    private HashMap<Integer, ScanDetailCache> mScanDetailCaches;
182
183    /**
184     * Framework keeps a list of (the CRC32 hashes of) all SSIDs that where deleted by user,
185     * so as, framework knows not to re-add those SSIDs automatically to the Saved networks
186     */
187    private Set<Long> mDeletedSSIDs = new HashSet<Long>();
188
189    /**
190     * Framework keeps a list of ephemeral SSIDs that where deleted by user,
191     * so as, framework knows not to autojoin again those SSIDs based on scorer input.
192     * The list is never cleared up.
193     *
194     * The SSIDs are encoded in a String as per definition of WifiConfiguration.SSID field.
195     */
196    public Set<String> mDeletedEphemeralSSIDs = new HashSet<String>();
197
198    /* Tracks the highest priority of configured networks */
199    private int mLastPriority = -1;
200
201    private static final String ipConfigFile = Environment.getDataDirectory() +
202            "/misc/wifi/ipconfig.txt";
203
204    private static final String networkHistoryConfigFile = Environment.getDataDirectory() +
205            "/misc/wifi/networkHistory.txt";
206
207    private static final String autoJoinConfigFile = Environment.getDataDirectory() +
208            "/misc/wifi/autojoinconfig.txt";
209
210    /* Network History Keys */
211    private static final String SSID_KEY = "SSID";
212    private static final String CONFIG_KEY = "CONFIG";
213    private static final String CHOICE_KEY = "CHOICE";
214    private static final String LINK_KEY = "LINK";
215    private static final String BSSID_KEY = "BSSID";
216    private static final String BSSID_KEY_END = "/BSSID";
217    private static final String RSSI_KEY = "RSSI";
218    private static final String FREQ_KEY = "FREQ";
219    private static final String DATE_KEY = "DATE";
220    private static final String MILLI_KEY = "MILLI";
221    private static final String BLACKLIST_MILLI_KEY = "BLACKLIST_MILLI";
222    private static final String NETWORK_ID_KEY = "ID";
223    private static final String PRIORITY_KEY = "PRIORITY";
224    private static final String DEFAULT_GW_KEY = "DEFAULT_GW";
225    private static final String AUTH_KEY = "AUTH";
226    private static final String STATUS_KEY = "AUTO_JOIN_STATUS";
227    private static final String BSSID_STATUS_KEY = "BSSID_STATUS";
228    private static final String SELF_ADDED_KEY = "SELF_ADDED";
229    private static final String FAILURE_KEY = "FAILURE";
230    private static final String DID_SELF_ADD_KEY = "DID_SELF_ADD";
231    private static final String PEER_CONFIGURATION_KEY = "PEER_CONFIGURATION";
232    private static final String CREATOR_UID_KEY = "CREATOR_UID_KEY";
233    private static final String CONNECT_UID_KEY = "CONNECT_UID_KEY";
234    private static final String UPDATE_UID_KEY = "UPDATE_UID";
235    private static final String SUPPLICANT_STATUS_KEY = "SUP_STATUS";
236    private static final String SUPPLICANT_DISABLE_REASON_KEY = "SUP_DIS_REASON";
237    private static final String FQDN_KEY = "FQDN";
238    private static final String NUM_CONNECTION_FAILURES_KEY = "CONNECT_FAILURES";
239    private static final String NUM_IP_CONFIG_FAILURES_KEY = "IP_CONFIG_FAILURES";
240    private static final String NUM_AUTH_FAILURES_KEY = "AUTH_FAILURES";
241    private static final String SCORER_OVERRIDE_KEY = "SCORER_OVERRIDE";
242    private static final String SCORER_OVERRIDE_AND_SWITCH_KEY = "SCORER_OVERRIDE_AND_SWITCH";
243    private static final String VALIDATED_INTERNET_ACCESS_KEY = "VALIDATED_INTERNET_ACCESS";
244    private static final String NO_INTERNET_ACCESS_REPORTS_KEY = "NO_INTERNET_ACCESS_REPORTS";
245    private static final String EPHEMERAL_KEY = "EPHEMERAL";
246    private static final String NUM_ASSOCIATION_KEY = "NUM_ASSOCIATION";
247    private static final String DELETED_CRC32_KEY = "DELETED_CRC32";
248    private static final String DELETED_EPHEMERAL_KEY = "DELETED_EPHEMERAL";
249    private static final String JOIN_ATTEMPT_BOOST_KEY = "JOIN_ATTEMPT_BOOST";
250    private static final String CREATOR_NAME_KEY = "CREATOR_NAME";
251    private static final String UPDATE_NAME_KEY = "UPDATE_NAME";
252    private static final String USER_APPROVED_KEY = "USER_APPROVED";
253    private static final String CREATION_TIME_KEY = "CREATION_TIME";
254    private static final String UPDATE_TIME_KEY = "UPDATE_TIME";
255
256    private static final String SEPARATOR = ":  ";
257    private static final String NL = "\n";
258
259    private static final String THRESHOLD_INITIAL_AUTO_JOIN_ATTEMPT_RSSI_MIN_5G_KEY
260            = "THRESHOLD_INITIAL_AUTO_JOIN_ATTEMPT_RSSI_MIN_5G";
261    private static final String THRESHOLD_INITIAL_AUTO_JOIN_ATTEMPT_RSSI_MIN_24G_KEY
262            = "THRESHOLD_INITIAL_AUTO_JOIN_ATTEMPT_RSSI_MIN_24G";
263    private static final String THRESHOLD_UNBLACKLIST_HARD_5G_KEY
264            = "THRESHOLD_UNBLACKLIST_HARD_5G";
265    private static final String THRESHOLD_UNBLACKLIST_SOFT_5G_KEY
266            = "THRESHOLD_UNBLACKLIST_SOFT_5G";
267    private static final String THRESHOLD_UNBLACKLIST_HARD_24G_KEY
268            = "THRESHOLD_UNBLACKLIST_HARD_24G";
269    private static final String THRESHOLD_UNBLACKLIST_SOFT_24G_KEY
270            = "THRESHOLD_UNBLACKLIST_SOFT_24G";
271    private static final String THRESHOLD_GOOD_RSSI_5_KEY
272            = "THRESHOLD_GOOD_RSSI_5";
273    private static final String THRESHOLD_LOW_RSSI_5_KEY
274            = "THRESHOLD_LOW_RSSI_5";
275    private static final String THRESHOLD_BAD_RSSI_5_KEY
276            = "THRESHOLD_BAD_RSSI_5";
277    private static final String THRESHOLD_GOOD_RSSI_24_KEY
278            = "THRESHOLD_GOOD_RSSI_24";
279    private static final String THRESHOLD_LOW_RSSI_24_KEY
280            = "THRESHOLD_LOW_RSSI_24";
281    private static final String THRESHOLD_BAD_RSSI_24_KEY
282            = "THRESHOLD_BAD_RSSI_24";
283
284    private static final String THRESHOLD_MAX_TX_PACKETS_FOR_NETWORK_SWITCHING_KEY
285            = "THRESHOLD_MAX_TX_PACKETS_FOR_NETWORK_SWITCHING";
286    private static final String THRESHOLD_MAX_RX_PACKETS_FOR_NETWORK_SWITCHING_KEY
287            = "THRESHOLD_MAX_RX_PACKETS_FOR_NETWORK_SWITCHING";
288
289    private static final String THRESHOLD_MAX_TX_PACKETS_FOR_FULL_SCANS_KEY
290            = "THRESHOLD_MAX_TX_PACKETS_FOR_FULL_SCANS";
291    private static final String THRESHOLD_MAX_RX_PACKETS_FOR_FULL_SCANS_KEY
292            = "THRESHOLD_MAX_RX_PACKETS_FOR_FULL_SCANS";
293
294    private static final String THRESHOLD_MAX_TX_PACKETS_FOR_PARTIAL_SCANS_KEY
295            = "THRESHOLD_MAX_TX_PACKETS_FOR_PARTIAL_SCANS";
296    private static final String THRESHOLD_MAX_RX_PACKETS_FOR_PARTIAL_SCANS_KEY
297            = "THRESHOLD_MAX_RX_PACKETS_FOR_PARTIAL_SCANS";
298
299    private static final String MAX_NUM_ACTIVE_CHANNELS_FOR_PARTIAL_SCANS_KEY
300            = "MAX_NUM_ACTIVE_CHANNELS_FOR_PARTIAL_SCANS";
301    private static final String MAX_NUM_PASSIVE_CHANNELS_FOR_PARTIAL_SCANS_KEY
302            = "MAX_NUM_PASSIVE_CHANNELS_FOR_PARTIAL_SCANS";
303
304    private static final String A_BAND_PREFERENCE_RSSI_THRESHOLD_LOW_KEY =
305            "A_BAND_PREFERENCE_RSSI_THRESHOLD_LOW";
306    private static final String A_BAND_PREFERENCE_RSSI_THRESHOLD_KEY =
307            "A_BAND_PREFERENCE_RSSI_THRESHOLD";
308    private static final String G_BAND_PREFERENCE_RSSI_THRESHOLD_KEY =
309            "G_BAND_PREFERENCE_RSSI_THRESHOLD";
310
311    private static final String ENABLE_AUTOJOIN_WHILE_ASSOCIATED_KEY
312            = "ENABLE_AUTOJOIN_WHILE_ASSOCIATED:   ";
313
314    private static final String ASSOCIATED_PARTIAL_SCAN_PERIOD_KEY
315            = "ASSOCIATED_PARTIAL_SCAN_PERIOD";
316    private static final String ASSOCIATED_FULL_SCAN_BACKOFF_KEY
317            = "ASSOCIATED_FULL_SCAN_BACKOFF_PERIOD";
318    private static final String ALWAYS_ENABLE_SCAN_WHILE_ASSOCIATED_KEY
319            = "ALWAYS_ENABLE_SCAN_WHILE_ASSOCIATED";
320    private static final String ONLY_LINK_SAME_CREDENTIAL_CONFIGURATIONS_KEY
321            = "ONLY_LINK_SAME_CREDENTIAL_CONFIGURATIONS";
322
323    private static final String ENABLE_FULL_BAND_SCAN_WHEN_ASSOCIATED_KEY
324            = "ENABLE_FULL_BAND_SCAN_WHEN_ASSOCIATED";
325
326    private static final String ENABLE_HAL_BASED_PNO
327            = "ENABLE_HAL_BASED_PNO";
328
329    // The three below configurations are mainly for power stats and CPU usage tracking
330    // allowing to incrementally disable framework features
331    private static final String ENABLE_AUTO_JOIN_SCAN_WHILE_ASSOCIATED_KEY
332            = "ENABLE_AUTO_JOIN_SCAN_WHILE_ASSOCIATED";
333    private static final String ENABLE_AUTO_JOIN_WHILE_ASSOCIATED_KEY
334            = "ENABLE_AUTO_JOIN_WHILE_ASSOCIATED";
335    private static final String ENABLE_CHIP_WAKE_UP_WHILE_ASSOCIATED_KEY
336            = "ENABLE_CHIP_WAKE_UP_WHILE_ASSOCIATED";
337    private static final String ENABLE_RSSI_POLL_WHILE_ASSOCIATED_KEY
338            = "ENABLE_RSSI_POLL_WHILE_ASSOCIATED_KEY";
339
340    public static final String idStringVarName = "id_str";
341
342    // The Wifi verbose log is provided as a way to persist the verbose logging settings
343    // for testing purpose.
344    // It is not intended for normal use.
345    private static final String WIFI_VERBOSE_LOGS_KEY
346            = "WIFI_VERBOSE_LOGS";
347
348    // As we keep deleted PSK WifiConfiguration for a while, the PSK of
349    // those deleted WifiConfiguration is set to this random unused PSK
350    private static final String DELETED_CONFIG_PSK = "Mjkd86jEMGn79KhKll298Uu7-deleted";
351
352    public int maxTxPacketForFullScans = 8;
353    public int maxRxPacketForFullScans = 16;
354
355    public int maxTxPacketForPartialScans = 40;
356    public int maxRxPacketForPartialScans = 80;
357
358    public int associatedFullScanMaxIntervalMilli = 300000;
359
360    // Sane value for roam blacklisting (not switching to a network if already associated)
361    // 2 days
362    public int networkSwitchingBlackListPeriodMilli = 2 * 24 * 60 * 60 * 1000;
363
364    public int bandPreferenceBoostFactor5 = 5; // Boost by 5 dB per dB above threshold
365    public int bandPreferencePenaltyFactor5 = 2; // Penalize by 2 dB per dB below threshold
366
367    public int badLinkSpeed24 = 6;
368    public int badLinkSpeed5 = 12;
369    public int goodLinkSpeed24 = 24;
370    public int goodLinkSpeed5 = 36;
371
372    public int maxAuthErrorsToBlacklist = 4;
373    public int maxConnectionErrorsToBlacklist = 4;
374    public int wifiConfigBlacklistMinTimeMilli = 1000 * 60 * 5;
375
376    // How long a disconnected config remain considered as the last user selection
377    public int wifiConfigLastSelectionHysteresis = 1000 * 60 * 3;
378
379    // Boost RSSI values of associated networks
380    public int associatedHysteresisHigh = +14;
381    public int associatedHysteresisLow = +8;
382
383    boolean showNetworks = true; // TODO set this back to false, used for debugging 17516271
384
385    public boolean roamOnAny = false;
386    public boolean onlyLinkSameCredentialConfigurations = true;
387
388    public boolean enableLinkDebouncing = true;
389    public boolean enable5GHzPreference = true;
390    public boolean enableWifiCellularHandoverUserTriggeredAdjustment = true;
391
392    public int currentNetworkBoost = 25;
393    public int scanResultRssiLevelPatchUp = -85;
394
395    public static final int maxNumScanCacheEntries = 128;
396
397    public final AtomicBoolean enableHalBasedPno = new AtomicBoolean(true);
398    public final AtomicBoolean enableSsidWhitelist = new AtomicBoolean(true);
399    public final AtomicBoolean enableAutoJoinWhenAssociated = new AtomicBoolean(true);
400    public final AtomicBoolean enableFullBandScanWhenAssociated = new AtomicBoolean(true);
401    public final AtomicBoolean enableAutoJoinScanWhenAssociated = new AtomicBoolean(true);
402    public final AtomicBoolean enableChipWakeUpWhenAssociated = new AtomicBoolean(true);
403    public final AtomicBoolean enableRssiPollWhenAssociated = new AtomicBoolean(true);
404    public final AtomicInteger thresholdInitialAutoJoinAttemptMin5RSSI =
405            new AtomicInteger(WifiConfiguration.INITIAL_AUTO_JOIN_ATTEMPT_MIN_5);
406    public final AtomicInteger thresholdInitialAutoJoinAttemptMin24RSSI =
407            new AtomicInteger(WifiConfiguration.INITIAL_AUTO_JOIN_ATTEMPT_MIN_24);
408    public final AtomicInteger thresholdUnblacklistThreshold5Hard
409            = new AtomicInteger(WifiConfiguration.UNBLACKLIST_THRESHOLD_5_HARD);
410    public final AtomicInteger thresholdUnblacklistThreshold5Soft
411            = new AtomicInteger(WifiConfiguration.UNBLACKLIST_THRESHOLD_5_SOFT);
412    public final AtomicInteger thresholdUnblacklistThreshold24Hard
413            = new AtomicInteger(WifiConfiguration.UNBLACKLIST_THRESHOLD_24_HARD);
414    public final AtomicInteger thresholdUnblacklistThreshold24Soft
415            = new AtomicInteger(WifiConfiguration.UNBLACKLIST_THRESHOLD_24_SOFT);
416    public final AtomicInteger thresholdGoodRssi5 =
417            new AtomicInteger(WifiConfiguration.GOOD_RSSI_5);
418    public final AtomicInteger thresholdLowRssi5 = new AtomicInteger(WifiConfiguration.LOW_RSSI_5);
419    public final AtomicInteger thresholdBadRssi5 = new AtomicInteger(WifiConfiguration.BAD_RSSI_5);
420    public final AtomicInteger thresholdGoodRssi24 =
421            new AtomicInteger(WifiConfiguration.GOOD_RSSI_24);
422    public final AtomicInteger thresholdLowRssi24 = new AtomicInteger(WifiConfiguration.LOW_RSSI_24);
423    public final AtomicInteger thresholdBadRssi24 = new AtomicInteger(WifiConfiguration.BAD_RSSI_24);
424    public final AtomicInteger maxTxPacketForNetworkSwitching = new AtomicInteger(40);
425    public final AtomicInteger maxRxPacketForNetworkSwitching = new AtomicInteger(80);
426    public final AtomicInteger enableVerboseLogging = new AtomicInteger(0);
427    public final AtomicInteger bandPreferenceBoostThreshold5 =
428            new AtomicInteger(WifiConfiguration.A_BAND_PREFERENCE_RSSI_THRESHOLD);
429    public final AtomicInteger associatedFullScanBackoff =
430            new AtomicInteger(12); // Will be divided by 8 by WifiStateMachine
431    public final AtomicInteger bandPreferencePenaltyThreshold5 =
432            new AtomicInteger(WifiConfiguration.G_BAND_PREFERENCE_RSSI_THRESHOLD);
433    public final AtomicInteger alwaysEnableScansWhileAssociated = new AtomicInteger(0);
434    public final AtomicInteger maxNumPassiveChannelsForPartialScans = new AtomicInteger(2);
435    public final AtomicInteger maxNumActiveChannelsForPartialScans = new AtomicInteger(6);
436    public final AtomicInteger wifiDisconnectedShortScanIntervalMilli = new AtomicInteger(15000);
437    public final AtomicInteger wifiDisconnectedLongScanIntervalMilli = new AtomicInteger(120000);
438    public final AtomicInteger wifiAssociatedShortScanIntervalMilli = new AtomicInteger(20000);
439    public final AtomicInteger wifiAssociatedLongScanIntervalMilli = new AtomicInteger(180000);
440
441    private static final Map<String, Object> sKeyMap = new HashMap<>();
442
443    /**
444     * Regex pattern for extracting a connect choice.
445     * Matches a strings like the following:
446     * <configKey>=([0:9]+)
447     */
448    private static Pattern mConnectChoice =
449            Pattern.compile("(.*)=([0-9]+)");
450
451
452    /* Enterprise configuration keys */
453    /**
454     * In old configurations, the "private_key" field was used. However, newer
455     * configurations use the key_id field with the engine_id set to "keystore".
456     * If this field is found in the configuration, the migration code is
457     * triggered.
458     */
459    public static final String OLD_PRIVATE_KEY_NAME = "private_key";
460
461    /**
462     * This represents an empty value of an enterprise field.
463     * NULL is used at wpa_supplicant to indicate an empty value
464     */
465    static final String EMPTY_VALUE = "NULL";
466
467    // Internal use only
468    private static final String[] ENTERPRISE_CONFIG_SUPPLICANT_KEYS = new String[] {
469            WifiEnterpriseConfig.EAP_KEY, WifiEnterpriseConfig.PHASE2_KEY,
470            WifiEnterpriseConfig.IDENTITY_KEY, WifiEnterpriseConfig.ANON_IDENTITY_KEY,
471            WifiEnterpriseConfig.PASSWORD_KEY, WifiEnterpriseConfig.CLIENT_CERT_KEY,
472            WifiEnterpriseConfig.CA_CERT_KEY, WifiEnterpriseConfig.SUBJECT_MATCH_KEY,
473            WifiEnterpriseConfig.ENGINE_KEY, WifiEnterpriseConfig.ENGINE_ID_KEY,
474            WifiEnterpriseConfig.PRIVATE_KEY_ID_KEY, WifiEnterpriseConfig.ALTSUBJECT_MATCH_KEY,
475            WifiEnterpriseConfig.DOM_SUFFIX_MATCH_KEY
476    };
477
478
479    /**
480     * If Connectivity Service has triggered an unwanted network disconnect
481     */
482    public long lastUnwantedNetworkDisconnectTimestamp = 0;
483
484    /**
485     * The maximum number of times we will retry a connection to an access point
486     * for which we have failed in acquiring an IP address from DHCP. A value of
487     * N means that we will make N+1 connection attempts in all.
488     * <p>
489     * See {@link Settings.Secure#WIFI_MAX_DHCP_RETRY_COUNT}. This is the default
490     * value if a Settings value is not present.
491     */
492    private static final int DEFAULT_MAX_DHCP_RETRIES = 9;
493
494
495    private final LocalLog mLocalLog;
496    private final WpaConfigFileObserver mFileObserver;
497
498    private WifiNative mWifiNative;
499    private final KeyStore mKeyStore = KeyStore.getInstance();
500
501    /**
502     * The lastSelectedConfiguration is used to remember which network
503     * was selected last by the user.
504     * The connection to this network may not be successful, as well
505     * the selection (i.e. network priority) might not be persisted.
506     * WiFi state machine is the only object that sets this variable.
507     */
508    private String lastSelectedConfiguration = null;
509
510    /**
511     * Cached PNO list, it is updated when WifiConfiguration changes due to user input.
512     */
513    ArrayList<WifiNative.WifiPnoNetwork> mCachedPnoList
514            = new ArrayList<WifiNative.WifiPnoNetwork>();
515
516    /*
517     * BSSID blacklist, i.e. list of BSSID we want to avoid
518     */
519    HashSet<String> mBssidBlacklist = new HashSet<String>();
520
521    /*
522     * Lost config list, whenever we read a config from networkHistory.txt that was not in
523     * wpa_supplicant.conf
524     */
525    HashSet<String> mLostConfigsDbg = new HashSet<String>();
526
527    private final AnqpCache mAnqpCache;
528    private final SupplicantBridge mSupplicantBridge;
529    private final MOManager mMOManager;
530    private final SIMAccessor mSIMAccessor;
531
532    private WifiStateMachine mWifiStateMachine;
533
534    WifiConfigStore(Context c,  WifiStateMachine w, WifiNative wn) {
535        mContext = c;
536        mWifiNative = wn;
537        mWifiStateMachine = w;
538
539        // A map for value setting in readAutoJoinConfig() - replacing the replicated code.
540        sKeyMap.put(ENABLE_AUTO_JOIN_WHILE_ASSOCIATED_KEY, enableAutoJoinWhenAssociated);
541        sKeyMap.put(ENABLE_FULL_BAND_SCAN_WHEN_ASSOCIATED_KEY, enableFullBandScanWhenAssociated);
542        sKeyMap.put(ENABLE_AUTO_JOIN_SCAN_WHILE_ASSOCIATED_KEY, enableAutoJoinScanWhenAssociated);
543        sKeyMap.put(ENABLE_CHIP_WAKE_UP_WHILE_ASSOCIATED_KEY, enableChipWakeUpWhenAssociated);
544        sKeyMap.put(ENABLE_RSSI_POLL_WHILE_ASSOCIATED_KEY, enableRssiPollWhenAssociated);
545        sKeyMap.put(THRESHOLD_INITIAL_AUTO_JOIN_ATTEMPT_RSSI_MIN_5G_KEY, thresholdInitialAutoJoinAttemptMin5RSSI);
546        sKeyMap.put(THRESHOLD_INITIAL_AUTO_JOIN_ATTEMPT_RSSI_MIN_24G_KEY, thresholdInitialAutoJoinAttemptMin24RSSI);
547        sKeyMap.put(THRESHOLD_UNBLACKLIST_HARD_5G_KEY, thresholdUnblacklistThreshold5Hard);
548        sKeyMap.put(THRESHOLD_UNBLACKLIST_SOFT_5G_KEY, thresholdUnblacklistThreshold5Soft);
549        sKeyMap.put(THRESHOLD_UNBLACKLIST_HARD_24G_KEY, thresholdUnblacklistThreshold24Hard);
550        sKeyMap.put(THRESHOLD_UNBLACKLIST_SOFT_24G_KEY, thresholdUnblacklistThreshold24Soft);
551        sKeyMap.put(THRESHOLD_GOOD_RSSI_5_KEY, thresholdGoodRssi5);
552        sKeyMap.put(THRESHOLD_LOW_RSSI_5_KEY, thresholdLowRssi5);
553        sKeyMap.put(THRESHOLD_BAD_RSSI_5_KEY, thresholdBadRssi5);
554        sKeyMap.put(THRESHOLD_GOOD_RSSI_24_KEY, thresholdGoodRssi24);
555        sKeyMap.put(THRESHOLD_LOW_RSSI_24_KEY, thresholdLowRssi24);
556        sKeyMap.put(THRESHOLD_BAD_RSSI_24_KEY, thresholdBadRssi24);
557        sKeyMap.put(THRESHOLD_MAX_TX_PACKETS_FOR_NETWORK_SWITCHING_KEY, maxTxPacketForNetworkSwitching);
558        sKeyMap.put(THRESHOLD_MAX_RX_PACKETS_FOR_NETWORK_SWITCHING_KEY, maxRxPacketForNetworkSwitching);
559        sKeyMap.put(THRESHOLD_MAX_TX_PACKETS_FOR_FULL_SCANS_KEY, maxTxPacketForNetworkSwitching);
560        sKeyMap.put(THRESHOLD_MAX_RX_PACKETS_FOR_FULL_SCANS_KEY, maxRxPacketForNetworkSwitching);
561        sKeyMap.put(THRESHOLD_MAX_TX_PACKETS_FOR_PARTIAL_SCANS_KEY, maxTxPacketForNetworkSwitching);
562        sKeyMap.put(THRESHOLD_MAX_RX_PACKETS_FOR_PARTIAL_SCANS_KEY, maxRxPacketForNetworkSwitching);
563        sKeyMap.put(WIFI_VERBOSE_LOGS_KEY, enableVerboseLogging);
564        sKeyMap.put(A_BAND_PREFERENCE_RSSI_THRESHOLD_KEY, bandPreferenceBoostThreshold5);
565        sKeyMap.put(ASSOCIATED_PARTIAL_SCAN_PERIOD_KEY, wifiAssociatedShortScanIntervalMilli);
566        sKeyMap.put(ASSOCIATED_PARTIAL_SCAN_PERIOD_KEY, wifiAssociatedShortScanIntervalMilli);
567
568        sKeyMap.put(ASSOCIATED_FULL_SCAN_BACKOFF_KEY, associatedFullScanBackoff);
569        sKeyMap.put(G_BAND_PREFERENCE_RSSI_THRESHOLD_KEY, bandPreferencePenaltyThreshold5);
570        sKeyMap.put(ALWAYS_ENABLE_SCAN_WHILE_ASSOCIATED_KEY, alwaysEnableScansWhileAssociated);
571        sKeyMap.put(MAX_NUM_PASSIVE_CHANNELS_FOR_PARTIAL_SCANS_KEY, maxNumPassiveChannelsForPartialScans);
572        sKeyMap.put(MAX_NUM_ACTIVE_CHANNELS_FOR_PARTIAL_SCANS_KEY, maxNumActiveChannelsForPartialScans);
573        sKeyMap.put(ENABLE_HAL_BASED_PNO, enableHalBasedPno);
574        sKeyMap.put(ENABLE_HAL_BASED_PNO, enableSsidWhitelist);
575
576        if (showNetworks) {
577            mLocalLog = mWifiNative.getLocalLog();
578            mFileObserver = new WpaConfigFileObserver();
579            mFileObserver.startWatching();
580        } else {
581            mLocalLog = null;
582            mFileObserver = null;
583        }
584
585        wifiAssociatedShortScanIntervalMilli.set(mContext.getResources().getInteger(
586                R.integer.config_wifi_associated_short_scan_interval));
587        wifiAssociatedLongScanIntervalMilli.set(mContext.getResources().getInteger(
588                R.integer.config_wifi_associated_short_scan_interval));
589        wifiDisconnectedShortScanIntervalMilli.set(mContext.getResources().getInteger(
590                R.integer.config_wifi_disconnected_short_scan_interval));
591        wifiDisconnectedLongScanIntervalMilli.set(mContext.getResources().getInteger(
592                R.integer.config_wifi_disconnected_long_scan_interval));
593
594        onlyLinkSameCredentialConfigurations = mContext.getResources().getBoolean(
595                R.bool.config_wifi_only_link_same_credential_configurations);
596        maxNumActiveChannelsForPartialScans.set(mContext.getResources().getInteger(
597                R.integer.config_wifi_framework_associated_partial_scan_max_num_active_channels));
598        maxNumPassiveChannelsForPartialScans.set(mContext.getResources().getInteger(
599                R.integer.config_wifi_framework_associated_partial_scan_max_num_passive_channels));
600        associatedFullScanMaxIntervalMilli = mContext.getResources().getInteger(
601                R.integer.config_wifi_framework_associated_full_scan_max_interval);
602        associatedFullScanBackoff.set(mContext.getResources().getInteger(
603                R.integer.config_wifi_framework_associated_full_scan_backoff));
604        enableLinkDebouncing = mContext.getResources().getBoolean(
605                R.bool.config_wifi_enable_disconnection_debounce);
606
607        enable5GHzPreference = mContext.getResources().getBoolean(
608                R.bool.config_wifi_enable_5GHz_preference);
609
610        bandPreferenceBoostFactor5 = mContext.getResources().getInteger(
611                R.integer.config_wifi_framework_5GHz_preference_boost_factor);
612        bandPreferencePenaltyFactor5 = mContext.getResources().getInteger(
613                R.integer.config_wifi_framework_5GHz_preference_penalty_factor);
614
615        bandPreferencePenaltyThreshold5.set(mContext.getResources().getInteger(
616                R.integer.config_wifi_framework_5GHz_preference_penalty_threshold));
617        bandPreferenceBoostThreshold5.set(mContext.getResources().getInteger(
618                R.integer.config_wifi_framework_5GHz_preference_boost_threshold));
619
620        associatedHysteresisHigh = mContext.getResources().getInteger(
621                R.integer.config_wifi_framework_current_association_hysteresis_high);
622        associatedHysteresisLow = mContext.getResources().getInteger(
623                R.integer.config_wifi_framework_current_association_hysteresis_low);
624
625        thresholdBadRssi5.set(mContext.getResources().getInteger(
626                R.integer.config_wifi_framework_wifi_score_bad_rssi_threshold_5GHz));
627        thresholdLowRssi5.set(mContext.getResources().getInteger(
628                R.integer.config_wifi_framework_wifi_score_low_rssi_threshold_5GHz));
629        thresholdGoodRssi5.set(mContext.getResources().getInteger(
630                R.integer.config_wifi_framework_wifi_score_good_rssi_threshold_5GHz));
631        thresholdBadRssi24.set(mContext.getResources().getInteger(
632                R.integer.config_wifi_framework_wifi_score_bad_rssi_threshold_24GHz));
633        thresholdLowRssi24.set(mContext.getResources().getInteger(
634                R.integer.config_wifi_framework_wifi_score_low_rssi_threshold_24GHz));
635        thresholdGoodRssi24.set(mContext.getResources().getInteger(
636                R.integer.config_wifi_framework_wifi_score_good_rssi_threshold_24GHz));
637
638        enableWifiCellularHandoverUserTriggeredAdjustment = mContext.getResources().getBoolean(
639                R.bool.config_wifi_framework_cellular_handover_enable_user_triggered_adjustment);
640
641        badLinkSpeed24 = mContext.getResources().getInteger(
642                R.integer.config_wifi_framework_wifi_score_bad_link_speed_24);
643        badLinkSpeed5 = mContext.getResources().getInteger(
644                R.integer.config_wifi_framework_wifi_score_bad_link_speed_5);
645        goodLinkSpeed24 = mContext.getResources().getInteger(
646                R.integer.config_wifi_framework_wifi_score_good_link_speed_24);
647        goodLinkSpeed5 = mContext.getResources().getInteger(
648                R.integer.config_wifi_framework_wifi_score_good_link_speed_5);
649
650        maxAuthErrorsToBlacklist = mContext.getResources().getInteger(
651                R.integer.config_wifi_framework_max_auth_errors_to_blacklist);
652        maxConnectionErrorsToBlacklist = mContext.getResources().getInteger(
653                R.integer.config_wifi_framework_max_connection_errors_to_blacklist);
654        wifiConfigBlacklistMinTimeMilli = mContext.getResources().getInteger(
655                R.integer.config_wifi_framework_network_black_list_min_time_milli);
656
657
658        enableAutoJoinScanWhenAssociated.set(mContext.getResources().getBoolean(
659                R.bool.config_wifi_framework_enable_associated_autojoin_scan));
660
661        enableAutoJoinWhenAssociated.set(mContext.getResources().getBoolean(
662                R.bool.config_wifi_framework_enable_associated_network_selection));
663
664        currentNetworkBoost = mContext.getResources().getInteger(
665                R.integer.config_wifi_framework_current_network_boost);
666
667        scanResultRssiLevelPatchUp = mContext.getResources().getInteger(
668                R.integer.config_wifi_framework_scan_result_rssi_level_patchup_value);
669
670        networkSwitchingBlackListPeriodMilli = mContext.getResources().getInteger(
671                R.integer.config_wifi_network_switching_blacklist_time);
672
673        enableHalBasedPno.set(mContext.getResources().getBoolean(
674                        R.bool.config_wifi_hal_pno_enable));
675
676        enableSsidWhitelist.set(mContext.getResources().getBoolean(
677                R.bool.config_wifi_ssid_white_list_enable));
678        if (!enableHalBasedPno.get() && enableSsidWhitelist.get()) {
679            enableSsidWhitelist.set(false);
680        }
681
682        boolean hs2on = mContext.getResources().getBoolean(R.bool.config_wifi_hotspot2_enabled);
683        Log.d(Utils.hs2LogTag(getClass()), "Passpoint is " + (hs2on ? "enabled" : "disabled"));
684
685        mMOManager = new MOManager(new File(PPS_FILE), hs2on);
686        mAnqpCache = new AnqpCache();
687        mSupplicantBridge = new SupplicantBridge(mWifiNative, this);
688        mScanDetailCaches = new HashMap<>();
689
690        mSIMAccessor = new SIMAccessor(mContext);
691    }
692
693    public void trimANQPCache(boolean all) {
694        mAnqpCache.clear(all, DBG);
695    }
696
697    void enableVerboseLogging(int verbose) {
698        enableVerboseLogging.set(verbose);
699        if (verbose > 0) {
700            VDBG = true;
701            showNetworks = true;
702        } else {
703            VDBG = false;
704        }
705        if (verbose > 1) {
706            VVDBG = true;
707        } else {
708            VVDBG = false;
709        }
710    }
711
712    class WpaConfigFileObserver extends FileObserver {
713
714        public WpaConfigFileObserver() {
715            super(SUPPLICANT_CONFIG_FILE, CLOSE_WRITE);
716        }
717
718        @Override
719        public void onEvent(int event, String path) {
720            if (event == CLOSE_WRITE) {
721                File file = new File(SUPPLICANT_CONFIG_FILE);
722                if (VDBG) localLog("wpa_supplicant.conf changed; new size = " + file.length());
723            }
724        }
725    }
726
727
728    /**
729     * Fetch the list of configured networks
730     * and enable all stored networks in supplicant.
731     */
732    void loadAndEnableAllNetworks() {
733        if (DBG) log("Loading config and enabling all networks ");
734        loadConfiguredNetworks();
735        enableAllNetworks();
736    }
737
738    int getConfiguredNetworksSize() {
739        return mConfiguredNetworks.size();
740    }
741
742    private List<WifiConfiguration>
743    getConfiguredNetworks(Map<String, String> pskMap) {
744        List<WifiConfiguration> networks = new ArrayList<>();
745        for(WifiConfiguration config : mConfiguredNetworks.values()) {
746            WifiConfiguration newConfig = new WifiConfiguration(config);
747            // When updating this condition, update WifiStateMachine's CONNECT_NETWORK handler to
748            // correctly handle updating existing configs that are filtered out here.
749            if (config.autoJoinStatus == WifiConfiguration.AUTO_JOIN_DELETED || config.ephemeral) {
750                // Do not enumerate and return this configuration to any one,
751                // for instance WiFi Picker.
752                // instead treat it as unknown. the configuration can still be retrieved
753                // directly by the key or networkId
754                continue;
755            }
756
757            if (pskMap != null && config.allowedKeyManagement != null
758                    && config.allowedKeyManagement.get(WifiConfiguration.KeyMgmt.WPA_PSK)
759                    && pskMap.containsKey(config.SSID)) {
760                newConfig.preSharedKey = pskMap.get(config.SSID);
761            }
762            networks.add(newConfig);
763        }
764        return networks;
765    }
766
767    /**
768     * This function returns all configuration, and is used for cebug and creating bug reports.
769     */
770    private List<WifiConfiguration>
771    getAllConfiguredNetworks() {
772        List<WifiConfiguration> networks = new ArrayList<>();
773        for(WifiConfiguration config : mConfiguredNetworks.values()) {
774            WifiConfiguration newConfig = new WifiConfiguration(config);
775            networks.add(newConfig);
776        }
777        return networks;
778    }
779
780    /**
781     * Fetch the list of currently configured networks
782     * @return List of networks
783     */
784    List<WifiConfiguration> getConfiguredNetworks() {
785        return getConfiguredNetworks(null);
786    }
787
788    /**
789     * Fetch the list of currently configured networks, filled with real preSharedKeys
790     * @return List of networks
791     */
792    List<WifiConfiguration> getPrivilegedConfiguredNetworks() {
793        Map<String, String> pskMap = getCredentialsBySsidMap();
794        return getConfiguredNetworks(pskMap);
795    }
796
797    /**
798     * Find matching network for this scanResult
799     */
800    WifiConfiguration getMatchingConfig(ScanResult scanResult) {
801
802        for (Map.Entry entry : mScanDetailCaches.entrySet()) {
803            Integer netId = (Integer) entry.getKey();
804            ScanDetailCache cache = (ScanDetailCache) entry.getValue();
805            WifiConfiguration config = getWifiConfiguration(netId);
806            if (config == null)
807                continue;
808            if (cache.get(scanResult.BSSID) != null) {
809                return config;
810            }
811        }
812
813        return null;
814    }
815
816    /**
817     * Fetch the preSharedKeys for all networks.
818     * @return a map from Ssid to preSharedKey.
819     */
820    private Map<String, String> getCredentialsBySsidMap() {
821        return readNetworkVariablesFromSupplicantFile("psk");
822    }
823
824    /**
825     * Fetch the list of currently configured networks that were recently seen
826     *
827     * @return List of networks
828     */
829    List<WifiConfiguration> getRecentConfiguredNetworks(int milli, boolean copy) {
830        List<WifiConfiguration> networks = new ArrayList<WifiConfiguration>();
831
832        for (WifiConfiguration config : mConfiguredNetworks.values()) {
833            if (config.autoJoinStatus == WifiConfiguration.AUTO_JOIN_DELETED || config.ephemeral) {
834                // Do not enumerate and return this configuration to any one,
835                // instead treat it as unknown. the configuration can still be retrieved
836                // directly by the key or networkId
837                continue;
838            }
839
840            // Calculate the RSSI for scan results that are more recent than milli
841            ScanDetailCache cache = getScanDetailCache(config);
842            if (cache == null) {
843                continue;
844            }
845            config.setVisibility(cache.getVisibility(milli));
846            if (config.visibility == null) {
847                continue;
848            }
849            if (config.visibility.rssi5 == WifiConfiguration.INVALID_RSSI &&
850                    config.visibility.rssi24 == WifiConfiguration.INVALID_RSSI) {
851                continue;
852            }
853            if (copy) {
854                networks.add(new WifiConfiguration(config));
855            } else {
856                networks.add(config);
857            }
858        }
859        return networks;
860    }
861
862    /**
863     *  Update the configuration and BSSID with latest RSSI value.
864     */
865    void updateConfiguration(WifiInfo info) {
866        WifiConfiguration config = getWifiConfiguration(info.getNetworkId());
867        if (config != null && getScanDetailCache(config) != null) {
868            ScanDetail scanDetail = getScanDetailCache(config).getScanDetail(info.getBSSID());
869            if (scanDetail != null) {
870                ScanResult result = scanDetail.getScanResult();
871                long previousSeen = result.seen;
872                int previousRssi = result.level;
873
874                // Update the scan result
875                scanDetail.setSeen();
876                result.level = info.getRssi();
877
878                // Average the RSSI value
879                result.averageRssi(previousRssi, previousSeen,
880                        WifiAutoJoinController.mScanResultMaximumAge);
881                if (VDBG) {
882                    loge("updateConfiguration freq=" + result.frequency
883                        + " BSSID=" + result.BSSID
884                        + " RSSI=" + result.level
885                        + " " + config.configKey());
886                }
887            }
888        }
889    }
890
891    /**
892     * get the Wificonfiguration for this netId
893     *
894     * @return Wificonfiguration
895     */
896    WifiConfiguration getWifiConfiguration(int netId) {
897        return mConfiguredNetworks.get(netId);
898    }
899
900    /**
901     * Get the Wificonfiguration for this key
902     * @return Wificonfiguration
903     */
904    WifiConfiguration getWifiConfiguration(String key) {
905        return mConfiguredNetworks.getByConfigKey(key);
906    }
907
908    /**
909     * Enable all networks and save config. This will be a no-op if the list
910     * of configured networks indicates all networks as being enabled
911     */
912    void enableAllNetworks() {
913        long now = System.currentTimeMillis();
914        boolean networkEnabledStateChanged = false;
915
916        for(WifiConfiguration config : mConfiguredNetworks.values()) {
917
918            if(config != null && config.status == Status.DISABLED && !config.ephemeral
919                    && (config.autoJoinStatus
920                    <= WifiConfiguration.AUTO_JOIN_DISABLED_ON_AUTH_FAILURE)) {
921
922                // Wait for 5 minutes before reenabling config that have known, repeated connection
923                // or DHCP failures
924                if (config.disableReason == WifiConfiguration.DISABLED_DHCP_FAILURE
925                        || config.disableReason == WifiConfiguration.DISABLED_ASSOCIATION_REJECT
926                        || config.disableReason == WifiConfiguration.DISABLED_AUTH_FAILURE) {
927                    if (config.blackListTimestamp != 0
928                           && now > config.blackListTimestamp
929                           && (now - config.blackListTimestamp) < wifiConfigBlacklistMinTimeMilli) {
930                        continue;
931                    }
932                }
933
934                if(mWifiNative.enableNetwork(config.networkId, false)) {
935                    networkEnabledStateChanged = true;
936                    config.status = Status.ENABLED;
937
938                    // Reset the blacklist condition
939                    config.numConnectionFailures = 0;
940                    config.numIpConfigFailures = 0;
941                    config.numAuthFailures = 0;
942
943                    // Reenable the wifi configuration
944                    config.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_ENABLED);
945                } else {
946                    loge("Enable network failed on " + config.networkId);
947
948                }
949            }
950        }
951
952        if (networkEnabledStateChanged) {
953            mWifiNative.saveConfig();
954            sendConfiguredNetworksChangedBroadcast();
955        }
956    }
957
958    private boolean setNetworkPriorityNative(int netId, int priority) {
959        return mWifiNative.setNetworkVariable(netId,
960                WifiConfiguration.priorityVarName, Integer.toString(priority));
961    }
962
963    private boolean setSSIDNative(int netId, String ssid) {
964        return mWifiNative.setNetworkVariable(netId, WifiConfiguration.ssidVarName,
965                encodeSSID(ssid));
966    }
967
968    public boolean updateLastConnectUid(WifiConfiguration config, int uid) {
969        if (config != null) {
970            if (config.lastConnectUid != uid) {
971                config.lastConnectUid = uid;
972                config.dirty = true;
973                return true;
974            }
975        }
976        return false;
977    }
978
979    /**
980     * Selects the specified network for connection. This involves
981     * updating the priority of all the networks and enabling the given
982     * network while disabling others.
983     *
984     * Selecting a network will leave the other networks disabled and
985     * a call to enableAllNetworks() needs to be issued upon a connection
986     * or a failure event from supplicant
987     *
988     * @param config network to select for connection
989     * @param updatePriorities makes config highest priority network
990     * @return false if the network id is invalid
991     */
992    boolean selectNetwork(WifiConfiguration config, boolean updatePriorities, int uid) {
993        if (VDBG) localLog("selectNetwork", config.networkId);
994        if (config.networkId == INVALID_NETWORK_ID) return false;
995
996        // Reset the priority of each network at start or if it goes too high.
997        if (mLastPriority == -1 || mLastPriority > 1000000) {
998            for(WifiConfiguration config2 : mConfiguredNetworks.values()) {
999                if (updatePriorities) {
1000                    if (config2.networkId != INVALID_NETWORK_ID) {
1001                        config2.priority = 0;
1002                        setNetworkPriorityNative(config2.networkId, config.priority);
1003                    }
1004                }
1005            }
1006            mLastPriority = 0;
1007        }
1008
1009        // Set to the highest priority and save the configuration.
1010        if (updatePriorities) {
1011            config.priority = ++mLastPriority;
1012            setNetworkPriorityNative(config.networkId, config.priority);
1013            buildPnoList();
1014        }
1015
1016        if (config.isPasspoint()) {
1017            /* need to slap on the SSID of selected bssid to work */
1018            if (getScanDetailCache(config).size() != 0) {
1019                ScanDetail result = getScanDetailCache(config).getFirst();
1020                if (result == null) {
1021                    loge("Could not find scan result for " + config.BSSID);
1022                } else {
1023                    log("Setting SSID for " + config.networkId + " to" + result.getSSID());
1024                    setSSIDNative(config.networkId, result.getSSID());
1025                }
1026
1027            } else {
1028                loge("Could not find bssid for " + config);
1029            }
1030        }
1031
1032        if (updatePriorities)
1033            mWifiNative.saveConfig();
1034        else
1035            mWifiNative.selectNetwork(config.networkId);
1036
1037        updateLastConnectUid(config, uid);
1038        writeKnownNetworkHistory(false);
1039
1040        /* Enable the given network while disabling all other networks */
1041        enableNetworkWithoutBroadcast(config.networkId, true);
1042
1043       /* Avoid saving the config & sending a broadcast to prevent settings
1044        * from displaying a disabled list of networks */
1045        return true;
1046    }
1047
1048    /**
1049     * Add/update the specified configuration and save config
1050     *
1051     * @param config WifiConfiguration to be saved
1052     * @return network update result
1053     */
1054    NetworkUpdateResult saveNetwork(WifiConfiguration config, int uid) {
1055        WifiConfiguration conf;
1056
1057        // A new network cannot have null SSID
1058        if (config == null || (config.networkId == INVALID_NETWORK_ID &&
1059                config.SSID == null)) {
1060            return new NetworkUpdateResult(INVALID_NETWORK_ID);
1061        }
1062        if (VDBG) localLog("WifiConfigStore: saveNetwork netId", config.networkId);
1063        if (VDBG) {
1064            loge("WifiConfigStore saveNetwork, size=" + mConfiguredNetworks.size()
1065                    + " SSID=" + config.SSID
1066                    + " Uid=" + Integer.toString(config.creatorUid)
1067                    + "/" + Integer.toString(config.lastUpdateUid));
1068        }
1069
1070        if (mDeletedEphemeralSSIDs.remove(config.SSID)) {
1071            if (VDBG) {
1072                loge("WifiConfigStore: removed from ephemeral blacklist: " + config.SSID);
1073            }
1074            // NOTE: This will be flushed to disk as part of the addOrUpdateNetworkNative call
1075            // below, since we're creating/modifying a config.
1076        }
1077
1078        boolean newNetwork = (config.networkId == INVALID_NETWORK_ID);
1079        NetworkUpdateResult result = addOrUpdateNetworkNative(config, uid);
1080        int netId = result.getNetworkId();
1081
1082        if (VDBG) localLog("WifiConfigStore: saveNetwork got it back netId=", netId);
1083
1084        /* enable a new network */
1085        if (newNetwork && netId != INVALID_NETWORK_ID) {
1086            if (VDBG) localLog("WifiConfigStore: will enable netId=", netId);
1087
1088            mWifiNative.enableNetwork(netId, false);
1089            conf = mConfiguredNetworks.get(netId);
1090            if (conf != null)
1091                conf.status = Status.ENABLED;
1092        }
1093
1094        conf = mConfiguredNetworks.get(netId);
1095        if (conf != null) {
1096            if (conf.autoJoinStatus != WifiConfiguration.AUTO_JOIN_ENABLED) {
1097                if (VDBG) localLog("WifiConfigStore: re-enabling: " + conf.SSID);
1098
1099                // reenable autojoin, since new information has been provided
1100                conf.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_ENABLED);
1101                enableNetworkWithoutBroadcast(conf.networkId, false);
1102            }
1103            if (VDBG) {
1104                loge("WifiConfigStore: saveNetwork got config back netId="
1105                        + Integer.toString(netId)
1106                        + " uid=" + Integer.toString(config.creatorUid));
1107            }
1108        }
1109
1110        mWifiNative.saveConfig();
1111        sendConfiguredNetworksChangedBroadcast(conf, result.isNewNetwork() ?
1112                WifiManager.CHANGE_REASON_ADDED : WifiManager.CHANGE_REASON_CONFIG_CHANGE);
1113        return result;
1114    }
1115
1116    /**
1117     * Firmware is roaming away from this BSSID, and this BSSID was on 5GHz, and it's RSSI was good,
1118     * this means we have a situation where we would want to remain on this BSSID but firmware
1119     * is not successful at it.
1120     * This situation is observed on a small number of Access Points, b/17960587
1121     * In that situation, blacklist this BSSID really hard so as framework will not attempt to
1122     * roam to it for the next 8 hours. We do not to keep flipping between 2.4 and 5GHz band..
1123     * TODO: review the blacklisting strategy so as to make it softer and adaptive
1124     * @param info
1125     */
1126    void driverRoamedFrom(WifiInfo info) {
1127        if (info != null
1128            && info.getBSSID() != null
1129            && ScanResult.is5GHz(info.getFrequency())
1130            && info.getRssi() > (bandPreferenceBoostThreshold5.get() + 3)) {
1131            WifiConfiguration config = getWifiConfiguration(info.getNetworkId());
1132            if (config != null) {
1133                if (getScanDetailCache(config) != null) {
1134                    ScanResult result = getScanDetailCache(config).get(info.getBSSID());
1135                    if (result != null) {
1136                        result.setAutoJoinStatus(ScanResult.AUTO_ROAM_DISABLED + 1);
1137                    }
1138                }
1139            }
1140        }
1141    }
1142
1143    void noteRoamingFailure(WifiConfiguration config, int reason) {
1144        if (config == null) return;
1145        config.lastRoamingFailure = System.currentTimeMillis();
1146        config.roamingFailureBlackListTimeMilli
1147                = 2 * (config.roamingFailureBlackListTimeMilli + 1000);
1148        if (config.roamingFailureBlackListTimeMilli
1149                > networkSwitchingBlackListPeriodMilli) {
1150            config.roamingFailureBlackListTimeMilli =
1151                    networkSwitchingBlackListPeriodMilli;
1152        }
1153        config.lastRoamingFailureReason = reason;
1154    }
1155
1156    void saveWifiConfigBSSID(WifiConfiguration config) {
1157        // Sanity check the config is valid
1158        if (config == null || (config.networkId == INVALID_NETWORK_ID &&
1159                config.SSID == null)) {
1160            return;
1161        }
1162
1163        // If an app specified a BSSID then dont over-write it
1164        if (config.BSSID != null && config.BSSID != "any") {
1165            return;
1166        }
1167
1168        // If autojoin specified a BSSID then write it in the network block
1169        if (config.autoJoinBSSID != null) {
1170            loge("saveWifiConfigBSSID Setting BSSID for " + config.configKey()
1171                    + " to " + config.autoJoinBSSID);
1172            if (!mWifiNative.setNetworkVariable(
1173                    config.networkId,
1174                    WifiConfiguration.bssidVarName,
1175                    config.autoJoinBSSID)) {
1176                loge("failed to set BSSID: " + config.autoJoinBSSID);
1177            } else if (config.autoJoinBSSID.equals("any")) {
1178                // Paranoia, we just want to make sure that we restore the config to normal
1179                mWifiNative.saveConfig();
1180            }
1181        }
1182    }
1183
1184
1185    void updateStatus(int netId, DetailedState state) {
1186        if (netId != INVALID_NETWORK_ID) {
1187            WifiConfiguration config = mConfiguredNetworks.get(netId);
1188            if (config == null) return;
1189            switch (state) {
1190                case CONNECTED:
1191                    config.status = Status.CURRENT;
1192                    //we successfully connected, hence remove the blacklist
1193                    config.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_ENABLED);
1194                    break;
1195                case DISCONNECTED:
1196                    //If network is already disabled, keep the status
1197                    if (config.status == Status.CURRENT) {
1198                        config.status = Status.ENABLED;
1199                    }
1200                    break;
1201                default:
1202                    //do nothing, retain the existing state
1203                    break;
1204            }
1205        }
1206    }
1207
1208
1209    /**
1210     * Disable an ephemeral SSID for the purpose of auto-joining thru scored.
1211     * This SSID will never be scored anymore.
1212     * The only way to "un-disable it" is if the user create a network for that SSID and then
1213     * forget it.
1214     *
1215     * @param SSID caller must ensure that the SSID passed thru this API match
1216     *            the WifiConfiguration.SSID rules, and thus be surrounded by quotes.
1217     * @return the {@link WifiConfiguration} corresponding to this SSID, if any, so that we can
1218     *         disconnect if this is the current network.
1219     */
1220    WifiConfiguration disableEphemeralNetwork(String SSID) {
1221        if (SSID == null) {
1222            return null;
1223        }
1224
1225        WifiConfiguration foundConfig = mConfiguredNetworks.getEphemeral(SSID);
1226
1227        mDeletedEphemeralSSIDs.add(SSID);
1228        loge("Forget ephemeral SSID " + SSID + " num=" + mDeletedEphemeralSSIDs.size());
1229
1230        if (foundConfig != null) {
1231            loge("Found ephemeral config in disableEphemeralNetwork: " + foundConfig.networkId);
1232        }
1233
1234        // Force a write, because the mDeletedEphemeralSSIDs list has changed even though the
1235        // configurations may not have.
1236        writeKnownNetworkHistory(true);
1237
1238        return foundConfig;
1239    }
1240
1241    /**
1242     * Forget the specified network and save config
1243     *
1244     * @param netId network to forget
1245     * @return {@code true} if it succeeds, {@code false} otherwise
1246     */
1247    boolean forgetNetwork(int netId) {
1248        if (showNetworks) localLog("forgetNetwork", netId);
1249
1250        WifiConfiguration config = mConfiguredNetworks.get(netId);
1251        boolean remove = removeConfigAndSendBroadcastIfNeeded(netId);
1252        if (!remove) {
1253            //success but we dont want to remove the network from supplicant conf file
1254            return true;
1255        }
1256        if (mWifiNative.removeNetwork(netId)) {
1257            if (config != null && config.isPasspoint()) {
1258                writePasspointConfigs(config.FQDN, null);
1259            }
1260            mWifiNative.saveConfig();
1261            writeKnownNetworkHistory(true);
1262            return true;
1263        } else {
1264            loge("Failed to remove network " + netId);
1265            return false;
1266        }
1267    }
1268
1269    /**
1270     * Add/update a network. Note that there is no saveConfig operation.
1271     * This function is retained for compatibility with the public
1272     * API. The more powerful saveNetwork() is used by the
1273     * state machine
1274     *
1275     * @param config wifi configuration to add/update
1276     * @return network Id
1277     */
1278    int addOrUpdateNetwork(WifiConfiguration config, int uid) {
1279        if (showNetworks) localLog("addOrUpdateNetwork id=", config.networkId);
1280        //adding unconditional message to chase b/15111865
1281        Log.e(TAG, " key=" + config.configKey() + " netId=" + Integer.toString(config.networkId)
1282                + " uid=" + Integer.toString(config.creatorUid)
1283                + "/" + Integer.toString(config.lastUpdateUid));
1284
1285        if (config.isPasspoint()) {
1286            /* create a temporary SSID with providerFriendlyName */
1287            Long csum = getChecksum(config.FQDN);
1288            config.SSID = csum.toString();
1289        }
1290
1291        NetworkUpdateResult result = addOrUpdateNetworkNative(config, uid);
1292        if (result.getNetworkId() != WifiConfiguration.INVALID_NETWORK_ID) {
1293            WifiConfiguration conf = mConfiguredNetworks.get(result.getNetworkId());
1294            if (conf != null) {
1295                sendConfiguredNetworksChangedBroadcast(conf,
1296                    result.isNewNetwork ? WifiManager.CHANGE_REASON_ADDED :
1297                            WifiManager.CHANGE_REASON_CONFIG_CHANGE);
1298            }
1299        }
1300
1301        return result.getNetworkId();
1302    }
1303
1304
1305    /**
1306     * Get the Wifi PNO list
1307     *
1308     * @return list of WifiNative.WifiPnoNetwork
1309     */
1310    private void buildPnoList() {
1311        mCachedPnoList = new ArrayList<WifiNative.WifiPnoNetwork>();
1312
1313        ArrayList<WifiConfiguration> sortedWifiConfigurations
1314                = new ArrayList<WifiConfiguration>(getConfiguredNetworks());
1315        Log.e(TAG, "buildPnoList sortedWifiConfigurations size " + sortedWifiConfigurations.size());
1316        if (sortedWifiConfigurations.size() != 0) {
1317            // Sort by descending priority
1318            Collections.sort(sortedWifiConfigurations, new Comparator<WifiConfiguration>() {
1319                public int compare(WifiConfiguration a, WifiConfiguration b) {
1320                    return a.priority >= b.priority ? 1 : -1;
1321                }
1322            });
1323        }
1324
1325        for (WifiConfiguration config : sortedWifiConfigurations) {
1326            // Initialize the RSSI threshold with sane value:
1327            // Use the 2.4GHz threshold since most WifiConfigurations are dual bands
1328            // There is very little penalty with triggering too soon, i.e. if PNO finds a network
1329            // that has an RSSI too low for us to attempt joining it.
1330            int threshold = thresholdInitialAutoJoinAttemptMin24RSSI.get();
1331            Log.e(TAG, "found sortedWifiConfigurations : " + config.configKey());
1332            WifiNative.WifiPnoNetwork network = mWifiNative.new WifiPnoNetwork(config, threshold);
1333            mCachedPnoList.add(network);
1334        }
1335    }
1336
1337    String[] getWhiteListedSsids(WifiConfiguration config) {
1338        int num_ssids = 0;
1339        String nonQuoteSSID;
1340        int length;
1341        if (enableSsidWhitelist.get() == false)
1342            return null;
1343        List<String> list = new ArrayList<String>();
1344        if (config == null)
1345            return null;
1346        if (config.linkedConfigurations == null) {
1347            return null;
1348        }
1349        if (config.SSID == null || TextUtils.isEmpty(config.SSID)) {
1350            return null;
1351        }
1352        for (String configKey : config.linkedConfigurations.keySet()) {
1353
1354            // Sanity check that the linked configuration is still valid
1355            WifiConfiguration link = getWifiConfiguration(configKey);
1356            if (link == null) {
1357                continue;
1358            }
1359
1360            if (link.autoJoinStatus != WifiConfiguration.AUTO_JOIN_ENABLED) {
1361                continue;
1362            }
1363
1364            if (link.hiddenSSID == true) {
1365                continue;
1366            }
1367
1368            if (link.SSID == null || TextUtils.isEmpty(link.SSID)) {
1369                continue;
1370            }
1371
1372            length = link.SSID.length();
1373            if (length > 2 && (link.SSID.charAt(0) == '"') && link.SSID.charAt(length - 1) == '"') {
1374                nonQuoteSSID = link.SSID.substring(1, length - 1);
1375            } else {
1376                nonQuoteSSID = link.SSID;
1377            }
1378
1379            list.add(nonQuoteSSID);
1380        }
1381
1382        if (list.size() != 0) {
1383            length = config.SSID.length();
1384            if (length > 2 && (config.SSID.charAt(0) == '"')
1385                    && config.SSID.charAt(length - 1) == '"') {
1386                nonQuoteSSID = config.SSID.substring(1, length - 1);
1387            } else {
1388                nonQuoteSSID = config.SSID;
1389            }
1390
1391            list.add(nonQuoteSSID);
1392        }
1393
1394        return (String[])list.toArray(new String[0]);
1395    }
1396
1397    /**
1398     * Remove a network. Note that there is no saveConfig operation.
1399     * This function is retained for compatibility with the public
1400     * API. The more powerful forgetNetwork() is used by the
1401     * state machine for network removal
1402     *
1403     * @param netId network to be removed
1404     * @return {@code true} if it succeeds, {@code false} otherwise
1405     */
1406    boolean removeNetwork(int netId) {
1407        if (showNetworks) localLog("removeNetwork", netId);
1408        boolean ret = mWifiNative.removeNetwork(netId);
1409        if (ret) {
1410            removeConfigAndSendBroadcastIfNeeded(netId);
1411        }
1412        return ret;
1413    }
1414
1415
1416    static private Long getChecksum(String source) {
1417        Checksum csum = new CRC32();
1418        csum.update(source.getBytes(), 0, source.getBytes().length);
1419        return csum.getValue();
1420    }
1421
1422    private boolean removeConfigAndSendBroadcastIfNeeded(int netId) {
1423        WifiConfiguration config = mConfiguredNetworks.get(netId);
1424        if (config != null) {
1425            if (VDBG) {
1426                loge("removeNetwork " + Integer.toString(netId) + " key=" +
1427                        config.configKey() + " config.id=" + Integer.toString(config.networkId));
1428            }
1429
1430            // cancel the last user choice
1431            if (config.configKey().equals(lastSelectedConfiguration)) {
1432                lastSelectedConfiguration = null;
1433            }
1434
1435            // Remove any associated keys
1436            if (config.enterpriseConfig != null) {
1437                removeKeys(config.enterpriseConfig);
1438            }
1439
1440            if (config.selfAdded || config.linkedConfigurations != null
1441                    || config.allowedKeyManagement.get(KeyMgmt.WPA_PSK)) {
1442                if (!TextUtils.isEmpty(config.SSID)) {
1443                    /* Remember that we deleted this PSK SSID */
1444                    if (config.SSID != null) {
1445                        Long csum = getChecksum(config.SSID);
1446                        mDeletedSSIDs.add(csum);
1447                        loge("removeNetwork " + Integer.toString(netId)
1448                                + " key=" + config.configKey()
1449                                + " config.id=" + Integer.toString(config.networkId)
1450                                + "  crc=" + csum);
1451                    } else {
1452                        loge("removeNetwork " + Integer.toString(netId)
1453                                + " key=" + config.configKey()
1454                                + " config.id=" + Integer.toString(config.networkId));
1455                    }
1456                }
1457            }
1458
1459            mConfiguredNetworks.remove(netId);
1460            mScanDetailCaches.remove(netId);
1461
1462            writeIpAndProxyConfigurations();
1463            sendConfiguredNetworksChangedBroadcast(config, WifiManager.CHANGE_REASON_REMOVED);
1464            writeKnownNetworkHistory(true);
1465        }
1466        return true;
1467    }
1468
1469    /*
1470     * Remove all networks associated with an application
1471     *
1472     * @param packageName name of the package of networks to remove
1473     * @return {@code true} if all networks removed successfully, {@code false} otherwise
1474     */
1475    boolean removeNetworksForApp(ApplicationInfo app) {
1476        if (app == null || app.packageName == null) {
1477            return false;
1478        }
1479
1480        boolean success = true;
1481
1482        WifiConfiguration [] copiedConfigs =
1483                mConfiguredNetworks.values().toArray(new WifiConfiguration[0]);
1484        for (WifiConfiguration config : copiedConfigs) {
1485            if (app.uid != config.creatorUid || !app.packageName.equals(config.creatorName)) {
1486                continue;
1487            }
1488            if (showNetworks) {
1489                localLog("Removing network " + config.SSID
1490                         + ", application \"" + app.packageName + "\" uninstalled"
1491                         + " from user " + UserHandle.getUserId(app.uid));
1492            }
1493            success &= removeNetwork(config.networkId);
1494        }
1495
1496        mWifiNative.saveConfig();
1497
1498        return success;
1499    }
1500
1501    boolean removeNetworksForUser(int userId) {
1502        boolean success = true;
1503
1504        WifiConfiguration[] copiedConfigs =
1505                mConfiguredNetworks.values().toArray(new WifiConfiguration[0]);
1506        for (WifiConfiguration config : copiedConfigs) {
1507            if (userId != UserHandle.getUserId(config.creatorUid)) {
1508                continue;
1509            }
1510            success &= removeNetwork(config.networkId);
1511            if (showNetworks) {
1512                localLog("Removing network " + config.SSID
1513                        + ", user " + userId + " removed");
1514            }
1515        }
1516
1517        return success;
1518    }
1519
1520    /**
1521     * Enable a network. Note that there is no saveConfig operation.
1522     * This function is retained for compatibility with the public
1523     * API. The more powerful selectNetwork()/saveNetwork() is used by the
1524     * state machine for connecting to a network
1525     *
1526     * @param netId network to be enabled
1527     * @return {@code true} if it succeeds, {@code false} otherwise
1528     */
1529    boolean enableNetwork(int netId, boolean disableOthers, int uid) {
1530        boolean ret = enableNetworkWithoutBroadcast(netId, disableOthers);
1531        if (disableOthers) {
1532            if (VDBG) localLog("enableNetwork(disableOthers=true, uid=" + uid + ") ", netId);
1533            updateLastConnectUid(getWifiConfiguration(netId), uid);
1534            writeKnownNetworkHistory(false);
1535            sendConfiguredNetworksChangedBroadcast();
1536        } else {
1537            if (VDBG) localLog("enableNetwork(disableOthers=false) ", netId);
1538            WifiConfiguration enabledNetwork;
1539            synchronized(mConfiguredNetworks) {                     // !!! Useless synchronization!
1540                enabledNetwork = mConfiguredNetworks.get(netId);
1541            }
1542            // check just in case the network was removed by someone else.
1543            if (enabledNetwork != null) {
1544                sendConfiguredNetworksChangedBroadcast(enabledNetwork,
1545                        WifiManager.CHANGE_REASON_CONFIG_CHANGE);
1546            }
1547        }
1548        return ret;
1549    }
1550
1551    boolean enableNetworkWithoutBroadcast(int netId, boolean disableOthers) {
1552        boolean ret = mWifiNative.enableNetwork(netId, disableOthers);
1553
1554        WifiConfiguration config = mConfiguredNetworks.get(netId);
1555        if (config != null) config.status = Status.ENABLED;
1556
1557        if (disableOthers) {
1558            markAllNetworksDisabledExcept(netId);
1559        }
1560        return ret;
1561    }
1562
1563    void disableAllNetworks() {
1564        if (VDBG) localLog("disableAllNetworks");
1565        boolean networkDisabled = false;
1566        for (WifiConfiguration enabled : mConfiguredNetworks.getEnabledNetworks()) {
1567            if(mWifiNative.disableNetwork(enabled.networkId)) {
1568                networkDisabled = true;
1569                enabled.status = Status.DISABLED;
1570            } else {
1571                loge("Disable network failed on " + enabled.networkId);
1572            }
1573        }
1574
1575        if (networkDisabled) {
1576            sendConfiguredNetworksChangedBroadcast();
1577        }
1578    }
1579    /**
1580     * Disable a network. Note that there is no saveConfig operation.
1581     * @param netId network to be disabled
1582     * @return {@code true} if it succeeds, {@code false} otherwise
1583     */
1584    boolean disableNetwork(int netId) {
1585        boolean ret = disableNetwork(netId, WifiConfiguration.DISABLED_UNKNOWN_REASON);
1586        if (ret) {
1587            mWifiStateMachine.registerNetworkDisabled(netId);
1588        }
1589        return ret;
1590    }
1591
1592    /**
1593     * Disable a network. Note that there is no saveConfig operation.
1594     * @param netId network to be disabled
1595     * @param reason reason code network was disabled
1596     * @return {@code true} if it succeeds, {@code false} otherwise
1597     */
1598    boolean disableNetwork(int netId, int reason) {
1599        if (VDBG) localLog("disableNetwork", netId);
1600        boolean ret = mWifiNative.disableNetwork(netId);
1601        WifiConfiguration network = null;
1602        WifiConfiguration config = mConfiguredNetworks.get(netId);
1603
1604        if (VDBG) {
1605            if (config != null) {
1606                loge("disableNetwork netId=" + Integer.toString(netId)
1607                        + " SSID=" + config.SSID
1608                        + " disabled=" + (config.status == Status.DISABLED)
1609                        + " reason=" + Integer.toString(config.disableReason));
1610            }
1611        }
1612        /* Only change the reason if the network was not previously disabled
1613        /* and the reason is not DISABLED_BY_WIFI_MANAGER, that is, if a 3rd party
1614         * set its configuration as disabled, then leave it disabled */
1615        if (config != null) {
1616            if (config.status != Status.DISABLED
1617                && config.disableReason != WifiConfiguration.DISABLED_BY_WIFI_MANAGER) {
1618                config.status = Status.DISABLED;
1619                config.disableReason = reason;
1620                network = config;
1621            }
1622            if (reason == WifiConfiguration.DISABLED_BY_WIFI_MANAGER) {
1623                // Make sure autojoin wont reenable this configuration without further user
1624                // intervention
1625                config.status = Status.DISABLED;
1626                config.autoJoinStatus = WifiConfiguration.AUTO_JOIN_DISABLED_USER_ACTION;
1627            }
1628        }
1629        if (network != null) {
1630            sendConfiguredNetworksChangedBroadcast(network,
1631                    WifiManager.CHANGE_REASON_CONFIG_CHANGE);
1632        }
1633        return ret;
1634    }
1635
1636    /**
1637     * Save the configured networks in supplicant to disk
1638     * @return {@code true} if it succeeds, {@code false} otherwise
1639     */
1640    boolean saveConfig() {
1641        return mWifiNative.saveConfig();
1642    }
1643
1644    /**
1645     * Start WPS pin method configuration with pin obtained
1646     * from the access point
1647     * @param config WPS configuration
1648     * @return Wps result containing status and pin
1649     */
1650    WpsResult startWpsWithPinFromAccessPoint(WpsInfo config) {
1651        WpsResult result = new WpsResult();
1652        if (mWifiNative.startWpsRegistrar(config.BSSID, config.pin)) {
1653            /* WPS leaves all networks disabled */
1654            markAllNetworksDisabled();
1655            result.status = WpsResult.Status.SUCCESS;
1656        } else {
1657            loge("Failed to start WPS pin method configuration");
1658            result.status = WpsResult.Status.FAILURE;
1659        }
1660        return result;
1661    }
1662
1663    /**
1664     * Start WPS pin method configuration with pin obtained
1665     * from the device
1666     * @return WpsResult indicating status and pin
1667     */
1668    WpsResult startWpsWithPinFromDevice(WpsInfo config) {
1669        WpsResult result = new WpsResult();
1670        result.pin = mWifiNative.startWpsPinDisplay(config.BSSID);
1671        /* WPS leaves all networks disabled */
1672        if (!TextUtils.isEmpty(result.pin)) {
1673            markAllNetworksDisabled();
1674            result.status = WpsResult.Status.SUCCESS;
1675        } else {
1676            loge("Failed to start WPS pin method configuration");
1677            result.status = WpsResult.Status.FAILURE;
1678        }
1679        return result;
1680    }
1681
1682    /**
1683     * Start WPS push button configuration
1684     * @param config WPS configuration
1685     * @return WpsResult indicating status and pin
1686     */
1687    WpsResult startWpsPbc(WpsInfo config) {
1688        WpsResult result = new WpsResult();
1689        if (mWifiNative.startWpsPbc(config.BSSID)) {
1690            /* WPS leaves all networks disabled */
1691            markAllNetworksDisabled();
1692            result.status = WpsResult.Status.SUCCESS;
1693        } else {
1694            loge("Failed to start WPS push button configuration");
1695            result.status = WpsResult.Status.FAILURE;
1696        }
1697        return result;
1698    }
1699
1700    /**
1701     * Fetch the static IP configuration for a given network id
1702     */
1703    StaticIpConfiguration getStaticIpConfiguration(int netId) {
1704        WifiConfiguration config = mConfiguredNetworks.get(netId);
1705        if (config != null) {
1706            return config.getStaticIpConfiguration();
1707        }
1708        return null;
1709    }
1710
1711    /**
1712     * Set the static IP configuration for a given network id
1713     */
1714    void setStaticIpConfiguration(int netId, StaticIpConfiguration staticIpConfiguration) {
1715        WifiConfiguration config = mConfiguredNetworks.get(netId);
1716        if (config != null) {
1717            config.setStaticIpConfiguration(staticIpConfiguration);
1718        }
1719    }
1720
1721    /**
1722     * set default GW MAC address
1723     */
1724    void setDefaultGwMacAddress(int netId, String macAddress) {
1725        WifiConfiguration config = mConfiguredNetworks.get(netId);
1726        if (config != null) {
1727            //update defaultGwMacAddress
1728            config.defaultGwMacAddress = macAddress;
1729        }
1730    }
1731
1732
1733    /**
1734     * Fetch the proxy properties for a given network id
1735     * @param netId id
1736     * @return ProxyInfo for the network id
1737     */
1738    ProxyInfo getProxyProperties(int netId) {
1739        WifiConfiguration config = mConfiguredNetworks.get(netId);
1740        if (config != null) {
1741            return config.getHttpProxy();
1742        }
1743        return null;
1744    }
1745
1746    /**
1747     * Return if the specified network is using static IP
1748     * @param netId id
1749     * @return {@code true} if using static ip for netId
1750     */
1751    boolean isUsingStaticIp(int netId) {
1752        WifiConfiguration config = mConfiguredNetworks.get(netId);
1753        if (config != null && config.getIpAssignment() == IpAssignment.STATIC) {
1754            return true;
1755        }
1756        return false;
1757    }
1758
1759    boolean isEphemeral(int netId) {
1760        WifiConfiguration config = mConfiguredNetworks.get(netId);
1761        return config != null && config.ephemeral;
1762    }
1763
1764    /**
1765     * Should be called when a single network configuration is made.
1766     * @param network The network configuration that changed.
1767     * @param reason The reason for the change, should be one of WifiManager.CHANGE_REASON_ADDED,
1768     * WifiManager.CHANGE_REASON_REMOVED, or WifiManager.CHANGE_REASON_CHANGE.
1769     */
1770    private void sendConfiguredNetworksChangedBroadcast(WifiConfiguration network,
1771            int reason) {
1772        Intent intent = new Intent(WifiManager.CONFIGURED_NETWORKS_CHANGED_ACTION);
1773        intent.addFlags(Intent.FLAG_RECEIVER_REGISTERED_ONLY_BEFORE_BOOT);
1774        intent.putExtra(WifiManager.EXTRA_MULTIPLE_NETWORKS_CHANGED, false);
1775        intent.putExtra(WifiManager.EXTRA_WIFI_CONFIGURATION, network);
1776        intent.putExtra(WifiManager.EXTRA_CHANGE_REASON, reason);
1777        mContext.sendBroadcastAsUser(intent, UserHandle.ALL);
1778    }
1779
1780    /**
1781     * Should be called when multiple network configuration changes are made.
1782     */
1783    private void sendConfiguredNetworksChangedBroadcast() {
1784        Intent intent = new Intent(WifiManager.CONFIGURED_NETWORKS_CHANGED_ACTION);
1785        intent.addFlags(Intent.FLAG_RECEIVER_REGISTERED_ONLY_BEFORE_BOOT);
1786        intent.putExtra(WifiManager.EXTRA_MULTIPLE_NETWORKS_CHANGED, true);
1787        mContext.sendBroadcastAsUser(intent, UserHandle.ALL);
1788    }
1789
1790    void loadConfiguredNetworks() {
1791
1792        mLastPriority = 0;
1793
1794        mConfiguredNetworks.clear();
1795
1796        int last_id = -1;
1797        boolean done = false;
1798        while (!done) {
1799
1800            String listStr = mWifiNative.listNetworks(last_id);
1801            if (listStr == null)
1802                return;
1803
1804            String[] lines = listStr.split("\n");
1805
1806            if (showNetworks) {
1807                localLog("WifiConfigStore: loadConfiguredNetworks:  ");
1808                for (String net : lines) {
1809                    localLog(net);
1810                }
1811            }
1812
1813            // Skip the first line, which is a header
1814            for (int i = 1; i < lines.length; i++) {
1815                String[] result = lines[i].split("\t");
1816                // network-id | ssid | bssid | flags
1817                WifiConfiguration config = new WifiConfiguration();
1818                try {
1819                    config.networkId = Integer.parseInt(result[0]);
1820                    last_id = config.networkId;
1821                } catch(NumberFormatException e) {
1822                    loge("Failed to read network-id '" + result[0] + "'");
1823                    continue;
1824                }
1825                if (result.length > 3) {
1826                    if (result[3].indexOf("[CURRENT]") != -1)
1827                        config.status = WifiConfiguration.Status.CURRENT;
1828                    else if (result[3].indexOf("[DISABLED]") != -1)
1829                        config.status = WifiConfiguration.Status.DISABLED;
1830                    else
1831                        config.status = WifiConfiguration.Status.ENABLED;
1832                } else {
1833                    config.status = WifiConfiguration.Status.ENABLED;
1834                }
1835
1836                readNetworkVariables(config);
1837
1838                Checksum csum = new CRC32();
1839                if (config.SSID != null) {
1840                    csum.update(config.SSID.getBytes(), 0, config.SSID.getBytes().length);
1841                    long d = csum.getValue();
1842                    if (mDeletedSSIDs.contains(d)) {
1843                        loge(" got CRC for SSID " + config.SSID + " -> " + d + ", was deleted");
1844                    }
1845                }
1846
1847                if (config.priority > mLastPriority) {
1848                    mLastPriority = config.priority;
1849                }
1850
1851                config.setIpAssignment(IpAssignment.DHCP);
1852                config.setProxySettings(ProxySettings.NONE);
1853
1854                if (mConfiguredNetworks.getByConfigKey(config.configKey()) != null) {
1855                    // That SSID is already known, just ignore this duplicate entry
1856                    if (showNetworks) localLog("discarded duplicate network ", config.networkId);
1857                } else if(WifiServiceImpl.isValid(config)){
1858                    mConfiguredNetworks.put(config.networkId, config);
1859                    if (showNetworks) localLog("loaded configured network", config.networkId);
1860                } else {
1861                    if (showNetworks) log("Ignoring loaded configured for network " + config.networkId
1862                        + " because config are not valid");
1863                }
1864            }
1865
1866            done = (lines.length == 1);
1867        }
1868
1869        readPasspointConfig();
1870        readIpAndProxyConfigurations();
1871        readNetworkHistory();
1872        readAutoJoinConfig();
1873
1874        buildPnoList();
1875
1876        sendConfiguredNetworksChangedBroadcast();
1877
1878        if (showNetworks) localLog("loadConfiguredNetworks loaded " + mConfiguredNetworks.size() + " networks");
1879
1880        if (mConfiguredNetworks.isEmpty()) {
1881            // no networks? Lets log if the file contents
1882            logKernelTime();
1883            logContents(SUPPLICANT_CONFIG_FILE);
1884            logContents(SUPPLICANT_CONFIG_FILE_BACKUP);
1885            logContents(networkHistoryConfigFile);
1886        }
1887    }
1888
1889    private void logContents(String file) {
1890        localLog("--- Begin " + file + " ---", true);
1891        BufferedReader reader = null;
1892        try {
1893            reader = new BufferedReader(new FileReader(file));
1894            for (String line = reader.readLine(); line != null; line = reader.readLine()) {
1895                localLog(line, true);
1896            }
1897        } catch (FileNotFoundException e) {
1898            localLog("Could not open " + file + ", " + e, true);
1899        } catch (IOException e) {
1900            localLog("Could not read " + file + ", " + e, true);
1901        } finally {
1902            try {
1903                if (reader != null) {
1904                    reader.close();
1905                }
1906            } catch (IOException e) {
1907                // Just ignore the fact that we couldn't close
1908            }
1909        }
1910        localLog("--- End " + file + " Contents ---", true);
1911    }
1912
1913    private Map<String, String> readNetworkVariablesFromSupplicantFile(String key) {
1914        Map<String, String> result = new HashMap<>();
1915        BufferedReader reader = null;
1916        if (VDBG) loge("readNetworkVariablesFromSupplicantFile key=" + key);
1917
1918        try {
1919            reader = new BufferedReader(new FileReader(SUPPLICANT_CONFIG_FILE));
1920            boolean found = false;
1921            String networkSsid = null;
1922            String value = null;
1923
1924            for (String line = reader.readLine(); line != null; line = reader.readLine()) {
1925
1926                if (line.matches("[ \\t]*network=\\{")) {
1927                    found = true;
1928                    networkSsid = null;
1929                    value = null;
1930                } else if (line.matches("[ \\t]*\\}")) {
1931                    found = false;
1932                    networkSsid = null;
1933                    value = null;
1934                }
1935
1936                if (found) {
1937                    String trimmedLine = line.trim();
1938                    if (trimmedLine.startsWith("ssid=")) {
1939                        networkSsid = trimmedLine.substring(5);
1940                    } else if (trimmedLine.startsWith(key + "=")) {
1941                        value = trimmedLine.substring(key.length() + 1);
1942                    }
1943
1944                    if (networkSsid != null && value != null) {
1945                        result.put(networkSsid, value);
1946                    }
1947                }
1948            }
1949        } catch (FileNotFoundException e) {
1950            if (VDBG) loge("Could not open " + SUPPLICANT_CONFIG_FILE + ", " + e);
1951        } catch (IOException e) {
1952            if (VDBG) loge("Could not read " + SUPPLICANT_CONFIG_FILE + ", " + e);
1953        } finally {
1954            try {
1955                if (reader != null) {
1956                    reader.close();
1957                }
1958            } catch (IOException e) {
1959                // Just ignore the fact that we couldn't close
1960            }
1961        }
1962
1963        return result;
1964    }
1965
1966    private String readNetworkVariableFromSupplicantFile(String ssid, String key) {
1967        long start = SystemClock.elapsedRealtimeNanos();
1968        Map<String, String> data = readNetworkVariablesFromSupplicantFile(key);
1969        long end = SystemClock.elapsedRealtimeNanos();
1970
1971        if (VDBG) {
1972            loge("readNetworkVariableFromSupplicantFile ssid=[" + ssid + "] key=" + key
1973                    + " duration=" + (long)(end - start));
1974        }
1975        return data.get(ssid);
1976    }
1977
1978    /* Mark all networks except specified netId as disabled */
1979    private void markAllNetworksDisabledExcept(int netId) {
1980        for(WifiConfiguration config : mConfiguredNetworks.values()) {
1981            if(config != null && config.networkId != netId) {
1982                if (config.status != Status.DISABLED) {
1983                    config.status = Status.DISABLED;
1984                    config.disableReason = WifiConfiguration.DISABLED_UNKNOWN_REASON;
1985                }
1986            }
1987        }
1988    }
1989
1990    private void markAllNetworksDisabled() {
1991        markAllNetworksDisabledExcept(INVALID_NETWORK_ID);
1992    }
1993
1994    boolean needsUnlockedKeyStore() {
1995
1996        // Any network using certificates to authenticate access requires
1997        // unlocked key store; unless the certificates can be stored with
1998        // hardware encryption
1999
2000        for(WifiConfiguration config : mConfiguredNetworks.values()) {
2001
2002            if (config.allowedKeyManagement.get(KeyMgmt.WPA_EAP)
2003                    && config.allowedKeyManagement.get(KeyMgmt.IEEE8021X)) {
2004
2005                if (needsSoftwareBackedKeyStore(config.enterpriseConfig)) {
2006                    return true;
2007                }
2008            }
2009        }
2010
2011        return false;
2012    }
2013
2014    void readPasspointConfig() {
2015
2016        List<HomeSP> homeSPs;
2017        try {
2018            homeSPs = mMOManager.loadAllSPs();
2019        } catch (IOException e) {
2020            loge("Could not read " + PPS_FILE + " : " + e);
2021            return;
2022        }
2023
2024        mConfiguredNetworks.populatePasspointData(homeSPs, mWifiNative);
2025    }
2026
2027    public void writePasspointConfigs(final String fqdn, final HomeSP homeSP) {
2028        mWriter.write(PPS_FILE, new DelayedDiskWrite.Writer() {
2029            @Override
2030            public void onWriteCalled(DataOutputStream out) throws IOException {
2031                try {
2032                    if (homeSP != null) {
2033                        mMOManager.addSP(homeSP);
2034                    }
2035                    else {
2036                        mMOManager.removeSP(fqdn);
2037                    }
2038                } catch (IOException e) {
2039                    loge("Could not write " + PPS_FILE + " : " + e);
2040                }
2041            }
2042        }, false);
2043    }
2044
2045    public void writeKnownNetworkHistory(boolean force) {
2046        boolean needUpdate = force;
2047
2048        /* Make a copy */
2049        final List<WifiConfiguration> networks = new ArrayList<WifiConfiguration>();
2050        for (WifiConfiguration config : mConfiguredNetworks.values()) {
2051            networks.add(new WifiConfiguration(config));
2052            if (config.dirty == true) {
2053                loge(" rewrite network history for " + config.configKey());
2054                config.dirty = false;
2055                needUpdate = true;
2056            }
2057        }
2058        if (VDBG) {
2059            loge(" writeKnownNetworkHistory() num networks:" +
2060                    mConfiguredNetworks.size() + " needWrite=" + needUpdate);
2061        }
2062        if (needUpdate == false) {
2063            return;
2064        }
2065        mWriter.write(networkHistoryConfigFile, new DelayedDiskWrite.Writer() {
2066            public void onWriteCalled(DataOutputStream out) throws IOException {
2067                for (WifiConfiguration config : networks) {
2068                    //loge("onWriteCalled write SSID: " + config.SSID);
2069                   /* if (config.getLinkProperties() != null)
2070                        loge(" lp " + config.getLinkProperties().toString());
2071                    else
2072                        loge("attempt config w/o lp");
2073                    */
2074
2075                    if (VDBG) {
2076                        int num = 0;
2077                        int numlink = 0;
2078                        if (config.connectChoices != null) {
2079                            num = config.connectChoices.size();
2080                        }
2081                        if (config.linkedConfigurations != null) {
2082                            numlink = config.linkedConfigurations.size();
2083                        }
2084                        loge("saving network history: " + config.configKey()  + " gw: " +
2085                                config.defaultGwMacAddress + " autojoin-status: " +
2086                                config.autoJoinStatus + " ephemeral=" + config.ephemeral
2087                                + " choices:" + Integer.toString(num)
2088                                + " link:" + Integer.toString(numlink)
2089                                + " status:" + Integer.toString(config.status)
2090                                + " nid:" + Integer.toString(config.networkId));
2091                    }
2092
2093                    if (!WifiServiceImpl.isValid(config))
2094                        continue;
2095
2096                    if (config.SSID == null) {
2097                        if (VDBG) {
2098                            loge("writeKnownNetworkHistory trying to write config with null SSID");
2099                        }
2100                        continue;
2101                    }
2102                    if (VDBG) {
2103                        loge("writeKnownNetworkHistory write config " + config.configKey());
2104                    }
2105                    out.writeUTF(CONFIG_KEY + SEPARATOR + config.configKey() + NL);
2106
2107                    if (config.SSID != null) {
2108                        out.writeUTF(SSID_KEY + SEPARATOR + config.SSID + NL);
2109                    }
2110                    if (config.FQDN != null) {
2111                        out.writeUTF(FQDN_KEY + SEPARATOR + config.FQDN + NL);
2112                    }
2113
2114                    out.writeUTF(PRIORITY_KEY + SEPARATOR +
2115                            Integer.toString(config.priority) + NL);
2116                    out.writeUTF(STATUS_KEY + SEPARATOR +
2117                            Integer.toString(config.autoJoinStatus) + NL);
2118                    out.writeUTF(SUPPLICANT_STATUS_KEY + SEPARATOR +
2119                            Integer.toString(config.status) + NL);
2120                    out.writeUTF(SUPPLICANT_DISABLE_REASON_KEY + SEPARATOR +
2121                            Integer.toString(config.disableReason) + NL);
2122                    out.writeUTF(NETWORK_ID_KEY + SEPARATOR +
2123                            Integer.toString(config.networkId) + NL);
2124                    out.writeUTF(SELF_ADDED_KEY + SEPARATOR +
2125                            Boolean.toString(config.selfAdded) + NL);
2126                    out.writeUTF(DID_SELF_ADD_KEY + SEPARATOR +
2127                            Boolean.toString(config.didSelfAdd) + NL);
2128                    out.writeUTF(NO_INTERNET_ACCESS_REPORTS_KEY + SEPARATOR +
2129                            Integer.toString(config.numNoInternetAccessReports) + NL);
2130                    out.writeUTF(VALIDATED_INTERNET_ACCESS_KEY + SEPARATOR +
2131                            Boolean.toString(config.validatedInternetAccess) + NL);
2132                    out.writeUTF(EPHEMERAL_KEY + SEPARATOR +
2133                            Boolean.toString(config.ephemeral) + NL);
2134                    if (config.creationTime != null) {
2135                        out.writeUTF(CREATION_TIME_KEY + SEPARATOR + config.creationTime + NL);
2136                    }
2137                    if (config.updateTime != null) {
2138                        out.writeUTF(UPDATE_TIME_KEY + SEPARATOR + config.updateTime + NL);
2139                    }
2140                    if (config.peerWifiConfiguration != null) {
2141                        out.writeUTF(PEER_CONFIGURATION_KEY + SEPARATOR +
2142                                config.peerWifiConfiguration + NL);
2143                    }
2144                    out.writeUTF(NUM_CONNECTION_FAILURES_KEY + SEPARATOR +
2145                            Integer.toString(config.numConnectionFailures) + NL);
2146                    out.writeUTF(NUM_AUTH_FAILURES_KEY + SEPARATOR +
2147                            Integer.toString(config.numAuthFailures) + NL);
2148                    out.writeUTF(NUM_IP_CONFIG_FAILURES_KEY + SEPARATOR +
2149                            Integer.toString(config.numIpConfigFailures) + NL);
2150                    out.writeUTF(SCORER_OVERRIDE_KEY + SEPARATOR +
2151                            Integer.toString(config.numScorerOverride) + NL);
2152                    out.writeUTF(SCORER_OVERRIDE_AND_SWITCH_KEY + SEPARATOR +
2153                            Integer.toString(config.numScorerOverrideAndSwitchedNetwork) + NL);
2154                    out.writeUTF(NUM_ASSOCIATION_KEY + SEPARATOR +
2155                            Integer.toString(config.numAssociation) + NL);
2156                    out.writeUTF(JOIN_ATTEMPT_BOOST_KEY + SEPARATOR +
2157                            Integer.toString(config.autoJoinUseAggressiveJoinAttemptThreshold)+ NL);
2158                    //out.writeUTF(BLACKLIST_MILLI_KEY + SEPARATOR +
2159                    // Long.toString(config.blackListTimestamp) + NL);
2160                    out.writeUTF(CREATOR_UID_KEY + SEPARATOR +
2161                            Integer.toString(config.creatorUid) + NL);
2162                    out.writeUTF(CONNECT_UID_KEY + SEPARATOR +
2163                            Integer.toString(config.lastConnectUid) + NL);
2164                    out.writeUTF(UPDATE_UID_KEY + SEPARATOR +
2165                            Integer.toString(config.lastUpdateUid) + NL);
2166                    out.writeUTF(CREATOR_NAME_KEY + SEPARATOR +
2167                            config.creatorName + NL);
2168                    out.writeUTF(UPDATE_NAME_KEY + SEPARATOR +
2169                            config.lastUpdateName + NL);
2170                    out.writeUTF(USER_APPROVED_KEY + SEPARATOR +
2171                            Integer.toString(config.userApproved) + NL);
2172                    String allowedKeyManagementString =
2173                            makeString(config.allowedKeyManagement,
2174                                    WifiConfiguration.KeyMgmt.strings);
2175                    out.writeUTF(AUTH_KEY + SEPARATOR +
2176                            allowedKeyManagementString + NL);
2177
2178                    if (config.connectChoices != null) {
2179                        for (String key : config.connectChoices.keySet()) {
2180                            Integer choice = config.connectChoices.get(key);
2181                            out.writeUTF(CHOICE_KEY + SEPARATOR +
2182                                    key + "=" + choice.toString() + NL);
2183                        }
2184                    }
2185                    if (config.linkedConfigurations != null) {
2186                        loge("writeKnownNetworkHistory write linked "
2187                                + config.linkedConfigurations.size());
2188
2189                        for (String key : config.linkedConfigurations.keySet()) {
2190                            out.writeUTF(LINK_KEY + SEPARATOR + key + NL);
2191                        }
2192                    }
2193
2194                    String macAddress = config.defaultGwMacAddress;
2195                    if (macAddress != null) {
2196                        out.writeUTF(DEFAULT_GW_KEY + SEPARATOR + macAddress + NL);
2197                    }
2198
2199                    if (getScanDetailCache(config) != null) {
2200                        for (ScanDetail scanDetail : getScanDetailCache(config).values()) {
2201                            ScanResult result = scanDetail.getScanResult();
2202                            out.writeUTF(BSSID_KEY + SEPARATOR +
2203                                    result.BSSID + NL);
2204
2205                            out.writeUTF(FREQ_KEY + SEPARATOR +
2206                                    Integer.toString(result.frequency) + NL);
2207
2208                            out.writeUTF(RSSI_KEY + SEPARATOR +
2209                                    Integer.toString(result.level) + NL);
2210
2211                            out.writeUTF(BSSID_STATUS_KEY + SEPARATOR +
2212                                    Integer.toString(result.autoJoinStatus) + NL);
2213
2214                            //if (result.seen != 0) {
2215                            //    out.writeUTF(MILLI_KEY + SEPARATOR + Long.toString(result.seen)
2216                            //            + NL);
2217                            //}
2218                            out.writeUTF(BSSID_KEY_END + NL);
2219                        }
2220                    }
2221                    if (config.lastFailure != null) {
2222                        out.writeUTF(FAILURE_KEY + SEPARATOR + config.lastFailure + NL);
2223                    }
2224                    out.writeUTF(NL);
2225                    // Add extra blank lines for clarity
2226                    out.writeUTF(NL);
2227                    out.writeUTF(NL);
2228                }
2229                if (mDeletedSSIDs != null && mDeletedSSIDs.size() > 0) {
2230                    for (Long i : mDeletedSSIDs) {
2231                        out.writeUTF(DELETED_CRC32_KEY);
2232                        out.writeUTF(String.valueOf(i));
2233                        out.writeUTF(NL);
2234                    }
2235                }
2236                if (mDeletedEphemeralSSIDs != null && mDeletedEphemeralSSIDs.size() > 0) {
2237                    for (String ssid : mDeletedEphemeralSSIDs) {
2238                        out.writeUTF(DELETED_EPHEMERAL_KEY);
2239                        out.writeUTF(ssid);
2240                        out.writeUTF(NL);
2241                    }
2242                }
2243            }
2244        });
2245    }
2246
2247    public void setLastSelectedConfiguration(int netId) {
2248        if (VDBG) {
2249            loge("setLastSelectedConfiguration " + Integer.toString(netId));
2250        }
2251        if (netId == WifiConfiguration.INVALID_NETWORK_ID) {
2252            lastSelectedConfiguration = null;
2253        } else {
2254            WifiConfiguration selected = getWifiConfiguration(netId);
2255            if (selected == null) {
2256                lastSelectedConfiguration = null;
2257            } else {
2258                lastSelectedConfiguration = selected.configKey();
2259                selected.numConnectionFailures = 0;
2260                selected.numIpConfigFailures = 0;
2261                selected.numAuthFailures = 0;
2262                selected.numNoInternetAccessReports = 0;
2263                if (VDBG) {
2264                    loge("setLastSelectedConfiguration now: " + lastSelectedConfiguration);
2265                }
2266            }
2267        }
2268    }
2269
2270    public String getLastSelectedConfiguration() {
2271        return lastSelectedConfiguration;
2272    }
2273
2274    public boolean isLastSelectedConfiguration(WifiConfiguration config) {
2275        return (lastSelectedConfiguration != null
2276                && config != null
2277                && lastSelectedConfiguration.equals(config.configKey()));
2278    }
2279
2280    private void readNetworkHistory() {
2281        if (showNetworks) {
2282            localLog("readNetworkHistory() path:" + networkHistoryConfigFile);
2283        }
2284
2285        try (DataInputStream in =
2286                     new DataInputStream(new BufferedInputStream(
2287                             new FileInputStream(networkHistoryConfigFile)))) {
2288
2289            String bssid = null;
2290            String ssid = null;
2291
2292            int freq = 0;
2293            int status = 0;
2294            long seen = 0;
2295            int rssi = WifiConfiguration.INVALID_RSSI;
2296            String caps = null;
2297
2298            WifiConfiguration config = null;
2299            while (true) {
2300                String line = in.readUTF();
2301                if (line == null) {
2302                    break;
2303                }
2304                int colon = line.indexOf(':');
2305                if (colon < 0) {
2306                    continue;
2307                }
2308
2309                String key = line.substring(0, colon).trim();
2310                String value = line.substring(colon + 1).trim();
2311
2312                if (key.equals(CONFIG_KEY)) {
2313
2314                    config = mConfiguredNetworks.getByConfigKey(value);
2315
2316                    // skip reading that configuration data
2317                    // since we don't have a corresponding network ID
2318                    if (config == null) {
2319                        localLog("readNetworkHistory didnt find netid for hash="
2320                                + Integer.toString(value.hashCode())
2321                                + " key: " + value);
2322                        mLostConfigsDbg.add(value);
2323                        continue;
2324                    } else {
2325                        // After an upgrade count old connections as owned by system
2326                        if (config.creatorName == null || config.lastUpdateName == null) {
2327                            config.creatorName =
2328                                mContext.getPackageManager().getNameForUid(Process.SYSTEM_UID);
2329                            config.lastUpdateName = config.creatorName;
2330
2331                            if (DBG) Log.w(TAG, "Upgrading network " + config.networkId
2332                                    + " to " + config.creatorName);
2333                        }
2334                    }
2335                } else if (config != null) {
2336                    switch (key) {
2337                        case SSID_KEY:
2338                            ssid = value;
2339                            if (config.SSID != null && !config.SSID.equals(ssid)) {
2340                                loge("Error parsing network history file, mismatched SSIDs");
2341                                config = null; //error
2342                                ssid = null;
2343                            } else {
2344                                config.SSID = ssid;
2345                            }
2346                            break;
2347                        case FQDN_KEY:
2348                            // Check for literal 'null' to be backwards compatible.
2349                            config.FQDN = value.equals("null") ? null : value;
2350                            break;
2351                        case DEFAULT_GW_KEY:
2352                            config.defaultGwMacAddress = value;
2353                            break;
2354                        case STATUS_KEY:
2355                            config.autoJoinStatus = Integer.parseInt(value);
2356                            break;
2357                        case SUPPLICANT_DISABLE_REASON_KEY:
2358                            config.disableReason = Integer.parseInt(value);
2359                            break;
2360                        case SELF_ADDED_KEY:
2361                            config.selfAdded = Boolean.parseBoolean(value);
2362                            break;
2363                        case DID_SELF_ADD_KEY:
2364                            config.didSelfAdd = Boolean.parseBoolean(value);
2365                            break;
2366                        case NO_INTERNET_ACCESS_REPORTS_KEY:
2367                            config.numNoInternetAccessReports = Integer.parseInt(value);
2368                            break;
2369                        case VALIDATED_INTERNET_ACCESS_KEY:
2370                            config.validatedInternetAccess = Boolean.parseBoolean(value);
2371                            break;
2372                        case CREATION_TIME_KEY:
2373                            config.creationTime = value;
2374                            break;
2375                        case UPDATE_TIME_KEY:
2376                            config.updateTime = value;
2377                            break;
2378                        case EPHEMERAL_KEY:
2379                            config.ephemeral = Boolean.parseBoolean(value);
2380                            break;
2381                        case CREATOR_UID_KEY:
2382                            config.creatorUid = Integer.parseInt(value);
2383                            break;
2384                        case BLACKLIST_MILLI_KEY:
2385                            config.blackListTimestamp = Long.parseLong(value);
2386                            break;
2387                        case NUM_CONNECTION_FAILURES_KEY:
2388                            config.numConnectionFailures = Integer.parseInt(value);
2389                            break;
2390                        case NUM_IP_CONFIG_FAILURES_KEY:
2391                            config.numIpConfigFailures = Integer.parseInt(value);
2392                            break;
2393                        case NUM_AUTH_FAILURES_KEY:
2394                            config.numIpConfigFailures = Integer.parseInt(value);
2395                            break;
2396                        case SCORER_OVERRIDE_KEY:
2397                            config.numScorerOverride = Integer.parseInt(value);
2398                            break;
2399                        case SCORER_OVERRIDE_AND_SWITCH_KEY:
2400                            config.numScorerOverrideAndSwitchedNetwork = Integer.parseInt(value);
2401                            break;
2402                        case NUM_ASSOCIATION_KEY:
2403                            config.numAssociation = Integer.parseInt(value);
2404                            break;
2405                        case JOIN_ATTEMPT_BOOST_KEY:
2406                            config.autoJoinUseAggressiveJoinAttemptThreshold =
2407                                    Integer.parseInt(value);
2408                            break;
2409                        case CONNECT_UID_KEY:
2410                            config.lastConnectUid = Integer.parseInt(value);
2411                            break;
2412                        case UPDATE_UID_KEY:
2413                            config.lastUpdateUid = Integer.parseInt(value);
2414                            break;
2415                        case FAILURE_KEY:
2416                            config.lastFailure = value;
2417                            break;
2418                        case PEER_CONFIGURATION_KEY:
2419                            config.peerWifiConfiguration = value;
2420                            break;
2421                        case CHOICE_KEY:
2422                            String configKey = "";
2423                            int choice = 0;
2424                            Matcher match = mConnectChoice.matcher(value);
2425                            if (!match.find()) {
2426                                if (DBG) Log.d(TAG, "WifiConfigStore: connectChoice: " +
2427                                        " Couldnt match pattern : " + value);
2428                            } else {
2429                                configKey = match.group(1);
2430                                try {
2431                                    choice = Integer.parseInt(match.group(2));
2432                                } catch (NumberFormatException e) {
2433                                    choice = 0;
2434                                }
2435                                if (choice > 0) {
2436                                    if (config.connectChoices == null) {
2437                                        config.connectChoices = new HashMap<>();
2438                                    }
2439                                    config.connectChoices.put(configKey, choice);
2440                                }
2441                            }
2442                            break;
2443                        case LINK_KEY:
2444                            if (config.linkedConfigurations == null) {
2445                                config.linkedConfigurations = new HashMap<>();
2446                            }
2447                            else {
2448                                config.linkedConfigurations.put(value, -1);
2449                            }
2450                            break;
2451                        case BSSID_KEY:
2452                            status = 0;
2453                            ssid = null;
2454                            bssid = null;
2455                            freq = 0;
2456                            seen = 0;
2457                            rssi = WifiConfiguration.INVALID_RSSI;
2458                            caps = "";
2459                            break;
2460                        case RSSI_KEY:
2461                            rssi = Integer.parseInt(value);
2462                            break;
2463                        case BSSID_STATUS_KEY:
2464                            status = Integer.parseInt(value);
2465                            break;
2466                        case FREQ_KEY:
2467                            freq = Integer.parseInt(value);
2468                            break;
2469                        case DATE_KEY:
2470                            /*
2471                             * when reading the configuration from file we don't update the date
2472                             * so as to avoid reading back stale or non-sensical data that would
2473                             * depend on network time.
2474                             * The date of a WifiConfiguration should only come from actual scan result.
2475                             *
2476                            String s = key.replace(FREQ_KEY, "");
2477                            seen = Integer.getInteger(s);
2478                            */
2479                            break;
2480                        case BSSID_KEY_END:
2481                            if ((bssid != null) && (ssid != null)) {
2482
2483                                if (getScanDetailCache(config) != null) {
2484                                    WifiSsid wssid = WifiSsid.createFromAsciiEncoded(ssid);
2485                                    ScanDetail scanDetail = new ScanDetail(wssid, bssid,
2486                                            caps, rssi, freq, (long) 0, seen);
2487                                    getScanDetailCache(config).put(scanDetail);
2488                                    scanDetail.getScanResult().autoJoinStatus = status;
2489                                }
2490                            }
2491                            break;
2492                        case DELETED_CRC32_KEY:
2493                            mDeletedSSIDs.add(Long.parseLong(value));
2494                            break;
2495                        case DELETED_EPHEMERAL_KEY:
2496                            if (!TextUtils.isEmpty(value)) {
2497                                mDeletedEphemeralSSIDs.add(value);
2498                            }
2499                            break;
2500                        case CREATOR_NAME_KEY:
2501                            config.creatorName = value;
2502                            break;
2503                        case UPDATE_NAME_KEY:
2504                            config.lastUpdateName = value;
2505                            break;
2506                        case USER_APPROVED_KEY:
2507                            config.userApproved = Integer.parseInt(value);
2508                            break;
2509                    }
2510                }
2511            }
2512        } catch (NumberFormatException e) {
2513            Log.e(TAG, "readNetworkHistory: failed to read, revert to default, " + e, e);
2514        } catch (EOFException e) {
2515            // do nothing
2516        } catch (IOException e) {
2517            Log.e(TAG, "readNetworkHistory: No config file, revert to default, " + e, e);
2518        }
2519    }
2520
2521    private void readAutoJoinConfig() {
2522        try (BufferedReader reader = new BufferedReader(new FileReader(autoJoinConfigFile))) {
2523            for (String key = reader.readLine(); key != null; key = reader.readLine()) {
2524                Log.d(TAG, "readAutoJoinConfig line: " + key);
2525
2526                int split = key.indexOf(':');
2527                if (split < 0) {
2528                    continue;
2529                }
2530
2531                String name = key.substring(0, split);
2532                Object reference = sKeyMap.get(name);
2533                if (reference == null) {
2534                    continue;
2535                }
2536
2537                try {
2538                    int value = Integer.parseInt(key.substring(split+1).trim());
2539                    if (reference.getClass() == AtomicBoolean.class) {
2540                        ((AtomicBoolean)reference).set(value != 0);
2541                    }
2542                    else {
2543                        ((AtomicInteger)reference).set(value);
2544                    }
2545                    Log.d(TAG,"readAutoJoinConfig: " + name + " = " + value);
2546                }
2547                catch (NumberFormatException nfe) {
2548                    Log.d(TAG,"readAutoJoinConfig: incorrect format :" + key);
2549                }
2550            }
2551        } catch (IOException e) {
2552            loge("readAutoJoinStatus: Error parsing configuration" + e);
2553        }
2554    }
2555
2556
2557    private void writeIpAndProxyConfigurations() {
2558        final SparseArray<IpConfiguration> networks = new SparseArray<IpConfiguration>();
2559        for(WifiConfiguration config : mConfiguredNetworks.values()) {
2560            if (!config.ephemeral && config.autoJoinStatus != WifiConfiguration.AUTO_JOIN_DELETED) {
2561                networks.put(configKey(config), config.getIpConfiguration());
2562            }
2563        }
2564
2565        super.writeIpAndProxyConfigurations(ipConfigFile, networks);
2566    }
2567
2568    private void readIpAndProxyConfigurations() {
2569        SparseArray<IpConfiguration> networks = super.readIpAndProxyConfigurations(ipConfigFile);
2570
2571        if (networks == null || networks.size() == 0) {
2572            // IpConfigStore.readIpAndProxyConfigurations has already logged an error.
2573            return;
2574        }
2575
2576        for (int i = 0; i < networks.size(); i++) {
2577            int id = networks.keyAt(i);
2578            WifiConfiguration config = mConfiguredNetworks.getByConfigKeyID(id);
2579            // This is the only place the map is looked up through a (dangerous) hash-value!
2580
2581            if (config == null || config.autoJoinStatus == WifiConfiguration.AUTO_JOIN_DELETED ||
2582                    config.ephemeral) {
2583                loge("configuration found for missing network, nid=" + id
2584                        +", ignored, networks.size=" + Integer.toString(networks.size()));
2585            } else {
2586                config.setIpConfiguration(networks.valueAt(i));
2587            }
2588        }
2589    }
2590
2591    /*
2592     * Convert string to Hexadecimal before passing to wifi native layer
2593     * In native function "doCommand()" have trouble in converting Unicode character string to UTF8
2594     * conversion to hex is required because SSIDs can have space characters in them;
2595     * and that can confuses the supplicant because it uses space charaters as delimiters
2596     */
2597
2598    public static String encodeSSID(String str){
2599        return Utils.toHex(removeDoubleQuotes(str).getBytes(StandardCharsets.UTF_8));
2600    }
2601
2602    private NetworkUpdateResult addOrUpdateNetworkNative(WifiConfiguration config, int uid) {
2603        /*
2604         * If the supplied networkId is INVALID_NETWORK_ID, we create a new empty
2605         * network configuration. Otherwise, the networkId should
2606         * refer to an existing configuration.
2607         */
2608
2609        if (VDBG) localLog("addOrUpdateNetworkNative " + config.getPrintableSsid());
2610        if (config.isPasspoint() && !mMOManager.isEnabled()) {
2611            Log.e(TAG, "Passpoint is not enabled");
2612            return new NetworkUpdateResult(INVALID_NETWORK_ID);
2613        }
2614
2615        int netId = config.networkId;
2616        boolean newNetwork = false;
2617        // networkId of INVALID_NETWORK_ID means we want to create a new network
2618        if (netId == INVALID_NETWORK_ID) {
2619            WifiConfiguration savedConfig = mConfiguredNetworks.getByConfigKey(config.configKey());
2620            if (savedConfig != null) {
2621                netId = savedConfig.networkId;
2622            } else {
2623                if (mMOManager.getHomeSP(config.FQDN) != null) {
2624                    loge("addOrUpdateNetworkNative passpoint " + config.FQDN
2625                            + " was found, but no network Id");
2626                }
2627                newNetwork = true;
2628                netId = mWifiNative.addNetwork();
2629                if (netId < 0) {
2630                    loge("Failed to add a network!");
2631                    return new NetworkUpdateResult(INVALID_NETWORK_ID);
2632                } else {
2633                    loge("addOrUpdateNetworkNative created netId=" + netId);
2634                }
2635            }
2636        }
2637
2638        boolean updateFailed = true;
2639
2640        setVariables: {
2641
2642            if (config.SSID != null &&
2643                    !mWifiNative.setNetworkVariable(
2644                        netId,
2645                        WifiConfiguration.ssidVarName,
2646                        encodeSSID(config.SSID))) {
2647                loge("failed to set SSID: "+config.SSID);
2648                break setVariables;
2649            }
2650
2651            if (config.isPasspoint()) {
2652                if (!mWifiNative.setNetworkVariable(
2653                            netId,
2654                            idStringVarName,
2655                            '"' + config.FQDN + '"')) {
2656                    loge("failed to set id_str: " + config.FQDN);
2657                    break setVariables;
2658                }
2659            } else {
2660                log("Config is : " + config);
2661            }
2662
2663            if (config.BSSID != null) {
2664                log("Setting BSSID for " + config.configKey() + " to " + config.BSSID);
2665                if (!mWifiNative.setNetworkVariable(
2666                        netId,
2667                        WifiConfiguration.bssidVarName,
2668                        config.BSSID)) {
2669                    loge("failed to set BSSID: " + config.BSSID);
2670                    break setVariables;
2671                }
2672            }
2673
2674            String allowedKeyManagementString =
2675                makeString(config.allowedKeyManagement, WifiConfiguration.KeyMgmt.strings);
2676            if (config.allowedKeyManagement.cardinality() != 0 &&
2677                    !mWifiNative.setNetworkVariable(
2678                        netId,
2679                        WifiConfiguration.KeyMgmt.varName,
2680                        allowedKeyManagementString)) {
2681                loge("failed to set key_mgmt: "+
2682                        allowedKeyManagementString);
2683                break setVariables;
2684            }
2685
2686            String allowedProtocolsString =
2687                makeString(config.allowedProtocols, WifiConfiguration.Protocol.strings);
2688            if (config.allowedProtocols.cardinality() != 0 &&
2689                    !mWifiNative.setNetworkVariable(
2690                        netId,
2691                        WifiConfiguration.Protocol.varName,
2692                        allowedProtocolsString)) {
2693                loge("failed to set proto: "+
2694                        allowedProtocolsString);
2695                break setVariables;
2696            }
2697
2698            String allowedAuthAlgorithmsString =
2699                makeString(config.allowedAuthAlgorithms, WifiConfiguration.AuthAlgorithm.strings);
2700            if (config.allowedAuthAlgorithms.cardinality() != 0 &&
2701                    !mWifiNative.setNetworkVariable(
2702                        netId,
2703                        WifiConfiguration.AuthAlgorithm.varName,
2704                        allowedAuthAlgorithmsString)) {
2705                loge("failed to set auth_alg: "+
2706                        allowedAuthAlgorithmsString);
2707                break setVariables;
2708            }
2709
2710            String allowedPairwiseCiphersString =
2711                    makeString(config.allowedPairwiseCiphers,
2712                    WifiConfiguration.PairwiseCipher.strings);
2713            if (config.allowedPairwiseCiphers.cardinality() != 0 &&
2714                    !mWifiNative.setNetworkVariable(
2715                        netId,
2716                        WifiConfiguration.PairwiseCipher.varName,
2717                        allowedPairwiseCiphersString)) {
2718                loge("failed to set pairwise: "+
2719                        allowedPairwiseCiphersString);
2720                break setVariables;
2721            }
2722
2723            String allowedGroupCiphersString =
2724                makeString(config.allowedGroupCiphers, WifiConfiguration.GroupCipher.strings);
2725            if (config.allowedGroupCiphers.cardinality() != 0 &&
2726                    !mWifiNative.setNetworkVariable(
2727                        netId,
2728                        WifiConfiguration.GroupCipher.varName,
2729                        allowedGroupCiphersString)) {
2730                loge("failed to set group: "+
2731                        allowedGroupCiphersString);
2732                break setVariables;
2733            }
2734
2735            // Prevent client screw-up by passing in a WifiConfiguration we gave it
2736            // by preventing "*" as a key.
2737            if (config.preSharedKey != null && !config.preSharedKey.equals("*") &&
2738                    !mWifiNative.setNetworkVariable(
2739                        netId,
2740                        WifiConfiguration.pskVarName,
2741                        config.preSharedKey)) {
2742                loge("failed to set psk");
2743                break setVariables;
2744            }
2745
2746            boolean hasSetKey = false;
2747            if (config.wepKeys != null) {
2748                for (int i = 0; i < config.wepKeys.length; i++) {
2749                    // Prevent client screw-up by passing in a WifiConfiguration we gave it
2750                    // by preventing "*" as a key.
2751                    if (config.wepKeys[i] != null && !config.wepKeys[i].equals("*")) {
2752                        if (!mWifiNative.setNetworkVariable(
2753                                    netId,
2754                                    WifiConfiguration.wepKeyVarNames[i],
2755                                    config.wepKeys[i])) {
2756                            loge("failed to set wep_key" + i + ": " + config.wepKeys[i]);
2757                            break setVariables;
2758                        }
2759                        hasSetKey = true;
2760                    }
2761                }
2762            }
2763
2764            if (hasSetKey) {
2765                if (!mWifiNative.setNetworkVariable(
2766                            netId,
2767                            WifiConfiguration.wepTxKeyIdxVarName,
2768                            Integer.toString(config.wepTxKeyIndex))) {
2769                    loge("failed to set wep_tx_keyidx: " + config.wepTxKeyIndex);
2770                    break setVariables;
2771                }
2772            }
2773
2774            if (!mWifiNative.setNetworkVariable(
2775                        netId,
2776                        WifiConfiguration.priorityVarName,
2777                        Integer.toString(config.priority))) {
2778                loge(config.SSID + ": failed to set priority: "
2779                        +config.priority);
2780                break setVariables;
2781            }
2782
2783            if (config.hiddenSSID && !mWifiNative.setNetworkVariable(
2784                        netId,
2785                        WifiConfiguration.hiddenSSIDVarName,
2786                        Integer.toString(config.hiddenSSID ? 1 : 0))) {
2787                loge(config.SSID + ": failed to set hiddenSSID: "+
2788                        config.hiddenSSID);
2789                break setVariables;
2790            }
2791
2792            if (config.requirePMF && !mWifiNative.setNetworkVariable(
2793                        netId,
2794                        WifiConfiguration.pmfVarName,
2795                        "2")) {
2796                loge(config.SSID + ": failed to set requirePMF: "+
2797                        config.requirePMF);
2798                break setVariables;
2799            }
2800
2801            if (config.updateIdentifier != null && !mWifiNative.setNetworkVariable(
2802                    netId,
2803                    WifiConfiguration.updateIdentiferVarName,
2804                    config.updateIdentifier)) {
2805                loge(config.SSID + ": failed to set updateIdentifier: "+
2806                        config.updateIdentifier);
2807                break setVariables;
2808            }
2809
2810            if (config.enterpriseConfig != null &&
2811                    config.enterpriseConfig.getEapMethod() != WifiEnterpriseConfig.Eap.NONE) {
2812
2813                WifiEnterpriseConfig enterpriseConfig = config.enterpriseConfig;
2814
2815                if (needsKeyStore(enterpriseConfig)) {
2816                    /**
2817                     * Keyguard settings may eventually be controlled by device policy.
2818                     * We check here if keystore is unlocked before installing
2819                     * credentials.
2820                     * TODO: Do we need a dialog here ?
2821                     */
2822                    if (mKeyStore.state() != KeyStore.State.UNLOCKED) {
2823                        loge(config.SSID + ": key store is locked");
2824                        break setVariables;
2825                    }
2826
2827                    try {
2828                        /* config passed may include only fields being updated.
2829                         * In order to generate the key id, fetch uninitialized
2830                         * fields from the currently tracked configuration
2831                         */
2832                        WifiConfiguration currentConfig = mConfiguredNetworks.get(netId);
2833                        String keyId = config.getKeyIdForCredentials(currentConfig);
2834
2835                        if (!installKeys(enterpriseConfig, keyId)) {
2836                            loge(config.SSID + ": failed to install keys");
2837                            break setVariables;
2838                        }
2839                    } catch (IllegalStateException e) {
2840                        loge(config.SSID + " invalid config for key installation");
2841                        break setVariables;
2842                    }
2843                }
2844
2845                HashMap<String, String> enterpriseFields = enterpriseConfig.getFields();
2846                for (String key : enterpriseFields.keySet()) {
2847                        String value = enterpriseFields.get(key);
2848                        if (key.equals("password") && value != null && value.equals("*")) {
2849                            // No need to try to set an obfuscated password, which will fail
2850                            continue;
2851                        }
2852                        if (key.equals(WifiEnterpriseConfig.REALM_KEY)
2853                                || key.equals(WifiEnterpriseConfig.PLMN_KEY)) {
2854                            // No need to save realm or PLMN in supplicant
2855                            continue;
2856                        }
2857                        if (!mWifiNative.setNetworkVariable(
2858                                    netId,
2859                                    key,
2860                                    value)) {
2861                            removeKeys(enterpriseConfig);
2862                            loge(config.SSID + ": failed to set " + key +
2863                                    ": " + value);
2864                            break setVariables;
2865                        }
2866                }
2867            }
2868            updateFailed = false;
2869        } // End of setVariables
2870
2871        if (updateFailed) {
2872            if (newNetwork) {
2873                mWifiNative.removeNetwork(netId);
2874                loge("Failed to set a network variable, removed network: " + netId);
2875            }
2876            return new NetworkUpdateResult(INVALID_NETWORK_ID);
2877        }
2878
2879        /* An update of the network variables requires reading them
2880         * back from the supplicant to update mConfiguredNetworks.
2881         * This is because some of the variables (SSID, wep keys &
2882         * passphrases) reflect different values when read back than
2883         * when written. For example, wep key is stored as * irrespective
2884         * of the value sent to the supplicant
2885         */
2886        WifiConfiguration currentConfig = mConfiguredNetworks.get(netId);
2887        if (currentConfig == null) {
2888            currentConfig = new WifiConfiguration();
2889            currentConfig.setIpAssignment(IpAssignment.DHCP);
2890            currentConfig.setProxySettings(ProxySettings.NONE);
2891            currentConfig.networkId = netId;
2892            if (config != null) {
2893                // Carry over the creation parameters
2894                currentConfig.selfAdded = config.selfAdded;
2895                currentConfig.didSelfAdd = config.didSelfAdd;
2896                currentConfig.ephemeral = config.ephemeral;
2897                currentConfig.autoJoinUseAggressiveJoinAttemptThreshold
2898                        = config.autoJoinUseAggressiveJoinAttemptThreshold;
2899                currentConfig.lastConnectUid = config.lastConnectUid;
2900                currentConfig.lastUpdateUid = config.lastUpdateUid;
2901                currentConfig.creatorUid = config.creatorUid;
2902                currentConfig.creatorName = config.creatorName;
2903                currentConfig.lastUpdateName = config.lastUpdateName;
2904                currentConfig.peerWifiConfiguration = config.peerWifiConfiguration;
2905                currentConfig.FQDN = config.FQDN;
2906                currentConfig.providerFriendlyName = config.providerFriendlyName;
2907                currentConfig.roamingConsortiumIds = config.roamingConsortiumIds;
2908                currentConfig.validatedInternetAccess = config.validatedInternetAccess;
2909                currentConfig.numNoInternetAccessReports = config.numNoInternetAccessReports;
2910                currentConfig.updateTime = config.updateTime;
2911                currentConfig.creationTime = config.creationTime;
2912            }
2913            if (DBG) {
2914                log("created new config netId=" + Integer.toString(netId)
2915                        + " uid=" + Integer.toString(currentConfig.creatorUid)
2916                        + " name=" + currentConfig.creatorName);
2917            }
2918        }
2919
2920        /* save HomeSP object for passpoint networks */
2921        HomeSP homeSP = null;
2922
2923        if (config.isPasspoint()) {
2924            try {
2925                Credential credential =
2926                        new Credential(config.enterpriseConfig, mKeyStore, !newNetwork);
2927                HashSet<Long> roamingConsortiumIds = new HashSet<Long>();
2928                for (Long roamingConsortiumId : config.roamingConsortiumIds) {
2929                    roamingConsortiumIds.add(roamingConsortiumId);
2930                }
2931
2932                homeSP = new HomeSP(Collections.<String, Long>emptyMap(), config.FQDN,
2933                        roamingConsortiumIds, Collections.<String>emptySet(),
2934                        Collections.<Long>emptySet(), Collections.<Long>emptyList(),
2935                        config.providerFriendlyName, null, credential);
2936
2937                log("created a homeSP object for " + config.networkId + ":" + config.SSID);
2938
2939                /* fix enterprise config properties for passpoint */
2940                currentConfig.enterpriseConfig.setRealm(config.enterpriseConfig.getRealm());
2941                currentConfig.enterpriseConfig.setPlmn(config.enterpriseConfig.getPlmn());
2942            }
2943            catch (IOException ioe) {
2944                Log.e(TAG, "Failed to create Passpoint config: " + ioe);
2945                return new NetworkUpdateResult(INVALID_NETWORK_ID);
2946            }
2947        }
2948
2949        if (uid != WifiConfiguration.UNKNOWN_UID) {
2950            if (newNetwork) {
2951                currentConfig.creatorUid = uid;
2952            } else {
2953                currentConfig.lastUpdateUid = uid;
2954            }
2955        }
2956
2957        // For debug, record the time the configuration was modified
2958        StringBuilder sb = new StringBuilder();
2959        sb.append("time=");
2960        Calendar c = Calendar.getInstance();
2961        c.setTimeInMillis(System.currentTimeMillis());
2962        sb.append(String.format("%tm-%td %tH:%tM:%tS.%tL", c, c, c, c, c, c));
2963
2964        if (newNetwork) {
2965            currentConfig.dirty = true;
2966            currentConfig.creationTime = sb.toString();
2967        } else {
2968            currentConfig.updateTime = sb.toString();
2969        }
2970
2971        if (currentConfig.autoJoinStatus == WifiConfiguration.AUTO_JOIN_DELETED) {
2972            // Make sure the configuration is not deleted anymore since we just
2973            // added or modified it.
2974            currentConfig.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_ENABLED);
2975            currentConfig.selfAdded = false;
2976            currentConfig.didSelfAdd = false;
2977            if (DBG) {
2978                log("remove deleted status netId=" + Integer.toString(netId)
2979                        + " " + currentConfig.configKey());
2980            }
2981        }
2982
2983        if (currentConfig.status == WifiConfiguration.Status.ENABLED) {
2984            // Make sure autojoin remain in sync with user modifying the configuration
2985            currentConfig.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_ENABLED);
2986        }
2987
2988        if (currentConfig.configKey().equals(getLastSelectedConfiguration()) &&
2989                currentConfig.ephemeral) {
2990            // Make the config non-ephemeral since the user just explicitly clicked it.
2991            currentConfig.ephemeral = false;
2992            if (DBG) log("remove ephemeral status netId=" + Integer.toString(netId)
2993                    + " " + currentConfig.configKey());
2994        }
2995
2996        if (DBG) log("will read network variables netId=" + Integer.toString(netId));
2997
2998        readNetworkVariables(currentConfig);
2999
3000        // Persist configuration paramaters that are not saved by supplicant.
3001        if (config.lastUpdateName != null) {
3002            currentConfig.lastUpdateName = config.lastUpdateName;
3003        }
3004        if (config.lastUpdateUid != WifiConfiguration.UNKNOWN_UID) {
3005            currentConfig.lastUpdateUid = config.lastUpdateUid;
3006        }
3007
3008        mConfiguredNetworks.put(netId, currentConfig);
3009
3010        NetworkUpdateResult result = writeIpAndProxyConfigurationsOnChange(currentConfig, config);
3011        result.setIsNewNetwork(newNetwork);
3012        result.setNetworkId(netId);
3013
3014        if (homeSP != null) {
3015            writePasspointConfigs(null, homeSP);
3016        }
3017        writeKnownNetworkHistory(false);
3018
3019        return result;
3020    }
3021
3022    public WifiConfiguration getWifiConfigForHomeSP(HomeSP homeSP) {
3023        WifiConfiguration config = mConfiguredNetworks.getByFQDN(homeSP.getFQDN());
3024        if (config == null) {
3025            Log.e(TAG, "Could not find network for homeSP " + homeSP.getFQDN());
3026        }
3027        return config;
3028    }
3029
3030    private HomeSP getHomeSPForConfig(WifiConfiguration config) {
3031        WifiConfiguration storedConfig = mConfiguredNetworks.get(config.networkId);
3032        return storedConfig != null && storedConfig.isPasspoint() ?
3033                mMOManager.getHomeSP(storedConfig.FQDN) : null;
3034    }
3035
3036    public ScanDetailCache getScanDetailCache(WifiConfiguration config) {
3037        if (config == null) return null;
3038        ScanDetailCache cache = mScanDetailCaches.get(config.networkId);
3039        if (cache == null && config.networkId != WifiConfiguration.INVALID_NETWORK_ID) {
3040            cache = new ScanDetailCache(config);
3041            mScanDetailCaches.put(config.networkId, cache);
3042        }
3043        return cache;
3044    }
3045
3046    /**
3047     * This function run thru the Saved WifiConfigurations and check if some should be linked.
3048     * @param config
3049     */
3050    public void linkConfiguration(WifiConfiguration config) {
3051
3052        if (getScanDetailCache(config) != null && getScanDetailCache(config).size() > 6) {
3053            // Ignore configurations with large number of BSSIDs
3054            return;
3055        }
3056        if (!config.allowedKeyManagement.get(KeyMgmt.WPA_PSK)) {
3057            // Only link WPA_PSK config
3058            return;
3059        }
3060        for (WifiConfiguration link : mConfiguredNetworks.values()) {
3061            boolean doLink = false;
3062
3063            if (link.configKey().equals(config.configKey())) {
3064                continue;
3065            }
3066
3067            if (link.autoJoinStatus == WifiConfiguration.AUTO_JOIN_DELETED || link.ephemeral) {
3068                continue;
3069            }
3070
3071            // Autojoin will be allowed to dynamically jump from a linked configuration
3072            // to another, hence only link configurations that have equivalent level of security
3073            if (!link.allowedKeyManagement.equals(config.allowedKeyManagement)) {
3074                continue;
3075            }
3076
3077            ScanDetailCache linkedScanDetailCache = getScanDetailCache(link);
3078            if (linkedScanDetailCache != null && linkedScanDetailCache.size() > 6) {
3079                // Ignore configurations with large number of BSSIDs
3080                continue;
3081            }
3082
3083            if (config.defaultGwMacAddress != null && link.defaultGwMacAddress != null) {
3084                // If both default GW are known, link only if they are equal
3085                if (config.defaultGwMacAddress.equals(link.defaultGwMacAddress)) {
3086                    if (VDBG) {
3087                        loge("linkConfiguration link due to same gw " + link.SSID +
3088                                " and " + config.SSID + " GW " + config.defaultGwMacAddress);
3089                    }
3090                    doLink = true;
3091                }
3092            } else {
3093                // We do not know BOTH default gateways hence we will try to link
3094                // hoping that WifiConfigurations are indeed behind the same gateway.
3095                // once both WifiConfiguration have been tried and thus once both efault gateways
3096                // are known we will revisit the choice of linking them
3097                if ((getScanDetailCache(config) != null)
3098                        && (getScanDetailCache(config).size() <= 6)) {
3099
3100                    for (String abssid : getScanDetailCache(config).keySet()) {
3101                        for (String bbssid : linkedScanDetailCache.keySet()) {
3102                            if (VVDBG) {
3103                                loge("linkConfiguration try to link due to DBDC BSSID match "
3104                                        + link.SSID +
3105                                        " and " + config.SSID + " bssida " + abssid
3106                                        + " bssidb " + bbssid);
3107                            }
3108                            if (abssid.regionMatches(true, 0, bbssid, 0, 16)) {
3109                                // If first 16 ascii characters of BSSID matches,
3110                                // we assume this is a DBDC
3111                                doLink = true;
3112                            }
3113                        }
3114                    }
3115                }
3116            }
3117
3118            if (doLink == true && onlyLinkSameCredentialConfigurations) {
3119                String apsk = readNetworkVariableFromSupplicantFile(link.SSID, "psk");
3120                String bpsk = readNetworkVariableFromSupplicantFile(config.SSID, "psk");
3121                if (apsk == null || bpsk == null
3122                        || TextUtils.isEmpty(apsk) || TextUtils.isEmpty(apsk)
3123                        || apsk.equals("*") || apsk.equals(DELETED_CONFIG_PSK)
3124                        || !apsk.equals(bpsk)) {
3125                    doLink = false;
3126                }
3127            }
3128
3129            if (doLink) {
3130                if (VDBG) {
3131                    loge("linkConfiguration: will link " + link.configKey()
3132                            + " and " + config.configKey());
3133                }
3134                if (link.linkedConfigurations == null) {
3135                    link.linkedConfigurations = new HashMap<String, Integer>();
3136                }
3137                if (config.linkedConfigurations == null) {
3138                    config.linkedConfigurations = new HashMap<String, Integer>();
3139                }
3140                if (link.linkedConfigurations.get(config.configKey()) == null) {
3141                    link.linkedConfigurations.put(config.configKey(), Integer.valueOf(1));
3142                    link.dirty = true;
3143                }
3144                if (config.linkedConfigurations.get(link.configKey()) == null) {
3145                    config.linkedConfigurations.put(link.configKey(), Integer.valueOf(1));
3146                    config.dirty = true;
3147                }
3148            } else {
3149                if (link.linkedConfigurations != null
3150                        && (link.linkedConfigurations.get(config.configKey()) != null)) {
3151                    if (VDBG) {
3152                        loge("linkConfiguration: un-link " + config.configKey()
3153                                + " from " + link.configKey());
3154                    }
3155                    link.dirty = true;
3156                    link.linkedConfigurations.remove(config.configKey());
3157                }
3158                if (config.linkedConfigurations != null
3159                        && (config.linkedConfigurations.get(link.configKey()) != null)) {
3160                    if (VDBG) {
3161                        loge("linkConfiguration: un-link " + link.configKey()
3162                                + " from " + config.configKey());
3163                    }
3164                    config.dirty = true;
3165                    config.linkedConfigurations.remove(link.configKey());
3166                }
3167            }
3168        }
3169    }
3170
3171    public HashSet<Integer> makeChannelList(WifiConfiguration config, int age, boolean restrict) {
3172        if (config == null)
3173            return null;
3174        long now_ms = System.currentTimeMillis();
3175
3176        HashSet<Integer> channels = new HashSet<Integer>();
3177
3178        //get channels for this configuration, if there are at least 2 BSSIDs
3179        if (getScanDetailCache(config) == null && config.linkedConfigurations == null) {
3180            return null;
3181        }
3182
3183        if (VDBG) {
3184            StringBuilder dbg = new StringBuilder();
3185            dbg.append("makeChannelList age=" + Integer.toString(age)
3186                    + " for " + config.configKey()
3187                    + " max=" + maxNumActiveChannelsForPartialScans);
3188            if (getScanDetailCache(config) != null) {
3189                dbg.append(" bssids=" + getScanDetailCache(config).size());
3190            }
3191            if (config.linkedConfigurations != null) {
3192                dbg.append(" linked=" + config.linkedConfigurations.size());
3193            }
3194            loge(dbg.toString());
3195        }
3196
3197        int numChannels = 0;
3198        if (getScanDetailCache(config) != null && getScanDetailCache(config).size() > 0) {
3199            for (ScanDetail scanDetail : getScanDetailCache(config).values()) {
3200                ScanResult result = scanDetail.getScanResult();
3201                //TODO : cout active and passive channels separately
3202                if (numChannels > maxNumActiveChannelsForPartialScans.get()) {
3203                    break;
3204                }
3205                if (VDBG) {
3206                    boolean test = (now_ms - result.seen) < age;
3207                    loge("has " + result.BSSID + " freq=" + Integer.toString(result.frequency)
3208                            + " age=" + Long.toString(now_ms - result.seen) + " ?=" + test);
3209                }
3210                if (((now_ms - result.seen) < age)/*||(!restrict || result.is24GHz())*/) {
3211                    channels.add(result.frequency);
3212                    numChannels++;
3213                }
3214            }
3215        }
3216
3217        //get channels for linked configurations
3218        if (config.linkedConfigurations != null) {
3219            for (String key : config.linkedConfigurations.keySet()) {
3220                WifiConfiguration linked = getWifiConfiguration(key);
3221                if (linked == null)
3222                    continue;
3223                if (getScanDetailCache(linked) == null) {
3224                    continue;
3225                }
3226                for (ScanDetail scanDetail : getScanDetailCache(linked).values()) {
3227                    ScanResult result = scanDetail.getScanResult();
3228                    if (VDBG) {
3229                        loge("has link: " + result.BSSID
3230                                + " freq=" + Integer.toString(result.frequency)
3231                                + " age=" + Long.toString(now_ms - result.seen));
3232                    }
3233                    if (numChannels > maxNumActiveChannelsForPartialScans.get()) {
3234                        break;
3235                    }
3236                    if (((now_ms - result.seen) < age)/*||(!restrict || result.is24GHz())*/) {
3237                        channels.add(result.frequency);
3238                        numChannels++;
3239                    }
3240                }
3241            }
3242        }
3243        return channels;
3244    }
3245
3246    private Map<HomeSP, PasspointMatch> matchPasspointNetworks(ScanDetail scanDetail) {
3247        if (!mMOManager.isConfigured()) {
3248            return null;
3249        }
3250        NetworkDetail networkDetail = scanDetail.getNetworkDetail();
3251        if (!networkDetail.hasInterworking()) {
3252            return null;
3253        }
3254        updateAnqpCache(scanDetail, networkDetail.getANQPElements());
3255
3256        Map<HomeSP, PasspointMatch> matches = matchNetwork(scanDetail, true);
3257        Log.d(Utils.hs2LogTag(getClass()), scanDetail.getSSID() +
3258                " pass 1 matches: " + toMatchString(matches));
3259        return matches;
3260    }
3261
3262    private Map<HomeSP, PasspointMatch> matchNetwork(ScanDetail scanDetail, boolean query) {
3263        NetworkDetail networkDetail = scanDetail.getNetworkDetail();
3264
3265        ANQPData anqpData = mAnqpCache.getEntry(networkDetail);
3266
3267        Map<Constants.ANQPElementType, ANQPElement> anqpElements =
3268                anqpData != null ? anqpData.getANQPElements() : null;
3269
3270        boolean queried = !query;
3271        Collection<HomeSP> homeSPs = mMOManager.getLoadedSPs().values();
3272        Map<HomeSP, PasspointMatch> matches = new HashMap<>(homeSPs.size());
3273        Log.d(Utils.hs2LogTag(getClass()), "match nwk " + scanDetail.toKeyString() +
3274                ", anqp " + ( anqpData != null ? "present" : "missing" ) +
3275                ", query " + query + ", home sps: " + homeSPs.size());
3276
3277        for (HomeSP homeSP : homeSPs) {
3278            PasspointMatch match = homeSP.match(networkDetail, anqpElements, mSIMAccessor);
3279
3280            Log.d(Utils.hs2LogTag(getClass()), " -- " +
3281                    homeSP.getFQDN() + ": match " + match + ", queried " + queried);
3282
3283            if (match == PasspointMatch.Incomplete && !queried) {
3284                if (mAnqpCache.initiate(networkDetail)) {
3285                    mSupplicantBridge.startANQP(scanDetail);
3286                }
3287                queried = true;
3288            }
3289            matches.put(homeSP, match);
3290        }
3291        return matches;
3292    }
3293
3294    public void notifyANQPDone(Long bssid, boolean success) {
3295        mSupplicantBridge.notifyANQPDone(bssid, success);
3296    }
3297
3298    public void notifyANQPResponse(ScanDetail scanDetail,
3299                                   Map<Constants.ANQPElementType, ANQPElement> anqpElements) {
3300
3301        updateAnqpCache(scanDetail, anqpElements);
3302        if (anqpElements == null || anqpElements.isEmpty()) {
3303            return;
3304        }
3305        scanDetail.propagateANQPInfo(anqpElements);
3306
3307        Map<HomeSP, PasspointMatch> matches = matchNetwork(scanDetail, false);
3308        Log.d(Utils.hs2LogTag(getClass()), scanDetail.getSSID() +
3309                " pass 2 matches: " + toMatchString(matches));
3310
3311        cacheScanResultForPasspointConfigs(scanDetail, matches);
3312    }
3313
3314
3315    private void updateAnqpCache(ScanDetail scanDetail,
3316                                 Map<Constants.ANQPElementType,ANQPElement> anqpElements)
3317    {
3318        NetworkDetail networkDetail = scanDetail.getNetworkDetail();
3319
3320        if (anqpElements == null) {
3321            // Try to pull cached data if query failed.
3322            ANQPData data = mAnqpCache.getEntry(networkDetail);
3323            if (data != null) {
3324                scanDetail.propagateANQPInfo(data.getANQPElements());
3325            }
3326            return;
3327        }
3328
3329        mAnqpCache.update(networkDetail, anqpElements);
3330    }
3331
3332    private static String toMatchString(Map<HomeSP, PasspointMatch> matches) {
3333        StringBuilder sb = new StringBuilder();
3334        for (Map.Entry<HomeSP, PasspointMatch> entry : matches.entrySet()) {
3335            sb.append(' ').append(entry.getKey().getFQDN()).append("->").append(entry.getValue());
3336        }
3337        return sb.toString();
3338    }
3339
3340    private void cacheScanResultForPasspointConfigs(ScanDetail scanDetail,
3341                                           Map<HomeSP,PasspointMatch> matches) {
3342
3343        for (Map.Entry<HomeSP, PasspointMatch> entry : matches.entrySet()) {
3344            PasspointMatch match = entry.getValue();
3345            if (match == PasspointMatch.HomeProvider || match == PasspointMatch.RoamingProvider) {
3346                WifiConfiguration config = getWifiConfigForHomeSP(entry.getKey());
3347                if (config != null) {
3348                    cacheScanResultForConfig(config, scanDetail, entry.getValue());
3349                } else {
3350		            Log.w(Utils.hs2LogTag(getClass()), "Failed to find config for '" +
3351                            entry.getKey().getFQDN() + "'");
3352                    /* perhaps the configuration was deleted?? */
3353                }
3354            }
3355        }
3356    }
3357
3358    private void cacheScanResultForConfig(
3359            WifiConfiguration config, ScanDetail scanDetail, PasspointMatch passpointMatch) {
3360
3361        ScanResult scanResult = scanDetail.getScanResult();
3362
3363        if (config.autoJoinStatus >= WifiConfiguration.AUTO_JOIN_DELETED) {
3364            if (VVDBG) {
3365                loge("updateSavedNetworkHistory(): found a deleted, skip it...  "
3366                        + config.configKey());
3367            }
3368            // The scan result belongs to a deleted config:
3369            //   - increment numConfigFound to remember that we found a config
3370            //            matching for this scan result
3371            //   - dont do anything since the config was deleted, just skip...
3372            return;
3373        }
3374
3375        ScanDetailCache scanDetailCache = getScanDetailCache(config);
3376        if (scanDetailCache == null) {
3377            Log.w(TAG, "Could not allocate scan cache for " + config.SSID);
3378            return;
3379        }
3380
3381        // Adding a new BSSID
3382        ScanResult result = scanDetailCache.get(scanResult.BSSID);
3383        if (result != null) {
3384            // transfer the black list status
3385            scanResult.autoJoinStatus = result.autoJoinStatus;
3386            scanResult.blackListTimestamp = result.blackListTimestamp;
3387            scanResult.numIpConfigFailures = result.numIpConfigFailures;
3388            scanResult.numConnection = result.numConnection;
3389            scanResult.isAutoJoinCandidate = result.isAutoJoinCandidate;
3390        }
3391
3392        if (config.ephemeral) {
3393            // For an ephemeral Wi-Fi config, the ScanResult should be considered
3394            // untrusted.
3395            scanResult.untrusted = true;
3396        }
3397
3398        if (scanDetailCache.size() > (maxNumScanCacheEntries + 64)) {
3399            long now_dbg = 0;
3400            if (VVDBG) {
3401                loge(" Will trim config " + config.configKey()
3402                        + " size " + scanDetailCache.size());
3403
3404                for (ScanDetail sd : scanDetailCache.values()) {
3405                    loge("     " + sd.getBSSIDString() + " " + sd.getSeen());
3406                }
3407                now_dbg = SystemClock.elapsedRealtimeNanos();
3408            }
3409            // Trim the scan result cache to maxNumScanCacheEntries entries max
3410            // Since this operation is expensive, make sure it is not performed
3411            // until the cache has grown significantly above the trim treshold
3412            scanDetailCache.trim(maxNumScanCacheEntries);
3413            if (VVDBG) {
3414                long diff = SystemClock.elapsedRealtimeNanos() - now_dbg;
3415                loge(" Finished trimming config, time(ns) " + diff);
3416                for (ScanDetail sd : scanDetailCache.values()) {
3417                    loge("     " + sd.getBSSIDString() + " " + sd.getSeen());
3418                }
3419            }
3420        }
3421
3422        // Add the scan result to this WifiConfiguration
3423        if (passpointMatch != null)
3424            scanDetailCache.put(scanDetail, passpointMatch, getHomeSPForConfig(config));
3425        else
3426            scanDetailCache.put(scanDetail);
3427
3428        // Since we added a scan result to this configuration, re-attempt linking
3429        linkConfiguration(config);
3430    }
3431
3432
3433    // Update the WifiConfiguration database with the new scan result
3434    // A scan result can be associated to multiple WifiConfigurations
3435    public boolean updateSavedNetworkHistory(ScanDetail scanDetail) {
3436
3437        ScanResult scanResult = scanDetail.getScanResult();
3438        NetworkDetail networkDetail = scanDetail.getNetworkDetail();
3439
3440        int numConfigFound = 0;
3441        if (scanResult == null)
3442            return false;
3443
3444        String SSID = "\"" + scanResult.SSID + "\"";
3445
3446        if (networkDetail.hasInterworking()) {
3447            Map<HomeSP, PasspointMatch> matches = matchPasspointNetworks(scanDetail);
3448            if (matches != null) {
3449                cacheScanResultForPasspointConfigs(scanDetail, matches);
3450                return matches.size() != 0;
3451            }
3452        }
3453
3454        for (WifiConfiguration config : mConfiguredNetworks.values()) {
3455            boolean found = false;
3456
3457            if (config.SSID == null || !config.SSID.equals(SSID)) {
3458                // SSID mismatch
3459                if (VVDBG) {
3460                    loge("updateSavedNetworkHistory(): SSID mismatch " + config.configKey()
3461                            + " SSID=" + config.SSID + " " + SSID);
3462                }
3463                continue;
3464            }
3465            if (VDBG) {
3466                loge("updateSavedNetworkHistory(): try " + config.configKey()
3467                        + " SSID=" + config.SSID + " " + scanResult.SSID
3468                        + " " + scanResult.capabilities
3469                        + " ajst=" + config.autoJoinStatus);
3470            }
3471            if (scanResult.capabilities.contains("WEP")
3472                    && config.configKey().contains("WEP")) {
3473                found = true;
3474            } else if (scanResult.capabilities.contains("PSK")
3475                    && config.configKey().contains("PSK")) {
3476                found = true;
3477            } else if (scanResult.capabilities.contains("EAP")
3478                    && config.configKey().contains("EAP")) {
3479                found = true;
3480            } else if (!scanResult.capabilities.contains("WEP")
3481                && !scanResult.capabilities.contains("PSK")
3482                && !scanResult.capabilities.contains("EAP")
3483                && !config.configKey().contains("WEP")
3484                    && !config.configKey().contains("PSK")
3485                    && !config.configKey().contains("EAP")) {
3486                found = true;
3487            }
3488
3489            if (found) {
3490                numConfigFound ++;
3491                cacheScanResultForConfig(config, scanDetail, null);
3492            }
3493
3494            if (VDBG && found) {
3495                String status = "";
3496                if (scanResult.autoJoinStatus > 0) {
3497                    status = " status=" + Integer.toString(scanResult.autoJoinStatus);
3498                }
3499                loge("        got known scan result " +
3500                        scanResult.BSSID + " key : "
3501                        + config.configKey() + " num: " +
3502                        Integer.toString(getScanDetailCache(config).size())
3503                        + " rssi=" + Integer.toString(scanResult.level)
3504                        + " freq=" + Integer.toString(scanResult.frequency)
3505                        + status);
3506            }
3507        }
3508        return numConfigFound != 0;
3509    }
3510
3511    /* Compare current and new configuration and write to file on change */
3512    private NetworkUpdateResult writeIpAndProxyConfigurationsOnChange(
3513            WifiConfiguration currentConfig,
3514            WifiConfiguration newConfig) {
3515        boolean ipChanged = false;
3516        boolean proxyChanged = false;
3517
3518        if (VDBG) {
3519            loge("writeIpAndProxyConfigurationsOnChange: " + currentConfig.SSID + " -> " +
3520                    newConfig.SSID + " path: " + ipConfigFile);
3521        }
3522
3523
3524        switch (newConfig.getIpAssignment()) {
3525            case STATIC:
3526                if (currentConfig.getIpAssignment() != newConfig.getIpAssignment()) {
3527                    ipChanged = true;
3528                } else {
3529                    ipChanged = !Objects.equals(
3530                            currentConfig.getStaticIpConfiguration(),
3531                            newConfig.getStaticIpConfiguration());
3532                }
3533                break;
3534            case DHCP:
3535                if (currentConfig.getIpAssignment() != newConfig.getIpAssignment()) {
3536                    ipChanged = true;
3537                }
3538                break;
3539            case UNASSIGNED:
3540                /* Ignore */
3541                break;
3542            default:
3543                loge("Ignore invalid ip assignment during write");
3544                break;
3545        }
3546
3547        switch (newConfig.getProxySettings()) {
3548            case STATIC:
3549            case PAC:
3550                ProxyInfo newHttpProxy = newConfig.getHttpProxy();
3551                ProxyInfo currentHttpProxy = currentConfig.getHttpProxy();
3552
3553                if (newHttpProxy != null) {
3554                    proxyChanged = !newHttpProxy.equals(currentHttpProxy);
3555                } else {
3556                    proxyChanged = (currentHttpProxy != null);
3557                }
3558                break;
3559            case NONE:
3560                if (currentConfig.getProxySettings() != newConfig.getProxySettings()) {
3561                    proxyChanged = true;
3562                }
3563                break;
3564            case UNASSIGNED:
3565                /* Ignore */
3566                break;
3567            default:
3568                loge("Ignore invalid proxy configuration during write");
3569                break;
3570        }
3571
3572        if (ipChanged) {
3573            currentConfig.setIpAssignment(newConfig.getIpAssignment());
3574            currentConfig.setStaticIpConfiguration(newConfig.getStaticIpConfiguration());
3575            log("IP config changed SSID = " + currentConfig.SSID);
3576            if (currentConfig.getStaticIpConfiguration() != null) {
3577                log(" static configuration: " +
3578                    currentConfig.getStaticIpConfiguration().toString());
3579            }
3580        }
3581
3582        if (proxyChanged) {
3583            currentConfig.setProxySettings(newConfig.getProxySettings());
3584            currentConfig.setHttpProxy(newConfig.getHttpProxy());
3585            log("proxy changed SSID = " + currentConfig.SSID);
3586            if (currentConfig.getHttpProxy() != null) {
3587                log(" proxyProperties: " + currentConfig.getHttpProxy().toString());
3588            }
3589        }
3590
3591        if (ipChanged || proxyChanged) {
3592            writeIpAndProxyConfigurations();
3593            sendConfiguredNetworksChangedBroadcast(currentConfig,
3594                    WifiManager.CHANGE_REASON_CONFIG_CHANGE);
3595        }
3596        return new NetworkUpdateResult(ipChanged, proxyChanged);
3597    }
3598
3599    /** Returns true if a particular config key needs to be quoted when passed to the supplicant. */
3600    private boolean enterpriseConfigKeyShouldBeQuoted(String key) {
3601        switch (key) {
3602            case WifiEnterpriseConfig.EAP_KEY:
3603            case WifiEnterpriseConfig.ENGINE_KEY:
3604                return false;
3605            default:
3606                return true;
3607        }
3608    }
3609
3610    /**
3611     * Read the variables from the supplicant daemon that are needed to
3612     * fill in the WifiConfiguration object.
3613     *
3614     * @param config the {@link WifiConfiguration} object to be filled in.
3615     */
3616    private void readNetworkVariables(WifiConfiguration config) {
3617
3618        int netId = config.networkId;
3619        if (netId < 0)
3620            return;
3621
3622        /*
3623         * TODO: maybe should have a native method that takes an array of
3624         * variable names and returns an array of values. But we'd still
3625         * be doing a round trip to the supplicant daemon for each variable.
3626         */
3627        String value;
3628
3629        value = mWifiNative.getNetworkVariable(netId, WifiConfiguration.ssidVarName);
3630        if (!TextUtils.isEmpty(value)) {
3631            if (value.charAt(0) != '"') {
3632                config.SSID = "\"" + WifiSsid.createFromHex(value).toString() + "\"";
3633                //TODO: convert a hex string that is not UTF-8 decodable to a P-formatted
3634                //supplicant string
3635            } else {
3636                config.SSID = value;
3637            }
3638        } else {
3639            config.SSID = null;
3640        }
3641
3642        value = mWifiNative.getNetworkVariable(netId, WifiConfiguration.bssidVarName);
3643        if (!TextUtils.isEmpty(value)) {
3644            config.BSSID = value;
3645        } else {
3646            config.BSSID = null;
3647        }
3648
3649        value = mWifiNative.getNetworkVariable(netId, WifiConfiguration.priorityVarName);
3650        config.priority = -1;
3651        if (!TextUtils.isEmpty(value)) {
3652            try {
3653                config.priority = Integer.parseInt(value);
3654            } catch (NumberFormatException ignore) {
3655            }
3656        }
3657
3658        value = mWifiNative.getNetworkVariable(netId, WifiConfiguration.hiddenSSIDVarName);
3659        config.hiddenSSID = false;
3660        if (!TextUtils.isEmpty(value)) {
3661            try {
3662                config.hiddenSSID = Integer.parseInt(value) != 0;
3663            } catch (NumberFormatException ignore) {
3664            }
3665        }
3666
3667        value = mWifiNative.getNetworkVariable(netId, WifiConfiguration.wepTxKeyIdxVarName);
3668        config.wepTxKeyIndex = -1;
3669        if (!TextUtils.isEmpty(value)) {
3670            try {
3671                config.wepTxKeyIndex = Integer.parseInt(value);
3672            } catch (NumberFormatException ignore) {
3673            }
3674        }
3675
3676        for (int i = 0; i < 4; i++) {
3677            value = mWifiNative.getNetworkVariable(netId,
3678                    WifiConfiguration.wepKeyVarNames[i]);
3679            if (!TextUtils.isEmpty(value)) {
3680                config.wepKeys[i] = value;
3681            } else {
3682                config.wepKeys[i] = null;
3683            }
3684        }
3685
3686        value = mWifiNative.getNetworkVariable(netId, WifiConfiguration.pskVarName);
3687        if (!TextUtils.isEmpty(value)) {
3688            config.preSharedKey = value;
3689        } else {
3690            config.preSharedKey = null;
3691        }
3692
3693        readNetworkBitsetVariable(config.networkId, config.allowedProtocols,
3694                WifiConfiguration.Protocol.varName, WifiConfiguration.Protocol.strings);
3695
3696        readNetworkBitsetVariable(config.networkId, config.allowedKeyManagement,
3697                WifiConfiguration.KeyMgmt.varName, WifiConfiguration.KeyMgmt.strings);
3698
3699        readNetworkBitsetVariable(config.networkId, config.allowedAuthAlgorithms,
3700                WifiConfiguration.AuthAlgorithm.varName, WifiConfiguration.AuthAlgorithm.strings);
3701
3702        readNetworkBitsetVariable(config.networkId, config.allowedPairwiseCiphers,
3703                WifiConfiguration.PairwiseCipher.varName, WifiConfiguration.PairwiseCipher.strings);
3704
3705        readNetworkBitsetVariable(config.networkId, config.allowedGroupCiphers,
3706                WifiConfiguration.GroupCipher.varName, WifiConfiguration.GroupCipher.strings);
3707
3708        if (config.enterpriseConfig == null) {
3709            config.enterpriseConfig = new WifiEnterpriseConfig();
3710        }
3711        HashMap<String, String> enterpriseFields = config.enterpriseConfig.getFields();
3712        for (String key : ENTERPRISE_CONFIG_SUPPLICANT_KEYS) {
3713            value = mWifiNative.getNetworkVariable(netId, key);
3714            if (!TextUtils.isEmpty(value)) {
3715                if (!enterpriseConfigKeyShouldBeQuoted(key)) {
3716                    value = removeDoubleQuotes(value);
3717                }
3718                enterpriseFields.put(key, value);
3719            } else {
3720                enterpriseFields.put(key, EMPTY_VALUE);
3721            }
3722        }
3723
3724        if (migrateOldEapTlsNative(config.enterpriseConfig, netId)) {
3725            saveConfig();
3726        }
3727
3728        migrateCerts(config.enterpriseConfig);
3729        // initializeSoftwareKeystoreFlag(config.enterpriseConfig, mKeyStore);
3730    }
3731
3732    private static String removeDoubleQuotes(String string) {
3733        int length = string.length();
3734        if ((length > 1) && (string.charAt(0) == '"')
3735                && (string.charAt(length - 1) == '"')) {
3736            return string.substring(1, length - 1);
3737        }
3738        return string;
3739    }
3740
3741    private static String makeString(BitSet set, String[] strings) {
3742        StringBuffer buf = new StringBuffer();
3743        int nextSetBit = -1;
3744
3745        /* Make sure all set bits are in [0, strings.length) to avoid
3746         * going out of bounds on strings.  (Shouldn't happen, but...) */
3747        set = set.get(0, strings.length);
3748
3749        while ((nextSetBit = set.nextSetBit(nextSetBit + 1)) != -1) {
3750            buf.append(strings[nextSetBit].replace('_', '-')).append(' ');
3751        }
3752
3753        // remove trailing space
3754        if (set.cardinality() > 0) {
3755            buf.setLength(buf.length() - 1);
3756        }
3757
3758        return buf.toString();
3759    }
3760
3761    private int lookupString(String string, String[] strings) {
3762        int size = strings.length;
3763
3764        string = string.replace('-', '_');
3765
3766        for (int i = 0; i < size; i++)
3767            if (string.equals(strings[i]))
3768                return i;
3769
3770        // if we ever get here, we should probably add the
3771        // value to WifiConfiguration to reflect that it's
3772        // supported by the WPA supplicant
3773        loge("Failed to look-up a string: " + string);
3774
3775        return -1;
3776    }
3777
3778    /* return the allowed key management based on a scan result */
3779
3780    public WifiConfiguration wifiConfigurationFromScanResult(ScanDetail scanDetail) {
3781
3782        ScanResult result = scanDetail.getScanResult();
3783        WifiConfiguration config = new WifiConfiguration();
3784
3785        config.SSID = "\"" + result.SSID + "\"";
3786
3787        if (VDBG) {
3788            loge("WifiConfiguration from scan results " +
3789                    config.SSID + " cap " + result.capabilities);
3790        }
3791        if (result.capabilities.contains("WEP")) {
3792            config.allowedKeyManagement.set(KeyMgmt.NONE);
3793            config.allowedAuthAlgorithms.set(WifiConfiguration.AuthAlgorithm.OPEN); //?
3794            config.allowedAuthAlgorithms.set(WifiConfiguration.AuthAlgorithm.SHARED);
3795        }
3796
3797        if (result.capabilities.contains("PSK")) {
3798            config.allowedKeyManagement.set(KeyMgmt.WPA_PSK);
3799        }
3800
3801        if (result.capabilities.contains("EAP")) {
3802            //this is probably wrong, as we don't have a way to enter the enterprise config
3803            config.allowedKeyManagement.set(KeyMgmt.WPA_EAP);
3804            config.allowedKeyManagement.set(KeyMgmt.IEEE8021X);
3805        }
3806
3807        /* getScanDetailCache(config).put(scanDetail); */
3808
3809        return config;
3810    }
3811
3812
3813    /* Returns a unique for a given configuration */
3814    private static int configKey(WifiConfiguration config) {
3815        String key = config.configKey();
3816        return key.hashCode();
3817    }
3818
3819    void dump(FileDescriptor fd, PrintWriter pw, String[] args) {
3820        pw.println("Dump of WifiConfigStore");
3821        pw.println("mLastPriority " + mLastPriority);
3822        pw.println("Configured networks");
3823        for (WifiConfiguration conf : getAllConfiguredNetworks()) {
3824            pw.println(conf);
3825        }
3826        pw.println();
3827        if (mLostConfigsDbg != null && mLostConfigsDbg.size() > 0) {
3828            pw.println("LostConfigs: ");
3829            for (String s : mLostConfigsDbg) {
3830                pw.println(s);
3831            }
3832        }
3833        if (mLocalLog != null) {
3834            pw.println("WifiConfigStore - Log Begin ----");
3835            mLocalLog.dump(fd, pw, args);
3836            pw.println("WifiConfigStore - Log End ----");
3837        }
3838    }
3839
3840    public String getConfigFile() {
3841        return ipConfigFile;
3842    }
3843
3844    protected void loge(String s) {
3845        loge(s, false);
3846    }
3847
3848    protected void loge(String s, boolean stack) {
3849        if (stack) {
3850            Log.e(TAG, s + " stack:" + Thread.currentThread().getStackTrace()[2].getMethodName()
3851                    + " - " + Thread.currentThread().getStackTrace()[3].getMethodName()
3852                    + " - " + Thread.currentThread().getStackTrace()[4].getMethodName()
3853                    + " - " + Thread.currentThread().getStackTrace()[5].getMethodName());
3854        } else {
3855            Log.e(TAG, s);
3856        }
3857    }
3858
3859    private void logKernelTime() {
3860        long kernelTimeMs = System.nanoTime()/(1000*1000);
3861        StringBuilder builder = new StringBuilder();
3862        builder.append("kernel time = ").append(kernelTimeMs/1000).append(".").append
3863                (kernelTimeMs%1000).append("\n");
3864        localLog(builder.toString());
3865    }
3866
3867    protected void log(String s) {
3868        Log.d(TAG, s);
3869    }
3870
3871    private void localLog(String s) {
3872        if (mLocalLog != null) {
3873            mLocalLog.log(s);
3874        }
3875    }
3876
3877    private void localLog(String s, boolean force) {
3878        localLog(s);
3879        if (force) loge(s);
3880    }
3881
3882    private void localLog(String s, int netId) {
3883        if (mLocalLog == null) {
3884            return;
3885        }
3886
3887        WifiConfiguration config;
3888        synchronized(mConfiguredNetworks) {             // !!! Useless synchronization
3889            config = mConfiguredNetworks.get(netId);
3890        }
3891
3892        if (config != null) {
3893            mLocalLog.log(s + " " + config.getPrintableSsid() + " " + netId
3894                    + " status=" + config.status
3895                    + " key=" + config.configKey());
3896        } else {
3897            mLocalLog.log(s + " " + netId);
3898        }
3899    }
3900
3901    // Certificate and private key management for EnterpriseConfig
3902    static boolean needsKeyStore(WifiEnterpriseConfig config) {
3903        // Has no keys to be installed
3904        if (config.getClientCertificate() == null && config.getCaCertificate() == null)
3905            return false;
3906        return true;
3907    }
3908
3909    static boolean isHardwareBackedKey(PrivateKey key) {
3910        return KeyChain.isBoundKeyAlgorithm(key.getAlgorithm());
3911    }
3912
3913    static boolean hasHardwareBackedKey(Certificate certificate) {
3914        return KeyChain.isBoundKeyAlgorithm(certificate.getPublicKey().getAlgorithm());
3915    }
3916
3917    static boolean needsSoftwareBackedKeyStore(WifiEnterpriseConfig config) {
3918        String client = config.getClientCertificateAlias();
3919        if (!TextUtils.isEmpty(client)) {
3920            // a valid client certificate is configured
3921
3922            // BUGBUG: keyStore.get() never returns certBytes; because it is not
3923            // taking WIFI_UID as a parameter. It always looks for certificate
3924            // with SYSTEM_UID, and never finds any Wifi certificates. Assuming that
3925            // all certificates need software keystore until we get the get() API
3926            // fixed.
3927
3928            return true;
3929        }
3930
3931        /*
3932        try {
3933
3934            if (DBG) Slog.d(TAG, "Loading client certificate " + Credentials
3935                    .USER_CERTIFICATE + client);
3936
3937            CertificateFactory factory = CertificateFactory.getInstance("X.509");
3938            if (factory == null) {
3939                Slog.e(TAG, "Error getting certificate factory");
3940                return;
3941            }
3942
3943            byte[] certBytes = keyStore.get(Credentials.USER_CERTIFICATE + client);
3944            if (certBytes != null) {
3945                Certificate cert = (X509Certificate) factory.generateCertificate(
3946                        new ByteArrayInputStream(certBytes));
3947
3948                if (cert != null) {
3949                    mNeedsSoftwareKeystore = hasHardwareBackedKey(cert);
3950
3951                    if (DBG) Slog.d(TAG, "Loaded client certificate " + Credentials
3952                            .USER_CERTIFICATE + client);
3953                    if (DBG) Slog.d(TAG, "It " + (mNeedsSoftwareKeystore ? "needs" :
3954                            "does not need" ) + " software key store");
3955                } else {
3956                    Slog.d(TAG, "could not generate certificate");
3957                }
3958            } else {
3959                Slog.e(TAG, "Could not load client certificate " + Credentials
3960                        .USER_CERTIFICATE + client);
3961                mNeedsSoftwareKeystore = true;
3962            }
3963
3964        } catch(CertificateException e) {
3965            Slog.e(TAG, "Could not read certificates");
3966            mCaCert = null;
3967            mClientCertificate = null;
3968        }
3969        */
3970
3971        return false;
3972    }
3973
3974    boolean isNetworkConfigured(WifiConfiguration config) {
3975        // Check if either we have a network Id or a WifiConfiguration
3976        // matching the one we are trying to add.
3977
3978        if(config.networkId != INVALID_NETWORK_ID) {
3979            return (mConfiguredNetworks.get(config.networkId) != null);
3980        }
3981
3982        return (mConfiguredNetworks.getByConfigKey(config.configKey()) != null);
3983    }
3984
3985    /**
3986     * Checks if uid has access to modify the configuration corresponding to networkId.
3987     *
3988     * Factors involved in modifiability of a config are as follows.
3989     *    If uid is a Device Owner app then it has full control over the device, including WiFi
3990     * configs.
3991     *    If the modification is only for administrative annotation (e.g. when connecting) or the
3992     * config is not lockdown eligible (currently that means any config not last updated by the DO)
3993     * then the creator of config or an app holding OVERRIDE_CONFIG_WIFI can modify the config.
3994     *    If the config is lockdown eligible and the modification is substantial (not annotation)
3995     * then the requirement to be able to modify the config by the uid is as follows:
3996     *    a) the uid has to hold OVERRIDE_CONFIG_WIFI and
3997     *    b) the lockdown feature should be disabled.
3998     */
3999    boolean canModifyNetwork(int uid, int networkId, boolean onlyAnnotate) {
4000        WifiConfiguration config = mConfiguredNetworks.get(networkId);
4001
4002        if (config == null) {
4003            loge("canModifyNetwork: cannot find config networkId " + networkId);
4004            return false;
4005        }
4006
4007        final DevicePolicyManagerInternal dpmi = LocalServices.getService(
4008                DevicePolicyManagerInternal.class);
4009
4010        final boolean isUidDeviceOwner = dpmi != null && dpmi.isActiveAdminWithPolicy(uid,
4011                DeviceAdminInfo.USES_POLICY_DEVICE_OWNER);
4012
4013        if (isUidDeviceOwner) {
4014            // Device Owner has full control over the device, including WiFi Configs
4015            return true;
4016        }
4017
4018        final boolean isCreator = (config.creatorUid == uid);
4019
4020        if (onlyAnnotate) {
4021            return isCreator || checkConfigOverridePermission(uid);
4022        }
4023
4024        // Check if device has DPM capability. If it has and dpmi is still null, then we
4025        // treat this case with suspicion and bail out.
4026        if (mContext.getPackageManager().hasSystemFeature(PackageManager.FEATURE_DEVICE_ADMIN)
4027                && dpmi == null) {
4028            return false;
4029        }
4030
4031        // WiFi config lockdown related logic. At this point we know uid NOT to be a Device Owner.
4032
4033        final boolean isConfigEligibleForLockdown = dpmi != null && dpmi.isActiveAdminWithPolicy(
4034                config.creatorUid, DeviceAdminInfo.USES_POLICY_DEVICE_OWNER);
4035        if (!isConfigEligibleForLockdown) {
4036            return isCreator || checkConfigOverridePermission(uid);
4037        }
4038
4039        final ContentResolver resolver = mContext.getContentResolver();
4040        final boolean isLockdownFeatureEnabled = Settings.Global.getInt(resolver,
4041                Settings.Global.WIFI_DEVICE_OWNER_CONFIGS_LOCKDOWN, 0) != 0;
4042        return !isLockdownFeatureEnabled && checkConfigOverridePermission(uid);
4043    }
4044
4045    /**
4046     * Checks if uid has access to modify config.
4047     */
4048    boolean canModifyNetwork(int uid, WifiConfiguration config, boolean onlyAnnotate) {
4049        if (config == null) {
4050            loge("canModifyNetowrk recieved null configuration");
4051            return false;
4052        }
4053
4054        // Resolve the correct network id.
4055        int netid;
4056        if (config.networkId != INVALID_NETWORK_ID){
4057            netid = config.networkId;
4058        } else {
4059            WifiConfiguration test = mConfiguredNetworks.getByConfigKey(config.configKey());
4060            if (test == null) {
4061                return false;
4062            } else {
4063                netid = test.networkId;
4064            }
4065        }
4066
4067        return canModifyNetwork(uid, netid, onlyAnnotate);
4068    }
4069
4070    boolean checkConfigOverridePermission(int uid) {
4071        try {
4072            return (AppGlobals.getPackageManager().checkUidPermission(
4073                    android.Manifest.permission.OVERRIDE_WIFI_CONFIG, uid)
4074                    == PackageManager.PERMISSION_GRANTED);
4075        } catch (RemoteException e) {
4076            return false;
4077        }
4078    }
4079
4080    /** called when CS ask WiFistateMachine to disconnect the current network
4081     * because the score is bad.
4082     */
4083    void handleBadNetworkDisconnectReport(int netId, WifiInfo info) {
4084        /* TODO verify the bad network is current */
4085        WifiConfiguration config = mConfiguredNetworks.get(netId);
4086        if (config != null) {
4087            if ((info.getRssi() < WifiConfiguration.UNWANTED_BLACKLIST_SOFT_RSSI_24
4088                    && info.is24GHz()) || (info.getRssi() <
4089                            WifiConfiguration.UNWANTED_BLACKLIST_SOFT_RSSI_5 && info.is5GHz())) {
4090                // We got disconnected and RSSI was bad, so disable light
4091                config.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_TEMPORARY_DISABLED
4092                        + WifiConfiguration.UNWANTED_BLACKLIST_SOFT_BUMP);
4093                loge("handleBadNetworkDisconnectReport (+4) "
4094                        + Integer.toString(netId) + " " + info);
4095            } else {
4096                // We got disabled but RSSI is good, so disable hard
4097                config.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_TEMPORARY_DISABLED
4098                        + WifiConfiguration.UNWANTED_BLACKLIST_HARD_BUMP);
4099                loge("handleBadNetworkDisconnectReport (+8) "
4100                        + Integer.toString(netId) + " " + info);
4101            }
4102        }
4103        // Record last time Connectivity Service switched us away from WiFi and onto Cell
4104        lastUnwantedNetworkDisconnectTimestamp = System.currentTimeMillis();
4105    }
4106
4107    boolean handleBSSIDBlackList(int netId, String BSSID, boolean enable) {
4108        boolean found = false;
4109        if (BSSID == null)
4110            return found;
4111
4112        // Look for the BSSID in our config store
4113        for (WifiConfiguration config : mConfiguredNetworks.values()) {
4114            if (getScanDetailCache(config) != null) {
4115                for (ScanDetail scanDetail : getScanDetailCache(config).values()) {
4116                    if (scanDetail.getBSSIDString().equals(BSSID)) {
4117                        if (enable) {
4118                            scanDetail.getScanResult().setAutoJoinStatus(ScanResult.ENABLED);
4119                        } else {
4120                            // Black list the BSSID we were trying to join
4121                            // so as the Roam state machine
4122                            // doesn't pick it up over and over
4123                            scanDetail.getScanResult().setAutoJoinStatus(
4124                                    ScanResult.AUTO_ROAM_DISABLED);
4125                            found = true;
4126                        }
4127                    }
4128                }
4129            }
4130        }
4131        return found;
4132    }
4133
4134    int getMaxDhcpRetries() {
4135        return Settings.Global.getInt(mContext.getContentResolver(),
4136                Settings.Global.WIFI_MAX_DHCP_RETRY_COUNT,
4137                DEFAULT_MAX_DHCP_RETRIES);
4138    }
4139
4140    void clearBssidBlacklist() {
4141        mBssidBlacklist = new HashSet<String>();
4142        mWifiNative.clearBlacklist();
4143        mWifiNative.setBssidBlacklist(null);
4144    }
4145
4146    void blackListBssid(String BSSID) {
4147        if (BSSID == null)
4148            return;
4149        mBssidBlacklist.add(BSSID);
4150        // Blacklist at wpa_supplicant
4151        mWifiNative.addToBlacklist(BSSID);
4152        // Blacklist at firmware
4153        String list[] = new String[mBssidBlacklist.size()];
4154        int count = 0;
4155        for (String bssid : mBssidBlacklist) {
4156            list[count++] = bssid;
4157        }
4158        mWifiNative.setBssidBlacklist(list);
4159    }
4160
4161    void handleSSIDStateChange(int netId, boolean enabled, String message, String BSSID) {
4162        WifiConfiguration config = mConfiguredNetworks.get(netId);
4163        if (config != null) {
4164            if (enabled) {
4165                loge("SSID re-enabled for  " + config.configKey() +
4166                        " had autoJoinStatus=" + Integer.toString(config.autoJoinStatus)
4167                        + " self added " + config.selfAdded + " ephemeral " + config.ephemeral);
4168                //TODO: http://b/16381983 Fix Wifi Network Blacklisting
4169                //TODO: really I don't know if re-enabling is right but we
4170                //TODO: should err on the side of trying to connect
4171                //TODO: even if the attempt will fail
4172                if (config.autoJoinStatus == WifiConfiguration.AUTO_JOIN_DISABLED_ON_AUTH_FAILURE) {
4173                    config.setAutoJoinStatus(WifiConfiguration.AUTO_JOIN_ENABLED);
4174                }
4175            } else {
4176                loge("SSID temp disabled for  " + config.configKey() +
4177                        " had autoJoinStatus=" + Integer.toString(config.autoJoinStatus)
4178                        + " self added " + config.selfAdded + " ephemeral " + config.ephemeral);
4179                if (message != null) {
4180                    loge(" message=" + message);
4181                }
4182                if (config.selfAdded && config.lastConnected == 0) {
4183                    // This is a network we self added, and we never succeeded,
4184                    // the user did not create this network and never entered its credentials,
4185                    // so we want to be very aggressive in disabling it completely.
4186                    removeConfigAndSendBroadcastIfNeeded(config.networkId);
4187                } else {
4188                    if (message != null) {
4189                        if (message.contains("no identity")) {
4190                            config.setAutoJoinStatus(
4191                                    WifiConfiguration.AUTO_JOIN_DISABLED_NO_CREDENTIALS);
4192                            if (DBG) {
4193                                loge("no identity blacklisted " + config.configKey() + " to "
4194                                        + Integer.toString(config.autoJoinStatus));
4195                            }
4196                        } else if (message.contains("WRONG_KEY")
4197                                || message.contains("AUTH_FAILED")) {
4198                            // This configuration has received an auth failure, so disable it
4199                            // temporarily because we don't want auto-join to try it out.
4200                            // this network may be re-enabled by the "usual"
4201                            // enableAllNetwork function
4202                            config.numAuthFailures++;
4203                            if (config.numAuthFailures > maxAuthErrorsToBlacklist) {
4204                                config.setAutoJoinStatus
4205                                        (WifiConfiguration.AUTO_JOIN_DISABLED_ON_AUTH_FAILURE);
4206                                disableNetwork(netId,
4207                                        WifiConfiguration.DISABLED_AUTH_FAILURE);
4208                                loge("Authentication failure, blacklist " + config.configKey() + " "
4209                                            + Integer.toString(config.networkId)
4210                                            + " num failures " + config.numAuthFailures);
4211                            }
4212                        } else if (message.contains("DHCP FAILURE")) {
4213                            config.numIpConfigFailures++;
4214                            config.lastConnectionFailure = System.currentTimeMillis();
4215                            int maxRetries = getMaxDhcpRetries();
4216                            // maxRetries == 0 means keep trying forever
4217                            if (maxRetries > 0 && config.numIpConfigFailures > maxRetries) {
4218                                /**
4219                                 * If we've exceeded the maximum number of retries for DHCP
4220                                 * to a given network, disable the network
4221                                 */
4222                                config.setAutoJoinStatus
4223                                        (WifiConfiguration.AUTO_JOIN_DISABLED_ON_AUTH_FAILURE);
4224                                disableNetwork(netId, WifiConfiguration.DISABLED_DHCP_FAILURE);
4225                                loge("DHCP failure, blacklist " + config.configKey() + " "
4226                                        + Integer.toString(config.networkId)
4227                                        + " num failures " + config.numIpConfigFailures);
4228                            }
4229
4230                            // Also blacklist the BSSId if we find it
4231                            ScanResult result = null;
4232                            String bssidDbg = "";
4233                            if (getScanDetailCache(config) != null && BSSID != null) {
4234                                result = getScanDetailCache(config).get(BSSID);
4235                            }
4236                            if (result != null) {
4237                                result.numIpConfigFailures ++;
4238                                bssidDbg = BSSID + " ipfail=" + result.numIpConfigFailures;
4239                                if (result.numIpConfigFailures > 3) {
4240                                    // Tell supplicant to stop trying this BSSID
4241                                    mWifiNative.addToBlacklist(BSSID);
4242                                    result.setAutoJoinStatus(ScanResult.AUTO_JOIN_DISABLED);
4243                                }
4244                            }
4245
4246                            if (DBG) {
4247                                loge("blacklisted " + config.configKey() + " to "
4248                                        + config.autoJoinStatus
4249                                        + " due to IP config failures, count="
4250                                        + config.numIpConfigFailures
4251                                        + " disableReason=" + config.disableReason
4252                                        + " " + bssidDbg);
4253                            }
4254                        } else if (message.contains("CONN_FAILED")) {
4255                            config.numConnectionFailures++;
4256                            if (config.numConnectionFailures > maxConnectionErrorsToBlacklist) {
4257                                config.setAutoJoinStatus
4258                                        (WifiConfiguration.AUTO_JOIN_DISABLED_ON_AUTH_FAILURE);
4259                                disableNetwork(netId,
4260                                        WifiConfiguration.DISABLED_ASSOCIATION_REJECT);
4261                                loge("Connection failure, blacklist " + config.configKey() + " "
4262                                        + config.networkId
4263                                        + " num failures " + config.numConnectionFailures);
4264                            }
4265                        }
4266                        message.replace("\n", "");
4267                        message.replace("\r", "");
4268                        config.lastFailure = message;
4269                    }
4270                }
4271            }
4272        }
4273    }
4274
4275    boolean installKeys(WifiEnterpriseConfig config, String name) {
4276        boolean ret = true;
4277        String privKeyName = Credentials.USER_PRIVATE_KEY + name;
4278        String userCertName = Credentials.USER_CERTIFICATE + name;
4279        String caCertName = Credentials.CA_CERTIFICATE + name;
4280        if (config.getClientCertificate() != null) {
4281            byte[] privKeyData = config.getClientPrivateKey().getEncoded();
4282            if (isHardwareBackedKey(config.getClientPrivateKey())) {
4283                // Hardware backed key store is secure enough to store keys un-encrypted, this
4284                // removes the need for user to punch a PIN to get access to these keys
4285                if (DBG) Log.d(TAG, "importing keys " + name + " in hardware backed store");
4286                ret = mKeyStore.importKey(privKeyName, privKeyData, android.os.Process.WIFI_UID,
4287                        KeyStore.FLAG_NONE);
4288            } else {
4289                // Software backed key store is NOT secure enough to store keys un-encrypted.
4290                // Save keys encrypted so they are protected with user's PIN. User will
4291                // have to unlock phone before being able to use these keys and connect to
4292                // networks.
4293                if (DBG) Log.d(TAG, "importing keys " + name + " in software backed store");
4294                ret = mKeyStore.importKey(privKeyName, privKeyData, Process.WIFI_UID,
4295                        KeyStore.FLAG_ENCRYPTED);
4296            }
4297            if (ret == false) {
4298                return ret;
4299            }
4300
4301            ret = putCertInKeyStore(userCertName, config.getClientCertificate());
4302            if (ret == false) {
4303                // Remove private key installed
4304                mKeyStore.delete(privKeyName, Process.WIFI_UID);
4305                return ret;
4306            }
4307        }
4308
4309        if (config.getCaCertificate() != null) {
4310            ret = putCertInKeyStore(caCertName, config.getCaCertificate());
4311            if (ret == false) {
4312                if (config.getClientCertificate() != null) {
4313                    // Remove client key+cert
4314                    mKeyStore.delete(privKeyName, Process.WIFI_UID);
4315                    mKeyStore.delete(userCertName, Process.WIFI_UID);
4316                }
4317                return ret;
4318            }
4319        }
4320
4321        // Set alias names
4322        if (config.getClientCertificate() != null) {
4323            config.setClientCertificateAlias(name);
4324            config.resetClientKeyEntry();
4325        }
4326
4327        if (config.getCaCertificate() != null) {
4328            config.setCaCertificateAlias(name);
4329            config.resetCaCertificate();
4330        }
4331
4332        return ret;
4333    }
4334
4335    private boolean putCertInKeyStore(String name, Certificate cert) {
4336        try {
4337            byte[] certData = Credentials.convertToPem(cert);
4338            if (DBG) Log.d(TAG, "putting certificate " + name + " in keystore");
4339            return mKeyStore.put(name, certData, Process.WIFI_UID, KeyStore.FLAG_NONE);
4340
4341        } catch (IOException e1) {
4342            return false;
4343        } catch (CertificateException e2) {
4344            return false;
4345        }
4346    }
4347
4348    void removeKeys(WifiEnterpriseConfig config) {
4349        String client = config.getClientCertificateAlias();
4350        // a valid client certificate is configured
4351        if (!TextUtils.isEmpty(client)) {
4352            if (DBG) Log.d(TAG, "removing client private key and user cert");
4353            mKeyStore.delete(Credentials.USER_PRIVATE_KEY + client, Process.WIFI_UID);
4354            mKeyStore.delete(Credentials.USER_CERTIFICATE + client, Process.WIFI_UID);
4355        }
4356
4357        String ca = config.getCaCertificateAlias();
4358        // a valid ca certificate is configured
4359        if (!TextUtils.isEmpty(ca)) {
4360            if (DBG) Log.d(TAG, "removing CA cert");
4361            mKeyStore.delete(Credentials.CA_CERTIFICATE + ca, Process.WIFI_UID);
4362        }
4363    }
4364
4365
4366    /** Migrates the old style TLS config to the new config style. This should only be used
4367     * when restoring an old wpa_supplicant.conf or upgrading from a previous
4368     * platform version.
4369     * @return true if the config was updated
4370     * @hide
4371     */
4372    boolean migrateOldEapTlsNative(WifiEnterpriseConfig config, int netId) {
4373        String oldPrivateKey = mWifiNative.getNetworkVariable(netId, OLD_PRIVATE_KEY_NAME);
4374        /*
4375         * If the old configuration value is not present, then there is nothing
4376         * to do.
4377         */
4378        if (TextUtils.isEmpty(oldPrivateKey)) {
4379            return false;
4380        } else {
4381            // Also ignore it if it's empty quotes.
4382            oldPrivateKey = removeDoubleQuotes(oldPrivateKey);
4383            if (TextUtils.isEmpty(oldPrivateKey)) {
4384                return false;
4385            }
4386        }
4387
4388        config.setFieldValue(WifiEnterpriseConfig.ENGINE_KEY, WifiEnterpriseConfig.ENGINE_ENABLE);
4389        config.setFieldValue(WifiEnterpriseConfig.ENGINE_ID_KEY,
4390                WifiEnterpriseConfig.ENGINE_ID_KEYSTORE);
4391
4392        /*
4393        * The old key started with the keystore:// URI prefix, but we don't
4394        * need that anymore. Trim it off if it exists.
4395        */
4396        final String keyName;
4397        if (oldPrivateKey.startsWith(WifiEnterpriseConfig.KEYSTORE_URI)) {
4398            keyName = new String(
4399                    oldPrivateKey.substring(WifiEnterpriseConfig.KEYSTORE_URI.length()));
4400        } else {
4401            keyName = oldPrivateKey;
4402        }
4403        config.setFieldValue(WifiEnterpriseConfig.PRIVATE_KEY_ID_KEY, keyName);
4404
4405        mWifiNative.setNetworkVariable(netId, WifiEnterpriseConfig.ENGINE_KEY,
4406                config.getFieldValue(WifiEnterpriseConfig.ENGINE_KEY, ""));
4407
4408        mWifiNative.setNetworkVariable(netId, WifiEnterpriseConfig.ENGINE_ID_KEY,
4409                config.getFieldValue(WifiEnterpriseConfig.ENGINE_ID_KEY, ""));
4410
4411        mWifiNative.setNetworkVariable(netId, WifiEnterpriseConfig.PRIVATE_KEY_ID_KEY,
4412                config.getFieldValue(WifiEnterpriseConfig.PRIVATE_KEY_ID_KEY, ""));
4413
4414        // Remove old private_key string so we don't run this again.
4415        mWifiNative.setNetworkVariable(netId, OLD_PRIVATE_KEY_NAME, EMPTY_VALUE);
4416
4417        return true;
4418    }
4419
4420    /** Migrate certs from global pool to wifi UID if not already done */
4421    void migrateCerts(WifiEnterpriseConfig config) {
4422        String client = config.getClientCertificateAlias();
4423        // a valid client certificate is configured
4424        if (!TextUtils.isEmpty(client)) {
4425            if (!mKeyStore.contains(Credentials.USER_PRIVATE_KEY + client, Process.WIFI_UID)) {
4426                mKeyStore.duplicate(Credentials.USER_PRIVATE_KEY + client, -1,
4427                        Credentials.USER_PRIVATE_KEY + client, Process.WIFI_UID);
4428                mKeyStore.duplicate(Credentials.USER_CERTIFICATE + client, -1,
4429                        Credentials.USER_CERTIFICATE + client, Process.WIFI_UID);
4430            }
4431        }
4432
4433        String ca = config.getCaCertificateAlias();
4434        // a valid ca certificate is configured
4435        if (!TextUtils.isEmpty(ca)) {
4436            if (!mKeyStore.contains(Credentials.CA_CERTIFICATE + ca, Process.WIFI_UID)) {
4437                mKeyStore.duplicate(Credentials.CA_CERTIFICATE + ca, -1,
4438                        Credentials.CA_CERTIFICATE + ca, Process.WIFI_UID);
4439            }
4440        }
4441    }
4442
4443    private void readNetworkBitsetVariable(int netId, BitSet variable, String varName,
4444            String[] strings) {
4445        String value = mWifiNative.getNetworkVariable(netId, varName);
4446        if (!TextUtils.isEmpty(value)) {
4447            variable.clear();
4448            String vals[] = value.split(" ");
4449            for (String val : vals) {
4450                int index = lookupString(val, strings);
4451                if (0 <= index) {
4452                    variable.set(index);
4453                }
4454            }
4455        }
4456    }
4457}
4458