config.c revision ff787d557db719adea0fdf2679667500c65cf74d
1/*
2 * WPA Supplicant / Configuration parser and common functions
3 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi>
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9#include "includes.h"
10
11#include "common.h"
12#include "utils/uuid.h"
13#include "utils/ip_addr.h"
14#include "crypto/sha1.h"
15#include "rsn_supp/wpa.h"
16#include "eap_peer/eap.h"
17#include "p2p/p2p.h"
18#include "config.h"
19
20
21#if !defined(CONFIG_CTRL_IFACE) && defined(CONFIG_NO_CONFIG_WRITE)
22#define NO_CONFIG_WRITE
23#endif
24
25/*
26 * Structure for network configuration parsing. This data is used to implement
27 * a generic parser for each network block variable. The table of configuration
28 * variables is defined below in this file (ssid_fields[]).
29 */
30struct parse_data {
31	/* Configuration variable name */
32	char *name;
33
34	/* Parser function for this variable */
35	int (*parser)(const struct parse_data *data, struct wpa_ssid *ssid,
36		      int line, const char *value);
37
38#ifndef NO_CONFIG_WRITE
39	/* Writer function (i.e., to get the variable in text format from
40	 * internal presentation). */
41	char * (*writer)(const struct parse_data *data, struct wpa_ssid *ssid);
42#endif /* NO_CONFIG_WRITE */
43
44	/* Variable specific parameters for the parser. */
45	void *param1, *param2, *param3, *param4;
46
47	/* 0 = this variable can be included in debug output and ctrl_iface
48	 * 1 = this variable contains key/private data and it must not be
49	 *     included in debug output unless explicitly requested. In
50	 *     addition, this variable will not be readable through the
51	 *     ctrl_iface.
52	 */
53	int key_data;
54};
55
56
57static int wpa_config_parse_str(const struct parse_data *data,
58				struct wpa_ssid *ssid,
59				int line, const char *value)
60{
61	size_t res_len, *dst_len;
62	char **dst, *tmp;
63
64	if (os_strcmp(value, "NULL") == 0) {
65		wpa_printf(MSG_DEBUG, "Unset configuration string '%s'",
66			   data->name);
67		tmp = NULL;
68		res_len = 0;
69		goto set;
70	}
71
72	tmp = wpa_config_parse_string(value, &res_len);
73	if (tmp == NULL) {
74		wpa_printf(MSG_ERROR, "Line %d: failed to parse %s '%s'.",
75			   line, data->name,
76			   data->key_data ? "[KEY DATA REMOVED]" : value);
77		return -1;
78	}
79
80	if (data->key_data) {
81		wpa_hexdump_ascii_key(MSG_MSGDUMP, data->name,
82				      (u8 *) tmp, res_len);
83	} else {
84		wpa_hexdump_ascii(MSG_MSGDUMP, data->name,
85				  (u8 *) tmp, res_len);
86	}
87
88	if (data->param3 && res_len < (size_t) data->param3) {
89		wpa_printf(MSG_ERROR, "Line %d: too short %s (len=%lu "
90			   "min_len=%ld)", line, data->name,
91			   (unsigned long) res_len, (long) data->param3);
92		os_free(tmp);
93		return -1;
94	}
95
96	if (data->param4 && res_len > (size_t) data->param4) {
97		wpa_printf(MSG_ERROR, "Line %d: too long %s (len=%lu "
98			   "max_len=%ld)", line, data->name,
99			   (unsigned long) res_len, (long) data->param4);
100		os_free(tmp);
101		return -1;
102	}
103
104set:
105	dst = (char **) (((u8 *) ssid) + (long) data->param1);
106	dst_len = (size_t *) (((u8 *) ssid) + (long) data->param2);
107	os_free(*dst);
108	*dst = tmp;
109	if (data->param2)
110		*dst_len = res_len;
111
112	return 0;
113}
114
115
116#ifndef NO_CONFIG_WRITE
117static char * wpa_config_write_string_ascii(const u8 *value, size_t len)
118{
119	char *buf;
120
121	buf = os_malloc(len + 3);
122	if (buf == NULL)
123		return NULL;
124	buf[0] = '"';
125	os_memcpy(buf + 1, value, len);
126	buf[len + 1] = '"';
127	buf[len + 2] = '\0';
128
129	return buf;
130}
131
132
133static char * wpa_config_write_string_hex(const u8 *value, size_t len)
134{
135	char *buf;
136
137	buf = os_zalloc(2 * len + 1);
138	if (buf == NULL)
139		return NULL;
140	wpa_snprintf_hex(buf, 2 * len + 1, value, len);
141
142	return buf;
143}
144
145
146static char * wpa_config_write_string(const u8 *value, size_t len)
147{
148	if (value == NULL)
149		return NULL;
150
151	if (is_hex(value, len))
152		return wpa_config_write_string_hex(value, len);
153	else
154		return wpa_config_write_string_ascii(value, len);
155}
156
157
158static char * wpa_config_write_str(const struct parse_data *data,
159				   struct wpa_ssid *ssid)
160{
161	size_t len;
162	char **src;
163
164	src = (char **) (((u8 *) ssid) + (long) data->param1);
165	if (*src == NULL)
166		return NULL;
167
168	if (data->param2)
169		len = *((size_t *) (((u8 *) ssid) + (long) data->param2));
170	else
171		len = os_strlen(*src);
172
173	return wpa_config_write_string((const u8 *) *src, len);
174}
175#endif /* NO_CONFIG_WRITE */
176
177
178static int wpa_config_parse_int(const struct parse_data *data,
179				struct wpa_ssid *ssid,
180				int line, const char *value)
181{
182	int val, *dst;
183	char *end;
184
185	dst = (int *) (((u8 *) ssid) + (long) data->param1);
186	val = strtol(value, &end, 0);
187	if (*end) {
188		wpa_printf(MSG_ERROR, "Line %d: invalid number \"%s\"",
189			   line, value);
190		return -1;
191	}
192	*dst = val;
193	wpa_printf(MSG_MSGDUMP, "%s=%d (0x%x)", data->name, *dst, *dst);
194
195	if (data->param3 && *dst < (long) data->param3) {
196		wpa_printf(MSG_ERROR, "Line %d: too small %s (value=%d "
197			   "min_value=%ld)", line, data->name, *dst,
198			   (long) data->param3);
199		*dst = (long) data->param3;
200		return -1;
201	}
202
203	if (data->param4 && *dst > (long) data->param4) {
204		wpa_printf(MSG_ERROR, "Line %d: too large %s (value=%d "
205			   "max_value=%ld)", line, data->name, *dst,
206			   (long) data->param4);
207		*dst = (long) data->param4;
208		return -1;
209	}
210
211	return 0;
212}
213
214
215#ifndef NO_CONFIG_WRITE
216static char * wpa_config_write_int(const struct parse_data *data,
217				   struct wpa_ssid *ssid)
218{
219	int *src, res;
220	char *value;
221
222	src = (int *) (((u8 *) ssid) + (long) data->param1);
223
224	value = os_malloc(20);
225	if (value == NULL)
226		return NULL;
227	res = os_snprintf(value, 20, "%d", *src);
228	if (os_snprintf_error(20, res)) {
229		os_free(value);
230		return NULL;
231	}
232	value[20 - 1] = '\0';
233	return value;
234}
235#endif /* NO_CONFIG_WRITE */
236
237
238static int wpa_config_parse_addr_list(const struct parse_data *data,
239				      int line, const char *value,
240				      u8 **list, size_t *num, char *name,
241				      u8 abort_on_error, u8 masked)
242{
243	const char *pos;
244	u8 *buf, *n, addr[2 * ETH_ALEN];
245	size_t count;
246
247	buf = NULL;
248	count = 0;
249
250	pos = value;
251	while (pos && *pos) {
252		while (*pos == ' ')
253			pos++;
254
255		if (hwaddr_masked_aton(pos, addr, &addr[ETH_ALEN], masked)) {
256			if (abort_on_error || count == 0) {
257				wpa_printf(MSG_ERROR,
258					   "Line %d: Invalid %s address '%s'",
259					   line, name, value);
260				os_free(buf);
261				return -1;
262			}
263			/* continue anyway since this could have been from a
264			 * truncated configuration file line */
265			wpa_printf(MSG_INFO,
266				   "Line %d: Ignore likely truncated %s address '%s'",
267				   line, name, pos);
268		} else {
269			n = os_realloc_array(buf, count + 1, 2 * ETH_ALEN);
270			if (n == NULL) {
271				os_free(buf);
272				return -1;
273			}
274			buf = n;
275			os_memmove(buf + 2 * ETH_ALEN, buf,
276				   count * 2 * ETH_ALEN);
277			os_memcpy(buf, addr, 2 * ETH_ALEN);
278			count++;
279			wpa_printf(MSG_MSGDUMP,
280				   "%s: addr=" MACSTR " mask=" MACSTR,
281				   name, MAC2STR(addr),
282				   MAC2STR(&addr[ETH_ALEN]));
283		}
284
285		pos = os_strchr(pos, ' ');
286	}
287
288	os_free(*list);
289	*list = buf;
290	*num = count;
291
292	return 0;
293}
294
295
296#ifndef NO_CONFIG_WRITE
297static char * wpa_config_write_addr_list(const struct parse_data *data,
298					 const u8 *list, size_t num, char *name)
299{
300	char *value, *end, *pos;
301	int res;
302	size_t i;
303
304	if (list == NULL || num == 0)
305		return NULL;
306
307	value = os_malloc(2 * 20 * num);
308	if (value == NULL)
309		return NULL;
310	pos = value;
311	end = value + 2 * 20 * num;
312
313	for (i = num; i > 0; i--) {
314		const u8 *a = list + (i - 1) * 2 * ETH_ALEN;
315		const u8 *m = a + ETH_ALEN;
316
317		if (i < num)
318			*pos++ = ' ';
319		res = hwaddr_mask_txt(pos, end - pos, a, m);
320		if (res < 0) {
321			os_free(value);
322			return NULL;
323		}
324		pos += res;
325	}
326
327	return value;
328}
329#endif /* NO_CONFIG_WRITE */
330
331static int wpa_config_parse_bssid(const struct parse_data *data,
332				  struct wpa_ssid *ssid, int line,
333				  const char *value)
334{
335	if (value[0] == '\0' || os_strcmp(value, "\"\"") == 0 ||
336	    os_strcmp(value, "any") == 0) {
337		ssid->bssid_set = 0;
338		wpa_printf(MSG_MSGDUMP, "BSSID any");
339		return 0;
340	}
341	if (hwaddr_aton(value, ssid->bssid)) {
342		wpa_printf(MSG_ERROR, "Line %d: Invalid BSSID '%s'.",
343			   line, value);
344		return -1;
345	}
346	ssid->bssid_set = 1;
347	wpa_hexdump(MSG_MSGDUMP, "BSSID", ssid->bssid, ETH_ALEN);
348	return 0;
349}
350
351
352#ifndef NO_CONFIG_WRITE
353static char * wpa_config_write_bssid(const struct parse_data *data,
354				     struct wpa_ssid *ssid)
355{
356	char *value;
357	int res;
358
359	if (!ssid->bssid_set)
360		return NULL;
361
362	value = os_malloc(20);
363	if (value == NULL)
364		return NULL;
365	res = os_snprintf(value, 20, MACSTR, MAC2STR(ssid->bssid));
366	if (os_snprintf_error(20, res)) {
367		os_free(value);
368		return NULL;
369	}
370	value[20 - 1] = '\0';
371	return value;
372}
373#endif /* NO_CONFIG_WRITE */
374
375
376static int wpa_config_parse_bssid_blacklist(const struct parse_data *data,
377					    struct wpa_ssid *ssid, int line,
378					    const char *value)
379{
380	return wpa_config_parse_addr_list(data, line, value,
381					  &ssid->bssid_blacklist,
382					  &ssid->num_bssid_blacklist,
383					  "bssid_blacklist", 1, 1);
384}
385
386
387#ifndef NO_CONFIG_WRITE
388static char * wpa_config_write_bssid_blacklist(const struct parse_data *data,
389					       struct wpa_ssid *ssid)
390{
391	return wpa_config_write_addr_list(data, ssid->bssid_blacklist,
392					  ssid->num_bssid_blacklist,
393					  "bssid_blacklist");
394}
395#endif /* NO_CONFIG_WRITE */
396
397
398static int wpa_config_parse_bssid_whitelist(const struct parse_data *data,
399					    struct wpa_ssid *ssid, int line,
400					    const char *value)
401{
402	return wpa_config_parse_addr_list(data, line, value,
403					  &ssid->bssid_whitelist,
404					  &ssid->num_bssid_whitelist,
405					  "bssid_whitelist", 1, 1);
406}
407
408
409#ifndef NO_CONFIG_WRITE
410static char * wpa_config_write_bssid_whitelist(const struct parse_data *data,
411					       struct wpa_ssid *ssid)
412{
413	return wpa_config_write_addr_list(data, ssid->bssid_whitelist,
414					  ssid->num_bssid_whitelist,
415					  "bssid_whitelist");
416}
417#endif /* NO_CONFIG_WRITE */
418
419
420static int wpa_config_parse_psk(const struct parse_data *data,
421				struct wpa_ssid *ssid, int line,
422				const char *value)
423{
424#ifdef CONFIG_EXT_PASSWORD
425	if (os_strncmp(value, "ext:", 4) == 0) {
426		str_clear_free(ssid->passphrase);
427		ssid->passphrase = NULL;
428		ssid->psk_set = 0;
429		os_free(ssid->ext_psk);
430		ssid->ext_psk = os_strdup(value + 4);
431		if (ssid->ext_psk == NULL)
432			return -1;
433		wpa_printf(MSG_DEBUG, "PSK: External password '%s'",
434			   ssid->ext_psk);
435		return 0;
436	}
437#endif /* CONFIG_EXT_PASSWORD */
438
439	if (*value == '"') {
440#ifndef CONFIG_NO_PBKDF2
441		const char *pos;
442		size_t len;
443
444		value++;
445		pos = os_strrchr(value, '"');
446		if (pos)
447			len = pos - value;
448		else
449			len = os_strlen(value);
450		if (len < 8 || len > 63) {
451			wpa_printf(MSG_ERROR, "Line %d: Invalid passphrase "
452				   "length %lu (expected: 8..63) '%s'.",
453				   line, (unsigned long) len, value);
454			return -1;
455		}
456		wpa_hexdump_ascii_key(MSG_MSGDUMP, "PSK (ASCII passphrase)",
457				      (u8 *) value, len);
458		if (ssid->passphrase && os_strlen(ssid->passphrase) == len &&
459		    os_memcmp(ssid->passphrase, value, len) == 0)
460			return 0;
461		ssid->psk_set = 0;
462		str_clear_free(ssid->passphrase);
463		ssid->passphrase = dup_binstr(value, len);
464		if (ssid->passphrase == NULL)
465			return -1;
466		return 0;
467#else /* CONFIG_NO_PBKDF2 */
468		wpa_printf(MSG_ERROR, "Line %d: ASCII passphrase not "
469			   "supported.", line);
470		return -1;
471#endif /* CONFIG_NO_PBKDF2 */
472	}
473
474	if (hexstr2bin(value, ssid->psk, PMK_LEN) ||
475	    value[PMK_LEN * 2] != '\0') {
476		wpa_printf(MSG_ERROR, "Line %d: Invalid PSK '%s'.",
477			   line, value);
478		return -1;
479	}
480
481	str_clear_free(ssid->passphrase);
482	ssid->passphrase = NULL;
483
484	ssid->psk_set = 1;
485	wpa_hexdump_key(MSG_MSGDUMP, "PSK", ssid->psk, PMK_LEN);
486	return 0;
487}
488
489
490#ifndef NO_CONFIG_WRITE
491static char * wpa_config_write_psk(const struct parse_data *data,
492				   struct wpa_ssid *ssid)
493{
494#ifdef CONFIG_EXT_PASSWORD
495	if (ssid->ext_psk) {
496		size_t len = 4 + os_strlen(ssid->ext_psk) + 1;
497		char *buf = os_malloc(len);
498		int res;
499
500		if (buf == NULL)
501			return NULL;
502		res = os_snprintf(buf, len, "ext:%s", ssid->ext_psk);
503		if (os_snprintf_error(len, res)) {
504			os_free(buf);
505			buf = NULL;
506		}
507		return buf;
508	}
509#endif /* CONFIG_EXT_PASSWORD */
510
511	if (ssid->passphrase)
512		return wpa_config_write_string_ascii(
513			(const u8 *) ssid->passphrase,
514			os_strlen(ssid->passphrase));
515
516	if (ssid->psk_set)
517		return wpa_config_write_string_hex(ssid->psk, PMK_LEN);
518
519	return NULL;
520}
521#endif /* NO_CONFIG_WRITE */
522
523
524static int wpa_config_parse_proto(const struct parse_data *data,
525				  struct wpa_ssid *ssid, int line,
526				  const char *value)
527{
528	int val = 0, last, errors = 0;
529	char *start, *end, *buf;
530
531	buf = os_strdup(value);
532	if (buf == NULL)
533		return -1;
534	start = buf;
535
536	while (*start != '\0') {
537		while (*start == ' ' || *start == '\t')
538			start++;
539		if (*start == '\0')
540			break;
541		end = start;
542		while (*end != ' ' && *end != '\t' && *end != '\0')
543			end++;
544		last = *end == '\0';
545		*end = '\0';
546		if (os_strcmp(start, "WPA") == 0)
547			val |= WPA_PROTO_WPA;
548		else if (os_strcmp(start, "RSN") == 0 ||
549			 os_strcmp(start, "WPA2") == 0)
550			val |= WPA_PROTO_RSN;
551		else if (os_strcmp(start, "OSEN") == 0)
552			val |= WPA_PROTO_OSEN;
553		else {
554			wpa_printf(MSG_ERROR, "Line %d: invalid proto '%s'",
555				   line, start);
556			errors++;
557		}
558
559		if (last)
560			break;
561		start = end + 1;
562	}
563	os_free(buf);
564
565	if (val == 0) {
566		wpa_printf(MSG_ERROR,
567			   "Line %d: no proto values configured.", line);
568		errors++;
569	}
570
571	wpa_printf(MSG_MSGDUMP, "proto: 0x%x", val);
572	ssid->proto = val;
573	return errors ? -1 : 0;
574}
575
576
577#ifndef NO_CONFIG_WRITE
578static char * wpa_config_write_proto(const struct parse_data *data,
579				     struct wpa_ssid *ssid)
580{
581	int ret;
582	char *buf, *pos, *end;
583
584	pos = buf = os_zalloc(20);
585	if (buf == NULL)
586		return NULL;
587	end = buf + 20;
588
589	if (ssid->proto & WPA_PROTO_WPA) {
590		ret = os_snprintf(pos, end - pos, "%sWPA",
591				  pos == buf ? "" : " ");
592		if (os_snprintf_error(end - pos, ret))
593			return buf;
594		pos += ret;
595	}
596
597	if (ssid->proto & WPA_PROTO_RSN) {
598		ret = os_snprintf(pos, end - pos, "%sRSN",
599				  pos == buf ? "" : " ");
600		if (os_snprintf_error(end - pos, ret))
601			return buf;
602		pos += ret;
603	}
604
605	if (ssid->proto & WPA_PROTO_OSEN) {
606		ret = os_snprintf(pos, end - pos, "%sOSEN",
607				  pos == buf ? "" : " ");
608		if (os_snprintf_error(end - pos, ret))
609			return buf;
610		pos += ret;
611	}
612
613	if (pos == buf) {
614		os_free(buf);
615		buf = NULL;
616	}
617
618	return buf;
619}
620#endif /* NO_CONFIG_WRITE */
621
622
623static int wpa_config_parse_key_mgmt(const struct parse_data *data,
624				     struct wpa_ssid *ssid, int line,
625				     const char *value)
626{
627	int val = 0, last, errors = 0;
628	char *start, *end, *buf;
629
630	buf = os_strdup(value);
631	if (buf == NULL)
632		return -1;
633	start = buf;
634
635	while (*start != '\0') {
636		while (*start == ' ' || *start == '\t')
637			start++;
638		if (*start == '\0')
639			break;
640		end = start;
641		while (*end != ' ' && *end != '\t' && *end != '\0')
642			end++;
643		last = *end == '\0';
644		*end = '\0';
645		if (os_strcmp(start, "WPA-PSK") == 0)
646			val |= WPA_KEY_MGMT_PSK;
647		else if (os_strcmp(start, "WPA-EAP") == 0)
648			val |= WPA_KEY_MGMT_IEEE8021X;
649		else if (os_strcmp(start, "IEEE8021X") == 0)
650			val |= WPA_KEY_MGMT_IEEE8021X_NO_WPA;
651		else if (os_strcmp(start, "NONE") == 0)
652			val |= WPA_KEY_MGMT_NONE;
653		else if (os_strcmp(start, "WPA-NONE") == 0)
654			val |= WPA_KEY_MGMT_WPA_NONE;
655#ifdef CONFIG_IEEE80211R
656		else if (os_strcmp(start, "FT-PSK") == 0)
657			val |= WPA_KEY_MGMT_FT_PSK;
658		else if (os_strcmp(start, "FT-EAP") == 0)
659			val |= WPA_KEY_MGMT_FT_IEEE8021X;
660#endif /* CONFIG_IEEE80211R */
661#ifdef CONFIG_IEEE80211W
662		else if (os_strcmp(start, "WPA-PSK-SHA256") == 0)
663			val |= WPA_KEY_MGMT_PSK_SHA256;
664		else if (os_strcmp(start, "WPA-EAP-SHA256") == 0)
665			val |= WPA_KEY_MGMT_IEEE8021X_SHA256;
666#endif /* CONFIG_IEEE80211W */
667#ifdef CONFIG_WPS
668		else if (os_strcmp(start, "WPS") == 0)
669			val |= WPA_KEY_MGMT_WPS;
670#endif /* CONFIG_WPS */
671#ifdef CONFIG_SAE
672		else if (os_strcmp(start, "SAE") == 0)
673			val |= WPA_KEY_MGMT_SAE;
674		else if (os_strcmp(start, "FT-SAE") == 0)
675			val |= WPA_KEY_MGMT_FT_SAE;
676#endif /* CONFIG_SAE */
677#ifdef CONFIG_HS20
678		else if (os_strcmp(start, "OSEN") == 0)
679			val |= WPA_KEY_MGMT_OSEN;
680#endif /* CONFIG_HS20 */
681		else if (os_strcmp(start, "WPA-EAP-SUITE-B") == 0)
682			val |= WPA_KEY_MGMT_IEEE8021X_SUITE_B;
683		else {
684			wpa_printf(MSG_ERROR, "Line %d: invalid key_mgmt '%s'",
685				   line, start);
686			errors++;
687		}
688
689		if (last)
690			break;
691		start = end + 1;
692	}
693	os_free(buf);
694
695	if (val == 0) {
696		wpa_printf(MSG_ERROR,
697			   "Line %d: no key_mgmt values configured.", line);
698		errors++;
699	}
700
701	wpa_printf(MSG_MSGDUMP, "key_mgmt: 0x%x", val);
702	ssid->key_mgmt = val;
703	return errors ? -1 : 0;
704}
705
706
707#ifndef NO_CONFIG_WRITE
708static char * wpa_config_write_key_mgmt(const struct parse_data *data,
709					struct wpa_ssid *ssid)
710{
711	char *buf, *pos, *end;
712	int ret;
713
714	pos = buf = os_zalloc(100);
715	if (buf == NULL)
716		return NULL;
717	end = buf + 100;
718
719	if (ssid->key_mgmt & WPA_KEY_MGMT_PSK) {
720		ret = os_snprintf(pos, end - pos, "%sWPA-PSK",
721				  pos == buf ? "" : " ");
722		if (os_snprintf_error(end - pos, ret)) {
723			end[-1] = '\0';
724			return buf;
725		}
726		pos += ret;
727	}
728
729	if (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
730		ret = os_snprintf(pos, end - pos, "%sWPA-EAP",
731				  pos == buf ? "" : " ");
732		if (os_snprintf_error(end - pos, ret)) {
733			end[-1] = '\0';
734			return buf;
735		}
736		pos += ret;
737	}
738
739	if (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
740		ret = os_snprintf(pos, end - pos, "%sIEEE8021X",
741				  pos == buf ? "" : " ");
742		if (os_snprintf_error(end - pos, ret)) {
743			end[-1] = '\0';
744			return buf;
745		}
746		pos += ret;
747	}
748
749	if (ssid->key_mgmt & WPA_KEY_MGMT_NONE) {
750		ret = os_snprintf(pos, end - pos, "%sNONE",
751				  pos == buf ? "" : " ");
752		if (os_snprintf_error(end - pos, ret)) {
753			end[-1] = '\0';
754			return buf;
755		}
756		pos += ret;
757	}
758
759	if (ssid->key_mgmt & WPA_KEY_MGMT_WPA_NONE) {
760		ret = os_snprintf(pos, end - pos, "%sWPA-NONE",
761				  pos == buf ? "" : " ");
762		if (os_snprintf_error(end - pos, ret)) {
763			end[-1] = '\0';
764			return buf;
765		}
766		pos += ret;
767	}
768
769#ifdef CONFIG_IEEE80211R
770	if (ssid->key_mgmt & WPA_KEY_MGMT_FT_PSK) {
771		ret = os_snprintf(pos, end - pos, "%sFT-PSK",
772				  pos == buf ? "" : " ");
773		if (os_snprintf_error(end - pos, ret)) {
774			end[-1] = '\0';
775			return buf;
776		}
777		pos += ret;
778	}
779
780	if (ssid->key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
781		ret = os_snprintf(pos, end - pos, "%sFT-EAP",
782				  pos == buf ? "" : " ");
783		if (os_snprintf_error(end - pos, ret)) {
784			end[-1] = '\0';
785			return buf;
786		}
787		pos += ret;
788	}
789#endif /* CONFIG_IEEE80211R */
790
791#ifdef CONFIG_IEEE80211W
792	if (ssid->key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
793		ret = os_snprintf(pos, end - pos, "%sWPA-PSK-SHA256",
794				  pos == buf ? "" : " ");
795		if (os_snprintf_error(end - pos, ret)) {
796			end[-1] = '\0';
797			return buf;
798		}
799		pos += ret;
800	}
801
802	if (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
803		ret = os_snprintf(pos, end - pos, "%sWPA-EAP-SHA256",
804				  pos == buf ? "" : " ");
805		if (os_snprintf_error(end - pos, ret)) {
806			end[-1] = '\0';
807			return buf;
808		}
809		pos += ret;
810	}
811#endif /* CONFIG_IEEE80211W */
812
813#ifdef CONFIG_WPS
814	if (ssid->key_mgmt & WPA_KEY_MGMT_WPS) {
815		ret = os_snprintf(pos, end - pos, "%sWPS",
816				  pos == buf ? "" : " ");
817		if (os_snprintf_error(end - pos, ret)) {
818			end[-1] = '\0';
819			return buf;
820		}
821		pos += ret;
822	}
823#endif /* CONFIG_WPS */
824
825#ifdef CONFIG_SAE
826	if (ssid->key_mgmt & WPA_KEY_MGMT_SAE) {
827		ret = os_snprintf(pos, end - pos, "%sSAE",
828				  pos == buf ? "" : " ");
829		if (os_snprintf_error(end - pos, ret)) {
830			end[-1] = '\0';
831			return buf;
832		}
833		pos += ret;
834	}
835
836	if (ssid->key_mgmt & WPA_KEY_MGMT_FT_SAE) {
837		ret = os_snprintf(pos, end - pos, "%sFT-SAE",
838				  pos == buf ? "" : " ");
839		if (os_snprintf_error(end - pos, ret)) {
840			end[-1] = '\0';
841			return buf;
842		}
843		pos += ret;
844	}
845#endif /* CONFIG_SAE */
846
847#ifdef CONFIG_HS20
848	if (ssid->key_mgmt & WPA_KEY_MGMT_OSEN) {
849		ret = os_snprintf(pos, end - pos, "%sOSEN",
850				  pos == buf ? "" : " ");
851		if (os_snprintf_error(end - pos, ret)) {
852			end[-1] = '\0';
853			return buf;
854		}
855		pos += ret;
856	}
857#endif /* CONFIG_HS20 */
858
859	if (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) {
860		ret = os_snprintf(pos, end - pos, "%sWPA-EAP-SUITE-B",
861				  pos == buf ? "" : " ");
862		if (os_snprintf_error(end - pos, ret)) {
863			end[-1] = '\0';
864			return buf;
865		}
866		pos += ret;
867	}
868
869	if (pos == buf) {
870		os_free(buf);
871		buf = NULL;
872	}
873
874	return buf;
875}
876#endif /* NO_CONFIG_WRITE */
877
878
879static int wpa_config_parse_cipher(int line, const char *value)
880{
881	int val = wpa_parse_cipher(value);
882	if (val < 0) {
883		wpa_printf(MSG_ERROR, "Line %d: invalid cipher '%s'.",
884			   line, value);
885		return -1;
886	}
887	if (val == 0) {
888		wpa_printf(MSG_ERROR, "Line %d: no cipher values configured.",
889			   line);
890		return -1;
891	}
892	return val;
893}
894
895
896#ifndef NO_CONFIG_WRITE
897static char * wpa_config_write_cipher(int cipher)
898{
899	char *buf = os_zalloc(50);
900	if (buf == NULL)
901		return NULL;
902
903	if (wpa_write_ciphers(buf, buf + 50, cipher, " ") < 0) {
904		os_free(buf);
905		return NULL;
906	}
907
908	return buf;
909}
910#endif /* NO_CONFIG_WRITE */
911
912
913static int wpa_config_parse_pairwise(const struct parse_data *data,
914				     struct wpa_ssid *ssid, int line,
915				     const char *value)
916{
917	int val;
918	val = wpa_config_parse_cipher(line, value);
919	if (val == -1)
920		return -1;
921	if (val & ~WPA_ALLOWED_PAIRWISE_CIPHERS) {
922		wpa_printf(MSG_ERROR, "Line %d: not allowed pairwise cipher "
923			   "(0x%x).", line, val);
924		return -1;
925	}
926
927	wpa_printf(MSG_MSGDUMP, "pairwise: 0x%x", val);
928	ssid->pairwise_cipher = val;
929	return 0;
930}
931
932
933#ifndef NO_CONFIG_WRITE
934static char * wpa_config_write_pairwise(const struct parse_data *data,
935					struct wpa_ssid *ssid)
936{
937	return wpa_config_write_cipher(ssid->pairwise_cipher);
938}
939#endif /* NO_CONFIG_WRITE */
940
941
942static int wpa_config_parse_group(const struct parse_data *data,
943				  struct wpa_ssid *ssid, int line,
944				  const char *value)
945{
946	int val;
947	val = wpa_config_parse_cipher(line, value);
948	if (val == -1)
949		return -1;
950	if (val & ~WPA_ALLOWED_GROUP_CIPHERS) {
951		wpa_printf(MSG_ERROR, "Line %d: not allowed group cipher "
952			   "(0x%x).", line, val);
953		return -1;
954	}
955
956	wpa_printf(MSG_MSGDUMP, "group: 0x%x", val);
957	ssid->group_cipher = val;
958	return 0;
959}
960
961
962#ifndef NO_CONFIG_WRITE
963static char * wpa_config_write_group(const struct parse_data *data,
964				     struct wpa_ssid *ssid)
965{
966	return wpa_config_write_cipher(ssid->group_cipher);
967}
968#endif /* NO_CONFIG_WRITE */
969
970
971static int wpa_config_parse_auth_alg(const struct parse_data *data,
972				     struct wpa_ssid *ssid, int line,
973				     const char *value)
974{
975	int val = 0, last, errors = 0;
976	char *start, *end, *buf;
977
978	buf = os_strdup(value);
979	if (buf == NULL)
980		return -1;
981	start = buf;
982
983	while (*start != '\0') {
984		while (*start == ' ' || *start == '\t')
985			start++;
986		if (*start == '\0')
987			break;
988		end = start;
989		while (*end != ' ' && *end != '\t' && *end != '\0')
990			end++;
991		last = *end == '\0';
992		*end = '\0';
993		if (os_strcmp(start, "OPEN") == 0)
994			val |= WPA_AUTH_ALG_OPEN;
995		else if (os_strcmp(start, "SHARED") == 0)
996			val |= WPA_AUTH_ALG_SHARED;
997		else if (os_strcmp(start, "LEAP") == 0)
998			val |= WPA_AUTH_ALG_LEAP;
999		else {
1000			wpa_printf(MSG_ERROR, "Line %d: invalid auth_alg '%s'",
1001				   line, start);
1002			errors++;
1003		}
1004
1005		if (last)
1006			break;
1007		start = end + 1;
1008	}
1009	os_free(buf);
1010
1011	if (val == 0) {
1012		wpa_printf(MSG_ERROR,
1013			   "Line %d: no auth_alg values configured.", line);
1014		errors++;
1015	}
1016
1017	wpa_printf(MSG_MSGDUMP, "auth_alg: 0x%x", val);
1018	ssid->auth_alg = val;
1019	return errors ? -1 : 0;
1020}
1021
1022
1023#ifndef NO_CONFIG_WRITE
1024static char * wpa_config_write_auth_alg(const struct parse_data *data,
1025					struct wpa_ssid *ssid)
1026{
1027	char *buf, *pos, *end;
1028	int ret;
1029
1030	pos = buf = os_zalloc(30);
1031	if (buf == NULL)
1032		return NULL;
1033	end = buf + 30;
1034
1035	if (ssid->auth_alg & WPA_AUTH_ALG_OPEN) {
1036		ret = os_snprintf(pos, end - pos, "%sOPEN",
1037				  pos == buf ? "" : " ");
1038		if (os_snprintf_error(end - pos, ret)) {
1039			end[-1] = '\0';
1040			return buf;
1041		}
1042		pos += ret;
1043	}
1044
1045	if (ssid->auth_alg & WPA_AUTH_ALG_SHARED) {
1046		ret = os_snprintf(pos, end - pos, "%sSHARED",
1047				  pos == buf ? "" : " ");
1048		if (os_snprintf_error(end - pos, ret)) {
1049			end[-1] = '\0';
1050			return buf;
1051		}
1052		pos += ret;
1053	}
1054
1055	if (ssid->auth_alg & WPA_AUTH_ALG_LEAP) {
1056		ret = os_snprintf(pos, end - pos, "%sLEAP",
1057				  pos == buf ? "" : " ");
1058		if (os_snprintf_error(end - pos, ret)) {
1059			end[-1] = '\0';
1060			return buf;
1061		}
1062		pos += ret;
1063	}
1064
1065	if (pos == buf) {
1066		os_free(buf);
1067		buf = NULL;
1068	}
1069
1070	return buf;
1071}
1072#endif /* NO_CONFIG_WRITE */
1073
1074
1075static int * wpa_config_parse_int_array(const char *value)
1076{
1077	int *freqs;
1078	size_t used, len;
1079	const char *pos;
1080
1081	used = 0;
1082	len = 10;
1083	freqs = os_calloc(len + 1, sizeof(int));
1084	if (freqs == NULL)
1085		return NULL;
1086
1087	pos = value;
1088	while (pos) {
1089		while (*pos == ' ')
1090			pos++;
1091		if (used == len) {
1092			int *n;
1093			size_t i;
1094			n = os_realloc_array(freqs, len * 2 + 1, sizeof(int));
1095			if (n == NULL) {
1096				os_free(freqs);
1097				return NULL;
1098			}
1099			for (i = len; i <= len * 2; i++)
1100				n[i] = 0;
1101			freqs = n;
1102			len *= 2;
1103		}
1104
1105		freqs[used] = atoi(pos);
1106		if (freqs[used] == 0)
1107			break;
1108		used++;
1109		pos = os_strchr(pos + 1, ' ');
1110	}
1111
1112	return freqs;
1113}
1114
1115
1116static int wpa_config_parse_scan_freq(const struct parse_data *data,
1117				      struct wpa_ssid *ssid, int line,
1118				      const char *value)
1119{
1120	int *freqs;
1121
1122	freqs = wpa_config_parse_int_array(value);
1123	if (freqs == NULL)
1124		return -1;
1125	if (freqs[0] == 0) {
1126		os_free(freqs);
1127		freqs = NULL;
1128	}
1129	os_free(ssid->scan_freq);
1130	ssid->scan_freq = freqs;
1131
1132	return 0;
1133}
1134
1135
1136static int wpa_config_parse_freq_list(const struct parse_data *data,
1137				      struct wpa_ssid *ssid, int line,
1138				      const char *value)
1139{
1140	int *freqs;
1141
1142	freqs = wpa_config_parse_int_array(value);
1143	if (freqs == NULL)
1144		return -1;
1145	if (freqs[0] == 0) {
1146		os_free(freqs);
1147		freqs = NULL;
1148	}
1149	os_free(ssid->freq_list);
1150	ssid->freq_list = freqs;
1151
1152	return 0;
1153}
1154
1155
1156#ifndef NO_CONFIG_WRITE
1157static char * wpa_config_write_freqs(const struct parse_data *data,
1158				     const int *freqs)
1159{
1160	char *buf, *pos, *end;
1161	int i, ret;
1162	size_t count;
1163
1164	if (freqs == NULL)
1165		return NULL;
1166
1167	count = 0;
1168	for (i = 0; freqs[i]; i++)
1169		count++;
1170
1171	pos = buf = os_zalloc(10 * count + 1);
1172	if (buf == NULL)
1173		return NULL;
1174	end = buf + 10 * count + 1;
1175
1176	for (i = 0; freqs[i]; i++) {
1177		ret = os_snprintf(pos, end - pos, "%s%u",
1178				  i == 0 ? "" : " ", freqs[i]);
1179		if (os_snprintf_error(end - pos, ret)) {
1180			end[-1] = '\0';
1181			return buf;
1182		}
1183		pos += ret;
1184	}
1185
1186	return buf;
1187}
1188
1189
1190static char * wpa_config_write_scan_freq(const struct parse_data *data,
1191					 struct wpa_ssid *ssid)
1192{
1193	return wpa_config_write_freqs(data, ssid->scan_freq);
1194}
1195
1196
1197static char * wpa_config_write_freq_list(const struct parse_data *data,
1198					 struct wpa_ssid *ssid)
1199{
1200	return wpa_config_write_freqs(data, ssid->freq_list);
1201}
1202#endif /* NO_CONFIG_WRITE */
1203
1204
1205#ifdef IEEE8021X_EAPOL
1206static int wpa_config_parse_eap(const struct parse_data *data,
1207				struct wpa_ssid *ssid, int line,
1208				const char *value)
1209{
1210	int last, errors = 0;
1211	char *start, *end, *buf;
1212	struct eap_method_type *methods = NULL, *tmp;
1213	size_t num_methods = 0;
1214
1215	buf = os_strdup(value);
1216	if (buf == NULL)
1217		return -1;
1218	start = buf;
1219
1220	while (*start != '\0') {
1221		while (*start == ' ' || *start == '\t')
1222			start++;
1223		if (*start == '\0')
1224			break;
1225		end = start;
1226		while (*end != ' ' && *end != '\t' && *end != '\0')
1227			end++;
1228		last = *end == '\0';
1229		*end = '\0';
1230		tmp = methods;
1231		methods = os_realloc_array(methods, num_methods + 1,
1232					   sizeof(*methods));
1233		if (methods == NULL) {
1234			os_free(tmp);
1235			os_free(buf);
1236			return -1;
1237		}
1238		methods[num_methods].method = eap_peer_get_type(
1239			start, &methods[num_methods].vendor);
1240		if (methods[num_methods].vendor == EAP_VENDOR_IETF &&
1241		    methods[num_methods].method == EAP_TYPE_NONE) {
1242			wpa_printf(MSG_ERROR, "Line %d: unknown EAP method "
1243				   "'%s'", line, start);
1244			wpa_printf(MSG_ERROR, "You may need to add support for"
1245				   " this EAP method during wpa_supplicant\n"
1246				   "build time configuration.\n"
1247				   "See README for more information.");
1248			errors++;
1249		} else if (methods[num_methods].vendor == EAP_VENDOR_IETF &&
1250			   methods[num_methods].method == EAP_TYPE_LEAP)
1251			ssid->leap++;
1252		else
1253			ssid->non_leap++;
1254		num_methods++;
1255		if (last)
1256			break;
1257		start = end + 1;
1258	}
1259	os_free(buf);
1260
1261	tmp = methods;
1262	methods = os_realloc_array(methods, num_methods + 1, sizeof(*methods));
1263	if (methods == NULL) {
1264		os_free(tmp);
1265		return -1;
1266	}
1267	methods[num_methods].vendor = EAP_VENDOR_IETF;
1268	methods[num_methods].method = EAP_TYPE_NONE;
1269	num_methods++;
1270
1271	wpa_hexdump(MSG_MSGDUMP, "eap methods",
1272		    (u8 *) methods, num_methods * sizeof(*methods));
1273	os_free(ssid->eap.eap_methods);
1274	ssid->eap.eap_methods = methods;
1275	return errors ? -1 : 0;
1276}
1277
1278
1279static char * wpa_config_write_eap(const struct parse_data *data,
1280				   struct wpa_ssid *ssid)
1281{
1282	int i, ret;
1283	char *buf, *pos, *end;
1284	const struct eap_method_type *eap_methods = ssid->eap.eap_methods;
1285	const char *name;
1286
1287	if (eap_methods == NULL)
1288		return NULL;
1289
1290	pos = buf = os_zalloc(100);
1291	if (buf == NULL)
1292		return NULL;
1293	end = buf + 100;
1294
1295	for (i = 0; eap_methods[i].vendor != EAP_VENDOR_IETF ||
1296		     eap_methods[i].method != EAP_TYPE_NONE; i++) {
1297		name = eap_get_name(eap_methods[i].vendor,
1298				    eap_methods[i].method);
1299		if (name) {
1300			ret = os_snprintf(pos, end - pos, "%s%s",
1301					  pos == buf ? "" : " ", name);
1302			if (os_snprintf_error(end - pos, ret))
1303				break;
1304			pos += ret;
1305		}
1306	}
1307
1308	end[-1] = '\0';
1309
1310	return buf;
1311}
1312
1313
1314static int wpa_config_parse_password(const struct parse_data *data,
1315				     struct wpa_ssid *ssid, int line,
1316				     const char *value)
1317{
1318	u8 *hash;
1319
1320	if (os_strcmp(value, "NULL") == 0) {
1321		wpa_printf(MSG_DEBUG, "Unset configuration string 'password'");
1322		bin_clear_free(ssid->eap.password, ssid->eap.password_len);
1323		ssid->eap.password = NULL;
1324		ssid->eap.password_len = 0;
1325		return 0;
1326	}
1327
1328#ifdef CONFIG_EXT_PASSWORD
1329	if (os_strncmp(value, "ext:", 4) == 0) {
1330		char *name = os_strdup(value + 4);
1331		if (name == NULL)
1332			return -1;
1333		bin_clear_free(ssid->eap.password, ssid->eap.password_len);
1334		ssid->eap.password = (u8 *) name;
1335		ssid->eap.password_len = os_strlen(name);
1336		ssid->eap.flags &= ~EAP_CONFIG_FLAGS_PASSWORD_NTHASH;
1337		ssid->eap.flags |= EAP_CONFIG_FLAGS_EXT_PASSWORD;
1338		return 0;
1339	}
1340#endif /* CONFIG_EXT_PASSWORD */
1341
1342	if (os_strncmp(value, "hash:", 5) != 0) {
1343		char *tmp;
1344		size_t res_len;
1345
1346		tmp = wpa_config_parse_string(value, &res_len);
1347		if (tmp == NULL) {
1348			wpa_printf(MSG_ERROR, "Line %d: failed to parse "
1349				   "password.", line);
1350			return -1;
1351		}
1352		wpa_hexdump_ascii_key(MSG_MSGDUMP, data->name,
1353				      (u8 *) tmp, res_len);
1354
1355		bin_clear_free(ssid->eap.password, ssid->eap.password_len);
1356		ssid->eap.password = (u8 *) tmp;
1357		ssid->eap.password_len = res_len;
1358		ssid->eap.flags &= ~EAP_CONFIG_FLAGS_PASSWORD_NTHASH;
1359		ssid->eap.flags &= ~EAP_CONFIG_FLAGS_EXT_PASSWORD;
1360
1361		return 0;
1362	}
1363
1364
1365	/* NtPasswordHash: hash:<32 hex digits> */
1366	if (os_strlen(value + 5) != 2 * 16) {
1367		wpa_printf(MSG_ERROR, "Line %d: Invalid password hash length "
1368			   "(expected 32 hex digits)", line);
1369		return -1;
1370	}
1371
1372	hash = os_malloc(16);
1373	if (hash == NULL)
1374		return -1;
1375
1376	if (hexstr2bin(value + 5, hash, 16)) {
1377		os_free(hash);
1378		wpa_printf(MSG_ERROR, "Line %d: Invalid password hash", line);
1379		return -1;
1380	}
1381
1382	wpa_hexdump_key(MSG_MSGDUMP, data->name, hash, 16);
1383
1384	bin_clear_free(ssid->eap.password, ssid->eap.password_len);
1385	ssid->eap.password = hash;
1386	ssid->eap.password_len = 16;
1387	ssid->eap.flags |= EAP_CONFIG_FLAGS_PASSWORD_NTHASH;
1388	ssid->eap.flags &= ~EAP_CONFIG_FLAGS_EXT_PASSWORD;
1389
1390	return 0;
1391}
1392
1393
1394static char * wpa_config_write_password(const struct parse_data *data,
1395					struct wpa_ssid *ssid)
1396{
1397	char *buf;
1398
1399	if (ssid->eap.password == NULL)
1400		return NULL;
1401
1402#ifdef CONFIG_EXT_PASSWORD
1403	if (ssid->eap.flags & EAP_CONFIG_FLAGS_EXT_PASSWORD) {
1404		buf = os_zalloc(4 + ssid->eap.password_len + 1);
1405		if (buf == NULL)
1406			return NULL;
1407		os_memcpy(buf, "ext:", 4);
1408		os_memcpy(buf + 4, ssid->eap.password, ssid->eap.password_len);
1409		return buf;
1410	}
1411#endif /* CONFIG_EXT_PASSWORD */
1412
1413	if (!(ssid->eap.flags & EAP_CONFIG_FLAGS_PASSWORD_NTHASH)) {
1414		return wpa_config_write_string(
1415			ssid->eap.password, ssid->eap.password_len);
1416	}
1417
1418	buf = os_malloc(5 + 32 + 1);
1419	if (buf == NULL)
1420		return NULL;
1421
1422	os_memcpy(buf, "hash:", 5);
1423	wpa_snprintf_hex(buf + 5, 32 + 1, ssid->eap.password, 16);
1424
1425	return buf;
1426}
1427#endif /* IEEE8021X_EAPOL */
1428
1429
1430static int wpa_config_parse_wep_key(u8 *key, size_t *len, int line,
1431				    const char *value, int idx)
1432{
1433	char *buf, title[20];
1434	int res;
1435
1436	buf = wpa_config_parse_string(value, len);
1437	if (buf == NULL) {
1438		wpa_printf(MSG_ERROR, "Line %d: Invalid WEP key %d '%s'.",
1439			   line, idx, value);
1440		return -1;
1441	}
1442	if (*len > MAX_WEP_KEY_LEN) {
1443		wpa_printf(MSG_ERROR, "Line %d: Too long WEP key %d '%s'.",
1444			   line, idx, value);
1445		os_free(buf);
1446		return -1;
1447	}
1448	if (*len && *len != 5 && *len != 13 && *len != 16) {
1449		wpa_printf(MSG_ERROR, "Line %d: Invalid WEP key length %u - "
1450			   "this network block will be ignored",
1451			   line, (unsigned int) *len);
1452	}
1453	os_memcpy(key, buf, *len);
1454	str_clear_free(buf);
1455	res = os_snprintf(title, sizeof(title), "wep_key%d", idx);
1456	if (!os_snprintf_error(sizeof(title), res))
1457		wpa_hexdump_key(MSG_MSGDUMP, title, key, *len);
1458	return 0;
1459}
1460
1461
1462static int wpa_config_parse_wep_key0(const struct parse_data *data,
1463				     struct wpa_ssid *ssid, int line,
1464				     const char *value)
1465{
1466	return wpa_config_parse_wep_key(ssid->wep_key[0],
1467					&ssid->wep_key_len[0], line,
1468					value, 0);
1469}
1470
1471
1472static int wpa_config_parse_wep_key1(const struct parse_data *data,
1473				     struct wpa_ssid *ssid, int line,
1474				     const char *value)
1475{
1476	return wpa_config_parse_wep_key(ssid->wep_key[1],
1477					&ssid->wep_key_len[1], line,
1478					value, 1);
1479}
1480
1481
1482static int wpa_config_parse_wep_key2(const struct parse_data *data,
1483				     struct wpa_ssid *ssid, int line,
1484				     const char *value)
1485{
1486	return wpa_config_parse_wep_key(ssid->wep_key[2],
1487					&ssid->wep_key_len[2], line,
1488					value, 2);
1489}
1490
1491
1492static int wpa_config_parse_wep_key3(const struct parse_data *data,
1493				     struct wpa_ssid *ssid, int line,
1494				     const char *value)
1495{
1496	return wpa_config_parse_wep_key(ssid->wep_key[3],
1497					&ssid->wep_key_len[3], line,
1498					value, 3);
1499}
1500
1501
1502#ifndef NO_CONFIG_WRITE
1503static char * wpa_config_write_wep_key(struct wpa_ssid *ssid, int idx)
1504{
1505	if (ssid->wep_key_len[idx] == 0)
1506		return NULL;
1507	return wpa_config_write_string(ssid->wep_key[idx],
1508				       ssid->wep_key_len[idx]);
1509}
1510
1511
1512static char * wpa_config_write_wep_key0(const struct parse_data *data,
1513					struct wpa_ssid *ssid)
1514{
1515	return wpa_config_write_wep_key(ssid, 0);
1516}
1517
1518
1519static char * wpa_config_write_wep_key1(const struct parse_data *data,
1520					struct wpa_ssid *ssid)
1521{
1522	return wpa_config_write_wep_key(ssid, 1);
1523}
1524
1525
1526static char * wpa_config_write_wep_key2(const struct parse_data *data,
1527					struct wpa_ssid *ssid)
1528{
1529	return wpa_config_write_wep_key(ssid, 2);
1530}
1531
1532
1533static char * wpa_config_write_wep_key3(const struct parse_data *data,
1534					struct wpa_ssid *ssid)
1535{
1536	return wpa_config_write_wep_key(ssid, 3);
1537}
1538#endif /* NO_CONFIG_WRITE */
1539
1540
1541#ifdef CONFIG_P2P
1542
1543static int wpa_config_parse_go_p2p_dev_addr(const struct parse_data *data,
1544					    struct wpa_ssid *ssid, int line,
1545					    const char *value)
1546{
1547	if (value[0] == '\0' || os_strcmp(value, "\"\"") == 0 ||
1548	    os_strcmp(value, "any") == 0) {
1549		os_memset(ssid->go_p2p_dev_addr, 0, ETH_ALEN);
1550		wpa_printf(MSG_MSGDUMP, "GO P2P Device Address any");
1551		return 0;
1552	}
1553	if (hwaddr_aton(value, ssid->go_p2p_dev_addr)) {
1554		wpa_printf(MSG_ERROR, "Line %d: Invalid GO P2P Device Address '%s'.",
1555			   line, value);
1556		return -1;
1557	}
1558	ssid->bssid_set = 1;
1559	wpa_printf(MSG_MSGDUMP, "GO P2P Device Address " MACSTR,
1560		   MAC2STR(ssid->go_p2p_dev_addr));
1561	return 0;
1562}
1563
1564
1565#ifndef NO_CONFIG_WRITE
1566static char * wpa_config_write_go_p2p_dev_addr(const struct parse_data *data,
1567					       struct wpa_ssid *ssid)
1568{
1569	char *value;
1570	int res;
1571
1572	if (is_zero_ether_addr(ssid->go_p2p_dev_addr))
1573		return NULL;
1574
1575	value = os_malloc(20);
1576	if (value == NULL)
1577		return NULL;
1578	res = os_snprintf(value, 20, MACSTR, MAC2STR(ssid->go_p2p_dev_addr));
1579	if (os_snprintf_error(20, res)) {
1580		os_free(value);
1581		return NULL;
1582	}
1583	value[20 - 1] = '\0';
1584	return value;
1585}
1586#endif /* NO_CONFIG_WRITE */
1587
1588
1589static int wpa_config_parse_p2p_client_list(const struct parse_data *data,
1590					    struct wpa_ssid *ssid, int line,
1591					    const char *value)
1592{
1593	return wpa_config_parse_addr_list(data, line, value,
1594					  &ssid->p2p_client_list,
1595					  &ssid->num_p2p_clients,
1596					  "p2p_client_list", 0, 0);
1597}
1598
1599
1600#ifndef NO_CONFIG_WRITE
1601static char * wpa_config_write_p2p_client_list(const struct parse_data *data,
1602					       struct wpa_ssid *ssid)
1603{
1604	return wpa_config_write_addr_list(data, ssid->p2p_client_list,
1605					  ssid->num_p2p_clients,
1606					  "p2p_client_list");
1607}
1608#endif /* NO_CONFIG_WRITE */
1609
1610
1611static int wpa_config_parse_psk_list(const struct parse_data *data,
1612				     struct wpa_ssid *ssid, int line,
1613				     const char *value)
1614{
1615	struct psk_list_entry *p;
1616	const char *pos;
1617
1618	p = os_zalloc(sizeof(*p));
1619	if (p == NULL)
1620		return -1;
1621
1622	pos = value;
1623	if (os_strncmp(pos, "P2P-", 4) == 0) {
1624		p->p2p = 1;
1625		pos += 4;
1626	}
1627
1628	if (hwaddr_aton(pos, p->addr)) {
1629		wpa_printf(MSG_ERROR, "Line %d: Invalid psk_list address '%s'",
1630			   line, pos);
1631		os_free(p);
1632		return -1;
1633	}
1634	pos += 17;
1635	if (*pos != '-') {
1636		wpa_printf(MSG_ERROR, "Line %d: Invalid psk_list '%s'",
1637			   line, pos);
1638		os_free(p);
1639		return -1;
1640	}
1641	pos++;
1642
1643	if (hexstr2bin(pos, p->psk, PMK_LEN) || pos[PMK_LEN * 2] != '\0') {
1644		wpa_printf(MSG_ERROR, "Line %d: Invalid psk_list PSK '%s'",
1645			   line, pos);
1646		os_free(p);
1647		return -1;
1648	}
1649
1650	dl_list_add(&ssid->psk_list, &p->list);
1651
1652	return 0;
1653}
1654
1655
1656#ifndef NO_CONFIG_WRITE
1657static char * wpa_config_write_psk_list(const struct parse_data *data,
1658					struct wpa_ssid *ssid)
1659{
1660	return NULL;
1661}
1662#endif /* NO_CONFIG_WRITE */
1663
1664#endif /* CONFIG_P2P */
1665
1666
1667#ifdef CONFIG_MESH
1668
1669static int wpa_config_parse_mesh_basic_rates(const struct parse_data *data,
1670					     struct wpa_ssid *ssid, int line,
1671					     const char *value)
1672{
1673	int *rates = wpa_config_parse_int_array(value);
1674
1675	if (rates == NULL) {
1676		wpa_printf(MSG_ERROR, "Line %d: Invalid mesh_basic_rates '%s'",
1677			   line, value);
1678		return -1;
1679	}
1680	if (rates[0] == 0) {
1681		os_free(rates);
1682		rates = NULL;
1683	}
1684
1685	os_free(ssid->mesh_basic_rates);
1686	ssid->mesh_basic_rates = rates;
1687
1688	return 0;
1689}
1690
1691
1692#ifndef NO_CONFIG_WRITE
1693
1694static char * wpa_config_write_mesh_basic_rates(const struct parse_data *data,
1695						struct wpa_ssid *ssid)
1696{
1697	return wpa_config_write_freqs(data, ssid->mesh_basic_rates);
1698}
1699
1700#endif /* NO_CONFIG_WRITE */
1701
1702#endif /* CONFIG_MESH */
1703
1704
1705/* Helper macros for network block parser */
1706
1707#ifdef OFFSET
1708#undef OFFSET
1709#endif /* OFFSET */
1710/* OFFSET: Get offset of a variable within the wpa_ssid structure */
1711#define OFFSET(v) ((void *) &((struct wpa_ssid *) 0)->v)
1712
1713/* STR: Define a string variable for an ASCII string; f = field name */
1714#ifdef NO_CONFIG_WRITE
1715#define _STR(f) #f, wpa_config_parse_str, OFFSET(f)
1716#define _STRe(f) #f, wpa_config_parse_str, OFFSET(eap.f)
1717#else /* NO_CONFIG_WRITE */
1718#define _STR(f) #f, wpa_config_parse_str, wpa_config_write_str, OFFSET(f)
1719#define _STRe(f) #f, wpa_config_parse_str, wpa_config_write_str, OFFSET(eap.f)
1720#endif /* NO_CONFIG_WRITE */
1721#define STR(f) _STR(f), NULL, NULL, NULL, 0
1722#define STRe(f) _STRe(f), NULL, NULL, NULL, 0
1723#define STR_KEY(f) _STR(f), NULL, NULL, NULL, 1
1724#define STR_KEYe(f) _STRe(f), NULL, NULL, NULL, 1
1725
1726/* STR_LEN: Define a string variable with a separate variable for storing the
1727 * data length. Unlike STR(), this can be used to store arbitrary binary data
1728 * (i.e., even nul termination character). */
1729#define _STR_LEN(f) _STR(f), OFFSET(f ## _len)
1730#define _STR_LENe(f) _STRe(f), OFFSET(eap.f ## _len)
1731#define STR_LEN(f) _STR_LEN(f), NULL, NULL, 0
1732#define STR_LENe(f) _STR_LENe(f), NULL, NULL, 0
1733#define STR_LEN_KEY(f) _STR_LEN(f), NULL, NULL, 1
1734
1735/* STR_RANGE: Like STR_LEN(), but with minimum and maximum allowed length
1736 * explicitly specified. */
1737#define _STR_RANGE(f, min, max) _STR_LEN(f), (void *) (min), (void *) (max)
1738#define STR_RANGE(f, min, max) _STR_RANGE(f, min, max), 0
1739#define STR_RANGE_KEY(f, min, max) _STR_RANGE(f, min, max), 1
1740
1741#ifdef NO_CONFIG_WRITE
1742#define _INT(f) #f, wpa_config_parse_int, OFFSET(f), (void *) 0
1743#define _INTe(f) #f, wpa_config_parse_int, OFFSET(eap.f), (void *) 0
1744#else /* NO_CONFIG_WRITE */
1745#define _INT(f) #f, wpa_config_parse_int, wpa_config_write_int, \
1746	OFFSET(f), (void *) 0
1747#define _INTe(f) #f, wpa_config_parse_int, wpa_config_write_int, \
1748	OFFSET(eap.f), (void *) 0
1749#endif /* NO_CONFIG_WRITE */
1750
1751/* INT: Define an integer variable */
1752#define INT(f) _INT(f), NULL, NULL, 0
1753#define INTe(f) _INTe(f), NULL, NULL, 0
1754
1755/* INT_RANGE: Define an integer variable with allowed value range */
1756#define INT_RANGE(f, min, max) _INT(f), (void *) (min), (void *) (max), 0
1757
1758/* FUNC: Define a configuration variable that uses a custom function for
1759 * parsing and writing the value. */
1760#ifdef NO_CONFIG_WRITE
1761#define _FUNC(f) #f, wpa_config_parse_ ## f, NULL, NULL, NULL, NULL
1762#else /* NO_CONFIG_WRITE */
1763#define _FUNC(f) #f, wpa_config_parse_ ## f, wpa_config_write_ ## f, \
1764	NULL, NULL, NULL, NULL
1765#endif /* NO_CONFIG_WRITE */
1766#define FUNC(f) _FUNC(f), 0
1767#define FUNC_KEY(f) _FUNC(f), 1
1768
1769/*
1770 * Table of network configuration variables. This table is used to parse each
1771 * network configuration variable, e.g., each line in wpa_supplicant.conf file
1772 * that is inside a network block.
1773 *
1774 * This table is generated using the helper macros defined above and with
1775 * generous help from the C pre-processor. The field name is stored as a string
1776 * into .name and for STR and INT types, the offset of the target buffer within
1777 * struct wpa_ssid is stored in .param1. .param2 (if not NULL) is similar
1778 * offset to the field containing the length of the configuration variable.
1779 * .param3 and .param4 can be used to mark the allowed range (length for STR
1780 * and value for INT).
1781 *
1782 * For each configuration line in wpa_supplicant.conf, the parser goes through
1783 * this table and select the entry that matches with the field name. The parser
1784 * function (.parser) is then called to parse the actual value of the field.
1785 *
1786 * This kind of mechanism makes it easy to add new configuration parameters,
1787 * since only one line needs to be added into this table and into the
1788 * struct wpa_ssid definition if the new variable is either a string or
1789 * integer. More complex types will need to use their own parser and writer
1790 * functions.
1791 */
1792static const struct parse_data ssid_fields[] = {
1793	{ STR_RANGE(ssid, 0, MAX_SSID_LEN) },
1794	{ INT_RANGE(scan_ssid, 0, 1) },
1795	{ FUNC(bssid) },
1796	{ FUNC(bssid_blacklist) },
1797	{ FUNC(bssid_whitelist) },
1798	{ FUNC_KEY(psk) },
1799	{ FUNC(proto) },
1800	{ FUNC(key_mgmt) },
1801	{ INT(bg_scan_period) },
1802	{ FUNC(pairwise) },
1803	{ FUNC(group) },
1804	{ FUNC(auth_alg) },
1805	{ FUNC(scan_freq) },
1806	{ FUNC(freq_list) },
1807#ifdef IEEE8021X_EAPOL
1808	{ FUNC(eap) },
1809	{ STR_LENe(identity) },
1810	{ STR_LENe(anonymous_identity) },
1811	{ FUNC_KEY(password) },
1812	{ STRe(ca_cert) },
1813	{ STRe(ca_path) },
1814	{ STRe(client_cert) },
1815	{ STRe(private_key) },
1816	{ STR_KEYe(private_key_passwd) },
1817	{ STRe(dh_file) },
1818	{ STRe(subject_match) },
1819	{ STRe(altsubject_match) },
1820	{ STRe(domain_suffix_match) },
1821	{ STRe(ca_cert2) },
1822	{ STRe(ca_path2) },
1823	{ STRe(client_cert2) },
1824	{ STRe(private_key2) },
1825	{ STR_KEYe(private_key2_passwd) },
1826	{ STRe(dh_file2) },
1827	{ STRe(subject_match2) },
1828	{ STRe(altsubject_match2) },
1829	{ STRe(domain_suffix_match2) },
1830	{ STRe(phase1) },
1831	{ STRe(phase2) },
1832	{ STRe(pcsc) },
1833	{ STR_KEYe(pin) },
1834	{ STRe(engine_id) },
1835	{ STRe(key_id) },
1836	{ STRe(cert_id) },
1837	{ STRe(ca_cert_id) },
1838	{ STR_KEYe(pin2) },
1839	{ STRe(engine2_id) },
1840	{ STRe(key2_id) },
1841	{ STRe(cert2_id) },
1842	{ STRe(ca_cert2_id) },
1843	{ INTe(engine) },
1844	{ INTe(engine2) },
1845	{ INT(eapol_flags) },
1846	{ INTe(sim_num) },
1847	{ STRe(openssl_ciphers) },
1848	{ INTe(erp) },
1849#endif /* IEEE8021X_EAPOL */
1850	{ FUNC_KEY(wep_key0) },
1851	{ FUNC_KEY(wep_key1) },
1852	{ FUNC_KEY(wep_key2) },
1853	{ FUNC_KEY(wep_key3) },
1854	{ INT(wep_tx_keyidx) },
1855	{ INT(priority) },
1856#ifdef IEEE8021X_EAPOL
1857	{ INT(eap_workaround) },
1858	{ STRe(pac_file) },
1859	{ INTe(fragment_size) },
1860	{ INTe(ocsp) },
1861#endif /* IEEE8021X_EAPOL */
1862#ifdef CONFIG_MESH
1863	{ INT_RANGE(mode, 0, 5) },
1864	{ INT_RANGE(no_auto_peer, 0, 1) },
1865#else /* CONFIG_MESH */
1866	{ INT_RANGE(mode, 0, 4) },
1867#endif /* CONFIG_MESH */
1868	{ INT_RANGE(proactive_key_caching, 0, 1) },
1869	{ INT_RANGE(disabled, 0, 2) },
1870	{ STR(id_str) },
1871#ifdef CONFIG_IEEE80211W
1872	{ INT_RANGE(ieee80211w, 0, 2) },
1873#endif /* CONFIG_IEEE80211W */
1874	{ INT_RANGE(peerkey, 0, 1) },
1875	{ INT_RANGE(mixed_cell, 0, 1) },
1876	{ INT_RANGE(frequency, 0, 65000) },
1877#ifdef CONFIG_MESH
1878	{ FUNC(mesh_basic_rates) },
1879	{ INT(dot11MeshMaxRetries) },
1880	{ INT(dot11MeshRetryTimeout) },
1881	{ INT(dot11MeshConfirmTimeout) },
1882	{ INT(dot11MeshHoldingTimeout) },
1883#endif /* CONFIG_MESH */
1884	{ INT(wpa_ptk_rekey) },
1885	{ STR(bgscan) },
1886	{ INT_RANGE(ignore_broadcast_ssid, 0, 2) },
1887#ifdef CONFIG_P2P
1888	{ FUNC(go_p2p_dev_addr) },
1889	{ FUNC(p2p_client_list) },
1890	{ FUNC(psk_list) },
1891#endif /* CONFIG_P2P */
1892#ifdef CONFIG_HT_OVERRIDES
1893	{ INT_RANGE(disable_ht, 0, 1) },
1894	{ INT_RANGE(disable_ht40, -1, 1) },
1895	{ INT_RANGE(disable_sgi, 0, 1) },
1896	{ INT_RANGE(disable_ldpc, 0, 1) },
1897	{ INT_RANGE(ht40_intolerant, 0, 1) },
1898	{ INT_RANGE(disable_max_amsdu, -1, 1) },
1899	{ INT_RANGE(ampdu_factor, -1, 3) },
1900	{ INT_RANGE(ampdu_density, -1, 7) },
1901	{ STR(ht_mcs) },
1902#endif /* CONFIG_HT_OVERRIDES */
1903#ifdef CONFIG_VHT_OVERRIDES
1904	{ INT_RANGE(disable_vht, 0, 1) },
1905	{ INT(vht_capa) },
1906	{ INT(vht_capa_mask) },
1907	{ INT_RANGE(vht_rx_mcs_nss_1, -1, 3) },
1908	{ INT_RANGE(vht_rx_mcs_nss_2, -1, 3) },
1909	{ INT_RANGE(vht_rx_mcs_nss_3, -1, 3) },
1910	{ INT_RANGE(vht_rx_mcs_nss_4, -1, 3) },
1911	{ INT_RANGE(vht_rx_mcs_nss_5, -1, 3) },
1912	{ INT_RANGE(vht_rx_mcs_nss_6, -1, 3) },
1913	{ INT_RANGE(vht_rx_mcs_nss_7, -1, 3) },
1914	{ INT_RANGE(vht_rx_mcs_nss_8, -1, 3) },
1915	{ INT_RANGE(vht_tx_mcs_nss_1, -1, 3) },
1916	{ INT_RANGE(vht_tx_mcs_nss_2, -1, 3) },
1917	{ INT_RANGE(vht_tx_mcs_nss_3, -1, 3) },
1918	{ INT_RANGE(vht_tx_mcs_nss_4, -1, 3) },
1919	{ INT_RANGE(vht_tx_mcs_nss_5, -1, 3) },
1920	{ INT_RANGE(vht_tx_mcs_nss_6, -1, 3) },
1921	{ INT_RANGE(vht_tx_mcs_nss_7, -1, 3) },
1922	{ INT_RANGE(vht_tx_mcs_nss_8, -1, 3) },
1923#endif /* CONFIG_VHT_OVERRIDES */
1924	{ INT(ap_max_inactivity) },
1925	{ INT(dtim_period) },
1926	{ INT(beacon_int) },
1927#ifdef CONFIG_MACSEC
1928	{ INT_RANGE(macsec_policy, 0, 1) },
1929#endif /* CONFIG_MACSEC */
1930#ifdef CONFIG_HS20
1931	{ INT(update_identifier) },
1932#endif /* CONFIG_HS20 */
1933	{ INT_RANGE(mac_addr, 0, 2) },
1934};
1935
1936#undef OFFSET
1937#undef _STR
1938#undef STR
1939#undef STR_KEY
1940#undef _STR_LEN
1941#undef STR_LEN
1942#undef STR_LEN_KEY
1943#undef _STR_RANGE
1944#undef STR_RANGE
1945#undef STR_RANGE_KEY
1946#undef _INT
1947#undef INT
1948#undef INT_RANGE
1949#undef _FUNC
1950#undef FUNC
1951#undef FUNC_KEY
1952#define NUM_SSID_FIELDS ARRAY_SIZE(ssid_fields)
1953
1954
1955/**
1956 * wpa_config_add_prio_network - Add a network to priority lists
1957 * @config: Configuration data from wpa_config_read()
1958 * @ssid: Pointer to the network configuration to be added to the list
1959 * Returns: 0 on success, -1 on failure
1960 *
1961 * This function is used to add a network block to the priority list of
1962 * networks. This must be called for each network when reading in the full
1963 * configuration. In addition, this can be used indirectly when updating
1964 * priorities by calling wpa_config_update_prio_list().
1965 */
1966int wpa_config_add_prio_network(struct wpa_config *config,
1967				struct wpa_ssid *ssid)
1968{
1969	int prio;
1970	struct wpa_ssid *prev, **nlist;
1971
1972	/*
1973	 * Add to an existing priority list if one is available for the
1974	 * configured priority level for this network.
1975	 */
1976	for (prio = 0; prio < config->num_prio; prio++) {
1977		prev = config->pssid[prio];
1978		if (prev->priority == ssid->priority) {
1979			while (prev->pnext)
1980				prev = prev->pnext;
1981			prev->pnext = ssid;
1982			return 0;
1983		}
1984	}
1985
1986	/* First network for this priority - add a new priority list */
1987	nlist = os_realloc_array(config->pssid, config->num_prio + 1,
1988				 sizeof(struct wpa_ssid *));
1989	if (nlist == NULL)
1990		return -1;
1991
1992	for (prio = 0; prio < config->num_prio; prio++) {
1993		if (nlist[prio]->priority < ssid->priority) {
1994			os_memmove(&nlist[prio + 1], &nlist[prio],
1995				   (config->num_prio - prio) *
1996				   sizeof(struct wpa_ssid *));
1997			break;
1998		}
1999	}
2000
2001	nlist[prio] = ssid;
2002	config->num_prio++;
2003	config->pssid = nlist;
2004
2005	return 0;
2006}
2007
2008
2009/**
2010 * wpa_config_update_prio_list - Update network priority list
2011 * @config: Configuration data from wpa_config_read()
2012 * Returns: 0 on success, -1 on failure
2013 *
2014 * This function is called to update the priority list of networks in the
2015 * configuration when a network is being added or removed. This is also called
2016 * if a priority for a network is changed.
2017 */
2018int wpa_config_update_prio_list(struct wpa_config *config)
2019{
2020	struct wpa_ssid *ssid;
2021	int ret = 0;
2022
2023	os_free(config->pssid);
2024	config->pssid = NULL;
2025	config->num_prio = 0;
2026
2027	ssid = config->ssid;
2028	while (ssid) {
2029		ssid->pnext = NULL;
2030		if (wpa_config_add_prio_network(config, ssid) < 0)
2031			ret = -1;
2032		ssid = ssid->next;
2033	}
2034
2035	return ret;
2036}
2037
2038
2039#ifdef IEEE8021X_EAPOL
2040static void eap_peer_config_free(struct eap_peer_config *eap)
2041{
2042	os_free(eap->eap_methods);
2043	bin_clear_free(eap->identity, eap->identity_len);
2044	os_free(eap->anonymous_identity);
2045	bin_clear_free(eap->password, eap->password_len);
2046	os_free(eap->ca_cert);
2047	os_free(eap->ca_path);
2048	os_free(eap->client_cert);
2049	os_free(eap->private_key);
2050	str_clear_free(eap->private_key_passwd);
2051	os_free(eap->dh_file);
2052	os_free(eap->subject_match);
2053	os_free(eap->altsubject_match);
2054	os_free(eap->domain_suffix_match);
2055	os_free(eap->ca_cert2);
2056	os_free(eap->ca_path2);
2057	os_free(eap->client_cert2);
2058	os_free(eap->private_key2);
2059	str_clear_free(eap->private_key2_passwd);
2060	os_free(eap->dh_file2);
2061	os_free(eap->subject_match2);
2062	os_free(eap->altsubject_match2);
2063	os_free(eap->domain_suffix_match2);
2064	os_free(eap->phase1);
2065	os_free(eap->phase2);
2066	os_free(eap->pcsc);
2067	str_clear_free(eap->pin);
2068	os_free(eap->engine_id);
2069	os_free(eap->key_id);
2070	os_free(eap->cert_id);
2071	os_free(eap->ca_cert_id);
2072	os_free(eap->key2_id);
2073	os_free(eap->cert2_id);
2074	os_free(eap->ca_cert2_id);
2075	str_clear_free(eap->pin2);
2076	os_free(eap->engine2_id);
2077	os_free(eap->otp);
2078	os_free(eap->pending_req_otp);
2079	os_free(eap->pac_file);
2080	bin_clear_free(eap->new_password, eap->new_password_len);
2081	str_clear_free(eap->external_sim_resp);
2082	os_free(eap->openssl_ciphers);
2083}
2084#endif /* IEEE8021X_EAPOL */
2085
2086
2087/**
2088 * wpa_config_free_ssid - Free network/ssid configuration data
2089 * @ssid: Configuration data for the network
2090 *
2091 * This function frees all resources allocated for the network configuration
2092 * data.
2093 */
2094void wpa_config_free_ssid(struct wpa_ssid *ssid)
2095{
2096	struct psk_list_entry *psk;
2097
2098	os_free(ssid->ssid);
2099	str_clear_free(ssid->passphrase);
2100	os_free(ssid->ext_psk);
2101#ifdef IEEE8021X_EAPOL
2102	eap_peer_config_free(&ssid->eap);
2103#endif /* IEEE8021X_EAPOL */
2104	os_free(ssid->id_str);
2105	os_free(ssid->scan_freq);
2106	os_free(ssid->freq_list);
2107	os_free(ssid->bgscan);
2108	os_free(ssid->p2p_client_list);
2109	os_free(ssid->bssid_blacklist);
2110	os_free(ssid->bssid_whitelist);
2111#ifdef CONFIG_HT_OVERRIDES
2112	os_free(ssid->ht_mcs);
2113#endif /* CONFIG_HT_OVERRIDES */
2114#ifdef CONFIG_MESH
2115	os_free(ssid->mesh_basic_rates);
2116#endif /* CONFIG_MESH */
2117	while ((psk = dl_list_first(&ssid->psk_list, struct psk_list_entry,
2118				    list))) {
2119		dl_list_del(&psk->list);
2120		bin_clear_free(psk, sizeof(*psk));
2121	}
2122	bin_clear_free(ssid, sizeof(*ssid));
2123}
2124
2125
2126void wpa_config_free_cred(struct wpa_cred *cred)
2127{
2128	size_t i;
2129
2130	os_free(cred->realm);
2131	str_clear_free(cred->username);
2132	str_clear_free(cred->password);
2133	os_free(cred->ca_cert);
2134	os_free(cred->client_cert);
2135	os_free(cred->private_key);
2136	str_clear_free(cred->private_key_passwd);
2137	os_free(cred->imsi);
2138	str_clear_free(cred->milenage);
2139	for (i = 0; i < cred->num_domain; i++)
2140		os_free(cred->domain[i]);
2141	os_free(cred->domain);
2142	os_free(cred->domain_suffix_match);
2143	os_free(cred->eap_method);
2144	os_free(cred->phase1);
2145	os_free(cred->phase2);
2146	os_free(cred->excluded_ssid);
2147	os_free(cred->roaming_partner);
2148	os_free(cred->provisioning_sp);
2149	for (i = 0; i < cred->num_req_conn_capab; i++)
2150		os_free(cred->req_conn_capab_port[i]);
2151	os_free(cred->req_conn_capab_port);
2152	os_free(cred->req_conn_capab_proto);
2153	os_free(cred);
2154}
2155
2156
2157void wpa_config_flush_blobs(struct wpa_config *config)
2158{
2159#ifndef CONFIG_NO_CONFIG_BLOBS
2160	struct wpa_config_blob *blob, *prev;
2161
2162	blob = config->blobs;
2163	config->blobs = NULL;
2164	while (blob) {
2165		prev = blob;
2166		blob = blob->next;
2167		wpa_config_free_blob(prev);
2168	}
2169#endif /* CONFIG_NO_CONFIG_BLOBS */
2170}
2171
2172
2173/**
2174 * wpa_config_free - Free configuration data
2175 * @config: Configuration data from wpa_config_read()
2176 *
2177 * This function frees all resources allocated for the configuration data by
2178 * wpa_config_read().
2179 */
2180void wpa_config_free(struct wpa_config *config)
2181{
2182	struct wpa_ssid *ssid, *prev = NULL;
2183	struct wpa_cred *cred, *cprev;
2184	int i;
2185
2186	ssid = config->ssid;
2187	while (ssid) {
2188		prev = ssid;
2189		ssid = ssid->next;
2190		wpa_config_free_ssid(prev);
2191	}
2192
2193	cred = config->cred;
2194	while (cred) {
2195		cprev = cred;
2196		cred = cred->next;
2197		wpa_config_free_cred(cprev);
2198	}
2199
2200	wpa_config_flush_blobs(config);
2201
2202	wpabuf_free(config->wps_vendor_ext_m1);
2203	for (i = 0; i < MAX_WPS_VENDOR_EXT; i++)
2204		wpabuf_free(config->wps_vendor_ext[i]);
2205	os_free(config->ctrl_interface);
2206	os_free(config->ctrl_interface_group);
2207	os_free(config->opensc_engine_path);
2208	os_free(config->pkcs11_engine_path);
2209	os_free(config->pkcs11_module_path);
2210	os_free(config->openssl_ciphers);
2211	os_free(config->pcsc_reader);
2212	str_clear_free(config->pcsc_pin);
2213	os_free(config->driver_param);
2214	os_free(config->device_name);
2215	os_free(config->manufacturer);
2216	os_free(config->model_name);
2217	os_free(config->model_number);
2218	os_free(config->serial_number);
2219	os_free(config->config_methods);
2220	os_free(config->p2p_ssid_postfix);
2221	os_free(config->pssid);
2222	os_free(config->p2p_pref_chan);
2223	os_free(config->p2p_no_go_freq.range);
2224	os_free(config->autoscan);
2225	os_free(config->freq_list);
2226	wpabuf_free(config->wps_nfc_dh_pubkey);
2227	wpabuf_free(config->wps_nfc_dh_privkey);
2228	wpabuf_free(config->wps_nfc_dev_pw);
2229	os_free(config->ext_password_backend);
2230	os_free(config->sae_groups);
2231	wpabuf_free(config->ap_vendor_elements);
2232	os_free(config->osu_dir);
2233	os_free(config->wowlan_triggers);
2234	os_free(config);
2235}
2236
2237
2238/**
2239 * wpa_config_foreach_network - Iterate over each configured network
2240 * @config: Configuration data from wpa_config_read()
2241 * @func: Callback function to process each network
2242 * @arg: Opaque argument to pass to callback function
2243 *
2244 * Iterate over the set of configured networks calling the specified
2245 * function for each item. We guard against callbacks removing the
2246 * supplied network.
2247 */
2248void wpa_config_foreach_network(struct wpa_config *config,
2249				void (*func)(void *, struct wpa_ssid *),
2250				void *arg)
2251{
2252	struct wpa_ssid *ssid, *next;
2253
2254	ssid = config->ssid;
2255	while (ssid) {
2256		next = ssid->next;
2257		func(arg, ssid);
2258		ssid = next;
2259	}
2260}
2261
2262
2263/**
2264 * wpa_config_get_network - Get configured network based on id
2265 * @config: Configuration data from wpa_config_read()
2266 * @id: Unique network id to search for
2267 * Returns: Network configuration or %NULL if not found
2268 */
2269struct wpa_ssid * wpa_config_get_network(struct wpa_config *config, int id)
2270{
2271	struct wpa_ssid *ssid;
2272
2273	ssid = config->ssid;
2274	while (ssid) {
2275		if (id == ssid->id)
2276			break;
2277		ssid = ssid->next;
2278	}
2279
2280	return ssid;
2281}
2282
2283
2284/**
2285 * wpa_config_add_network - Add a new network with empty configuration
2286 * @config: Configuration data from wpa_config_read()
2287 * Returns: The new network configuration or %NULL if operation failed
2288 */
2289struct wpa_ssid * wpa_config_add_network(struct wpa_config *config)
2290{
2291	int id;
2292	struct wpa_ssid *ssid, *last = NULL;
2293
2294	id = -1;
2295	ssid = config->ssid;
2296	while (ssid) {
2297		if (ssid->id > id)
2298			id = ssid->id;
2299		last = ssid;
2300		ssid = ssid->next;
2301	}
2302	id++;
2303
2304	ssid = os_zalloc(sizeof(*ssid));
2305	if (ssid == NULL)
2306		return NULL;
2307	ssid->id = id;
2308	dl_list_init(&ssid->psk_list);
2309	if (last)
2310		last->next = ssid;
2311	else
2312		config->ssid = ssid;
2313
2314	wpa_config_update_prio_list(config);
2315
2316	return ssid;
2317}
2318
2319
2320/**
2321 * wpa_config_remove_network - Remove a configured network based on id
2322 * @config: Configuration data from wpa_config_read()
2323 * @id: Unique network id to search for
2324 * Returns: 0 on success, or -1 if the network was not found
2325 */
2326int wpa_config_remove_network(struct wpa_config *config, int id)
2327{
2328	struct wpa_ssid *ssid, *prev = NULL;
2329
2330	ssid = config->ssid;
2331	while (ssid) {
2332		if (id == ssid->id)
2333			break;
2334		prev = ssid;
2335		ssid = ssid->next;
2336	}
2337
2338	if (ssid == NULL)
2339		return -1;
2340
2341	if (prev)
2342		prev->next = ssid->next;
2343	else
2344		config->ssid = ssid->next;
2345
2346	wpa_config_update_prio_list(config);
2347	wpa_config_free_ssid(ssid);
2348	return 0;
2349}
2350
2351
2352/**
2353 * wpa_config_set_network_defaults - Set network default values
2354 * @ssid: Pointer to network configuration data
2355 */
2356void wpa_config_set_network_defaults(struct wpa_ssid *ssid)
2357{
2358	ssid->proto = DEFAULT_PROTO;
2359	ssid->pairwise_cipher = DEFAULT_PAIRWISE;
2360	ssid->group_cipher = DEFAULT_GROUP;
2361	ssid->key_mgmt = DEFAULT_KEY_MGMT;
2362	ssid->bg_scan_period = DEFAULT_BG_SCAN_PERIOD;
2363#ifdef IEEE8021X_EAPOL
2364	ssid->eapol_flags = DEFAULT_EAPOL_FLAGS;
2365	ssid->eap_workaround = DEFAULT_EAP_WORKAROUND;
2366	ssid->eap.fragment_size = DEFAULT_FRAGMENT_SIZE;
2367	ssid->eap.sim_num = DEFAULT_USER_SELECTED_SIM;
2368#endif /* IEEE8021X_EAPOL */
2369#ifdef CONFIG_MESH
2370	ssid->dot11MeshMaxRetries = DEFAULT_MESH_MAX_RETRIES;
2371	ssid->dot11MeshRetryTimeout = DEFAULT_MESH_RETRY_TIMEOUT;
2372	ssid->dot11MeshConfirmTimeout = DEFAULT_MESH_CONFIRM_TIMEOUT;
2373	ssid->dot11MeshHoldingTimeout = DEFAULT_MESH_HOLDING_TIMEOUT;
2374#endif /* CONFIG_MESH */
2375#ifdef CONFIG_HT_OVERRIDES
2376	ssid->disable_ht = DEFAULT_DISABLE_HT;
2377	ssid->disable_ht40 = DEFAULT_DISABLE_HT40;
2378	ssid->disable_sgi = DEFAULT_DISABLE_SGI;
2379	ssid->disable_ldpc = DEFAULT_DISABLE_LDPC;
2380	ssid->disable_max_amsdu = DEFAULT_DISABLE_MAX_AMSDU;
2381	ssid->ampdu_factor = DEFAULT_AMPDU_FACTOR;
2382	ssid->ampdu_density = DEFAULT_AMPDU_DENSITY;
2383#endif /* CONFIG_HT_OVERRIDES */
2384#ifdef CONFIG_VHT_OVERRIDES
2385	ssid->vht_rx_mcs_nss_1 = -1;
2386	ssid->vht_rx_mcs_nss_2 = -1;
2387	ssid->vht_rx_mcs_nss_3 = -1;
2388	ssid->vht_rx_mcs_nss_4 = -1;
2389	ssid->vht_rx_mcs_nss_5 = -1;
2390	ssid->vht_rx_mcs_nss_6 = -1;
2391	ssid->vht_rx_mcs_nss_7 = -1;
2392	ssid->vht_rx_mcs_nss_8 = -1;
2393	ssid->vht_tx_mcs_nss_1 = -1;
2394	ssid->vht_tx_mcs_nss_2 = -1;
2395	ssid->vht_tx_mcs_nss_3 = -1;
2396	ssid->vht_tx_mcs_nss_4 = -1;
2397	ssid->vht_tx_mcs_nss_5 = -1;
2398	ssid->vht_tx_mcs_nss_6 = -1;
2399	ssid->vht_tx_mcs_nss_7 = -1;
2400	ssid->vht_tx_mcs_nss_8 = -1;
2401#endif /* CONFIG_VHT_OVERRIDES */
2402	ssid->proactive_key_caching = -1;
2403#ifdef CONFIG_IEEE80211W
2404	ssid->ieee80211w = MGMT_FRAME_PROTECTION_DEFAULT;
2405#endif /* CONFIG_IEEE80211W */
2406	ssid->mac_addr = -1;
2407}
2408
2409
2410/**
2411 * wpa_config_set - Set a variable in network configuration
2412 * @ssid: Pointer to network configuration data
2413 * @var: Variable name, e.g., "ssid"
2414 * @value: Variable value
2415 * @line: Line number in configuration file or 0 if not used
2416 * Returns: 0 on success, -1 on failure
2417 *
2418 * This function can be used to set network configuration variables based on
2419 * both the configuration file and management interface input. The value
2420 * parameter must be in the same format as the text-based configuration file is
2421 * using. For example, strings are using double quotation marks.
2422 */
2423int wpa_config_set(struct wpa_ssid *ssid, const char *var, const char *value,
2424		   int line)
2425{
2426	size_t i;
2427	int ret = 0;
2428
2429	if (ssid == NULL || var == NULL || value == NULL)
2430		return -1;
2431
2432	for (i = 0; i < NUM_SSID_FIELDS; i++) {
2433		const struct parse_data *field = &ssid_fields[i];
2434		if (os_strcmp(var, field->name) != 0)
2435			continue;
2436
2437		if (field->parser(field, ssid, line, value)) {
2438			if (line) {
2439				wpa_printf(MSG_ERROR, "Line %d: failed to "
2440					   "parse %s '%s'.", line, var, value);
2441			}
2442			ret = -1;
2443		}
2444		break;
2445	}
2446	if (i == NUM_SSID_FIELDS) {
2447		if (line) {
2448			wpa_printf(MSG_ERROR, "Line %d: unknown network field "
2449				   "'%s'.", line, var);
2450		}
2451		ret = -1;
2452	}
2453
2454	return ret;
2455}
2456
2457
2458int wpa_config_set_quoted(struct wpa_ssid *ssid, const char *var,
2459			  const char *value)
2460{
2461	size_t len;
2462	char *buf;
2463	int ret;
2464
2465	len = os_strlen(value);
2466	buf = os_malloc(len + 3);
2467	if (buf == NULL)
2468		return -1;
2469	buf[0] = '"';
2470	os_memcpy(buf + 1, value, len);
2471	buf[len + 1] = '"';
2472	buf[len + 2] = '\0';
2473	ret = wpa_config_set(ssid, var, buf, 0);
2474	os_free(buf);
2475	return ret;
2476}
2477
2478
2479/**
2480 * wpa_config_get_all - Get all options from network configuration
2481 * @ssid: Pointer to network configuration data
2482 * @get_keys: Determines if keys/passwords will be included in returned list
2483 *	(if they may be exported)
2484 * Returns: %NULL terminated list of all set keys and their values in the form
2485 * of [key1, val1, key2, val2, ... , NULL]
2486 *
2487 * This function can be used to get list of all configured network properties.
2488 * The caller is responsible for freeing the returned list and all its
2489 * elements.
2490 */
2491char ** wpa_config_get_all(struct wpa_ssid *ssid, int get_keys)
2492{
2493	const struct parse_data *field;
2494	char *key, *value;
2495	size_t i;
2496	char **props;
2497	int fields_num;
2498
2499	get_keys = get_keys && ssid->export_keys;
2500
2501	props = os_calloc(2 * NUM_SSID_FIELDS + 1, sizeof(char *));
2502	if (!props)
2503		return NULL;
2504
2505	fields_num = 0;
2506	for (i = 0; i < NUM_SSID_FIELDS; i++) {
2507		field = &ssid_fields[i];
2508		if (field->key_data && !get_keys)
2509			continue;
2510		value = field->writer(field, ssid);
2511		if (value == NULL)
2512			continue;
2513		if (os_strlen(value) == 0) {
2514			os_free(value);
2515			continue;
2516		}
2517
2518		key = os_strdup(field->name);
2519		if (key == NULL) {
2520			os_free(value);
2521			goto err;
2522		}
2523
2524		props[fields_num * 2] = key;
2525		props[fields_num * 2 + 1] = value;
2526
2527		fields_num++;
2528	}
2529
2530	return props;
2531
2532err:
2533	value = *props;
2534	while (value)
2535		os_free(value++);
2536	os_free(props);
2537	return NULL;
2538}
2539
2540
2541#ifndef NO_CONFIG_WRITE
2542/**
2543 * wpa_config_get - Get a variable in network configuration
2544 * @ssid: Pointer to network configuration data
2545 * @var: Variable name, e.g., "ssid"
2546 * Returns: Value of the variable or %NULL on failure
2547 *
2548 * This function can be used to get network configuration variables. The
2549 * returned value is a copy of the configuration variable in text format, i.e,.
2550 * the same format that the text-based configuration file and wpa_config_set()
2551 * are using for the value. The caller is responsible for freeing the returned
2552 * value.
2553 */
2554char * wpa_config_get(struct wpa_ssid *ssid, const char *var)
2555{
2556	size_t i;
2557
2558	if (ssid == NULL || var == NULL)
2559		return NULL;
2560
2561	for (i = 0; i < NUM_SSID_FIELDS; i++) {
2562		const struct parse_data *field = &ssid_fields[i];
2563		if (os_strcmp(var, field->name) == 0)
2564			return field->writer(field, ssid);
2565	}
2566
2567	return NULL;
2568}
2569
2570
2571/**
2572 * wpa_config_get_no_key - Get a variable in network configuration (no keys)
2573 * @ssid: Pointer to network configuration data
2574 * @var: Variable name, e.g., "ssid"
2575 * Returns: Value of the variable or %NULL on failure
2576 *
2577 * This function can be used to get network configuration variable like
2578 * wpa_config_get(). The only difference is that this functions does not expose
2579 * key/password material from the configuration. In case a key/password field
2580 * is requested, the returned value is an empty string or %NULL if the variable
2581 * is not set or "*" if the variable is set (regardless of its value). The
2582 * returned value is a copy of the configuration variable in text format, i.e,.
2583 * the same format that the text-based configuration file and wpa_config_set()
2584 * are using for the value. The caller is responsible for freeing the returned
2585 * value.
2586 */
2587char * wpa_config_get_no_key(struct wpa_ssid *ssid, const char *var)
2588{
2589	size_t i;
2590
2591	if (ssid == NULL || var == NULL)
2592		return NULL;
2593
2594	for (i = 0; i < NUM_SSID_FIELDS; i++) {
2595		const struct parse_data *field = &ssid_fields[i];
2596		if (os_strcmp(var, field->name) == 0) {
2597			char *res = field->writer(field, ssid);
2598			if (field->key_data) {
2599				if (res && res[0]) {
2600					wpa_printf(MSG_DEBUG, "Do not allow "
2601						   "key_data field to be "
2602						   "exposed");
2603					str_clear_free(res);
2604					return os_strdup("*");
2605				}
2606
2607				os_free(res);
2608				return NULL;
2609			}
2610			return res;
2611		}
2612	}
2613
2614	return NULL;
2615}
2616#endif /* NO_CONFIG_WRITE */
2617
2618
2619/**
2620 * wpa_config_update_psk - Update WPA PSK based on passphrase and SSID
2621 * @ssid: Pointer to network configuration data
2622 *
2623 * This function must be called to update WPA PSK when either SSID or the
2624 * passphrase has changed for the network configuration.
2625 */
2626void wpa_config_update_psk(struct wpa_ssid *ssid)
2627{
2628#ifndef CONFIG_NO_PBKDF2
2629	pbkdf2_sha1(ssid->passphrase, ssid->ssid, ssid->ssid_len, 4096,
2630		    ssid->psk, PMK_LEN);
2631	wpa_hexdump_key(MSG_MSGDUMP, "PSK (from passphrase)",
2632			ssid->psk, PMK_LEN);
2633	ssid->psk_set = 1;
2634#endif /* CONFIG_NO_PBKDF2 */
2635}
2636
2637
2638static int wpa_config_set_cred_req_conn_capab(struct wpa_cred *cred,
2639					      const char *value)
2640{
2641	u8 *proto;
2642	int **port;
2643	int *ports, *nports;
2644	const char *pos;
2645	unsigned int num_ports;
2646
2647	proto = os_realloc_array(cred->req_conn_capab_proto,
2648				 cred->num_req_conn_capab + 1, sizeof(u8));
2649	if (proto == NULL)
2650		return -1;
2651	cred->req_conn_capab_proto = proto;
2652
2653	port = os_realloc_array(cred->req_conn_capab_port,
2654				cred->num_req_conn_capab + 1, sizeof(int *));
2655	if (port == NULL)
2656		return -1;
2657	cred->req_conn_capab_port = port;
2658
2659	proto[cred->num_req_conn_capab] = atoi(value);
2660
2661	pos = os_strchr(value, ':');
2662	if (pos == NULL) {
2663		port[cred->num_req_conn_capab] = NULL;
2664		cred->num_req_conn_capab++;
2665		return 0;
2666	}
2667	pos++;
2668
2669	ports = NULL;
2670	num_ports = 0;
2671
2672	while (*pos) {
2673		nports = os_realloc_array(ports, num_ports + 1, sizeof(int));
2674		if (nports == NULL) {
2675			os_free(ports);
2676			return -1;
2677		}
2678		ports = nports;
2679		ports[num_ports++] = atoi(pos);
2680
2681		pos = os_strchr(pos, ',');
2682		if (pos == NULL)
2683			break;
2684		pos++;
2685	}
2686
2687	nports = os_realloc_array(ports, num_ports + 1, sizeof(int));
2688	if (nports == NULL) {
2689		os_free(ports);
2690		return -1;
2691	}
2692	ports = nports;
2693	ports[num_ports] = -1;
2694
2695	port[cred->num_req_conn_capab] = ports;
2696	cred->num_req_conn_capab++;
2697	return 0;
2698}
2699
2700
2701int wpa_config_set_cred(struct wpa_cred *cred, const char *var,
2702			const char *value, int line)
2703{
2704	char *val;
2705	size_t len;
2706
2707	if (os_strcmp(var, "temporary") == 0) {
2708		cred->temporary = atoi(value);
2709		return 0;
2710	}
2711
2712	if (os_strcmp(var, "priority") == 0) {
2713		cred->priority = atoi(value);
2714		return 0;
2715	}
2716
2717	if (os_strcmp(var, "sp_priority") == 0) {
2718		int prio = atoi(value);
2719		if (prio < 0 || prio > 255)
2720			return -1;
2721		cred->sp_priority = prio;
2722		return 0;
2723	}
2724
2725	if (os_strcmp(var, "pcsc") == 0) {
2726		cred->pcsc = atoi(value);
2727		return 0;
2728	}
2729
2730	if (os_strcmp(var, "eap") == 0) {
2731		struct eap_method_type method;
2732		method.method = eap_peer_get_type(value, &method.vendor);
2733		if (method.vendor == EAP_VENDOR_IETF &&
2734		    method.method == EAP_TYPE_NONE) {
2735			wpa_printf(MSG_ERROR, "Line %d: unknown EAP type '%s' "
2736				   "for a credential", line, value);
2737			return -1;
2738		}
2739		os_free(cred->eap_method);
2740		cred->eap_method = os_malloc(sizeof(*cred->eap_method));
2741		if (cred->eap_method == NULL)
2742			return -1;
2743		os_memcpy(cred->eap_method, &method, sizeof(method));
2744		return 0;
2745	}
2746
2747	if (os_strcmp(var, "password") == 0 &&
2748	    os_strncmp(value, "ext:", 4) == 0) {
2749		str_clear_free(cred->password);
2750		cred->password = os_strdup(value);
2751		cred->ext_password = 1;
2752		return 0;
2753	}
2754
2755	if (os_strcmp(var, "update_identifier") == 0) {
2756		cred->update_identifier = atoi(value);
2757		return 0;
2758	}
2759
2760	if (os_strcmp(var, "min_dl_bandwidth_home") == 0) {
2761		cred->min_dl_bandwidth_home = atoi(value);
2762		return 0;
2763	}
2764
2765	if (os_strcmp(var, "min_ul_bandwidth_home") == 0) {
2766		cred->min_ul_bandwidth_home = atoi(value);
2767		return 0;
2768	}
2769
2770	if (os_strcmp(var, "min_dl_bandwidth_roaming") == 0) {
2771		cred->min_dl_bandwidth_roaming = atoi(value);
2772		return 0;
2773	}
2774
2775	if (os_strcmp(var, "min_ul_bandwidth_roaming") == 0) {
2776		cred->min_ul_bandwidth_roaming = atoi(value);
2777		return 0;
2778	}
2779
2780	if (os_strcmp(var, "max_bss_load") == 0) {
2781		cred->max_bss_load = atoi(value);
2782		return 0;
2783	}
2784
2785	if (os_strcmp(var, "req_conn_capab") == 0)
2786		return wpa_config_set_cred_req_conn_capab(cred, value);
2787
2788	if (os_strcmp(var, "ocsp") == 0) {
2789		cred->ocsp = atoi(value);
2790		return 0;
2791	}
2792
2793	if (os_strcmp(var, "sim_num") == 0) {
2794		cred->sim_num = atoi(value);
2795		return 0;
2796	}
2797
2798	val = wpa_config_parse_string(value, &len);
2799	if (val == NULL) {
2800		wpa_printf(MSG_ERROR, "Line %d: invalid field '%s' string "
2801			   "value '%s'.", line, var, value);
2802		return -1;
2803	}
2804
2805	if (os_strcmp(var, "realm") == 0) {
2806		os_free(cred->realm);
2807		cred->realm = val;
2808		return 0;
2809	}
2810
2811	if (os_strcmp(var, "username") == 0) {
2812		str_clear_free(cred->username);
2813		cred->username = val;
2814		return 0;
2815	}
2816
2817	if (os_strcmp(var, "password") == 0) {
2818		str_clear_free(cred->password);
2819		cred->password = val;
2820		cred->ext_password = 0;
2821		return 0;
2822	}
2823
2824	if (os_strcmp(var, "ca_cert") == 0) {
2825		os_free(cred->ca_cert);
2826		cred->ca_cert = val;
2827		return 0;
2828	}
2829
2830	if (os_strcmp(var, "client_cert") == 0) {
2831		os_free(cred->client_cert);
2832		cred->client_cert = val;
2833		return 0;
2834	}
2835
2836	if (os_strcmp(var, "private_key") == 0) {
2837		os_free(cred->private_key);
2838		cred->private_key = val;
2839		return 0;
2840	}
2841
2842	if (os_strcmp(var, "private_key_passwd") == 0) {
2843		str_clear_free(cred->private_key_passwd);
2844		cred->private_key_passwd = val;
2845		return 0;
2846	}
2847
2848	if (os_strcmp(var, "imsi") == 0) {
2849		os_free(cred->imsi);
2850		cred->imsi = val;
2851		return 0;
2852	}
2853
2854	if (os_strcmp(var, "milenage") == 0) {
2855		str_clear_free(cred->milenage);
2856		cred->milenage = val;
2857		return 0;
2858	}
2859
2860	if (os_strcmp(var, "domain_suffix_match") == 0) {
2861		os_free(cred->domain_suffix_match);
2862		cred->domain_suffix_match = val;
2863		return 0;
2864	}
2865
2866	if (os_strcmp(var, "domain") == 0) {
2867		char **new_domain;
2868		new_domain = os_realloc_array(cred->domain,
2869					      cred->num_domain + 1,
2870					      sizeof(char *));
2871		if (new_domain == NULL) {
2872			os_free(val);
2873			return -1;
2874		}
2875		new_domain[cred->num_domain++] = val;
2876		cred->domain = new_domain;
2877		return 0;
2878	}
2879
2880	if (os_strcmp(var, "phase1") == 0) {
2881		os_free(cred->phase1);
2882		cred->phase1 = val;
2883		return 0;
2884	}
2885
2886	if (os_strcmp(var, "phase2") == 0) {
2887		os_free(cred->phase2);
2888		cred->phase2 = val;
2889		return 0;
2890	}
2891
2892	if (os_strcmp(var, "roaming_consortium") == 0) {
2893		if (len < 3 || len > sizeof(cred->roaming_consortium)) {
2894			wpa_printf(MSG_ERROR, "Line %d: invalid "
2895				   "roaming_consortium length %d (3..15 "
2896				   "expected)", line, (int) len);
2897			os_free(val);
2898			return -1;
2899		}
2900		os_memcpy(cred->roaming_consortium, val, len);
2901		cred->roaming_consortium_len = len;
2902		os_free(val);
2903		return 0;
2904	}
2905
2906	if (os_strcmp(var, "required_roaming_consortium") == 0) {
2907		if (len < 3 || len > sizeof(cred->required_roaming_consortium))
2908		{
2909			wpa_printf(MSG_ERROR, "Line %d: invalid "
2910				   "required_roaming_consortium length %d "
2911				   "(3..15 expected)", line, (int) len);
2912			os_free(val);
2913			return -1;
2914		}
2915		os_memcpy(cred->required_roaming_consortium, val, len);
2916		cred->required_roaming_consortium_len = len;
2917		os_free(val);
2918		return 0;
2919	}
2920
2921	if (os_strcmp(var, "excluded_ssid") == 0) {
2922		struct excluded_ssid *e;
2923
2924		if (len > MAX_SSID_LEN) {
2925			wpa_printf(MSG_ERROR, "Line %d: invalid "
2926				   "excluded_ssid length %d", line, (int) len);
2927			os_free(val);
2928			return -1;
2929		}
2930
2931		e = os_realloc_array(cred->excluded_ssid,
2932				     cred->num_excluded_ssid + 1,
2933				     sizeof(struct excluded_ssid));
2934		if (e == NULL) {
2935			os_free(val);
2936			return -1;
2937		}
2938		cred->excluded_ssid = e;
2939
2940		e = &cred->excluded_ssid[cred->num_excluded_ssid++];
2941		os_memcpy(e->ssid, val, len);
2942		e->ssid_len = len;
2943
2944		os_free(val);
2945
2946		return 0;
2947	}
2948
2949	if (os_strcmp(var, "roaming_partner") == 0) {
2950		struct roaming_partner *p;
2951		char *pos;
2952
2953		p = os_realloc_array(cred->roaming_partner,
2954				     cred->num_roaming_partner + 1,
2955				     sizeof(struct roaming_partner));
2956		if (p == NULL) {
2957			os_free(val);
2958			return -1;
2959		}
2960		cred->roaming_partner = p;
2961
2962		p = &cred->roaming_partner[cred->num_roaming_partner];
2963
2964		pos = os_strchr(val, ',');
2965		if (pos == NULL) {
2966			os_free(val);
2967			return -1;
2968		}
2969		*pos++ = '\0';
2970		if (pos - val - 1 >= (int) sizeof(p->fqdn)) {
2971			os_free(val);
2972			return -1;
2973		}
2974		os_memcpy(p->fqdn, val, pos - val);
2975
2976		p->exact_match = atoi(pos);
2977
2978		pos = os_strchr(pos, ',');
2979		if (pos == NULL) {
2980			os_free(val);
2981			return -1;
2982		}
2983		*pos++ = '\0';
2984
2985		p->priority = atoi(pos);
2986
2987		pos = os_strchr(pos, ',');
2988		if (pos == NULL) {
2989			os_free(val);
2990			return -1;
2991		}
2992		*pos++ = '\0';
2993
2994		if (os_strlen(pos) >= sizeof(p->country)) {
2995			os_free(val);
2996			return -1;
2997		}
2998		os_memcpy(p->country, pos, os_strlen(pos) + 1);
2999
3000		cred->num_roaming_partner++;
3001		os_free(val);
3002
3003		return 0;
3004	}
3005
3006	if (os_strcmp(var, "provisioning_sp") == 0) {
3007		os_free(cred->provisioning_sp);
3008		cred->provisioning_sp = val;
3009		return 0;
3010	}
3011
3012	if (line) {
3013		wpa_printf(MSG_ERROR, "Line %d: unknown cred field '%s'.",
3014			   line, var);
3015	}
3016
3017	os_free(val);
3018
3019	return -1;
3020}
3021
3022
3023static char * alloc_int_str(int val)
3024{
3025	const unsigned int bufsize = 20;
3026	char *buf;
3027	int res;
3028
3029	buf = os_malloc(bufsize);
3030	if (buf == NULL)
3031		return NULL;
3032	res = os_snprintf(buf, bufsize, "%d", val);
3033	if (os_snprintf_error(bufsize, res)) {
3034		os_free(buf);
3035		buf = NULL;
3036	}
3037	return buf;
3038}
3039
3040
3041static char * alloc_strdup(const char *str)
3042{
3043	if (str == NULL)
3044		return NULL;
3045	return os_strdup(str);
3046}
3047
3048
3049char * wpa_config_get_cred_no_key(struct wpa_cred *cred, const char *var)
3050{
3051	if (os_strcmp(var, "temporary") == 0)
3052		return alloc_int_str(cred->temporary);
3053
3054	if (os_strcmp(var, "priority") == 0)
3055		return alloc_int_str(cred->priority);
3056
3057	if (os_strcmp(var, "sp_priority") == 0)
3058		return alloc_int_str(cred->sp_priority);
3059
3060	if (os_strcmp(var, "pcsc") == 0)
3061		return alloc_int_str(cred->pcsc);
3062
3063	if (os_strcmp(var, "eap") == 0) {
3064		if (!cred->eap_method)
3065			return NULL;
3066		return alloc_strdup(eap_get_name(cred->eap_method[0].vendor,
3067						 cred->eap_method[0].method));
3068	}
3069
3070	if (os_strcmp(var, "update_identifier") == 0)
3071		return alloc_int_str(cred->update_identifier);
3072
3073	if (os_strcmp(var, "min_dl_bandwidth_home") == 0)
3074		return alloc_int_str(cred->min_dl_bandwidth_home);
3075
3076	if (os_strcmp(var, "min_ul_bandwidth_home") == 0)
3077		return alloc_int_str(cred->min_ul_bandwidth_home);
3078
3079	if (os_strcmp(var, "min_dl_bandwidth_roaming") == 0)
3080		return alloc_int_str(cred->min_dl_bandwidth_roaming);
3081
3082	if (os_strcmp(var, "min_ul_bandwidth_roaming") == 0)
3083		return alloc_int_str(cred->min_ul_bandwidth_roaming);
3084
3085	if (os_strcmp(var, "max_bss_load") == 0)
3086		return alloc_int_str(cred->max_bss_load);
3087
3088	if (os_strcmp(var, "req_conn_capab") == 0) {
3089		unsigned int i;
3090		char *buf, *end, *pos;
3091		int ret;
3092
3093		if (!cred->num_req_conn_capab)
3094			return NULL;
3095
3096		buf = os_malloc(4000);
3097		if (buf == NULL)
3098			return NULL;
3099		pos = buf;
3100		end = pos + 4000;
3101		for (i = 0; i < cred->num_req_conn_capab; i++) {
3102			int *ports;
3103
3104			ret = os_snprintf(pos, end - pos, "%s%u",
3105					  i > 0 ? "\n" : "",
3106					  cred->req_conn_capab_proto[i]);
3107			if (os_snprintf_error(end - pos, ret))
3108				return buf;
3109			pos += ret;
3110
3111			ports = cred->req_conn_capab_port[i];
3112			if (ports) {
3113				int j;
3114				for (j = 0; ports[j] != -1; j++) {
3115					ret = os_snprintf(pos, end - pos,
3116							  "%s%d",
3117							  j > 0 ? "," : ":",
3118							  ports[j]);
3119					if (os_snprintf_error(end - pos, ret))
3120						return buf;
3121					pos += ret;
3122				}
3123			}
3124		}
3125
3126		return buf;
3127	}
3128
3129	if (os_strcmp(var, "ocsp") == 0)
3130		return alloc_int_str(cred->ocsp);
3131
3132	if (os_strcmp(var, "realm") == 0)
3133		return alloc_strdup(cred->realm);
3134
3135	if (os_strcmp(var, "username") == 0)
3136		return alloc_strdup(cred->username);
3137
3138	if (os_strcmp(var, "password") == 0) {
3139		if (!cred->password)
3140			return NULL;
3141		return alloc_strdup("*");
3142	}
3143
3144	if (os_strcmp(var, "ca_cert") == 0)
3145		return alloc_strdup(cred->ca_cert);
3146
3147	if (os_strcmp(var, "client_cert") == 0)
3148		return alloc_strdup(cred->client_cert);
3149
3150	if (os_strcmp(var, "private_key") == 0)
3151		return alloc_strdup(cred->private_key);
3152
3153	if (os_strcmp(var, "private_key_passwd") == 0) {
3154		if (!cred->private_key_passwd)
3155			return NULL;
3156		return alloc_strdup("*");
3157	}
3158
3159	if (os_strcmp(var, "imsi") == 0)
3160		return alloc_strdup(cred->imsi);
3161
3162	if (os_strcmp(var, "milenage") == 0) {
3163		if (!(cred->milenage))
3164			return NULL;
3165		return alloc_strdup("*");
3166	}
3167
3168	if (os_strcmp(var, "domain_suffix_match") == 0)
3169		return alloc_strdup(cred->domain_suffix_match);
3170
3171	if (os_strcmp(var, "domain") == 0) {
3172		unsigned int i;
3173		char *buf, *end, *pos;
3174		int ret;
3175
3176		if (!cred->num_domain)
3177			return NULL;
3178
3179		buf = os_malloc(4000);
3180		if (buf == NULL)
3181			return NULL;
3182		pos = buf;
3183		end = pos + 4000;
3184
3185		for (i = 0; i < cred->num_domain; i++) {
3186			ret = os_snprintf(pos, end - pos, "%s%s",
3187					  i > 0 ? "\n" : "", cred->domain[i]);
3188			if (os_snprintf_error(end - pos, ret))
3189				return buf;
3190			pos += ret;
3191		}
3192
3193		return buf;
3194	}
3195
3196	if (os_strcmp(var, "phase1") == 0)
3197		return alloc_strdup(cred->phase1);
3198
3199	if (os_strcmp(var, "phase2") == 0)
3200		return alloc_strdup(cred->phase2);
3201
3202	if (os_strcmp(var, "roaming_consortium") == 0) {
3203		size_t buflen;
3204		char *buf;
3205
3206		if (!cred->roaming_consortium_len)
3207			return NULL;
3208		buflen = cred->roaming_consortium_len * 2 + 1;
3209		buf = os_malloc(buflen);
3210		if (buf == NULL)
3211			return NULL;
3212		wpa_snprintf_hex(buf, buflen, cred->roaming_consortium,
3213				 cred->roaming_consortium_len);
3214		return buf;
3215	}
3216
3217	if (os_strcmp(var, "required_roaming_consortium") == 0) {
3218		size_t buflen;
3219		char *buf;
3220
3221		if (!cred->required_roaming_consortium_len)
3222			return NULL;
3223		buflen = cred->required_roaming_consortium_len * 2 + 1;
3224		buf = os_malloc(buflen);
3225		if (buf == NULL)
3226			return NULL;
3227		wpa_snprintf_hex(buf, buflen, cred->required_roaming_consortium,
3228				 cred->required_roaming_consortium_len);
3229		return buf;
3230	}
3231
3232	if (os_strcmp(var, "excluded_ssid") == 0) {
3233		unsigned int i;
3234		char *buf, *end, *pos;
3235
3236		if (!cred->num_excluded_ssid)
3237			return NULL;
3238
3239		buf = os_malloc(4000);
3240		if (buf == NULL)
3241			return NULL;
3242		pos = buf;
3243		end = pos + 4000;
3244
3245		for (i = 0; i < cred->num_excluded_ssid; i++) {
3246			struct excluded_ssid *e;
3247			int ret;
3248
3249			e = &cred->excluded_ssid[i];
3250			ret = os_snprintf(pos, end - pos, "%s%s",
3251					  i > 0 ? "\n" : "",
3252					  wpa_ssid_txt(e->ssid, e->ssid_len));
3253			if (os_snprintf_error(end - pos, ret))
3254				return buf;
3255			pos += ret;
3256		}
3257
3258		return buf;
3259	}
3260
3261	if (os_strcmp(var, "roaming_partner") == 0) {
3262		unsigned int i;
3263		char *buf, *end, *pos;
3264
3265		if (!cred->num_roaming_partner)
3266			return NULL;
3267
3268		buf = os_malloc(4000);
3269		if (buf == NULL)
3270			return NULL;
3271		pos = buf;
3272		end = pos + 4000;
3273
3274		for (i = 0; i < cred->num_roaming_partner; i++) {
3275			struct roaming_partner *p;
3276			int ret;
3277
3278			p = &cred->roaming_partner[i];
3279			ret = os_snprintf(pos, end - pos, "%s%s,%d,%u,%s",
3280					  i > 0 ? "\n" : "",
3281					  p->fqdn, p->exact_match, p->priority,
3282					  p->country);
3283			if (os_snprintf_error(end - pos, ret))
3284				return buf;
3285			pos += ret;
3286		}
3287
3288		return buf;
3289	}
3290
3291	if (os_strcmp(var, "provisioning_sp") == 0)
3292		return alloc_strdup(cred->provisioning_sp);
3293
3294	return NULL;
3295}
3296
3297
3298struct wpa_cred * wpa_config_get_cred(struct wpa_config *config, int id)
3299{
3300	struct wpa_cred *cred;
3301
3302	cred = config->cred;
3303	while (cred) {
3304		if (id == cred->id)
3305			break;
3306		cred = cred->next;
3307	}
3308
3309	return cred;
3310}
3311
3312
3313struct wpa_cred * wpa_config_add_cred(struct wpa_config *config)
3314{
3315	int id;
3316	struct wpa_cred *cred, *last = NULL;
3317
3318	id = -1;
3319	cred = config->cred;
3320	while (cred) {
3321		if (cred->id > id)
3322			id = cred->id;
3323		last = cred;
3324		cred = cred->next;
3325	}
3326	id++;
3327
3328	cred = os_zalloc(sizeof(*cred));
3329	if (cred == NULL)
3330		return NULL;
3331	cred->id = id;
3332	cred->sim_num = DEFAULT_USER_SELECTED_SIM;
3333	if (last)
3334		last->next = cred;
3335	else
3336		config->cred = cred;
3337
3338	return cred;
3339}
3340
3341
3342int wpa_config_remove_cred(struct wpa_config *config, int id)
3343{
3344	struct wpa_cred *cred, *prev = NULL;
3345
3346	cred = config->cred;
3347	while (cred) {
3348		if (id == cred->id)
3349			break;
3350		prev = cred;
3351		cred = cred->next;
3352	}
3353
3354	if (cred == NULL)
3355		return -1;
3356
3357	if (prev)
3358		prev->next = cred->next;
3359	else
3360		config->cred = cred->next;
3361
3362	wpa_config_free_cred(cred);
3363	return 0;
3364}
3365
3366
3367#ifndef CONFIG_NO_CONFIG_BLOBS
3368/**
3369 * wpa_config_get_blob - Get a named configuration blob
3370 * @config: Configuration data from wpa_config_read()
3371 * @name: Name of the blob
3372 * Returns: Pointer to blob data or %NULL if not found
3373 */
3374const struct wpa_config_blob * wpa_config_get_blob(struct wpa_config *config,
3375						   const char *name)
3376{
3377	struct wpa_config_blob *blob = config->blobs;
3378
3379	while (blob) {
3380		if (os_strcmp(blob->name, name) == 0)
3381			return blob;
3382		blob = blob->next;
3383	}
3384	return NULL;
3385}
3386
3387
3388/**
3389 * wpa_config_set_blob - Set or add a named configuration blob
3390 * @config: Configuration data from wpa_config_read()
3391 * @blob: New value for the blob
3392 *
3393 * Adds a new configuration blob or replaces the current value of an existing
3394 * blob.
3395 */
3396void wpa_config_set_blob(struct wpa_config *config,
3397			 struct wpa_config_blob *blob)
3398{
3399	wpa_config_remove_blob(config, blob->name);
3400	blob->next = config->blobs;
3401	config->blobs = blob;
3402}
3403
3404
3405/**
3406 * wpa_config_free_blob - Free blob data
3407 * @blob: Pointer to blob to be freed
3408 */
3409void wpa_config_free_blob(struct wpa_config_blob *blob)
3410{
3411	if (blob) {
3412		os_free(blob->name);
3413		bin_clear_free(blob->data, blob->len);
3414		os_free(blob);
3415	}
3416}
3417
3418
3419/**
3420 * wpa_config_remove_blob - Remove a named configuration blob
3421 * @config: Configuration data from wpa_config_read()
3422 * @name: Name of the blob to remove
3423 * Returns: 0 if blob was removed or -1 if blob was not found
3424 */
3425int wpa_config_remove_blob(struct wpa_config *config, const char *name)
3426{
3427	struct wpa_config_blob *pos = config->blobs, *prev = NULL;
3428
3429	while (pos) {
3430		if (os_strcmp(pos->name, name) == 0) {
3431			if (prev)
3432				prev->next = pos->next;
3433			else
3434				config->blobs = pos->next;
3435			wpa_config_free_blob(pos);
3436			return 0;
3437		}
3438		prev = pos;
3439		pos = pos->next;
3440	}
3441
3442	return -1;
3443}
3444#endif /* CONFIG_NO_CONFIG_BLOBS */
3445
3446
3447/**
3448 * wpa_config_alloc_empty - Allocate an empty configuration
3449 * @ctrl_interface: Control interface parameters, e.g., path to UNIX domain
3450 * socket
3451 * @driver_param: Driver parameters
3452 * Returns: Pointer to allocated configuration data or %NULL on failure
3453 */
3454struct wpa_config * wpa_config_alloc_empty(const char *ctrl_interface,
3455					   const char *driver_param)
3456{
3457	struct wpa_config *config;
3458	const int aCWmin = 4, aCWmax = 10;
3459	const struct hostapd_wmm_ac_params ac_bk =
3460		{ aCWmin, aCWmax, 7, 0, 0 }; /* background traffic */
3461	const struct hostapd_wmm_ac_params ac_be =
3462		{ aCWmin, aCWmax, 3, 0, 0 }; /* best effort traffic */
3463	const struct hostapd_wmm_ac_params ac_vi = /* video traffic */
3464		{ aCWmin - 1, aCWmin, 2, 3000 / 32, 0 };
3465	const struct hostapd_wmm_ac_params ac_vo = /* voice traffic */
3466		{ aCWmin - 2, aCWmin - 1, 2, 1500 / 32, 0 };
3467
3468	config = os_zalloc(sizeof(*config));
3469	if (config == NULL)
3470		return NULL;
3471	config->eapol_version = DEFAULT_EAPOL_VERSION;
3472	config->ap_scan = DEFAULT_AP_SCAN;
3473	config->user_mpm = DEFAULT_USER_MPM;
3474	config->max_peer_links = DEFAULT_MAX_PEER_LINKS;
3475	config->fast_reauth = DEFAULT_FAST_REAUTH;
3476	config->p2p_go_intent = DEFAULT_P2P_GO_INTENT;
3477	config->p2p_intra_bss = DEFAULT_P2P_INTRA_BSS;
3478	config->p2p_go_max_inactivity = DEFAULT_P2P_GO_MAX_INACTIVITY;
3479	config->p2p_optimize_listen_chan = DEFAULT_P2P_OPTIMIZE_LISTEN_CHAN;
3480	config->bss_max_count = DEFAULT_BSS_MAX_COUNT;
3481	config->bss_expiration_age = DEFAULT_BSS_EXPIRATION_AGE;
3482	config->bss_expiration_scan_count = DEFAULT_BSS_EXPIRATION_SCAN_COUNT;
3483	config->max_num_sta = DEFAULT_MAX_NUM_STA;
3484	config->access_network_type = DEFAULT_ACCESS_NETWORK_TYPE;
3485	config->scan_cur_freq = DEFAULT_SCAN_CUR_FREQ;
3486	config->wmm_ac_params[0] = ac_be;
3487	config->wmm_ac_params[1] = ac_bk;
3488	config->wmm_ac_params[2] = ac_vi;
3489	config->wmm_ac_params[3] = ac_vo;
3490	config->p2p_search_delay = DEFAULT_P2P_SEARCH_DELAY;
3491	config->rand_addr_lifetime = DEFAULT_RAND_ADDR_LIFETIME;
3492	config->key_mgmt_offload = DEFAULT_KEY_MGMT_OFFLOAD;
3493
3494	if (ctrl_interface)
3495		config->ctrl_interface = os_strdup(ctrl_interface);
3496	if (driver_param)
3497		config->driver_param = os_strdup(driver_param);
3498
3499	return config;
3500}
3501
3502
3503#ifndef CONFIG_NO_STDOUT_DEBUG
3504/**
3505 * wpa_config_debug_dump_networks - Debug dump of configured networks
3506 * @config: Configuration data from wpa_config_read()
3507 */
3508void wpa_config_debug_dump_networks(struct wpa_config *config)
3509{
3510	int prio;
3511	struct wpa_ssid *ssid;
3512
3513	for (prio = 0; prio < config->num_prio; prio++) {
3514		ssid = config->pssid[prio];
3515		wpa_printf(MSG_DEBUG, "Priority group %d",
3516			   ssid->priority);
3517		while (ssid) {
3518			wpa_printf(MSG_DEBUG, "   id=%d ssid='%s'",
3519				   ssid->id,
3520				   wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
3521			ssid = ssid->pnext;
3522		}
3523	}
3524}
3525#endif /* CONFIG_NO_STDOUT_DEBUG */
3526
3527
3528struct global_parse_data {
3529	char *name;
3530	int (*parser)(const struct global_parse_data *data,
3531		      struct wpa_config *config, int line, const char *value);
3532	void *param1, *param2, *param3;
3533	unsigned int changed_flag;
3534};
3535
3536
3537static int wpa_global_config_parse_int(const struct global_parse_data *data,
3538				       struct wpa_config *config, int line,
3539				       const char *pos)
3540{
3541	int val, *dst;
3542	char *end;
3543
3544	dst = (int *) (((u8 *) config) + (long) data->param1);
3545	val = strtol(pos, &end, 0);
3546	if (*end) {
3547		wpa_printf(MSG_ERROR, "Line %d: invalid number \"%s\"",
3548			   line, pos);
3549		return -1;
3550	}
3551	*dst = val;
3552
3553	wpa_printf(MSG_DEBUG, "%s=%d", data->name, *dst);
3554
3555	if (data->param2 && *dst < (long) data->param2) {
3556		wpa_printf(MSG_ERROR, "Line %d: too small %s (value=%d "
3557			   "min_value=%ld)", line, data->name, *dst,
3558			   (long) data->param2);
3559		*dst = (long) data->param2;
3560		return -1;
3561	}
3562
3563	if (data->param3 && *dst > (long) data->param3) {
3564		wpa_printf(MSG_ERROR, "Line %d: too large %s (value=%d "
3565			   "max_value=%ld)", line, data->name, *dst,
3566			   (long) data->param3);
3567		*dst = (long) data->param3;
3568		return -1;
3569	}
3570
3571	return 0;
3572}
3573
3574
3575static int wpa_global_config_parse_str(const struct global_parse_data *data,
3576				       struct wpa_config *config, int line,
3577				       const char *pos)
3578{
3579	size_t len;
3580	char **dst, *tmp;
3581
3582	len = os_strlen(pos);
3583	if (data->param2 && len < (size_t) data->param2) {
3584		wpa_printf(MSG_ERROR, "Line %d: too short %s (len=%lu "
3585			   "min_len=%ld)", line, data->name,
3586			   (unsigned long) len, (long) data->param2);
3587		return -1;
3588	}
3589
3590	if (data->param3 && len > (size_t) data->param3) {
3591		wpa_printf(MSG_ERROR, "Line %d: too long %s (len=%lu "
3592			   "max_len=%ld)", line, data->name,
3593			   (unsigned long) len, (long) data->param3);
3594		return -1;
3595	}
3596
3597	tmp = os_strdup(pos);
3598	if (tmp == NULL)
3599		return -1;
3600
3601	dst = (char **) (((u8 *) config) + (long) data->param1);
3602	os_free(*dst);
3603	*dst = tmp;
3604	wpa_printf(MSG_DEBUG, "%s='%s'", data->name, *dst);
3605
3606	return 0;
3607}
3608
3609
3610static int wpa_config_process_bgscan(const struct global_parse_data *data,
3611				     struct wpa_config *config, int line,
3612				     const char *pos)
3613{
3614	size_t len;
3615	char *tmp;
3616	int res;
3617
3618	tmp = wpa_config_parse_string(pos, &len);
3619	if (tmp == NULL) {
3620		wpa_printf(MSG_ERROR, "Line %d: failed to parse %s",
3621			   line, data->name);
3622		return -1;
3623	}
3624
3625	res = wpa_global_config_parse_str(data, config, line, tmp);
3626	os_free(tmp);
3627	return res;
3628}
3629
3630
3631static int wpa_global_config_parse_bin(const struct global_parse_data *data,
3632				       struct wpa_config *config, int line,
3633				       const char *pos)
3634{
3635	size_t len;
3636	struct wpabuf **dst, *tmp;
3637
3638	len = os_strlen(pos);
3639	if (len & 0x01)
3640		return -1;
3641
3642	tmp = wpabuf_alloc(len / 2);
3643	if (tmp == NULL)
3644		return -1;
3645
3646	if (hexstr2bin(pos, wpabuf_put(tmp, len / 2), len / 2)) {
3647		wpabuf_free(tmp);
3648		return -1;
3649	}
3650
3651	dst = (struct wpabuf **) (((u8 *) config) + (long) data->param1);
3652	wpabuf_free(*dst);
3653	*dst = tmp;
3654	wpa_printf(MSG_DEBUG, "%s", data->name);
3655
3656	return 0;
3657}
3658
3659
3660static int wpa_config_process_freq_list(const struct global_parse_data *data,
3661					struct wpa_config *config, int line,
3662					const char *value)
3663{
3664	int *freqs;
3665
3666	freqs = wpa_config_parse_int_array(value);
3667	if (freqs == NULL)
3668		return -1;
3669	if (freqs[0] == 0) {
3670		os_free(freqs);
3671		freqs = NULL;
3672	}
3673	os_free(config->freq_list);
3674	config->freq_list = freqs;
3675	return 0;
3676}
3677
3678
3679#ifdef CONFIG_P2P
3680static int wpa_global_config_parse_ipv4(const struct global_parse_data *data,
3681					struct wpa_config *config, int line,
3682					const char *pos)
3683{
3684	u32 *dst;
3685	struct hostapd_ip_addr addr;
3686
3687	if (hostapd_parse_ip_addr(pos, &addr) < 0)
3688		return -1;
3689	if (addr.af != AF_INET)
3690		return -1;
3691
3692	dst = (u32 *) (((u8 *) config) + (long) data->param1);
3693	os_memcpy(dst, &addr.u.v4.s_addr, 4);
3694	wpa_printf(MSG_DEBUG, "%s = 0x%x", data->name,
3695		   WPA_GET_BE32((u8 *) dst));
3696
3697	return 0;
3698}
3699#endif /* CONFIG_P2P */
3700
3701
3702static int wpa_config_process_country(const struct global_parse_data *data,
3703				      struct wpa_config *config, int line,
3704				      const char *pos)
3705{
3706	if (!pos[0] || !pos[1]) {
3707		wpa_printf(MSG_DEBUG, "Invalid country set");
3708		return -1;
3709	}
3710	config->country[0] = pos[0];
3711	config->country[1] = pos[1];
3712	wpa_printf(MSG_DEBUG, "country='%c%c'",
3713		   config->country[0], config->country[1]);
3714	return 0;
3715}
3716
3717
3718static int wpa_config_process_load_dynamic_eap(
3719	const struct global_parse_data *data, struct wpa_config *config,
3720	int line, const char *so)
3721{
3722	int ret;
3723	wpa_printf(MSG_DEBUG, "load_dynamic_eap=%s", so);
3724	ret = eap_peer_method_load(so);
3725	if (ret == -2) {
3726		wpa_printf(MSG_DEBUG, "This EAP type was already loaded - not "
3727			   "reloading.");
3728	} else if (ret) {
3729		wpa_printf(MSG_ERROR, "Line %d: Failed to load dynamic EAP "
3730			   "method '%s'.", line, so);
3731		return -1;
3732	}
3733
3734	return 0;
3735}
3736
3737
3738#ifdef CONFIG_WPS
3739
3740static int wpa_config_process_uuid(const struct global_parse_data *data,
3741				   struct wpa_config *config, int line,
3742				   const char *pos)
3743{
3744	char buf[40];
3745	if (uuid_str2bin(pos, config->uuid)) {
3746		wpa_printf(MSG_ERROR, "Line %d: invalid UUID", line);
3747		return -1;
3748	}
3749	uuid_bin2str(config->uuid, buf, sizeof(buf));
3750	wpa_printf(MSG_DEBUG, "uuid=%s", buf);
3751	return 0;
3752}
3753
3754
3755static int wpa_config_process_device_type(
3756	const struct global_parse_data *data,
3757	struct wpa_config *config, int line, const char *pos)
3758{
3759	return wps_dev_type_str2bin(pos, config->device_type);
3760}
3761
3762
3763static int wpa_config_process_os_version(const struct global_parse_data *data,
3764					 struct wpa_config *config, int line,
3765					 const char *pos)
3766{
3767	if (hexstr2bin(pos, config->os_version, 4)) {
3768		wpa_printf(MSG_ERROR, "Line %d: invalid os_version", line);
3769		return -1;
3770	}
3771	wpa_printf(MSG_DEBUG, "os_version=%08x",
3772		   WPA_GET_BE32(config->os_version));
3773	return 0;
3774}
3775
3776
3777static int wpa_config_process_wps_vendor_ext_m1(
3778	const struct global_parse_data *data,
3779	struct wpa_config *config, int line, const char *pos)
3780{
3781	struct wpabuf *tmp;
3782	int len = os_strlen(pos) / 2;
3783	u8 *p;
3784
3785	if (!len) {
3786		wpa_printf(MSG_ERROR, "Line %d: "
3787			   "invalid wps_vendor_ext_m1", line);
3788		return -1;
3789	}
3790
3791	tmp = wpabuf_alloc(len);
3792	if (tmp) {
3793		p = wpabuf_put(tmp, len);
3794
3795		if (hexstr2bin(pos, p, len)) {
3796			wpa_printf(MSG_ERROR, "Line %d: "
3797				   "invalid wps_vendor_ext_m1", line);
3798			wpabuf_free(tmp);
3799			return -1;
3800		}
3801
3802		wpabuf_free(config->wps_vendor_ext_m1);
3803		config->wps_vendor_ext_m1 = tmp;
3804	} else {
3805		wpa_printf(MSG_ERROR, "Can not allocate "
3806			   "memory for wps_vendor_ext_m1");
3807		return -1;
3808	}
3809
3810	return 0;
3811}
3812
3813#endif /* CONFIG_WPS */
3814
3815#ifdef CONFIG_P2P
3816static int wpa_config_process_sec_device_type(
3817	const struct global_parse_data *data,
3818	struct wpa_config *config, int line, const char *pos)
3819{
3820	int idx;
3821
3822	if (config->num_sec_device_types >= MAX_SEC_DEVICE_TYPES) {
3823		wpa_printf(MSG_ERROR, "Line %d: too many sec_device_type "
3824			   "items", line);
3825		return -1;
3826	}
3827
3828	idx = config->num_sec_device_types;
3829
3830	if (wps_dev_type_str2bin(pos, config->sec_device_type[idx]))
3831		return -1;
3832
3833	config->num_sec_device_types++;
3834	return 0;
3835}
3836
3837
3838static int wpa_config_process_p2p_pref_chan(
3839	const struct global_parse_data *data,
3840	struct wpa_config *config, int line, const char *pos)
3841{
3842	struct p2p_channel *pref = NULL, *n;
3843	unsigned int num = 0;
3844	const char *pos2;
3845	u8 op_class, chan;
3846
3847	/* format: class:chan,class:chan,... */
3848
3849	while (*pos) {
3850		op_class = atoi(pos);
3851		pos2 = os_strchr(pos, ':');
3852		if (pos2 == NULL)
3853			goto fail;
3854		pos2++;
3855		chan = atoi(pos2);
3856
3857		n = os_realloc_array(pref, num + 1,
3858				     sizeof(struct p2p_channel));
3859		if (n == NULL)
3860			goto fail;
3861		pref = n;
3862		pref[num].op_class = op_class;
3863		pref[num].chan = chan;
3864		num++;
3865
3866		pos = os_strchr(pos2, ',');
3867		if (pos == NULL)
3868			break;
3869		pos++;
3870	}
3871
3872	os_free(config->p2p_pref_chan);
3873	config->p2p_pref_chan = pref;
3874	config->num_p2p_pref_chan = num;
3875	wpa_hexdump(MSG_DEBUG, "P2P: Preferred class/channel pairs",
3876		    (u8 *) config->p2p_pref_chan,
3877		    config->num_p2p_pref_chan * sizeof(struct p2p_channel));
3878
3879	return 0;
3880
3881fail:
3882	os_free(pref);
3883	wpa_printf(MSG_ERROR, "Line %d: Invalid p2p_pref_chan list", line);
3884	return -1;
3885}
3886
3887
3888static int wpa_config_process_p2p_no_go_freq(
3889	const struct global_parse_data *data,
3890	struct wpa_config *config, int line, const char *pos)
3891{
3892	int ret;
3893
3894	ret = freq_range_list_parse(&config->p2p_no_go_freq, pos);
3895	if (ret < 0) {
3896		wpa_printf(MSG_ERROR, "Line %d: Invalid p2p_no_go_freq", line);
3897		return -1;
3898	}
3899
3900	wpa_printf(MSG_DEBUG, "P2P: p2p_no_go_freq with %u items",
3901		   config->p2p_no_go_freq.num);
3902
3903	return 0;
3904}
3905
3906#endif /* CONFIG_P2P */
3907
3908
3909static int wpa_config_process_hessid(
3910	const struct global_parse_data *data,
3911	struct wpa_config *config, int line, const char *pos)
3912{
3913	if (hwaddr_aton2(pos, config->hessid) < 0) {
3914		wpa_printf(MSG_ERROR, "Line %d: Invalid hessid '%s'",
3915			   line, pos);
3916		return -1;
3917	}
3918
3919	return 0;
3920}
3921
3922
3923static int wpa_config_process_sae_groups(
3924	const struct global_parse_data *data,
3925	struct wpa_config *config, int line, const char *pos)
3926{
3927	int *groups = wpa_config_parse_int_array(pos);
3928	if (groups == NULL) {
3929		wpa_printf(MSG_ERROR, "Line %d: Invalid sae_groups '%s'",
3930			   line, pos);
3931		return -1;
3932	}
3933
3934	os_free(config->sae_groups);
3935	config->sae_groups = groups;
3936
3937	return 0;
3938}
3939
3940
3941static int wpa_config_process_ap_vendor_elements(
3942	const struct global_parse_data *data,
3943	struct wpa_config *config, int line, const char *pos)
3944{
3945	struct wpabuf *tmp;
3946	int len = os_strlen(pos) / 2;
3947	u8 *p;
3948
3949	if (!len) {
3950		wpa_printf(MSG_ERROR, "Line %d: invalid ap_vendor_elements",
3951			   line);
3952		return -1;
3953	}
3954
3955	tmp = wpabuf_alloc(len);
3956	if (tmp) {
3957		p = wpabuf_put(tmp, len);
3958
3959		if (hexstr2bin(pos, p, len)) {
3960			wpa_printf(MSG_ERROR, "Line %d: invalid "
3961				   "ap_vendor_elements", line);
3962			wpabuf_free(tmp);
3963			return -1;
3964		}
3965
3966		wpabuf_free(config->ap_vendor_elements);
3967		config->ap_vendor_elements = tmp;
3968	} else {
3969		wpa_printf(MSG_ERROR, "Cannot allocate memory for "
3970			   "ap_vendor_elements");
3971		return -1;
3972	}
3973
3974	return 0;
3975}
3976
3977
3978#ifdef CONFIG_CTRL_IFACE
3979static int wpa_config_process_no_ctrl_interface(
3980	const struct global_parse_data *data,
3981	struct wpa_config *config, int line, const char *pos)
3982{
3983	wpa_printf(MSG_DEBUG, "no_ctrl_interface -> ctrl_interface=NULL");
3984	os_free(config->ctrl_interface);
3985	config->ctrl_interface = NULL;
3986	return 0;
3987}
3988#endif /* CONFIG_CTRL_IFACE */
3989
3990
3991#ifdef OFFSET
3992#undef OFFSET
3993#endif /* OFFSET */
3994/* OFFSET: Get offset of a variable within the wpa_config structure */
3995#define OFFSET(v) ((void *) &((struct wpa_config *) 0)->v)
3996
3997#define FUNC(f) #f, wpa_config_process_ ## f, OFFSET(f), NULL, NULL
3998#define FUNC_NO_VAR(f) #f, wpa_config_process_ ## f, NULL, NULL, NULL
3999#define _INT(f) #f, wpa_global_config_parse_int, OFFSET(f)
4000#define INT(f) _INT(f), NULL, NULL
4001#define INT_RANGE(f, min, max) _INT(f), (void *) min, (void *) max
4002#define _STR(f) #f, wpa_global_config_parse_str, OFFSET(f)
4003#define STR(f) _STR(f), NULL, NULL
4004#define STR_RANGE(f, min, max) _STR(f), (void *) min, (void *) max
4005#define BIN(f) #f, wpa_global_config_parse_bin, OFFSET(f), NULL, NULL
4006#define IPV4(f) #f, wpa_global_config_parse_ipv4, OFFSET(f), NULL, NULL
4007
4008static const struct global_parse_data global_fields[] = {
4009#ifdef CONFIG_CTRL_IFACE
4010	{ STR(ctrl_interface), 0 },
4011	{ FUNC_NO_VAR(no_ctrl_interface), 0 },
4012	{ STR(ctrl_interface_group), 0 } /* deprecated */,
4013#endif /* CONFIG_CTRL_IFACE */
4014#ifdef CONFIG_MACSEC
4015	{ INT_RANGE(eapol_version, 1, 3), 0 },
4016#else /* CONFIG_MACSEC */
4017	{ INT_RANGE(eapol_version, 1, 2), 0 },
4018#endif /* CONFIG_MACSEC */
4019	{ INT(ap_scan), 0 },
4020	{ FUNC(bgscan), 0 },
4021#ifdef CONFIG_MESH
4022	{ INT(user_mpm), 0 },
4023	{ INT_RANGE(max_peer_links, 0, 255), 0 },
4024#endif /* CONFIG_MESH */
4025	{ INT(disable_scan_offload), 0 },
4026	{ INT(fast_reauth), 0 },
4027	{ STR(opensc_engine_path), 0 },
4028	{ STR(pkcs11_engine_path), 0 },
4029	{ STR(pkcs11_module_path), 0 },
4030	{ STR(openssl_ciphers), 0 },
4031	{ STR(pcsc_reader), 0 },
4032	{ STR(pcsc_pin), 0 },
4033	{ INT(external_sim), 0 },
4034	{ STR(driver_param), 0 },
4035	{ INT(dot11RSNAConfigPMKLifetime), 0 },
4036	{ INT(dot11RSNAConfigPMKReauthThreshold), 0 },
4037	{ INT(dot11RSNAConfigSATimeout), 0 },
4038#ifndef CONFIG_NO_CONFIG_WRITE
4039	{ INT(update_config), 0 },
4040#endif /* CONFIG_NO_CONFIG_WRITE */
4041	{ FUNC_NO_VAR(load_dynamic_eap), 0 },
4042#ifdef CONFIG_WPS
4043	{ FUNC(uuid), CFG_CHANGED_UUID },
4044	{ STR_RANGE(device_name, 0, 32), CFG_CHANGED_DEVICE_NAME },
4045	{ STR_RANGE(manufacturer, 0, 64), CFG_CHANGED_WPS_STRING },
4046	{ STR_RANGE(model_name, 0, 32), CFG_CHANGED_WPS_STRING },
4047	{ STR_RANGE(model_number, 0, 32), CFG_CHANGED_WPS_STRING },
4048	{ STR_RANGE(serial_number, 0, 32), CFG_CHANGED_WPS_STRING },
4049	{ FUNC(device_type), CFG_CHANGED_DEVICE_TYPE },
4050	{ FUNC(os_version), CFG_CHANGED_OS_VERSION },
4051	{ STR(config_methods), CFG_CHANGED_CONFIG_METHODS },
4052	{ INT_RANGE(wps_cred_processing, 0, 2), 0 },
4053	{ FUNC(wps_vendor_ext_m1), CFG_CHANGED_VENDOR_EXTENSION },
4054#endif /* CONFIG_WPS */
4055#ifdef CONFIG_P2P
4056	{ FUNC(sec_device_type), CFG_CHANGED_SEC_DEVICE_TYPE },
4057	{ INT(p2p_listen_reg_class), 0 },
4058	{ INT(p2p_listen_channel), 0 },
4059	{ INT(p2p_oper_reg_class), CFG_CHANGED_P2P_OPER_CHANNEL },
4060	{ INT(p2p_oper_channel), CFG_CHANGED_P2P_OPER_CHANNEL },
4061	{ INT_RANGE(p2p_go_intent, 0, 15), 0 },
4062	{ STR(p2p_ssid_postfix), CFG_CHANGED_P2P_SSID_POSTFIX },
4063	{ INT_RANGE(persistent_reconnect, 0, 1), 0 },
4064	{ INT_RANGE(p2p_intra_bss, 0, 1), CFG_CHANGED_P2P_INTRA_BSS },
4065	{ INT(p2p_group_idle), 0 },
4066	{ INT_RANGE(p2p_passphrase_len, 8, 63),
4067	  CFG_CHANGED_P2P_PASSPHRASE_LEN },
4068	{ FUNC(p2p_pref_chan), CFG_CHANGED_P2P_PREF_CHAN },
4069	{ FUNC(p2p_no_go_freq), CFG_CHANGED_P2P_PREF_CHAN },
4070	{ INT_RANGE(p2p_add_cli_chan, 0, 1), 0 },
4071	{ INT_RANGE(p2p_optimize_listen_chan, 0, 1), 0 },
4072	{ INT(p2p_go_ht40), 0 },
4073	{ INT(p2p_go_vht), 0 },
4074	{ INT(p2p_disabled), 0 },
4075	{ INT(p2p_no_group_iface), 0 },
4076	{ INT_RANGE(p2p_ignore_shared_freq, 0, 1), 0 },
4077	{ IPV4(ip_addr_go), 0 },
4078	{ IPV4(ip_addr_mask), 0 },
4079	{ IPV4(ip_addr_start), 0 },
4080	{ IPV4(ip_addr_end), 0 },
4081#endif /* CONFIG_P2P */
4082	{ FUNC(country), CFG_CHANGED_COUNTRY },
4083	{ INT(bss_max_count), 0 },
4084	{ INT(bss_expiration_age), 0 },
4085	{ INT(bss_expiration_scan_count), 0 },
4086	{ INT_RANGE(filter_ssids, 0, 1), 0 },
4087	{ INT_RANGE(filter_rssi, -100, 0), 0 },
4088	{ INT(max_num_sta), 0 },
4089	{ INT_RANGE(disassoc_low_ack, 0, 1), 0 },
4090#ifdef CONFIG_HS20
4091	{ INT_RANGE(hs20, 0, 1), 0 },
4092#endif /* CONFIG_HS20 */
4093	{ INT_RANGE(interworking, 0, 1), 0 },
4094	{ FUNC(hessid), 0 },
4095	{ INT_RANGE(access_network_type, 0, 15), 0 },
4096	{ INT_RANGE(pbc_in_m1, 0, 1), 0 },
4097	{ STR(autoscan), 0 },
4098	{ INT_RANGE(wps_nfc_dev_pw_id, 0x10, 0xffff),
4099	  CFG_CHANGED_NFC_PASSWORD_TOKEN },
4100	{ BIN(wps_nfc_dh_pubkey), CFG_CHANGED_NFC_PASSWORD_TOKEN },
4101	{ BIN(wps_nfc_dh_privkey), CFG_CHANGED_NFC_PASSWORD_TOKEN },
4102	{ BIN(wps_nfc_dev_pw), CFG_CHANGED_NFC_PASSWORD_TOKEN },
4103	{ STR(ext_password_backend), CFG_CHANGED_EXT_PW_BACKEND },
4104	{ INT(p2p_go_max_inactivity), 0 },
4105	{ INT_RANGE(auto_interworking, 0, 1), 0 },
4106	{ INT(okc), 0 },
4107	{ INT(pmf), 0 },
4108	{ FUNC(sae_groups), 0 },
4109	{ INT(dtim_period), 0 },
4110	{ INT(beacon_int), 0 },
4111	{ FUNC(ap_vendor_elements), 0 },
4112	{ INT_RANGE(ignore_old_scan_res, 0, 1), 0 },
4113	{ FUNC(freq_list), 0 },
4114	{ INT(scan_cur_freq), 0 },
4115	{ INT(sched_scan_interval), 0 },
4116	{ INT(tdls_external_control), 0},
4117	{ STR(osu_dir), 0 },
4118	{ STR(wowlan_triggers), 0 },
4119	{ INT(p2p_search_delay), 0},
4120	{ INT(mac_addr), 0 },
4121	{ INT(rand_addr_lifetime), 0 },
4122	{ INT(preassoc_mac_addr), 0 },
4123	{ INT(key_mgmt_offload), 0},
4124};
4125
4126#undef FUNC
4127#undef _INT
4128#undef INT
4129#undef INT_RANGE
4130#undef _STR
4131#undef STR
4132#undef STR_RANGE
4133#undef BIN
4134#undef IPV4
4135#define NUM_GLOBAL_FIELDS ARRAY_SIZE(global_fields)
4136
4137
4138int wpa_config_process_global(struct wpa_config *config, char *pos, int line)
4139{
4140	size_t i;
4141	int ret = 0;
4142
4143	for (i = 0; i < NUM_GLOBAL_FIELDS; i++) {
4144		const struct global_parse_data *field = &global_fields[i];
4145		size_t flen = os_strlen(field->name);
4146		if (os_strncmp(pos, field->name, flen) != 0 ||
4147		    pos[flen] != '=')
4148			continue;
4149
4150		if (field->parser(field, config, line, pos + flen + 1)) {
4151			wpa_printf(MSG_ERROR, "Line %d: failed to "
4152				   "parse '%s'.", line, pos);
4153			ret = -1;
4154		}
4155		if (field->changed_flag == CFG_CHANGED_NFC_PASSWORD_TOKEN)
4156			config->wps_nfc_pw_from_config = 1;
4157		config->changed_parameters |= field->changed_flag;
4158		break;
4159	}
4160	if (i == NUM_GLOBAL_FIELDS) {
4161#ifdef CONFIG_AP
4162		if (os_strncmp(pos, "wmm_ac_", 7) == 0) {
4163			char *tmp = os_strchr(pos, '=');
4164			if (tmp == NULL) {
4165				if (line < 0)
4166					return -1;
4167				wpa_printf(MSG_ERROR, "Line %d: invalid line "
4168					   "'%s'", line, pos);
4169				return -1;
4170			}
4171			*tmp++ = '\0';
4172			if (hostapd_config_wmm_ac(config->wmm_ac_params, pos,
4173						  tmp)) {
4174				wpa_printf(MSG_ERROR, "Line %d: invalid WMM "
4175					   "AC item", line);
4176				return -1;
4177			}
4178		}
4179#endif /* CONFIG_AP */
4180		if (line < 0)
4181			return -1;
4182		wpa_printf(MSG_ERROR, "Line %d: unknown global field '%s'.",
4183			   line, pos);
4184		ret = -1;
4185	}
4186
4187	return ret;
4188}
4189