Detach ctrl_iface monitor if the client socket is removed
[wpasupplicant] / hostapd / driver_test.c
1 /*
2  * hostapd / Driver interface for development testing
3  * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi>
4  *
5  * This program is free software; you can redistribute it and/or modify
6  * it under the terms of the GNU General Public License version 2 as
7  * published by the Free Software Foundation.
8  *
9  * Alternatively, this software may be distributed under the terms of BSD
10  * license.
11  *
12  * See README and COPYING for more details.
13  */
14
15 #include "includes.h"
16 #include <sys/un.h>
17 #include <dirent.h>
18
19 #include "hostapd.h"
20 #include "driver.h"
21 #include "sha1.h"
22 #include "eloop.h"
23 #include "wpa.h"
24 #include "l2_packet/l2_packet.h"
25 #include "hw_features.h"
26 #include "wps_hostapd.h"
27 #include "ieee802_11_defs.h"
28
29
30 struct test_client_socket {
31         struct test_client_socket *next;
32         u8 addr[ETH_ALEN];
33         struct sockaddr_un un;
34         socklen_t unlen;
35         struct test_driver_bss *bss;
36 };
37
38 struct test_driver_bss {
39         struct test_driver_bss *next;
40         char ifname[IFNAMSIZ + 1];
41         u8 bssid[ETH_ALEN];
42         u8 *ie;
43         size_t ielen;
44         u8 *wps_beacon_ie;
45         size_t wps_beacon_ie_len;
46         u8 *wps_probe_resp_ie;
47         size_t wps_probe_resp_ie_len;
48         u8 ssid[32];
49         size_t ssid_len;
50         int privacy;
51 };
52
53 struct test_driver_data {
54         struct hostapd_data *hapd;
55         struct test_client_socket *cli;
56         int test_socket;
57         struct test_driver_bss *bss;
58         char *socket_dir;
59         char *own_socket_path;
60         int udp_port;
61 };
62
63
64 static void test_driver_free_bss(struct test_driver_bss *bss)
65 {
66         free(bss->ie);
67         free(bss->wps_beacon_ie);
68         free(bss->wps_probe_resp_ie);
69         free(bss);
70 }
71
72
73 static void test_driver_free_priv(struct test_driver_data *drv)
74 {
75         struct test_driver_bss *bss, *prev;
76
77         if (drv == NULL)
78                 return;
79
80         bss = drv->bss;
81         while (bss) {
82                 prev = bss;
83                 bss = bss->next;
84                 test_driver_free_bss(prev);
85         }
86         free(drv->own_socket_path);
87         free(drv->socket_dir);
88         free(drv);
89 }
90
91
92 static struct test_client_socket *
93 test_driver_get_cli(struct test_driver_data *drv, struct sockaddr_un *from,
94                     socklen_t fromlen)
95 {
96         struct test_client_socket *cli = drv->cli;
97
98         while (cli) {
99                 if (cli->unlen == fromlen &&
100                     strncmp(cli->un.sun_path, from->sun_path,
101                             fromlen - sizeof(cli->un.sun_family)) == 0)
102                         return cli;
103                 cli = cli->next;
104         }
105
106         return NULL;
107 }
108
109
110 static int test_driver_send_eapol(void *priv, const u8 *addr, const u8 *data,
111                                   size_t data_len, int encrypt,
112                                   const u8 *own_addr)
113 {
114         struct test_driver_data *drv = priv;
115         struct test_client_socket *cli;
116         struct msghdr msg;
117         struct iovec io[3];
118         struct l2_ethhdr eth;
119
120         if (drv->test_socket < 0)
121                 return -1;
122
123         cli = drv->cli;
124         while (cli) {
125                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
126                         break;
127                 cli = cli->next;
128         }
129
130         if (!cli) {
131                 wpa_printf(MSG_DEBUG, "%s: no destination client entry",
132                            __func__);
133                 return -1;
134         }
135
136         memcpy(eth.h_dest, addr, ETH_ALEN);
137         memcpy(eth.h_source, own_addr, ETH_ALEN);
138         eth.h_proto = host_to_be16(ETH_P_EAPOL);
139
140         io[0].iov_base = "EAPOL ";
141         io[0].iov_len = 6;
142         io[1].iov_base = &eth;
143         io[1].iov_len = sizeof(eth);
144         io[2].iov_base = (u8 *) data;
145         io[2].iov_len = data_len;
146
147         memset(&msg, 0, sizeof(msg));
148         msg.msg_iov = io;
149         msg.msg_iovlen = 3;
150         msg.msg_name = &cli->un;
151         msg.msg_namelen = cli->unlen;
152         return sendmsg(drv->test_socket, &msg, 0);
153 }
154
155
156 static int test_driver_send_ether(void *priv, const u8 *dst, const u8 *src,
157                                   u16 proto, const u8 *data, size_t data_len)
158 {
159         struct test_driver_data *drv = priv;
160         struct msghdr msg;
161         struct iovec io[3];
162         struct l2_ethhdr eth;
163         char desttxt[30];
164         struct sockaddr_un addr;
165         struct dirent *dent;
166         DIR *dir;
167         int ret = 0, broadcast = 0, count = 0;
168
169         if (drv->test_socket < 0 || drv->socket_dir == NULL) {
170                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d "
171                            "socket_dir=%p)",
172                            __func__, drv->test_socket, drv->socket_dir);
173                 return -1;
174         }
175
176         broadcast = memcmp(dst, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
177         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dst));
178
179         memcpy(eth.h_dest, dst, ETH_ALEN);
180         memcpy(eth.h_source, src, ETH_ALEN);
181         eth.h_proto = host_to_be16(proto);
182
183         io[0].iov_base = "ETHER ";
184         io[0].iov_len = 6;
185         io[1].iov_base = &eth;
186         io[1].iov_len = sizeof(eth);
187         io[2].iov_base = (u8 *) data;
188         io[2].iov_len = data_len;
189
190         memset(&msg, 0, sizeof(msg));
191         msg.msg_iov = io;
192         msg.msg_iovlen = 3;
193
194         dir = opendir(drv->socket_dir);
195         if (dir == NULL) {
196                 perror("test_driver: opendir");
197                 return -1;
198         }
199         while ((dent = readdir(dir))) {
200 #ifdef _DIRENT_HAVE_D_TYPE
201                 /* Skip the file if it is not a socket. Also accept
202                  * DT_UNKNOWN (0) in case the C library or underlying file
203                  * system does not support d_type. */
204                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
205                         continue;
206 #endif /* _DIRENT_HAVE_D_TYPE */
207                 if (strcmp(dent->d_name, ".") == 0 ||
208                     strcmp(dent->d_name, "..") == 0)
209                         continue;
210
211                 memset(&addr, 0, sizeof(addr));
212                 addr.sun_family = AF_UNIX;
213                 snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
214                          drv->socket_dir, dent->d_name);
215
216                 if (strcmp(addr.sun_path, drv->own_socket_path) == 0)
217                         continue;
218                 if (!broadcast && strstr(dent->d_name, desttxt) == NULL)
219                         continue;
220
221                 wpa_printf(MSG_DEBUG, "%s: Send ether frame to %s",
222                            __func__, dent->d_name);
223
224                 msg.msg_name = &addr;
225                 msg.msg_namelen = sizeof(addr);
226                 ret = sendmsg(drv->test_socket, &msg, 0);
227                 if (ret < 0)
228                         perror("driver_test: sendmsg");
229                 count++;
230         }
231         closedir(dir);
232
233         if (!broadcast && count == 0) {
234                 wpa_printf(MSG_DEBUG, "%s: Destination " MACSTR " not found",
235                            __func__, MAC2STR(dst));
236                 return -1;
237         }
238
239         return ret;
240 }
241
242
243 static int test_driver_send_mgmt_frame(void *priv, const void *buf,
244                                        size_t len, int flags)
245 {
246         struct test_driver_data *drv = priv;
247         struct msghdr msg;
248         struct iovec io[2];
249         const u8 *dest;
250         int ret = 0, broadcast = 0;
251         char desttxt[30];
252         struct sockaddr_un addr;
253         struct dirent *dent;
254         DIR *dir;
255         struct ieee80211_hdr *hdr;
256         u16 fc;
257
258         if (drv->test_socket < 0 || len < 10 || drv->socket_dir == NULL) {
259                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d len=%lu"
260                            " socket_dir=%p)",
261                            __func__, drv->test_socket, (unsigned long) len,
262                            drv->socket_dir);
263                 return -1;
264         }
265
266         dest = buf;
267         dest += 4;
268         broadcast = memcmp(dest, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
269         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dest));
270
271         io[0].iov_base = "MLME ";
272         io[0].iov_len = 5;
273         io[1].iov_base = (void *) buf;
274         io[1].iov_len = len;
275
276         memset(&msg, 0, sizeof(msg));
277         msg.msg_iov = io;
278         msg.msg_iovlen = 2;
279
280         dir = opendir(drv->socket_dir);
281         if (dir == NULL) {
282                 perror("test_driver: opendir");
283                 return -1;
284         }
285         while ((dent = readdir(dir))) {
286 #ifdef _DIRENT_HAVE_D_TYPE
287                 /* Skip the file if it is not a socket. Also accept
288                  * DT_UNKNOWN (0) in case the C library or underlying file
289                  * system does not support d_type. */
290                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
291                         continue;
292 #endif /* _DIRENT_HAVE_D_TYPE */
293                 if (strcmp(dent->d_name, ".") == 0 ||
294                     strcmp(dent->d_name, "..") == 0)
295                         continue;
296
297                 memset(&addr, 0, sizeof(addr));
298                 addr.sun_family = AF_UNIX;
299                 snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
300                          drv->socket_dir, dent->d_name);
301
302                 if (strcmp(addr.sun_path, drv->own_socket_path) == 0)
303                         continue;
304                 if (!broadcast && strstr(dent->d_name, desttxt) == NULL)
305                         continue;
306
307                 wpa_printf(MSG_DEBUG, "%s: Send management frame to %s",
308                            __func__, dent->d_name);
309
310                 msg.msg_name = &addr;
311                 msg.msg_namelen = sizeof(addr);
312                 ret = sendmsg(drv->test_socket, &msg, 0);
313                 if (ret < 0)
314                         perror("driver_test: sendmsg");
315         }
316         closedir(dir);
317
318         hdr = (struct ieee80211_hdr *) buf;
319         fc = le_to_host16(hdr->frame_control);
320         hostapd_mgmt_tx_cb(drv->hapd, (u8 *) buf, len, WLAN_FC_GET_STYPE(fc),
321                            ret >= 0);
322
323         return ret;
324 }
325
326
327 static void test_driver_scan(struct test_driver_data *drv,
328                              struct sockaddr_un *from, socklen_t fromlen,
329                              char *data)
330 {
331         char buf[512], *pos, *end;
332         int ret;
333         struct test_driver_bss *bss;
334         u8 sa[ETH_ALEN];
335         u8 ie[512];
336         size_t ielen;
337
338         /* data: optional [ ' ' | STA-addr | ' ' | IEs(hex) ] */
339
340         wpa_printf(MSG_DEBUG, "test_driver: SCAN");
341
342         if (*data) {
343                 if (*data != ' ' ||
344                     hwaddr_aton(data + 1, sa)) {
345                         wpa_printf(MSG_DEBUG, "test_driver: Unexpected SCAN "
346                                    "command format");
347                         return;
348                 }
349
350                 data += 18;
351                 while (*data == ' ')
352                         data++;
353                 ielen = os_strlen(data) / 2;
354                 if (ielen > sizeof(ie))
355                         ielen = sizeof(ie);
356                 if (hexstr2bin(data, ie, ielen) < 0)
357                         ielen = 0;
358
359                 wpa_printf(MSG_DEBUG, "test_driver: Scan from " MACSTR,
360                            MAC2STR(sa));
361                 wpa_hexdump(MSG_MSGDUMP, "test_driver: scan IEs", ie, ielen);
362
363                 hostapd_wps_probe_req_rx(drv->hapd, sa, ie, ielen);
364         }
365
366         for (bss = drv->bss; bss; bss = bss->next) {
367                 pos = buf;
368                 end = buf + sizeof(buf);
369
370                 /* reply: SCANRESP BSSID SSID IEs */
371                 ret = snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
372                                MAC2STR(bss->bssid));
373                 if (ret < 0 || ret >= end - pos)
374                         return;
375                 pos += ret;
376                 pos += wpa_snprintf_hex(pos, end - pos,
377                                         bss->ssid, bss->ssid_len);
378                 ret = snprintf(pos, end - pos, " ");
379                 if (ret < 0 || ret >= end - pos)
380                         return;
381                 pos += ret;
382                 pos += wpa_snprintf_hex(pos, end - pos, bss->ie, bss->ielen);
383                 pos += wpa_snprintf_hex(pos, end - pos, bss->wps_probe_resp_ie,
384                                         bss->wps_probe_resp_ie_len);
385
386                 if (bss->privacy) {
387                         ret = snprintf(pos, end - pos, " PRIVACY");
388                         if (ret < 0 || ret >= end - pos)
389                                 return;
390                         pos += ret;
391                 }
392
393                 sendto(drv->test_socket, buf, pos - buf, 0,
394                        (struct sockaddr *) from, fromlen);
395         }
396 }
397
398
399 static struct hostapd_data * test_driver_get_hapd(struct test_driver_data *drv,
400                                                   struct test_driver_bss *bss)
401 {
402         struct hostapd_iface *iface = drv->hapd->iface;
403         struct hostapd_data *hapd = NULL;
404         size_t i;
405
406         if (bss == NULL) {
407                 wpa_printf(MSG_DEBUG, "%s: bss == NULL", __func__);
408                 return NULL;
409         }
410
411         for (i = 0; i < iface->num_bss; i++) {
412                 hapd = iface->bss[i];
413                 if (memcmp(hapd->own_addr, bss->bssid, ETH_ALEN) == 0)
414                         break;
415         }
416         if (i == iface->num_bss) {
417                 wpa_printf(MSG_DEBUG, "%s: no matching interface entry found "
418                            "for BSSID " MACSTR, __func__, MAC2STR(bss->bssid));
419                 return NULL;
420         }
421
422         return hapd;
423 }
424
425
426 static int test_driver_new_sta(struct test_driver_data *drv,
427                                struct test_driver_bss *bss, const u8 *addr,
428                                const u8 *ie, size_t ielen)
429 {
430         struct hostapd_data *hapd;
431
432         hapd = test_driver_get_hapd(drv, bss);
433         if (hapd == NULL)
434                 return -1;
435
436         return hostapd_notif_assoc(hapd, addr, ie, ielen);
437 }
438
439
440 static void test_driver_assoc(struct test_driver_data *drv,
441                               struct sockaddr_un *from, socklen_t fromlen,
442                               char *data)
443 {
444         struct test_client_socket *cli;
445         u8 ie[256], ssid[32];
446         size_t ielen, ssid_len = 0;
447         char *pos, *pos2, cmd[50];
448         struct test_driver_bss *bss;
449
450         /* data: STA-addr SSID(hex) IEs(hex) */
451
452         cli = os_zalloc(sizeof(*cli));
453         if (cli == NULL)
454                 return;
455
456         if (hwaddr_aton(data, cli->addr)) {
457                 printf("test_socket: Invalid MAC address '%s' in ASSOC\n",
458                        data);
459                 free(cli);
460                 return;
461         }
462         pos = data + 17;
463         while (*pos == ' ')
464                 pos++;
465         pos2 = strchr(pos, ' ');
466         ielen = 0;
467         if (pos2) {
468                 ssid_len = (pos2 - pos) / 2;
469                 if (hexstr2bin(pos, ssid, ssid_len) < 0) {
470                         wpa_printf(MSG_DEBUG, "%s: Invalid SSID", __func__);
471                         free(cli);
472                         return;
473                 }
474                 wpa_hexdump_ascii(MSG_DEBUG, "test_driver_assoc: SSID",
475                                   ssid, ssid_len);
476
477                 pos = pos2 + 1;
478                 ielen = strlen(pos) / 2;
479                 if (ielen > sizeof(ie))
480                         ielen = sizeof(ie);
481                 if (hexstr2bin(pos, ie, ielen) < 0)
482                         ielen = 0;
483         }
484
485         for (bss = drv->bss; bss; bss = bss->next) {
486                 if (bss->ssid_len == ssid_len &&
487                     memcmp(bss->ssid, ssid, ssid_len) == 0)
488                         break;
489         }
490         if (bss == NULL) {
491                 wpa_printf(MSG_DEBUG, "%s: No matching SSID found from "
492                            "configured BSSes", __func__);
493                 free(cli);
494                 return;
495         }
496
497         cli->bss = bss;
498         memcpy(&cli->un, from, sizeof(cli->un));
499         cli->unlen = fromlen;
500         cli->next = drv->cli;
501         drv->cli = cli;
502         wpa_hexdump_ascii(MSG_DEBUG, "test_socket: ASSOC sun_path",
503                           (const u8 *) cli->un.sun_path,
504                           cli->unlen - sizeof(cli->un.sun_family));
505
506         snprintf(cmd, sizeof(cmd), "ASSOCRESP " MACSTR " 0",
507                  MAC2STR(bss->bssid));
508         sendto(drv->test_socket, cmd, strlen(cmd), 0,
509                (struct sockaddr *) from, fromlen);
510
511         if (test_driver_new_sta(drv, bss, cli->addr, ie, ielen) < 0) {
512                 wpa_printf(MSG_DEBUG, "test_driver: failed to add new STA");
513         }
514 }
515
516
517 static void test_driver_disassoc(struct test_driver_data *drv,
518                                  struct sockaddr_un *from, socklen_t fromlen)
519 {
520         struct test_client_socket *cli;
521
522         cli = test_driver_get_cli(drv, from, fromlen);
523         if (!cli)
524                 return;
525
526         hostapd_notif_disassoc(drv->hapd, cli->addr);
527 }
528
529
530 static void test_driver_eapol(struct test_driver_data *drv,
531                               struct sockaddr_un *from, socklen_t fromlen,
532                               u8 *data, size_t datalen)
533 {
534         struct test_client_socket *cli;
535         if (datalen > 14) {
536                 /* Skip Ethernet header */
537                 wpa_printf(MSG_DEBUG, "test_driver: dst=" MACSTR " src="
538                            MACSTR " proto=%04x",
539                            MAC2STR(data), MAC2STR(data + ETH_ALEN),
540                            WPA_GET_BE16(data + 2 * ETH_ALEN));
541                 data += 14;
542                 datalen -= 14;
543         }
544         cli = test_driver_get_cli(drv, from, fromlen);
545         if (cli) {
546                 struct hostapd_data *hapd;
547                 hapd = test_driver_get_hapd(drv, cli->bss);
548                 if (hapd == NULL)
549                         return;
550                 hostapd_eapol_receive(hapd, cli->addr, data, datalen);
551         } else {
552                 wpa_printf(MSG_DEBUG, "test_socket: EAPOL from unknown "
553                            "client");
554         }
555 }
556
557
558 static void test_driver_ether(struct test_driver_data *drv,
559                               struct sockaddr_un *from, socklen_t fromlen,
560                               u8 *data, size_t datalen)
561 {
562         struct l2_ethhdr *eth;
563
564         if (datalen < sizeof(*eth))
565                 return;
566
567         eth = (struct l2_ethhdr *) data;
568         wpa_printf(MSG_DEBUG, "test_driver: RX ETHER dst=" MACSTR " src="
569                    MACSTR " proto=%04x",
570                    MAC2STR(eth->h_dest), MAC2STR(eth->h_source),
571                    be_to_host16(eth->h_proto));
572
573 #ifdef CONFIG_IEEE80211R
574         if (be_to_host16(eth->h_proto) == ETH_P_RRB) {
575                 wpa_ft_rrb_rx(drv->hapd->wpa_auth, eth->h_source,
576                               data + sizeof(*eth), datalen - sizeof(*eth));
577         }
578 #endif /* CONFIG_IEEE80211R */
579 }
580
581
582 static void test_driver_mlme(struct test_driver_data *drv,
583                              struct sockaddr_un *from, socklen_t fromlen,
584                              u8 *data, size_t datalen)
585 {
586         struct ieee80211_hdr *hdr;
587         u16 fc;
588
589         hdr = (struct ieee80211_hdr *) data;
590
591         if (test_driver_get_cli(drv, from, fromlen) == NULL && datalen >= 16) {
592                 struct test_client_socket *cli;
593                 cli = os_zalloc(sizeof(*cli));
594                 if (cli == NULL)
595                         return;
596                 wpa_printf(MSG_DEBUG, "Adding client entry for " MACSTR,
597                            MAC2STR(hdr->addr2));
598                 memcpy(cli->addr, hdr->addr2, ETH_ALEN);
599                 memcpy(&cli->un, from, sizeof(cli->un));
600                 cli->unlen = fromlen;
601                 cli->next = drv->cli;
602                 drv->cli = cli;
603         }
604
605         wpa_hexdump(MSG_MSGDUMP, "test_driver_mlme: received frame",
606                     data, datalen);
607         fc = le_to_host16(hdr->frame_control);
608         if (WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT) {
609                 wpa_printf(MSG_ERROR, "%s: received non-mgmt frame",
610                            __func__);
611                 return;
612         }
613         hostapd_mgmt_rx(drv->hapd, data, datalen, WLAN_FC_GET_STYPE(fc), NULL);
614 }
615
616
617 static void test_driver_receive_unix(int sock, void *eloop_ctx, void *sock_ctx)
618 {
619         struct test_driver_data *drv = eloop_ctx;
620         char buf[2000];
621         int res;
622         struct sockaddr_un from;
623         socklen_t fromlen = sizeof(from);
624
625         res = recvfrom(sock, buf, sizeof(buf) - 1, 0,
626                        (struct sockaddr *) &from, &fromlen);
627         if (res < 0) {
628                 perror("recvfrom(test_socket)");
629                 return;
630         }
631         buf[res] = '\0';
632
633         wpa_printf(MSG_DEBUG, "test_driver: received %u bytes", res);
634
635         if (strncmp(buf, "SCAN", 4) == 0) {
636                 test_driver_scan(drv, &from, fromlen, buf + 4);
637         } else if (strncmp(buf, "ASSOC ", 6) == 0) {
638                 test_driver_assoc(drv, &from, fromlen, buf + 6);
639         } else if (strcmp(buf, "DISASSOC") == 0) {
640                 test_driver_disassoc(drv, &from, fromlen);
641         } else if (strncmp(buf, "EAPOL ", 6) == 0) {
642                 test_driver_eapol(drv, &from, fromlen, (u8 *) buf + 6,
643                                   res - 6);
644         } else if (strncmp(buf, "ETHER ", 6) == 0) {
645                 test_driver_ether(drv, &from, fromlen, (u8 *) buf + 6,
646                                   res - 6);
647         } else if (strncmp(buf, "MLME ", 5) == 0) {
648                 test_driver_mlme(drv, &from, fromlen, (u8 *) buf + 5, res - 5);
649         } else {
650                 wpa_hexdump_ascii(MSG_DEBUG, "Unknown test_socket command",
651                                   (u8 *) buf, res);
652         }
653 }
654
655
656 static struct test_driver_bss *
657 test_driver_get_bss(struct test_driver_data *drv, const char *ifname)
658 {
659         struct test_driver_bss *bss;
660
661         for (bss = drv->bss; bss; bss = bss->next) {
662                 if (strcmp(bss->ifname, ifname) == 0)
663                         return bss;
664         }
665         return NULL;
666 }
667
668
669 static int test_driver_set_generic_elem(const char *ifname, void *priv,
670                                         const u8 *elem, size_t elem_len)
671 {
672         struct test_driver_data *drv = priv;
673         struct test_driver_bss *bss;
674
675         bss = test_driver_get_bss(drv, ifname);
676         if (bss == NULL)
677                 return -1;
678
679         free(bss->ie);
680
681         if (elem == NULL) {
682                 bss->ie = NULL;
683                 bss->ielen = 0;
684                 return 0;
685         }
686
687         bss->ie = malloc(elem_len);
688         if (bss->ie == NULL) {
689                 bss->ielen = 0;
690                 return -1;
691         }
692
693         memcpy(bss->ie, elem, elem_len);
694         bss->ielen = elem_len;
695         return 0;
696 }
697
698
699 static int test_driver_set_wps_beacon_ie(const char *ifname, void *priv,
700                                          const u8 *ie, size_t len)
701 {
702         struct test_driver_data *drv = priv;
703         struct test_driver_bss *bss;
704
705         wpa_hexdump(MSG_DEBUG, "test_driver: Beacon WPS IE", ie, len);
706         bss = test_driver_get_bss(drv, ifname);
707         if (bss == NULL)
708                 return -1;
709
710         free(bss->wps_beacon_ie);
711
712         if (ie == NULL) {
713                 bss->wps_beacon_ie = NULL;
714                 bss->wps_beacon_ie_len = 0;
715                 return 0;
716         }
717
718         bss->wps_beacon_ie = malloc(len);
719         if (bss->wps_beacon_ie == NULL) {
720                 bss->wps_beacon_ie_len = 0;
721                 return -1;
722         }
723
724         memcpy(bss->wps_beacon_ie, ie, len);
725         bss->wps_beacon_ie_len = len;
726         return 0;
727 }
728
729
730 static int test_driver_set_wps_probe_resp_ie(const char *ifname, void *priv,
731                                              const u8 *ie, size_t len)
732 {
733         struct test_driver_data *drv = priv;
734         struct test_driver_bss *bss;
735
736         wpa_hexdump(MSG_DEBUG, "test_driver: ProbeResp WPS IE", ie, len);
737         bss = test_driver_get_bss(drv, ifname);
738         if (bss == NULL)
739                 return -1;
740
741         free(bss->wps_probe_resp_ie);
742
743         if (ie == NULL) {
744                 bss->wps_probe_resp_ie = NULL;
745                 bss->wps_probe_resp_ie_len = 0;
746                 return 0;
747         }
748
749         bss->wps_probe_resp_ie = malloc(len);
750         if (bss->wps_probe_resp_ie == NULL) {
751                 bss->wps_probe_resp_ie_len = 0;
752                 return -1;
753         }
754
755         memcpy(bss->wps_probe_resp_ie, ie, len);
756         bss->wps_probe_resp_ie_len = len;
757         return 0;
758 }
759
760
761 static int test_driver_sta_deauth(void *priv, const u8 *addr, int reason)
762 {
763         struct test_driver_data *drv = priv;
764         struct test_client_socket *cli;
765
766         if (drv->test_socket < 0)
767                 return -1;
768
769         cli = drv->cli;
770         while (cli) {
771                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
772                         break;
773                 cli = cli->next;
774         }
775
776         if (!cli)
777                 return -1;
778
779         return sendto(drv->test_socket, "DEAUTH", 6, 0,
780                       (struct sockaddr *) &cli->un, cli->unlen);
781 }
782
783
784 static int test_driver_sta_disassoc(void *priv, const u8 *addr, int reason)
785 {
786         struct test_driver_data *drv = priv;
787         struct test_client_socket *cli;
788
789         if (drv->test_socket < 0)
790                 return -1;
791
792         cli = drv->cli;
793         while (cli) {
794                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
795                         break;
796                 cli = cli->next;
797         }
798
799         if (!cli)
800                 return -1;
801
802         return sendto(drv->test_socket, "DISASSOC", 8, 0,
803                       (struct sockaddr *) &cli->un, cli->unlen);
804 }
805
806
807 static struct hostapd_hw_modes *
808 test_driver_get_hw_feature_data(void *priv, u16 *num_modes, u16 *flags)
809 {
810         struct hostapd_hw_modes *modes;
811
812         *num_modes = 3;
813         *flags = 0;
814         modes = os_zalloc(*num_modes * sizeof(struct hostapd_hw_modes));
815         if (modes == NULL)
816                 return NULL;
817         modes[0].mode = HOSTAPD_MODE_IEEE80211G;
818         modes[0].num_channels = 1;
819         modes[0].num_rates = 1;
820         modes[0].channels = os_zalloc(sizeof(struct hostapd_channel_data));
821         modes[0].rates = os_zalloc(sizeof(struct hostapd_rate_data));
822         if (modes[0].channels == NULL || modes[0].rates == NULL) {
823                 hostapd_free_hw_features(modes, *num_modes);
824                 return NULL;
825         }
826         modes[0].channels[0].chan = 1;
827         modes[0].channels[0].freq = 2412;
828         modes[0].channels[0].flag = 0;
829         modes[0].rates[0].rate = 10;
830         modes[0].rates[0].flags = HOSTAPD_RATE_BASIC | HOSTAPD_RATE_SUPPORTED |
831                 HOSTAPD_RATE_CCK | HOSTAPD_RATE_MANDATORY;
832
833         modes[1].mode = HOSTAPD_MODE_IEEE80211B;
834         modes[1].num_channels = 1;
835         modes[1].num_rates = 1;
836         modes[1].channels = os_zalloc(sizeof(struct hostapd_channel_data));
837         modes[1].rates = os_zalloc(sizeof(struct hostapd_rate_data));
838         if (modes[1].channels == NULL || modes[1].rates == NULL) {
839                 hostapd_free_hw_features(modes, *num_modes);
840                 return NULL;
841         }
842         modes[1].channels[0].chan = 1;
843         modes[1].channels[0].freq = 2412;
844         modes[1].channels[0].flag = 0;
845         modes[1].rates[0].rate = 10;
846         modes[1].rates[0].flags = HOSTAPD_RATE_BASIC | HOSTAPD_RATE_SUPPORTED |
847                 HOSTAPD_RATE_CCK | HOSTAPD_RATE_MANDATORY;
848
849         modes[2].mode = HOSTAPD_MODE_IEEE80211A;
850         modes[2].num_channels = 1;
851         modes[2].num_rates = 1;
852         modes[2].channels = os_zalloc(sizeof(struct hostapd_channel_data));
853         modes[2].rates = os_zalloc(sizeof(struct hostapd_rate_data));
854         if (modes[2].channels == NULL || modes[2].rates == NULL) {
855                 hostapd_free_hw_features(modes, *num_modes);
856                 return NULL;
857         }
858         modes[2].channels[0].chan = 60;
859         modes[2].channels[0].freq = 5300;
860         modes[2].channels[0].flag = 0;
861         modes[2].rates[0].rate = 60;
862         modes[2].rates[0].flags = HOSTAPD_RATE_BASIC | HOSTAPD_RATE_SUPPORTED |
863                 HOSTAPD_RATE_MANDATORY;
864
865         return modes;
866 }
867
868
869 static int test_driver_bss_add(void *priv, const char *ifname, const u8 *bssid)
870 {
871         struct test_driver_data *drv = priv;
872         struct test_driver_bss *bss;
873
874         wpa_printf(MSG_DEBUG, "%s(ifname=%s bssid=" MACSTR ")",
875                    __func__, ifname, MAC2STR(bssid));
876
877         bss = os_zalloc(sizeof(*bss));
878         if (bss == NULL)
879                 return -1;
880
881         os_strlcpy(bss->ifname, ifname, IFNAMSIZ);
882         memcpy(bss->bssid, bssid, ETH_ALEN);
883
884         bss->next = drv->bss;
885         drv->bss = bss;
886
887         return 0;
888 }
889
890
891 static int test_driver_bss_remove(void *priv, const char *ifname)
892 {
893         struct test_driver_data *drv = priv;
894         struct test_driver_bss *bss, *prev;
895         struct test_client_socket *cli, *prev_c;
896
897         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
898
899         for (prev = NULL, bss = drv->bss; bss; prev = bss, bss = bss->next) {
900                 if (strcmp(bss->ifname, ifname) != 0)
901                         continue;
902
903                 if (prev)
904                         prev->next = bss->next;
905                 else
906                         drv->bss = bss->next;
907
908                 for (prev_c = NULL, cli = drv->cli; cli;
909                      prev_c = cli, cli = cli->next) {
910                         if (cli->bss != bss)
911                                 continue;
912                         if (prev_c)
913                                 prev_c->next = cli->next;
914                         else
915                                 drv->cli = cli->next;
916                         free(cli);
917                         break;
918                 }
919
920                 test_driver_free_bss(bss);
921                 return 0;
922         }
923
924         return -1;
925 }
926
927
928 static int test_driver_if_add(const char *iface, void *priv,
929                               enum hostapd_driver_if_type type, char *ifname,
930                               const u8 *addr)
931 {
932         wpa_printf(MSG_DEBUG, "%s(iface=%s type=%d ifname=%s)",
933                    __func__, iface, type, ifname);
934         return 0;
935 }
936
937
938 static int test_driver_if_update(void *priv, enum hostapd_driver_if_type type,
939                                  char *ifname, const u8 *addr)
940 {
941         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s)", __func__, type, ifname);
942         return 0;
943 }
944
945
946 static int test_driver_if_remove(void *priv, enum hostapd_driver_if_type type,
947                                  const char *ifname, const u8 *addr)
948 {
949         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s)", __func__, type, ifname);
950         return 0;
951 }
952
953
954 static int test_driver_valid_bss_mask(void *priv, const u8 *addr,
955                                       const u8 *mask)
956 {
957         return 0;
958 }
959
960
961 static int test_driver_set_ssid(const char *ifname, void *priv, const u8 *buf,
962                                 int len)
963 {
964         struct test_driver_data *drv = priv;
965         struct test_driver_bss *bss;
966
967         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
968         wpa_hexdump_ascii(MSG_DEBUG, "test_driver_set_ssid: SSID", buf, len);
969
970         for (bss = drv->bss; bss; bss = bss->next) {
971                 if (strcmp(bss->ifname, ifname) != 0)
972                         continue;
973
974                 if (len < 0 || (size_t) len > sizeof(bss->ssid))
975                         return -1;
976
977                 memcpy(bss->ssid, buf, len);
978                 bss->ssid_len = len;
979
980                 return 0;
981         }
982
983         return -1;
984 }
985
986
987 static int test_driver_set_privacy(const char *ifname, void *priv, int enabled)
988 {
989         struct test_driver_data *drv = priv;
990         struct test_driver_bss *bss;
991
992         wpa_printf(MSG_DEBUG, "%s(ifname=%s enabled=%d)",
993                    __func__, ifname, enabled);
994
995         for (bss = drv->bss; bss; bss = bss->next) {
996                 if (strcmp(bss->ifname, ifname) != 0)
997                         continue;
998
999                 bss->privacy = enabled;
1000
1001                 return 0;
1002         }
1003
1004         return -1;
1005 }
1006
1007
1008 static int test_driver_set_encryption(const char *iface, void *priv,
1009                                       const char *alg, const u8 *addr, int idx,
1010                                       const u8 *key, size_t key_len, int txkey)
1011 {
1012         wpa_printf(MSG_DEBUG, "%s(iface=%s alg=%s idx=%d txkey=%d)",
1013                    __func__, iface, alg, idx, txkey);
1014         if (addr)
1015                 wpa_printf(MSG_DEBUG, "   addr=" MACSTR, MAC2STR(addr));
1016         if (key)
1017                 wpa_hexdump_key(MSG_DEBUG, "   key", key, key_len);
1018         return 0;
1019 }
1020
1021
1022 static int test_driver_set_sta_vlan(void *priv, const u8 *addr,
1023                                     const char *ifname, int vlan_id)
1024 {
1025         wpa_printf(MSG_DEBUG, "%s(addr=" MACSTR " ifname=%s vlan_id=%d)",
1026                    __func__, MAC2STR(addr), ifname, vlan_id);
1027         return 0;
1028 }
1029
1030
1031 static int test_driver_sta_add(const char *ifname, void *priv, const u8 *addr,
1032                                u16 aid, u16 capability, u8 *supp_rates,
1033                                size_t supp_rates_len, int flags,
1034                                u16 listen_interval)
1035 {
1036         struct test_driver_data *drv = priv;
1037         struct test_client_socket *cli;
1038         struct test_driver_bss *bss;
1039
1040         wpa_printf(MSG_DEBUG, "%s(ifname=%s addr=" MACSTR " aid=%d "
1041                    "capability=0x%x flags=0x%x listen_interval=%d)",
1042                    __func__, ifname, MAC2STR(addr), aid, capability, flags,
1043                    listen_interval);
1044         wpa_hexdump(MSG_DEBUG, "test_driver_sta_add - supp_rates",
1045                     supp_rates, supp_rates_len);
1046
1047         cli = drv->cli;
1048         while (cli) {
1049                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
1050                         break;
1051                 cli = cli->next;
1052         }
1053         if (!cli) {
1054                 wpa_printf(MSG_DEBUG, "%s: no matching client entry",
1055                            __func__);
1056                 return -1;
1057         }
1058
1059         for (bss = drv->bss; bss; bss = bss->next) {
1060                 if (strcmp(ifname, bss->ifname) == 0)
1061                         break;
1062         }
1063         if (bss == NULL) {
1064                 wpa_printf(MSG_DEBUG, "%s: No matching interface found from "
1065                            "configured BSSes", __func__);
1066                 return -1;
1067         }
1068
1069         cli->bss = bss;
1070
1071         return 0;
1072 }
1073
1074
1075 static void * test_driver_init(struct hostapd_data *hapd)
1076 {
1077         struct test_driver_data *drv;
1078         struct sockaddr_un addr_un;
1079         struct sockaddr_in addr_in;
1080         struct sockaddr *addr;
1081         socklen_t alen;
1082
1083         drv = os_zalloc(sizeof(struct test_driver_data));
1084         if (drv == NULL) {
1085                 printf("Could not allocate memory for test driver data\n");
1086                 return NULL;
1087         }
1088         drv->bss = os_zalloc(sizeof(*drv->bss));
1089         if (drv->bss == NULL) {
1090                 printf("Could not allocate memory for test driver BSS data\n");
1091                 free(drv);
1092                 return NULL;
1093         }
1094
1095         drv->hapd = hapd;
1096
1097         /* Generate a MAC address to help testing with multiple APs */
1098         hapd->own_addr[0] = 0x02; /* locally administered */
1099         sha1_prf((const u8 *) hapd->conf->iface, strlen(hapd->conf->iface),
1100                  "hostapd test bssid generation",
1101                  (const u8 *) hapd->conf->ssid.ssid, hapd->conf->ssid.ssid_len,
1102                  hapd->own_addr + 1, ETH_ALEN - 1);
1103
1104         os_strlcpy(drv->bss->ifname, hapd->conf->iface, IFNAMSIZ);
1105         memcpy(drv->bss->bssid, hapd->own_addr, ETH_ALEN);
1106
1107         if (hapd->conf->test_socket) {
1108                 if (strlen(hapd->conf->test_socket) >=
1109                     sizeof(addr_un.sun_path)) {
1110                         printf("Too long test_socket path\n");
1111                         test_driver_free_priv(drv);
1112                         return NULL;
1113                 }
1114                 if (strncmp(hapd->conf->test_socket, "DIR:", 4) == 0) {
1115                         size_t len = strlen(hapd->conf->test_socket) + 30;
1116                         drv->socket_dir = strdup(hapd->conf->test_socket + 4);
1117                         drv->own_socket_path = malloc(len);
1118                         if (drv->own_socket_path) {
1119                                 snprintf(drv->own_socket_path, len,
1120                                          "%s/AP-" MACSTR,
1121                                          hapd->conf->test_socket + 4,
1122                                          MAC2STR(hapd->own_addr));
1123                         }
1124                 } else if (strncmp(hapd->conf->test_socket, "UDP:", 4) == 0) {
1125                         drv->udp_port = atoi(hapd->conf->test_socket + 4);
1126                 } else {
1127                         drv->own_socket_path = strdup(hapd->conf->test_socket);
1128                 }
1129                 if (drv->own_socket_path == NULL && drv->udp_port == 0) {
1130                         test_driver_free_priv(drv);
1131                         return NULL;
1132                 }
1133
1134                 drv->test_socket = socket(drv->udp_port ? PF_INET : PF_UNIX,
1135                                           SOCK_DGRAM, 0);
1136                 if (drv->test_socket < 0) {
1137                         perror("socket");
1138                         test_driver_free_priv(drv);
1139                         return NULL;
1140                 }
1141
1142                 if (drv->udp_port) {
1143                         os_memset(&addr_in, 0, sizeof(addr_in));
1144                         addr_in.sin_family = AF_INET;
1145                         addr_in.sin_port = htons(drv->udp_port);
1146                         addr = (struct sockaddr *) &addr_in;
1147                         alen = sizeof(addr_in);
1148                 } else {
1149                         os_memset(&addr_un, 0, sizeof(addr_un));
1150                         addr_un.sun_family = AF_UNIX;
1151                         os_strlcpy(addr_un.sun_path, drv->own_socket_path,
1152                                    sizeof(addr_un.sun_path));
1153                         addr = (struct sockaddr *) &addr_un;
1154                         alen = sizeof(addr_un);
1155                 }
1156                 if (bind(drv->test_socket, addr, alen) < 0) {
1157                         perror("bind(PF_UNIX)");
1158                         close(drv->test_socket);
1159                         if (drv->own_socket_path)
1160                                 unlink(drv->own_socket_path);
1161                         test_driver_free_priv(drv);
1162                         return NULL;
1163                 }
1164                 eloop_register_read_sock(drv->test_socket,
1165                                          test_driver_receive_unix, drv, NULL);
1166         } else
1167                 drv->test_socket = -1;
1168
1169         return drv;
1170 }
1171
1172
1173 static void test_driver_deinit(void *priv)
1174 {
1175         struct test_driver_data *drv = priv;
1176         struct test_client_socket *cli, *prev;
1177
1178         cli = drv->cli;
1179         while (cli) {
1180                 prev = cli;
1181                 cli = cli->next;
1182                 free(prev);
1183         }
1184
1185         if (drv->test_socket >= 0) {
1186                 eloop_unregister_read_sock(drv->test_socket);
1187                 close(drv->test_socket);
1188                 if (drv->own_socket_path)
1189                         unlink(drv->own_socket_path);
1190         }
1191
1192         /* There should be only one BSS remaining at this point. */
1193         if (drv->bss == NULL)
1194                 wpa_printf(MSG_ERROR, "%s: drv->bss == NULL", __func__);
1195         else if (drv->bss->next)
1196                 wpa_printf(MSG_ERROR, "%s: drv->bss->next != NULL", __func__);
1197
1198         test_driver_free_priv(drv);
1199 }
1200
1201
1202 const struct wpa_driver_ops wpa_driver_test_ops = {
1203         .name = "test",
1204         .init = test_driver_init,
1205         .deinit = test_driver_deinit,
1206         .send_eapol = test_driver_send_eapol,
1207         .send_mgmt_frame = test_driver_send_mgmt_frame,
1208         .set_generic_elem = test_driver_set_generic_elem,
1209         .sta_deauth = test_driver_sta_deauth,
1210         .sta_disassoc = test_driver_sta_disassoc,
1211         .get_hw_feature_data = test_driver_get_hw_feature_data,
1212         .bss_add = test_driver_bss_add,
1213         .bss_remove = test_driver_bss_remove,
1214         .if_add = test_driver_if_add,
1215         .if_update = test_driver_if_update,
1216         .if_remove = test_driver_if_remove,
1217         .valid_bss_mask = test_driver_valid_bss_mask,
1218         .set_ssid = test_driver_set_ssid,
1219         .set_privacy = test_driver_set_privacy,
1220         .set_encryption = test_driver_set_encryption,
1221         .set_sta_vlan = test_driver_set_sta_vlan,
1222         .sta_add = test_driver_sta_add,
1223         .send_ether = test_driver_send_ether,
1224         .set_wps_beacon_ie = test_driver_set_wps_beacon_ie,
1225         .set_wps_probe_resp_ie = test_driver_set_wps_probe_resp_ie,
1226 };