/* * Host AP (software wireless LAN access point) user space daemon for * Host AP kernel driver / Station table * Copyright (c) 2002-2004, Jouni Malinen <jkmaline@cc.hut.fi> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. * * Alternatively, this software may be distributed under the terms of BSD * license. * * See README and COPYING for more details. */#include <stdlib.h>#include <stdio.h>#include <string.h>#include <netinet/in.h>#include <sys/types.h>#include <sys/socket.h>#include "hostapd.h"#include "sta_info.h"#include "eloop.h"#include "accounting.h"#include "ieee802_1x.h"#include "ieee802_11.h"#include "radius.h"#include "eapol_sm.h"#include "wpa.h"#include "radius_client.h"#include "driver.h"int ap_for_each_sta(struct hostapd_data *hapd,		    int (*cb)(struct hostapd_data *hapd, struct sta_info *sta,			      void *ctx),		    void *ctx){	struct sta_info *sta;	for (sta = hapd->sta_list; sta; sta = sta->next) {		if (cb(hapd, sta, ctx))			return 1;	}	return 0;}struct sta_info * ap_get_sta(struct hostapd_data *hapd, const u8 *sta){	struct sta_info *s;	s = hapd->sta_hash[STA_HASH(sta)];	while (s != NULL && memcmp(s->addr, sta, 6) != 0)		s = s->hnext;	return s;}static void ap_sta_list_del(hostapd *hapd, struct sta_info *sta){	struct sta_info *tmp;	if (hapd->sta_list == sta) {		hapd->sta_list = sta->next;		return;	}	tmp = hapd->sta_list;	while (tmp != NULL && tmp->next != sta)		tmp = tmp->next;	if (tmp == NULL) {		printf("Could not remove STA " MACSTR " from list.\n",		       MAC2STR(sta->addr));	} else		tmp->next = sta->next;}void ap_sta_hash_add(hostapd *hapd, struct sta_info *sta){	sta->hnext = hapd->sta_hash[STA_HASH(sta->addr)];	hapd->sta_hash[STA_HASH(sta->addr)] = sta;}static void ap_sta_hash_del(hostapd *hapd, struct sta_info *sta){	struct sta_info *s;	s = hapd->sta_hash[STA_HASH(sta->addr)];	if (s == NULL) return;	if (memcmp(s->addr, sta->addr, 6) == 0) {		hapd->sta_hash[STA_HASH(sta->addr)] = s->hnext;		return;	}	while (s->hnext != NULL && memcmp(s->hnext->addr, sta->addr, 6) != 0)		s = s->hnext;	if (s->hnext != NULL)		s->hnext = s->hnext->hnext;	else		printf("AP: could not remove STA " MACSTR " from hash table\n",		       MAC2STR(sta->addr));}void ap_free_sta(hostapd *hapd, struct sta_info *sta){	accounting_sta_stop(hapd, sta);	if (!(sta->flags & WLAN_STA_PREAUTH))		hostapd_sta_remove(hapd, sta->addr);	ap_sta_hash_del(hapd, sta);	ap_sta_list_del(hapd, sta);	if (sta->aid > 0)		hapd->sta_aid[sta->aid - 1] = NULL;	hapd->num_sta--;	eloop_cancel_timeout(ap_handle_timer, hapd, sta);	ieee802_1x_free_station(sta);	wpa_free_station(sta);	radius_client_flush_auth(hapd->radius, sta->addr);	if (sta->last_assoc_req)		free(sta->last_assoc_req);	free(sta->challenge);	free(sta->wpa_ie);	free(sta);}void hostapd_free_stas(hostapd *hapd){	struct sta_info *sta, *prev;	sta = hapd->sta_list;	while (sta) {		prev = sta;		sta = sta->next;		printf("Removing station " MACSTR "\n", MAC2STR(prev->addr));		ap_free_sta(hapd, prev);	}}void ap_handle_timer(void *eloop_ctx, void *timeout_ctx){	hostapd *hapd = eloop_ctx;	struct sta_info *sta = timeout_ctx;	unsigned long next_time = 0;	if (sta->timeout_next == STA_REMOVE) {		hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,			       HOSTAPD_LEVEL_INFO, "deauthenticated due to "			       "local deauth request");		ap_free_sta(hapd, sta);		return;	}	if ((sta->flags & WLAN_STA_ASSOC) &&	    (sta->timeout_next == STA_NULLFUNC ||	     sta->timeout_next == STA_DISASSOC)) {		int inactive_sec;		HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL,			      "Checking STA " MACSTR " inactivity:\n",			      MAC2STR(sta->addr));		inactive_sec = hostapd_get_inact_sec(hapd, sta->addr);		if (inactive_sec == -1) {			printf("  Could not get station info from kernel "			       "driver for " MACSTR ".\n",			       MAC2STR(sta->addr));		} else if (inactive_sec < AP_MAX_INACTIVITY &&			   sta->flags & WLAN_STA_ASSOC) {			/* station activity detected; reset timeout state */			HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL,				      "  Station has been active\n");			sta->timeout_next = STA_NULLFUNC;			next_time = AP_MAX_INACTIVITY - inactive_sec;		}	}	if ((sta->flags & WLAN_STA_ASSOC) &&	    sta->timeout_next == STA_DISASSOC &&	    !(sta->flags & WLAN_STA_PENDING_POLL)) {		HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL,			      "  Station has ACKed data poll\n");		/* data nullfunc frame poll did not produce TX errors; assume		 * station ACKed it */		sta->timeout_next = STA_NULLFUNC;		next_time = AP_MAX_INACTIVITY;	}	if (next_time) {		eloop_register_timeout(next_time, 0, ap_handle_timer, hapd,				       sta);		return;	}	if (sta->timeout_next == STA_NULLFUNC &&	    (sta->flags & WLAN_STA_ASSOC)) {		/* send data frame to poll STA and check whether this frame		 * is ACKed */		struct ieee80211_hdr hdr;		HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL,			      "  Polling STA with data frame\n");		sta->flags |= WLAN_STA_PENDING_POLL;		/* FIX: WLAN_FC_STYPE_NULLFUNC would be more appropriate, but		 * it is apparently not retried so TX Exc events are not		 * received for it */		memset(&hdr, 0, sizeof(hdr));		hdr.frame_control =			IEEE80211_FC(WLAN_FC_TYPE_DATA, WLAN_FC_STYPE_DATA);		hdr.frame_control |= host_to_le16(BIT(1));		hdr.frame_control |= host_to_le16(WLAN_FC_FROMDS);		memcpy(hdr.IEEE80211_DA_FROMDS, sta->addr, ETH_ALEN);		memcpy(hdr.IEEE80211_BSSID_FROMDS, hapd->own_addr, ETH_ALEN);		memcpy(hdr.IEEE80211_SA_FROMDS, hapd->own_addr, ETH_ALEN);		if (hostapd_send_mgmt_frame(hapd, &hdr, sizeof(hdr), 0) < 0)			perror("ap_handle_timer: send");	} else if (sta->timeout_next != STA_REMOVE) {		int deauth = sta->timeout_next == STA_DEAUTH;		printf("  Sending %s info to STA " MACSTR "\n",		       deauth ? "deauthentication" : "disassociation",		       MAC2STR(sta->addr));		if (deauth) {			hostapd_sta_deauth(hapd, sta->addr,					   WLAN_REASON_PREV_AUTH_NOT_VALID);		} else {			hostapd_sta_disassoc(				hapd, sta->addr,				WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY);		}	}	switch (sta->timeout_next) {	case STA_NULLFUNC:		sta->timeout_next = STA_DISASSOC;		eloop_register_timeout(AP_DISASSOC_DELAY, 0, ap_handle_timer,				       hapd, sta);		break;	case STA_DISASSOC:		sta->flags &= ~WLAN_STA_ASSOC;		ieee802_1x_set_port_enabled(hapd, sta, 0);		if (!sta->acct_terminate_cause)			sta->acct_terminate_cause =				RADIUS_ACCT_TERMINATE_CAUSE_IDLE_TIMEOUT;		accounting_sta_stop(hapd, sta);		ieee802_1x_free_station(sta);		hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,			       HOSTAPD_LEVEL_INFO, "disassociated due to "			       "inactivity");		sta->timeout_next = STA_DEAUTH;		eloop_register_timeout(AP_DEAUTH_DELAY, 0, ap_handle_timer,				       hapd, sta);		break;	case STA_DEAUTH:	case STA_REMOVE:		hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,			       HOSTAPD_LEVEL_INFO, "deauthenticated due to "			       "inactivity");		if (!sta->acct_terminate_cause)			sta->acct_terminate_cause =				RADIUS_ACCT_TERMINATE_CAUSE_IDLE_TIMEOUT;		ap_free_sta(hapd, sta);		break;	}}void ap_handle_session_timer(void *eloop_ctx, void *timeout_ctx){	hostapd *hapd = eloop_ctx;	struct sta_info *sta = timeout_ctx;	if (!(sta->flags & WLAN_STA_AUTH))		return;	hostapd_sta_deauth(hapd, sta->addr, WLAN_REASON_PREV_AUTH_NOT_VALID);	hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,		       HOSTAPD_LEVEL_INFO, "deauthenticated due to "		       "session timeout");	sta->acct_terminate_cause =		RADIUS_ACCT_TERMINATE_CAUSE_SESSION_TIMEOUT;	ap_free_sta(hapd, sta);}void ap_sta_session_timeout(hostapd *hapd, struct sta_info *sta,			    u32 session_timeout){	hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211,		       HOSTAPD_LEVEL_DEBUG, "setting session timeout to %d "		       "seconds", session_timeout);	eloop_cancel_timeout(ap_handle_session_timer, hapd, sta);	eloop_register_timeout(session_timeout, 0, ap_handle_session_timer,			       hapd, sta);}void ap_sta_no_session_timeout(hostapd *hapd, struct sta_info *sta){	eloop_cancel_timeout(ap_handle_session_timer, hapd, sta);}struct sta_info * ap_sta_add(struct hostapd_data *hapd, const u8 *addr){	struct sta_info *sta;	sta = ap_get_sta(hapd, addr);	if (sta)		return sta;	HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "  New STA\n");	if (hapd->num_sta >= MAX_STA_COUNT) {		/* FIX: might try to remove some old STAs first? */		printf("  no more room for new STAs (%d/%d)\n",		       hapd->num_sta, MAX_STA_COUNT);		return NULL;	}	sta = (struct sta_info *) malloc(sizeof(struct sta_info));	if (sta == NULL) {		printf("  malloc failed\n");		return NULL;	}	memset(sta, 0, sizeof(struct sta_info));	sta->acct_interim_interval = hapd->conf->radius->acct_interim_interval;	/* initialize STA info data */	eloop_register_timeout(AP_MAX_INACTIVITY, 0, ap_handle_timer,			       hapd, sta);	memcpy(sta->addr, addr, ETH_ALEN);	sta->next = hapd->sta_list;	hapd->sta_list = sta;	hapd->num_sta++;	ap_sta_hash_add(hapd, sta);	return sta;}