📄 driver_devicescape.c
字号:
break; } } if (hapd == NULL) { hapd = iface->bss[0]; if (bssid[0] != 0xff || bssid[1] != 0xff || bssid[2] != 0xff || bssid[3] != 0xff || bssid[4] != 0xff || bssid[5] != 0xff) { /* Unknown BSSID - drop frame if this is not from * passive scanning or a beacon * (at least ProbeReq frames to other APs may be * allowed through RX filtering in the wlan hw/driver) */ if (msg_type != ieee80211_msg_passive_scan && (type != WLAN_FC_TYPE_MGMT || stype != WLAN_FC_STYPE_BEACON)) return; } else broadcast_bssid = 1; } switch (msg_type) { case ieee80211_msg_normal: case ieee80211_msg_passive_scan: /* continue processing */ break; case ieee80211_msg_tx_callback_ack: handle_tx_callback(hapd, buf, data_len, 1); return; case ieee80211_msg_tx_callback_fail: handle_tx_callback(hapd, buf, data_len, 0); return; case ieee80211_msg_wep_frame_unknown_key: /* TODO: ieee802_11_rx_unknown_key(hapd, buf, data_len); */ return; case ieee80211_msg_michael_mic_failure: hostapd_michael_mic_failure(hapd, buf, data_len); return; case ieee80211_msg_monitor: /* drop monitor frames silently */ return; case ieee80211_msg_sta_not_assoc: /* TODO: ieee802_11_rx_sta_not_assoc(hapd, buf, data_len); */ return; default: printf("handle_frame: unknown msg_type %d\n", msg_type); return; } switch (type) { case WLAN_FC_TYPE_MGMT: HOSTAPD_DEBUG((stype == WLAN_FC_STYPE_BEACON || stype == WLAN_FC_STYPE_PROBE_REQ) ? HOSTAPD_DEBUG_EXCESSIVE : HOSTAPD_DEBUG_VERBOSE, "MGMT\n"); if (broadcast_bssid) { for (i = 0; i < iface->num_bss; i++) ieee802_11_mgmt(iface->bss[i], buf, data_len, stype /*, fi */); } else ieee802_11_mgmt(hapd, buf, data_len, stype /*, fi */); break; case WLAN_FC_TYPE_CTRL: /* TODO: send deauth/disassoc if not associated STA sends * PS-Poll */ HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "CTRL\n"); break; case WLAN_FC_TYPE_DATA: HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "DATA\n"); handle_data(hapd, buf, data_len, stype, fi); break; default: printf("unknown frame type %d\n", type); break; }}static void handle_read(int sock, void *eloop_ctx, void *sock_ctx){ struct hostapd_iface *iface = eloop_ctx; int len; unsigned char buf[3000]; struct ieee80211_frame_info *fi; HAPD_DECL; len = recv(sock, buf, sizeof(buf), 0); if (len < 0) { perror("recv"); return; } HOSTAPD_DEBUG(HOSTAPD_DEBUG_MSGDUMPS, "Received %d bytes management frame\n", len); if (HOSTAPD_DEBUG_COND(HOSTAPD_DEBUG_MSGDUMPS)) { int i; printf(" dump:"); for (i = 0; i < len; i++) printf(" %02x", buf[i]); printf("\n"); } if (len < sizeof(struct ieee80211_frame_info)) { printf("handle_read: too short (%d)\n", len); return; } fi = (struct ieee80211_frame_info *) buf; if (ntohl(fi->version) != IEEE80211_FI_VERSION) { printf("Invalid frame info version!\n"); dump_frame_info(fi, len); return; } handle_frame(iface, buf + sizeof(struct ieee80211_frame_info), len - sizeof(struct ieee80211_frame_info), fi);}static int i802_init_sockets(struct i802_driver_data *drv){ struct hostapd_data *hapd = drv->hapd; struct hostapd_iface *iface = hapd->iface; struct ifreq ifr; struct sockaddr_ll addr; u8 *ifname; drv->sock = drv->ioctl_sock = -1; ifname = drv->iface; drv->ioctl_sock = socket(PF_INET, SOCK_DGRAM, 0); if (drv->ioctl_sock < 0) { perror("socket[PF_INET,SOCK_DGRAM]"); return -1; } memset(&ifr, 0, sizeof(ifr)); snprintf(ifr.ifr_name, sizeof(ifr.ifr_name), "%sap", ifname); if (ioctl(drv->ioctl_sock, SIOCGIFINDEX, &ifr) != 0) { perror("ioctl(SIOCGIFINDEX)"); return -1; } if (hostapd_set_iface_flags(drv, 1)) return -1; memset(&addr, 0, sizeof(addr)); addr.sll_family = AF_PACKET; addr.sll_ifindex = ifr.ifr_ifindex; HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "Opening raw packet socket for ifindex %d\n", addr.sll_ifindex); drv->sock = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL)); if (drv->sock < 0) { perror("socket[PF_PACKET,SOCK_RAW]"); return -1; } if (bind(drv->sock, (struct sockaddr *) &addr, sizeof(addr)) < 0) { perror(__FILE__ ":bind"); return -1; } if (eloop_register_read_sock(drv->sock, handle_read, iface, NULL)) { printf("Could not register read socket\n"); return -1; } memset(&ifr, 0, sizeof(ifr)); snprintf(ifr.ifr_name, sizeof(ifr.ifr_name), "%s", ifname); if (ioctl(drv->sock, SIOCGIFHWADDR, &ifr) != 0) { perror("ioctl(SIOCGIFHWADDR)"); return -1; } if (ifr.ifr_hwaddr.sa_family != ARPHRD_ETHER) { printf("Invalid HW-addr family 0x%04x\n", ifr.ifr_hwaddr.sa_family); return -1; } memcpy(drv->hapd->own_addr, ifr.ifr_hwaddr.sa_data, ETH_ALEN); return 0;}static int i802_get_inact_sec(void *priv, const u8 *addr){ struct i802_driver_data *drv = priv; struct prism2_hostapd_param param; memset(¶m, 0, sizeof(param)); param.cmd = PRISM2_HOSTAPD_GET_INFO_STA; memcpy(param.sta_addr, addr, ETH_ALEN); if (hostapd_ioctl(drv, ¶m, sizeof(param))) { return -1; } return param.u.get_info_sta.inactive_msec / 1000;}static int i802_sta_clear_stats(void *priv, const u8 *addr){#if 0 /* TODO */#endif return 0;}static voidhostapd_wireless_event_wireless_custom(struct i802_driver_data *drv, char *custom){ struct hostapd_data *hapd = drv->hapd; HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "Custom wireless event: '%s'\n", custom); if (strncmp(custom, "MLME-MICHAELMICFAILURE.indication", 33) == 0) { char *pos; u8 addr[ETH_ALEN]; pos = strstr(custom, "addr="); if (pos == NULL) { HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "MLME-MICHAELMICFAILURE.indication " "without sender address ignored\n"); return; } pos += 5; if (hwaddr_aton(pos, addr) == 0) { ieee80211_michael_mic_failure(drv->hapd, addr, 1); } else { HOSTAPD_DEBUG(HOSTAPD_DEBUG_MINIMAL, "MLME-MICHAELMICFAILURE.indication " "with invalid MAC address"); } }}static void hostapd_wireless_event_wireless(struct i802_driver_data *drv, char *data, int len){ struct hostapd_data *hapd = drv->hapd; struct iw_event iwe_buf, *iwe = &iwe_buf; char *pos, *end, *custom, *buf; pos = data; end = data + len; while (pos + IW_EV_LCP_LEN <= end) { /* Event data may be unaligned, so make a local, aligned copy * before processing. */ memcpy(&iwe_buf, pos, IW_EV_LCP_LEN); HOSTAPD_DEBUG(HOSTAPD_DEBUG_VERBOSE, "Wireless event: " "cmd=0x%x len=%d\n", iwe->cmd, iwe->len); if (iwe->len <= IW_EV_LCP_LEN) return; custom = pos + IW_EV_POINT_LEN; if (drv->we_version > 18 && (iwe->cmd == IWEVMICHAELMICFAILURE || iwe->cmd == IWEVCUSTOM)) { /* WE-19 removed the pointer from struct iw_point */ char *dpos = (char *) &iwe_buf.u.data.length; int dlen = dpos - (char *) &iwe_buf; memcpy(dpos, pos + IW_EV_LCP_LEN, sizeof(struct iw_event) - dlen); } else { memcpy(&iwe_buf, pos, sizeof(struct iw_event)); custom += IW_EV_POINT_OFF; } switch (iwe->cmd) { case IWEVCUSTOM: if (custom + iwe->u.data.length > end) return; buf = malloc(iwe->u.data.length + 1); if (buf == NULL) return; memcpy(buf, custom, iwe->u.data.length); buf[iwe->u.data.length] = '\0'; hostapd_wireless_event_wireless_custom(drv, buf); free(buf); break; } pos += iwe->len; }}static void hostapd_wireless_event_rtm_newlink(struct i802_driver_data *drv, struct nlmsghdr *h, int len){ struct ifinfomsg *ifi; int attrlen, nlmsg_len, rta_len; struct rtattr * attr; if (len < sizeof(*ifi)) return; ifi = NLMSG_DATA(h); /* TODO: use ifi->ifi_index to filter out wireless events from other * interfaces */ nlmsg_len = NLMSG_ALIGN(sizeof(struct ifinfomsg)); attrlen = h->nlmsg_len - nlmsg_len; if (attrlen < 0) return; attr = (struct rtattr *) (((char *) ifi) + nlmsg_len); rta_len = RTA_ALIGN(sizeof(struct rtattr)); while (RTA_OK(attr, attrlen)) { if (attr->rta_type == IFLA_WIRELESS) { hostapd_wireless_event_wireless( drv, ((char *) attr) + rta_len, attr->rta_len - rta_len); } attr = RTA_NEXT(attr, attrlen); }}static void hostapd_wireless_event_receive(int sock, void *eloop_ctx, void *sock_ctx){ char buf[256]; int left; struct sockaddr_nl from; socklen_t fromlen; struct nlmsghdr *h; struct i802_driver_data *drv = eloop_ctx; fromlen = sizeof(from); left = recvfrom(sock, buf, sizeof(buf), MSG_DONTWAIT, (struct sockaddr *) &from, &fromlen); if (left < 0) { if (errno != EINTR && errno != EAGAIN) perror("recvfrom(netlink)"); return; } h = (struct nlmsghdr *) buf; while (left >= sizeof(*h)) { int len, plen; len = h->nlmsg_len; plen = len - sizeof(*h); if (len > left || plen < 0) { printf("Malformed netlink message: " "len=%d left=%d plen=%d\n", len, left, plen); break; } switch (h->nlmsg_type) { case RTM_NEWLINK: hostapd_wireless_event_rtm_newlink(drv, h, plen); break; } len = NLMSG_ALIGN(len); left -= len; h = (struct nlmsghdr *) ((char *) h + len); } if (left > 0) { printf("%d extra bytes in the end of netlink message\n", left); }}static int hostap_get_we_version(struct i802_driver_data *drv){ struct iw_range *range; struct iwreq iwr; int minlen; size_t buflen; drv->we_version = 0; /* * Use larger buffer than struct iw_range in order to allow the * structure to grow in the future. */ buflen = sizeof(struct iw_range) + 500; range = wpa_zalloc(buflen); if (range == NULL) return -1; memset(&iwr, 0, sizeof(iwr)); strncpy(iwr.ifr_name, drv->iface, IFNAMSIZ); iwr.u.data.pointer = (caddr_t) range; iwr.u.data.length = buflen; minlen = ((char *) &range->enc_capa) - (char *) range + sizeof(range->enc_capa); if (ioctl(drv->ioctl_sock, SIOCGIWRANGE, &iwr) < 0) { perror("ioctl[SIOCGIWRANGE]"); free(range); return -1; } else if (iwr.u.data.length >= minlen && range->we_version_compiled >= 18) { wpa_printf(MSG_DEBUG, "SIOCGIWRANGE: WE(compiled)=%d " "WE(source)=%d enc_capa=0x%x", range->we_version_compiled, range->we_version_source, range->enc_capa); drv->we_version = range->we_version_compiled; } free(range); return 0;}static int i802_wireless_event_init(void *priv){ struct i802_driver_data *drv = priv; int s; struct sockaddr_nl local; hostap_get_we_version(drv); drv->wext_sock = -1; s = socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE); if (s < 0) { perror("socket(PF_NETLINK,SOCK_RAW,NETLINK_ROUTE)"); return -1; } memset(&local, 0, sizeof(local)); local.nl_family = AF_NETLINK; local.nl_groups = RTMGRP_LINK; if (bind(s, (struct sockaddr *) &local, sizeof(local)) < 0) { perror("bind(netlink)"); close(s); return -1; } eloop_register_read_sock(s, hostapd_wireless_event_receive, drv, NULL); drv->wext_sock = s; return 0;}static void i802_wireless_event_deinit(void *priv){ struct i802_driver_data *drv = priv; if (drv->wext_sock < 0) return; eloop_unregister_read_sock(drv->wext_sock); close(drv->wext_sock);}static int i802_sta_deauth(void *priv, const u8 *addr, int reason){ struct i802_driver_data *drv = priv; struct ieee80211_mgmt mgmt; memset(&mgmt, 0, sizeof(mgmt)); mgmt.frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT, WLAN_FC_STYPE_DEAUTH); memcpy(mgmt.da, addr, ETH_ALEN); memcpy(mgmt.sa, drv->hapd->own_addr, ETH_ALEN); memcpy(mgmt.bssid, drv->hapd->own_addr, ETH_ALEN); mgmt.u.deauth.reason_code = host_to_le16(reason); return i802_send_mgmt_frame(drv, &mgmt, IEEE80211_HDRLEN + sizeof(mgmt.u.deauth), 0);}static int i802_sta_disassoc(void *priv, const u8 *addr, int reason){ struct i802_driver_data *drv = priv; struct ieee80211_mgmt mgmt; memset(&mgmt, 0, sizeof(mgmt)); mgmt.frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT, WLAN_FC_STYPE_DISASSOC); memcpy(mgmt.da, addr, ETH_ALEN); memcpy(mgmt.sa, drv->hapd->own_addr, ETH_ALEN); memcpy(mgmt.bssid, drv->hapd->own_addr, ETH_ALEN); mgmt.u.disassoc.reason_code = host_to_le16(reason); return i802_send_mgmt_frame(drv, &mgmt, IEEE80211_HDRLEN + sizeof(mgmt.u.disassoc), 0);}static int i802_init(struct hostapd_data *hapd){ struct i802_driver_data *drv; drv = wpa_zalloc(sizeof(struct i802_driver_data)); if (drv == NULL) { printf("Could not allocate memory for i802 driver data\n"); return -1; } drv->ops = devicescape_driver_ops; drv->hapd = hapd; memcpy(drv->iface, hapd->conf->iface, sizeof(drv->iface)); if (i802_init_sockets(drv)) goto failed; hapd->driver = &drv->ops; /* Enable the radio by default. */ (void) hostap_ioctl_prism2param(drv, PRISM2_PARAM_ADM_STATUS, 1); return 0;failed: free(drv); return -1;}static void i802_deinit(void *priv){ struct i802_driver_data *drv = priv; /* Disable the radio. */ (void) hostap_ioctl_prism2param(drv, PRISM2_PARAM_ADM_STATUS, 0); drv->hapd->driver = NULL; (void) hostapd_set_iface_flags(drv, 0); if (drv->sock >= 0) close(drv->sock); if (drv->ioctl_sock >= 0) close(drv->ioctl_sock); free(drv);}static const struct driver_ops devicescape_driver_ops = { .name = "devicescape", .init = i802_init, .deinit = i802_deinit, .wireless_event_init = i802_wireless_event_init, .wireless_event_deinit = i802_wireless_event_deinit, .set_ieee8021x = i802_set_ieee8021x, .set_privacy = i802_set_privacy, .set_encryption = i802_set_encryption, .get_seqnum = i802_get_seqnum, .flush = i802_flush, .set_generic_elem = i802_set_generic_elem, .read_sta_data = i802_read_sta_data, .send_eapol = i802_send_eapol, .sta_set_flags = i802_sta_set_flags, .sta_deauth = i802_sta_deauth, .sta_disassoc = i802_sta_disassoc, .sta_remove = i802_sta_remove, .set_ssid = i802_set_ssid, .send_mgmt_frame = i802_send_mgmt_frame, .set_assoc_ap = i802_set_assoc_ap, .sta_add = i802_sta_add, .get_inact_sec = i802_get_inact_sec, .sta_clear_stats = i802_sta_clear_stats, .set_freq = i802_set_freq, .set_rts = i802_set_rts, .get_rts = i802_get_rts, .set_frag = i802_set_frag, .get_frag = i802_get_frag, .set_retry = i802_set_retry, .get_retry = i802_get_retry, .set_rate_sets = i802_set_rate_sets, .set_channel_flag = i802_set_channel_flag, .set_regulatory_domain = i802_set_regulatory_domain, .set_beacon = i802_set_beacon, .set_beacon_int = i802_set_beacon_int, .set_dtim_period = i802_set_dtim_period, .set_broadcast_ssid = i802_set_broadcast_ssid, .set_cts_protect = i802_set_cts_protect, .set_key_tx_rx_threshold = i802_set_key_tx_rx_threshold, .set_preamble = i802_set_preamble, .set_short_slot_time = i802_set_short_slot_time, .set_tx_queue_params = i802_set_tx_queue_params, .get_hw_feature_data = i802_get_hw_feature_data, .set_sta_vlan = i802_set_sta_vlan,};void devicescape_driver_register(void){ driver_register(devicescape_driver_ops.name, &devicescape_driver_ops);}
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -