?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
hostapd: Update vendor branch to 0.6.10
[dragonfly.git] / contrib / hostapd / src / drivers / driver_ndis.c
bloba90e277ca04defd0e2a3c42bdd48011cb0a9caf9
1 /*
2 * WPA Supplicant - Windows/NDIS driver interface
3 * Copyright (c) 2004-2007, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 */
14
15 #ifdef __CYGWIN__
16 /* Avoid some header file conflicts by not including standard headers for
17 * cygwin builds when Packet32.h is included. */
18 #include "build_config.h"
19 int close(int fd);
20 #else /* __CYGWIN__ */
21 #include "includes.h"
22 #endif /* __CYGWIN__ */
23 #ifdef CONFIG_USE_NDISUIO
24 #include <winsock2.h>
25 #else /* CONFIG_USE_NDISUIO */
26 #include <Packet32.h>
27 #endif /* CONFIG_USE_NDISUIO */
28 #ifdef __MINGW32_VERSION
29 #include <ddk/ntddndis.h>
30 #else /* __MINGW32_VERSION */
31 #include <ntddndis.h>
32 #endif /* __MINGW32_VERSION */
33
34 #ifdef _WIN32_WCE
35 #include <winioctl.h>
36 #include <nuiouser.h>
37 #include <devload.h>
38 #endif /* _WIN32_WCE */
39
40 #include "common.h"
41 #include "driver.h"
42 #include "eloop.h"
43 #include "ieee802_11_defs.h"
44 #include "driver_ndis.h"
45
46 int wpa_driver_register_event_cb(struct wpa_driver_ndis_data *drv);
47 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
48 void wpa_driver_ndis_event_pipe_cb(void *eloop_data, void *user_data);
49 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
50
51 static void wpa_driver_ndis_deinit(void *priv);
52 static void wpa_driver_ndis_poll(void *drv);
53 static void wpa_driver_ndis_poll_timeout(void *eloop_ctx, void *timeout_ctx);
54 static int wpa_driver_ndis_adapter_init(struct wpa_driver_ndis_data *drv);
55 static int wpa_driver_ndis_adapter_open(struct wpa_driver_ndis_data *drv);
56 static void wpa_driver_ndis_adapter_close(struct wpa_driver_ndis_data *drv);
57
58
59 static const u8 pae_group_addr[ETH_ALEN] =
60 { 0x01, 0x80, 0xc2, 0x00, 0x00, 0x03 };
61
62
63 /* FIX: to be removed once this can be compiled with the complete NDIS
64 * header files */
65 #ifndef OID_802_11_BSSID
66 #define OID_802_11_BSSID 0x0d010101
67 #define OID_802_11_SSID 0x0d010102
68 #define OID_802_11_INFRASTRUCTURE_MODE 0x0d010108
69 #define OID_802_11_ADD_WEP 0x0D010113
70 #define OID_802_11_REMOVE_WEP 0x0D010114
71 #define OID_802_11_DISASSOCIATE 0x0D010115
72 #define OID_802_11_BSSID_LIST 0x0d010217
73 #define OID_802_11_AUTHENTICATION_MODE 0x0d010118
74 #define OID_802_11_PRIVACY_FILTER 0x0d010119
75 #define OID_802_11_BSSID_LIST_SCAN 0x0d01011A
76 #define OID_802_11_WEP_STATUS 0x0d01011B
77 #define OID_802_11_ENCRYPTION_STATUS OID_802_11_WEP_STATUS
78 #define OID_802_11_ADD_KEY 0x0d01011D
79 #define OID_802_11_REMOVE_KEY 0x0d01011E
80 #define OID_802_11_ASSOCIATION_INFORMATION 0x0d01011F
81 #define OID_802_11_TEST 0x0d010120
82 #define OID_802_11_CAPABILITY 0x0d010122
83 #define OID_802_11_PMKID 0x0d010123
84
85 #define NDIS_802_11_LENGTH_SSID 32
86 #define NDIS_802_11_LENGTH_RATES 8
87 #define NDIS_802_11_LENGTH_RATES_EX 16
88
89 typedef UCHAR NDIS_802_11_MAC_ADDRESS[6];
90
91 typedef struct NDIS_802_11_SSID {
92 ULONG SsidLength;
93 UCHAR Ssid[NDIS_802_11_LENGTH_SSID];
94 } NDIS_802_11_SSID;
95
96 typedef LONG NDIS_802_11_RSSI;
97
98 typedef enum NDIS_802_11_NETWORK_TYPE {
99 Ndis802_11FH,
100 Ndis802_11DS,
101 Ndis802_11OFDM5,
102 Ndis802_11OFDM24,
103 Ndis802_11NetworkTypeMax
104 } NDIS_802_11_NETWORK_TYPE;
105
106 typedef struct NDIS_802_11_CONFIGURATION_FH {
107 ULONG Length;
108 ULONG HopPattern;
109 ULONG HopSet;
110 ULONG DwellTime;
111 } NDIS_802_11_CONFIGURATION_FH;
112
113 typedef struct NDIS_802_11_CONFIGURATION {
114 ULONG Length;
115 ULONG BeaconPeriod;
116 ULONG ATIMWindow;
117 ULONG DSConfig;
118 NDIS_802_11_CONFIGURATION_FH FHConfig;
119 } NDIS_802_11_CONFIGURATION;
120
121 typedef enum NDIS_802_11_NETWORK_INFRASTRUCTURE {
122 Ndis802_11IBSS,
123 Ndis802_11Infrastructure,
124 Ndis802_11AutoUnknown,
125 Ndis802_11InfrastructureMax
126 } NDIS_802_11_NETWORK_INFRASTRUCTURE;
127
128 typedef enum NDIS_802_11_AUTHENTICATION_MODE {
129 Ndis802_11AuthModeOpen,
130 Ndis802_11AuthModeShared,
131 Ndis802_11AuthModeAutoSwitch,
132 Ndis802_11AuthModeWPA,
133 Ndis802_11AuthModeWPAPSK,
134 Ndis802_11AuthModeWPANone,
135 Ndis802_11AuthModeWPA2,
136 Ndis802_11AuthModeWPA2PSK,
137 Ndis802_11AuthModeMax
138 } NDIS_802_11_AUTHENTICATION_MODE;
139
140 typedef enum NDIS_802_11_WEP_STATUS {
141 Ndis802_11WEPEnabled,
142 Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
143 Ndis802_11WEPDisabled,
144 Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
145 Ndis802_11WEPKeyAbsent,
146 Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
147 Ndis802_11WEPNotSupported,
148 Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
149 Ndis802_11Encryption2Enabled,
150 Ndis802_11Encryption2KeyAbsent,
151 Ndis802_11Encryption3Enabled,
152 Ndis802_11Encryption3KeyAbsent
153 } NDIS_802_11_WEP_STATUS, NDIS_802_11_ENCRYPTION_STATUS;
154
155 typedef enum NDIS_802_11_PRIVACY_FILTER {
156 Ndis802_11PrivFilterAcceptAll,
157 Ndis802_11PrivFilter8021xWEP
158 } NDIS_802_11_PRIVACY_FILTER;
159
160 typedef UCHAR NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];
161 typedef UCHAR NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];
162
163 typedef struct NDIS_WLAN_BSSID_EX {
164 ULONG Length;
165 NDIS_802_11_MAC_ADDRESS MacAddress; /* BSSID */
166 UCHAR Reserved[2];
167 NDIS_802_11_SSID Ssid;
168 ULONG Privacy;
169 NDIS_802_11_RSSI Rssi;
170 NDIS_802_11_NETWORK_TYPE NetworkTypeInUse;
171 NDIS_802_11_CONFIGURATION Configuration;
172 NDIS_802_11_NETWORK_INFRASTRUCTURE InfrastructureMode;
173 NDIS_802_11_RATES_EX SupportedRates;
174 ULONG IELength;
175 UCHAR IEs[1];
176 } NDIS_WLAN_BSSID_EX;
177
178 typedef struct NDIS_802_11_BSSID_LIST_EX {
179 ULONG NumberOfItems;
180 NDIS_WLAN_BSSID_EX Bssid[1];
181 } NDIS_802_11_BSSID_LIST_EX;
182
183 typedef struct NDIS_802_11_FIXED_IEs {
184 UCHAR Timestamp[8];
185 USHORT BeaconInterval;
186 USHORT Capabilities;
187 } NDIS_802_11_FIXED_IEs;
188
189 typedef struct NDIS_802_11_WEP {
190 ULONG Length;
191 ULONG KeyIndex;
192 ULONG KeyLength;
193 UCHAR KeyMaterial[1];
194 } NDIS_802_11_WEP;
195
196 typedef ULONG NDIS_802_11_KEY_INDEX;
197 typedef ULONGLONG NDIS_802_11_KEY_RSC;
198
199 typedef struct NDIS_802_11_KEY {
200 ULONG Length;
201 ULONG KeyIndex;
202 ULONG KeyLength;
203 NDIS_802_11_MAC_ADDRESS BSSID;
204 NDIS_802_11_KEY_RSC KeyRSC;
205 UCHAR KeyMaterial[1];
206 } NDIS_802_11_KEY;
207
208 typedef struct NDIS_802_11_REMOVE_KEY {
209 ULONG Length;
210 ULONG KeyIndex;
211 NDIS_802_11_MAC_ADDRESS BSSID;
212 } NDIS_802_11_REMOVE_KEY;
213
214 typedef struct NDIS_802_11_AI_REQFI {
215 USHORT Capabilities;
216 USHORT ListenInterval;
217 NDIS_802_11_MAC_ADDRESS CurrentAPAddress;
218 } NDIS_802_11_AI_REQFI;
219
220 typedef struct NDIS_802_11_AI_RESFI {
221 USHORT Capabilities;
222 USHORT StatusCode;
223 USHORT AssociationId;
224 } NDIS_802_11_AI_RESFI;
225
226 typedef struct NDIS_802_11_ASSOCIATION_INFORMATION {
227 ULONG Length;
228 USHORT AvailableRequestFixedIEs;
229 NDIS_802_11_AI_REQFI RequestFixedIEs;
230 ULONG RequestIELength;
231 ULONG OffsetRequestIEs;
232 USHORT AvailableResponseFixedIEs;
233 NDIS_802_11_AI_RESFI ResponseFixedIEs;
234 ULONG ResponseIELength;
235 ULONG OffsetResponseIEs;
236 } NDIS_802_11_ASSOCIATION_INFORMATION;
237
238 typedef struct NDIS_802_11_AUTHENTICATION_ENCRYPTION {
239 NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
240 NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
241 } NDIS_802_11_AUTHENTICATION_ENCRYPTION;
242
243 typedef struct NDIS_802_11_CAPABILITY {
244 ULONG Length;
245 ULONG Version;
246 ULONG NoOfPMKIDs;
247 ULONG NoOfAuthEncryptPairsSupported;
248 NDIS_802_11_AUTHENTICATION_ENCRYPTION
249 AuthenticationEncryptionSupported[1];
250 } NDIS_802_11_CAPABILITY;
251
252 typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
253
254 typedef struct BSSID_INFO {
255 NDIS_802_11_MAC_ADDRESS BSSID;
256 NDIS_802_11_PMKID_VALUE PMKID;
257 } BSSID_INFO;
258
259 typedef struct NDIS_802_11_PMKID {
260 ULONG Length;
261 ULONG BSSIDInfoCount;
262 BSSID_INFO BSSIDInfo[1];
263 } NDIS_802_11_PMKID;
264
265 typedef enum NDIS_802_11_STATUS_TYPE {
266 Ndis802_11StatusType_Authentication,
267 Ndis802_11StatusType_PMKID_CandidateList = 2,
268 Ndis802_11StatusTypeMax
269 } NDIS_802_11_STATUS_TYPE;
270
271 typedef struct NDIS_802_11_STATUS_INDICATION {
272 NDIS_802_11_STATUS_TYPE StatusType;
273 } NDIS_802_11_STATUS_INDICATION;
274
275 typedef struct PMKID_CANDIDATE {
276 NDIS_802_11_MAC_ADDRESS BSSID;
277 ULONG Flags;
278 } PMKID_CANDIDATE;
279
280 #define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
281
282 typedef struct NDIS_802_11_PMKID_CANDIDATE_LIST {
283 ULONG Version;
284 ULONG NumCandidates;
285 PMKID_CANDIDATE CandidateList[1];
286 } NDIS_802_11_PMKID_CANDIDATE_LIST;
287
288 typedef struct NDIS_802_11_AUTHENTICATION_REQUEST {
289 ULONG Length;
290 NDIS_802_11_MAC_ADDRESS Bssid;
291 ULONG Flags;
292 } NDIS_802_11_AUTHENTICATION_REQUEST;
293
294 #define NDIS_802_11_AUTH_REQUEST_REAUTH 0x01
295 #define NDIS_802_11_AUTH_REQUEST_KEYUPDATE 0x02
296 #define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR 0x06
297 #define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR 0x0E
298
299 #endif /* OID_802_11_BSSID */
300
301
302 #ifndef OID_802_11_PMKID
303 /* Platform SDK for XP did not include WPA2, so add needed definitions */
304
305 #define OID_802_11_CAPABILITY 0x0d010122
306 #define OID_802_11_PMKID 0x0d010123
307
308 #define Ndis802_11AuthModeWPA2 6
309 #define Ndis802_11AuthModeWPA2PSK 7
310
311 #define Ndis802_11StatusType_PMKID_CandidateList 2
312
313 typedef struct NDIS_802_11_AUTHENTICATION_ENCRYPTION {
314 NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
315 NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
316 } NDIS_802_11_AUTHENTICATION_ENCRYPTION;
317
318 typedef struct NDIS_802_11_CAPABILITY {
319 ULONG Length;
320 ULONG Version;
321 ULONG NoOfPMKIDs;
322 ULONG NoOfAuthEncryptPairsSupported;
323 NDIS_802_11_AUTHENTICATION_ENCRYPTION
324 AuthenticationEncryptionSupported[1];
325 } NDIS_802_11_CAPABILITY;
326
327 typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
328
329 typedef struct BSSID_INFO {
330 NDIS_802_11_MAC_ADDRESS BSSID;
331 NDIS_802_11_PMKID_VALUE PMKID;
332 } BSSID_INFO;
333
334 typedef struct NDIS_802_11_PMKID {
335 ULONG Length;
336 ULONG BSSIDInfoCount;
337 BSSID_INFO BSSIDInfo[1];
338 } NDIS_802_11_PMKID;
339
340 typedef struct PMKID_CANDIDATE {
341 NDIS_802_11_MAC_ADDRESS BSSID;
342 ULONG Flags;
343 } PMKID_CANDIDATE;
344
345 #define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
346
347 typedef struct NDIS_802_11_PMKID_CANDIDATE_LIST {
348 ULONG Version;
349 ULONG NumCandidates;
350 PMKID_CANDIDATE CandidateList[1];
351 } NDIS_802_11_PMKID_CANDIDATE_LIST;
352
353 #endif /* OID_802_11_CAPABILITY */
354
355
356 #ifdef CONFIG_USE_NDISUIO
357 #ifndef _WIN32_WCE
358 #ifdef __MINGW32_VERSION
359 typedef ULONG NDIS_OID;
360 #endif /* __MINGW32_VERSION */
361 /* from nuiouser.h */
362 #define FSCTL_NDISUIO_BASE FILE_DEVICE_NETWORK
363
364 #define _NDISUIO_CTL_CODE(_Function, _Method, _Access) \
365 CTL_CODE(FSCTL_NDISUIO_BASE, _Function, _Method, _Access)
366
367 #define IOCTL_NDISUIO_OPEN_DEVICE \
368 _NDISUIO_CTL_CODE(0x200, METHOD_BUFFERED, \
369 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
370
371 #define IOCTL_NDISUIO_QUERY_OID_VALUE \
372 _NDISUIO_CTL_CODE(0x201, METHOD_BUFFERED, \
373 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
374
375 #define IOCTL_NDISUIO_SET_OID_VALUE \
376 _NDISUIO_CTL_CODE(0x205, METHOD_BUFFERED, \
377 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
378
379 #define IOCTL_NDISUIO_SET_ETHER_TYPE \
380 _NDISUIO_CTL_CODE(0x202, METHOD_BUFFERED, \
381 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
382
383 #define IOCTL_NDISUIO_QUERY_BINDING \
384 _NDISUIO_CTL_CODE(0x203, METHOD_BUFFERED, \
385 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
386
387 #define IOCTL_NDISUIO_BIND_WAIT \
388 _NDISUIO_CTL_CODE(0x204, METHOD_BUFFERED, \
389 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
390
391 typedef struct _NDISUIO_QUERY_OID
392 {
393 NDIS_OID Oid;
394 UCHAR Data[sizeof(ULONG)];
395 } NDISUIO_QUERY_OID, *PNDISUIO_QUERY_OID;
396
397 typedef struct _NDISUIO_SET_OID
398 {
399 NDIS_OID Oid;
400 UCHAR Data[sizeof(ULONG)];
401 } NDISUIO_SET_OID, *PNDISUIO_SET_OID;
402
403 typedef struct _NDISUIO_QUERY_BINDING
404 {
405 ULONG BindingIndex;
406 ULONG DeviceNameOffset;
407 ULONG DeviceNameLength;
408 ULONG DeviceDescrOffset;
409 ULONG DeviceDescrLength;
410 } NDISUIO_QUERY_BINDING, *PNDISUIO_QUERY_BINDING;
411 #endif /* _WIN32_WCE */
412 #endif /* CONFIG_USE_NDISUIO */
413
414
415 static int ndis_get_oid(struct wpa_driver_ndis_data *drv, unsigned int oid,
416 char *data, size_t len)
417 {
418 #ifdef CONFIG_USE_NDISUIO
419 NDISUIO_QUERY_OID *o;
420 size_t buflen = sizeof(*o) + len;
421 DWORD written;
422 int ret;
423 size_t hdrlen;
424
425 o = os_zalloc(buflen);
426 if (o == NULL)
427 return -1;
428 o->Oid = oid;
429 #ifdef _WIN32_WCE
430 o->ptcDeviceName = drv->adapter_name;
431 #endif /* _WIN32_WCE */
432 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_QUERY_OID_VALUE,
433 o, sizeof(NDISUIO_QUERY_OID), o, buflen, &written,
434 NULL)) {
435 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDISUIO_QUERY_OID_VALUE "
436 "failed (oid=%08x): %d", oid, (int) GetLastError());
437 os_free(o);
438 return -1;
439 }
440 hdrlen = sizeof(NDISUIO_QUERY_OID) - sizeof(o->Data);
441 if (written < hdrlen) {
442 wpa_printf(MSG_DEBUG, "NDIS: query oid=%08x written (%d); "
443 "too short", oid, (unsigned int) written);
444 os_free(o);
445 return -1;
446 }
447 written -= hdrlen;
448 if (written > len) {
449 wpa_printf(MSG_DEBUG, "NDIS: query oid=%08x written (%d) > "
450 "len (%d)",oid, (unsigned int) written, len);
451 os_free(o);
452 return -1;
453 }
454 os_memcpy(data, o->Data, written);
455 ret = written;
456 os_free(o);
457 return ret;
458 #else /* CONFIG_USE_NDISUIO */
459 char *buf;
460 PACKET_OID_DATA *o;
461 int ret;
462
463 buf = os_zalloc(sizeof(*o) + len);
464 if (buf == NULL)
465 return -1;
466 o = (PACKET_OID_DATA *) buf;
467 o->Oid = oid;
468 o->Length = len;
469
470 if (!PacketRequest(drv->adapter, FALSE, o)) {
471 wpa_printf(MSG_DEBUG, "%s: oid=0x%x len (%d) failed",
472 __func__, oid, len);
473 os_free(buf);
474 return -1;
475 }
476 if (o->Length > len) {
477 wpa_printf(MSG_DEBUG, "%s: oid=0x%x Length (%d) > len (%d)",
478 __func__, oid, (unsigned int) o->Length, len);
479 os_free(buf);
480 return -1;
481 }
482 os_memcpy(data, o->Data, o->Length);
483 ret = o->Length;
484 os_free(buf);
485 return ret;
486 #endif /* CONFIG_USE_NDISUIO */
487 }
488
489
490 static int ndis_set_oid(struct wpa_driver_ndis_data *drv, unsigned int oid,
491 const char *data, size_t len)
492 {
493 #ifdef CONFIG_USE_NDISUIO
494 NDISUIO_SET_OID *o;
495 size_t buflen, reallen;
496 DWORD written;
497 char txt[50];
498
499 os_snprintf(txt, sizeof(txt), "NDIS: Set OID %08x", oid);
500 wpa_hexdump_key(MSG_MSGDUMP, txt, (const u8 *) data, len);
501
502 buflen = sizeof(*o) + len;
503 reallen = buflen - sizeof(o->Data);
504 o = os_zalloc(buflen);
505 if (o == NULL)
506 return -1;
507 o->Oid = oid;
508 #ifdef _WIN32_WCE
509 o->ptcDeviceName = drv->adapter_name;
510 #endif /* _WIN32_WCE */
511 if (data)
512 os_memcpy(o->Data, data, len);
513 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_SET_OID_VALUE,
514 o, reallen, NULL, 0, &written, NULL)) {
515 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDISUIO_SET_OID_VALUE "
516 "(oid=%08x) failed: %d", oid, (int) GetLastError());
517 os_free(o);
518 return -1;
519 }
520 os_free(o);
521 return 0;
522 #else /* CONFIG_USE_NDISUIO */
523 char *buf;
524 PACKET_OID_DATA *o;
525 char txt[50];
526
527 os_snprintf(txt, sizeof(txt), "NDIS: Set OID %08x", oid);
528 wpa_hexdump_key(MSG_MSGDUMP, txt, (const u8 *) data, len);
529
530 buf = os_zalloc(sizeof(*o) + len);
531 if (buf == NULL)
532 return -1;
533 o = (PACKET_OID_DATA *) buf;
534 o->Oid = oid;
535 o->Length = len;
536 if (data)
537 os_memcpy(o->Data, data, len);
538
539 if (!PacketRequest(drv->adapter, TRUE, o)) {
540 wpa_printf(MSG_DEBUG, "%s: oid=0x%x len (%d) failed",
541 __func__, oid, len);
542 os_free(buf);
543 return -1;
544 }
545 os_free(buf);
546 return 0;
547 #endif /* CONFIG_USE_NDISUIO */
548 }
549
550
551 static int ndis_set_auth_mode(struct wpa_driver_ndis_data *drv, int mode)
552 {
553 u32 auth_mode = mode;
554 if (ndis_set_oid(drv, OID_802_11_AUTHENTICATION_MODE,
555 (char *) &auth_mode, sizeof(auth_mode)) < 0) {
556 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
557 "OID_802_11_AUTHENTICATION_MODE (%d)",
558 (int) auth_mode);
559 return -1;
560 }
561 return 0;
562 }
563
564
565 static int ndis_get_auth_mode(struct wpa_driver_ndis_data *drv)
566 {
567 u32 auth_mode;
568 int res;
569 res = ndis_get_oid(drv, OID_802_11_AUTHENTICATION_MODE,
570 (char *) &auth_mode, sizeof(auth_mode));
571 if (res != sizeof(auth_mode)) {
572 wpa_printf(MSG_DEBUG, "NDIS: Failed to get "
573 "OID_802_11_AUTHENTICATION_MODE");
574 return -1;
575 }
576 return auth_mode;
577 }
578
579
580 static int ndis_set_encr_status(struct wpa_driver_ndis_data *drv, int encr)
581 {
582 u32 encr_status = encr;
583 if (ndis_set_oid(drv, OID_802_11_ENCRYPTION_STATUS,
584 (char *) &encr_status, sizeof(encr_status)) < 0) {
585 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
586 "OID_802_11_ENCRYPTION_STATUS (%d)", encr);
587 return -1;
588 }
589 return 0;
590 }
591
592
593 static int ndis_get_encr_status(struct wpa_driver_ndis_data *drv)
594 {
595 u32 encr;
596 int res;
597 res = ndis_get_oid(drv, OID_802_11_ENCRYPTION_STATUS,
598 (char *) &encr, sizeof(encr));
599 if (res != sizeof(encr)) {
600 wpa_printf(MSG_DEBUG, "NDIS: Failed to get "
601 "OID_802_11_ENCRYPTION_STATUS");
602 return -1;
603 }
604 return encr;
605 }
606
607
608 static int wpa_driver_ndis_get_bssid(void *priv, u8 *bssid)
609 {
610 struct wpa_driver_ndis_data *drv = priv;
611
612 if (drv->wired) {
613 /*
614 * Report PAE group address as the "BSSID" for wired
615 * connection.
616 */
617 os_memcpy(bssid, pae_group_addr, ETH_ALEN);
618 return 0;
619 }
620
621 return ndis_get_oid(drv, OID_802_11_BSSID, (char *) bssid, ETH_ALEN) <
622 0 ? -1 : 0;
623 }
624
625
626 static int wpa_driver_ndis_get_ssid(void *priv, u8 *ssid)
627 {
628 struct wpa_driver_ndis_data *drv = priv;
629 NDIS_802_11_SSID buf;
630 int res;
631
632 res = ndis_get_oid(drv, OID_802_11_SSID, (char *) &buf, sizeof(buf));
633 if (res < 4) {
634 wpa_printf(MSG_DEBUG, "NDIS: Failed to get SSID");
635 if (drv->wired) {
636 wpa_printf(MSG_DEBUG, "NDIS: Allow get_ssid failure "
637 "with a wired interface");
638 return 0;
639 }
640 return -1;
641 }
642 os_memcpy(ssid, buf.Ssid, buf.SsidLength);
643 return buf.SsidLength;
644 }
645
646
647 static int wpa_driver_ndis_set_ssid(struct wpa_driver_ndis_data *drv,
648 const u8 *ssid, size_t ssid_len)
649 {
650 NDIS_802_11_SSID buf;
651
652 os_memset(&buf, 0, sizeof(buf));
653 buf.SsidLength = ssid_len;
654 os_memcpy(buf.Ssid, ssid, ssid_len);
655 /*
656 * Make sure radio is marked enabled here so that scan request will not
657 * force SSID to be changed to a random one in order to enable radio at
658 * that point.
659 */
660 drv->radio_enabled = 1;
661 return ndis_set_oid(drv, OID_802_11_SSID, (char *) &buf, sizeof(buf));
662 }
663
664
665 /* Disconnect using OID_802_11_DISASSOCIATE. This will also turn the radio off.
666 */
667 static int wpa_driver_ndis_radio_off(struct wpa_driver_ndis_data *drv)
668 {
669 drv->radio_enabled = 0;
670 return ndis_set_oid(drv, OID_802_11_DISASSOCIATE, " ", 4);
671 }
672
673
674 /* Disconnect by setting SSID to random (i.e., likely not used). */
675 static int wpa_driver_ndis_disconnect(struct wpa_driver_ndis_data *drv)
676 {
677 char ssid[32];
678 int i;
679 for (i = 0; i < 32; i++)
680 ssid[i] = rand() & 0xff;
681 return wpa_driver_ndis_set_ssid(drv, (u8 *) ssid, 32);
682 }
683
684
685 static int wpa_driver_ndis_deauthenticate(void *priv, const u8 *addr,
686 int reason_code)
687 {
688 struct wpa_driver_ndis_data *drv = priv;
689 return wpa_driver_ndis_disconnect(drv);
690 }
691
692
693 static int wpa_driver_ndis_disassociate(void *priv, const u8 *addr,
694 int reason_code)
695 {
696 struct wpa_driver_ndis_data *drv = priv;
697 return wpa_driver_ndis_disconnect(drv);
698 }
699
700
701 static int wpa_driver_ndis_set_wpa(void *priv, int enabled)
702 {
703 wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
704 return 0;
705 }
706
707
708 static void wpa_driver_ndis_scan_timeout(void *eloop_ctx, void *timeout_ctx)
709 {
710 wpa_printf(MSG_DEBUG, "Scan timeout - try to get results");
711 wpa_supplicant_event(timeout_ctx, EVENT_SCAN_RESULTS, NULL);
712 }
713
714
715 static int wpa_driver_ndis_scan(void *priv, const u8 *ssid, size_t ssid_len)
716 {
717 struct wpa_driver_ndis_data *drv = priv;
718 int res;
719
720 if (!drv->radio_enabled) {
721 wpa_printf(MSG_DEBUG, "NDIS: turning radio on before the first"
722 " scan");
723 if (wpa_driver_ndis_disconnect(drv) < 0) {
724 wpa_printf(MSG_DEBUG, "NDIS: failed to enable radio");
725 }
726 drv->radio_enabled = 1;
727 }
728
729 res = ndis_set_oid(drv, OID_802_11_BSSID_LIST_SCAN, " ", 4);
730 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
731 eloop_register_timeout(7, 0, wpa_driver_ndis_scan_timeout, drv,
732 drv->ctx);
733 return res;
734 }
735
736
737 static struct wpa_scan_res * wpa_driver_ndis_add_scan_ssid(
738 struct wpa_scan_res *r, NDIS_802_11_SSID *ssid)
739 {
740 struct wpa_scan_res *nr;
741 u8 *pos;
742
743 if (wpa_scan_get_ie(r, WLAN_EID_SSID))
744 return r; /* SSID IE already present */
745
746 if (ssid->SsidLength == 0 || ssid->SsidLength > 32)
747 return r; /* No valid SSID inside scan data */
748
749 nr = os_realloc(r, sizeof(*r) + r->ie_len + 2 + ssid->SsidLength);
750 if (nr == NULL)
751 return r;
752
753 pos = ((u8 *) (nr + 1)) + nr->ie_len;
754 *pos++ = WLAN_EID_SSID;
755 *pos++ = ssid->SsidLength;
756 os_memcpy(pos, ssid->Ssid, ssid->SsidLength);
757 nr->ie_len += 2 + ssid->SsidLength;
758
759 return nr;
760 }
761
762
763 static struct wpa_scan_results * wpa_driver_ndis_get_scan_results(void *priv)
764 {
765 struct wpa_driver_ndis_data *drv = priv;
766 NDIS_802_11_BSSID_LIST_EX *b;
767 size_t blen, count, i;
768 int len;
769 char *pos;
770 struct wpa_scan_results *results;
771 struct wpa_scan_res *r;
772
773 blen = 65535;
774 b = os_zalloc(blen);
775 if (b == NULL)
776 return NULL;
777 len = ndis_get_oid(drv, OID_802_11_BSSID_LIST, (char *) b, blen);
778 if (len < 0) {
779 wpa_printf(MSG_DEBUG, "NDIS: failed to get scan results");
780 os_free(b);
781 return NULL;
782 }
783 count = b->NumberOfItems;
784
785 results = os_zalloc(sizeof(*results));
786 if (results == NULL) {
787 os_free(b);
788 return NULL;
789 }
790 results->res = os_zalloc(count * sizeof(struct wpa_scan_res *));
791 if (results->res == NULL) {
792 os_free(results);
793 os_free(b);
794 return NULL;
795 }
796
797 pos = (char *) &b->Bssid[0];
798 for (i = 0; i < count; i++) {
799 NDIS_WLAN_BSSID_EX *bss = (NDIS_WLAN_BSSID_EX *) pos;
800 NDIS_802_11_FIXED_IEs *fixed;
801
802 if (bss->IELength < sizeof(NDIS_802_11_FIXED_IEs)) {
803 wpa_printf(MSG_DEBUG, "NDIS: too small IELength=%d",
804 (int) bss->IELength);
805 break;
806 }
807 if (((char *) bss->IEs) + bss->IELength > (char *) b + blen) {
808 /*
809 * Some NDIS drivers have been reported to include an
810 * entry with an invalid IELength in scan results and
811 * this has crashed wpa_supplicant, so validate the
812 * returned value before using it.
813 */
814 wpa_printf(MSG_DEBUG, "NDIS: skipped invalid scan "
815 "result IE (BSSID=" MACSTR ") IELength=%d",
816 MAC2STR(bss->MacAddress),
817 (int) bss->IELength);
818 break;
819 }
820
821 r = os_zalloc(sizeof(*r) + bss->IELength -
822 sizeof(NDIS_802_11_FIXED_IEs));
823 if (r == NULL)
824 break;
825
826 os_memcpy(r->bssid, bss->MacAddress, ETH_ALEN);
827 r->level = (int) bss->Rssi;
828 r->freq = bss->Configuration.DSConfig / 1000;
829 fixed = (NDIS_802_11_FIXED_IEs *) bss->IEs;
830 r->beacon_int = WPA_GET_LE16((u8 *) &fixed->BeaconInterval);
831 r->caps = WPA_GET_LE16((u8 *) &fixed->Capabilities);
832 r->tsf = WPA_GET_LE64(fixed->Timestamp);
833 os_memcpy(r + 1, bss->IEs + sizeof(NDIS_802_11_FIXED_IEs),
834 bss->IELength - sizeof(NDIS_802_11_FIXED_IEs));
835 r->ie_len = bss->IELength - sizeof(NDIS_802_11_FIXED_IEs);
836 r = wpa_driver_ndis_add_scan_ssid(r, &bss->Ssid);
837
838 results->res[results->num++] = r;
839
840 pos += bss->Length;
841 if (pos > (char *) b + blen)
842 break;
843 }
844
845 os_free(b);
846
847 return results;
848 }
849
850
851 static int wpa_driver_ndis_remove_key(struct wpa_driver_ndis_data *drv,
852 int key_idx, const u8 *addr,
853 const u8 *bssid, int pairwise)
854 {
855 NDIS_802_11_REMOVE_KEY rkey;
856 NDIS_802_11_KEY_INDEX index;
857 int res, res2;
858
859 os_memset(&rkey, 0, sizeof(rkey));
860
861 rkey.Length = sizeof(rkey);
862 rkey.KeyIndex = key_idx;
863 if (pairwise)
864 rkey.KeyIndex |= 1 << 30;
865 os_memcpy(rkey.BSSID, bssid, ETH_ALEN);
866
867 res = ndis_set_oid(drv, OID_802_11_REMOVE_KEY, (char *) &rkey,
868 sizeof(rkey));
869 if (!pairwise) {
870 index = key_idx;
871 res2 = ndis_set_oid(drv, OID_802_11_REMOVE_WEP,
872 (char *) &index, sizeof(index));
873 } else
874 res2 = 0;
875
876 if (res < 0 && res2 < 0)
877 return -1;
878 return 0;
879 }
880
881
882 static int wpa_driver_ndis_add_wep(struct wpa_driver_ndis_data *drv,
883 int pairwise, int key_idx, int set_tx,
884 const u8 *key, size_t key_len)
885 {
886 NDIS_802_11_WEP *wep;
887 size_t len;
888 int res;
889
890 len = 12 + key_len;
891 wep = os_zalloc(len);
892 if (wep == NULL)
893 return -1;
894 wep->Length = len;
895 wep->KeyIndex = key_idx;
896 if (set_tx)
897 wep->KeyIndex |= 1 << 31;
898 #if 0 /* Setting bit30 does not seem to work with some NDIS drivers */
899 if (pairwise)
900 wep->KeyIndex |= 1 << 30;
901 #endif
902 wep->KeyLength = key_len;
903 os_memcpy(wep->KeyMaterial, key, key_len);
904
905 wpa_hexdump_key(MSG_MSGDUMP, "NDIS: OID_802_11_ADD_WEP",
906 (u8 *) wep, len);
907 res = ndis_set_oid(drv, OID_802_11_ADD_WEP, (char *) wep, len);
908
909 os_free(wep);
910
911 return res;
912 }
913
914
915 static int wpa_driver_ndis_set_key(void *priv, wpa_alg alg, const u8 *addr,
916 int key_idx, int set_tx,
917 const u8 *seq, size_t seq_len,
918 const u8 *key, size_t key_len)
919 {
920 struct wpa_driver_ndis_data *drv = priv;
921 size_t len, i;
922 NDIS_802_11_KEY *nkey;
923 int res, pairwise;
924 u8 bssid[ETH_ALEN];
925
926 if (addr == NULL || os_memcmp(addr, "\xff\xff\xff\xff\xff\xff",
927 ETH_ALEN) == 0) {
928 /* Group Key */
929 pairwise = 0;
930 if (wpa_driver_ndis_get_bssid(drv, bssid) < 0)
931 os_memset(bssid, 0xff, ETH_ALEN);
932 } else {
933 /* Pairwise Key */
934 pairwise = 1;
935 os_memcpy(bssid, addr, ETH_ALEN);
936 }
937
938 if (alg == WPA_ALG_NONE || key_len == 0) {
939 return wpa_driver_ndis_remove_key(drv, key_idx, addr, bssid,
940 pairwise);
941 }
942
943 if (alg == WPA_ALG_WEP) {
944 return wpa_driver_ndis_add_wep(drv, pairwise, key_idx, set_tx,
945 key, key_len);
946 }
947
948 len = 12 + 6 + 6 + 8 + key_len;
949
950 nkey = os_zalloc(len);
951 if (nkey == NULL)
952 return -1;
953
954 nkey->Length = len;
955 nkey->KeyIndex = key_idx;
956 if (set_tx)
957 nkey->KeyIndex |= 1 << 31;
958 if (pairwise)
959 nkey->KeyIndex |= 1 << 30;
960 if (seq && seq_len)
961 nkey->KeyIndex |= 1 << 29;
962 nkey->KeyLength = key_len;
963 os_memcpy(nkey->BSSID, bssid, ETH_ALEN);
964 if (seq && seq_len) {
965 for (i = 0; i < seq_len; i++)
966 nkey->KeyRSC |= (ULONGLONG) seq[i] << (i * 8);
967 }
968 if (alg == WPA_ALG_TKIP && key_len == 32) {
969 os_memcpy(nkey->KeyMaterial, key, 16);
970 os_memcpy(nkey->KeyMaterial + 16, key + 24, 8);
971 os_memcpy(nkey->KeyMaterial + 24, key + 16, 8);
972 } else {
973 os_memcpy(nkey->KeyMaterial, key, key_len);
974 }
975
976 wpa_hexdump_key(MSG_MSGDUMP, "NDIS: OID_802_11_ADD_KEY",
977 (u8 *) nkey, len);
978 res = ndis_set_oid(drv, OID_802_11_ADD_KEY, (char *) nkey, len);
979 os_free(nkey);
980
981 return res;
982 }
983
984
985 static int
986 wpa_driver_ndis_associate(void *priv,
987 struct wpa_driver_associate_params *params)
988 {
989 struct wpa_driver_ndis_data *drv = priv;
990 u32 auth_mode, encr, priv_mode, mode;
991
992 drv->mode = params->mode;
993
994 /* Note: Setting OID_802_11_INFRASTRUCTURE_MODE clears current keys,
995 * so static WEP keys needs to be set again after this. */
996 if (params->mode == IEEE80211_MODE_IBSS) {
997 mode = Ndis802_11IBSS;
998 /* Need to make sure that BSSID polling is enabled for
999 * IBSS mode. */
1000 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
1001 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout,
1002 drv, NULL);
1003 } else
1004 mode = Ndis802_11Infrastructure;
1005 if (ndis_set_oid(drv, OID_802_11_INFRASTRUCTURE_MODE,
1006 (char *) &mode, sizeof(mode)) < 0) {
1007 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
1008 "OID_802_11_INFRASTRUCTURE_MODE (%d)",
1009 (int) mode);
1010 /* Try to continue anyway */
1011 }
1012
1013 if (params->key_mgmt_suite == KEY_MGMT_NONE ||
1014 params->key_mgmt_suite == KEY_MGMT_802_1X_NO_WPA) {
1015 /* Re-set WEP keys if static WEP configuration is used. */
1016 u8 bcast[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
1017 int i;
1018 for (i = 0; i < 4; i++) {
1019 if (!params->wep_key[i])
1020 continue;
1021 wpa_printf(MSG_DEBUG, "NDIS: Re-setting static WEP "
1022 "key %d", i);
1023 wpa_driver_ndis_set_key(drv, WPA_ALG_WEP, bcast, i,
1024 i == params->wep_tx_keyidx,
1025 NULL, 0, params->wep_key[i],
1026 params->wep_key_len[i]);
1027 }
1028 }
1029
1030 if (params->wpa_ie == NULL || params->wpa_ie_len == 0) {
1031 if (params->auth_alg & AUTH_ALG_SHARED_KEY) {
1032 if (params->auth_alg & AUTH_ALG_OPEN_SYSTEM)
1033 auth_mode = Ndis802_11AuthModeAutoSwitch;
1034 else
1035 auth_mode = Ndis802_11AuthModeShared;
1036 } else
1037 auth_mode = Ndis802_11AuthModeOpen;
1038 priv_mode = Ndis802_11PrivFilterAcceptAll;
1039 } else if (params->wpa_ie[0] == WLAN_EID_RSN) {
1040 priv_mode = Ndis802_11PrivFilter8021xWEP;
1041 if (params->key_mgmt_suite == KEY_MGMT_PSK)
1042 auth_mode = Ndis802_11AuthModeWPA2PSK;
1043 else
1044 auth_mode = Ndis802_11AuthModeWPA2;
1045 #ifdef CONFIG_WPS
1046 } else if (params->key_mgmt_suite == KEY_MGMT_WPS) {
1047 auth_mode = Ndis802_11AuthModeOpen;
1048 priv_mode = Ndis802_11PrivFilterAcceptAll;
1049 #endif /* CONFIG_WPS */
1050 } else {
1051 priv_mode = Ndis802_11PrivFilter8021xWEP;
1052 if (params->key_mgmt_suite == KEY_MGMT_WPA_NONE)
1053 auth_mode = Ndis802_11AuthModeWPANone;
1054 else if (params->key_mgmt_suite == KEY_MGMT_PSK)
1055 auth_mode = Ndis802_11AuthModeWPAPSK;
1056 else
1057 auth_mode = Ndis802_11AuthModeWPA;
1058 }
1059
1060 switch (params->pairwise_suite) {
1061 case CIPHER_CCMP:
1062 encr = Ndis802_11Encryption3Enabled;
1063 break;
1064 case CIPHER_TKIP:
1065 encr = Ndis802_11Encryption2Enabled;
1066 break;
1067 case CIPHER_WEP40:
1068 case CIPHER_WEP104:
1069 encr = Ndis802_11Encryption1Enabled;
1070 break;
1071 case CIPHER_NONE:
1072 if (params->group_suite == CIPHER_CCMP)
1073 encr = Ndis802_11Encryption3Enabled;
1074 else if (params->group_suite == CIPHER_TKIP)
1075 encr = Ndis802_11Encryption2Enabled;
1076 else
1077 encr = Ndis802_11EncryptionDisabled;
1078 break;
1079 default:
1080 encr = Ndis802_11EncryptionDisabled;
1081 };
1082
1083 if (ndis_set_oid(drv, OID_802_11_PRIVACY_FILTER,
1084 (char *) &priv_mode, sizeof(priv_mode)) < 0) {
1085 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
1086 "OID_802_11_PRIVACY_FILTER (%d)",
1087 (int) priv_mode);
1088 /* Try to continue anyway */
1089 }
1090
1091 ndis_set_auth_mode(drv, auth_mode);
1092 ndis_set_encr_status(drv, encr);
1093
1094 if (params->bssid) {
1095 ndis_set_oid(drv, OID_802_11_BSSID, (char *) params->bssid,
1096 ETH_ALEN);
1097 drv->oid_bssid_set = 1;
1098 } else if (drv->oid_bssid_set) {
1099 ndis_set_oid(drv, OID_802_11_BSSID, "\xff\xff\xff\xff\xff\xff",
1100 ETH_ALEN);
1101 drv->oid_bssid_set = 0;
1102 }
1103
1104 return wpa_driver_ndis_set_ssid(drv, params->ssid, params->ssid_len);
1105 }
1106
1107
1108 static int wpa_driver_ndis_set_pmkid(struct wpa_driver_ndis_data *drv)
1109 {
1110 int len, count, i, ret;
1111 struct ndis_pmkid_entry *entry;
1112 NDIS_802_11_PMKID *p;
1113
1114 count = 0;
1115 entry = drv->pmkid;
1116 while (entry) {
1117 count++;
1118 if (count >= drv->no_of_pmkid)
1119 break;
1120 entry = entry->next;
1121 }
1122 len = 8 + count * sizeof(BSSID_INFO);
1123 p = os_zalloc(len);
1124 if (p == NULL)
1125 return -1;
1126
1127 p->Length = len;
1128 p->BSSIDInfoCount = count;
1129 entry = drv->pmkid;
1130 for (i = 0; i < count; i++) {
1131 os_memcpy(&p->BSSIDInfo[i].BSSID, entry->bssid, ETH_ALEN);
1132 os_memcpy(&p->BSSIDInfo[i].PMKID, entry->pmkid, 16);
1133 entry = entry->next;
1134 }
1135 wpa_hexdump(MSG_MSGDUMP, "NDIS: OID_802_11_PMKID", (u8 *) p, len);
1136 ret = ndis_set_oid(drv, OID_802_11_PMKID, (char *) p, len);
1137 os_free(p);
1138 return ret;
1139 }
1140
1141
1142 static int wpa_driver_ndis_add_pmkid(void *priv, const u8 *bssid,
1143 const u8 *pmkid)
1144 {
1145 struct wpa_driver_ndis_data *drv = priv;
1146 struct ndis_pmkid_entry *entry, *prev;
1147
1148 if (drv->no_of_pmkid == 0)
1149 return 0;
1150
1151 prev = NULL;
1152 entry = drv->pmkid;
1153 while (entry) {
1154 if (os_memcmp(entry->bssid, bssid, ETH_ALEN) == 0)
1155 break;
1156 prev = entry;
1157 entry = entry->next;
1158 }
1159
1160 if (entry) {
1161 /* Replace existing entry for this BSSID and move it into the
1162 * beginning of the list. */
1163 os_memcpy(entry->pmkid, pmkid, 16);
1164 if (prev) {
1165 prev->next = entry->next;
1166 entry->next = drv->pmkid;
1167 drv->pmkid = entry;
1168 }
1169 } else {
1170 entry = os_malloc(sizeof(*entry));
1171 if (entry) {
1172 os_memcpy(entry->bssid, bssid, ETH_ALEN);
1173 os_memcpy(entry->pmkid, pmkid, 16);
1174 entry->next = drv->pmkid;
1175 drv->pmkid = entry;
1176 }
1177 }
1178
1179 return wpa_driver_ndis_set_pmkid(drv);
1180 }
1181
1182
1183 static int wpa_driver_ndis_remove_pmkid(void *priv, const u8 *bssid,
1184 const u8 *pmkid)
1185 {
1186 struct wpa_driver_ndis_data *drv = priv;
1187 struct ndis_pmkid_entry *entry, *prev;
1188
1189 if (drv->no_of_pmkid == 0)
1190 return 0;
1191
1192 entry = drv->pmkid;
1193 prev = NULL;
1194 while (entry) {
1195 if (os_memcmp(entry->bssid, bssid, ETH_ALEN) == 0 &&
1196 os_memcmp(entry->pmkid, pmkid, 16) == 0) {
1197 if (prev)
1198 prev->next = entry->next;
1199 else
1200 drv->pmkid = entry->next;
1201 os_free(entry);
1202 break;
1203 }
1204 prev = entry;
1205 entry = entry->next;
1206 }
1207 return wpa_driver_ndis_set_pmkid(drv);
1208 }
1209
1210
1211 static int wpa_driver_ndis_flush_pmkid(void *priv)
1212 {
1213 struct wpa_driver_ndis_data *drv = priv;
1214 NDIS_802_11_PMKID p;
1215 struct ndis_pmkid_entry *pmkid, *prev;
1216 int prev_authmode, ret;
1217
1218 if (drv->no_of_pmkid == 0)
1219 return 0;
1220
1221 pmkid = drv->pmkid;
1222 drv->pmkid = NULL;
1223 while (pmkid) {
1224 prev = pmkid;
1225 pmkid = pmkid->next;
1226 os_free(prev);
1227 }
1228
1229 /*
1230 * Some drivers may refuse OID_802_11_PMKID if authMode is not set to
1231 * WPA2, so change authMode temporarily, if needed.
1232 */
1233 prev_authmode = ndis_get_auth_mode(drv);
1234 if (prev_authmode != Ndis802_11AuthModeWPA2)
1235 ndis_set_auth_mode(drv, Ndis802_11AuthModeWPA2);
1236
1237 os_memset(&p, 0, sizeof(p));
1238 p.Length = 8;
1239 p.BSSIDInfoCount = 0;
1240 wpa_hexdump(MSG_MSGDUMP, "NDIS: OID_802_11_PMKID (flush)",
1241 (u8 *) &p, 8);
1242 ret = ndis_set_oid(drv, OID_802_11_PMKID, (char *) &p, 8);
1243
1244 if (prev_authmode != Ndis802_11AuthModeWPA2)
1245 ndis_set_auth_mode(drv, prev_authmode);
1246
1247 return ret;
1248 }
1249
1250
1251 static int wpa_driver_ndis_get_associnfo(struct wpa_driver_ndis_data *drv)
1252 {
1253 char buf[512], *pos;
1254 NDIS_802_11_ASSOCIATION_INFORMATION *ai;
1255 int len;
1256 union wpa_event_data data;
1257 NDIS_802_11_BSSID_LIST_EX *b;
1258 size_t blen, i;
1259
1260 len = ndis_get_oid(drv, OID_802_11_ASSOCIATION_INFORMATION, buf,
1261 sizeof(buf));
1262 if (len < 0) {
1263 wpa_printf(MSG_DEBUG, "NDIS: failed to get association "
1264 "information");
1265 return -1;
1266 }
1267 if (len > sizeof(buf)) {
1268 /* Some drivers seem to be producing incorrect length for this
1269 * data. Limit the length to the current buffer size to avoid
1270 * crashing in hexdump. The data seems to be otherwise valid,
1271 * so better try to use it. */
1272 wpa_printf(MSG_DEBUG, "NDIS: ignored bogus association "
1273 "information length %d", len);
1274 len = ndis_get_oid(drv, OID_802_11_ASSOCIATION_INFORMATION,
1275 buf, sizeof(buf));
1276 if (len < -1) {
1277 wpa_printf(MSG_DEBUG, "NDIS: re-reading association "
1278 "information failed");
1279 return -1;
1280 }
1281 if (len > sizeof(buf)) {
1282 wpa_printf(MSG_DEBUG, "NDIS: ignored bogus association"
1283 " information length %d (re-read)", len);
1284 len = sizeof(buf);
1285 }
1286 }
1287 wpa_hexdump(MSG_MSGDUMP, "NDIS: association information",
1288 (u8 *) buf, len);
1289 if (len < sizeof(*ai)) {
1290 wpa_printf(MSG_DEBUG, "NDIS: too short association "
1291 "information");
1292 return -1;
1293 }
1294 ai = (NDIS_802_11_ASSOCIATION_INFORMATION *) buf;
1295 wpa_printf(MSG_DEBUG, "NDIS: ReqFixed=0x%x RespFixed=0x%x off_req=%d "
1296 "off_resp=%d len_req=%d len_resp=%d",
1297 ai->AvailableRequestFixedIEs, ai->AvailableResponseFixedIEs,
1298 (int) ai->OffsetRequestIEs, (int) ai->OffsetResponseIEs,
1299 (int) ai->RequestIELength, (int) ai->ResponseIELength);
1300
1301 if (ai->OffsetRequestIEs + ai->RequestIELength > (unsigned) len ||
1302 ai->OffsetResponseIEs + ai->ResponseIELength > (unsigned) len) {
1303 wpa_printf(MSG_DEBUG, "NDIS: association information - "
1304 "IE overflow");
1305 return -1;
1306 }
1307
1308 wpa_hexdump(MSG_MSGDUMP, "NDIS: Request IEs",
1309 (u8 *) buf + ai->OffsetRequestIEs, ai->RequestIELength);
1310 wpa_hexdump(MSG_MSGDUMP, "NDIS: Response IEs",
1311 (u8 *) buf + ai->OffsetResponseIEs, ai->ResponseIELength);
1312
1313 os_memset(&data, 0, sizeof(data));
1314 data.assoc_info.req_ies = (u8 *) buf + ai->OffsetRequestIEs;
1315 data.assoc_info.req_ies_len = ai->RequestIELength;
1316 data.assoc_info.resp_ies = (u8 *) buf + ai->OffsetResponseIEs;
1317 data.assoc_info.resp_ies_len = ai->ResponseIELength;
1318
1319 blen = 65535;
1320 b = os_zalloc(blen);
1321 if (b == NULL)
1322 goto skip_scan_results;
1323 len = ndis_get_oid(drv, OID_802_11_BSSID_LIST, (char *) b, blen);
1324 if (len < 0) {
1325 wpa_printf(MSG_DEBUG, "NDIS: failed to get scan results");
1326 os_free(b);
1327 b = NULL;
1328 goto skip_scan_results;
1329 }
1330 wpa_printf(MSG_DEBUG, "NDIS: %d BSSID items to process for AssocInfo",
1331 (unsigned int) b->NumberOfItems);
1332
1333 pos = (char *) &b->Bssid[0];
1334 for (i = 0; i < b->NumberOfItems; i++) {
1335 NDIS_WLAN_BSSID_EX *bss = (NDIS_WLAN_BSSID_EX *) pos;
1336 if (os_memcmp(drv->bssid, bss->MacAddress, ETH_ALEN) == 0 &&
1337 bss->IELength > sizeof(NDIS_802_11_FIXED_IEs)) {
1338 data.assoc_info.beacon_ies =
1339 ((u8 *) bss->IEs) +
1340 sizeof(NDIS_802_11_FIXED_IEs);
1341 data.assoc_info.beacon_ies_len =
1342 bss->IELength - sizeof(NDIS_802_11_FIXED_IEs);
1343 wpa_hexdump(MSG_MSGDUMP, "NDIS: Beacon IEs",
1344 data.assoc_info.beacon_ies,
1345 data.assoc_info.beacon_ies_len);
1346 break;
1347 }
1348 pos += bss->Length;
1349 if (pos > (char *) b + blen)
1350 break;
1351 }
1352
1353 skip_scan_results:
1354 wpa_supplicant_event(drv->ctx, EVENT_ASSOCINFO, &data);
1355
1356 os_free(b);
1357
1358 return 0;
1359 }
1360
1361
1362 static void wpa_driver_ndis_poll_timeout(void *eloop_ctx, void *timeout_ctx)
1363 {
1364 struct wpa_driver_ndis_data *drv = eloop_ctx;
1365 u8 bssid[ETH_ALEN];
1366 int poll;
1367
1368 if (drv->wired)
1369 return;
1370
1371 if (wpa_driver_ndis_get_bssid(drv, bssid)) {
1372 /* Disconnected */
1373 if (!is_zero_ether_addr(drv->bssid)) {
1374 os_memset(drv->bssid, 0, ETH_ALEN);
1375 wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1376 }
1377 } else {
1378 /* Connected */
1379 if (os_memcmp(drv->bssid, bssid, ETH_ALEN) != 0) {
1380 os_memcpy(drv->bssid, bssid, ETH_ALEN);
1381 wpa_driver_ndis_get_associnfo(drv);
1382 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1383 }
1384 }
1385
1386 /* When using integrated NDIS event receiver, we can skip BSSID
1387 * polling when using infrastructure network. However, when using
1388 * IBSS mode, many driver do not seem to generate connection event,
1389 * so we need to enable BSSID polling to figure out when IBSS network
1390 * has been formed.
1391 */
1392 poll = drv->mode == IEEE80211_MODE_IBSS;
1393 #ifndef CONFIG_NDIS_EVENTS_INTEGRATED
1394 #ifndef _WIN32_WCE
1395 poll = 1;
1396 #endif /* _WIN32_WCE */
1397 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
1398
1399 if (poll) {
1400 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout,
1401 drv, NULL);
1402 }
1403 }
1404
1405
1406 static void wpa_driver_ndis_poll(void *priv)
1407 {
1408 struct wpa_driver_ndis_data *drv = priv;
1409 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
1410 wpa_driver_ndis_poll_timeout(drv, NULL);
1411 }
1412
1413
1414 /* Called when driver generates Media Connect Event by calling
1415 * NdisMIndicateStatus() with NDIS_STATUS_MEDIA_CONNECT */
1416 void wpa_driver_ndis_event_connect(struct wpa_driver_ndis_data *drv)
1417 {
1418 wpa_printf(MSG_DEBUG, "NDIS: Media Connect Event");
1419 if (wpa_driver_ndis_get_bssid(drv, drv->bssid) == 0) {
1420 wpa_driver_ndis_get_associnfo(drv);
1421 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1422 }
1423 }
1424
1425
1426 /* Called when driver generates Media Disconnect Event by calling
1427 * NdisMIndicateStatus() with NDIS_STATUS_MEDIA_DISCONNECT */
1428 void wpa_driver_ndis_event_disconnect(struct wpa_driver_ndis_data *drv)
1429 {
1430 wpa_printf(MSG_DEBUG, "NDIS: Media Disconnect Event");
1431 os_memset(drv->bssid, 0, ETH_ALEN);
1432 wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1433 }
1434
1435
1436 static void wpa_driver_ndis_event_auth(struct wpa_driver_ndis_data *drv,
1437 const u8 *data, size_t data_len)
1438 {
1439 NDIS_802_11_AUTHENTICATION_REQUEST *req;
1440 int pairwise = 0, group = 0;
1441 union wpa_event_data event;
1442
1443 if (data_len < sizeof(*req)) {
1444 wpa_printf(MSG_DEBUG, "NDIS: Too short Authentication Request "
1445 "Event (len=%d)", data_len);
1446 return;
1447 }
1448 req = (NDIS_802_11_AUTHENTICATION_REQUEST *) data;
1449
1450 wpa_printf(MSG_DEBUG, "NDIS: Authentication Request Event: "
1451 "Bssid " MACSTR " Flags 0x%x",
1452 MAC2STR(req->Bssid), (int) req->Flags);
1453
1454 if ((req->Flags & NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR) ==
1455 NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR)
1456 pairwise = 1;
1457 else if ((req->Flags & NDIS_802_11_AUTH_REQUEST_GROUP_ERROR) ==
1458 NDIS_802_11_AUTH_REQUEST_GROUP_ERROR)
1459 group = 1;
1460
1461 if (pairwise || group) {
1462 os_memset(&event, 0, sizeof(event));
1463 event.michael_mic_failure.unicast = pairwise;
1464 wpa_supplicant_event(drv->ctx, EVENT_MICHAEL_MIC_FAILURE,
1465 &event);
1466 }
1467 }
1468
1469
1470 static void wpa_driver_ndis_event_pmkid(struct wpa_driver_ndis_data *drv,
1471 const u8 *data, size_t data_len)
1472 {
1473 NDIS_802_11_PMKID_CANDIDATE_LIST *pmkid;
1474 size_t i;
1475 union wpa_event_data event;
1476
1477 if (data_len < 8) {
1478 wpa_printf(MSG_DEBUG, "NDIS: Too short PMKID Candidate List "
1479 "Event (len=%d)", data_len);
1480 return;
1481 }
1482 pmkid = (NDIS_802_11_PMKID_CANDIDATE_LIST *) data;
1483 wpa_printf(MSG_DEBUG, "NDIS: PMKID Candidate List Event - Version %d "
1484 "NumCandidates %d",
1485 (int) pmkid->Version, (int) pmkid->NumCandidates);
1486
1487 if (pmkid->Version != 1) {
1488 wpa_printf(MSG_DEBUG, "NDIS: Unsupported PMKID Candidate List "
1489 "Version %d", (int) pmkid->Version);
1490 return;
1491 }
1492
1493 if (data_len < 8 + pmkid->NumCandidates * sizeof(PMKID_CANDIDATE)) {
1494 wpa_printf(MSG_DEBUG, "NDIS: PMKID Candidate List underflow");
1495 return;
1496 }
1497
1498 os_memset(&event, 0, sizeof(event));
1499 for (i = 0; i < pmkid->NumCandidates; i++) {
1500 PMKID_CANDIDATE *p = &pmkid->CandidateList[i];
1501 wpa_printf(MSG_DEBUG, "NDIS: %d: " MACSTR " Flags 0x%x",
1502 i, MAC2STR(p->BSSID), (int) p->Flags);
1503 os_memcpy(event.pmkid_candidate.bssid, p->BSSID, ETH_ALEN);
1504 event.pmkid_candidate.index = i;
1505 event.pmkid_candidate.preauth =
1506 p->Flags & NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED;
1507 wpa_supplicant_event(drv->ctx, EVENT_PMKID_CANDIDATE,
1508 &event);
1509 }
1510 }
1511
1512
1513 /* Called when driver calls NdisMIndicateStatus() with
1514 * NDIS_STATUS_MEDIA_SPECIFIC_INDICATION */
1515 void wpa_driver_ndis_event_media_specific(struct wpa_driver_ndis_data *drv,
1516 const u8 *data, size_t data_len)
1517 {
1518 NDIS_802_11_STATUS_INDICATION *status;
1519
1520 if (data == NULL || data_len < sizeof(*status))
1521 return;
1522
1523 wpa_hexdump(MSG_DEBUG, "NDIS: Media Specific Indication",
1524 data, data_len);
1525
1526 status = (NDIS_802_11_STATUS_INDICATION *) data;
1527 data += sizeof(status);
1528 data_len -= sizeof(status);
1529
1530 switch (status->StatusType) {
1531 case Ndis802_11StatusType_Authentication:
1532 wpa_driver_ndis_event_auth(drv, data, data_len);
1533 break;
1534 case Ndis802_11StatusType_PMKID_CandidateList:
1535 wpa_driver_ndis_event_pmkid(drv, data, data_len);
1536 break;
1537 default:
1538 wpa_printf(MSG_DEBUG, "NDIS: Unknown StatusType %d",
1539 (int) status->StatusType);
1540 break;
1541 }
1542 }
1543
1544
1545 /* Called when an adapter is added */
1546 void wpa_driver_ndis_event_adapter_arrival(struct wpa_driver_ndis_data *drv)
1547 {
1548 union wpa_event_data event;
1549 int i;
1550
1551 wpa_printf(MSG_DEBUG, "NDIS: Notify Adapter Arrival");
1552
1553 for (i = 0; i < 30; i++) {
1554 /* Re-open Packet32/NDISUIO connection */
1555 wpa_driver_ndis_adapter_close(drv);
1556 if (wpa_driver_ndis_adapter_init(drv) < 0 ||
1557 wpa_driver_ndis_adapter_open(drv) < 0) {
1558 wpa_printf(MSG_DEBUG, "NDIS: Driver re-initialization "
1559 "(%d) failed", i);
1560 os_sleep(1, 0);
1561 } else {
1562 wpa_printf(MSG_DEBUG, "NDIS: Driver re-initialized");
1563 break;
1564 }
1565 }
1566
1567 os_memset(&event, 0, sizeof(event));
1568 os_strlcpy(event.interface_status.ifname, drv->ifname,
1569 sizeof(event.interface_status.ifname));
1570 event.interface_status.ievent = EVENT_INTERFACE_ADDED;
1571 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_STATUS, &event);
1572 }
1573
1574
1575 /* Called when an adapter is removed */
1576 void wpa_driver_ndis_event_adapter_removal(struct wpa_driver_ndis_data *drv)
1577 {
1578 union wpa_event_data event;
1579
1580 wpa_printf(MSG_DEBUG, "NDIS: Notify Adapter Removal");
1581 os_memset(&event, 0, sizeof(event));
1582 os_strlcpy(event.interface_status.ifname, drv->ifname,
1583 sizeof(event.interface_status.ifname));
1584 event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1585 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_STATUS, &event);
1586 }
1587
1588
1589 static void
1590 wpa_driver_ndis_get_wpa_capability(struct wpa_driver_ndis_data *drv)
1591 {
1592 wpa_printf(MSG_DEBUG, "NDIS: verifying driver WPA capability");
1593
1594 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeWPA) == 0 &&
1595 ndis_get_auth_mode(drv) == Ndis802_11AuthModeWPA) {
1596 wpa_printf(MSG_DEBUG, "NDIS: WPA key management supported");
1597 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA;
1598 }
1599
1600 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeWPAPSK) == 0 &&
1601 ndis_get_auth_mode(drv) == Ndis802_11AuthModeWPAPSK) {
1602 wpa_printf(MSG_DEBUG, "NDIS: WPA-PSK key management "
1603 "supported");
1604 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1605 }
1606
1607 if (ndis_set_encr_status(drv, Ndis802_11Encryption3Enabled) == 0 &&
1608 ndis_get_encr_status(drv) == Ndis802_11Encryption3KeyAbsent) {
1609 wpa_printf(MSG_DEBUG, "NDIS: CCMP encryption supported");
1610 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1611 }
1612
1613 if (ndis_set_encr_status(drv, Ndis802_11Encryption2Enabled) == 0 &&
1614 ndis_get_encr_status(drv) == Ndis802_11Encryption2KeyAbsent) {
1615 wpa_printf(MSG_DEBUG, "NDIS: TKIP encryption supported");
1616 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1617 }
1618
1619 if (ndis_set_encr_status(drv, Ndis802_11Encryption1Enabled) == 0 &&
1620 ndis_get_encr_status(drv) == Ndis802_11Encryption1KeyAbsent) {
1621 wpa_printf(MSG_DEBUG, "NDIS: WEP encryption supported");
1622 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40 |
1623 WPA_DRIVER_CAPA_ENC_WEP104;
1624 }
1625
1626 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeShared) == 0 &&
1627 ndis_get_auth_mode(drv) == Ndis802_11AuthModeShared) {
1628 drv->capa.auth |= WPA_DRIVER_AUTH_SHARED;
1629 }
1630
1631 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeOpen) == 0 &&
1632 ndis_get_auth_mode(drv) == Ndis802_11AuthModeOpen) {
1633 drv->capa.auth |= WPA_DRIVER_AUTH_OPEN;
1634 }
1635
1636 ndis_set_encr_status(drv, Ndis802_11EncryptionDisabled);
1637
1638 /* Could also verify OID_802_11_ADD_KEY error reporting and
1639 * support for OID_802_11_ASSOCIATION_INFORMATION. */
1640
1641 if (drv->capa.key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA &&
1642 drv->capa.enc & (WPA_DRIVER_CAPA_ENC_TKIP |
1643 WPA_DRIVER_CAPA_ENC_CCMP)) {
1644 wpa_printf(MSG_DEBUG, "NDIS: driver supports WPA");
1645 drv->has_capability = 1;
1646 } else {
1647 wpa_printf(MSG_DEBUG, "NDIS: no WPA support found");
1648 }
1649
1650 wpa_printf(MSG_DEBUG, "NDIS: driver capabilities: key_mgmt 0x%x "
1651 "enc 0x%x auth 0x%x",
1652 drv->capa.key_mgmt, drv->capa.enc, drv->capa.auth);
1653 }
1654
1655
1656 static void wpa_driver_ndis_get_capability(struct wpa_driver_ndis_data *drv)
1657 {
1658 char buf[512];
1659 int len;
1660 size_t i;
1661 NDIS_802_11_CAPABILITY *c;
1662
1663 drv->capa.flags = WPA_DRIVER_FLAGS_DRIVER_IE;
1664
1665 len = ndis_get_oid(drv, OID_802_11_CAPABILITY, buf, sizeof(buf));
1666 if (len < 0) {
1667 wpa_driver_ndis_get_wpa_capability(drv);
1668 return;
1669 }
1670
1671 wpa_hexdump(MSG_MSGDUMP, "OID_802_11_CAPABILITY", (u8 *) buf, len);
1672 c = (NDIS_802_11_CAPABILITY *) buf;
1673 if (len < sizeof(*c) || c->Version != 2) {
1674 wpa_printf(MSG_DEBUG, "NDIS: unsupported "
1675 "OID_802_11_CAPABILITY data");
1676 return;
1677 }
1678 wpa_printf(MSG_DEBUG, "NDIS: Driver supports OID_802_11_CAPABILITY - "
1679 "NoOfPMKIDs %d NoOfAuthEncrPairs %d",
1680 (int) c->NoOfPMKIDs,
1681 (int) c->NoOfAuthEncryptPairsSupported);
1682 drv->has_capability = 1;
1683 drv->no_of_pmkid = c->NoOfPMKIDs;
1684 for (i = 0; i < c->NoOfAuthEncryptPairsSupported; i++) {
1685 NDIS_802_11_AUTHENTICATION_ENCRYPTION *ae;
1686 ae = &c->AuthenticationEncryptionSupported[i];
1687 if ((char *) (ae + 1) > buf + len) {
1688 wpa_printf(MSG_DEBUG, "NDIS: auth/encr pair list "
1689 "overflow");
1690 break;
1691 }
1692 wpa_printf(MSG_MSGDUMP, "NDIS: %d - auth %d encr %d",
1693 i, (int) ae->AuthModeSupported,
1694 (int) ae->EncryptStatusSupported);
1695 switch (ae->AuthModeSupported) {
1696 case Ndis802_11AuthModeOpen:
1697 drv->capa.auth |= WPA_DRIVER_AUTH_OPEN;
1698 break;
1699 case Ndis802_11AuthModeShared:
1700 drv->capa.auth |= WPA_DRIVER_AUTH_SHARED;
1701 break;
1702 case Ndis802_11AuthModeWPA:
1703 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA;
1704 break;
1705 case Ndis802_11AuthModeWPAPSK:
1706 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1707 break;
1708 case Ndis802_11AuthModeWPA2:
1709 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA2;
1710 break;
1711 case Ndis802_11AuthModeWPA2PSK:
1712 drv->capa.key_mgmt |=
1713 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
1714 break;
1715 case Ndis802_11AuthModeWPANone:
1716 drv->capa.key_mgmt |=
1717 WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE;
1718 break;
1719 default:
1720 break;
1721 }
1722 switch (ae->EncryptStatusSupported) {
1723 case Ndis802_11Encryption1Enabled:
1724 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40;
1725 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP104;
1726 break;
1727 case Ndis802_11Encryption2Enabled:
1728 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1729 break;
1730 case Ndis802_11Encryption3Enabled:
1731 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1732 break;
1733 default:
1734 break;
1735 }
1736 }
1737
1738 wpa_printf(MSG_DEBUG, "NDIS: driver capabilities: key_mgmt 0x%x "
1739 "enc 0x%x auth 0x%x",
1740 drv->capa.key_mgmt, drv->capa.enc, drv->capa.auth);
1741 }
1742
1743
1744 static int wpa_driver_ndis_get_capa(void *priv, struct wpa_driver_capa *capa)
1745 {
1746 struct wpa_driver_ndis_data *drv = priv;
1747 if (!drv->has_capability)
1748 return -1;
1749 os_memcpy(capa, &drv->capa, sizeof(*capa));
1750 return 0;
1751 }
1752
1753
1754 static const char * wpa_driver_ndis_get_ifname(void *priv)
1755 {
1756 struct wpa_driver_ndis_data *drv = priv;
1757 return drv->ifname;
1758 }
1759
1760
1761 static const u8 * wpa_driver_ndis_get_mac_addr(void *priv)
1762 {
1763 struct wpa_driver_ndis_data *drv = priv;
1764 return drv->own_addr;
1765 }
1766
1767
1768 #ifdef _WIN32_WCE
1769
1770 #define NDISUIO_MSG_SIZE (sizeof(NDISUIO_DEVICE_NOTIFICATION) + 512)
1771
1772 static void ndisuio_notification_receive(void *eloop_data, void *user_ctx)
1773 {
1774 struct wpa_driver_ndis_data *drv = eloop_data;
1775 NDISUIO_DEVICE_NOTIFICATION *hdr;
1776 u8 buf[NDISUIO_MSG_SIZE];
1777 DWORD len, flags;
1778
1779 if (!ReadMsgQueue(drv->event_queue, buf, NDISUIO_MSG_SIZE, &len, 0,
1780 &flags)) {
1781 wpa_printf(MSG_DEBUG, "ndisuio_notification_receive: "
1782 "ReadMsgQueue failed: %d", (int) GetLastError());
1783 return;
1784 }
1785
1786 if (len < sizeof(NDISUIO_DEVICE_NOTIFICATION)) {
1787 wpa_printf(MSG_DEBUG, "ndisuio_notification_receive: "
1788 "Too short message (len=%d)", (int) len);
1789 return;
1790 }
1791
1792 hdr = (NDISUIO_DEVICE_NOTIFICATION *) buf;
1793 wpa_printf(MSG_DEBUG, "NDIS: Notification received: len=%d type=0x%x",
1794 (int) len, hdr->dwNotificationType);
1795
1796 switch (hdr->dwNotificationType) {
1797 #ifdef NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL
1798 case NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL:
1799 wpa_printf(MSG_DEBUG, "NDIS: ADAPTER_ARRIVAL");
1800 wpa_driver_ndis_event_adapter_arrival(drv);
1801 break;
1802 #endif
1803 #ifdef NDISUIO_NOTIFICATION_ADAPTER_REMOVAL
1804 case NDISUIO_NOTIFICATION_ADAPTER_REMOVAL:
1805 wpa_printf(MSG_DEBUG, "NDIS: ADAPTER_REMOVAL");
1806 wpa_driver_ndis_event_adapter_removal(drv);
1807 break;
1808 #endif
1809 case NDISUIO_NOTIFICATION_MEDIA_CONNECT:
1810 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_CONNECT");
1811 SetEvent(drv->connected_event);
1812 wpa_driver_ndis_event_connect(drv);
1813 break;
1814 case NDISUIO_NOTIFICATION_MEDIA_DISCONNECT:
1815 ResetEvent(drv->connected_event);
1816 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_DISCONNECT");
1817 wpa_driver_ndis_event_disconnect(drv);
1818 break;
1819 case NDISUIO_NOTIFICATION_MEDIA_SPECIFIC_NOTIFICATION:
1820 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_SPECIFIC_NOTIFICATION");
1821 #if _WIN32_WCE == 420 || _WIN32_WCE == 0x420
1822 wpa_driver_ndis_event_media_specific(
1823 drv, hdr->pvStatusBuffer, hdr->uiStatusBufferSize);
1824 #else
1825 wpa_driver_ndis_event_media_specific(
1826 drv, ((const u8 *) hdr) + hdr->uiOffsetToStatusBuffer,
1827 (size_t) hdr->uiStatusBufferSize);
1828 #endif
1829 break;
1830 default:
1831 wpa_printf(MSG_DEBUG, "NDIS: Unknown notification type 0x%x",
1832 hdr->dwNotificationType);
1833 break;
1834 }
1835 }
1836
1837
1838 static void ndisuio_notification_deinit(struct wpa_driver_ndis_data *drv)
1839 {
1840 NDISUIO_REQUEST_NOTIFICATION req;
1841
1842 memset(&req, 0, sizeof(req));
1843 req.hMsgQueue = drv->event_queue;
1844 req.dwNotificationTypes = 0;
1845
1846 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_REQUEST_NOTIFICATION,
1847 &req, sizeof(req), NULL, 0, NULL, NULL)) {
1848 wpa_printf(MSG_INFO, "ndisuio_notification_deinit: "
1849 "IOCTL_NDISUIO_REQUEST_NOTIFICATION failed: %d",
1850 (int) GetLastError());
1851 }
1852
1853 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_CANCEL_NOTIFICATION,
1854 NULL, 0, NULL, 0, NULL, NULL)) {
1855 wpa_printf(MSG_INFO, "ndisuio_notification_deinit: "
1856 "IOCTL_NDISUIO_CANCEL_NOTIFICATION failed: %d",
1857 (int) GetLastError());
1858 }
1859
1860 if (drv->event_queue) {
1861 eloop_unregister_event(drv->event_queue,
1862 sizeof(drv->event_queue));
1863 CloseHandle(drv->event_queue);
1864 drv->event_queue = NULL;
1865 }
1866
1867 if (drv->connected_event) {
1868 CloseHandle(drv->connected_event);
1869 drv->connected_event = NULL;
1870 }
1871 }
1872
1873
1874 static int ndisuio_notification_init(struct wpa_driver_ndis_data *drv)
1875 {
1876 MSGQUEUEOPTIONS opt;
1877 NDISUIO_REQUEST_NOTIFICATION req;
1878
1879 drv->connected_event =
1880 CreateEvent(NULL, TRUE, FALSE, TEXT("WpaSupplicantConnected"));
1881 if (drv->connected_event == NULL) {
1882 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1883 "CreateEvent failed: %d",
1884 (int) GetLastError());
1885 return -1;
1886 }
1887
1888 memset(&opt, 0, sizeof(opt));
1889 opt.dwSize = sizeof(opt);
1890 opt.dwMaxMessages = 5;
1891 opt.cbMaxMessage = NDISUIO_MSG_SIZE;
1892 opt.bReadAccess = TRUE;
1893
1894 drv->event_queue = CreateMsgQueue(NULL, &opt);
1895 if (drv->event_queue == NULL) {
1896 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1897 "CreateMsgQueue failed: %d",
1898 (int) GetLastError());
1899 ndisuio_notification_deinit(drv);
1900 return -1;
1901 }
1902
1903 memset(&req, 0, sizeof(req));
1904 req.hMsgQueue = drv->event_queue;
1905 req.dwNotificationTypes =
1906 #ifdef NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL
1907 NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL |
1908 #endif
1909 #ifdef NDISUIO_NOTIFICATION_ADAPTER_REMOVAL
1910 NDISUIO_NOTIFICATION_ADAPTER_REMOVAL |
1911 #endif
1912 NDISUIO_NOTIFICATION_MEDIA_CONNECT |
1913 NDISUIO_NOTIFICATION_MEDIA_DISCONNECT |
1914 NDISUIO_NOTIFICATION_MEDIA_SPECIFIC_NOTIFICATION;
1915
1916 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_REQUEST_NOTIFICATION,
1917 &req, sizeof(req), NULL, 0, NULL, NULL)) {
1918 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1919 "IOCTL_NDISUIO_REQUEST_NOTIFICATION failed: %d",
1920 (int) GetLastError());
1921 ndisuio_notification_deinit(drv);
1922 return -1;
1923 }
1924
1925 eloop_register_event(drv->event_queue, sizeof(drv->event_queue),
1926 ndisuio_notification_receive, drv, NULL);
1927
1928 return 0;
1929 }
1930 #endif /* _WIN32_WCE */
1931
1932
1933 static int wpa_driver_ndis_get_names(struct wpa_driver_ndis_data *drv)
1934 {
1935 #ifdef CONFIG_USE_NDISUIO
1936 NDISUIO_QUERY_BINDING *b;
1937 size_t blen = sizeof(*b) + 1024;
1938 int i, error, found = 0;
1939 DWORD written;
1940 char name[256], desc[256], *dpos;
1941 WCHAR *pos;
1942 size_t j, len, dlen;
1943
1944 b = os_malloc(blen);
1945 if (b == NULL)
1946 return -1;
1947
1948 for (i = 0; ; i++) {
1949 os_memset(b, 0, blen);
1950 b->BindingIndex = i;
1951 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_QUERY_BINDING,
1952 b, sizeof(NDISUIO_QUERY_BINDING), b, blen,
1953 &written, NULL)) {
1954 error = (int) GetLastError();
1955 if (error == ERROR_NO_MORE_ITEMS)
1956 break;
1957 wpa_printf(MSG_DEBUG, "IOCTL_NDISUIO_QUERY_BINDING "
1958 "failed: %d", error);
1959 break;
1960 }
1961
1962 pos = (WCHAR *) ((char *) b + b->DeviceNameOffset);
1963 len = b->DeviceNameLength;
1964 if (len >= sizeof(name))
1965 len = sizeof(name) - 1;
1966 for (j = 0; j < len; j++)
1967 name[j] = (char) pos[j];
1968 name[len] = '\0';
1969
1970 pos = (WCHAR *) ((char *) b + b->DeviceDescrOffset);
1971 len = b->DeviceDescrLength;
1972 if (len >= sizeof(desc))
1973 len = sizeof(desc) - 1;
1974 for (j = 0; j < len; j++)
1975 desc[j] = (char) pos[j];
1976 desc[len] = '\0';
1977
1978 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s", i, name, desc);
1979
1980 if (os_strstr(name, drv->ifname)) {
1981 wpa_printf(MSG_DEBUG, "NDIS: Interface name match");
1982 found = 1;
1983 break;
1984 }
1985
1986 if (os_strncmp(desc, drv->ifname, os_strlen(drv->ifname)) == 0)
1987 {
1988 wpa_printf(MSG_DEBUG, "NDIS: Interface description "
1989 "match");
1990 found = 1;
1991 break;
1992 }
1993 }
1994
1995 if (!found) {
1996 wpa_printf(MSG_DEBUG, "NDIS: Could not find interface '%s'",
1997 drv->ifname);
1998 os_free(b);
1999 return -1;
2000 }
2001
2002 os_strlcpy(drv->ifname,
2003 os_strncmp(name, "\\DEVICE\\", 8) == 0 ? name + 8 : name,
2004 sizeof(drv->ifname));
2005 #ifdef _WIN32_WCE
2006 drv->adapter_name = wpa_strdup_tchar(drv->ifname);
2007 if (drv->adapter_name == NULL) {
2008 wpa_printf(MSG_ERROR, "NDIS: Failed to allocate memory for "
2009 "adapter name");
2010 os_free(b);
2011 return -1;
2012 }
2013 #endif /* _WIN32_WCE */
2014
2015 dpos = os_strstr(desc, " - ");
2016 if (dpos)
2017 dlen = dpos - desc;
2018 else
2019 dlen = os_strlen(desc);
2020 drv->adapter_desc = os_malloc(dlen + 1);
2021 if (drv->adapter_desc) {
2022 os_memcpy(drv->adapter_desc, desc, dlen);
2023 drv->adapter_desc[dlen] = '\0';
2024 }
2025
2026 os_free(b);
2027
2028 if (drv->adapter_desc == NULL)
2029 return -1;
2030
2031 wpa_printf(MSG_DEBUG, "NDIS: Adapter description prefix '%s'",
2032 drv->adapter_desc);
2033
2034 return 0;
2035 #else /* CONFIG_USE_NDISUIO */
2036 PTSTR _names;
2037 char *names, *pos, *pos2;
2038 ULONG len;
2039 BOOLEAN res;
2040 #define MAX_ADAPTERS 32
2041 char *name[MAX_ADAPTERS];
2042 char *desc[MAX_ADAPTERS];
2043 int num_name, num_desc, i, found_name, found_desc;
2044 size_t dlen;
2045
2046 wpa_printf(MSG_DEBUG, "NDIS: Packet.dll version: %s",
2047 PacketGetVersion());
2048
2049 len = 8192;
2050 _names = os_zalloc(len);
2051 if (_names == NULL)
2052 return -1;
2053
2054 res = PacketGetAdapterNames(_names, &len);
2055 if (!res && len > 8192) {
2056 os_free(_names);
2057 _names = os_zalloc(len);
2058 if (_names == NULL)
2059 return -1;
2060 res = PacketGetAdapterNames(_names, &len);
2061 }
2062
2063 if (!res) {
2064 wpa_printf(MSG_ERROR, "NDIS: Failed to get adapter list "
2065 "(PacketGetAdapterNames)");
2066 os_free(_names);
2067 return -1;
2068 }
2069
2070 names = (char *) _names;
2071 if (names[0] && names[1] == '\0' && names[2] && names[3] == '\0') {
2072 wpa_printf(MSG_DEBUG, "NDIS: Looks like adapter names are in "
2073 "UNICODE");
2074 /* Convert to ASCII */
2075 pos2 = pos = names;
2076 while (pos2 < names + len) {
2077 if (pos2[0] == '\0' && pos2[1] == '\0' &&
2078 pos2[2] == '\0' && pos2[3] == '\0') {
2079 pos2 += 4;
2080 break;
2081 }
2082 *pos++ = pos2[0];
2083 pos2 += 2;
2084 }
2085 os_memcpy(pos + 2, names, pos - names);
2086 pos += 2;
2087 } else
2088 pos = names;
2089
2090 num_name = 0;
2091 while (pos < names + len) {
2092 name[num_name] = pos;
2093 while (*pos && pos < names + len)
2094 pos++;
2095 if (pos + 1 >= names + len) {
2096 os_free(names);
2097 return -1;
2098 }
2099 pos++;
2100 num_name++;
2101 if (num_name >= MAX_ADAPTERS) {
2102 wpa_printf(MSG_DEBUG, "NDIS: Too many adapters");
2103 os_free(names);
2104 return -1;
2105 }
2106 if (*pos == '\0') {
2107 wpa_printf(MSG_DEBUG, "NDIS: %d adapter names found",
2108 num_name);
2109 pos++;
2110 break;
2111 }
2112 }
2113
2114 num_desc = 0;
2115 while (pos < names + len) {
2116 desc[num_desc] = pos;
2117 while (*pos && pos < names + len)
2118 pos++;
2119 if (pos + 1 >= names + len) {
2120 os_free(names);
2121 return -1;
2122 }
2123 pos++;
2124 num_desc++;
2125 if (num_desc >= MAX_ADAPTERS) {
2126 wpa_printf(MSG_DEBUG, "NDIS: Too many adapter "
2127 "descriptions");
2128 os_free(names);
2129 return -1;
2130 }
2131 if (*pos == '\0') {
2132 wpa_printf(MSG_DEBUG, "NDIS: %d adapter descriptions "
2133 "found", num_name);
2134 pos++;
2135 break;
2136 }
2137 }
2138
2139 /*
2140 * Windows 98 with Packet.dll 3.0 alpha3 does not include adapter
2141 * descriptions. Fill in dummy descriptors to work around this.
2142 */
2143 while (num_desc < num_name)
2144 desc[num_desc++] = "dummy description";
2145
2146 if (num_name != num_desc) {
2147 wpa_printf(MSG_DEBUG, "NDIS: mismatch in adapter name and "
2148 "description counts (%d != %d)",
2149 num_name, num_desc);
2150 os_free(names);
2151 return -1;
2152 }
2153
2154 found_name = found_desc = -1;
2155 for (i = 0; i < num_name; i++) {
2156 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s",
2157 i, name[i], desc[i]);
2158 if (found_name == -1 && os_strstr(name[i], drv->ifname))
2159 found_name = i;
2160 if (found_desc == -1 &&
2161 os_strncmp(desc[i], drv->ifname, os_strlen(drv->ifname)) ==
2162 0)
2163 found_desc = i;
2164 }
2165
2166 if (found_name < 0 && found_desc >= 0) {
2167 wpa_printf(MSG_DEBUG, "NDIS: Matched interface '%s' based on "
2168 "description '%s'",
2169 name[found_desc], desc[found_desc]);
2170 found_name = found_desc;
2171 os_strlcpy(drv->ifname,
2172 os_strncmp(name[found_desc], "\\Device\\NPF_", 12)
2173 == 0 ? name[found_desc] + 12 : name[found_desc],
2174 sizeof(drv->ifname));
2175 }
2176
2177 if (found_name < 0) {
2178 wpa_printf(MSG_DEBUG, "NDIS: Could not find interface '%s'",
2179 drv->ifname);
2180 os_free(names);
2181 return -1;
2182 }
2183
2184 i = found_name;
2185 pos = os_strrchr(desc[i], '(');
2186 if (pos) {
2187 dlen = pos - desc[i];
2188 pos--;
2189 if (pos > desc[i] && *pos == ' ')
2190 dlen--;
2191 } else {
2192 dlen = os_strlen(desc[i]);
2193 }
2194 drv->adapter_desc = os_malloc(dlen + 1);
2195 if (drv->adapter_desc) {
2196 os_memcpy(drv->adapter_desc, desc[i], dlen);
2197 drv->adapter_desc[dlen] = '\0';
2198 }
2199
2200 os_free(names);
2201
2202 if (drv->adapter_desc == NULL)
2203 return -1;
2204
2205 wpa_printf(MSG_DEBUG, "NDIS: Adapter description prefix '%s'",
2206 drv->adapter_desc);
2207
2208 return 0;
2209 #endif /* CONFIG_USE_NDISUIO */
2210 }
2211
2212
2213 #if defined(CONFIG_NATIVE_WINDOWS) || defined(__CYGWIN__)
2214 #ifndef _WIN32_WCE
2215 /*
2216 * These structures are undocumented for WinXP; only WinCE version is
2217 * documented. These would be included wzcsapi.h if it were available. Some
2218 * changes here have been needed to make the structures match with WinXP SP2.
2219 * It is unclear whether these work with any other version.
2220 */
2221
2222 typedef struct {
2223 LPWSTR wszGuid;
2224 } INTF_KEY_ENTRY, *PINTF_KEY_ENTRY;
2225
2226 typedef struct {
2227 DWORD dwNumIntfs;
2228 PINTF_KEY_ENTRY pIntfs;
2229 } INTFS_KEY_TABLE, *PINTFS_KEY_TABLE;
2230
2231 typedef struct {
2232 DWORD dwDataLen;
2233 LPBYTE pData;
2234 } RAW_DATA, *PRAW_DATA;
2235
2236 typedef struct {
2237 LPWSTR wszGuid;
2238 LPWSTR wszDescr;
2239 ULONG ulMediaState;
2240 ULONG ulMediaType;
2241 ULONG ulPhysicalMediaType;
2242 INT nInfraMode;
2243 INT nAuthMode;
2244 INT nWepStatus;
2245 #ifndef _WIN32_WCE
2246 u8 pad[2]; /* why is this needed? */
2247 #endif /* _WIN32_WCE */
2248 DWORD dwCtlFlags;
2249 DWORD dwCapabilities; /* something added for WinXP SP2(?) */
2250 RAW_DATA rdSSID;
2251 RAW_DATA rdBSSID;
2252 RAW_DATA rdBSSIDList;
2253 RAW_DATA rdStSSIDList;
2254 RAW_DATA rdCtrlData;
2255 #ifdef UNDER_CE
2256 BOOL bInitialized;
2257 #endif
2258 DWORD nWPAMCastCipher;
2259 /* add some extra buffer for later additions since this interface is
2260 * far from stable */
2261 u8 later_additions[100];
2262 } INTF_ENTRY, *PINTF_ENTRY;
2263
2264 #define INTF_ALL 0xffffffff
2265 #define INTF_ALL_FLAGS 0x0000ffff
2266 #define INTF_CTLFLAGS 0x00000010
2267 #define INTFCTL_ENABLED 0x8000
2268 #endif /* _WIN32_WCE */
2269
2270
2271 #ifdef _WIN32_WCE
2272 static int wpa_driver_ndis_rebind_adapter(struct wpa_driver_ndis_data *drv)
2273 {
2274 HANDLE ndis;
2275 TCHAR multi[100];
2276 int len;
2277
2278 len = _tcslen(drv->adapter_name);
2279 if (len > 80)
2280 return -1;
2281
2282 ndis = CreateFile(DD_NDIS_DEVICE_NAME, GENERIC_READ | GENERIC_WRITE,
2283 0, NULL, OPEN_EXISTING, 0, NULL);
2284 if (ndis == INVALID_HANDLE_VALUE) {
2285 wpa_printf(MSG_DEBUG, "NDIS: Failed to open file to NDIS "
2286 "device: %d", (int) GetLastError());
2287 return -1;
2288 }
2289
2290 len++;
2291 memcpy(multi, drv->adapter_name, len * sizeof(TCHAR));
2292 memcpy(&multi[len], TEXT("NDISUIO\0"), 9 * sizeof(TCHAR));
2293 len += 9;
2294
2295 if (!DeviceIoControl(ndis, IOCTL_NDIS_REBIND_ADAPTER,
2296 multi, len * sizeof(TCHAR), NULL, 0, NULL, NULL))
2297 {
2298 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDIS_REBIND_ADAPTER "
2299 "failed: 0x%x", (int) GetLastError());
2300 wpa_hexdump_ascii(MSG_DEBUG, "NDIS: rebind multi_sz",
2301 (u8 *) multi, len * sizeof(TCHAR));
2302 CloseHandle(ndis);
2303 return -1;
2304 }
2305
2306 CloseHandle(ndis);
2307
2308 wpa_printf(MSG_DEBUG, "NDIS: Requested NDIS rebind of NDISUIO "
2309 "protocol");
2310
2311 return 0;
2312 }
2313 #endif /* _WIN32_WCE */
2314
2315
2316 static int wpa_driver_ndis_set_wzc(struct wpa_driver_ndis_data *drv,
2317 int enable)
2318 {
2319 #ifdef _WIN32_WCE
2320 HKEY hk, hk2;
2321 LONG ret;
2322 DWORD i, hnd, len;
2323 TCHAR keyname[256], devname[256];
2324
2325 #define WZC_DRIVER TEXT("Drivers\\BuiltIn\\ZeroConfig")
2326
2327 if (enable) {
2328 HANDLE h;
2329 h = ActivateDeviceEx(WZC_DRIVER, NULL, 0, NULL);
2330 if (h == INVALID_HANDLE_VALUE || h == 0) {
2331 wpa_printf(MSG_DEBUG, "NDIS: Failed to re-enable WZC "
2332 "- ActivateDeviceEx failed: %d",
2333 (int) GetLastError());
2334 return -1;
2335 }
2336
2337 wpa_printf(MSG_DEBUG, "NDIS: WZC re-enabled");
2338 return wpa_driver_ndis_rebind_adapter(drv);
2339 }
2340
2341 /*
2342 * Unfortunately, just disabling the WZC for an interface is not enough
2343 * to free NDISUIO for us, so need to disable and unload WZC completely
2344 * for now when using WinCE with NDISUIO. In addition, must request
2345 * NDISUIO protocol to be rebound to the adapter in order to free the
2346 * NDISUIO binding that WZC hold before us.
2347 */
2348
2349 /* Enumerate HKLM\Drivers\Active\* to find a handle to WZC. */
2350 ret = RegOpenKeyEx(HKEY_LOCAL_MACHINE, DEVLOAD_ACTIVE_KEY, 0, 0, &hk);
2351 if (ret != ERROR_SUCCESS) {
2352 wpa_printf(MSG_DEBUG, "NDIS: RegOpenKeyEx(DEVLOAD_ACTIVE_KEY) "
2353 "failed: %d %d", (int) ret, (int) GetLastError());
2354 return -1;
2355 }
2356
2357 for (i = 0; ; i++) {
2358 len = sizeof(keyname);
2359 ret = RegEnumKeyEx(hk, i, keyname, &len, NULL, NULL, NULL,
2360 NULL);
2361 if (ret != ERROR_SUCCESS) {
2362 wpa_printf(MSG_DEBUG, "NDIS: Could not find active "
2363 "WZC - assuming it is not running.");
2364 RegCloseKey(hk);
2365 return -1;
2366 }
2367
2368 ret = RegOpenKeyEx(hk, keyname, 0, 0, &hk2);
2369 if (ret != ERROR_SUCCESS) {
2370 wpa_printf(MSG_DEBUG, "NDIS: RegOpenKeyEx(active dev) "
2371 "failed: %d %d",
2372 (int) ret, (int) GetLastError());
2373 continue;
2374 }
2375
2376 len = sizeof(devname);
2377 ret = RegQueryValueEx(hk2, DEVLOAD_DEVKEY_VALNAME, NULL, NULL,
2378 (LPBYTE) devname, &len);
2379 if (ret != ERROR_SUCCESS) {
2380 wpa_printf(MSG_DEBUG, "NDIS: RegQueryValueEx("
2381 "DEVKEY_VALNAME) failed: %d %d",
2382 (int) ret, (int) GetLastError());
2383 RegCloseKey(hk2);
2384 continue;
2385 }
2386
2387 if (_tcscmp(devname, WZC_DRIVER) == 0)
2388 break;
2389
2390 RegCloseKey(hk2);
2391 }
2392
2393 RegCloseKey(hk);
2394
2395 /* Found WZC - get handle to it. */
2396 len = sizeof(hnd);
2397 ret = RegQueryValueEx(hk2, DEVLOAD_HANDLE_VALNAME, NULL, NULL,
2398 (PUCHAR) &hnd, &len);
2399 if (ret != ERROR_SUCCESS) {
2400 wpa_printf(MSG_DEBUG, "NDIS: RegQueryValueEx(HANDLE_VALNAME) "
2401 "failed: %d %d", (int) ret, (int) GetLastError());
2402 RegCloseKey(hk2);
2403 return -1;
2404 }
2405
2406 RegCloseKey(hk2);
2407
2408 /* Deactivate WZC */
2409 if (!DeactivateDevice((HANDLE) hnd)) {
2410 wpa_printf(MSG_DEBUG, "NDIS: DeactivateDevice failed: %d",
2411 (int) GetLastError());
2412 return -1;
2413 }
2414
2415 wpa_printf(MSG_DEBUG, "NDIS: Disabled WZC temporarily");
2416 drv->wzc_disabled = 1;
2417 return wpa_driver_ndis_rebind_adapter(drv);
2418
2419 #else /* _WIN32_WCE */
2420
2421 HMODULE hm;
2422 DWORD (WINAPI *wzc_enum_interf)(LPWSTR pSrvAddr,
2423 PINTFS_KEY_TABLE pIntfs);
2424 DWORD (WINAPI *wzc_query_interf)(LPWSTR pSrvAddr, DWORD dwInFlags,
2425 PINTF_ENTRY pIntf,
2426 LPDWORD pdwOutFlags);
2427 DWORD (WINAPI *wzc_set_interf)(LPWSTR pSrvAddr, DWORD dwInFlags,
2428 PINTF_ENTRY pIntf, LPDWORD pdwOutFlags);
2429 int ret = -1, j;
2430 DWORD res;
2431 INTFS_KEY_TABLE guids;
2432 INTF_ENTRY intf;
2433 char guid[128];
2434 WCHAR *pos;
2435 DWORD flags, i;
2436
2437 hm = LoadLibrary(TEXT("wzcsapi.dll"));
2438 if (hm == NULL) {
2439 wpa_printf(MSG_DEBUG, "NDIS: Failed to load wzcsapi.dll (%u) "
2440 "- WZC probably not running",
2441 (unsigned int) GetLastError());
2442 return -1;
2443 }
2444
2445 #ifdef _WIN32_WCE
2446 wzc_enum_interf = (void *) GetProcAddressA(hm, "WZCEnumInterfaces");
2447 wzc_query_interf = (void *) GetProcAddressA(hm, "WZCQueryInterface");
2448 wzc_set_interf = (void *) GetProcAddressA(hm, "WZCSetInterface");
2449 #else /* _WIN32_WCE */
2450 wzc_enum_interf = (void *) GetProcAddress(hm, "WZCEnumInterfaces");
2451 wzc_query_interf = (void *) GetProcAddress(hm, "WZCQueryInterface");
2452 wzc_set_interf = (void *) GetProcAddress(hm, "WZCSetInterface");
2453 #endif /* _WIN32_WCE */
2454
2455 if (wzc_enum_interf == NULL || wzc_query_interf == NULL ||
2456 wzc_set_interf == NULL) {
2457 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces, "
2458 "WZCQueryInterface, or WZCSetInterface not found "
2459 "in wzcsapi.dll");
2460 goto fail;
2461 }
2462
2463 os_memset(&guids, 0, sizeof(guids));
2464 res = wzc_enum_interf(NULL, &guids);
2465 if (res != 0) {
2466 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces failed: %d; "
2467 "WZC service is apparently not running",
2468 (int) res);
2469 goto fail;
2470 }
2471
2472 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces: %d interfaces",
2473 (int) guids.dwNumIntfs);
2474
2475 for (i = 0; i < guids.dwNumIntfs; i++) {
2476 pos = guids.pIntfs[i].wszGuid;
2477 for (j = 0; j < sizeof(guid); j++) {
2478 guid[j] = (char) *pos;
2479 if (*pos == 0)
2480 break;
2481 pos++;
2482 }
2483 guid[sizeof(guid) - 1] = '\0';
2484 wpa_printf(MSG_DEBUG, "NDIS: intfs %d GUID '%s'",
2485 (int) i, guid);
2486 if (os_strstr(drv->ifname, guid) == NULL)
2487 continue;
2488
2489 wpa_printf(MSG_DEBUG, "NDIS: Current interface found from "
2490 "WZC");
2491 break;
2492 }
2493
2494 if (i >= guids.dwNumIntfs) {
2495 wpa_printf(MSG_DEBUG, "NDIS: Current interface not found from "
2496 "WZC");
2497 goto fail;
2498 }
2499
2500 os_memset(&intf, 0, sizeof(intf));
2501 intf.wszGuid = guids.pIntfs[i].wszGuid;
2502 /* Set flags to verify that the structure has not changed. */
2503 intf.dwCtlFlags = -1;
2504 flags = 0;
2505 res = wzc_query_interf(NULL, INTFCTL_ENABLED, &intf, &flags);
2506 if (res != 0) {
2507 wpa_printf(MSG_DEBUG, "NDIS: Could not query flags for the "
2508 "WZC interface: %d (0x%x)",
2509 (int) res, (int) res);
2510 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2511 (unsigned int) GetLastError());
2512 goto fail;
2513 }
2514
2515 wpa_printf(MSG_DEBUG, "NDIS: WZC interface flags 0x%x dwCtlFlags 0x%x",
2516 (int) flags, (int) intf.dwCtlFlags);
2517
2518 if (intf.dwCtlFlags == -1) {
2519 wpa_printf(MSG_DEBUG, "NDIS: Looks like wzcsapi has changed "
2520 "again - could not disable WZC");
2521 wpa_hexdump(MSG_MSGDUMP, "NDIS: intf",
2522 (u8 *) &intf, sizeof(intf));
2523 goto fail;
2524 }
2525
2526 if (enable) {
2527 if (!(intf.dwCtlFlags & INTFCTL_ENABLED)) {
2528 wpa_printf(MSG_DEBUG, "NDIS: Enabling WZC for this "
2529 "interface");
2530 intf.dwCtlFlags |= INTFCTL_ENABLED;
2531 res = wzc_set_interf(NULL, INTFCTL_ENABLED, &intf,
2532 &flags);
2533 if (res != 0) {
2534 wpa_printf(MSG_DEBUG, "NDIS: Failed to enable "
2535 "WZC: %d (0x%x)",
2536 (int) res, (int) res);
2537 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2538 (unsigned int) GetLastError());
2539 goto fail;
2540 }
2541 wpa_printf(MSG_DEBUG, "NDIS: Re-enabled WZC for this "
2542 "interface");
2543 drv->wzc_disabled = 0;
2544 }
2545 } else {
2546 if (intf.dwCtlFlags & INTFCTL_ENABLED) {
2547 wpa_printf(MSG_DEBUG, "NDIS: Disabling WZC for this "
2548 "interface");
2549 intf.dwCtlFlags &= ~INTFCTL_ENABLED;
2550 res = wzc_set_interf(NULL, INTFCTL_ENABLED, &intf,
2551 &flags);
2552 if (res != 0) {
2553 wpa_printf(MSG_DEBUG, "NDIS: Failed to "
2554 "disable WZC: %d (0x%x)",
2555 (int) res, (int) res);
2556 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2557 (unsigned int) GetLastError());
2558 goto fail;
2559 }
2560 wpa_printf(MSG_DEBUG, "NDIS: Disabled WZC temporarily "
2561 "for this interface");
2562 drv->wzc_disabled = 1;
2563 } else {
2564 wpa_printf(MSG_DEBUG, "NDIS: WZC was not enabled for "
2565 "this interface");
2566 }
2567 }
2568
2569 ret = 0;
2570
2571 fail:
2572 FreeLibrary(hm);
2573
2574 return ret;
2575 #endif /* _WIN32_WCE */
2576 }
2577
2578 #else /* CONFIG_NATIVE_WINDOWS || __CYGWIN__ */
2579
2580 static int wpa_driver_ndis_set_wzc(struct wpa_driver_ndis_data *drv,
2581 int enable)
2582 {
2583 return 0;
2584 }
2585
2586 #endif /* CONFIG_NATIVE_WINDOWS || __CYGWIN__ */
2587
2588
2589 #ifdef CONFIG_USE_NDISUIO
2590 /*
2591 * l2_packet_ndis.c is sharing the same handle to NDISUIO, so we must be able
2592 * to export this handle. This is somewhat ugly, but there is no better
2593 * mechanism available to pass data from driver interface to l2_packet wrapper.
2594 */
2595 static HANDLE driver_ndis_ndisuio_handle = INVALID_HANDLE_VALUE;
2596
2597 HANDLE driver_ndis_get_ndisuio_handle(void)
2598 {
2599 return driver_ndis_ndisuio_handle;
2600 }
2601 #endif /* CONFIG_USE_NDISUIO */
2602
2603
2604 static int wpa_driver_ndis_adapter_init(struct wpa_driver_ndis_data *drv)
2605 {
2606 #ifdef CONFIG_USE_NDISUIO
2607 #ifndef _WIN32_WCE
2608 #define NDISUIO_DEVICE_NAME TEXT("\\\\.\\\\Ndisuio")
2609 DWORD written;
2610 #endif /* _WIN32_WCE */
2611 drv->ndisuio = CreateFile(NDISUIO_DEVICE_NAME,
2612 GENERIC_READ | GENERIC_WRITE, 0, NULL,
2613 OPEN_EXISTING,
2614 FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
2615 INVALID_HANDLE_VALUE);
2616 if (drv->ndisuio == INVALID_HANDLE_VALUE) {
2617 wpa_printf(MSG_ERROR, "NDIS: Failed to open connection to "
2618 "NDISUIO: %d", (int) GetLastError());
2619 return -1;
2620 }
2621 driver_ndis_ndisuio_handle = drv->ndisuio;
2622
2623 #ifndef _WIN32_WCE
2624 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_BIND_WAIT, NULL, 0,
2625 NULL, 0, &written, NULL)) {
2626 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_BIND_WAIT failed: "
2627 "%d", (int) GetLastError());
2628 CloseHandle(drv->ndisuio);
2629 drv->ndisuio = INVALID_HANDLE_VALUE;
2630 return -1;
2631 }
2632 #endif /* _WIN32_WCE */
2633
2634 return 0;
2635 #else /* CONFIG_USE_NDISUIO */
2636 return 0;
2637 #endif /* CONFIG_USE_NDISUIO */
2638 }
2639
2640
2641 static int wpa_driver_ndis_adapter_open(struct wpa_driver_ndis_data *drv)
2642 {
2643 #ifdef CONFIG_USE_NDISUIO
2644 DWORD written;
2645 #define MAX_NDIS_DEVICE_NAME_LEN 256
2646 WCHAR ifname[MAX_NDIS_DEVICE_NAME_LEN];
2647 size_t len, i, pos;
2648 const char *prefix = "\\DEVICE\\";
2649
2650 #ifdef _WIN32_WCE
2651 pos = 0;
2652 #else /* _WIN32_WCE */
2653 pos = 8;
2654 #endif /* _WIN32_WCE */
2655 len = pos + os_strlen(drv->ifname);
2656 if (len >= MAX_NDIS_DEVICE_NAME_LEN)
2657 return -1;
2658 for (i = 0; i < pos; i++)
2659 ifname[i] = (WCHAR) prefix[i];
2660 for (i = pos; i < len; i++)
2661 ifname[i] = (WCHAR) drv->ifname[i - pos];
2662 ifname[i] = L'\0';
2663
2664 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_OPEN_DEVICE,
2665 ifname, len * sizeof(WCHAR), NULL, 0, &written,
2666 NULL)) {
2667 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_OPEN_DEVICE "
2668 "failed: %d", (int) GetLastError());
2669 wpa_hexdump_ascii(MSG_DEBUG, "NDIS: ifname",
2670 (const u8 *) ifname, len * sizeof(WCHAR));
2671 CloseHandle(drv->ndisuio);
2672 drv->ndisuio = INVALID_HANDLE_VALUE;
2673 return -1;
2674 }
2675
2676 wpa_printf(MSG_DEBUG, "NDIS: Opened NDISUIO device successfully");
2677
2678 return 0;
2679 #else /* CONFIG_USE_NDISUIO */
2680 char ifname[128];
2681 os_snprintf(ifname, sizeof(ifname), "\\Device\\NPF_%s", drv->ifname);
2682 drv->adapter = PacketOpenAdapter(ifname);
2683 if (drv->adapter == NULL) {
2684 wpa_printf(MSG_DEBUG, "NDIS: PacketOpenAdapter failed for "
2685 "'%s'", ifname);
2686 return -1;
2687 }
2688 return 0;
2689 #endif /* CONFIG_USE_NDISUIO */
2690 }
2691
2692
2693 static void wpa_driver_ndis_adapter_close(struct wpa_driver_ndis_data *drv)
2694 {
2695 #ifdef CONFIG_USE_NDISUIO
2696 driver_ndis_ndisuio_handle = INVALID_HANDLE_VALUE;
2697 if (drv->ndisuio != INVALID_HANDLE_VALUE)
2698 CloseHandle(drv->ndisuio);
2699 #else /* CONFIG_USE_NDISUIO */
2700 if (drv->adapter)
2701 PacketCloseAdapter(drv->adapter);
2702 #endif /* CONFIG_USE_NDISUIO */
2703 }
2704
2705
2706 static int ndis_add_multicast(struct wpa_driver_ndis_data *drv)
2707 {
2708 if (ndis_set_oid(drv, OID_802_3_MULTICAST_LIST,
2709 (const char *) pae_group_addr, ETH_ALEN) < 0) {
2710 wpa_printf(MSG_DEBUG, "NDIS: Failed to add PAE group address "
2711 "to the multicast list");
2712 return -1;
2713 }
2714
2715 return 0;
2716 }
2717
2718
2719 static void * wpa_driver_ndis_init(void *ctx, const char *ifname)
2720 {
2721 struct wpa_driver_ndis_data *drv;
2722 u32 mode;
2723
2724 drv = os_zalloc(sizeof(*drv));
2725 if (drv == NULL)
2726 return NULL;
2727 drv->ctx = ctx;
2728 /*
2729 * Compatibility code to strip possible prefix from the GUID. Previous
2730 * versions include \Device\NPF_ prefix for all names, but the internal
2731 * interface name is now only the GUI. Both Packet32 and NDISUIO
2732 * prefixes are supported.
2733 */
2734 if (os_strncmp(ifname, "\\Device\\NPF_", 12) == 0)
2735 ifname += 12;
2736 else if (os_strncmp(ifname, "\\DEVICE\\", 8) == 0)
2737 ifname += 8;
2738 os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
2739
2740 if (wpa_driver_ndis_adapter_init(drv) < 0) {
2741 os_free(drv);
2742 return NULL;
2743 }
2744
2745 if (wpa_driver_ndis_get_names(drv) < 0) {
2746 wpa_driver_ndis_adapter_close(drv);
2747 os_free(drv);
2748 return NULL;
2749 }
2750
2751 wpa_driver_ndis_set_wzc(drv, 0);
2752
2753 if (wpa_driver_ndis_adapter_open(drv) < 0) {
2754 wpa_driver_ndis_adapter_close(drv);
2755 os_free(drv);
2756 return NULL;
2757 }
2758
2759 if (ndis_get_oid(drv, OID_802_3_CURRENT_ADDRESS,
2760 (char *) drv->own_addr, ETH_ALEN) < 0) {
2761 wpa_printf(MSG_DEBUG, "NDIS: Get OID_802_3_CURRENT_ADDRESS "
2762 "failed");
2763 wpa_driver_ndis_adapter_close(drv);
2764 os_free(drv);
2765 return NULL;
2766 }
2767 wpa_driver_ndis_get_capability(drv);
2768
2769 /* Make sure that the driver does not have any obsolete PMKID entries.
2770 */
2771 wpa_driver_ndis_flush_pmkid(drv);
2772
2773 /*
2774 * Disconnect to make sure that driver re-associates if it was
2775 * connected.
2776 */
2777 wpa_driver_ndis_disconnect(drv);
2778
2779 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout, drv, NULL);
2780
2781 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
2782 drv->events = ndis_events_init(&drv->events_pipe, &drv->event_avail,
2783 drv->ifname, drv->adapter_desc);
2784 if (drv->events == NULL) {
2785 wpa_driver_ndis_deinit(drv);
2786 return NULL;
2787 }
2788 eloop_register_event(drv->event_avail, sizeof(drv->event_avail),
2789 wpa_driver_ndis_event_pipe_cb, drv, NULL);
2790 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
2791
2792 #ifdef _WIN32_WCE
2793 if (ndisuio_notification_init(drv) < 0) {
2794 wpa_driver_ndis_deinit(drv);
2795 return NULL;
2796 }
2797 #endif /* _WIN32_WCE */
2798
2799 /* Set mode here in case card was configured for ad-hoc mode
2800 * previously. */
2801 mode = Ndis802_11Infrastructure;
2802 if (ndis_set_oid(drv, OID_802_11_INFRASTRUCTURE_MODE,
2803 (char *) &mode, sizeof(mode)) < 0) {
2804 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
2805 "OID_802_11_INFRASTRUCTURE_MODE (%d)",
2806 (int) mode);
2807 /* Try to continue anyway */
2808
2809 if (!drv->has_capability && drv->capa.enc == 0) {
2810 wpa_printf(MSG_DEBUG, "NDIS: Driver did not provide "
2811 "any wireless capabilities - assume it is "
2812 "a wired interface");
2813 drv->wired = 1;
2814 ndis_add_multicast(drv);
2815 }
2816 }
2817
2818 return drv;
2819 }
2820
2821
2822 static void wpa_driver_ndis_deinit(void *priv)
2823 {
2824 struct wpa_driver_ndis_data *drv = priv;
2825
2826 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
2827 if (drv->events) {
2828 eloop_unregister_event(drv->event_avail,
2829 sizeof(drv->event_avail));
2830 ndis_events_deinit(drv->events);
2831 }
2832 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
2833
2834 #ifdef _WIN32_WCE
2835 ndisuio_notification_deinit(drv);
2836 #endif /* _WIN32_WCE */
2837
2838 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
2839 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
2840 wpa_driver_ndis_flush_pmkid(drv);
2841 wpa_driver_ndis_disconnect(drv);
2842 if (wpa_driver_ndis_radio_off(drv) < 0) {
2843 wpa_printf(MSG_DEBUG, "NDIS: failed to disassociate and turn "
2844 "radio off");
2845 }
2846
2847 wpa_driver_ndis_adapter_close(drv);
2848
2849 if (drv->wzc_disabled)
2850 wpa_driver_ndis_set_wzc(drv, 1);
2851
2852 #ifdef _WIN32_WCE
2853 os_free(drv->adapter_name);
2854 #endif /* _WIN32_WCE */
2855 os_free(drv->adapter_desc);
2856 os_free(drv);
2857 }
2858
2859
2860 static struct wpa_interface_info *
2861 wpa_driver_ndis_get_interfaces(void *global_priv)
2862 {
2863 struct wpa_interface_info *iface = NULL, *niface;
2864
2865 #ifdef CONFIG_USE_NDISUIO
2866 NDISUIO_QUERY_BINDING *b;
2867 size_t blen = sizeof(*b) + 1024;
2868 int i, error;
2869 DWORD written;
2870 char name[256], desc[256];
2871 WCHAR *pos;
2872 size_t j, len;
2873 HANDLE ndisuio;
2874
2875 ndisuio = CreateFile(NDISUIO_DEVICE_NAME,
2876 GENERIC_READ | GENERIC_WRITE, 0, NULL,
2877 OPEN_EXISTING,
2878 FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
2879 INVALID_HANDLE_VALUE);
2880 if (ndisuio == INVALID_HANDLE_VALUE) {
2881 wpa_printf(MSG_ERROR, "NDIS: Failed to open connection to "
2882 "NDISUIO: %d", (int) GetLastError());
2883 return NULL;
2884 }
2885
2886 #ifndef _WIN32_WCE
2887 if (!DeviceIoControl(ndisuio, IOCTL_NDISUIO_BIND_WAIT, NULL, 0,
2888 NULL, 0, &written, NULL)) {
2889 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_BIND_WAIT failed: "
2890 "%d", (int) GetLastError());
2891 CloseHandle(ndisuio);
2892 return NULL;
2893 }
2894 #endif /* _WIN32_WCE */
2895
2896 b = os_malloc(blen);
2897 if (b == NULL) {
2898 CloseHandle(ndisuio);
2899 return NULL;
2900 }
2901
2902 for (i = 0; ; i++) {
2903 os_memset(b, 0, blen);
2904 b->BindingIndex = i;
2905 if (!DeviceIoControl(ndisuio, IOCTL_NDISUIO_QUERY_BINDING,
2906 b, sizeof(NDISUIO_QUERY_BINDING), b, blen,
2907 &written, NULL)) {
2908 error = (int) GetLastError();
2909 if (error == ERROR_NO_MORE_ITEMS)
2910 break;
2911 wpa_printf(MSG_DEBUG, "IOCTL_NDISUIO_QUERY_BINDING "
2912 "failed: %d", error);
2913 break;
2914 }
2915
2916 pos = (WCHAR *) ((char *) b + b->DeviceNameOffset);
2917 len = b->DeviceNameLength;
2918 if (len >= sizeof(name))
2919 len = sizeof(name) - 1;
2920 for (j = 0; j < len; j++)
2921 name[j] = (char) pos[j];
2922 name[len] = '\0';
2923
2924 pos = (WCHAR *) ((char *) b + b->DeviceDescrOffset);
2925 len = b->DeviceDescrLength;
2926 if (len >= sizeof(desc))
2927 len = sizeof(desc) - 1;
2928 for (j = 0; j < len; j++)
2929 desc[j] = (char) pos[j];
2930 desc[len] = '\0';
2931
2932 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s", i, name, desc);
2933
2934 niface = os_zalloc(sizeof(*niface));
2935 if (niface == NULL)
2936 break;
2937 niface->drv_name = "ndis";
2938 if (os_strncmp(name, "\\DEVICE\\", 8) == 0)
2939 niface->ifname = os_strdup(name + 8);
2940 else
2941 niface->ifname = os_strdup(name);
2942 if (niface->ifname == NULL) {
2943 os_free(niface);
2944 break;
2945 }
2946 niface->desc = os_strdup(desc);
2947 niface->next = iface;
2948 iface = niface;
2949 }
2950
2951 os_free(b);
2952 CloseHandle(ndisuio);
2953 #else /* CONFIG_USE_NDISUIO */
2954 PTSTR _names;
2955 char *names, *pos, *pos2;
2956 ULONG len;
2957 BOOLEAN res;
2958 char *name[MAX_ADAPTERS];
2959 char *desc[MAX_ADAPTERS];
2960 int num_name, num_desc, i;
2961
2962 wpa_printf(MSG_DEBUG, "NDIS: Packet.dll version: %s",
2963 PacketGetVersion());
2964
2965 len = 8192;
2966 _names = os_zalloc(len);
2967 if (_names == NULL)
2968 return NULL;
2969
2970 res = PacketGetAdapterNames(_names, &len);
2971 if (!res && len > 8192) {
2972 os_free(_names);
2973 _names = os_zalloc(len);
2974 if (_names == NULL)
2975 return NULL;
2976 res = PacketGetAdapterNames(_names, &len);
2977 }
2978
2979 if (!res) {
2980 wpa_printf(MSG_ERROR, "NDIS: Failed to get adapter list "
2981 "(PacketGetAdapterNames)");
2982 os_free(_names);
2983 return NULL;
2984 }
2985
2986 names = (char *) _names;
2987 if (names[0] && names[1] == '\0' && names[2] && names[3] == '\0') {
2988 wpa_printf(MSG_DEBUG, "NDIS: Looks like adapter names are in "
2989 "UNICODE");
2990 /* Convert to ASCII */
2991 pos2 = pos = names;
2992 while (pos2 < names + len) {
2993 if (pos2[0] == '\0' && pos2[1] == '\0' &&
2994 pos2[2] == '\0' && pos2[3] == '\0') {
2995 pos2 += 4;
2996 break;
2997 }
2998 *pos++ = pos2[0];
2999 pos2 += 2;
3000 }
3001 os_memcpy(pos + 2, names, pos - names);
3002 pos += 2;
3003 } else
3004 pos = names;
3005
3006 num_name = 0;
3007 while (pos < names + len) {
3008 name[num_name] = pos;
3009 while (*pos && pos < names + len)
3010 pos++;
3011 if (pos + 1 >= names + len) {
3012 os_free(names);
3013 return NULL;
3014 }
3015 pos++;
3016 num_name++;
3017 if (num_name >= MAX_ADAPTERS) {
3018 wpa_printf(MSG_DEBUG, "NDIS: Too many adapters");
3019 os_free(names);
3020 return NULL;
3021 }
3022 if (*pos == '\0') {
3023 wpa_printf(MSG_DEBUG, "NDIS: %d adapter names found",
3024 num_name);
3025 pos++;
3026 break;
3027 }
3028 }
3029
3030 num_desc = 0;
3031 while (pos < names + len) {
3032 desc[num_desc] = pos;
3033 while (*pos && pos < names + len)
3034 pos++;
3035 if (pos + 1 >= names + len) {
3036 os_free(names);
3037 return NULL;
3038 }
3039 pos++;
3040 num_desc++;
3041 if (num_desc >= MAX_ADAPTERS) {
3042 wpa_printf(MSG_DEBUG, "NDIS: Too many adapter "
3043 "descriptions");
3044 os_free(names);
3045 return NULL;
3046 }
3047 if (*pos == '\0') {
3048 wpa_printf(MSG_DEBUG, "NDIS: %d adapter descriptions "
3049 "found", num_name);
3050 pos++;
3051 break;
3052 }
3053 }
3054
3055 /*
3056 * Windows 98 with Packet.dll 3.0 alpha3 does not include adapter
3057 * descriptions. Fill in dummy descriptors to work around this.
3058 */
3059 while (num_desc < num_name)
3060 desc[num_desc++] = "dummy description";
3061
3062 if (num_name != num_desc) {
3063 wpa_printf(MSG_DEBUG, "NDIS: mismatch in adapter name and "
3064 "description counts (%d != %d)",
3065 num_name, num_desc);
3066 os_free(names);
3067 return NULL;
3068 }
3069
3070 for (i = 0; i < num_name; i++) {
3071 niface = os_zalloc(sizeof(*niface));
3072 if (niface == NULL)
3073 break;
3074 niface->drv_name = "ndis";
3075 if (os_strncmp(name[i], "\\Device\\NPF_", 12) == 0)
3076 niface->ifname = os_strdup(name[i] + 12);
3077 else
3078 niface->ifname = os_strdup(name[i]);
3079 if (niface->ifname == NULL) {
3080 os_free(niface);
3081 break;
3082 }
3083 niface->desc = os_strdup(desc[i]);
3084 niface->next = iface;
3085 iface = niface;
3086 }
3087
3088 #endif /* CONFIG_USE_NDISUIO */
3089
3090 return iface;
3091 }
3092
3093
3094 const struct wpa_driver_ops wpa_driver_ndis_ops = {
3095 "ndis",
3096 "Windows NDIS driver",
3097 wpa_driver_ndis_get_bssid,
3098 wpa_driver_ndis_get_ssid,
3099 wpa_driver_ndis_set_wpa,
3100 wpa_driver_ndis_set_key,
3101 wpa_driver_ndis_init,
3102 wpa_driver_ndis_deinit,
3103 NULL /* set_param */,
3104 NULL /* set_countermeasures */,
3105 NULL /* set_drop_unencrypted */,
3106 wpa_driver_ndis_scan,
3107 NULL /* get_scan_results */,
3108 wpa_driver_ndis_deauthenticate,
3109 wpa_driver_ndis_disassociate,
3110 wpa_driver_ndis_associate,
3111 NULL /* set_auth_alg */,
3112 wpa_driver_ndis_add_pmkid,
3113 wpa_driver_ndis_remove_pmkid,
3114 wpa_driver_ndis_flush_pmkid,
3115 wpa_driver_ndis_get_capa,
3116 wpa_driver_ndis_poll,
3117 wpa_driver_ndis_get_ifname,
3118 wpa_driver_ndis_get_mac_addr,
3119 NULL /* send_eapol */,
3120 NULL /* set_operstate */,
3121 NULL /* mlme_setprotection */,
3122 NULL /* get_hw_feature_data */,
3123 NULL /* set_channel */,
3124 NULL /* set_ssid */,
3125 NULL /* set_bssid */,
3126 NULL /* send_mlme */,
3127 NULL /* mlme_add_sta */,
3128 NULL /* mlme_remove_sta */,
3129 NULL /* update_ft_ies */,
3130 NULL /* send_ft_action */,
3131 wpa_driver_ndis_get_scan_results,
3132 NULL /* set_probe_req_ie */,
3133 NULL /* set_mode */,
3134 NULL /* set_country */,
3135 NULL /* global_init */,
3136 NULL /* global_deinit */,
3137 NULL /* init2 */,
3138 wpa_driver_ndis_get_interfaces
3139 };
DragonFly BSD