?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Allow Probe Request callbacks to terminate iteration
[hostap-gosc2009.git] / src / drivers / driver_ndis.c
blobf3dc1cfaa42bf518904b0c67586e93279ef975f8
1 /*
2 * WPA Supplicant - Windows/NDIS driver interface
3 * Copyright (c) 2004-2007, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 */
14
15 #ifdef __CYGWIN__
16 /* Avoid some header file conflicts by not including standard headers for
17 * cygwin builds when Packet32.h is included. */
18 #include "build_config.h"
19 int close(int fd);
20 #else /* __CYGWIN__ */
21 #include "includes.h"
22 #endif /* __CYGWIN__ */
23 #ifdef CONFIG_USE_NDISUIO
24 #include <winsock2.h>
25 #else /* CONFIG_USE_NDISUIO */
26 #include <Packet32.h>
27 #endif /* CONFIG_USE_NDISUIO */
28 #ifdef __MINGW32_VERSION
29 #include <ddk/ntddndis.h>
30 #else /* __MINGW32_VERSION */
31 #include <ntddndis.h>
32 #endif /* __MINGW32_VERSION */
33
34 #ifdef _WIN32_WCE
35 #include <winioctl.h>
36 #include <nuiouser.h>
37 #include <devload.h>
38 #endif /* _WIN32_WCE */
39
40 #include "common.h"
41 #include "driver.h"
42 #include "eloop.h"
43 #include "common/ieee802_11_defs.h"
44 #include "driver_ndis.h"
45
46 int wpa_driver_register_event_cb(struct wpa_driver_ndis_data *drv);
47 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
48 void wpa_driver_ndis_event_pipe_cb(void *eloop_data, void *user_data);
49 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
50
51 static void wpa_driver_ndis_deinit(void *priv);
52 static void wpa_driver_ndis_poll(void *drv);
53 static void wpa_driver_ndis_poll_timeout(void *eloop_ctx, void *timeout_ctx);
54 static int wpa_driver_ndis_adapter_init(struct wpa_driver_ndis_data *drv);
55 static int wpa_driver_ndis_adapter_open(struct wpa_driver_ndis_data *drv);
56 static void wpa_driver_ndis_adapter_close(struct wpa_driver_ndis_data *drv);
57
58
59 static const u8 pae_group_addr[ETH_ALEN] =
60 { 0x01, 0x80, 0xc2, 0x00, 0x00, 0x03 };
61
62
63 /* FIX: to be removed once this can be compiled with the complete NDIS
64 * header files */
65 #ifndef OID_802_11_BSSID
66 #define OID_802_11_BSSID 0x0d010101
67 #define OID_802_11_SSID 0x0d010102
68 #define OID_802_11_INFRASTRUCTURE_MODE 0x0d010108
69 #define OID_802_11_ADD_WEP 0x0D010113
70 #define OID_802_11_REMOVE_WEP 0x0D010114
71 #define OID_802_11_DISASSOCIATE 0x0D010115
72 #define OID_802_11_BSSID_LIST 0x0d010217
73 #define OID_802_11_AUTHENTICATION_MODE 0x0d010118
74 #define OID_802_11_PRIVACY_FILTER 0x0d010119
75 #define OID_802_11_BSSID_LIST_SCAN 0x0d01011A
76 #define OID_802_11_WEP_STATUS 0x0d01011B
77 #define OID_802_11_ENCRYPTION_STATUS OID_802_11_WEP_STATUS
78 #define OID_802_11_ADD_KEY 0x0d01011D
79 #define OID_802_11_REMOVE_KEY 0x0d01011E
80 #define OID_802_11_ASSOCIATION_INFORMATION 0x0d01011F
81 #define OID_802_11_TEST 0x0d010120
82 #define OID_802_11_CAPABILITY 0x0d010122
83 #define OID_802_11_PMKID 0x0d010123
84
85 #define NDIS_802_11_LENGTH_SSID 32
86 #define NDIS_802_11_LENGTH_RATES 8
87 #define NDIS_802_11_LENGTH_RATES_EX 16
88
89 typedef UCHAR NDIS_802_11_MAC_ADDRESS[6];
90
91 typedef struct NDIS_802_11_SSID {
92 ULONG SsidLength;
93 UCHAR Ssid[NDIS_802_11_LENGTH_SSID];
94 } NDIS_802_11_SSID;
95
96 typedef LONG NDIS_802_11_RSSI;
97
98 typedef enum NDIS_802_11_NETWORK_TYPE {
99 Ndis802_11FH,
100 Ndis802_11DS,
101 Ndis802_11OFDM5,
102 Ndis802_11OFDM24,
103 Ndis802_11NetworkTypeMax
104 } NDIS_802_11_NETWORK_TYPE;
105
106 typedef struct NDIS_802_11_CONFIGURATION_FH {
107 ULONG Length;
108 ULONG HopPattern;
109 ULONG HopSet;
110 ULONG DwellTime;
111 } NDIS_802_11_CONFIGURATION_FH;
112
113 typedef struct NDIS_802_11_CONFIGURATION {
114 ULONG Length;
115 ULONG BeaconPeriod;
116 ULONG ATIMWindow;
117 ULONG DSConfig;
118 NDIS_802_11_CONFIGURATION_FH FHConfig;
119 } NDIS_802_11_CONFIGURATION;
120
121 typedef enum NDIS_802_11_NETWORK_INFRASTRUCTURE {
122 Ndis802_11IBSS,
123 Ndis802_11Infrastructure,
124 Ndis802_11AutoUnknown,
125 Ndis802_11InfrastructureMax
126 } NDIS_802_11_NETWORK_INFRASTRUCTURE;
127
128 typedef enum NDIS_802_11_AUTHENTICATION_MODE {
129 Ndis802_11AuthModeOpen,
130 Ndis802_11AuthModeShared,
131 Ndis802_11AuthModeAutoSwitch,
132 Ndis802_11AuthModeWPA,
133 Ndis802_11AuthModeWPAPSK,
134 Ndis802_11AuthModeWPANone,
135 Ndis802_11AuthModeWPA2,
136 Ndis802_11AuthModeWPA2PSK,
137 Ndis802_11AuthModeMax
138 } NDIS_802_11_AUTHENTICATION_MODE;
139
140 typedef enum NDIS_802_11_WEP_STATUS {
141 Ndis802_11WEPEnabled,
142 Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
143 Ndis802_11WEPDisabled,
144 Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
145 Ndis802_11WEPKeyAbsent,
146 Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
147 Ndis802_11WEPNotSupported,
148 Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
149 Ndis802_11Encryption2Enabled,
150 Ndis802_11Encryption2KeyAbsent,
151 Ndis802_11Encryption3Enabled,
152 Ndis802_11Encryption3KeyAbsent
153 } NDIS_802_11_WEP_STATUS, NDIS_802_11_ENCRYPTION_STATUS;
154
155 typedef enum NDIS_802_11_PRIVACY_FILTER {
156 Ndis802_11PrivFilterAcceptAll,
157 Ndis802_11PrivFilter8021xWEP
158 } NDIS_802_11_PRIVACY_FILTER;
159
160 typedef UCHAR NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES];
161 typedef UCHAR NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];
162
163 typedef struct NDIS_WLAN_BSSID_EX {
164 ULONG Length;
165 NDIS_802_11_MAC_ADDRESS MacAddress; /* BSSID */
166 UCHAR Reserved[2];
167 NDIS_802_11_SSID Ssid;
168 ULONG Privacy;
169 NDIS_802_11_RSSI Rssi;
170 NDIS_802_11_NETWORK_TYPE NetworkTypeInUse;
171 NDIS_802_11_CONFIGURATION Configuration;
172 NDIS_802_11_NETWORK_INFRASTRUCTURE InfrastructureMode;
173 NDIS_802_11_RATES_EX SupportedRates;
174 ULONG IELength;
175 UCHAR IEs[1];
176 } NDIS_WLAN_BSSID_EX;
177
178 typedef struct NDIS_802_11_BSSID_LIST_EX {
179 ULONG NumberOfItems;
180 NDIS_WLAN_BSSID_EX Bssid[1];
181 } NDIS_802_11_BSSID_LIST_EX;
182
183 typedef struct NDIS_802_11_FIXED_IEs {
184 UCHAR Timestamp[8];
185 USHORT BeaconInterval;
186 USHORT Capabilities;
187 } NDIS_802_11_FIXED_IEs;
188
189 typedef struct NDIS_802_11_WEP {
190 ULONG Length;
191 ULONG KeyIndex;
192 ULONG KeyLength;
193 UCHAR KeyMaterial[1];
194 } NDIS_802_11_WEP;
195
196 typedef ULONG NDIS_802_11_KEY_INDEX;
197 typedef ULONGLONG NDIS_802_11_KEY_RSC;
198
199 typedef struct NDIS_802_11_KEY {
200 ULONG Length;
201 ULONG KeyIndex;
202 ULONG KeyLength;
203 NDIS_802_11_MAC_ADDRESS BSSID;
204 NDIS_802_11_KEY_RSC KeyRSC;
205 UCHAR KeyMaterial[1];
206 } NDIS_802_11_KEY;
207
208 typedef struct NDIS_802_11_REMOVE_KEY {
209 ULONG Length;
210 ULONG KeyIndex;
211 NDIS_802_11_MAC_ADDRESS BSSID;
212 } NDIS_802_11_REMOVE_KEY;
213
214 typedef struct NDIS_802_11_AI_REQFI {
215 USHORT Capabilities;
216 USHORT ListenInterval;
217 NDIS_802_11_MAC_ADDRESS CurrentAPAddress;
218 } NDIS_802_11_AI_REQFI;
219
220 typedef struct NDIS_802_11_AI_RESFI {
221 USHORT Capabilities;
222 USHORT StatusCode;
223 USHORT AssociationId;
224 } NDIS_802_11_AI_RESFI;
225
226 typedef struct NDIS_802_11_ASSOCIATION_INFORMATION {
227 ULONG Length;
228 USHORT AvailableRequestFixedIEs;
229 NDIS_802_11_AI_REQFI RequestFixedIEs;
230 ULONG RequestIELength;
231 ULONG OffsetRequestIEs;
232 USHORT AvailableResponseFixedIEs;
233 NDIS_802_11_AI_RESFI ResponseFixedIEs;
234 ULONG ResponseIELength;
235 ULONG OffsetResponseIEs;
236 } NDIS_802_11_ASSOCIATION_INFORMATION;
237
238 typedef struct NDIS_802_11_AUTHENTICATION_ENCRYPTION {
239 NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
240 NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
241 } NDIS_802_11_AUTHENTICATION_ENCRYPTION;
242
243 typedef struct NDIS_802_11_CAPABILITY {
244 ULONG Length;
245 ULONG Version;
246 ULONG NoOfPMKIDs;
247 ULONG NoOfAuthEncryptPairsSupported;
248 NDIS_802_11_AUTHENTICATION_ENCRYPTION
249 AuthenticationEncryptionSupported[1];
250 } NDIS_802_11_CAPABILITY;
251
252 typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
253
254 typedef struct BSSID_INFO {
255 NDIS_802_11_MAC_ADDRESS BSSID;
256 NDIS_802_11_PMKID_VALUE PMKID;
257 } BSSID_INFO;
258
259 typedef struct NDIS_802_11_PMKID {
260 ULONG Length;
261 ULONG BSSIDInfoCount;
262 BSSID_INFO BSSIDInfo[1];
263 } NDIS_802_11_PMKID;
264
265 typedef enum NDIS_802_11_STATUS_TYPE {
266 Ndis802_11StatusType_Authentication,
267 Ndis802_11StatusType_PMKID_CandidateList = 2,
268 Ndis802_11StatusTypeMax
269 } NDIS_802_11_STATUS_TYPE;
270
271 typedef struct NDIS_802_11_STATUS_INDICATION {
272 NDIS_802_11_STATUS_TYPE StatusType;
273 } NDIS_802_11_STATUS_INDICATION;
274
275 typedef struct PMKID_CANDIDATE {
276 NDIS_802_11_MAC_ADDRESS BSSID;
277 ULONG Flags;
278 } PMKID_CANDIDATE;
279
280 #define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
281
282 typedef struct NDIS_802_11_PMKID_CANDIDATE_LIST {
283 ULONG Version;
284 ULONG NumCandidates;
285 PMKID_CANDIDATE CandidateList[1];
286 } NDIS_802_11_PMKID_CANDIDATE_LIST;
287
288 typedef struct NDIS_802_11_AUTHENTICATION_REQUEST {
289 ULONG Length;
290 NDIS_802_11_MAC_ADDRESS Bssid;
291 ULONG Flags;
292 } NDIS_802_11_AUTHENTICATION_REQUEST;
293
294 #define NDIS_802_11_AUTH_REQUEST_REAUTH 0x01
295 #define NDIS_802_11_AUTH_REQUEST_KEYUPDATE 0x02
296 #define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR 0x06
297 #define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR 0x0E
298
299 #endif /* OID_802_11_BSSID */
300
301
302 #ifndef OID_802_11_PMKID
303 /* Platform SDK for XP did not include WPA2, so add needed definitions */
304
305 #define OID_802_11_CAPABILITY 0x0d010122
306 #define OID_802_11_PMKID 0x0d010123
307
308 #define Ndis802_11AuthModeWPA2 6
309 #define Ndis802_11AuthModeWPA2PSK 7
310
311 #define Ndis802_11StatusType_PMKID_CandidateList 2
312
313 typedef struct NDIS_802_11_AUTHENTICATION_ENCRYPTION {
314 NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
315 NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
316 } NDIS_802_11_AUTHENTICATION_ENCRYPTION;
317
318 typedef struct NDIS_802_11_CAPABILITY {
319 ULONG Length;
320 ULONG Version;
321 ULONG NoOfPMKIDs;
322 ULONG NoOfAuthEncryptPairsSupported;
323 NDIS_802_11_AUTHENTICATION_ENCRYPTION
324 AuthenticationEncryptionSupported[1];
325 } NDIS_802_11_CAPABILITY;
326
327 typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
328
329 typedef struct BSSID_INFO {
330 NDIS_802_11_MAC_ADDRESS BSSID;
331 NDIS_802_11_PMKID_VALUE PMKID;
332 } BSSID_INFO;
333
334 typedef struct NDIS_802_11_PMKID {
335 ULONG Length;
336 ULONG BSSIDInfoCount;
337 BSSID_INFO BSSIDInfo[1];
338 } NDIS_802_11_PMKID;
339
340 typedef struct PMKID_CANDIDATE {
341 NDIS_802_11_MAC_ADDRESS BSSID;
342 ULONG Flags;
343 } PMKID_CANDIDATE;
344
345 #define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
346
347 typedef struct NDIS_802_11_PMKID_CANDIDATE_LIST {
348 ULONG Version;
349 ULONG NumCandidates;
350 PMKID_CANDIDATE CandidateList[1];
351 } NDIS_802_11_PMKID_CANDIDATE_LIST;
352
353 #endif /* OID_802_11_CAPABILITY */
354
355
356 #ifndef OID_DOT11_CURRENT_OPERATION_MODE
357 /* Native 802.11 OIDs */
358 #define OID_DOT11_NDIS_START 0x0D010300
359 #define OID_DOT11_CURRENT_OPERATION_MODE (OID_DOT11_NDIS_START + 8)
360 #define OID_DOT11_SCAN_REQUEST (OID_DOT11_NDIS_START + 11)
361
362 typedef enum _DOT11_BSS_TYPE {
363 dot11_BSS_type_infrastructure = 1,
364 dot11_BSS_type_independent = 2,
365 dot11_BSS_type_any = 3
366 } DOT11_BSS_TYPE, * PDOT11_BSS_TYPE;
367
368 typedef UCHAR DOT11_MAC_ADDRESS[6];
369 typedef DOT11_MAC_ADDRESS * PDOT11_MAC_ADDRESS;
370
371 typedef enum _DOT11_SCAN_TYPE {
372 dot11_scan_type_active = 1,
373 dot11_scan_type_passive = 2,
374 dot11_scan_type_auto = 3,
375 dot11_scan_type_forced = 0x80000000
376 } DOT11_SCAN_TYPE, * PDOT11_SCAN_TYPE;
377
378 typedef struct _DOT11_SCAN_REQUEST_V2 {
379 DOT11_BSS_TYPE dot11BSSType;
380 DOT11_MAC_ADDRESS dot11BSSID;
381 DOT11_SCAN_TYPE dot11ScanType;
382 BOOLEAN bRestrictedScan;
383 ULONG udot11SSIDsOffset;
384 ULONG uNumOfdot11SSIDs;
385 BOOLEAN bUseRequestIE;
386 ULONG uRequestIDsOffset;
387 ULONG uNumOfRequestIDs;
388 ULONG uPhyTypeInfosOffset;
389 ULONG uNumOfPhyTypeInfos;
390 ULONG uIEsOffset;
391 ULONG uIEsLength;
392 UCHAR ucBuffer[1];
393 } DOT11_SCAN_REQUEST_V2, * PDOT11_SCAN_REQUEST_V2;
394
395 #endif /* OID_DOT11_CURRENT_OPERATION_MODE */
396
397 #ifdef CONFIG_USE_NDISUIO
398 #ifndef _WIN32_WCE
399 #ifdef __MINGW32_VERSION
400 typedef ULONG NDIS_OID;
401 #endif /* __MINGW32_VERSION */
402 /* from nuiouser.h */
403 #define FSCTL_NDISUIO_BASE FILE_DEVICE_NETWORK
404
405 #define _NDISUIO_CTL_CODE(_Function, _Method, _Access) \
406 CTL_CODE(FSCTL_NDISUIO_BASE, _Function, _Method, _Access)
407
408 #define IOCTL_NDISUIO_OPEN_DEVICE \
409 _NDISUIO_CTL_CODE(0x200, METHOD_BUFFERED, \
410 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
411
412 #define IOCTL_NDISUIO_QUERY_OID_VALUE \
413 _NDISUIO_CTL_CODE(0x201, METHOD_BUFFERED, \
414 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
415
416 #define IOCTL_NDISUIO_SET_OID_VALUE \
417 _NDISUIO_CTL_CODE(0x205, METHOD_BUFFERED, \
418 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
419
420 #define IOCTL_NDISUIO_SET_ETHER_TYPE \
421 _NDISUIO_CTL_CODE(0x202, METHOD_BUFFERED, \
422 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
423
424 #define IOCTL_NDISUIO_QUERY_BINDING \
425 _NDISUIO_CTL_CODE(0x203, METHOD_BUFFERED, \
426 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
427
428 #define IOCTL_NDISUIO_BIND_WAIT \
429 _NDISUIO_CTL_CODE(0x204, METHOD_BUFFERED, \
430 FILE_READ_ACCESS | FILE_WRITE_ACCESS)
431
432 typedef struct _NDISUIO_QUERY_OID
433 {
434 NDIS_OID Oid;
435 UCHAR Data[sizeof(ULONG)];
436 } NDISUIO_QUERY_OID, *PNDISUIO_QUERY_OID;
437
438 typedef struct _NDISUIO_SET_OID
439 {
440 NDIS_OID Oid;
441 UCHAR Data[sizeof(ULONG)];
442 } NDISUIO_SET_OID, *PNDISUIO_SET_OID;
443
444 typedef struct _NDISUIO_QUERY_BINDING
445 {
446 ULONG BindingIndex;
447 ULONG DeviceNameOffset;
448 ULONG DeviceNameLength;
449 ULONG DeviceDescrOffset;
450 ULONG DeviceDescrLength;
451 } NDISUIO_QUERY_BINDING, *PNDISUIO_QUERY_BINDING;
452 #endif /* _WIN32_WCE */
453 #endif /* CONFIG_USE_NDISUIO */
454
455
456 static int ndis_get_oid(struct wpa_driver_ndis_data *drv, unsigned int oid,
457 char *data, size_t len)
458 {
459 #ifdef CONFIG_USE_NDISUIO
460 NDISUIO_QUERY_OID *o;
461 size_t buflen = sizeof(*o) + len;
462 DWORD written;
463 int ret;
464 size_t hdrlen;
465
466 o = os_zalloc(buflen);
467 if (o == NULL)
468 return -1;
469 o->Oid = oid;
470 #ifdef _WIN32_WCE
471 o->ptcDeviceName = drv->adapter_name;
472 #endif /* _WIN32_WCE */
473 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_QUERY_OID_VALUE,
474 o, sizeof(NDISUIO_QUERY_OID), o, buflen, &written,
475 NULL)) {
476 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDISUIO_QUERY_OID_VALUE "
477 "failed (oid=%08x): %d", oid, (int) GetLastError());
478 os_free(o);
479 return -1;
480 }
481 hdrlen = sizeof(NDISUIO_QUERY_OID) - sizeof(o->Data);
482 if (written < hdrlen) {
483 wpa_printf(MSG_DEBUG, "NDIS: query oid=%08x written (%d); "
484 "too short", oid, (unsigned int) written);
485 os_free(o);
486 return -1;
487 }
488 written -= hdrlen;
489 if (written > len) {
490 wpa_printf(MSG_DEBUG, "NDIS: query oid=%08x written (%d) > "
491 "len (%d)",oid, (unsigned int) written, len);
492 os_free(o);
493 return -1;
494 }
495 os_memcpy(data, o->Data, written);
496 ret = written;
497 os_free(o);
498 return ret;
499 #else /* CONFIG_USE_NDISUIO */
500 char *buf;
501 PACKET_OID_DATA *o;
502 int ret;
503
504 buf = os_zalloc(sizeof(*o) + len);
505 if (buf == NULL)
506 return -1;
507 o = (PACKET_OID_DATA *) buf;
508 o->Oid = oid;
509 o->Length = len;
510
511 if (!PacketRequest(drv->adapter, FALSE, o)) {
512 wpa_printf(MSG_DEBUG, "%s: oid=0x%x len (%d) failed",
513 __func__, oid, len);
514 os_free(buf);
515 return -1;
516 }
517 if (o->Length > len) {
518 wpa_printf(MSG_DEBUG, "%s: oid=0x%x Length (%d) > len (%d)",
519 __func__, oid, (unsigned int) o->Length, len);
520 os_free(buf);
521 return -1;
522 }
523 os_memcpy(data, o->Data, o->Length);
524 ret = o->Length;
525 os_free(buf);
526 return ret;
527 #endif /* CONFIG_USE_NDISUIO */
528 }
529
530
531 static int ndis_set_oid(struct wpa_driver_ndis_data *drv, unsigned int oid,
532 const char *data, size_t len)
533 {
534 #ifdef CONFIG_USE_NDISUIO
535 NDISUIO_SET_OID *o;
536 size_t buflen, reallen;
537 DWORD written;
538 char txt[50];
539
540 os_snprintf(txt, sizeof(txt), "NDIS: Set OID %08x", oid);
541 wpa_hexdump_key(MSG_MSGDUMP, txt, (const u8 *) data, len);
542
543 buflen = sizeof(*o) + len;
544 reallen = buflen - sizeof(o->Data);
545 o = os_zalloc(buflen);
546 if (o == NULL)
547 return -1;
548 o->Oid = oid;
549 #ifdef _WIN32_WCE
550 o->ptcDeviceName = drv->adapter_name;
551 #endif /* _WIN32_WCE */
552 if (data)
553 os_memcpy(o->Data, data, len);
554 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_SET_OID_VALUE,
555 o, reallen, NULL, 0, &written, NULL)) {
556 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDISUIO_SET_OID_VALUE "
557 "(oid=%08x) failed: %d", oid, (int) GetLastError());
558 os_free(o);
559 return -1;
560 }
561 os_free(o);
562 return 0;
563 #else /* CONFIG_USE_NDISUIO */
564 char *buf;
565 PACKET_OID_DATA *o;
566 char txt[50];
567
568 os_snprintf(txt, sizeof(txt), "NDIS: Set OID %08x", oid);
569 wpa_hexdump_key(MSG_MSGDUMP, txt, (const u8 *) data, len);
570
571 buf = os_zalloc(sizeof(*o) + len);
572 if (buf == NULL)
573 return -1;
574 o = (PACKET_OID_DATA *) buf;
575 o->Oid = oid;
576 o->Length = len;
577 if (data)
578 os_memcpy(o->Data, data, len);
579
580 if (!PacketRequest(drv->adapter, TRUE, o)) {
581 wpa_printf(MSG_DEBUG, "%s: oid=0x%x len (%d) failed",
582 __func__, oid, len);
583 os_free(buf);
584 return -1;
585 }
586 os_free(buf);
587 return 0;
588 #endif /* CONFIG_USE_NDISUIO */
589 }
590
591
592 static int ndis_set_auth_mode(struct wpa_driver_ndis_data *drv, int mode)
593 {
594 u32 auth_mode = mode;
595 if (ndis_set_oid(drv, OID_802_11_AUTHENTICATION_MODE,
596 (char *) &auth_mode, sizeof(auth_mode)) < 0) {
597 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
598 "OID_802_11_AUTHENTICATION_MODE (%d)",
599 (int) auth_mode);
600 return -1;
601 }
602 return 0;
603 }
604
605
606 static int ndis_get_auth_mode(struct wpa_driver_ndis_data *drv)
607 {
608 u32 auth_mode;
609 int res;
610 res = ndis_get_oid(drv, OID_802_11_AUTHENTICATION_MODE,
611 (char *) &auth_mode, sizeof(auth_mode));
612 if (res != sizeof(auth_mode)) {
613 wpa_printf(MSG_DEBUG, "NDIS: Failed to get "
614 "OID_802_11_AUTHENTICATION_MODE");
615 return -1;
616 }
617 return auth_mode;
618 }
619
620
621 static int ndis_set_encr_status(struct wpa_driver_ndis_data *drv, int encr)
622 {
623 u32 encr_status = encr;
624 if (ndis_set_oid(drv, OID_802_11_ENCRYPTION_STATUS,
625 (char *) &encr_status, sizeof(encr_status)) < 0) {
626 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
627 "OID_802_11_ENCRYPTION_STATUS (%d)", encr);
628 return -1;
629 }
630 return 0;
631 }
632
633
634 static int ndis_get_encr_status(struct wpa_driver_ndis_data *drv)
635 {
636 u32 encr;
637 int res;
638 res = ndis_get_oid(drv, OID_802_11_ENCRYPTION_STATUS,
639 (char *) &encr, sizeof(encr));
640 if (res != sizeof(encr)) {
641 wpa_printf(MSG_DEBUG, "NDIS: Failed to get "
642 "OID_802_11_ENCRYPTION_STATUS");
643 return -1;
644 }
645 return encr;
646 }
647
648
649 static int wpa_driver_ndis_get_bssid(void *priv, u8 *bssid)
650 {
651 struct wpa_driver_ndis_data *drv = priv;
652
653 if (drv->wired) {
654 /*
655 * Report PAE group address as the "BSSID" for wired
656 * connection.
657 */
658 os_memcpy(bssid, pae_group_addr, ETH_ALEN);
659 return 0;
660 }
661
662 return ndis_get_oid(drv, OID_802_11_BSSID, (char *) bssid, ETH_ALEN) <
663 0 ? -1 : 0;
664 }
665
666
667 static int wpa_driver_ndis_get_ssid(void *priv, u8 *ssid)
668 {
669 struct wpa_driver_ndis_data *drv = priv;
670 NDIS_802_11_SSID buf;
671 int res;
672
673 res = ndis_get_oid(drv, OID_802_11_SSID, (char *) &buf, sizeof(buf));
674 if (res < 4) {
675 wpa_printf(MSG_DEBUG, "NDIS: Failed to get SSID");
676 if (drv->wired) {
677 wpa_printf(MSG_DEBUG, "NDIS: Allow get_ssid failure "
678 "with a wired interface");
679 return 0;
680 }
681 return -1;
682 }
683 os_memcpy(ssid, buf.Ssid, buf.SsidLength);
684 return buf.SsidLength;
685 }
686
687
688 static int wpa_driver_ndis_set_ssid(struct wpa_driver_ndis_data *drv,
689 const u8 *ssid, size_t ssid_len)
690 {
691 NDIS_802_11_SSID buf;
692
693 os_memset(&buf, 0, sizeof(buf));
694 buf.SsidLength = ssid_len;
695 os_memcpy(buf.Ssid, ssid, ssid_len);
696 /*
697 * Make sure radio is marked enabled here so that scan request will not
698 * force SSID to be changed to a random one in order to enable radio at
699 * that point.
700 */
701 drv->radio_enabled = 1;
702 return ndis_set_oid(drv, OID_802_11_SSID, (char *) &buf, sizeof(buf));
703 }
704
705
706 /* Disconnect using OID_802_11_DISASSOCIATE. This will also turn the radio off.
707 */
708 static int wpa_driver_ndis_radio_off(struct wpa_driver_ndis_data *drv)
709 {
710 drv->radio_enabled = 0;
711 return ndis_set_oid(drv, OID_802_11_DISASSOCIATE, " ", 4);
712 }
713
714
715 /* Disconnect by setting SSID to random (i.e., likely not used). */
716 static int wpa_driver_ndis_disconnect(struct wpa_driver_ndis_data *drv)
717 {
718 char ssid[32];
719 int i;
720 for (i = 0; i < 32; i++)
721 ssid[i] = rand() & 0xff;
722 return wpa_driver_ndis_set_ssid(drv, (u8 *) ssid, 32);
723 }
724
725
726 static int wpa_driver_ndis_deauthenticate(void *priv, const u8 *addr,
727 int reason_code)
728 {
729 struct wpa_driver_ndis_data *drv = priv;
730 return wpa_driver_ndis_disconnect(drv);
731 }
732
733
734 static int wpa_driver_ndis_disassociate(void *priv, const u8 *addr,
735 int reason_code)
736 {
737 struct wpa_driver_ndis_data *drv = priv;
738 return wpa_driver_ndis_disconnect(drv);
739 }
740
741
742 static void wpa_driver_ndis_scan_timeout(void *eloop_ctx, void *timeout_ctx)
743 {
744 wpa_printf(MSG_DEBUG, "Scan timeout - try to get results");
745 wpa_supplicant_event(timeout_ctx, EVENT_SCAN_RESULTS, NULL);
746 }
747
748
749 static int wpa_driver_ndis_scan_native80211(
750 struct wpa_driver_ndis_data *drv,
751 struct wpa_driver_scan_params *params)
752 {
753 DOT11_SCAN_REQUEST_V2 req;
754 int res;
755
756 os_memset(&req, 0, sizeof(req));
757 req.dot11BSSType = dot11_BSS_type_any;
758 os_memset(req.dot11BSSID, 0xff, ETH_ALEN);
759 req.dot11ScanType = dot11_scan_type_auto;
760 res = ndis_set_oid(drv, OID_DOT11_SCAN_REQUEST, (char *) &req,
761 sizeof(req));
762 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
763 eloop_register_timeout(7, 0, wpa_driver_ndis_scan_timeout, drv,
764 drv->ctx);
765 return res;
766 }
767
768
769 static int wpa_driver_ndis_scan(void *priv,
770 struct wpa_driver_scan_params *params)
771 {
772 struct wpa_driver_ndis_data *drv = priv;
773 int res;
774
775 if (drv->native80211)
776 return wpa_driver_ndis_scan_native80211(drv, params);
777
778 if (!drv->radio_enabled) {
779 wpa_printf(MSG_DEBUG, "NDIS: turning radio on before the first"
780 " scan");
781 if (wpa_driver_ndis_disconnect(drv) < 0) {
782 wpa_printf(MSG_DEBUG, "NDIS: failed to enable radio");
783 }
784 drv->radio_enabled = 1;
785 }
786
787 res = ndis_set_oid(drv, OID_802_11_BSSID_LIST_SCAN, " ", 4);
788 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
789 eloop_register_timeout(7, 0, wpa_driver_ndis_scan_timeout, drv,
790 drv->ctx);
791 return res;
792 }
793
794
795 static struct wpa_scan_res * wpa_driver_ndis_add_scan_ssid(
796 struct wpa_scan_res *r, NDIS_802_11_SSID *ssid)
797 {
798 struct wpa_scan_res *nr;
799 u8 *pos;
800
801 if (wpa_scan_get_ie(r, WLAN_EID_SSID))
802 return r; /* SSID IE already present */
803
804 if (ssid->SsidLength == 0 || ssid->SsidLength > 32)
805 return r; /* No valid SSID inside scan data */
806
807 nr = os_realloc(r, sizeof(*r) + r->ie_len + 2 + ssid->SsidLength);
808 if (nr == NULL)
809 return r;
810
811 pos = ((u8 *) (nr + 1)) + nr->ie_len;
812 *pos++ = WLAN_EID_SSID;
813 *pos++ = ssid->SsidLength;
814 os_memcpy(pos, ssid->Ssid, ssid->SsidLength);
815 nr->ie_len += 2 + ssid->SsidLength;
816
817 return nr;
818 }
819
820
821 static struct wpa_scan_results * wpa_driver_ndis_get_scan_results(void *priv)
822 {
823 struct wpa_driver_ndis_data *drv = priv;
824 NDIS_802_11_BSSID_LIST_EX *b;
825 size_t blen, count, i;
826 int len;
827 char *pos;
828 struct wpa_scan_results *results;
829 struct wpa_scan_res *r;
830
831 blen = 65535;
832 b = os_zalloc(blen);
833 if (b == NULL)
834 return NULL;
835 len = ndis_get_oid(drv, OID_802_11_BSSID_LIST, (char *) b, blen);
836 if (len < 0) {
837 wpa_printf(MSG_DEBUG, "NDIS: failed to get scan results");
838 os_free(b);
839 return NULL;
840 }
841 count = b->NumberOfItems;
842
843 results = os_zalloc(sizeof(*results));
844 if (results == NULL) {
845 os_free(b);
846 return NULL;
847 }
848 results->res = os_zalloc(count * sizeof(struct wpa_scan_res *));
849 if (results->res == NULL) {
850 os_free(results);
851 os_free(b);
852 return NULL;
853 }
854
855 pos = (char *) &b->Bssid[0];
856 for (i = 0; i < count; i++) {
857 NDIS_WLAN_BSSID_EX *bss = (NDIS_WLAN_BSSID_EX *) pos;
858 NDIS_802_11_FIXED_IEs *fixed;
859
860 if (bss->IELength < sizeof(NDIS_802_11_FIXED_IEs)) {
861 wpa_printf(MSG_DEBUG, "NDIS: too small IELength=%d",
862 (int) bss->IELength);
863 break;
864 }
865 if (((char *) bss->IEs) + bss->IELength > (char *) b + blen) {
866 /*
867 * Some NDIS drivers have been reported to include an
868 * entry with an invalid IELength in scan results and
869 * this has crashed wpa_supplicant, so validate the
870 * returned value before using it.
871 */
872 wpa_printf(MSG_DEBUG, "NDIS: skipped invalid scan "
873 "result IE (BSSID=" MACSTR ") IELength=%d",
874 MAC2STR(bss->MacAddress),
875 (int) bss->IELength);
876 break;
877 }
878
879 r = os_zalloc(sizeof(*r) + bss->IELength -
880 sizeof(NDIS_802_11_FIXED_IEs));
881 if (r == NULL)
882 break;
883
884 os_memcpy(r->bssid, bss->MacAddress, ETH_ALEN);
885 r->level = (int) bss->Rssi;
886 r->freq = bss->Configuration.DSConfig / 1000;
887 fixed = (NDIS_802_11_FIXED_IEs *) bss->IEs;
888 r->beacon_int = WPA_GET_LE16((u8 *) &fixed->BeaconInterval);
889 r->caps = WPA_GET_LE16((u8 *) &fixed->Capabilities);
890 r->tsf = WPA_GET_LE64(fixed->Timestamp);
891 os_memcpy(r + 1, bss->IEs + sizeof(NDIS_802_11_FIXED_IEs),
892 bss->IELength - sizeof(NDIS_802_11_FIXED_IEs));
893 r->ie_len = bss->IELength - sizeof(NDIS_802_11_FIXED_IEs);
894 r = wpa_driver_ndis_add_scan_ssid(r, &bss->Ssid);
895
896 results->res[results->num++] = r;
897
898 pos += bss->Length;
899 if (pos > (char *) b + blen)
900 break;
901 }
902
903 os_free(b);
904
905 return results;
906 }
907
908
909 static int wpa_driver_ndis_remove_key(struct wpa_driver_ndis_data *drv,
910 int key_idx, const u8 *addr,
911 const u8 *bssid, int pairwise)
912 {
913 NDIS_802_11_REMOVE_KEY rkey;
914 NDIS_802_11_KEY_INDEX index;
915 int res, res2;
916
917 os_memset(&rkey, 0, sizeof(rkey));
918
919 rkey.Length = sizeof(rkey);
920 rkey.KeyIndex = key_idx;
921 if (pairwise)
922 rkey.KeyIndex |= 1 << 30;
923 os_memcpy(rkey.BSSID, bssid, ETH_ALEN);
924
925 res = ndis_set_oid(drv, OID_802_11_REMOVE_KEY, (char *) &rkey,
926 sizeof(rkey));
927 if (!pairwise) {
928 index = key_idx;
929 res2 = ndis_set_oid(drv, OID_802_11_REMOVE_WEP,
930 (char *) &index, sizeof(index));
931 } else
932 res2 = 0;
933
934 if (res < 0 && res2 < 0)
935 return -1;
936 return 0;
937 }
938
939
940 static int wpa_driver_ndis_add_wep(struct wpa_driver_ndis_data *drv,
941 int pairwise, int key_idx, int set_tx,
942 const u8 *key, size_t key_len)
943 {
944 NDIS_802_11_WEP *wep;
945 size_t len;
946 int res;
947
948 len = 12 + key_len;
949 wep = os_zalloc(len);
950 if (wep == NULL)
951 return -1;
952 wep->Length = len;
953 wep->KeyIndex = key_idx;
954 if (set_tx)
955 wep->KeyIndex |= 1 << 31;
956 #if 0 /* Setting bit30 does not seem to work with some NDIS drivers */
957 if (pairwise)
958 wep->KeyIndex |= 1 << 30;
959 #endif
960 wep->KeyLength = key_len;
961 os_memcpy(wep->KeyMaterial, key, key_len);
962
963 wpa_hexdump_key(MSG_MSGDUMP, "NDIS: OID_802_11_ADD_WEP",
964 (u8 *) wep, len);
965 res = ndis_set_oid(drv, OID_802_11_ADD_WEP, (char *) wep, len);
966
967 os_free(wep);
968
969 return res;
970 }
971
972
973 static int wpa_driver_ndis_set_key(const char *ifname, void *priv,
974 enum wpa_alg alg, const u8 *addr,
975 int key_idx, int set_tx,
976 const u8 *seq, size_t seq_len,
977 const u8 *key, size_t key_len)
978 {
979 struct wpa_driver_ndis_data *drv = priv;
980 size_t len, i;
981 NDIS_802_11_KEY *nkey;
982 int res, pairwise;
983 u8 bssid[ETH_ALEN];
984
985 if (addr == NULL || os_memcmp(addr, "\xff\xff\xff\xff\xff\xff",
986 ETH_ALEN) == 0) {
987 /* Group Key */
988 pairwise = 0;
989 if (wpa_driver_ndis_get_bssid(drv, bssid) < 0)
990 os_memset(bssid, 0xff, ETH_ALEN);
991 } else {
992 /* Pairwise Key */
993 pairwise = 1;
994 os_memcpy(bssid, addr, ETH_ALEN);
995 }
996
997 if (alg == WPA_ALG_NONE || key_len == 0) {
998 return wpa_driver_ndis_remove_key(drv, key_idx, addr, bssid,
999 pairwise);
1000 }
1001
1002 if (alg == WPA_ALG_WEP) {
1003 return wpa_driver_ndis_add_wep(drv, pairwise, key_idx, set_tx,
1004 key, key_len);
1005 }
1006
1007 len = 12 + 6 + 6 + 8 + key_len;
1008
1009 nkey = os_zalloc(len);
1010 if (nkey == NULL)
1011 return -1;
1012
1013 nkey->Length = len;
1014 nkey->KeyIndex = key_idx;
1015 if (set_tx)
1016 nkey->KeyIndex |= 1 << 31;
1017 if (pairwise)
1018 nkey->KeyIndex |= 1 << 30;
1019 if (seq && seq_len)
1020 nkey->KeyIndex |= 1 << 29;
1021 nkey->KeyLength = key_len;
1022 os_memcpy(nkey->BSSID, bssid, ETH_ALEN);
1023 if (seq && seq_len) {
1024 for (i = 0; i < seq_len; i++)
1025 nkey->KeyRSC |= (ULONGLONG) seq[i] << (i * 8);
1026 }
1027 if (alg == WPA_ALG_TKIP && key_len == 32) {
1028 os_memcpy(nkey->KeyMaterial, key, 16);
1029 os_memcpy(nkey->KeyMaterial + 16, key + 24, 8);
1030 os_memcpy(nkey->KeyMaterial + 24, key + 16, 8);
1031 } else {
1032 os_memcpy(nkey->KeyMaterial, key, key_len);
1033 }
1034
1035 wpa_hexdump_key(MSG_MSGDUMP, "NDIS: OID_802_11_ADD_KEY",
1036 (u8 *) nkey, len);
1037 res = ndis_set_oid(drv, OID_802_11_ADD_KEY, (char *) nkey, len);
1038 os_free(nkey);
1039
1040 return res;
1041 }
1042
1043
1044 static int
1045 wpa_driver_ndis_associate(void *priv,
1046 struct wpa_driver_associate_params *params)
1047 {
1048 struct wpa_driver_ndis_data *drv = priv;
1049 u32 auth_mode, encr, priv_mode, mode;
1050
1051 drv->mode = params->mode;
1052
1053 /* Note: Setting OID_802_11_INFRASTRUCTURE_MODE clears current keys,
1054 * so static WEP keys needs to be set again after this. */
1055 if (params->mode == IEEE80211_MODE_IBSS) {
1056 mode = Ndis802_11IBSS;
1057 /* Need to make sure that BSSID polling is enabled for
1058 * IBSS mode. */
1059 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
1060 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout,
1061 drv, NULL);
1062 } else
1063 mode = Ndis802_11Infrastructure;
1064 if (ndis_set_oid(drv, OID_802_11_INFRASTRUCTURE_MODE,
1065 (char *) &mode, sizeof(mode)) < 0) {
1066 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
1067 "OID_802_11_INFRASTRUCTURE_MODE (%d)",
1068 (int) mode);
1069 /* Try to continue anyway */
1070 }
1071
1072 if (params->key_mgmt_suite == KEY_MGMT_NONE ||
1073 params->key_mgmt_suite == KEY_MGMT_802_1X_NO_WPA) {
1074 /* Re-set WEP keys if static WEP configuration is used. */
1075 u8 bcast[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
1076 int i;
1077 for (i = 0; i < 4; i++) {
1078 if (!params->wep_key[i])
1079 continue;
1080 wpa_printf(MSG_DEBUG, "NDIS: Re-setting static WEP "
1081 "key %d", i);
1082 wpa_driver_ndis_set_key(drv->ifname, drv, WPA_ALG_WEP,
1083 bcast, i,
1084 i == params->wep_tx_keyidx,
1085 NULL, 0, params->wep_key[i],
1086 params->wep_key_len[i]);
1087 }
1088 }
1089
1090 if (params->wpa_ie == NULL || params->wpa_ie_len == 0) {
1091 if (params->auth_alg & AUTH_ALG_SHARED_KEY) {
1092 if (params->auth_alg & AUTH_ALG_OPEN_SYSTEM)
1093 auth_mode = Ndis802_11AuthModeAutoSwitch;
1094 else
1095 auth_mode = Ndis802_11AuthModeShared;
1096 } else
1097 auth_mode = Ndis802_11AuthModeOpen;
1098 priv_mode = Ndis802_11PrivFilterAcceptAll;
1099 } else if (params->wpa_ie[0] == WLAN_EID_RSN) {
1100 priv_mode = Ndis802_11PrivFilter8021xWEP;
1101 if (params->key_mgmt_suite == KEY_MGMT_PSK)
1102 auth_mode = Ndis802_11AuthModeWPA2PSK;
1103 else
1104 auth_mode = Ndis802_11AuthModeWPA2;
1105 #ifdef CONFIG_WPS
1106 } else if (params->key_mgmt_suite == KEY_MGMT_WPS) {
1107 auth_mode = Ndis802_11AuthModeOpen;
1108 priv_mode = Ndis802_11PrivFilterAcceptAll;
1109 #endif /* CONFIG_WPS */
1110 } else {
1111 priv_mode = Ndis802_11PrivFilter8021xWEP;
1112 if (params->key_mgmt_suite == KEY_MGMT_WPA_NONE)
1113 auth_mode = Ndis802_11AuthModeWPANone;
1114 else if (params->key_mgmt_suite == KEY_MGMT_PSK)
1115 auth_mode = Ndis802_11AuthModeWPAPSK;
1116 else
1117 auth_mode = Ndis802_11AuthModeWPA;
1118 }
1119
1120 switch (params->pairwise_suite) {
1121 case CIPHER_CCMP:
1122 encr = Ndis802_11Encryption3Enabled;
1123 break;
1124 case CIPHER_TKIP:
1125 encr = Ndis802_11Encryption2Enabled;
1126 break;
1127 case CIPHER_WEP40:
1128 case CIPHER_WEP104:
1129 encr = Ndis802_11Encryption1Enabled;
1130 break;
1131 case CIPHER_NONE:
1132 if (params->group_suite == CIPHER_CCMP)
1133 encr = Ndis802_11Encryption3Enabled;
1134 else if (params->group_suite == CIPHER_TKIP)
1135 encr = Ndis802_11Encryption2Enabled;
1136 else
1137 encr = Ndis802_11EncryptionDisabled;
1138 break;
1139 default:
1140 encr = Ndis802_11EncryptionDisabled;
1141 };
1142
1143 if (ndis_set_oid(drv, OID_802_11_PRIVACY_FILTER,
1144 (char *) &priv_mode, sizeof(priv_mode)) < 0) {
1145 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
1146 "OID_802_11_PRIVACY_FILTER (%d)",
1147 (int) priv_mode);
1148 /* Try to continue anyway */
1149 }
1150
1151 ndis_set_auth_mode(drv, auth_mode);
1152 ndis_set_encr_status(drv, encr);
1153
1154 if (params->bssid) {
1155 ndis_set_oid(drv, OID_802_11_BSSID, (char *) params->bssid,
1156 ETH_ALEN);
1157 drv->oid_bssid_set = 1;
1158 } else if (drv->oid_bssid_set) {
1159 ndis_set_oid(drv, OID_802_11_BSSID, "\xff\xff\xff\xff\xff\xff",
1160 ETH_ALEN);
1161 drv->oid_bssid_set = 0;
1162 }
1163
1164 return wpa_driver_ndis_set_ssid(drv, params->ssid, params->ssid_len);
1165 }
1166
1167
1168 static int wpa_driver_ndis_set_pmkid(struct wpa_driver_ndis_data *drv)
1169 {
1170 int len, count, i, ret;
1171 struct ndis_pmkid_entry *entry;
1172 NDIS_802_11_PMKID *p;
1173
1174 count = 0;
1175 entry = drv->pmkid;
1176 while (entry) {
1177 count++;
1178 if (count >= drv->no_of_pmkid)
1179 break;
1180 entry = entry->next;
1181 }
1182 len = 8 + count * sizeof(BSSID_INFO);
1183 p = os_zalloc(len);
1184 if (p == NULL)
1185 return -1;
1186
1187 p->Length = len;
1188 p->BSSIDInfoCount = count;
1189 entry = drv->pmkid;
1190 for (i = 0; i < count; i++) {
1191 os_memcpy(&p->BSSIDInfo[i].BSSID, entry->bssid, ETH_ALEN);
1192 os_memcpy(&p->BSSIDInfo[i].PMKID, entry->pmkid, 16);
1193 entry = entry->next;
1194 }
1195 wpa_hexdump(MSG_MSGDUMP, "NDIS: OID_802_11_PMKID", (u8 *) p, len);
1196 ret = ndis_set_oid(drv, OID_802_11_PMKID, (char *) p, len);
1197 os_free(p);
1198 return ret;
1199 }
1200
1201
1202 static int wpa_driver_ndis_add_pmkid(void *priv, const u8 *bssid,
1203 const u8 *pmkid)
1204 {
1205 struct wpa_driver_ndis_data *drv = priv;
1206 struct ndis_pmkid_entry *entry, *prev;
1207
1208 if (drv->no_of_pmkid == 0)
1209 return 0;
1210
1211 prev = NULL;
1212 entry = drv->pmkid;
1213 while (entry) {
1214 if (os_memcmp(entry->bssid, bssid, ETH_ALEN) == 0)
1215 break;
1216 prev = entry;
1217 entry = entry->next;
1218 }
1219
1220 if (entry) {
1221 /* Replace existing entry for this BSSID and move it into the
1222 * beginning of the list. */
1223 os_memcpy(entry->pmkid, pmkid, 16);
1224 if (prev) {
1225 prev->next = entry->next;
1226 entry->next = drv->pmkid;
1227 drv->pmkid = entry;
1228 }
1229 } else {
1230 entry = os_malloc(sizeof(*entry));
1231 if (entry) {
1232 os_memcpy(entry->bssid, bssid, ETH_ALEN);
1233 os_memcpy(entry->pmkid, pmkid, 16);
1234 entry->next = drv->pmkid;
1235 drv->pmkid = entry;
1236 }
1237 }
1238
1239 return wpa_driver_ndis_set_pmkid(drv);
1240 }
1241
1242
1243 static int wpa_driver_ndis_remove_pmkid(void *priv, const u8 *bssid,
1244 const u8 *pmkid)
1245 {
1246 struct wpa_driver_ndis_data *drv = priv;
1247 struct ndis_pmkid_entry *entry, *prev;
1248
1249 if (drv->no_of_pmkid == 0)
1250 return 0;
1251
1252 entry = drv->pmkid;
1253 prev = NULL;
1254 while (entry) {
1255 if (os_memcmp(entry->bssid, bssid, ETH_ALEN) == 0 &&
1256 os_memcmp(entry->pmkid, pmkid, 16) == 0) {
1257 if (prev)
1258 prev->next = entry->next;
1259 else
1260 drv->pmkid = entry->next;
1261 os_free(entry);
1262 break;
1263 }
1264 prev = entry;
1265 entry = entry->next;
1266 }
1267 return wpa_driver_ndis_set_pmkid(drv);
1268 }
1269
1270
1271 static int wpa_driver_ndis_flush_pmkid(void *priv)
1272 {
1273 struct wpa_driver_ndis_data *drv = priv;
1274 NDIS_802_11_PMKID p;
1275 struct ndis_pmkid_entry *pmkid, *prev;
1276 int prev_authmode, ret;
1277
1278 if (drv->no_of_pmkid == 0)
1279 return 0;
1280
1281 pmkid = drv->pmkid;
1282 drv->pmkid = NULL;
1283 while (pmkid) {
1284 prev = pmkid;
1285 pmkid = pmkid->next;
1286 os_free(prev);
1287 }
1288
1289 /*
1290 * Some drivers may refuse OID_802_11_PMKID if authMode is not set to
1291 * WPA2, so change authMode temporarily, if needed.
1292 */
1293 prev_authmode = ndis_get_auth_mode(drv);
1294 if (prev_authmode != Ndis802_11AuthModeWPA2)
1295 ndis_set_auth_mode(drv, Ndis802_11AuthModeWPA2);
1296
1297 os_memset(&p, 0, sizeof(p));
1298 p.Length = 8;
1299 p.BSSIDInfoCount = 0;
1300 wpa_hexdump(MSG_MSGDUMP, "NDIS: OID_802_11_PMKID (flush)",
1301 (u8 *) &p, 8);
1302 ret = ndis_set_oid(drv, OID_802_11_PMKID, (char *) &p, 8);
1303
1304 if (prev_authmode != Ndis802_11AuthModeWPA2)
1305 ndis_set_auth_mode(drv, prev_authmode);
1306
1307 return ret;
1308 }
1309
1310
1311 static int wpa_driver_ndis_get_associnfo(struct wpa_driver_ndis_data *drv)
1312 {
1313 char buf[512], *pos;
1314 NDIS_802_11_ASSOCIATION_INFORMATION *ai;
1315 int len;
1316 union wpa_event_data data;
1317 NDIS_802_11_BSSID_LIST_EX *b;
1318 size_t blen, i;
1319
1320 len = ndis_get_oid(drv, OID_802_11_ASSOCIATION_INFORMATION, buf,
1321 sizeof(buf));
1322 if (len < 0) {
1323 wpa_printf(MSG_DEBUG, "NDIS: failed to get association "
1324 "information");
1325 return -1;
1326 }
1327 if (len > sizeof(buf)) {
1328 /* Some drivers seem to be producing incorrect length for this
1329 * data. Limit the length to the current buffer size to avoid
1330 * crashing in hexdump. The data seems to be otherwise valid,
1331 * so better try to use it. */
1332 wpa_printf(MSG_DEBUG, "NDIS: ignored bogus association "
1333 "information length %d", len);
1334 len = ndis_get_oid(drv, OID_802_11_ASSOCIATION_INFORMATION,
1335 buf, sizeof(buf));
1336 if (len < -1) {
1337 wpa_printf(MSG_DEBUG, "NDIS: re-reading association "
1338 "information failed");
1339 return -1;
1340 }
1341 if (len > sizeof(buf)) {
1342 wpa_printf(MSG_DEBUG, "NDIS: ignored bogus association"
1343 " information length %d (re-read)", len);
1344 len = sizeof(buf);
1345 }
1346 }
1347 wpa_hexdump(MSG_MSGDUMP, "NDIS: association information",
1348 (u8 *) buf, len);
1349 if (len < sizeof(*ai)) {
1350 wpa_printf(MSG_DEBUG, "NDIS: too short association "
1351 "information");
1352 return -1;
1353 }
1354 ai = (NDIS_802_11_ASSOCIATION_INFORMATION *) buf;
1355 wpa_printf(MSG_DEBUG, "NDIS: ReqFixed=0x%x RespFixed=0x%x off_req=%d "
1356 "off_resp=%d len_req=%d len_resp=%d",
1357 ai->AvailableRequestFixedIEs, ai->AvailableResponseFixedIEs,
1358 (int) ai->OffsetRequestIEs, (int) ai->OffsetResponseIEs,
1359 (int) ai->RequestIELength, (int) ai->ResponseIELength);
1360
1361 if (ai->OffsetRequestIEs + ai->RequestIELength > (unsigned) len ||
1362 ai->OffsetResponseIEs + ai->ResponseIELength > (unsigned) len) {
1363 wpa_printf(MSG_DEBUG, "NDIS: association information - "
1364 "IE overflow");
1365 return -1;
1366 }
1367
1368 wpa_hexdump(MSG_MSGDUMP, "NDIS: Request IEs",
1369 (u8 *) buf + ai->OffsetRequestIEs, ai->RequestIELength);
1370 wpa_hexdump(MSG_MSGDUMP, "NDIS: Response IEs",
1371 (u8 *) buf + ai->OffsetResponseIEs, ai->ResponseIELength);
1372
1373 os_memset(&data, 0, sizeof(data));
1374 data.assoc_info.req_ies = (u8 *) buf + ai->OffsetRequestIEs;
1375 data.assoc_info.req_ies_len = ai->RequestIELength;
1376 data.assoc_info.resp_ies = (u8 *) buf + ai->OffsetResponseIEs;
1377 data.assoc_info.resp_ies_len = ai->ResponseIELength;
1378
1379 blen = 65535;
1380 b = os_zalloc(blen);
1381 if (b == NULL)
1382 goto skip_scan_results;
1383 len = ndis_get_oid(drv, OID_802_11_BSSID_LIST, (char *) b, blen);
1384 if (len < 0) {
1385 wpa_printf(MSG_DEBUG, "NDIS: failed to get scan results");
1386 os_free(b);
1387 b = NULL;
1388 goto skip_scan_results;
1389 }
1390 wpa_printf(MSG_DEBUG, "NDIS: %d BSSID items to process for AssocInfo",
1391 (unsigned int) b->NumberOfItems);
1392
1393 pos = (char *) &b->Bssid[0];
1394 for (i = 0; i < b->NumberOfItems; i++) {
1395 NDIS_WLAN_BSSID_EX *bss = (NDIS_WLAN_BSSID_EX *) pos;
1396 if (os_memcmp(drv->bssid, bss->MacAddress, ETH_ALEN) == 0 &&
1397 bss->IELength > sizeof(NDIS_802_11_FIXED_IEs)) {
1398 data.assoc_info.beacon_ies =
1399 ((u8 *) bss->IEs) +
1400 sizeof(NDIS_802_11_FIXED_IEs);
1401 data.assoc_info.beacon_ies_len =
1402 bss->IELength - sizeof(NDIS_802_11_FIXED_IEs);
1403 wpa_hexdump(MSG_MSGDUMP, "NDIS: Beacon IEs",
1404 data.assoc_info.beacon_ies,
1405 data.assoc_info.beacon_ies_len);
1406 break;
1407 }
1408 pos += bss->Length;
1409 if (pos > (char *) b + blen)
1410 break;
1411 }
1412
1413 skip_scan_results:
1414 wpa_supplicant_event(drv->ctx, EVENT_ASSOCINFO, &data);
1415
1416 os_free(b);
1417
1418 return 0;
1419 }
1420
1421
1422 static void wpa_driver_ndis_poll_timeout(void *eloop_ctx, void *timeout_ctx)
1423 {
1424 struct wpa_driver_ndis_data *drv = eloop_ctx;
1425 u8 bssid[ETH_ALEN];
1426 int poll;
1427
1428 if (drv->wired)
1429 return;
1430
1431 if (wpa_driver_ndis_get_bssid(drv, bssid)) {
1432 /* Disconnected */
1433 if (!is_zero_ether_addr(drv->bssid)) {
1434 os_memset(drv->bssid, 0, ETH_ALEN);
1435 wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1436 }
1437 } else {
1438 /* Connected */
1439 if (os_memcmp(drv->bssid, bssid, ETH_ALEN) != 0) {
1440 os_memcpy(drv->bssid, bssid, ETH_ALEN);
1441 wpa_driver_ndis_get_associnfo(drv);
1442 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1443 }
1444 }
1445
1446 /* When using integrated NDIS event receiver, we can skip BSSID
1447 * polling when using infrastructure network. However, when using
1448 * IBSS mode, many driver do not seem to generate connection event,
1449 * so we need to enable BSSID polling to figure out when IBSS network
1450 * has been formed.
1451 */
1452 poll = drv->mode == IEEE80211_MODE_IBSS;
1453 #ifndef CONFIG_NDIS_EVENTS_INTEGRATED
1454 #ifndef _WIN32_WCE
1455 poll = 1;
1456 #endif /* _WIN32_WCE */
1457 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
1458
1459 if (poll) {
1460 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout,
1461 drv, NULL);
1462 }
1463 }
1464
1465
1466 static void wpa_driver_ndis_poll(void *priv)
1467 {
1468 struct wpa_driver_ndis_data *drv = priv;
1469 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
1470 wpa_driver_ndis_poll_timeout(drv, NULL);
1471 }
1472
1473
1474 /* Called when driver generates Media Connect Event by calling
1475 * NdisMIndicateStatus() with NDIS_STATUS_MEDIA_CONNECT */
1476 void wpa_driver_ndis_event_connect(struct wpa_driver_ndis_data *drv)
1477 {
1478 wpa_printf(MSG_DEBUG, "NDIS: Media Connect Event");
1479 if (wpa_driver_ndis_get_bssid(drv, drv->bssid) == 0) {
1480 wpa_driver_ndis_get_associnfo(drv);
1481 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1482 }
1483 }
1484
1485
1486 /* Called when driver generates Media Disconnect Event by calling
1487 * NdisMIndicateStatus() with NDIS_STATUS_MEDIA_DISCONNECT */
1488 void wpa_driver_ndis_event_disconnect(struct wpa_driver_ndis_data *drv)
1489 {
1490 wpa_printf(MSG_DEBUG, "NDIS: Media Disconnect Event");
1491 os_memset(drv->bssid, 0, ETH_ALEN);
1492 wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1493 }
1494
1495
1496 static void wpa_driver_ndis_event_auth(struct wpa_driver_ndis_data *drv,
1497 const u8 *data, size_t data_len)
1498 {
1499 NDIS_802_11_AUTHENTICATION_REQUEST *req;
1500 int pairwise = 0, group = 0;
1501 union wpa_event_data event;
1502
1503 if (data_len < sizeof(*req)) {
1504 wpa_printf(MSG_DEBUG, "NDIS: Too short Authentication Request "
1505 "Event (len=%d)", data_len);
1506 return;
1507 }
1508 req = (NDIS_802_11_AUTHENTICATION_REQUEST *) data;
1509
1510 wpa_printf(MSG_DEBUG, "NDIS: Authentication Request Event: "
1511 "Bssid " MACSTR " Flags 0x%x",
1512 MAC2STR(req->Bssid), (int) req->Flags);
1513
1514 if ((req->Flags & NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR) ==
1515 NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR)
1516 pairwise = 1;
1517 else if ((req->Flags & NDIS_802_11_AUTH_REQUEST_GROUP_ERROR) ==
1518 NDIS_802_11_AUTH_REQUEST_GROUP_ERROR)
1519 group = 1;
1520
1521 if (pairwise || group) {
1522 os_memset(&event, 0, sizeof(event));
1523 event.michael_mic_failure.unicast = pairwise;
1524 wpa_supplicant_event(drv->ctx, EVENT_MICHAEL_MIC_FAILURE,
1525 &event);
1526 }
1527 }
1528
1529
1530 static void wpa_driver_ndis_event_pmkid(struct wpa_driver_ndis_data *drv,
1531 const u8 *data, size_t data_len)
1532 {
1533 NDIS_802_11_PMKID_CANDIDATE_LIST *pmkid;
1534 size_t i;
1535 union wpa_event_data event;
1536
1537 if (data_len < 8) {
1538 wpa_printf(MSG_DEBUG, "NDIS: Too short PMKID Candidate List "
1539 "Event (len=%d)", data_len);
1540 return;
1541 }
1542 pmkid = (NDIS_802_11_PMKID_CANDIDATE_LIST *) data;
1543 wpa_printf(MSG_DEBUG, "NDIS: PMKID Candidate List Event - Version %d "
1544 "NumCandidates %d",
1545 (int) pmkid->Version, (int) pmkid->NumCandidates);
1546
1547 if (pmkid->Version != 1) {
1548 wpa_printf(MSG_DEBUG, "NDIS: Unsupported PMKID Candidate List "
1549 "Version %d", (int) pmkid->Version);
1550 return;
1551 }
1552
1553 if (data_len < 8 + pmkid->NumCandidates * sizeof(PMKID_CANDIDATE)) {
1554 wpa_printf(MSG_DEBUG, "NDIS: PMKID Candidate List underflow");
1555 return;
1556 }
1557
1558 os_memset(&event, 0, sizeof(event));
1559 for (i = 0; i < pmkid->NumCandidates; i++) {
1560 PMKID_CANDIDATE *p = &pmkid->CandidateList[i];
1561 wpa_printf(MSG_DEBUG, "NDIS: %d: " MACSTR " Flags 0x%x",
1562 i, MAC2STR(p->BSSID), (int) p->Flags);
1563 os_memcpy(event.pmkid_candidate.bssid, p->BSSID, ETH_ALEN);
1564 event.pmkid_candidate.index = i;
1565 event.pmkid_candidate.preauth =
1566 p->Flags & NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED;
1567 wpa_supplicant_event(drv->ctx, EVENT_PMKID_CANDIDATE,
1568 &event);
1569 }
1570 }
1571
1572
1573 /* Called when driver calls NdisMIndicateStatus() with
1574 * NDIS_STATUS_MEDIA_SPECIFIC_INDICATION */
1575 void wpa_driver_ndis_event_media_specific(struct wpa_driver_ndis_data *drv,
1576 const u8 *data, size_t data_len)
1577 {
1578 NDIS_802_11_STATUS_INDICATION *status;
1579
1580 if (data == NULL || data_len < sizeof(*status))
1581 return;
1582
1583 wpa_hexdump(MSG_DEBUG, "NDIS: Media Specific Indication",
1584 data, data_len);
1585
1586 status = (NDIS_802_11_STATUS_INDICATION *) data;
1587 data += sizeof(status);
1588 data_len -= sizeof(status);
1589
1590 switch (status->StatusType) {
1591 case Ndis802_11StatusType_Authentication:
1592 wpa_driver_ndis_event_auth(drv, data, data_len);
1593 break;
1594 case Ndis802_11StatusType_PMKID_CandidateList:
1595 wpa_driver_ndis_event_pmkid(drv, data, data_len);
1596 break;
1597 default:
1598 wpa_printf(MSG_DEBUG, "NDIS: Unknown StatusType %d",
1599 (int) status->StatusType);
1600 break;
1601 }
1602 }
1603
1604
1605 /* Called when an adapter is added */
1606 void wpa_driver_ndis_event_adapter_arrival(struct wpa_driver_ndis_data *drv)
1607 {
1608 union wpa_event_data event;
1609 int i;
1610
1611 wpa_printf(MSG_DEBUG, "NDIS: Notify Adapter Arrival");
1612
1613 for (i = 0; i < 30; i++) {
1614 /* Re-open Packet32/NDISUIO connection */
1615 wpa_driver_ndis_adapter_close(drv);
1616 if (wpa_driver_ndis_adapter_init(drv) < 0 ||
1617 wpa_driver_ndis_adapter_open(drv) < 0) {
1618 wpa_printf(MSG_DEBUG, "NDIS: Driver re-initialization "
1619 "(%d) failed", i);
1620 os_sleep(1, 0);
1621 } else {
1622 wpa_printf(MSG_DEBUG, "NDIS: Driver re-initialized");
1623 break;
1624 }
1625 }
1626
1627 os_memset(&event, 0, sizeof(event));
1628 os_strlcpy(event.interface_status.ifname, drv->ifname,
1629 sizeof(event.interface_status.ifname));
1630 event.interface_status.ievent = EVENT_INTERFACE_ADDED;
1631 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_STATUS, &event);
1632 }
1633
1634
1635 /* Called when an adapter is removed */
1636 void wpa_driver_ndis_event_adapter_removal(struct wpa_driver_ndis_data *drv)
1637 {
1638 union wpa_event_data event;
1639
1640 wpa_printf(MSG_DEBUG, "NDIS: Notify Adapter Removal");
1641 os_memset(&event, 0, sizeof(event));
1642 os_strlcpy(event.interface_status.ifname, drv->ifname,
1643 sizeof(event.interface_status.ifname));
1644 event.interface_status.ievent = EVENT_INTERFACE_REMOVED;
1645 wpa_supplicant_event(drv->ctx, EVENT_INTERFACE_STATUS, &event);
1646 }
1647
1648
1649 static void
1650 wpa_driver_ndis_get_wpa_capability(struct wpa_driver_ndis_data *drv)
1651 {
1652 wpa_printf(MSG_DEBUG, "NDIS: verifying driver WPA capability");
1653
1654 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeWPA) == 0 &&
1655 ndis_get_auth_mode(drv) == Ndis802_11AuthModeWPA) {
1656 wpa_printf(MSG_DEBUG, "NDIS: WPA key management supported");
1657 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA;
1658 }
1659
1660 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeWPAPSK) == 0 &&
1661 ndis_get_auth_mode(drv) == Ndis802_11AuthModeWPAPSK) {
1662 wpa_printf(MSG_DEBUG, "NDIS: WPA-PSK key management "
1663 "supported");
1664 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1665 }
1666
1667 if (ndis_set_encr_status(drv, Ndis802_11Encryption3Enabled) == 0 &&
1668 ndis_get_encr_status(drv) == Ndis802_11Encryption3KeyAbsent) {
1669 wpa_printf(MSG_DEBUG, "NDIS: CCMP encryption supported");
1670 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1671 }
1672
1673 if (ndis_set_encr_status(drv, Ndis802_11Encryption2Enabled) == 0 &&
1674 ndis_get_encr_status(drv) == Ndis802_11Encryption2KeyAbsent) {
1675 wpa_printf(MSG_DEBUG, "NDIS: TKIP encryption supported");
1676 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1677 }
1678
1679 if (ndis_set_encr_status(drv, Ndis802_11Encryption1Enabled) == 0 &&
1680 ndis_get_encr_status(drv) == Ndis802_11Encryption1KeyAbsent) {
1681 wpa_printf(MSG_DEBUG, "NDIS: WEP encryption supported");
1682 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40 |
1683 WPA_DRIVER_CAPA_ENC_WEP104;
1684 }
1685
1686 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeShared) == 0 &&
1687 ndis_get_auth_mode(drv) == Ndis802_11AuthModeShared) {
1688 drv->capa.auth |= WPA_DRIVER_AUTH_SHARED;
1689 }
1690
1691 if (ndis_set_auth_mode(drv, Ndis802_11AuthModeOpen) == 0 &&
1692 ndis_get_auth_mode(drv) == Ndis802_11AuthModeOpen) {
1693 drv->capa.auth |= WPA_DRIVER_AUTH_OPEN;
1694 }
1695
1696 ndis_set_encr_status(drv, Ndis802_11EncryptionDisabled);
1697
1698 /* Could also verify OID_802_11_ADD_KEY error reporting and
1699 * support for OID_802_11_ASSOCIATION_INFORMATION. */
1700
1701 if (drv->capa.key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA &&
1702 drv->capa.enc & (WPA_DRIVER_CAPA_ENC_TKIP |
1703 WPA_DRIVER_CAPA_ENC_CCMP)) {
1704 wpa_printf(MSG_DEBUG, "NDIS: driver supports WPA");
1705 drv->has_capability = 1;
1706 } else {
1707 wpa_printf(MSG_DEBUG, "NDIS: no WPA support found");
1708 }
1709
1710 wpa_printf(MSG_DEBUG, "NDIS: driver capabilities: key_mgmt 0x%x "
1711 "enc 0x%x auth 0x%x",
1712 drv->capa.key_mgmt, drv->capa.enc, drv->capa.auth);
1713 }
1714
1715
1716 static void wpa_driver_ndis_get_capability(struct wpa_driver_ndis_data *drv)
1717 {
1718 char buf[512];
1719 int len;
1720 size_t i;
1721 NDIS_802_11_CAPABILITY *c;
1722
1723 drv->capa.flags = WPA_DRIVER_FLAGS_DRIVER_IE;
1724
1725 len = ndis_get_oid(drv, OID_802_11_CAPABILITY, buf, sizeof(buf));
1726 if (len < 0) {
1727 wpa_driver_ndis_get_wpa_capability(drv);
1728 return;
1729 }
1730
1731 wpa_hexdump(MSG_MSGDUMP, "OID_802_11_CAPABILITY", (u8 *) buf, len);
1732 c = (NDIS_802_11_CAPABILITY *) buf;
1733 if (len < sizeof(*c) || c->Version != 2) {
1734 wpa_printf(MSG_DEBUG, "NDIS: unsupported "
1735 "OID_802_11_CAPABILITY data");
1736 return;
1737 }
1738 wpa_printf(MSG_DEBUG, "NDIS: Driver supports OID_802_11_CAPABILITY - "
1739 "NoOfPMKIDs %d NoOfAuthEncrPairs %d",
1740 (int) c->NoOfPMKIDs,
1741 (int) c->NoOfAuthEncryptPairsSupported);
1742 drv->has_capability = 1;
1743 drv->no_of_pmkid = c->NoOfPMKIDs;
1744 for (i = 0; i < c->NoOfAuthEncryptPairsSupported; i++) {
1745 NDIS_802_11_AUTHENTICATION_ENCRYPTION *ae;
1746 ae = &c->AuthenticationEncryptionSupported[i];
1747 if ((char *) (ae + 1) > buf + len) {
1748 wpa_printf(MSG_DEBUG, "NDIS: auth/encr pair list "
1749 "overflow");
1750 break;
1751 }
1752 wpa_printf(MSG_MSGDUMP, "NDIS: %d - auth %d encr %d",
1753 i, (int) ae->AuthModeSupported,
1754 (int) ae->EncryptStatusSupported);
1755 switch (ae->AuthModeSupported) {
1756 case Ndis802_11AuthModeOpen:
1757 drv->capa.auth |= WPA_DRIVER_AUTH_OPEN;
1758 break;
1759 case Ndis802_11AuthModeShared:
1760 drv->capa.auth |= WPA_DRIVER_AUTH_SHARED;
1761 break;
1762 case Ndis802_11AuthModeWPA:
1763 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA;
1764 break;
1765 case Ndis802_11AuthModeWPAPSK:
1766 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
1767 break;
1768 case Ndis802_11AuthModeWPA2:
1769 drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA2;
1770 break;
1771 case Ndis802_11AuthModeWPA2PSK:
1772 drv->capa.key_mgmt |=
1773 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
1774 break;
1775 case Ndis802_11AuthModeWPANone:
1776 drv->capa.key_mgmt |=
1777 WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE;
1778 break;
1779 default:
1780 break;
1781 }
1782 switch (ae->EncryptStatusSupported) {
1783 case Ndis802_11Encryption1Enabled:
1784 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40;
1785 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP104;
1786 break;
1787 case Ndis802_11Encryption2Enabled:
1788 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
1789 break;
1790 case Ndis802_11Encryption3Enabled:
1791 drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
1792 break;
1793 default:
1794 break;
1795 }
1796 }
1797
1798 wpa_printf(MSG_DEBUG, "NDIS: driver capabilities: key_mgmt 0x%x "
1799 "enc 0x%x auth 0x%x",
1800 drv->capa.key_mgmt, drv->capa.enc, drv->capa.auth);
1801 }
1802
1803
1804 static int wpa_driver_ndis_get_capa(void *priv, struct wpa_driver_capa *capa)
1805 {
1806 struct wpa_driver_ndis_data *drv = priv;
1807 if (!drv->has_capability)
1808 return -1;
1809 os_memcpy(capa, &drv->capa, sizeof(*capa));
1810 return 0;
1811 }
1812
1813
1814 static const char * wpa_driver_ndis_get_ifname(void *priv)
1815 {
1816 struct wpa_driver_ndis_data *drv = priv;
1817 return drv->ifname;
1818 }
1819
1820
1821 static const u8 * wpa_driver_ndis_get_mac_addr(void *priv)
1822 {
1823 struct wpa_driver_ndis_data *drv = priv;
1824 return drv->own_addr;
1825 }
1826
1827
1828 #ifdef _WIN32_WCE
1829
1830 #define NDISUIO_MSG_SIZE (sizeof(NDISUIO_DEVICE_NOTIFICATION) + 512)
1831
1832 static void ndisuio_notification_receive(void *eloop_data, void *user_ctx)
1833 {
1834 struct wpa_driver_ndis_data *drv = eloop_data;
1835 NDISUIO_DEVICE_NOTIFICATION *hdr;
1836 u8 buf[NDISUIO_MSG_SIZE];
1837 DWORD len, flags;
1838
1839 if (!ReadMsgQueue(drv->event_queue, buf, NDISUIO_MSG_SIZE, &len, 0,
1840 &flags)) {
1841 wpa_printf(MSG_DEBUG, "ndisuio_notification_receive: "
1842 "ReadMsgQueue failed: %d", (int) GetLastError());
1843 return;
1844 }
1845
1846 if (len < sizeof(NDISUIO_DEVICE_NOTIFICATION)) {
1847 wpa_printf(MSG_DEBUG, "ndisuio_notification_receive: "
1848 "Too short message (len=%d)", (int) len);
1849 return;
1850 }
1851
1852 hdr = (NDISUIO_DEVICE_NOTIFICATION *) buf;
1853 wpa_printf(MSG_DEBUG, "NDIS: Notification received: len=%d type=0x%x",
1854 (int) len, hdr->dwNotificationType);
1855
1856 switch (hdr->dwNotificationType) {
1857 #ifdef NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL
1858 case NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL:
1859 wpa_printf(MSG_DEBUG, "NDIS: ADAPTER_ARRIVAL");
1860 wpa_driver_ndis_event_adapter_arrival(drv);
1861 break;
1862 #endif
1863 #ifdef NDISUIO_NOTIFICATION_ADAPTER_REMOVAL
1864 case NDISUIO_NOTIFICATION_ADAPTER_REMOVAL:
1865 wpa_printf(MSG_DEBUG, "NDIS: ADAPTER_REMOVAL");
1866 wpa_driver_ndis_event_adapter_removal(drv);
1867 break;
1868 #endif
1869 case NDISUIO_NOTIFICATION_MEDIA_CONNECT:
1870 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_CONNECT");
1871 SetEvent(drv->connected_event);
1872 wpa_driver_ndis_event_connect(drv);
1873 break;
1874 case NDISUIO_NOTIFICATION_MEDIA_DISCONNECT:
1875 ResetEvent(drv->connected_event);
1876 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_DISCONNECT");
1877 wpa_driver_ndis_event_disconnect(drv);
1878 break;
1879 case NDISUIO_NOTIFICATION_MEDIA_SPECIFIC_NOTIFICATION:
1880 wpa_printf(MSG_DEBUG, "NDIS: MEDIA_SPECIFIC_NOTIFICATION");
1881 #if _WIN32_WCE == 420 || _WIN32_WCE == 0x420
1882 wpa_driver_ndis_event_media_specific(
1883 drv, hdr->pvStatusBuffer, hdr->uiStatusBufferSize);
1884 #else
1885 wpa_driver_ndis_event_media_specific(
1886 drv, ((const u8 *) hdr) + hdr->uiOffsetToStatusBuffer,
1887 (size_t) hdr->uiStatusBufferSize);
1888 #endif
1889 break;
1890 default:
1891 wpa_printf(MSG_DEBUG, "NDIS: Unknown notification type 0x%x",
1892 hdr->dwNotificationType);
1893 break;
1894 }
1895 }
1896
1897
1898 static void ndisuio_notification_deinit(struct wpa_driver_ndis_data *drv)
1899 {
1900 NDISUIO_REQUEST_NOTIFICATION req;
1901
1902 memset(&req, 0, sizeof(req));
1903 req.hMsgQueue = drv->event_queue;
1904 req.dwNotificationTypes = 0;
1905
1906 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_REQUEST_NOTIFICATION,
1907 &req, sizeof(req), NULL, 0, NULL, NULL)) {
1908 wpa_printf(MSG_INFO, "ndisuio_notification_deinit: "
1909 "IOCTL_NDISUIO_REQUEST_NOTIFICATION failed: %d",
1910 (int) GetLastError());
1911 }
1912
1913 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_CANCEL_NOTIFICATION,
1914 NULL, 0, NULL, 0, NULL, NULL)) {
1915 wpa_printf(MSG_INFO, "ndisuio_notification_deinit: "
1916 "IOCTL_NDISUIO_CANCEL_NOTIFICATION failed: %d",
1917 (int) GetLastError());
1918 }
1919
1920 if (drv->event_queue) {
1921 eloop_unregister_event(drv->event_queue,
1922 sizeof(drv->event_queue));
1923 CloseHandle(drv->event_queue);
1924 drv->event_queue = NULL;
1925 }
1926
1927 if (drv->connected_event) {
1928 CloseHandle(drv->connected_event);
1929 drv->connected_event = NULL;
1930 }
1931 }
1932
1933
1934 static int ndisuio_notification_init(struct wpa_driver_ndis_data *drv)
1935 {
1936 MSGQUEUEOPTIONS opt;
1937 NDISUIO_REQUEST_NOTIFICATION req;
1938
1939 drv->connected_event =
1940 CreateEvent(NULL, TRUE, FALSE, TEXT("WpaSupplicantConnected"));
1941 if (drv->connected_event == NULL) {
1942 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1943 "CreateEvent failed: %d",
1944 (int) GetLastError());
1945 return -1;
1946 }
1947
1948 memset(&opt, 0, sizeof(opt));
1949 opt.dwSize = sizeof(opt);
1950 opt.dwMaxMessages = 5;
1951 opt.cbMaxMessage = NDISUIO_MSG_SIZE;
1952 opt.bReadAccess = TRUE;
1953
1954 drv->event_queue = CreateMsgQueue(NULL, &opt);
1955 if (drv->event_queue == NULL) {
1956 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1957 "CreateMsgQueue failed: %d",
1958 (int) GetLastError());
1959 ndisuio_notification_deinit(drv);
1960 return -1;
1961 }
1962
1963 memset(&req, 0, sizeof(req));
1964 req.hMsgQueue = drv->event_queue;
1965 req.dwNotificationTypes =
1966 #ifdef NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL
1967 NDISUIO_NOTIFICATION_ADAPTER_ARRIVAL |
1968 #endif
1969 #ifdef NDISUIO_NOTIFICATION_ADAPTER_REMOVAL
1970 NDISUIO_NOTIFICATION_ADAPTER_REMOVAL |
1971 #endif
1972 NDISUIO_NOTIFICATION_MEDIA_CONNECT |
1973 NDISUIO_NOTIFICATION_MEDIA_DISCONNECT |
1974 NDISUIO_NOTIFICATION_MEDIA_SPECIFIC_NOTIFICATION;
1975
1976 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_REQUEST_NOTIFICATION,
1977 &req, sizeof(req), NULL, 0, NULL, NULL)) {
1978 wpa_printf(MSG_INFO, "ndisuio_notification_init: "
1979 "IOCTL_NDISUIO_REQUEST_NOTIFICATION failed: %d",
1980 (int) GetLastError());
1981 ndisuio_notification_deinit(drv);
1982 return -1;
1983 }
1984
1985 eloop_register_event(drv->event_queue, sizeof(drv->event_queue),
1986 ndisuio_notification_receive, drv, NULL);
1987
1988 return 0;
1989 }
1990 #endif /* _WIN32_WCE */
1991
1992
1993 static int wpa_driver_ndis_get_names(struct wpa_driver_ndis_data *drv)
1994 {
1995 #ifdef CONFIG_USE_NDISUIO
1996 NDISUIO_QUERY_BINDING *b;
1997 size_t blen = sizeof(*b) + 1024;
1998 int i, error, found = 0;
1999 DWORD written;
2000 char name[256], desc[256], *dpos;
2001 WCHAR *pos;
2002 size_t j, len, dlen;
2003
2004 b = os_malloc(blen);
2005 if (b == NULL)
2006 return -1;
2007
2008 for (i = 0; ; i++) {
2009 os_memset(b, 0, blen);
2010 b->BindingIndex = i;
2011 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_QUERY_BINDING,
2012 b, sizeof(NDISUIO_QUERY_BINDING), b, blen,
2013 &written, NULL)) {
2014 error = (int) GetLastError();
2015 if (error == ERROR_NO_MORE_ITEMS)
2016 break;
2017 wpa_printf(MSG_DEBUG, "IOCTL_NDISUIO_QUERY_BINDING "
2018 "failed: %d", error);
2019 break;
2020 }
2021
2022 pos = (WCHAR *) ((char *) b + b->DeviceNameOffset);
2023 len = b->DeviceNameLength;
2024 if (len >= sizeof(name))
2025 len = sizeof(name) - 1;
2026 for (j = 0; j < len; j++)
2027 name[j] = (char) pos[j];
2028 name[len] = '\0';
2029
2030 pos = (WCHAR *) ((char *) b + b->DeviceDescrOffset);
2031 len = b->DeviceDescrLength;
2032 if (len >= sizeof(desc))
2033 len = sizeof(desc) - 1;
2034 for (j = 0; j < len; j++)
2035 desc[j] = (char) pos[j];
2036 desc[len] = '\0';
2037
2038 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s", i, name, desc);
2039
2040 if (os_strstr(name, drv->ifname)) {
2041 wpa_printf(MSG_DEBUG, "NDIS: Interface name match");
2042 found = 1;
2043 break;
2044 }
2045
2046 if (os_strncmp(desc, drv->ifname, os_strlen(drv->ifname)) == 0)
2047 {
2048 wpa_printf(MSG_DEBUG, "NDIS: Interface description "
2049 "match");
2050 found = 1;
2051 break;
2052 }
2053 }
2054
2055 if (!found) {
2056 wpa_printf(MSG_DEBUG, "NDIS: Could not find interface '%s'",
2057 drv->ifname);
2058 os_free(b);
2059 return -1;
2060 }
2061
2062 os_strlcpy(drv->ifname,
2063 os_strncmp(name, "\\DEVICE\\", 8) == 0 ? name + 8 : name,
2064 sizeof(drv->ifname));
2065 #ifdef _WIN32_WCE
2066 drv->adapter_name = wpa_strdup_tchar(drv->ifname);
2067 if (drv->adapter_name == NULL) {
2068 wpa_printf(MSG_ERROR, "NDIS: Failed to allocate memory for "
2069 "adapter name");
2070 os_free(b);
2071 return -1;
2072 }
2073 #endif /* _WIN32_WCE */
2074
2075 dpos = os_strstr(desc, " - ");
2076 if (dpos)
2077 dlen = dpos - desc;
2078 else
2079 dlen = os_strlen(desc);
2080 drv->adapter_desc = os_malloc(dlen + 1);
2081 if (drv->adapter_desc) {
2082 os_memcpy(drv->adapter_desc, desc, dlen);
2083 drv->adapter_desc[dlen] = '\0';
2084 }
2085
2086 os_free(b);
2087
2088 if (drv->adapter_desc == NULL)
2089 return -1;
2090
2091 wpa_printf(MSG_DEBUG, "NDIS: Adapter description prefix '%s'",
2092 drv->adapter_desc);
2093
2094 return 0;
2095 #else /* CONFIG_USE_NDISUIO */
2096 PTSTR _names;
2097 char *names, *pos, *pos2;
2098 ULONG len;
2099 BOOLEAN res;
2100 #define MAX_ADAPTERS 32
2101 char *name[MAX_ADAPTERS];
2102 char *desc[MAX_ADAPTERS];
2103 int num_name, num_desc, i, found_name, found_desc;
2104 size_t dlen;
2105
2106 wpa_printf(MSG_DEBUG, "NDIS: Packet.dll version: %s",
2107 PacketGetVersion());
2108
2109 len = 8192;
2110 _names = os_zalloc(len);
2111 if (_names == NULL)
2112 return -1;
2113
2114 res = PacketGetAdapterNames(_names, &len);
2115 if (!res && len > 8192) {
2116 os_free(_names);
2117 _names = os_zalloc(len);
2118 if (_names == NULL)
2119 return -1;
2120 res = PacketGetAdapterNames(_names, &len);
2121 }
2122
2123 if (!res) {
2124 wpa_printf(MSG_ERROR, "NDIS: Failed to get adapter list "
2125 "(PacketGetAdapterNames)");
2126 os_free(_names);
2127 return -1;
2128 }
2129
2130 names = (char *) _names;
2131 if (names[0] && names[1] == '\0' && names[2] && names[3] == '\0') {
2132 wpa_printf(MSG_DEBUG, "NDIS: Looks like adapter names are in "
2133 "UNICODE");
2134 /* Convert to ASCII */
2135 pos2 = pos = names;
2136 while (pos2 < names + len) {
2137 if (pos2[0] == '\0' && pos2[1] == '\0' &&
2138 pos2[2] == '\0' && pos2[3] == '\0') {
2139 pos2 += 4;
2140 break;
2141 }
2142 *pos++ = pos2[0];
2143 pos2 += 2;
2144 }
2145 os_memcpy(pos + 2, names, pos - names);
2146 pos += 2;
2147 } else
2148 pos = names;
2149
2150 num_name = 0;
2151 while (pos < names + len) {
2152 name[num_name] = pos;
2153 while (*pos && pos < names + len)
2154 pos++;
2155 if (pos + 1 >= names + len) {
2156 os_free(names);
2157 return -1;
2158 }
2159 pos++;
2160 num_name++;
2161 if (num_name >= MAX_ADAPTERS) {
2162 wpa_printf(MSG_DEBUG, "NDIS: Too many adapters");
2163 os_free(names);
2164 return -1;
2165 }
2166 if (*pos == '\0') {
2167 wpa_printf(MSG_DEBUG, "NDIS: %d adapter names found",
2168 num_name);
2169 pos++;
2170 break;
2171 }
2172 }
2173
2174 num_desc = 0;
2175 while (pos < names + len) {
2176 desc[num_desc] = pos;
2177 while (*pos && pos < names + len)
2178 pos++;
2179 if (pos + 1 >= names + len) {
2180 os_free(names);
2181 return -1;
2182 }
2183 pos++;
2184 num_desc++;
2185 if (num_desc >= MAX_ADAPTERS) {
2186 wpa_printf(MSG_DEBUG, "NDIS: Too many adapter "
2187 "descriptions");
2188 os_free(names);
2189 return -1;
2190 }
2191 if (*pos == '\0') {
2192 wpa_printf(MSG_DEBUG, "NDIS: %d adapter descriptions "
2193 "found", num_name);
2194 pos++;
2195 break;
2196 }
2197 }
2198
2199 /*
2200 * Windows 98 with Packet.dll 3.0 alpha3 does not include adapter
2201 * descriptions. Fill in dummy descriptors to work around this.
2202 */
2203 while (num_desc < num_name)
2204 desc[num_desc++] = "dummy description";
2205
2206 if (num_name != num_desc) {
2207 wpa_printf(MSG_DEBUG, "NDIS: mismatch in adapter name and "
2208 "description counts (%d != %d)",
2209 num_name, num_desc);
2210 os_free(names);
2211 return -1;
2212 }
2213
2214 found_name = found_desc = -1;
2215 for (i = 0; i < num_name; i++) {
2216 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s",
2217 i, name[i], desc[i]);
2218 if (found_name == -1 && os_strstr(name[i], drv->ifname))
2219 found_name = i;
2220 if (found_desc == -1 &&
2221 os_strncmp(desc[i], drv->ifname, os_strlen(drv->ifname)) ==
2222 0)
2223 found_desc = i;
2224 }
2225
2226 if (found_name < 0 && found_desc >= 0) {
2227 wpa_printf(MSG_DEBUG, "NDIS: Matched interface '%s' based on "
2228 "description '%s'",
2229 name[found_desc], desc[found_desc]);
2230 found_name = found_desc;
2231 os_strlcpy(drv->ifname,
2232 os_strncmp(name[found_desc], "\\Device\\NPF_", 12)
2233 == 0 ? name[found_desc] + 12 : name[found_desc],
2234 sizeof(drv->ifname));
2235 }
2236
2237 if (found_name < 0) {
2238 wpa_printf(MSG_DEBUG, "NDIS: Could not find interface '%s'",
2239 drv->ifname);
2240 os_free(names);
2241 return -1;
2242 }
2243
2244 i = found_name;
2245 pos = os_strrchr(desc[i], '(');
2246 if (pos) {
2247 dlen = pos - desc[i];
2248 pos--;
2249 if (pos > desc[i] && *pos == ' ')
2250 dlen--;
2251 } else {
2252 dlen = os_strlen(desc[i]);
2253 }
2254 drv->adapter_desc = os_malloc(dlen + 1);
2255 if (drv->adapter_desc) {
2256 os_memcpy(drv->adapter_desc, desc[i], dlen);
2257 drv->adapter_desc[dlen] = '\0';
2258 }
2259
2260 os_free(names);
2261
2262 if (drv->adapter_desc == NULL)
2263 return -1;
2264
2265 wpa_printf(MSG_DEBUG, "NDIS: Adapter description prefix '%s'",
2266 drv->adapter_desc);
2267
2268 return 0;
2269 #endif /* CONFIG_USE_NDISUIO */
2270 }
2271
2272
2273 #if defined(CONFIG_NATIVE_WINDOWS) || defined(__CYGWIN__)
2274 #ifndef _WIN32_WCE
2275 /*
2276 * These structures are undocumented for WinXP; only WinCE version is
2277 * documented. These would be included wzcsapi.h if it were available. Some
2278 * changes here have been needed to make the structures match with WinXP SP2.
2279 * It is unclear whether these work with any other version.
2280 */
2281
2282 typedef struct {
2283 LPWSTR wszGuid;
2284 } INTF_KEY_ENTRY, *PINTF_KEY_ENTRY;
2285
2286 typedef struct {
2287 DWORD dwNumIntfs;
2288 PINTF_KEY_ENTRY pIntfs;
2289 } INTFS_KEY_TABLE, *PINTFS_KEY_TABLE;
2290
2291 typedef struct {
2292 DWORD dwDataLen;
2293 LPBYTE pData;
2294 } RAW_DATA, *PRAW_DATA;
2295
2296 typedef struct {
2297 LPWSTR wszGuid;
2298 LPWSTR wszDescr;
2299 ULONG ulMediaState;
2300 ULONG ulMediaType;
2301 ULONG ulPhysicalMediaType;
2302 INT nInfraMode;
2303 INT nAuthMode;
2304 INT nWepStatus;
2305 #ifndef _WIN32_WCE
2306 u8 pad[2]; /* why is this needed? */
2307 #endif /* _WIN32_WCE */
2308 DWORD dwCtlFlags;
2309 DWORD dwCapabilities; /* something added for WinXP SP2(?) */
2310 RAW_DATA rdSSID;
2311 RAW_DATA rdBSSID;
2312 RAW_DATA rdBSSIDList;
2313 RAW_DATA rdStSSIDList;
2314 RAW_DATA rdCtrlData;
2315 #ifdef UNDER_CE
2316 BOOL bInitialized;
2317 #endif
2318 DWORD nWPAMCastCipher;
2319 /* add some extra buffer for later additions since this interface is
2320 * far from stable */
2321 u8 later_additions[100];
2322 } INTF_ENTRY, *PINTF_ENTRY;
2323
2324 #define INTF_ALL 0xffffffff
2325 #define INTF_ALL_FLAGS 0x0000ffff
2326 #define INTF_CTLFLAGS 0x00000010
2327 #define INTFCTL_ENABLED 0x8000
2328 #endif /* _WIN32_WCE */
2329
2330
2331 #ifdef _WIN32_WCE
2332 static int wpa_driver_ndis_rebind_adapter(struct wpa_driver_ndis_data *drv)
2333 {
2334 HANDLE ndis;
2335 TCHAR multi[100];
2336 int len;
2337
2338 len = _tcslen(drv->adapter_name);
2339 if (len > 80)
2340 return -1;
2341
2342 ndis = CreateFile(DD_NDIS_DEVICE_NAME, GENERIC_READ | GENERIC_WRITE,
2343 0, NULL, OPEN_EXISTING, 0, NULL);
2344 if (ndis == INVALID_HANDLE_VALUE) {
2345 wpa_printf(MSG_DEBUG, "NDIS: Failed to open file to NDIS "
2346 "device: %d", (int) GetLastError());
2347 return -1;
2348 }
2349
2350 len++;
2351 memcpy(multi, drv->adapter_name, len * sizeof(TCHAR));
2352 memcpy(&multi[len], TEXT("NDISUIO\0"), 9 * sizeof(TCHAR));
2353 len += 9;
2354
2355 if (!DeviceIoControl(ndis, IOCTL_NDIS_REBIND_ADAPTER,
2356 multi, len * sizeof(TCHAR), NULL, 0, NULL, NULL))
2357 {
2358 wpa_printf(MSG_DEBUG, "NDIS: IOCTL_NDIS_REBIND_ADAPTER "
2359 "failed: 0x%x", (int) GetLastError());
2360 wpa_hexdump_ascii(MSG_DEBUG, "NDIS: rebind multi_sz",
2361 (u8 *) multi, len * sizeof(TCHAR));
2362 CloseHandle(ndis);
2363 return -1;
2364 }
2365
2366 CloseHandle(ndis);
2367
2368 wpa_printf(MSG_DEBUG, "NDIS: Requested NDIS rebind of NDISUIO "
2369 "protocol");
2370
2371 return 0;
2372 }
2373 #endif /* _WIN32_WCE */
2374
2375
2376 static int wpa_driver_ndis_set_wzc(struct wpa_driver_ndis_data *drv,
2377 int enable)
2378 {
2379 #ifdef _WIN32_WCE
2380 HKEY hk, hk2;
2381 LONG ret;
2382 DWORD i, hnd, len;
2383 TCHAR keyname[256], devname[256];
2384
2385 #define WZC_DRIVER TEXT("Drivers\\BuiltIn\\ZeroConfig")
2386
2387 if (enable) {
2388 HANDLE h;
2389 h = ActivateDeviceEx(WZC_DRIVER, NULL, 0, NULL);
2390 if (h == INVALID_HANDLE_VALUE || h == 0) {
2391 wpa_printf(MSG_DEBUG, "NDIS: Failed to re-enable WZC "
2392 "- ActivateDeviceEx failed: %d",
2393 (int) GetLastError());
2394 return -1;
2395 }
2396
2397 wpa_printf(MSG_DEBUG, "NDIS: WZC re-enabled");
2398 return wpa_driver_ndis_rebind_adapter(drv);
2399 }
2400
2401 /*
2402 * Unfortunately, just disabling the WZC for an interface is not enough
2403 * to free NDISUIO for us, so need to disable and unload WZC completely
2404 * for now when using WinCE with NDISUIO. In addition, must request
2405 * NDISUIO protocol to be rebound to the adapter in order to free the
2406 * NDISUIO binding that WZC hold before us.
2407 */
2408
2409 /* Enumerate HKLM\Drivers\Active\* to find a handle to WZC. */
2410 ret = RegOpenKeyEx(HKEY_LOCAL_MACHINE, DEVLOAD_ACTIVE_KEY, 0, 0, &hk);
2411 if (ret != ERROR_SUCCESS) {
2412 wpa_printf(MSG_DEBUG, "NDIS: RegOpenKeyEx(DEVLOAD_ACTIVE_KEY) "
2413 "failed: %d %d", (int) ret, (int) GetLastError());
2414 return -1;
2415 }
2416
2417 for (i = 0; ; i++) {
2418 len = sizeof(keyname);
2419 ret = RegEnumKeyEx(hk, i, keyname, &len, NULL, NULL, NULL,
2420 NULL);
2421 if (ret != ERROR_SUCCESS) {
2422 wpa_printf(MSG_DEBUG, "NDIS: Could not find active "
2423 "WZC - assuming it is not running.");
2424 RegCloseKey(hk);
2425 return -1;
2426 }
2427
2428 ret = RegOpenKeyEx(hk, keyname, 0, 0, &hk2);
2429 if (ret != ERROR_SUCCESS) {
2430 wpa_printf(MSG_DEBUG, "NDIS: RegOpenKeyEx(active dev) "
2431 "failed: %d %d",
2432 (int) ret, (int) GetLastError());
2433 continue;
2434 }
2435
2436 len = sizeof(devname);
2437 ret = RegQueryValueEx(hk2, DEVLOAD_DEVKEY_VALNAME, NULL, NULL,
2438 (LPBYTE) devname, &len);
2439 if (ret != ERROR_SUCCESS) {
2440 wpa_printf(MSG_DEBUG, "NDIS: RegQueryValueEx("
2441 "DEVKEY_VALNAME) failed: %d %d",
2442 (int) ret, (int) GetLastError());
2443 RegCloseKey(hk2);
2444 continue;
2445 }
2446
2447 if (_tcscmp(devname, WZC_DRIVER) == 0)
2448 break;
2449
2450 RegCloseKey(hk2);
2451 }
2452
2453 RegCloseKey(hk);
2454
2455 /* Found WZC - get handle to it. */
2456 len = sizeof(hnd);
2457 ret = RegQueryValueEx(hk2, DEVLOAD_HANDLE_VALNAME, NULL, NULL,
2458 (PUCHAR) &hnd, &len);
2459 if (ret != ERROR_SUCCESS) {
2460 wpa_printf(MSG_DEBUG, "NDIS: RegQueryValueEx(HANDLE_VALNAME) "
2461 "failed: %d %d", (int) ret, (int) GetLastError());
2462 RegCloseKey(hk2);
2463 return -1;
2464 }
2465
2466 RegCloseKey(hk2);
2467
2468 /* Deactivate WZC */
2469 if (!DeactivateDevice((HANDLE) hnd)) {
2470 wpa_printf(MSG_DEBUG, "NDIS: DeactivateDevice failed: %d",
2471 (int) GetLastError());
2472 return -1;
2473 }
2474
2475 wpa_printf(MSG_DEBUG, "NDIS: Disabled WZC temporarily");
2476 drv->wzc_disabled = 1;
2477 return wpa_driver_ndis_rebind_adapter(drv);
2478
2479 #else /* _WIN32_WCE */
2480
2481 HMODULE hm;
2482 DWORD (WINAPI *wzc_enum_interf)(LPWSTR pSrvAddr,
2483 PINTFS_KEY_TABLE pIntfs);
2484 DWORD (WINAPI *wzc_query_interf)(LPWSTR pSrvAddr, DWORD dwInFlags,
2485 PINTF_ENTRY pIntf,
2486 LPDWORD pdwOutFlags);
2487 DWORD (WINAPI *wzc_set_interf)(LPWSTR pSrvAddr, DWORD dwInFlags,
2488 PINTF_ENTRY pIntf, LPDWORD pdwOutFlags);
2489 int ret = -1, j;
2490 DWORD res;
2491 INTFS_KEY_TABLE guids;
2492 INTF_ENTRY intf;
2493 char guid[128];
2494 WCHAR *pos;
2495 DWORD flags, i;
2496
2497 hm = LoadLibrary(TEXT("wzcsapi.dll"));
2498 if (hm == NULL) {
2499 wpa_printf(MSG_DEBUG, "NDIS: Failed to load wzcsapi.dll (%u) "
2500 "- WZC probably not running",
2501 (unsigned int) GetLastError());
2502 return -1;
2503 }
2504
2505 #ifdef _WIN32_WCE
2506 wzc_enum_interf = (void *) GetProcAddressA(hm, "WZCEnumInterfaces");
2507 wzc_query_interf = (void *) GetProcAddressA(hm, "WZCQueryInterface");
2508 wzc_set_interf = (void *) GetProcAddressA(hm, "WZCSetInterface");
2509 #else /* _WIN32_WCE */
2510 wzc_enum_interf = (void *) GetProcAddress(hm, "WZCEnumInterfaces");
2511 wzc_query_interf = (void *) GetProcAddress(hm, "WZCQueryInterface");
2512 wzc_set_interf = (void *) GetProcAddress(hm, "WZCSetInterface");
2513 #endif /* _WIN32_WCE */
2514
2515 if (wzc_enum_interf == NULL || wzc_query_interf == NULL ||
2516 wzc_set_interf == NULL) {
2517 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces, "
2518 "WZCQueryInterface, or WZCSetInterface not found "
2519 "in wzcsapi.dll");
2520 goto fail;
2521 }
2522
2523 os_memset(&guids, 0, sizeof(guids));
2524 res = wzc_enum_interf(NULL, &guids);
2525 if (res != 0) {
2526 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces failed: %d; "
2527 "WZC service is apparently not running",
2528 (int) res);
2529 goto fail;
2530 }
2531
2532 wpa_printf(MSG_DEBUG, "NDIS: WZCEnumInterfaces: %d interfaces",
2533 (int) guids.dwNumIntfs);
2534
2535 for (i = 0; i < guids.dwNumIntfs; i++) {
2536 pos = guids.pIntfs[i].wszGuid;
2537 for (j = 0; j < sizeof(guid); j++) {
2538 guid[j] = (char) *pos;
2539 if (*pos == 0)
2540 break;
2541 pos++;
2542 }
2543 guid[sizeof(guid) - 1] = '\0';
2544 wpa_printf(MSG_DEBUG, "NDIS: intfs %d GUID '%s'",
2545 (int) i, guid);
2546 if (os_strstr(drv->ifname, guid) == NULL)
2547 continue;
2548
2549 wpa_printf(MSG_DEBUG, "NDIS: Current interface found from "
2550 "WZC");
2551 break;
2552 }
2553
2554 if (i >= guids.dwNumIntfs) {
2555 wpa_printf(MSG_DEBUG, "NDIS: Current interface not found from "
2556 "WZC");
2557 goto fail;
2558 }
2559
2560 os_memset(&intf, 0, sizeof(intf));
2561 intf.wszGuid = guids.pIntfs[i].wszGuid;
2562 /* Set flags to verify that the structure has not changed. */
2563 intf.dwCtlFlags = -1;
2564 flags = 0;
2565 res = wzc_query_interf(NULL, INTFCTL_ENABLED, &intf, &flags);
2566 if (res != 0) {
2567 wpa_printf(MSG_DEBUG, "NDIS: Could not query flags for the "
2568 "WZC interface: %d (0x%x)",
2569 (int) res, (int) res);
2570 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2571 (unsigned int) GetLastError());
2572 goto fail;
2573 }
2574
2575 wpa_printf(MSG_DEBUG, "NDIS: WZC interface flags 0x%x dwCtlFlags 0x%x",
2576 (int) flags, (int) intf.dwCtlFlags);
2577
2578 if (intf.dwCtlFlags == -1) {
2579 wpa_printf(MSG_DEBUG, "NDIS: Looks like wzcsapi has changed "
2580 "again - could not disable WZC");
2581 wpa_hexdump(MSG_MSGDUMP, "NDIS: intf",
2582 (u8 *) &intf, sizeof(intf));
2583 goto fail;
2584 }
2585
2586 if (enable) {
2587 if (!(intf.dwCtlFlags & INTFCTL_ENABLED)) {
2588 wpa_printf(MSG_DEBUG, "NDIS: Enabling WZC for this "
2589 "interface");
2590 intf.dwCtlFlags |= INTFCTL_ENABLED;
2591 res = wzc_set_interf(NULL, INTFCTL_ENABLED, &intf,
2592 &flags);
2593 if (res != 0) {
2594 wpa_printf(MSG_DEBUG, "NDIS: Failed to enable "
2595 "WZC: %d (0x%x)",
2596 (int) res, (int) res);
2597 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2598 (unsigned int) GetLastError());
2599 goto fail;
2600 }
2601 wpa_printf(MSG_DEBUG, "NDIS: Re-enabled WZC for this "
2602 "interface");
2603 drv->wzc_disabled = 0;
2604 }
2605 } else {
2606 if (intf.dwCtlFlags & INTFCTL_ENABLED) {
2607 wpa_printf(MSG_DEBUG, "NDIS: Disabling WZC for this "
2608 "interface");
2609 intf.dwCtlFlags &= ~INTFCTL_ENABLED;
2610 res = wzc_set_interf(NULL, INTFCTL_ENABLED, &intf,
2611 &flags);
2612 if (res != 0) {
2613 wpa_printf(MSG_DEBUG, "NDIS: Failed to "
2614 "disable WZC: %d (0x%x)",
2615 (int) res, (int) res);
2616 wpa_printf(MSG_DEBUG, "NDIS: GetLastError: %u",
2617 (unsigned int) GetLastError());
2618 goto fail;
2619 }
2620 wpa_printf(MSG_DEBUG, "NDIS: Disabled WZC temporarily "
2621 "for this interface");
2622 drv->wzc_disabled = 1;
2623 } else {
2624 wpa_printf(MSG_DEBUG, "NDIS: WZC was not enabled for "
2625 "this interface");
2626 }
2627 }
2628
2629 ret = 0;
2630
2631 fail:
2632 FreeLibrary(hm);
2633
2634 return ret;
2635 #endif /* _WIN32_WCE */
2636 }
2637
2638 #else /* CONFIG_NATIVE_WINDOWS || __CYGWIN__ */
2639
2640 static int wpa_driver_ndis_set_wzc(struct wpa_driver_ndis_data *drv,
2641 int enable)
2642 {
2643 return 0;
2644 }
2645
2646 #endif /* CONFIG_NATIVE_WINDOWS || __CYGWIN__ */
2647
2648
2649 #ifdef CONFIG_USE_NDISUIO
2650 /*
2651 * l2_packet_ndis.c is sharing the same handle to NDISUIO, so we must be able
2652 * to export this handle. This is somewhat ugly, but there is no better
2653 * mechanism available to pass data from driver interface to l2_packet wrapper.
2654 */
2655 static HANDLE driver_ndis_ndisuio_handle = INVALID_HANDLE_VALUE;
2656
2657 HANDLE driver_ndis_get_ndisuio_handle(void)
2658 {
2659 return driver_ndis_ndisuio_handle;
2660 }
2661 #endif /* CONFIG_USE_NDISUIO */
2662
2663
2664 static int wpa_driver_ndis_adapter_init(struct wpa_driver_ndis_data *drv)
2665 {
2666 #ifdef CONFIG_USE_NDISUIO
2667 #ifndef _WIN32_WCE
2668 #define NDISUIO_DEVICE_NAME TEXT("\\\\.\\\\Ndisuio")
2669 DWORD written;
2670 #endif /* _WIN32_WCE */
2671 drv->ndisuio = CreateFile(NDISUIO_DEVICE_NAME,
2672 GENERIC_READ | GENERIC_WRITE, 0, NULL,
2673 OPEN_EXISTING,
2674 FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
2675 INVALID_HANDLE_VALUE);
2676 if (drv->ndisuio == INVALID_HANDLE_VALUE) {
2677 wpa_printf(MSG_ERROR, "NDIS: Failed to open connection to "
2678 "NDISUIO: %d", (int) GetLastError());
2679 return -1;
2680 }
2681 driver_ndis_ndisuio_handle = drv->ndisuio;
2682
2683 #ifndef _WIN32_WCE
2684 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_BIND_WAIT, NULL, 0,
2685 NULL, 0, &written, NULL)) {
2686 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_BIND_WAIT failed: "
2687 "%d", (int) GetLastError());
2688 CloseHandle(drv->ndisuio);
2689 drv->ndisuio = INVALID_HANDLE_VALUE;
2690 return -1;
2691 }
2692 #endif /* _WIN32_WCE */
2693
2694 return 0;
2695 #else /* CONFIG_USE_NDISUIO */
2696 return 0;
2697 #endif /* CONFIG_USE_NDISUIO */
2698 }
2699
2700
2701 static int wpa_driver_ndis_adapter_open(struct wpa_driver_ndis_data *drv)
2702 {
2703 #ifdef CONFIG_USE_NDISUIO
2704 DWORD written;
2705 #define MAX_NDIS_DEVICE_NAME_LEN 256
2706 WCHAR ifname[MAX_NDIS_DEVICE_NAME_LEN];
2707 size_t len, i, pos;
2708 const char *prefix = "\\DEVICE\\";
2709
2710 #ifdef _WIN32_WCE
2711 pos = 0;
2712 #else /* _WIN32_WCE */
2713 pos = 8;
2714 #endif /* _WIN32_WCE */
2715 len = pos + os_strlen(drv->ifname);
2716 if (len >= MAX_NDIS_DEVICE_NAME_LEN)
2717 return -1;
2718 for (i = 0; i < pos; i++)
2719 ifname[i] = (WCHAR) prefix[i];
2720 for (i = pos; i < len; i++)
2721 ifname[i] = (WCHAR) drv->ifname[i - pos];
2722 ifname[i] = L'\0';
2723
2724 if (!DeviceIoControl(drv->ndisuio, IOCTL_NDISUIO_OPEN_DEVICE,
2725 ifname, len * sizeof(WCHAR), NULL, 0, &written,
2726 NULL)) {
2727 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_OPEN_DEVICE "
2728 "failed: %d", (int) GetLastError());
2729 wpa_hexdump_ascii(MSG_DEBUG, "NDIS: ifname",
2730 (const u8 *) ifname, len * sizeof(WCHAR));
2731 CloseHandle(drv->ndisuio);
2732 drv->ndisuio = INVALID_HANDLE_VALUE;
2733 return -1;
2734 }
2735
2736 wpa_printf(MSG_DEBUG, "NDIS: Opened NDISUIO device successfully");
2737
2738 return 0;
2739 #else /* CONFIG_USE_NDISUIO */
2740 char ifname[128];
2741 os_snprintf(ifname, sizeof(ifname), "\\Device\\NPF_%s", drv->ifname);
2742 drv->adapter = PacketOpenAdapter(ifname);
2743 if (drv->adapter == NULL) {
2744 wpa_printf(MSG_DEBUG, "NDIS: PacketOpenAdapter failed for "
2745 "'%s'", ifname);
2746 return -1;
2747 }
2748 return 0;
2749 #endif /* CONFIG_USE_NDISUIO */
2750 }
2751
2752
2753 static void wpa_driver_ndis_adapter_close(struct wpa_driver_ndis_data *drv)
2754 {
2755 #ifdef CONFIG_USE_NDISUIO
2756 driver_ndis_ndisuio_handle = INVALID_HANDLE_VALUE;
2757 if (drv->ndisuio != INVALID_HANDLE_VALUE)
2758 CloseHandle(drv->ndisuio);
2759 #else /* CONFIG_USE_NDISUIO */
2760 if (drv->adapter)
2761 PacketCloseAdapter(drv->adapter);
2762 #endif /* CONFIG_USE_NDISUIO */
2763 }
2764
2765
2766 static int ndis_add_multicast(struct wpa_driver_ndis_data *drv)
2767 {
2768 if (ndis_set_oid(drv, OID_802_3_MULTICAST_LIST,
2769 (const char *) pae_group_addr, ETH_ALEN) < 0) {
2770 wpa_printf(MSG_DEBUG, "NDIS: Failed to add PAE group address "
2771 "to the multicast list");
2772 return -1;
2773 }
2774
2775 return 0;
2776 }
2777
2778
2779 static void * wpa_driver_ndis_init(void *ctx, const char *ifname)
2780 {
2781 struct wpa_driver_ndis_data *drv;
2782 u32 mode;
2783
2784 drv = os_zalloc(sizeof(*drv));
2785 if (drv == NULL)
2786 return NULL;
2787 drv->ctx = ctx;
2788 /*
2789 * Compatibility code to strip possible prefix from the GUID. Previous
2790 * versions include \Device\NPF_ prefix for all names, but the internal
2791 * interface name is now only the GUI. Both Packet32 and NDISUIO
2792 * prefixes are supported.
2793 */
2794 if (os_strncmp(ifname, "\\Device\\NPF_", 12) == 0)
2795 ifname += 12;
2796 else if (os_strncmp(ifname, "\\DEVICE\\", 8) == 0)
2797 ifname += 8;
2798 os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
2799
2800 if (wpa_driver_ndis_adapter_init(drv) < 0) {
2801 os_free(drv);
2802 return NULL;
2803 }
2804
2805 if (wpa_driver_ndis_get_names(drv) < 0) {
2806 wpa_driver_ndis_adapter_close(drv);
2807 os_free(drv);
2808 return NULL;
2809 }
2810
2811 wpa_driver_ndis_set_wzc(drv, 0);
2812
2813 if (wpa_driver_ndis_adapter_open(drv) < 0) {
2814 wpa_driver_ndis_adapter_close(drv);
2815 os_free(drv);
2816 return NULL;
2817 }
2818
2819 if (ndis_get_oid(drv, OID_802_3_CURRENT_ADDRESS,
2820 (char *) drv->own_addr, ETH_ALEN) < 0) {
2821 wpa_printf(MSG_DEBUG, "NDIS: Get OID_802_3_CURRENT_ADDRESS "
2822 "failed");
2823 wpa_driver_ndis_adapter_close(drv);
2824 os_free(drv);
2825 return NULL;
2826 }
2827 wpa_driver_ndis_get_capability(drv);
2828
2829 /* Make sure that the driver does not have any obsolete PMKID entries.
2830 */
2831 wpa_driver_ndis_flush_pmkid(drv);
2832
2833 /*
2834 * Disconnect to make sure that driver re-associates if it was
2835 * connected.
2836 */
2837 wpa_driver_ndis_disconnect(drv);
2838
2839 eloop_register_timeout(1, 0, wpa_driver_ndis_poll_timeout, drv, NULL);
2840
2841 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
2842 drv->events = ndis_events_init(&drv->events_pipe, &drv->event_avail,
2843 drv->ifname, drv->adapter_desc);
2844 if (drv->events == NULL) {
2845 wpa_driver_ndis_deinit(drv);
2846 return NULL;
2847 }
2848 eloop_register_event(drv->event_avail, sizeof(drv->event_avail),
2849 wpa_driver_ndis_event_pipe_cb, drv, NULL);
2850 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
2851
2852 #ifdef _WIN32_WCE
2853 if (ndisuio_notification_init(drv) < 0) {
2854 wpa_driver_ndis_deinit(drv);
2855 return NULL;
2856 }
2857 #endif /* _WIN32_WCE */
2858
2859 /* Set mode here in case card was configured for ad-hoc mode
2860 * previously. */
2861 mode = Ndis802_11Infrastructure;
2862 if (ndis_set_oid(drv, OID_802_11_INFRASTRUCTURE_MODE,
2863 (char *) &mode, sizeof(mode)) < 0) {
2864 char buf[8];
2865 int res;
2866 wpa_printf(MSG_DEBUG, "NDIS: Failed to set "
2867 "OID_802_11_INFRASTRUCTURE_MODE (%d)",
2868 (int) mode);
2869 /* Try to continue anyway */
2870
2871 res = ndis_get_oid(drv, OID_DOT11_CURRENT_OPERATION_MODE, buf,
2872 sizeof(buf));
2873 if (res > 0) {
2874 wpa_printf(MSG_INFO, "NDIS: The driver seems to use "
2875 "Native 802.11 OIDs. These are not yet "
2876 "fully supported.");
2877 drv->native80211 = 1;
2878 } else if (!drv->has_capability || drv->capa.enc == 0) {
2879 /*
2880 * Note: This will also happen with NDIS 6 drivers with
2881 * Vista.
2882 */
2883 wpa_printf(MSG_DEBUG, "NDIS: Driver did not provide "
2884 "any wireless capabilities - assume it is "
2885 "a wired interface");
2886 drv->wired = 1;
2887 drv->capa.flags |= WPA_DRIVER_FLAGS_WIRED;
2888 drv->has_capability = 1;
2889 ndis_add_multicast(drv);
2890 }
2891 }
2892
2893 return drv;
2894 }
2895
2896
2897 static void wpa_driver_ndis_deinit(void *priv)
2898 {
2899 struct wpa_driver_ndis_data *drv = priv;
2900
2901 #ifdef CONFIG_NDIS_EVENTS_INTEGRATED
2902 if (drv->events) {
2903 eloop_unregister_event(drv->event_avail,
2904 sizeof(drv->event_avail));
2905 ndis_events_deinit(drv->events);
2906 }
2907 #endif /* CONFIG_NDIS_EVENTS_INTEGRATED */
2908
2909 #ifdef _WIN32_WCE
2910 ndisuio_notification_deinit(drv);
2911 #endif /* _WIN32_WCE */
2912
2913 eloop_cancel_timeout(wpa_driver_ndis_scan_timeout, drv, drv->ctx);
2914 eloop_cancel_timeout(wpa_driver_ndis_poll_timeout, drv, NULL);
2915 wpa_driver_ndis_flush_pmkid(drv);
2916 wpa_driver_ndis_disconnect(drv);
2917 if (wpa_driver_ndis_radio_off(drv) < 0) {
2918 wpa_printf(MSG_DEBUG, "NDIS: failed to disassociate and turn "
2919 "radio off");
2920 }
2921
2922 wpa_driver_ndis_adapter_close(drv);
2923
2924 if (drv->wzc_disabled)
2925 wpa_driver_ndis_set_wzc(drv, 1);
2926
2927 #ifdef _WIN32_WCE
2928 os_free(drv->adapter_name);
2929 #endif /* _WIN32_WCE */
2930 os_free(drv->adapter_desc);
2931 os_free(drv);
2932 }
2933
2934
2935 static struct wpa_interface_info *
2936 wpa_driver_ndis_get_interfaces(void *global_priv)
2937 {
2938 struct wpa_interface_info *iface = NULL, *niface;
2939
2940 #ifdef CONFIG_USE_NDISUIO
2941 NDISUIO_QUERY_BINDING *b;
2942 size_t blen = sizeof(*b) + 1024;
2943 int i, error;
2944 DWORD written;
2945 char name[256], desc[256];
2946 WCHAR *pos;
2947 size_t j, len;
2948 HANDLE ndisuio;
2949
2950 ndisuio = CreateFile(NDISUIO_DEVICE_NAME,
2951 GENERIC_READ | GENERIC_WRITE, 0, NULL,
2952 OPEN_EXISTING,
2953 FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
2954 INVALID_HANDLE_VALUE);
2955 if (ndisuio == INVALID_HANDLE_VALUE) {
2956 wpa_printf(MSG_ERROR, "NDIS: Failed to open connection to "
2957 "NDISUIO: %d", (int) GetLastError());
2958 return NULL;
2959 }
2960
2961 #ifndef _WIN32_WCE
2962 if (!DeviceIoControl(ndisuio, IOCTL_NDISUIO_BIND_WAIT, NULL, 0,
2963 NULL, 0, &written, NULL)) {
2964 wpa_printf(MSG_ERROR, "NDIS: IOCTL_NDISUIO_BIND_WAIT failed: "
2965 "%d", (int) GetLastError());
2966 CloseHandle(ndisuio);
2967 return NULL;
2968 }
2969 #endif /* _WIN32_WCE */
2970
2971 b = os_malloc(blen);
2972 if (b == NULL) {
2973 CloseHandle(ndisuio);
2974 return NULL;
2975 }
2976
2977 for (i = 0; ; i++) {
2978 os_memset(b, 0, blen);
2979 b->BindingIndex = i;
2980 if (!DeviceIoControl(ndisuio, IOCTL_NDISUIO_QUERY_BINDING,
2981 b, sizeof(NDISUIO_QUERY_BINDING), b, blen,
2982 &written, NULL)) {
2983 error = (int) GetLastError();
2984 if (error == ERROR_NO_MORE_ITEMS)
2985 break;
2986 wpa_printf(MSG_DEBUG, "IOCTL_NDISUIO_QUERY_BINDING "
2987 "failed: %d", error);
2988 break;
2989 }
2990
2991 pos = (WCHAR *) ((char *) b + b->DeviceNameOffset);
2992 len = b->DeviceNameLength;
2993 if (len >= sizeof(name))
2994 len = sizeof(name) - 1;
2995 for (j = 0; j < len; j++)
2996 name[j] = (char) pos[j];
2997 name[len] = '\0';
2998
2999 pos = (WCHAR *) ((char *) b + b->DeviceDescrOffset);
3000 len = b->DeviceDescrLength;
3001 if (len >= sizeof(desc))
3002 len = sizeof(desc) - 1;
3003 for (j = 0; j < len; j++)
3004 desc[j] = (char) pos[j];
3005 desc[len] = '\0';
3006
3007 wpa_printf(MSG_DEBUG, "NDIS: %d - %s - %s", i, name, desc);
3008
3009 niface = os_zalloc(sizeof(*niface));
3010 if (niface == NULL)
3011 break;
3012 niface->drv_name = "ndis";
3013 if (os_strncmp(name, "\\DEVICE\\", 8) == 0)
3014 niface->ifname = os_strdup(name + 8);
3015 else
3016 niface->ifname = os_strdup(name);
3017 if (niface->ifname == NULL) {
3018 os_free(niface);
3019 break;
3020 }
3021 niface->desc = os_strdup(desc);
3022 niface->next = iface;
3023 iface = niface;
3024 }
3025
3026 os_free(b);
3027 CloseHandle(ndisuio);
3028 #else /* CONFIG_USE_NDISUIO */
3029 PTSTR _names;
3030 char *names, *pos, *pos2;
3031 ULONG len;
3032 BOOLEAN res;
3033 char *name[MAX_ADAPTERS];
3034 char *desc[MAX_ADAPTERS];
3035 int num_name, num_desc, i;
3036
3037 wpa_printf(MSG_DEBUG, "NDIS: Packet.dll version: %s",
3038 PacketGetVersion());
3039
3040 len = 8192;
3041 _names = os_zalloc(len);
3042 if (_names == NULL)
3043 return NULL;
3044
3045 res = PacketGetAdapterNames(_names, &len);
3046 if (!res && len > 8192) {
3047 os_free(_names);
3048 _names = os_zalloc(len);
3049 if (_names == NULL)
3050 return NULL;
3051 res = PacketGetAdapterNames(_names, &len);
3052 }
3053
3054 if (!res) {
3055 wpa_printf(MSG_ERROR, "NDIS: Failed to get adapter list "
3056 "(PacketGetAdapterNames)");
3057 os_free(_names);
3058 return NULL;
3059 }
3060
3061 names = (char *) _names;
3062 if (names[0] && names[1] == '\0' && names[2] && names[3] == '\0') {
3063 wpa_printf(MSG_DEBUG, "NDIS: Looks like adapter names are in "
3064 "UNICODE");
3065 /* Convert to ASCII */
3066 pos2 = pos = names;
3067 while (pos2 < names + len) {
3068 if (pos2[0] == '\0' && pos2[1] == '\0' &&
3069 pos2[2] == '\0' && pos2[3] == '\0') {
3070 pos2 += 4;
3071 break;
3072 }
3073 *pos++ = pos2[0];
3074 pos2 += 2;
3075 }
3076 os_memcpy(pos + 2, names, pos - names);
3077 pos += 2;
3078 } else
3079 pos = names;
3080
3081 num_name = 0;
3082 while (pos < names + len) {
3083 name[num_name] = pos;
3084 while (*pos && pos < names + len)
3085 pos++;
3086 if (pos + 1 >= names + len) {
3087 os_free(names);
3088 return NULL;
3089 }
3090 pos++;
3091 num_name++;
3092 if (num_name >= MAX_ADAPTERS) {
3093 wpa_printf(MSG_DEBUG, "NDIS: Too many adapters");
3094 os_free(names);
3095 return NULL;
3096 }
3097 if (*pos == '\0') {
3098 wpa_printf(MSG_DEBUG, "NDIS: %d adapter names found",
3099 num_name);
3100 pos++;
3101 break;
3102 }
3103 }
3104
3105 num_desc = 0;
3106 while (pos < names + len) {
3107 desc[num_desc] = pos;
3108 while (*pos && pos < names + len)
3109 pos++;
3110 if (pos + 1 >= names + len) {
3111 os_free(names);
3112 return NULL;
3113 }
3114 pos++;
3115 num_desc++;
3116 if (num_desc >= MAX_ADAPTERS) {
3117 wpa_printf(MSG_DEBUG, "NDIS: Too many adapter "
3118 "descriptions");
3119 os_free(names);
3120 return NULL;
3121 }
3122 if (*pos == '\0') {
3123 wpa_printf(MSG_DEBUG, "NDIS: %d adapter descriptions "
3124 "found", num_name);
3125 pos++;
3126 break;
3127 }
3128 }
3129
3130 /*
3131 * Windows 98 with Packet.dll 3.0 alpha3 does not include adapter
3132 * descriptions. Fill in dummy descriptors to work around this.
3133 */
3134 while (num_desc < num_name)
3135 desc[num_desc++] = "dummy description";
3136
3137 if (num_name != num_desc) {
3138 wpa_printf(MSG_DEBUG, "NDIS: mismatch in adapter name and "
3139 "description counts (%d != %d)",
3140 num_name, num_desc);
3141 os_free(names);
3142 return NULL;
3143 }
3144
3145 for (i = 0; i < num_name; i++) {
3146 niface = os_zalloc(sizeof(*niface));
3147 if (niface == NULL)
3148 break;
3149 niface->drv_name = "ndis";
3150 if (os_strncmp(name[i], "\\Device\\NPF_", 12) == 0)
3151 niface->ifname = os_strdup(name[i] + 12);
3152 else
3153 niface->ifname = os_strdup(name[i]);
3154 if (niface->ifname == NULL) {
3155 os_free(niface);
3156 break;
3157 }
3158 niface->desc = os_strdup(desc[i]);
3159 niface->next = iface;
3160 iface = niface;
3161 }
3162
3163 #endif /* CONFIG_USE_NDISUIO */
3164
3165 return iface;
3166 }
3167
3168
3169 const struct wpa_driver_ops wpa_driver_ndis_ops = {
3170 "ndis",
3171 "Windows NDIS driver",
3172 wpa_driver_ndis_get_bssid,
3173 wpa_driver_ndis_get_ssid,
3174 wpa_driver_ndis_set_key,
3175 wpa_driver_ndis_init,
3176 wpa_driver_ndis_deinit,
3177 NULL /* set_param */,
3178 NULL /* set_countermeasures */,
3179 wpa_driver_ndis_deauthenticate,
3180 wpa_driver_ndis_disassociate,
3181 wpa_driver_ndis_associate,
3182 wpa_driver_ndis_add_pmkid,
3183 wpa_driver_ndis_remove_pmkid,
3184 wpa_driver_ndis_flush_pmkid,
3185 wpa_driver_ndis_get_capa,
3186 wpa_driver_ndis_poll,
3187 wpa_driver_ndis_get_ifname,
3188 wpa_driver_ndis_get_mac_addr,
3189 NULL /* send_eapol */,
3190 NULL /* set_operstate */,
3191 NULL /* mlme_setprotection */,
3192 NULL /* get_hw_feature_data */,
3193 NULL /* set_channel */,
3194 NULL /* set_ssid */,
3195 NULL /* set_bssid */,
3196 NULL /* send_mlme */,
3197 NULL /* mlme_add_sta */,
3198 NULL /* mlme_remove_sta */,
3199 NULL /* update_ft_ies */,
3200 NULL /* send_ft_action */,
3201 wpa_driver_ndis_get_scan_results,
3202 NULL /* set_country */,
3203 NULL /* global_init */,
3204 NULL /* global_deinit */,
3205 NULL /* init2 */,
3206 wpa_driver_ndis_get_interfaces,
3207 wpa_driver_ndis_scan,
3208 NULL /* authenticate */,
3209 NULL /* set_beacon */,
3210 NULL /* hapd_init */,
3211 NULL /* hapd_deinit */,
3212 NULL /* set_ieee8021x */,
3213 NULL /* set_privacy */,
3214 NULL /* get_seqnum */,
3215 NULL /* flush */,
3216 NULL /* set_generic_elem */,
3217 NULL /* read_sta_data */,
3218 NULL /* hapd_send_eapol */,
3219 NULL /* sta_deauth */,
3220 NULL /* sta_disassoc */,
3221 NULL /* sta_remove */,
3222 NULL /* hapd_get_ssid */,
3223 NULL /* hapd_set_ssid */,
3224 NULL /* hapd_set_countermeasures */,
3225 NULL /* sta_add */,
3226 NULL /* get_inact_sec */,
3227 NULL /* sta_clear_stats */,
3228 NULL /* set_freq */,
3229 NULL /* set_rts */,
3230 NULL /* set_frag */,
3231 NULL /* sta_set_flags */,
3232 NULL /* set_rate_sets */,
3233 NULL /* set_cts_protect */,
3234 NULL /* set_preamble */,
3235 NULL /* set_short_slot_time */,
3236 NULL /* set_tx_queue_params */,
3237 NULL /* valid_bss_mask */,
3238 NULL /* if_add */,
3239 NULL /* if_remove */,
3240 NULL /* set_sta_vlan */,
3241 NULL /* commit */,
3242 NULL /* send_ether */,
3243 NULL /* set_radius_acl_auth */,
3244 NULL /* set_radius_acl_expire */,
3245 NULL /* set_ht_params */,
3246 NULL /* set_ap_wps_ie */,
3247 NULL /* set_supp_port */,
3248 NULL /* set_wds_sta */
3249 };