src/p2p/p2p.c

   1 /*
   2  * Wi-Fi Direct - P2P module
   3  * Copyright (c) 2009-2010, Atheros Communications
   4  *
   5  * This software may be distributed under the terms of the BSD license.
   6  * See README for more details.
   7  */
   8
   9 #include "includes.h"
  10
  11 #include "common.h"
  12 #include "eloop.h"
  13 #include "common/ieee802_11_defs.h"
  14 #include "common/ieee802_11_common.h"
  15 #include "common/wpa_ctrl.h"
  16 #include "wps/wps_i.h"
  17 #include "p2p_i.h"
  18 #include "p2p.h"
  19
  20
  21 static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx);
  22 static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev);
  23 static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
  24                                      const u8 *sa, const u8 *data, size_t len,
  25                                      int rx_freq);
  26 static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
  27                                       const u8 *sa, const u8 *data,
  28                                       size_t len);
  29 static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx);
  30 static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx);
  31
  32
  33 /*
  34  * p2p_scan recovery timeout
  35  *
  36  * Many drivers are using 30 second timeout on scan results. Allow a bit larger
  37  * timeout for this to avoid hitting P2P timeout unnecessarily.
  38  */
  39 #define P2P_SCAN_TIMEOUT 35
  40
  41 /**
  42  * P2P_PEER_EXPIRATION_AGE - Number of seconds after which inactive peer
  43  * entries will be removed
  44  */
  45 #ifdef ANDROID_P2P
  46 #define P2P_PEER_EXPIRATION_AGE 30
  47 #else
  48 #define P2P_PEER_EXPIRATION_AGE 300
  49 #endif
  50
  51 #define P2P_PEER_EXPIRATION_INTERVAL (P2P_PEER_EXPIRATION_AGE / 2)
  52
  53 #ifdef ANDROID_P2P
  54 int p2p_connection_in_progress(struct p2p_data *p2p)
  55 {
  56         int ret = 0;
  57
  58         switch (p2p->state) {
  59                 case P2P_CONNECT:
  60                 case P2P_CONNECT_LISTEN:
  61                 case P2P_GO_NEG:
  62                 case P2P_WAIT_PEER_CONNECT:
  63                 case P2P_WAIT_PEER_IDLE:
  64                 case P2P_PROVISIONING:
  65                 case P2P_INVITE:
  66                 case P2P_INVITE_LISTEN:
  67                         ret = 1;
  68                         break;
  69
  70                 default:
  71                         wpa_printf(MSG_DEBUG, "p2p_connection_in_progress state %d", p2p->state);
  72                         ret = 0;
  73         }
  74
  75         return ret;
  76 }
  77 #endif
  78
  79 static void p2p_expire_peers(struct p2p_data *p2p)
  80 {
  81         struct p2p_device *dev, *n;
  82         struct os_time now;
  83         size_t i;
  84
  85         os_get_time(&now);
  86         dl_list_for_each_safe(dev, n, &p2p->devices, struct p2p_device, list) {
  87                 if (dev->last_seen.sec + P2P_PEER_EXPIRATION_AGE >= now.sec)
  88                         continue;
  89
  90                 if (p2p->cfg->go_connected &&
  91                     p2p->cfg->go_connected(p2p->cfg->cb_ctx,
  92                                            dev->info.p2p_device_addr)) {
  93                         /*
  94                          * We are connected as a client to a group in which the
  95                          * peer is the GO, so do not expire the peer entry.
  96                          */
  97                         os_get_time(&dev->last_seen);
  98                         continue;
  99                 }
 100
 101                 for (i = 0; i < p2p->num_groups; i++) {
 102                         if (p2p_group_is_client_connected(
 103                                     p2p->groups[i], dev->info.p2p_device_addr))
 104                                 break;
 105                 }
 106                 if (i < p2p->num_groups) {
 107                         /*
 108                          * The peer is connected as a client in a group where
 109                          * we are the GO, so do not expire the peer entry.
 110                          */
 111                         os_get_time(&dev->last_seen);
 112                         continue;
 113                 }
 114
 115 #ifdef ANDROID_P2P
 116                 /* If Connection is in progress, don't expire the peer
 117                 */
 118                 if (p2p_connection_in_progress(p2p))
 119                         continue;
 120 #endif
 121
 122                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Expiring old peer "
 123                         "entry " MACSTR, MAC2STR(dev->info.p2p_device_addr));
 124 #ifdef ANDROID_P2P
 125                 /* SD_FAIR_POLICY: Update the current sd_dev_list pointer to next device */
 126                 if(&dev->list == p2p->sd_dev_list)
 127                         p2p->sd_dev_list = dev->list.next;
 128 #endif
 129                 dl_list_del(&dev->list);
 130                 p2p_device_free(p2p, dev);
 131         }
 132 }
 133
 134
 135 static void p2p_expiration_timeout(void *eloop_ctx, void *timeout_ctx)
 136 {
 137         struct p2p_data *p2p = eloop_ctx;
 138         p2p_expire_peers(p2p);
 139         eloop_register_timeout(P2P_PEER_EXPIRATION_INTERVAL, 0,
 140                                p2p_expiration_timeout, p2p, NULL);
 141 }
 142
 143
 144 static const char * p2p_state_txt(int state)
 145 {
 146         switch (state) {
 147         case P2P_IDLE:
 148                 return "IDLE";
 149         case P2P_SEARCH:
 150                 return "SEARCH";
 151         case P2P_CONNECT:
 152                 return "CONNECT";
 153         case P2P_CONNECT_LISTEN:
 154                 return "CONNECT_LISTEN";
 155         case P2P_GO_NEG:
 156                 return "GO_NEG";
 157         case P2P_LISTEN_ONLY:
 158                 return "LISTEN_ONLY";
 159         case P2P_WAIT_PEER_CONNECT:
 160                 return "WAIT_PEER_CONNECT";
 161         case P2P_WAIT_PEER_IDLE:
 162                 return "WAIT_PEER_IDLE";
 163         case P2P_SD_DURING_FIND:
 164                 return "SD_DURING_FIND";
 165         case P2P_PROVISIONING:
 166                 return "PROVISIONING";
 167         case P2P_PD_DURING_FIND:
 168                 return "PD_DURING_FIND";
 169         case P2P_INVITE:
 170                 return "INVITE";
 171         case P2P_INVITE_LISTEN:
 172                 return "INVITE_LISTEN";
 173         case P2P_SEARCH_WHEN_READY:
 174                 return "SEARCH_WHEN_READY";
 175         case P2P_CONTINUE_SEARCH_WHEN_READY:
 176                 return "CONTINUE_SEARCH_WHEN_READY";
 177         default:
 178                 return "?";
 179         }
 180 }
 181
 182
 183 u16 p2p_get_provisioning_info(struct p2p_data *p2p, const u8 *addr)
 184 {
 185         struct p2p_device *dev = NULL;
 186
 187         if (!addr || !p2p)
 188                 return 0;
 189
 190         dev = p2p_get_device(p2p, addr);
 191         if (dev)
 192                 return dev->wps_prov_info;
 193         else
 194                 return 0;
 195 }
 196
 197
 198 void p2p_clear_provisioning_info(struct p2p_data *p2p, const u8 *addr)
 199 {
 200         struct p2p_device *dev = NULL;
 201
 202         if (!addr || !p2p)
 203                 return;
 204
 205         dev = p2p_get_device(p2p, addr);
 206         if (dev)
 207                 dev->wps_prov_info = 0;
 208 }
 209
 210
 211 void p2p_set_state(struct p2p_data *p2p, int new_state)
 212 {
 213         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: State %s -> %s",
 214                 p2p_state_txt(p2p->state), p2p_state_txt(new_state));
 215         p2p->state = new_state;
 216 }
 217
 218
 219 void p2p_set_timeout(struct p2p_data *p2p, unsigned int sec, unsigned int usec)
 220 {
 221         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 222                 "P2P: Set timeout (state=%s): %u.%06u sec",
 223                 p2p_state_txt(p2p->state), sec, usec);
 224         eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
 225         eloop_register_timeout(sec, usec, p2p_state_timeout, p2p, NULL);
 226 }
 227
 228
 229 void p2p_clear_timeout(struct p2p_data *p2p)
 230 {
 231         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Clear timeout (state=%s)",
 232                 p2p_state_txt(p2p->state));
 233         eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
 234 }
 235
 236
 237 void p2p_go_neg_failed(struct p2p_data *p2p, struct p2p_device *peer,
 238                        int status)
 239 {
 240         struct p2p_go_neg_results res;
 241         p2p_clear_timeout(p2p);
 242         p2p_set_state(p2p, P2P_IDLE);
 243         if (p2p->go_neg_peer)
 244                 p2p->go_neg_peer->wps_method = WPS_NOT_READY;
 245         p2p->go_neg_peer = NULL;
 246
 247         os_memset(&res, 0, sizeof(res));
 248         res.status = status;
 249         if (peer) {
 250                 os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr,
 251                           ETH_ALEN);
 252                 os_memcpy(res.peer_interface_addr, peer->intended_addr,
 253                           ETH_ALEN);
 254         }
 255         p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
 256 }
 257
 258
 259 static void p2p_listen_in_find(struct p2p_data *p2p)
 260 {
 261         unsigned int r, tu;
 262         int freq;
 263         struct wpabuf *ies;
 264
 265         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 266                 "P2P: Starting short listen state (state=%s)",
 267                 p2p_state_txt(p2p->state));
 268
 269         freq = p2p_channel_to_freq(p2p->cfg->country, p2p->cfg->reg_class,
 270                                    p2p->cfg->channel);
 271         if (freq < 0) {
 272                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 273                         "P2P: Unknown regulatory class/channel");
 274                 return;
 275         }
 276
 277         os_get_random((u8 *) &r, sizeof(r));
 278         tu = (r % ((p2p->max_disc_int - p2p->min_disc_int) + 1) +
 279               p2p->min_disc_int) * 100;
 280
 281         p2p->pending_listen_freq = freq;
 282         p2p->pending_listen_sec = 0;
 283         p2p->pending_listen_usec = 1024 * tu;
 284
 285         ies = p2p_build_probe_resp_ies(p2p);
 286         if (ies == NULL)
 287                 return;
 288
 289         if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, 1024 * tu / 1000,
 290                     ies) < 0) {
 291                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 292                         "P2P: Failed to start listen mode");
 293                 p2p->pending_listen_freq = 0;
 294         }
 295         wpabuf_free(ies);
 296 }
 297
 298
 299 int p2p_listen(struct p2p_data *p2p, unsigned int timeout)
 300 {
 301         int freq;
 302         struct wpabuf *ies;
 303
 304         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 305                 "P2P: Going to listen(only) state");
 306
 307         freq = p2p_channel_to_freq(p2p->cfg->country, p2p->cfg->reg_class,
 308                                    p2p->cfg->channel);
 309         if (freq < 0) {
 310                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 311                         "P2P: Unknown regulatory class/channel");
 312                 return -1;
 313         }
 314
 315         p2p->pending_listen_freq = freq;
 316         p2p->pending_listen_sec = timeout / 1000;
 317         p2p->pending_listen_usec = (timeout % 1000) * 1000;
 318
 319         if (p2p->p2p_scan_running) {
 320                 if (p2p->start_after_scan == P2P_AFTER_SCAN_CONNECT) {
 321                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 322                                 "P2P: p2p_scan running - connect is already "
 323                                 "pending - skip listen");
 324                         return 0;
 325                 }
 326                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 327                         "P2P: p2p_scan running - delay start of listen state");
 328                 p2p->start_after_scan = P2P_AFTER_SCAN_LISTEN;
 329                 return 0;
 330         }
 331
 332         ies = p2p_build_probe_resp_ies(p2p);
 333         if (ies == NULL)
 334                 return -1;
 335
 336         if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, timeout, ies) < 0) {
 337                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 338                         "P2P: Failed to start listen mode");
 339                 p2p->pending_listen_freq = 0;
 340                 wpabuf_free(ies);
 341                 return -1;
 342         }
 343         wpabuf_free(ies);
 344
 345         p2p_set_state(p2p, P2P_LISTEN_ONLY);
 346
 347         return 0;
 348 }
 349
 350
 351 static void p2p_device_clear_reported(struct p2p_data *p2p)
 352 {
 353         struct p2p_device *dev;
 354         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list)
 355                 dev->flags &= ~P2P_DEV_REPORTED;
 356 }
 357
 358
 359 /**
 360  * p2p_get_device - Fetch a peer entry
 361  * @p2p: P2P module context from p2p_init()
 362  * @addr: P2P Device Address of the peer
 363  * Returns: Pointer to the device entry or %NULL if not found
 364  */
 365 struct p2p_device * p2p_get_device(struct p2p_data *p2p, const u8 *addr)
 366 {
 367         struct p2p_device *dev;
 368         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 369                 if (os_memcmp(dev->info.p2p_device_addr, addr, ETH_ALEN) == 0)
 370                         return dev;
 371         }
 372         return NULL;
 373 }
 374
 375
 376 /**
 377  * p2p_get_device_interface - Fetch a peer entry based on P2P Interface Address
 378  * @p2p: P2P module context from p2p_init()
 379  * @addr: P2P Interface Address of the peer
 380  * Returns: Pointer to the device entry or %NULL if not found
 381  */
 382 struct p2p_device * p2p_get_device_interface(struct p2p_data *p2p,
 383                                              const u8 *addr)
 384 {
 385         struct p2p_device *dev;
 386         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 387                 if (os_memcmp(dev->interface_addr, addr, ETH_ALEN) == 0)
 388                         return dev;
 389         }
 390         return NULL;
 391 }
 392
 393
 394 /**
 395  * p2p_create_device - Create a peer entry
 396  * @p2p: P2P module context from p2p_init()
 397  * @addr: P2P Device Address of the peer
 398  * Returns: Pointer to the device entry or %NULL on failure
 399  *
 400  * If there is already an entry for the peer, it will be returned instead of
 401  * creating a new one.
 402  */
 403 static struct p2p_device * p2p_create_device(struct p2p_data *p2p,
 404                                              const u8 *addr)
 405 {
 406         struct p2p_device *dev, *oldest = NULL;
 407         size_t count = 0;
 408
 409         dev = p2p_get_device(p2p, addr);
 410         if (dev)
 411                 return dev;
 412
 413         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 414                 count++;
 415                 if (oldest == NULL ||
 416                     os_time_before(&dev->last_seen, &oldest->last_seen))
 417                         oldest = dev;
 418         }
 419         if (count + 1 > p2p->cfg->max_peers && oldest) {
 420                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 421                         "P2P: Remove oldest peer entry to make room for a new "
 422                         "peer");
 423 #ifdef ANDROID_P2P
 424                 /* SD_FAIR_POLICY: Update the current sd_dev_list pointer to next device */
 425                 if(&oldest->list == p2p->sd_dev_list)
 426                         p2p->sd_dev_list = oldest->list.next;
 427 #endif
 428                 dl_list_del(&oldest->list);
 429                 p2p_device_free(p2p, oldest);
 430         }
 431
 432         dev = os_zalloc(sizeof(*dev));
 433         if (dev == NULL)
 434                 return NULL;
 435         dl_list_add(&p2p->devices, &dev->list);
 436         os_memcpy(dev->info.p2p_device_addr, addr, ETH_ALEN);
 437
 438         return dev;
 439 }
 440
 441
 442 static void p2p_copy_client_info(struct p2p_device *dev,
 443                                  struct p2p_client_info *cli)
 444 {
 445         os_memcpy(dev->info.device_name, cli->dev_name, cli->dev_name_len);
 446         dev->info.device_name[cli->dev_name_len] = '\0';
 447         dev->info.dev_capab = cli->dev_capab;
 448         dev->info.config_methods = cli->config_methods;
 449         os_memcpy(dev->info.pri_dev_type, cli->pri_dev_type, 8);
 450         dev->info.wps_sec_dev_type_list_len = 8 * cli->num_sec_dev_types;
 451         os_memcpy(dev->info.wps_sec_dev_type_list, cli->sec_dev_types,
 452                   dev->info.wps_sec_dev_type_list_len);
 453 }
 454
 455
 456 static int p2p_add_group_clients(struct p2p_data *p2p, const u8 *go_dev_addr,
 457                                  const u8 *go_interface_addr, int freq,
 458                                  const u8 *gi, size_t gi_len)
 459 {
 460         struct p2p_group_info info;
 461         size_t c;
 462         struct p2p_device *dev;
 463
 464         if (gi == NULL)
 465                 return 0;
 466
 467         if (p2p_group_info_parse(gi, gi_len, &info) < 0)
 468                 return -1;
 469
 470         /*
 471          * Clear old data for this group; if the devices are still in the
 472          * group, the information will be restored in the loop following this.
 473          */
 474         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 475                 if (os_memcmp(dev->member_in_go_iface, go_interface_addr,
 476                               ETH_ALEN) == 0) {
 477                         os_memset(dev->member_in_go_iface, 0, ETH_ALEN);
 478                         os_memset(dev->member_in_go_dev, 0, ETH_ALEN);
 479                 }
 480         }
 481
 482         for (c = 0; c < info.num_clients; c++) {
 483                 struct p2p_client_info *cli = &info.client[c];
 484                 if (os_memcmp(cli->p2p_device_addr, p2p->cfg->dev_addr,
 485                               ETH_ALEN) == 0)
 486                         continue; /* ignore our own entry */
 487                 dev = p2p_get_device(p2p, cli->p2p_device_addr);
 488                 if (dev) {
 489                         if (dev->flags & (P2P_DEV_GROUP_CLIENT_ONLY |
 490                                           P2P_DEV_PROBE_REQ_ONLY)) {
 491                                 /*
 492                                  * Update information since we have not
 493                                  * received this directly from the client.
 494                                  */
 495                                 p2p_copy_client_info(dev, cli);
 496                         } else {
 497                                 /*
 498                                  * Need to update P2P Client Discoverability
 499                                  * flag since it is valid only in P2P Group
 500                                  * Info attribute.
 501                                  */
 502                                 dev->info.dev_capab &=
 503                                         ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
 504                                 dev->info.dev_capab |=
 505                                         cli->dev_capab &
 506                                         P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
 507                         }
 508                         if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
 509                                 dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
 510                         }
 511                 } else {
 512                         dev = p2p_create_device(p2p, cli->p2p_device_addr);
 513                         if (dev == NULL)
 514                                 continue;
 515                         dev->flags |= P2P_DEV_GROUP_CLIENT_ONLY;
 516                         p2p_copy_client_info(dev, cli);
 517                         dev->oper_freq = freq;
 518                         p2p->cfg->dev_found(p2p->cfg->cb_ctx,
 519                                             dev->info.p2p_device_addr,
 520                                             &dev->info, 1);
 521                         dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
 522                 }
 523
 524                 os_memcpy(dev->interface_addr, cli->p2p_interface_addr,
 525                           ETH_ALEN);
 526                 os_get_time(&dev->last_seen);
 527                 os_memcpy(dev->member_in_go_dev, go_dev_addr, ETH_ALEN);
 528                 os_memcpy(dev->member_in_go_iface, go_interface_addr,
 529                           ETH_ALEN);
 530         }
 531
 532         return 0;
 533 }
 534
 535
 536 static void p2p_copy_wps_info(struct p2p_device *dev, int probe_req,
 537                               const struct p2p_message *msg)
 538 {
 539         os_memcpy(dev->info.device_name, msg->device_name,
 540                   sizeof(dev->info.device_name));
 541
 542         if (msg->manufacturer &&
 543             msg->manufacturer_len < sizeof(dev->info.manufacturer)) {
 544                 os_memset(dev->info.manufacturer, 0,
 545                           sizeof(dev->info.manufacturer));
 546                 os_memcpy(dev->info.manufacturer, msg->manufacturer,
 547                           msg->manufacturer_len);
 548         }
 549
 550         if (msg->model_name &&
 551             msg->model_name_len < sizeof(dev->info.model_name)) {
 552                 os_memset(dev->info.model_name, 0,
 553                           sizeof(dev->info.model_name));
 554                 os_memcpy(dev->info.model_name, msg->model_name,
 555                           msg->model_name_len);
 556         }
 557
 558         if (msg->model_number &&
 559             msg->model_number_len < sizeof(dev->info.model_number)) {
 560                 os_memset(dev->info.model_number, 0,
 561                           sizeof(dev->info.model_number));
 562                 os_memcpy(dev->info.model_number, msg->model_number,
 563                           msg->model_number_len);
 564         }
 565
 566         if (msg->serial_number &&
 567             msg->serial_number_len < sizeof(dev->info.serial_number)) {
 568                 os_memset(dev->info.serial_number, 0,
 569                           sizeof(dev->info.serial_number));
 570                 os_memcpy(dev->info.serial_number, msg->serial_number,
 571                           msg->serial_number_len);
 572         }
 573
 574         if (msg->pri_dev_type)
 575                 os_memcpy(dev->info.pri_dev_type, msg->pri_dev_type,
 576                           sizeof(dev->info.pri_dev_type));
 577         else if (msg->wps_pri_dev_type)
 578                 os_memcpy(dev->info.pri_dev_type, msg->wps_pri_dev_type,
 579                           sizeof(dev->info.pri_dev_type));
 580
 581         if (msg->wps_sec_dev_type_list) {
 582                 os_memcpy(dev->info.wps_sec_dev_type_list,
 583                           msg->wps_sec_dev_type_list,
 584                           msg->wps_sec_dev_type_list_len);
 585                 dev->info.wps_sec_dev_type_list_len =
 586                         msg->wps_sec_dev_type_list_len;
 587         }
 588
 589         if (msg->capability) {
 590                 /*
 591                  * P2P Client Discoverability bit is reserved in all frames
 592                  * that use this function, so do not change its value here.
 593                  */
 594                 dev->info.dev_capab &= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
 595                 dev->info.dev_capab |= msg->capability[0] &
 596                         ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
 597                 dev->info.group_capab = msg->capability[1];
 598         }
 599
 600         if (msg->ext_listen_timing) {
 601                 dev->ext_listen_period = WPA_GET_LE16(msg->ext_listen_timing);
 602                 dev->ext_listen_interval =
 603                         WPA_GET_LE16(msg->ext_listen_timing + 2);
 604         }
 605
 606         if (!probe_req) {
 607                 dev->info.config_methods = msg->config_methods ?
 608                         msg->config_methods : msg->wps_config_methods;
 609         }
 610 }
 611
 612
 613 /**
 614  * p2p_add_device - Add peer entries based on scan results or P2P frames
 615  * @p2p: P2P module context from p2p_init()
 616  * @addr: Source address of Beacon or Probe Response frame (may be either
 617  *      P2P Device Address or P2P Interface Address)
 618  * @level: Signal level (signal strength of the received frame from the peer)
 619  * @freq: Frequency on which the Beacon or Probe Response frame was received
 620  * @ies: IEs from the Beacon or Probe Response frame
 621  * @ies_len: Length of ies buffer in octets
 622  * @scan_res: Whether this was based on scan results
 623  * Returns: 0 on success, -1 on failure
 624  *
 625  * If the scan result is for a GO, the clients in the group will also be added
 626  * to the peer table. This function can also be used with some other frames
 627  * like Provision Discovery Request that contains P2P Capability and P2P Device
 628  * Info attributes.
 629  */
 630 int p2p_add_device(struct p2p_data *p2p, const u8 *addr, int freq, int level,
 631                    const u8 *ies, size_t ies_len, int scan_res)
 632 {
 633         struct p2p_device *dev;
 634         struct p2p_message msg;
 635         const u8 *p2p_dev_addr;
 636         int i;
 637
 638         os_memset(&msg, 0, sizeof(msg));
 639         if (p2p_parse_ies(ies, ies_len, &msg)) {
 640                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 641                         "P2P: Failed to parse P2P IE for a device entry");
 642                 p2p_parse_free(&msg);
 643                 return -1;
 644         }
 645
 646         if (msg.p2p_device_addr)
 647                 p2p_dev_addr = msg.p2p_device_addr;
 648         else if (msg.device_id)
 649                 p2p_dev_addr = msg.device_id;
 650         else {
 651                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 652                         "P2P: Ignore scan data without P2P Device Info or "
 653                         "P2P Device Id");
 654                 p2p_parse_free(&msg);
 655                 return -1;
 656         }
 657
 658         if (!is_zero_ether_addr(p2p->peer_filter) &&
 659             os_memcmp(p2p_dev_addr, p2p->peer_filter, ETH_ALEN) != 0) {
 660                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Do not add peer "
 661                         "filter for " MACSTR " due to peer filter",
 662                         MAC2STR(p2p_dev_addr));
 663                 return 0;
 664         }
 665
 666         dev = p2p_create_device(p2p, p2p_dev_addr);
 667         if (dev == NULL) {
 668                 p2p_parse_free(&msg);
 669                 return -1;
 670         }
 671         os_get_time(&dev->last_seen);
 672         dev->flags &= ~(P2P_DEV_PROBE_REQ_ONLY | P2P_DEV_GROUP_CLIENT_ONLY);
 673
 674         if (os_memcmp(addr, p2p_dev_addr, ETH_ALEN) != 0)
 675                 os_memcpy(dev->interface_addr, addr, ETH_ALEN);
 676         if (msg.ssid &&
 677             (msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
 678              os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
 679              != 0)) {
 680                 os_memcpy(dev->oper_ssid, msg.ssid + 2, msg.ssid[1]);
 681                 dev->oper_ssid_len = msg.ssid[1];
 682         }
 683
 684         if (freq >= 2412 && freq <= 2484 && msg.ds_params &&
 685             *msg.ds_params >= 1 && *msg.ds_params <= 14) {
 686                 int ds_freq;
 687                 if (*msg.ds_params == 14)
 688                         ds_freq = 2484;
 689                 else
 690                         ds_freq = 2407 + *msg.ds_params * 5;
 691                 if (freq != ds_freq) {
 692                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 693                                 "P2P: Update Listen frequency based on DS "
 694                                 "Parameter Set IE: %d -> %d MHz",
 695                                 freq, ds_freq);
 696                         freq = ds_freq;
 697                 }
 698         }
 699
 700         if (dev->listen_freq && dev->listen_freq != freq && scan_res) {
 701                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 702                         "P2P: Update Listen frequency based on scan "
 703                         "results (" MACSTR " %d -> %d MHz (DS param %d)",
 704                         MAC2STR(dev->info.p2p_device_addr), dev->listen_freq,
 705                         freq, msg.ds_params ? *msg.ds_params : -1);
 706         }
 707         if (scan_res) {
 708                 dev->listen_freq = freq;
 709                 if (msg.group_info)
 710                         dev->oper_freq = freq;
 711         }
 712         dev->info.level = level;
 713
 714         p2p_copy_wps_info(dev, 0, &msg);
 715
 716         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
 717                 wpabuf_free(dev->info.wps_vendor_ext[i]);
 718                 dev->info.wps_vendor_ext[i] = NULL;
 719         }
 720
 721         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
 722                 if (msg.wps_vendor_ext[i] == NULL)
 723                         break;
 724                 dev->info.wps_vendor_ext[i] = wpabuf_alloc_copy(
 725                         msg.wps_vendor_ext[i], msg.wps_vendor_ext_len[i]);
 726                 if (dev->info.wps_vendor_ext[i] == NULL)
 727                         break;
 728         }
 729
 730         if (msg.wfd_subelems) {
 731                 wpabuf_free(dev->info.wfd_subelems);
 732                 dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
 733         }
 734
 735         if (scan_res) {
 736                 p2p_add_group_clients(p2p, p2p_dev_addr, addr, freq,
 737                                       msg.group_info, msg.group_info_len);
 738         }
 739
 740         p2p_parse_free(&msg);
 741
 742         if (p2p_pending_sd_req(p2p, dev))
 743                 dev->flags |= P2P_DEV_SD_SCHEDULE;
 744
 745         if (dev->flags & P2P_DEV_REPORTED)
 746                 return 0;
 747
 748         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 749                 "P2P: Peer found with Listen frequency %d MHz", freq);
 750         if (dev->flags & P2P_DEV_USER_REJECTED) {
 751                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 752                         "P2P: Do not report rejected device");
 753                 return 0;
 754         }
 755
 756         p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
 757                             !(dev->flags & P2P_DEV_REPORTED_ONCE));
 758         dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
 759
 760         return 0;
 761 }
 762
 763
 764 static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev)
 765 {
 766         int i;
 767
 768         if (p2p->go_neg_peer == dev) {
 769                 /*
 770                  * If GO Negotiation is in progress, report that it has failed.
 771                  */
 772                 p2p_go_neg_failed(p2p, dev, -1);
 773                 p2p->go_neg_peer = NULL;
 774         }
 775         if (p2p->invite_peer == dev)
 776                 p2p->invite_peer = NULL;
 777         if (p2p->sd_peer == dev)
 778                 p2p->sd_peer = NULL;
 779         if (p2p->pending_client_disc_go == dev)
 780                 p2p->pending_client_disc_go = NULL;
 781
 782         /* dev_lost() device, but only if it was previously dev_found() */
 783         if (dev->flags & P2P_DEV_REPORTED_ONCE)
 784                 p2p->cfg->dev_lost(p2p->cfg->cb_ctx,
 785                                    dev->info.p2p_device_addr);
 786
 787         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
 788                 wpabuf_free(dev->info.wps_vendor_ext[i]);
 789                 dev->info.wps_vendor_ext[i] = NULL;
 790         }
 791
 792         wpabuf_free(dev->info.wfd_subelems);
 793
 794         os_free(dev);
 795 }
 796
 797
 798 static int p2p_get_next_prog_freq(struct p2p_data *p2p)
 799 {
 800         struct p2p_channels *c;
 801         struct p2p_reg_class *cla;
 802         size_t cl, ch;
 803         int found = 0;
 804         u8 reg_class;
 805         u8 channel;
 806         int freq;
 807
 808         c = &p2p->cfg->channels;
 809         for (cl = 0; cl < c->reg_classes; cl++) {
 810                 cla = &c->reg_class[cl];
 811                 if (cla->reg_class != p2p->last_prog_scan_class)
 812                         continue;
 813                 for (ch = 0; ch < cla->channels; ch++) {
 814                         if (cla->channel[ch] == p2p->last_prog_scan_chan) {
 815                                 found = 1;
 816                                 break;
 817                         }
 818                 }
 819                 if (found)
 820                         break;
 821         }
 822
 823         if (!found) {
 824                 /* Start from beginning */
 825                 reg_class = c->reg_class[0].reg_class;
 826                 channel = c->reg_class[0].channel[0];
 827         } else {
 828                 /* Pick the next channel */
 829                 ch++;
 830                 if (ch == cla->channels) {
 831                         cl++;
 832                         if (cl == c->reg_classes)
 833                                 cl = 0;
 834                         ch = 0;
 835                 }
 836                 reg_class = c->reg_class[cl].reg_class;
 837                 channel = c->reg_class[cl].channel[ch];
 838         }
 839
 840         freq = p2p_channel_to_freq(p2p->cfg->country, reg_class, channel);
 841         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Next progressive search "
 842                 "channel: reg_class %u channel %u -> %d MHz",
 843                 reg_class, channel, freq);
 844         p2p->last_prog_scan_class = reg_class;
 845         p2p->last_prog_scan_chan = channel;
 846
 847         if (freq == 2412 || freq == 2437 || freq == 2462)
 848                 return 0; /* No need to add social channels */
 849         return freq;
 850 }
 851
 852
 853 static void p2p_search(struct p2p_data *p2p)
 854 {
 855         int freq = 0;
 856         enum p2p_scan_type type;
 857         u16 pw_id = DEV_PW_DEFAULT;
 858         int res;
 859
 860         if (p2p->drv_in_listen) {
 861                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Driver is still "
 862                         "in Listen state - wait for it to end before "
 863                         "continuing");
 864                 return;
 865         }
 866         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
 867
 868         if (p2p->find_type == P2P_FIND_PROGRESSIVE &&
 869             (freq = p2p_get_next_prog_freq(p2p)) > 0) {
 870                 type = P2P_SCAN_SOCIAL_PLUS_ONE;
 871                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting search "
 872                         "(+ freq %u)", freq);
 873         } else {
 874                 type = P2P_SCAN_SOCIAL;
 875                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting search");
 876         }
 877
 878         res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, type, freq,
 879                                  p2p->num_req_dev_types, p2p->req_dev_types,
 880                                  p2p->find_dev_id, pw_id);
 881         if (res < 0) {
 882                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 883                         "P2P: Scan request failed");
 884                 p2p_continue_find(p2p);
 885         } else if (res == 1) {
 886                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Could not start "
 887                         "p2p_scan at this point - will try again after "
 888                         "previous scan completes");
 889                 p2p_set_state(p2p, P2P_CONTINUE_SEARCH_WHEN_READY);
 890         } else {
 891                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Running p2p_scan");
 892                 p2p->p2p_scan_running = 1;
 893                 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
 894                 eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
 895                                        p2p, NULL);
 896         }
 897 }
 898
 899
 900 static void p2p_find_timeout(void *eloop_ctx, void *timeout_ctx)
 901 {
 902         struct p2p_data *p2p = eloop_ctx;
 903         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Find timeout -> stop");
 904         p2p_stop_find(p2p);
 905 }
 906
 907
 908 static int p2p_run_after_scan(struct p2p_data *p2p)
 909 {
 910         struct p2p_device *dev;
 911         enum p2p_after_scan op;
 912
 913         if (p2p->after_scan_tx) {
 914                 /* TODO: schedule p2p_run_after_scan to be called from TX
 915                  * status callback(?) */
 916                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send pending "
 917                         "Action frame at p2p_scan completion");
 918                 p2p->cfg->send_action(p2p->cfg->cb_ctx,
 919                                       p2p->after_scan_tx->freq,
 920                                       p2p->after_scan_tx->dst,
 921                                       p2p->after_scan_tx->src,
 922                                       p2p->after_scan_tx->bssid,
 923                                       (u8 *) (p2p->after_scan_tx + 1),
 924                                       p2p->after_scan_tx->len,
 925                                       p2p->after_scan_tx->wait_time);
 926                 os_free(p2p->after_scan_tx);
 927                 p2p->after_scan_tx = NULL;
 928 #ifdef ANDROID_P2P
 929                 /* For SD frames, there is a scenario, where we can receive a SD request frame during p2p_scan.
 930                  * At that moment, we will send the SD response from this context. After sending the SD response,
 931                  * we need to continue p2p_find. But if we return 1 from here, p2p_find is going to be stopped.
 932                  */
 933                 return 0;
 934 #else
 935                 return 1;
 936 #endif
 937         }
 938
 939         op = p2p->start_after_scan;
 940         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
 941         switch (op) {
 942         case P2P_AFTER_SCAN_NOTHING:
 943                 break;
 944         case P2P_AFTER_SCAN_LISTEN:
 945                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Start previously "
 946                         "requested Listen state");
 947                 p2p_listen(p2p, p2p->pending_listen_sec * 1000 +
 948                            p2p->pending_listen_usec / 1000);
 949                 return 1;
 950         case P2P_AFTER_SCAN_CONNECT:
 951                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Start previously "
 952                         "requested connect with " MACSTR,
 953                         MAC2STR(p2p->after_scan_peer));
 954                 dev = p2p_get_device(p2p, p2p->after_scan_peer);
 955                 if (dev == NULL) {
 956                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Peer not "
 957                                 "known anymore");
 958                         break;
 959                 }
 960                 p2p_connect_send(p2p, dev);
 961                 return 1;
 962         }
 963
 964         return 0;
 965 }
 966
 967
 968 static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx)
 969 {
 970         struct p2p_data *p2p = eloop_ctx;
 971         int running;
 972         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan timeout "
 973                 "(running=%d)", p2p->p2p_scan_running);
 974         running = p2p->p2p_scan_running;
 975         /* Make sure we recover from missed scan results callback */
 976         p2p->p2p_scan_running = 0;
 977
 978         if (running)
 979                 p2p_run_after_scan(p2p);
 980 }
 981
 982
 983 static void p2p_free_req_dev_types(struct p2p_data *p2p)
 984 {
 985         p2p->num_req_dev_types = 0;
 986         os_free(p2p->req_dev_types);
 987         p2p->req_dev_types = NULL;
 988 }
 989
 990
 991 int p2p_find(struct p2p_data *p2p, unsigned int timeout,
 992              enum p2p_discovery_type type,
 993              unsigned int num_req_dev_types, const u8 *req_dev_types,
 994              const u8 *dev_id, unsigned int search_delay)
 995 {
 996         int res;
 997
 998         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting find (type=%d)",
 999                 type);
1000         if (p2p->p2p_scan_running) {
1001                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan is "
1002                         "already running");
1003         }
1004
1005         p2p_free_req_dev_types(p2p);
1006         if (req_dev_types && num_req_dev_types) {
1007                 p2p->req_dev_types = os_malloc(num_req_dev_types *
1008                                                WPS_DEV_TYPE_LEN);
1009                 if (p2p->req_dev_types == NULL)
1010                         return -1;
1011                 os_memcpy(p2p->req_dev_types, req_dev_types,
1012                           num_req_dev_types * WPS_DEV_TYPE_LEN);
1013                 p2p->num_req_dev_types = num_req_dev_types;
1014         }
1015
1016         if (dev_id) {
1017                 os_memcpy(p2p->find_dev_id_buf, dev_id, ETH_ALEN);
1018                 p2p->find_dev_id = p2p->find_dev_id_buf;
1019         } else
1020                 p2p->find_dev_id = NULL;
1021
1022         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1023         p2p_clear_timeout(p2p);
1024         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1025         p2p->find_type = type;
1026         p2p_device_clear_reported(p2p);
1027         p2p_set_state(p2p, P2P_SEARCH);
1028         p2p->search_delay = search_delay;
1029         p2p->in_search_delay = 0;
1030         eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1031         p2p->last_p2p_find_timeout = timeout;
1032         if (timeout)
1033                 eloop_register_timeout(timeout, 0, p2p_find_timeout,
1034                                        p2p, NULL);
1035         switch (type) {
1036         case P2P_FIND_START_WITH_FULL:
1037         case P2P_FIND_PROGRESSIVE:
1038                 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_FULL, 0,
1039                                          p2p->num_req_dev_types,
1040                                          p2p->req_dev_types, dev_id,
1041                                          DEV_PW_DEFAULT);
1042                 break;
1043         case P2P_FIND_ONLY_SOCIAL:
1044                 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_SOCIAL, 0,
1045                                          p2p->num_req_dev_types,
1046                                          p2p->req_dev_types, dev_id,
1047                                          DEV_PW_DEFAULT);
1048                 break;
1049         default:
1050                 return -1;
1051         }
1052
1053         if (res == 0) {
1054                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Running p2p_scan");
1055                 p2p->p2p_scan_running = 1;
1056                 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
1057                 eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
1058                                        p2p, NULL);
1059         } else if (res == 1) {
1060                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Could not start "
1061                         "p2p_scan at this point - will try again after "
1062                         "previous scan completes");
1063                 res = 0;
1064                 p2p_set_state(p2p, P2P_SEARCH_WHEN_READY);
1065                 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1066         } else {
1067                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Failed to start "
1068                         "p2p_scan");
1069                 p2p_set_state(p2p, P2P_IDLE);
1070                 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1071         }
1072
1073         return res;
1074 }
1075
1076 #ifdef ANDROID_P2P
1077 int p2p_search_pending(struct p2p_data *p2p)
1078 {
1079         if(p2p == NULL)
1080                 return 0;
1081
1082         if(p2p->state == P2P_SEARCH_WHEN_READY)
1083                 return 1;
1084
1085         return 0;
1086 }
1087 #endif
1088
1089 int p2p_other_scan_completed(struct p2p_data *p2p)
1090 {
1091         if (p2p->state == P2P_CONTINUE_SEARCH_WHEN_READY) {
1092                 p2p_set_state(p2p, P2P_SEARCH);
1093                 p2p_search(p2p);
1094                 return 1;
1095         }
1096         if (p2p->state != P2P_SEARCH_WHEN_READY)
1097                 return 0;
1098         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting pending P2P find "
1099                 "now that previous scan was completed");
1100         if (p2p_find(p2p, p2p->last_p2p_find_timeout, p2p->find_type,
1101                      p2p->num_req_dev_types, p2p->req_dev_types,
1102                      p2p->find_dev_id, p2p->search_delay) < 0)
1103                 return 0;
1104         return 1;
1105 }
1106
1107
1108 void p2p_stop_find_for_freq(struct p2p_data *p2p, int freq)
1109 {
1110         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Stopping find");
1111         eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1112         p2p_clear_timeout(p2p);
1113         if (p2p->state == P2P_SEARCH)
1114                 wpa_msg(p2p->cfg->msg_ctx, MSG_INFO, P2P_EVENT_FIND_STOPPED);
1115         p2p_set_state(p2p, P2P_IDLE);
1116         p2p_free_req_dev_types(p2p);
1117         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1118         p2p->go_neg_peer = NULL;
1119         p2p->sd_peer = NULL;
1120         p2p->invite_peer = NULL;
1121         p2p_stop_listen_for_freq(p2p, freq);
1122 }
1123
1124
1125 void p2p_stop_listen_for_freq(struct p2p_data *p2p, int freq)
1126 {
1127         if (freq > 0 && p2p->drv_in_listen == freq && p2p->in_listen) {
1128                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Skip stop_listen "
1129                         "since we are on correct channel for response");
1130                 return;
1131         }
1132         if (p2p->in_listen) {
1133                 p2p->in_listen = 0;
1134                 p2p_clear_timeout(p2p);
1135         }
1136         if (p2p->drv_in_listen) {
1137                 /*
1138                  * The driver may not deliver callback to p2p_listen_end()
1139                  * when the operation gets canceled, so clear the internal
1140                  * variable that is tracking driver state.
1141                  */
1142                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Clear "
1143                         "drv_in_listen (%d)", p2p->drv_in_listen);
1144                 p2p->drv_in_listen = 0;
1145         }
1146         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1147 }
1148
1149
1150 void p2p_stop_find(struct p2p_data *p2p)
1151 {
1152         p2p_stop_find_for_freq(p2p, 0);
1153 }
1154
1155
1156 static int p2p_prepare_channel(struct p2p_data *p2p, unsigned int force_freq)
1157 {
1158         if (force_freq) {
1159                 u8 op_reg_class, op_channel;
1160                 if (p2p_freq_to_channel(p2p->cfg->country, force_freq,
1161                                         &op_reg_class, &op_channel) < 0) {
1162                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1163                                 "P2P: Unsupported frequency %u MHz",
1164                                 force_freq);
1165                         return -1;
1166                 }
1167                 if (!p2p_channels_includes(&p2p->cfg->channels, op_reg_class,
1168                                            op_channel)) {
1169                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1170                                 "P2P: Frequency %u MHz (oper_class %u "
1171                                 "channel %u) not allowed for P2P",
1172                                 force_freq, op_reg_class, op_channel);
1173                         return -1;
1174                 }
1175                 p2p->op_reg_class = op_reg_class;
1176                 p2p->op_channel = op_channel;
1177 #ifndef ANDROID_P2P
1178                 p2p->channels.reg_classes = 1;
1179                 p2p->channels.reg_class[0].channels = 1;
1180                 p2p->channels.reg_class[0].reg_class = p2p->op_reg_class;
1181                 p2p->channels.reg_class[0].channel[0] = p2p->op_channel;
1182 #else
1183                 if(p2p->cfg->p2p_concurrency == P2P_MULTI_CHANNEL_CONCURRENT) {
1184                         /* We we are requesting for a preferred channel. But since
1185                          * are multichannel concurrent, we have to poplulate the
1186                          * p2p_channels with list of channels that we support.
1187                          */
1188 #ifdef ANDROID_P2P
1189                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "Full channel list");
1190 #endif
1191                         os_memcpy(&p2p->channels, &p2p->cfg->channels,
1192                                 sizeof(struct p2p_channels));
1193                 } else {
1194 #ifdef ANDROID_P2P
1195                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "Single channel list %d", p2p->op_channel);
1196 #endif
1197                         p2p->channels.reg_classes = 1;
1198                         p2p->channels.reg_class[0].channels = 1;
1199                         p2p->channels.reg_class[0].reg_class = p2p->op_reg_class;
1200                         p2p->channels.reg_class[0].channel[0] = p2p->op_channel;
1201                 }
1202 #endif
1203         } else {
1204                 u8 op_reg_class, op_channel;
1205
1206                 if (!p2p->cfg->cfg_op_channel && p2p->best_freq_overall > 0 &&
1207                     p2p_supported_freq(p2p, p2p->best_freq_overall) &&
1208                     p2p_freq_to_channel(p2p->cfg->country,
1209                                         p2p->best_freq_overall,
1210                                         &op_reg_class, &op_channel) == 0) {
1211                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1212                                 "P2P: Select best overall channel as "
1213                                 "operating channel preference");
1214                         p2p->op_reg_class = op_reg_class;
1215                         p2p->op_channel = op_channel;
1216                 } else if (!p2p->cfg->cfg_op_channel && p2p->best_freq_5 > 0 &&
1217                            p2p_supported_freq(p2p, p2p->best_freq_5) &&
1218                            p2p_freq_to_channel(p2p->cfg->country,
1219                                                p2p->best_freq_5,
1220                                                &op_reg_class, &op_channel) ==
1221                            0) {
1222                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1223                                 "P2P: Select best 5 GHz channel as "
1224                                 "operating channel preference");
1225                         p2p->op_reg_class = op_reg_class;
1226                         p2p->op_channel = op_channel;
1227                 } else if (!p2p->cfg->cfg_op_channel &&
1228                            p2p->best_freq_24 > 0 &&
1229                            p2p_supported_freq(p2p, p2p->best_freq_24) &&
1230                            p2p_freq_to_channel(p2p->cfg->country,
1231                                                p2p->best_freq_24,
1232                                                &op_reg_class, &op_channel) ==
1233                            0) {
1234                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1235                                 "P2P: Select best 2.4 GHz channel as "
1236                                 "operating channel preference");
1237                         p2p->op_reg_class = op_reg_class;
1238                         p2p->op_channel = op_channel;
1239                 } else {
1240                         p2p->op_reg_class = p2p->cfg->op_reg_class;
1241                         p2p->op_channel = p2p->cfg->op_channel;
1242                 }
1243
1244                 os_memcpy(&p2p->channels, &p2p->cfg->channels,
1245                           sizeof(struct p2p_channels));
1246         }
1247         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1248                 "P2P: Own preference for operation channel: "
1249                 "Operating Class %u Channel %u%s",
1250                 p2p->op_reg_class, p2p->op_channel,
1251                 force_freq ? " (forced)" : "");
1252
1253         return 0;
1254 }
1255
1256
1257 static void p2p_set_dev_persistent(struct p2p_device *dev,
1258                                    int persistent_group)
1259 {
1260         switch (persistent_group) {
1261         case 0:
1262                 dev->flags &= ~(P2P_DEV_PREFER_PERSISTENT_GROUP |
1263                                 P2P_DEV_PREFER_PERSISTENT_RECONN);
1264                 break;
1265         case 1:
1266                 dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP;
1267                 dev->flags &= ~P2P_DEV_PREFER_PERSISTENT_RECONN;
1268                 break;
1269         case 2:
1270                 dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP |
1271                         P2P_DEV_PREFER_PERSISTENT_RECONN;
1272                 break;
1273         }
1274 }
1275
1276
1277 int p2p_connect(struct p2p_data *p2p, const u8 *peer_addr,
1278                 enum p2p_wps_method wps_method,
1279                 int go_intent, const u8 *own_interface_addr,
1280                 unsigned int force_freq, int persistent_group,
1281                 const u8 *force_ssid, size_t force_ssid_len,
1282                 int pd_before_go_neg)
1283 {
1284         struct p2p_device *dev;
1285
1286         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1287                 "P2P: Request to start group negotiation - peer=" MACSTR
1288                 "  GO Intent=%d  Intended Interface Address=" MACSTR
1289                 " wps_method=%d persistent_group=%d pd_before_go_neg=%d force_freq %d",
1290                 MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1291                 wps_method, persistent_group, pd_before_go_neg, force_freq);
1292
1293         if (p2p_prepare_channel(p2p, force_freq) < 0)
1294                 return -1;
1295
1296         dev = p2p_get_device(p2p, peer_addr);
1297         if (dev == NULL || (dev->flags & P2P_DEV_PROBE_REQ_ONLY)) {
1298                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1299                         "P2P: Cannot connect to unknown P2P Device " MACSTR,
1300                         MAC2STR(peer_addr));
1301                 return -1;
1302         }
1303
1304         if (dev->flags & P2P_DEV_GROUP_CLIENT_ONLY) {
1305                 if (!(dev->info.dev_capab &
1306                       P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY)) {
1307                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1308                                 "P2P: Cannot connect to P2P Device " MACSTR
1309                                 " that is in a group and is not discoverable",
1310                                 MAC2STR(peer_addr));
1311                         return -1;
1312                 }
1313                 if (dev->oper_freq <= 0) {
1314                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1315                                 "P2P: Cannot connect to P2P Device " MACSTR
1316                                 " with incomplete information",
1317                                 MAC2STR(peer_addr));
1318                         return -1;
1319                 }
1320
1321                 /*
1322                  * First, try to connect directly. If the peer does not
1323                  * acknowledge frames, assume it is sleeping and use device
1324                  * discoverability via the GO at that point.
1325                  */
1326         }
1327
1328         p2p->ssid_set = 0;
1329         if (force_ssid) {
1330                 wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1331                                   force_ssid, force_ssid_len);
1332                 os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1333                 p2p->ssid_len = force_ssid_len;
1334                 p2p->ssid_set = 1;
1335         }
1336
1337         dev->flags &= ~P2P_DEV_NOT_YET_READY;
1338         dev->flags &= ~P2P_DEV_USER_REJECTED;
1339         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
1340         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
1341         if (pd_before_go_neg)
1342                 dev->flags |= P2P_DEV_PD_BEFORE_GO_NEG;
1343         else
1344                 dev->flags &= ~P2P_DEV_PD_BEFORE_GO_NEG;
1345         dev->connect_reqs = 0;
1346         dev->go_neg_req_sent = 0;
1347         dev->go_state = UNKNOWN_GO;
1348         p2p_set_dev_persistent(dev, persistent_group);
1349         p2p->go_intent = go_intent;
1350         os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1351
1352         if (p2p->state != P2P_IDLE)
1353                 p2p_stop_find(p2p);
1354
1355         if (p2p->after_scan_tx) {
1356                 /*
1357                  * We need to drop the pending frame to avoid issues with the
1358                  * new GO Negotiation, e.g., when the pending frame was from a
1359                  * previous attempt at starting a GO Negotiation.
1360                  */
1361                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Dropped "
1362                         "previous pending Action frame TX that was waiting "
1363                         "for p2p_scan completion");
1364                 os_free(p2p->after_scan_tx);
1365                 p2p->after_scan_tx = NULL;
1366         }
1367
1368         dev->wps_method = wps_method;
1369         dev->status = P2P_SC_SUCCESS;
1370
1371         if (force_freq)
1372                 dev->flags |= P2P_DEV_FORCE_FREQ;
1373         else
1374                 dev->flags &= ~P2P_DEV_FORCE_FREQ;
1375
1376         if (p2p->p2p_scan_running) {
1377                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1378                         "P2P: p2p_scan running - delay connect send");
1379                 p2p->start_after_scan = P2P_AFTER_SCAN_CONNECT;
1380                 os_memcpy(p2p->after_scan_peer, peer_addr, ETH_ALEN);
1381                 return 0;
1382         }
1383         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1384
1385         return p2p_connect_send(p2p, dev);
1386 }
1387
1388
1389 int p2p_authorize(struct p2p_data *p2p, const u8 *peer_addr,
1390                   enum p2p_wps_method wps_method,
1391                   int go_intent, const u8 *own_interface_addr,
1392                   unsigned int force_freq, int persistent_group,
1393                   const u8 *force_ssid, size_t force_ssid_len)
1394 {
1395         struct p2p_device *dev;
1396
1397         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1398                 "P2P: Request to authorize group negotiation - peer=" MACSTR
1399                 "  GO Intent=%d  Intended Interface Address=" MACSTR
1400                 " wps_method=%d  persistent_group=%d",
1401                 MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1402                 wps_method, persistent_group);
1403
1404         if (p2p_prepare_channel(p2p, force_freq) < 0)
1405                 return -1;
1406
1407         dev = p2p_get_device(p2p, peer_addr);
1408         if (dev == NULL) {
1409                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1410                         "P2P: Cannot authorize unknown P2P Device " MACSTR,
1411                         MAC2STR(peer_addr));
1412                 return -1;
1413         }
1414
1415         p2p->ssid_set = 0;
1416         if (force_ssid) {
1417                 wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1418                                   force_ssid, force_ssid_len);
1419                 os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1420                 p2p->ssid_len = force_ssid_len;
1421                 p2p->ssid_set = 1;
1422         }
1423
1424         dev->flags &= ~P2P_DEV_NOT_YET_READY;
1425         dev->flags &= ~P2P_DEV_USER_REJECTED;
1426         dev->go_neg_req_sent = 0;
1427         dev->go_state = UNKNOWN_GO;
1428         p2p_set_dev_persistent(dev, persistent_group);
1429         p2p->go_intent = go_intent;
1430         os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1431
1432         dev->wps_method = wps_method;
1433         dev->status = P2P_SC_SUCCESS;
1434
1435         if (force_freq)
1436                 dev->flags |= P2P_DEV_FORCE_FREQ;
1437         else
1438                 dev->flags &= ~P2P_DEV_FORCE_FREQ;
1439
1440         return 0;
1441 }
1442
1443
1444 void p2p_add_dev_info(struct p2p_data *p2p, const u8 *addr,
1445                       struct p2p_device *dev, struct p2p_message *msg)
1446 {
1447         os_get_time(&dev->last_seen);
1448
1449         p2p_copy_wps_info(dev, 0, msg);
1450
1451         if (msg->listen_channel) {
1452                 int freq;
1453                 freq = p2p_channel_to_freq((char *) msg->listen_channel,
1454                                            msg->listen_channel[3],
1455                                            msg->listen_channel[4]);
1456                 if (freq < 0) {
1457                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1458                                 "P2P: Unknown peer Listen channel: "
1459                                 "country=%c%c(0x%02x) reg_class=%u channel=%u",
1460                                 msg->listen_channel[0],
1461                                 msg->listen_channel[1],
1462                                 msg->listen_channel[2],
1463                                 msg->listen_channel[3],
1464                                 msg->listen_channel[4]);
1465                 } else {
1466                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Update "
1467                                 "peer " MACSTR " Listen channel: %u -> %u MHz",
1468                                 MAC2STR(dev->info.p2p_device_addr),
1469                                 dev->listen_freq, freq);
1470                         dev->listen_freq = freq;
1471                 }
1472         }
1473
1474         if (msg->wfd_subelems) {
1475                 wpabuf_free(dev->info.wfd_subelems);
1476                 dev->info.wfd_subelems = wpabuf_dup(msg->wfd_subelems);
1477         }
1478
1479         if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
1480                 dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
1481                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1482                         "P2P: Completed device entry based on data from "
1483                         "GO Negotiation Request");
1484         } else {
1485                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1486                         "P2P: Created device entry based on GO Neg Req: "
1487                         MACSTR " dev_capab=0x%x group_capab=0x%x name='%s' "
1488                         "listen_freq=%d",
1489                         MAC2STR(dev->info.p2p_device_addr),
1490                         dev->info.dev_capab, dev->info.group_capab,
1491                         dev->info.device_name, dev->listen_freq);
1492         }
1493
1494         dev->flags &= ~P2P_DEV_GROUP_CLIENT_ONLY;
1495
1496         if (dev->flags & P2P_DEV_USER_REJECTED) {
1497                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1498                         "P2P: Do not report rejected device");
1499                 return;
1500         }
1501
1502         p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
1503                             !(dev->flags & P2P_DEV_REPORTED_ONCE));
1504         dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
1505 }
1506
1507
1508 void p2p_build_ssid(struct p2p_data *p2p, u8 *ssid, size_t *ssid_len)
1509 {
1510         os_memcpy(ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
1511         p2p_random((char *) &ssid[P2P_WILDCARD_SSID_LEN], 2);
1512         os_memcpy(&ssid[P2P_WILDCARD_SSID_LEN + 2],
1513                   p2p->cfg->ssid_postfix, p2p->cfg->ssid_postfix_len);
1514         *ssid_len = P2P_WILDCARD_SSID_LEN + 2 + p2p->cfg->ssid_postfix_len;
1515 }
1516
1517
1518 int p2p_go_params(struct p2p_data *p2p, struct p2p_go_neg_results *params)
1519 {
1520         p2p_build_ssid(p2p, params->ssid, &params->ssid_len);
1521         p2p_random(params->passphrase, 8);
1522         return 0;
1523 }
1524
1525
1526 void p2p_go_complete(struct p2p_data *p2p, struct p2p_device *peer)
1527 {
1528         struct p2p_go_neg_results res;
1529         int go = peer->go_state == LOCAL_GO;
1530         struct p2p_channels intersection;
1531         int freqs;
1532         size_t i, j;
1533
1534         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1535                 "P2P: GO Negotiation with " MACSTR " completed (%s will be "
1536                 "GO)", MAC2STR(peer->info.p2p_device_addr),
1537                 go ? "local end" : "peer");
1538
1539         os_memset(&res, 0, sizeof(res));
1540         res.role_go = go;
1541         os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr, ETH_ALEN);
1542         os_memcpy(res.peer_interface_addr, peer->intended_addr, ETH_ALEN);
1543         res.wps_method = peer->wps_method;
1544         if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
1545                 if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
1546                         res.persistent_group = 2;
1547                 else
1548                         res.persistent_group = 1;
1549         }
1550
1551         if (go) {
1552                 /* Setup AP mode for WPS provisioning */
1553                 res.freq = p2p_channel_to_freq(p2p->cfg->country,
1554                                                p2p->op_reg_class,
1555                                                p2p->op_channel);
1556                 os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1557                 res.ssid_len = p2p->ssid_len;
1558                 p2p_random(res.passphrase, 8);
1559         } else {
1560                 res.freq = peer->oper_freq;
1561                 if (p2p->ssid_len) {
1562                         os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1563                         res.ssid_len = p2p->ssid_len;
1564                 }
1565         }
1566
1567         p2p_channels_intersect(&p2p->channels, &peer->channels,
1568                                &intersection);
1569         freqs = 0;
1570         for (i = 0; i < intersection.reg_classes; i++) {
1571                 struct p2p_reg_class *c = &intersection.reg_class[i];
1572                 if (freqs + 1 == P2P_MAX_CHANNELS)
1573                         break;
1574                 for (j = 0; j < c->channels; j++) {
1575                         int freq;
1576                         if (freqs + 1 == P2P_MAX_CHANNELS)
1577                                 break;
1578                         freq = p2p_channel_to_freq(peer->country, c->reg_class,
1579                                                    c->channel[j]);
1580                         if (freq < 0)
1581                                 continue;
1582                         res.freq_list[freqs++] = freq;
1583                 }
1584         }
1585
1586         res.peer_config_timeout = go ? peer->client_timeout : peer->go_timeout;
1587
1588         p2p_clear_timeout(p2p);
1589         p2p->ssid_set = 0;
1590         peer->go_neg_req_sent = 0;
1591         peer->wps_method = WPS_NOT_READY;
1592
1593         p2p_set_state(p2p, P2P_PROVISIONING);
1594         p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
1595 }
1596
1597
1598 static void p2p_rx_p2p_action(struct p2p_data *p2p, const u8 *sa,
1599                               const u8 *data, size_t len, int rx_freq)
1600 {
1601         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1602                 "P2P: RX P2P Public Action from " MACSTR, MAC2STR(sa));
1603         wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Public Action contents", data, len);
1604
1605         if (len < 1)
1606                 return;
1607
1608         switch (data[0]) {
1609         case P2P_GO_NEG_REQ:
1610                 p2p_process_go_neg_req(p2p, sa, data + 1, len - 1, rx_freq);
1611                 break;
1612         case P2P_GO_NEG_RESP:
1613                 p2p_process_go_neg_resp(p2p, sa, data + 1, len - 1, rx_freq);
1614                 break;
1615         case P2P_GO_NEG_CONF:
1616                 p2p_process_go_neg_conf(p2p, sa, data + 1, len - 1);
1617                 break;
1618         case P2P_INVITATION_REQ:
1619                 p2p_process_invitation_req(p2p, sa, data + 1, len - 1,
1620                                            rx_freq);
1621                 break;
1622         case P2P_INVITATION_RESP:
1623                 p2p_process_invitation_resp(p2p, sa, data + 1, len - 1);
1624                 break;
1625         case P2P_PROV_DISC_REQ:
1626                 p2p_process_prov_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1627                 break;
1628         case P2P_PROV_DISC_RESP:
1629                 p2p_process_prov_disc_resp(p2p, sa, data + 1, len - 1);
1630                 break;
1631         case P2P_DEV_DISC_REQ:
1632                 p2p_process_dev_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1633                 break;
1634         case P2P_DEV_DISC_RESP:
1635                 p2p_process_dev_disc_resp(p2p, sa, data + 1, len - 1);
1636                 break;
1637         default:
1638                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1639                         "P2P: Unsupported P2P Public Action frame type %d",
1640                         data[0]);
1641                 break;
1642         }
1643 }
1644
1645
1646 static void p2p_rx_action_public(struct p2p_data *p2p, const u8 *da,
1647                                  const u8 *sa, const u8 *bssid, const u8 *data,
1648                                  size_t len, int freq)
1649 {
1650         if (len < 1)
1651                 return;
1652
1653         switch (data[0]) {
1654         case WLAN_PA_VENDOR_SPECIFIC:
1655                 data++;
1656                 len--;
1657                 if (len < 3)
1658                         return;
1659                 if (WPA_GET_BE24(data) != OUI_WFA)
1660                         return;
1661
1662                 data += 3;
1663                 len -= 3;
1664                 if (len < 1)
1665                         return;
1666
1667                 if (*data != P2P_OUI_TYPE)
1668                         return;
1669
1670                 p2p_rx_p2p_action(p2p, sa, data + 1, len - 1, freq);
1671                 break;
1672         case WLAN_PA_GAS_INITIAL_REQ:
1673                 p2p_rx_gas_initial_req(p2p, sa, data + 1, len - 1, freq);
1674                 break;
1675         case WLAN_PA_GAS_INITIAL_RESP:
1676                 p2p_rx_gas_initial_resp(p2p, sa, data + 1, len - 1, freq);
1677                 break;
1678         case WLAN_PA_GAS_COMEBACK_REQ:
1679                 p2p_rx_gas_comeback_req(p2p, sa, data + 1, len - 1, freq);
1680                 break;
1681         case WLAN_PA_GAS_COMEBACK_RESP:
1682                 p2p_rx_gas_comeback_resp(p2p, sa, data + 1, len - 1, freq);
1683                 break;
1684         }
1685 }
1686
1687
1688 void p2p_rx_action(struct p2p_data *p2p, const u8 *da, const u8 *sa,
1689                    const u8 *bssid, u8 category,
1690                    const u8 *data, size_t len, int freq)
1691 {
1692         if (category == WLAN_ACTION_PUBLIC) {
1693                 p2p_rx_action_public(p2p, da, sa, bssid, data, len, freq);
1694                 return;
1695         }
1696
1697         if (category != WLAN_ACTION_VENDOR_SPECIFIC)
1698                 return;
1699
1700         if (len < 4)
1701                 return;
1702
1703         if (WPA_GET_BE24(data) != OUI_WFA)
1704                 return;
1705         data += 3;
1706         len -= 3;
1707
1708         if (*data != P2P_OUI_TYPE)
1709                 return;
1710         data++;
1711         len--;
1712
1713         /* P2P action frame */
1714         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1715                 "P2P: RX P2P Action from " MACSTR, MAC2STR(sa));
1716         wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Action contents", data, len);
1717
1718         if (len < 1)
1719                 return;
1720         switch (data[0]) {
1721         case P2P_NOA:
1722                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1723                         "P2P: Received P2P Action - Notice of Absence");
1724                 /* TODO */
1725                 break;
1726         case P2P_PRESENCE_REQ:
1727                 p2p_process_presence_req(p2p, da, sa, data + 1, len - 1, freq);
1728                 break;
1729         case P2P_PRESENCE_RESP:
1730                 p2p_process_presence_resp(p2p, da, sa, data + 1, len - 1);
1731                 break;
1732         case P2P_GO_DISC_REQ:
1733                 p2p_process_go_disc_req(p2p, da, sa, data + 1, len - 1, freq);
1734                 break;
1735         default:
1736                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1737                         "P2P: Received P2P Action - unknown type %u", data[0]);
1738                 break;
1739         }
1740 }
1741
1742
1743 static void p2p_go_neg_start(void *eloop_ctx, void *timeout_ctx)
1744 {
1745         struct p2p_data *p2p = eloop_ctx;
1746         if (p2p->go_neg_peer == NULL)
1747                 return;
1748         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1749         p2p->go_neg_peer->status = P2P_SC_SUCCESS;
1750         p2p_connect_send(p2p, p2p->go_neg_peer);
1751 }
1752
1753
1754 static void p2p_invite_start(void *eloop_ctx, void *timeout_ctx)
1755 {
1756         struct p2p_data *p2p = eloop_ctx;
1757         if (p2p->invite_peer == NULL)
1758                 return;
1759         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1760         p2p_invite_send(p2p, p2p->invite_peer, p2p->invite_go_dev_addr);
1761 }
1762
1763
1764 static void p2p_add_dev_from_probe_req(struct p2p_data *p2p, const u8 *addr,
1765                                        const u8 *ie, size_t ie_len)
1766 {
1767         struct p2p_message msg;
1768         struct p2p_device *dev;
1769
1770         os_memset(&msg, 0, sizeof(msg));
1771         if (p2p_parse_ies(ie, ie_len, &msg) < 0 || msg.p2p_attributes == NULL)
1772         {
1773                 p2p_parse_free(&msg);
1774                 return; /* not a P2P probe */
1775         }
1776
1777         if (msg.ssid == NULL || msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
1778             os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
1779             != 0) {
1780                 /* The Probe Request is not part of P2P Device Discovery. It is
1781                  * not known whether the source address of the frame is the P2P
1782                  * Device Address or P2P Interface Address. Do not add a new
1783                  * peer entry based on this frames.
1784                  */
1785                 p2p_parse_free(&msg);
1786                 return;
1787         }
1788
1789         dev = p2p_get_device(p2p, addr);
1790         if (dev) {
1791                 if (dev->country[0] == 0 && msg.listen_channel)
1792                         os_memcpy(dev->country, msg.listen_channel, 3);
1793                 os_get_time(&dev->last_seen);
1794                 p2p_parse_free(&msg);
1795                 return; /* already known */
1796         }
1797
1798         dev = p2p_create_device(p2p, addr);
1799         if (dev == NULL) {
1800                 p2p_parse_free(&msg);
1801                 return;
1802         }
1803
1804         os_get_time(&dev->last_seen);
1805         dev->flags |= P2P_DEV_PROBE_REQ_ONLY;
1806
1807         if (msg.listen_channel) {
1808                 os_memcpy(dev->country, msg.listen_channel, 3);
1809                 dev->listen_freq = p2p_channel_to_freq(dev->country,
1810                                                        msg.listen_channel[3],
1811                                                        msg.listen_channel[4]);
1812         }
1813
1814         p2p_copy_wps_info(dev, 1, &msg);
1815
1816         if (msg.wfd_subelems) {
1817                 wpabuf_free(dev->info.wfd_subelems);
1818                 dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
1819         }
1820
1821         p2p_parse_free(&msg);
1822
1823         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1824                 "P2P: Created device entry based on Probe Req: " MACSTR
1825                 " dev_capab=0x%x group_capab=0x%x name='%s' listen_freq=%d",
1826                 MAC2STR(dev->info.p2p_device_addr), dev->info.dev_capab,
1827                 dev->info.group_capab, dev->info.device_name,
1828                 dev->listen_freq);
1829 }
1830
1831
1832 struct p2p_device * p2p_add_dev_from_go_neg_req(struct p2p_data *p2p,
1833                                                 const u8 *addr,
1834                                                 struct p2p_message *msg)
1835 {
1836         struct p2p_device *dev;
1837
1838         dev = p2p_get_device(p2p, addr);
1839         if (dev) {
1840                 os_get_time(&dev->last_seen);
1841                 return dev; /* already known */
1842         }
1843
1844         dev = p2p_create_device(p2p, addr);
1845         if (dev == NULL)
1846                 return NULL;
1847
1848         p2p_add_dev_info(p2p, addr, dev, msg);
1849
1850         return dev;
1851 }
1852
1853
1854 static int dev_type_match(const u8 *dev_type, const u8 *req_dev_type)
1855 {
1856         if (os_memcmp(dev_type, req_dev_type, WPS_DEV_TYPE_LEN) == 0)
1857                 return 1;
1858         if (os_memcmp(dev_type, req_dev_type, 2) == 0 &&
1859             WPA_GET_BE32(&req_dev_type[2]) == 0 &&
1860             WPA_GET_BE16(&req_dev_type[6]) == 0)
1861                 return 1; /* Category match with wildcard OUI/sub-category */
1862         return 0;
1863 }
1864
1865
1866 int dev_type_list_match(const u8 *dev_type, const u8 *req_dev_type[],
1867                         size_t num_req_dev_type)
1868 {
1869         size_t i;
1870         for (i = 0; i < num_req_dev_type; i++) {
1871                 if (dev_type_match(dev_type, req_dev_type[i]))
1872                         return 1;
1873         }
1874         return 0;
1875 }
1876
1877
1878 /**
1879  * p2p_match_dev_type - Match local device type with requested type
1880  * @p2p: P2P module context from p2p_init()
1881  * @wps: WPS TLVs from Probe Request frame (concatenated WPS IEs)
1882  * Returns: 1 on match, 0 on mismatch
1883  *
1884  * This function can be used to match the Requested Device Type attribute in
1885  * WPS IE with the local device types for deciding whether to reply to a Probe
1886  * Request frame.
1887  */
1888 int p2p_match_dev_type(struct p2p_data *p2p, struct wpabuf *wps)
1889 {
1890         struct wps_parse_attr attr;
1891         size_t i;
1892
1893         if (wps_parse_msg(wps, &attr))
1894                 return 1; /* assume no Requested Device Type attributes */
1895
1896         if (attr.num_req_dev_type == 0)
1897                 return 1; /* no Requested Device Type attributes -> match */
1898
1899         if (dev_type_list_match(p2p->cfg->pri_dev_type, attr.req_dev_type,
1900                                 attr.num_req_dev_type))
1901                 return 1; /* Own Primary Device Type matches */
1902
1903         for (i = 0; i < p2p->cfg->num_sec_dev_types; i++)
1904                 if (dev_type_list_match(p2p->cfg->sec_dev_type[i],
1905                                         attr.req_dev_type,
1906                                         attr.num_req_dev_type))
1907                 return 1; /* Own Secondary Device Type matches */
1908
1909         /* No matching device type found */
1910         return 0;
1911 }
1912
1913
1914 struct wpabuf * p2p_build_probe_resp_ies(struct p2p_data *p2p)
1915 {
1916         struct wpabuf *buf;
1917         u8 *len;
1918         int pw_id = -1;
1919         size_t extra = 0;
1920
1921 #ifdef CONFIG_WIFI_DISPLAY
1922         if (p2p->wfd_ie_probe_resp)
1923                 extra = wpabuf_len(p2p->wfd_ie_probe_resp);
1924 #endif /* CONFIG_WIFI_DISPLAY */
1925
1926         buf = wpabuf_alloc(1000 + extra);
1927         if (buf == NULL)
1928                 return NULL;
1929
1930         if (p2p->go_neg_peer) {
1931                 /* Advertise immediate availability of WPS credential */
1932                 pw_id = p2p_wps_method_pw_id(p2p->go_neg_peer->wps_method);
1933         }
1934
1935         p2p_build_wps_ie(p2p, buf, pw_id, 1);
1936
1937 #ifdef CONFIG_WIFI_DISPLAY
1938         if (p2p->wfd_ie_probe_resp)
1939                 wpabuf_put_buf(buf, p2p->wfd_ie_probe_resp);
1940 #endif /* CONFIG_WIFI_DISPLAY */
1941
1942         /* P2P IE */
1943         len = p2p_buf_add_ie_hdr(buf);
1944         p2p_buf_add_capability(buf, p2p->dev_capab &
1945                                ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
1946         if (p2p->ext_listen_interval)
1947                 p2p_buf_add_ext_listen_timing(buf, p2p->ext_listen_period,
1948                                               p2p->ext_listen_interval);
1949         p2p_buf_add_device_info(buf, p2p, NULL);
1950         p2p_buf_update_ie_hdr(buf, len);
1951
1952         return buf;
1953 }
1954
1955
1956 static int is_11b(u8 rate)
1957 {
1958         return rate == 0x02 || rate == 0x04 || rate == 0x0b || rate == 0x16;
1959 }
1960
1961
1962 static int supp_rates_11b_only(struct ieee802_11_elems *elems)
1963 {
1964         int num_11b = 0, num_others = 0;
1965         int i;
1966
1967         if (elems->supp_rates == NULL && elems->ext_supp_rates == NULL)
1968                 return 0;
1969
1970         for (i = 0; elems->supp_rates && i < elems->supp_rates_len; i++) {
1971                 if (is_11b(elems->supp_rates[i]))
1972                         num_11b++;
1973                 else
1974                         num_others++;
1975         }
1976
1977         for (i = 0; elems->ext_supp_rates && i < elems->ext_supp_rates_len;
1978              i++) {
1979                 if (is_11b(elems->ext_supp_rates[i]))
1980                         num_11b++;
1981                 else
1982                         num_others++;
1983         }
1984
1985         return num_11b > 0 && num_others == 0;
1986 }
1987
1988
1989 static enum p2p_probe_req_status
1990 p2p_reply_probe(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
1991                 const u8 *bssid, const u8 *ie, size_t ie_len)
1992 {
1993         struct ieee802_11_elems elems;
1994         struct wpabuf *buf;
1995         struct ieee80211_mgmt *resp;
1996         struct p2p_message msg;
1997         struct wpabuf *ies;
1998
1999         if (!p2p->in_listen || !p2p->drv_in_listen) {
2000                 /* not in Listen state - ignore Probe Request */
2001                 return P2P_PREQ_NOT_LISTEN;
2002         }
2003
2004         if (ieee802_11_parse_elems((u8 *) ie, ie_len, &elems, 0) ==
2005             ParseFailed) {
2006                 /* Ignore invalid Probe Request frames */
2007                 return P2P_PREQ_MALFORMED;
2008         }
2009
2010         if (elems.p2p == NULL) {
2011                 /* not a P2P probe - ignore it */
2012                 return P2P_PREQ_NOT_P2P;
2013         }
2014
2015         if (dst && !is_broadcast_ether_addr(dst) &&
2016             os_memcmp(dst, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
2017                 /* Not sent to the broadcast address or our P2P Device Address
2018                  */
2019                 return P2P_PREQ_NOT_PROCESSED;
2020         }
2021
2022         if (bssid && !is_broadcast_ether_addr(bssid)) {
2023                 /* Not sent to the Wildcard BSSID */
2024                 return P2P_PREQ_NOT_PROCESSED;
2025         }
2026
2027         if (elems.ssid == NULL || elems.ssid_len != P2P_WILDCARD_SSID_LEN ||
2028             os_memcmp(elems.ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) !=
2029             0) {
2030                 /* not using P2P Wildcard SSID - ignore */
2031                 return P2P_PREQ_NOT_PROCESSED;
2032         }
2033
2034         if (supp_rates_11b_only(&elems)) {
2035                 /* Indicates support for 11b rates only */
2036                 return P2P_PREQ_NOT_P2P;
2037         }
2038
2039         os_memset(&msg, 0, sizeof(msg));
2040         if (p2p_parse_ies(ie, ie_len, &msg) < 0) {
2041                 /* Could not parse P2P attributes */
2042                 return P2P_PREQ_NOT_P2P;
2043         }
2044
2045         if (msg.device_id &&
2046             os_memcmp(msg.device_id, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
2047                 /* Device ID did not match */
2048                 p2p_parse_free(&msg);
2049                 return P2P_PREQ_NOT_PROCESSED;
2050         }
2051
2052         /* Check Requested Device Type match */
2053         if (msg.wps_attributes &&
2054             !p2p_match_dev_type(p2p, msg.wps_attributes)) {
2055                 /* No match with Requested Device Type */
2056                 p2p_parse_free(&msg);
2057                 return P2P_PREQ_NOT_PROCESSED;
2058         }
2059         p2p_parse_free(&msg);
2060
2061         if (!p2p->cfg->send_probe_resp) {
2062                 /* Response generated elsewhere */
2063                 return P2P_PREQ_NOT_PROCESSED;
2064         }
2065
2066         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2067                 "P2P: Reply to P2P Probe Request in Listen state");
2068
2069         /*
2070          * We do not really have a specific BSS that this frame is advertising,
2071          * so build a frame that has some information in valid format. This is
2072          * really only used for discovery purposes, not to learn exact BSS
2073          * parameters.
2074          */
2075         ies = p2p_build_probe_resp_ies(p2p);
2076         if (ies == NULL)
2077                 return P2P_PREQ_NOT_PROCESSED;
2078
2079         buf = wpabuf_alloc(200 + wpabuf_len(ies));
2080         if (buf == NULL) {
2081                 wpabuf_free(ies);
2082                 return P2P_PREQ_NOT_PROCESSED;
2083         }
2084
2085         resp = NULL;
2086         resp = wpabuf_put(buf, resp->u.probe_resp.variable - (u8 *) resp);
2087
2088         resp->frame_control = host_to_le16((WLAN_FC_TYPE_MGMT << 2) |
2089                                            (WLAN_FC_STYPE_PROBE_RESP << 4));
2090         os_memcpy(resp->da, addr, ETH_ALEN);
2091         os_memcpy(resp->sa, p2p->cfg->dev_addr, ETH_ALEN);
2092         os_memcpy(resp->bssid, p2p->cfg->dev_addr, ETH_ALEN);
2093         resp->u.probe_resp.beacon_int = host_to_le16(100);
2094         /* hardware or low-level driver will setup seq_ctrl and timestamp */
2095         resp->u.probe_resp.capab_info =
2096                 host_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE |
2097                              WLAN_CAPABILITY_PRIVACY |
2098                              WLAN_CAPABILITY_SHORT_SLOT_TIME);
2099
2100         wpabuf_put_u8(buf, WLAN_EID_SSID);
2101         wpabuf_put_u8(buf, P2P_WILDCARD_SSID_LEN);
2102         wpabuf_put_data(buf, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
2103
2104         wpabuf_put_u8(buf, WLAN_EID_SUPP_RATES);
2105         wpabuf_put_u8(buf, 8);
2106         wpabuf_put_u8(buf, (60 / 5) | 0x80);
2107         wpabuf_put_u8(buf, 90 / 5);
2108         wpabuf_put_u8(buf, (120 / 5) | 0x80);
2109         wpabuf_put_u8(buf, 180 / 5);
2110         wpabuf_put_u8(buf, (240 / 5) | 0x80);
2111         wpabuf_put_u8(buf, 360 / 5);
2112         wpabuf_put_u8(buf, 480 / 5);
2113         wpabuf_put_u8(buf, 540 / 5);
2114
2115         wpabuf_put_u8(buf, WLAN_EID_DS_PARAMS);
2116         wpabuf_put_u8(buf, 1);
2117         wpabuf_put_u8(buf, p2p->cfg->channel);
2118
2119         wpabuf_put_buf(buf, ies);
2120         wpabuf_free(ies);
2121
2122         p2p->cfg->send_probe_resp(p2p->cfg->cb_ctx, buf);
2123
2124         wpabuf_free(buf);
2125
2126         return P2P_PREQ_NOT_PROCESSED;
2127 }
2128
2129
2130 enum p2p_probe_req_status
2131 p2p_probe_req_rx(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
2132                  const u8 *bssid, const u8 *ie, size_t ie_len)
2133 {
2134         enum p2p_probe_req_status res;
2135
2136         p2p_add_dev_from_probe_req(p2p, addr, ie, ie_len);
2137
2138         res = p2p_reply_probe(p2p, addr, dst, bssid, ie, ie_len);
2139
2140         if ((p2p->state == P2P_CONNECT || p2p->state == P2P_CONNECT_LISTEN) &&
2141             p2p->go_neg_peer &&
2142             os_memcmp(addr, p2p->go_neg_peer->info.p2p_device_addr, ETH_ALEN)
2143             == 0) {
2144                 /* Received a Probe Request from GO Negotiation peer */
2145                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2146                         "P2P: Found GO Negotiation peer - try to start GO "
2147                         "negotiation from timeout");
2148                 eloop_register_timeout(0, 0, p2p_go_neg_start, p2p, NULL);
2149                 return P2P_PREQ_PROCESSED;
2150         }
2151
2152         if ((p2p->state == P2P_INVITE || p2p->state == P2P_INVITE_LISTEN) &&
2153             p2p->invite_peer &&
2154             os_memcmp(addr, p2p->invite_peer->info.p2p_device_addr, ETH_ALEN)
2155             == 0) {
2156                 /* Received a Probe Request from Invite peer */
2157                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2158                         "P2P: Found Invite peer - try to start Invite from "
2159                         "timeout");
2160                 eloop_register_timeout(0, 0, p2p_invite_start, p2p, NULL);
2161                 return P2P_PREQ_PROCESSED;
2162         }
2163
2164         return res;
2165 }
2166
2167
2168 static int p2p_assoc_req_ie_wlan_ap(struct p2p_data *p2p, const u8 *bssid,
2169                                     u8 *buf, size_t len, struct wpabuf *p2p_ie)
2170 {
2171         struct wpabuf *tmp;
2172         u8 *lpos;
2173         size_t tmplen;
2174         int res;
2175         u8 group_capab;
2176
2177         if (p2p_ie == NULL)
2178                 return 0; /* WLAN AP is not a P2P manager */
2179
2180         /*
2181          * (Re)Association Request - P2P IE
2182          * P2P Capability attribute (shall be present)
2183          * P2P Interface attribute (present if concurrent device and
2184          *      P2P Management is enabled)
2185          */
2186         tmp = wpabuf_alloc(200);
2187         if (tmp == NULL)
2188                 return -1;
2189
2190         lpos = p2p_buf_add_ie_hdr(tmp);
2191         group_capab = 0;
2192         if (p2p->num_groups > 0) {
2193                 group_capab |= P2P_GROUP_CAPAB_GROUP_OWNER;
2194                 if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2195                     (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED) &&
2196                     p2p->cross_connect)
2197                         group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
2198         }
2199         p2p_buf_add_capability(tmp, p2p->dev_capab, group_capab);
2200         if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2201             (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED))
2202                 p2p_buf_add_p2p_interface(tmp, p2p);
2203         p2p_buf_update_ie_hdr(tmp, lpos);
2204
2205         tmplen = wpabuf_len(tmp);
2206         if (tmplen > len)
2207                 res = -1;
2208         else {
2209                 os_memcpy(buf, wpabuf_head(tmp), tmplen);
2210                 res = tmplen;
2211         }
2212         wpabuf_free(tmp);
2213
2214         return res;
2215 }
2216
2217
2218 int p2p_assoc_req_ie(struct p2p_data *p2p, const u8 *bssid, u8 *buf,
2219                      size_t len, int p2p_group, struct wpabuf *p2p_ie)
2220 {
2221         struct wpabuf *tmp;
2222         u8 *lpos;
2223         struct p2p_device *peer;
2224         size_t tmplen;
2225         int res;
2226         size_t extra = 0;
2227
2228         if (!p2p_group)
2229                 return p2p_assoc_req_ie_wlan_ap(p2p, bssid, buf, len, p2p_ie);
2230
2231 #ifdef CONFIG_WIFI_DISPLAY
2232         if (p2p->wfd_ie_assoc_req)
2233                 extra = wpabuf_len(p2p->wfd_ie_assoc_req);
2234 #endif /* CONFIG_WIFI_DISPLAY */
2235
2236         /*
2237          * (Re)Association Request - P2P IE
2238          * P2P Capability attribute (shall be present)
2239          * Extended Listen Timing (may be present)
2240          * P2P Device Info attribute (shall be present)
2241          */
2242         tmp = wpabuf_alloc(200 + extra);
2243         if (tmp == NULL)
2244                 return -1;
2245
2246 #ifdef CONFIG_WIFI_DISPLAY
2247         if (p2p->wfd_ie_assoc_req)
2248                 wpabuf_put_buf(tmp, p2p->wfd_ie_assoc_req);
2249 #endif /* CONFIG_WIFI_DISPLAY */
2250
2251         peer = bssid ? p2p_get_device(p2p, bssid) : NULL;
2252
2253         lpos = p2p_buf_add_ie_hdr(tmp);
2254         p2p_buf_add_capability(tmp, p2p->dev_capab, 0);
2255         if (p2p->ext_listen_interval)
2256                 p2p_buf_add_ext_listen_timing(tmp, p2p->ext_listen_period,
2257                                               p2p->ext_listen_interval);
2258         p2p_buf_add_device_info(tmp, p2p, peer);
2259         p2p_buf_update_ie_hdr(tmp, lpos);
2260
2261         tmplen = wpabuf_len(tmp);
2262         if (tmplen > len)
2263                 res = -1;
2264         else {
2265                 os_memcpy(buf, wpabuf_head(tmp), tmplen);
2266                 res = tmplen;
2267         }
2268         wpabuf_free(tmp);
2269
2270         return res;
2271 }
2272
2273
2274 int p2p_scan_result_text(const u8 *ies, size_t ies_len, char *buf, char *end)
2275 {
2276         struct wpabuf *p2p_ie;
2277         int ret;
2278
2279         p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len, P2P_IE_VENDOR_TYPE);
2280         if (p2p_ie == NULL)
2281                 return 0;
2282
2283         ret = p2p_attr_text(p2p_ie, buf, end);
2284         wpabuf_free(p2p_ie);
2285         return ret;
2286 }
2287
2288
2289 int p2p_parse_dev_addr_in_p2p_ie(struct wpabuf *p2p_ie, u8 *dev_addr)
2290 {
2291         struct p2p_message msg;
2292
2293         os_memset(&msg, 0, sizeof(msg));
2294         if (p2p_parse_p2p_ie(p2p_ie, &msg))
2295                 return -1;
2296
2297         if (msg.p2p_device_addr) {
2298                 os_memcpy(dev_addr, msg.p2p_device_addr, ETH_ALEN);
2299                 return 0;
2300         } else if (msg.device_id) {
2301                 os_memcpy(dev_addr, msg.device_id, ETH_ALEN);
2302                 return 0;
2303         }
2304         return -1;
2305 }
2306
2307
2308 int p2p_parse_dev_addr(const u8 *ies, size_t ies_len, u8 *dev_addr)
2309 {
2310         struct wpabuf *p2p_ie;
2311         int ret;
2312
2313         p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len,
2314                                              P2P_IE_VENDOR_TYPE);
2315         if (p2p_ie == NULL)
2316                 return -1;
2317         ret = p2p_parse_dev_addr_in_p2p_ie(p2p_ie, dev_addr);
2318         wpabuf_free(p2p_ie);
2319         return ret;
2320 }
2321
2322
2323 static void p2p_clear_go_neg(struct p2p_data *p2p)
2324 {
2325         p2p->go_neg_peer = NULL;
2326         p2p_clear_timeout(p2p);
2327         p2p_set_state(p2p, P2P_IDLE);
2328 }
2329
2330
2331 void p2p_wps_success_cb(struct p2p_data *p2p, const u8 *mac_addr)
2332 {
2333         if (p2p->go_neg_peer == NULL) {
2334                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2335                         "P2P: No pending Group Formation - "
2336                         "ignore WPS registration success notification");
2337                 return; /* No pending Group Formation */
2338         }
2339
2340         if (os_memcmp(mac_addr, p2p->go_neg_peer->intended_addr, ETH_ALEN) !=
2341             0) {
2342                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2343                         "P2P: Ignore WPS registration success notification "
2344                         "for " MACSTR " (GO Negotiation peer " MACSTR ")",
2345                         MAC2STR(mac_addr),
2346                         MAC2STR(p2p->go_neg_peer->intended_addr));
2347                 return; /* Ignore unexpected peer address */
2348         }
2349
2350         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2351                 "P2P: Group Formation completed successfully with " MACSTR,
2352                 MAC2STR(mac_addr));
2353
2354         p2p_clear_go_neg(p2p);
2355 }
2356
2357
2358 void p2p_group_formation_failed(struct p2p_data *p2p)
2359 {
2360         if (p2p->go_neg_peer == NULL) {
2361                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2362                         "P2P: No pending Group Formation - "
2363                         "ignore group formation failure notification");
2364                 return; /* No pending Group Formation */
2365         }
2366
2367         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2368                 "P2P: Group Formation failed with " MACSTR,
2369                 MAC2STR(p2p->go_neg_peer->intended_addr));
2370
2371         p2p_clear_go_neg(p2p);
2372 }
2373
2374
2375 struct p2p_data * p2p_init(const struct p2p_config *cfg)
2376 {
2377         struct p2p_data *p2p;
2378
2379         if (cfg->max_peers < 1)
2380                 return NULL;
2381
2382         p2p = os_zalloc(sizeof(*p2p) + sizeof(*cfg));
2383         if (p2p == NULL)
2384                 return NULL;
2385         p2p->cfg = (struct p2p_config *) (p2p + 1);
2386         os_memcpy(p2p->cfg, cfg, sizeof(*cfg));
2387         if (cfg->dev_name)
2388                 p2p->cfg->dev_name = os_strdup(cfg->dev_name);
2389         if (cfg->manufacturer)
2390                 p2p->cfg->manufacturer = os_strdup(cfg->manufacturer);
2391         if (cfg->model_name)
2392                 p2p->cfg->model_name = os_strdup(cfg->model_name);
2393         if (cfg->model_number)
2394                 p2p->cfg->model_number = os_strdup(cfg->model_number);
2395         if (cfg->serial_number)
2396                 p2p->cfg->serial_number = os_strdup(cfg->serial_number);
2397         if (cfg->pref_chan) {
2398                 p2p->cfg->pref_chan = os_malloc(cfg->num_pref_chan *
2399                                                 sizeof(struct p2p_channel));
2400                 if (p2p->cfg->pref_chan) {
2401                         os_memcpy(p2p->cfg->pref_chan, cfg->pref_chan,
2402                                   cfg->num_pref_chan *
2403                                   sizeof(struct p2p_channel));
2404                 } else
2405                         p2p->cfg->num_pref_chan = 0;
2406         }
2407
2408 #ifdef ANDROID_P2P
2409         /* 100ms listen time is too less to receive the response frames in some scenarios
2410          * increasing min listen time to 200ms.
2411          */
2412         p2p->min_disc_int = 2;
2413         /* SD_FAIR_POLICY: Initializing the SD current serviced pointer to NULL */
2414         p2p->sd_dev_list = NULL;
2415 #else
2416         p2p->min_disc_int = 1;
2417 #endif
2418         p2p->max_disc_int = 3;
2419
2420         os_get_random(&p2p->next_tie_breaker, 1);
2421         p2p->next_tie_breaker &= 0x01;
2422         if (cfg->sd_request)
2423                 p2p->dev_capab |= P2P_DEV_CAPAB_SERVICE_DISCOVERY;
2424         p2p->dev_capab |= P2P_DEV_CAPAB_INVITATION_PROCEDURE;
2425         if (cfg->concurrent_operations)
2426                 p2p->dev_capab |= P2P_DEV_CAPAB_CONCURRENT_OPER;
2427         p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
2428
2429         dl_list_init(&p2p->devices);
2430
2431         eloop_register_timeout(P2P_PEER_EXPIRATION_INTERVAL, 0,
2432                                p2p_expiration_timeout, p2p, NULL);
2433
2434         p2p->go_timeout = 100;
2435         p2p->client_timeout = 20;
2436
2437         return p2p;
2438 }
2439
2440
2441 void p2p_deinit(struct p2p_data *p2p)
2442 {
2443 #ifdef CONFIG_WIFI_DISPLAY
2444         wpabuf_free(p2p->wfd_ie_beacon);
2445         wpabuf_free(p2p->wfd_ie_probe_req);
2446         wpabuf_free(p2p->wfd_ie_probe_resp);
2447         wpabuf_free(p2p->wfd_ie_assoc_req);
2448         wpabuf_free(p2p->wfd_ie_invitation);
2449         wpabuf_free(p2p->wfd_ie_prov_disc_req);
2450         wpabuf_free(p2p->wfd_ie_prov_disc_resp);
2451         wpabuf_free(p2p->wfd_ie_go_neg);
2452         wpabuf_free(p2p->wfd_dev_info);
2453         wpabuf_free(p2p->wfd_assoc_bssid);
2454         wpabuf_free(p2p->wfd_coupled_sink_info);
2455 #endif /* CONFIG_WIFI_DISPLAY */
2456
2457         eloop_cancel_timeout(p2p_expiration_timeout, p2p, NULL);
2458         eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
2459         eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
2460         p2p_flush(p2p);
2461         p2p_free_req_dev_types(p2p);
2462         os_free(p2p->cfg->dev_name);
2463         os_free(p2p->cfg->manufacturer);
2464         os_free(p2p->cfg->model_name);
2465         os_free(p2p->cfg->model_number);
2466         os_free(p2p->cfg->serial_number);
2467         os_free(p2p->cfg->pref_chan);
2468         os_free(p2p->groups);
2469         wpabuf_free(p2p->sd_resp);
2470         os_free(p2p->after_scan_tx);
2471         p2p_remove_wps_vendor_extensions(p2p);
2472         os_free(p2p);
2473 }
2474
2475
2476 void p2p_flush(struct p2p_data *p2p)
2477 {
2478         struct p2p_device *dev, *prev;
2479         p2p_stop_find(p2p);
2480         dl_list_for_each_safe(dev, prev, &p2p->devices, struct p2p_device,
2481                               list) {
2482                 dl_list_del(&dev->list);
2483                 p2p_device_free(p2p, dev);
2484         }
2485 #ifdef ANDROID_P2P
2486         /* SD_FAIR_POLICY: Initializing the SD current serviced pointer to NULL */
2487         p2p->sd_dev_list = NULL;
2488 #endif
2489         p2p_free_sd_queries(p2p);
2490         os_free(p2p->after_scan_tx);
2491         p2p->after_scan_tx = NULL;
2492 }
2493
2494
2495 int p2p_unauthorize(struct p2p_data *p2p, const u8 *addr)
2496 {
2497         struct p2p_device *dev;
2498
2499         dev = p2p_get_device(p2p, addr);
2500         if (dev == NULL)
2501                 return -1;
2502
2503         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Unauthorizing " MACSTR,
2504                 MAC2STR(addr));
2505
2506         if (p2p->go_neg_peer == dev)
2507                 p2p->go_neg_peer = NULL;
2508
2509         dev->wps_method = WPS_NOT_READY;
2510         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
2511         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
2512
2513         /* Check if after_scan_tx is for this peer. If so free it */
2514         if (p2p->after_scan_tx &&
2515             os_memcmp(addr, p2p->after_scan_tx->dst, ETH_ALEN) == 0) {
2516                 os_free(p2p->after_scan_tx);
2517                 p2p->after_scan_tx = NULL;
2518         }
2519
2520         return 0;
2521 }
2522
2523
2524 int p2p_set_dev_name(struct p2p_data *p2p, const char *dev_name)
2525 {
2526         os_free(p2p->cfg->dev_name);
2527         if (dev_name) {
2528                 p2p->cfg->dev_name = os_strdup(dev_name);
2529                 if (p2p->cfg->dev_name == NULL)
2530                         return -1;
2531         } else
2532                 p2p->cfg->dev_name = NULL;
2533         return 0;
2534 }
2535
2536
2537 int p2p_set_manufacturer(struct p2p_data *p2p, const char *manufacturer)
2538 {
2539         os_free(p2p->cfg->manufacturer);
2540         p2p->cfg->manufacturer = NULL;
2541         if (manufacturer) {
2542                 p2p->cfg->manufacturer = os_strdup(manufacturer);
2543                 if (p2p->cfg->manufacturer == NULL)
2544                         return -1;
2545         }
2546
2547         return 0;
2548 }
2549
2550
2551 int p2p_set_model_name(struct p2p_data *p2p, const char *model_name)
2552 {
2553         os_free(p2p->cfg->model_name);
2554         p2p->cfg->model_name = NULL;
2555         if (model_name) {
2556                 p2p->cfg->model_name = os_strdup(model_name);
2557                 if (p2p->cfg->model_name == NULL)
2558                         return -1;
2559         }
2560
2561         return 0;
2562 }
2563
2564
2565 int p2p_set_model_number(struct p2p_data *p2p, const char *model_number)
2566 {
2567         os_free(p2p->cfg->model_number);
2568         p2p->cfg->model_number = NULL;
2569         if (model_number) {
2570                 p2p->cfg->model_number = os_strdup(model_number);
2571                 if (p2p->cfg->model_number == NULL)
2572                         return -1;
2573         }
2574
2575         return 0;
2576 }
2577
2578
2579 int p2p_set_serial_number(struct p2p_data *p2p, const char *serial_number)
2580 {
2581         os_free(p2p->cfg->serial_number);
2582         p2p->cfg->serial_number = NULL;
2583         if (serial_number) {
2584                 p2p->cfg->serial_number = os_strdup(serial_number);
2585                 if (p2p->cfg->serial_number == NULL)
2586                         return -1;
2587         }
2588
2589         return 0;
2590 }
2591
2592
2593 void p2p_set_config_methods(struct p2p_data *p2p, u16 config_methods)
2594 {
2595         p2p->cfg->config_methods = config_methods;
2596 }
2597
2598
2599 void p2p_set_uuid(struct p2p_data *p2p, const u8 *uuid)
2600 {
2601         os_memcpy(p2p->cfg->uuid, uuid, 16);
2602 }
2603
2604
2605 int p2p_set_pri_dev_type(struct p2p_data *p2p, const u8 *pri_dev_type)
2606 {
2607         os_memcpy(p2p->cfg->pri_dev_type, pri_dev_type, 8);
2608         return 0;
2609 }
2610
2611
2612 int p2p_set_sec_dev_types(struct p2p_data *p2p, const u8 dev_types[][8],
2613                           size_t num_dev_types)
2614 {
2615         if (num_dev_types > P2P_SEC_DEVICE_TYPES)
2616                 num_dev_types = P2P_SEC_DEVICE_TYPES;
2617         p2p->cfg->num_sec_dev_types = num_dev_types;
2618         os_memcpy(p2p->cfg->sec_dev_type, dev_types, num_dev_types * 8);
2619         return 0;
2620 }
2621
2622
2623 void p2p_remove_wps_vendor_extensions(struct p2p_data *p2p)
2624 {
2625         int i;
2626
2627         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
2628                 wpabuf_free(p2p->wps_vendor_ext[i]);
2629                 p2p->wps_vendor_ext[i] = NULL;
2630         }
2631 }
2632
2633
2634 int p2p_add_wps_vendor_extension(struct p2p_data *p2p,
2635                                  const struct wpabuf *vendor_ext)
2636 {
2637         int i;
2638
2639         if (vendor_ext == NULL)
2640                 return -1;
2641
2642         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
2643                 if (p2p->wps_vendor_ext[i] == NULL)
2644                         break;
2645         }
2646         if (i >= P2P_MAX_WPS_VENDOR_EXT)
2647                 return -1;
2648
2649         p2p->wps_vendor_ext[i] = wpabuf_dup(vendor_ext);
2650         if (p2p->wps_vendor_ext[i] == NULL)
2651                 return -1;
2652
2653         return 0;
2654 }
2655
2656
2657 int p2p_set_country(struct p2p_data *p2p, const char *country)
2658 {
2659         os_memcpy(p2p->cfg->country, country, 3);
2660         return 0;
2661 }
2662
2663
2664 void p2p_continue_find(struct p2p_data *p2p)
2665 {
2666         struct p2p_device *dev;
2667 #ifdef ANDROID_P2P
2668         int skip=1;
2669 #endif
2670         p2p_set_state(p2p, P2P_SEARCH);
2671         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
2672 #ifdef ANDROID_P2P
2673                 /* SD_FAIR_POLICY: We need to give chance to all devices in the device list
2674                  * There may be a scenario, where a particular peer device have
2675                  * not registered any query response. When we send a SD request to such device,
2676                  * no response will be received. And if we continue to get probe responses from that device,
2677                  * and if that device happens to be on top in our device list,
2678                  * we will always continue to send SD requests always to that peer only.
2679                  * We will not be able to send SD requests to other devices in that case.
2680                  * This implementation keeps track of last serviced peer device.
2681                  * And then takes the next one from the device list, in the next iteration.
2682                  */
2683                 if (p2p->sd_dev_list && p2p->sd_dev_list != &p2p->devices) {
2684                         if(skip) {
2685                                 if ((&dev->list == p2p->sd_dev_list) ) {
2686                                         skip = 0;
2687                                         if (dev->list.next == &p2p->devices)
2688                                                 p2p->sd_dev_list = NULL;
2689                                 }
2690                                 continue;
2691                         }
2692                 }
2693                 p2p->sd_dev_list = &dev->list;
2694                 wpa_printf(MSG_DEBUG, "P2P: ### Servicing %p dev->flags 0x%x SD schedule %s devaddr " MACSTR,
2695                         p2p->sd_dev_list, dev->flags, dev->flags & P2P_DEV_SD_SCHEDULE ? "TRUE": "FALSE",
2696                         MAC2STR(dev->info.p2p_device_addr));
2697 #endif
2698                 if (dev->flags & P2P_DEV_SD_SCHEDULE) {
2699                         if (p2p_start_sd(p2p, dev) == 0)
2700                                 return;
2701                         else
2702                                 break;
2703                 } else if (dev->req_config_methods &&
2704                            !(dev->flags & P2P_DEV_PD_FOR_JOIN)) {
2705                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send "
2706                                 "pending Provision Discovery Request to "
2707                                 MACSTR " (config methods 0x%x)",
2708                                 MAC2STR(dev->info.p2p_device_addr),
2709                                 dev->req_config_methods);
2710                         if (p2p_send_prov_disc_req(p2p, dev, 0, 0) == 0)
2711                                 return;
2712                 }
2713         }
2714
2715         p2p_listen_in_find(p2p);
2716 }
2717
2718
2719 static void p2p_sd_cb(struct p2p_data *p2p, int success)
2720 {
2721         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2722                 "P2P: Service Discovery Query TX callback: success=%d",
2723                 success);
2724         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2725
2726         if (!success) {
2727                 if (p2p->sd_peer) {
2728                         p2p->sd_peer->flags &= ~P2P_DEV_SD_SCHEDULE;
2729                         p2p->sd_peer = NULL;
2730                 }
2731                 p2p_continue_find(p2p);
2732                 return;
2733         }
2734
2735         if (p2p->sd_peer == NULL) {
2736                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2737                         "P2P: No SD peer entry known");
2738                 p2p_continue_find(p2p);
2739                 return;
2740         }
2741
2742         /* Wait for response from the peer */
2743         p2p_set_state(p2p, P2P_SD_DURING_FIND);
2744         p2p_set_timeout(p2p, 0, 200000);
2745 }
2746
2747
2748 /**
2749  * p2p_retry_pd - Retry any pending provision disc requests in IDLE state
2750  * @p2p: P2P module context from p2p_init()
2751  */
2752 static void p2p_retry_pd(struct p2p_data *p2p)
2753 {
2754         struct p2p_device *dev;
2755
2756         if (p2p->state != P2P_IDLE)
2757                 return;
2758
2759         /*
2760          * Retry the prov disc req attempt only for the peer that the user had
2761          * requested for and provided a join has not been initiated on it
2762          * in the meantime.
2763          */
2764
2765         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
2766                 if (os_memcmp(p2p->pending_pd_devaddr,
2767                               dev->info.p2p_device_addr, ETH_ALEN) != 0)
2768                         continue;
2769                 if (!dev->req_config_methods)
2770                         continue;
2771                 if (dev->flags & P2P_DEV_PD_FOR_JOIN)
2772                         continue;
2773
2774                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send "
2775                         "pending Provision Discovery Request to "
2776                         MACSTR " (config methods 0x%x)",
2777                         MAC2STR(dev->info.p2p_device_addr),
2778                         dev->req_config_methods);
2779                 p2p_send_prov_disc_req(p2p, dev, 0, 0);
2780                 return;
2781         }
2782 }
2783
2784
2785 static void p2p_prov_disc_cb(struct p2p_data *p2p, int success)
2786 {
2787         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2788                 "P2P: Provision Discovery Request TX callback: success=%d",
2789                 success);
2790
2791         /*
2792          * Postpone resetting the pending action state till after we actually
2793          * time out. This allows us to take some action like notifying any
2794          * interested parties about no response to the request.
2795          *
2796          * When the timer (below) goes off we check in IDLE, SEARCH, or
2797          * LISTEN_ONLY state, which are the only allowed states to issue a PD
2798          * requests in, if this was still pending and then raise notification.
2799          */
2800
2801         if (!success) {
2802                 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2803
2804                 if (p2p->user_initiated_pd &&
2805                     (p2p->state == P2P_SEARCH || p2p->state == P2P_LISTEN_ONLY))
2806                 {
2807                         /* Retry request from timeout to avoid busy loops */
2808                         p2p->pending_action_state = P2P_PENDING_PD;
2809                         p2p_set_timeout(p2p, 0, 50000);
2810                 } else if (p2p->state != P2P_IDLE)
2811                         p2p_continue_find(p2p);
2812                 else if (p2p->user_initiated_pd) {
2813                         p2p->pending_action_state = P2P_PENDING_PD;
2814 #ifdef ANDROID_P2P
2815                         p2p_set_timeout(p2p, 0, 350000);
2816 #else
2817                         p2p_set_timeout(p2p, 0, 300000);
2818 #endif
2819                 }
2820                 return;
2821         }
2822
2823         /*
2824          * This postponing, of resetting pending_action_state, needs to be
2825          * done only for user initiated PD requests and not internal ones.
2826          */
2827         if (p2p->user_initiated_pd)
2828                 p2p->pending_action_state = P2P_PENDING_PD;
2829         else
2830                 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2831
2832         /* Wait for response from the peer */
2833         if (p2p->state == P2P_SEARCH)
2834                 p2p_set_state(p2p, P2P_PD_DURING_FIND);
2835 #ifdef ANDROID_P2P
2836         p2p_set_timeout(p2p, 0, 350000);
2837 #else
2838         p2p_set_timeout(p2p, 0, 200000);
2839 #endif
2840 }
2841
2842
2843 int p2p_scan_res_handler(struct p2p_data *p2p, const u8 *bssid, int freq,
2844                          int level, const u8 *ies, size_t ies_len)
2845 {
2846         p2p_add_device(p2p, bssid, freq, level, ies, ies_len, 1);
2847
2848         return 0;
2849 }
2850
2851
2852 void p2p_scan_res_handled(struct p2p_data *p2p)
2853 {
2854         if (!p2p->p2p_scan_running) {
2855                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan was not "
2856                         "running, but scan results received");
2857         }
2858         p2p->p2p_scan_running = 0;
2859         eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
2860
2861         if (p2p_run_after_scan(p2p))
2862                 return;
2863         if (p2p->state == P2P_SEARCH)
2864                 p2p_continue_find(p2p);
2865 }
2866
2867
2868 void p2p_scan_ie(struct p2p_data *p2p, struct wpabuf *ies, const u8 *dev_id)
2869 {
2870         u8 *len;
2871
2872 #ifdef CONFIG_WIFI_DISPLAY
2873         if (p2p->wfd_ie_probe_req)
2874                 wpabuf_put_buf(ies, p2p->wfd_ie_probe_req);
2875 #endif /* CONFIG_WIFI_DISPLAY */
2876
2877         len = p2p_buf_add_ie_hdr(ies);
2878         p2p_buf_add_capability(ies, p2p->dev_capab &
2879                                ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY, 0);
2880         if (dev_id)
2881                 p2p_buf_add_device_id(ies, dev_id);
2882         if (p2p->cfg->reg_class && p2p->cfg->channel)
2883                 p2p_buf_add_listen_channel(ies, p2p->cfg->country,
2884                                            p2p->cfg->reg_class,
2885                                            p2p->cfg->channel);
2886         if (p2p->ext_listen_interval)
2887                 p2p_buf_add_ext_listen_timing(ies, p2p->ext_listen_period,
2888                                               p2p->ext_listen_interval);
2889         /* TODO: p2p_buf_add_operating_channel() if GO */
2890         p2p_buf_update_ie_hdr(ies, len);
2891 }
2892
2893
2894 size_t p2p_scan_ie_buf_len(struct p2p_data *p2p)
2895 {
2896         size_t len = 100;
2897
2898 #ifdef CONFIG_WIFI_DISPLAY
2899         if (p2p && p2p->wfd_ie_probe_req)
2900                 len += wpabuf_len(p2p->wfd_ie_probe_req);
2901 #endif /* CONFIG_WIFI_DISPLAY */
2902
2903         return len;
2904 }
2905
2906
2907 int p2p_ie_text(struct wpabuf *p2p_ie, char *buf, char *end)
2908 {
2909         return p2p_attr_text(p2p_ie, buf, end);
2910 }
2911
2912
2913 static void p2p_go_neg_req_cb(struct p2p_data *p2p, int success)
2914 {
2915         struct p2p_device *dev = p2p->go_neg_peer;
2916
2917         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2918                 "P2P: GO Negotiation Request TX callback: success=%d",
2919                 success);
2920
2921         if (dev == NULL) {
2922                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2923                         "P2P: No pending GO Negotiation");
2924                 return;
2925         }
2926
2927         if (success) {
2928                 if (dev->flags & P2P_DEV_USER_REJECTED) {
2929                         p2p_set_state(p2p, P2P_IDLE);
2930                         return;
2931                 }
2932         } else if (dev->go_neg_req_sent) {
2933                 /* Cancel the increment from p2p_connect_send() on failure */
2934                 dev->go_neg_req_sent--;
2935         }
2936
2937         if (!success &&
2938             (dev->info.dev_capab & P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY) &&
2939             !is_zero_ether_addr(dev->member_in_go_dev)) {
2940                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2941                         "P2P: Peer " MACSTR " did not acknowledge request - "
2942                         "try to use device discoverability through its GO",
2943                         MAC2STR(dev->info.p2p_device_addr));
2944                 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
2945                 p2p_send_dev_disc_req(p2p, dev);
2946                 return;
2947         }
2948
2949         /*
2950          * Use P2P find, if needed, to find the other device from its listen
2951          * channel.
2952          */
2953         p2p_set_state(p2p, P2P_CONNECT);
2954 #ifdef ANDROID_P2P
2955         p2p_set_timeout(p2p, 0, 350000);
2956 #else
2957         p2p_set_timeout(p2p, 0, success ? 200000 : 100000);
2958 #endif
2959 }
2960
2961
2962 static void p2p_go_neg_resp_cb(struct p2p_data *p2p, int success)
2963 {
2964         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2965                 "P2P: GO Negotiation Response TX callback: success=%d",
2966                 success);
2967         if (!p2p->go_neg_peer && p2p->state == P2P_PROVISIONING) {
2968                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2969                         "P2P: Ignore TX callback event - GO Negotiation is "
2970                         "not running anymore");
2971                 return;
2972         }
2973         p2p_set_state(p2p, P2P_CONNECT);
2974 #ifdef ANDROID_P2P
2975         p2p_set_timeout(p2p, 0, 350000);
2976 #else
2977         p2p_set_timeout(p2p, 0, 250000);
2978 #endif
2979 }
2980
2981
2982 static void p2p_go_neg_resp_failure_cb(struct p2p_data *p2p, int success)
2983 {
2984         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2985                 "P2P: GO Negotiation Response (failure) TX callback: "
2986                 "success=%d", success);
2987         if (p2p->go_neg_peer && p2p->go_neg_peer->status != P2P_SC_SUCCESS) {
2988                 p2p_go_neg_failed(p2p, p2p->go_neg_peer,
2989                                   p2p->go_neg_peer->status);
2990         }
2991 }
2992
2993
2994 static void p2p_go_neg_conf_cb(struct p2p_data *p2p,
2995                                enum p2p_send_action_result result)
2996 {
2997         struct p2p_device *dev;
2998
2999         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3000                 "P2P: GO Negotiation Confirm TX callback: result=%d",
3001                 result);
3002         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3003         if (result == P2P_SEND_ACTION_FAILED) {
3004                 p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3005                 return;
3006         }
3007         if (result == P2P_SEND_ACTION_NO_ACK) {
3008                 /*
3009                  * It looks like the TX status for GO Negotiation Confirm is
3010                  * often showing failure even when the peer has actually
3011                  * received the frame. Since the peer may change channels
3012                  * immediately after having received the frame, we may not see
3013                  * an Ack for retries, so just dropping a single frame may
3014                  * trigger this. To allow the group formation to succeed if the
3015                  * peer did indeed receive the frame, continue regardless of
3016                  * the TX status.
3017                  */
3018                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3019                         "P2P: Assume GO Negotiation Confirm TX was actually "
3020                         "received by the peer even though Ack was not "
3021                         "reported");
3022         }
3023
3024         dev = p2p->go_neg_peer;
3025         if (dev == NULL)
3026                 return;
3027
3028         p2p_go_complete(p2p, dev);
3029 }
3030
3031
3032 void p2p_send_action_cb(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
3033                         const u8 *src, const u8 *bssid,
3034                         enum p2p_send_action_result result)
3035 {
3036         enum p2p_pending_action_state state;
3037         int success;
3038
3039         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3040                 "P2P: Action frame TX callback (state=%d freq=%u dst=" MACSTR
3041                 " src=" MACSTR " bssid=" MACSTR " result=%d",
3042                 p2p->pending_action_state, freq, MAC2STR(dst), MAC2STR(src),
3043                 MAC2STR(bssid), result);
3044         success = result == P2P_SEND_ACTION_SUCCESS;
3045         state = p2p->pending_action_state;
3046         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3047         switch (state) {
3048         case P2P_NO_PENDING_ACTION:
3049                 break;
3050         case P2P_PENDING_GO_NEG_REQUEST:
3051                 p2p_go_neg_req_cb(p2p, success);
3052                 break;
3053         case P2P_PENDING_GO_NEG_RESPONSE:
3054                 p2p_go_neg_resp_cb(p2p, success);
3055                 break;
3056         case P2P_PENDING_GO_NEG_RESPONSE_FAILURE:
3057                 p2p_go_neg_resp_failure_cb(p2p, success);
3058                 break;
3059         case P2P_PENDING_GO_NEG_CONFIRM:
3060                 p2p_go_neg_conf_cb(p2p, result);
3061                 break;
3062         case P2P_PENDING_SD:
3063                 p2p_sd_cb(p2p, success);
3064                 break;
3065         case P2P_PENDING_PD:
3066                 p2p_prov_disc_cb(p2p, success);
3067                 break;
3068         case P2P_PENDING_INVITATION_REQUEST:
3069                 p2p_invitation_req_cb(p2p, success);
3070                 break;
3071         case P2P_PENDING_INVITATION_RESPONSE:
3072                 p2p_invitation_resp_cb(p2p, success);
3073                 break;
3074         case P2P_PENDING_DEV_DISC_REQUEST:
3075                 p2p_dev_disc_req_cb(p2p, success);
3076                 break;
3077         case P2P_PENDING_DEV_DISC_RESPONSE:
3078                 p2p_dev_disc_resp_cb(p2p, success);
3079                 break;
3080         case P2P_PENDING_GO_DISC_REQ:
3081                 p2p_go_disc_req_cb(p2p, success);
3082                 break;
3083         }
3084 }
3085
3086
3087 void p2p_listen_cb(struct p2p_data *p2p, unsigned int freq,
3088                    unsigned int duration)
3089 {
3090         if (freq == p2p->pending_client_disc_freq) {
3091                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3092                         "P2P: Client discoverability remain-awake completed");
3093                 p2p->pending_client_disc_freq = 0;
3094                 return;
3095         }
3096
3097         if (freq != p2p->pending_listen_freq) {
3098                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3099                         "P2P: Unexpected listen callback for freq=%u "
3100                         "duration=%u (pending_listen_freq=%u)",
3101                         freq, duration, p2p->pending_listen_freq);
3102                 return;
3103         }
3104
3105         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3106                 "P2P: Starting Listen timeout(%u,%u) on freq=%u based on "
3107                 "callback",
3108                 p2p->pending_listen_sec, p2p->pending_listen_usec,
3109                 p2p->pending_listen_freq);
3110         p2p->in_listen = 1;
3111         p2p->drv_in_listen = freq;
3112         if (p2p->pending_listen_sec || p2p->pending_listen_usec) {
3113                 /*
3114                  * Add 20 msec extra wait to avoid race condition with driver
3115                  * remain-on-channel end event, i.e., give driver more time to
3116                  * complete the operation before our timeout expires.
3117                  */
3118                 p2p_set_timeout(p2p, p2p->pending_listen_sec,
3119                                 p2p->pending_listen_usec + 20000);
3120         }
3121
3122         p2p->pending_listen_freq = 0;
3123 }
3124
3125
3126 int p2p_listen_end(struct p2p_data *p2p, unsigned int freq)
3127 {
3128         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Driver ended Listen "
3129                 "state (freq=%u)", freq);
3130         p2p->drv_in_listen = 0;
3131         if (p2p->in_listen)
3132                 return 0; /* Internal timeout will trigger the next step */
3133
3134         if (p2p->state == P2P_CONNECT_LISTEN && p2p->go_neg_peer) {
3135                 if (p2p->go_neg_peer->connect_reqs >= 120) {
3136                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3137                                 "P2P: Timeout on sending GO Negotiation "
3138                                 "Request without getting response");
3139                         p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3140                         return 0;
3141                 }
3142
3143                 p2p_set_state(p2p, P2P_CONNECT);
3144                 p2p_connect_send(p2p, p2p->go_neg_peer);
3145                 return 1;
3146         } else if (p2p->state == P2P_SEARCH) {
3147                 if (p2p->p2p_scan_running) {
3148                          /*
3149                           * Search is already in progress. This can happen if
3150                           * an Action frame RX is reported immediately after
3151                           * the end of a remain-on-channel operation and the
3152                           * response frame to that is sent using an offchannel
3153                           * operation while in p2p_find. Avoid an attempt to
3154                           * restart a scan here.
3155                           */
3156                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan "
3157                                 "already in progress - do not try to start a "
3158                                 "new one");
3159                         return 1;
3160                 }
3161                 if (p2p->pending_listen_freq) {
3162                         /*
3163                          * Better wait a bit if the driver is unable to start
3164                          * offchannel operation for some reason. p2p_search()
3165                          * will be started from internal timeout.
3166                          */
3167                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Listen "
3168                                 "operation did not seem to start - delay "
3169                                 "search phase to avoid busy loop");
3170                         p2p_set_timeout(p2p, 0, 100000);
3171                         return 1;
3172                 }
3173                 if (p2p->search_delay) {
3174                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Delay "
3175                                 "search operation by %u ms",
3176                                 p2p->search_delay);
3177                         p2p_set_timeout(p2p, p2p->search_delay / 1000,
3178                                         (p2p->search_delay % 1000) * 1000);
3179                         return 1;
3180                 }
3181                 p2p_search(p2p);
3182                 return 1;
3183         }
3184
3185         return 0;
3186 }
3187
3188
3189 static void p2p_timeout_connect(struct p2p_data *p2p)
3190 {
3191         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3192         if (p2p->go_neg_peer &&
3193             (p2p->go_neg_peer->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM)) {
3194                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Wait for GO "
3195                         "Negotiation Confirm timed out - assume GO "
3196                         "Negotiation failed");
3197                 p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3198                 return;
3199         }
3200         p2p_set_state(p2p, P2P_CONNECT_LISTEN);
3201         p2p_listen_in_find(p2p);
3202 }
3203
3204
3205 static void p2p_timeout_connect_listen(struct p2p_data *p2p)
3206 {
3207         if (p2p->go_neg_peer) {
3208                 if (p2p->drv_in_listen) {
3209                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Driver is "
3210                                 "still in Listen state; wait for it to "
3211                                 "complete");
3212                         return;
3213                 }
3214
3215                 if (p2p->go_neg_peer->connect_reqs >= 120) {
3216                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3217                                 "P2P: Timeout on sending GO Negotiation "
3218                                 "Request without getting response");
3219                         p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
3220                         return;
3221                 }
3222
3223                 p2p_set_state(p2p, P2P_CONNECT);
3224                 p2p_connect_send(p2p, p2p->go_neg_peer);
3225         } else
3226                 p2p_set_state(p2p, P2P_IDLE);
3227 }
3228
3229
3230 static void p2p_timeout_wait_peer_connect(struct p2p_data *p2p)
3231 {
3232         /*
3233          * TODO: could remain constantly in Listen state for some time if there
3234          * are no other concurrent uses for the radio. For now, go to listen
3235          * state once per second to give other uses a chance to use the radio.
3236          */
3237         p2p_set_state(p2p, P2P_WAIT_PEER_IDLE);
3238         p2p_set_timeout(p2p, 0, 500000);
3239 }
3240
3241
3242 static void p2p_timeout_wait_peer_idle(struct p2p_data *p2p)
3243 {
3244         struct p2p_device *dev = p2p->go_neg_peer;
3245
3246         if (dev == NULL) {
3247                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3248                         "P2P: Unknown GO Neg peer - stop GO Neg wait");
3249                 return;
3250         }
3251
3252         dev->wait_count++;
3253         if (dev->wait_count >= 120) {
3254                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3255                         "P2P: Timeout on waiting peer to become ready for GO "
3256                         "Negotiation");
3257                 p2p_go_neg_failed(p2p, dev, -1);
3258                 return;
3259         }
3260
3261         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3262                 "P2P: Go to Listen state while waiting for the peer to become "
3263                 "ready for GO Negotiation");
3264         p2p_set_state(p2p, P2P_WAIT_PEER_CONNECT);
3265         p2p_listen_in_find(p2p);
3266 }
3267
3268
3269 static void p2p_timeout_sd_during_find(struct p2p_data *p2p)
3270 {
3271         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3272                 "P2P: Service Discovery Query timeout");
3273         if (p2p->sd_peer) {
3274                 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3275                 p2p->sd_peer->flags &= ~P2P_DEV_SD_SCHEDULE;
3276                 p2p->sd_peer = NULL;
3277         }
3278         p2p_continue_find(p2p);
3279 }
3280
3281
3282 static void p2p_timeout_prov_disc_during_find(struct p2p_data *p2p)
3283 {
3284         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3285                 "P2P: Provision Discovery Request timeout");
3286         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3287         p2p_continue_find(p2p);
3288 }
3289
3290
3291 static void p2p_timeout_prov_disc_req(struct p2p_data *p2p)
3292 {
3293         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3294
3295         /*
3296          * For user initiated PD requests that we have not gotten any responses
3297          * for while in IDLE state, we retry them a couple of times before
3298          * giving up.
3299          */
3300         if (!p2p->user_initiated_pd)
3301                 return;
3302
3303         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3304                 "P2P: User initiated Provision Discovery Request timeout");
3305
3306         if (p2p->pd_retries) {
3307                 p2p->pd_retries--;
3308                 p2p_retry_pd(p2p);
3309         } else {
3310                 if (p2p->cfg->prov_disc_fail)
3311                         p2p->cfg->prov_disc_fail(p2p->cfg->cb_ctx,
3312                                                  p2p->pending_pd_devaddr,
3313                                                  P2P_PROV_DISC_TIMEOUT);
3314                 p2p_reset_pending_pd(p2p);
3315         }
3316 }
3317
3318
3319 static void p2p_timeout_invite(struct p2p_data *p2p)
3320 {
3321         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3322         p2p_set_state(p2p, P2P_INVITE_LISTEN);
3323         if (p2p->inv_role == P2P_INVITE_ROLE_ACTIVE_GO) {
3324                 /*
3325                  * Better remain on operating channel instead of listen channel
3326                  * when running a group.
3327                  */
3328                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Inviting in "
3329                         "active GO role - wait on operating channel");
3330                 p2p_set_timeout(p2p, 0, 100000);
3331                 return;
3332         }
3333         p2p_listen_in_find(p2p);
3334 }
3335
3336
3337 static void p2p_timeout_invite_listen(struct p2p_data *p2p)
3338 {
3339         if (p2p->invite_peer && p2p->invite_peer->invitation_reqs < 100) {
3340                 p2p_set_state(p2p, P2P_INVITE);
3341                 p2p_invite_send(p2p, p2p->invite_peer,
3342                                 p2p->invite_go_dev_addr);
3343         } else {
3344                 if (p2p->invite_peer) {
3345                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3346                                 "P2P: Invitation Request retry limit reached");
3347                         if (p2p->cfg->invitation_result)
3348                                 p2p->cfg->invitation_result(
3349                                         p2p->cfg->cb_ctx, -1, NULL);
3350                 }
3351                 p2p_set_state(p2p, P2P_IDLE);
3352         }
3353 }
3354
3355
3356 static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx)
3357 {
3358         struct p2p_data *p2p = eloop_ctx;
3359
3360         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Timeout (state=%s)",
3361                 p2p_state_txt(p2p->state));
3362
3363         p2p->in_listen = 0;
3364
3365         switch (p2p->state) {
3366         case P2P_IDLE:
3367                 /* Check if we timed out waiting for PD req */
3368                 if (p2p->pending_action_state == P2P_PENDING_PD)
3369                         p2p_timeout_prov_disc_req(p2p);
3370                 break;
3371         case P2P_SEARCH:
3372                 /* Check if we timed out waiting for PD req */
3373                 if (p2p->pending_action_state == P2P_PENDING_PD)
3374                         p2p_timeout_prov_disc_req(p2p);
3375                 if (p2p->search_delay && !p2p->in_search_delay) {
3376                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Delay "
3377                                 "search operation by %u ms",
3378                                 p2p->search_delay);
3379                         p2p->in_search_delay = 1;
3380                         p2p_set_timeout(p2p, p2p->search_delay / 1000,
3381                                         (p2p->search_delay % 1000) * 1000);
3382                         break;
3383                 }
3384                 p2p->in_search_delay = 0;
3385                 p2p_search(p2p);
3386                 break;
3387         case P2P_CONNECT:
3388                 p2p_timeout_connect(p2p);
3389                 break;
3390         case P2P_CONNECT_LISTEN:
3391                 p2p_timeout_connect_listen(p2p);
3392                 break;
3393         case P2P_GO_NEG:
3394                 break;
3395         case P2P_LISTEN_ONLY:
3396                 /* Check if we timed out waiting for PD req */
3397                 if (p2p->pending_action_state == P2P_PENDING_PD)
3398                         p2p_timeout_prov_disc_req(p2p);
3399
3400                 if (p2p->ext_listen_only) {
3401                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3402                                 "P2P: Extended Listen Timing - Listen State "
3403                                 "completed");
3404                         p2p->ext_listen_only = 0;
3405                         p2p_set_state(p2p, P2P_IDLE);
3406                 }
3407                 break;
3408         case P2P_WAIT_PEER_CONNECT:
3409                 p2p_timeout_wait_peer_connect(p2p);
3410                 break;
3411         case P2P_WAIT_PEER_IDLE:
3412                 p2p_timeout_wait_peer_idle(p2p);
3413                 break;
3414         case P2P_SD_DURING_FIND:
3415                 p2p_timeout_sd_during_find(p2p);
3416                 break;
3417         case P2P_PROVISIONING:
3418                 break;
3419         case P2P_PD_DURING_FIND:
3420                 p2p_timeout_prov_disc_during_find(p2p);
3421                 break;
3422         case P2P_INVITE:
3423                 p2p_timeout_invite(p2p);
3424                 break;
3425         case P2P_INVITE_LISTEN:
3426                 p2p_timeout_invite_listen(p2p);
3427                 break;
3428         case P2P_SEARCH_WHEN_READY:
3429                 break;
3430         case P2P_CONTINUE_SEARCH_WHEN_READY:
3431                 break;
3432         }
3433 }
3434
3435
3436 int p2p_reject(struct p2p_data *p2p, const u8 *peer_addr)
3437 {
3438         struct p2p_device *dev;
3439
3440         dev = p2p_get_device(p2p, peer_addr);
3441         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Local request to reject "
3442                 "connection attempts by peer " MACSTR, MAC2STR(peer_addr));
3443         if (dev == NULL) {
3444                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Peer " MACSTR
3445                         " unknown", MAC2STR(peer_addr));
3446                 return -1;
3447         }
3448         dev->status = P2P_SC_FAIL_REJECTED_BY_USER;
3449         dev->flags |= P2P_DEV_USER_REJECTED;
3450         return 0;
3451 }
3452
3453
3454 const char * p2p_wps_method_text(enum p2p_wps_method method)
3455 {
3456         switch (method) {
3457         case WPS_NOT_READY:
3458                 return "not-ready";
3459         case WPS_PIN_DISPLAY:
3460                 return "Display";
3461         case WPS_PIN_KEYPAD:
3462                 return "Keypad";
3463         case WPS_PBC:
3464                 return "PBC";
3465         }
3466
3467         return "??";
3468 }
3469
3470
3471 static const char * p2p_go_state_text(enum p2p_go_state go_state)
3472 {
3473         switch (go_state) {
3474         case UNKNOWN_GO:
3475                 return "unknown";
3476         case LOCAL_GO:
3477                 return "local";
3478         case  REMOTE_GO:
3479                 return "remote";
3480         }
3481
3482         return "??";
3483 }
3484
3485
3486 const struct p2p_peer_info * p2p_get_peer_info(struct p2p_data *p2p,
3487                                                const u8 *addr, int next)
3488 {
3489         struct p2p_device *dev;
3490
3491         if (addr)
3492                 dev = p2p_get_device(p2p, addr);
3493         else
3494                 dev = dl_list_first(&p2p->devices, struct p2p_device, list);
3495
3496         if (dev && next) {
3497                 dev = dl_list_first(&dev->list, struct p2p_device, list);
3498                 if (&dev->list == &p2p->devices)
3499                         dev = NULL;
3500         }
3501
3502         if (dev == NULL)
3503                 return NULL;
3504
3505         return &dev->info;
3506 }
3507
3508
3509 int p2p_get_peer_info_txt(const struct p2p_peer_info *info,
3510                           char *buf, size_t buflen)
3511 {
3512         struct p2p_device *dev;
3513         int res;
3514         char *pos, *end;
3515         struct os_time now;
3516
3517         if (info == NULL)
3518                 return -1;
3519
3520         dev = (struct p2p_device *) (((u8 *) info) -
3521                                      offsetof(struct p2p_device, info));
3522
3523         pos = buf;
3524         end = buf + buflen;
3525
3526         os_get_time(&now);
3527         res = os_snprintf(pos, end - pos,
3528                           "age=%d\n"
3529                           "listen_freq=%d\n"
3530                           "wps_method=%s\n"
3531                           "interface_addr=" MACSTR "\n"
3532                           "member_in_go_dev=" MACSTR "\n"
3533                           "member_in_go_iface=" MACSTR "\n"
3534                           "go_neg_req_sent=%d\n"
3535                           "go_state=%s\n"
3536                           "dialog_token=%u\n"
3537                           "intended_addr=" MACSTR "\n"
3538                           "country=%c%c\n"
3539                           "oper_freq=%d\n"
3540                           "req_config_methods=0x%x\n"
3541                           "flags=%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s\n"
3542                           "status=%d\n"
3543                           "wait_count=%u\n"
3544                           "invitation_reqs=%u\n",
3545                           (int) (now.sec - dev->last_seen.sec),
3546                           dev->listen_freq,
3547                           p2p_wps_method_text(dev->wps_method),
3548                           MAC2STR(dev->interface_addr),
3549                           MAC2STR(dev->member_in_go_dev),
3550                           MAC2STR(dev->member_in_go_iface),
3551                           dev->go_neg_req_sent,
3552                           p2p_go_state_text(dev->go_state),
3553                           dev->dialog_token,
3554                           MAC2STR(dev->intended_addr),
3555                           dev->country[0] ? dev->country[0] : '_',
3556                           dev->country[1] ? dev->country[1] : '_',
3557                           dev->oper_freq,
3558                           dev->req_config_methods,
3559                           dev->flags & P2P_DEV_PROBE_REQ_ONLY ?
3560                           "[PROBE_REQ_ONLY]" : "",
3561                           dev->flags & P2P_DEV_REPORTED ? "[REPORTED]" : "",
3562                           dev->flags & P2P_DEV_NOT_YET_READY ?
3563                           "[NOT_YET_READY]" : "",
3564                           dev->flags & P2P_DEV_SD_INFO ? "[SD_INFO]" : "",
3565                           dev->flags & P2P_DEV_SD_SCHEDULE ? "[SD_SCHEDULE]" :
3566                           "",
3567                           dev->flags & P2P_DEV_PD_PEER_DISPLAY ?
3568                           "[PD_PEER_DISPLAY]" : "",
3569                           dev->flags & P2P_DEV_PD_PEER_KEYPAD ?
3570                           "[PD_PEER_KEYPAD]" : "",
3571                           dev->flags & P2P_DEV_USER_REJECTED ?
3572                           "[USER_REJECTED]" : "",
3573                           dev->flags & P2P_DEV_PEER_WAITING_RESPONSE ?
3574                           "[PEER_WAITING_RESPONSE]" : "",
3575                           dev->flags & P2P_DEV_PREFER_PERSISTENT_GROUP ?
3576                           "[PREFER_PERSISTENT_GROUP]" : "",
3577                           dev->flags & P2P_DEV_WAIT_GO_NEG_RESPONSE ?
3578                           "[WAIT_GO_NEG_RESPONSE]" : "",
3579                           dev->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM ?
3580                           "[WAIT_GO_NEG_CONFIRM]" : "",
3581                           dev->flags & P2P_DEV_GROUP_CLIENT_ONLY ?
3582                           "[GROUP_CLIENT_ONLY]" : "",
3583                           dev->flags & P2P_DEV_FORCE_FREQ ?
3584                           "[FORCE_FREQ]" : "",
3585                           dev->flags & P2P_DEV_PD_FOR_JOIN ?
3586                           "[PD_FOR_JOIN]" : "",
3587                           dev->status,
3588                           dev->wait_count,
3589                           dev->invitation_reqs);
3590         if (res < 0 || res >= end - pos)
3591                 return pos - buf;
3592         pos += res;
3593
3594         if (dev->ext_listen_period) {
3595                 res = os_snprintf(pos, end - pos,
3596                                   "ext_listen_period=%u\n"
3597                                   "ext_listen_interval=%u\n",
3598                                   dev->ext_listen_period,
3599                                   dev->ext_listen_interval);
3600                 if (res < 0 || res >= end - pos)
3601                         return pos - buf;
3602                 pos += res;
3603         }
3604
3605         if (dev->oper_ssid_len) {
3606                 res = os_snprintf(pos, end - pos,
3607                                   "oper_ssid=%s\n",
3608                                   wpa_ssid_txt(dev->oper_ssid,
3609                                                dev->oper_ssid_len));
3610                 if (res < 0 || res >= end - pos)
3611                         return pos - buf;
3612                 pos += res;
3613         }
3614
3615 #ifdef CONFIG_WIFI_DISPLAY
3616         if (dev->info.wfd_subelems) {
3617                 res = os_snprintf(pos, end - pos, "wfd_subelems=");
3618                 if (res < 0 || res >= end - pos)
3619                         return pos - buf;
3620                 pos += res;
3621
3622                 pos += wpa_snprintf_hex(pos, end - pos,
3623                                         wpabuf_head(dev->info.wfd_subelems),
3624                                         wpabuf_len(dev->info.wfd_subelems));
3625
3626                 res = os_snprintf(pos, end - pos, "\n");
3627                 if (res < 0 || res >= end - pos)
3628                         return pos - buf;
3629                 pos += res;
3630         }
3631 #endif /* CONFIG_WIFI_DISPLAY */
3632
3633         return pos - buf;
3634 }
3635
3636
3637 int p2p_peer_known(struct p2p_data *p2p, const u8 *addr)
3638 {
3639         return p2p_get_device(p2p, addr) != NULL;
3640 }
3641
3642
3643 void p2p_set_client_discoverability(struct p2p_data *p2p, int enabled)
3644 {
3645         if (enabled) {
3646                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Client "
3647                         "discoverability enabled");
3648                 p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3649         } else {
3650                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Client "
3651                         "discoverability disabled");
3652                 p2p->dev_capab &= ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3653         }
3654 }
3655
3656
3657 static struct wpabuf * p2p_build_presence_req(u32 duration1, u32 interval1,
3658                                               u32 duration2, u32 interval2)
3659 {
3660         struct wpabuf *req;
3661         struct p2p_noa_desc desc1, desc2, *ptr1 = NULL, *ptr2 = NULL;
3662         u8 *len;
3663
3664         req = wpabuf_alloc(100);
3665         if (req == NULL)
3666                 return NULL;
3667
3668         if (duration1 || interval1) {
3669                 os_memset(&desc1, 0, sizeof(desc1));
3670                 desc1.count_type = 1;
3671                 desc1.duration = duration1;
3672                 desc1.interval = interval1;
3673                 ptr1 = &desc1;
3674
3675                 if (duration2 || interval2) {
3676                         os_memset(&desc2, 0, sizeof(desc2));
3677                         desc2.count_type = 2;
3678                         desc2.duration = duration2;
3679                         desc2.interval = interval2;
3680                         ptr2 = &desc2;
3681                 }
3682         }
3683
3684         p2p_buf_add_action_hdr(req, P2P_PRESENCE_REQ, 1);
3685         len = p2p_buf_add_ie_hdr(req);
3686         p2p_buf_add_noa(req, 0, 0, 0, ptr1, ptr2);
3687         p2p_buf_update_ie_hdr(req, len);
3688
3689         return req;
3690 }
3691
3692
3693 int p2p_presence_req(struct p2p_data *p2p, const u8 *go_interface_addr,
3694                      const u8 *own_interface_addr, unsigned int freq,
3695                      u32 duration1, u32 interval1, u32 duration2,
3696                      u32 interval2)
3697 {
3698         struct wpabuf *req;
3699
3700         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send Presence Request to "
3701                 "GO " MACSTR " (own interface " MACSTR ") freq=%u dur1=%u "
3702                 "int1=%u dur2=%u int2=%u",
3703                 MAC2STR(go_interface_addr), MAC2STR(own_interface_addr),
3704                 freq, duration1, interval1, duration2, interval2);
3705
3706         req = p2p_build_presence_req(duration1, interval1, duration2,
3707                                      interval2);
3708         if (req == NULL)
3709                 return -1;
3710
3711         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3712         if (p2p_send_action(p2p, freq, go_interface_addr, own_interface_addr,
3713                             go_interface_addr,
3714                             wpabuf_head(req), wpabuf_len(req), 200) < 0) {
3715                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3716                         "P2P: Failed to send Action frame");
3717         }
3718         wpabuf_free(req);
3719
3720         return 0;
3721 }
3722
3723
3724 static struct wpabuf * p2p_build_presence_resp(u8 status, const u8 *noa,
3725                                                size_t noa_len, u8 dialog_token)
3726 {
3727         struct wpabuf *resp;
3728         u8 *len;
3729
3730         resp = wpabuf_alloc(100 + noa_len);
3731         if (resp == NULL)
3732                 return NULL;
3733
3734         p2p_buf_add_action_hdr(resp, P2P_PRESENCE_RESP, dialog_token);
3735         len = p2p_buf_add_ie_hdr(resp);
3736         p2p_buf_add_status(resp, status);
3737         if (noa) {
3738                 wpabuf_put_u8(resp, P2P_ATTR_NOTICE_OF_ABSENCE);
3739                 wpabuf_put_le16(resp, noa_len);
3740                 wpabuf_put_data(resp, noa, noa_len);
3741         } else
3742                 p2p_buf_add_noa(resp, 0, 0, 0, NULL, NULL);
3743         p2p_buf_update_ie_hdr(resp, len);
3744
3745         return resp;
3746 }
3747
3748
3749 static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
3750                                      const u8 *sa, const u8 *data, size_t len,
3751                                      int rx_freq)
3752 {
3753         struct p2p_message msg;
3754         u8 status;
3755         struct wpabuf *resp;
3756         size_t g;
3757         struct p2p_group *group = NULL;
3758         int parsed = 0;
3759         u8 noa[50];
3760         int noa_len;
3761
3762         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3763                 "P2P: Received P2P Action - P2P Presence Request");
3764
3765         for (g = 0; g < p2p->num_groups; g++) {
3766                 if (os_memcmp(da, p2p_group_get_interface_addr(p2p->groups[g]),
3767                               ETH_ALEN) == 0) {
3768                         group = p2p->groups[g];
3769                         break;
3770                 }
3771         }
3772         if (group == NULL) {
3773                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3774                         "P2P: Ignore P2P Presence Request for unknown group "
3775                         MACSTR, MAC2STR(da));
3776                 return;
3777         }
3778
3779         if (p2p_parse(data, len, &msg) < 0) {
3780                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3781                         "P2P: Failed to parse P2P Presence Request");
3782                 status = P2P_SC_FAIL_INVALID_PARAMS;
3783                 goto fail;
3784         }
3785         parsed = 1;
3786
3787         if (msg.noa == NULL) {
3788                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3789                         "P2P: No NoA attribute in P2P Presence Request");
3790                 status = P2P_SC_FAIL_INVALID_PARAMS;
3791                 goto fail;
3792         }
3793
3794         status = p2p_group_presence_req(group, sa, msg.noa, msg.noa_len);
3795
3796 fail:
3797         if (p2p->cfg->get_noa)
3798                 noa_len = p2p->cfg->get_noa(p2p->cfg->cb_ctx, da, noa,
3799                                             sizeof(noa));
3800         else
3801                 noa_len = -1;
3802         resp = p2p_build_presence_resp(status, noa_len > 0 ? noa : NULL,
3803                                        noa_len > 0 ? noa_len : 0,
3804                                        msg.dialog_token);
3805         if (parsed)
3806                 p2p_parse_free(&msg);
3807         if (resp == NULL)
3808                 return;
3809
3810         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3811         if (p2p_send_action(p2p, rx_freq, sa, da, da,
3812                             wpabuf_head(resp), wpabuf_len(resp), 200) < 0) {
3813                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3814                         "P2P: Failed to send Action frame");
3815         }
3816         wpabuf_free(resp);
3817 }
3818
3819
3820 static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
3821                                       const u8 *sa, const u8 *data, size_t len)
3822 {
3823         struct p2p_message msg;
3824
3825         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3826                 "P2P: Received P2P Action - P2P Presence Response");
3827
3828         if (p2p_parse(data, len, &msg) < 0) {
3829                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3830                         "P2P: Failed to parse P2P Presence Response");
3831                 return;
3832         }
3833
3834         if (msg.status == NULL || msg.noa == NULL) {
3835                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3836                         "P2P: No Status or NoA attribute in P2P Presence "
3837                         "Response");
3838                 p2p_parse_free(&msg);
3839                 return;
3840         }
3841
3842         if (*msg.status) {
3843                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3844                         "P2P: P2P Presence Request was rejected: status %u",
3845                         *msg.status);
3846                 p2p_parse_free(&msg);
3847                 return;
3848         }
3849
3850         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3851                 "P2P: P2P Presence Request was accepted");
3852         wpa_hexdump(MSG_DEBUG, "P2P: P2P Presence Response - NoA",
3853                     msg.noa, msg.noa_len);
3854         /* TODO: process NoA */
3855         p2p_parse_free(&msg);
3856 }
3857
3858
3859 static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx)
3860 {
3861         struct p2p_data *p2p = eloop_ctx;
3862
3863         if (p2p->ext_listen_interval) {
3864                 /* Schedule next extended listen timeout */
3865                 eloop_register_timeout(p2p->ext_listen_interval_sec,
3866                                        p2p->ext_listen_interval_usec,
3867                                        p2p_ext_listen_timeout, p2p, NULL);
3868         }
3869
3870         if (p2p->state == P2P_LISTEN_ONLY && p2p->ext_listen_only) {
3871                 /*
3872                  * This should not really happen, but it looks like the Listen
3873                  * command may fail is something else (e.g., a scan) was
3874                  * running at an inconvenient time. As a workaround, allow new
3875                  * Extended Listen operation to be started.
3876                  */
3877                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Previous "
3878                         "Extended Listen operation had not been completed - "
3879                         "try again");
3880                 p2p->ext_listen_only = 0;
3881                 p2p_set_state(p2p, P2P_IDLE);
3882         }
3883
3884         if (p2p->state != P2P_IDLE) {
3885                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Skip Extended "
3886                         "Listen timeout in active state (%s)",
3887                         p2p_state_txt(p2p->state));
3888                 return;
3889         }
3890
3891         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Extended Listen timeout");
3892         p2p->ext_listen_only = 1;
3893         if (p2p_listen(p2p, p2p->ext_listen_period) < 0) {
3894                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Failed to start "
3895                         "Listen state for Extended Listen Timing");
3896                 p2p->ext_listen_only = 0;
3897         }
3898 }
3899
3900
3901 int p2p_ext_listen(struct p2p_data *p2p, unsigned int period,
3902                    unsigned int interval)
3903 {
3904         if (period > 65535 || interval > 65535 || period > interval ||
3905             (period == 0 && interval > 0) || (period > 0 && interval == 0)) {
3906                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3907                         "P2P: Invalid Extended Listen Timing request: "
3908                         "period=%u interval=%u", period, interval);
3909                 return -1;
3910         }
3911
3912         eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
3913
3914         if (interval == 0) {
3915                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3916                         "P2P: Disabling Extended Listen Timing");
3917                 p2p->ext_listen_period = 0;
3918                 p2p->ext_listen_interval = 0;
3919                 return 0;
3920         }
3921
3922         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3923                 "P2P: Enabling Extended Listen Timing: period %u msec, "
3924                 "interval %u msec", period, interval);
3925         p2p->ext_listen_period = period;
3926         p2p->ext_listen_interval = interval;
3927         p2p->ext_listen_interval_sec = interval / 1000;
3928         p2p->ext_listen_interval_usec = (interval % 1000) * 1000;
3929
3930         eloop_register_timeout(p2p->ext_listen_interval_sec,
3931                                p2p->ext_listen_interval_usec,
3932                                p2p_ext_listen_timeout, p2p, NULL);
3933
3934         return 0;
3935 }
3936
3937
3938 void p2p_deauth_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
3939                       const u8 *ie, size_t ie_len)
3940 {
3941         struct p2p_message msg;
3942
3943         if (bssid == NULL || ie == NULL)
3944                 return;
3945
3946         os_memset(&msg, 0, sizeof(msg));
3947         if (p2p_parse_ies(ie, ie_len, &msg))
3948                 return;
3949         if (msg.minor_reason_code == NULL)
3950                 return;
3951
3952         wpa_msg(p2p->cfg->msg_ctx, MSG_INFO,
3953                 "P2P: Deauthentication notification BSSID " MACSTR
3954                 " reason_code=%u minor_reason_code=%u",
3955                 MAC2STR(bssid), reason_code, *msg.minor_reason_code);
3956
3957         p2p_parse_free(&msg);
3958 }
3959
3960
3961 void p2p_disassoc_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
3962                         const u8 *ie, size_t ie_len)
3963 {
3964         struct p2p_message msg;
3965
3966         if (bssid == NULL || ie == NULL)
3967                 return;
3968
3969         os_memset(&msg, 0, sizeof(msg));
3970         if (p2p_parse_ies(ie, ie_len, &msg))
3971                 return;
3972         if (msg.minor_reason_code == NULL)
3973                 return;
3974
3975         wpa_msg(p2p->cfg->msg_ctx, MSG_INFO,
3976                 "P2P: Disassociation notification BSSID " MACSTR
3977                 " reason_code=%u minor_reason_code=%u",
3978                 MAC2STR(bssid), reason_code, *msg.minor_reason_code);
3979
3980         p2p_parse_free(&msg);
3981 }
3982
3983
3984 void p2p_set_managed_oper(struct p2p_data *p2p, int enabled)
3985 {
3986         if (enabled) {
3987                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Managed P2P "
3988                         "Device operations enabled");
3989                 p2p->dev_capab |= P2P_DEV_CAPAB_INFRA_MANAGED;
3990         } else {
3991                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Managed P2P "
3992                         "Device operations disabled");
3993                 p2p->dev_capab &= ~P2P_DEV_CAPAB_INFRA_MANAGED;
3994         }
3995 }
3996
3997
3998 int p2p_set_listen_channel(struct p2p_data *p2p, u8 reg_class, u8 channel)
3999 {
4000         if (p2p_channel_to_freq(p2p->cfg->country, reg_class, channel) < 0)
4001                 return -1;
4002
4003         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Set Listen channel: "
4004                 "reg_class %u channel %u", reg_class, channel);
4005         p2p->cfg->reg_class = reg_class;
4006         p2p->cfg->channel = channel;
4007
4008         return 0;
4009 }
4010
4011
4012 int p2p_set_ssid_postfix(struct p2p_data *p2p, const u8 *postfix, size_t len)
4013 {
4014         wpa_hexdump_ascii(MSG_DEBUG, "P2P: New SSID postfix", postfix, len);
4015         if (postfix == NULL) {
4016                 p2p->cfg->ssid_postfix_len = 0;
4017                 return 0;
4018         }
4019         if (len > sizeof(p2p->cfg->ssid_postfix))
4020                 return -1;
4021         os_memcpy(p2p->cfg->ssid_postfix, postfix, len);
4022         p2p->cfg->ssid_postfix_len = len;
4023         return 0;
4024 }
4025
4026
4027 int p2p_set_oper_channel(struct p2p_data *p2p, u8 op_reg_class, u8 op_channel,
4028                          int cfg_op_channel)
4029 {
4030         if (p2p_channel_to_freq(p2p->cfg->country, op_reg_class, op_channel)
4031             < 0)
4032                 return -1;
4033
4034         wpa_msg(p2p->cfg->msg_ctx, MSG_INFO, "P2P: Set Operating channel: "
4035                 "reg_class %u channel %u", op_reg_class, op_channel);
4036         p2p->cfg->op_reg_class = op_reg_class;
4037         p2p->cfg->op_channel = op_channel;
4038         p2p->cfg->cfg_op_channel = cfg_op_channel;
4039         return 0;
4040 }
4041
4042
4043 int p2p_set_pref_chan(struct p2p_data *p2p, unsigned int num_pref_chan,
4044                       const struct p2p_channel *pref_chan)
4045 {
4046         struct p2p_channel *n;
4047
4048         if (pref_chan) {
4049                 n = os_malloc(num_pref_chan * sizeof(struct p2p_channel));
4050                 if (n == NULL)
4051                         return -1;
4052                 os_memcpy(n, pref_chan,
4053                           num_pref_chan * sizeof(struct p2p_channel));
4054         } else
4055                 n = NULL;
4056
4057         os_free(p2p->cfg->pref_chan);
4058         p2p->cfg->pref_chan = n;
4059         p2p->cfg->num_pref_chan = num_pref_chan;
4060
4061         return 0;
4062 }
4063
4064
4065 int p2p_get_interface_addr(struct p2p_data *p2p, const u8 *dev_addr,
4066                            u8 *iface_addr)
4067 {
4068         struct p2p_device *dev = p2p_get_device(p2p, dev_addr);
4069         if (dev == NULL || is_zero_ether_addr(dev->interface_addr))
4070                 return -1;
4071         os_memcpy(iface_addr, dev->interface_addr, ETH_ALEN);
4072         return 0;
4073 }
4074
4075
4076 int p2p_get_dev_addr(struct p2p_data *p2p, const u8 *iface_addr,
4077                            u8 *dev_addr)
4078 {
4079         struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
4080         if (dev == NULL)
4081                 return -1;
4082         os_memcpy(dev_addr, dev->info.p2p_device_addr, ETH_ALEN);
4083         return 0;
4084 }
4085
4086
4087 void p2p_set_peer_filter(struct p2p_data *p2p, const u8 *addr)
4088 {
4089         os_memcpy(p2p->peer_filter, addr, ETH_ALEN);
4090         if (is_zero_ether_addr(p2p->peer_filter))
4091                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Disable peer "
4092                         "filter");
4093         else
4094                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Enable peer "
4095                         "filter for " MACSTR, MAC2STR(p2p->peer_filter));
4096 }
4097
4098
4099 void p2p_set_cross_connect(struct p2p_data *p2p, int enabled)
4100 {
4101         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Cross connection %s",
4102                 enabled ? "enabled" : "disabled");
4103         if (p2p->cross_connect == enabled)
4104                 return;
4105         p2p->cross_connect = enabled;
4106         /* TODO: may need to tear down any action group where we are GO(?) */
4107 }
4108
4109
4110 int p2p_get_oper_freq(struct p2p_data *p2p, const u8 *iface_addr)
4111 {
4112         struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
4113         if (dev == NULL)
4114                 return -1;
4115         if (dev->oper_freq <= 0)
4116                 return -1;
4117         return dev->oper_freq;
4118 }
4119
4120
4121 void p2p_set_intra_bss_dist(struct p2p_data *p2p, int enabled)
4122 {
4123         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Intra BSS distribution %s",
4124                 enabled ? "enabled" : "disabled");
4125         p2p->cfg->p2p_intra_bss = enabled;
4126 }
4127
4128
4129 void p2p_update_channel_list(struct p2p_data *p2p, struct p2p_channels *chan)
4130 {
4131         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Update channel list");
4132         os_memcpy(&p2p->cfg->channels, chan, sizeof(struct p2p_channels));
4133 }
4134
4135
4136 int p2p_send_action(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
4137                     const u8 *src, const u8 *bssid, const u8 *buf,
4138                     size_t len, unsigned int wait_time)
4139 {
4140         if (p2p->p2p_scan_running) {
4141                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Delay Action "
4142                         "frame TX until p2p_scan completes");
4143                 if (p2p->after_scan_tx) {
4144                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Dropped "
4145                                 "previous pending Action frame TX");
4146                         os_free(p2p->after_scan_tx);
4147                 }
4148                 p2p->after_scan_tx = os_malloc(sizeof(*p2p->after_scan_tx) +
4149                                                len);
4150                 if (p2p->after_scan_tx == NULL)
4151                         return -1;
4152                 p2p->after_scan_tx->freq = freq;
4153                 os_memcpy(p2p->after_scan_tx->dst, dst, ETH_ALEN);
4154                 os_memcpy(p2p->after_scan_tx->src, src, ETH_ALEN);
4155                 os_memcpy(p2p->after_scan_tx->bssid, bssid, ETH_ALEN);
4156                 p2p->after_scan_tx->len = len;
4157                 p2p->after_scan_tx->wait_time = wait_time;
4158                 os_memcpy(p2p->after_scan_tx + 1, buf, len);
4159                 return 0;
4160         }
4161
4162         return p2p->cfg->send_action(p2p->cfg->cb_ctx, freq, dst, src, bssid,
4163                                      buf, len, wait_time);
4164 }
4165
4166
4167 void p2p_set_best_channels(struct p2p_data *p2p, int freq_24, int freq_5,
4168                            int freq_overall)
4169 {
4170         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Best channel: 2.4 GHz: %d,"
4171                 "  5 GHz: %d,  overall: %d", freq_24, freq_5, freq_overall);
4172         p2p->best_freq_24 = freq_24;
4173         p2p->best_freq_5 = freq_5;
4174         p2p->best_freq_overall = freq_overall;
4175 }
4176
4177
4178 const u8 * p2p_get_go_neg_peer(struct p2p_data *p2p)
4179 {
4180         if (p2p == NULL || p2p->go_neg_peer == NULL)
4181                 return NULL;
4182         return p2p->go_neg_peer->info.p2p_device_addr;
4183 }
4184
4185
4186 const struct p2p_peer_info *
4187 p2p_get_peer_found(struct p2p_data *p2p, const u8 *addr, int next)
4188 {
4189         struct p2p_device *dev;
4190
4191         if (addr) {
4192                 dev = p2p_get_device(p2p, addr);
4193                 if (!dev)
4194                         return NULL;
4195
4196                 if (!next) {
4197                         if (dev->flags & P2P_DEV_PROBE_REQ_ONLY)
4198                                 return NULL;
4199
4200                         return &dev->info;
4201                 } else {
4202                         do {
4203                                 dev = dl_list_first(&dev->list,
4204                                                     struct p2p_device,
4205                                                     list);
4206                                 if (&dev->list == &p2p->devices)
4207                                         return NULL;
4208                         } while (dev->flags & P2P_DEV_PROBE_REQ_ONLY);
4209                 }
4210         } else {
4211                 dev = dl_list_first(&p2p->devices, struct p2p_device, list);
4212                 if (!dev)
4213                         return NULL;
4214                 while (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
4215                         dev = dl_list_first(&dev->list,
4216                                             struct p2p_device,
4217                                             list);
4218                         if (&dev->list == &p2p->devices)
4219                                 return NULL;
4220                 }
4221         }
4222
4223         return &dev->info;
4224 }
4225
4226 #ifdef ANDROID_P2P
4227 int p2p_search_in_progress(struct p2p_data *p2p)
4228 {
4229         if (p2p == NULL)
4230                 return 0;
4231
4232         return p2p->state == P2P_SEARCH;
4233 }
4234 #endif
4235
4236 int p2p_in_progress(struct p2p_data *p2p)
4237 {
4238         if (p2p == NULL)
4239                 return 0;
4240         if (p2p->state == P2P_SEARCH || p2p->state == P2P_SEARCH_WHEN_READY ||
4241             p2p->state == P2P_CONTINUE_SEARCH_WHEN_READY)
4242                 return 2;
4243         return p2p->state != P2P_IDLE && p2p->state != P2P_PROVISIONING;
4244 }
4245
4246
4247 void p2p_set_config_timeout(struct p2p_data *p2p, u8 go_timeout,
4248                             u8 client_timeout)
4249 {
4250         if (p2p) {
4251                 p2p->go_timeout = go_timeout;
4252                 p2p->client_timeout = client_timeout;
4253         }
4254 }
4255
4256
4257 void p2p_increase_search_delay(struct p2p_data *p2p, unsigned int delay)
4258 {
4259         if (p2p && p2p->search_delay < delay)
4260                 p2p->search_delay = delay;
4261 }
4262
4263
4264 #ifdef CONFIG_WIFI_DISPLAY
4265
4266 static void p2p_update_wfd_ie_groups(struct p2p_data *p2p)
4267 {
4268         size_t g;
4269         struct p2p_group *group;
4270
4271         for (g = 0; g < p2p->num_groups; g++) {
4272                 group = p2p->groups[g];
4273                 p2p_group_update_ies(group);
4274         }
4275 }
4276
4277
4278 int p2p_set_wfd_ie_beacon(struct p2p_data *p2p, struct wpabuf *ie)
4279 {
4280         wpabuf_free(p2p->wfd_ie_beacon);
4281         p2p->wfd_ie_beacon = ie;
4282         p2p_update_wfd_ie_groups(p2p);
4283         return 0;
4284 }
4285
4286
4287 int p2p_set_wfd_ie_probe_req(struct p2p_data *p2p, struct wpabuf *ie)
4288 {
4289         wpabuf_free(p2p->wfd_ie_probe_req);
4290         p2p->wfd_ie_probe_req = ie;
4291         return 0;
4292 }
4293
4294
4295 int p2p_set_wfd_ie_probe_resp(struct p2p_data *p2p, struct wpabuf *ie)
4296 {
4297         wpabuf_free(p2p->wfd_ie_probe_resp);
4298         p2p->wfd_ie_probe_resp = ie;
4299         p2p_update_wfd_ie_groups(p2p);
4300         return 0;
4301 }
4302
4303
4304 int p2p_set_wfd_ie_assoc_req(struct p2p_data *p2p, struct wpabuf *ie)
4305 {
4306         wpabuf_free(p2p->wfd_ie_assoc_req);
4307         p2p->wfd_ie_assoc_req = ie;
4308         return 0;
4309 }
4310
4311
4312 int p2p_set_wfd_ie_invitation(struct p2p_data *p2p, struct wpabuf *ie)
4313 {
4314         wpabuf_free(p2p->wfd_ie_invitation);
4315         p2p->wfd_ie_invitation = ie;
4316         return 0;
4317 }
4318
4319
4320 int p2p_set_wfd_ie_prov_disc_req(struct p2p_data *p2p, struct wpabuf *ie)
4321 {
4322         wpabuf_free(p2p->wfd_ie_prov_disc_req);
4323         p2p->wfd_ie_prov_disc_req = ie;
4324         return 0;
4325 }
4326
4327
4328 int p2p_set_wfd_ie_prov_disc_resp(struct p2p_data *p2p, struct wpabuf *ie)
4329 {
4330         wpabuf_free(p2p->wfd_ie_prov_disc_resp);
4331         p2p->wfd_ie_prov_disc_resp = ie;
4332         return 0;
4333 }
4334
4335
4336 int p2p_set_wfd_ie_go_neg(struct p2p_data *p2p, struct wpabuf *ie)
4337 {
4338         wpabuf_free(p2p->wfd_ie_go_neg);
4339         p2p->wfd_ie_go_neg = ie;
4340         return 0;
4341 }
4342
4343
4344 int p2p_set_wfd_dev_info(struct p2p_data *p2p, const struct wpabuf *elem)
4345 {
4346         wpabuf_free(p2p->wfd_dev_info);
4347         if (elem) {
4348                 p2p->wfd_dev_info = wpabuf_dup(elem);
4349                 if (p2p->wfd_dev_info == NULL)
4350                         return -1;
4351         } else
4352                 p2p->wfd_dev_info = NULL;
4353
4354         return 0;
4355 }
4356
4357
4358 int p2p_set_wfd_assoc_bssid(struct p2p_data *p2p, const struct wpabuf *elem)
4359 {
4360         wpabuf_free(p2p->wfd_assoc_bssid);
4361         if (elem) {
4362                 p2p->wfd_assoc_bssid = wpabuf_dup(elem);
4363                 if (p2p->wfd_assoc_bssid == NULL)
4364                         return -1;
4365         } else
4366                 p2p->wfd_assoc_bssid = NULL;
4367
4368         return 0;
4369 }
4370
4371
4372 int p2p_set_wfd_coupled_sink_info(struct p2p_data *p2p,
4373                                   const struct wpabuf *elem)
4374 {
4375         wpabuf_free(p2p->wfd_coupled_sink_info);
4376         if (elem) {
4377                 p2p->wfd_coupled_sink_info = wpabuf_dup(elem);
4378                 if (p2p->wfd_coupled_sink_info == NULL)
4379                         return -1;
4380         } else
4381                 p2p->wfd_coupled_sink_info = NULL;
4382
4383         return 0;
4384 }
4385
4386 #endif /* CONFIG_WIFI_DISPLAY */