1 /*
2  * Wi-Fi Protected Setup - device attributes
3  * Copyright (c) 2008, Jouni Malinen <j@w1.fi>
4  *
5  * This software may be distributed under the terms of the BSD license.
6  * See README for more details.
7  */
8 
9 #include "includes.h"
10 
11 #include "common.h"
12 #include "wps_i.h"
13 #include "wps_dev_attr.h"
14 
15 
wps_build_manufacturer(struct wps_device_data * dev,struct wpabuf * msg)16 int wps_build_manufacturer(struct wps_device_data *dev, struct wpabuf *msg)
17 {
18           size_t len;
19           wpa_printf(MSG_DEBUG, "WPS:  * Manufacturer");
20           wpabuf_put_be16(msg, ATTR_MANUFACTURER);
21           len = dev->manufacturer ? os_strlen(dev->manufacturer) : 0;
22 #ifndef CONFIG_WPS_STRICT
23           if (len == 0) {
24                     /*
25                      * Some deployed WPS implementations fail to parse zero-length
26                      * attributes. As a workaround, send a space character if the
27                      * device attribute string is empty.
28                      */
29                     wpabuf_put_be16(msg, 1);
30                     wpabuf_put_u8(msg, ' ');
31                     return 0;
32           }
33 #endif /* CONFIG_WPS_STRICT */
34           wpabuf_put_be16(msg, len);
35           wpabuf_put_data(msg, dev->manufacturer, len);
36           return 0;
37 }
38 
39 
wps_build_model_name(struct wps_device_data * dev,struct wpabuf * msg)40 int wps_build_model_name(struct wps_device_data *dev, struct wpabuf *msg)
41 {
42           size_t len;
43           wpa_printf(MSG_DEBUG, "WPS:  * Model Name");
44           wpabuf_put_be16(msg, ATTR_MODEL_NAME);
45           len = dev->model_name ? os_strlen(dev->model_name) : 0;
46 #ifndef CONFIG_WPS_STRICT
47           if (len == 0) {
48                     /*
49                      * Some deployed WPS implementations fail to parse zero-length
50                      * attributes. As a workaround, send a space character if the
51                      * device attribute string is empty.
52                      */
53                     wpabuf_put_be16(msg, 1);
54                     wpabuf_put_u8(msg, ' ');
55                     return 0;
56           }
57 #endif /* CONFIG_WPS_STRICT */
58           wpabuf_put_be16(msg, len);
59           wpabuf_put_data(msg, dev->model_name, len);
60           return 0;
61 }
62 
63 
wps_build_model_number(struct wps_device_data * dev,struct wpabuf * msg)64 int wps_build_model_number(struct wps_device_data *dev, struct wpabuf *msg)
65 {
66           size_t len;
67           wpa_printf(MSG_DEBUG, "WPS:  * Model Number");
68           wpabuf_put_be16(msg, ATTR_MODEL_NUMBER);
69           len = dev->model_number ? os_strlen(dev->model_number) : 0;
70 #ifndef CONFIG_WPS_STRICT
71           if (len == 0) {
72                     /*
73                      * Some deployed WPS implementations fail to parse zero-length
74                      * attributes. As a workaround, send a space character if the
75                      * device attribute string is empty.
76                      */
77                     wpabuf_put_be16(msg, 1);
78                     wpabuf_put_u8(msg, ' ');
79                     return 0;
80           }
81 #endif /* CONFIG_WPS_STRICT */
82           wpabuf_put_be16(msg, len);
83           wpabuf_put_data(msg, dev->model_number, len);
84           return 0;
85 }
86 
87 
wps_build_serial_number(struct wps_device_data * dev,struct wpabuf * msg)88 int wps_build_serial_number(struct wps_device_data *dev, struct wpabuf *msg)
89 {
90           size_t len;
91           wpa_printf(MSG_DEBUG, "WPS:  * Serial Number");
92           wpabuf_put_be16(msg, ATTR_SERIAL_NUMBER);
93           len = dev->serial_number ? os_strlen(dev->serial_number) : 0;
94 #ifndef CONFIG_WPS_STRICT
95           if (len == 0) {
96                     /*
97                      * Some deployed WPS implementations fail to parse zero-length
98                      * attributes. As a workaround, send a space character if the
99                      * device attribute string is empty.
100                      */
101                     wpabuf_put_be16(msg, 1);
102                     wpabuf_put_u8(msg, ' ');
103                     return 0;
104           }
105 #endif /* CONFIG_WPS_STRICT */
106           wpabuf_put_be16(msg, len);
107           wpabuf_put_data(msg, dev->serial_number, len);
108           return 0;
109 }
110 
111 
wps_build_primary_dev_type(struct wps_device_data * dev,struct wpabuf * msg)112 int wps_build_primary_dev_type(struct wps_device_data *dev, struct wpabuf *msg)
113 {
114           wpa_printf(MSG_DEBUG, "WPS:  * Primary Device Type");
115           wpabuf_put_be16(msg, ATTR_PRIMARY_DEV_TYPE);
116           wpabuf_put_be16(msg, WPS_DEV_TYPE_LEN);
117           wpabuf_put_data(msg, dev->pri_dev_type, WPS_DEV_TYPE_LEN);
118           return 0;
119 }
120 
121 
wps_build_secondary_dev_type(struct wps_device_data * dev,struct wpabuf * msg)122 int wps_build_secondary_dev_type(struct wps_device_data *dev,
123                                           struct wpabuf *msg)
124 {
125           if (!dev->num_sec_dev_types)
126                     return 0;
127 
128           wpa_printf(MSG_DEBUG, "WPS:  * Secondary Device Type");
129           wpabuf_put_be16(msg, ATTR_SECONDARY_DEV_TYPE_LIST);
130           wpabuf_put_be16(msg, WPS_DEV_TYPE_LEN * dev->num_sec_dev_types);
131           wpabuf_put_data(msg, dev->sec_dev_type,
132                               WPS_DEV_TYPE_LEN * dev->num_sec_dev_types);
133 
134           return 0;
135 }
136 
137 
wps_build_req_dev_type(struct wps_device_data * dev,struct wpabuf * msg,unsigned int num_req_dev_types,const u8 * req_dev_types)138 int wps_build_req_dev_type(struct wps_device_data *dev, struct wpabuf *msg,
139                                  unsigned int num_req_dev_types,
140                                  const u8 *req_dev_types)
141 {
142           unsigned int i;
143 
144           for (i = 0; i < num_req_dev_types; i++) {
145                     wpa_hexdump(MSG_DEBUG, "WPS: * Requested Device Type",
146                                   req_dev_types + i * WPS_DEV_TYPE_LEN,
147                                   WPS_DEV_TYPE_LEN);
148                     wpabuf_put_be16(msg, ATTR_REQUESTED_DEV_TYPE);
149                     wpabuf_put_be16(msg, WPS_DEV_TYPE_LEN);
150                     wpabuf_put_data(msg, req_dev_types + i * WPS_DEV_TYPE_LEN,
151                                         WPS_DEV_TYPE_LEN);
152           }
153 
154           return 0;
155 }
156 
157 
wps_build_dev_name(struct wps_device_data * dev,struct wpabuf * msg)158 int wps_build_dev_name(struct wps_device_data *dev, struct wpabuf *msg)
159 {
160           size_t len;
161           wpa_printf(MSG_DEBUG, "WPS:  * Device Name");
162           wpabuf_put_be16(msg, ATTR_DEV_NAME);
163           len = dev->device_name ? os_strlen(dev->device_name) : 0;
164 #ifndef CONFIG_WPS_STRICT
165           if (len == 0) {
166                     /*
167                      * Some deployed WPS implementations fail to parse zero-length
168                      * attributes. As a workaround, send a space character if the
169                      * device attribute string is empty.
170                      */
171                     wpabuf_put_be16(msg, 1);
172                     wpabuf_put_u8(msg, ' ');
173                     return 0;
174           }
175 #endif /* CONFIG_WPS_STRICT */
176           wpabuf_put_be16(msg, len);
177           wpabuf_put_data(msg, dev->device_name, len);
178           return 0;
179 }
180 
181 
wps_build_device_attrs(struct wps_device_data * dev,struct wpabuf * msg)182 int wps_build_device_attrs(struct wps_device_data *dev, struct wpabuf *msg)
183 {
184           if (wps_build_manufacturer(dev, msg) ||
185               wps_build_model_name(dev, msg) ||
186               wps_build_model_number(dev, msg) ||
187               wps_build_serial_number(dev, msg) ||
188               wps_build_primary_dev_type(dev, msg) ||
189               wps_build_dev_name(dev, msg))
190                     return -1;
191           return 0;
192 }
193 
194 
wps_build_os_version(struct wps_device_data * dev,struct wpabuf * msg)195 int wps_build_os_version(struct wps_device_data *dev, struct wpabuf *msg)
196 {
197           wpa_printf(MSG_DEBUG, "WPS:  * OS Version");
198           wpabuf_put_be16(msg, ATTR_OS_VERSION);
199           wpabuf_put_be16(msg, 4);
200           wpabuf_put_be32(msg, 0x80000000 | dev->os_version);
201           return 0;
202 }
203 
204 
wps_build_vendor_ext_m1(struct wps_device_data * dev,struct wpabuf * msg)205 int wps_build_vendor_ext_m1(struct wps_device_data *dev, struct wpabuf *msg)
206 {
207           if (dev->vendor_ext_m1 != NULL) {
208                     wpa_hexdump(MSG_DEBUG, "WPS:  * Vendor Extension M1",
209                                   wpabuf_head_u8(dev->vendor_ext_m1),
210                                   wpabuf_len(dev->vendor_ext_m1));
211                     wpabuf_put_be16(msg, ATTR_VENDOR_EXT);
212                     wpabuf_put_be16(msg, wpabuf_len(dev->vendor_ext_m1));
213                     wpabuf_put_buf(msg, dev->vendor_ext_m1);
214           }
215           return 0;
216 }
217 
218 
wps_build_rf_bands(struct wps_device_data * dev,struct wpabuf * msg,u8 rf_band)219 int wps_build_rf_bands(struct wps_device_data *dev, struct wpabuf *msg,
220                            u8 rf_band)
221 {
222           return wps_build_rf_bands_attr(msg, rf_band ? rf_band : dev->rf_bands);
223 }
224 
225 
wps_build_vendor_ext(struct wps_device_data * dev,struct wpabuf * msg)226 int wps_build_vendor_ext(struct wps_device_data *dev, struct wpabuf *msg)
227 {
228           int i;
229 
230           for (i = 0; i < MAX_WPS_VENDOR_EXTENSIONS; i++) {
231                     if (dev->vendor_ext[i] == NULL)
232                               continue;
233                     wpa_hexdump(MSG_DEBUG, "WPS:  * Vendor Extension",
234                                   wpabuf_head_u8(dev->vendor_ext[i]),
235                                   wpabuf_len(dev->vendor_ext[i]));
236                     wpabuf_put_be16(msg, ATTR_VENDOR_EXT);
237                     wpabuf_put_be16(msg, wpabuf_len(dev->vendor_ext[i]));
238                     wpabuf_put_buf(msg, dev->vendor_ext[i]);
239           }
240 
241           return 0;
242 }
243 
244 
wps_build_application_ext(struct wps_device_data * dev,struct wpabuf * msg)245 int wps_build_application_ext(struct wps_device_data *dev, struct wpabuf *msg)
246 {
247           if (!dev->application_ext)
248                     return 0;
249 
250           wpa_hexdump_buf(MSG_DEBUG, "WPS:  * Application Extension",
251                               dev->application_ext);
252           wpabuf_put_be16(msg, ATTR_APPLICATION_EXT);
253           wpabuf_put_be16(msg, wpabuf_len(dev->application_ext));
254           wpabuf_put_buf(msg, dev->application_ext);
255 
256           return 0;
257 }
258 
259 
wps_process_manufacturer(struct wps_device_data * dev,const u8 * str,size_t str_len)260 static int wps_process_manufacturer(struct wps_device_data *dev, const u8 *str,
261                                             size_t str_len)
262 {
263           if (str == NULL) {
264                     wpa_printf(MSG_DEBUG, "WPS: No Manufacturer received");
265                     return -1;
266           }
267 
268           wpa_hexdump_ascii(MSG_DEBUG, "WPS: Manufacturer", str, str_len);
269 
270           os_free(dev->manufacturer);
271           dev->manufacturer = dup_binstr(str, str_len);
272           if (dev->manufacturer == NULL)
273                     return -1;
274 
275           return 0;
276 }
277 
278 
wps_process_model_name(struct wps_device_data * dev,const u8 * str,size_t str_len)279 static int wps_process_model_name(struct wps_device_data *dev, const u8 *str,
280                                           size_t str_len)
281 {
282           if (str == NULL) {
283                     wpa_printf(MSG_DEBUG, "WPS: No Model Name received");
284                     return -1;
285           }
286 
287           wpa_hexdump_ascii(MSG_DEBUG, "WPS: Model Name", str, str_len);
288 
289           os_free(dev->model_name);
290           dev->model_name = dup_binstr(str, str_len);
291           if (dev->model_name == NULL)
292                     return -1;
293 
294           return 0;
295 }
296 
297 
wps_process_model_number(struct wps_device_data * dev,const u8 * str,size_t str_len)298 static int wps_process_model_number(struct wps_device_data *dev, const u8 *str,
299                                             size_t str_len)
300 {
301           if (str == NULL) {
302                     wpa_printf(MSG_DEBUG, "WPS: No Model Number received");
303                     return -1;
304           }
305 
306           wpa_hexdump_ascii(MSG_DEBUG, "WPS: Model Number", str, str_len);
307 
308           os_free(dev->model_number);
309           dev->model_number = dup_binstr(str, str_len);
310           if (dev->model_number == NULL)
311                     return -1;
312 
313           return 0;
314 }
315 
316 
wps_process_serial_number(struct wps_device_data * dev,const u8 * str,size_t str_len)317 static int wps_process_serial_number(struct wps_device_data *dev,
318                                              const u8 *str, size_t str_len)
319 {
320           if (str == NULL) {
321                     wpa_printf(MSG_DEBUG, "WPS: No Serial Number received");
322                     return -1;
323           }
324 
325           wpa_hexdump_ascii(MSG_DEBUG, "WPS: Serial Number", str, str_len);
326 
327           os_free(dev->serial_number);
328           dev->serial_number = dup_binstr(str, str_len);
329           if (dev->serial_number == NULL)
330                     return -1;
331 
332           return 0;
333 }
334 
335 
wps_process_dev_name(struct wps_device_data * dev,const u8 * str,size_t str_len)336 static int wps_process_dev_name(struct wps_device_data *dev, const u8 *str,
337                                         size_t str_len)
338 {
339           if (str == NULL) {
340                     wpa_printf(MSG_DEBUG, "WPS: No Device Name received");
341                     return -1;
342           }
343 
344           wpa_hexdump_ascii(MSG_DEBUG, "WPS: Device Name", str, str_len);
345 
346           os_free(dev->device_name);
347           dev->device_name = dup_binstr(str, str_len);
348           if (dev->device_name == NULL)
349                     return -1;
350 
351           return 0;
352 }
353 
354 
wps_process_primary_dev_type(struct wps_device_data * dev,const u8 * dev_type)355 static int wps_process_primary_dev_type(struct wps_device_data *dev,
356                                                   const u8 *dev_type)
357 {
358 #ifndef CONFIG_NO_STDOUT_DEBUG
359           char devtype[WPS_DEV_TYPE_BUFSIZE];
360 #endif /* CONFIG_NO_STDOUT_DEBUG */
361 
362           if (dev_type == NULL) {
363                     wpa_printf(MSG_DEBUG, "WPS: No Primary Device Type received");
364                     return -1;
365           }
366 
367           os_memcpy(dev->pri_dev_type, dev_type, WPS_DEV_TYPE_LEN);
368           wpa_printf(MSG_DEBUG, "WPS: Primary Device Type: %s",
369                        wps_dev_type_bin2str(dev->pri_dev_type, devtype,
370                                                   sizeof(devtype)));
371 
372           return 0;
373 }
374 
375 
wps_process_device_attrs(struct wps_device_data * dev,struct wps_parse_attr * attr)376 int wps_process_device_attrs(struct wps_device_data *dev,
377                                    struct wps_parse_attr *attr)
378 {
379           if (wps_process_manufacturer(dev, attr->manufacturer,
380                                              attr->manufacturer_len) ||
381               wps_process_model_name(dev, attr->model_name,
382                                            attr->model_name_len) ||
383               wps_process_model_number(dev, attr->model_number,
384                                              attr->model_number_len) ||
385               wps_process_serial_number(dev, attr->serial_number,
386                                               attr->serial_number_len) ||
387               wps_process_primary_dev_type(dev, attr->primary_dev_type) ||
388               wps_process_dev_name(dev, attr->dev_name, attr->dev_name_len))
389                     return -1;
390           return 0;
391 }
392 
393 
wps_process_os_version(struct wps_device_data * dev,const u8 * ver)394 int wps_process_os_version(struct wps_device_data *dev, const u8 *ver)
395 {
396           if (ver == NULL) {
397                     wpa_printf(MSG_DEBUG, "WPS: No OS Version received");
398                     return -1;
399           }
400 
401           dev->os_version = WPA_GET_BE32(ver);
402           wpa_printf(MSG_DEBUG, "WPS: OS Version %08x", dev->os_version);
403 
404           return 0;
405 }
406 
407 
wps_process_vendor_ext_m1(struct wps_device_data * dev,const u8 ext)408 void wps_process_vendor_ext_m1(struct wps_device_data *dev, const u8 ext)
409 {
410           dev->multi_ap_ext = ext;
411           wpa_printf(MSG_DEBUG, "WPS: Multi-AP extension value %02x",
412                        dev->multi_ap_ext);
413 }
414 
415 
wps_process_rf_bands(struct wps_device_data * dev,const u8 * bands)416 int wps_process_rf_bands(struct wps_device_data *dev, const u8 *bands)
417 {
418           if (bands == NULL) {
419                     wpa_printf(MSG_DEBUG, "WPS: No RF Bands received");
420                     return -1;
421           }
422 
423           dev->rf_bands = *bands;
424           wpa_printf(MSG_DEBUG, "WPS: Enrollee RF Bands 0x%x", dev->rf_bands);
425 
426           return 0;
427 }
428 
429 
wps_device_data_free(struct wps_device_data * dev)430 void wps_device_data_free(struct wps_device_data *dev)
431 {
432           os_free(dev->device_name);
433           dev->device_name = NULL;
434           os_free(dev->manufacturer);
435           dev->manufacturer = NULL;
436           os_free(dev->model_name);
437           dev->model_name = NULL;
438           os_free(dev->model_number);
439           dev->model_number = NULL;
440           os_free(dev->serial_number);
441           dev->serial_number = NULL;
442           wpabuf_free(dev->application_ext);
443           dev->application_ext = NULL;
444 }
445