430 lines
9.5 KiB
C
430 lines
9.5 KiB
C
|
/*
|
||
|
|
* Wi-Fi Protected Setup - attribute parsing
|
||
|
|
* Copyright (c) 2008, Jouni Malinen <j@w1.fi>
|
||
|
|
*
|
||
|
|
* This program is free software; you can redistribute it and/or modify
|
||
|
|
* it under the terms of the GNU General Public License version 2 as
|
||
|
|
* published by the Free Software Foundation.
|
||
|
|
*
|
||
|
|
* Alternatively, this software may be distributed under the terms of BSD
|
||
|
|
* license.
|
||
|
|
*
|
||
|
|
* See README and COPYING for more details.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include "includes.h"
|
||
|
|
|
||
|
|
#include "common.h"
|
||
|
|
#include "wps_i.h"
|
||
|
|
|
||
|
|
|
||
|
|
static int wps_set_attr(struct wps_parse_attr *attr, u16 type,
|
||
|
|
const u8 *pos, u16 len)
|
||
|
|
{
|
||
|
|
switch (type) {
|
||
|
|
case ATTR_VERSION:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Version length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->version = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_MSG_TYPE:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Message Type "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->msg_type = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_ENROLLEE_NONCE:
|
||
|
|
if (len != WPS_NONCE_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Enrollee Nonce "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->enrollee_nonce = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_REGISTRAR_NONCE:
|
||
|
|
if (len != WPS_NONCE_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Registrar Nonce "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->registrar_nonce = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_UUID_E:
|
||
|
|
if (len != WPS_UUID_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid UUID-E length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->uuid_e = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_UUID_R:
|
||
|
|
if (len != WPS_UUID_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid UUID-R length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->uuid_r = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_AUTH_TYPE_FLAGS:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Authentication "
|
||
|
|
"Type Flags length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->auth_type_flags = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_ENCR_TYPE_FLAGS:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Encryption Type "
|
||
|
|
"Flags length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->encr_type_flags = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_CONN_TYPE_FLAGS:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Connection Type "
|
||
|
|
"Flags length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->conn_type_flags = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_CONFIG_METHODS:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Config Methods "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->config_methods = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_SELECTED_REGISTRAR_CONFIG_METHODS:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Selected "
|
||
|
|
"Registrar Config Methods length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->sel_reg_config_methods = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_PRIMARY_DEV_TYPE:
|
||
|
|
if (len != sizeof(struct wps_dev_type)) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Primary Device "
|
||
|
|
"Type length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->primary_dev_type = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_RF_BANDS:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid RF Bands length "
|
||
|
|
"%u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->rf_bands = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_ASSOC_STATE:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Association State "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->assoc_state = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_CONFIG_ERROR:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Configuration "
|
||
|
|
"Error length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->config_error = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_DEV_PASSWORD_ID:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Device Password "
|
||
|
|
"ID length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->dev_password_id = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_OS_VERSION:
|
||
|
|
if (len != 4) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid OS Version length "
|
||
|
|
"%u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->os_version = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_WPS_STATE:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Wi-Fi Protected "
|
||
|
|
"Setup State length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->wps_state = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_AUTHENTICATOR:
|
||
|
|
if (len != WPS_AUTHENTICATOR_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Authenticator "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->authenticator = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_R_HASH1:
|
||
|
|
if (len != WPS_HASH_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid R-Hash1 length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->r_hash1 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_R_HASH2:
|
||
|
|
if (len != WPS_HASH_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid R-Hash2 length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->r_hash2 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_E_HASH1:
|
||
|
|
if (len != WPS_HASH_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid E-Hash1 length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->e_hash1 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_E_HASH2:
|
||
|
|
if (len != WPS_HASH_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid E-Hash2 length %u",
|
||
|
|
len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->e_hash2 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_R_SNONCE1:
|
||
|
|
if (len != WPS_SECRET_NONCE_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid R-SNonce1 length "
|
||
|
|
"%u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->r_snonce1 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_R_SNONCE2:
|
||
|
|
if (len != WPS_SECRET_NONCE_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid R-SNonce2 length "
|
||
|
|
"%u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->r_snonce2 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_E_SNONCE1:
|
||
|
|
if (len != WPS_SECRET_NONCE_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid E-SNonce1 length "
|
||
|
|
"%u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->e_snonce1 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_E_SNONCE2:
|
||
|
|
if (len != WPS_SECRET_NONCE_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid E-SNonce2 length "
|
||
|
|
"%u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->e_snonce2 = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_KEY_WRAP_AUTH:
|
||
|
|
if (len != WPS_KWA_LEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Key Wrap "
|
||
|
|
"Authenticator length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->key_wrap_auth = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_AUTH_TYPE:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Authentication "
|
||
|
|
"Type length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->auth_type = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_ENCR_TYPE:
|
||
|
|
if (len != 2) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Encryption "
|
||
|
|
"Type length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->encr_type = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_NETWORK_INDEX:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Network Index "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->network_idx = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_NETWORK_KEY_INDEX:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Network Key Index "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->network_key_idx = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_MAC_ADDR:
|
||
|
|
if (len != ETH_ALEN) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid MAC Address "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->mac_addr = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_KEY_PROVIDED_AUTO:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Key Provided "
|
||
|
|
"Automatically length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->key_prov_auto = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_802_1X_ENABLED:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid 802.1X Enabled "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->dot1x_enabled = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_SELECTED_REGISTRAR:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Selected Registrar"
|
||
|
|
" length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->selected_registrar = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_REQUEST_TYPE:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Request Type "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->request_type = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_RESPONSE_TYPE:
|
||
|
|
if (len != 1) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid Response Type "
|
||
|
|
"length %u", len);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
attr->request_type = pos;
|
||
|
|
break;
|
||
|
|
case ATTR_MANUFACTURER:
|
||
|
|
attr->manufacturer = pos;
|
||
|
|
attr->manufacturer_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_MODEL_NAME:
|
||
|
|
attr->model_name = pos;
|
||
|
|
attr->model_name_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_MODEL_NUMBER:
|
||
|
|
attr->model_number = pos;
|
||
|
|
attr->model_number_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_SERIAL_NUMBER:
|
||
|
|
attr->serial_number = pos;
|
||
|
|
attr->serial_number_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_DEV_NAME:
|
||
|
|
attr->dev_name = pos;
|
||
|
|
attr->dev_name_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_PUBLIC_KEY:
|
||
|
|
attr->public_key = pos;
|
||
|
|
attr->public_key_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_ENCR_SETTINGS:
|
||
|
|
attr->encr_settings = pos;
|
||
|
|
attr->encr_settings_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_CRED:
|
||
|
|
if (attr->num_cred >= MAX_CRED_COUNT) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Skipped Credential "
|
||
|
|
"attribute (max %d credentials)",
|
||
|
|
MAX_CRED_COUNT);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
attr->cred[attr->num_cred] = pos;
|
||
|
|
attr->cred_len[attr->num_cred] = len;
|
||
|
|
attr->num_cred++;
|
||
|
|
break;
|
||
|
|
case ATTR_SSID:
|
||
|
|
attr->ssid = pos;
|
||
|
|
attr->ssid_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_NETWORK_KEY:
|
||
|
|
attr->network_key = pos;
|
||
|
|
attr->network_key_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_EAP_TYPE:
|
||
|
|
attr->eap_type = pos;
|
||
|
|
attr->eap_type_len = len;
|
||
|
|
break;
|
||
|
|
case ATTR_EAP_IDENTITY:
|
||
|
|
attr->eap_identity = pos;
|
||
|
|
attr->eap_identity_len = len;
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Unsupported attribute type 0x%x "
|
||
|
|
"len=%u", type, len);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
int wps_parse_msg(const struct wpabuf *msg, struct wps_parse_attr *attr)
|
||
|
|
{
|
||
|
|
const u8 *pos, *end;
|
||
|
|
u16 type, len;
|
||
|
|
|
||
|
|
os_memset(attr, 0, sizeof(*attr));
|
||
|
|
pos = wpabuf_head(msg);
|
||
|
|
end = pos + wpabuf_len(msg);
|
||
|
|
|
||
|
|
while (pos < end) {
|
||
|
|
if (end - pos < 4) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Invalid message - "
|
||
|
|
"%lu bytes remaining",
|
||
|
|
(unsigned long) (end - pos));
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
|
||
|
|
type = WPA_GET_BE16(pos);
|
||
|
|
pos += 2;
|
||
|
|
len = WPA_GET_BE16(pos);
|
||
|
|
pos += 2;
|
||
|
|
wpa_printf(MSG_MSGDUMP, "WPS: attr type=0x%x len=%u",
|
||
|
|
type, len);
|
||
|
|
if (len > end - pos) {
|
||
|
|
wpa_printf(MSG_DEBUG, "WPS: Attribute overflow");
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (wps_set_attr(attr, type, pos, len) < 0)
|
||
|
|
return -1;
|
||
|
|
|
||
|
|
pos += len;
|
||
|
|
}
|
||
|
|
|
||
|
|
return 0;
|
||
|
|
}
|