# GAS tests # Copyright (c) 2013, Qualcomm Atheros, Inc. # Copyright (c) 2013-2015, Jouni Malinen # # This software may be distributed under the terms of the BSD license. # See README for more details. from remotehost import remote_compatible import time import binascii import logging logger = logging.getLogger() import os import re import struct import hostapd from wpasupplicant import WpaSupplicant from tshark import run_tshark from utils import alloc_fail, wait_fail_trigger, skip_with_fips from hwsim import HWSimRadio def hs20_ap_params(): params = hostapd.wpa2_params(ssid="test-gas") params['wpa_key_mgmt'] = "WPA-EAP" params['ieee80211w'] = "1" params['ieee8021x'] = "1" params['auth_server_addr'] = "127.0.0.1" params['auth_server_port'] = "1812" params['auth_server_shared_secret'] = "radius" params['interworking'] = "1" params['access_network_type'] = "14" params['internet'] = "1" params['asra'] = "0" params['esr'] = "0" params['uesa'] = "0" params['venue_group'] = "7" params['venue_type'] = "1" params['venue_name'] = [ "eng:Example venue", "fin:Esimerkkipaikka" ] params['roaming_consortium'] = [ "112233", "1020304050", "010203040506", "fedcba" ] params['domain_name'] = "example.com,another.example.com" params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]", "0,another.example.com" ] params['anqp_3gpp_cell_net'] = "244,91" params['network_auth_type'] = "02http://www.example.com/redirect/me/here/" params['ipaddr_type_availability'] = "14" params['hs20'] = "1" params['hs20_oper_friendly_name'] = [ "eng:Example operator", "fin:Esimerkkioperaattori" ] params['hs20_wan_metrics'] = "01:8000:1000:80:240:3000" params['hs20_conn_capab'] = [ "1:0:2", "6:22:1", "17:5060:0" ] params['hs20_operating_class'] = "5173" return params def start_ap(ap): params = hs20_ap_params() params['hessid'] = ap['bssid'] return hostapd.add_ap(ap, params) def get_gas_response(dev, bssid, info, allow_fetch_failure=False, extra_test=False): exp = r'<.>(GAS-RESPONSE-INFO) addr=([0-9a-f:]*) dialog_token=([0-9]*) status_code=([0-9]*) resp_len=([\-0-9]*)' res = re.split(exp, info) if len(res) < 6: raise Exception("Could not parse GAS-RESPONSE-INFO") if res[2] != bssid: raise Exception("Unexpected BSSID in response") token = res[3] status = res[4] if status != "0": raise Exception("GAS query failed") resp_len = res[5] if resp_len == "-1": raise Exception("GAS query reported invalid response length") if int(resp_len) > 2000: raise Exception("Unexpected long GAS response") if extra_test: if "FAIL" not in dev.request("GAS_RESPONSE_GET " + bssid + " 123456"): raise Exception("Invalid dialog token accepted") if "FAIL-Invalid range" not in dev.request("GAS_RESPONSE_GET " + bssid + " " + token + " 10000,10001"): raise Exception("Invalid range accepted") if "FAIL-Invalid range" not in dev.request("GAS_RESPONSE_GET " + bssid + " " + token + " 0,10000"): raise Exception("Invalid range accepted") if "FAIL" not in dev.request("GAS_RESPONSE_GET " + bssid + " " + token + " 0"): raise Exception("Invalid GAS_RESPONSE_GET accepted") res1_2 = dev.request("GAS_RESPONSE_GET " + bssid + " " + token + " 1,2") res5_3 = dev.request("GAS_RESPONSE_GET " + bssid + " " + token + " 5,3") resp = dev.request("GAS_RESPONSE_GET " + bssid + " " + token) if "FAIL" in resp: if allow_fetch_failure: logger.debug("GAS response was not available anymore") return raise Exception("Could not fetch GAS response") if len(resp) != int(resp_len) * 2: raise Exception("Unexpected GAS response length") logger.debug("GAS response: " + resp) if extra_test: if resp[2:6] != res1_2: raise Exception("Unexpected response substring res1_2: " + res1_2) if resp[10:16] != res5_3: raise Exception("Unexpected response substring res5_3: " + res5_3) def test_gas_generic(dev, apdev): """Generic GAS query""" bssid = apdev[0]['bssid'] params = hs20_ap_params() params['hessid'] = bssid hostapd.add_ap(apdev[0], params) cmds = [ "foo", "00:11:22:33:44:55", "00:11:22:33:44:55 ", "00:11:22:33:44:55 ", "00:11:22:33:44:55 1", "00:11:22:33:44:55 1 1234", "00:11:22:33:44:55 qq", "00:11:22:33:44:55 qq 1234", "00:11:22:33:44:55 00 1", "00:11:22:33:44:55 00 123", "00:11:22:33:44:55 00 ", "00:11:22:33:44:55 00 qq" ] for cmd in cmds: if "FAIL" not in dev[0].request("GAS_REQUEST " + cmd): raise Exception("Invalid GAS_REQUEST accepted: " + cmd) dev[0].scan_for_bss(bssid, freq="2412", force_scan=True) req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000101") if "FAIL" in req: raise Exception("GAS query request rejected") ev = dev[0].wait_event(["GAS-RESPONSE-INFO"], timeout=10) if ev is None: raise Exception("GAS query timed out") get_gas_response(dev[0], bssid, ev, extra_test=True) if "FAIL" not in dev[0].request("GAS_RESPONSE_GET ff"): raise Exception("Invalid GAS_RESPONSE_GET accepted") def test_gas_concurrent_scan(dev, apdev): """Generic GAS queries with concurrent scan operation""" bssid = apdev[0]['bssid'] params = hs20_ap_params() params['hessid'] = bssid hostapd.add_ap(apdev[0], params) # get BSS entry available to allow GAS query dev[0].scan_for_bss(bssid, freq="2412", force_scan=True) logger.info("Request concurrent operations") req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000101") if "FAIL" in req: raise Exception("GAS query request rejected") req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000801") if "FAIL" in req: raise Exception("GAS query request rejected") dev[0].scan(no_wait=True) req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000201") if "FAIL" in req: raise Exception("GAS query request rejected") req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000501") if "FAIL" in req: raise Exception("GAS query request rejected") responses = 0 for i in range(0, 5): ev = dev[0].wait_event(["GAS-RESPONSE-INFO", "CTRL-EVENT-SCAN-RESULTS"], timeout=10) if ev is None: raise Exception("Operation timed out") if "GAS-RESPONSE-INFO" in ev: responses = responses + 1 get_gas_response(dev[0], bssid, ev, allow_fetch_failure=True) if responses != 4: raise Exception("Unexpected number of GAS responses") def test_gas_concurrent_connect(dev, apdev): """Generic GAS queries with concurrent connection operation""" skip_with_fips(dev[0]) bssid = apdev[0]['bssid'] params = hs20_ap_params() params['hessid'] = bssid hostapd.add_ap(apdev[0], params) dev[0].scan_for_bss(bssid, freq="2412", force_scan=True) logger.debug("Start concurrent connect and GAS request") dev[0].connect("test-gas", key_mgmt="WPA-EAP", eap="TTLS", identity="DOMAIN\mschapv2 user", anonymous_identity="ttls", password="password", phase2="auth=MSCHAPV2", ca_cert="auth_serv/ca.pem", wait_connect=False, scan_freq="2412") req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000101") if "FAIL" in req: raise Exception("GAS query request rejected") ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED", "GAS-RESPONSE-INFO"], timeout=20) if ev is None: raise Exception("Operation timed out") if "CTRL-EVENT-CONNECTED" not in ev: raise Exception("Unexpected operation order") ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED", "GAS-RESPONSE-INFO"], timeout=20) if ev is None: raise Exception("Operation timed out") if "GAS-RESPONSE-INFO" not in ev: raise Exception("Unexpected operation order") get_gas_response(dev[0], bssid, ev) dev[0].request("DISCONNECT") dev[0].wait_disconnected(timeout=5) logger.debug("Wait six seconds for expiration of connect-without-scan") time.sleep(6) dev[0].dump_monitor() logger.debug("Start concurrent GAS request and connect") req = dev[0].request("GAS_REQUEST " + bssid + " 00 000102000101") if "FAIL" in req: raise Exception("GAS query request rejected") dev[0].request("RECONNECT") ev = dev[0].wait_event(["GAS-RESPONSE-INFO"], timeout=10) if ev is None: raise Exception("Operation timed out") get_gas_response(dev[0], bssid, ev) ev = dev[0].wait_event(["CTRL-EVENT-SCAN-RESULTS"], timeout=20) if ev is None: raise Exception("No new scan results reported") ev = dev[0].wait_connected(timeout=20, error="Operation tiemd out") if "CTRL-EVENT-CONNECTED" not in ev: raise Exception("Unexpected operation order") def gas_fragment_and_comeback(dev, apdev, frag_limit=0, comeback_delay=0): hapd = start_ap(apdev) if frag_limit: hapd.set("gas_frag_limit", str(frag_limit)) if comeback_delay: hapd.set("gas_comeback_delay", str(comeback_delay)) dev.scan_for_bss(apdev['bssid'], freq="2412", force_scan=True) dev.request("FETCH_ANQP") ev = dev.wait_event(["GAS-QUERY-DONE"], timeout=5) if ev is None: raise Exception("No GAS-QUERY-DONE event") if "result=SUCCESS" not in ev: raise Exception("Unexpected GAS result: " + ev) for i in range(0, 13): ev = dev.wait_event(["RX-ANQP", "RX-HS20-ANQP"], timeout=5) if ev is None: raise Exception("Operation timed out") ev = dev.wait_event(["ANQP-QUERY-DONE"], timeout=1) if ev is None: raise Exception("No ANQP-QUERY-DONE event") if "result=SUCCESS" not in ev: raise Exception("Unexpected ANQP result: " + ev) def test_gas_fragment(dev, apdev): """GAS fragmentation""" gas_fragment_and_comeback(dev[0], apdev[0], frag_limit=50) def test_gas_fragment_mcc(dev, apdev): """GAS fragmentation with mac80211_hwsim MCC enabled""" with HWSimRadio(n_channels=2) as (radio, iface): wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5') wpas.interface_add(iface) gas_fragment_and_comeback(wpas, apdev[0], frag_limit=50) def test_gas_fragment_with_comeback_delay(dev, apdev): """GAS fragmentation and comeback delay""" gas_fragment_and_comeback(dev[0], apdev[0], frag_limit=50, comeback_delay=500) def test_gas_fragment_with_comeback_delay_mcc(dev, apdev): """GAS fragmentation and comeback delay with mac80211_hwsim MCC enabled""" with HWSimRadio(n_channels=2) as (radio, iface): wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5') wpas.interface_add(iface) gas_fragment_and_comeback(wpas, apdev[0], frag_limit=50, comeback_delay=500) def test_gas_comeback_delay(dev, apdev): """GAS comeback delay""" hapd = start_ap(apdev[0]) hapd.set("gas_comeback_delay", "500") dev[0].scan_for_bss(apdev[0]['bssid'], freq="2412", force_scan=True) dev[0].request("FETCH_ANQP") if "FAIL-BUSY" not in dev[0].request("SCAN"): raise Exception("SCAN accepted during FETCH_ANQP") for i in range(0, 6): ev = dev[0].wait_event(["RX-ANQP"], timeout=5) if ev is None: raise Exception("Operation timed out") @remote_compatible def test_gas_stop_fetch_anqp(dev, apdev): """Stop FETCH_ANQP operation""" hapd = start_ap(apdev[0]) dev[0].scan_for_bss(apdev[0]['bssid'], freq="2412", force_scan=True) hapd.set("ext_mgmt_frame_handling", "1") dev[0].request("FETCH_ANQP") dev[0].request("STOP_FETCH_ANQP") hapd.set("ext_mgmt_frame_handling", "0") ev = dev[0].wait_event(["RX-ANQP", "GAS-QUERY-DONE"], timeout=10) if ev is None: raise Exception("GAS-QUERY-DONE timed out") if "RX-ANQP" in ev: raise Exception("Unexpected ANQP response received") def test_gas_anqp_get(dev, apdev): """GAS/ANQP query for both IEEE 802.11 and Hotspot 2.0 elements""" hapd = start_ap(apdev[0]) bssid = apdev[0]['bssid'] dev[0].scan_for_bss(bssid, freq="2412", force_scan=True) if "OK" not in dev[0].request("ANQP_GET " + bssid + " 258,268,hs20:3,hs20:4"): raise Exception("ANQP_GET command failed") ev = dev[0].wait_event(["GAS-QUERY-START"], timeout=5) if ev is None: raise Exception("GAS query start timed out") ev = dev[0].wait_event(["GAS-QUERY-DONE"], timeout=10) if ev is None: raise Exception("GAS query timed out") ev = dev[0].wait_event(["RX-ANQP"], timeout=1) if ev is None or "Venue Name" not in ev: raise Exception("Did not receive Venue Name") ev = dev[0].wait_event(["RX-ANQP"], timeout=1) if ev is None or "Domain Name list" not in ev: raise Exception("Did not receive Domain Name list") ev = dev[0].wait_event(["RX-HS20-ANQP"], timeout=1) if ev is None or "Operator Friendly Name" not in ev: raise Exception("Did not receive Operator Friendly Name") ev = dev[0].wait_event(["RX-HS20-ANQP"], timeout=1) if ev is None or "WAN Metrics" not in ev: raise Exception("Did not receive WAN Metrics") ev = dev[0].wait_event(["ANQP-QUERY-DONE"], timeout=10) if ev is None: raise Exception("ANQP-QUERY-DONE event not seen") if "result=SUCCESS" not in ev: raise Exception("Unexpected result: " + ev) if "OK" not in dev[0].request("HS20_ANQP_GET " + bssid + " 3,4"): raise Exception("ANQP_GET command failed") ev = dev[0].wait_event(["RX-HS20-ANQP"], timeout=1) if ev is None or "Operator Friendly Name" not in ev: raise Exception("Did not receive Operator Friendly Name") ev = dev[0].wait_event(["RX-HS20-ANQP"], timeout=1) if ev is None or "WAN Metrics" not in ev: raise Exception("Did not receive WAN Metrics") cmds = [ "", "foo", "00:11:22:33:44:55 258,hs20:-1", "00:11:22:33:44:55 258,hs20:0", "00:11:22:33:44:55 258,hs20:32", "00:11:22:33:44:55 hs20:-1", "00:11:22:33:44:55 hs20:0", "00:11:22:33:44:55 hs20:32", "00:11:22:33:44:55", "00:11:22:33:44:55 ", "00:11:22:33:44:55 0" ] for cmd in cmds: if "FAIL" not in dev[0].request("ANQP_GET " + cmd): raise Exception("Invalid ANQP_GET accepted") cmds = [ "", "foo", "00:11:22:33:44:55 -1", "00:11:22:33:44:55 0", "00:11:22:33:44:55 32", "00:11:22:33:44:55", "00:11:22:33:44:55 ", "00:11:22:33:44:55 0" ] for cmd in cmds: if "FAIL" not in dev[0].request("HS20_ANQP_GET " + cmd): raise Exception("Invalid HS20_ANQP_GET accepted") def expect_gas_result(dev, result, status=None): ev = dev.wait_event(["GAS-QUERY-DONE"], timeout=10) if ev is None: raise Exception("GAS query timed out") if "result=" + result not in ev: raise Exception("Unexpected GAS query result") if status and "status_code=" + str(status) + ' ' not in ev: raise Exception("Unexpected GAS status code") def anqp_get(dev, bssid, id): if "OK" not in dev.request("ANQP_GET " + bssid + " " + str(id)): raise Exception("ANQP_GET command failed") ev = dev.wait_event(["GAS-QUERY-START"], timeout=5) if ev is None: raise Exception("GAS query start timed out") def test_gas_timeout(dev, apdev): """GAS timeout""" hapd = start_ap(apdev[0]) bssid = apdev[0]['bssid'] dev[0].scan_for_bss(bssid, freq="2412", force_scan=True) hapd.set("ext_mgmt_frame_handling", "1") anqp_get(dev[0], bssid, 263) ev = hapd.wait_event(["MGMT-RX"], timeout=5) if ev is None: raise Exception("MGMT RX wait timed out") expect_gas_result(dev[0], "TIMEOUT") MGMT_SUBTYPE_ACTION = 13 ACTION_CATEG_PUBLIC = 4 GAS_INITIAL_REQUEST = 10 GAS_INITIAL_RESPONSE = 11 GAS_COMEBACK_REQUEST = 12 GAS_COMEBACK_RESPONSE = 13 GAS_ACTIONS = [ GAS_INITIAL_REQUEST, GAS_INITIAL_RESPONSE, GAS_COMEBACK_REQUEST, GAS_COMEBACK_RESPONSE ] def anqp_adv_proto(): return struct.pack('BBBB', 108, 2, 127, 0) def anqp_initial_resp(dialog_token, status_code, comeback_delay=0): return struct.pack('(GAS-RESPONSE-INFO) addr=([0-9a-f:]*) dialog_token=([0-9]*) status_code=([0-9]*) resp_len=([\-0-9]*)' res = re.split(exp, ev) if len(res) < 6: raise Exception("Could not parse GAS-RESPONSE-INFO") if res[2] != bssid: raise Exception("Unexpected BSSID in response") status = res[4] if status != "59": raise Exception("Unexpected GAS-RESPONSE-INFO status") def test_gas_max_pending(dev, apdev): """GAS and maximum pending query limit""" hapd = start_ap(apdev[0]) hapd.set("gas_frag_limit", "50") bssid = apdev[0]['bssid'] wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5') wpas.interface_add("wlan5") if "OK" not in wpas.request("P2P_SET listen_channel 1"): raise Exception("Failed to set listen channel") if "OK" not in wpas.p2p_listen(): raise Exception("Failed to start listen state") if "FAIL" in wpas.request("SET ext_mgmt_frame_handling 1"): raise Exception("Failed to enable external management frame handling") anqp_query = struct.pack(' 8 and status_code == 0: raise Exception("Unexpected success status code {} for dialog token {}".format(status_code, dialog_token)) def test_gas_no_pending(dev, apdev): """GAS and no pending query for comeback request""" hapd = start_ap(apdev[0]) bssid = apdev[0]['bssid'] wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5') wpas.interface_add("wlan5") if "OK" not in wpas.request("P2P_SET listen_channel 1"): raise Exception("Failed to set listen channel") if "OK" not in wpas.p2p_listen(): raise Exception("Failed to start listen state") if "FAIL" in wpas.request("SET ext_mgmt_frame_handling 1"): raise Exception("Failed to enable external management frame handling") msg = struct.pack('