iwinfo_nl80211.c

   1 /*
   2  * iwinfo - Wireless Information Library - NL80211 Backend
   3  *
   4  *   Copyright (C) 2010-2013 Jo-Philipp Wich <xm@subsignal.org>
   5  *
   6  * The iwinfo library is free software: you can redistribute it and/or
   7  * modify it under the terms of the GNU General Public License version 2
   8  * as published by the Free Software Foundation.
   9  *
  10  * The iwinfo library is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  13  * See the GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with the iwinfo library. If not, see http://www.gnu.org/licenses/.
  17  *
  18  * The signal handling code is derived from the official madwifi tools,
  19  * wlanconfig.c in particular. The encryption property handling was
  20  * inspired by the hostapd madwifi driver.
  21  *
  22  * Parts of this code are derived from the Linux iw utility.
  23  */
  24
  25 #include <limits.h>
  26 #include <glob.h>
  27 #include <fnmatch.h>
  28 #include <stdarg.h>
  29
  30 #include "iwinfo_nl80211.h"
  31
  32 #define min(x, y) ((x) < (y)) ? (x) : (y)
  33
  34 #define BIT(x) (1ULL<<(x))
  35
  36 static struct nl80211_state *nls = NULL;
  37
  38 static void nl80211_close(void)
  39 {
  40         if (nls)
  41         {
  42                 if (nls->nlctrl)
  43                         genl_family_put(nls->nlctrl);
  44
  45                 if (nls->nl80211)
  46                         genl_family_put(nls->nl80211);
  47
  48                 if (nls->nl_sock)
  49                         nl_socket_free(nls->nl_sock);
  50
  51                 if (nls->nl_cache)
  52                         nl_cache_free(nls->nl_cache);
  53
  54                 free(nls);
  55                 nls = NULL;
  56         }
  57 }
  58
  59 static int nl80211_init(void)
  60 {
  61         int err, fd;
  62
  63         if (!nls)
  64         {
  65                 nls = malloc(sizeof(struct nl80211_state));
  66                 if (!nls) {
  67                         err = -ENOMEM;
  68                         goto err;
  69                 }
  70
  71                 memset(nls, 0, sizeof(*nls));
  72
  73                 nls->nl_sock = nl_socket_alloc();
  74                 if (!nls->nl_sock) {
  75                         err = -ENOMEM;
  76                         goto err;
  77                 }
  78
  79                 if (genl_connect(nls->nl_sock)) {
  80                         err = -ENOLINK;
  81                         goto err;
  82                 }
  83
  84                 fd = nl_socket_get_fd(nls->nl_sock);
  85                 if (fcntl(fd, F_SETFD, fcntl(fd, F_GETFD) | FD_CLOEXEC) < 0) {
  86                         err = -EINVAL;
  87                         goto err;
  88                 }
  89
  90                 if (genl_ctrl_alloc_cache(nls->nl_sock, &nls->nl_cache)) {
  91                         err = -ENOMEM;
  92                         goto err;
  93                 }
  94
  95                 nls->nl80211 = genl_ctrl_search_by_name(nls->nl_cache, "nl80211");
  96                 if (!nls->nl80211) {
  97                         err = -ENOENT;
  98                         goto err;
  99                 }
 100
 101                 nls->nlctrl = genl_ctrl_search_by_name(nls->nl_cache, "nlctrl");
 102                 if (!nls->nlctrl) {
 103                         err = -ENOENT;
 104                         goto err;
 105                 }
 106         }
 107
 108         return 0;
 109
 110
 111 err:
 112         nl80211_close();
 113         return err;
 114 }
 115
 116 static int nl80211_readint(const char *path)
 117 {
 118         int fd;
 119         int rv = -1;
 120         char buffer[16];
 121
 122         if ((fd = open(path, O_RDONLY)) > -1)
 123         {
 124                 if (read(fd, buffer, sizeof(buffer)) > 0)
 125                         rv = atoi(buffer);
 126
 127                 close(fd);
 128         }
 129
 130         return rv;
 131 }
 132
 133 static int nl80211_readstr(const char *path, char *buffer, int length)
 134 {
 135         int fd;
 136         int rv = -1;
 137
 138         if ((fd = open(path, O_RDONLY)) > -1)
 139         {
 140                 if ((rv = read(fd, buffer, length - 1)) > 0)
 141                 {
 142                         if (buffer[rv - 1] == '\n')
 143                                 rv--;
 144
 145                         buffer[rv] = 0;
 146                 }
 147
 148                 close(fd);
 149         }
 150
 151         return rv;
 152 }
 153
 154
 155 static int nl80211_msg_error(struct sockaddr_nl *nla,
 156         struct nlmsgerr *err, void *arg)
 157 {
 158         int *ret = arg;
 159         *ret = err->error;
 160         return NL_STOP;
 161 }
 162
 163 static int nl80211_msg_finish(struct nl_msg *msg, void *arg)
 164 {
 165         int *ret = arg;
 166         *ret = 0;
 167         return NL_SKIP;
 168 }
 169
 170 static int nl80211_msg_ack(struct nl_msg *msg, void *arg)
 171 {
 172         int *ret = arg;
 173         *ret = 0;
 174         return NL_STOP;
 175 }
 176
 177 static int nl80211_msg_response(struct nl_msg *msg, void *arg)
 178 {
 179         return NL_SKIP;
 180 }
 181
 182 static void nl80211_free(struct nl80211_msg_conveyor *cv)
 183 {
 184         if (cv)
 185         {
 186                 if (cv->cb)
 187                         nl_cb_put(cv->cb);
 188
 189                 if (cv->msg)
 190                         nlmsg_free(cv->msg);
 191
 192                 cv->cb  = NULL;
 193                 cv->msg = NULL;
 194         }
 195 }
 196
 197 static struct nl80211_msg_conveyor * nl80211_new(struct genl_family *family,
 198                                                  int cmd, int flags)
 199 {
 200         static struct nl80211_msg_conveyor cv;
 201
 202         struct nl_msg *req = NULL;
 203         struct nl_cb *cb = NULL;
 204
 205         req = nlmsg_alloc();
 206         if (!req)
 207                 goto err;
 208
 209         cb = nl_cb_alloc(NL_CB_DEFAULT);
 210         if (!cb)
 211                 goto err;
 212
 213         genlmsg_put(req, 0, 0, genl_family_get_id(family), 0, flags, cmd, 0);
 214
 215         cv.msg = req;
 216         cv.cb  = cb;
 217
 218         return &cv;
 219
 220 err:
 221         if (cb)
 222                 nl_cb_put(cb);
 223
 224         if (req)
 225                 nlmsg_free(req);
 226
 227         return NULL;
 228 }
 229
 230 static struct nl80211_msg_conveyor * nl80211_ctl(int cmd, int flags)
 231 {
 232         if (nl80211_init() < 0)
 233                 return NULL;
 234
 235         return nl80211_new(nls->nlctrl, cmd, flags);
 236 }
 237
 238 static int nl80211_phy_idx_from_uci_path(struct uci_section *s)
 239 {
 240         const char *opt;
 241         char buf[128];
 242         int idx = -1;
 243         glob_t gl;
 244
 245         opt = uci_lookup_option_string(uci_ctx, s, "path");
 246         if (!opt)
 247                 return -1;
 248
 249         snprintf(buf, sizeof(buf), "/sys/devices/%s/ieee80211/*/index", opt);  /**/
 250         if (glob(buf, 0, NULL, &gl))
 251                 return -1;
 252
 253         if (gl.gl_pathc > 0)
 254                 idx = nl80211_readint(gl.gl_pathv[0]);
 255
 256         globfree(&gl);
 257
 258         return idx;
 259 }
 260
 261 static int nl80211_phy_idx_from_uci_macaddr(struct uci_section *s)
 262 {
 263         const char *opt;
 264         char buf[128];
 265         int i, idx = -1;
 266         glob_t gl;
 267
 268         opt = uci_lookup_option_string(uci_ctx, s, "macaddr");
 269         if (!opt)
 270                 return -1;
 271
 272         snprintf(buf, sizeof(buf), "/sys/class/ieee80211/*");   /**/
 273         if (glob(buf, 0, NULL, &gl))
 274                 return -1;
 275
 276         for (i = 0; i < gl.gl_pathc; i++)
 277         {
 278                 snprintf(buf, sizeof(buf), "%s/macaddress", gl.gl_pathv[i]);
 279                 if (nl80211_readstr(buf, buf, sizeof(buf)) <= 0)
 280                         continue;
 281
 282                 if (fnmatch(opt, buf, FNM_CASEFOLD))
 283                         continue;
 284
 285                 snprintf(buf, sizeof(buf), "%s/index", gl.gl_pathv[i]);
 286                 if ((idx = nl80211_readint(buf)) > -1)
 287                         break;
 288         }
 289
 290         globfree(&gl);
 291
 292         return idx;
 293 }
 294
 295 static int nl80211_phy_idx_from_uci_phy(struct uci_section *s)
 296 {
 297         const char *opt;
 298         char buf[128];
 299
 300         opt = uci_lookup_option_string(uci_ctx, s, "phy");
 301         if (!opt)
 302                 return -1;
 303
 304         snprintf(buf, sizeof(buf), "/sys/class/ieee80211/%s/index", opt);
 305         return nl80211_readint(buf);
 306 }
 307
 308 static int nl80211_phy_idx_from_uci(const char *name)
 309 {
 310         struct uci_section *s;
 311         int idx = -1;
 312
 313         s = iwinfo_uci_get_radio(name, "mac80211");
 314         if (!s)
 315                 goto free;
 316
 317         idx = nl80211_phy_idx_from_uci_path(s);
 318
 319         if (idx < 0)
 320                 idx = nl80211_phy_idx_from_uci_macaddr(s);
 321
 322         if (idx < 0)
 323                 idx = nl80211_phy_idx_from_uci_phy(s);
 324
 325 free:
 326         iwinfo_uci_free();
 327         return idx;
 328 }
 329
 330 static struct nl80211_msg_conveyor * nl80211_msg(const char *ifname,
 331                                                  int cmd, int flags)
 332 {
 333         int ifidx = -1, phyidx = -1;
 334         struct nl80211_msg_conveyor *cv;
 335
 336         if (ifname == NULL)
 337                 return NULL;
 338
 339         if (nl80211_init() < 0)
 340                 return NULL;
 341
 342         if (!strncmp(ifname, "phy", 3))
 343                 phyidx = atoi(&ifname[3]);
 344         else if (!strncmp(ifname, "radio", 5))
 345                 phyidx = nl80211_phy_idx_from_uci(ifname);
 346         else if (!strncmp(ifname, "mon.", 4))
 347                 ifidx = if_nametoindex(&ifname[4]);
 348         else
 349                 ifidx = if_nametoindex(ifname);
 350
 351         /* Valid ifidx must be greater than 0 */
 352         if ((ifidx <= 0) && (phyidx < 0))
 353                 return NULL;
 354
 355         cv = nl80211_new(nls->nl80211, cmd, flags);
 356         if (!cv)
 357                 return NULL;
 358
 359         if (ifidx > -1)
 360                 NLA_PUT_U32(cv->msg, NL80211_ATTR_IFINDEX, ifidx);
 361
 362         if (phyidx > -1)
 363                 NLA_PUT_U32(cv->msg, NL80211_ATTR_WIPHY, phyidx);
 364
 365         return cv;
 366
 367 nla_put_failure:
 368         nl80211_free(cv);
 369         return NULL;
 370 }
 371
 372 static struct nl80211_msg_conveyor * nl80211_send(
 373         struct nl80211_msg_conveyor *cv,
 374         int (*cb_func)(struct nl_msg *, void *), void *cb_arg
 375 ) {
 376         static struct nl80211_msg_conveyor rcv;
 377         int err = 1;
 378
 379         if (cb_func)
 380                 nl_cb_set(cv->cb, NL_CB_VALID, NL_CB_CUSTOM, cb_func, cb_arg);
 381         else
 382                 nl_cb_set(cv->cb, NL_CB_VALID, NL_CB_CUSTOM, nl80211_msg_response, &rcv);
 383
 384         if (nl_send_auto_complete(nls->nl_sock, cv->msg) < 0)
 385                 goto err;
 386
 387         nl_cb_err(cv->cb,               NL_CB_CUSTOM, nl80211_msg_error,  &err);
 388         nl_cb_set(cv->cb, NL_CB_FINISH, NL_CB_CUSTOM, nl80211_msg_finish, &err);
 389         nl_cb_set(cv->cb, NL_CB_ACK,    NL_CB_CUSTOM, nl80211_msg_ack,    &err);
 390
 391         while (err > 0)
 392                 nl_recvmsgs(nls->nl_sock, cv->cb);
 393
 394         return &rcv;
 395
 396 err:
 397         nl_cb_put(cv->cb);
 398         nlmsg_free(cv->msg);
 399
 400         return NULL;
 401 }
 402
 403 static struct nlattr ** nl80211_parse(struct nl_msg *msg)
 404 {
 405         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
 406         static struct nlattr *attr[NL80211_ATTR_MAX + 1];
 407
 408         nla_parse(attr, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
 409                   genlmsg_attrlen(gnlh, 0), NULL);
 410
 411         return attr;
 412 }
 413
 414
 415 static int nl80211_subscribe_cb(struct nl_msg *msg, void *arg)
 416 {
 417         struct nl80211_group_conveyor *cv = arg;
 418
 419         struct nlattr **attr = nl80211_parse(msg);
 420         struct nlattr *mgrpinfo[CTRL_ATTR_MCAST_GRP_MAX + 1];
 421         struct nlattr *mgrp;
 422         int mgrpidx;
 423
 424         if (!attr[CTRL_ATTR_MCAST_GROUPS])
 425                 return NL_SKIP;
 426
 427         nla_for_each_nested(mgrp, attr[CTRL_ATTR_MCAST_GROUPS], mgrpidx)
 428         {
 429                 nla_parse(mgrpinfo, CTRL_ATTR_MCAST_GRP_MAX,
 430                           nla_data(mgrp), nla_len(mgrp), NULL);
 431
 432                 if (mgrpinfo[CTRL_ATTR_MCAST_GRP_ID] &&
 433                     mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME] &&
 434                     !strncmp(nla_data(mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME]),
 435                              cv->name, nla_len(mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME])))
 436                 {
 437                         cv->id = nla_get_u32(mgrpinfo[CTRL_ATTR_MCAST_GRP_ID]);
 438                         break;
 439                 }
 440         }
 441
 442         return NL_SKIP;
 443 }
 444
 445 static int nl80211_subscribe(const char *family, const char *group)
 446 {
 447         struct nl80211_group_conveyor cv = { .name = group, .id = -ENOENT };
 448         struct nl80211_msg_conveyor *req;
 449
 450         req = nl80211_ctl(CTRL_CMD_GETFAMILY, 0);
 451         if (req)
 452         {
 453                 NLA_PUT_STRING(req->msg, CTRL_ATTR_FAMILY_NAME, family);
 454                 nl80211_send(req, nl80211_subscribe_cb, &cv);
 455
 456 nla_put_failure:
 457                 nl80211_free(req);
 458         }
 459
 460         return nl_socket_add_membership(nls->nl_sock, cv.id);
 461 }
 462
 463
 464 static int nl80211_wait_cb(struct nl_msg *msg, void *arg)
 465 {
 466         struct nl80211_event_conveyor *cv = arg;
 467         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
 468
 469         if (gnlh->cmd == cv->wait)
 470                 cv->recv = gnlh->cmd;
 471
 472         return NL_SKIP;
 473 }
 474
 475 static int nl80211_wait_seq_check(struct nl_msg *msg, void *arg)
 476 {
 477         return NL_OK;
 478 }
 479
 480 static int nl80211_wait(const char *family, const char *group, int cmd)
 481 {
 482         struct nl80211_event_conveyor cv = { .wait = cmd };
 483         struct nl_cb *cb;
 484
 485         if (nl80211_subscribe(family, group))
 486                 return -ENOENT;
 487
 488         cb = nl_cb_alloc(NL_CB_DEFAULT);
 489
 490         if (!cb)
 491                 return -ENOMEM;
 492
 493         nl_cb_set(cb, NL_CB_SEQ_CHECK, NL_CB_CUSTOM, nl80211_wait_seq_check, NULL);
 494         nl_cb_set(cb, NL_CB_VALID,     NL_CB_CUSTOM, nl80211_wait_cb,        &cv );
 495
 496         while (!cv.recv)
 497                 nl_recvmsgs(nls->nl_sock, cb);
 498
 499         nl_cb_put(cb);
 500
 501         return 0;
 502 }
 503
 504
 505 static int nl80211_freq2channel(int freq)
 506 {
 507         if (freq == 2484)
 508                 return 14;
 509         else if (freq < 2484)
 510                 return (freq - 2407) / 5;
 511         else if (freq >= 4910 && freq <= 4980)
 512                 return (freq - 4000) / 5;
 513         else
 514                 return (freq - 5000) / 5;
 515 }
 516
 517 static int nl80211_channel2freq(int channel, const char *band)
 518 {
 519         if (!band || band[0] != 'a')
 520         {
 521                 if (channel == 14)
 522                         return 2484;
 523                 else if (channel < 14)
 524                         return (channel * 5) + 2407;
 525         }
 526         else
 527         {
 528                 if (channel >= 182 && channel <= 196)
 529                         return (channel * 5) + 4000;
 530                 else
 531                         return (channel * 5) + 5000;
 532         }
 533
 534         return 0;
 535 }
 536
 537 static int nl80211_ifname2phy_cb(struct nl_msg *msg, void *arg)
 538 {
 539         char *buf = arg;
 540         struct nlattr **attr = nl80211_parse(msg);
 541
 542         if (attr[NL80211_ATTR_WIPHY_NAME])
 543                 memcpy(buf, nla_data(attr[NL80211_ATTR_WIPHY_NAME]),
 544                        nla_len(attr[NL80211_ATTR_WIPHY_NAME]));
 545         else
 546                 buf[0] = 0;
 547
 548         return NL_SKIP;
 549 }
 550
 551 static char * nl80211_ifname2phy(const char *ifname)
 552 {
 553         static char phy[32] = { 0 };
 554         struct nl80211_msg_conveyor *req;
 555
 556         memset(phy, 0, sizeof(phy));
 557
 558         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
 559         if (req)
 560         {
 561                 nl80211_send(req, nl80211_ifname2phy_cb, phy);
 562                 nl80211_free(req);
 563         }
 564
 565         return phy[0] ? phy : NULL;
 566 }
 567
 568 static char * nl80211_phy2ifname(const char *ifname)
 569 {
 570         int ifidx = -1, cifidx = -1, phyidx = -1;
 571         char buffer[64];
 572         static char nif[IFNAMSIZ] = { 0 };
 573
 574         DIR *d;
 575         struct dirent *e;
 576
 577         /* Only accept phy name of the form phy%d or radio%d */
 578         if (!ifname)
 579                 return NULL;
 580         else if (!strncmp(ifname, "phy", 3))
 581                 phyidx = atoi(&ifname[3]);
 582         else if (!strncmp(ifname, "radio", 5))
 583                 phyidx = nl80211_phy_idx_from_uci(ifname);
 584         else
 585                 return NULL;
 586
 587         memset(nif, 0, sizeof(nif));
 588
 589         if (phyidx > -1)
 590         {
 591                 if ((d = opendir("/sys/class/net")) != NULL)
 592                 {
 593                         while ((e = readdir(d)) != NULL)
 594                         {
 595                                 snprintf(buffer, sizeof(buffer),
 596                                          "/sys/class/net/%s/phy80211/index", e->d_name);
 597
 598                                 if (nl80211_readint(buffer) == phyidx)
 599                                 {
 600                                         snprintf(buffer, sizeof(buffer),
 601                                                  "/sys/class/net/%s/ifindex", e->d_name);
 602
 603                                         if ((cifidx = nl80211_readint(buffer)) >= 0 &&
 604                                             ((ifidx < 0) || (cifidx < ifidx)))
 605                                         {
 606                                                 ifidx = cifidx;
 607                                                 strncpy(nif, e->d_name, sizeof(nif));
 608                                         }
 609                                 }
 610                         }
 611
 612                         closedir(d);
 613                 }
 614         }
 615
 616         return nif[0] ? nif : NULL;
 617 }
 618
 619 static int nl80211_get_mode_cb(struct nl_msg *msg, void *arg)
 620 {
 621         int *mode = arg;
 622         struct nlattr **tb = nl80211_parse(msg);
 623         const int ifmodes[NL80211_IFTYPE_MAX + 1] = {
 624                 IWINFO_OPMODE_UNKNOWN,          /* unspecified */
 625                 IWINFO_OPMODE_ADHOC,            /* IBSS */
 626                 IWINFO_OPMODE_CLIENT,           /* managed */
 627                 IWINFO_OPMODE_MASTER,           /* AP */
 628                 IWINFO_OPMODE_AP_VLAN,          /* AP/VLAN */
 629                 IWINFO_OPMODE_WDS,                      /* WDS */
 630                 IWINFO_OPMODE_MONITOR,          /* monitor */
 631                 IWINFO_OPMODE_MESHPOINT,        /* mesh point */
 632                 IWINFO_OPMODE_P2P_CLIENT,       /* P2P-client */
 633                 IWINFO_OPMODE_P2P_GO,           /* P2P-GO */
 634         };
 635
 636         if (tb[NL80211_ATTR_IFTYPE])
 637                 *mode = ifmodes[nla_get_u32(tb[NL80211_ATTR_IFTYPE])];
 638
 639         return NL_SKIP;
 640 }
 641
 642
 643 static int nl80211_get_mode(const char *ifname, int *buf)
 644 {
 645         char *res;
 646         struct nl80211_msg_conveyor *req;
 647
 648         res = nl80211_phy2ifname(ifname);
 649         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0);
 650         *buf = IWINFO_OPMODE_UNKNOWN;
 651
 652         if (req)
 653         {
 654                 nl80211_send(req, nl80211_get_mode_cb, buf);
 655                 nl80211_free(req);
 656         }
 657
 658         return (*buf == IWINFO_OPMODE_UNKNOWN) ? -1 : 0;
 659 }
 660
 661 static int __nl80211_hostapd_query(const char *ifname, ...)
 662 {
 663         va_list ap, ap_cur;
 664         char *phy, *search, *dest, *key, *val, buf[128];
 665         int len, mode, found = 0, match = 1;
 666         FILE *fp;
 667
 668         if (nl80211_get_mode(ifname, &mode))
 669                 return 0;
 670
 671         if (mode != IWINFO_OPMODE_MASTER && mode != IWINFO_OPMODE_AP_VLAN)
 672                 return 0;
 673
 674         phy = nl80211_ifname2phy(ifname);
 675
 676         if (!phy)
 677                 return 0;
 678
 679         snprintf(buf, sizeof(buf), "/var/run/hostapd-%s.conf", phy);
 680         fp = fopen(buf, "r");
 681
 682         if (!fp)
 683                 return 0;
 684
 685         va_start(ap, ifname);
 686
 687         /* clear all destination buffers */
 688         va_copy(ap_cur, ap);
 689
 690         while ((search = va_arg(ap_cur, char *)) != NULL)
 691         {
 692                 dest = va_arg(ap_cur, char *);
 693                 len  = va_arg(ap_cur, int);
 694
 695                 memset(dest, 0, len);
 696         }
 697
 698         va_end(ap_cur);
 699
 700         /* iterate applicable lines and copy found values into dest buffers */
 701         while (fgets(buf, sizeof(buf), fp))
 702         {
 703                 key = strtok(buf, " =\t\n");
 704                 val = strtok(NULL, "\n");
 705
 706                 if (!key || !val || !*key || *key == '#')
 707                         continue;
 708
 709                 if (!strcmp(key, "interface") || !strcmp(key, "bss"))
 710                         match = !strcmp(ifname, val);
 711
 712                 if (!match)
 713                         continue;
 714
 715                 va_copy(ap_cur, ap);
 716
 717                 while ((search = va_arg(ap_cur, char *)) != NULL)
 718                 {
 719                         dest = va_arg(ap_cur, char *);
 720                         len  = va_arg(ap_cur, int);
 721
 722                         if (!strcmp(search, key))
 723                         {
 724                                 strncpy(dest, val, len - 1);
 725                                 found++;
 726                                 break;
 727                         }
 728                 }
 729
 730                 va_end(ap_cur);
 731         }
 732
 733         fclose(fp);
 734
 735         va_end(ap);
 736
 737         return found;
 738 }
 739
 740 #define nl80211_hostapd_query(ifname, ...) \
 741         __nl80211_hostapd_query(ifname, ##__VA_ARGS__, NULL)
 742
 743
 744 static inline int nl80211_wpactl_recv(int sock, char *buf, int blen)
 745 {
 746         fd_set rfds;
 747         struct timeval tv = { 0, 256000 };
 748
 749         FD_ZERO(&rfds);
 750         FD_SET(sock, &rfds);
 751
 752         memset(buf, 0, blen);
 753
 754         if (select(sock + 1, &rfds, NULL, NULL, &tv) < 0)
 755                 return -1;
 756
 757         if (!FD_ISSET(sock, &rfds))
 758                 return -1;
 759
 760         return recv(sock, buf, blen - 1, 0);
 761 }
 762
 763 static int nl80211_wpactl_connect(const char *ifname, struct sockaddr_un *local)
 764 {
 765         struct sockaddr_un remote = { 0 };
 766         size_t remote_length, local_length;
 767
 768         int sock = socket(PF_UNIX, SOCK_DGRAM, 0);
 769         if (sock < 0)
 770                 return sock;
 771
 772         remote.sun_family = AF_UNIX;
 773         remote_length = sizeof(remote.sun_family) +
 774                 sprintf(remote.sun_path, "/var/run/wpa_supplicant-%s/%s",
 775                         ifname, ifname);
 776
 777         if (fcntl(sock, F_SETFD, fcntl(sock, F_GETFD) | FD_CLOEXEC) < 0)
 778         {
 779                 close(sock);
 780                 return -1;
 781         }
 782
 783         if (connect(sock, (struct sockaddr *)&remote, remote_length))
 784         {
 785                 remote_length = sizeof(remote.sun_family) +
 786                         sprintf(remote.sun_path, "/var/run/wpa_supplicant/%s", ifname);
 787
 788                 if (connect(sock, (struct sockaddr *)&remote, remote_length))
 789                 {
 790                         close(sock);
 791                         return -1;
 792                 }
 793         }
 794
 795         local->sun_family = AF_UNIX;
 796         local_length = sizeof(local->sun_family) +
 797                 sprintf(local->sun_path, "/var/run/iwinfo-%s-%d", ifname, getpid());
 798
 799         if (bind(sock, (struct sockaddr *)local, local_length) < 0)
 800         {
 801                 close(sock);
 802                 return -1;
 803         }
 804
 805         return sock;
 806 }
 807
 808 static int __nl80211_wpactl_query(const char *ifname, ...)
 809 {
 810         va_list ap, ap_cur;
 811         struct sockaddr_un local = { 0 };
 812         int len, mode, found = 0, sock = -1;
 813         char *search, *dest, *key, *val, *line, *pos, buf[512];
 814
 815         if (nl80211_get_mode(ifname, &mode))
 816                 return 0;
 817
 818         if (mode != IWINFO_OPMODE_CLIENT && mode != IWINFO_OPMODE_ADHOC)
 819                 return 0;
 820
 821         sock = nl80211_wpactl_connect(ifname, &local);
 822
 823         if (sock < 0)
 824                 return 0;
 825
 826         va_start(ap, ifname);
 827
 828         /* clear all destination buffers */
 829         va_copy(ap_cur, ap);
 830
 831         while ((search = va_arg(ap_cur, char *)) != NULL)
 832         {
 833                 dest = va_arg(ap_cur, char *);
 834                 len  = va_arg(ap_cur, int);
 835
 836                 memset(dest, 0, len);
 837         }
 838
 839         va_end(ap_cur);
 840
 841         send(sock, "STATUS", 6, 0);
 842
 843         while (true)
 844         {
 845                 if (nl80211_wpactl_recv(sock, buf, sizeof(buf)) <= 0)
 846                         break;
 847
 848                 if (buf[0] == '<')
 849                         continue;
 850
 851                 for (line = strtok_r(buf, "\n", &pos);
 852                          line != NULL;
 853                          line = strtok_r(NULL, "\n", &pos))
 854                 {
 855                         key = strtok(line, "=");
 856                         val = strtok(NULL, "\n");
 857
 858                         if (!key || !val)
 859                                 continue;
 860
 861                         va_copy(ap_cur, ap);
 862
 863                         while ((search = va_arg(ap_cur, char *)) != NULL)
 864                         {
 865                                 dest = va_arg(ap_cur, char *);
 866                                 len  = va_arg(ap_cur, int);
 867
 868                                 if (!strcmp(search, key))
 869                                 {
 870                                         strncpy(dest, val, len - 1);
 871                                         found++;
 872                                         break;
 873                                 }
 874                         }
 875
 876                         va_end(ap_cur);
 877                 }
 878
 879                 break;
 880         }
 881
 882         va_end(ap);
 883
 884         close(sock);
 885         unlink(local.sun_path);
 886
 887         return found;
 888 }
 889
 890 #define nl80211_wpactl_query(ifname, ...) \
 891         __nl80211_wpactl_query(ifname, ##__VA_ARGS__, NULL)
 892
 893
 894 static char * nl80211_ifadd(const char *ifname)
 895 {
 896         char *rv = NULL, path[PATH_MAX];
 897         static char nif[IFNAMSIZ] = { 0 };
 898         struct nl80211_msg_conveyor *req;
 899         FILE *sysfs;
 900
 901         req = nl80211_msg(ifname, NL80211_CMD_NEW_INTERFACE, 0);
 902         if (req)
 903         {
 904                 snprintf(nif, sizeof(nif), "tmp.%s", ifname);
 905
 906                 NLA_PUT_STRING(req->msg, NL80211_ATTR_IFNAME, nif);
 907                 NLA_PUT_U32(req->msg, NL80211_ATTR_IFTYPE, NL80211_IFTYPE_STATION);
 908
 909                 nl80211_send(req, NULL, NULL);
 910
 911                 snprintf(path, sizeof(path) - 1,
 912                          "/proc/sys/net/ipv6/conf/%s/disable_ipv6", nif);
 913
 914                 if ((sysfs = fopen(path, "w")) != NULL)
 915                 {
 916                         fwrite("0\n", 1, 2, sysfs);
 917                         fclose(sysfs);
 918                 }
 919
 920                 rv = nif;
 921
 922         nla_put_failure:
 923                 nl80211_free(req);
 924         }
 925
 926         return rv;
 927 }
 928
 929 static void nl80211_ifdel(const char *ifname)
 930 {
 931         struct nl80211_msg_conveyor *req;
 932
 933         req = nl80211_msg(ifname, NL80211_CMD_DEL_INTERFACE, 0);
 934         if (req)
 935         {
 936                 NLA_PUT_STRING(req->msg, NL80211_ATTR_IFNAME, ifname);
 937
 938                 nl80211_send(req, NULL, NULL);
 939
 940         nla_put_failure:
 941                 nl80211_free(req);
 942         }
 943 }
 944
 945 static void nl80211_hostapd_hup(const char *ifname)
 946 {
 947         int fd, pid = 0;
 948         char buf[32];
 949         char *phy = nl80211_ifname2phy(ifname);
 950
 951         if (phy)
 952         {
 953                 snprintf(buf, sizeof(buf), "/var/run/wifi-%s.pid", phy);
 954                 if ((fd = open(buf, O_RDONLY)) > 0)
 955                 {
 956                         if (read(fd, buf, sizeof(buf)) > 0)
 957                                 pid = atoi(buf);
 958
 959                         close(fd);
 960                 }
 961
 962                 if (pid > 0)
 963                         kill(pid, 1);
 964         }
 965 }
 966
 967
 968 static int nl80211_probe(const char *ifname)
 969 {
 970         return !!nl80211_ifname2phy(ifname);
 971 }
 972
 973 struct nl80211_ssid_bssid {
 974         unsigned char *ssid;
 975         unsigned char bssid[7];
 976 };
 977
 978 static int nl80211_get_ssid_bssid_cb(struct nl_msg *msg, void *arg)
 979 {
 980         int ielen;
 981         unsigned char *ie;
 982         struct nl80211_ssid_bssid *sb = arg;
 983         struct nlattr **tb = nl80211_parse(msg);
 984         struct nlattr *bss[NL80211_BSS_MAX + 1];
 985
 986         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
 987                 [NL80211_BSS_INFORMATION_ELEMENTS] = { 0 },
 988                 [NL80211_BSS_STATUS]               = { .type = NLA_U32 },
 989         };
 990
 991         if (!tb[NL80211_ATTR_BSS] ||
 992             nla_parse_nested(bss, NL80211_BSS_MAX, tb[NL80211_ATTR_BSS],
 993                              bss_policy) ||
 994             !bss[NL80211_BSS_BSSID] ||
 995             !bss[NL80211_BSS_STATUS] ||
 996             !bss[NL80211_BSS_INFORMATION_ELEMENTS])
 997         {
 998                 return NL_SKIP;
 999         }
1000
1001         switch (nla_get_u32(bss[NL80211_BSS_STATUS]))
1002         {
1003         case NL80211_BSS_STATUS_ASSOCIATED:
1004         case NL80211_BSS_STATUS_AUTHENTICATED:
1005         case NL80211_BSS_STATUS_IBSS_JOINED:
1006
1007                 if (sb->ssid)
1008                 {
1009                         ie = nla_data(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1010                         ielen = nla_len(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1011
1012                         while (ielen >= 2 && ielen >= ie[1])
1013                         {
1014                                 if (ie[0] == 0)
1015                                 {
1016                                         memcpy(sb->ssid, ie + 2, min(ie[1], IWINFO_ESSID_MAX_SIZE));
1017                                         return NL_SKIP;
1018                                 }
1019
1020                                 ielen -= ie[1] + 2;
1021                                 ie += ie[1] + 2;
1022                         }
1023                 }
1024                 else
1025                 {
1026                         sb->bssid[0] = 1;
1027                         memcpy(sb->bssid + 1, nla_data(bss[NL80211_BSS_BSSID]), 6);
1028                         return NL_SKIP;
1029                 }
1030
1031         default:
1032                 return NL_SKIP;
1033         }
1034 }
1035
1036 static int nl80211_get_ssid(const char *ifname, char *buf)
1037 {
1038         char *res;
1039         struct nl80211_msg_conveyor *req;
1040         struct nl80211_ssid_bssid sb;
1041
1042         /* try to find ssid from scan dump results */
1043         res = nl80211_phy2ifname(ifname);
1044         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
1045
1046         sb.ssid = (unsigned char *)buf;
1047         *buf = 0;
1048
1049         if (req)
1050         {
1051                 nl80211_send(req, nl80211_get_ssid_bssid_cb, &sb);
1052                 nl80211_free(req);
1053         }
1054
1055         /* failed, try to find from hostapd info */
1056         if (*buf == 0)
1057                 nl80211_hostapd_query(ifname, "ssid", buf, IWINFO_ESSID_MAX_SIZE + 1);
1058
1059         return (*buf == 0) ? -1 : 0;
1060 }
1061
1062 static int nl80211_get_bssid(const char *ifname, char *buf)
1063 {
1064         char *res, bssid[sizeof("FF:FF:FF:FF:FF:FF\0")];
1065         struct nl80211_msg_conveyor *req;
1066         struct nl80211_ssid_bssid sb;
1067
1068         /* try to find bssid from scan dump results */
1069         res = nl80211_phy2ifname(ifname);
1070         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
1071
1072         sb.ssid = NULL;
1073         sb.bssid[0] = 0;
1074
1075         if (req)
1076         {
1077                 nl80211_send(req, nl80211_get_ssid_bssid_cb, &sb);
1078                 nl80211_free(req);
1079         }
1080
1081         /* failed, try to find mac from hostapd info */
1082         if ((sb.bssid[0] == 0) &&
1083             nl80211_hostapd_query(ifname, "bssid", bssid, sizeof(bssid)))
1084         {
1085                 sb.bssid[0] = 1;
1086                 sb.bssid[1] = strtol(&bssid[0],  NULL, 16);
1087                 sb.bssid[2] = strtol(&bssid[3],  NULL, 16);
1088                 sb.bssid[3] = strtol(&bssid[6],  NULL, 16);
1089                 sb.bssid[4] = strtol(&bssid[9],  NULL, 16);
1090                 sb.bssid[5] = strtol(&bssid[12], NULL, 16);
1091                 sb.bssid[6] = strtol(&bssid[15], NULL, 16);
1092         }
1093
1094         if (sb.bssid[0])
1095         {
1096                 sprintf(buf, "%02X:%02X:%02X:%02X:%02X:%02X",
1097                         sb.bssid[1], sb.bssid[2], sb.bssid[3],
1098                         sb.bssid[4], sb.bssid[5], sb.bssid[6]);
1099
1100                 return 0;
1101         }
1102
1103         return -1;
1104 }
1105
1106
1107 static int nl80211_get_frequency_scan_cb(struct nl_msg *msg, void *arg)
1108 {
1109         int *freq = arg;
1110         struct nlattr **attr = nl80211_parse(msg);
1111         struct nlattr *binfo[NL80211_BSS_MAX + 1];
1112
1113         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
1114                 [NL80211_BSS_FREQUENCY] = { .type = NLA_U32 },
1115                 [NL80211_BSS_STATUS]    = { .type = NLA_U32 },
1116         };
1117
1118         if (attr[NL80211_ATTR_BSS] &&
1119             !nla_parse_nested(binfo, NL80211_BSS_MAX,
1120                               attr[NL80211_ATTR_BSS], bss_policy))
1121         {
1122                 if (binfo[NL80211_BSS_STATUS] && binfo[NL80211_BSS_FREQUENCY])
1123                         *freq = nla_get_u32(binfo[NL80211_BSS_FREQUENCY]);
1124         }
1125
1126         return NL_SKIP;
1127 }
1128
1129 static int nl80211_get_frequency_info_cb(struct nl_msg *msg, void *arg)
1130 {
1131         int *freq = arg;
1132         struct nlattr **tb = nl80211_parse(msg);
1133
1134         if (tb[NL80211_ATTR_WIPHY_FREQ])
1135                 *freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
1136
1137         return NL_SKIP;
1138 }
1139
1140 static int nl80211_get_frequency(const char *ifname, int *buf)
1141 {
1142         char *res, channel[4], hwmode[2];
1143         struct nl80211_msg_conveyor *req;
1144
1145         /* try to find frequency from interface info */
1146         res = nl80211_phy2ifname(ifname);
1147         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0);
1148         *buf = 0;
1149
1150         if (req)
1151         {
1152                 nl80211_send(req, nl80211_get_frequency_info_cb, buf);
1153                 nl80211_free(req);
1154         }
1155
1156         /* failed, try to find frequency from hostapd info */
1157         if ((*buf == 0) &&
1158             nl80211_hostapd_query(ifname, "hw_mode", hwmode, sizeof(hwmode),
1159                                           "channel", channel, sizeof(channel)) == 2)
1160         {
1161                 *buf = nl80211_channel2freq(atoi(channel), hwmode);
1162         }
1163
1164         /* failed, try to find frequency from scan results */
1165         if (*buf == 0)
1166         {
1167                 res = nl80211_phy2ifname(ifname);
1168                 req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
1169
1170                 if (req)
1171                 {
1172                         nl80211_send(req, nl80211_get_frequency_scan_cb, buf);
1173                         nl80211_free(req);
1174                 }
1175         }
1176
1177         return (*buf == 0) ? -1 : 0;
1178 }
1179
1180 static int nl80211_get_channel(const char *ifname, int *buf)
1181 {
1182         if (!nl80211_get_frequency(ifname, buf))
1183         {
1184                 *buf = nl80211_freq2channel(*buf);
1185                 return 0;
1186         }
1187
1188         return -1;
1189 }
1190
1191
1192 static int nl80211_get_txpower(const char *ifname, int *buf)
1193 {
1194 #if 0
1195         char *res;
1196         char path[PATH_MAX];
1197
1198         res = nl80211_ifname2phy(ifname);
1199         snprintf(path, sizeof(path), "/sys/kernel/debug/ieee80211/%s/power",
1200                  res ? res : ifname);
1201
1202         if ((*buf = nl80211_readint(path)) > -1)
1203                 return 0;
1204 #endif
1205
1206         return wext_ops.txpower(ifname, buf);
1207 }
1208
1209
1210 static int nl80211_fill_signal_cb(struct nl_msg *msg, void *arg)
1211 {
1212         int8_t dbm;
1213         int16_t mbit;
1214         struct nl80211_rssi_rate *rr = arg;
1215         struct nlattr **attr = nl80211_parse(msg);
1216         struct nlattr *sinfo[NL80211_STA_INFO_MAX + 1];
1217         struct nlattr *rinfo[NL80211_RATE_INFO_MAX + 1];
1218
1219         static struct nla_policy stats_policy[NL80211_STA_INFO_MAX + 1] = {
1220                 [NL80211_STA_INFO_INACTIVE_TIME] = { .type = NLA_U32    },
1221                 [NL80211_STA_INFO_RX_BYTES]      = { .type = NLA_U32    },
1222                 [NL80211_STA_INFO_TX_BYTES]      = { .type = NLA_U32    },
1223                 [NL80211_STA_INFO_RX_PACKETS]    = { .type = NLA_U32    },
1224                 [NL80211_STA_INFO_TX_PACKETS]    = { .type = NLA_U32    },
1225                 [NL80211_STA_INFO_SIGNAL]        = { .type = NLA_U8     },
1226                 [NL80211_STA_INFO_TX_BITRATE]    = { .type = NLA_NESTED },
1227                 [NL80211_STA_INFO_LLID]          = { .type = NLA_U16    },
1228                 [NL80211_STA_INFO_PLID]          = { .type = NLA_U16    },
1229                 [NL80211_STA_INFO_PLINK_STATE]   = { .type = NLA_U8     },
1230         };
1231
1232         static struct nla_policy rate_policy[NL80211_RATE_INFO_MAX + 1] = {
1233                 [NL80211_RATE_INFO_BITRATE]      = { .type = NLA_U16  },
1234                 [NL80211_RATE_INFO_MCS]          = { .type = NLA_U8   },
1235                 [NL80211_RATE_INFO_40_MHZ_WIDTH] = { .type = NLA_FLAG },
1236                 [NL80211_RATE_INFO_SHORT_GI]     = { .type = NLA_FLAG },
1237         };
1238
1239         if (attr[NL80211_ATTR_STA_INFO])
1240         {
1241                 if (!nla_parse_nested(sinfo, NL80211_STA_INFO_MAX,
1242                                       attr[NL80211_ATTR_STA_INFO], stats_policy))
1243                 {
1244                         if (sinfo[NL80211_STA_INFO_SIGNAL])
1245                         {
1246                                 dbm = nla_get_u8(sinfo[NL80211_STA_INFO_SIGNAL]);
1247                                 rr->rssi = rr->rssi ? (int8_t)((rr->rssi + dbm) / 2) : dbm;
1248                         }
1249
1250                         if (sinfo[NL80211_STA_INFO_TX_BITRATE])
1251                         {
1252                                 if (!nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1253                                                       sinfo[NL80211_STA_INFO_TX_BITRATE],
1254                                                       rate_policy))
1255                                 {
1256                                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1257                                         {
1258                                                 mbit = nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]);
1259                                                 rr->rate = rr->rate
1260                                                         ? (int16_t)((rr->rate + mbit) / 2) : mbit;
1261                                         }
1262                                 }
1263                         }
1264                 }
1265         }
1266
1267         return NL_SKIP;
1268 }
1269
1270 static void nl80211_fill_signal(const char *ifname, struct nl80211_rssi_rate *r)
1271 {
1272         DIR *d;
1273         struct dirent *de;
1274         struct nl80211_msg_conveyor *req;
1275
1276         r->rssi = 0;
1277         r->rate = 0;
1278
1279         if ((d = opendir("/sys/class/net")) != NULL)
1280         {
1281                 while ((de = readdir(d)) != NULL)
1282                 {
1283                         if (!strncmp(de->d_name, ifname, strlen(ifname)) &&
1284                             (!de->d_name[strlen(ifname)] ||
1285                              !strncmp(&de->d_name[strlen(ifname)], ".sta", 4)))
1286                         {
1287                                 req = nl80211_msg(de->d_name, NL80211_CMD_GET_STATION,
1288                                                   NLM_F_DUMP);
1289
1290                                 if (req)
1291                                 {
1292                                         nl80211_send(req, nl80211_fill_signal_cb, r);
1293                                         nl80211_free(req);
1294                                 }
1295                         }
1296                 }
1297
1298                 closedir(d);
1299         }
1300 }
1301
1302 static int nl80211_get_bitrate(const char *ifname, int *buf)
1303 {
1304         struct nl80211_rssi_rate rr;
1305
1306         nl80211_fill_signal(ifname, &rr);
1307
1308         if (rr.rate)
1309         {
1310                 *buf = (rr.rate * 100);
1311                 return 0;
1312         }
1313
1314         return -1;
1315 }
1316
1317 static int nl80211_get_signal(const char *ifname, int *buf)
1318 {
1319         struct nl80211_rssi_rate rr;
1320
1321         nl80211_fill_signal(ifname, &rr);
1322
1323         if (rr.rssi)
1324         {
1325                 *buf = rr.rssi;
1326                 return 0;
1327         }
1328
1329         return -1;
1330 }
1331
1332 static int nl80211_get_noise_cb(struct nl_msg *msg, void *arg)
1333 {
1334         int8_t *noise = arg;
1335         struct nlattr **tb = nl80211_parse(msg);
1336         struct nlattr *si[NL80211_SURVEY_INFO_MAX + 1];
1337
1338         static struct nla_policy sp[NL80211_SURVEY_INFO_MAX + 1] = {
1339                 [NL80211_SURVEY_INFO_FREQUENCY] = { .type = NLA_U32 },
1340                 [NL80211_SURVEY_INFO_NOISE]     = { .type = NLA_U8  },
1341         };
1342
1343         if (!tb[NL80211_ATTR_SURVEY_INFO])
1344                 return NL_SKIP;
1345
1346         if (nla_parse_nested(si, NL80211_SURVEY_INFO_MAX,
1347                              tb[NL80211_ATTR_SURVEY_INFO], sp))
1348                 return NL_SKIP;
1349
1350         if (!si[NL80211_SURVEY_INFO_NOISE])
1351                 return NL_SKIP;
1352
1353         if (!*noise || si[NL80211_SURVEY_INFO_IN_USE])
1354                 *noise = (int8_t)nla_get_u8(si[NL80211_SURVEY_INFO_NOISE]);
1355
1356         return NL_SKIP;
1357 }
1358
1359
1360 static int nl80211_get_noise(const char *ifname, int *buf)
1361 {
1362         int8_t noise;
1363         struct nl80211_msg_conveyor *req;
1364
1365         req = nl80211_msg(ifname, NL80211_CMD_GET_SURVEY, NLM_F_DUMP);
1366         if (req)
1367         {
1368                 noise = 0;
1369
1370                 nl80211_send(req, nl80211_get_noise_cb, &noise);
1371                 nl80211_free(req);
1372
1373                 if (noise)
1374                 {
1375                         *buf = noise;
1376                         return 0;
1377                 }
1378         }
1379
1380         return -1;
1381 }
1382
1383 static int nl80211_get_quality(const char *ifname, int *buf)
1384 {
1385         int signal;
1386
1387         if (!nl80211_get_signal(ifname, &signal))
1388         {
1389                 /* A positive signal level is usually just a quality
1390                  * value, pass through as-is */
1391                 if (signal >= 0)
1392                 {
1393                         *buf = signal;
1394                 }
1395
1396                 /* The cfg80211 wext compat layer assumes a signal range
1397                  * of -110 dBm to -40 dBm, the quality value is derived
1398                  * by adding 110 to the signal level */
1399                 else
1400                 {
1401                         if (signal < -110)
1402                                 signal = -110;
1403                         else if (signal > -40)
1404                                 signal = -40;
1405
1406                         *buf = (signal + 110);
1407                 }
1408
1409                 return 0;
1410         }
1411
1412         return -1;
1413 }
1414
1415 static int nl80211_get_quality_max(const char *ifname, int *buf)
1416 {
1417         /* The cfg80211 wext compat layer assumes a maximum
1418          * quality of 70 */
1419         *buf = 70;
1420
1421         return 0;
1422 }
1423
1424 static int nl80211_check_wepkey(const char *key)
1425 {
1426         if (key && *key)
1427         {
1428                 switch (strlen(key))
1429                 {
1430                 case 5:
1431                 case 10:
1432                         return IWINFO_CIPHER_WEP40;
1433
1434                 case 13:
1435                 case 26:
1436                         return IWINFO_CIPHER_WEP104;
1437                 }
1438         }
1439
1440         return 0;
1441 }
1442
1443 static int nl80211_get_encryption(const char *ifname, char *buf)
1444 {
1445         char wpa[2], wpa_key_mgmt[16], wpa_pairwise[16], wpa_groupwise[16];
1446         char auth_algs[2], wep_key0[27], wep_key1[27], wep_key2[27], wep_key3[27];
1447
1448         struct iwinfo_crypto_entry *c = (struct iwinfo_crypto_entry *)buf;
1449
1450         /* WPA supplicant */
1451         if (nl80211_wpactl_query(ifname,
1452                         "pairwise_cipher", wpa_pairwise,  sizeof(wpa_pairwise),
1453                         "group_cipher",    wpa_groupwise, sizeof(wpa_groupwise),
1454                         "key_mgmt",        wpa_key_mgmt,  sizeof(wpa_key_mgmt)))
1455         {
1456                 /* WEP */
1457                 if (!strcmp(wpa_key_mgmt, "NONE"))
1458                 {
1459                         if (strstr(wpa_pairwise, "WEP-40"))
1460                                 c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1461                         else if (strstr(wpa_pairwise, "WEP-104"))
1462                                 c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1463
1464                         if (strstr(wpa_groupwise, "WEP-40"))
1465                                 c->group_ciphers |= IWINFO_CIPHER_WEP40;
1466                         else if (strstr(wpa_groupwise, "WEP-104"))
1467                                 c->group_ciphers |= IWINFO_CIPHER_WEP104;
1468
1469                         c->enabled      = !!(c->pair_ciphers | c->group_ciphers);
1470                         c->auth_suites |= IWINFO_KMGMT_NONE;
1471                         c->auth_algs   |= IWINFO_AUTH_OPEN; /* XXX: assumption */
1472                 }
1473
1474                 /* WPA */
1475                 else if (strstr(wpa_key_mgmt, "WPA"))
1476                 {
1477                         if (strstr(wpa_pairwise, "TKIP"))
1478                                 c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1479                         else if (strstr(wpa_pairwise, "CCMP"))
1480                                 c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1481                         else if (strstr(wpa_pairwise, "NONE"))
1482                                 c->pair_ciphers |= IWINFO_CIPHER_NONE;
1483                         else if (strstr(wpa_pairwise, "WEP-40"))
1484                                 c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1485                         else if (strstr(wpa_pairwise, "WEP-104"))
1486                                 c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1487
1488                         if (strstr(wpa_groupwise, "TKIP"))
1489                                 c->group_ciphers |= IWINFO_CIPHER_TKIP;
1490                         else if (strstr(wpa_groupwise, "CCMP"))
1491                                 c->group_ciphers |= IWINFO_CIPHER_CCMP;
1492                         else if (strstr(wpa_groupwise, "NONE"))
1493                                 c->group_ciphers |= IWINFO_CIPHER_NONE;
1494                         else if (strstr(wpa_groupwise, "WEP-40"))
1495                                 c->group_ciphers |= IWINFO_CIPHER_WEP40;
1496                         else if (strstr(wpa_groupwise, "WEP-104"))
1497                                 c->group_ciphers |= IWINFO_CIPHER_WEP104;
1498
1499                         if (strstr(wpa_key_mgmt, "WPA2"))
1500                                 c->wpa_version = 2;
1501                         else if (strstr(wpa_key_mgmt, "WPA"))
1502                                 c->wpa_version = 1;
1503
1504                         if (strstr(wpa_key_mgmt, "PSK"))
1505                                 c->auth_suites |= IWINFO_KMGMT_PSK;
1506                         else if (strstr(wpa_key_mgmt, "EAP") ||
1507                                  strstr(wpa_key_mgmt, "802.1X"))
1508                                 c->auth_suites |= IWINFO_KMGMT_8021x;
1509                         else if (strstr(wpa_key_mgmt, "NONE"))
1510                                 c->auth_suites |= IWINFO_KMGMT_NONE;
1511
1512                         c->enabled = !!(c->wpa_version && c->auth_suites);
1513                 }
1514
1515                 return 0;
1516         }
1517
1518         /* Hostapd */
1519         else if (nl80211_hostapd_query(ifname,
1520                                 "wpa",          wpa,          sizeof(wpa),
1521                                 "wpa_key_mgmt", wpa_key_mgmt, sizeof(wpa_key_mgmt),
1522                                 "wpa_pairwise", wpa_pairwise, sizeof(wpa_pairwise),
1523                                 "auth_algs",    auth_algs,    sizeof(auth_algs),
1524                                 "wep_key0",     wep_key0,     sizeof(wep_key0),
1525                                 "wep_key1",     wep_key1,     sizeof(wep_key1),
1526                                 "wep_key2",     wep_key2,     sizeof(wep_key2),
1527                                 "wep_key3",     wep_key3,     sizeof(wep_key3)))
1528         {
1529                 c->wpa_version = wpa[0] ? atoi(wpa) : 0;
1530
1531                 if (wpa_key_mgmt[0])
1532                 {
1533                         if (strstr(wpa_key_mgmt, "PSK"))
1534                                 c->auth_suites |= IWINFO_KMGMT_PSK;
1535
1536                         if (strstr(wpa_key_mgmt, "EAP"))
1537                                 c->auth_suites |= IWINFO_KMGMT_8021x;
1538
1539                         if (strstr(wpa_key_mgmt, "NONE"))
1540                                 c->auth_suites |= IWINFO_KMGMT_NONE;
1541                 }
1542                 else
1543                 {
1544                         c->auth_suites |= IWINFO_KMGMT_PSK;
1545                 }
1546
1547                 if (wpa_pairwise[0])
1548                 {
1549                         if (strstr(wpa_pairwise, "TKIP"))
1550                                 c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1551
1552                         if (strstr(wpa_pairwise, "CCMP"))
1553                                 c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1554
1555                         if (strstr(wpa_pairwise, "NONE"))
1556                                 c->pair_ciphers |= IWINFO_CIPHER_NONE;
1557                 }
1558
1559                 if (auth_algs[0])
1560                 {
1561                         switch(atoi(auth_algs))
1562                         {
1563                         case 1:
1564                                 c->auth_algs |= IWINFO_AUTH_OPEN;
1565                                 break;
1566
1567                         case 2:
1568                                 c->auth_algs |= IWINFO_AUTH_SHARED;
1569                                 break;
1570
1571                         case 3:
1572                                 c->auth_algs |= IWINFO_AUTH_OPEN;
1573                                 c->auth_algs |= IWINFO_AUTH_SHARED;
1574                                 break;
1575                         }
1576
1577                         c->pair_ciphers |= nl80211_check_wepkey(wep_key0);
1578                         c->pair_ciphers |= nl80211_check_wepkey(wep_key1);
1579                         c->pair_ciphers |= nl80211_check_wepkey(wep_key2);
1580                         c->pair_ciphers |= nl80211_check_wepkey(wep_key3);
1581                 }
1582
1583                 c->group_ciphers = c->pair_ciphers;
1584                 c->enabled = (c->wpa_version || c->pair_ciphers) ? 1 : 0;
1585
1586                 return 0;
1587         }
1588
1589         return -1;
1590 }
1591
1592 static int nl80211_get_phyname(const char *ifname, char *buf)
1593 {
1594         const char *name;
1595
1596         name = nl80211_ifname2phy(ifname);
1597
1598         if (name)
1599         {
1600                 strcpy(buf, name);
1601                 return 0;
1602         }
1603         else if ((name = nl80211_phy2ifname(ifname)) != NULL)
1604         {
1605                 name = nl80211_ifname2phy(name);
1606
1607                 if (name)
1608                 {
1609                         strcpy(buf, ifname);
1610                         return 0;
1611                 }
1612         }
1613
1614         return -1;
1615 }
1616
1617
1618 static int nl80211_get_assoclist_cb(struct nl_msg *msg, void *arg)
1619 {
1620         struct nl80211_array_buf *arr = arg;
1621         struct iwinfo_assoclist_entry *e = arr->buf;
1622         struct nlattr **attr = nl80211_parse(msg);
1623         struct nlattr *sinfo[NL80211_STA_INFO_MAX + 1];
1624         struct nlattr *rinfo[NL80211_RATE_INFO_MAX + 1];
1625         struct nl80211_sta_flag_update *sta_flags;
1626
1627         static struct nla_policy stats_policy[NL80211_STA_INFO_MAX + 1] = {
1628                 [NL80211_STA_INFO_INACTIVE_TIME] = { .type = NLA_U32    },
1629                 [NL80211_STA_INFO_RX_PACKETS]    = { .type = NLA_U32    },
1630                 [NL80211_STA_INFO_TX_PACKETS]    = { .type = NLA_U32    },
1631                 [NL80211_STA_INFO_RX_BITRATE]    = { .type = NLA_NESTED },
1632                 [NL80211_STA_INFO_TX_BITRATE]    = { .type = NLA_NESTED },
1633                 [NL80211_STA_INFO_SIGNAL]        = { .type = NLA_U8     },
1634                 [NL80211_STA_INFO_RX_BYTES]      = { .type = NLA_U32    },
1635                 [NL80211_STA_INFO_TX_BYTES]      = { .type = NLA_U32    },
1636                 [NL80211_STA_INFO_TX_RETRIES]    = { .type = NLA_U32    },
1637                 [NL80211_STA_INFO_TX_FAILED]     = { .type = NLA_U32    },
1638                 [NL80211_STA_INFO_T_OFFSET]      = { .type = NLA_U64    },
1639                 [NL80211_STA_INFO_STA_FLAGS] =
1640                         { .minlen = sizeof(struct nl80211_sta_flag_update) },
1641         };
1642
1643         static struct nla_policy rate_policy[NL80211_RATE_INFO_MAX + 1] = {
1644                 [NL80211_RATE_INFO_BITRATE]      = { .type = NLA_U16    },
1645                 [NL80211_RATE_INFO_MCS]          = { .type = NLA_U8     },
1646                 [NL80211_RATE_INFO_40_MHZ_WIDTH] = { .type = NLA_FLAG   },
1647                 [NL80211_RATE_INFO_SHORT_GI]     = { .type = NLA_FLAG   },
1648         };
1649
1650         /* advance to end of array */
1651         e += arr->count;
1652         memset(e, 0, sizeof(*e));
1653
1654         if (attr[NL80211_ATTR_MAC])
1655                 memcpy(e->mac, nla_data(attr[NL80211_ATTR_MAC]), 6);
1656
1657         if (attr[NL80211_ATTR_STA_INFO] &&
1658             !nla_parse_nested(sinfo, NL80211_STA_INFO_MAX,
1659                               attr[NL80211_ATTR_STA_INFO], stats_policy))
1660         {
1661                 if (sinfo[NL80211_STA_INFO_SIGNAL])
1662                         e->signal = nla_get_u8(sinfo[NL80211_STA_INFO_SIGNAL]);
1663
1664                 if (sinfo[NL80211_STA_INFO_INACTIVE_TIME])
1665                         e->inactive = nla_get_u32(sinfo[NL80211_STA_INFO_INACTIVE_TIME]);
1666
1667                 if (sinfo[NL80211_STA_INFO_RX_PACKETS])
1668                         e->rx_packets = nla_get_u32(sinfo[NL80211_STA_INFO_RX_PACKETS]);
1669
1670                 if (sinfo[NL80211_STA_INFO_TX_PACKETS])
1671                         e->tx_packets = nla_get_u32(sinfo[NL80211_STA_INFO_TX_PACKETS]);
1672
1673                 if (sinfo[NL80211_STA_INFO_RX_BITRATE] &&
1674                     !nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1675                                       sinfo[NL80211_STA_INFO_RX_BITRATE], rate_policy))
1676                 {
1677                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1678                                 e->rx_rate.rate =
1679                                         nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]) * 100;
1680
1681                         if (rinfo[NL80211_RATE_INFO_MCS])
1682                                 e->rx_rate.mcs = nla_get_u8(rinfo[NL80211_RATE_INFO_MCS]);
1683
1684                         if (rinfo[NL80211_RATE_INFO_40_MHZ_WIDTH])
1685                                 e->rx_rate.is_40mhz = 1;
1686
1687                         if (rinfo[NL80211_RATE_INFO_SHORT_GI])
1688                                 e->rx_rate.is_short_gi = 1;
1689                 }
1690
1691                 if (sinfo[NL80211_STA_INFO_TX_BITRATE] &&
1692                     !nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1693                                       sinfo[NL80211_STA_INFO_TX_BITRATE], rate_policy))
1694                 {
1695                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1696                                 e->tx_rate.rate =
1697                                         nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]) * 100;
1698
1699                         if (rinfo[NL80211_RATE_INFO_MCS])
1700                                 e->tx_rate.mcs = nla_get_u8(rinfo[NL80211_RATE_INFO_MCS]);
1701
1702                         if (rinfo[NL80211_RATE_INFO_40_MHZ_WIDTH])
1703                                 e->tx_rate.is_40mhz = 1;
1704
1705                         if (rinfo[NL80211_RATE_INFO_SHORT_GI])
1706                                 e->tx_rate.is_short_gi = 1;
1707                 }
1708
1709                 if (sinfo[NL80211_STA_INFO_RX_BYTES])
1710                         e->rx_bytes = nla_get_u32(sinfo[NL80211_STA_INFO_RX_BYTES]);
1711
1712                 if (sinfo[NL80211_STA_INFO_TX_BYTES])
1713                         e->tx_bytes = nla_get_u32(sinfo[NL80211_STA_INFO_TX_BYTES]);
1714
1715                 if (sinfo[NL80211_STA_INFO_TX_RETRIES])
1716                         e->tx_retries = nla_get_u32(sinfo[NL80211_STA_INFO_TX_RETRIES]);
1717
1718                 if (sinfo[NL80211_STA_INFO_TX_FAILED])
1719                         e->tx_failed = nla_get_u32(sinfo[NL80211_STA_INFO_TX_FAILED]);
1720
1721                 if (sinfo[NL80211_STA_INFO_T_OFFSET])
1722                         e->t_offset = nla_get_u64(sinfo[NL80211_STA_INFO_T_OFFSET]);
1723
1724                 /* Station flags */
1725                 if (sinfo[NL80211_STA_INFO_STA_FLAGS])
1726                 {
1727                         sta_flags = (struct nl80211_sta_flag_update *)
1728                                 nla_data(sinfo[NL80211_STA_INFO_STA_FLAGS]);
1729
1730                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
1731                             sta_flags->set & BIT(NL80211_STA_FLAG_AUTHORIZED))
1732                                 e->is_authorized = 1;
1733
1734                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1735                             sta_flags->set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1736                                 e->is_authenticated = 1;
1737
1738                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) &&
1739                             sta_flags->set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1740                                 e->is_preamble_short = 1;
1741
1742                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_WME) &&
1743                             sta_flags->set & BIT(NL80211_STA_FLAG_WME))
1744                                 e->is_wme = 1;
1745
1746                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_MFP) &&
1747                             sta_flags->set & BIT(NL80211_STA_FLAG_MFP))
1748                                 e->is_mfp = 1;
1749
1750                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_TDLS_PEER) &&
1751                             sta_flags->set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1752                                 e->is_tdls = 1;
1753                 }
1754         }
1755
1756         e->noise = 0; /* filled in by caller */
1757         arr->count++;
1758
1759         return NL_SKIP;
1760 }
1761
1762 static int nl80211_get_assoclist(const char *ifname, char *buf, int *len)
1763 {
1764         DIR *d;
1765         int i, noise = 0;
1766         struct dirent *de;
1767         struct nl80211_msg_conveyor *req;
1768         struct nl80211_array_buf arr = { .buf = buf, .count = 0 };
1769         struct iwinfo_assoclist_entry *e;
1770
1771         if ((d = opendir("/sys/class/net")) != NULL)
1772         {
1773                 while ((de = readdir(d)) != NULL)
1774                 {
1775                         if (!strncmp(de->d_name, ifname, strlen(ifname)) &&
1776                             (!de->d_name[strlen(ifname)] ||
1777                              !strncmp(&de->d_name[strlen(ifname)], ".sta", 4)))
1778                         {
1779                                 req = nl80211_msg(de->d_name, NL80211_CMD_GET_STATION,
1780                                                   NLM_F_DUMP);
1781
1782                                 if (req)
1783                                 {
1784                                         nl80211_send(req, nl80211_get_assoclist_cb, &arr);
1785                                         nl80211_free(req);
1786                                 }
1787                         }
1788                 }
1789
1790                 closedir(d);
1791
1792                 if (!nl80211_get_noise(ifname, &noise))
1793                         for (i = 0, e = arr.buf; i < arr.count; i++, e++)
1794                                 e->noise = noise;
1795
1796                 *len = (arr.count * sizeof(struct iwinfo_assoclist_entry));
1797                 return 0;
1798         }
1799
1800         return -1;
1801 }
1802
1803 static int nl80211_get_txpwrlist_cb(struct nl_msg *msg, void *arg)
1804 {
1805         int *dbm_max = arg;
1806         int ch_cur, ch_cmp, bands_remain, freqs_remain;
1807
1808         struct nlattr **attr = nl80211_parse(msg);
1809         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
1810         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
1811         struct nlattr *band, *freq;
1812
1813         static struct nla_policy freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1] = {
1814                 [NL80211_FREQUENCY_ATTR_FREQ]         = { .type = NLA_U32  },
1815                 [NL80211_FREQUENCY_ATTR_DISABLED]     = { .type = NLA_FLAG },
1816                 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN] = { .type = NLA_FLAG },
1817                 [NL80211_FREQUENCY_ATTR_NO_IBSS]      = { .type = NLA_FLAG },
1818                 [NL80211_FREQUENCY_ATTR_RADAR]        = { .type = NLA_FLAG },
1819                 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER] = { .type = NLA_U32  },
1820         };
1821
1822         ch_cur = *dbm_max; /* value int* is initialized with channel by caller */
1823         *dbm_max = -1;
1824
1825         nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
1826         {
1827                 nla_parse(bands, NL80211_BAND_ATTR_MAX, nla_data(band),
1828                           nla_len(band), NULL);
1829
1830                 nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS], freqs_remain)
1831                 {
1832                         nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
1833                                   nla_data(freq), nla_len(freq), freq_policy);
1834
1835                         ch_cmp = nl80211_freq2channel(nla_get_u32(
1836                                 freqs[NL80211_FREQUENCY_ATTR_FREQ]));
1837
1838                         if ((!ch_cur || (ch_cmp == ch_cur)) &&
1839                             freqs[NL80211_FREQUENCY_ATTR_MAX_TX_POWER])
1840                         {
1841                                 *dbm_max = (int)(0.01 * nla_get_u32(
1842                                         freqs[NL80211_FREQUENCY_ATTR_MAX_TX_POWER]));
1843
1844                                 break;
1845                         }
1846                 }
1847         }
1848
1849         return NL_SKIP;
1850 }
1851
1852 static int nl80211_get_txpwrlist(const char *ifname, char *buf, int *len)
1853 {
1854         int ch_cur;
1855         int dbm_max = -1, dbm_cur, dbm_cnt;
1856         struct nl80211_msg_conveyor *req;
1857         struct iwinfo_txpwrlist_entry entry;
1858
1859         if (nl80211_get_channel(ifname, &ch_cur))
1860                 ch_cur = 0;
1861
1862         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
1863         if (req)
1864         {
1865                 /* initialize the value pointer with channel for callback */
1866                 dbm_max = ch_cur;
1867
1868                 nl80211_send(req, nl80211_get_txpwrlist_cb, &dbm_max);
1869                 nl80211_free(req);
1870         }
1871
1872         if (dbm_max > 0)
1873         {
1874                 for (dbm_cur = 0, dbm_cnt = 0;
1875                      dbm_cur < dbm_max;
1876                      dbm_cur++, dbm_cnt++)
1877                 {
1878                         entry.dbm = dbm_cur;
1879                         entry.mw  = iwinfo_dbm2mw(dbm_cur);
1880
1881                         memcpy(&buf[dbm_cnt * sizeof(entry)], &entry, sizeof(entry));
1882                 }
1883
1884                 entry.dbm = dbm_max;
1885                 entry.mw  = iwinfo_dbm2mw(dbm_max);
1886
1887                 memcpy(&buf[dbm_cnt * sizeof(entry)], &entry, sizeof(entry));
1888                 dbm_cnt++;
1889
1890                 *len = dbm_cnt * sizeof(entry);
1891                 return 0;
1892         }
1893
1894         return -1;
1895 }
1896
1897 static void nl80211_get_scancrypto(const char *spec,
1898         struct iwinfo_crypto_entry *c)
1899 {
1900         if (strstr(spec, "WPA") || strstr(spec, "WEP"))
1901         {
1902                 c->enabled = 1;
1903
1904                 if (strstr(spec, "WPA2-") && strstr(spec, "WPA-"))
1905                         c->wpa_version = 3;
1906
1907                 else if (strstr(spec, "WPA2"))
1908                         c->wpa_version = 2;
1909
1910                 else if (strstr(spec, "WPA"))
1911                         c->wpa_version = 1;
1912
1913                 else if (strstr(spec, "WEP"))
1914                         c->auth_algs = IWINFO_AUTH_OPEN | IWINFO_AUTH_SHARED;
1915
1916
1917                 if (strstr(spec, "PSK"))
1918                         c->auth_suites |= IWINFO_KMGMT_PSK;
1919
1920                 if (strstr(spec, "802.1X") || strstr(spec, "EAP"))
1921                         c->auth_suites |= IWINFO_KMGMT_8021x;
1922
1923                 if (strstr(spec, "WPA-NONE"))
1924                         c->auth_suites |= IWINFO_KMGMT_NONE;
1925
1926
1927                 if (strstr(spec, "TKIP"))
1928                         c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1929
1930                 if (strstr(spec, "CCMP"))
1931                         c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1932
1933                 if (strstr(spec, "WEP-40"))
1934                         c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1935
1936                 if (strstr(spec, "WEP-104"))
1937                         c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1938
1939                 c->group_ciphers = c->pair_ciphers;
1940         }
1941         else
1942         {
1943                 c->enabled = 0;
1944         }
1945 }
1946
1947
1948 struct nl80211_scanlist {
1949         struct iwinfo_scanlist_entry *e;
1950         int len;
1951 };
1952
1953
1954 static void nl80211_get_scanlist_ie(struct nlattr **bss,
1955                                     struct iwinfo_scanlist_entry *e)
1956 {
1957         int ielen = nla_len(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1958         unsigned char *ie = nla_data(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1959         static unsigned char ms_oui[3] = { 0x00, 0x50, 0xf2 };
1960         int len;
1961
1962         while (ielen >= 2 && ielen >= ie[1])
1963         {
1964                 switch (ie[0])
1965                 {
1966                 case 0: /* SSID */
1967                         len = min(ie[1], IWINFO_ESSID_MAX_SIZE);
1968                         memcpy(e->ssid, ie + 2, len);
1969                         e->ssid[len] = 0;
1970                         break;
1971
1972                 case 48: /* RSN */
1973                         iwinfo_parse_rsn(&e->crypto, ie + 2, ie[1],
1974                                          IWINFO_CIPHER_CCMP, IWINFO_KMGMT_8021x);
1975                         break;
1976
1977                 case 221: /* Vendor */
1978                         if (ie[1] >= 4 && !memcmp(ie + 2, ms_oui, 3) && ie[5] == 1)
1979                                 iwinfo_parse_rsn(&e->crypto, ie + 6, ie[1] - 4,
1980                                                  IWINFO_CIPHER_TKIP, IWINFO_KMGMT_PSK);
1981                         break;
1982                 }
1983
1984                 ielen -= ie[1] + 2;
1985                 ie += ie[1] + 2;
1986         }
1987 }
1988
1989 static int nl80211_get_scanlist_cb(struct nl_msg *msg, void *arg)
1990 {
1991         int8_t rssi;
1992         uint16_t caps;
1993
1994         struct nl80211_scanlist *sl = arg;
1995         struct nlattr **tb = nl80211_parse(msg);
1996         struct nlattr *bss[NL80211_BSS_MAX + 1];
1997
1998         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
1999                 [NL80211_BSS_TSF]                  = { .type = NLA_U64 },
2000                 [NL80211_BSS_FREQUENCY]            = { .type = NLA_U32 },
2001                 [NL80211_BSS_BSSID]                = { 0 },
2002                 [NL80211_BSS_BEACON_INTERVAL]      = { .type = NLA_U16 },
2003                 [NL80211_BSS_CAPABILITY]           = { .type = NLA_U16 },
2004                 [NL80211_BSS_INFORMATION_ELEMENTS] = { 0 },
2005                 [NL80211_BSS_SIGNAL_MBM]           = { .type = NLA_U32 },
2006                 [NL80211_BSS_SIGNAL_UNSPEC]        = { .type = NLA_U8  },
2007                 [NL80211_BSS_STATUS]               = { .type = NLA_U32 },
2008                 [NL80211_BSS_SEEN_MS_AGO]          = { .type = NLA_U32 },
2009                 [NL80211_BSS_BEACON_IES]           = { 0 },
2010         };
2011
2012         if (!tb[NL80211_ATTR_BSS] ||
2013                 nla_parse_nested(bss, NL80211_BSS_MAX, tb[NL80211_ATTR_BSS],
2014                                  bss_policy) ||
2015                 !bss[NL80211_BSS_BSSID])
2016         {
2017                 return NL_SKIP;
2018         }
2019
2020         if (bss[NL80211_BSS_CAPABILITY])
2021                 caps = nla_get_u16(bss[NL80211_BSS_CAPABILITY]);
2022         else
2023                 caps = 0;
2024
2025         memset(sl->e, 0, sizeof(*sl->e));
2026         memcpy(sl->e->mac, nla_data(bss[NL80211_BSS_BSSID]), 6);
2027
2028         if (caps & (1<<1))
2029                 sl->e->mode = IWINFO_OPMODE_ADHOC;
2030         else if (caps & (1<<0))
2031                 sl->e->mode = IWINFO_OPMODE_MASTER;
2032         else
2033                 sl->e->mode = IWINFO_OPMODE_MESHPOINT;
2034
2035         if (caps & (1<<4))
2036                 sl->e->crypto.enabled = 1;
2037
2038         if (bss[NL80211_BSS_FREQUENCY])
2039                 sl->e->channel = nl80211_freq2channel(nla_get_u32(
2040                         bss[NL80211_BSS_FREQUENCY]));
2041
2042         if (bss[NL80211_BSS_INFORMATION_ELEMENTS])
2043                 nl80211_get_scanlist_ie(bss, sl->e);
2044
2045         if (bss[NL80211_BSS_SIGNAL_MBM])
2046         {
2047                 sl->e->signal =
2048                         (uint8_t)((int32_t)nla_get_u32(bss[NL80211_BSS_SIGNAL_MBM]) / 100);
2049
2050                 rssi = sl->e->signal - 0x100;
2051
2052                 if (rssi < -110)
2053                         rssi = -110;
2054                 else if (rssi > -40)
2055                         rssi = -40;
2056
2057                 sl->e->quality = (rssi + 110);
2058                 sl->e->quality_max = 70;
2059         }
2060
2061         if (sl->e->crypto.enabled && !sl->e->crypto.wpa_version)
2062         {
2063                 sl->e->crypto.auth_algs    = IWINFO_AUTH_OPEN | IWINFO_AUTH_SHARED;
2064                 sl->e->crypto.pair_ciphers = IWINFO_CIPHER_WEP40 | IWINFO_CIPHER_WEP104;
2065         }
2066
2067         sl->e++;
2068         sl->len++;
2069
2070         return NL_SKIP;
2071 }
2072
2073 static int nl80211_get_scanlist_nl(const char *ifname, char *buf, int *len)
2074 {
2075         struct nl80211_msg_conveyor *req;
2076         struct nl80211_scanlist sl = { .e = (struct iwinfo_scanlist_entry *)buf };
2077
2078         req = nl80211_msg(ifname, NL80211_CMD_TRIGGER_SCAN, 0);
2079         if (req)
2080         {
2081                 nl80211_send(req, NULL, NULL);
2082                 nl80211_free(req);
2083         }
2084
2085         nl80211_wait("nl80211", "scan", NL80211_CMD_NEW_SCAN_RESULTS);
2086
2087         req = nl80211_msg(ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
2088         if (req)
2089         {
2090                 nl80211_send(req, nl80211_get_scanlist_cb, &sl);
2091                 nl80211_free(req);
2092         }
2093
2094         *len = sl.len * sizeof(struct iwinfo_scanlist_entry);
2095         return *len ? 0 : -1;
2096 }
2097
2098 static int wpasupp_ssid_decode(const char *in, char *out, int outlen)
2099 {
2100 #define hex(x) \
2101         (((x) >= 'a') ? ((x) - 'a' + 10) : \
2102                 (((x) >= 'A') ? ((x) - 'A' + 10) : ((x) - '0')))
2103
2104         int len = 0;
2105
2106         while (*in)
2107         {
2108                 if (len + 1 >= outlen)
2109                         break;
2110
2111                 switch (*in)
2112                 {
2113                 case '\\':
2114                         in++;
2115                         switch (*in)
2116                         {
2117                         case 'n':
2118                                 out[len++] = '\n'; in++;
2119                                 break;
2120
2121                         case 'r':
2122                                 out[len++] = '\r'; in++;
2123                                 break;
2124
2125                         case 't':
2126                                 out[len++] = '\t'; in++;
2127                                 break;
2128
2129                         case 'e':
2130                                 out[len++] = '\033'; in++;
2131                                 break;
2132
2133                         case 'x':
2134                                 if (isxdigit(*(in+1)) && isxdigit(*(in+2)))
2135                                         out[len++] = hex(*(in+1)) * 16 + hex(*(in+2));
2136                                 in += 3;
2137                                 break;
2138
2139                         default:
2140                                 out[len++] = *in++;
2141                                 break;
2142                         }
2143                         break;
2144
2145                 default:
2146                         out[len++] = *in++;
2147                         break;
2148                 }
2149         }
2150
2151         if (outlen > len)
2152                 out[len] = '\0';
2153
2154         return len;
2155 }
2156
2157 static int nl80211_get_scanlist_wpactl(const char *ifname, char *buf, int *len)
2158 {
2159         int sock, qmax, rssi, tries, count = -1, ready = 0;
2160         char *pos, *line, *bssid, *freq, *signal, *flags, *ssid, reply[4096];
2161         struct sockaddr_un local = { 0 };
2162         struct iwinfo_scanlist_entry *e = (struct iwinfo_scanlist_entry *)buf;
2163
2164         sock = nl80211_wpactl_connect(ifname, &local);
2165
2166         if (sock < 0)
2167                 return sock;
2168
2169         send(sock, "ATTACH", 6, 0);
2170         send(sock, "SCAN", 4, 0);
2171
2172         /*
2173          * wait for scan results:
2174          *   nl80211_wpactl_recv() will use a timeout of 256ms and we need to scan
2175          *   72 channels at most. We'll also receive two "OK" messages acknowledging
2176          *   the "ATTACH" and "SCAN" commands and the driver might need a bit extra
2177          *   time to process the results, so try 72 + 2 + 1 times.
2178          */
2179         for (tries = 0; tries < 75; tries++)
2180         {
2181                 if (nl80211_wpactl_recv(sock, reply, sizeof(reply)) <= 0)
2182                         continue;
2183
2184                 /* got an event notification */
2185                 if (reply[0] == '<')
2186                 {
2187                         /* scan results are ready */
2188                         if (strstr(reply, "CTRL-EVENT-SCAN-RESULTS"))
2189                         {
2190                                 /* send "SCAN_RESULTS" command */
2191                                 ready = (send(sock, "SCAN_RESULTS", 12, 0) == 12);
2192                                 break;
2193                         }
2194
2195                         /* is another unrelated event, retry */
2196                         tries--;
2197                 }
2198         }
2199
2200         /* receive and parse scan results if the wait above didn't time out */
2201         if (ready && nl80211_wpactl_recv(sock, reply, sizeof(reply)) > 0)
2202         {
2203                 nl80211_get_quality_max(ifname, &qmax);
2204
2205                 for (line = strtok_r(reply, "\n", &pos);
2206                      line != NULL;
2207                      line = strtok_r(NULL, "\n", &pos))
2208                 {
2209                         /* skip header line */
2210                         if (count < 0)
2211                         {
2212                                 count++;
2213                                 continue;
2214                         }
2215
2216                         bssid  = strtok(line, "\t");
2217                         freq   = strtok(NULL, "\t");
2218                         signal = strtok(NULL, "\t");
2219                         flags  = strtok(NULL, "\t");
2220                         ssid   = strtok(NULL, "\n");
2221
2222                         if (!bssid || !freq || !signal || !flags || !ssid)
2223                                 continue;
2224
2225                         /* BSSID */
2226                         e->mac[0] = strtol(&bssid[0],  NULL, 16);
2227                         e->mac[1] = strtol(&bssid[3],  NULL, 16);
2228                         e->mac[2] = strtol(&bssid[6],  NULL, 16);
2229                         e->mac[3] = strtol(&bssid[9],  NULL, 16);
2230                         e->mac[4] = strtol(&bssid[12], NULL, 16);
2231                         e->mac[5] = strtol(&bssid[15], NULL, 16);
2232
2233                         /* SSID */
2234                         wpasupp_ssid_decode(ssid, e->ssid, sizeof(e->ssid));
2235
2236                         /* Mode */
2237                         if (strstr(flags, "[MESH]"))
2238                                 e->mode = IWINFO_OPMODE_MESHPOINT;
2239                         else if (strstr(flags, "[IBSS]"))
2240                                 e->mode = IWINFO_OPMODE_ADHOC;
2241                         else
2242                                 e->mode = IWINFO_OPMODE_MASTER;
2243
2244                         /* Channel */
2245                         e->channel = nl80211_freq2channel(atoi(freq));
2246
2247                         /* Signal */
2248                         rssi = atoi(signal);
2249                         e->signal = rssi;
2250
2251                         /* Quality */
2252                         if (rssi < 0)
2253                         {
2254                                 /* The cfg80211 wext compat layer assumes a signal range
2255                                  * of -110 dBm to -40 dBm, the quality value is derived
2256                                  * by adding 110 to the signal level */
2257                                 if (rssi < -110)
2258                                         rssi = -110;
2259                                 else if (rssi > -40)
2260                                         rssi = -40;
2261
2262                                 e->quality = (rssi + 110);
2263                         }
2264                         else
2265                         {
2266                                 e->quality = rssi;
2267                         }
2268
2269                         /* Max. Quality */
2270                         e->quality_max = qmax;
2271
2272                         /* Crypto */
2273                         nl80211_get_scancrypto(flags, &e->crypto);
2274
2275                         count++;
2276                         e++;
2277                 }
2278
2279                 *len = count * sizeof(struct iwinfo_scanlist_entry);
2280         }
2281
2282         close(sock);
2283         unlink(local.sun_path);
2284
2285         return (count >= 0) ? 0 : -1;
2286 }
2287
2288 static int nl80211_get_scanlist(const char *ifname, char *buf, int *len)
2289 {
2290         char *res;
2291         int rv, mode;
2292
2293         *len = 0;
2294
2295         /* Got a radioX pseudo interface, find some interface on it or create one */
2296         if (!strncmp(ifname, "radio", 5))
2297         {
2298                 /* Reuse existing interface */
2299                 if ((res = nl80211_phy2ifname(ifname)) != NULL)
2300                 {
2301                         return nl80211_get_scanlist(res, buf, len);
2302                 }
2303
2304                 /* Need to spawn a temporary iface for scanning */
2305                 else if ((res = nl80211_ifadd(ifname)) != NULL)
2306                 {
2307                         rv = nl80211_get_scanlist(res, buf, len);
2308                         nl80211_ifdel(res);
2309                         return rv;
2310                 }
2311         }
2312
2313         /* WPA supplicant */
2314         if (!nl80211_get_scanlist_wpactl(ifname, buf, len))
2315         {
2316                 return 0;
2317         }
2318
2319         /* station / ad-hoc / monitor scan */
2320         else if (!nl80211_get_mode(ifname, &mode) &&
2321                  (mode == IWINFO_OPMODE_ADHOC ||
2322                   mode == IWINFO_OPMODE_MASTER ||
2323                   mode == IWINFO_OPMODE_CLIENT ||
2324                   mode == IWINFO_OPMODE_MONITOR) &&
2325                  iwinfo_ifup(ifname))
2326         {
2327                 return nl80211_get_scanlist_nl(ifname, buf, len);
2328         }
2329
2330         /* AP scan */
2331         else
2332         {
2333                 /* Got a temp interface, don't create yet another one */
2334                 if (!strncmp(ifname, "tmp.", 4))
2335                 {
2336                         if (!iwinfo_ifup(ifname))
2337                                 return -1;
2338
2339                         rv = nl80211_get_scanlist_nl(ifname, buf, len);
2340                         iwinfo_ifdown(ifname);
2341                         return rv;
2342                 }
2343
2344                 /* Spawn a new scan interface */
2345                 else
2346                 {
2347                         if (!(res = nl80211_ifadd(ifname)))
2348                                 return -1;
2349
2350                         iwinfo_ifmac(res);
2351
2352                         /* if we can take the new interface up, the driver supports an
2353                          * additional interface and there's no need to tear down the ap */
2354                         if (iwinfo_ifup(res))
2355                         {
2356                                 rv = nl80211_get_scanlist_nl(res, buf, len);
2357                                 iwinfo_ifdown(res);
2358                         }
2359
2360                         /* driver cannot create secondary interface, take down ap
2361                          * during scan */
2362                         else if (iwinfo_ifdown(ifname) && iwinfo_ifup(res))
2363                         {
2364                                 rv = nl80211_get_scanlist_nl(res, buf, len);
2365                                 iwinfo_ifdown(res);
2366                                 iwinfo_ifup(ifname);
2367                                 nl80211_hostapd_hup(ifname);
2368                         }
2369
2370                         nl80211_ifdel(res);
2371                         return rv;
2372                 }
2373         }
2374
2375         return -1;
2376 }
2377
2378 static int nl80211_get_freqlist_cb(struct nl_msg *msg, void *arg)
2379 {
2380         int bands_remain, freqs_remain;
2381
2382         struct nl80211_array_buf *arr = arg;
2383         struct iwinfo_freqlist_entry *e = arr->buf;
2384
2385         struct nlattr **attr = nl80211_parse(msg);
2386         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
2387         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
2388         struct nlattr *band, *freq;
2389
2390         nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
2391         {
2392                 nla_parse(bands, NL80211_BAND_ATTR_MAX,
2393                           nla_data(band), nla_len(band), NULL);
2394
2395                 nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS], freqs_remain)
2396                 {
2397                         nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
2398                                   nla_data(freq), nla_len(freq), NULL);
2399
2400                         if (!freqs[NL80211_FREQUENCY_ATTR_FREQ] ||
2401                             freqs[NL80211_FREQUENCY_ATTR_DISABLED])
2402                                 continue;
2403
2404                         e->mhz = nla_get_u32(freqs[NL80211_FREQUENCY_ATTR_FREQ]);
2405                         e->channel = nl80211_freq2channel(e->mhz);
2406
2407                         e->restricted = (
2408                                 freqs[NL80211_FREQUENCY_ATTR_NO_IR] &&
2409                                 !freqs[NL80211_FREQUENCY_ATTR_RADAR]
2410                         ) ? 1 : 0;
2411
2412                         e++;
2413                         arr->count++;
2414                 }
2415         }
2416
2417         return NL_SKIP;
2418 }
2419
2420 static int nl80211_get_freqlist(const char *ifname, char *buf, int *len)
2421 {
2422         struct nl80211_msg_conveyor *req;
2423         struct nl80211_array_buf arr = { .buf = buf, .count = 0 };
2424
2425         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2426         if (req)
2427         {
2428                 nl80211_send(req, nl80211_get_freqlist_cb, &arr);
2429                 nl80211_free(req);
2430         }
2431
2432         if (arr.count > 0)
2433         {
2434                 *len = arr.count * sizeof(struct iwinfo_freqlist_entry);
2435                 return 0;
2436         }
2437
2438         return -1;
2439 }
2440
2441 static int nl80211_get_country_cb(struct nl_msg *msg, void *arg)
2442 {
2443         char *buf = arg;
2444         struct nlattr **attr = nl80211_parse(msg);
2445
2446         if (attr[NL80211_ATTR_REG_ALPHA2])
2447                 memcpy(buf, nla_data(attr[NL80211_ATTR_REG_ALPHA2]), 2);
2448         else
2449                 buf[0] = 0;
2450
2451         return NL_SKIP;
2452 }
2453
2454 static int nl80211_get_country(const char *ifname, char *buf)
2455 {
2456         int rv = -1;
2457         struct nl80211_msg_conveyor *req;
2458
2459         req = nl80211_msg(ifname, NL80211_CMD_GET_REG, 0);
2460         if (req)
2461         {
2462                 nl80211_send(req, nl80211_get_country_cb, buf);
2463                 nl80211_free(req);
2464
2465                 if (buf[0])
2466                         rv = 0;
2467         }
2468
2469         return rv;
2470 }
2471
2472 static int nl80211_get_countrylist(const char *ifname, char *buf, int *len)
2473 {
2474         int count;
2475         struct iwinfo_country_entry *e = (struct iwinfo_country_entry *)buf;
2476         const struct iwinfo_iso3166_label *l;
2477
2478         for (l = IWINFO_ISO3166_NAMES, count = 0; l->iso3166; l++, e++, count++)
2479         {
2480                 e->iso3166 = l->iso3166;
2481                 e->ccode[0] = (l->iso3166 / 256);
2482                 e->ccode[1] = (l->iso3166 % 256);
2483                 e->ccode[2] = 0;
2484         }
2485
2486         *len = (count * sizeof(struct iwinfo_country_entry));
2487         return 0;
2488 }
2489
2490
2491 struct nl80211_modes
2492 {
2493         bool ok;
2494         uint32_t hw;
2495         uint32_t ht;
2496 };
2497
2498 static int nl80211_get_modelist_cb(struct nl_msg *msg, void *arg)
2499 {
2500         struct nl80211_modes *m = arg;
2501         int bands_remain, freqs_remain;
2502         uint16_t caps = 0;
2503         uint32_t vht_caps = 0;
2504         struct nlattr **attr = nl80211_parse(msg);
2505         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
2506         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
2507         struct nlattr *band, *freq;
2508
2509         if (attr[NL80211_ATTR_WIPHY_BANDS])
2510         {
2511                 nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
2512                 {
2513                         nla_parse(bands, NL80211_BAND_ATTR_MAX,
2514                                   nla_data(band), nla_len(band), NULL);
2515
2516                         if (bands[NL80211_BAND_ATTR_HT_CAPA])
2517                                 caps = nla_get_u16(bands[NL80211_BAND_ATTR_HT_CAPA]);
2518
2519                         /* Treat any nonzero capability as 11n */
2520                         if (caps > 0)
2521                         {
2522                                 m->hw |= IWINFO_80211_N;
2523                                 m->ht |= IWINFO_HTMODE_HT20;
2524
2525                                 if (caps & (1 << 1))
2526                                         m->ht |= IWINFO_HTMODE_HT40;
2527                         }
2528
2529                         nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS],
2530                                             freqs_remain)
2531                         {
2532                                 nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
2533                                           nla_data(freq), nla_len(freq), NULL);
2534
2535                                 if (!freqs[NL80211_FREQUENCY_ATTR_FREQ])
2536                                         continue;
2537
2538                                 if (nla_get_u32(freqs[NL80211_FREQUENCY_ATTR_FREQ]) < 2485)
2539                                 {
2540                                         m->hw |= IWINFO_80211_B;
2541                                         m->hw |= IWINFO_80211_G;
2542                                 }
2543                                 else if (bands[NL80211_BAND_ATTR_VHT_CAPA])
2544                                 {
2545                                         vht_caps = nla_get_u32(bands[NL80211_BAND_ATTR_VHT_CAPA]);
2546
2547                                         /* Treat any nonzero capability as 11ac */
2548                                         if (vht_caps > 0)
2549                                         {
2550                                                 m->hw |= IWINFO_80211_AC;
2551                                                 m->ht |= IWINFO_HTMODE_VHT20 | IWINFO_HTMODE_VHT40 | IWINFO_HTMODE_VHT80;
2552
2553                                                 switch ((vht_caps >> 2) & 3)
2554                                                 {
2555                                                 case 2:
2556                                                         m->ht |= IWINFO_HTMODE_VHT80_80;
2557                                                         /* fall through */
2558
2559                                                 case 1:
2560                                                         m->ht |= IWINFO_HTMODE_VHT160;
2561                                                 }
2562                                         }
2563                                 }
2564                                 else if (!(m->hw & IWINFO_80211_AC))
2565                                 {
2566                                         m->hw |= IWINFO_80211_A;
2567                                 }
2568                         }
2569                 }
2570
2571                 m->ok = 1;
2572         }
2573
2574         return NL_SKIP;
2575 }
2576
2577 static int nl80211_get_hwmodelist(const char *ifname, int *buf)
2578 {
2579         struct nl80211_msg_conveyor *req;
2580         struct nl80211_modes m = { 0 };
2581
2582         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2583         if (req)
2584         {
2585                 nl80211_send(req, nl80211_get_modelist_cb, &m);
2586                 nl80211_free(req);
2587         }
2588
2589         if (m.ok)
2590         {
2591                 *buf = m.hw;
2592                 return 0;
2593         }
2594
2595         return -1;
2596 }
2597
2598 static int nl80211_get_htmodelist(const char *ifname, int *buf)
2599 {
2600         struct nl80211_msg_conveyor *req;
2601         struct nl80211_modes m = { 0 };
2602
2603         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2604         if (req)
2605         {
2606                 nl80211_send(req, nl80211_get_modelist_cb, &m);
2607                 nl80211_free(req);
2608         }
2609
2610         if (m.ok)
2611         {
2612                 *buf = m.ht;
2613                 return 0;
2614         }
2615
2616         return -1;
2617 }
2618
2619
2620 static int nl80211_get_ifcomb_cb(struct nl_msg *msg, void *arg)
2621 {
2622         struct nlattr **attr = nl80211_parse(msg);
2623         struct nlattr *comb;
2624         int *ret = arg;
2625         int comb_rem, limit_rem, mode_rem;
2626
2627         *ret = 0;
2628         if (!attr[NL80211_ATTR_INTERFACE_COMBINATIONS])
2629                 return NL_SKIP;
2630
2631         nla_for_each_nested(comb, attr[NL80211_ATTR_INTERFACE_COMBINATIONS], comb_rem)
2632         {
2633                 static struct nla_policy iface_combination_policy[NUM_NL80211_IFACE_COMB] = {
2634                         [NL80211_IFACE_COMB_LIMITS] = { .type = NLA_NESTED },
2635                         [NL80211_IFACE_COMB_MAXNUM] = { .type = NLA_U32 },
2636                 };
2637                 struct nlattr *tb_comb[NUM_NL80211_IFACE_COMB+1];
2638                 static struct nla_policy iface_limit_policy[NUM_NL80211_IFACE_LIMIT] = {
2639                         [NL80211_IFACE_LIMIT_TYPES] = { .type = NLA_NESTED },
2640                         [NL80211_IFACE_LIMIT_MAX] = { .type = NLA_U32 },
2641                 };
2642                 struct nlattr *tb_limit[NUM_NL80211_IFACE_LIMIT+1];
2643                 struct nlattr *limit;
2644
2645                 nla_parse_nested(tb_comb, NUM_NL80211_IFACE_COMB, comb, iface_combination_policy);
2646
2647                 if (!tb_comb[NL80211_IFACE_COMB_LIMITS])
2648                         continue;
2649
2650                 nla_for_each_nested(limit, tb_comb[NL80211_IFACE_COMB_LIMITS], limit_rem)
2651                 {
2652                         struct nlattr *mode;
2653
2654                         nla_parse_nested(tb_limit, NUM_NL80211_IFACE_LIMIT, limit, iface_limit_policy);
2655
2656                         if (!tb_limit[NL80211_IFACE_LIMIT_TYPES] ||
2657                             !tb_limit[NL80211_IFACE_LIMIT_MAX])
2658                                 continue;
2659
2660                         if (nla_get_u32(tb_limit[NL80211_IFACE_LIMIT_MAX]) < 2)
2661                                 continue;
2662
2663                         nla_for_each_nested(mode, tb_limit[NL80211_IFACE_LIMIT_TYPES], mode_rem) {
2664                                 if (nla_type(mode) == NL80211_IFTYPE_AP)
2665                                         *ret = 1;
2666                         }
2667                 }
2668         }
2669
2670         return NL_SKIP;
2671 }
2672
2673 static int nl80211_get_mbssid_support(const char *ifname, int *buf)
2674 {
2675         struct nl80211_msg_conveyor *req;
2676
2677         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2678         if (!req)
2679                 return -1;
2680
2681         nl80211_send(req, nl80211_get_ifcomb_cb, buf);
2682         nl80211_free(req);
2683         return 0;
2684 }
2685
2686 static int nl80211_get_hardware_id(const char *ifname, char *buf)
2687 {
2688         int rv;
2689         char *res;
2690
2691         /* Got a radioX pseudo interface, find some interface on it or create one */
2692         if (!strncmp(ifname, "radio", 5))
2693         {
2694                 /* Reuse existing interface */
2695                 if ((res = nl80211_phy2ifname(ifname)) != NULL)
2696                 {
2697                         rv = wext_ops.hardware_id(res, buf);
2698                 }
2699
2700                 /* Need to spawn a temporary iface for finding IDs */
2701                 else if ((res = nl80211_ifadd(ifname)) != NULL)
2702                 {
2703                         rv = wext_ops.hardware_id(res, buf);
2704                         nl80211_ifdel(res);
2705                 }
2706         }
2707         else
2708         {
2709                 rv = wext_ops.hardware_id(ifname, buf);
2710         }
2711
2712         /* Failed to obtain hardware IDs, search board config */
2713         if (rv)
2714         {
2715                 rv = iwinfo_hardware_id_from_mtd((struct iwinfo_hardware_id *)buf);
2716         }
2717
2718         return rv;
2719 }
2720
2721 static const struct iwinfo_hardware_entry *
2722 nl80211_get_hardware_entry(const char *ifname)
2723 {
2724         struct iwinfo_hardware_id id;
2725
2726         if (nl80211_get_hardware_id(ifname, (char *)&id))
2727                 return NULL;
2728
2729         return iwinfo_hardware(&id);
2730 }
2731
2732 static int nl80211_get_hardware_name(const char *ifname, char *buf)
2733 {
2734         const struct iwinfo_hardware_entry *hw;
2735
2736         if (!(hw = nl80211_get_hardware_entry(ifname)))
2737                 sprintf(buf, "Generic MAC80211");
2738         else
2739                 sprintf(buf, "%s %s", hw->vendor_name, hw->device_name);
2740
2741         return 0;
2742 }
2743
2744 static int nl80211_get_txpower_offset(const char *ifname, int *buf)
2745 {
2746         const struct iwinfo_hardware_entry *hw;
2747
2748         if (!(hw = nl80211_get_hardware_entry(ifname)))
2749                 return -1;
2750
2751         *buf = hw->txpower_offset;
2752         return 0;
2753 }
2754
2755 static int nl80211_get_frequency_offset(const char *ifname, int *buf)
2756 {
2757         const struct iwinfo_hardware_entry *hw;
2758
2759         if (!(hw = nl80211_get_hardware_entry(ifname)))
2760                 return -1;
2761
2762         *buf = hw->frequency_offset;
2763         return 0;
2764 }
2765
2766 static int nl80211_lookup_phyname(const char *section, char *buf)
2767 {
2768         int idx;
2769
2770         if ((idx = nl80211_phy_idx_from_uci(section)) < 0)
2771                 return -1;
2772
2773         sprintf(buf, "phy%d", idx);
2774         return 0;
2775 }
2776
2777 const struct iwinfo_ops nl80211_ops = {
2778         .name             = "nl80211",
2779         .probe            = nl80211_probe,
2780         .channel          = nl80211_get_channel,
2781         .frequency        = nl80211_get_frequency,
2782         .frequency_offset = nl80211_get_frequency_offset,
2783         .txpower          = nl80211_get_txpower,
2784         .txpower_offset   = nl80211_get_txpower_offset,
2785         .bitrate          = nl80211_get_bitrate,
2786         .signal           = nl80211_get_signal,
2787         .noise            = nl80211_get_noise,
2788         .quality          = nl80211_get_quality,
2789         .quality_max      = nl80211_get_quality_max,
2790         .mbssid_support   = nl80211_get_mbssid_support,
2791         .hwmodelist       = nl80211_get_hwmodelist,
2792         .htmodelist       = nl80211_get_htmodelist,
2793         .mode             = nl80211_get_mode,
2794         .ssid             = nl80211_get_ssid,
2795         .bssid            = nl80211_get_bssid,
2796         .country          = nl80211_get_country,
2797         .hardware_id      = nl80211_get_hardware_id,
2798         .hardware_name    = nl80211_get_hardware_name,
2799         .encryption       = nl80211_get_encryption,
2800         .phyname          = nl80211_get_phyname,
2801         .assoclist        = nl80211_get_assoclist,
2802         .txpwrlist        = nl80211_get_txpwrlist,
2803         .scanlist         = nl80211_get_scanlist,
2804         .freqlist         = nl80211_get_freqlist,
2805         .countrylist      = nl80211_get_countrylist,
2806         .lookup_phy       = nl80211_lookup_phyname,
2807         .close            = nl80211_close
2808 };