nl80211: fix possible fd leak in nl80211_hostapd_hup()
[project/iwinfo.git] / iwinfo_nl80211.c
1 /*
2  * iwinfo - Wireless Information Library - NL80211 Backend
3  *
4  *   Copyright (C) 2010-2013 Jo-Philipp Wich <xm@subsignal.org>
5  *
6  * The iwinfo library is free software: you can redistribute it and/or
7  * modify it under the terms of the GNU General Public License version 2
8  * as published by the Free Software Foundation.
9  *
10  * The iwinfo library is distributed in the hope that it will be useful,
11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
13  * See the GNU General Public License for more details.
14  *
15  * You should have received a copy of the GNU General Public License along
16  * with the iwinfo library. If not, see http://www.gnu.org/licenses/.
17  *
18  * The signal handling code is derived from the official madwifi tools,
19  * wlanconfig.c in particular. The encryption property handling was
20  * inspired by the hostapd madwifi driver.
21  *
22  * Parts of this code are derived from the Linux iw utility.
23  */
24
25 #include <limits.h>
26 #include <glob.h>
27 #include <fnmatch.h>
28 #include <stdarg.h>
29
30 #include "iwinfo_nl80211.h"
31
32 #define min(x, y) ((x) < (y)) ? (x) : (y)
33
34 #define BIT(x) (1ULL<<(x))
35
36 static struct nl80211_state *nls = NULL;
37
38 static void nl80211_close(void)
39 {
40         if (nls)
41         {
42                 if (nls->nlctrl)
43                         genl_family_put(nls->nlctrl);
44
45                 if (nls->nl80211)
46                         genl_family_put(nls->nl80211);
47
48                 if (nls->nl_sock)
49                         nl_socket_free(nls->nl_sock);
50
51                 if (nls->nl_cache)
52                         nl_cache_free(nls->nl_cache);
53
54                 free(nls);
55                 nls = NULL;
56         }
57 }
58
59 static int nl80211_init(void)
60 {
61         int err, fd;
62
63         if (!nls)
64         {
65                 nls = malloc(sizeof(struct nl80211_state));
66                 if (!nls) {
67                         err = -ENOMEM;
68                         goto err;
69                 }
70
71                 memset(nls, 0, sizeof(*nls));
72
73                 nls->nl_sock = nl_socket_alloc();
74                 if (!nls->nl_sock) {
75                         err = -ENOMEM;
76                         goto err;
77                 }
78
79                 if (genl_connect(nls->nl_sock)) {
80                         err = -ENOLINK;
81                         goto err;
82                 }
83
84                 fd = nl_socket_get_fd(nls->nl_sock);
85                 if (fcntl(fd, F_SETFD, fcntl(fd, F_GETFD) | FD_CLOEXEC) < 0) {
86                         err = -EINVAL;
87                         goto err;
88                 }
89
90                 if (genl_ctrl_alloc_cache(nls->nl_sock, &nls->nl_cache)) {
91                         err = -ENOMEM;
92                         goto err;
93                 }
94
95                 nls->nl80211 = genl_ctrl_search_by_name(nls->nl_cache, "nl80211");
96                 if (!nls->nl80211) {
97                         err = -ENOENT;
98                         goto err;
99                 }
100
101                 nls->nlctrl = genl_ctrl_search_by_name(nls->nl_cache, "nlctrl");
102                 if (!nls->nlctrl) {
103                         err = -ENOENT;
104                         goto err;
105                 }
106         }
107
108         return 0;
109
110
111 err:
112         nl80211_close();
113         return err;
114 }
115
116 static int nl80211_readint(const char *path)
117 {
118         int fd;
119         int rv = -1;
120         char buffer[16];
121
122         if ((fd = open(path, O_RDONLY)) > -1)
123         {
124                 if (read(fd, buffer, sizeof(buffer)) > 0)
125                         rv = atoi(buffer);
126
127                 close(fd);
128         }
129
130         return rv;
131 }
132
133 static int nl80211_readstr(const char *path, char *buffer, int length)
134 {
135         int fd;
136         int rv = -1;
137
138         if ((fd = open(path, O_RDONLY)) > -1)
139         {
140                 if ((rv = read(fd, buffer, length - 1)) > 0)
141                 {
142                         if (buffer[rv - 1] == '\n')
143                                 rv--;
144
145                         buffer[rv] = 0;
146                 }
147
148                 close(fd);
149         }
150
151         return rv;
152 }
153
154
155 static int nl80211_msg_error(struct sockaddr_nl *nla,
156         struct nlmsgerr *err, void *arg)
157 {
158         int *ret = arg;
159         *ret = err->error;
160         return NL_STOP;
161 }
162
163 static int nl80211_msg_finish(struct nl_msg *msg, void *arg)
164 {
165         int *ret = arg;
166         *ret = 0;
167         return NL_SKIP;
168 }
169
170 static int nl80211_msg_ack(struct nl_msg *msg, void *arg)
171 {
172         int *ret = arg;
173         *ret = 0;
174         return NL_STOP;
175 }
176
177 static int nl80211_msg_response(struct nl_msg *msg, void *arg)
178 {
179         return NL_SKIP;
180 }
181
182 static void nl80211_free(struct nl80211_msg_conveyor *cv)
183 {
184         if (cv)
185         {
186                 if (cv->cb)
187                         nl_cb_put(cv->cb);
188
189                 if (cv->msg)
190                         nlmsg_free(cv->msg);
191
192                 cv->cb  = NULL;
193                 cv->msg = NULL;
194         }
195 }
196
197 static struct nl80211_msg_conveyor * nl80211_new(struct genl_family *family,
198                                                  int cmd, int flags)
199 {
200         static struct nl80211_msg_conveyor cv;
201
202         struct nl_msg *req = NULL;
203         struct nl_cb *cb = NULL;
204
205         req = nlmsg_alloc();
206         if (!req)
207                 goto err;
208
209         cb = nl_cb_alloc(NL_CB_DEFAULT);
210         if (!cb)
211                 goto err;
212
213         genlmsg_put(req, 0, 0, genl_family_get_id(family), 0, flags, cmd, 0);
214
215         cv.msg = req;
216         cv.cb  = cb;
217
218         return &cv;
219
220 err:
221         if (cb)
222                 nl_cb_put(cb);
223
224         if (req)
225                 nlmsg_free(req);
226
227         return NULL;
228 }
229
230 static struct nl80211_msg_conveyor * nl80211_ctl(int cmd, int flags)
231 {
232         if (nl80211_init() < 0)
233                 return NULL;
234
235         return nl80211_new(nls->nlctrl, cmd, flags);
236 }
237
238 static int nl80211_phy_idx_from_uci_path(struct uci_section *s)
239 {
240         const char *opt;
241         char buf[128];
242         int idx = -1;
243         glob_t gl;
244
245         opt = uci_lookup_option_string(uci_ctx, s, "path");
246         if (!opt)
247                 return -1;
248
249         snprintf(buf, sizeof(buf), "/sys/devices/%s/ieee80211/*/index", opt);  /**/
250         if (glob(buf, 0, NULL, &gl))
251                 return -1;
252
253         if (gl.gl_pathc > 0)
254                 idx = nl80211_readint(gl.gl_pathv[0]);
255
256         globfree(&gl);
257
258         return idx;
259 }
260
261 static int nl80211_phy_idx_from_uci_macaddr(struct uci_section *s)
262 {
263         const char *opt;
264         char buf[128];
265         int i, idx = -1;
266         glob_t gl;
267
268         opt = uci_lookup_option_string(uci_ctx, s, "macaddr");
269         if (!opt)
270                 return -1;
271
272         snprintf(buf, sizeof(buf), "/sys/class/ieee80211/*");   /**/
273         if (glob(buf, 0, NULL, &gl))
274                 return -1;
275
276         for (i = 0; i < gl.gl_pathc; i++)
277         {
278                 snprintf(buf, sizeof(buf), "%s/macaddress", gl.gl_pathv[i]);
279                 if (nl80211_readstr(buf, buf, sizeof(buf)) <= 0)
280                         continue;
281
282                 if (fnmatch(opt, buf, FNM_CASEFOLD))
283                         continue;
284
285                 snprintf(buf, sizeof(buf), "%s/index", gl.gl_pathv[i]);
286                 if ((idx = nl80211_readint(buf)) > -1)
287                         break;
288         }
289
290         globfree(&gl);
291
292         return idx;
293 }
294
295 static int nl80211_phy_idx_from_uci_phy(struct uci_section *s)
296 {
297         const char *opt;
298         char buf[128];
299
300         opt = uci_lookup_option_string(uci_ctx, s, "phy");
301         if (!opt)
302                 return -1;
303
304         snprintf(buf, sizeof(buf), "/sys/class/ieee80211/%s/index", opt);
305         return nl80211_readint(buf);
306 }
307
308 static int nl80211_phy_idx_from_uci(const char *name)
309 {
310         struct uci_section *s;
311         int idx = -1;
312
313         s = iwinfo_uci_get_radio(name, "mac80211");
314         if (!s)
315                 goto free;
316
317         idx = nl80211_phy_idx_from_uci_path(s);
318
319         if (idx < 0)
320                 idx = nl80211_phy_idx_from_uci_macaddr(s);
321
322         if (idx < 0)
323                 idx = nl80211_phy_idx_from_uci_phy(s);
324
325 free:
326         iwinfo_uci_free();
327         return idx;
328 }
329
330 static struct nl80211_msg_conveyor * nl80211_msg(const char *ifname,
331                                                  int cmd, int flags)
332 {
333         int ifidx = -1, phyidx = -1;
334         struct nl80211_msg_conveyor *cv;
335
336         if (ifname == NULL)
337                 return NULL;
338
339         if (nl80211_init() < 0)
340                 return NULL;
341
342         if (!strncmp(ifname, "phy", 3))
343                 phyidx = atoi(&ifname[3]);
344         else if (!strncmp(ifname, "radio", 5))
345                 phyidx = nl80211_phy_idx_from_uci(ifname);
346         else if (!strncmp(ifname, "mon.", 4))
347                 ifidx = if_nametoindex(&ifname[4]);
348         else
349                 ifidx = if_nametoindex(ifname);
350
351         /* Valid ifidx must be greater than 0 */
352         if ((ifidx <= 0) && (phyidx < 0))
353                 return NULL;
354
355         cv = nl80211_new(nls->nl80211, cmd, flags);
356         if (!cv)
357                 return NULL;
358
359         if (ifidx > -1)
360                 NLA_PUT_U32(cv->msg, NL80211_ATTR_IFINDEX, ifidx);
361
362         if (phyidx > -1)
363                 NLA_PUT_U32(cv->msg, NL80211_ATTR_WIPHY, phyidx);
364
365         return cv;
366
367 nla_put_failure:
368         nl80211_free(cv);
369         return NULL;
370 }
371
372 static struct nl80211_msg_conveyor * nl80211_send(
373         struct nl80211_msg_conveyor *cv,
374         int (*cb_func)(struct nl_msg *, void *), void *cb_arg
375 ) {
376         static struct nl80211_msg_conveyor rcv;
377         int err = 1;
378
379         if (cb_func)
380                 nl_cb_set(cv->cb, NL_CB_VALID, NL_CB_CUSTOM, cb_func, cb_arg);
381         else
382                 nl_cb_set(cv->cb, NL_CB_VALID, NL_CB_CUSTOM, nl80211_msg_response, &rcv);
383
384         if (nl_send_auto_complete(nls->nl_sock, cv->msg) < 0)
385                 goto err;
386
387         nl_cb_err(cv->cb,               NL_CB_CUSTOM, nl80211_msg_error,  &err);
388         nl_cb_set(cv->cb, NL_CB_FINISH, NL_CB_CUSTOM, nl80211_msg_finish, &err);
389         nl_cb_set(cv->cb, NL_CB_ACK,    NL_CB_CUSTOM, nl80211_msg_ack,    &err);
390
391         while (err > 0)
392                 nl_recvmsgs(nls->nl_sock, cv->cb);
393
394         return &rcv;
395
396 err:
397         nl_cb_put(cv->cb);
398         nlmsg_free(cv->msg);
399
400         return NULL;
401 }
402
403 static struct nlattr ** nl80211_parse(struct nl_msg *msg)
404 {
405         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
406         static struct nlattr *attr[NL80211_ATTR_MAX + 1];
407
408         nla_parse(attr, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
409                   genlmsg_attrlen(gnlh, 0), NULL);
410
411         return attr;
412 }
413
414
415 static int nl80211_subscribe_cb(struct nl_msg *msg, void *arg)
416 {
417         struct nl80211_group_conveyor *cv = arg;
418
419         struct nlattr **attr = nl80211_parse(msg);
420         struct nlattr *mgrpinfo[CTRL_ATTR_MCAST_GRP_MAX + 1];
421         struct nlattr *mgrp;
422         int mgrpidx;
423
424         if (!attr[CTRL_ATTR_MCAST_GROUPS])
425                 return NL_SKIP;
426
427         nla_for_each_nested(mgrp, attr[CTRL_ATTR_MCAST_GROUPS], mgrpidx)
428         {
429                 nla_parse(mgrpinfo, CTRL_ATTR_MCAST_GRP_MAX,
430                           nla_data(mgrp), nla_len(mgrp), NULL);
431
432                 if (mgrpinfo[CTRL_ATTR_MCAST_GRP_ID] &&
433                     mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME] &&
434                     !strncmp(nla_data(mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME]),
435                              cv->name, nla_len(mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME])))
436                 {
437                         cv->id = nla_get_u32(mgrpinfo[CTRL_ATTR_MCAST_GRP_ID]);
438                         break;
439                 }
440         }
441
442         return NL_SKIP;
443 }
444
445 static int nl80211_subscribe(const char *family, const char *group)
446 {
447         struct nl80211_group_conveyor cv = { .name = group, .id = -ENOENT };
448         struct nl80211_msg_conveyor *req;
449
450         req = nl80211_ctl(CTRL_CMD_GETFAMILY, 0);
451         if (req)
452         {
453                 NLA_PUT_STRING(req->msg, CTRL_ATTR_FAMILY_NAME, family);
454                 nl80211_send(req, nl80211_subscribe_cb, &cv);
455
456 nla_put_failure:
457                 nl80211_free(req);
458         }
459
460         return nl_socket_add_membership(nls->nl_sock, cv.id);
461 }
462
463
464 static int nl80211_wait_cb(struct nl_msg *msg, void *arg)
465 {
466         struct nl80211_event_conveyor *cv = arg;
467         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
468
469         if (gnlh->cmd == cv->wait)
470                 cv->recv = gnlh->cmd;
471
472         return NL_SKIP;
473 }
474
475 static int nl80211_wait_seq_check(struct nl_msg *msg, void *arg)
476 {
477         return NL_OK;
478 }
479
480 static int nl80211_wait(const char *family, const char *group, int cmd)
481 {
482         struct nl80211_event_conveyor cv = { .wait = cmd };
483         struct nl_cb *cb;
484
485         if (nl80211_subscribe(family, group))
486                 return -ENOENT;
487
488         cb = nl_cb_alloc(NL_CB_DEFAULT);
489
490         if (!cb)
491                 return -ENOMEM;
492
493         nl_cb_set(cb, NL_CB_SEQ_CHECK, NL_CB_CUSTOM, nl80211_wait_seq_check, NULL);
494         nl_cb_set(cb, NL_CB_VALID,     NL_CB_CUSTOM, nl80211_wait_cb,        &cv );
495
496         while (!cv.recv)
497                 nl_recvmsgs(nls->nl_sock, cb);
498
499         nl_cb_put(cb);
500
501         return 0;
502 }
503
504
505 static int nl80211_freq2channel(int freq)
506 {
507         if (freq == 2484)
508                 return 14;
509         else if (freq < 2484)
510                 return (freq - 2407) / 5;
511         else if (freq >= 4910 && freq <= 4980)
512                 return (freq - 4000) / 5;
513         else
514                 return (freq - 5000) / 5;
515 }
516
517 static int nl80211_channel2freq(int channel, const char *band)
518 {
519         if (!band || band[0] != 'a')
520         {
521                 if (channel == 14)
522                         return 2484;
523                 else if (channel < 14)
524                         return (channel * 5) + 2407;
525         }
526         else
527         {
528                 if (channel >= 182 && channel <= 196)
529                         return (channel * 5) + 4000;
530                 else
531                         return (channel * 5) + 5000;
532         }
533
534         return 0;
535 }
536
537 static int nl80211_ifname2phy_cb(struct nl_msg *msg, void *arg)
538 {
539         char *buf = arg;
540         struct nlattr **attr = nl80211_parse(msg);
541
542         if (attr[NL80211_ATTR_WIPHY_NAME])
543                 memcpy(buf, nla_data(attr[NL80211_ATTR_WIPHY_NAME]),
544                        nla_len(attr[NL80211_ATTR_WIPHY_NAME]));
545         else
546                 buf[0] = 0;
547
548         return NL_SKIP;
549 }
550
551 static char * nl80211_ifname2phy(const char *ifname)
552 {
553         static char phy[32] = { 0 };
554         struct nl80211_msg_conveyor *req;
555
556         memset(phy, 0, sizeof(phy));
557
558         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
559         if (req)
560         {
561                 nl80211_send(req, nl80211_ifname2phy_cb, phy);
562                 nl80211_free(req);
563         }
564
565         return phy[0] ? phy : NULL;
566 }
567
568 static char * nl80211_phy2ifname(const char *ifname)
569 {
570         int ifidx = -1, cifidx = -1, phyidx = -1;
571         char buffer[64];
572         static char nif[IFNAMSIZ] = { 0 };
573
574         DIR *d;
575         struct dirent *e;
576
577         /* Only accept phy name of the form phy%d or radio%d */
578         if (!ifname)
579                 return NULL;
580         else if (!strncmp(ifname, "phy", 3))
581                 phyidx = atoi(&ifname[3]);
582         else if (!strncmp(ifname, "radio", 5))
583                 phyidx = nl80211_phy_idx_from_uci(ifname);
584         else
585                 return NULL;
586
587         memset(nif, 0, sizeof(nif));
588
589         if (phyidx > -1)
590         {
591                 if ((d = opendir("/sys/class/net")) != NULL)
592                 {
593                         while ((e = readdir(d)) != NULL)
594                         {
595                                 snprintf(buffer, sizeof(buffer),
596                                          "/sys/class/net/%s/phy80211/index", e->d_name);
597
598                                 if (nl80211_readint(buffer) == phyidx)
599                                 {
600                                         snprintf(buffer, sizeof(buffer),
601                                                  "/sys/class/net/%s/ifindex", e->d_name);
602
603                                         if ((cifidx = nl80211_readint(buffer)) >= 0 &&
604                                             ((ifidx < 0) || (cifidx < ifidx)))
605                                         {
606                                                 ifidx = cifidx;
607                                                 strncpy(nif, e->d_name, sizeof(nif));
608                                         }
609                                 }
610                         }
611
612                         closedir(d);
613                 }
614         }
615
616         return nif[0] ? nif : NULL;
617 }
618
619 static int nl80211_get_mode_cb(struct nl_msg *msg, void *arg)
620 {
621         int *mode = arg;
622         struct nlattr **tb = nl80211_parse(msg);
623         const int ifmodes[NL80211_IFTYPE_MAX + 1] = {
624                 IWINFO_OPMODE_UNKNOWN,          /* unspecified */
625                 IWINFO_OPMODE_ADHOC,            /* IBSS */
626                 IWINFO_OPMODE_CLIENT,           /* managed */
627                 IWINFO_OPMODE_MASTER,           /* AP */
628                 IWINFO_OPMODE_AP_VLAN,          /* AP/VLAN */
629                 IWINFO_OPMODE_WDS,                      /* WDS */
630                 IWINFO_OPMODE_MONITOR,          /* monitor */
631                 IWINFO_OPMODE_MESHPOINT,        /* mesh point */
632                 IWINFO_OPMODE_P2P_CLIENT,       /* P2P-client */
633                 IWINFO_OPMODE_P2P_GO,           /* P2P-GO */
634         };
635
636         if (tb[NL80211_ATTR_IFTYPE])
637                 *mode = ifmodes[nla_get_u32(tb[NL80211_ATTR_IFTYPE])];
638
639         return NL_SKIP;
640 }
641
642
643 static int nl80211_get_mode(const char *ifname, int *buf)
644 {
645         char *res;
646         struct nl80211_msg_conveyor *req;
647
648         res = nl80211_phy2ifname(ifname);
649         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0);
650         *buf = IWINFO_OPMODE_UNKNOWN;
651
652         if (req)
653         {
654                 nl80211_send(req, nl80211_get_mode_cb, buf);
655                 nl80211_free(req);
656         }
657
658         return (*buf == IWINFO_OPMODE_UNKNOWN) ? -1 : 0;
659 }
660
661 static int __nl80211_hostapd_query(const char *ifname, ...)
662 {
663         va_list ap, ap_cur;
664         char *phy, *search, *dest, *key, *val, buf[128];
665         int len, mode, found = 0, match = 1;
666         FILE *fp;
667
668         if (nl80211_get_mode(ifname, &mode))
669                 return 0;
670
671         if (mode != IWINFO_OPMODE_MASTER && mode != IWINFO_OPMODE_AP_VLAN)
672                 return 0;
673
674         phy = nl80211_ifname2phy(ifname);
675
676         if (!phy)
677                 return 0;
678
679         snprintf(buf, sizeof(buf), "/var/run/hostapd-%s.conf", phy);
680         fp = fopen(buf, "r");
681
682         if (!fp)
683                 return 0;
684
685         va_start(ap, ifname);
686
687         /* clear all destination buffers */
688         va_copy(ap_cur, ap);
689
690         while ((search = va_arg(ap_cur, char *)) != NULL)
691         {
692                 dest = va_arg(ap_cur, char *);
693                 len  = va_arg(ap_cur, int);
694
695                 memset(dest, 0, len);
696         }
697
698         va_end(ap_cur);
699
700         /* iterate applicable lines and copy found values into dest buffers */
701         while (fgets(buf, sizeof(buf), fp))
702         {
703                 key = strtok(buf, " =\t\n");
704                 val = strtok(NULL, "\n");
705
706                 if (!key || !val || !*key || *key == '#')
707                         continue;
708
709                 if (!strcmp(key, "interface") || !strcmp(key, "bss"))
710                         match = !strcmp(ifname, val);
711
712                 if (!match)
713                         continue;
714
715                 va_copy(ap_cur, ap);
716
717                 while ((search = va_arg(ap_cur, char *)) != NULL)
718                 {
719                         dest = va_arg(ap_cur, char *);
720                         len  = va_arg(ap_cur, int);
721
722                         if (!strcmp(search, key))
723                         {
724                                 strncpy(dest, val, len - 1);
725                                 found++;
726                                 break;
727                         }
728                 }
729
730                 va_end(ap_cur);
731         }
732
733         fclose(fp);
734
735         va_end(ap);
736
737         return found;
738 }
739
740 #define nl80211_hostapd_query(ifname, ...) \
741         __nl80211_hostapd_query(ifname, ##__VA_ARGS__, NULL)
742
743
744 static inline int nl80211_wpactl_recv(int sock, char *buf, int blen)
745 {
746         fd_set rfds;
747         struct timeval tv = { 0, 256000 };
748
749         FD_ZERO(&rfds);
750         FD_SET(sock, &rfds);
751
752         memset(buf, 0, blen);
753
754         if (select(sock + 1, &rfds, NULL, NULL, &tv) < 0)
755                 return -1;
756
757         if (!FD_ISSET(sock, &rfds))
758                 return -1;
759
760         return recv(sock, buf, blen - 1, 0);
761 }
762
763 static int nl80211_wpactl_connect(const char *ifname, struct sockaddr_un *local)
764 {
765         struct sockaddr_un remote = { 0 };
766         size_t remote_length, local_length;
767
768         int sock = socket(PF_UNIX, SOCK_DGRAM, 0);
769         if (sock < 0)
770                 return sock;
771
772         remote.sun_family = AF_UNIX;
773         remote_length = sizeof(remote.sun_family) +
774                 sprintf(remote.sun_path, "/var/run/wpa_supplicant-%s/%s",
775                         ifname, ifname);
776
777         if (fcntl(sock, F_SETFD, fcntl(sock, F_GETFD) | FD_CLOEXEC) < 0)
778         {
779                 close(sock);
780                 return -1;
781         }
782
783         if (connect(sock, (struct sockaddr *)&remote, remote_length))
784         {
785                 remote_length = sizeof(remote.sun_family) +
786                         sprintf(remote.sun_path, "/var/run/wpa_supplicant/%s", ifname);
787
788                 if (connect(sock, (struct sockaddr *)&remote, remote_length))
789                 {
790                         close(sock);
791                         return -1;
792                 }
793         }
794
795         local->sun_family = AF_UNIX;
796         local_length = sizeof(local->sun_family) +
797                 sprintf(local->sun_path, "/var/run/iwinfo-%s-%d", ifname, getpid());
798
799         if (bind(sock, (struct sockaddr *)local, local_length) < 0)
800         {
801                 close(sock);
802                 return -1;
803         }
804
805         return sock;
806 }
807
808 static int __nl80211_wpactl_query(const char *ifname, ...)
809 {
810         va_list ap, ap_cur;
811         struct sockaddr_un local = { 0 };
812         int len, mode, found = 0, sock = -1;
813         char *search, *dest, *key, *val, *line, *pos, buf[512];
814
815         if (nl80211_get_mode(ifname, &mode))
816                 return 0;
817
818         if (mode != IWINFO_OPMODE_CLIENT && mode != IWINFO_OPMODE_ADHOC)
819                 return 0;
820
821         sock = nl80211_wpactl_connect(ifname, &local);
822
823         if (sock < 0)
824                 return 0;
825
826         va_start(ap, ifname);
827
828         /* clear all destination buffers */
829         va_copy(ap_cur, ap);
830
831         while ((search = va_arg(ap_cur, char *)) != NULL)
832         {
833                 dest = va_arg(ap_cur, char *);
834                 len  = va_arg(ap_cur, int);
835
836                 memset(dest, 0, len);
837         }
838
839         va_end(ap_cur);
840
841         send(sock, "STATUS", 6, 0);
842
843         while (true)
844         {
845                 if (nl80211_wpactl_recv(sock, buf, sizeof(buf)) <= 0)
846                         break;
847
848                 if (buf[0] == '<')
849                         continue;
850
851                 for (line = strtok_r(buf, "\n", &pos);
852                          line != NULL;
853                          line = strtok_r(NULL, "\n", &pos))
854                 {
855                         key = strtok(line, "=");
856                         val = strtok(NULL, "\n");
857
858                         if (!key || !val)
859                                 continue;
860
861                         va_copy(ap_cur, ap);
862
863                         while ((search = va_arg(ap_cur, char *)) != NULL)
864                         {
865                                 dest = va_arg(ap_cur, char *);
866                                 len  = va_arg(ap_cur, int);
867
868                                 if (!strcmp(search, key))
869                                 {
870                                         strncpy(dest, val, len - 1);
871                                         found++;
872                                         break;
873                                 }
874                         }
875
876                         va_end(ap_cur);
877                 }
878
879                 break;
880         }
881
882         va_end(ap);
883
884         close(sock);
885         unlink(local.sun_path);
886
887         return found;
888 }
889
890 #define nl80211_wpactl_query(ifname, ...) \
891         __nl80211_wpactl_query(ifname, ##__VA_ARGS__, NULL)
892
893
894 static char * nl80211_ifadd(const char *ifname)
895 {
896         char *rv = NULL, path[PATH_MAX];
897         static char nif[IFNAMSIZ] = { 0 };
898         struct nl80211_msg_conveyor *req;
899         FILE *sysfs;
900
901         req = nl80211_msg(ifname, NL80211_CMD_NEW_INTERFACE, 0);
902         if (req)
903         {
904                 snprintf(nif, sizeof(nif), "tmp.%s", ifname);
905
906                 NLA_PUT_STRING(req->msg, NL80211_ATTR_IFNAME, nif);
907                 NLA_PUT_U32(req->msg, NL80211_ATTR_IFTYPE, NL80211_IFTYPE_STATION);
908
909                 nl80211_send(req, NULL, NULL);
910
911                 snprintf(path, sizeof(path) - 1,
912                          "/proc/sys/net/ipv6/conf/%s/disable_ipv6", nif);
913
914                 if ((sysfs = fopen(path, "w")) != NULL)
915                 {
916                         fwrite("0\n", 1, 2, sysfs);
917                         fclose(sysfs);
918                 }
919
920                 rv = nif;
921
922         nla_put_failure:
923                 nl80211_free(req);
924         }
925
926         return rv;
927 }
928
929 static void nl80211_ifdel(const char *ifname)
930 {
931         struct nl80211_msg_conveyor *req;
932
933         req = nl80211_msg(ifname, NL80211_CMD_DEL_INTERFACE, 0);
934         if (req)
935         {
936                 NLA_PUT_STRING(req->msg, NL80211_ATTR_IFNAME, ifname);
937
938                 nl80211_send(req, NULL, NULL);
939
940         nla_put_failure:
941                 nl80211_free(req);
942         }
943 }
944
945 static void nl80211_hostapd_hup(const char *ifname)
946 {
947         int fd, pid = 0;
948         char buf[32];
949         char *phy = nl80211_ifname2phy(ifname);
950
951         if (phy)
952         {
953                 snprintf(buf, sizeof(buf), "/var/run/wifi-%s.pid", phy);
954                 if ((fd = open(buf, O_RDONLY)) >= 0)
955                 {
956                         if (read(fd, buf, sizeof(buf)) > 0)
957                                 pid = atoi(buf);
958
959                         close(fd);
960                 }
961
962                 if (pid > 0)
963                         kill(pid, 1);
964         }
965 }
966
967
968 static int nl80211_probe(const char *ifname)
969 {
970         return !!nl80211_ifname2phy(ifname);
971 }
972
973 struct nl80211_ssid_bssid {
974         unsigned char *ssid;
975         unsigned char bssid[7];
976 };
977
978 static int nl80211_get_ssid_bssid_cb(struct nl_msg *msg, void *arg)
979 {
980         int ielen;
981         unsigned char *ie;
982         struct nl80211_ssid_bssid *sb = arg;
983         struct nlattr **tb = nl80211_parse(msg);
984         struct nlattr *bss[NL80211_BSS_MAX + 1];
985
986         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
987                 [NL80211_BSS_INFORMATION_ELEMENTS] = { 0 },
988                 [NL80211_BSS_STATUS]               = { .type = NLA_U32 },
989         };
990
991         if (!tb[NL80211_ATTR_BSS] ||
992             nla_parse_nested(bss, NL80211_BSS_MAX, tb[NL80211_ATTR_BSS],
993                              bss_policy) ||
994             !bss[NL80211_BSS_BSSID] ||
995             !bss[NL80211_BSS_STATUS] ||
996             !bss[NL80211_BSS_INFORMATION_ELEMENTS])
997         {
998                 return NL_SKIP;
999         }
1000
1001         switch (nla_get_u32(bss[NL80211_BSS_STATUS]))
1002         {
1003         case NL80211_BSS_STATUS_ASSOCIATED:
1004         case NL80211_BSS_STATUS_AUTHENTICATED:
1005         case NL80211_BSS_STATUS_IBSS_JOINED:
1006
1007                 if (sb->ssid)
1008                 {
1009                         ie = nla_data(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1010                         ielen = nla_len(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1011
1012                         while (ielen >= 2 && ielen >= ie[1])
1013                         {
1014                                 if (ie[0] == 0)
1015                                 {
1016                                         memcpy(sb->ssid, ie + 2, min(ie[1], IWINFO_ESSID_MAX_SIZE));
1017                                         return NL_SKIP;
1018                                 }
1019
1020                                 ielen -= ie[1] + 2;
1021                                 ie += ie[1] + 2;
1022                         }
1023                 }
1024                 else
1025                 {
1026                         sb->bssid[0] = 1;
1027                         memcpy(sb->bssid + 1, nla_data(bss[NL80211_BSS_BSSID]), 6);
1028                         return NL_SKIP;
1029                 }
1030
1031         default:
1032                 return NL_SKIP;
1033         }
1034 }
1035
1036 static int nl80211_get_ssid(const char *ifname, char *buf)
1037 {
1038         char *res;
1039         struct nl80211_msg_conveyor *req;
1040         struct nl80211_ssid_bssid sb;
1041
1042         /* try to find ssid from scan dump results */
1043         res = nl80211_phy2ifname(ifname);
1044         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
1045
1046         sb.ssid = (unsigned char *)buf;
1047         *buf = 0;
1048
1049         if (req)
1050         {
1051                 nl80211_send(req, nl80211_get_ssid_bssid_cb, &sb);
1052                 nl80211_free(req);
1053         }
1054
1055         /* failed, try to find from hostapd info */
1056         if (*buf == 0)
1057                 nl80211_hostapd_query(ifname, "ssid", buf, IWINFO_ESSID_MAX_SIZE + 1);
1058
1059         return (*buf == 0) ? -1 : 0;
1060 }
1061
1062 static int nl80211_get_bssid(const char *ifname, char *buf)
1063 {
1064         char *res, bssid[sizeof("FF:FF:FF:FF:FF:FF\0")];
1065         struct nl80211_msg_conveyor *req;
1066         struct nl80211_ssid_bssid sb;
1067
1068         /* try to find bssid from scan dump results */
1069         res = nl80211_phy2ifname(ifname);
1070         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
1071
1072         sb.ssid = NULL;
1073         sb.bssid[0] = 0;
1074
1075         if (req)
1076         {
1077                 nl80211_send(req, nl80211_get_ssid_bssid_cb, &sb);
1078                 nl80211_free(req);
1079         }
1080
1081         /* failed, try to find mac from hostapd info */
1082         if ((sb.bssid[0] == 0) &&
1083             nl80211_hostapd_query(ifname, "bssid", bssid, sizeof(bssid)))
1084         {
1085                 sb.bssid[0] = 1;
1086                 sb.bssid[1] = strtol(&bssid[0],  NULL, 16);
1087                 sb.bssid[2] = strtol(&bssid[3],  NULL, 16);
1088                 sb.bssid[3] = strtol(&bssid[6],  NULL, 16);
1089                 sb.bssid[4] = strtol(&bssid[9],  NULL, 16);
1090                 sb.bssid[5] = strtol(&bssid[12], NULL, 16);
1091                 sb.bssid[6] = strtol(&bssid[15], NULL, 16);
1092         }
1093
1094         if (sb.bssid[0])
1095         {
1096                 sprintf(buf, "%02X:%02X:%02X:%02X:%02X:%02X",
1097                         sb.bssid[1], sb.bssid[2], sb.bssid[3],
1098                         sb.bssid[4], sb.bssid[5], sb.bssid[6]);
1099
1100                 return 0;
1101         }
1102
1103         return -1;
1104 }
1105
1106
1107 static int nl80211_get_frequency_scan_cb(struct nl_msg *msg, void *arg)
1108 {
1109         int *freq = arg;
1110         struct nlattr **attr = nl80211_parse(msg);
1111         struct nlattr *binfo[NL80211_BSS_MAX + 1];
1112
1113         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
1114                 [NL80211_BSS_FREQUENCY] = { .type = NLA_U32 },
1115                 [NL80211_BSS_STATUS]    = { .type = NLA_U32 },
1116         };
1117
1118         if (attr[NL80211_ATTR_BSS] &&
1119             !nla_parse_nested(binfo, NL80211_BSS_MAX,
1120                               attr[NL80211_ATTR_BSS], bss_policy))
1121         {
1122                 if (binfo[NL80211_BSS_STATUS] && binfo[NL80211_BSS_FREQUENCY])
1123                         *freq = nla_get_u32(binfo[NL80211_BSS_FREQUENCY]);
1124         }
1125
1126         return NL_SKIP;
1127 }
1128
1129 static int nl80211_get_frequency_info_cb(struct nl_msg *msg, void *arg)
1130 {
1131         int *freq = arg;
1132         struct nlattr **tb = nl80211_parse(msg);
1133
1134         if (tb[NL80211_ATTR_WIPHY_FREQ])
1135                 *freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
1136
1137         return NL_SKIP;
1138 }
1139
1140 static int nl80211_get_frequency(const char *ifname, int *buf)
1141 {
1142         char *res, channel[4], hwmode[2];
1143         struct nl80211_msg_conveyor *req;
1144
1145         /* try to find frequency from interface info */
1146         res = nl80211_phy2ifname(ifname);
1147         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0);
1148         *buf = 0;
1149
1150         if (req)
1151         {
1152                 nl80211_send(req, nl80211_get_frequency_info_cb, buf);
1153                 nl80211_free(req);
1154         }
1155
1156         /* failed, try to find frequency from hostapd info */
1157         if ((*buf == 0) &&
1158             nl80211_hostapd_query(ifname, "hw_mode", hwmode, sizeof(hwmode),
1159                                           "channel", channel, sizeof(channel)) == 2)
1160         {
1161                 *buf = nl80211_channel2freq(atoi(channel), hwmode);
1162         }
1163
1164         /* failed, try to find frequency from scan results */
1165         if (*buf == 0)
1166         {
1167                 res = nl80211_phy2ifname(ifname);
1168                 req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
1169
1170                 if (req)
1171                 {
1172                         nl80211_send(req, nl80211_get_frequency_scan_cb, buf);
1173                         nl80211_free(req);
1174                 }
1175         }
1176
1177         return (*buf == 0) ? -1 : 0;
1178 }
1179
1180 static int nl80211_get_channel(const char *ifname, int *buf)
1181 {
1182         if (!nl80211_get_frequency(ifname, buf))
1183         {
1184                 *buf = nl80211_freq2channel(*buf);
1185                 return 0;
1186         }
1187
1188         return -1;
1189 }
1190
1191 static int nl80211_get_txpower_cb(struct nl_msg *msg, void *arg)
1192 {
1193         int *buf = arg;
1194         struct nlattr **tb = nl80211_parse(msg);
1195
1196         if (tb[NL80211_ATTR_WIPHY_TX_POWER_LEVEL])
1197                 *buf = iwinfo_mbm2dbm(nla_get_u32(tb[NL80211_ATTR_WIPHY_TX_POWER_LEVEL]));
1198
1199         return NL_SKIP;
1200 }
1201
1202 static int nl80211_get_txpower(const char *ifname, int *buf)
1203 {
1204         char *res;
1205         struct nl80211_msg_conveyor *req;
1206
1207         res = nl80211_phy2ifname(ifname);
1208         req = nl80211_msg(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0);
1209
1210         if (req)
1211         {
1212                 *buf = 0;
1213                 nl80211_send(req, nl80211_get_txpower_cb, buf);
1214                 nl80211_free(req);
1215                 if (*buf)
1216                         return 0;
1217         }
1218
1219         return -1;
1220 }
1221
1222
1223 static int nl80211_fill_signal_cb(struct nl_msg *msg, void *arg)
1224 {
1225         int8_t dbm;
1226         int16_t mbit;
1227         struct nl80211_rssi_rate *rr = arg;
1228         struct nlattr **attr = nl80211_parse(msg);
1229         struct nlattr *sinfo[NL80211_STA_INFO_MAX + 1];
1230         struct nlattr *rinfo[NL80211_RATE_INFO_MAX + 1];
1231
1232         static struct nla_policy stats_policy[NL80211_STA_INFO_MAX + 1] = {
1233                 [NL80211_STA_INFO_INACTIVE_TIME] = { .type = NLA_U32    },
1234                 [NL80211_STA_INFO_RX_BYTES]      = { .type = NLA_U32    },
1235                 [NL80211_STA_INFO_TX_BYTES]      = { .type = NLA_U32    },
1236                 [NL80211_STA_INFO_RX_PACKETS]    = { .type = NLA_U32    },
1237                 [NL80211_STA_INFO_TX_PACKETS]    = { .type = NLA_U32    },
1238                 [NL80211_STA_INFO_SIGNAL]        = { .type = NLA_U8     },
1239                 [NL80211_STA_INFO_TX_BITRATE]    = { .type = NLA_NESTED },
1240                 [NL80211_STA_INFO_LLID]          = { .type = NLA_U16    },
1241                 [NL80211_STA_INFO_PLID]          = { .type = NLA_U16    },
1242                 [NL80211_STA_INFO_PLINK_STATE]   = { .type = NLA_U8     },
1243         };
1244
1245         static struct nla_policy rate_policy[NL80211_RATE_INFO_MAX + 1] = {
1246                 [NL80211_RATE_INFO_BITRATE]      = { .type = NLA_U16  },
1247                 [NL80211_RATE_INFO_MCS]          = { .type = NLA_U8   },
1248                 [NL80211_RATE_INFO_40_MHZ_WIDTH] = { .type = NLA_FLAG },
1249                 [NL80211_RATE_INFO_SHORT_GI]     = { .type = NLA_FLAG },
1250         };
1251
1252         if (attr[NL80211_ATTR_STA_INFO])
1253         {
1254                 if (!nla_parse_nested(sinfo, NL80211_STA_INFO_MAX,
1255                                       attr[NL80211_ATTR_STA_INFO], stats_policy))
1256                 {
1257                         if (sinfo[NL80211_STA_INFO_SIGNAL])
1258                         {
1259                                 dbm = nla_get_u8(sinfo[NL80211_STA_INFO_SIGNAL]);
1260                                 rr->rssi = rr->rssi ? (int8_t)((rr->rssi + dbm) / 2) : dbm;
1261                         }
1262
1263                         if (sinfo[NL80211_STA_INFO_TX_BITRATE])
1264                         {
1265                                 if (!nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1266                                                       sinfo[NL80211_STA_INFO_TX_BITRATE],
1267                                                       rate_policy))
1268                                 {
1269                                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1270                                         {
1271                                                 mbit = nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]);
1272                                                 rr->rate = rr->rate
1273                                                         ? (int16_t)((rr->rate + mbit) / 2) : mbit;
1274                                         }
1275                                 }
1276                         }
1277                 }
1278         }
1279
1280         return NL_SKIP;
1281 }
1282
1283 static void nl80211_fill_signal(const char *ifname, struct nl80211_rssi_rate *r)
1284 {
1285         DIR *d;
1286         struct dirent *de;
1287         struct nl80211_msg_conveyor *req;
1288
1289         r->rssi = 0;
1290         r->rate = 0;
1291
1292         if ((d = opendir("/sys/class/net")) != NULL)
1293         {
1294                 while ((de = readdir(d)) != NULL)
1295                 {
1296                         if (!strncmp(de->d_name, ifname, strlen(ifname)) &&
1297                             (!de->d_name[strlen(ifname)] ||
1298                              !strncmp(&de->d_name[strlen(ifname)], ".sta", 4)))
1299                         {
1300                                 req = nl80211_msg(de->d_name, NL80211_CMD_GET_STATION,
1301                                                   NLM_F_DUMP);
1302
1303                                 if (req)
1304                                 {
1305                                         nl80211_send(req, nl80211_fill_signal_cb, r);
1306                                         nl80211_free(req);
1307                                 }
1308                         }
1309                 }
1310
1311                 closedir(d);
1312         }
1313 }
1314
1315 static int nl80211_get_bitrate(const char *ifname, int *buf)
1316 {
1317         struct nl80211_rssi_rate rr;
1318
1319         nl80211_fill_signal(ifname, &rr);
1320
1321         if (rr.rate)
1322         {
1323                 *buf = (rr.rate * 100);
1324                 return 0;
1325         }
1326
1327         return -1;
1328 }
1329
1330 static int nl80211_get_signal(const char *ifname, int *buf)
1331 {
1332         struct nl80211_rssi_rate rr;
1333
1334         nl80211_fill_signal(ifname, &rr);
1335
1336         if (rr.rssi)
1337         {
1338                 *buf = rr.rssi;
1339                 return 0;
1340         }
1341
1342         return -1;
1343 }
1344
1345 static int nl80211_get_noise_cb(struct nl_msg *msg, void *arg)
1346 {
1347         int8_t *noise = arg;
1348         struct nlattr **tb = nl80211_parse(msg);
1349         struct nlattr *si[NL80211_SURVEY_INFO_MAX + 1];
1350
1351         static struct nla_policy sp[NL80211_SURVEY_INFO_MAX + 1] = {
1352                 [NL80211_SURVEY_INFO_FREQUENCY] = { .type = NLA_U32 },
1353                 [NL80211_SURVEY_INFO_NOISE]     = { .type = NLA_U8  },
1354         };
1355
1356         if (!tb[NL80211_ATTR_SURVEY_INFO])
1357                 return NL_SKIP;
1358
1359         if (nla_parse_nested(si, NL80211_SURVEY_INFO_MAX,
1360                              tb[NL80211_ATTR_SURVEY_INFO], sp))
1361                 return NL_SKIP;
1362
1363         if (!si[NL80211_SURVEY_INFO_NOISE])
1364                 return NL_SKIP;
1365
1366         if (!*noise || si[NL80211_SURVEY_INFO_IN_USE])
1367                 *noise = (int8_t)nla_get_u8(si[NL80211_SURVEY_INFO_NOISE]);
1368
1369         return NL_SKIP;
1370 }
1371
1372
1373 static int nl80211_get_noise(const char *ifname, int *buf)
1374 {
1375         int8_t noise;
1376         struct nl80211_msg_conveyor *req;
1377
1378         req = nl80211_msg(ifname, NL80211_CMD_GET_SURVEY, NLM_F_DUMP);
1379         if (req)
1380         {
1381                 noise = 0;
1382
1383                 nl80211_send(req, nl80211_get_noise_cb, &noise);
1384                 nl80211_free(req);
1385
1386                 if (noise)
1387                 {
1388                         *buf = noise;
1389                         return 0;
1390                 }
1391         }
1392
1393         return -1;
1394 }
1395
1396 static int nl80211_get_quality(const char *ifname, int *buf)
1397 {
1398         int signal;
1399
1400         if (!nl80211_get_signal(ifname, &signal))
1401         {
1402                 /* A positive signal level is usually just a quality
1403                  * value, pass through as-is */
1404                 if (signal >= 0)
1405                 {
1406                         *buf = signal;
1407                 }
1408
1409                 /* The cfg80211 wext compat layer assumes a signal range
1410                  * of -110 dBm to -40 dBm, the quality value is derived
1411                  * by adding 110 to the signal level */
1412                 else
1413                 {
1414                         if (signal < -110)
1415                                 signal = -110;
1416                         else if (signal > -40)
1417                                 signal = -40;
1418
1419                         *buf = (signal + 110);
1420                 }
1421
1422                 return 0;
1423         }
1424
1425         return -1;
1426 }
1427
1428 static int nl80211_get_quality_max(const char *ifname, int *buf)
1429 {
1430         /* The cfg80211 wext compat layer assumes a maximum
1431          * quality of 70 */
1432         *buf = 70;
1433
1434         return 0;
1435 }
1436
1437 static int nl80211_check_wepkey(const char *key)
1438 {
1439         if (key && *key)
1440         {
1441                 switch (strlen(key))
1442                 {
1443                 case 5:
1444                 case 10:
1445                         return IWINFO_CIPHER_WEP40;
1446
1447                 case 13:
1448                 case 26:
1449                         return IWINFO_CIPHER_WEP104;
1450                 }
1451         }
1452
1453         return 0;
1454 }
1455
1456 static int nl80211_get_encryption(const char *ifname, char *buf)
1457 {
1458         char wpa[2], wpa_key_mgmt[16], wpa_pairwise[16], wpa_groupwise[16];
1459         char auth_algs[2], wep_key0[27], wep_key1[27], wep_key2[27], wep_key3[27];
1460
1461         struct iwinfo_crypto_entry *c = (struct iwinfo_crypto_entry *)buf;
1462
1463         /* WPA supplicant */
1464         if (nl80211_wpactl_query(ifname,
1465                         "pairwise_cipher", wpa_pairwise,  sizeof(wpa_pairwise),
1466                         "group_cipher",    wpa_groupwise, sizeof(wpa_groupwise),
1467                         "key_mgmt",        wpa_key_mgmt,  sizeof(wpa_key_mgmt)))
1468         {
1469                 /* WEP */
1470                 if (!strcmp(wpa_key_mgmt, "NONE"))
1471                 {
1472                         if (strstr(wpa_pairwise, "WEP-40"))
1473                                 c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1474                         else if (strstr(wpa_pairwise, "WEP-104"))
1475                                 c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1476
1477                         if (strstr(wpa_groupwise, "WEP-40"))
1478                                 c->group_ciphers |= IWINFO_CIPHER_WEP40;
1479                         else if (strstr(wpa_groupwise, "WEP-104"))
1480                                 c->group_ciphers |= IWINFO_CIPHER_WEP104;
1481
1482                         c->enabled      = !!(c->pair_ciphers | c->group_ciphers);
1483                         c->auth_suites |= IWINFO_KMGMT_NONE;
1484                         c->auth_algs   |= IWINFO_AUTH_OPEN; /* XXX: assumption */
1485                 }
1486
1487                 /* WPA */
1488                 else if (strstr(wpa_key_mgmt, "WPA"))
1489                 {
1490                         if (strstr(wpa_pairwise, "TKIP"))
1491                                 c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1492                         else if (strstr(wpa_pairwise, "CCMP"))
1493                                 c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1494                         else if (strstr(wpa_pairwise, "NONE"))
1495                                 c->pair_ciphers |= IWINFO_CIPHER_NONE;
1496                         else if (strstr(wpa_pairwise, "WEP-40"))
1497                                 c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1498                         else if (strstr(wpa_pairwise, "WEP-104"))
1499                                 c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1500
1501                         if (strstr(wpa_groupwise, "TKIP"))
1502                                 c->group_ciphers |= IWINFO_CIPHER_TKIP;
1503                         else if (strstr(wpa_groupwise, "CCMP"))
1504                                 c->group_ciphers |= IWINFO_CIPHER_CCMP;
1505                         else if (strstr(wpa_groupwise, "NONE"))
1506                                 c->group_ciphers |= IWINFO_CIPHER_NONE;
1507                         else if (strstr(wpa_groupwise, "WEP-40"))
1508                                 c->group_ciphers |= IWINFO_CIPHER_WEP40;
1509                         else if (strstr(wpa_groupwise, "WEP-104"))
1510                                 c->group_ciphers |= IWINFO_CIPHER_WEP104;
1511
1512                         if (strstr(wpa_key_mgmt, "WPA2"))
1513                                 c->wpa_version = 2;
1514                         else if (strstr(wpa_key_mgmt, "WPA"))
1515                                 c->wpa_version = 1;
1516
1517                         if (strstr(wpa_key_mgmt, "PSK"))
1518                                 c->auth_suites |= IWINFO_KMGMT_PSK;
1519                         else if (strstr(wpa_key_mgmt, "EAP") ||
1520                                  strstr(wpa_key_mgmt, "802.1X"))
1521                                 c->auth_suites |= IWINFO_KMGMT_8021x;
1522                         else if (strstr(wpa_key_mgmt, "NONE"))
1523                                 c->auth_suites |= IWINFO_KMGMT_NONE;
1524
1525                         c->enabled = !!(c->wpa_version && c->auth_suites);
1526                 }
1527
1528                 return 0;
1529         }
1530
1531         /* Hostapd */
1532         else if (nl80211_hostapd_query(ifname,
1533                                 "wpa",          wpa,          sizeof(wpa),
1534                                 "wpa_key_mgmt", wpa_key_mgmt, sizeof(wpa_key_mgmt),
1535                                 "wpa_pairwise", wpa_pairwise, sizeof(wpa_pairwise),
1536                                 "auth_algs",    auth_algs,    sizeof(auth_algs),
1537                                 "wep_key0",     wep_key0,     sizeof(wep_key0),
1538                                 "wep_key1",     wep_key1,     sizeof(wep_key1),
1539                                 "wep_key2",     wep_key2,     sizeof(wep_key2),
1540                                 "wep_key3",     wep_key3,     sizeof(wep_key3)))
1541         {
1542                 c->wpa_version = wpa[0] ? atoi(wpa) : 0;
1543
1544                 if (wpa_key_mgmt[0])
1545                 {
1546                         if (strstr(wpa_key_mgmt, "PSK"))
1547                                 c->auth_suites |= IWINFO_KMGMT_PSK;
1548
1549                         if (strstr(wpa_key_mgmt, "EAP"))
1550                                 c->auth_suites |= IWINFO_KMGMT_8021x;
1551
1552                         if (strstr(wpa_key_mgmt, "NONE"))
1553                                 c->auth_suites |= IWINFO_KMGMT_NONE;
1554                 }
1555                 else
1556                 {
1557                         c->auth_suites |= IWINFO_KMGMT_PSK;
1558                 }
1559
1560                 if (wpa_pairwise[0])
1561                 {
1562                         if (strstr(wpa_pairwise, "TKIP"))
1563                                 c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1564
1565                         if (strstr(wpa_pairwise, "CCMP"))
1566                                 c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1567
1568                         if (strstr(wpa_pairwise, "NONE"))
1569                                 c->pair_ciphers |= IWINFO_CIPHER_NONE;
1570                 }
1571
1572                 if (auth_algs[0])
1573                 {
1574                         switch(atoi(auth_algs))
1575                         {
1576                         case 1:
1577                                 c->auth_algs |= IWINFO_AUTH_OPEN;
1578                                 break;
1579
1580                         case 2:
1581                                 c->auth_algs |= IWINFO_AUTH_SHARED;
1582                                 break;
1583
1584                         case 3:
1585                                 c->auth_algs |= IWINFO_AUTH_OPEN;
1586                                 c->auth_algs |= IWINFO_AUTH_SHARED;
1587                                 break;
1588                         }
1589
1590                         c->pair_ciphers |= nl80211_check_wepkey(wep_key0);
1591                         c->pair_ciphers |= nl80211_check_wepkey(wep_key1);
1592                         c->pair_ciphers |= nl80211_check_wepkey(wep_key2);
1593                         c->pair_ciphers |= nl80211_check_wepkey(wep_key3);
1594                 }
1595
1596                 c->group_ciphers = c->pair_ciphers;
1597                 c->enabled = (c->wpa_version || c->pair_ciphers) ? 1 : 0;
1598
1599                 return 0;
1600         }
1601
1602         return -1;
1603 }
1604
1605 static int nl80211_get_phyname(const char *ifname, char *buf)
1606 {
1607         const char *name;
1608
1609         name = nl80211_ifname2phy(ifname);
1610
1611         if (name)
1612         {
1613                 strcpy(buf, name);
1614                 return 0;
1615         }
1616         else if ((name = nl80211_phy2ifname(ifname)) != NULL)
1617         {
1618                 name = nl80211_ifname2phy(name);
1619
1620                 if (name)
1621                 {
1622                         strcpy(buf, ifname);
1623                         return 0;
1624                 }
1625         }
1626
1627         return -1;
1628 }
1629
1630
1631 static int nl80211_get_assoclist_cb(struct nl_msg *msg, void *arg)
1632 {
1633         struct nl80211_array_buf *arr = arg;
1634         struct iwinfo_assoclist_entry *e = arr->buf;
1635         struct nlattr **attr = nl80211_parse(msg);
1636         struct nlattr *sinfo[NL80211_STA_INFO_MAX + 1];
1637         struct nlattr *rinfo[NL80211_RATE_INFO_MAX + 1];
1638         struct nl80211_sta_flag_update *sta_flags;
1639
1640         static struct nla_policy stats_policy[NL80211_STA_INFO_MAX + 1] = {
1641                 [NL80211_STA_INFO_INACTIVE_TIME] = { .type = NLA_U32    },
1642                 [NL80211_STA_INFO_RX_PACKETS]    = { .type = NLA_U32    },
1643                 [NL80211_STA_INFO_TX_PACKETS]    = { .type = NLA_U32    },
1644                 [NL80211_STA_INFO_RX_BITRATE]    = { .type = NLA_NESTED },
1645                 [NL80211_STA_INFO_TX_BITRATE]    = { .type = NLA_NESTED },
1646                 [NL80211_STA_INFO_SIGNAL]        = { .type = NLA_U8     },
1647                 [NL80211_STA_INFO_RX_BYTES]      = { .type = NLA_U32    },
1648                 [NL80211_STA_INFO_TX_BYTES]      = { .type = NLA_U32    },
1649                 [NL80211_STA_INFO_TX_RETRIES]    = { .type = NLA_U32    },
1650                 [NL80211_STA_INFO_TX_FAILED]     = { .type = NLA_U32    },
1651                 [NL80211_STA_INFO_T_OFFSET]      = { .type = NLA_U64    },
1652                 [NL80211_STA_INFO_STA_FLAGS] =
1653                         { .minlen = sizeof(struct nl80211_sta_flag_update) },
1654         };
1655
1656         static struct nla_policy rate_policy[NL80211_RATE_INFO_MAX + 1] = {
1657                 [NL80211_RATE_INFO_BITRATE]      = { .type = NLA_U16    },
1658                 [NL80211_RATE_INFO_MCS]          = { .type = NLA_U8     },
1659                 [NL80211_RATE_INFO_40_MHZ_WIDTH] = { .type = NLA_FLAG   },
1660                 [NL80211_RATE_INFO_SHORT_GI]     = { .type = NLA_FLAG   },
1661         };
1662
1663         /* advance to end of array */
1664         e += arr->count;
1665         memset(e, 0, sizeof(*e));
1666
1667         if (attr[NL80211_ATTR_MAC])
1668                 memcpy(e->mac, nla_data(attr[NL80211_ATTR_MAC]), 6);
1669
1670         if (attr[NL80211_ATTR_STA_INFO] &&
1671             !nla_parse_nested(sinfo, NL80211_STA_INFO_MAX,
1672                               attr[NL80211_ATTR_STA_INFO], stats_policy))
1673         {
1674                 if (sinfo[NL80211_STA_INFO_SIGNAL])
1675                         e->signal = nla_get_u8(sinfo[NL80211_STA_INFO_SIGNAL]);
1676
1677                 if (sinfo[NL80211_STA_INFO_INACTIVE_TIME])
1678                         e->inactive = nla_get_u32(sinfo[NL80211_STA_INFO_INACTIVE_TIME]);
1679
1680                 if (sinfo[NL80211_STA_INFO_RX_PACKETS])
1681                         e->rx_packets = nla_get_u32(sinfo[NL80211_STA_INFO_RX_PACKETS]);
1682
1683                 if (sinfo[NL80211_STA_INFO_TX_PACKETS])
1684                         e->tx_packets = nla_get_u32(sinfo[NL80211_STA_INFO_TX_PACKETS]);
1685
1686                 if (sinfo[NL80211_STA_INFO_RX_BITRATE] &&
1687                     !nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1688                                       sinfo[NL80211_STA_INFO_RX_BITRATE], rate_policy))
1689                 {
1690                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1691                                 e->rx_rate.rate =
1692                                         nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]) * 100;
1693
1694                         if (rinfo[NL80211_RATE_INFO_MCS])
1695                                 e->rx_rate.mcs = nla_get_u8(rinfo[NL80211_RATE_INFO_MCS]);
1696
1697                         if (rinfo[NL80211_RATE_INFO_40_MHZ_WIDTH])
1698                                 e->rx_rate.is_40mhz = 1;
1699
1700                         if (rinfo[NL80211_RATE_INFO_SHORT_GI])
1701                                 e->rx_rate.is_short_gi = 1;
1702                 }
1703
1704                 if (sinfo[NL80211_STA_INFO_TX_BITRATE] &&
1705                     !nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1706                                       sinfo[NL80211_STA_INFO_TX_BITRATE], rate_policy))
1707                 {
1708                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1709                                 e->tx_rate.rate =
1710                                         nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]) * 100;
1711
1712                         if (rinfo[NL80211_RATE_INFO_MCS])
1713                                 e->tx_rate.mcs = nla_get_u8(rinfo[NL80211_RATE_INFO_MCS]);
1714
1715                         if (rinfo[NL80211_RATE_INFO_40_MHZ_WIDTH])
1716                                 e->tx_rate.is_40mhz = 1;
1717
1718                         if (rinfo[NL80211_RATE_INFO_SHORT_GI])
1719                                 e->tx_rate.is_short_gi = 1;
1720                 }
1721
1722                 if (sinfo[NL80211_STA_INFO_RX_BYTES])
1723                         e->rx_bytes = nla_get_u32(sinfo[NL80211_STA_INFO_RX_BYTES]);
1724
1725                 if (sinfo[NL80211_STA_INFO_TX_BYTES])
1726                         e->tx_bytes = nla_get_u32(sinfo[NL80211_STA_INFO_TX_BYTES]);
1727
1728                 if (sinfo[NL80211_STA_INFO_TX_RETRIES])
1729                         e->tx_retries = nla_get_u32(sinfo[NL80211_STA_INFO_TX_RETRIES]);
1730
1731                 if (sinfo[NL80211_STA_INFO_TX_FAILED])
1732                         e->tx_failed = nla_get_u32(sinfo[NL80211_STA_INFO_TX_FAILED]);
1733
1734                 if (sinfo[NL80211_STA_INFO_T_OFFSET])
1735                         e->t_offset = nla_get_u64(sinfo[NL80211_STA_INFO_T_OFFSET]);
1736
1737                 /* Station flags */
1738                 if (sinfo[NL80211_STA_INFO_STA_FLAGS])
1739                 {
1740                         sta_flags = (struct nl80211_sta_flag_update *)
1741                                 nla_data(sinfo[NL80211_STA_INFO_STA_FLAGS]);
1742
1743                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
1744                             sta_flags->set & BIT(NL80211_STA_FLAG_AUTHORIZED))
1745                                 e->is_authorized = 1;
1746
1747                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1748                             sta_flags->set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1749                                 e->is_authenticated = 1;
1750
1751                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) &&
1752                             sta_flags->set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1753                                 e->is_preamble_short = 1;
1754
1755                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_WME) &&
1756                             sta_flags->set & BIT(NL80211_STA_FLAG_WME))
1757                                 e->is_wme = 1;
1758
1759                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_MFP) &&
1760                             sta_flags->set & BIT(NL80211_STA_FLAG_MFP))
1761                                 e->is_mfp = 1;
1762
1763                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_TDLS_PEER) &&
1764                             sta_flags->set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1765                                 e->is_tdls = 1;
1766                 }
1767         }
1768
1769         e->noise = 0; /* filled in by caller */
1770         arr->count++;
1771
1772         return NL_SKIP;
1773 }
1774
1775 static int nl80211_get_assoclist(const char *ifname, char *buf, int *len)
1776 {
1777         DIR *d;
1778         int i, noise = 0;
1779         struct dirent *de;
1780         struct nl80211_msg_conveyor *req;
1781         struct nl80211_array_buf arr = { .buf = buf, .count = 0 };
1782         struct iwinfo_assoclist_entry *e;
1783
1784         if ((d = opendir("/sys/class/net")) != NULL)
1785         {
1786                 while ((de = readdir(d)) != NULL)
1787                 {
1788                         if (!strncmp(de->d_name, ifname, strlen(ifname)) &&
1789                             (!de->d_name[strlen(ifname)] ||
1790                              !strncmp(&de->d_name[strlen(ifname)], ".sta", 4)))
1791                         {
1792                                 req = nl80211_msg(de->d_name, NL80211_CMD_GET_STATION,
1793                                                   NLM_F_DUMP);
1794
1795                                 if (req)
1796                                 {
1797                                         nl80211_send(req, nl80211_get_assoclist_cb, &arr);
1798                                         nl80211_free(req);
1799                                 }
1800                         }
1801                 }
1802
1803                 closedir(d);
1804
1805                 if (!nl80211_get_noise(ifname, &noise))
1806                         for (i = 0, e = arr.buf; i < arr.count; i++, e++)
1807                                 e->noise = noise;
1808
1809                 *len = (arr.count * sizeof(struct iwinfo_assoclist_entry));
1810                 return 0;
1811         }
1812
1813         return -1;
1814 }
1815
1816 static int nl80211_get_txpwrlist_cb(struct nl_msg *msg, void *arg)
1817 {
1818         int *dbm_max = arg;
1819         int ch_cur, ch_cmp, bands_remain, freqs_remain;
1820
1821         struct nlattr **attr = nl80211_parse(msg);
1822         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
1823         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
1824         struct nlattr *band, *freq;
1825
1826         static struct nla_policy freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1] = {
1827                 [NL80211_FREQUENCY_ATTR_FREQ]         = { .type = NLA_U32  },
1828                 [NL80211_FREQUENCY_ATTR_DISABLED]     = { .type = NLA_FLAG },
1829                 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN] = { .type = NLA_FLAG },
1830                 [NL80211_FREQUENCY_ATTR_NO_IBSS]      = { .type = NLA_FLAG },
1831                 [NL80211_FREQUENCY_ATTR_RADAR]        = { .type = NLA_FLAG },
1832                 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER] = { .type = NLA_U32  },
1833         };
1834
1835         ch_cur = *dbm_max; /* value int* is initialized with channel by caller */
1836         *dbm_max = -1;
1837
1838         nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
1839         {
1840                 nla_parse(bands, NL80211_BAND_ATTR_MAX, nla_data(band),
1841                           nla_len(band), NULL);
1842
1843                 nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS], freqs_remain)
1844                 {
1845                         nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
1846                                   nla_data(freq), nla_len(freq), freq_policy);
1847
1848                         ch_cmp = nl80211_freq2channel(nla_get_u32(
1849                                 freqs[NL80211_FREQUENCY_ATTR_FREQ]));
1850
1851                         if ((!ch_cur || (ch_cmp == ch_cur)) &&
1852                             freqs[NL80211_FREQUENCY_ATTR_MAX_TX_POWER])
1853                         {
1854                                 *dbm_max = (int)(0.01 * nla_get_u32(
1855                                         freqs[NL80211_FREQUENCY_ATTR_MAX_TX_POWER]));
1856
1857                                 break;
1858                         }
1859                 }
1860         }
1861
1862         return NL_SKIP;
1863 }
1864
1865 static int nl80211_get_txpwrlist(const char *ifname, char *buf, int *len)
1866 {
1867         int ch_cur;
1868         int dbm_max = -1, dbm_cur, dbm_cnt;
1869         struct nl80211_msg_conveyor *req;
1870         struct iwinfo_txpwrlist_entry entry;
1871
1872         if (nl80211_get_channel(ifname, &ch_cur))
1873                 ch_cur = 0;
1874
1875         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
1876         if (req)
1877         {
1878                 /* initialize the value pointer with channel for callback */
1879                 dbm_max = ch_cur;
1880
1881                 nl80211_send(req, nl80211_get_txpwrlist_cb, &dbm_max);
1882                 nl80211_free(req);
1883         }
1884
1885         if (dbm_max > 0)
1886         {
1887                 for (dbm_cur = 0, dbm_cnt = 0;
1888                      dbm_cur < dbm_max;
1889                      dbm_cur++, dbm_cnt++)
1890                 {
1891                         entry.dbm = dbm_cur;
1892                         entry.mw  = iwinfo_dbm2mw(dbm_cur);
1893
1894                         memcpy(&buf[dbm_cnt * sizeof(entry)], &entry, sizeof(entry));
1895                 }
1896
1897                 entry.dbm = dbm_max;
1898                 entry.mw  = iwinfo_dbm2mw(dbm_max);
1899
1900                 memcpy(&buf[dbm_cnt * sizeof(entry)], &entry, sizeof(entry));
1901                 dbm_cnt++;
1902
1903                 *len = dbm_cnt * sizeof(entry);
1904                 return 0;
1905         }
1906
1907         return -1;
1908 }
1909
1910 static void nl80211_get_scancrypto(const char *spec,
1911         struct iwinfo_crypto_entry *c)
1912 {
1913         if (strstr(spec, "WPA") || strstr(spec, "WEP"))
1914         {
1915                 c->enabled = 1;
1916
1917                 if (strstr(spec, "WPA2-") && strstr(spec, "WPA-"))
1918                         c->wpa_version = 3;
1919
1920                 else if (strstr(spec, "WPA2"))
1921                         c->wpa_version = 2;
1922
1923                 else if (strstr(spec, "WPA"))
1924                         c->wpa_version = 1;
1925
1926                 else if (strstr(spec, "WEP"))
1927                         c->auth_algs = IWINFO_AUTH_OPEN | IWINFO_AUTH_SHARED;
1928
1929
1930                 if (strstr(spec, "PSK"))
1931                         c->auth_suites |= IWINFO_KMGMT_PSK;
1932
1933                 if (strstr(spec, "802.1X") || strstr(spec, "EAP"))
1934                         c->auth_suites |= IWINFO_KMGMT_8021x;
1935
1936                 if (strstr(spec, "WPA-NONE"))
1937                         c->auth_suites |= IWINFO_KMGMT_NONE;
1938
1939
1940                 if (strstr(spec, "TKIP"))
1941                         c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1942
1943                 if (strstr(spec, "CCMP"))
1944                         c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1945
1946                 if (strstr(spec, "WEP-40"))
1947                         c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1948
1949                 if (strstr(spec, "WEP-104"))
1950                         c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1951
1952                 c->group_ciphers = c->pair_ciphers;
1953         }
1954         else
1955         {
1956                 c->enabled = 0;
1957         }
1958 }
1959
1960
1961 struct nl80211_scanlist {
1962         struct iwinfo_scanlist_entry *e;
1963         int len;
1964 };
1965
1966
1967 static void nl80211_get_scanlist_ie(struct nlattr **bss,
1968                                     struct iwinfo_scanlist_entry *e)
1969 {
1970         int ielen = nla_len(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1971         unsigned char *ie = nla_data(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1972         static unsigned char ms_oui[3] = { 0x00, 0x50, 0xf2 };
1973         int len;
1974
1975         while (ielen >= 2 && ielen >= ie[1])
1976         {
1977                 switch (ie[0])
1978                 {
1979                 case 0: /* SSID */
1980                         len = min(ie[1], IWINFO_ESSID_MAX_SIZE);
1981                         memcpy(e->ssid, ie + 2, len);
1982                         e->ssid[len] = 0;
1983                         break;
1984
1985                 case 48: /* RSN */
1986                         iwinfo_parse_rsn(&e->crypto, ie + 2, ie[1],
1987                                          IWINFO_CIPHER_CCMP, IWINFO_KMGMT_8021x);
1988                         break;
1989
1990                 case 221: /* Vendor */
1991                         if (ie[1] >= 4 && !memcmp(ie + 2, ms_oui, 3) && ie[5] == 1)
1992                                 iwinfo_parse_rsn(&e->crypto, ie + 6, ie[1] - 4,
1993                                                  IWINFO_CIPHER_TKIP, IWINFO_KMGMT_PSK);
1994                         break;
1995                 }
1996
1997                 ielen -= ie[1] + 2;
1998                 ie += ie[1] + 2;
1999         }
2000 }
2001
2002 static int nl80211_get_scanlist_cb(struct nl_msg *msg, void *arg)
2003 {
2004         int8_t rssi;
2005         uint16_t caps;
2006
2007         struct nl80211_scanlist *sl = arg;
2008         struct nlattr **tb = nl80211_parse(msg);
2009         struct nlattr *bss[NL80211_BSS_MAX + 1];
2010
2011         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
2012                 [NL80211_BSS_TSF]                  = { .type = NLA_U64 },
2013                 [NL80211_BSS_FREQUENCY]            = { .type = NLA_U32 },
2014                 [NL80211_BSS_BSSID]                = { 0 },
2015                 [NL80211_BSS_BEACON_INTERVAL]      = { .type = NLA_U16 },
2016                 [NL80211_BSS_CAPABILITY]           = { .type = NLA_U16 },
2017                 [NL80211_BSS_INFORMATION_ELEMENTS] = { 0 },
2018                 [NL80211_BSS_SIGNAL_MBM]           = { .type = NLA_U32 },
2019                 [NL80211_BSS_SIGNAL_UNSPEC]        = { .type = NLA_U8  },
2020                 [NL80211_BSS_STATUS]               = { .type = NLA_U32 },
2021                 [NL80211_BSS_SEEN_MS_AGO]          = { .type = NLA_U32 },
2022                 [NL80211_BSS_BEACON_IES]           = { 0 },
2023         };
2024
2025         if (!tb[NL80211_ATTR_BSS] ||
2026                 nla_parse_nested(bss, NL80211_BSS_MAX, tb[NL80211_ATTR_BSS],
2027                                  bss_policy) ||
2028                 !bss[NL80211_BSS_BSSID])
2029         {
2030                 return NL_SKIP;
2031         }
2032
2033         if (bss[NL80211_BSS_CAPABILITY])
2034                 caps = nla_get_u16(bss[NL80211_BSS_CAPABILITY]);
2035         else
2036                 caps = 0;
2037
2038         memset(sl->e, 0, sizeof(*sl->e));
2039         memcpy(sl->e->mac, nla_data(bss[NL80211_BSS_BSSID]), 6);
2040
2041         if (caps & (1<<1))
2042                 sl->e->mode = IWINFO_OPMODE_ADHOC;
2043         else if (caps & (1<<0))
2044                 sl->e->mode = IWINFO_OPMODE_MASTER;
2045         else
2046                 sl->e->mode = IWINFO_OPMODE_MESHPOINT;
2047
2048         if (caps & (1<<4))
2049                 sl->e->crypto.enabled = 1;
2050
2051         if (bss[NL80211_BSS_FREQUENCY])
2052                 sl->e->channel = nl80211_freq2channel(nla_get_u32(
2053                         bss[NL80211_BSS_FREQUENCY]));
2054
2055         if (bss[NL80211_BSS_INFORMATION_ELEMENTS])
2056                 nl80211_get_scanlist_ie(bss, sl->e);
2057
2058         if (bss[NL80211_BSS_SIGNAL_MBM])
2059         {
2060                 sl->e->signal =
2061                         (uint8_t)((int32_t)nla_get_u32(bss[NL80211_BSS_SIGNAL_MBM]) / 100);
2062
2063                 rssi = sl->e->signal - 0x100;
2064
2065                 if (rssi < -110)
2066                         rssi = -110;
2067                 else if (rssi > -40)
2068                         rssi = -40;
2069
2070                 sl->e->quality = (rssi + 110);
2071                 sl->e->quality_max = 70;
2072         }
2073
2074         if (sl->e->crypto.enabled && !sl->e->crypto.wpa_version)
2075         {
2076                 sl->e->crypto.auth_algs    = IWINFO_AUTH_OPEN | IWINFO_AUTH_SHARED;
2077                 sl->e->crypto.pair_ciphers = IWINFO_CIPHER_WEP40 | IWINFO_CIPHER_WEP104;
2078         }
2079
2080         sl->e++;
2081         sl->len++;
2082
2083         return NL_SKIP;
2084 }
2085
2086 static int nl80211_get_scanlist_nl(const char *ifname, char *buf, int *len)
2087 {
2088         struct nl80211_msg_conveyor *req;
2089         struct nl80211_scanlist sl = { .e = (struct iwinfo_scanlist_entry *)buf };
2090
2091         req = nl80211_msg(ifname, NL80211_CMD_TRIGGER_SCAN, 0);
2092         if (req)
2093         {
2094                 nl80211_send(req, NULL, NULL);
2095                 nl80211_free(req);
2096         }
2097
2098         nl80211_wait("nl80211", "scan", NL80211_CMD_NEW_SCAN_RESULTS);
2099
2100         req = nl80211_msg(ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP);
2101         if (req)
2102         {
2103                 nl80211_send(req, nl80211_get_scanlist_cb, &sl);
2104                 nl80211_free(req);
2105         }
2106
2107         *len = sl.len * sizeof(struct iwinfo_scanlist_entry);
2108         return *len ? 0 : -1;
2109 }
2110
2111 static int wpasupp_ssid_decode(const char *in, char *out, int outlen)
2112 {
2113 #define hex(x) \
2114         (((x) >= 'a') ? ((x) - 'a' + 10) : \
2115                 (((x) >= 'A') ? ((x) - 'A' + 10) : ((x) - '0')))
2116
2117         int len = 0;
2118
2119         while (*in)
2120         {
2121                 if (len + 1 >= outlen)
2122                         break;
2123
2124                 switch (*in)
2125                 {
2126                 case '\\':
2127                         in++;
2128                         switch (*in)
2129                         {
2130                         case 'n':
2131                                 out[len++] = '\n'; in++;
2132                                 break;
2133
2134                         case 'r':
2135                                 out[len++] = '\r'; in++;
2136                                 break;
2137
2138                         case 't':
2139                                 out[len++] = '\t'; in++;
2140                                 break;
2141
2142                         case 'e':
2143                                 out[len++] = '\033'; in++;
2144                                 break;
2145
2146                         case 'x':
2147                                 if (isxdigit(*(in+1)) && isxdigit(*(in+2)))
2148                                         out[len++] = hex(*(in+1)) * 16 + hex(*(in+2));
2149                                 in += 3;
2150                                 break;
2151
2152                         default:
2153                                 out[len++] = *in++;
2154                                 break;
2155                         }
2156                         break;
2157
2158                 default:
2159                         out[len++] = *in++;
2160                         break;
2161                 }
2162         }
2163
2164         if (outlen > len)
2165                 out[len] = '\0';
2166
2167         return len;
2168 }
2169
2170 static int nl80211_get_scanlist_wpactl(const char *ifname, char *buf, int *len)
2171 {
2172         int sock, qmax, rssi, tries, count = -1, ready = 0;
2173         char *pos, *line, *bssid, *freq, *signal, *flags, *ssid, reply[4096];
2174         struct sockaddr_un local = { 0 };
2175         struct iwinfo_scanlist_entry *e = (struct iwinfo_scanlist_entry *)buf;
2176
2177         sock = nl80211_wpactl_connect(ifname, &local);
2178
2179         if (sock < 0)
2180                 return sock;
2181
2182         send(sock, "ATTACH", 6, 0);
2183         send(sock, "SCAN", 4, 0);
2184
2185         /*
2186          * wait for scan results:
2187          *   nl80211_wpactl_recv() will use a timeout of 256ms and we need to scan
2188          *   72 channels at most. We'll also receive two "OK" messages acknowledging
2189          *   the "ATTACH" and "SCAN" commands and the driver might need a bit extra
2190          *   time to process the results, so try 72 + 2 + 1 times.
2191          */
2192         for (tries = 0; tries < 75; tries++)
2193         {
2194                 if (nl80211_wpactl_recv(sock, reply, sizeof(reply)) <= 0)
2195                         continue;
2196
2197                 /* got an event notification */
2198                 if (reply[0] == '<')
2199                 {
2200                         /* scan results are ready */
2201                         if (strstr(reply, "CTRL-EVENT-SCAN-RESULTS"))
2202                         {
2203                                 /* send "SCAN_RESULTS" command */
2204                                 ready = (send(sock, "SCAN_RESULTS", 12, 0) == 12);
2205                                 break;
2206                         }
2207
2208                         /* is another unrelated event, retry */
2209                         tries--;
2210                 }
2211         }
2212
2213         /* receive and parse scan results if the wait above didn't time out */
2214         if (ready && nl80211_wpactl_recv(sock, reply, sizeof(reply)) > 0)
2215         {
2216                 nl80211_get_quality_max(ifname, &qmax);
2217
2218                 for (line = strtok_r(reply, "\n", &pos);
2219                      line != NULL;
2220                      line = strtok_r(NULL, "\n", &pos))
2221                 {
2222                         /* skip header line */
2223                         if (count < 0)
2224                         {
2225                                 count++;
2226                                 continue;
2227                         }
2228
2229                         bssid  = strtok(line, "\t");
2230                         freq   = strtok(NULL, "\t");
2231                         signal = strtok(NULL, "\t");
2232                         flags  = strtok(NULL, "\t");
2233                         ssid   = strtok(NULL, "\n");
2234
2235                         if (!bssid || !freq || !signal || !flags || !ssid)
2236                                 continue;
2237
2238                         /* BSSID */
2239                         e->mac[0] = strtol(&bssid[0],  NULL, 16);
2240                         e->mac[1] = strtol(&bssid[3],  NULL, 16);
2241                         e->mac[2] = strtol(&bssid[6],  NULL, 16);
2242                         e->mac[3] = strtol(&bssid[9],  NULL, 16);
2243                         e->mac[4] = strtol(&bssid[12], NULL, 16);
2244                         e->mac[5] = strtol(&bssid[15], NULL, 16);
2245
2246                         /* SSID */
2247                         wpasupp_ssid_decode(ssid, e->ssid, sizeof(e->ssid));
2248
2249                         /* Mode */
2250                         if (strstr(flags, "[MESH]"))
2251                                 e->mode = IWINFO_OPMODE_MESHPOINT;
2252                         else if (strstr(flags, "[IBSS]"))
2253                                 e->mode = IWINFO_OPMODE_ADHOC;
2254                         else
2255                                 e->mode = IWINFO_OPMODE_MASTER;
2256
2257                         /* Channel */
2258                         e->channel = nl80211_freq2channel(atoi(freq));
2259
2260                         /* Signal */
2261                         rssi = atoi(signal);
2262                         e->signal = rssi;
2263
2264                         /* Quality */
2265                         if (rssi < 0)
2266                         {
2267                                 /* The cfg80211 wext compat layer assumes a signal range
2268                                  * of -110 dBm to -40 dBm, the quality value is derived
2269                                  * by adding 110 to the signal level */
2270                                 if (rssi < -110)
2271                                         rssi = -110;
2272                                 else if (rssi > -40)
2273                                         rssi = -40;
2274
2275                                 e->quality = (rssi + 110);
2276                         }
2277                         else
2278                         {
2279                                 e->quality = rssi;
2280                         }
2281
2282                         /* Max. Quality */
2283                         e->quality_max = qmax;
2284
2285                         /* Crypto */
2286                         nl80211_get_scancrypto(flags, &e->crypto);
2287
2288                         count++;
2289                         e++;
2290                 }
2291
2292                 *len = count * sizeof(struct iwinfo_scanlist_entry);
2293         }
2294
2295         close(sock);
2296         unlink(local.sun_path);
2297
2298         return (count >= 0) ? 0 : -1;
2299 }
2300
2301 static int nl80211_get_scanlist(const char *ifname, char *buf, int *len)
2302 {
2303         char *res;
2304         int rv, mode;
2305
2306         *len = 0;
2307
2308         /* Got a radioX pseudo interface, find some interface on it or create one */
2309         if (!strncmp(ifname, "radio", 5))
2310         {
2311                 /* Reuse existing interface */
2312                 if ((res = nl80211_phy2ifname(ifname)) != NULL)
2313                 {
2314                         return nl80211_get_scanlist(res, buf, len);
2315                 }
2316
2317                 /* Need to spawn a temporary iface for scanning */
2318                 else if ((res = nl80211_ifadd(ifname)) != NULL)
2319                 {
2320                         rv = nl80211_get_scanlist(res, buf, len);
2321                         nl80211_ifdel(res);
2322                         return rv;
2323                 }
2324         }
2325
2326         /* WPA supplicant */
2327         if (!nl80211_get_scanlist_wpactl(ifname, buf, len))
2328         {
2329                 return 0;
2330         }
2331
2332         /* station / ad-hoc / monitor scan */
2333         else if (!nl80211_get_mode(ifname, &mode) &&
2334                  (mode == IWINFO_OPMODE_ADHOC ||
2335                   mode == IWINFO_OPMODE_MASTER ||
2336                   mode == IWINFO_OPMODE_CLIENT ||
2337                   mode == IWINFO_OPMODE_MONITOR) &&
2338                  iwinfo_ifup(ifname))
2339         {
2340                 return nl80211_get_scanlist_nl(ifname, buf, len);
2341         }
2342
2343         /* AP scan */
2344         else
2345         {
2346                 /* Got a temp interface, don't create yet another one */
2347                 if (!strncmp(ifname, "tmp.", 4))
2348                 {
2349                         if (!iwinfo_ifup(ifname))
2350                                 return -1;
2351
2352                         rv = nl80211_get_scanlist_nl(ifname, buf, len);
2353                         iwinfo_ifdown(ifname);
2354                         return rv;
2355                 }
2356
2357                 /* Spawn a new scan interface */
2358                 else
2359                 {
2360                         if (!(res = nl80211_ifadd(ifname)))
2361                                 return -1;
2362
2363                         iwinfo_ifmac(res);
2364
2365                         /* if we can take the new interface up, the driver supports an
2366                          * additional interface and there's no need to tear down the ap */
2367                         if (iwinfo_ifup(res))
2368                         {
2369                                 rv = nl80211_get_scanlist_nl(res, buf, len);
2370                                 iwinfo_ifdown(res);
2371                         }
2372
2373                         /* driver cannot create secondary interface, take down ap
2374                          * during scan */
2375                         else if (iwinfo_ifdown(ifname) && iwinfo_ifup(res))
2376                         {
2377                                 rv = nl80211_get_scanlist_nl(res, buf, len);
2378                                 iwinfo_ifdown(res);
2379                                 iwinfo_ifup(ifname);
2380                                 nl80211_hostapd_hup(ifname);
2381                         }
2382
2383                         nl80211_ifdel(res);
2384                         return rv;
2385                 }
2386         }
2387
2388         return -1;
2389 }
2390
2391 static int nl80211_get_freqlist_cb(struct nl_msg *msg, void *arg)
2392 {
2393         int bands_remain, freqs_remain;
2394
2395         struct nl80211_array_buf *arr = arg;
2396         struct iwinfo_freqlist_entry *e = arr->buf;
2397
2398         struct nlattr **attr = nl80211_parse(msg);
2399         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
2400         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
2401         struct nlattr *band, *freq;
2402
2403         nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
2404         {
2405                 nla_parse(bands, NL80211_BAND_ATTR_MAX,
2406                           nla_data(band), nla_len(band), NULL);
2407
2408                 nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS], freqs_remain)
2409                 {
2410                         nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
2411                                   nla_data(freq), nla_len(freq), NULL);
2412
2413                         if (!freqs[NL80211_FREQUENCY_ATTR_FREQ] ||
2414                             freqs[NL80211_FREQUENCY_ATTR_DISABLED])
2415                                 continue;
2416
2417                         e->mhz = nla_get_u32(freqs[NL80211_FREQUENCY_ATTR_FREQ]);
2418                         e->channel = nl80211_freq2channel(e->mhz);
2419
2420                         e->restricted = (
2421                                 freqs[NL80211_FREQUENCY_ATTR_NO_IR] &&
2422                                 !freqs[NL80211_FREQUENCY_ATTR_RADAR]
2423                         ) ? 1 : 0;
2424
2425                         e++;
2426                         arr->count++;
2427                 }
2428         }
2429
2430         return NL_SKIP;
2431 }
2432
2433 static int nl80211_get_freqlist(const char *ifname, char *buf, int *len)
2434 {
2435         struct nl80211_msg_conveyor *req;
2436         struct nl80211_array_buf arr = { .buf = buf, .count = 0 };
2437
2438         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2439         if (req)
2440         {
2441                 nl80211_send(req, nl80211_get_freqlist_cb, &arr);
2442                 nl80211_free(req);
2443         }
2444
2445         if (arr.count > 0)
2446         {
2447                 *len = arr.count * sizeof(struct iwinfo_freqlist_entry);
2448                 return 0;
2449         }
2450
2451         return -1;
2452 }
2453
2454 static int nl80211_get_country_cb(struct nl_msg *msg, void *arg)
2455 {
2456         char *buf = arg;
2457         struct nlattr **attr = nl80211_parse(msg);
2458
2459         if (attr[NL80211_ATTR_REG_ALPHA2])
2460                 memcpy(buf, nla_data(attr[NL80211_ATTR_REG_ALPHA2]), 2);
2461         else
2462                 buf[0] = 0;
2463
2464         return NL_SKIP;
2465 }
2466
2467 static int nl80211_get_country(const char *ifname, char *buf)
2468 {
2469         int rv = -1;
2470         struct nl80211_msg_conveyor *req;
2471
2472         req = nl80211_msg(ifname, NL80211_CMD_GET_REG, 0);
2473         if (req)
2474         {
2475                 nl80211_send(req, nl80211_get_country_cb, buf);
2476                 nl80211_free(req);
2477
2478                 if (buf[0])
2479                         rv = 0;
2480         }
2481
2482         return rv;
2483 }
2484
2485 static int nl80211_get_countrylist(const char *ifname, char *buf, int *len)
2486 {
2487         int count;
2488         struct iwinfo_country_entry *e = (struct iwinfo_country_entry *)buf;
2489         const struct iwinfo_iso3166_label *l;
2490
2491         for (l = IWINFO_ISO3166_NAMES, count = 0; l->iso3166; l++, e++, count++)
2492         {
2493                 e->iso3166 = l->iso3166;
2494                 e->ccode[0] = (l->iso3166 / 256);
2495                 e->ccode[1] = (l->iso3166 % 256);
2496                 e->ccode[2] = 0;
2497         }
2498
2499         *len = (count * sizeof(struct iwinfo_country_entry));
2500         return 0;
2501 }
2502
2503
2504 struct nl80211_modes
2505 {
2506         bool ok;
2507         uint32_t hw;
2508         uint32_t ht;
2509 };
2510
2511 static int nl80211_get_modelist_cb(struct nl_msg *msg, void *arg)
2512 {
2513         struct nl80211_modes *m = arg;
2514         int bands_remain, freqs_remain;
2515         uint16_t caps = 0;
2516         uint32_t vht_caps = 0;
2517         struct nlattr **attr = nl80211_parse(msg);
2518         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
2519         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
2520         struct nlattr *band, *freq;
2521
2522         if (attr[NL80211_ATTR_WIPHY_BANDS])
2523         {
2524                 nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
2525                 {
2526                         nla_parse(bands, NL80211_BAND_ATTR_MAX,
2527                                   nla_data(band), nla_len(band), NULL);
2528
2529                         if (bands[NL80211_BAND_ATTR_HT_CAPA])
2530                                 caps = nla_get_u16(bands[NL80211_BAND_ATTR_HT_CAPA]);
2531
2532                         /* Treat any nonzero capability as 11n */
2533                         if (caps > 0)
2534                         {
2535                                 m->hw |= IWINFO_80211_N;
2536                                 m->ht |= IWINFO_HTMODE_HT20;
2537
2538                                 if (caps & (1 << 1))
2539                                         m->ht |= IWINFO_HTMODE_HT40;
2540                         }
2541
2542                         nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS],
2543                                             freqs_remain)
2544                         {
2545                                 nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
2546                                           nla_data(freq), nla_len(freq), NULL);
2547
2548                                 if (!freqs[NL80211_FREQUENCY_ATTR_FREQ])
2549                                         continue;
2550
2551                                 if (nla_get_u32(freqs[NL80211_FREQUENCY_ATTR_FREQ]) < 2485)
2552                                 {
2553                                         m->hw |= IWINFO_80211_B;
2554                                         m->hw |= IWINFO_80211_G;
2555                                 }
2556                                 else if (bands[NL80211_BAND_ATTR_VHT_CAPA])
2557                                 {
2558                                         vht_caps = nla_get_u32(bands[NL80211_BAND_ATTR_VHT_CAPA]);
2559
2560                                         /* Treat any nonzero capability as 11ac */
2561                                         if (vht_caps > 0)
2562                                         {
2563                                                 m->hw |= IWINFO_80211_AC;
2564                                                 m->ht |= IWINFO_HTMODE_VHT20 | IWINFO_HTMODE_VHT40 | IWINFO_HTMODE_VHT80;
2565
2566                                                 switch ((vht_caps >> 2) & 3)
2567                                                 {
2568                                                 case 2:
2569                                                         m->ht |= IWINFO_HTMODE_VHT80_80;
2570                                                         /* fall through */
2571
2572                                                 case 1:
2573                                                         m->ht |= IWINFO_HTMODE_VHT160;
2574                                                 }
2575                                         }
2576                                 }
2577                                 else if (!(m->hw & IWINFO_80211_AC))
2578                                 {
2579                                         m->hw |= IWINFO_80211_A;
2580                                 }
2581                         }
2582                 }
2583
2584                 m->ok = 1;
2585         }
2586
2587         return NL_SKIP;
2588 }
2589
2590 static int nl80211_get_hwmodelist(const char *ifname, int *buf)
2591 {
2592         struct nl80211_msg_conveyor *req;
2593         struct nl80211_modes m = { 0 };
2594
2595         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2596         if (req)
2597         {
2598                 nl80211_send(req, nl80211_get_modelist_cb, &m);
2599                 nl80211_free(req);
2600         }
2601
2602         if (m.ok)
2603         {
2604                 *buf = m.hw;
2605                 return 0;
2606         }
2607
2608         return -1;
2609 }
2610
2611 static int nl80211_get_htmodelist(const char *ifname, int *buf)
2612 {
2613         struct nl80211_msg_conveyor *req;
2614         struct nl80211_modes m = { 0 };
2615
2616         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2617         if (req)
2618         {
2619                 nl80211_send(req, nl80211_get_modelist_cb, &m);
2620                 nl80211_free(req);
2621         }
2622
2623         if (m.ok)
2624         {
2625                 *buf = m.ht;
2626                 return 0;
2627         }
2628
2629         return -1;
2630 }
2631
2632
2633 static int nl80211_get_ifcomb_cb(struct nl_msg *msg, void *arg)
2634 {
2635         struct nlattr **attr = nl80211_parse(msg);
2636         struct nlattr *comb;
2637         int *ret = arg;
2638         int comb_rem, limit_rem, mode_rem;
2639
2640         *ret = 0;
2641         if (!attr[NL80211_ATTR_INTERFACE_COMBINATIONS])
2642                 return NL_SKIP;
2643
2644         nla_for_each_nested(comb, attr[NL80211_ATTR_INTERFACE_COMBINATIONS], comb_rem)
2645         {
2646                 static struct nla_policy iface_combination_policy[NUM_NL80211_IFACE_COMB] = {
2647                         [NL80211_IFACE_COMB_LIMITS] = { .type = NLA_NESTED },
2648                         [NL80211_IFACE_COMB_MAXNUM] = { .type = NLA_U32 },
2649                 };
2650                 struct nlattr *tb_comb[NUM_NL80211_IFACE_COMB+1];
2651                 static struct nla_policy iface_limit_policy[NUM_NL80211_IFACE_LIMIT] = {
2652                         [NL80211_IFACE_LIMIT_TYPES] = { .type = NLA_NESTED },
2653                         [NL80211_IFACE_LIMIT_MAX] = { .type = NLA_U32 },
2654                 };
2655                 struct nlattr *tb_limit[NUM_NL80211_IFACE_LIMIT+1];
2656                 struct nlattr *limit;
2657
2658                 nla_parse_nested(tb_comb, NUM_NL80211_IFACE_COMB, comb, iface_combination_policy);
2659
2660                 if (!tb_comb[NL80211_IFACE_COMB_LIMITS])
2661                         continue;
2662
2663                 nla_for_each_nested(limit, tb_comb[NL80211_IFACE_COMB_LIMITS], limit_rem)
2664                 {
2665                         struct nlattr *mode;
2666
2667                         nla_parse_nested(tb_limit, NUM_NL80211_IFACE_LIMIT, limit, iface_limit_policy);
2668
2669                         if (!tb_limit[NL80211_IFACE_LIMIT_TYPES] ||
2670                             !tb_limit[NL80211_IFACE_LIMIT_MAX])
2671                                 continue;
2672
2673                         if (nla_get_u32(tb_limit[NL80211_IFACE_LIMIT_MAX]) < 2)
2674                                 continue;
2675
2676                         nla_for_each_nested(mode, tb_limit[NL80211_IFACE_LIMIT_TYPES], mode_rem) {
2677                                 if (nla_type(mode) == NL80211_IFTYPE_AP)
2678                                         *ret = 1;
2679                         }
2680                 }
2681         }
2682
2683         return NL_SKIP;
2684 }
2685
2686 static int nl80211_get_mbssid_support(const char *ifname, int *buf)
2687 {
2688         struct nl80211_msg_conveyor *req;
2689
2690         req = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, 0);
2691         if (!req)
2692                 return -1;
2693
2694         nl80211_send(req, nl80211_get_ifcomb_cb, buf);
2695         nl80211_free(req);
2696         return 0;
2697 }
2698
2699 static int nl80211_get_hardware_id(const char *ifname, char *buf)
2700 {
2701         int rv = -1;
2702         char *res;
2703
2704         /* Got a radioX pseudo interface, find some interface on it or create one */
2705         if (!strncmp(ifname, "radio", 5))
2706         {
2707                 /* Reuse existing interface */
2708                 if ((res = nl80211_phy2ifname(ifname)) != NULL)
2709                 {
2710                         rv = wext_ops.hardware_id(res, buf);
2711                 }
2712
2713                 /* Need to spawn a temporary iface for finding IDs */
2714                 else if ((res = nl80211_ifadd(ifname)) != NULL)
2715                 {
2716                         rv = wext_ops.hardware_id(res, buf);
2717                         nl80211_ifdel(res);
2718                 }
2719         }
2720         else
2721         {
2722                 rv = wext_ops.hardware_id(ifname, buf);
2723         }
2724
2725         /* Failed to obtain hardware IDs, search board config */
2726         if (rv)
2727         {
2728                 rv = iwinfo_hardware_id_from_mtd((struct iwinfo_hardware_id *)buf);
2729         }
2730
2731         return rv;
2732 }
2733
2734 static const struct iwinfo_hardware_entry *
2735 nl80211_get_hardware_entry(const char *ifname)
2736 {
2737         struct iwinfo_hardware_id id;
2738
2739         if (nl80211_get_hardware_id(ifname, (char *)&id))
2740                 return NULL;
2741
2742         return iwinfo_hardware(&id);
2743 }
2744
2745 static int nl80211_get_hardware_name(const char *ifname, char *buf)
2746 {
2747         const struct iwinfo_hardware_entry *hw;
2748
2749         if (!(hw = nl80211_get_hardware_entry(ifname)))
2750                 sprintf(buf, "Generic MAC80211");
2751         else
2752                 sprintf(buf, "%s %s", hw->vendor_name, hw->device_name);
2753
2754         return 0;
2755 }
2756
2757 static int nl80211_get_txpower_offset(const char *ifname, int *buf)
2758 {
2759         const struct iwinfo_hardware_entry *hw;
2760
2761         if (!(hw = nl80211_get_hardware_entry(ifname)))
2762                 return -1;
2763
2764         *buf = hw->txpower_offset;
2765         return 0;
2766 }
2767
2768 static int nl80211_get_frequency_offset(const char *ifname, int *buf)
2769 {
2770         const struct iwinfo_hardware_entry *hw;
2771
2772         if (!(hw = nl80211_get_hardware_entry(ifname)))
2773                 return -1;
2774
2775         *buf = hw->frequency_offset;
2776         return 0;
2777 }
2778
2779 static int nl80211_lookup_phyname(const char *section, char *buf)
2780 {
2781         int idx;
2782
2783         if ((idx = nl80211_phy_idx_from_uci(section)) < 0)
2784                 return -1;
2785
2786         sprintf(buf, "phy%d", idx);
2787         return 0;
2788 }
2789
2790 const struct iwinfo_ops nl80211_ops = {
2791         .name             = "nl80211",
2792         .probe            = nl80211_probe,
2793         .channel          = nl80211_get_channel,
2794         .frequency        = nl80211_get_frequency,
2795         .frequency_offset = nl80211_get_frequency_offset,
2796         .txpower          = nl80211_get_txpower,
2797         .txpower_offset   = nl80211_get_txpower_offset,
2798         .bitrate          = nl80211_get_bitrate,
2799         .signal           = nl80211_get_signal,
2800         .noise            = nl80211_get_noise,
2801         .quality          = nl80211_get_quality,
2802         .quality_max      = nl80211_get_quality_max,
2803         .mbssid_support   = nl80211_get_mbssid_support,
2804         .hwmodelist       = nl80211_get_hwmodelist,
2805         .htmodelist       = nl80211_get_htmodelist,
2806         .mode             = nl80211_get_mode,
2807         .ssid             = nl80211_get_ssid,
2808         .bssid            = nl80211_get_bssid,
2809         .country          = nl80211_get_country,
2810         .hardware_id      = nl80211_get_hardware_id,
2811         .hardware_name    = nl80211_get_hardware_name,
2812         .encryption       = nl80211_get_encryption,
2813         .phyname          = nl80211_get_phyname,
2814         .assoclist        = nl80211_get_assoclist,
2815         .txpwrlist        = nl80211_get_txpwrlist,
2816         .scanlist         = nl80211_get_scanlist,
2817         .freqlist         = nl80211_get_freqlist,
2818         .countrylist      = nl80211_get_countrylist,
2819         .lookup_phy       = nl80211_lookup_phyname,
2820         .close            = nl80211_close
2821 };