add support for expected throughput
[project/iwinfo.git] / iwinfo_nl80211.c
1 /*
2  * iwinfo - Wireless Information Library - NL80211 Backend
3  *
4  *   Copyright (C) 2010-2013 Jo-Philipp Wich <xm@subsignal.org>
5  *
6  * The iwinfo library is free software: you can redistribute it and/or
7  * modify it under the terms of the GNU General Public License version 2
8  * as published by the Free Software Foundation.
9  *
10  * The iwinfo library is distributed in the hope that it will be useful,
11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
13  * See the GNU General Public License for more details.
14  *
15  * You should have received a copy of the GNU General Public License along
16  * with the iwinfo library. If not, see http://www.gnu.org/licenses/.
17  *
18  * The signal handling code is derived from the official madwifi tools,
19  * wlanconfig.c in particular. The encryption property handling was
20  * inspired by the hostapd madwifi driver.
21  *
22  * Parts of this code are derived from the Linux iw utility.
23  */
24
25 #include <limits.h>
26 #include <glob.h>
27 #include <fnmatch.h>
28 #include <stdarg.h>
29
30 #include "iwinfo_nl80211.h"
31
32 #define min(x, y) ((x) < (y)) ? (x) : (y)
33
34 #define BIT(x) (1ULL<<(x))
35
36 static struct nl80211_state *nls = NULL;
37
38 static void nl80211_close(void)
39 {
40         if (nls)
41         {
42                 if (nls->nlctrl)
43                         genl_family_put(nls->nlctrl);
44
45                 if (nls->nl80211)
46                         genl_family_put(nls->nl80211);
47
48                 if (nls->nl_sock)
49                         nl_socket_free(nls->nl_sock);
50
51                 if (nls->nl_cache)
52                         nl_cache_free(nls->nl_cache);
53
54                 free(nls);
55                 nls = NULL;
56         }
57 }
58
59 static int nl80211_init(void)
60 {
61         int err, fd;
62
63         if (!nls)
64         {
65                 nls = malloc(sizeof(struct nl80211_state));
66                 if (!nls) {
67                         err = -ENOMEM;
68                         goto err;
69                 }
70
71                 memset(nls, 0, sizeof(*nls));
72
73                 nls->nl_sock = nl_socket_alloc();
74                 if (!nls->nl_sock) {
75                         err = -ENOMEM;
76                         goto err;
77                 }
78
79                 if (genl_connect(nls->nl_sock)) {
80                         err = -ENOLINK;
81                         goto err;
82                 }
83
84                 fd = nl_socket_get_fd(nls->nl_sock);
85                 if (fcntl(fd, F_SETFD, fcntl(fd, F_GETFD) | FD_CLOEXEC) < 0) {
86                         err = -EINVAL;
87                         goto err;
88                 }
89
90                 if (genl_ctrl_alloc_cache(nls->nl_sock, &nls->nl_cache)) {
91                         err = -ENOMEM;
92                         goto err;
93                 }
94
95                 nls->nl80211 = genl_ctrl_search_by_name(nls->nl_cache, "nl80211");
96                 if (!nls->nl80211) {
97                         err = -ENOENT;
98                         goto err;
99                 }
100
101                 nls->nlctrl = genl_ctrl_search_by_name(nls->nl_cache, "nlctrl");
102                 if (!nls->nlctrl) {
103                         err = -ENOENT;
104                         goto err;
105                 }
106         }
107
108         return 0;
109
110
111 err:
112         nl80211_close();
113         return err;
114 }
115
116 static int nl80211_readint(const char *path)
117 {
118         int fd;
119         int rv = -1;
120         char buffer[16];
121
122         if ((fd = open(path, O_RDONLY)) > -1)
123         {
124                 if (read(fd, buffer, sizeof(buffer)) > 0)
125                         rv = atoi(buffer);
126
127                 close(fd);
128         }
129
130         return rv;
131 }
132
133 static int nl80211_readstr(const char *path, char *buffer, int length)
134 {
135         int fd;
136         int rv = -1;
137
138         if ((fd = open(path, O_RDONLY)) > -1)
139         {
140                 if ((rv = read(fd, buffer, length - 1)) > 0)
141                 {
142                         if (buffer[rv - 1] == '\n')
143                                 rv--;
144
145                         buffer[rv] = 0;
146                 }
147
148                 close(fd);
149         }
150
151         return rv;
152 }
153
154
155 static int nl80211_msg_error(struct sockaddr_nl *nla,
156         struct nlmsgerr *err, void *arg)
157 {
158         int *ret = arg;
159         *ret = err->error;
160         return NL_STOP;
161 }
162
163 static int nl80211_msg_finish(struct nl_msg *msg, void *arg)
164 {
165         int *ret = arg;
166         *ret = 0;
167         return NL_SKIP;
168 }
169
170 static int nl80211_msg_ack(struct nl_msg *msg, void *arg)
171 {
172         int *ret = arg;
173         *ret = 0;
174         return NL_STOP;
175 }
176
177 static int nl80211_msg_response(struct nl_msg *msg, void *arg)
178 {
179         return NL_SKIP;
180 }
181
182 static void nl80211_free(struct nl80211_msg_conveyor *cv)
183 {
184         if (cv)
185         {
186                 if (cv->cb)
187                         nl_cb_put(cv->cb);
188
189                 if (cv->msg)
190                         nlmsg_free(cv->msg);
191
192                 cv->cb  = NULL;
193                 cv->msg = NULL;
194         }
195 }
196
197 static struct nl80211_msg_conveyor * nl80211_new(struct genl_family *family,
198                                                  int cmd, int flags)
199 {
200         static struct nl80211_msg_conveyor cv;
201
202         struct nl_msg *req = NULL;
203         struct nl_cb *cb = NULL;
204
205         req = nlmsg_alloc();
206         if (!req)
207                 goto err;
208
209         cb = nl_cb_alloc(NL_CB_DEFAULT);
210         if (!cb)
211                 goto err;
212
213         genlmsg_put(req, 0, 0, genl_family_get_id(family), 0, flags, cmd, 0);
214
215         cv.msg = req;
216         cv.cb  = cb;
217
218         return &cv;
219
220 err:
221         if (req)
222                 nlmsg_free(req);
223
224         return NULL;
225 }
226
227 static struct nl80211_msg_conveyor * nl80211_ctl(int cmd, int flags)
228 {
229         if (nl80211_init() < 0)
230                 return NULL;
231
232         return nl80211_new(nls->nlctrl, cmd, flags);
233 }
234
235 static int nl80211_phy_idx_from_uci_path(struct uci_section *s)
236 {
237         const char *opt;
238         char buf[128];
239         int idx = -1;
240         glob_t gl;
241
242         opt = uci_lookup_option_string(uci_ctx, s, "path");
243         if (!opt)
244                 return -1;
245
246         snprintf(buf, sizeof(buf), "/sys/devices/%s/ieee80211/*/index", opt);  /**/
247         if (glob(buf, 0, NULL, &gl))
248                 snprintf(buf, sizeof(buf), "/sys/devices/platform/%s/ieee80211/*/index", opt);  /**/
249
250         if (glob(buf, 0, NULL, &gl))
251                 return -1;
252
253         if (gl.gl_pathc > 0)
254                 idx = nl80211_readint(gl.gl_pathv[0]);
255
256         globfree(&gl);
257
258         return idx;
259 }
260
261 static int nl80211_phy_idx_from_uci_macaddr(struct uci_section *s)
262 {
263         const char *opt;
264         char buf[128];
265         int i, idx = -1;
266         glob_t gl;
267
268         opt = uci_lookup_option_string(uci_ctx, s, "macaddr");
269         if (!opt)
270                 return -1;
271
272         snprintf(buf, sizeof(buf), "/sys/class/ieee80211/*");   /**/
273         if (glob(buf, 0, NULL, &gl))
274                 return -1;
275
276         for (i = 0; i < gl.gl_pathc; i++)
277         {
278                 snprintf(buf, sizeof(buf), "%s/macaddress", gl.gl_pathv[i]);
279                 if (nl80211_readstr(buf, buf, sizeof(buf)) <= 0)
280                         continue;
281
282                 if (fnmatch(opt, buf, FNM_CASEFOLD))
283                         continue;
284
285                 snprintf(buf, sizeof(buf), "%s/index", gl.gl_pathv[i]);
286                 if ((idx = nl80211_readint(buf)) > -1)
287                         break;
288         }
289
290         globfree(&gl);
291
292         return idx;
293 }
294
295 static int nl80211_phy_idx_from_uci_phy(struct uci_section *s)
296 {
297         const char *opt;
298         char buf[128];
299
300         opt = uci_lookup_option_string(uci_ctx, s, "phy");
301         if (!opt)
302                 return -1;
303
304         snprintf(buf, sizeof(buf), "/sys/class/ieee80211/%s/index", opt);
305         return nl80211_readint(buf);
306 }
307
308 static int nl80211_phy_idx_from_uci(const char *name)
309 {
310         struct uci_section *s;
311         int idx = -1;
312
313         s = iwinfo_uci_get_radio(name, "mac80211");
314         if (!s)
315                 goto free;
316
317         idx = nl80211_phy_idx_from_uci_path(s);
318
319         if (idx < 0)
320                 idx = nl80211_phy_idx_from_uci_macaddr(s);
321
322         if (idx < 0)
323                 idx = nl80211_phy_idx_from_uci_phy(s);
324
325 free:
326         iwinfo_uci_free();
327         return idx;
328 }
329
330 static struct nl80211_msg_conveyor * nl80211_msg(const char *ifname,
331                                                  int cmd, int flags)
332 {
333         int ifidx = -1, phyidx = -1;
334         struct nl80211_msg_conveyor *cv;
335
336         if (ifname == NULL)
337                 return NULL;
338
339         if (nl80211_init() < 0)
340                 return NULL;
341
342         if (!strncmp(ifname, "phy", 3))
343                 phyidx = atoi(&ifname[3]);
344         else if (!strncmp(ifname, "radio", 5))
345                 phyidx = nl80211_phy_idx_from_uci(ifname);
346         else if (!strncmp(ifname, "mon.", 4))
347                 ifidx = if_nametoindex(&ifname[4]);
348         else
349                 ifidx = if_nametoindex(ifname);
350
351         /* Valid ifidx must be greater than 0 */
352         if ((ifidx <= 0) && (phyidx < 0))
353                 return NULL;
354
355         cv = nl80211_new(nls->nl80211, cmd, flags);
356         if (!cv)
357                 return NULL;
358
359         if (ifidx > -1)
360                 NLA_PUT_U32(cv->msg, NL80211_ATTR_IFINDEX, ifidx);
361
362         if (phyidx > -1)
363                 NLA_PUT_U32(cv->msg, NL80211_ATTR_WIPHY, phyidx);
364
365         return cv;
366
367 nla_put_failure:
368         nl80211_free(cv);
369         return NULL;
370 }
371
372 static int nl80211_send(struct nl80211_msg_conveyor *cv,
373                         int (*cb_func)(struct nl_msg *, void *),
374                         void *cb_arg)
375 {
376         static struct nl80211_msg_conveyor rcv;
377         int err;
378
379         if (cb_func)
380                 nl_cb_set(cv->cb, NL_CB_VALID, NL_CB_CUSTOM, cb_func, cb_arg);
381         else
382                 nl_cb_set(cv->cb, NL_CB_VALID, NL_CB_CUSTOM, nl80211_msg_response, &rcv);
383
384         err = nl_send_auto_complete(nls->nl_sock, cv->msg);
385
386         if (err < 0)
387                 goto out;
388
389         err = 1;
390
391         nl_cb_err(cv->cb,               NL_CB_CUSTOM, nl80211_msg_error,  &err);
392         nl_cb_set(cv->cb, NL_CB_FINISH, NL_CB_CUSTOM, nl80211_msg_finish, &err);
393         nl_cb_set(cv->cb, NL_CB_ACK,    NL_CB_CUSTOM, nl80211_msg_ack,    &err);
394
395         while (err > 0)
396                 nl_recvmsgs(nls->nl_sock, cv->cb);
397
398 out:
399         nl80211_free(cv);
400         return err;
401 }
402
403 static int nl80211_request(const char *ifname, int cmd, int flags,
404                            int (*cb_func)(struct nl_msg *, void *),
405                            void *cb_arg)
406 {
407         struct nl80211_msg_conveyor *cv;
408
409         cv = nl80211_msg(ifname, cmd, flags);
410
411         if (!cv)
412                 return -ENOMEM;
413
414         return nl80211_send(cv, cb_func, cb_arg);
415 }
416
417 static struct nlattr ** nl80211_parse(struct nl_msg *msg)
418 {
419         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
420         static struct nlattr *attr[NL80211_ATTR_MAX + 1];
421
422         nla_parse(attr, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
423                   genlmsg_attrlen(gnlh, 0), NULL);
424
425         return attr;
426 }
427
428 static int nl80211_get_protocol_features_cb(struct nl_msg *msg, void *arg)
429 {
430         uint32_t *features = arg;
431         struct nlattr **attr = nl80211_parse(msg);
432
433         if (attr[NL80211_ATTR_PROTOCOL_FEATURES])
434                 *features = nla_get_u32(attr[NL80211_ATTR_PROTOCOL_FEATURES]);
435
436         return NL_SKIP;
437 }
438
439 static int nl80211_get_protocol_features(const char *ifname)
440 {
441         struct nl80211_msg_conveyor *req;
442         uint32_t features = 0;
443
444         req = nl80211_msg(ifname, NL80211_CMD_GET_PROTOCOL_FEATURES, 0);
445         if (req) {
446                 nl80211_send(req, nl80211_get_protocol_features_cb, &features);
447                 nl80211_free(req);
448         }
449
450         return features;
451 }
452
453 static int nl80211_subscribe_cb(struct nl_msg *msg, void *arg)
454 {
455         struct nl80211_group_conveyor *cv = arg;
456
457         struct nlattr **attr = nl80211_parse(msg);
458         struct nlattr *mgrpinfo[CTRL_ATTR_MCAST_GRP_MAX + 1];
459         struct nlattr *mgrp;
460         int mgrpidx;
461
462         if (!attr[CTRL_ATTR_MCAST_GROUPS])
463                 return NL_SKIP;
464
465         nla_for_each_nested(mgrp, attr[CTRL_ATTR_MCAST_GROUPS], mgrpidx)
466         {
467                 nla_parse(mgrpinfo, CTRL_ATTR_MCAST_GRP_MAX,
468                           nla_data(mgrp), nla_len(mgrp), NULL);
469
470                 if (mgrpinfo[CTRL_ATTR_MCAST_GRP_ID] &&
471                     mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME] &&
472                     !strncmp(nla_data(mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME]),
473                              cv->name, nla_len(mgrpinfo[CTRL_ATTR_MCAST_GRP_NAME])))
474                 {
475                         cv->id = nla_get_u32(mgrpinfo[CTRL_ATTR_MCAST_GRP_ID]);
476                         break;
477                 }
478         }
479
480         return NL_SKIP;
481 }
482
483 static int nl80211_subscribe(const char *family, const char *group)
484 {
485         struct nl80211_group_conveyor cv = { .name = group, .id = -ENOENT };
486         struct nl80211_msg_conveyor *req;
487         int err;
488
489         req = nl80211_ctl(CTRL_CMD_GETFAMILY, 0);
490         if (req)
491         {
492                 NLA_PUT_STRING(req->msg, CTRL_ATTR_FAMILY_NAME, family);
493                 err = nl80211_send(req, nl80211_subscribe_cb, &cv);
494
495                 if (err)
496                         return err;
497
498                 return nl_socket_add_membership(nls->nl_sock, cv.id);
499
500 nla_put_failure:
501                 nl80211_free(req);
502         }
503
504         return -ENOMEM;
505 }
506
507
508 static int nl80211_wait_cb(struct nl_msg *msg, void *arg)
509 {
510         struct nl80211_event_conveyor *cv = arg;
511         struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
512
513         if (cv->wait[gnlh->cmd / 32] & (1 << (gnlh->cmd % 32)))
514                 cv->recv = gnlh->cmd;
515
516         return NL_SKIP;
517 }
518
519 static int nl80211_wait_seq_check(struct nl_msg *msg, void *arg)
520 {
521         return NL_OK;
522 }
523
524 static int __nl80211_wait(const char *family, const char *group, ...)
525 {
526         struct nl80211_event_conveyor cv = { };
527         struct nl_cb *cb;
528         int err = 0;
529         int cmd;
530         va_list ap;
531
532         if (nl80211_subscribe(family, group))
533                 return -ENOENT;
534
535         cb = nl_cb_alloc(NL_CB_DEFAULT);
536
537         if (!cb)
538                 return -ENOMEM;
539
540         nl_cb_err(cb,                  NL_CB_CUSTOM, nl80211_msg_error,      &err);
541         nl_cb_set(cb, NL_CB_SEQ_CHECK, NL_CB_CUSTOM, nl80211_wait_seq_check, NULL);
542         nl_cb_set(cb, NL_CB_VALID,     NL_CB_CUSTOM, nl80211_wait_cb,        &cv );
543
544         va_start(ap, group);
545
546         for (cmd = va_arg(ap, int); cmd != 0; cmd = va_arg(ap, int))
547                 cv.wait[cmd / 32] |= (1 << (cmd % 32));
548
549         va_end(ap);
550
551         while (!cv.recv && !err)
552                 nl_recvmsgs(nls->nl_sock, cb);
553
554         nl_cb_put(cb);
555
556         return err;
557 }
558
559 #define nl80211_wait(family, group, ...) \
560         __nl80211_wait(family, group, __VA_ARGS__, 0)
561
562
563 static int nl80211_freq2channel(int freq)
564 {
565         if (freq == 2484)
566                 return 14;
567         else if (freq < 2484)
568                 return (freq - 2407) / 5;
569         else if (freq >= 4910 && freq <= 4980)
570                 return (freq - 4000) / 5;
571         else
572                 return (freq - 5000) / 5;
573 }
574
575 static int nl80211_channel2freq(int channel, const char *band)
576 {
577         if (!band || band[0] != 'a')
578         {
579                 if (channel == 14)
580                         return 2484;
581                 else if (channel < 14)
582                         return (channel * 5) + 2407;
583         }
584         else
585         {
586                 if (channel >= 182 && channel <= 196)
587                         return (channel * 5) + 4000;
588                 else
589                         return (channel * 5) + 5000;
590         }
591
592         return 0;
593 }
594
595 static int nl80211_ifname2phy_cb(struct nl_msg *msg, void *arg)
596 {
597         char *buf = arg;
598         struct nlattr **attr = nl80211_parse(msg);
599
600         if (attr[NL80211_ATTR_WIPHY_NAME])
601                 memcpy(buf, nla_data(attr[NL80211_ATTR_WIPHY_NAME]),
602                        nla_len(attr[NL80211_ATTR_WIPHY_NAME]));
603         else
604                 buf[0] = 0;
605
606         return NL_SKIP;
607 }
608
609 static char * nl80211_ifname2phy(const char *ifname)
610 {
611         static char phy[32] = { 0 };
612
613         memset(phy, 0, sizeof(phy));
614
615         nl80211_request(ifname, NL80211_CMD_GET_WIPHY, 0,
616                         nl80211_ifname2phy_cb, phy);
617
618         return phy[0] ? phy : NULL;
619 }
620
621 static char * nl80211_phy2ifname(const char *ifname)
622 {
623         int ifidx = -1, cifidx = -1, phyidx = -1;
624         char buffer[64];
625         static char nif[IFNAMSIZ] = { 0 };
626
627         DIR *d;
628         struct dirent *e;
629
630         /* Only accept phy name of the form phy%d or radio%d */
631         if (!ifname)
632                 return NULL;
633         else if (!strncmp(ifname, "phy", 3))
634                 phyidx = atoi(&ifname[3]);
635         else if (!strncmp(ifname, "radio", 5))
636                 phyidx = nl80211_phy_idx_from_uci(ifname);
637         else
638                 return NULL;
639
640         memset(nif, 0, sizeof(nif));
641
642         if (phyidx > -1)
643         {
644                 if ((d = opendir("/sys/class/net")) != NULL)
645                 {
646                         while ((e = readdir(d)) != NULL)
647                         {
648                                 snprintf(buffer, sizeof(buffer),
649                                          "/sys/class/net/%s/phy80211/index", e->d_name);
650
651                                 if (nl80211_readint(buffer) == phyidx)
652                                 {
653                                         snprintf(buffer, sizeof(buffer),
654                                                  "/sys/class/net/%s/ifindex", e->d_name);
655
656                                         if ((cifidx = nl80211_readint(buffer)) >= 0 &&
657                                             ((ifidx < 0) || (cifidx < ifidx)))
658                                         {
659                                                 ifidx = cifidx;
660                                                 strncpy(nif, e->d_name, sizeof(nif) - 1);
661                                         }
662                                 }
663                         }
664
665                         closedir(d);
666                 }
667         }
668
669         return nif[0] ? nif : NULL;
670 }
671
672 static int nl80211_get_mode_cb(struct nl_msg *msg, void *arg)
673 {
674         int *mode = arg;
675         struct nlattr **tb = nl80211_parse(msg);
676         const int ifmodes[NL80211_IFTYPE_MAX + 1] = {
677                 IWINFO_OPMODE_UNKNOWN,          /* unspecified */
678                 IWINFO_OPMODE_ADHOC,            /* IBSS */
679                 IWINFO_OPMODE_CLIENT,           /* managed */
680                 IWINFO_OPMODE_MASTER,           /* AP */
681                 IWINFO_OPMODE_AP_VLAN,          /* AP/VLAN */
682                 IWINFO_OPMODE_WDS,                      /* WDS */
683                 IWINFO_OPMODE_MONITOR,          /* monitor */
684                 IWINFO_OPMODE_MESHPOINT,        /* mesh point */
685                 IWINFO_OPMODE_P2P_CLIENT,       /* P2P-client */
686                 IWINFO_OPMODE_P2P_GO,           /* P2P-GO */
687         };
688
689         if (tb[NL80211_ATTR_IFTYPE])
690                 *mode = ifmodes[nla_get_u32(tb[NL80211_ATTR_IFTYPE])];
691
692         return NL_SKIP;
693 }
694
695
696 static int nl80211_get_mode(const char *ifname, int *buf)
697 {
698         char *res;
699
700         *buf = IWINFO_OPMODE_UNKNOWN;
701
702         res = nl80211_phy2ifname(ifname);
703
704         nl80211_request(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0,
705                         nl80211_get_mode_cb, buf);
706
707         return (*buf == IWINFO_OPMODE_UNKNOWN) ? -1 : 0;
708 }
709
710 static int __nl80211_hostapd_query(const char *ifname, ...)
711 {
712         va_list ap, ap_cur;
713         char *phy, *search, *dest, *key, *val, buf[128];
714         int len, mode, found = 0, match = 1;
715         FILE *fp;
716
717         if (nl80211_get_mode(ifname, &mode))
718                 return 0;
719
720         if (mode != IWINFO_OPMODE_MASTER && mode != IWINFO_OPMODE_AP_VLAN)
721                 return 0;
722
723         phy = nl80211_ifname2phy(ifname);
724
725         if (!phy)
726                 return 0;
727
728         snprintf(buf, sizeof(buf), "/var/run/hostapd-%s.conf", phy);
729         fp = fopen(buf, "r");
730
731         if (!fp)
732                 return 0;
733
734         va_start(ap, ifname);
735
736         /* clear all destination buffers */
737         va_copy(ap_cur, ap);
738
739         while ((search = va_arg(ap_cur, char *)) != NULL)
740         {
741                 dest = va_arg(ap_cur, char *);
742                 len  = va_arg(ap_cur, int);
743
744                 memset(dest, 0, len);
745         }
746
747         va_end(ap_cur);
748
749         /* iterate applicable lines and copy found values into dest buffers */
750         while (fgets(buf, sizeof(buf), fp))
751         {
752                 key = strtok(buf, " =\t\n");
753                 val = strtok(NULL, "\n");
754
755                 if (!key || !val || !*key || *key == '#')
756                         continue;
757
758                 if (!strcmp(key, "interface") || !strcmp(key, "bss"))
759                         match = !strcmp(ifname, val);
760
761                 if (!match)
762                         continue;
763
764                 va_copy(ap_cur, ap);
765
766                 while ((search = va_arg(ap_cur, char *)) != NULL)
767                 {
768                         dest = va_arg(ap_cur, char *);
769                         len  = va_arg(ap_cur, int);
770
771                         if (!strcmp(search, key))
772                         {
773                                 strncpy(dest, val, len - 1);
774                                 found++;
775                                 break;
776                         }
777                 }
778
779                 va_end(ap_cur);
780         }
781
782         fclose(fp);
783
784         va_end(ap);
785
786         return found;
787 }
788
789 #define nl80211_hostapd_query(ifname, ...) \
790         __nl80211_hostapd_query(ifname, ##__VA_ARGS__, NULL)
791
792
793 static inline int nl80211_wpactl_recv(int sock, char *buf, int blen)
794 {
795         fd_set rfds;
796         struct timeval tv = { 0, 256000 };
797
798         FD_ZERO(&rfds);
799         FD_SET(sock, &rfds);
800
801         memset(buf, 0, blen);
802
803         if (select(sock + 1, &rfds, NULL, NULL, &tv) < 0)
804                 return -1;
805
806         if (!FD_ISSET(sock, &rfds))
807                 return -1;
808
809         return recv(sock, buf, blen - 1, 0);
810 }
811
812 static int nl80211_wpactl_connect(const char *ifname, struct sockaddr_un *local)
813 {
814         struct sockaddr_un remote = { 0 };
815         size_t remote_length, local_length;
816
817         int sock = socket(PF_UNIX, SOCK_DGRAM, 0);
818         if (sock < 0)
819                 return sock;
820
821         remote.sun_family = AF_UNIX;
822         remote_length = sizeof(remote.sun_family) +
823                 sprintf(remote.sun_path, "/var/run/wpa_supplicant-%s/%s",
824                         ifname, ifname);
825
826         if (fcntl(sock, F_SETFD, fcntl(sock, F_GETFD) | FD_CLOEXEC) < 0)
827         {
828                 close(sock);
829                 return -1;
830         }
831
832         if (connect(sock, (struct sockaddr *)&remote, remote_length))
833         {
834                 remote_length = sizeof(remote.sun_family) +
835                         sprintf(remote.sun_path, "/var/run/wpa_supplicant/%s", ifname);
836
837                 if (connect(sock, (struct sockaddr *)&remote, remote_length))
838                 {
839                         close(sock);
840                         return -1;
841                 }
842         }
843
844         local->sun_family = AF_UNIX;
845         local_length = sizeof(local->sun_family) +
846                 sprintf(local->sun_path, "/var/run/iwinfo-%s-%d", ifname, getpid());
847
848         if (bind(sock, (struct sockaddr *)local, local_length) < 0)
849         {
850                 close(sock);
851                 return -1;
852         }
853
854         return sock;
855 }
856
857 static int __nl80211_wpactl_query(const char *ifname, ...)
858 {
859         va_list ap, ap_cur;
860         struct sockaddr_un local = { 0 };
861         int len, mode, found = 0, sock = -1;
862         char *search, *dest, *key, *val, *line, *pos, buf[512];
863
864         if (nl80211_get_mode(ifname, &mode))
865                 return 0;
866
867         if (mode != IWINFO_OPMODE_CLIENT && mode != IWINFO_OPMODE_ADHOC)
868                 return 0;
869
870         sock = nl80211_wpactl_connect(ifname, &local);
871
872         if (sock < 0)
873                 return 0;
874
875         va_start(ap, ifname);
876
877         /* clear all destination buffers */
878         va_copy(ap_cur, ap);
879
880         while ((search = va_arg(ap_cur, char *)) != NULL)
881         {
882                 dest = va_arg(ap_cur, char *);
883                 len  = va_arg(ap_cur, int);
884
885                 memset(dest, 0, len);
886         }
887
888         va_end(ap_cur);
889
890         send(sock, "STATUS", 6, 0);
891
892         while (true)
893         {
894                 if (nl80211_wpactl_recv(sock, buf, sizeof(buf)) <= 0)
895                         break;
896
897                 if (buf[0] == '<')
898                         continue;
899
900                 for (line = strtok_r(buf, "\n", &pos);
901                          line != NULL;
902                          line = strtok_r(NULL, "\n", &pos))
903                 {
904                         key = strtok(line, "=");
905                         val = strtok(NULL, "\n");
906
907                         if (!key || !val)
908                                 continue;
909
910                         va_copy(ap_cur, ap);
911
912                         while ((search = va_arg(ap_cur, char *)) != NULL)
913                         {
914                                 dest = va_arg(ap_cur, char *);
915                                 len  = va_arg(ap_cur, int);
916
917                                 if (!strcmp(search, key))
918                                 {
919                                         strncpy(dest, val, len - 1);
920                                         found++;
921                                         break;
922                                 }
923                         }
924
925                         va_end(ap_cur);
926                 }
927
928                 break;
929         }
930
931         va_end(ap);
932
933         close(sock);
934         unlink(local.sun_path);
935
936         return found;
937 }
938
939 #define nl80211_wpactl_query(ifname, ...) \
940         __nl80211_wpactl_query(ifname, ##__VA_ARGS__, NULL)
941
942
943 static char * nl80211_ifadd(const char *ifname)
944 {
945         char path[PATH_MAX];
946         static char nif[IFNAMSIZ] = { 0 };
947         struct nl80211_msg_conveyor *req;
948         FILE *sysfs;
949
950         req = nl80211_msg(ifname, NL80211_CMD_NEW_INTERFACE, 0);
951         if (req)
952         {
953                 snprintf(nif, sizeof(nif), "tmp.%s", ifname);
954
955                 NLA_PUT_STRING(req->msg, NL80211_ATTR_IFNAME, nif);
956                 NLA_PUT_U32(req->msg, NL80211_ATTR_IFTYPE, NL80211_IFTYPE_STATION);
957
958                 nl80211_send(req, NULL, NULL);
959
960                 snprintf(path, sizeof(path) - 1,
961                          "/proc/sys/net/ipv6/conf/%s/disable_ipv6", nif);
962
963                 if ((sysfs = fopen(path, "w")) != NULL)
964                 {
965                         fwrite("0\n", 1, 2, sysfs);
966                         fclose(sysfs);
967                 }
968
969                 return nif;
970
971         nla_put_failure:
972                 nl80211_free(req);
973         }
974
975         return NULL;
976 }
977
978 static void nl80211_ifdel(const char *ifname)
979 {
980         struct nl80211_msg_conveyor *req;
981         int err;
982
983         req = nl80211_msg(ifname, NL80211_CMD_DEL_INTERFACE, 0);
984         if (req)
985         {
986                 NLA_PUT_STRING(req->msg, NL80211_ATTR_IFNAME, ifname);
987
988                 nl80211_send(req, NULL, NULL);
989                 return;
990
991         nla_put_failure:
992                 nl80211_free(req);
993         }
994 }
995
996 static void nl80211_hostapd_hup(const char *ifname)
997 {
998         int fd, pid = 0;
999         char buf[32];
1000         char *phy = nl80211_ifname2phy(ifname);
1001
1002         if (phy)
1003         {
1004                 snprintf(buf, sizeof(buf), "/var/run/wifi-%s.pid", phy);
1005                 if ((fd = open(buf, O_RDONLY)) >= 0)
1006                 {
1007                         if (read(fd, buf, sizeof(buf)) > 0)
1008                                 pid = atoi(buf);
1009
1010                         close(fd);
1011                 }
1012
1013                 if (pid > 0)
1014                         kill(pid, 1);
1015         }
1016 }
1017
1018
1019 static int nl80211_probe(const char *ifname)
1020 {
1021         return !!nl80211_ifname2phy(ifname);
1022 }
1023
1024 struct nl80211_ssid_bssid {
1025         unsigned char *ssid;
1026         unsigned char bssid[7];
1027 };
1028
1029 static int nl80211_get_ssid_bssid_cb(struct nl_msg *msg, void *arg)
1030 {
1031         int ielen;
1032         unsigned char *ie;
1033         struct nl80211_ssid_bssid *sb = arg;
1034         struct nlattr **tb = nl80211_parse(msg);
1035         struct nlattr *bss[NL80211_BSS_MAX + 1];
1036
1037         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
1038                 [NL80211_BSS_INFORMATION_ELEMENTS] = { 0 },
1039                 [NL80211_BSS_STATUS]               = { .type = NLA_U32 },
1040         };
1041
1042         if (!tb[NL80211_ATTR_BSS] ||
1043             nla_parse_nested(bss, NL80211_BSS_MAX, tb[NL80211_ATTR_BSS],
1044                              bss_policy) ||
1045             !bss[NL80211_BSS_BSSID] ||
1046             !bss[NL80211_BSS_STATUS] ||
1047             !bss[NL80211_BSS_INFORMATION_ELEMENTS])
1048         {
1049                 return NL_SKIP;
1050         }
1051
1052         switch (nla_get_u32(bss[NL80211_BSS_STATUS]))
1053         {
1054         case NL80211_BSS_STATUS_ASSOCIATED:
1055         case NL80211_BSS_STATUS_AUTHENTICATED:
1056         case NL80211_BSS_STATUS_IBSS_JOINED:
1057
1058                 if (sb->ssid)
1059                 {
1060                         ie = nla_data(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1061                         ielen = nla_len(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1062
1063                         while (ielen >= 2 && ielen >= ie[1])
1064                         {
1065                                 if (ie[0] == 0)
1066                                 {
1067                                         memcpy(sb->ssid, ie + 2, min(ie[1], IWINFO_ESSID_MAX_SIZE));
1068                                         return NL_SKIP;
1069                                 }
1070
1071                                 ielen -= ie[1] + 2;
1072                                 ie += ie[1] + 2;
1073                         }
1074                 }
1075                 else
1076                 {
1077                         sb->bssid[0] = 1;
1078                         memcpy(sb->bssid + 1, nla_data(bss[NL80211_BSS_BSSID]), 6);
1079                         return NL_SKIP;
1080                 }
1081
1082         default:
1083                 return NL_SKIP;
1084         }
1085 }
1086
1087 static int nl80211_get_ssid(const char *ifname, char *buf)
1088 {
1089         char *res;
1090         struct nl80211_ssid_bssid sb = { .ssid = (unsigned char *)buf };
1091
1092         /* try to find ssid from scan dump results */
1093         res = nl80211_phy2ifname(ifname);
1094         sb.ssid[0] = 0;
1095
1096         nl80211_request(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP,
1097                         nl80211_get_ssid_bssid_cb, &sb);
1098
1099         /* failed, try to find from hostapd info */
1100         if (sb.ssid[0] == 0)
1101                 nl80211_hostapd_query(ifname, "ssid", sb.ssid,
1102                                       IWINFO_ESSID_MAX_SIZE + 1);
1103
1104         return (sb.ssid[0] == 0) ? -1 : 0;
1105 }
1106
1107 static int nl80211_get_bssid(const char *ifname, char *buf)
1108 {
1109         char *res, bssid[sizeof("FF:FF:FF:FF:FF:FF\0")];
1110         struct nl80211_ssid_bssid sb = { };
1111
1112         /* try to find bssid from scan dump results */
1113         res = nl80211_phy2ifname(ifname);
1114
1115         nl80211_request(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP,
1116                         nl80211_get_ssid_bssid_cb, &sb);
1117
1118         /* failed, try to find mac from hostapd info */
1119         if ((sb.bssid[0] == 0) &&
1120             nl80211_hostapd_query(ifname, "bssid", bssid, sizeof(bssid)))
1121         {
1122                 sb.bssid[0] = 1;
1123                 sb.bssid[1] = strtol(&bssid[0],  NULL, 16);
1124                 sb.bssid[2] = strtol(&bssid[3],  NULL, 16);
1125                 sb.bssid[3] = strtol(&bssid[6],  NULL, 16);
1126                 sb.bssid[4] = strtol(&bssid[9],  NULL, 16);
1127                 sb.bssid[5] = strtol(&bssid[12], NULL, 16);
1128                 sb.bssid[6] = strtol(&bssid[15], NULL, 16);
1129         }
1130
1131         if (sb.bssid[0])
1132         {
1133                 sprintf(buf, "%02X:%02X:%02X:%02X:%02X:%02X",
1134                         sb.bssid[1], sb.bssid[2], sb.bssid[3],
1135                         sb.bssid[4], sb.bssid[5], sb.bssid[6]);
1136
1137                 return 0;
1138         }
1139
1140         return -1;
1141 }
1142
1143
1144 static int nl80211_get_frequency_scan_cb(struct nl_msg *msg, void *arg)
1145 {
1146         int *freq = arg;
1147         struct nlattr **attr = nl80211_parse(msg);
1148         struct nlattr *binfo[NL80211_BSS_MAX + 1];
1149
1150         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
1151                 [NL80211_BSS_FREQUENCY] = { .type = NLA_U32 },
1152                 [NL80211_BSS_STATUS]    = { .type = NLA_U32 },
1153         };
1154
1155         if (attr[NL80211_ATTR_BSS] &&
1156             !nla_parse_nested(binfo, NL80211_BSS_MAX,
1157                               attr[NL80211_ATTR_BSS], bss_policy))
1158         {
1159                 if (binfo[NL80211_BSS_STATUS] && binfo[NL80211_BSS_FREQUENCY])
1160                         *freq = nla_get_u32(binfo[NL80211_BSS_FREQUENCY]);
1161         }
1162
1163         return NL_SKIP;
1164 }
1165
1166 static int nl80211_get_frequency_info_cb(struct nl_msg *msg, void *arg)
1167 {
1168         int *freq = arg;
1169         struct nlattr **tb = nl80211_parse(msg);
1170
1171         if (tb[NL80211_ATTR_WIPHY_FREQ])
1172                 *freq = nla_get_u32(tb[NL80211_ATTR_WIPHY_FREQ]);
1173
1174         return NL_SKIP;
1175 }
1176
1177 static int nl80211_get_frequency(const char *ifname, int *buf)
1178 {
1179         char *res, channel[4], hwmode[2];
1180
1181         /* try to find frequency from interface info */
1182         res = nl80211_phy2ifname(ifname);
1183         *buf = 0;
1184
1185         nl80211_request(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0,
1186                         nl80211_get_frequency_info_cb, buf);
1187
1188         /* failed, try to find frequency from hostapd info */
1189         if ((*buf == 0) &&
1190             nl80211_hostapd_query(ifname, "hw_mode", hwmode, sizeof(hwmode),
1191                                           "channel", channel, sizeof(channel)) == 2)
1192         {
1193                 *buf = nl80211_channel2freq(atoi(channel), hwmode);
1194         }
1195
1196         /* failed, try to find frequency from scan results */
1197         if (*buf == 0)
1198         {
1199                 res = nl80211_phy2ifname(ifname);
1200
1201                 nl80211_request(res ? res : ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP,
1202                                 nl80211_get_frequency_scan_cb, buf);
1203         }
1204
1205         return (*buf == 0) ? -1 : 0;
1206 }
1207
1208 static int nl80211_get_channel(const char *ifname, int *buf)
1209 {
1210         if (!nl80211_get_frequency(ifname, buf))
1211         {
1212                 *buf = nl80211_freq2channel(*buf);
1213                 return 0;
1214         }
1215
1216         return -1;
1217 }
1218
1219 static int nl80211_get_txpower_cb(struct nl_msg *msg, void *arg)
1220 {
1221         int *buf = arg;
1222         struct nlattr **tb = nl80211_parse(msg);
1223
1224         if (tb[NL80211_ATTR_WIPHY_TX_POWER_LEVEL])
1225                 *buf = iwinfo_mbm2dbm(nla_get_u32(tb[NL80211_ATTR_WIPHY_TX_POWER_LEVEL]));
1226
1227         return NL_SKIP;
1228 }
1229
1230 static int nl80211_get_txpower(const char *ifname, int *buf)
1231 {
1232         char *res;
1233
1234         res = nl80211_phy2ifname(ifname);
1235         *buf = 0;
1236
1237         if (nl80211_request(res ? res : ifname, NL80211_CMD_GET_INTERFACE, 0,
1238                             nl80211_get_txpower_cb, buf))
1239                 return -1;
1240
1241         return 0;
1242 }
1243
1244
1245 static int nl80211_fill_signal_cb(struct nl_msg *msg, void *arg)
1246 {
1247         int8_t dbm;
1248         int16_t mbit;
1249         struct nl80211_rssi_rate *rr = arg;
1250         struct nlattr **attr = nl80211_parse(msg);
1251         struct nlattr *sinfo[NL80211_STA_INFO_MAX + 1];
1252         struct nlattr *rinfo[NL80211_RATE_INFO_MAX + 1];
1253
1254         static struct nla_policy stats_policy[NL80211_STA_INFO_MAX + 1] = {
1255                 [NL80211_STA_INFO_INACTIVE_TIME] = { .type = NLA_U32    },
1256                 [NL80211_STA_INFO_RX_BYTES]      = { .type = NLA_U32    },
1257                 [NL80211_STA_INFO_TX_BYTES]      = { .type = NLA_U32    },
1258                 [NL80211_STA_INFO_RX_PACKETS]    = { .type = NLA_U32    },
1259                 [NL80211_STA_INFO_TX_PACKETS]    = { .type = NLA_U32    },
1260                 [NL80211_STA_INFO_SIGNAL]        = { .type = NLA_U8     },
1261                 [NL80211_STA_INFO_TX_BITRATE]    = { .type = NLA_NESTED },
1262                 [NL80211_STA_INFO_LLID]          = { .type = NLA_U16    },
1263                 [NL80211_STA_INFO_PLID]          = { .type = NLA_U16    },
1264                 [NL80211_STA_INFO_PLINK_STATE]   = { .type = NLA_U8     },
1265         };
1266
1267         static struct nla_policy rate_policy[NL80211_RATE_INFO_MAX + 1] = {
1268                 [NL80211_RATE_INFO_BITRATE]      = { .type = NLA_U16  },
1269                 [NL80211_RATE_INFO_MCS]          = { .type = NLA_U8   },
1270                 [NL80211_RATE_INFO_40_MHZ_WIDTH] = { .type = NLA_FLAG },
1271                 [NL80211_RATE_INFO_SHORT_GI]     = { .type = NLA_FLAG },
1272         };
1273
1274         if (attr[NL80211_ATTR_STA_INFO])
1275         {
1276                 if (!nla_parse_nested(sinfo, NL80211_STA_INFO_MAX,
1277                                       attr[NL80211_ATTR_STA_INFO], stats_policy))
1278                 {
1279                         if (sinfo[NL80211_STA_INFO_SIGNAL])
1280                         {
1281                                 dbm = nla_get_u8(sinfo[NL80211_STA_INFO_SIGNAL]);
1282                                 rr->rssi = rr->rssi ? (int8_t)((rr->rssi + dbm) / 2) : dbm;
1283                         }
1284
1285                         if (sinfo[NL80211_STA_INFO_TX_BITRATE])
1286                         {
1287                                 if (!nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1288                                                       sinfo[NL80211_STA_INFO_TX_BITRATE],
1289                                                       rate_policy))
1290                                 {
1291                                         if (rinfo[NL80211_RATE_INFO_BITRATE])
1292                                         {
1293                                                 mbit = nla_get_u16(rinfo[NL80211_RATE_INFO_BITRATE]);
1294                                                 rr->rate = rr->rate
1295                                                         ? (int16_t)((rr->rate + mbit) / 2) : mbit;
1296                                         }
1297                                 }
1298                         }
1299                 }
1300         }
1301
1302         return NL_SKIP;
1303 }
1304
1305 static void nl80211_fill_signal(const char *ifname, struct nl80211_rssi_rate *r)
1306 {
1307         DIR *d;
1308         struct dirent *de;
1309
1310         r->rssi = 0;
1311         r->rate = 0;
1312
1313         if ((d = opendir("/sys/class/net")) != NULL)
1314         {
1315                 while ((de = readdir(d)) != NULL)
1316                 {
1317                         if (!strncmp(de->d_name, ifname, strlen(ifname)) &&
1318                             (!de->d_name[strlen(ifname)] ||
1319                              !strncmp(&de->d_name[strlen(ifname)], ".sta", 4)))
1320                         {
1321                                 nl80211_request(de->d_name, NL80211_CMD_GET_STATION,
1322                                                 NLM_F_DUMP, nl80211_fill_signal_cb, r);
1323                         }
1324                 }
1325
1326                 closedir(d);
1327         }
1328 }
1329
1330 static int nl80211_get_bitrate(const char *ifname, int *buf)
1331 {
1332         struct nl80211_rssi_rate rr;
1333
1334         nl80211_fill_signal(ifname, &rr);
1335
1336         if (rr.rate)
1337         {
1338                 *buf = (rr.rate * 100);
1339                 return 0;
1340         }
1341
1342         return -1;
1343 }
1344
1345 static int nl80211_get_signal(const char *ifname, int *buf)
1346 {
1347         struct nl80211_rssi_rate rr;
1348
1349         nl80211_fill_signal(ifname, &rr);
1350
1351         if (rr.rssi)
1352         {
1353                 *buf = rr.rssi;
1354                 return 0;
1355         }
1356
1357         return -1;
1358 }
1359
1360 static int nl80211_get_noise_cb(struct nl_msg *msg, void *arg)
1361 {
1362         int8_t *noise = arg;
1363         struct nlattr **tb = nl80211_parse(msg);
1364         struct nlattr *si[NL80211_SURVEY_INFO_MAX + 1];
1365
1366         static struct nla_policy sp[NL80211_SURVEY_INFO_MAX + 1] = {
1367                 [NL80211_SURVEY_INFO_FREQUENCY] = { .type = NLA_U32 },
1368                 [NL80211_SURVEY_INFO_NOISE]     = { .type = NLA_U8  },
1369         };
1370
1371         if (!tb[NL80211_ATTR_SURVEY_INFO])
1372                 return NL_SKIP;
1373
1374         if (nla_parse_nested(si, NL80211_SURVEY_INFO_MAX,
1375                              tb[NL80211_ATTR_SURVEY_INFO], sp))
1376                 return NL_SKIP;
1377
1378         if (!si[NL80211_SURVEY_INFO_NOISE])
1379                 return NL_SKIP;
1380
1381         if (!*noise || si[NL80211_SURVEY_INFO_IN_USE])
1382                 *noise = (int8_t)nla_get_u8(si[NL80211_SURVEY_INFO_NOISE]);
1383
1384         return NL_SKIP;
1385 }
1386
1387
1388 static int nl80211_get_noise(const char *ifname, int *buf)
1389 {
1390         int8_t noise = 0;
1391
1392         if (nl80211_request(ifname, NL80211_CMD_GET_SURVEY, NLM_F_DUMP,
1393                             nl80211_get_noise_cb, &noise))
1394                 goto out;
1395
1396         *buf = noise;
1397         return 0;
1398
1399 out:
1400         *buf = 0;
1401         return -1;
1402 }
1403
1404 static int nl80211_get_quality(const char *ifname, int *buf)
1405 {
1406         int signal;
1407
1408         if (!nl80211_get_signal(ifname, &signal))
1409         {
1410                 /* A positive signal level is usually just a quality
1411                  * value, pass through as-is */
1412                 if (signal >= 0)
1413                 {
1414                         *buf = signal;
1415                 }
1416
1417                 /* The cfg80211 wext compat layer assumes a signal range
1418                  * of -110 dBm to -40 dBm, the quality value is derived
1419                  * by adding 110 to the signal level */
1420                 else
1421                 {
1422                         if (signal < -110)
1423                                 signal = -110;
1424                         else if (signal > -40)
1425                                 signal = -40;
1426
1427                         *buf = (signal + 110);
1428                 }
1429
1430                 return 0;
1431         }
1432
1433         return -1;
1434 }
1435
1436 static int nl80211_get_quality_max(const char *ifname, int *buf)
1437 {
1438         /* The cfg80211 wext compat layer assumes a maximum
1439          * quality of 70 */
1440         *buf = 70;
1441
1442         return 0;
1443 }
1444
1445 static int nl80211_check_wepkey(const char *key)
1446 {
1447         if (key && *key)
1448         {
1449                 switch (strlen(key))
1450                 {
1451                 case 5:
1452                 case 10:
1453                         return IWINFO_CIPHER_WEP40;
1454
1455                 case 13:
1456                 case 26:
1457                         return IWINFO_CIPHER_WEP104;
1458                 }
1459         }
1460
1461         return 0;
1462 }
1463
1464 static int nl80211_get_encryption(const char *ifname, char *buf)
1465 {
1466         char wpa[2], wpa_key_mgmt[16], wpa_pairwise[16], wpa_groupwise[16];
1467         char auth_algs[2], wep_key0[27], wep_key1[27], wep_key2[27], wep_key3[27];
1468
1469         struct iwinfo_crypto_entry *c = (struct iwinfo_crypto_entry *)buf;
1470
1471         /* WPA supplicant */
1472         if (nl80211_wpactl_query(ifname,
1473                         "pairwise_cipher", wpa_pairwise,  sizeof(wpa_pairwise),
1474                         "group_cipher",    wpa_groupwise, sizeof(wpa_groupwise),
1475                         "key_mgmt",        wpa_key_mgmt,  sizeof(wpa_key_mgmt)))
1476         {
1477                 /* WEP */
1478                 if (!strcmp(wpa_key_mgmt, "NONE"))
1479                 {
1480                         if (strstr(wpa_pairwise, "WEP-40"))
1481                                 c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1482                         else if (strstr(wpa_pairwise, "WEP-104"))
1483                                 c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1484
1485                         if (strstr(wpa_groupwise, "WEP-40"))
1486                                 c->group_ciphers |= IWINFO_CIPHER_WEP40;
1487                         else if (strstr(wpa_groupwise, "WEP-104"))
1488                                 c->group_ciphers |= IWINFO_CIPHER_WEP104;
1489
1490                         c->enabled      = !!(c->pair_ciphers | c->group_ciphers);
1491                         c->auth_suites |= IWINFO_KMGMT_NONE;
1492                         c->auth_algs   |= IWINFO_AUTH_OPEN; /* XXX: assumption */
1493                 }
1494
1495                 /* WPA */
1496                 else if (strstr(wpa_key_mgmt, "WPA"))
1497                 {
1498                         if (strstr(wpa_pairwise, "TKIP"))
1499                                 c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1500                         else if (strstr(wpa_pairwise, "CCMP"))
1501                                 c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1502                         else if (strstr(wpa_pairwise, "NONE"))
1503                                 c->pair_ciphers |= IWINFO_CIPHER_NONE;
1504                         else if (strstr(wpa_pairwise, "WEP-40"))
1505                                 c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1506                         else if (strstr(wpa_pairwise, "WEP-104"))
1507                                 c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1508
1509                         if (strstr(wpa_groupwise, "TKIP"))
1510                                 c->group_ciphers |= IWINFO_CIPHER_TKIP;
1511                         else if (strstr(wpa_groupwise, "CCMP"))
1512                                 c->group_ciphers |= IWINFO_CIPHER_CCMP;
1513                         else if (strstr(wpa_groupwise, "NONE"))
1514                                 c->group_ciphers |= IWINFO_CIPHER_NONE;
1515                         else if (strstr(wpa_groupwise, "WEP-40"))
1516                                 c->group_ciphers |= IWINFO_CIPHER_WEP40;
1517                         else if (strstr(wpa_groupwise, "WEP-104"))
1518                                 c->group_ciphers |= IWINFO_CIPHER_WEP104;
1519
1520                         if (strstr(wpa_key_mgmt, "WPA2"))
1521                                 c->wpa_version = 2;
1522                         else if (strstr(wpa_key_mgmt, "WPA"))
1523                                 c->wpa_version = 1;
1524
1525                         if (strstr(wpa_key_mgmt, "PSK"))
1526                                 c->auth_suites |= IWINFO_KMGMT_PSK;
1527                         else if (strstr(wpa_key_mgmt, "EAP") ||
1528                                  strstr(wpa_key_mgmt, "802.1X"))
1529                                 c->auth_suites |= IWINFO_KMGMT_8021x;
1530                         else if (strstr(wpa_key_mgmt, "NONE"))
1531                                 c->auth_suites |= IWINFO_KMGMT_NONE;
1532
1533                         c->enabled = !!(c->wpa_version && c->auth_suites);
1534                 }
1535
1536                 return 0;
1537         }
1538
1539         /* Hostapd */
1540         else if (nl80211_hostapd_query(ifname,
1541                                 "wpa",          wpa,          sizeof(wpa),
1542                                 "wpa_key_mgmt", wpa_key_mgmt, sizeof(wpa_key_mgmt),
1543                                 "wpa_pairwise", wpa_pairwise, sizeof(wpa_pairwise),
1544                                 "auth_algs",    auth_algs,    sizeof(auth_algs),
1545                                 "wep_key0",     wep_key0,     sizeof(wep_key0),
1546                                 "wep_key1",     wep_key1,     sizeof(wep_key1),
1547                                 "wep_key2",     wep_key2,     sizeof(wep_key2),
1548                                 "wep_key3",     wep_key3,     sizeof(wep_key3)))
1549         {
1550                 c->wpa_version = wpa[0] ? atoi(wpa) : 0;
1551
1552                 if (wpa_key_mgmt[0])
1553                 {
1554                         if (strstr(wpa_key_mgmt, "PSK"))
1555                                 c->auth_suites |= IWINFO_KMGMT_PSK;
1556
1557                         if (strstr(wpa_key_mgmt, "EAP"))
1558                                 c->auth_suites |= IWINFO_KMGMT_8021x;
1559
1560                         if (strstr(wpa_key_mgmt, "NONE"))
1561                                 c->auth_suites |= IWINFO_KMGMT_NONE;
1562                 }
1563                 else
1564                 {
1565                         c->auth_suites |= IWINFO_KMGMT_PSK;
1566                 }
1567
1568                 if (wpa_pairwise[0])
1569                 {
1570                         if (strstr(wpa_pairwise, "TKIP"))
1571                                 c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1572
1573                         if (strstr(wpa_pairwise, "CCMP"))
1574                                 c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1575
1576                         if (strstr(wpa_pairwise, "NONE"))
1577                                 c->pair_ciphers |= IWINFO_CIPHER_NONE;
1578                 }
1579
1580                 if (auth_algs[0])
1581                 {
1582                         switch(atoi(auth_algs))
1583                         {
1584                         case 1:
1585                                 c->auth_algs |= IWINFO_AUTH_OPEN;
1586                                 break;
1587
1588                         case 2:
1589                                 c->auth_algs |= IWINFO_AUTH_SHARED;
1590                                 break;
1591
1592                         case 3:
1593                                 c->auth_algs |= IWINFO_AUTH_OPEN;
1594                                 c->auth_algs |= IWINFO_AUTH_SHARED;
1595                                 break;
1596                         }
1597
1598                         c->pair_ciphers |= nl80211_check_wepkey(wep_key0);
1599                         c->pair_ciphers |= nl80211_check_wepkey(wep_key1);
1600                         c->pair_ciphers |= nl80211_check_wepkey(wep_key2);
1601                         c->pair_ciphers |= nl80211_check_wepkey(wep_key3);
1602                 }
1603
1604                 c->group_ciphers = c->pair_ciphers;
1605                 c->enabled = (c->wpa_version || c->pair_ciphers) ? 1 : 0;
1606
1607                 return 0;
1608         }
1609
1610         return -1;
1611 }
1612
1613 static int nl80211_get_phyname(const char *ifname, char *buf)
1614 {
1615         const char *name;
1616
1617         name = nl80211_ifname2phy(ifname);
1618
1619         if (name)
1620         {
1621                 strcpy(buf, name);
1622                 return 0;
1623         }
1624         else if ((name = nl80211_phy2ifname(ifname)) != NULL)
1625         {
1626                 name = nl80211_ifname2phy(name);
1627
1628                 if (name)
1629                 {
1630                         strcpy(buf, ifname);
1631                         return 0;
1632                 }
1633         }
1634
1635         return -1;
1636 }
1637
1638
1639 static void nl80211_parse_rateinfo(struct nlattr **ri,
1640                                    struct iwinfo_rate_entry *re)
1641 {
1642         if (ri[NL80211_RATE_INFO_BITRATE32])
1643                 re->rate = nla_get_u32(ri[NL80211_RATE_INFO_BITRATE32]) * 100;
1644         else if (ri[NL80211_RATE_INFO_BITRATE])
1645                 re->rate = nla_get_u16(ri[NL80211_RATE_INFO_BITRATE]) * 100;
1646
1647         if (ri[NL80211_RATE_INFO_VHT_MCS])
1648         {
1649                 re->is_vht = 1;
1650                 re->mcs = nla_get_u8(ri[NL80211_RATE_INFO_VHT_MCS]);
1651
1652                 if (ri[NL80211_RATE_INFO_VHT_NSS])
1653                         re->nss = nla_get_u8(ri[NL80211_RATE_INFO_VHT_NSS]);
1654         }
1655         else if (ri[NL80211_RATE_INFO_MCS])
1656         {
1657                 re->is_ht = 1;
1658                 re->mcs = nla_get_u8(ri[NL80211_RATE_INFO_MCS]);
1659         }
1660
1661         if (ri[NL80211_RATE_INFO_5_MHZ_WIDTH])
1662                 re->mhz = 5;
1663         else if (ri[NL80211_RATE_INFO_10_MHZ_WIDTH])
1664                 re->mhz = 10;
1665         else if (ri[NL80211_RATE_INFO_40_MHZ_WIDTH])
1666                 re->mhz = 40;
1667         else if (ri[NL80211_RATE_INFO_80_MHZ_WIDTH])
1668                 re->mhz = 80;
1669         else if (ri[NL80211_RATE_INFO_80P80_MHZ_WIDTH] ||
1670                  ri[NL80211_RATE_INFO_160_MHZ_WIDTH])
1671                 re->mhz = 160;
1672         else
1673                 re->mhz = 20;
1674
1675         if (ri[NL80211_RATE_INFO_SHORT_GI])
1676                 re->is_short_gi = 1;
1677
1678         re->is_40mhz = (re->mhz == 40);
1679 }
1680
1681 static int nl80211_get_assoclist_cb(struct nl_msg *msg, void *arg)
1682 {
1683         struct nl80211_array_buf *arr = arg;
1684         struct iwinfo_assoclist_entry *e = arr->buf;
1685         struct nlattr **attr = nl80211_parse(msg);
1686         struct nlattr *sinfo[NL80211_STA_INFO_MAX + 1];
1687         struct nlattr *rinfo[NL80211_RATE_INFO_MAX + 1];
1688         struct nl80211_sta_flag_update *sta_flags;
1689
1690         static struct nla_policy stats_policy[NL80211_STA_INFO_MAX + 1] = {
1691                 [NL80211_STA_INFO_INACTIVE_TIME] = { .type = NLA_U32    },
1692                 [NL80211_STA_INFO_RX_PACKETS]    = { .type = NLA_U32    },
1693                 [NL80211_STA_INFO_TX_PACKETS]    = { .type = NLA_U32    },
1694                 [NL80211_STA_INFO_RX_BITRATE]    = { .type = NLA_NESTED },
1695                 [NL80211_STA_INFO_TX_BITRATE]    = { .type = NLA_NESTED },
1696                 [NL80211_STA_INFO_SIGNAL]        = { .type = NLA_U8     },
1697                 [NL80211_STA_INFO_RX_BYTES]      = { .type = NLA_U32    },
1698                 [NL80211_STA_INFO_TX_BYTES]      = { .type = NLA_U32    },
1699                 [NL80211_STA_INFO_TX_RETRIES]    = { .type = NLA_U32    },
1700                 [NL80211_STA_INFO_TX_FAILED]     = { .type = NLA_U32    },
1701                 [NL80211_STA_INFO_T_OFFSET]      = { .type = NLA_U64    },
1702                 [NL80211_STA_INFO_STA_FLAGS] =
1703                         { .minlen = sizeof(struct nl80211_sta_flag_update) },
1704                 [NL80211_STA_INFO_EXPECTED_THROUGHPUT]   = { .type = NLA_U32    },
1705         };
1706
1707         static struct nla_policy rate_policy[NL80211_RATE_INFO_MAX + 1] = {
1708                 [NL80211_RATE_INFO_BITRATE]      = { .type = NLA_U16    },
1709                 [NL80211_RATE_INFO_MCS]          = { .type = NLA_U8     },
1710                 [NL80211_RATE_INFO_40_MHZ_WIDTH] = { .type = NLA_FLAG   },
1711                 [NL80211_RATE_INFO_SHORT_GI]     = { .type = NLA_FLAG   },
1712         };
1713
1714         /* advance to end of array */
1715         e += arr->count;
1716         memset(e, 0, sizeof(*e));
1717
1718         if (attr[NL80211_ATTR_MAC])
1719                 memcpy(e->mac, nla_data(attr[NL80211_ATTR_MAC]), 6);
1720
1721         if (attr[NL80211_ATTR_STA_INFO] &&
1722             !nla_parse_nested(sinfo, NL80211_STA_INFO_MAX,
1723                               attr[NL80211_ATTR_STA_INFO], stats_policy))
1724         {
1725                 if (sinfo[NL80211_STA_INFO_SIGNAL])
1726                         e->signal = nla_get_u8(sinfo[NL80211_STA_INFO_SIGNAL]);
1727
1728                 if (sinfo[NL80211_STA_INFO_INACTIVE_TIME])
1729                         e->inactive = nla_get_u32(sinfo[NL80211_STA_INFO_INACTIVE_TIME]);
1730
1731                 if (sinfo[NL80211_STA_INFO_RX_PACKETS])
1732                         e->rx_packets = nla_get_u32(sinfo[NL80211_STA_INFO_RX_PACKETS]);
1733
1734                 if (sinfo[NL80211_STA_INFO_TX_PACKETS])
1735                         e->tx_packets = nla_get_u32(sinfo[NL80211_STA_INFO_TX_PACKETS]);
1736
1737                 if (sinfo[NL80211_STA_INFO_RX_BITRATE] &&
1738                     !nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1739                                       sinfo[NL80211_STA_INFO_RX_BITRATE], rate_policy))
1740                         nl80211_parse_rateinfo(rinfo, &e->rx_rate);
1741
1742                 if (sinfo[NL80211_STA_INFO_TX_BITRATE] &&
1743                     !nla_parse_nested(rinfo, NL80211_RATE_INFO_MAX,
1744                                       sinfo[NL80211_STA_INFO_TX_BITRATE], rate_policy))
1745                         nl80211_parse_rateinfo(rinfo, &e->tx_rate);
1746
1747                 if (sinfo[NL80211_STA_INFO_RX_BYTES])
1748                         e->rx_bytes = nla_get_u32(sinfo[NL80211_STA_INFO_RX_BYTES]);
1749
1750                 if (sinfo[NL80211_STA_INFO_TX_BYTES])
1751                         e->tx_bytes = nla_get_u32(sinfo[NL80211_STA_INFO_TX_BYTES]);
1752
1753                 if (sinfo[NL80211_STA_INFO_TX_RETRIES])
1754                         e->tx_retries = nla_get_u32(sinfo[NL80211_STA_INFO_TX_RETRIES]);
1755
1756                 if (sinfo[NL80211_STA_INFO_TX_FAILED])
1757                         e->tx_failed = nla_get_u32(sinfo[NL80211_STA_INFO_TX_FAILED]);
1758
1759                 if (sinfo[NL80211_STA_INFO_T_OFFSET])
1760                         e->t_offset = nla_get_u64(sinfo[NL80211_STA_INFO_T_OFFSET]);
1761
1762                 if (sinfo[NL80211_STA_INFO_EXPECTED_THROUGHPUT])
1763                         e->thr = nla_get_u32(sinfo[NL80211_STA_INFO_EXPECTED_THROUGHPUT]);
1764
1765                 /* Station flags */
1766                 if (sinfo[NL80211_STA_INFO_STA_FLAGS])
1767                 {
1768                         sta_flags = (struct nl80211_sta_flag_update *)
1769                                 nla_data(sinfo[NL80211_STA_INFO_STA_FLAGS]);
1770
1771                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
1772                             sta_flags->set & BIT(NL80211_STA_FLAG_AUTHORIZED))
1773                                 e->is_authorized = 1;
1774
1775                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1776                             sta_flags->set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1777                                 e->is_authenticated = 1;
1778
1779                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) &&
1780                             sta_flags->set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1781                                 e->is_preamble_short = 1;
1782
1783                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_WME) &&
1784                             sta_flags->set & BIT(NL80211_STA_FLAG_WME))
1785                                 e->is_wme = 1;
1786
1787                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_MFP) &&
1788                             sta_flags->set & BIT(NL80211_STA_FLAG_MFP))
1789                                 e->is_mfp = 1;
1790
1791                         if (sta_flags->mask & BIT(NL80211_STA_FLAG_TDLS_PEER) &&
1792                             sta_flags->set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1793                                 e->is_tdls = 1;
1794                 }
1795         }
1796
1797         e->noise = 0; /* filled in by caller */
1798         arr->count++;
1799
1800         return NL_SKIP;
1801 }
1802
1803 static int nl80211_get_assoclist(const char *ifname, char *buf, int *len)
1804 {
1805         DIR *d;
1806         int i, noise = 0;
1807         struct dirent *de;
1808         struct nl80211_array_buf arr = { .buf = buf, .count = 0 };
1809         struct iwinfo_assoclist_entry *e;
1810
1811         if ((d = opendir("/sys/class/net")) != NULL)
1812         {
1813                 while ((de = readdir(d)) != NULL)
1814                 {
1815                         if (!strncmp(de->d_name, ifname, strlen(ifname)) &&
1816                             (!de->d_name[strlen(ifname)] ||
1817                              !strncmp(&de->d_name[strlen(ifname)], ".sta", 4)))
1818                         {
1819                                 nl80211_request(de->d_name, NL80211_CMD_GET_STATION,
1820                                                 NLM_F_DUMP, nl80211_get_assoclist_cb, &arr);
1821                         }
1822                 }
1823
1824                 closedir(d);
1825
1826                 if (!nl80211_get_noise(ifname, &noise))
1827                         for (i = 0, e = arr.buf; i < arr.count; i++, e++)
1828                                 e->noise = noise;
1829
1830                 *len = (arr.count * sizeof(struct iwinfo_assoclist_entry));
1831                 return 0;
1832         }
1833
1834         return -1;
1835 }
1836
1837 static int nl80211_get_txpwrlist_cb(struct nl_msg *msg, void *arg)
1838 {
1839         int *dbm_max = arg;
1840         int ch_cur, ch_cmp, bands_remain, freqs_remain;
1841
1842         struct nlattr **attr = nl80211_parse(msg);
1843         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
1844         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
1845         struct nlattr *band, *freq;
1846
1847         static struct nla_policy freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1] = {
1848                 [NL80211_FREQUENCY_ATTR_FREQ]         = { .type = NLA_U32  },
1849                 [NL80211_FREQUENCY_ATTR_DISABLED]     = { .type = NLA_FLAG },
1850                 [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN] = { .type = NLA_FLAG },
1851                 [NL80211_FREQUENCY_ATTR_NO_IBSS]      = { .type = NLA_FLAG },
1852                 [NL80211_FREQUENCY_ATTR_RADAR]        = { .type = NLA_FLAG },
1853                 [NL80211_FREQUENCY_ATTR_MAX_TX_POWER] = { .type = NLA_U32  },
1854         };
1855
1856         ch_cur = *dbm_max; /* value int* is initialized with channel by caller */
1857         *dbm_max = -1;
1858
1859         nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
1860         {
1861                 nla_parse(bands, NL80211_BAND_ATTR_MAX, nla_data(band),
1862                           nla_len(band), NULL);
1863
1864                 nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS], freqs_remain)
1865                 {
1866                         nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
1867                                   nla_data(freq), nla_len(freq), freq_policy);
1868
1869                         ch_cmp = nl80211_freq2channel(nla_get_u32(
1870                                 freqs[NL80211_FREQUENCY_ATTR_FREQ]));
1871
1872                         if ((!ch_cur || (ch_cmp == ch_cur)) &&
1873                             freqs[NL80211_FREQUENCY_ATTR_MAX_TX_POWER])
1874                         {
1875                                 *dbm_max = (int)(0.01 * nla_get_u32(
1876                                         freqs[NL80211_FREQUENCY_ATTR_MAX_TX_POWER]));
1877
1878                                 break;
1879                         }
1880                 }
1881         }
1882
1883         return NL_SKIP;
1884 }
1885
1886 static int nl80211_get_txpwrlist(const char *ifname, char *buf, int *len)
1887 {
1888         int err, ch_cur;
1889         int dbm_max = -1, dbm_cur, dbm_cnt;
1890         struct nl80211_msg_conveyor *req;
1891         struct iwinfo_txpwrlist_entry entry;
1892
1893         if (nl80211_get_channel(ifname, &ch_cur))
1894                 ch_cur = 0;
1895
1896         /* initialize the value pointer with channel for callback */
1897         dbm_max = ch_cur;
1898
1899         err = nl80211_request(ifname, NL80211_CMD_GET_WIPHY, 0,
1900                               nl80211_get_txpwrlist_cb, &dbm_max);
1901
1902         if (!err)
1903         {
1904                 for (dbm_cur = 0, dbm_cnt = 0;
1905                      dbm_cur < dbm_max;
1906                      dbm_cur++, dbm_cnt++)
1907                 {
1908                         entry.dbm = dbm_cur;
1909                         entry.mw  = iwinfo_dbm2mw(dbm_cur);
1910
1911                         memcpy(&buf[dbm_cnt * sizeof(entry)], &entry, sizeof(entry));
1912                 }
1913
1914                 entry.dbm = dbm_max;
1915                 entry.mw  = iwinfo_dbm2mw(dbm_max);
1916
1917                 memcpy(&buf[dbm_cnt * sizeof(entry)], &entry, sizeof(entry));
1918                 dbm_cnt++;
1919
1920                 *len = dbm_cnt * sizeof(entry);
1921                 return 0;
1922         }
1923
1924         return -1;
1925 }
1926
1927 static void nl80211_get_scancrypto(const char *spec,
1928         struct iwinfo_crypto_entry *c)
1929 {
1930         if (strstr(spec, "WPA") || strstr(spec, "WEP"))
1931         {
1932                 c->enabled = 1;
1933
1934                 if (strstr(spec, "WPA2-") && strstr(spec, "WPA-"))
1935                         c->wpa_version = 3;
1936
1937                 else if (strstr(spec, "WPA2"))
1938                         c->wpa_version = 2;
1939
1940                 else if (strstr(spec, "WPA"))
1941                         c->wpa_version = 1;
1942
1943                 else if (strstr(spec, "WEP"))
1944                         c->auth_algs = IWINFO_AUTH_OPEN | IWINFO_AUTH_SHARED;
1945
1946
1947                 if (strstr(spec, "PSK"))
1948                         c->auth_suites |= IWINFO_KMGMT_PSK;
1949
1950                 if (strstr(spec, "802.1X") || strstr(spec, "EAP"))
1951                         c->auth_suites |= IWINFO_KMGMT_8021x;
1952
1953                 if (strstr(spec, "WPA-NONE"))
1954                         c->auth_suites |= IWINFO_KMGMT_NONE;
1955
1956
1957                 if (strstr(spec, "TKIP"))
1958                         c->pair_ciphers |= IWINFO_CIPHER_TKIP;
1959
1960                 if (strstr(spec, "CCMP"))
1961                         c->pair_ciphers |= IWINFO_CIPHER_CCMP;
1962
1963                 if (strstr(spec, "WEP-40"))
1964                         c->pair_ciphers |= IWINFO_CIPHER_WEP40;
1965
1966                 if (strstr(spec, "WEP-104"))
1967                         c->pair_ciphers |= IWINFO_CIPHER_WEP104;
1968
1969                 c->group_ciphers = c->pair_ciphers;
1970         }
1971         else
1972         {
1973                 c->enabled = 0;
1974         }
1975 }
1976
1977
1978 struct nl80211_scanlist {
1979         struct iwinfo_scanlist_entry *e;
1980         int len;
1981 };
1982
1983
1984 static void nl80211_get_scanlist_ie(struct nlattr **bss,
1985                                     struct iwinfo_scanlist_entry *e)
1986 {
1987         int ielen = nla_len(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1988         unsigned char *ie = nla_data(bss[NL80211_BSS_INFORMATION_ELEMENTS]);
1989         static unsigned char ms_oui[3] = { 0x00, 0x50, 0xf2 };
1990         int len;
1991
1992         while (ielen >= 2 && ielen >= ie[1])
1993         {
1994                 switch (ie[0])
1995                 {
1996                 case 0: /* SSID */
1997                         len = min(ie[1], IWINFO_ESSID_MAX_SIZE);
1998                         memcpy(e->ssid, ie + 2, len);
1999                         e->ssid[len] = 0;
2000                         break;
2001
2002                 case 48: /* RSN */
2003                         iwinfo_parse_rsn(&e->crypto, ie + 2, ie[1],
2004                                          IWINFO_CIPHER_CCMP, IWINFO_KMGMT_8021x);
2005                         break;
2006
2007                 case 221: /* Vendor */
2008                         if (ie[1] >= 4 && !memcmp(ie + 2, ms_oui, 3) && ie[5] == 1)
2009                                 iwinfo_parse_rsn(&e->crypto, ie + 6, ie[1] - 4,
2010                                                  IWINFO_CIPHER_TKIP, IWINFO_KMGMT_PSK);
2011                         break;
2012                 }
2013
2014                 ielen -= ie[1] + 2;
2015                 ie += ie[1] + 2;
2016         }
2017 }
2018
2019 static int nl80211_get_scanlist_cb(struct nl_msg *msg, void *arg)
2020 {
2021         int8_t rssi;
2022         uint16_t caps;
2023
2024         struct nl80211_scanlist *sl = arg;
2025         struct nlattr **tb = nl80211_parse(msg);
2026         struct nlattr *bss[NL80211_BSS_MAX + 1];
2027
2028         static struct nla_policy bss_policy[NL80211_BSS_MAX + 1] = {
2029                 [NL80211_BSS_TSF]                  = { .type = NLA_U64 },
2030                 [NL80211_BSS_FREQUENCY]            = { .type = NLA_U32 },
2031                 [NL80211_BSS_BSSID]                = { 0 },
2032                 [NL80211_BSS_BEACON_INTERVAL]      = { .type = NLA_U16 },
2033                 [NL80211_BSS_CAPABILITY]           = { .type = NLA_U16 },
2034                 [NL80211_BSS_INFORMATION_ELEMENTS] = { 0 },
2035                 [NL80211_BSS_SIGNAL_MBM]           = { .type = NLA_U32 },
2036                 [NL80211_BSS_SIGNAL_UNSPEC]        = { .type = NLA_U8  },
2037                 [NL80211_BSS_STATUS]               = { .type = NLA_U32 },
2038                 [NL80211_BSS_SEEN_MS_AGO]          = { .type = NLA_U32 },
2039                 [NL80211_BSS_BEACON_IES]           = { 0 },
2040         };
2041
2042         if (!tb[NL80211_ATTR_BSS] ||
2043                 nla_parse_nested(bss, NL80211_BSS_MAX, tb[NL80211_ATTR_BSS],
2044                                  bss_policy) ||
2045                 !bss[NL80211_BSS_BSSID])
2046         {
2047                 return NL_SKIP;
2048         }
2049
2050         if (bss[NL80211_BSS_CAPABILITY])
2051                 caps = nla_get_u16(bss[NL80211_BSS_CAPABILITY]);
2052         else
2053                 caps = 0;
2054
2055         memset(sl->e, 0, sizeof(*sl->e));
2056         memcpy(sl->e->mac, nla_data(bss[NL80211_BSS_BSSID]), 6);
2057
2058         if (caps & (1<<1))
2059                 sl->e->mode = IWINFO_OPMODE_ADHOC;
2060         else if (caps & (1<<0))
2061                 sl->e->mode = IWINFO_OPMODE_MASTER;
2062         else
2063                 sl->e->mode = IWINFO_OPMODE_MESHPOINT;
2064
2065         if (caps & (1<<4))
2066                 sl->e->crypto.enabled = 1;
2067
2068         if (bss[NL80211_BSS_FREQUENCY])
2069                 sl->e->channel = nl80211_freq2channel(nla_get_u32(
2070                         bss[NL80211_BSS_FREQUENCY]));
2071
2072         if (bss[NL80211_BSS_INFORMATION_ELEMENTS])
2073                 nl80211_get_scanlist_ie(bss, sl->e);
2074
2075         if (bss[NL80211_BSS_SIGNAL_MBM])
2076         {
2077                 sl->e->signal =
2078                         (uint8_t)((int32_t)nla_get_u32(bss[NL80211_BSS_SIGNAL_MBM]) / 100);
2079
2080                 rssi = sl->e->signal - 0x100;
2081
2082                 if (rssi < -110)
2083                         rssi = -110;
2084                 else if (rssi > -40)
2085                         rssi = -40;
2086
2087                 sl->e->quality = (rssi + 110);
2088                 sl->e->quality_max = 70;
2089         }
2090
2091         if (sl->e->crypto.enabled && !sl->e->crypto.wpa_version)
2092         {
2093                 sl->e->crypto.auth_algs    = IWINFO_AUTH_OPEN | IWINFO_AUTH_SHARED;
2094                 sl->e->crypto.pair_ciphers = IWINFO_CIPHER_WEP40 | IWINFO_CIPHER_WEP104;
2095         }
2096
2097         sl->e++;
2098         sl->len++;
2099
2100         return NL_SKIP;
2101 }
2102
2103 static int nl80211_get_scanlist_nl(const char *ifname, char *buf, int *len)
2104 {
2105         struct nl80211_scanlist sl = { .e = (struct iwinfo_scanlist_entry *)buf };
2106
2107         if (nl80211_request(ifname, NL80211_CMD_TRIGGER_SCAN, 0, NULL, NULL))
2108                 goto out;
2109
2110         if (nl80211_wait("nl80211", "scan",
2111                          NL80211_CMD_NEW_SCAN_RESULTS, NL80211_CMD_SCAN_ABORTED))
2112                 goto out;
2113
2114         if (nl80211_request(ifname, NL80211_CMD_GET_SCAN, NLM_F_DUMP,
2115                             nl80211_get_scanlist_cb, &sl))
2116                 goto out;
2117
2118         *len = sl.len * sizeof(struct iwinfo_scanlist_entry);
2119         return 0;
2120
2121 out:
2122         *len = 0;
2123         return -1;
2124 }
2125
2126 static int wpasupp_ssid_decode(const char *in, char *out, int outlen)
2127 {
2128 #define hex(x) \
2129         (((x) >= 'a') ? ((x) - 'a' + 10) : \
2130                 (((x) >= 'A') ? ((x) - 'A' + 10) : ((x) - '0')))
2131
2132         int len = 0;
2133
2134         while (*in)
2135         {
2136                 if (len + 1 >= outlen)
2137                         break;
2138
2139                 switch (*in)
2140                 {
2141                 case '\\':
2142                         in++;
2143                         switch (*in)
2144                         {
2145                         case 'n':
2146                                 out[len++] = '\n'; in++;
2147                                 break;
2148
2149                         case 'r':
2150                                 out[len++] = '\r'; in++;
2151                                 break;
2152
2153                         case 't':
2154                                 out[len++] = '\t'; in++;
2155                                 break;
2156
2157                         case 'e':
2158                                 out[len++] = '\033'; in++;
2159                                 break;
2160
2161                         case 'x':
2162                                 if (isxdigit(*(in+1)) && isxdigit(*(in+2)))
2163                                         out[len++] = hex(*(in+1)) * 16 + hex(*(in+2));
2164                                 in += 3;
2165                                 break;
2166
2167                         default:
2168                                 out[len++] = *in++;
2169                                 break;
2170                         }
2171                         break;
2172
2173                 default:
2174                         out[len++] = *in++;
2175                         break;
2176                 }
2177         }
2178
2179         if (outlen > len)
2180                 out[len] = '\0';
2181
2182         return len;
2183 }
2184
2185 static int nl80211_get_scanlist_wpactl(const char *ifname, char *buf, int *len)
2186 {
2187         int sock, qmax, rssi, tries, count = -1, ready = 0;
2188         char *pos, *line, *bssid, *freq, *signal, *flags, *ssid, reply[4096];
2189         struct sockaddr_un local = { 0 };
2190         struct iwinfo_scanlist_entry *e = (struct iwinfo_scanlist_entry *)buf;
2191
2192         sock = nl80211_wpactl_connect(ifname, &local);
2193
2194         if (sock < 0)
2195                 return sock;
2196
2197         send(sock, "ATTACH", 6, 0);
2198         send(sock, "SCAN", 4, 0);
2199
2200         /*
2201          * wait for scan results:
2202          *   nl80211_wpactl_recv() will use a timeout of 256ms and we need to scan
2203          *   72 channels at most. We'll also receive two "OK" messages acknowledging
2204          *   the "ATTACH" and "SCAN" commands and the driver might need a bit extra
2205          *   time to process the results, so try 72 + 2 + 1 times.
2206          */
2207         for (tries = 0; tries < 75; tries++)
2208         {
2209                 if (nl80211_wpactl_recv(sock, reply, sizeof(reply)) <= 0)
2210                         continue;
2211
2212                 /* got an event notification */
2213                 if (reply[0] == '<')
2214                 {
2215                         /* scan results are ready */
2216                         if (strstr(reply, "CTRL-EVENT-SCAN-RESULTS"))
2217                         {
2218                                 /* send "SCAN_RESULTS" command */
2219                                 ready = (send(sock, "SCAN_RESULTS", 12, 0) == 12);
2220                                 break;
2221                         }
2222
2223                         /* is another unrelated event, retry */
2224                         tries--;
2225                 }
2226         }
2227
2228         /* receive and parse scan results if the wait above didn't time out */
2229         while (ready && nl80211_wpactl_recv(sock, reply, sizeof(reply)) > 0)
2230         {
2231                 /* received an event notification, receive again */
2232                 if (reply[0] == '<')
2233                         continue;
2234
2235                 nl80211_get_quality_max(ifname, &qmax);
2236
2237                 for (line = strtok_r(reply, "\n", &pos);
2238                      line != NULL;
2239                      line = strtok_r(NULL, "\n", &pos))
2240                 {
2241                         /* skip header line */
2242                         if (count < 0)
2243                         {
2244                                 count++;
2245                                 continue;
2246                         }
2247
2248                         bssid  = strtok(line, "\t");
2249                         freq   = strtok(NULL, "\t");
2250                         signal = strtok(NULL, "\t");
2251                         flags  = strtok(NULL, "\t");
2252                         ssid   = strtok(NULL, "\n");
2253
2254                         if (!bssid || !freq || !signal || !flags || !ssid)
2255                                 continue;
2256
2257                         /* BSSID */
2258                         e->mac[0] = strtol(&bssid[0],  NULL, 16);
2259                         e->mac[1] = strtol(&bssid[3],  NULL, 16);
2260                         e->mac[2] = strtol(&bssid[6],  NULL, 16);
2261                         e->mac[3] = strtol(&bssid[9],  NULL, 16);
2262                         e->mac[4] = strtol(&bssid[12], NULL, 16);
2263                         e->mac[5] = strtol(&bssid[15], NULL, 16);
2264
2265                         /* SSID */
2266                         wpasupp_ssid_decode(ssid, e->ssid, sizeof(e->ssid));
2267
2268                         /* Mode */
2269                         if (strstr(flags, "[MESH]"))
2270                                 e->mode = IWINFO_OPMODE_MESHPOINT;
2271                         else if (strstr(flags, "[IBSS]"))
2272                                 e->mode = IWINFO_OPMODE_ADHOC;
2273                         else
2274                                 e->mode = IWINFO_OPMODE_MASTER;
2275
2276                         /* Channel */
2277                         e->channel = nl80211_freq2channel(atoi(freq));
2278
2279                         /* Signal */
2280                         rssi = atoi(signal);
2281                         e->signal = rssi;
2282
2283                         /* Quality */
2284                         if (rssi < 0)
2285                         {
2286                                 /* The cfg80211 wext compat layer assumes a signal range
2287                                  * of -110 dBm to -40 dBm, the quality value is derived
2288                                  * by adding 110 to the signal level */
2289                                 if (rssi < -110)
2290                                         rssi = -110;
2291                                 else if (rssi > -40)
2292                                         rssi = -40;
2293
2294                                 e->quality = (rssi + 110);
2295                         }
2296                         else
2297                         {
2298                                 e->quality = rssi;
2299                         }
2300
2301                         /* Max. Quality */
2302                         e->quality_max = qmax;
2303
2304                         /* Crypto */
2305                         nl80211_get_scancrypto(flags, &e->crypto);
2306
2307                         count++;
2308                         e++;
2309                 }
2310
2311                 *len = count * sizeof(struct iwinfo_scanlist_entry);
2312                 break;
2313         }
2314
2315         close(sock);
2316         unlink(local.sun_path);
2317
2318         return (count >= 0) ? 0 : -1;
2319 }
2320
2321 static int nl80211_get_scanlist(const char *ifname, char *buf, int *len)
2322 {
2323         char *res;
2324         int rv, mode;
2325
2326         *len = 0;
2327
2328         /* Got a radioX pseudo interface, find some interface on it or create one */
2329         if (!strncmp(ifname, "radio", 5))
2330         {
2331                 /* Reuse existing interface */
2332                 if ((res = nl80211_phy2ifname(ifname)) != NULL)
2333                 {
2334                         return nl80211_get_scanlist(res, buf, len);
2335                 }
2336
2337                 /* Need to spawn a temporary iface for scanning */
2338                 else if ((res = nl80211_ifadd(ifname)) != NULL)
2339                 {
2340                         rv = nl80211_get_scanlist(res, buf, len);
2341                         nl80211_ifdel(res);
2342                         return rv;
2343                 }
2344         }
2345
2346         /* WPA supplicant */
2347         if (!nl80211_get_scanlist_wpactl(ifname, buf, len))
2348         {
2349                 return 0;
2350         }
2351
2352         /* station / ad-hoc / monitor scan */
2353         else if (!nl80211_get_mode(ifname, &mode) &&
2354                  (mode == IWINFO_OPMODE_ADHOC ||
2355                   mode == IWINFO_OPMODE_MASTER ||
2356                   mode == IWINFO_OPMODE_CLIENT ||
2357                   mode == IWINFO_OPMODE_MONITOR) &&
2358                  iwinfo_ifup(ifname))
2359         {
2360                 return nl80211_get_scanlist_nl(ifname, buf, len);
2361         }
2362
2363         /* AP scan */
2364         else
2365         {
2366                 /* Got a temp interface, don't create yet another one */
2367                 if (!strncmp(ifname, "tmp.", 4))
2368                 {
2369                         if (!iwinfo_ifup(ifname))
2370                                 return -1;
2371
2372                         rv = nl80211_get_scanlist_nl(ifname, buf, len);
2373                         iwinfo_ifdown(ifname);
2374                         return rv;
2375                 }
2376
2377                 /* Spawn a new scan interface */
2378                 else
2379                 {
2380                         if (!(res = nl80211_ifadd(ifname)))
2381                                 return -1;
2382
2383                         iwinfo_ifmac(res);
2384
2385                         /* if we can take the new interface up, the driver supports an
2386                          * additional interface and there's no need to tear down the ap */
2387                         if (iwinfo_ifup(res))
2388                         {
2389                                 rv = nl80211_get_scanlist_nl(res, buf, len);
2390                                 iwinfo_ifdown(res);
2391                         }
2392
2393                         /* driver cannot create secondary interface, take down ap
2394                          * during scan */
2395                         else if (iwinfo_ifdown(ifname) && iwinfo_ifup(res))
2396                         {
2397                                 rv = nl80211_get_scanlist_nl(res, buf, len);
2398                                 iwinfo_ifdown(res);
2399                                 iwinfo_ifup(ifname);
2400                                 nl80211_hostapd_hup(ifname);
2401                         }
2402
2403                         nl80211_ifdel(res);
2404                         return rv;
2405                 }
2406         }
2407
2408         return -1;
2409 }
2410
2411 static int nl80211_get_freqlist_cb(struct nl_msg *msg, void *arg)
2412 {
2413         int bands_remain, freqs_remain;
2414
2415         struct nl80211_array_buf *arr = arg;
2416         struct iwinfo_freqlist_entry *e;
2417
2418         struct nlattr **attr = nl80211_parse(msg);
2419         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
2420         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
2421         struct nlattr *band, *freq;
2422
2423         e = arr->buf;
2424         e += arr->count;
2425
2426         if (attr[NL80211_ATTR_WIPHY_BANDS]) {
2427                 nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
2428                 {
2429                         nla_parse(bands, NL80211_BAND_ATTR_MAX,
2430                                   nla_data(band), nla_len(band), NULL);
2431
2432                         if (bands[NL80211_BAND_ATTR_FREQS]) {
2433                                 nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS], freqs_remain)
2434                                 {
2435                                         nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
2436                                                   nla_data(freq), nla_len(freq), NULL);
2437
2438                                         if (!freqs[NL80211_FREQUENCY_ATTR_FREQ] ||
2439                                             freqs[NL80211_FREQUENCY_ATTR_DISABLED])
2440                                                 continue;
2441
2442                                         e->mhz = nla_get_u32(freqs[NL80211_FREQUENCY_ATTR_FREQ]);
2443                                         e->channel = nl80211_freq2channel(e->mhz);
2444
2445                                         e->restricted = (
2446                                                 freqs[NL80211_FREQUENCY_ATTR_NO_IR] &&
2447                                                 !freqs[NL80211_FREQUENCY_ATTR_RADAR]
2448                                         ) ? 1 : 0;
2449
2450                                         if (freqs[NL80211_FREQUENCY_ATTR_NO_HT40_MINUS])
2451                                                 e->flags |= IWINFO_FREQ_NO_HT40MINUS;
2452                                         if (freqs[NL80211_FREQUENCY_ATTR_NO_HT40_PLUS])
2453                                                 e->flags |= IWINFO_FREQ_NO_HT40PLUS;
2454                                         if (freqs[NL80211_FREQUENCY_ATTR_NO_80MHZ])
2455                                                 e->flags |= IWINFO_FREQ_NO_80MHZ;
2456                                         if (freqs[NL80211_FREQUENCY_ATTR_NO_160MHZ])
2457                                                 e->flags |= IWINFO_FREQ_NO_160MHZ;
2458                                         if (freqs[NL80211_FREQUENCY_ATTR_NO_20MHZ])
2459                                                 e->flags |= IWINFO_FREQ_NO_20MHZ;
2460                                         if (freqs[NL80211_FREQUENCY_ATTR_NO_10MHZ])
2461                                                 e->flags |= IWINFO_FREQ_NO_10MHZ;
2462
2463                                         e++;
2464                                         arr->count++;
2465                                 }
2466                         }
2467                 }
2468         }
2469
2470         return NL_SKIP;
2471 }
2472
2473 static int nl80211_get_freqlist(const char *ifname, char *buf, int *len)
2474 {
2475         struct nl80211_msg_conveyor *cv;
2476         struct nl80211_array_buf arr = { .buf = buf, .count = 0 };
2477         uint32_t features = nl80211_get_protocol_features(ifname);
2478         int flags;
2479
2480         flags = features & NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP ? NLM_F_DUMP : 0;
2481         cv = nl80211_msg(ifname, NL80211_CMD_GET_WIPHY, flags);
2482         if (!cv)
2483                 goto out;
2484
2485         NLA_PUT_FLAG(cv->msg, NL80211_ATTR_SPLIT_WIPHY_DUMP);
2486         if (nl80211_send(cv, nl80211_get_freqlist_cb, &arr))
2487                 goto out;
2488
2489         *len = arr.count * sizeof(struct iwinfo_freqlist_entry);
2490         return 0;
2491
2492 nla_put_failure:
2493         nl80211_free(cv);
2494 out:
2495         *len = 0;
2496         return -1;
2497 }
2498
2499 static int nl80211_get_country_cb(struct nl_msg *msg, void *arg)
2500 {
2501         char *buf = arg;
2502         struct nlattr **attr = nl80211_parse(msg);
2503
2504         if (attr[NL80211_ATTR_REG_ALPHA2])
2505                 memcpy(buf, nla_data(attr[NL80211_ATTR_REG_ALPHA2]), 2);
2506         else
2507                 buf[0] = 0;
2508
2509         return NL_SKIP;
2510 }
2511
2512 static int nl80211_get_country(const char *ifname, char *buf)
2513 {
2514         if (nl80211_request(ifname, NL80211_CMD_GET_REG, 0,
2515                             nl80211_get_country_cb, buf))
2516                 return -1;
2517
2518         return 0;
2519 }
2520
2521 static int nl80211_get_countrylist(const char *ifname, char *buf, int *len)
2522 {
2523         int count;
2524         struct iwinfo_country_entry *e = (struct iwinfo_country_entry *)buf;
2525         const struct iwinfo_iso3166_label *l;
2526
2527         for (l = IWINFO_ISO3166_NAMES, count = 0; l->iso3166; l++, e++, count++)
2528         {
2529                 e->iso3166 = l->iso3166;
2530                 e->ccode[0] = (l->iso3166 / 256);
2531                 e->ccode[1] = (l->iso3166 % 256);
2532                 e->ccode[2] = 0;
2533         }
2534
2535         *len = (count * sizeof(struct iwinfo_country_entry));
2536         return 0;
2537 }
2538
2539
2540 struct nl80211_modes
2541 {
2542         bool ok;
2543         uint32_t hw;
2544         uint32_t ht;
2545 };
2546
2547 static int nl80211_get_modelist_cb(struct nl_msg *msg, void *arg)
2548 {
2549         struct nl80211_modes *m = arg;
2550         int bands_remain, freqs_remain;
2551         uint16_t caps = 0;
2552         uint32_t vht_caps = 0;
2553         struct nlattr **attr = nl80211_parse(msg);
2554         struct nlattr *bands[NL80211_BAND_ATTR_MAX + 1];
2555         struct nlattr *freqs[NL80211_FREQUENCY_ATTR_MAX + 1];
2556         struct nlattr *band, *freq;
2557
2558         if (attr[NL80211_ATTR_WIPHY_BANDS])
2559         {
2560                 nla_for_each_nested(band, attr[NL80211_ATTR_WIPHY_BANDS], bands_remain)
2561                 {
2562                         nla_parse(bands, NL80211_BAND_ATTR_MAX,
2563                                   nla_data(band), nla_len(band), NULL);
2564
2565                         if (bands[NL80211_BAND_ATTR_HT_CAPA])
2566                                 caps = nla_get_u16(bands[NL80211_BAND_ATTR_HT_CAPA]);
2567
2568                         /* Treat any nonzero capability as 11n */
2569                         if (caps > 0)
2570                         {
2571                                 m->hw |= IWINFO_80211_N;
2572                                 m->ht |= IWINFO_HTMODE_HT20;
2573
2574                                 if (caps & (1 << 1))
2575                                         m->ht |= IWINFO_HTMODE_HT40;
2576                         }
2577
2578                         nla_for_each_nested(freq, bands[NL80211_BAND_ATTR_FREQS],
2579                                             freqs_remain)
2580                         {
2581                                 nla_parse(freqs, NL80211_FREQUENCY_ATTR_MAX,
2582                                           nla_data(freq), nla_len(freq), NULL);
2583
2584                                 if (!freqs[NL80211_FREQUENCY_ATTR_FREQ])
2585                                         continue;
2586
2587                                 if (nla_get_u32(freqs[NL80211_FREQUENCY_ATTR_FREQ]) < 2485)
2588                                 {
2589                                         m->hw |= IWINFO_80211_B;
2590                                         m->hw |= IWINFO_80211_G;
2591                                 }
2592                                 else if (bands[NL80211_BAND_ATTR_VHT_CAPA])
2593                                 {
2594                                         vht_caps = nla_get_u32(bands[NL80211_BAND_ATTR_VHT_CAPA]);
2595
2596                                         /* Treat any nonzero capability as 11ac */
2597                                         if (vht_caps > 0)
2598                                         {
2599                                                 m->hw |= IWINFO_80211_AC;
2600                                                 m->ht |= IWINFO_HTMODE_VHT20 | IWINFO_HTMODE_VHT40 | IWINFO_HTMODE_VHT80;
2601
2602                                                 switch ((vht_caps >> 2) & 3)
2603                                                 {
2604                                                 case 2:
2605                                                         m->ht |= IWINFO_HTMODE_VHT80_80;
2606                                                         /* fall through */
2607
2608                                                 case 1:
2609                                                         m->ht |= IWINFO_HTMODE_VHT160;
2610                                                 }
2611                                         }
2612                                 }
2613                                 else if (!(m->hw & IWINFO_80211_AC))
2614                                 {
2615                                         m->hw |= IWINFO_80211_A;
2616                                 }
2617                         }
2618                 }
2619
2620                 m->ok = 1;
2621         }
2622
2623         return NL_SKIP;
2624 }
2625
2626 static int nl80211_get_hwmodelist(const char *ifname, int *buf)
2627 {
2628         struct nl80211_modes m = { 0 };
2629
2630         if (nl80211_request(ifname, NL80211_CMD_GET_WIPHY, 0,
2631                             nl80211_get_modelist_cb, &m))
2632                 goto out;
2633
2634         if (!m.ok)
2635                 goto out;
2636
2637         *buf = m.hw;
2638         return 0;
2639
2640 out:
2641         *buf = 0;
2642         return -1;
2643 }
2644
2645 static int nl80211_get_htmodelist(const char *ifname, int *buf)
2646 {
2647         struct nl80211_modes m = { 0 };
2648
2649         if (nl80211_request(ifname, NL80211_CMD_GET_WIPHY, 0,
2650                             nl80211_get_modelist_cb, &m))
2651                 goto out;
2652
2653         if (!m.ok)
2654                 goto out;
2655
2656         *buf = m.ht;
2657         return 0;
2658
2659 out:
2660         *buf = 0;
2661         return -1;
2662 }
2663
2664
2665 static int nl80211_get_ifcomb_cb(struct nl_msg *msg, void *arg)
2666 {
2667         struct nlattr **attr = nl80211_parse(msg);
2668         struct nlattr *comb;
2669         int *ret = arg;
2670         int comb_rem, limit_rem, mode_rem;
2671
2672         *ret = 0;
2673         if (!attr[NL80211_ATTR_INTERFACE_COMBINATIONS])
2674                 return NL_SKIP;
2675
2676         nla_for_each_nested(comb, attr[NL80211_ATTR_INTERFACE_COMBINATIONS], comb_rem)
2677         {
2678                 static struct nla_policy iface_combination_policy[NUM_NL80211_IFACE_COMB] = {
2679                         [NL80211_IFACE_COMB_LIMITS] = { .type = NLA_NESTED },
2680                         [NL80211_IFACE_COMB_MAXNUM] = { .type = NLA_U32 },
2681                 };
2682                 struct nlattr *tb_comb[NUM_NL80211_IFACE_COMB+1];
2683                 static struct nla_policy iface_limit_policy[NUM_NL80211_IFACE_LIMIT] = {
2684                         [NL80211_IFACE_LIMIT_TYPES] = { .type = NLA_NESTED },
2685                         [NL80211_IFACE_LIMIT_MAX] = { .type = NLA_U32 },
2686                 };
2687                 struct nlattr *tb_limit[NUM_NL80211_IFACE_LIMIT+1];
2688                 struct nlattr *limit;
2689
2690                 nla_parse_nested(tb_comb, NUM_NL80211_IFACE_COMB, comb, iface_combination_policy);
2691
2692                 if (!tb_comb[NL80211_IFACE_COMB_LIMITS])
2693                         continue;
2694
2695                 nla_for_each_nested(limit, tb_comb[NL80211_IFACE_COMB_LIMITS], limit_rem)
2696                 {
2697                         struct nlattr *mode;
2698
2699                         nla_parse_nested(tb_limit, NUM_NL80211_IFACE_LIMIT, limit, iface_limit_policy);
2700
2701                         if (!tb_limit[NL80211_IFACE_LIMIT_TYPES] ||
2702                             !tb_limit[NL80211_IFACE_LIMIT_MAX])
2703                                 continue;
2704
2705                         if (nla_get_u32(tb_limit[NL80211_IFACE_LIMIT_MAX]) < 2)
2706                                 continue;
2707
2708                         nla_for_each_nested(mode, tb_limit[NL80211_IFACE_LIMIT_TYPES], mode_rem) {
2709                                 if (nla_type(mode) == NL80211_IFTYPE_AP)
2710                                         *ret = 1;
2711                         }
2712                 }
2713         }
2714
2715         return NL_SKIP;
2716 }
2717
2718 static int nl80211_get_mbssid_support(const char *ifname, int *buf)
2719 {
2720         if (nl80211_request(ifname, NL80211_CMD_GET_WIPHY, 0,
2721                             nl80211_get_ifcomb_cb, buf))
2722                 return -1;
2723
2724         return 0;
2725 }
2726
2727 static int nl80211_get_hardware_id(const char *ifname, char *buf)
2728 {
2729         int rv = -1;
2730         char *res;
2731
2732         /* Got a radioX pseudo interface, find some interface on it or create one */
2733         if (!strncmp(ifname, "radio", 5))
2734         {
2735                 /* Reuse existing interface */
2736                 if ((res = nl80211_phy2ifname(ifname)) != NULL)
2737                 {
2738                         rv = wext_ops.hardware_id(res, buf);
2739                 }
2740
2741                 /* Need to spawn a temporary iface for finding IDs */
2742                 else if ((res = nl80211_ifadd(ifname)) != NULL)
2743                 {
2744                         rv = wext_ops.hardware_id(res, buf);
2745                         nl80211_ifdel(res);
2746                 }
2747         }
2748         else
2749         {
2750                 rv = wext_ops.hardware_id(ifname, buf);
2751         }
2752
2753         /* Failed to obtain hardware IDs, search board config */
2754         if (rv)
2755         {
2756                 rv = iwinfo_hardware_id_from_mtd((struct iwinfo_hardware_id *)buf);
2757         }
2758
2759         return rv;
2760 }
2761
2762 static const struct iwinfo_hardware_entry *
2763 nl80211_get_hardware_entry(const char *ifname)
2764 {
2765         struct iwinfo_hardware_id id;
2766
2767         if (nl80211_get_hardware_id(ifname, (char *)&id))
2768                 return NULL;
2769
2770         return iwinfo_hardware(&id);
2771 }
2772
2773 static int nl80211_get_hardware_name(const char *ifname, char *buf)
2774 {
2775         const struct iwinfo_hardware_entry *hw;
2776
2777         if (!(hw = nl80211_get_hardware_entry(ifname)))
2778                 sprintf(buf, "Generic MAC80211");
2779         else
2780                 sprintf(buf, "%s %s", hw->vendor_name, hw->device_name);
2781
2782         return 0;
2783 }
2784
2785 static int nl80211_get_txpower_offset(const char *ifname, int *buf)
2786 {
2787         const struct iwinfo_hardware_entry *hw;
2788
2789         if (!(hw = nl80211_get_hardware_entry(ifname)))
2790                 return -1;
2791
2792         *buf = hw->txpower_offset;
2793         return 0;
2794 }
2795
2796 static int nl80211_get_frequency_offset(const char *ifname, int *buf)
2797 {
2798         const struct iwinfo_hardware_entry *hw;
2799
2800         if (!(hw = nl80211_get_hardware_entry(ifname)))
2801                 return -1;
2802
2803         *buf = hw->frequency_offset;
2804         return 0;
2805 }
2806
2807 static int nl80211_lookup_phyname(const char *section, char *buf)
2808 {
2809         int idx;
2810
2811         if ((idx = nl80211_phy_idx_from_uci(section)) < 0)
2812                 return -1;
2813
2814         sprintf(buf, "phy%d", idx);
2815         return 0;
2816 }
2817
2818 const struct iwinfo_ops nl80211_ops = {
2819         .name             = "nl80211",
2820         .probe            = nl80211_probe,
2821         .channel          = nl80211_get_channel,
2822         .frequency        = nl80211_get_frequency,
2823         .frequency_offset = nl80211_get_frequency_offset,
2824         .txpower          = nl80211_get_txpower,
2825         .txpower_offset   = nl80211_get_txpower_offset,
2826         .bitrate          = nl80211_get_bitrate,
2827         .signal           = nl80211_get_signal,
2828         .noise            = nl80211_get_noise,
2829         .quality          = nl80211_get_quality,
2830         .quality_max      = nl80211_get_quality_max,
2831         .mbssid_support   = nl80211_get_mbssid_support,
2832         .hwmodelist       = nl80211_get_hwmodelist,
2833         .htmodelist       = nl80211_get_htmodelist,
2834         .mode             = nl80211_get_mode,
2835         .ssid             = nl80211_get_ssid,
2836         .bssid            = nl80211_get_bssid,
2837         .country          = nl80211_get_country,
2838         .hardware_id      = nl80211_get_hardware_id,
2839         .hardware_name    = nl80211_get_hardware_name,
2840         .encryption       = nl80211_get_encryption,
2841         .phyname          = nl80211_get_phyname,
2842         .assoclist        = nl80211_get_assoclist,
2843         .txpwrlist        = nl80211_get_txpwrlist,
2844         .scanlist         = nl80211_get_scanlist,
2845         .freqlist         = nl80211_get_freqlist,
2846         .countrylist      = nl80211_get_countrylist,
2847         .lookup_phy       = nl80211_lookup_phyname,
2848         .close            = nl80211_close
2849 };