usr.lib/wpad/wpa.c

149 	int pos = len - 1;
150 	while (pos >= 0) {
151 		counter[pos]++;
152 		if (counter[pos] != 0)
154 		pos--;
293 	char *pos = buf;
298 	pos += snprintf(pos, buf + len - pos,
304 		pos += snprintf(pos, buf + len - pos, "%d " MACSTR " ",
307 			pos += snprintf(pos, buf + len - pos, "%02x",
309 		pos += snprintf(pos, buf + len - pos, " %d\n",
313 	return (pos - buf);
336 	uint8_t *pos;
368 	pos = (uint8_t *)(hdr + 1);
372 		data->group_cipher = wpa_selector_to_bitfield(pos);
373 		pos += WPA_SELECTOR_LEN;
383 		count = pos[0] | (pos[1] << 8);
384 		pos += 2;
393 			data->pairwise_cipher |= wpa_selector_to_bitfield(pos);
394 			pos += WPA_SELECTOR_LEN;
405 		count = pos[0] | (pos[1] << 8);
406 		pos += 2;
415 			data->key_mgmt |= wpa_key_mgmt_to_bitfield(pos);
416 			pos += WPA_SELECTOR_LEN;
426 		data->capabilities = pos[0] | (pos[1] << 8);
427 		pos += 2;
446 	uint8_t *pos;
477 	pos = (uint8_t *)(hdr + 1);
481 		data->group_cipher = rsn_selector_to_bitfield(pos);
482 		pos += RSN_SELECTOR_LEN;
492 		count = pos[0] | (pos[1] << 8);
493 		pos += 2;
502 			data->pairwise_cipher |= rsn_selector_to_bitfield(pos);
503 			pos += RSN_SELECTOR_LEN;
514 		count = pos[0] | (pos[1] << 8);
515 		pos += 2;
524 			data->key_mgmt |= rsn_key_mgmt_to_bitfield(pos);
525 			pos += RSN_SELECTOR_LEN;
535 		data->capabilities = pos[0] | (pos[1] << 8);
536 		pos += 2;
565 	uint8_t *pos;
572 	pos = (uint8_t *)(hdr + 1);
575 		(void) memcpy(pos, WPA_CIPHER_SUITE_CCMP, WPA_SELECTOR_LEN);
577 		(void) memcpy(pos, WPA_CIPHER_SUITE_TKIP, WPA_SELECTOR_LEN);
579 		(void) memcpy(pos, WPA_CIPHER_SUITE_WEP104, WPA_SELECTOR_LEN);
581 		(void) memcpy(pos, WPA_CIPHER_SUITE_WEP40, WPA_SELECTOR_LEN);
587 	pos += WPA_SELECTOR_LEN;
589 	*pos++ = 1;
590 	*pos++ = 0;
592 		(void) memcpy(pos, WPA_CIPHER_SUITE_CCMP, WPA_SELECTOR_LEN);
594 		(void) memcpy(pos, WPA_CIPHER_SUITE_TKIP, WPA_SELECTOR_LEN);
596 		(void) memcpy(pos, WPA_CIPHER_SUITE_NONE, WPA_SELECTOR_LEN);
602 	pos += WPA_SELECTOR_LEN;
604 	*pos++ = 1;
605 	*pos++ = 0;
607 		(void) memcpy(pos, WPA_AUTH_KEY_MGMT_UNSPEC_802_1X,
610 		(void) memcpy(pos, WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X,
617 	pos += WPA_SELECTOR_LEN;
622 	hdr->len = (pos - wpa_ie) - 2;
624 	return (pos - wpa_ie);
630 	uint8_t *pos;
636 	pos = (uint8_t *)(hdr + 1);
639 		(void) memcpy(pos, RSN_CIPHER_SUITE_CCMP, RSN_SELECTOR_LEN);
641 		(void) memcpy(pos, RSN_CIPHER_SUITE_TKIP, RSN_SELECTOR_LEN);
643 		(void) memcpy(pos, RSN_CIPHER_SUITE_WEP104, RSN_SELECTOR_LEN);
645 		(void) memcpy(pos, RSN_CIPHER_SUITE_WEP40, RSN_SELECTOR_LEN);
651 	pos += RSN_SELECTOR_LEN;
653 	*pos++ = 1;
654 	*pos++ = 0;
656 		(void) memcpy(pos, RSN_CIPHER_SUITE_CCMP, RSN_SELECTOR_LEN);
658 		(void) memcpy(pos, RSN_CIPHER_SUITE_TKIP, RSN_SELECTOR_LEN);
660 		(void) memcpy(pos, RSN_CIPHER_SUITE_NONE, RSN_SELECTOR_LEN);
666 	pos += RSN_SELECTOR_LEN;
668 	*pos++ = 1;
669 	*pos++ = 0;
671 		(void) memcpy(pos, RSN_AUTH_KEY_MGMT_UNSPEC_802_1X,
674 		(void) memcpy(pos, RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X,
681 	pos += RSN_SELECTOR_LEN;
684 	*pos++ = 0;
685 	*pos++ = 0;
689 		*pos++ = 1;
690 		*pos++ = 0;
692 		(void) memcpy(pos, wpa_s->cur_pmksa->pmkid, PMKID_LEN);
693 		pos += PMKID_LEN;
696 	hdr->len = (pos - rsn_ie) - 2;
698 	return (pos - rsn_ie);
897 		uint8_t *pos = (uint8_t *)(key + 1);
898 		uint8_t *end = pos + BE_16(key->key_data_length);
901 		    pos, BE_16(key->key_data_length));
903 		while (pos + 1 < end) {
904 			if (pos + 2 + pos[1] > end) {
907 				    pos[0], pos[1]);
910 			if (pos[0] == GENERIC_INFO_ELEM &&
911 			    pos + 1 + RSN_SELECTOR_LEN < end &&
912 			    pos[1] >= RSN_SELECTOR_LEN + PMKID_LEN &&
913 			    memcmp(pos + 2, RSN_KEY_DATA_PMKID,
915 				pmkid = pos + 2 + RSN_SELECTOR_LEN;
919 			} else if (pos[0] == GENERIC_INFO_ELEM && pos[1] == 0)
921 			pos += 2 + pos[1];
1123 		uint8_t *pos = (uint8_t *)(key + 1);
1124 		uint8_t *end = pos + BE_16(key->key_data_length);
1125 		while (pos + 1 < end) {
1126 			if (pos + 2 + pos[1] > end) {
1129 				    pos[0], pos[1]);
1132 			if (*pos == RSN_INFO_ELEM) {
1133 				ie = pos;
1134 				ie_len = pos[1] + 2;
1135 			} else if (pos[0] == GENERIC_INFO_ELEM &&
1136 			    pos + 1 + RSN_SELECTOR_LEN < end &&
1137 			    pos[1] > RSN_SELECTOR_LEN + 2 &&
1138 			    memcmp(pos + 2, RSN_KEY_DATA_GROUPKEY,
1145 				gtk = pos + 2 + RSN_SELECTOR_LEN;
1146 				gtk_len = pos[1] - RSN_SELECTOR_LEN;
1147 			} else if (pos[0] == GENERIC_INFO_ELEM && pos[1] == 0)
1150 			pos += 2 + pos[1];
1319 		uint8_t *pos = (uint8_t *)(key + 1);
1320 		uint8_t *end = pos + keydatalen;
1321 		while (pos + 1 < end) {
1322 			if (pos + 2 + pos[1] > end) {
1325 				    pos[0], pos[1]);
1328 			if (pos[0] == GENERIC_INFO_ELEM &&
1329 			    pos + 1 + RSN_SELECTOR_LEN < end &&
1330 			    pos[1] > RSN_SELECTOR_LEN + 2 &&
1331 			    memcmp(pos + 2, RSN_KEY_DATA_GROUPKEY,
1338 				gtk_ie = pos + 2 + RSN_SELECTOR_LEN;
1339 				gtk_ie_len = pos[1] - RSN_SELECTOR_LEN;
1341 			} else if (pos[0] == GENERIC_INFO_ELEM && pos[1] == 0) {
1345 			pos += 2 + pos[1];