1/*
2 * hostapd / VLAN initialization
3 * Copyright 2003, Instant802 Networks, Inc.
4 * Copyright 2005-2006, Devicescape Software, Inc.
5 * Copyright (c) 2009, Jouni Malinen <j@w1.fi>
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 as
9 * published by the Free Software Foundation.
10 *
11 * Alternatively, this software may be distributed under the terms of BSD
12 * license.
13 *
14 * See README and COPYING for more details.
15 */
16
17#include "utils/includes.h"
18
19#include "utils/common.h"
20#include "hostapd.h"
21#include "ap_config.h"
22#include "ap_drv_ops.h"
23#include "vlan_init.h"
24#include "vlan_util.h"
25
26
27#ifdef CONFIG_FULL_DYNAMIC_VLAN
28
29#include <net/if.h>
30#include <sys/ioctl.h>
31#include <linux/sockios.h>
32#include <linux/if_vlan.h>
33#include <linux/if_bridge.h>
34
35#include "drivers/priv_netlink.h"
36#include "utils/eloop.h"
37
38
39struct full_dynamic_vlan {
40	int s; /* socket on which to listen for new/removed interfaces. */
41};
42
43
44static int ifconfig_helper(const char *if_name, int up)
45{
46	int fd;
47	struct ifreq ifr;
48
49	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
50		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
51			   "failed: %s", __func__, strerror(errno));
52		return -1;
53	}
54
55	os_memset(&ifr, 0, sizeof(ifr));
56	os_strlcpy(ifr.ifr_name, if_name, IFNAMSIZ);
57
58	if (ioctl(fd, SIOCGIFFLAGS, &ifr) != 0) {
59		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl(SIOCGIFFLAGS) failed "
60			   "for interface %s: %s",
61			   __func__, if_name, strerror(errno));
62		close(fd);
63		return -1;
64	}
65
66	if (up)
67		ifr.ifr_flags |= IFF_UP;
68	else
69		ifr.ifr_flags &= ~IFF_UP;
70
71	if (ioctl(fd, SIOCSIFFLAGS, &ifr) != 0) {
72		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl(SIOCSIFFLAGS) failed "
73			   "for interface %s (up=%d): %s",
74			   __func__, if_name, up, strerror(errno));
75		close(fd);
76		return -1;
77	}
78
79	close(fd);
80	return 0;
81}
82
83
84static int ifconfig_up(const char *if_name)
85{
86	wpa_printf(MSG_DEBUG, "VLAN: Set interface %s up", if_name);
87	return ifconfig_helper(if_name, 1);
88}
89
90
91static int ifconfig_down(const char *if_name)
92{
93	wpa_printf(MSG_DEBUG, "VLAN: Set interface %s down", if_name);
94	return ifconfig_helper(if_name, 0);
95}
96
97
98/*
99 * These are only available in recent linux headers (without the leading
100 * underscore).
101 */
102#define _GET_VLAN_REALDEV_NAME_CMD	8
103#define _GET_VLAN_VID_CMD		9
104
105/* This value should be 256 ONLY. If it is something else, then hostapd
106 * might crash!, as this value has been hard-coded in 2.4.x kernel
107 * bridging code.
108 */
109#define MAX_BR_PORTS      		256
110
111static int br_delif(const char *br_name, const char *if_name)
112{
113	int fd;
114	struct ifreq ifr;
115	unsigned long args[2];
116	int if_index;
117
118	wpa_printf(MSG_DEBUG, "VLAN: br_delif(%s, %s)", br_name, if_name);
119	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
120		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
121			   "failed: %s", __func__, strerror(errno));
122		return -1;
123	}
124
125	if_index = if_nametoindex(if_name);
126
127	if (if_index == 0) {
128		wpa_printf(MSG_ERROR, "VLAN: %s: Failure determining "
129			   "interface index for '%s'",
130			   __func__, if_name);
131		close(fd);
132		return -1;
133	}
134
135	args[0] = BRCTL_DEL_IF;
136	args[1] = if_index;
137
138	os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
139	ifr.ifr_data = (__caddr_t) args;
140
141	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0 && errno != EINVAL) {
142		/* No error if interface already removed. */
143		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl[SIOCDEVPRIVATE,"
144			   "BRCTL_DEL_IF] failed for br_name=%s if_name=%s: "
145			   "%s", __func__, br_name, if_name, strerror(errno));
146		close(fd);
147		return -1;
148	}
149
150	close(fd);
151	return 0;
152}
153
154
155/*
156	Add interface 'if_name' to the bridge 'br_name'
157
158	returns -1 on error
159	returns 1 if the interface is already part of the bridge
160	returns 0 otherwise
161*/
162static int br_addif(const char *br_name, const char *if_name)
163{
164	int fd;
165	struct ifreq ifr;
166	unsigned long args[2];
167	int if_index;
168
169	wpa_printf(MSG_DEBUG, "VLAN: br_addif(%s, %s)", br_name, if_name);
170	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
171		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
172			   "failed: %s", __func__, strerror(errno));
173		return -1;
174	}
175
176	if_index = if_nametoindex(if_name);
177
178	if (if_index == 0) {
179		wpa_printf(MSG_ERROR, "VLAN: %s: Failure determining "
180			   "interface index for '%s'",
181			   __func__, if_name);
182		close(fd);
183		return -1;
184	}
185
186	args[0] = BRCTL_ADD_IF;
187	args[1] = if_index;
188
189	os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
190	ifr.ifr_data = (__caddr_t) args;
191
192	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
193		if (errno == EBUSY) {
194			/* The interface is already added. */
195			close(fd);
196			return 1;
197		}
198
199		wpa_printf(MSG_ERROR, "VLAN: %s: ioctl[SIOCDEVPRIVATE,"
200			   "BRCTL_ADD_IF] failed for br_name=%s if_name=%s: "
201			   "%s", __func__, br_name, if_name, strerror(errno));
202		close(fd);
203		return -1;
204	}
205
206	close(fd);
207	return 0;
208}
209
210
211static int br_delbr(const char *br_name)
212{
213	int fd;
214	unsigned long arg[2];
215
216	wpa_printf(MSG_DEBUG, "VLAN: br_delbr(%s)", br_name);
217	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
218		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
219			   "failed: %s", __func__, strerror(errno));
220		return -1;
221	}
222
223	arg[0] = BRCTL_DEL_BRIDGE;
224	arg[1] = (unsigned long) br_name;
225
226	if (ioctl(fd, SIOCGIFBR, arg) < 0 && errno != ENXIO) {
227		/* No error if bridge already removed. */
228		wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_DEL_BRIDGE failed for "
229			   "%s: %s", __func__, br_name, strerror(errno));
230		close(fd);
231		return -1;
232	}
233
234	close(fd);
235	return 0;
236}
237
238
239/*
240	Add a bridge with the name 'br_name'.
241
242	returns -1 on error
243	returns 1 if the bridge already exists
244	returns 0 otherwise
245*/
246static int br_addbr(const char *br_name)
247{
248	int fd;
249	unsigned long arg[4];
250	struct ifreq ifr;
251
252	wpa_printf(MSG_DEBUG, "VLAN: br_addbr(%s)", br_name);
253	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
254		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
255			   "failed: %s", __func__, strerror(errno));
256		return -1;
257	}
258
259	arg[0] = BRCTL_ADD_BRIDGE;
260	arg[1] = (unsigned long) br_name;
261
262	if (ioctl(fd, SIOCGIFBR, arg) < 0) {
263 		if (errno == EEXIST) {
264			/* The bridge is already added. */
265			close(fd);
266			return 1;
267		} else {
268			wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_ADD_BRIDGE "
269				   "failed for %s: %s",
270				   __func__, br_name, strerror(errno));
271			close(fd);
272			return -1;
273		}
274	}
275
276	/* Decrease forwarding delay to avoid EAPOL timeouts. */
277	os_memset(&ifr, 0, sizeof(ifr));
278	os_strlcpy(ifr.ifr_name, br_name, IFNAMSIZ);
279	arg[0] = BRCTL_SET_BRIDGE_FORWARD_DELAY;
280	arg[1] = 1;
281	arg[2] = 0;
282	arg[3] = 0;
283	ifr.ifr_data = (char *) &arg;
284	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
285		wpa_printf(MSG_ERROR, "VLAN: %s: "
286			   "BRCTL_SET_BRIDGE_FORWARD_DELAY (1 sec) failed for "
287			   "%s: %s", __func__, br_name, strerror(errno));
288		/* Continue anyway */
289	}
290
291	close(fd);
292	return 0;
293}
294
295
296static int br_getnumports(const char *br_name)
297{
298	int fd;
299	int i;
300	int port_cnt = 0;
301	unsigned long arg[4];
302	int ifindices[MAX_BR_PORTS];
303	struct ifreq ifr;
304
305	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
306		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
307			   "failed: %s", __func__, strerror(errno));
308		return -1;
309	}
310
311	arg[0] = BRCTL_GET_PORT_LIST;
312	arg[1] = (unsigned long) ifindices;
313	arg[2] = MAX_BR_PORTS;
314	arg[3] = 0;
315
316	os_memset(ifindices, 0, sizeof(ifindices));
317	os_strlcpy(ifr.ifr_name, br_name, sizeof(ifr.ifr_name));
318	ifr.ifr_data = (__caddr_t) arg;
319
320	if (ioctl(fd, SIOCDEVPRIVATE, &ifr) < 0) {
321		wpa_printf(MSG_ERROR, "VLAN: %s: BRCTL_GET_PORT_LIST "
322			   "failed for %s: %s",
323			   __func__, br_name, strerror(errno));
324		close(fd);
325		return -1;
326	}
327
328	for (i = 1; i < MAX_BR_PORTS; i++) {
329		if (ifindices[i] > 0) {
330			port_cnt++;
331		}
332	}
333
334	close(fd);
335	return port_cnt;
336}
337
338
339#ifndef CONFIG_VLAN_NETLINK
340
341int vlan_rem(const char *if_name)
342{
343	int fd;
344	struct vlan_ioctl_args if_request;
345
346	wpa_printf(MSG_DEBUG, "VLAN: vlan_rem(%s)", if_name);
347	if ((os_strlen(if_name) + 1) > sizeof(if_request.device1)) {
348		wpa_printf(MSG_ERROR, "VLAN: Interface name too long: '%s'",
349			   if_name);
350		return -1;
351	}
352
353	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
354		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
355			   "failed: %s", __func__, strerror(errno));
356		return -1;
357	}
358
359	os_memset(&if_request, 0, sizeof(if_request));
360
361	os_strlcpy(if_request.device1, if_name, sizeof(if_request.device1));
362	if_request.cmd = DEL_VLAN_CMD;
363
364	if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
365		wpa_printf(MSG_ERROR, "VLAN: %s: DEL_VLAN_CMD failed for %s: "
366			   "%s", __func__, if_name, strerror(errno));
367		close(fd);
368		return -1;
369	}
370
371	close(fd);
372	return 0;
373}
374
375
376/*
377	Add a vlan interface with VLAN ID 'vid' and tagged interface
378	'if_name'.
379
380	returns -1 on error
381	returns 1 if the interface already exists
382	returns 0 otherwise
383*/
384int vlan_add(const char *if_name, int vid, const char *vlan_if_name)
385{
386	int fd;
387	struct vlan_ioctl_args if_request;
388
389	wpa_printf(MSG_DEBUG, "VLAN: vlan_add(if_name=%s, vid=%d)",
390		   if_name, vid);
391	ifconfig_up(if_name);
392
393	if ((os_strlen(if_name) + 1) > sizeof(if_request.device1)) {
394		wpa_printf(MSG_ERROR, "VLAN: Interface name too long: '%s'",
395			   if_name);
396		return -1;
397	}
398
399	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
400		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
401			   "failed: %s", __func__, strerror(errno));
402		return -1;
403	}
404
405	os_memset(&if_request, 0, sizeof(if_request));
406
407	/* Determine if a suitable vlan device already exists. */
408
409	os_snprintf(if_request.device1, sizeof(if_request.device1), "vlan%d",
410		    vid);
411
412	if_request.cmd = _GET_VLAN_VID_CMD;
413
414	if (ioctl(fd, SIOCSIFVLAN, &if_request) == 0) {
415
416		if (if_request.u.VID == vid) {
417			if_request.cmd = _GET_VLAN_REALDEV_NAME_CMD;
418
419			if (ioctl(fd, SIOCSIFVLAN, &if_request) == 0 &&
420			    os_strncmp(if_request.u.device2, if_name,
421				       sizeof(if_request.u.device2)) == 0) {
422				close(fd);
423				wpa_printf(MSG_DEBUG, "VLAN: vlan_add: "
424					   "if_name %s exists already",
425					   if_request.device1);
426				return 1;
427			}
428		}
429	}
430
431	/* A suitable vlan device does not already exist, add one. */
432
433	os_memset(&if_request, 0, sizeof(if_request));
434	os_strlcpy(if_request.device1, if_name, sizeof(if_request.device1));
435	if_request.u.VID = vid;
436	if_request.cmd = ADD_VLAN_CMD;
437
438	if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
439		wpa_printf(MSG_ERROR, "VLAN: %s: ADD_VLAN_CMD failed for %s: "
440			   "%s",
441			   __func__, if_request.device1, strerror(errno));
442		close(fd);
443		return -1;
444	}
445
446	close(fd);
447	return 0;
448}
449
450
451static int vlan_set_name_type(unsigned int name_type)
452{
453	int fd;
454	struct vlan_ioctl_args if_request;
455
456	wpa_printf(MSG_DEBUG, "VLAN: vlan_set_name_type(name_type=%u)",
457		   name_type);
458	if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
459		wpa_printf(MSG_ERROR, "VLAN: %s: socket(AF_INET,SOCK_STREAM) "
460			   "failed: %s", __func__, strerror(errno));
461		return -1;
462	}
463
464	os_memset(&if_request, 0, sizeof(if_request));
465
466	if_request.u.name_type = name_type;
467	if_request.cmd = SET_VLAN_NAME_TYPE_CMD;
468	if (ioctl(fd, SIOCSIFVLAN, &if_request) < 0) {
469		wpa_printf(MSG_ERROR, "VLAN: %s: SET_VLAN_NAME_TYPE_CMD "
470			   "name_type=%u failed: %s",
471			   __func__, name_type, strerror(errno));
472		close(fd);
473		return -1;
474	}
475
476	close(fd);
477	return 0;
478}
479
480#endif /* CONFIG_VLAN_NETLINK */
481
482
483static void vlan_newlink(char *ifname, struct hostapd_data *hapd)
484{
485	char vlan_ifname[IFNAMSIZ];
486	char br_name[IFNAMSIZ];
487	struct hostapd_vlan *vlan = hapd->conf->vlan;
488	char *tagged_interface = hapd->conf->ssid.vlan_tagged_interface;
489	int vlan_naming = hapd->conf->ssid.vlan_naming;
490
491	wpa_printf(MSG_DEBUG, "VLAN: vlan_newlink(%s)", ifname);
492
493	while (vlan) {
494		if (os_strcmp(ifname, vlan->ifname) == 0) {
495
496			os_snprintf(br_name, sizeof(br_name), "brvlan%d",
497				    vlan->vlan_id);
498
499			if (!br_addbr(br_name))
500				vlan->clean |= DVLAN_CLEAN_BR;
501
502			ifconfig_up(br_name);
503
504			if (tagged_interface) {
505				if (vlan_naming ==
506				    DYNAMIC_VLAN_NAMING_WITH_DEVICE)
507					os_snprintf(vlan_ifname,
508						    sizeof(vlan_ifname),
509						    "%s.%d", tagged_interface,
510						    vlan->vlan_id);
511				else
512					os_snprintf(vlan_ifname,
513						    sizeof(vlan_ifname),
514						    "vlan%d", vlan->vlan_id);
515
516				ifconfig_up(tagged_interface);
517				if (!vlan_add(tagged_interface, vlan->vlan_id,
518					      vlan_ifname))
519					vlan->clean |= DVLAN_CLEAN_VLAN;
520
521				if (!br_addif(br_name, vlan_ifname))
522					vlan->clean |= DVLAN_CLEAN_VLAN_PORT;
523
524				ifconfig_up(vlan_ifname);
525			}
526
527			if (!br_addif(br_name, ifname))
528				vlan->clean |= DVLAN_CLEAN_WLAN_PORT;
529
530			ifconfig_up(ifname);
531
532			break;
533		}
534		vlan = vlan->next;
535	}
536}
537
538
539static void vlan_dellink(char *ifname, struct hostapd_data *hapd)
540{
541	char vlan_ifname[IFNAMSIZ];
542	char br_name[IFNAMSIZ];
543	struct hostapd_vlan *first, *prev, *vlan = hapd->conf->vlan;
544	char *tagged_interface = hapd->conf->ssid.vlan_tagged_interface;
545	int vlan_naming = hapd->conf->ssid.vlan_naming;
546
547	wpa_printf(MSG_DEBUG, "VLAN: vlan_dellink(%s)", ifname);
548
549	first = prev = vlan;
550
551	while (vlan) {
552		if (os_strcmp(ifname, vlan->ifname) == 0) {
553			os_snprintf(br_name, sizeof(br_name), "brvlan%d",
554				    vlan->vlan_id);
555
556			if (vlan->clean & DVLAN_CLEAN_WLAN_PORT)
557				br_delif(br_name, vlan->ifname);
558
559			if (tagged_interface) {
560				if (vlan_naming ==
561				    DYNAMIC_VLAN_NAMING_WITH_DEVICE)
562					os_snprintf(vlan_ifname,
563						    sizeof(vlan_ifname),
564						    "%s.%d", tagged_interface,
565						    vlan->vlan_id);
566				else
567					os_snprintf(vlan_ifname,
568						    sizeof(vlan_ifname),
569						    "vlan%d", vlan->vlan_id);
570				if (vlan->clean & DVLAN_CLEAN_VLAN_PORT)
571					br_delif(br_name, vlan_ifname);
572				ifconfig_down(vlan_ifname);
573
574				if (vlan->clean & DVLAN_CLEAN_VLAN)
575					vlan_rem(vlan_ifname);
576			}
577
578			if ((vlan->clean & DVLAN_CLEAN_BR) &&
579			    br_getnumports(br_name) == 0) {
580				ifconfig_down(br_name);
581				br_delbr(br_name);
582			}
583
584			if (vlan == first) {
585				hapd->conf->vlan = vlan->next;
586			} else {
587				prev->next = vlan->next;
588			}
589			os_free(vlan);
590
591			break;
592		}
593		prev = vlan;
594		vlan = vlan->next;
595	}
596}
597
598
599static void
600vlan_read_ifnames(struct nlmsghdr *h, size_t len, int del,
601		  struct hostapd_data *hapd)
602{
603	struct ifinfomsg *ifi;
604	int attrlen, nlmsg_len, rta_len;
605	struct rtattr *attr;
606
607	if (len < sizeof(*ifi))
608		return;
609
610	ifi = NLMSG_DATA(h);
611
612	nlmsg_len = NLMSG_ALIGN(sizeof(struct ifinfomsg));
613
614	attrlen = h->nlmsg_len - nlmsg_len;
615	if (attrlen < 0)
616		return;
617
618	attr = (struct rtattr *) (((char *) ifi) + nlmsg_len);
619
620	rta_len = RTA_ALIGN(sizeof(struct rtattr));
621	while (RTA_OK(attr, attrlen)) {
622		char ifname[IFNAMSIZ + 1];
623
624		if (attr->rta_type == IFLA_IFNAME) {
625			int n = attr->rta_len - rta_len;
626			if (n < 0)
627				break;
628
629			os_memset(ifname, 0, sizeof(ifname));
630
631			if ((size_t) n > sizeof(ifname))
632				n = sizeof(ifname);
633			os_memcpy(ifname, ((char *) attr) + rta_len, n);
634
635			if (del)
636				vlan_dellink(ifname, hapd);
637			else
638				vlan_newlink(ifname, hapd);
639		}
640
641		attr = RTA_NEXT(attr, attrlen);
642	}
643}
644
645
646static void vlan_event_receive(int sock, void *eloop_ctx, void *sock_ctx)
647{
648	char buf[8192];
649	int left;
650	struct sockaddr_nl from;
651	socklen_t fromlen;
652	struct nlmsghdr *h;
653	struct hostapd_data *hapd = eloop_ctx;
654
655	fromlen = sizeof(from);
656	left = recvfrom(sock, buf, sizeof(buf), MSG_DONTWAIT,
657			(struct sockaddr *) &from, &fromlen);
658	if (left < 0) {
659		if (errno != EINTR && errno != EAGAIN)
660			wpa_printf(MSG_ERROR, "VLAN: %s: recvfrom failed: %s",
661				   __func__, strerror(errno));
662		return;
663	}
664
665	h = (struct nlmsghdr *) buf;
666	while (left >= (int) sizeof(*h)) {
667		int len, plen;
668
669		len = h->nlmsg_len;
670		plen = len - sizeof(*h);
671		if (len > left || plen < 0) {
672			wpa_printf(MSG_DEBUG, "VLAN: Malformed netlink "
673				   "message: len=%d left=%d plen=%d",
674				   len, left, plen);
675			break;
676		}
677
678		switch (h->nlmsg_type) {
679		case RTM_NEWLINK:
680			vlan_read_ifnames(h, plen, 0, hapd);
681			break;
682		case RTM_DELLINK:
683			vlan_read_ifnames(h, plen, 1, hapd);
684			break;
685		}
686
687		len = NLMSG_ALIGN(len);
688		left -= len;
689		h = (struct nlmsghdr *) ((char *) h + len);
690	}
691
692	if (left > 0) {
693		wpa_printf(MSG_DEBUG, "VLAN: %s: %d extra bytes in the end of "
694			   "netlink message", __func__, left);
695	}
696}
697
698
699static struct full_dynamic_vlan *
700full_dynamic_vlan_init(struct hostapd_data *hapd)
701{
702	struct sockaddr_nl local;
703	struct full_dynamic_vlan *priv;
704
705	priv = os_zalloc(sizeof(*priv));
706	if (priv == NULL)
707		return NULL;
708
709#ifndef CONFIG_VLAN_NETLINK
710	vlan_set_name_type(hapd->conf->ssid.vlan_naming ==
711			   DYNAMIC_VLAN_NAMING_WITH_DEVICE ?
712			   VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD :
713			   VLAN_NAME_TYPE_PLUS_VID_NO_PAD);
714#endif /* CONFIG_VLAN_NETLINK */
715
716	priv->s = socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
717	if (priv->s < 0) {
718		wpa_printf(MSG_ERROR, "VLAN: %s: socket(PF_NETLINK,SOCK_RAW,"
719			   "NETLINK_ROUTE) failed: %s",
720			   __func__, strerror(errno));
721		os_free(priv);
722		return NULL;
723	}
724
725	os_memset(&local, 0, sizeof(local));
726	local.nl_family = AF_NETLINK;
727	local.nl_groups = RTMGRP_LINK;
728	if (bind(priv->s, (struct sockaddr *) &local, sizeof(local)) < 0) {
729		wpa_printf(MSG_ERROR, "VLAN: %s: bind(netlink) failed: %s",
730			   __func__, strerror(errno));
731		close(priv->s);
732		os_free(priv);
733		return NULL;
734	}
735
736	if (eloop_register_read_sock(priv->s, vlan_event_receive, hapd, NULL))
737	{
738		close(priv->s);
739		os_free(priv);
740		return NULL;
741	}
742
743	return priv;
744}
745
746
747static void full_dynamic_vlan_deinit(struct full_dynamic_vlan *priv)
748{
749	if (priv == NULL)
750		return;
751	eloop_unregister_read_sock(priv->s);
752	close(priv->s);
753	os_free(priv);
754}
755#endif /* CONFIG_FULL_DYNAMIC_VLAN */
756
757
758int vlan_setup_encryption_dyn(struct hostapd_data *hapd,
759			      struct hostapd_ssid *mssid, const char *dyn_vlan)
760{
761        int i;
762
763        if (dyn_vlan == NULL)
764		return 0;
765
766	/* Static WEP keys are set here; IEEE 802.1X and WPA uses their own
767	 * functions for setting up dynamic broadcast keys. */
768	for (i = 0; i < 4; i++) {
769		if (mssid->wep.key[i] &&
770		    hostapd_drv_set_key(dyn_vlan, hapd, WPA_ALG_WEP, NULL, i,
771					i == mssid->wep.idx, NULL, 0,
772					mssid->wep.key[i], mssid->wep.len[i]))
773		{
774			wpa_printf(MSG_ERROR, "VLAN: Could not set WEP "
775				   "encryption for dynamic VLAN");
776			return -1;
777		}
778	}
779
780	return 0;
781}
782
783
784static int vlan_dynamic_add(struct hostapd_data *hapd,
785			    struct hostapd_vlan *vlan)
786{
787	while (vlan) {
788		if (vlan->vlan_id != VLAN_ID_WILDCARD) {
789			if (hostapd_vlan_if_add(hapd, vlan->ifname)) {
790				if (errno != EEXIST) {
791					wpa_printf(MSG_ERROR, "VLAN: Could "
792						   "not add VLAN %s: %s",
793						   vlan->ifname,
794						   strerror(errno));
795					return -1;
796				}
797			}
798#ifdef CONFIG_FULL_DYNAMIC_VLAN
799			ifconfig_up(vlan->ifname);
800#endif /* CONFIG_FULL_DYNAMIC_VLAN */
801		}
802
803		vlan = vlan->next;
804	}
805
806	return 0;
807}
808
809
810static void vlan_dynamic_remove(struct hostapd_data *hapd,
811				struct hostapd_vlan *vlan)
812{
813	struct hostapd_vlan *next;
814
815	while (vlan) {
816		next = vlan->next;
817
818		if (vlan->vlan_id != VLAN_ID_WILDCARD &&
819		    hostapd_vlan_if_remove(hapd, vlan->ifname)) {
820			wpa_printf(MSG_ERROR, "VLAN: Could not remove VLAN "
821				   "iface: %s: %s",
822				   vlan->ifname, strerror(errno));
823		}
824#ifdef CONFIG_FULL_DYNAMIC_VLAN
825		if (vlan->clean)
826			vlan_dellink(vlan->ifname, hapd);
827#endif /* CONFIG_FULL_DYNAMIC_VLAN */
828
829		vlan = next;
830	}
831}
832
833
834int vlan_init(struct hostapd_data *hapd)
835{
836#ifdef CONFIG_FULL_DYNAMIC_VLAN
837	hapd->full_dynamic_vlan = full_dynamic_vlan_init(hapd);
838#endif /* CONFIG_FULL_DYNAMIC_VLAN */
839
840	if (vlan_dynamic_add(hapd, hapd->conf->vlan))
841		return -1;
842
843        return 0;
844}
845
846
847void vlan_deinit(struct hostapd_data *hapd)
848{
849	vlan_dynamic_remove(hapd, hapd->conf->vlan);
850
851#ifdef CONFIG_FULL_DYNAMIC_VLAN
852	full_dynamic_vlan_deinit(hapd->full_dynamic_vlan);
853#endif /* CONFIG_FULL_DYNAMIC_VLAN */
854}
855
856
857struct hostapd_vlan * vlan_add_dynamic(struct hostapd_data *hapd,
858				       struct hostapd_vlan *vlan,
859				       int vlan_id)
860{
861	struct hostapd_vlan *n;
862	char *ifname, *pos;
863
864	if (vlan == NULL || vlan_id <= 0 || vlan_id > MAX_VLAN_ID ||
865	    vlan->vlan_id != VLAN_ID_WILDCARD)
866		return NULL;
867
868	wpa_printf(MSG_DEBUG, "VLAN: %s(vlan_id=%d ifname=%s)",
869		   __func__, vlan_id, vlan->ifname);
870	ifname = os_strdup(vlan->ifname);
871	if (ifname == NULL)
872		return NULL;
873	pos = os_strchr(ifname, '#');
874	if (pos == NULL) {
875		os_free(ifname);
876		return NULL;
877	}
878	*pos++ = '\0';
879
880	n = os_zalloc(sizeof(*n));
881	if (n == NULL) {
882		os_free(ifname);
883		return NULL;
884	}
885
886	n->vlan_id = vlan_id;
887	n->dynamic_vlan = 1;
888
889	os_snprintf(n->ifname, sizeof(n->ifname), "%s%d%s", ifname, vlan_id,
890		    pos);
891	os_free(ifname);
892
893	if (hostapd_vlan_if_add(hapd, n->ifname)) {
894		os_free(n);
895		return NULL;
896	}
897
898	n->next = hapd->conf->vlan;
899	hapd->conf->vlan = n;
900
901#ifdef CONFIG_FULL_DYNAMIC_VLAN
902	ifconfig_up(n->ifname);
903#endif /* CONFIG_FULL_DYNAMIC_VLAN */
904
905	return n;
906}
907
908
909int vlan_remove_dynamic(struct hostapd_data *hapd, int vlan_id)
910{
911	struct hostapd_vlan *vlan;
912
913	if (vlan_id <= 0 || vlan_id > MAX_VLAN_ID)
914		return 1;
915
916	wpa_printf(MSG_DEBUG, "VLAN: %s(vlan_id=%d)", __func__, vlan_id);
917
918	vlan = hapd->conf->vlan;
919	while (vlan) {
920		if (vlan->vlan_id == vlan_id && vlan->dynamic_vlan > 0) {
921			vlan->dynamic_vlan--;
922			break;
923		}
924		vlan = vlan->next;
925	}
926
927	if (vlan == NULL)
928		return 1;
929
930	if (vlan->dynamic_vlan == 0)
931		hostapd_vlan_if_remove(hapd, vlan->ifname);
932
933	return 0;
934}
935