Home | History | Annotate | Line # | Download | only in wpa_supplicant
mbo.c revision 1.1.1.1.16.2 
      1  1.1.1.1.16.2  snj /*
      2  1.1.1.1.16.2  snj  * wpa_supplicant - MBO
      3  1.1.1.1.16.2  snj  *
      4  1.1.1.1.16.2  snj  * Copyright(c) 2015 Intel Deutschland GmbH
      5  1.1.1.1.16.2  snj  * Contact Information:
      6  1.1.1.1.16.2  snj  * Intel Linux Wireless <ilw (at) linux.intel.com>
      7  1.1.1.1.16.2  snj  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
      8  1.1.1.1.16.2  snj  *
      9  1.1.1.1.16.2  snj  * This software may be distributed under the terms of the BSD license.
     10  1.1.1.1.16.2  snj  * See README for more details.
     11  1.1.1.1.16.2  snj  */
     12  1.1.1.1.16.2  snj 
     13  1.1.1.1.16.2  snj #include "utils/includes.h"
     14  1.1.1.1.16.2  snj 
     15  1.1.1.1.16.2  snj #include "utils/common.h"
     16  1.1.1.1.16.2  snj #include "common/ieee802_11_defs.h"
     17  1.1.1.1.16.2  snj #include "common/gas.h"
     18  1.1.1.1.16.2  snj #include "config.h"
     19  1.1.1.1.16.2  snj #include "wpa_supplicant_i.h"
     20  1.1.1.1.16.2  snj #include "driver_i.h"
     21  1.1.1.1.16.2  snj #include "bss.h"
     22  1.1.1.1.16.2  snj #include "scan.h"
     23  1.1.1.1.16.2  snj 
     24  1.1.1.1.16.2  snj /* type + length + oui + oui type */
     25  1.1.1.1.16.2  snj #define MBO_IE_HEADER 6
     26  1.1.1.1.16.2  snj 
     27  1.1.1.1.16.2  snj 
     28  1.1.1.1.16.2  snj static int wpas_mbo_validate_non_pref_chan(u8 oper_class, u8 chan, u8 reason)
     29  1.1.1.1.16.2  snj {
     30  1.1.1.1.16.2  snj 	if (reason > MBO_NON_PREF_CHAN_REASON_INT_INTERFERENCE)
     31  1.1.1.1.16.2  snj 		return -1;
     32  1.1.1.1.16.2  snj 
     33  1.1.1.1.16.2  snj 	/* Only checking the validity of the channel and oper_class */
     34  1.1.1.1.16.2  snj 	if (ieee80211_chan_to_freq(NULL, oper_class, chan) == -1)
     35  1.1.1.1.16.2  snj 		return -1;
     36  1.1.1.1.16.2  snj 
     37  1.1.1.1.16.2  snj 	return 0;
     38  1.1.1.1.16.2  snj }
     39  1.1.1.1.16.2  snj 
     40  1.1.1.1.16.2  snj 
     41  1.1.1.1.16.2  snj const u8 * wpas_mbo_get_bss_attr(struct wpa_bss *bss, enum mbo_attr_id attr)
     42  1.1.1.1.16.2  snj {
     43  1.1.1.1.16.2  snj 	const u8 *mbo, *end;
     44  1.1.1.1.16.2  snj 
     45  1.1.1.1.16.2  snj 	if (!bss)
     46  1.1.1.1.16.2  snj 		return NULL;
     47  1.1.1.1.16.2  snj 
     48  1.1.1.1.16.2  snj 	mbo = wpa_bss_get_vendor_ie(bss, MBO_IE_VENDOR_TYPE);
     49  1.1.1.1.16.2  snj 	if (!mbo)
     50  1.1.1.1.16.2  snj 		return NULL;
     51  1.1.1.1.16.2  snj 
     52  1.1.1.1.16.2  snj 	end = mbo + 2 + mbo[1];
     53  1.1.1.1.16.2  snj 	mbo += MBO_IE_HEADER;
     54  1.1.1.1.16.2  snj 
     55  1.1.1.1.16.2  snj 	return get_ie(mbo, end - mbo, attr);
     56  1.1.1.1.16.2  snj }
     57  1.1.1.1.16.2  snj 
     58  1.1.1.1.16.2  snj 
     59  1.1.1.1.16.2  snj static void wpas_mbo_non_pref_chan_attr_body(struct wpa_supplicant *wpa_s,
     60  1.1.1.1.16.2  snj 					     struct wpabuf *mbo,
     61  1.1.1.1.16.2  snj 					     u8 start, u8 end)
     62  1.1.1.1.16.2  snj {
     63  1.1.1.1.16.2  snj 	u8 i;
     64  1.1.1.1.16.2  snj 
     65  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, wpa_s->non_pref_chan[start].oper_class);
     66  1.1.1.1.16.2  snj 
     67  1.1.1.1.16.2  snj 	for (i = start; i < end; i++)
     68  1.1.1.1.16.2  snj 		wpabuf_put_u8(mbo, wpa_s->non_pref_chan[i].chan);
     69  1.1.1.1.16.2  snj 
     70  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, wpa_s->non_pref_chan[start].preference);
     71  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, wpa_s->non_pref_chan[start].reason);
     72  1.1.1.1.16.2  snj }
     73  1.1.1.1.16.2  snj 
     74  1.1.1.1.16.2  snj 
     75  1.1.1.1.16.2  snj static void wpas_mbo_non_pref_chan_attr(struct wpa_supplicant *wpa_s,
     76  1.1.1.1.16.2  snj 					struct wpabuf *mbo, u8 start, u8 end)
     77  1.1.1.1.16.2  snj {
     78  1.1.1.1.16.2  snj 	size_t size = end - start + 3;
     79  1.1.1.1.16.2  snj 
     80  1.1.1.1.16.2  snj 	if (size + 2 > wpabuf_tailroom(mbo))
     81  1.1.1.1.16.2  snj 		return;
     82  1.1.1.1.16.2  snj 
     83  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, MBO_ATTR_ID_NON_PREF_CHAN_REPORT);
     84  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, size); /* Length */
     85  1.1.1.1.16.2  snj 
     86  1.1.1.1.16.2  snj 	wpas_mbo_non_pref_chan_attr_body(wpa_s, mbo, start, end);
     87  1.1.1.1.16.2  snj }
     88  1.1.1.1.16.2  snj 
     89  1.1.1.1.16.2  snj 
     90  1.1.1.1.16.2  snj static void wpas_mbo_non_pref_chan_subelem_hdr(struct wpabuf *mbo, u8 len)
     91  1.1.1.1.16.2  snj {
     92  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, WLAN_EID_VENDOR_SPECIFIC);
     93  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, len); /* Length */
     94  1.1.1.1.16.2  snj 	wpabuf_put_be24(mbo, OUI_WFA);
     95  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, MBO_ATTR_ID_NON_PREF_CHAN_REPORT);
     96  1.1.1.1.16.2  snj }
     97  1.1.1.1.16.2  snj 
     98  1.1.1.1.16.2  snj 
     99  1.1.1.1.16.2  snj static void wpas_mbo_non_pref_chan_subelement(struct wpa_supplicant *wpa_s,
    100  1.1.1.1.16.2  snj 					      struct wpabuf *mbo, u8 start,
    101  1.1.1.1.16.2  snj 					      u8 end)
    102  1.1.1.1.16.2  snj {
    103  1.1.1.1.16.2  snj 	size_t size = end - start + 7;
    104  1.1.1.1.16.2  snj 
    105  1.1.1.1.16.2  snj 	if (size + 2 > wpabuf_tailroom(mbo))
    106  1.1.1.1.16.2  snj 		return;
    107  1.1.1.1.16.2  snj 
    108  1.1.1.1.16.2  snj 	wpas_mbo_non_pref_chan_subelem_hdr(mbo, size);
    109  1.1.1.1.16.2  snj 	wpas_mbo_non_pref_chan_attr_body(wpa_s, mbo, start, end);
    110  1.1.1.1.16.2  snj }
    111  1.1.1.1.16.2  snj 
    112  1.1.1.1.16.2  snj 
    113  1.1.1.1.16.2  snj static void wpas_mbo_non_pref_chan_attrs(struct wpa_supplicant *wpa_s,
    114  1.1.1.1.16.2  snj 					 struct wpabuf *mbo, int subelement)
    115  1.1.1.1.16.2  snj {
    116  1.1.1.1.16.2  snj 	u8 i, start = 0;
    117  1.1.1.1.16.2  snj 	struct wpa_mbo_non_pref_channel *start_pref;
    118  1.1.1.1.16.2  snj 
    119  1.1.1.1.16.2  snj 	if (!wpa_s->non_pref_chan || !wpa_s->non_pref_chan_num) {
    120  1.1.1.1.16.2  snj 		if (subelement)
    121  1.1.1.1.16.2  snj 			wpas_mbo_non_pref_chan_subelem_hdr(mbo, 4);
    122  1.1.1.1.16.2  snj 		return;
    123  1.1.1.1.16.2  snj 	}
    124  1.1.1.1.16.2  snj 	start_pref = &wpa_s->non_pref_chan[0];
    125  1.1.1.1.16.2  snj 
    126  1.1.1.1.16.2  snj 	for (i = 1; i <= wpa_s->non_pref_chan_num; i++) {
    127  1.1.1.1.16.2  snj 		struct wpa_mbo_non_pref_channel *non_pref = NULL;
    128  1.1.1.1.16.2  snj 
    129  1.1.1.1.16.2  snj 		if (i < wpa_s->non_pref_chan_num)
    130  1.1.1.1.16.2  snj 			non_pref = &wpa_s->non_pref_chan[i];
    131  1.1.1.1.16.2  snj 		if (!non_pref ||
    132  1.1.1.1.16.2  snj 		    non_pref->oper_class != start_pref->oper_class ||
    133  1.1.1.1.16.2  snj 		    non_pref->reason != start_pref->reason ||
    134  1.1.1.1.16.2  snj 		    non_pref->preference != start_pref->preference) {
    135  1.1.1.1.16.2  snj 			if (subelement)
    136  1.1.1.1.16.2  snj 				wpas_mbo_non_pref_chan_subelement(wpa_s, mbo,
    137  1.1.1.1.16.2  snj 								  start, i);
    138  1.1.1.1.16.2  snj 			else
    139  1.1.1.1.16.2  snj 				wpas_mbo_non_pref_chan_attr(wpa_s, mbo, start,
    140  1.1.1.1.16.2  snj 							    i);
    141  1.1.1.1.16.2  snj 
    142  1.1.1.1.16.2  snj 			if (!non_pref)
    143  1.1.1.1.16.2  snj 				return;
    144  1.1.1.1.16.2  snj 
    145  1.1.1.1.16.2  snj 			start = i;
    146  1.1.1.1.16.2  snj 			start_pref = non_pref;
    147  1.1.1.1.16.2  snj 		}
    148  1.1.1.1.16.2  snj 	}
    149  1.1.1.1.16.2  snj }
    150  1.1.1.1.16.2  snj 
    151  1.1.1.1.16.2  snj 
    152  1.1.1.1.16.2  snj int wpas_mbo_ie(struct wpa_supplicant *wpa_s, u8 *buf, size_t len)
    153  1.1.1.1.16.2  snj {
    154  1.1.1.1.16.2  snj 	struct wpabuf *mbo;
    155  1.1.1.1.16.2  snj 	int res;
    156  1.1.1.1.16.2  snj 
    157  1.1.1.1.16.2  snj 	if (len < MBO_IE_HEADER + 3 + 7)
    158  1.1.1.1.16.2  snj 		return 0;
    159  1.1.1.1.16.2  snj 
    160  1.1.1.1.16.2  snj 	/* Leave room for the MBO IE header */
    161  1.1.1.1.16.2  snj 	mbo = wpabuf_alloc(len - MBO_IE_HEADER);
    162  1.1.1.1.16.2  snj 	if (!mbo)
    163  1.1.1.1.16.2  snj 		return 0;
    164  1.1.1.1.16.2  snj 
    165  1.1.1.1.16.2  snj 	/* Add non-preferred channels attribute */
    166  1.1.1.1.16.2  snj 	wpas_mbo_non_pref_chan_attrs(wpa_s, mbo, 0);
    167  1.1.1.1.16.2  snj 
    168  1.1.1.1.16.2  snj 	/*
    169  1.1.1.1.16.2  snj 	 * Send cellular capabilities attribute even if AP does not advertise
    170  1.1.1.1.16.2  snj 	 * cellular capabilities.
    171  1.1.1.1.16.2  snj 	 */
    172  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, MBO_ATTR_ID_CELL_DATA_CAPA);
    173  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, 1);
    174  1.1.1.1.16.2  snj 	wpabuf_put_u8(mbo, wpa_s->conf->mbo_cell_capa);
    175  1.1.1.1.16.2  snj 
    176  1.1.1.1.16.2  snj 	res = mbo_add_ie(buf, len, wpabuf_head_u8(mbo), wpabuf_len(mbo));
    177  1.1.1.1.16.2  snj 	if (!res)
    178  1.1.1.1.16.2  snj 		wpa_printf(MSG_ERROR, "Failed to add MBO IE");
    179  1.1.1.1.16.2  snj 
    180  1.1.1.1.16.2  snj 	wpabuf_free(mbo);
    181  1.1.1.1.16.2  snj 	return res;
    182  1.1.1.1.16.2  snj }
    183  1.1.1.1.16.2  snj 
    184  1.1.1.1.16.2  snj 
    185  1.1.1.1.16.2  snj static void wpas_mbo_send_wnm_notification(struct wpa_supplicant *wpa_s,
    186  1.1.1.1.16.2  snj 					   const u8 *data, size_t len)
    187  1.1.1.1.16.2  snj {
    188  1.1.1.1.16.2  snj 	struct wpabuf *buf;
    189  1.1.1.1.16.2  snj 	int res;
    190  1.1.1.1.16.2  snj 
    191  1.1.1.1.16.2  snj 	/*
    192  1.1.1.1.16.2  snj 	 * Send WNM-Notification Request frame only in case of a change in
    193  1.1.1.1.16.2  snj 	 * non-preferred channels list during association, if the AP supports
    194  1.1.1.1.16.2  snj 	 * MBO.
    195  1.1.1.1.16.2  snj 	 */
    196  1.1.1.1.16.2  snj 	if (wpa_s->wpa_state != WPA_COMPLETED || !wpa_s->current_bss ||
    197  1.1.1.1.16.2  snj 	    !wpa_bss_get_vendor_ie(wpa_s->current_bss, MBO_IE_VENDOR_TYPE))
    198  1.1.1.1.16.2  snj 		return;
    199  1.1.1.1.16.2  snj 
    200  1.1.1.1.16.2  snj 	buf = wpabuf_alloc(4 + len);
    201  1.1.1.1.16.2  snj 	if (!buf)
    202  1.1.1.1.16.2  snj 		return;
    203  1.1.1.1.16.2  snj 
    204  1.1.1.1.16.2  snj 	wpabuf_put_u8(buf, WLAN_ACTION_WNM);
    205  1.1.1.1.16.2  snj 	wpabuf_put_u8(buf, WNM_NOTIFICATION_REQ);
    206  1.1.1.1.16.2  snj 	wpa_s->mbo_wnm_token++;
    207  1.1.1.1.16.2  snj 	if (wpa_s->mbo_wnm_token == 0)
    208  1.1.1.1.16.2  snj 		wpa_s->mbo_wnm_token++;
    209  1.1.1.1.16.2  snj 	wpabuf_put_u8(buf, wpa_s->mbo_wnm_token);
    210  1.1.1.1.16.2  snj 	wpabuf_put_u8(buf, WLAN_EID_VENDOR_SPECIFIC); /* Type */
    211  1.1.1.1.16.2  snj 
    212  1.1.1.1.16.2  snj 	wpabuf_put_data(buf, data, len);
    213  1.1.1.1.16.2  snj 
    214  1.1.1.1.16.2  snj 	res = wpa_drv_send_action(wpa_s, wpa_s->assoc_freq, 0, wpa_s->bssid,
    215  1.1.1.1.16.2  snj 				  wpa_s->own_addr, wpa_s->bssid,
    216  1.1.1.1.16.2  snj 				  wpabuf_head(buf), wpabuf_len(buf), 0);
    217  1.1.1.1.16.2  snj 	if (res < 0)
    218  1.1.1.1.16.2  snj 		wpa_printf(MSG_DEBUG,
    219  1.1.1.1.16.2  snj 			   "Failed to send WNM-Notification Request frame with non-preferred channel list");
    220  1.1.1.1.16.2  snj 
    221  1.1.1.1.16.2  snj 	wpabuf_free(buf);
    222  1.1.1.1.16.2  snj }
    223  1.1.1.1.16.2  snj 
    224  1.1.1.1.16.2  snj 
    225  1.1.1.1.16.2  snj static void wpas_mbo_non_pref_chan_changed(struct wpa_supplicant *wpa_s)
    226  1.1.1.1.16.2  snj {
    227  1.1.1.1.16.2  snj 	struct wpabuf *buf;
    228  1.1.1.1.16.2  snj 
    229  1.1.1.1.16.2  snj 	buf = wpabuf_alloc(512);
    230  1.1.1.1.16.2  snj 	if (!buf)
    231  1.1.1.1.16.2  snj 		return;
    232  1.1.1.1.16.2  snj 
    233  1.1.1.1.16.2  snj 	wpas_mbo_non_pref_chan_attrs(wpa_s, buf, 1);
    234  1.1.1.1.16.2  snj 	wpas_mbo_send_wnm_notification(wpa_s, wpabuf_head_u8(buf),
    235  1.1.1.1.16.2  snj 				       wpabuf_len(buf));
    236  1.1.1.1.16.2  snj 	wpabuf_free(buf);
    237  1.1.1.1.16.2  snj }
    238  1.1.1.1.16.2  snj 
    239  1.1.1.1.16.2  snj 
    240  1.1.1.1.16.2  snj static int wpa_non_pref_chan_is_eq(struct wpa_mbo_non_pref_channel *a,
    241  1.1.1.1.16.2  snj 				   struct wpa_mbo_non_pref_channel *b)
    242  1.1.1.1.16.2  snj {
    243  1.1.1.1.16.2  snj 	return a->oper_class == b->oper_class && a->chan == b->chan;
    244  1.1.1.1.16.2  snj }
    245  1.1.1.1.16.2  snj 
    246  1.1.1.1.16.2  snj 
    247  1.1.1.1.16.2  snj /*
    248  1.1.1.1.16.2  snj  * wpa_non_pref_chan_cmp - Compare two channels for sorting
    249  1.1.1.1.16.2  snj  *
    250  1.1.1.1.16.2  snj  * In MBO IE non-preferred channel subelement we can put many channels in an
    251  1.1.1.1.16.2  snj  * attribute if they are in the same operating class and have the same
    252  1.1.1.1.16.2  snj  * preference and reason. To make it easy for the functions that build
    253  1.1.1.1.16.2  snj  * the IE attributes and WNM Request subelements, save the channels sorted
    254  1.1.1.1.16.2  snj  * by their oper_class and reason.
    255  1.1.1.1.16.2  snj  */
    256  1.1.1.1.16.2  snj static int wpa_non_pref_chan_cmp(const void *_a, const void *_b)
    257  1.1.1.1.16.2  snj {
    258  1.1.1.1.16.2  snj 	const struct wpa_mbo_non_pref_channel *a = _a, *b = _b;
    259  1.1.1.1.16.2  snj 
    260  1.1.1.1.16.2  snj 	if (a->oper_class != b->oper_class)
    261  1.1.1.1.16.2  snj 		return a->oper_class - b->oper_class;
    262  1.1.1.1.16.2  snj 	if (a->reason != b->reason)
    263  1.1.1.1.16.2  snj 		return a->reason - b->reason;
    264  1.1.1.1.16.2  snj 	return a->preference - b->preference;
    265  1.1.1.1.16.2  snj }
    266  1.1.1.1.16.2  snj 
    267  1.1.1.1.16.2  snj 
    268  1.1.1.1.16.2  snj int wpas_mbo_update_non_pref_chan(struct wpa_supplicant *wpa_s,
    269  1.1.1.1.16.2  snj 				  const char *non_pref_chan)
    270  1.1.1.1.16.2  snj {
    271  1.1.1.1.16.2  snj 	char *cmd, *token, *context = NULL;
    272  1.1.1.1.16.2  snj 	struct wpa_mbo_non_pref_channel *chans = NULL, *tmp_chans;
    273  1.1.1.1.16.2  snj 	size_t num = 0, size = 0;
    274  1.1.1.1.16.2  snj 	unsigned i;
    275  1.1.1.1.16.2  snj 
    276  1.1.1.1.16.2  snj 	wpa_printf(MSG_DEBUG, "MBO: Update non-preferred channels, non_pref_chan=%s",
    277  1.1.1.1.16.2  snj 		   non_pref_chan ? non_pref_chan : "N/A");
    278  1.1.1.1.16.2  snj 
    279  1.1.1.1.16.2  snj 	/*
    280  1.1.1.1.16.2  snj 	 * The shortest channel configuration is 10 characters - commas, 3
    281  1.1.1.1.16.2  snj 	 * colons, and 4 values that one of them (oper_class) is 2 digits or
    282  1.1.1.1.16.2  snj 	 * more.
    283  1.1.1.1.16.2  snj 	 */
    284  1.1.1.1.16.2  snj 	if (!non_pref_chan || os_strlen(non_pref_chan) < 10)
    285  1.1.1.1.16.2  snj 		goto update;
    286  1.1.1.1.16.2  snj 
    287  1.1.1.1.16.2  snj 	cmd = os_strdup(non_pref_chan);
    288  1.1.1.1.16.2  snj 	if (!cmd)
    289  1.1.1.1.16.2  snj 		return -1;
    290  1.1.1.1.16.2  snj 
    291  1.1.1.1.16.2  snj 	while ((token = str_token(cmd, " ", &context))) {
    292  1.1.1.1.16.2  snj 		struct wpa_mbo_non_pref_channel *chan;
    293  1.1.1.1.16.2  snj 		int ret;
    294  1.1.1.1.16.2  snj 		unsigned int _oper_class;
    295  1.1.1.1.16.2  snj 		unsigned int _chan;
    296  1.1.1.1.16.2  snj 		unsigned int _preference;
    297  1.1.1.1.16.2  snj 		unsigned int _reason;
    298  1.1.1.1.16.2  snj 
    299  1.1.1.1.16.2  snj 		if (num == size) {
    300  1.1.1.1.16.2  snj 			size = size ? size * 2 : 1;
    301  1.1.1.1.16.2  snj 			tmp_chans = os_realloc_array(chans, size,
    302  1.1.1.1.16.2  snj 						     sizeof(*chans));
    303  1.1.1.1.16.2  snj 			if (!tmp_chans) {
    304  1.1.1.1.16.2  snj 				wpa_printf(MSG_ERROR,
    305  1.1.1.1.16.2  snj 					   "Couldn't reallocate non_pref_chan");
    306  1.1.1.1.16.2  snj 				goto fail;
    307  1.1.1.1.16.2  snj 			}
    308  1.1.1.1.16.2  snj 			chans = tmp_chans;
    309  1.1.1.1.16.2  snj 		}
    310  1.1.1.1.16.2  snj 
    311  1.1.1.1.16.2  snj 		chan = &chans[num];
    312  1.1.1.1.16.2  snj 
    313  1.1.1.1.16.2  snj 		ret = sscanf(token, "%u:%u:%u:%u", &_oper_class,
    314  1.1.1.1.16.2  snj 			     &_chan, &_preference, &_reason);
    315  1.1.1.1.16.2  snj 		if (ret != 4 ||
    316  1.1.1.1.16.2  snj 		    _oper_class > 255 || _chan > 255 ||
    317  1.1.1.1.16.2  snj 		    _preference > 255 || _reason > 65535 ) {
    318  1.1.1.1.16.2  snj 			wpa_printf(MSG_ERROR, "Invalid non-pref chan input %s",
    319  1.1.1.1.16.2  snj 				   token);
    320  1.1.1.1.16.2  snj 			goto fail;
    321  1.1.1.1.16.2  snj 		}
    322  1.1.1.1.16.2  snj 		chan->oper_class = _oper_class;
    323  1.1.1.1.16.2  snj 		chan->chan = _chan;
    324  1.1.1.1.16.2  snj 		chan->preference = _preference;
    325  1.1.1.1.16.2  snj 		chan->reason = _reason;
    326  1.1.1.1.16.2  snj 
    327  1.1.1.1.16.2  snj 		if (wpas_mbo_validate_non_pref_chan(chan->oper_class,
    328  1.1.1.1.16.2  snj 						    chan->chan, chan->reason)) {
    329  1.1.1.1.16.2  snj 			wpa_printf(MSG_ERROR,
    330  1.1.1.1.16.2  snj 				   "Invalid non_pref_chan: oper class %d chan %d reason %d",
    331  1.1.1.1.16.2  snj 				   chan->oper_class, chan->chan, chan->reason);
    332  1.1.1.1.16.2  snj 			goto fail;
    333  1.1.1.1.16.2  snj 		}
    334  1.1.1.1.16.2  snj 
    335  1.1.1.1.16.2  snj 		for (i = 0; i < num; i++)
    336  1.1.1.1.16.2  snj 			if (wpa_non_pref_chan_is_eq(chan, &chans[i]))
    337  1.1.1.1.16.2  snj 				break;
    338  1.1.1.1.16.2  snj 		if (i != num) {
    339  1.1.1.1.16.2  snj 			wpa_printf(MSG_ERROR,
    340  1.1.1.1.16.2  snj 				   "oper class %d chan %d is duplicated",
    341  1.1.1.1.16.2  snj 				   chan->oper_class, chan->chan);
    342  1.1.1.1.16.2  snj 			goto fail;
    343  1.1.1.1.16.2  snj 		}
    344  1.1.1.1.16.2  snj 
    345  1.1.1.1.16.2  snj 		num++;
    346  1.1.1.1.16.2  snj 	}
    347  1.1.1.1.16.2  snj 
    348  1.1.1.1.16.2  snj 	os_free(cmd);
    349  1.1.1.1.16.2  snj 
    350  1.1.1.1.16.2  snj 	if (chans) {
    351  1.1.1.1.16.2  snj 		qsort(chans, num, sizeof(struct wpa_mbo_non_pref_channel),
    352  1.1.1.1.16.2  snj 		      wpa_non_pref_chan_cmp);
    353  1.1.1.1.16.2  snj 	}
    354  1.1.1.1.16.2  snj 
    355  1.1.1.1.16.2  snj update:
    356  1.1.1.1.16.2  snj 	os_free(wpa_s->non_pref_chan);
    357  1.1.1.1.16.2  snj 	wpa_s->non_pref_chan = chans;
    358  1.1.1.1.16.2  snj 	wpa_s->non_pref_chan_num = num;
    359  1.1.1.1.16.2  snj 	wpas_mbo_non_pref_chan_changed(wpa_s);
    360  1.1.1.1.16.2  snj 
    361  1.1.1.1.16.2  snj 	return 0;
    362  1.1.1.1.16.2  snj 
    363  1.1.1.1.16.2  snj fail:
    364  1.1.1.1.16.2  snj 	os_free(chans);
    365  1.1.1.1.16.2  snj 	os_free(cmd);
    366  1.1.1.1.16.2  snj 	return -1;
    367  1.1.1.1.16.2  snj }
    368  1.1.1.1.16.2  snj 
    369  1.1.1.1.16.2  snj 
    370  1.1.1.1.16.2  snj void wpas_mbo_scan_ie(struct wpa_supplicant *wpa_s, struct wpabuf *ie)
    371  1.1.1.1.16.2  snj {
    372  1.1.1.1.16.2  snj 	wpabuf_put_u8(ie, WLAN_EID_VENDOR_SPECIFIC);
    373  1.1.1.1.16.2  snj 	wpabuf_put_u8(ie, 7);
    374  1.1.1.1.16.2  snj 	wpabuf_put_be24(ie, OUI_WFA);
    375  1.1.1.1.16.2  snj 	wpabuf_put_u8(ie, MBO_OUI_TYPE);
    376  1.1.1.1.16.2  snj 
    377  1.1.1.1.16.2  snj 	wpabuf_put_u8(ie, MBO_ATTR_ID_CELL_DATA_CAPA);
    378  1.1.1.1.16.2  snj 	wpabuf_put_u8(ie, 1);
    379  1.1.1.1.16.2  snj 	wpabuf_put_u8(ie, wpa_s->conf->mbo_cell_capa);
    380  1.1.1.1.16.2  snj }
    381  1.1.1.1.16.2  snj 
    382  1.1.1.1.16.2  snj 
    383  1.1.1.1.16.2  snj enum chan_allowed {
    384  1.1.1.1.16.2  snj 	NOT_ALLOWED, ALLOWED
    385  1.1.1.1.16.2  snj };
    386  1.1.1.1.16.2  snj 
    387  1.1.1.1.16.2  snj static enum chan_allowed allow_channel(struct hostapd_hw_modes *mode, u8 chan,
    388  1.1.1.1.16.2  snj 				       unsigned int *flags)
    389  1.1.1.1.16.2  snj {
    390  1.1.1.1.16.2  snj 	int i;
    391  1.1.1.1.16.2  snj 
    392  1.1.1.1.16.2  snj 	for (i = 0; i < mode->num_channels; i++) {
    393  1.1.1.1.16.2  snj 		if (mode->channels[i].chan == chan)
    394  1.1.1.1.16.2  snj 			break;
    395  1.1.1.1.16.2  snj 	}
    396  1.1.1.1.16.2  snj 
    397  1.1.1.1.16.2  snj 	if (i == mode->num_channels ||
    398  1.1.1.1.16.2  snj 	    (mode->channels[i].flag & HOSTAPD_CHAN_DISABLED))
    399  1.1.1.1.16.2  snj 		return NOT_ALLOWED;
    400  1.1.1.1.16.2  snj 
    401  1.1.1.1.16.2  snj 	if (flags)
    402  1.1.1.1.16.2  snj 		*flags = mode->channels[i].flag;
    403  1.1.1.1.16.2  snj 
    404  1.1.1.1.16.2  snj 	return ALLOWED;
    405  1.1.1.1.16.2  snj }
    406  1.1.1.1.16.2  snj 
    407  1.1.1.1.16.2  snj 
    408  1.1.1.1.16.2  snj static int get_center_80mhz(struct hostapd_hw_modes *mode, u8 channel)
    409  1.1.1.1.16.2  snj {
    410  1.1.1.1.16.2  snj 	u8 center_channels[] = {42, 58, 106, 122, 138, 155};
    411  1.1.1.1.16.2  snj 	size_t i;
    412  1.1.1.1.16.2  snj 
    413  1.1.1.1.16.2  snj 	if (mode->mode != HOSTAPD_MODE_IEEE80211A)
    414  1.1.1.1.16.2  snj 		return 0;
    415  1.1.1.1.16.2  snj 
    416  1.1.1.1.16.2  snj 	for (i = 0; i < ARRAY_SIZE(center_channels); i++) {
    417  1.1.1.1.16.2  snj 		/*
    418  1.1.1.1.16.2  snj 		 * In 80 MHz, the bandwidth "spans" 12 channels (e.g., 36-48),
    419  1.1.1.1.16.2  snj 		 * so the center channel is 6 channels away from the start/end.
    420  1.1.1.1.16.2  snj 		 */
    421  1.1.1.1.16.2  snj 		if (channel >= center_channels[i] - 6 &&
    422  1.1.1.1.16.2  snj 		    channel <= center_channels[i] + 6)
    423  1.1.1.1.16.2  snj 			return center_channels[i];
    424  1.1.1.1.16.2  snj 	}
    425  1.1.1.1.16.2  snj 
    426  1.1.1.1.16.2  snj 	return 0;
    427  1.1.1.1.16.2  snj }
    428  1.1.1.1.16.2  snj 
    429  1.1.1.1.16.2  snj 
    430  1.1.1.1.16.2  snj static enum chan_allowed verify_80mhz(struct hostapd_hw_modes *mode, u8 channel)
    431  1.1.1.1.16.2  snj {
    432  1.1.1.1.16.2  snj 	u8 center_chan;
    433  1.1.1.1.16.2  snj 	unsigned int i;
    434  1.1.1.1.16.2  snj 
    435  1.1.1.1.16.2  snj 	center_chan = get_center_80mhz(mode, channel);
    436  1.1.1.1.16.2  snj 	if (!center_chan)
    437  1.1.1.1.16.2  snj 		return NOT_ALLOWED;
    438  1.1.1.1.16.2  snj 
    439  1.1.1.1.16.2  snj 	/* check all the channels are available */
    440  1.1.1.1.16.2  snj 	for (i = 0; i < 4; i++) {
    441  1.1.1.1.16.2  snj 		unsigned int flags;
    442  1.1.1.1.16.2  snj 		u8 adj_chan = center_chan - 6 + i * 4;
    443  1.1.1.1.16.2  snj 
    444  1.1.1.1.16.2  snj 		if (allow_channel(mode, adj_chan, &flags) == NOT_ALLOWED)
    445  1.1.1.1.16.2  snj 			return NOT_ALLOWED;
    446  1.1.1.1.16.2  snj 
    447  1.1.1.1.16.2  snj 		if ((i == 0 && !(flags & HOSTAPD_CHAN_VHT_10_70)) ||
    448  1.1.1.1.16.2  snj 		    (i == 1 && !(flags & HOSTAPD_CHAN_VHT_30_50)) ||
    449  1.1.1.1.16.2  snj 		    (i == 2 && !(flags & HOSTAPD_CHAN_VHT_50_30)) ||
    450  1.1.1.1.16.2  snj 		    (i == 3 && !(flags & HOSTAPD_CHAN_VHT_70_10)))
    451  1.1.1.1.16.2  snj 			return NOT_ALLOWED;
    452  1.1.1.1.16.2  snj 	}
    453  1.1.1.1.16.2  snj 
    454  1.1.1.1.16.2  snj 	return ALLOWED;
    455  1.1.1.1.16.2  snj }
    456  1.1.1.1.16.2  snj 
    457  1.1.1.1.16.2  snj 
    458  1.1.1.1.16.2  snj static int get_center_160mhz(struct hostapd_hw_modes *mode, u8 channel)
    459  1.1.1.1.16.2  snj {
    460  1.1.1.1.16.2  snj 	u8 center_channels[] = { 50, 114 };
    461  1.1.1.1.16.2  snj 	unsigned int i;
    462  1.1.1.1.16.2  snj 
    463  1.1.1.1.16.2  snj 	if (mode->mode != HOSTAPD_MODE_IEEE80211A)
    464  1.1.1.1.16.2  snj 		return 0;
    465  1.1.1.1.16.2  snj 
    466  1.1.1.1.16.2  snj 	for (i = 0; i < ARRAY_SIZE(center_channels); i++) {
    467  1.1.1.1.16.2  snj 		/*
    468  1.1.1.1.16.2  snj 		 * In 160 MHz, the bandwidth "spans" 28 channels (e.g., 36-64),
    469  1.1.1.1.16.2  snj 		 * so the center channel is 14 channels away from the start/end.
    470  1.1.1.1.16.2  snj 		 */
    471  1.1.1.1.16.2  snj 		if (channel >= center_channels[i] - 14 &&
    472  1.1.1.1.16.2  snj 		    channel <= center_channels[i] + 14)
    473  1.1.1.1.16.2  snj 			return center_channels[i];
    474  1.1.1.1.16.2  snj 	}
    475  1.1.1.1.16.2  snj 
    476  1.1.1.1.16.2  snj 	return 0;
    477  1.1.1.1.16.2  snj }
    478  1.1.1.1.16.2  snj 
    479  1.1.1.1.16.2  snj 
    480  1.1.1.1.16.2  snj static enum chan_allowed verify_160mhz(struct hostapd_hw_modes *mode,
    481  1.1.1.1.16.2  snj 				       u8 channel)
    482  1.1.1.1.16.2  snj {
    483  1.1.1.1.16.2  snj 	u8 center_chan;
    484  1.1.1.1.16.2  snj 	unsigned int i;
    485  1.1.1.1.16.2  snj 
    486  1.1.1.1.16.2  snj 	center_chan = get_center_160mhz(mode, channel);
    487  1.1.1.1.16.2  snj 	if (!center_chan)
    488  1.1.1.1.16.2  snj 		return NOT_ALLOWED;
    489  1.1.1.1.16.2  snj 
    490  1.1.1.1.16.2  snj 	/* Check all the channels are available */
    491  1.1.1.1.16.2  snj 	for (i = 0; i < 8; i++) {
    492  1.1.1.1.16.2  snj 		unsigned int flags;
    493  1.1.1.1.16.2  snj 		u8 adj_chan = center_chan - 14 + i * 4;
    494  1.1.1.1.16.2  snj 
    495  1.1.1.1.16.2  snj 		if (allow_channel(mode, adj_chan, &flags) == NOT_ALLOWED)
    496  1.1.1.1.16.2  snj 			return NOT_ALLOWED;
    497  1.1.1.1.16.2  snj 
    498  1.1.1.1.16.2  snj 		if ((i == 0 && !(flags & HOSTAPD_CHAN_VHT_10_150)) ||
    499  1.1.1.1.16.2  snj 		    (i == 1 && !(flags & HOSTAPD_CHAN_VHT_30_130)) ||
    500  1.1.1.1.16.2  snj 		    (i == 2 && !(flags & HOSTAPD_CHAN_VHT_50_110)) ||
    501  1.1.1.1.16.2  snj 		    (i == 3 && !(flags & HOSTAPD_CHAN_VHT_70_90)) ||
    502  1.1.1.1.16.2  snj 		    (i == 4 && !(flags & HOSTAPD_CHAN_VHT_90_70)) ||
    503  1.1.1.1.16.2  snj 		    (i == 5 && !(flags & HOSTAPD_CHAN_VHT_110_50)) ||
    504  1.1.1.1.16.2  snj 		    (i == 6 && !(flags & HOSTAPD_CHAN_VHT_130_30)) ||
    505  1.1.1.1.16.2  snj 		    (i == 7 && !(flags & HOSTAPD_CHAN_VHT_150_10)))
    506  1.1.1.1.16.2  snj 			return NOT_ALLOWED;
    507  1.1.1.1.16.2  snj 	}
    508  1.1.1.1.16.2  snj 
    509  1.1.1.1.16.2  snj 	return ALLOWED;
    510  1.1.1.1.16.2  snj }
    511  1.1.1.1.16.2  snj 
    512  1.1.1.1.16.2  snj 
    513  1.1.1.1.16.2  snj static enum chan_allowed verify_channel(struct hostapd_hw_modes *mode,
    514  1.1.1.1.16.2  snj 					u8 channel, u8 bw)
    515  1.1.1.1.16.2  snj {
    516  1.1.1.1.16.2  snj 	unsigned int flag = 0;
    517  1.1.1.1.16.2  snj 	enum chan_allowed res, res2;
    518  1.1.1.1.16.2  snj 
    519  1.1.1.1.16.2  snj 	res2 = res = allow_channel(mode, channel, &flag);
    520  1.1.1.1.16.2  snj 	if (bw == BW40MINUS) {
    521  1.1.1.1.16.2  snj 		if (!(flag & HOSTAPD_CHAN_HT40MINUS))
    522  1.1.1.1.16.2  snj 			return NOT_ALLOWED;
    523  1.1.1.1.16.2  snj 		res2 = allow_channel(mode, channel - 4, NULL);
    524  1.1.1.1.16.2  snj 	} else if (bw == BW40PLUS) {
    525  1.1.1.1.16.2  snj 		if (!(flag & HOSTAPD_CHAN_HT40PLUS))
    526  1.1.1.1.16.2  snj 			return NOT_ALLOWED;
    527  1.1.1.1.16.2  snj 		res2 = allow_channel(mode, channel + 4, NULL);
    528  1.1.1.1.16.2  snj 	} else if (bw == BW80) {
    529  1.1.1.1.16.2  snj 		/*
    530  1.1.1.1.16.2  snj 		 * channel is a center channel and as such, not necessarily a
    531  1.1.1.1.16.2  snj 		 * valid 20 MHz channels. Override earlier allow_channel()
    532  1.1.1.1.16.2  snj 		 * result and use only the 80 MHz specific version.
    533  1.1.1.1.16.2  snj 		 */
    534  1.1.1.1.16.2  snj 		res2 = res = verify_80mhz(mode, channel);
    535  1.1.1.1.16.2  snj 	} else if (bw == BW160) {
    536  1.1.1.1.16.2  snj 		/*
    537  1.1.1.1.16.2  snj 		 * channel is a center channel and as such, not necessarily a
    538  1.1.1.1.16.2  snj 		 * valid 20 MHz channels. Override earlier allow_channel()
    539  1.1.1.1.16.2  snj 		 * result and use only the 160 MHz specific version.
    540  1.1.1.1.16.2  snj 		 */
    541  1.1.1.1.16.2  snj 		res2 = res = verify_160mhz(mode, channel);
    542  1.1.1.1.16.2  snj 	} else if (bw == BW80P80) {
    543  1.1.1.1.16.2  snj 		/*
    544  1.1.1.1.16.2  snj 		 * channel is a center channel and as such, not necessarily a
    545  1.1.1.1.16.2  snj 		 * valid 20 MHz channels. Override earlier allow_channel()
    546  1.1.1.1.16.2  snj 		 * result and use only the 80 MHz specific version.
    547  1.1.1.1.16.2  snj 		 */
    548  1.1.1.1.16.2  snj 		res2 = res = verify_80mhz(mode, channel);
    549  1.1.1.1.16.2  snj 	}
    550  1.1.1.1.16.2  snj 
    551  1.1.1.1.16.2  snj 	if (res == NOT_ALLOWED || res2 == NOT_ALLOWED)
    552  1.1.1.1.16.2  snj 		return NOT_ALLOWED;
    553  1.1.1.1.16.2  snj 
    554  1.1.1.1.16.2  snj 	return ALLOWED;
    555  1.1.1.1.16.2  snj }
    556  1.1.1.1.16.2  snj 
    557  1.1.1.1.16.2  snj 
    558  1.1.1.1.16.2  snj static int wpas_op_class_supported(struct wpa_supplicant *wpa_s,
    559  1.1.1.1.16.2  snj 				   const struct oper_class_map *op_class)
    560  1.1.1.1.16.2  snj {
    561  1.1.1.1.16.2  snj 	int chan;
    562  1.1.1.1.16.2  snj 	size_t i;
    563  1.1.1.1.16.2  snj 	struct hostapd_hw_modes *mode;
    564  1.1.1.1.16.2  snj 	int found;
    565  1.1.1.1.16.2  snj 
    566  1.1.1.1.16.2  snj 	mode = get_mode(wpa_s->hw.modes, wpa_s->hw.num_modes, op_class->mode);
    567  1.1.1.1.16.2  snj 	if (!mode)
    568  1.1.1.1.16.2  snj 		return 0;
    569  1.1.1.1.16.2  snj 
    570  1.1.1.1.16.2  snj 	if (op_class->op_class == 128) {
    571  1.1.1.1.16.2  snj 		u8 channels[] = { 42, 58, 106, 122, 138, 155 };
    572  1.1.1.1.16.2  snj 
    573  1.1.1.1.16.2  snj 		for (i = 0; i < ARRAY_SIZE(channels); i++) {
    574  1.1.1.1.16.2  snj 			if (verify_channel(mode, channels[i], op_class->bw) ==
    575  1.1.1.1.16.2  snj 			    ALLOWED)
    576  1.1.1.1.16.2  snj 				return 1;
    577  1.1.1.1.16.2  snj 		}
    578  1.1.1.1.16.2  snj 
    579  1.1.1.1.16.2  snj 		return 0;
    580  1.1.1.1.16.2  snj 	}
    581  1.1.1.1.16.2  snj 
    582  1.1.1.1.16.2  snj 	if (op_class->op_class == 129) {
    583  1.1.1.1.16.2  snj 		/* Check if either 160 MHz channels is allowed */
    584  1.1.1.1.16.2  snj 		return verify_channel(mode, 50, op_class->bw) == ALLOWED ||
    585  1.1.1.1.16.2  snj 			verify_channel(mode, 114, op_class->bw) == ALLOWED;
    586  1.1.1.1.16.2  snj 	}
    587  1.1.1.1.16.2  snj 
    588  1.1.1.1.16.2  snj 	if (op_class->op_class == 130) {
    589  1.1.1.1.16.2  snj 		/* Need at least two non-contiguous 80 MHz segments */
    590  1.1.1.1.16.2  snj 		found = 0;
    591  1.1.1.1.16.2  snj 
    592  1.1.1.1.16.2  snj 		if (verify_channel(mode, 42, op_class->bw) == ALLOWED ||
    593  1.1.1.1.16.2  snj 		    verify_channel(mode, 58, op_class->bw) == ALLOWED)
    594  1.1.1.1.16.2  snj 			found++;
    595  1.1.1.1.16.2  snj 		if (verify_channel(mode, 106, op_class->bw) == ALLOWED ||
    596  1.1.1.1.16.2  snj 		    verify_channel(mode, 122, op_class->bw) == ALLOWED ||
    597  1.1.1.1.16.2  snj 		    verify_channel(mode, 138, op_class->bw) == ALLOWED)
    598  1.1.1.1.16.2  snj 			found++;
    599  1.1.1.1.16.2  snj 		if (verify_channel(mode, 106, op_class->bw) == ALLOWED &&
    600  1.1.1.1.16.2  snj 		    verify_channel(mode, 138, op_class->bw) == ALLOWED)
    601  1.1.1.1.16.2  snj 			found++;
    602  1.1.1.1.16.2  snj 		if (verify_channel(mode, 155, op_class->bw) == ALLOWED)
    603  1.1.1.1.16.2  snj 			found++;
    604  1.1.1.1.16.2  snj 
    605  1.1.1.1.16.2  snj 		if (found >= 2)
    606  1.1.1.1.16.2  snj 			return 1;
    607  1.1.1.1.16.2  snj 
    608  1.1.1.1.16.2  snj 		return 0;
    609  1.1.1.1.16.2  snj 	}
    610  1.1.1.1.16.2  snj 
    611  1.1.1.1.16.2  snj 	found = 0;
    612  1.1.1.1.16.2  snj 	for (chan = op_class->min_chan; chan <= op_class->max_chan;
    613  1.1.1.1.16.2  snj 	     chan += op_class->inc) {
    614  1.1.1.1.16.2  snj 		if (verify_channel(mode, chan, op_class->bw) == ALLOWED) {
    615  1.1.1.1.16.2  snj 			found = 1;
    616  1.1.1.1.16.2  snj 			break;
    617  1.1.1.1.16.2  snj 		}
    618  1.1.1.1.16.2  snj 	}
    619  1.1.1.1.16.2  snj 
    620  1.1.1.1.16.2  snj 	return found;
    621  1.1.1.1.16.2  snj }
    622  1.1.1.1.16.2  snj 
    623  1.1.1.1.16.2  snj 
    624  1.1.1.1.16.2  snj int wpas_mbo_supp_op_class_ie(struct wpa_supplicant *wpa_s, int freq, u8 *pos,
    625  1.1.1.1.16.2  snj 			      size_t len)
    626  1.1.1.1.16.2  snj {
    627  1.1.1.1.16.2  snj 	struct wpabuf *buf;
    628  1.1.1.1.16.2  snj 	u8 op, current, chan;
    629  1.1.1.1.16.2  snj 	u8 *ie_len;
    630  1.1.1.1.16.2  snj 	int res;
    631  1.1.1.1.16.2  snj 
    632  1.1.1.1.16.2  snj 	/*
    633  1.1.1.1.16.2  snj 	 * Assume 20 MHz channel for now.
    634  1.1.1.1.16.2  snj 	 * TODO: Use the secondary channel and VHT channel width that will be
    635  1.1.1.1.16.2  snj 	 * used after association.
    636  1.1.1.1.16.2  snj 	 */
    637  1.1.1.1.16.2  snj 	if (ieee80211_freq_to_channel_ext(freq, 0, VHT_CHANWIDTH_USE_HT,
    638  1.1.1.1.16.2  snj 					  &current, &chan) == NUM_HOSTAPD_MODES)
    639  1.1.1.1.16.2  snj 		return 0;
    640  1.1.1.1.16.2  snj 
    641  1.1.1.1.16.2  snj 	/*
    642  1.1.1.1.16.2  snj 	 * Need 3 bytes for EID, length, and current operating class, plus
    643  1.1.1.1.16.2  snj 	 * 1 byte for every other supported operating class.
    644  1.1.1.1.16.2  snj 	 */
    645  1.1.1.1.16.2  snj 	buf = wpabuf_alloc(global_op_class_size + 3);
    646  1.1.1.1.16.2  snj 	if (!buf)
    647  1.1.1.1.16.2  snj 		return 0;
    648  1.1.1.1.16.2  snj 
    649  1.1.1.1.16.2  snj 	wpabuf_put_u8(buf, WLAN_EID_SUPPORTED_OPERATING_CLASSES);
    650  1.1.1.1.16.2  snj 	/* Will set the length later, putting a placeholder */
    651  1.1.1.1.16.2  snj 	ie_len = wpabuf_put(buf, 1);
    652  1.1.1.1.16.2  snj 	wpabuf_put_u8(buf, current);
    653  1.1.1.1.16.2  snj 
    654  1.1.1.1.16.2  snj 	for (op = 0; global_op_class[op].op_class; op++) {
    655  1.1.1.1.16.2  snj 		if (wpas_op_class_supported(wpa_s, &global_op_class[op]))
    656  1.1.1.1.16.2  snj 			wpabuf_put_u8(buf, global_op_class[op].op_class);
    657  1.1.1.1.16.2  snj 	}
    658  1.1.1.1.16.2  snj 
    659  1.1.1.1.16.2  snj 	*ie_len = wpabuf_len(buf) - 2;
    660  1.1.1.1.16.2  snj 	if (*ie_len < 2 || wpabuf_len(buf) > len) {
    661  1.1.1.1.16.2  snj 		wpa_printf(MSG_ERROR,
    662  1.1.1.1.16.2  snj 			   "Failed to add supported operating classes IE");
    663  1.1.1.1.16.2  snj 		res = 0;
    664  1.1.1.1.16.2  snj 	} else {
    665  1.1.1.1.16.2  snj 		os_memcpy(pos, wpabuf_head(buf), wpabuf_len(buf));
    666  1.1.1.1.16.2  snj 		res = wpabuf_len(buf);
    667  1.1.1.1.16.2  snj 		wpa_hexdump_buf(MSG_DEBUG,
    668  1.1.1.1.16.2  snj 				"MBO: Added supported operating classes IE",
    669  1.1.1.1.16.2  snj 				buf);
    670  1.1.1.1.16.2  snj 	}
    671  1.1.1.1.16.2  snj 
    672  1.1.1.1.16.2  snj 	wpabuf_free(buf);
    673  1.1.1.1.16.2  snj 	return res;
    674  1.1.1.1.16.2  snj }
    675  1.1.1.1.16.2  snj 
    676  1.1.1.1.16.2  snj 
    677  1.1.1.1.16.2  snj void wpas_mbo_ie_trans_req(struct wpa_supplicant *wpa_s, const u8 *mbo_ie,
    678  1.1.1.1.16.2  snj 			   size_t len)
    679  1.1.1.1.16.2  snj {
    680  1.1.1.1.16.2  snj 	const u8 *pos, *cell_pref = NULL, *reason = NULL;
    681  1.1.1.1.16.2  snj 	u8 id, elen;
    682  1.1.1.1.16.2  snj 	u16 disallowed_sec = 0;
    683  1.1.1.1.16.2  snj 
    684  1.1.1.1.16.2  snj 	if (len <= 4 || WPA_GET_BE24(mbo_ie) != OUI_WFA ||
    685  1.1.1.1.16.2  snj 	    mbo_ie[3] != MBO_OUI_TYPE)
    686  1.1.1.1.16.2  snj 		return;
    687  1.1.1.1.16.2  snj 
    688  1.1.1.1.16.2  snj 	pos = mbo_ie + 4;
    689  1.1.1.1.16.2  snj 	len -= 4;
    690  1.1.1.1.16.2  snj 
    691  1.1.1.1.16.2  snj 	while (len >= 2) {
    692  1.1.1.1.16.2  snj 		id = *pos++;
    693  1.1.1.1.16.2  snj 		elen = *pos++;
    694  1.1.1.1.16.2  snj 		len -= 2;
    695  1.1.1.1.16.2  snj 
    696  1.1.1.1.16.2  snj 		if (elen > len)
    697  1.1.1.1.16.2  snj 			goto fail;
    698  1.1.1.1.16.2  snj 
    699  1.1.1.1.16.2  snj 		switch (id) {
    700  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_CELL_DATA_PREF:
    701  1.1.1.1.16.2  snj 			if (elen != 1)
    702  1.1.1.1.16.2  snj 				goto fail;
    703  1.1.1.1.16.2  snj 
    704  1.1.1.1.16.2  snj 			if (wpa_s->conf->mbo_cell_capa ==
    705  1.1.1.1.16.2  snj 			    MBO_CELL_CAPA_AVAILABLE)
    706  1.1.1.1.16.2  snj 				cell_pref = pos;
    707  1.1.1.1.16.2  snj 			else
    708  1.1.1.1.16.2  snj 				wpa_printf(MSG_DEBUG,
    709  1.1.1.1.16.2  snj 					   "MBO: Station does not support Cellular data connection");
    710  1.1.1.1.16.2  snj 			break;
    711  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_TRANSITION_REASON:
    712  1.1.1.1.16.2  snj 			if (elen != 1)
    713  1.1.1.1.16.2  snj 				goto fail;
    714  1.1.1.1.16.2  snj 
    715  1.1.1.1.16.2  snj 			reason = pos;
    716  1.1.1.1.16.2  snj 			break;
    717  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_ASSOC_RETRY_DELAY:
    718  1.1.1.1.16.2  snj 			if (elen != 2)
    719  1.1.1.1.16.2  snj 				goto fail;
    720  1.1.1.1.16.2  snj 
    721  1.1.1.1.16.2  snj 			if (wpa_s->wnm_mode &
    722  1.1.1.1.16.2  snj 			    WNM_BSS_TM_REQ_BSS_TERMINATION_INCLUDED) {
    723  1.1.1.1.16.2  snj 				wpa_printf(MSG_DEBUG,
    724  1.1.1.1.16.2  snj 					   "MBO: Unexpected association retry delay, BSS is terminating");
    725  1.1.1.1.16.2  snj 				goto fail;
    726  1.1.1.1.16.2  snj 			} else if (wpa_s->wnm_mode &
    727  1.1.1.1.16.2  snj 				   WNM_BSS_TM_REQ_DISASSOC_IMMINENT) {
    728  1.1.1.1.16.2  snj 				disallowed_sec = WPA_GET_LE16(pos);
    729  1.1.1.1.16.2  snj 			} else {
    730  1.1.1.1.16.2  snj 				wpa_printf(MSG_DEBUG,
    731  1.1.1.1.16.2  snj 					   "MBO: Association retry delay attribute not in disassoc imminent mode");
    732  1.1.1.1.16.2  snj 			}
    733  1.1.1.1.16.2  snj 
    734  1.1.1.1.16.2  snj 			break;
    735  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_AP_CAPA_IND:
    736  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_NON_PREF_CHAN_REPORT:
    737  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_CELL_DATA_CAPA:
    738  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_ASSOC_DISALLOW:
    739  1.1.1.1.16.2  snj 		case MBO_ATTR_ID_TRANSITION_REJECT_REASON:
    740  1.1.1.1.16.2  snj 			wpa_printf(MSG_DEBUG,
    741  1.1.1.1.16.2  snj 				   "MBO: Attribute %d should not be included in BTM Request frame",
    742  1.1.1.1.16.2  snj 				   id);
    743  1.1.1.1.16.2  snj 			break;
    744  1.1.1.1.16.2  snj 		default:
    745  1.1.1.1.16.2  snj 			wpa_printf(MSG_DEBUG, "MBO: Unknown attribute id %u",
    746  1.1.1.1.16.2  snj 				   id);
    747  1.1.1.1.16.2  snj 			return;
    748  1.1.1.1.16.2  snj 		}
    749  1.1.1.1.16.2  snj 
    750  1.1.1.1.16.2  snj 		pos += elen;
    751  1.1.1.1.16.2  snj 		len -= elen;
    752  1.1.1.1.16.2  snj 	}
    753  1.1.1.1.16.2  snj 
    754  1.1.1.1.16.2  snj 	if (cell_pref)
    755  1.1.1.1.16.2  snj 		wpa_msg(wpa_s, MSG_INFO, MBO_CELL_PREFERENCE "preference=%u",
    756  1.1.1.1.16.2  snj 			*cell_pref);
    757  1.1.1.1.16.2  snj 
    758  1.1.1.1.16.2  snj 	if (reason)
    759  1.1.1.1.16.2  snj 		wpa_msg(wpa_s, MSG_INFO, MBO_TRANSITION_REASON "reason=%u",
    760  1.1.1.1.16.2  snj 			*reason);
    761  1.1.1.1.16.2  snj 
    762  1.1.1.1.16.2  snj 	if (disallowed_sec && wpa_s->current_bss)
    763  1.1.1.1.16.2  snj 		wpa_bss_tmp_disallow(wpa_s, wpa_s->current_bss->bssid,
    764  1.1.1.1.16.2  snj 				     disallowed_sec);
    765  1.1.1.1.16.2  snj 
    766  1.1.1.1.16.2  snj 	return;
    767  1.1.1.1.16.2  snj fail:
    768  1.1.1.1.16.2  snj 	wpa_printf(MSG_DEBUG, "MBO IE parsing failed (id=%u len=%u left=%zu)",
    769  1.1.1.1.16.2  snj 		   id, elen, len);
    770  1.1.1.1.16.2  snj }
    771  1.1.1.1.16.2  snj 
    772  1.1.1.1.16.2  snj 
    773  1.1.1.1.16.2  snj size_t wpas_mbo_ie_bss_trans_reject(struct wpa_supplicant *wpa_s, u8 *pos,
    774  1.1.1.1.16.2  snj 				    size_t len,
    775  1.1.1.1.16.2  snj 				    enum mbo_transition_reject_reason reason)
    776  1.1.1.1.16.2  snj {
    777  1.1.1.1.16.2  snj 	u8 reject_attr[3];
    778  1.1.1.1.16.2  snj 
    779  1.1.1.1.16.2  snj 	reject_attr[0] = MBO_ATTR_ID_TRANSITION_REJECT_REASON;
    780  1.1.1.1.16.2  snj 	reject_attr[1] = 1;
    781  1.1.1.1.16.2  snj 	reject_attr[2] = reason;
    782  1.1.1.1.16.2  snj 
    783  1.1.1.1.16.2  snj 	return mbo_add_ie(pos, len, reject_attr, sizeof(reject_attr));
    784  1.1.1.1.16.2  snj }
    785  1.1.1.1.16.2  snj 
    786  1.1.1.1.16.2  snj 
    787  1.1.1.1.16.2  snj void wpas_mbo_update_cell_capa(struct wpa_supplicant *wpa_s, u8 mbo_cell_capa)
    788  1.1.1.1.16.2  snj {
    789  1.1.1.1.16.2  snj 	u8 cell_capa[7];
    790  1.1.1.1.16.2  snj 
    791  1.1.1.1.16.2  snj 	if (wpa_s->conf->mbo_cell_capa == mbo_cell_capa) {
    792  1.1.1.1.16.2  snj 		wpa_printf(MSG_DEBUG,
    793  1.1.1.1.16.2  snj 			   "MBO: Cellular capability already set to %u",
    794  1.1.1.1.16.2  snj 			   mbo_cell_capa);
    795  1.1.1.1.16.2  snj 		return;
    796  1.1.1.1.16.2  snj 	}
    797  1.1.1.1.16.2  snj 
    798  1.1.1.1.16.2  snj 	wpa_s->conf->mbo_cell_capa = mbo_cell_capa;
    799  1.1.1.1.16.2  snj 
    800  1.1.1.1.16.2  snj 	cell_capa[0] = WLAN_EID_VENDOR_SPECIFIC;
    801  1.1.1.1.16.2  snj 	cell_capa[1] = 5; /* Length */
    802  1.1.1.1.16.2  snj 	WPA_PUT_BE24(cell_capa + 2, OUI_WFA);
    803  1.1.1.1.16.2  snj 	cell_capa[5] = MBO_ATTR_ID_CELL_DATA_CAPA;
    804  1.1.1.1.16.2  snj 	cell_capa[6] = mbo_cell_capa;
    805  1.1.1.1.16.2  snj 
    806  1.1.1.1.16.2  snj 	wpas_mbo_send_wnm_notification(wpa_s, cell_capa, 7);
    807  1.1.1.1.16.2  snj 	wpa_supplicant_set_default_scan_ies(wpa_s);
    808  1.1.1.1.16.2  snj }
    809  1.1.1.1.16.2  snj 
    810  1.1.1.1.16.2  snj 
    811  1.1.1.1.16.2  snj struct wpabuf * mbo_build_anqp_buf(struct wpa_supplicant *wpa_s,
    812  1.1.1.1.16.2  snj 				   struct wpa_bss *bss)
    813  1.1.1.1.16.2  snj {
    814  1.1.1.1.16.2  snj 	struct wpabuf *anqp_buf;
    815  1.1.1.1.16.2  snj 	u8 *len_pos;
    816  1.1.1.1.16.2  snj 
    817  1.1.1.1.16.2  snj 	if (!wpa_bss_get_vendor_ie(bss, MBO_IE_VENDOR_TYPE)) {
    818  1.1.1.1.16.2  snj 		wpa_printf(MSG_INFO, "MBO: " MACSTR
    819  1.1.1.1.16.2  snj 			   " does not support MBO - cannot request MBO ANQP elements from it",
    820  1.1.1.1.16.2  snj 			   MAC2STR(bss->bssid));
    821  1.1.1.1.16.2  snj 		return NULL;
    822  1.1.1.1.16.2  snj 	}
    823  1.1.1.1.16.2  snj 
    824  1.1.1.1.16.2  snj 	anqp_buf = wpabuf_alloc(10);
    825  1.1.1.1.16.2  snj 	if (!anqp_buf)
    826  1.1.1.1.16.2  snj 		return NULL;
    827  1.1.1.1.16.2  snj 
    828  1.1.1.1.16.2  snj 	len_pos = gas_anqp_add_element(anqp_buf, ANQP_VENDOR_SPECIFIC);
    829  1.1.1.1.16.2  snj 	wpabuf_put_be24(anqp_buf, OUI_WFA);
    830  1.1.1.1.16.2  snj 	wpabuf_put_u8(anqp_buf, MBO_ANQP_OUI_TYPE);
    831  1.1.1.1.16.2  snj 
    832  1.1.1.1.16.2  snj 	wpabuf_put_u8(anqp_buf, MBO_ANQP_SUBTYPE_CELL_CONN_PREF);
    833  1.1.1.1.16.2  snj 	gas_anqp_set_element_len(anqp_buf, len_pos);
    834  1.1.1.1.16.2  snj 
    835  1.1.1.1.16.2  snj 	return anqp_buf;
    836  1.1.1.1.16.2  snj }
    837