blob: bc1eb6251ac013591bc0422a57b39a8f24c99429 [file] [log] [blame]
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -08001/*
2 * Neighbor Discovery snooping for Proxy ARP
3 * Copyright (c) 2014, Qualcomm Atheros, Inc.
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9#include "utils/includes.h"
10#include <netinet/ip6.h>
11#include <netinet/icmp6.h>
12
13#include "utils/common.h"
14#include "l2_packet/l2_packet.h"
15#include "hostapd.h"
16#include "sta_info.h"
17#include "ap_drv_ops.h"
18#include "list.h"
19#include "x_snoop.h"
Dmitry Shmidt4ae50e62016-06-27 13:48:39 -070020#include "ndisc_snoop.h"
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -080021
22struct ip6addr {
23 struct in6_addr addr;
24 struct dl_list list;
25};
26
27struct icmpv6_ndmsg {
28 struct ip6_hdr ipv6h;
29 struct icmp6_hdr icmp6h;
30 struct in6_addr target_addr;
31 u8 opt_type;
32 u8 len;
33 u8 opt_lladdr[0];
34} STRUCT_PACKED;
35
36#define ROUTER_ADVERTISEMENT 134
37#define NEIGHBOR_SOLICITATION 135
38#define NEIGHBOR_ADVERTISEMENT 136
39#define SOURCE_LL_ADDR 1
40
41static int sta_ip6addr_add(struct sta_info *sta, struct in6_addr *addr)
42{
43 struct ip6addr *ip6addr;
44
45 ip6addr = os_zalloc(sizeof(*ip6addr));
46 if (!ip6addr)
47 return -1;
48
49 os_memcpy(&ip6addr->addr, addr, sizeof(*addr));
50
51 dl_list_add_tail(&sta->ip6addr, &ip6addr->list);
52
53 return 0;
54}
55
56
57void sta_ip6addr_del(struct hostapd_data *hapd, struct sta_info *sta)
58{
59 struct ip6addr *ip6addr, *prev;
60
61 dl_list_for_each_safe(ip6addr, prev, &sta->ip6addr, struct ip6addr,
62 list) {
63 hostapd_drv_br_delete_ip_neigh(hapd, 6, (u8 *) &ip6addr->addr);
Sunil Ravi99c035e2024-07-12 01:42:03 +000064 dl_list_del(&ip6addr->list);
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -080065 os_free(ip6addr);
66 }
67}
68
69
70static int sta_has_ip6addr(struct sta_info *sta, struct in6_addr *addr)
71{
72 struct ip6addr *ip6addr;
73
74 dl_list_for_each(ip6addr, &sta->ip6addr, struct ip6addr, list) {
75 if (ip6addr->addr.s6_addr32[0] == addr->s6_addr32[0] &&
76 ip6addr->addr.s6_addr32[1] == addr->s6_addr32[1] &&
77 ip6addr->addr.s6_addr32[2] == addr->s6_addr32[2] &&
78 ip6addr->addr.s6_addr32[3] == addr->s6_addr32[3])
79 return 1;
80 }
81
82 return 0;
83}
84
85
Dmitry Shmidt1d755d02015-04-28 10:34:29 -070086static void ucast_to_stas(struct hostapd_data *hapd, const u8 *buf, size_t len)
87{
88 struct sta_info *sta;
89
90 for (sta = hapd->sta_list; sta; sta = sta->next) {
91 if (!(sta->flags & WLAN_STA_AUTHORIZED))
92 continue;
93 x_snoop_mcast_to_ucast_convert_send(hapd, sta, (u8 *) buf, len);
94 }
95}
96
97
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -080098static void handle_ndisc(void *ctx, const u8 *src_addr, const u8 *buf,
99 size_t len)
100{
101 struct hostapd_data *hapd = ctx;
102 struct icmpv6_ndmsg *msg;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800103 struct in6_addr saddr;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800104 struct sta_info *sta;
105 int res;
106 char addrtxt[INET6_ADDRSTRLEN + 1];
107
108 if (len < ETH_HLEN + sizeof(struct ip6_hdr) + sizeof(struct icmp6_hdr))
109 return;
110 msg = (struct icmpv6_ndmsg *) &buf[ETH_HLEN];
111 switch (msg->icmp6h.icmp6_type) {
112 case NEIGHBOR_SOLICITATION:
113 if (len < ETH_HLEN + sizeof(*msg))
114 return;
115 if (msg->opt_type != SOURCE_LL_ADDR)
116 return;
117
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800118 /*
119 * IPv6 header may not be 32-bit aligned in the buffer, so use
120 * a local copy to avoid unaligned reads.
121 */
122 os_memcpy(&saddr, &msg->ipv6h.ip6_src, sizeof(saddr));
123 if (!(saddr.s6_addr32[0] == 0 && saddr.s6_addr32[1] == 0 &&
124 saddr.s6_addr32[2] == 0 && saddr.s6_addr32[3] == 0)) {
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800125 if (len < ETH_HLEN + sizeof(*msg) + ETH_ALEN)
126 return;
127 sta = ap_get_sta(hapd, msg->opt_lladdr);
128 if (!sta)
129 return;
130
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800131 if (sta_has_ip6addr(sta, &saddr))
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800132 return;
133
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800134 if (inet_ntop(AF_INET6, &saddr, addrtxt,
135 sizeof(addrtxt)) == NULL)
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800136 addrtxt[0] = '\0';
137 wpa_printf(MSG_DEBUG, "ndisc_snoop: Learned new IPv6 address %s for "
138 MACSTR, addrtxt, MAC2STR(sta->addr));
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800139 hostapd_drv_br_delete_ip_neigh(hapd, 6, (u8 *) &saddr);
140 res = hostapd_drv_br_add_ip_neigh(hapd, 6,
141 (u8 *) &saddr,
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800142 128, sta->addr);
143 if (res) {
144 wpa_printf(MSG_ERROR,
145 "ndisc_snoop: Adding ip neigh failed: %d",
146 res);
147 return;
148 }
149
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800150 if (sta_ip6addr_add(sta, &saddr))
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800151 return;
152 }
153 break;
Hai Shaloma20dcd72022-02-04 13:43:00 -0800154#ifdef CONFIG_HS20
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800155 case ROUTER_ADVERTISEMENT:
Dmitry Shmidt1d755d02015-04-28 10:34:29 -0700156 if (hapd->conf->disable_dgaf)
157 ucast_to_stas(hapd, buf, len);
158 break;
Hai Shaloma20dcd72022-02-04 13:43:00 -0800159#endif /* CONFIG_HS20 */
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800160 case NEIGHBOR_ADVERTISEMENT:
Dmitry Shmidt1d755d02015-04-28 10:34:29 -0700161 if (hapd->conf->na_mcast_to_ucast)
162 ucast_to_stas(hapd, buf, len);
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800163 break;
164 default:
165 break;
166 }
167}
168
169
170int ndisc_snoop_init(struct hostapd_data *hapd)
171{
172 hapd->sock_ndisc = x_snoop_get_l2_packet(hapd, handle_ndisc,
173 L2_PACKET_FILTER_NDISC);
174 if (hapd->sock_ndisc == NULL) {
175 wpa_printf(MSG_DEBUG,
176 "ndisc_snoop: Failed to initialize L2 packet processing for NDISC packets: %s",
177 strerror(errno));
178 return -1;
179 }
180
181 return 0;
182}
183
184
185void ndisc_snoop_deinit(struct hostapd_data *hapd)
186{
187 l2_packet_deinit(hapd->sock_ndisc);
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700188 hapd->sock_ndisc = NULL;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800189}