31 	void (*free_cb)(struct rsn_pmksa_cache_entry *entry, void *ctx);
39 static void _pmksa_cache_free_entry(struct rsn_pmksa_cache_entry *entry)  in _pmksa_cache_free_entry()  argument
41 	os_free(entry->vlan_desc);  in _pmksa_cache_free_entry()
42 	os_free(entry->identity);  in _pmksa_cache_free_entry()
43 	wpabuf_free(entry->cui);  in _pmksa_cache_free_entry()
45 	radius_free_class(&entry->radius_class);  in _pmksa_cache_free_entry()
47 	bin_clear_free(entry, sizeof(*entry));  in _pmksa_cache_free_entry()
52 			    struct rsn_pmksa_cache_entry *entry)  in pmksa_cache_free_entry()  argument
58 	pmksa->free_cb(entry, pmksa->ctx);  in pmksa_cache_free_entry()
61 	hash = PMKID_HASH(entry->pmkid);  in pmksa_cache_free_entry()
65 		if (pos == entry) {  in pmksa_cache_free_entry()
67 				prev->hnext = entry->hnext;  in pmksa_cache_free_entry()
69 				pmksa->pmkid[hash] = entry->hnext;  in pmksa_cache_free_entry()
80 		if (pos == entry) {  in pmksa_cache_free_entry()
82 				prev->next = entry->next;  in pmksa_cache_free_entry()
84 				pmksa->pmksa = entry->next;  in pmksa_cache_free_entry()
91 	_pmksa_cache_free_entry(entry);  in pmksa_cache_free_entry()
141 static void pmksa_cache_from_eapol_data(struct rsn_pmksa_cache_entry *entry,  in pmksa_cache_from_eapol_data()  argument
150 		entry->identity = os_malloc(eapol->identity_len);  in pmksa_cache_from_eapol_data()
151 		if (entry->identity) {  in pmksa_cache_from_eapol_data()
152 			entry->identity_len = eapol->identity_len;  in pmksa_cache_from_eapol_data()
153 			os_memcpy(entry->identity, eapol->identity,  in pmksa_cache_from_eapol_data()
159 		entry->cui = wpabuf_dup(eapol->radius_cui);  in pmksa_cache_from_eapol_data()
162 	radius_copy_class(&entry->radius_class, &eapol->radius_class);  in pmksa_cache_from_eapol_data()
165 	entry->eap_type_authsrv = eapol->eap_type_authsrv;  in pmksa_cache_from_eapol_data()
169 		entry->vlan_desc = os_zalloc(sizeof(struct vlan_description));  in pmksa_cache_from_eapol_data()
170 		if (entry->vlan_desc)  in pmksa_cache_from_eapol_data()
171 			*entry->vlan_desc = *vlan_desc;  in pmksa_cache_from_eapol_data()
173 		entry->vlan_desc = NULL;  in pmksa_cache_from_eapol_data()
176 	entry->acct_multi_session_id = eapol->acct_multi_session_id;  in pmksa_cache_from_eapol_data()
181 			       struct rsn_pmksa_cache_entry *entry,  in pmksa_cache_to_eapol_data()  argument
184 	if (entry == NULL || eapol == NULL)  in pmksa_cache_to_eapol_data()
187 	if (entry->identity) {  in pmksa_cache_to_eapol_data()
189 		eapol->identity = os_malloc(entry->identity_len);  in pmksa_cache_to_eapol_data()
191 			eapol->identity_len = entry->identity_len;  in pmksa_cache_to_eapol_data()
192 			os_memcpy(eapol->identity, entry->identity,  in pmksa_cache_to_eapol_data()
193 				  entry->identity_len);  in pmksa_cache_to_eapol_data()
199 	if (entry->cui) {  in pmksa_cache_to_eapol_data()
201 		eapol->radius_cui = wpabuf_dup(entry->cui);  in pmksa_cache_to_eapol_data()
206 	radius_copy_class(&eapol->radius_class, &entry->radius_class);  in pmksa_cache_to_eapol_data()
213 	eapol->eap_type_authsrv = entry->eap_type_authsrv;  in pmksa_cache_to_eapol_data()
215 	ap_sta_set_vlan(hapd, eapol->sta, entry->vlan_desc);  in pmksa_cache_to_eapol_data()
218 	eapol->acct_multi_session_id = entry->acct_multi_session_id;  in pmksa_cache_to_eapol_data()
223 				   struct rsn_pmksa_cache_entry *entry)  in pmksa_cache_link_entry()  argument
232 		if (pos->expiration > entry->expiration)  in pmksa_cache_link_entry()
238 		entry->next = pmksa->pmksa;  in pmksa_cache_link_entry()
239 		pmksa->pmksa = entry;  in pmksa_cache_link_entry()
241 		entry->next = prev->next;  in pmksa_cache_link_entry()
242 		prev->next = entry;  in pmksa_cache_link_entry()
245 	hash = PMKID_HASH(entry->pmkid);  in pmksa_cache_link_entry()
246 	entry->hnext = pmksa->pmkid[hash];  in pmksa_cache_link_entry()
247 	pmksa->pmkid[hash] = entry;  in pmksa_cache_link_entry()
253 		   MAC2STR(entry->spa));  in pmksa_cache_link_entry()
254 	wpa_hexdump(MSG_DEBUG, "RSN: added PMKID", entry->pmkid, PMKID_LEN);  in pmksa_cache_link_entry()
285 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_auth_add()  local
287 	entry = pmksa_cache_auth_create_entry(pmk, pmk_len, pmkid, kck, kck_len,  in pmksa_cache_auth_add()
291 	if (pmksa_cache_auth_add_entry(pmksa, entry) < 0)  in pmksa_cache_auth_add()
294 	return entry;  in pmksa_cache_auth_add()
320 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_auth_create_entry()  local
329 	entry = os_zalloc(sizeof(*entry));  in pmksa_cache_auth_create_entry()
330 	if (entry == NULL)  in pmksa_cache_auth_create_entry()
332 	os_memcpy(entry->pmk, pmk, pmk_len);  in pmksa_cache_auth_create_entry()
333 	entry->pmk_len = pmk_len;  in pmksa_cache_auth_create_entry()
335 		os_memcpy(entry->pmkid, pmkid, PMKID_LEN);  in pmksa_cache_auth_create_entry()
337 		rsn_pmkid_suite_b_192(kck, kck_len, aa, spa, entry->pmkid);  in pmksa_cache_auth_create_entry()
339 		rsn_pmkid_suite_b(kck, kck_len, aa, spa, entry->pmkid);  in pmksa_cache_auth_create_entry()
341 		rsn_pmkid(pmk, pmk_len, aa, spa, entry->pmkid, akmp);  in pmksa_cache_auth_create_entry()
343 	entry->expiration = now.sec;  in pmksa_cache_auth_create_entry()
345 		entry->expiration += session_timeout;  in pmksa_cache_auth_create_entry()
347 		entry->expiration += dot11RSNAConfigPMKLifetime;  in pmksa_cache_auth_create_entry()
348 	entry->akmp = akmp;  in pmksa_cache_auth_create_entry()
349 	os_memcpy(entry->spa, spa, ETH_ALEN);  in pmksa_cache_auth_create_entry()
350 	pmksa_cache_from_eapol_data(entry, eapol);  in pmksa_cache_auth_create_entry()
352 	return entry;  in pmksa_cache_auth_create_entry()
366 			       struct rsn_pmksa_cache_entry *entry)  in pmksa_cache_auth_add_entry()  argument
370 	if (entry == NULL)  in pmksa_cache_auth_add_entry()
375 	pos = pmksa_cache_auth_get(pmksa, entry->spa, NULL);  in pmksa_cache_auth_add_entry()
387 	pmksa_cache_link_entry(pmksa, entry);  in pmksa_cache_auth_add_entry()
398 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_add_okc()  local
400 	entry = os_zalloc(sizeof(*entry));  in pmksa_cache_add_okc()
401 	if (entry == NULL)  in pmksa_cache_add_okc()
403 	os_memcpy(entry->pmkid, pmkid, PMKID_LEN);  in pmksa_cache_add_okc()
404 	os_memcpy(entry->pmk, old_entry->pmk, old_entry->pmk_len);  in pmksa_cache_add_okc()
405 	entry->pmk_len = old_entry->pmk_len;  in pmksa_cache_add_okc()
406 	entry->expiration = old_entry->expiration;  in pmksa_cache_add_okc()
407 	entry->akmp = old_entry->akmp;  in pmksa_cache_add_okc()
408 	os_memcpy(entry->spa, old_entry->spa, ETH_ALEN);  in pmksa_cache_add_okc()
409 	entry->opportunistic = 1;  in pmksa_cache_add_okc()
411 		entry->identity = os_malloc(old_entry->identity_len);  in pmksa_cache_add_okc()
412 		if (entry->identity) {  in pmksa_cache_add_okc()
413 			entry->identity_len = old_entry->identity_len;  in pmksa_cache_add_okc()
414 			os_memcpy(entry->identity, old_entry->identity,  in pmksa_cache_add_okc()
419 		entry->cui = wpabuf_dup(old_entry->cui);  in pmksa_cache_add_okc()
421 	radius_copy_class(&entry->radius_class, &old_entry->radius_class);  in pmksa_cache_add_okc()
423 	entry->eap_type_authsrv = old_entry->eap_type_authsrv;  in pmksa_cache_add_okc()
425 		entry->vlan_desc = os_zalloc(sizeof(struct vlan_description));  in pmksa_cache_add_okc()
426 		if (entry->vlan_desc)  in pmksa_cache_add_okc()
427 			*entry->vlan_desc = *old_entry->vlan_desc;  in pmksa_cache_add_okc()
429 		entry->vlan_desc = NULL;  in pmksa_cache_add_okc()
431 	entry->opportunistic = 1;  in pmksa_cache_add_okc()
433 	pmksa_cache_link_entry(pmksa, entry);  in pmksa_cache_add_okc()
435 	return entry;  in pmksa_cache_add_okc()
445 	struct rsn_pmksa_cache_entry *entry, *prev;  in pmksa_cache_auth_deinit()  local
451 	entry = pmksa->pmksa;  in pmksa_cache_auth_deinit()
452 	while (entry) {  in pmksa_cache_auth_deinit()
453 		prev = entry;  in pmksa_cache_auth_deinit()
454 		entry = entry->next;  in pmksa_cache_auth_deinit()
477 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_auth_get()  local
480 		for (entry = pmksa->pmkid[PMKID_HASH(pmkid)]; entry;  in pmksa_cache_auth_get()
481 		     entry = entry->hnext) {  in pmksa_cache_auth_get()
483 			     os_memcmp(entry->spa, spa, ETH_ALEN) == 0) &&  in pmksa_cache_auth_get()
484 			    os_memcmp(entry->pmkid, pmkid, PMKID_LEN) == 0)  in pmksa_cache_auth_get()
485 				return entry;  in pmksa_cache_auth_get()
488 		for (entry = pmksa->pmksa; entry; entry = entry->next) {  in pmksa_cache_auth_get()
490 			    os_memcmp(entry->spa, spa, ETH_ALEN) == 0)  in pmksa_cache_auth_get()
491 				return entry;  in pmksa_cache_auth_get()
513 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_get_okc()  local
516 	for (entry = pmksa->pmksa; entry; entry = entry->next) {  in pmksa_cache_get_okc()
517 		if (os_memcmp(entry->spa, spa, ETH_ALEN) != 0)  in pmksa_cache_get_okc()
519 		rsn_pmkid(entry->pmk, entry->pmk_len, aa, spa, new_pmkid,  in pmksa_cache_get_okc()
520 			  entry->akmp);  in pmksa_cache_get_okc()
522 			return entry;  in pmksa_cache_get_okc()
535 pmksa_cache_auth_init(void (*free_cb)(struct rsn_pmksa_cache_entry *entry,  in pmksa_cache_auth_init()  argument
550 static int das_attr_match(struct rsn_pmksa_cache_entry *entry,  in das_attr_match()  argument
556 		if (os_memcmp(attr->sta_addr, entry->spa, ETH_ALEN) != 0)  in das_attr_match()
567 			    (unsigned long long) entry->acct_multi_session_id);  in das_attr_match()
574 		if (!entry->cui ||  in das_attr_match()
575 		    attr->cui_len != wpabuf_len(entry->cui) ||  in das_attr_match()
576 		    os_memcmp(attr->cui, wpabuf_head(entry->cui),  in das_attr_match()
583 		if (!entry->identity ||  in das_attr_match()
584 		    attr->user_name_len != entry->identity_len ||  in das_attr_match()
585 		    os_memcmp(attr->user_name, entry->identity,  in das_attr_match()
599 	struct rsn_pmksa_cache_entry *entry, *prev;  in pmksa_cache_auth_radius_das_disconnect()  local
604 	entry = pmksa->pmksa;  in pmksa_cache_auth_radius_das_disconnect()
605 	while (entry) {  in pmksa_cache_auth_radius_das_disconnect()
606 		if (das_attr_match(entry, attr)) {  in pmksa_cache_auth_radius_das_disconnect()
608 			prev = entry;  in pmksa_cache_auth_radius_das_disconnect()
609 			entry = entry->next;  in pmksa_cache_auth_radius_das_disconnect()
613 		entry = entry->next;  in pmksa_cache_auth_radius_das_disconnect()
634 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_auth_list()  local
644 	entry = pmksa->pmksa;  in pmksa_cache_auth_list()
645 	while (entry) {  in pmksa_cache_auth_list()
647 				  i, MAC2STR(entry->spa));  in pmksa_cache_auth_list()
651 		pos += wpa_snprintf_hex(pos, buf + len - pos, entry->pmkid,  in pmksa_cache_auth_list()
654 				  (int) (entry->expiration - now.sec),  in pmksa_cache_auth_list()
655 				  entry->opportunistic);  in pmksa_cache_auth_list()
659 		entry = entry->next;  in pmksa_cache_auth_list()
685 	struct rsn_pmksa_cache_entry *entry;  in pmksa_cache_auth_list_mesh()  local
697 	for (entry = pmksa->pmksa; entry; entry = entry->next) {  in pmksa_cache_auth_list_mesh()
698 		if (addr && os_memcmp(entry->spa, addr, ETH_ALEN) != 0)  in pmksa_cache_auth_list_mesh()
702 				  MAC2STR(entry->spa));  in pmksa_cache_auth_list_mesh()
707 		pos += wpa_snprintf_hex(pos, end - pos, entry->pmkid,  in pmksa_cache_auth_list_mesh()
715 		pos += wpa_snprintf_hex(pos, end - pos, entry->pmk,  in pmksa_cache_auth_list_mesh()
716 					entry->pmk_len);  in pmksa_cache_auth_list_mesh()
719 				  (int) (entry->expiration - now.sec));  in pmksa_cache_auth_list_mesh()