1 /*
2  * Hotspot 2.0 client - Web browser using wpadebug on Android
3  * Copyright (c) 2013, Qualcomm Atheros, Inc.
4  *
5  * This software may be distributed under the terms of the BSD license.
6  * See README for more details.
7  */
8 
9 #include "includes.h"
10 
11 #include "common.h"
12 #include "utils/eloop.h"
13 #include "wps/http_server.h"
14 #include "browser.h"
15 
16 
17 struct browser_data {
18 	int success;
19 };
20 
21 
22 static void browser_timeout(void *eloop_data, void *user_ctx)
23 {
24 	wpa_printf(MSG_INFO, "Timeout on waiting browser interaction to "
25 		   "complete");
26 	eloop_terminate();
27 }
28 
29 
30 static void http_req(void *ctx, struct http_request *req)
31 {
32 	struct browser_data *data = ctx;
33 	struct wpabuf *resp;
34 	const char *url;
35 	int done = 0;
36 
37 	url = http_request_get_uri(req);
38 	wpa_printf(MSG_INFO, "Browser response received: %s", url);
39 
40 	if (os_strcmp(url, "/") == 0) {
41 		data->success = 1;
42 		done = 1;
43 	} else if (os_strncmp(url, "/osu/", 5) == 0) {
44 		data->success = atoi(url + 5);
45 		done = 1;
46 	}
47 
48 	resp = wpabuf_alloc(100);
49 	if (resp == NULL) {
50 		http_request_deinit(req);
51 		if (done)
52 			eloop_terminate();
53 		return;
54 	}
55 	wpabuf_put_str(resp, "HTTP/1.1\r\n\r\nUser input completed");
56 
57 	if (done) {
58 		eloop_cancel_timeout(browser_timeout, NULL, NULL);
59 		eloop_register_timeout(0, 500000, browser_timeout, &data, NULL);
60 	}
61 
62 	http_request_send_and_deinit(req, resp);
63 }
64 
65 
66 int hs20_web_browser(const char *url)
67 {
68 	struct http_server *http;
69 	struct in_addr addr;
70 	struct browser_data data;
71 	pid_t pid;
72 
73 	wpa_printf(MSG_INFO, "Launching wpadebug browser to %s", url);
74 
75 	os_memset(&data, 0, sizeof(data));
76 
77 	if (eloop_init() < 0) {
78 		wpa_printf(MSG_ERROR, "eloop_init failed");
79 		return -1;
80 	}
81 	addr.s_addr = htonl((127 << 24) | 1);
82 	http = http_server_init(&addr, 12345, http_req, &data);
83 	if (http == NULL) {
84 		wpa_printf(MSG_ERROR, "http_server_init failed");
85 		eloop_destroy();
86 		return -1;
87 	}
88 
89 	pid = fork();
90 	if (pid < 0) {
91 		wpa_printf(MSG_ERROR, "fork: %s", strerror(errno));
92 		http_server_deinit(http);
93 		eloop_destroy();
94 		return -1;
95 	}
96 
97 	if (pid == 0) {
98 		/* run the external command in the child process */
99 		char *argv[14];
100 		char *envp[] = { "PATH=/system/bin:/vendor/bin", NULL };
101 
102 		argv[0] = "browser-wpadebug";
103 		argv[1] = "start";
104 		argv[2] = "-a";
105 		argv[3] = "android.action.MAIN";
106 		argv[4] = "-c";
107 		argv[5] = "android.intent.category.LAUNCHER";
108 		argv[6] = "-n";
109 		argv[7] = "w1.fi.wpadebug/.WpaWebViewActivity";
110 		argv[8] = "-e";
111 		argv[9] = "w1.fi.wpadebug.URL";
112 		argv[10] = (void *) url;
113 		argv[11] = "--user";
114 		argv[12] = "-3"; /* USER_CURRENT_OR_SELF */
115 		argv[13] = NULL;
116 
117 		execve("/system/bin/am", argv, envp);
118 		wpa_printf(MSG_ERROR, "execve: %s", strerror(errno));
119 		exit(0);
120 		return -1;
121 	}
122 
123 	eloop_register_timeout(300, 0, browser_timeout, &data, NULL);
124 	eloop_run();
125 	eloop_cancel_timeout(browser_timeout, &data, NULL);
126 	http_server_deinit(http);
127 	eloop_destroy();
128 
129 	wpa_printf(MSG_INFO, "Closing Android browser");
130 	if (os_exec("/system/bin/am",
131 		    "start -a android.action.MAIN "
132 		    "-c android.intent.category.LAUNCHER "
133 		    "-n w1.fi.wpadebug/.WpaWebViewActivity "
134 		    "-e w1.fi.wpadebug.URL FINISH", 1) != 0) {
135 		wpa_printf(MSG_INFO, "Failed to close wpadebug browser");
136 	}
137 
138 	return data.success;
139 }
140