#include "wm_oneshot_esp.h" #define ESP_GUIDE_DATUM 512 #define ESP_DATA_OFFSET 40 #define ESP_CRC_POLYNOM 0x8C #define ESP_CRC_INITIAL 0x00 struct esp_data_t{ u8 data; u8 used; }; esp_printf_fn esp_printf = NULL; static u8 *esp_scan_bss; const u8 esp_dst_addr[3] = {0x01,0x00,0x5e}; u8 esp_last_num[2] = {0,0}; u16 esp_head[2][4] = {{0,0,0,0},{0,0,0,0}}; u16 esp_byte[2][3] = {{0,0,0},{0,0,0}}; u8 esp_state = 0; u16 esp_data_datum = 0; u8 esp_head_cnt[2] = {0,0}; u8 esp_byte_cnt[2] = {0,0}; u8 esp_sync_cnt = 0; u8 esp_src_mac[6] = {0}; // u8 esp_crc_table[256]; u8 esp_crc_value = 0; u8 esp_data_cnt = 0; u16 esp_last_seq[2] = {0,0}; u16 esp_last_len = 0; u8 esp_temp_lock = 0; struct esp_data_t esp_data[120]; struct esp_param_t esp_param; extern u8 gucssidData[]; extern u8 gucpwdData[]; const u8 esp_crc_table[] = { 0x00,0x5E,0xBC,0xE2,0x61,0x3F,0xDD,0x83, 0xC2,0x9C,0x7E,0x20,0xA3,0xFD,0x1F,0x41, 0x9D,0xC3,0x21,0x7F,0xFC,0xA2,0x40,0x1E, 0x5F,0x01,0xE3,0xBD,0x3E,0x60,0x82,0xDC, 0x23,0x7D,0x9F,0xC1,0x42,0x1C,0xFE,0xA0, 0xE1,0xBF,0x5D,0x03,0x80,0xDE,0x3C,0x62, 0xBE,0xE0,0x02,0x5C,0xDF,0x81,0x63,0x3D, 0x7C,0x22,0xC0,0x9E,0x1D,0x43,0xA1,0xFF, 0x46,0x18,0xFA,0xA4,0x27,0x79,0x9B,0xC5, 0x84,0xDA,0x38,0x66,0xE5,0xBB,0x59,0x07, 0xDB,0x85,0x67,0x39,0xBA,0xE4,0x06,0x58, 0x19,0x47,0xA5,0xFB,0x78,0x26,0xC4,0x9A, 0x65,0x3B,0xD9,0x87,0x04,0x5A,0xB8,0xE6, 0xA7,0xF9,0x1B,0x45,0xC6,0x98,0x7A,0x24, 0xF8,0xA6,0x44,0x1A,0x99,0xC7,0x25,0x7B, 0x3A,0x64,0x86,0xD8,0x5B,0x05,0xE7,0xB9, 0x8C,0xD2,0x30,0x6E,0xED,0xB3,0x51,0x0F, 0x4E,0x10,0xF2,0xAC,0x2F,0x71,0x93,0xCD, 0x11,0x4F,0xAD,0xF3,0x70,0x2E,0xCC,0x92, 0xD3,0x8D,0x6F,0x31,0xB2,0xEC,0x0E,0x50, 0xAF,0xF1,0x13,0x4D,0xCE,0x90,0x72,0x2C, 0x6D,0x33,0xD1,0x8F,0x0C,0x52,0xB0,0xEE, 0x32,0x6C,0x8E,0xD0,0x53,0x0D,0xEF,0xB1, 0xF0,0xAE,0x4C,0x12,0x91,0xCF,0x2D,0x73, 0xCA,0x94,0x76,0x28,0xAB,0xF5,0x17,0x49, 0x08,0x56,0xB4,0xEA,0x69,0x37,0xD5,0x8B, 0x57,0x09,0xEB,0xB5,0x36,0x68,0x8A,0xD4, 0x95,0xCB,0x29,0x77,0xF4,0xAA,0x48,0x16, 0xE9,0xB7,0x55,0x0B,0x88,0xD6,0x34,0x6A, 0x2B,0x75,0x97,0xC9,0x4A,0x14,0xF6,0xA8, 0x74,0x2A,0xC8,0x96,0x15,0x4B,0xA9,0xF7, 0xB6,0xE8,0x0A,0x54,0xD7,0x89,0x6B,0x35, }; #if 0 void esp_crc8_table_init(void) { int i; u8 bit; u8 remainder; for(i=0; i<256; i++) { remainder = i; for(bit=0; bit<8; bit++) { if((remainder&0x01) != 0) remainder = (remainder >> 1) ^ ESP_CRC_POLYNOM; else remainder >>= 1; } esp_crc_table[i] = remainder; } } #endif void esp_crc8_init(void) { esp_crc_value = ESP_CRC_INITIAL; } void esp_crc8_update(u8 data) { u8 val; val = data ^ esp_crc_value; esp_crc_value = esp_crc_table[val] ^ (esp_crc_value<<8); } u8 esp_crc8_get(void) { return esp_crc_value; } u8 esp_crc8_calc(u8 *buf, u16 len) { u16 i; esp_crc8_init(); for(i=0; icount; i++) { if ((ssidCrc == esp_crc8_calc(bss->bss[i].ssid, bss->bss[i].ssid_len)) && (ssidLen == bss->bss[i].ssid_len) && (bssidCrc == esp_crc8_calc(bss->bss[i].bssid, 6))) { memcpy(ssid, bss->bss[i].ssid, bss->bss[i].ssid_len); memcpy(bssid, bss->bss[i].bssid, 6); return 0; } } return -1; } int tls_esp_recv(u8 *buf, u16 data_len) { struct ieee80211_hdr *hdr = (struct ieee80211_hdr*)buf; u8 *multicast = NULL; u8 *SrcMac = NULL; u8 crc, num, data; u16 i; u8 totalXor, totalLen, apPwdLen, apSsidCrc, apSsidLen, apBssidCrc; int ret; u16 frm_len; u16 guide_len; u8 tods = 0; multicast = ieee80211_get_DA(hdr); if(hdr->duration_id & 0x02) //normal mode stbc不处理 { return ESP_ONESHOT_CONTINUE; } if (ieee80211_is_data_qos(hdr->frame_control)) { frm_len = data_len - 2; } else { frm_len = data_len; } tods = ieee80211_has_tods(hdr->frame_control); SrcMac = ieee80211_get_SA(hdr); if(memcmp(multicast, esp_dst_addr, 3) && (0 == is_broadcast_ether_addr(multicast))) { return ESP_ONESHOT_CONTINUE; } switch(esp_state) { case 0: if(frm_len < 512) { return ESP_ONESHOT_CONTINUE; } if(is_zero_ether_addr(esp_src_mac)) { memcpy(esp_src_mac, SrcMac, 6); esp_head_cnt[0] = esp_head_cnt[1] = 0; esp_sync_cnt = 0; esp_temp_lock = 0; esp_last_seq[0] = esp_last_seq[1] = 0; memset(esp_head, 0, sizeof(esp_head)); } else { if(memcmp(esp_src_mac, SrcMac, 6)) { memcpy(esp_src_mac, SrcMac, 6); esp_head_cnt[0] = esp_head_cnt[1] = 0; esp_sync_cnt = 0; esp_temp_lock = 0; esp_last_seq[0] = esp_last_seq[1] = 0; memset(esp_head, 0, sizeof(esp_head)); }else{ if(esp_printf) esp_printf("tods:%d,%d,"MACSTR"\n", tods, frm_len, MAC2STR(SrcMac)); } } if (ieee80211_has_retry(hdr->frame_control) && (esp_last_seq[tods] == hdr->seq_ctrl)) { return ESP_ONESHOT_CONTINUE; } esp_last_seq[tods] = hdr->seq_ctrl; esp_head[tods][esp_head_cnt[tods]] = frm_len; if(esp_head_cnt[tods] > 0) { if(((esp_head[tods][esp_head_cnt[tods]]+1) != esp_head[tods][esp_head_cnt[tods]-1]) && ((esp_head[tods][esp_head_cnt[tods]]-3) != esp_head[tods][esp_head_cnt[tods]-1])) { esp_temp_lock = 0; esp_head_cnt[tods] = 0; esp_head[tods][0] = frm_len; }else{ esp_temp_lock = 1; } } esp_head_cnt[tods] ++; if(esp_head_cnt[tods] >= 4) { esp_sync_cnt ++; esp_head_cnt[tods] = 0; } if(esp_sync_cnt >= 1) { guide_len = esp_head[tods][0]; for(i=1; i<=3; i++) { if(guide_len > esp_head[tods][i]) guide_len = esp_head[tods][i]; //取出同步头中最小值 } esp_state = 1; //同步完成, 锁定源MAC和信道 esp_data_datum = guide_len - ESP_GUIDE_DATUM + ESP_DATA_OFFSET; //获取到基准长度 if(esp_printf) esp_printf("esp lock:%d\n", esp_data_datum); return ESP_ONESHOT_CHAN_LOCKED; } if(esp_temp_lock == 1) { return ESP_ONESHOT_CHAN_TEMP_LOCKED; } break; case 1: if((frm_len >= 512) || (frm_len < esp_data_datum)) { return ESP_ONESHOT_CONTINUE; } if(memcmp(esp_src_mac, SrcMac, 6)) { return ESP_ONESHOT_CONTINUE; } if (ieee80211_has_retry(hdr->frame_control) && (esp_last_seq[tods] == hdr->seq_ctrl)) { return ESP_ONESHOT_CONTINUE; } esp_last_seq[tods] = hdr->seq_ctrl; if(esp_last_num[tods] != multicast[5]) { memset((u8 *)&esp_byte[tods][0], 0, 3); esp_byte_cnt[tods] = 0; esp_last_num[tods] = multicast[5]; } esp_byte[tods][esp_byte_cnt[tods]] = frm_len - esp_data_datum; if((esp_byte_cnt[tods]==0) && (esp_byte[tods][0]>=256)) { esp_byte_cnt[tods] = 0; } else if((esp_byte_cnt[tods]==1) && (esp_byte[tods][1]<256)) { esp_byte[tods][0] = frm_len - esp_data_datum; esp_byte_cnt[tods] = 1; } else if((esp_byte_cnt[tods]==2) && (esp_byte[tods][2]>=256)) { esp_byte_cnt[tods] = 0; } else { esp_byte_cnt[tods] ++; } if(esp_byte_cnt[tods] >= 3) { crc = (esp_byte[tods][0]&0xF0) + ((esp_byte[tods][2]&0xF0)>>4); num = esp_byte[tods][1]&0xFF; data = ((esp_byte[tods][0]&0x0F)<<4) + (esp_byte[tods][2]&0x0F); if(esp_data[num].used == 0) { esp_crc8_init(); esp_crc8_update(data); esp_crc8_update(num); if(crc == esp_crc8_get()) { if(esp_printf) esp_printf("%d\n", num); esp_data[num].data = data; esp_data[num].used = 1; esp_data_cnt ++; } } esp_byte_cnt[tods] = 0; } if(esp_data[0].used) { if(esp_data_cnt >= esp_data[0].data + 6) //计算异或校验,CRC校验等 { if(esp_printf) esp_printf("here1\n"); totalLen = esp_data[0].data; totalXor = 0; for(i=0; i