/*

* Copyright (c) 2001-2006 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  EAP and WLAN authentication protocols.

*

*/

// This is enumeration of EAPOL source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 104 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

#include "eap_am_memory.h"

#include "eap_tools.h"

#include "eap_radius.h"

#include "eap_radius_header.h"

#include "eap_radius_payloads.h"

#include "eap_radius_mac_attributes.h"

#include "abs_eap_am_radius.h"

#include "eap_crypto_api.h"

#include "eap_state_notification.h"

#include "abs_eap_am_mutex.h"

#include "eap_automatic_variable.h"

#include "eapol_header.h"

#include "eap_diameter_avp_code.h"

/// This is pseudo Ethernet and EAPOL header.

/// This is used in trace of tunneled EAP-packet.

const u8_t EAP_PSEUDO_ETHERNET_HEADER[] =

{

	0x50, 0x73, 0x65, 0x75, 0x64, 0x6f, 0x68, 0x65,

	0x61, 0x64, 0x65, 0x72, 0x88, 0x8e, 0x01, 0x00,

	0x00, 0x00

};

const u32_t EAP_PSEUDO_EAPOL_HEADER_OFFSET = 14ul;

//--------------------------------------------------

/** @file */

// 

EAP_FUNC_EXPORT eap_radius_c::~eap_radius_c()

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_radius_c::~eap_radius_c(): this = 0x%08x => 0x%08x\n"),

		this,

		dynamic_cast<abs_eap_base_timer_c *>(this)));

	EAP_ASSERT(m_shutdown_was_called == true);

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

}

//--------------------------------------------------

#if defined(_WIN32) && !defined(__GNUC__)

	#pragma warning( disable : 4355 ) // 'this' : used in base member initializer list

#endif

// 

EAP_FUNC_EXPORT eap_radius_c::eap_radius_c(

	abs_eap_am_tools_c * const tools,

	abs_eap_radius_c * const partner,

	eap_am_radius_c * const am_radius,

	const bool free_am_radius,

	const bool is_client_when_true)

	: m_am_tools(tools)

	, m_partner(partner)

	, m_session_map(tools, this)

	, m_pseudo_ethernet_header(tools)

	, m_radius_header_offset(0ul)

	, m_MTU(0ul)

	, m_trailer_length(0ul)

	, m_salt(0ul)

	, m_shutdown_was_called(false)

	, m_is_client(false)

	, m_is_valid(false)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_radius_c::eap_radius_c(): this = 0x%08x => 0x%08x, partner 0x%08x\n"),

		 this,

		 dynamic_cast<abs_eap_base_timer_c *>(this),

		 partner));

	eap_status_e status = m_pseudo_ethernet_header.set_copy_of_buffer(

		EAP_PSEUDO_ETHERNET_HEADER,

		sizeof(EAP_PSEUDO_ETHERNET_HEADER));

	if (status != eap_status_ok)

	{

		// Do not care of this error.

		// User will check the validity of m_pseudo_ethernet_header.

	}

	// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	set_is_valid();

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

}

//--------------------------------------------------

EAP_FUNC_EXPORT eap_const_string eap_radius_c::get_state_string(eap_radius_state_variable_e state)

{

#if defined(USE_EAP_TRACE_STRINGS)

	EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_identity_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_pending_identity_query)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_start_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_imsi_waiting_for_start_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_pseydonym_waiting_for_start_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_analyse_start_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_challenge_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_analyses_challenge_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_pending_kc_sres_query)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_success)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_reauth_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_analyses_reauthentication_request)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_pending_pseudonym_decode_query)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_identity_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_start_response_with_at_permanent_identity)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_start_response_with_at_full_auth_identity)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_start_response_with_at_any_identity)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_start_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_challenge_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_pending_triplet_query)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_analyses_challenge_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_analyses_start_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_notification_request_success)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_notification_response_failure)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_notification_response_success)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_waiting_for_reauth_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_analyses_reauthentication_response)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_success)

	else EAP_IF_RETURN_STRING(state, eap_radius_state_failure)

	else

#endif // #if defined(USE_EAP_TRACE_STRINGS)

	{

		return EAPL("Unknown RADIUS state");

	}

}

//--------------------------------------------------

#if defined(USE_EAP_RADIUS_VERIFY_STATES)

/**

 * This function checks the valid states.

 */

bool eap_radius_c::verify_states(

	const eap_radius_state_variable_e * const valid_states,

	const u32_t count) const

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	for (u32_t ind = 0ul; ind < count; ind++)

	{

		if (m_state == valid_states[ind])

		{

			return true;

		}

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return false;

}

#endif //#if defined(USE_EAP_RADIUS_VERIFY_STATES)

//--------------------------------------------------

static const u8_t DEFAULT_CALLED_STATION_ID[] = "000000";

static const u32_t DEFAULT_CALLED_STATION_ID_LENGTH = sizeof(DEFAULT_CALLED_STATION_ID);

static const u8_t DEFAULT_CALLING_STATION_ID[] = "111111";

static const u32_t DEFAULT_CALLING_STATION_ID_LENGTH = sizeof(DEFAULT_CALLING_STATION_ID);

//

EAP_FUNC_EXPORT eap_status_e eap_radius_c::analyse_radius_packet(

	const eap_am_network_id_c * const receive_network_id,

	eap_radius_header_base_c * const received_radius,

	const u32_t radius_packet_length,

	eap_radius_payloads_c * const p_radius_payloads)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	eap_status_e status(eap_status_process_general_error);

	if (m_is_client == true)

	{

		// Not supported yet. First priority is the server functionality.

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_not_supported);

	}

	else

	{

		eap_variable_data_c called_station_id(m_am_tools);

		if (called_station_id.get_is_valid() == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		if (p_radius_payloads->get_payload(eap_diameter_avp_code_called_station_id) != 0)

		{

			status = called_station_id.add_data(p_radius_payloads->get_payload(eap_diameter_avp_code_called_station_id)->get_payload_buffer());

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

		else

		{

			status = called_station_id.add_data(DEFAULT_CALLED_STATION_ID, DEFAULT_CALLED_STATION_ID_LENGTH);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

		eap_variable_data_c calling_station_id(m_am_tools);

		if (calling_station_id.get_is_valid() == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		if (p_radius_payloads->get_payload(eap_diameter_avp_code_calling_station_id) != 0)

		{

			status = calling_station_id.add_data(p_radius_payloads->get_payload(eap_diameter_avp_code_calling_station_id)->get_payload_buffer());

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

		else

		{

			status = called_station_id.add_data(DEFAULT_CALLING_STATION_ID, DEFAULT_CALLING_STATION_ID_LENGTH);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

		// Test the required attributes.

		if (p_radius_payloads->get_payload(eap_diameter_avp_code_user_name) != 0

			&& p_radius_payloads->get_payload(eap_diameter_avp_code_nas_ip_address) != 0

			&& p_radius_payloads->get_payload(eap_diameter_avp_code_eap_message) != 0)

		{

			// Check the session.

			eap_variable_data_c selector(m_am_tools);

			if (selector.get_is_valid() == false)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

			}

			status = selector.add_data(

				p_radius_payloads->get_payload(

					eap_diameter_avp_code_user_name

					)->get_payload_buffer());

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			status = selector.add_data(

				p_radius_payloads->get_payload(

					eap_diameter_avp_code_nas_ip_address

					)->get_payload_buffer());

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			status = selector.add_data(&called_station_id);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			status = selector.add_data(

				p_radius_payloads->get_payload(

					eap_diameter_avp_code_calling_station_id

					)->get_payload_buffer());

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			EAP_TRACE_DATA_DEBUG(

				m_am_tools, 

				TRACE_FLAGS_DEFAULT, 

				(EAPL("RADIUS session"),

				 selector.get_data(),

				 selector.get_data_length()));

			eap_radius_session_c * session = m_session_map.get_handler(&selector);

			if (session == 0)

			{

				// Create a new session.

				session = new eap_radius_session_c(

					m_am_tools,

					this,

					false,

					p_radius_payloads->get_payload(eap_diameter_avp_code_user_name),

					p_radius_payloads->get_payload(eap_diameter_avp_code_nas_ip_address));

				if (session == 0

					|| session->get_is_valid() == false)

				{

					delete session;

					session = 0;

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

				}

				status = session->configure();

				if (status != eap_status_ok)

				{

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

				status = m_session_map.add_handler(&selector, session);

				if (status != eap_status_ok)

				{

					session->shutdown();

					delete session;

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

			}

			if (session != 0)

			{

				// Handle the received EAP-Response.

				status = session->save_request_data(

					received_radius->get_authenticator(),

					received_radius->get_authenticator_length(),

					received_radius->get_identifier());

				if (status != eap_status_ok)

				{

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

				eap_variable_data_c * const eap_message

					= p_radius_payloads->get_payload(eap_diameter_avp_code_eap_message)

					->get_payload_buffer();

				eap_header_wr_c eap(

					m_am_tools,

					eap_message->get_data(),

					eap_message->get_data_length());

				trace_tunneled_packet(EAPL("-> TUNNELED packet server"), &eap);

				status = session->packet_process(

					receive_network_id,

					&eap,

					eap_message->get_data_length());

				if (status != eap_status_ok)

				{

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

			}

		}

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e eap_radius_c::parse_radius_packet(

	eap_radius_header_base_c * const radius,

	const u32_t radius_packet_length,

	eap_radius_payloads_c * const p_radius_payloads)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	if (radius->get_length() < radius->get_header_length())

	{

		EAP_TRACE_ERROR(

			m_am_tools,

			TRACE_FLAGS_RADIUS_ERROR,

			(EAPL("ERROR: eap_radius_payloads_c::parse_radius_packet(): ")

			 EAPL("RADIUS-header is corrupted. Buffer length and payload ")

			 EAPL("length does not match. RADIUS-header length %lu < minimum RADIUS-header length %lu.\n"),

			radius->get_length(),

			radius->get_header_length()));

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	if (radius->get_length() > radius_packet_length)

	{

		EAP_TRACE_ERROR(

			m_am_tools, 

			TRACE_FLAGS_RADIUS_ERROR, 

			(EAPL("ERROR: eap_radius_payloads_c::parse_radius_packet(): ")

			 EAPL("RADIUS-header is corrupted. Buffer length and payload ")

			 EAPL("length does not match. RADIUS-header length %lu > packet length %lu\n"),

			radius->get_length(),

			radius_packet_length));

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	u32_t buffer_length = radius->get_length() - radius->get_header_length();

	if (buffer_length == 0u)

	{

		// No payload in this packet.

		return EAP_STATUS_RETURN(m_am_tools, eap_status_ok);

	}

	eap_radius_attribute_header_c payload(

		m_am_tools,

		radius->get_data_offset(0ul, buffer_length),

		buffer_length);

	if (payload.get_is_valid() == false)

	{

		EAP_TRACE_ERROR(

			m_am_tools, 

			TRACE_FLAGS_RADIUS_ERROR, 

			(EAPL("ERROR: No eap_radius_attribute_header_c.\n")));

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	eap_status_e status = p_radius_payloads->parse_radius_payload(

		&payload,

		&buffer_length);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	else if (buffer_length != 0u)

	{

		EAP_TRACE_ERROR(

			m_am_tools,

			TRACE_FLAGS_RADIUS_ERROR,

			(EAPL("ERROR: eap_radius_payloads_c::parse_radius_packet(): ")

			 EAPL("RADIUS-header is corrupted. Buffer length and payload ")

			 EAPL("length does not match. Illegal byte count %lu\n"),

			buffer_length));

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e eap_radius_c::handle_radius_packet(

	const eap_am_network_id_c * const receive_network_id,

	eap_radius_header_base_c * const received_radius,

	const u32_t radius_length,

	eap_radius_payloads_c * const p_radius_payloads)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	eap_status_e status(eap_status_header_corrupted);

	status = parse_radius_packet(received_radius, radius_length, p_radius_payloads);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}