/* packet-wps.c

 *

 * Wifi Simple Config aka Wifi Protected Setup

 *

 * Written by Jens Braeuer using WiFi-Alliance Spec 1.0h and

 * parts of a patch by JP Jiang and Philippe Teuwen. November 2007

 *

 * Spec:

 * https://www.wi-fi.org/knowledge_center_overview.php?type=4

 * Patch:

 * http://wireshark.digimirror.nl/lists/wireshark-dev/200703/msg00121.html

 *

 * Copyright 2007 Jens Braeuer <jensb@cs.tu-berlin.de>

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 *

 */

#include "config.h"

#include <epan/packet.h>

#include <epan/expert.h>

#include <epan/sminmpec.h>

#include <epan/tfs.h>

#include <wsutil/array.h>

#include "packet-wps.h"

#include "packet-ieee80211.h"

void proto_register_wps(void);

void proto_reg_handoff_wps(void);

static int  hf_eapwps_opcode;

static int  hf_eapwps_flags;

static int  hf_eapwps_flag_mf;

static int  hf_eapwps_flag_lf;

static int  hf_eapwps_msglen;

static int ett_eap_wps_attr;

static int ett_eap_wps_flags;

static expert_field ei_eapwps_packet_too_short;

static expert_field ei_eapwps_fmt_warn_too_long;

static expert_field ei_eapwps_fmt_length_warn;

static dissector_handle_t wps_handle;

/* OPCodes */

#define OPC_WSC_START    0x01   /* WPS OPCODE WSC_Start */

#define OPC_WSC_ACK      0x02   /* WPS OPCODE WSC_ACK */

#define OPC_WSC_NACK     0x03   /* WPS OPCODE WSC_NACK */

#define OPC_WSC_MSG      0x04   /* WPS OPCODE WSC_MSG */

#define OPC_WSC_DONE     0x05   /* WPS OPCODE WSC_Done */

#define OPC_WSC_FRAG_ACK 0x06   /* WPS OPCODE WSC_FRAG_ACK */

static const value_string eapwps_opcode_vals[] = {

  { OPC_WSC_START,    "WSC Start"},

  { OPC_WSC_ACK,      "WSC Ack"},

  { OPC_WSC_NACK,     "WSC Nack" },

  { OPC_WSC_MSG,      "WSC Msg" },

  { OPC_WSC_DONE,     "WSC Done" },

  { OPC_WSC_FRAG_ACK, "WSC Frag Ack" },

  { 0, NULL }

};

/*  Flag-Field masks  */

#define MASK_WSC_FLAG_MF   0x01 /* WPS Flag more frag */

#define MASK_WSC_FLAG_LF   0x02 /* WPS flag length field */

#define WPS_TLV_TYPE_AP_CHANNEL                         0x1001

#define WPS_TLV_TYPE_ASSOCIATION_STATE                  0x1002

#define WPS_TLV_TYPE_AUTHENTICATION_TYPE                0x1003

#define WPS_TLV_TYPE_AUTHENTICATION_TYPE_FLAGS          0x1004

#define WPS_TLV_TYPE_AUTHENTICATOR                      0x1005

#define WPS_TLV_TYPE_CONFIG_METHODS                     0x1008

#define WPS_TLV_TYPE_CONFIGURATION_ERROR                0x1009

#define WPS_TLV_TYPE_CONFIRMATION_URL4                  0x100a

#define WPS_TLV_TYPE_CONFIRMATION_URL6                  0x100b

#define WPS_TLV_TYPE_CONNECTION_TYPE                    0x100c

#define WPS_TLV_TYPE_CONNECTION_TYPE_FLAGS              0x100d

#define WPS_TLV_TYPE_CREDENTIAL                         0x100e

#define WPS_TLV_TYPE_DEVICE_NAME                        0x1011

#define WPS_TLV_TYPE_DEVICE_PASSWORD_ID                 0x1012

#define WPS_TLV_TYPE_E_HASH1                            0X1014

#define WPS_TLV_TYPE_E_HASH2                            0x1015

#define WPS_TLV_TYPE_E_SNONCE1                          0x1016

#define WPS_TLV_TYPE_E_SNONCE2                          0x1017

#define WPS_TLV_TYPE_ENCRYPTED_SETTINGS                 0x1018

#define WPS_TLV_TYPE_ENCRYPTION_TYPE                    0x100f

#define WPS_TLV_TYPE_ENCRYPTION_TYPE_FLAGS              0x1010

#define WPS_TLV_TYPE_ENROLLEE_NONCE                     0x101a

#define WPS_TLV_TYPE_FEATURE_ID                         0x101b

#define WPS_TLV_TYPE_IDENTITY                           0x101c

#define WPS_TLV_TYPE_IDENTITY_PROOF                     0x101d

#define WPS_TLV_TYPE_KEY_WRAP_AUTHENTICATOR             0x101e

#define WPS_TLV_TYPE_KEY_IDENTIFIER                     0x101f

#define WPS_TLV_TYPE_MAC_ADDRESS                        0x1020

#define WPS_TLV_TYPE_MANUFACTURER                       0x1021

#define WPS_TLV_TYPE_MESSAGE_TYPE                       0x1022

#define WPS_TLV_TYPE_MODEL_NAME                         0x1023

#define WPS_TLV_TYPE_MODEL_NUMBER                       0x1024

#define WPS_TLV_TYPE_NETWORK_INDEX                      0x1026

#define WPS_TLV_TYPE_NETWORK_KEY                        0x1027

#define WPS_TLV_TYPE_NETWORK_KEY_INDEX                  0x1028

#define WPS_TLV_TYPE_NEW_DEVICE_NAME                    0x1029

#define WPS_TLV_TYPE_NEW_PASSWORD                       0x102a

#define WPS_TLV_TYPE_OOB_DEVICE_PASSWORD                0x102c

#define WPS_TLV_TYPE_OS_VERSION                         0x102d

#define WPS_TLV_TYPE_POWER_LEVEL                        0x102f

#define WPS_TLV_TYPE_PSK_CURRENT                        0x1030

#define WPS_TLV_TYPE_PSK_MAX                            0x1031

#define WPS_TLV_TYPE_PUBLIC_KEY                         0x1032

#define WPS_TLV_TYPE_RADIO_ENABLED                      0x1033

#define WPS_TLV_TYPE_REBOOT                             0x1034

#define WPS_TLV_TYPE_REGISTRAR_CURRENT                  0x1035

#define WPS_TLV_TYPE_REGISTRAR_ESTABLISHED              0x1036

#define WPS_TLV_TYPE_REGISTRAR_LIST                     0x1037

#define WPS_TLV_TYPE_REGISTRAR_MAX                      0x1038

#define WPS_TLV_TYPE_REGISTRAR_NONCE                    0x1039

#define WPS_TLV_TYPE_REQUEST_TYPE                       0x103a

#define WPS_TLV_TYPE_RESPONSE_TYPE                      0x103b

#define WPS_TLV_TYPE_RF_BANDS                           0x103c

#define WPS_TLV_TYPE_R_HASH1                            0x103d

#define WPS_TLV_TYPE_R_HASH2                            0x103e

#define WPS_TLV_TYPE_R_SNONCE1                          0x103f

#define WPS_TLV_TYPE_R_SNONCE2                          0x1040

#define WPS_TLV_TYPE_SELECTED_REGISTRAR                 0x1041

#define WPS_TLV_TYPE_SERIAL_NUMBER                      0x1042

#define WPS_TLV_TYPE_WIFI_PROTECTED_SETUP_STATE         0x1044

#define WPS_TLV_TYPE_SSID                               0x1045

#define WPS_TLV_TYPE_TOTAL_NETWORKS                     0x1046

#define WPS_TLV_TYPE_UUID_E                             0x1047

#define WPS_TLV_TYPE_UUID_R                             0x1048

#define WPS_TLV_TYPE_VENDOR_EXTENSION                   0x1049

#define WPS_TLV_TYPE_VERSION                            0x104a

#define WPS_TLV_TYPE_X509_CERTIFICATE_REQUEST           0x104b

#define WPS_TLV_TYPE_X509_CERTIFICATE                   0x104c

#define WPS_TLV_TYPE_EAP_IDENTITY                       0x104d

#define WPS_TLV_TYPE_MESSAGE_COUNTER                    0x104e

#define WPS_TLV_TYPE_PUBLIC_KEY_HASH                    0x104f

#define WPS_TLV_TYPE_REKEY_KEY                          0x1050

#define WPS_TLV_TYPE_KEY_LIFETIME                       0x1051

#define WPS_TLV_TYPE_PERMITTED_CONFIG_METHODS           0x1052

#define WPS_TLV_TYPE_SELECTED_REGISTRAR_CONFIG_METHODS  0x1053

#define WPS_TLV_TYPE_PRIMARY_DEVICE_TYPE                0x1054

#define WPS_TLV_TYPE_SECONDARY_DEVICE_TYPE_LIST         0x1055

#define WPS_TLV_TYPE_PORTABLE_DEVICE                    0x1056

#define WPS_TLV_TYPE_AP_SETUP_LOCKED                    0x1057

#define WPS_TLV_TYPE_APPLICATION_EXTENSION              0x1058

#define WPS_TLV_TYPE_EAP_TYPE                           0x1059

#define WPS_TLV_TYPE_INITIALIZATION_VECTOR              0x1060

#define WPS_TLV_TYPE_KEY_PROVIDED_AUTOMATICALLY         0x1061

#define WPS_TLV_TYPE_8021X_ENABLED                      0x1062

#define WPS_TLV_TYPE_APPSESSIONKEY                      0x1063

#define WPS_TLV_TYPE_WEPTRANSMITKEY                     0x1064

#define WPS_TLV_TYPE_REQUESTED_DEV_TYPE                 0x106a

static const value_string eapwps_tlv_types[] = {

  { WPS_TLV_TYPE_AP_CHANNEL,                        "AP Channel" },

  { WPS_TLV_TYPE_ASSOCIATION_STATE,                 "Association State" },

  { WPS_TLV_TYPE_AUTHENTICATION_TYPE,               "Authentication Type" },

  { WPS_TLV_TYPE_AUTHENTICATION_TYPE_FLAGS,         "Authentication Type Flags" },

  { WPS_TLV_TYPE_AUTHENTICATOR,                     "Authenticator" },

  { WPS_TLV_TYPE_CONFIG_METHODS,                    "Config Methods" },

  { WPS_TLV_TYPE_CONFIGURATION_ERROR,               "Configuration Error" },

  { WPS_TLV_TYPE_CONFIRMATION_URL4,                 "Confirmation URL4" },

  { WPS_TLV_TYPE_CONFIRMATION_URL6,                 "Confirmation URL6" },

  { WPS_TLV_TYPE_CONNECTION_TYPE,                   "Connection Type" },

  { WPS_TLV_TYPE_CONNECTION_TYPE_FLAGS,             "Connection Type Flags" },

  { WPS_TLV_TYPE_CREDENTIAL,                        "Credential" },

  { WPS_TLV_TYPE_DEVICE_NAME,                       "Device Name" },

  { WPS_TLV_TYPE_DEVICE_PASSWORD_ID,                "Device Password ID" },

  { WPS_TLV_TYPE_E_HASH1,                           "E Hash1" },

  { WPS_TLV_TYPE_E_HASH2,                           "E Hash2" },

  { WPS_TLV_TYPE_E_SNONCE1,                         "E SNonce1" },

  { WPS_TLV_TYPE_E_SNONCE2,                         "E SNonce2" },

  { WPS_TLV_TYPE_ENCRYPTED_SETTINGS,                "Encrypted Settings" },

  { WPS_TLV_TYPE_ENCRYPTION_TYPE,                   "Encryption Type" },

  { WPS_TLV_TYPE_ENCRYPTION_TYPE_FLAGS,             "Encryption Type Flags" },

  { WPS_TLV_TYPE_ENROLLEE_NONCE,                    "Enrollee Nonce" },

  { WPS_TLV_TYPE_FEATURE_ID,                        "Feature Id" },

  { WPS_TLV_TYPE_IDENTITY,                          "Identity" },

  { WPS_TLV_TYPE_IDENTITY_PROOF,                    "Identity Proof" },

  { WPS_TLV_TYPE_KEY_WRAP_AUTHENTICATOR,            "Key Wrap Authenticator" },

  { WPS_TLV_TYPE_KEY_IDENTIFIER,                    "Key Identifier" },

  { WPS_TLV_TYPE_MAC_ADDRESS,                       "MAC Address" },

  { WPS_TLV_TYPE_MANUFACTURER,                      "Manufacturer" },

  { WPS_TLV_TYPE_MESSAGE_TYPE,                      "Message Type" },

  { WPS_TLV_TYPE_MODEL_NAME,                        "Model Name" },

  { WPS_TLV_TYPE_MODEL_NUMBER,                      "Model Number" },

  { WPS_TLV_TYPE_NETWORK_INDEX,                     "Network Index" },

  { WPS_TLV_TYPE_NETWORK_KEY,                       "Network Key" },

  { WPS_TLV_TYPE_NETWORK_KEY_INDEX,                 "Network Key Index" },

  { WPS_TLV_TYPE_NEW_DEVICE_NAME,                   "New Device Name" },

  { WPS_TLV_TYPE_NEW_PASSWORD,                      "New Password" },

  { WPS_TLV_TYPE_OOB_DEVICE_PASSWORD,               "OOB Device Password" },

  { WPS_TLV_TYPE_OS_VERSION,                        "OS Version" },

  { WPS_TLV_TYPE_POWER_LEVEL,                       "Power Level" },

  { WPS_TLV_TYPE_PSK_CURRENT,                       "PSK Current" },

  { WPS_TLV_TYPE_PSK_MAX,                           "PSK Max" },

  { WPS_TLV_TYPE_PUBLIC_KEY,                        "Public Key" },

  { WPS_TLV_TYPE_RADIO_ENABLED,                     "Radio Enabled" },

  { WPS_TLV_TYPE_REBOOT,                            "Reboot" },

  { WPS_TLV_TYPE_REGISTRAR_CURRENT,                 "Registrar Current" },

  { WPS_TLV_TYPE_REGISTRAR_ESTABLISHED,             "Registrar Established" },

  { WPS_TLV_TYPE_REGISTRAR_LIST,                    "Registrar List" },

  { WPS_TLV_TYPE_REGISTRAR_MAX,                     "registrar_max" },

  { WPS_TLV_TYPE_REGISTRAR_NONCE,                   "Registrar Nonce" },

  { WPS_TLV_TYPE_REQUEST_TYPE,                      "Request Type" },

  { WPS_TLV_TYPE_RESPONSE_TYPE,                     "Response Type" },

  { WPS_TLV_TYPE_RF_BANDS,                          "RF Bands" },

  { WPS_TLV_TYPE_R_HASH1,                           "R Hash1" },

  { WPS_TLV_TYPE_R_HASH2,                           "R Hash2" },

  { WPS_TLV_TYPE_R_SNONCE1,                         "R Snonce1" },

  { WPS_TLV_TYPE_R_SNONCE2,                         "R Snonce2" },

  { WPS_TLV_TYPE_SELECTED_REGISTRAR,                "Selected Registrar" },

  { WPS_TLV_TYPE_SERIAL_NUMBER,                     "Serial Number" },

  { WPS_TLV_TYPE_WIFI_PROTECTED_SETUP_STATE,        "Wifi Protected Setup State" },

  { WPS_TLV_TYPE_SSID,                              "SSID" },

  { WPS_TLV_TYPE_TOTAL_NETWORKS,                    "Total Networks" },

  { WPS_TLV_TYPE_UUID_E,                            "UUID E" },

  { WPS_TLV_TYPE_UUID_R,                            "UUID R" },

  { WPS_TLV_TYPE_VENDOR_EXTENSION,                  "Vendor Extension" },

  { WPS_TLV_TYPE_VERSION,                           "Version" },

  { WPS_TLV_TYPE_X509_CERTIFICATE_REQUEST,          "X509 Certificate Request" },

  { WPS_TLV_TYPE_X509_CERTIFICATE,                  "X509 Certificate" },

  { WPS_TLV_TYPE_EAP_IDENTITY,                      "EAP Identity" },

  { WPS_TLV_TYPE_MESSAGE_COUNTER,                   "Message Counter" },

  { WPS_TLV_TYPE_PUBLIC_KEY_HASH,                   "Public Key Hash" },

  { WPS_TLV_TYPE_REKEY_KEY,                         "Rekey Key" },

  { WPS_TLV_TYPE_KEY_LIFETIME,                      "Key Lifetime" },

  { WPS_TLV_TYPE_PERMITTED_CONFIG_METHODS,          "Permitted Config Methods" },

  { WPS_TLV_TYPE_SELECTED_REGISTRAR_CONFIG_METHODS, "Selected Registrar Config Methods" },

  { WPS_TLV_TYPE_PRIMARY_DEVICE_TYPE,               "Primary Device Type" },

  { WPS_TLV_TYPE_SECONDARY_DEVICE_TYPE_LIST,        "Secondary Device Type List" },

  { WPS_TLV_TYPE_PORTABLE_DEVICE,                   "Portable Device" },

  { WPS_TLV_TYPE_AP_SETUP_LOCKED,                   "Ap Setup Locked" },

  { WPS_TLV_TYPE_APPLICATION_EXTENSION,             "Application Extension" },

  { WPS_TLV_TYPE_EAP_TYPE,                          "EAP Type" },

  { WPS_TLV_TYPE_INITIALIZATION_VECTOR,             "Initialization Vector" },

  { WPS_TLV_TYPE_KEY_PROVIDED_AUTOMATICALLY,        "Key Provided Automatically" },

  { WPS_TLV_TYPE_8021X_ENABLED,                     "8021x Enabled" },

  { WPS_TLV_TYPE_APPSESSIONKEY,                     "AppSessionKey" },

  { WPS_TLV_TYPE_WEPTRANSMITKEY,                    "WEPTransmitKey" },

  { WPS_TLV_TYPE_REQUESTED_DEV_TYPE,                "Requested Device Type" },

  { 0, NULL }

};

/* WFA Vendor Extension */

#define WPS_WFA_EXT_VERSION2              0x00

#define WPS_WFA_EXT_AUTHORIZEDMACS        0x01

#define WPS_WFA_EXT_NETWORK_KEY_SHAREABLE 0x02

#define WPS_WFA_EXT_REQUEST_TO_ENROLL     0x03

#define WPS_WFA_EXT_SETTINGS_DELAY_TIME   0x04

#define WPS_WFA_EXT_REG_CFG_METHODS       0x05

#define WPS_WFA_EXT_MULTI_AP              0x06

#define WPS_WFA_EXT_MULTI_AP_PROFILE      0x07

#define WPS_WFA_EXT_MULTI_AP_8021Q        0x08

static const value_string eapwps_wfa_ext_types[] = {

  { WPS_WFA_EXT_VERSION2,              "Version2" },

  { WPS_WFA_EXT_AUTHORIZEDMACS,        "AuthorizedMACs" },

  { WPS_WFA_EXT_NETWORK_KEY_SHAREABLE, "Network Key Shareable" },

  { WPS_WFA_EXT_REQUEST_TO_ENROLL,     "Request to Enroll" },

  { WPS_WFA_EXT_SETTINGS_DELAY_TIME,   "Settings Delay Time" },

  { WPS_WFA_EXT_REG_CFG_METHODS,       "Register configuration methods" },

  { WPS_WFA_EXT_MULTI_AP,              "Multi-AP Extension" },

  { WPS_WFA_EXT_MULTI_AP_PROFILE,      "Multi-AP Profile" },

  { WPS_WFA_EXT_MULTI_AP_8021Q,        "Multi-AP Profile 8021Q Settings" },

  { 0, NULL }

};

static const value_string wps_wfa_ext_multi_ap_profiles_vals[] = {

  { 0x01, "Multi-AP Profile-1" },

  { 0x02, "Multi-AP Profile-2" },

  { 0x03, "Multi-AP Profile-3" },

  { 0, NULL }

};

#define WFA_OUI             0x0050F204

static int proto_wps;

static int hf_eapwps_tlv_type;

static int hf_eapwps_tlv_len;

static int hf_eapwps_tlv_ap_channel;

static int hf_eapwps_tlv_association_state;

static int hf_eapwps_tlv_authentication_type;

static int hf_eapwps_tlv_authentication_type_flags;

static int hf_eapwps_tlv_authentication_type_flags_open;

static int hf_eapwps_tlv_authentication_type_flags_wpapsk;

static int hf_eapwps_tlv_authentication_type_flags_shared;

static int hf_eapwps_tlv_authentication_type_flags_wpa;

static int hf_eapwps_tlv_authentication_type_flags_wpa2;

static int hf_eapwps_tlv_authentication_type_flags_wpa2psk;

static int hf_eapwps_tlv_authenticator;

static int hf_eapwps_tlv_config_methods;

static int hf_eapwps_tlv_config_methods_usba;

static int hf_eapwps_tlv_config_methods_ethernet;

static int hf_eapwps_tlv_config_methods_label;

static int hf_eapwps_tlv_config_methods_display;

static int hf_eapwps_tlv_config_methods_phy_display;

static int hf_eapwps_tlv_config_methods_virt_display;

static int hf_eapwps_tlv_config_methods_nfcext;

static int hf_eapwps_tlv_config_methods_nfcint;

static int hf_eapwps_tlv_config_methods_nfcinf;

static int hf_eapwps_tlv_config_methods_pushbutton;

static int hf_eapwps_tlv_config_methods_phy_pushbutton;

static int hf_eapwps_tlv_config_methods_virt_pushbutton;

static int hf_eapwps_tlv_config_methods_keypad;

static int hf_eapwps_tlv_configuration_error;

static int hf_eapwps_tlv_confirmation_url4;

static int hf_eapwps_tlv_confirmation_url6;

static int hf_eapwps_tlv_connection_type;

static int hf_eapwps_tlv_connection_type_flags;

static int hf_eapwps_tlv_connection_type_flags_ess;

static int hf_eapwps_tlv_connection_type_flags_ibss;

static int hf_eapwps_tlv_credential;

static int hf_eapwps_tlv_device_name;

static int hf_eapwps_tlv_device_password_id;

static int hf_eapwps_tlv_e_hash1;

static int hf_eapwps_tlv_e_hash2;

static int hf_eapwps_tlv_e_snonce1;

static int hf_eapwps_tlv_e_snonce2;

static int hf_eapwps_tlv_encrypted_settings;

static int hf_eapwps_tlv_encryption_type;

static int hf_eapwps_tlv_encryption_type_flags;

static int hf_eapwps_tlv_encryption_type_flags_none;

static int hf_eapwps_tlv_encryption_type_flags_wep;

static int hf_eapwps_tlv_encryption_type_flags_tkip;

static int hf_eapwps_tlv_encryption_type_flags_aes;

static int hf_eapwps_tlv_enrollee_nonce;

static int hf_eapwps_tlv_feature_id;

static int hf_eapwps_tlv_identity;

static int hf_eapwps_tlv_identity_proof;

static int hf_eapwps_tlv_key_wrap_authenticator;

static int hf_eapwps_tlv_key_identifier;

static int hf_eapwps_tlv_mac_address;

static int hf_eapwps_tlv_manufacturer;

static int hf_eapwps_tlv_message_type;

static int hf_eapwps_tlv_model_name;

static int hf_eapwps_tlv_model_number;

static int hf_eapwps_tlv_network_index;

static int hf_eapwps_tlv_network_key;

static int hf_eapwps_tlv_network_key_index;

static int hf_eapwps_tlv_new_device_name;

static int hf_eapwps_tlv_new_password;

static int hf_eapwps_tlv_oob_device_password;

static int hf_eapwps_tlv_os_version;

static int hf_eapwps_tlv_power_level;

static int hf_eapwps_tlv_psk_current;

static int hf_eapwps_tlv_psk_max;

static int hf_eapwps_tlv_public_key;

static int hf_eapwps_tlv_radio_enabled;

static int hf_eapwps_tlv_reboot;

static int hf_eapwps_tlv_registrar_current;

static int hf_eapwps_tlv_registrar_established;

static int hf_eapwps_tlv_registrar_list;

static int hf_eapwps_tlv_registrar_max;

static int hf_eapwps_tlv_registrar_nonce;

static int hf_eapwps_tlv_request_type;

static int hf_eapwps_tlv_response_type;

static int hf_eapwps_tlv_rf_bands;

static int hf_eapwps_tlv_r_hash1;

static int hf_eapwps_tlv_r_hash2;

static int hf_eapwps_tlv_r_snonce1;

static int hf_eapwps_tlv_r_snonce2;

static int hf_eapwps_tlv_selected_registrar;

static int hf_eapwps_tlv_serial_number;

static int hf_eapwps_tlv_wifi_protected_setup_state;

static int hf_eapwps_tlv_ssid;

static int hf_eapwps_tlv_total_networks;

static int hf_eapwps_tlv_uuid_e;

static int hf_eapwps_tlv_uuid_r;

static int hf_eapwps_tlv_vendor_extension;

static int hf_eapwps_tlv_version;

static int hf_eapwps_tlv_x509_certificate_request;

static int hf_eapwps_tlv_x509_certificate;

static int hf_eapwps_tlv_eap_identity;

static int hf_eapwps_tlv_message_counter;

static int hf_eapwps_tlv_public_key_hash;

static int hf_eapwps_tlv_rekey_key;

static int hf_eapwps_tlv_key_lifetime;

static int hf_eapwps_tlv_permitted_config_methods;

static int hf_eapwps_tlv_permitted_config_methods_usba;

static int hf_eapwps_tlv_permitted_config_methods_ethernet;

static int hf_eapwps_tlv_permitted_config_methods_label;

static int hf_eapwps_tlv_permitted_config_methods_display;

static int hf_eapwps_tlv_permitted_config_methods_phy_display;

static int hf_eapwps_tlv_permitted_config_methods_virt_display;

static int hf_eapwps_tlv_permitted_config_methods_nfcext;

static int hf_eapwps_tlv_permitted_config_methods_nfcint;

static int hf_eapwps_tlv_permitted_config_methods_nfcinf;

static int hf_eapwps_tlv_permitted_config_methods_pushbutton;

static int hf_eapwps_tlv_permitted_config_methods_phy_pushbutton;

static int hf_eapwps_tlv_permitted_config_methods_virt_pushbutton;

static int hf_eapwps_tlv_permitted_config_methods_keypad;

static int hf_eapwps_tlv_selected_registrar_config_methods;

static int hf_eapwps_tlv_selected_registrar_config_methods_usba;

static int hf_eapwps_tlv_selected_registrar_config_methods_ethernet;

static int hf_eapwps_tlv_selected_registrar_config_methods_label;

static int hf_eapwps_tlv_selected_registrar_config_methods_display;

static int hf_eapwps_tlv_selected_registrar_config_methods_phy_display;

static int hf_eapwps_tlv_selected_registrar_config_methods_virt_display;

static int hf_eapwps_tlv_selected_registrar_config_methods_nfcext;

static int hf_eapwps_tlv_selected_registrar_config_methods_nfcint;

static int hf_eapwps_tlv_selected_registrar_config_methods_nfcinf;

static int hf_eapwps_tlv_selected_registrar_config_methods_pushbutton;

static int hf_eapwps_tlv_selected_registrar_config_methods_phy_pushbutton;

static int hf_eapwps_tlv_selected_registrar_config_methods_virt_pushbutton;

static int hf_eapwps_tlv_selected_registrar_config_methods_keypad;

static int hf_eapwps_tlv_primary_device_type;

static int hf_eapwps_tlv_primary_device_type_category;

#define WPS_DEVICE_TYPE_CATEGORY_MAX 11

static int hf_eapwps_tlv_primary_device_type_subcategory[WPS_DEVICE_TYPE_CATEGORY_MAX];

static int hf_eapwps_tlv_secondary_device_type_list;

static int hf_eapwps_tlv_portable_device;

static int hf_eapwps_tlv_ap_setup_locked;

static int hf_eapwps_tlv_application_extension;

static int hf_eapwps_tlv_eap_type;

static int hf_eapwps_tlv_initialization_vector;

static int hf_eapwps_tlv_key_provided_automatically;

static int hf_eapwps_tlv_8021x_enabled;

static int hf_eapwps_tlv_appsessionkey;

static int hf_eapwps_tlv_weptransmitkey;

static int hf_eapwps_tlv_requested_dev_type;

static int hf_eapwps_vendor_id;

static int hf_eapwps_wfa_ext_id;

static int hf_eapwps_wfa_ext_len;

static int hf_eapwps_wfa_ext_version2;

static int hf_eapwps_wfa_ext_authorizedmacs;

static int hf_eapwps_wfa_ext_network_key_shareable;

static int hf_eapwps_wfa_ext_request_to_enroll;

static int hf_eapwps_wfa_ext_settings_delay_time;

static int hf_multi_ap_backhaul_sta;

static int hf_multi_ap_backhaul_bss;

static int hf_multi_ap_fronthaul_bss;

static int hf_multi_ap_teardown_bsses;

static int hf_multi_ap_profile1_backhaul_sta_assoc_disallowed;

static int hf_multi_ap_profile2_backhaul_sta_assoc_disallowed;

static int hf_multi_ap_reserved;

static int hf_multi_ap_flags;

static int hf_multi_ap_profiles;

static int hf_multi_ap_8021q;

static int ett_wps_tlv;

static int ett_eap_wps_ap_channel;

static int ett_eap_wps_association_state;

static int ett_eap_wps_authentication_type;

static int ett_eap_wps_authentication_type_flags;

static int ett_eap_wps_authenticator;

static int ett_eap_wps_config_methods;

static int ett_eap_wps_configuration_error;

static int ett_eap_wps_confirmation_url4;

static int ett_eap_wps_confirmation_url6;

static int ett_eap_wps_connection_type;

static int ett_eap_wps_connection_type_flags;

static int ett_eap_wps_credential;

static int ett_eap_wps_device_name;

static int ett_eap_wps_device_password_id;

static int ett_eap_wps_e_hash1;

static int ett_eap_wps_e_hash2;

static int ett_eap_wps_e_snonce1;

static int ett_eap_wps_e_snonce2;

static int ett_eap_wps_encrypted_settings;

static int ett_eap_wps_encryption_type;

static int ett_eap_wps_encryption_type_flags;

static int ett_eap_wps_enrollee_nonce;

static int ett_eap_wps_feature_id;

static int ett_eap_wps_identity;

static int ett_eap_wps_identity_proof;

static int ett_eap_wps_key_wrap_authenticator;

static int ett_eap_wps_key_identifier;

static int ett_eap_wps_mac_address;

static int ett_eap_wps_manufacturer;

static int ett_eap_wps_message_type;

static int ett_eap_wps_model_name;

static int ett_eap_wps_model_number;

static int ett_eap_wps_network_index;

static int ett_eap_wps_network_key;

static int ett_eap_wps_network_key_index;

static int ett_eap_wps_new_device_name;

static int ett_eap_wps_new_password;

static int ett_eap_wps_oob_device_password;

static int ett_eap_wps_os_version;

static int ett_eap_wps_power_level;

static int ett_eap_wps_psk_current;

static int ett_eap_wps_psk_max;

static int ett_eap_wps_public_key;

static int ett_eap_wps_radio_enabled;

static int ett_eap_wps_reboot;

static int ett_eap_wps_registrar_current;

static int ett_eap_wps_registrar_established;

static int ett_eap_wps_registrar_list;

static int ett_eap_wps_registrar_max;

static int ett_eap_wps_registrar_nonce;

static int ett_eap_wps_request_type;

static int ett_eap_wps_response_type;

static int ett_eap_wps_rf_bands;

static int ett_eap_wps_r_hash1;

static int ett_eap_wps_r_hash2;

static int ett_eap_wps_r_snonce1;

static int ett_eap_wps_r_snonce2;

static int ett_eap_wps_selected_registrar;

static int ett_eap_wps_serial_number;

static int ett_eap_wps_wifi_protected_setup_state;

static int ett_eap_wps_ssid;

static int ett_eap_wps_total_networks;

static int ett_eap_wps_uuid_e;

static int ett_eap_wps_uuid_r;

static int ett_eap_wps_vendor_extension;

static int ett_eap_wps_version;

static int ett_eap_wps_x509_certificate_request;

static int ett_eap_wps_x509_certificate;

static int ett_eap_wps_eap_identity;

static int ett_eap_wps_message_counter;

static int ett_eap_wps_public_key_hash;

static int ett_eap_wps_rekey_key;

static int ett_eap_wps_key_lifetime;

static int ett_eap_wps_permitted_config_methods;

static int ett_eap_wps_selected_registrar_config_methods;

static int ett_eap_wps_primary_device_type;

static int ett_eap_wps_secondary_device_type_list;

static int ett_eap_wps_portable_device;

static int ett_eap_wps_ap_setup_locked;

static int ett_eap_wps_application_extension;

static int ett_eap_wps_eap_type;

static int ett_eap_wps_initialization_vector;

static int ett_eap_wps_key_provided_automatically;

static int ett_eap_wps_8021x_enabled;

static int ett_eap_wps_appsessionkey;

static int ett_eap_wps_weptransmitkey;

static int ett_wps_wfa_ext;

static int ett_multi_ap_flags;

static const value_string eapwps_tlv_association_state_vals[] = {

  { 0, "Not associated" },

  { 1, "Connection success" },

  { 2, "Configuration Failure" },

  { 3, "Association Failure" },

  { 4, "IP Failure" },

  { 0, NULL }

};

#define EAPWPS_AUTHTYPE_OPEN    0x01

#define EAPWPS_AUTHTYPE_WPAPSK  0x02

#define EAPWPS_AUTHTYPE_SHARED  0x04

#define EAPWPS_AUTHTYPE_WPA     0x08

#define EAPWPS_AUTHTYPE_WPA2    0x10

#define EAPWPS_AUTHTYPE_WPA2PSK 0x20

static const value_string eapwps_tlv_authentication_type_vals[] = {

  { EAPWPS_AUTHTYPE_OPEN,    "Open" },

  { EAPWPS_AUTHTYPE_WPAPSK,  "WPA PSK" },

  { EAPWPS_AUTHTYPE_SHARED,  "Shared" },

  { EAPWPS_AUTHTYPE_WPA,     "WPA" },

  { EAPWPS_AUTHTYPE_WPA2,    "WPA2" },

  { EAPWPS_AUTHTYPE_WPA2PSK, "WPA2 PSK" },

  { 0, NULL }

};

#define EAPWPS_CONFMETH_USBA             0x0001

#define EAPWPS_CONFMETH_ETHERNET         0x0002

#define EAPWPS_CONFMETH_LABEL            0x0004

#define EAPWPS_CONFMETH_DISPLAY          0x0008

#define EAPWPS_CONFMETH_VIRT_DISPLAY     0x2000

#define EAPWPS_CONFMETH_PHY_DISPLAY      0x4000

#define EAPWPS_CONFMETH_NFCEXT           0x0010

#define EAPWPS_CONFMETH_NFCINT           0x0020

#define EAPWPS_CONFMETH_NFCINF           0x0040

#define EAPWPS_CONFMETH_PUSHBUTTON       0x0080

#define EAPWPS_CONFMETH_VIRT_PUSHBUTTON  0x0200

#define EAPWPS_CONFMETH_PHY_PUSHBUTTON   0x0400

#define EAPWPS_CONFMETH_KEYPAD           0x0100

static const value_string eapwps_tlv_configuration_error_vals[] = {

  {  0, "No Error" },

  {  1, "OOB Interface Read Error" },

  {  2, "Decryption CRC Failure" },

  {  3, "2.4 channel not supported" },

  {  4, "5.0 channel not supported" },

  {  5, "Signal too weak" },

  {  6, "Network auth failure" },

  {  7, "Network association failure" },

  {  8, "No DHCP response" },

  {  9, "Failed DHCP config" },

  { 10, "IP address conflict" },

  { 11, "Couldn't connect to Registrar" },

  { 12, "Multiple PBC sessions detected" },

  { 13, "Rogue activity suspected" },

  { 14, "Device busy" },

  { 15, "Setup locked" },

  { 16, "Message Timeout" },

  { 17, "Registration Session Timeout" },

  { 18, "Device Password Auth Failure" },

  { 0, NULL }

};

#define EAPWPS_CONNTYPE_ESS  0x1

#define EAPWPS_CONNTYPE_IBSS 0x2

static const value_string eapwps_tlv_connection_type_vals[] = {

  { EAPWPS_CONNTYPE_ESS,  "ESS" },

  { EAPWPS_CONNTYPE_IBSS, "IBSS" },

  { 0, NULL}

};

#define EAPWPS_DEVPW_PIN 0x0

#define EAPWPS_DEVPW_USER 0x1

#define EAPWPS_DEVPW_MACHINE 0x2

#define EAPWPS_DEVPW_REKEY 0x3

#define EAPWPS_DEVPW_PUSHBUTTON 0x4

#define EAPWPS_DEVPW_REGISTRAR 0x5

static const value_string eapwps_tlv_device_password_id_vals[] = {

  { EAPWPS_DEVPW_PIN,        "PIN (default)" },

  { EAPWPS_DEVPW_USER,       "User specified" },

  { EAPWPS_DEVPW_MACHINE,    "Machine specified" },

  { EAPWPS_DEVPW_REKEY,      "Rekey" },

  { EAPWPS_DEVPW_PUSHBUTTON, "PushButton" },

  { EAPWPS_DEVPW_REGISTRAR,  "Registrar specified" },

  { 0, NULL }

};

#define EAPWPS_ENCTYPE_NONE 0x1

#define EAPWPS_ENCTYPE_WEP  0x2

#define EAPWPS_ENCTYPE_TKIP 0x4

#define EAPWPS_ENCTYPE_AES  0x8

static const value_string eapwps_tlv_encryption_type_vals[] = {

  { EAPWPS_ENCTYPE_NONE, "none" },

  { EAPWPS_ENCTYPE_WEP,  "WEP" },

  { EAPWPS_ENCTYPE_TKIP, "TKIP" },

  { EAPWPS_ENCTYPE_AES,  "AES" },

  { 0, NULL }

};

static const value_string eapwps_tlv_message_type_vals[] = {

  { 0x01, "Beacon" },

  { 0x02, "Probe Request" },

  { 0x03, "Probe Response" },

  { 0x04, "M1" },

  { 0x05, "M2" },

  { 0x06, "M2D" },

  { 0x07, "M3" },

  { 0x08, "M4" },

  { 0x09, "M5" },

  { 0x0A, "M6" },

  { 0x0B, "M7" },

  { 0x0C, "M8" },

  { 0x0D, "WSC_ACK" },

  { 0x0E, "WSC_NACK" },

  { 0x0F, "WSC_DONE" },

  { 0, NULL }

};

static const value_string eapwps_tlv_request_type_vals[] = {

  { 0x00, "Enrollee, Info only" },

  { 0x01, "Enrollee, open 802.1X" },

  { 0x02, "Registrar" },

  { 0x03, "WLAN Manager Registrar" },

  { 0, NULL }

};

static const value_string eapwps_tlv_response_type_vals[] = {

  { 0x00, "Enrollee, Info only" },

  { 0x01, "Enrollee, open 802.1X" },

  { 0x02, "Registrar" },

  { 0x03, "AP" },

  { 0, NULL }

};

static const value_string eapwps_tlv_rf_bands_vals[] = {

  { 0x01, "2.4 GHz" },

  { 0x02, "5 GHz" },

  { 0x03, "2.4 and 5 GHz" },

  { 0, NULL }

};

static const value_string eapwps_tlv_wifi_protected_setup_state[] = {

  { 0x00, "Reserved" },

  { 0x01, "Not configured" },

  { 0x02, "Configured" },

  { 0, NULL }

};

static const value_string eapwps_tlv_primary_device_type_category[] = {

  { 0x01, "Computer" },

  { 0x02, "Input Device" },

  { 0x03, "Printers, Scanners, Faxes and Copiers" },

  { 0x04, "Camera" },

  { 0x05, "Storage" },

  { 0x06, "Network Infrastructure" },

  { 0x07, "Displays" },

  { 0x08, "Multimedia Devices" },

  { 0x09, "Gaming Devices" },

  { 0x0A, "Telephone" },

  { 0x0B, "Audio Devices" },

  { 0, NULL }

};

static const value_string eapwps_tlv_computer_subcategory[] = {

  { 0x01, "PC" },

  { 0x02, "Server" },

  { 0x03, "Media Center" },

  { 0x04, "Ultra-mobile PC" },

  { 0x05, "Notebook" },

  { 0x06, "Desktop" },

  { 0x07, "MID (Mobile Internet Device)" },

  { 0x08, "Netbook" },

  { 0, NULL }

};

static const value_string eapwps_tlv_input_device_subcategory[] = {

  { 0x01, "Keyboard" },

  { 0x02, "Mouse" },

  { 0x03, "Joystick" },

  { 0x04, "Trackball" },

  { 0x05, "Gaming controller" },

  { 0x06, "Remote" },

  { 0x07, "Touchscreen" },

  { 0x08, "Biometric reader" },

  { 0x09, "Barcode reader" },

  { 0, NULL }

};

static const value_string eapwps_tlv_printers_scanners_faxes_copiers_subcategory[] = {

  { 0x01, "Printer or Print Server" },

  { 0x02, "Scanner" },

  { 0x03, "Fax" },

  { 0x04, "Copier" },

  { 0x05, "All-in-one (Printer, Scanner, Fax, Copier)" },

  { 0, NULL }

};

static const value_string eapwps_tlv_camera_subcategory[] = {

  { 0x01, "Digital Still Camera" },

  { 0x02, "Video Camera" },

  { 0x03, "Web Camera" },

  { 0x04, "Security Camera" },

  { 0, NULL }

};

static const value_string eapwps_tlv_storage_subcategory[] = {

  { 0x01, "NAS" },

  { 0, NULL }

};

static const value_string eapwps_tlv_network_infrastructure_subcategory[] = {

  { 0x01, "AP" },

  { 0x02, "Router" },

  { 0x03, "Switch" },

  { 0x04, "Gateway" },

  { 0x05, "Bridge" },

  { 0, NULL }

};

static const value_string eapwps_tlv_displays_subcategory[] = {

  { 0x01, "Television" },

  { 0x02, "Electronic Picture Frame" },

  { 0x03, "Projector" },

  { 0x04, "Monitor" },

  { 0, NULL }

};

static const value_string eapwps_tlv_multimedia_devices_subcategory[] = {

  { 0x01, "DAR" },

  { 0x02, "PVR" },

  { 0x03, "MCX" },

  { 0x04, "Set-top box" },

  { 0x05, "Media Server/Media Adapter/Media Extender" },

  { 0x06, "Portable Video Player" },

  { 0, NULL }

};

static const value_string eapwps_tlv_gaming_devices_subcategory[] = {

  { 0x01, "Xbox" },

  { 0x02, "Xbox360" },

  { 0x03, "Playstation" },

  { 0x04, "Game Console/Game Console Adapter" },

  { 0x05, "Portable Gaming Device" },

  { 0, NULL }

};

static const value_string eapwps_tlv_telephone_subcategory[] = {

  { 0x01, "Windows Mobile" },

  { 0x02, "Phone - single mode" },

  { 0x03, "Phone - dual mode" },

  { 0x04, "Smartphone - single mode" },

  { 0x05, "Smartphone - dual mode" },

  { 0, NULL }

};

static const value_string eapwps_tlv_audio_devices_subcategory[] = {

  { 0x01, "Audio tuner/receiver" },

  { 0x02, "Speakers" },

  { 0x03, "Portable Music Player (PMP)" },

  { 0x04, "Headset (headphones + microphone)" },

  { 0x05, "Headphones" },

  { 0x06, "Microphone" },

  { 0x07, "Home Theater Systems" },

  { 0, NULL }

};

static void

add_wps_wfa_ext(uint8_t id, proto_tree *tree, packet_info* pinfo, tvbuff_t *tvb,

                int offset, int size)

{

  proto_item *item;

  proto_tree *elem;

  uint8_t     val8;

  static int * const flags[] = {

    &hf_multi_ap_backhaul_sta,

    &hf_multi_ap_backhaul_bss,

    &hf_multi_ap_fronthaul_bss,

    &hf_multi_ap_teardown_bsses,

    &hf_multi_ap_profile1_backhaul_sta_assoc_disallowed,

    &hf_multi_ap_profile2_backhaul_sta_assoc_disallowed,

    &hf_multi_ap_reserved,

    NULL

  };

  elem = proto_tree_add_subtree(tree, tvb, offset - 2, 2 + size, ett_wps_wfa_ext, &item,

                             val_to_str(pinfo->pool, id, eapwps_wfa_ext_types, "Unknown (%u)"));

  proto_tree_add_item(elem, hf_eapwps_wfa_ext_id,  tvb, offset - 2, 1, ENC_BIG_ENDIAN);

  proto_tree_add_item(elem, hf_eapwps_wfa_ext_len, tvb, offset - 1, 1, ENC_BIG_ENDIAN);

  switch (id) {

  case WPS_WFA_EXT_VERSION2:

    val8 = tvb_get_uint8(tvb, offset);

    proto_item_append_text(item, ": %d.%d", val8 >> 4, val8 & 0x0f);

    proto_tree_add_item(elem, hf_eapwps_wfa_ext_version2, tvb,

                        offset, 1, ENC_BIG_ENDIAN);

    break;

  case WPS_WFA_EXT_AUTHORIZEDMACS:

    proto_tree_add_item(elem, hf_eapwps_wfa_ext_authorizedmacs,

                        tvb, offset, size, ENC_NA);

    break;

  case WPS_WFA_EXT_NETWORK_KEY_SHAREABLE:

    val8 = tvb_get_uint8(tvb, offset);

    proto_item_append_text(item, ": %s", val8 ? "TRUE" : "FALSE");

    proto_tree_add_item(elem, hf_eapwps_wfa_ext_network_key_shareable,

                        tvb, offset, 1, ENC_BIG_ENDIAN);

    break;

  case WPS_WFA_EXT_REQUEST_TO_ENROLL:

    val8 = tvb_get_uint8(tvb, offset);

    proto_item_append_text(item, ": %s", val8 ? "TRUE" : "FALSE");

    proto_tree_add_item(elem, hf_eapwps_wfa_ext_request_to_enroll,

                        tvb, offset, 1, ENC_BIG_ENDIAN);

    break;

  case WPS_WFA_EXT_SETTINGS_DELAY_TIME:

    val8 = tvb_get_uint8(tvb, offset);

    proto_item_append_text(item, ": %d second(s)", val8);

    proto_tree_add_item(elem, hf_eapwps_wfa_ext_settings_delay_time,

                        tvb, offset, 1, ENC_BIG_ENDIAN);

    break;

  case WPS_WFA_EXT_MULTI_AP:

    proto_tree_add_bitmask(elem, tvb, offset, hf_multi_ap_flags, ett_multi_ap_flags,

                           flags, ENC_NA);

    offset++;

    break;

  case WPS_WFA_EXT_MULTI_AP_PROFILE:

    proto_tree_add_item(elem, hf_multi_ap_profiles, tvb, offset, 1,

                                                    ENC_BIG_ENDIAN);

    break;

  case WPS_WFA_EXT_MULTI_AP_8021Q:

    proto_tree_add_item(elem, hf_multi_ap_8021q, tvb, offset, 2,

                                                ENC_LITTLE_ENDIAN);

    break;

  default:

    break;

  }

}

static void

dissect_wps_wfa_ext(proto_tree *tree, packet_info* pinfo, tvbuff_t *tvb,

                    int offset, int size)

{

  int    pos = offset;

  int    end = offset + size;

  uint8_t id, len;

  while (pos + 2 < end) {

    id = tvb_get_uint8(tvb, pos);

    len = tvb_get_uint8(tvb, pos + 1);

    if ((pos + 2 + len) > end)

      break;

    pos += 2;

    add_wps_wfa_ext(id, tree, pinfo, tvb, pos, len);

    pos += len;

  }

}

static int

dissect_wps_wfa_ext_via_dt(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

        void *data _U_)

{

  int size = tvb_reported_length(tvb);

  dissect_wps_wfa_ext(tree, pinfo, tvb, 0, size);

  return size;

}

static void

dissect_wps_vendor_ext(proto_tree *tree, packet_info* pinfo, tvbuff_t *tvb,

                       int offset, int size)

{

  uint32_t vendor_id;

  if (size < 3)

    return;

  vendor_id = tvb_get_ntoh24(tvb, offset);

  proto_tree_add_item(tree, hf_eapwps_vendor_id, tvb, offset, 3, ENC_BIG_ENDIAN);

  if (vendor_id == VENDOR_WIFI_ALLIANCE)

    dissect_wps_wfa_ext(tree, pinfo, tvb, offset + 3, size - 3);

}

void

dissect_wps_tlvs(proto_tree *eap_tree, tvbuff_t *tvb, int offset,

                int size, packet_info *pinfo, bool add_details)

{

  static const char *fmt_warn_too_long = "Value too long (max. %d)";

  static const char *fmt_length_warn   = "Value length not %d";

  unsigned   tlv_len;

  uint16_t tlv_type;

  proto_item *tlv_item = NULL; /* the root item */

  proto_tree *tlv_root = NULL;

  proto_item *tmp_item = NULL;

  int hfindex = -1;

  while(size > 0) {

    /* incomplete tlv-entry case */

    if (size < 4) {

      if ((tmp_item != NULL) && add_details)

        expert_add_info(pinfo, tmp_item, &ei_eapwps_packet_too_short);

      break;

    }

    tmp_item = NULL;

    tlv_type = tvb_get_ntohs(tvb, offset);

    tlv_len  = tvb_get_ntohs(tvb, offset+2);

    /* TOP Node for each TLV-item */

    tlv_root = proto_tree_add_subtree_format(eap_tree, tvb, offset, tlv_len+4,

                        ett_wps_tlv, &tlv_item, "Unknown Type (0x%04x)", tlv_type);

    /* analog to Tagged parameters in 802.11 */

    proto_tree_add_item(tlv_root, hf_eapwps_tlv_type, tvb, offset,   2, ENC_BIG_ENDIAN);

    proto_tree_add_item(tlv_root, hf_eapwps_tlv_len,  tvb, offset+2, 2, ENC_BIG_ENDIAN);

    switch(tlv_type) {

    case WPS_TLV_TYPE_AP_CHANNEL:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_ap_channel, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      hfindex = hf_eapwps_tlv_ap_channel;

      break;

    case WPS_TLV_TYPE_ASSOCIATION_STATE:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_association_state, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      hfindex = hf_eapwps_tlv_association_state;

      break;

    case WPS_TLV_TYPE_AUTHENTICATION_TYPE:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      hfindex = hf_eapwps_tlv_authentication_type;

      break;

    case WPS_TLV_TYPE_AUTHENTICATION_TYPE_FLAGS:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      hfindex = hf_eapwps_tlv_authentication_type_flags;

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags_open,    tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags_wpapsk,  tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags_shared,  tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags_wpa,     tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags_wpa2,    tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_authentication_type_flags_wpa2psk, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      break;

    case WPS_TLV_TYPE_AUTHENTICATOR:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_authenticator, tvb, offset+4, 8, ENC_NA);

      hfindex = hf_eapwps_tlv_authenticator;

      proto_item_append_text(tmp_item, " (1st 64 bits of HMAC)");

      break;

    case WPS_TLV_TYPE_CONFIG_METHODS:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      hfindex = hf_eapwps_tlv_config_methods;

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_usba,            tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_ethernet,        tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_label,           tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_display,         tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_virt_display,    tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_phy_display,     tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_nfcext,          tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_nfcint,          tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_nfcinf,          tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_pushbutton,      tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_virt_pushbutton, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_phy_pushbutton,  tvb, offset+4, 2, ENC_BIG_ENDIAN);

      proto_tree_add_item(tlv_root, hf_eapwps_tlv_config_methods_keypad,          tvb, offset+4, 2, ENC_BIG_ENDIAN);

      break;

    case WPS_TLV_TYPE_CONFIGURATION_ERROR:

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_configuration_error, tvb, offset+4, 2, ENC_BIG_ENDIAN);

      hfindex = hf_eapwps_tlv_configuration_error;

      break;

    case WPS_TLV_TYPE_CONFIRMATION_URL4: /* max len is 64 */

      tmp_item = proto_tree_add_item(tlv_root, hf_eapwps_tlv_confirmation_url4, tvb, offset+4, tlv_len, ENC_ASCII);

      hfindex = hf_eapwps_tlv_confirmation_url4;

      if ((tlv_len > 64) && add_details)

        expert_add_info_format(pinfo, tmp_item, &ei_eapwps_fmt_warn_too_long, fmt_warn_too_long, tlv_len);