]> git.ipfire.org Git - thirdparty/hostap.git/commit
Fix EAPOL reauth after FT protocol or offloaded PMKSA cache use
authorJouni Malinen <jouni@qca.qualcomm.com>
Thu, 19 Nov 2015 19:01:45 +0000 (21:01 +0200)
committerJouni Malinen <j@w1.fi>
Thu, 19 Nov 2015 19:16:18 +0000 (21:16 +0200)
commit25eb7fcbb41c2175b9c558abdfc6261649eecc56
tree22142cb8c941172b848111583bbd2f8004690e08
parentf68d491b0a25b6fc69be24b593975fbd0fe8bac9
Fix EAPOL reauth after FT protocol or offloaded PMKSA cache use

The EAP peer state machine moved from IDLE to FAILURE state when the
EAPOL Authenticator triggered reauthentication with an
EAP-Request/Identity in a case where the associated started with FT
protocol or offloaded PMKSA cache use (4-way handshake using a
previously acquired PMK). This happened due to the altSuccess=TRUE
setting being left behind and not cleared when processing the restart of
authentication. Fix this by clearing altAccept and eapSuccess when going
through SUPP_PAE RESTART state.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/eapol_supp/eapol_supp_sm.c