]> git.ipfire.org Git - thirdparty/hostap.git/commit
nl80211: Do not try to add too large NL80211_ATTR_PMK for set/del PMKSA
authorJouni Malinen <jouni@codeaurora.org>
Sat, 10 Feb 2018 10:16:53 +0000 (12:16 +0200)
committerJouni Malinen <j@w1.fi>
Sat, 10 Feb 2018 10:16:53 +0000 (12:16 +0200)
commit0887215d941def91cc100c3d1f087fb9650b64c8
treea28ea21a59d914ccec177f266431b8b4f3adbbe0
parente7f6e6ee1ba3c700c379f11b1d63d62ec6f1c430
nl80211: Do not try to add too large NL80211_ATTR_PMK for set/del PMKSA

The current cfg80211 limit for the maximum NL80211_ATTR_PMK length is
48, so anything larger than that will result in the operation completely
failing. Since the PMKSA entries can be used without the PMK for most
purposes (the main use case for PMK currently is offloaded FILS
authentication), try to go ahead by configuring only the PMKID for the
case where 64-octet PMK is needed (which is currently limited to only
DPP with NIST P-521 and brainpoolP512r1 curves). This can fix DPP
connections with drivers that expect to get the PMKID through this
interface while still leaving the actual 4-way handshake for user space.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/drivers/driver_nl80211.c