]> git.ipfire.org Git - thirdparty/hostap.git/commit
FT: Do not allow multiple Reassociation Response frames
authorJouni Malinen <j@w1.fi>
Fri, 22 Sep 2017 09:06:37 +0000 (12:06 +0300)
committerJouni Malinen <j@w1.fi>
Sun, 15 Oct 2017 23:03:47 +0000 (02:03 +0300)
commit2a9c5217b18be9462a5329626e2f95cc7dd8d4f1
tree4b92825860b3fa822a7888bcec3e5f5992ceafdc
parentadae51f8b94d63313a9a922b95a402ad3f182320
FT: Do not allow multiple Reassociation Response frames

The driver is expected to not report a second association event without
the station having explicitly request a new association. As such, this
case should not be reachable. However, since reconfiguring the same
pairwise or group keys to the driver could result in nonce reuse issues,
be extra careful here and do an additional state check to avoid this
even if the local driver ends up somehow accepting an unexpected
Reassociation Response frame.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/rsn_supp/wpa.c
src/rsn_supp/wpa_ft.c
src/rsn_supp/wpa_i.h