SAE: Reject invalid rejected group report in SAE commit explicitly (AP)

Previously, this case was ignored silently in AP mode. While that could
be a reasonable approach for an unexpected condition, it would be fine
to reject this case explicitly as well. This makes it somewhat easier to
test unexpected SAE H2E vs. looping behavior.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

diff --git a/src/ap/ieee802_11.c b/src/ap/ieee802_11.c
index c10ae12ee6bf38d4d3fda2427c47df487301d5b1..38199e048a32c2ea808b683445702df28300a7b5 100644 (file)
--- a/src/ap/ieee802_11.c
+++ b/src/ap/ieee802_11.c
@@ -1282,7 +1282,7 @@ static void handle_auth_sae(struct hostapd_data *hapd, struct sta_info *sta,
                    check_sae_rejected_groups(
                            hapd, sta->sae->tmp->peer_rejected_groups)) {
                        resp = WLAN_STATUS_UNSPECIFIED_FAILURE;
-                       goto remove_sta;
+                       goto reply;
                }
 
                if (!token && use_sae_anti_clogging(hapd) && !allow_reuse) {