Previously, missing CCMP protection on Robust Management frames was
reported based on the STA having indicated MFPC=1. That is not accurate
since the AP/BSS may have MFPC=0. Report this failure only if both the
AP and STA have indicated MFPC=1, i.e., when PMF has been negotiated for
the association.
Signed-off-by: Jouni Malinen <j@w1.fi>
if (sta == NULL)
return 0;
- if ((sta->rsn_capab & WPA_CAPABILITY_MFPC) &&
+ if ((bss->rsn_capab & WPA_CAPABILITY_MFPC) &&
+ (sta->rsn_capab & WPA_CAPABILITY_MFPC) &&
(sta->state == STATE3 ||
WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_ACTION)) {
add_note(wt, MSG_INFO, "Robust individually-addressed "