EAP-TEAP server: Require Intermediate-Result TLV even with Result TLV

It is not sufficient for the peer to include only the Result TLV if the
server included both the Intermediate-Result TLV and Result TLV.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/src/eap_server/eap_server_teap.c b/src/eap_server/eap_server_teap.c
index dd8ffd3dbba746938ba5b127ec96034629e6d996..ac2339aa43abef68d7f4a02c86c935702731f753 100644 (file)
--- a/src/eap_server/eap_server_teap.c
+++ b/src/eap_server/eap_server_teap.c
@@ -1446,7 +1446,7 @@ static void eap_teap_process_phase2_tlvs(struct eap_sm *sm,
                        return;
                }
 
-               if (!data->final_result &&
+               if (sm->eap_teap_auth != 1 &&
                    tlv.iresult != TEAP_STATUS_SUCCESS) {
                        wpa_printf(MSG_DEBUG,
                                   "EAP-TEAP: Crypto-Binding TLV without intermediate Success Result");