EAP-TEAP peer: Fix protected indication of inner EAP method failure

Need to leave EAP-TEAP methodState == MAY_CONT when marking decision =
FAIL based on inner EAP method failure since this message will be
followed by protected failure indication.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/src/eap_peer/eap_teap.c b/src/eap_peer/eap_teap.c
index 1e351f3653686106c059ff1354bad7af947b6670..e2416f180c5a3ac8358486361b77c9b3c3231462 100644 (file)
--- a/src/eap_peer/eap_teap.c
+++ b/src/eap_peer/eap_teap.c
@@ -458,7 +458,8 @@ static int eap_teap_phase2_request(struct eap_sm *sm,
        if (!(*resp) ||
            (iret.methodState == METHOD_DONE &&
             iret.decision == DECISION_FAIL)) {
-               ret->methodState = METHOD_DONE;
+               /* Wait for protected indication of failure */
+               ret->methodState = METHOD_MAY_CONT;
                ret->decision = DECISION_FAIL;
        } else if ((iret.methodState == METHOD_DONE ||
                    iret.methodState == METHOD_MAY_CONT) &&