]> git.ipfire.org Git - thirdparty/hostap.git/commit
Disconnect STA on continuous EAP reauth without 4-way handshake completion
authorJouni Malinen <quic_jouni@quicinc.com>
Wed, 6 Apr 2022 12:26:36 +0000 (15:26 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 6 Apr 2022 12:28:49 +0000 (15:28 +0300)
commit95fd54b862c6510a2d628add4601a1999f08e8ff
treeab27f89cd53d137118e04da24572e247a16c1ce3
parent9e11e746fa6b4b50cf1fe3ddb359567c00f8f269
Disconnect STA on continuous EAP reauth without 4-way handshake completion

It could have been possible to get into an endless loop of retried EAP
authentication followed by failing or not completed 4-way handshake if
there was a different interpretation of EAP authentication result
(success on AP, failure on STA). Avoid this by limiting the number of
consecutive EAPOL reauth attempts without completing the following 4-way
handshake.

Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
src/ap/wpa_auth.c
src/ap/wpa_auth_i.h