]> git.ipfire.org Git - thirdparty/hostap.git/commit
Prevent reinstallation of an already in-use group key
authorMathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
Wed, 12 Jul 2017 14:03:24 +0000 (16:03 +0200)
committerJouni Malinen <j@w1.fi>
Sun, 15 Oct 2017 23:03:47 +0000 (02:03 +0300)
commitcb5132bb35698cc0c743e34fe0e845dfc4c3e410
tree1c410def0d2ce4b1e5cac1b31d7533296d5506fb
parent0e3bd7ac684a2289aa613347e2f3ad54ad6a9449
Prevent reinstallation of an already in-use group key

Track the current GTK and IGTK that is in use and when receiving a
(possibly retransmitted) Group Message 1 or WNM-Sleep Mode Response, do
not install the given key if it is already in use. This prevents an
attacker from trying to trick the client into resetting or lowering the
sequence counter associated to the group key.

Signed-off-by: Mathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
src/common/wpa_common.h
src/rsn_supp/wpa.c
src/rsn_supp/wpa_i.h