]> git.ipfire.org Git - thirdparty/hostap.git/commit
DPP: Recognize own PKEX Exchange Request if it ends up being received
authorJouni Malinen <quic_jouni@quicinc.com>
Thu, 21 Jul 2022 17:30:07 +0000 (20:30 +0300)
committerJouni Malinen <j@w1.fi>
Thu, 21 Jul 2022 17:30:07 +0000 (20:30 +0300)
commite9137950fa8d4cf695c467b52210214980e4bbf6
tree417bd799a59b26c12ba217f7ad001c6897d7e422
parent6929564467aae3b45313dd54253050b9b586c19a
DPP: Recognize own PKEX Exchange Request if it ends up being received

It is possible for a Controller to receive a copy of its own PKEX
Exchange Request in the case where the Controller is initiating a PKEX
exchange through a Relay. The Configurator role in the device would have
a matching PKEX code in that case and the device might reply as a PKEX
responder which would result in going through the exchange with the
Controller device itself. That is clearly not desired, so recognize this
special case by checking whether the Encrypted Key attribute value
matches a pending locally generated one when processing a received PKEX
Exchange Request.

Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
src/ap/dpp_hostapd.c
src/common/dpp.h
src/common/dpp_pkex.c
src/common/dpp_tcp.c
wpa_supplicant/dpp_supplicant.c