WPA auth: Disconnect STA if MSK cannot be fetched

Previously, it was possible for some corner cases to leave the WPA
authenticator state machine running if PMK could not be derived. Change
this to forcefully disconnect the STA to get more consistent behavior
and faster notification of the error.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>

diff --git a/src/ap/wpa_auth.c b/src/ap/wpa_auth.c
index f13f141f8f7e221793579388fd395245a9e13880..668cb429dd245915afaf443544a5dc700c3228e1 100644 (file)
--- a/src/ap/wpa_auth.c
+++ b/src/ap/wpa_auth.c
@@ -1881,6 +1881,8 @@ SM_STATE(WPA_PTK, INITPMK)
        } else {
                wpa_printf(MSG_DEBUG, "WPA: Could not get PMK, get_msk: %p",
                           sm->wpa_auth->cb.get_msk);
+               sm->Disconnect = TRUE;
+               return;
        }
        os_memset(msk, 0, sizeof(msk));