Clear PMK explicitly even without FT support in AP build

Unlike the other keys that were cleared here, the PMK is available
without FT support built into hostapd and as such, should be cleared in
all cases.

Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>

diff --git a/src/ap/wpa_auth.c b/src/ap/wpa_auth.c
index 73822983bfdcd84cdd4f7830a4dbd604b0cf66a7..6c58c2113d5dd49054dd8535502aa3977e7221d2 100644 (file)
--- a/src/ap/wpa_auth.c
+++ b/src/ap/wpa_auth.c
@@ -1814,9 +1814,9 @@ int wpa_auth_sm_event(struct wpa_state_machine *sm, enum wpa_event event)
        case WPA_DEAUTH:
        case WPA_DISASSOC:
                sm->DeauthenticationRequest = true;
-#ifdef CONFIG_IEEE80211R_AP
                os_memset(sm->PMK, 0, sizeof(sm->PMK));
                sm->pmk_len = 0;
+#ifdef CONFIG_IEEE80211R_AP
                os_memset(sm->xxkey, 0, sizeof(sm->xxkey));
                sm->xxkey_len = 0;
                os_memset(sm->pmk_r1, 0, sizeof(sm->pmk_r1));