FT: Fix FTE MIC calculation with fragmented FTE

Currently wpa_ft_parse_ies() is setting FTE information to wpa_buf
pointer data which is generated after defragmentation. This data will
not contain FTE and Fragment element(s) headers.

IEEE P802.11be/D5.0 describes the MIC to be calculated on the
concatenation of FTE and corresponding Fragment element(s) which
implies the element headers are included for each element in the
fragmented case.

Fix this by correctly populating FTE information when FTE is
fragmented.

Fixes: 43b5f11d9 ("Defragmentation of FTE")
Signed-off-by: Veerendranath Jakkam <quic_vjakkam@quicinc.com>

diff --git a/src/common/wpa_common.c b/src/common/wpa_common.c
index 94ce43ddeae0b850213267d731e818f247225acd..1cfdd9ad7e2ff91ad01be7e1920c10d188a9b2c5 100644 (file)
--- a/src/common/wpa_common.c
+++ b/src/common/wpa_common.c
@@ -1031,9 +1031,6 @@ static int wpa_ft_parse_ftie(const u8 *ie, size_t ie_len,
        const u8 *end, *pos;
        u8 link_id;
 
-       parse->ftie = ie;
-       parse->ftie_len = ie_len;
-
        pos = opt;
        end = ie + ie_len;
        wpa_hexdump(MSG_DEBUG, "FT: Parse FTE subelements", pos, end - pos);
@@ -1339,6 +1336,11 @@ int wpa_ft_parse_ies(const u8 *ies, size_t ies_len, struct wpa_ft_ies *parse,
                }
                if (res < 0)
                        goto fail;
+
+               /* FTE might be fragmented. If it is, the separate Fragment
+                * elements are included in MIC calculation as full elements. */
+               parse->ftie = fte;
+               parse->ftie_len = fte_len;
        }
 
        if (prot_ie_count == 0)