From: Jouni Malinen <jouni@qca.qualcomm.com>
Date: Thu, 29 Jan 2015 20:31:41 +0000 (+0200)
Subject: WPA auth: Disconnect STA if MSK cannot be fetched
X-Git-Tag: hostap_2_4~281
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1180dd66a984bcbc0f152ba6368f454b1eff4b42;p=thirdparty%2Fhostap.git

WPA auth: Disconnect STA if MSK cannot be fetched

Previously, it was possible for some corner cases to leave the WPA
authenticator state machine running if PMK could not be derived. Change
this to forcefully disconnect the STA to get more consistent behavior
and faster notification of the error.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
---

diff --git a/src/ap/wpa_auth.c b/src/ap/wpa_auth.c
index f13f141f8..668cb429d 100644
--- a/src/ap/wpa_auth.c
+++ b/src/ap/wpa_auth.c
@@ -1881,6 +1881,8 @@ SM_STATE(WPA_PTK, INITPMK)
 	} else {
 		wpa_printf(MSG_DEBUG, "WPA: Could not get PMK, get_msk: %p",
 			   sm->wpa_auth->cb.get_msk);
+		sm->Disconnect = TRUE;
+		return;
 	}
 	os_memset(msk, 0, sizeof(msk));