DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Delete PTK SA on (re)association if this is not part of a Fast BSS

Browse source 
Transition. This fixes a potential issue where an incorrectly behaving AP
could send a group key update using the old (now invalid after reassociate)
PTK. This could also happen if there is a race condition between reporting
received EAPOL frames and association events.
This commit is contained in:
Jouni Malinen 2008-03-12 11:18:57 +02:00
parent 748e54937d
commit 58a98fb027
1 changed files with 15 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
src/rsn_supp/wpa.c
View file

@ -1859,6 +1859,8 @@ void wpa_sm_deinit(struct wpa_sm *sm)
*/ */
void wpa_sm_notify_assoc(struct wpa_sm *sm, const u8 *bssid) void wpa_sm_notify_assoc(struct wpa_sm *sm, const u8 *bssid)
{ {
int clear_ptk = 1;
if (sm == NULL) if (sm == NULL)
return; return;
@ -1871,15 +1873,25 @@ void wpa_sm_notify_assoc(struct wpa_sm *sm, const u8 *bssid)
rsn_preauth_deinit(sm); rsn_preauth_deinit(sm);
#ifdef CONFIG_IEEE80211R #ifdef CONFIG_IEEE80211R
if ((sm->key_mgmt == WPA_KEY_MGMT_FT_IEEE8021X || if (wpa_ft_is_completed(sm)) {
sm->key_mgmt == WPA_KEY_MGMT_FT_PSK) &&
wpa_ft_is_completed(sm)) {
wpa_supplicant_key_neg_complete(sm, sm->bssid, 1); wpa_supplicant_key_neg_complete(sm, sm->bssid, 1);
/* Prepare for the next transition */ /* Prepare for the next transition */
wpa_ft_prepare_auth_request(sm); wpa_ft_prepare_auth_request(sm);
clear_ptk = 0;
} }
#endif /* CONFIG_IEEE80211R */ #endif /* CONFIG_IEEE80211R */
if (clear_ptk) {
/*
* IEEE 802.11, 8.4.10: Delete PTK SA on (re)association if
* this is not part of a Fast BSS Transition.
*/
wpa_printf(MSG_DEBUG, "WPA: Clear old PTK");
sm->ptk_set = 0;
sm->tptk_set = 0;
}
} }