From 71419119f4b96e8373e50d3a48ff23d153edc036 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Sat, 24 Aug 2019 16:55:26 +0300 Subject: [PATCH] EAP-TEAP peer: Fix protected indication of inner EAP method failure Need to leave EAP-TEAP methodState == MAY_CONT when marking decision = FAIL based on inner EAP method failure since this message will be followed by protected failure indication. Signed-off-by: Jouni Malinen --- src/eap_peer/eap_teap.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/eap_peer/eap_teap.c b/src/eap_peer/eap_teap.c index 1e351f365..e2416f180 100644 --- a/src/eap_peer/eap_teap.c +++ b/src/eap_peer/eap_teap.c @@ -458,7 +458,8 @@ static int eap_teap_phase2_request(struct eap_sm *sm, if (!(*resp) || (iret.methodState == METHOD_DONE && iret.decision == DECISION_FAIL)) { - ret->methodState = METHOD_DONE; + /* Wait for protected indication of failure */ + ret->methodState = METHOD_MAY_CONT; ret->decision = DECISION_FAIL; } else if ((iret.methodState == METHOD_DONE || iret.methodState == METHOD_MAY_CONT) &&