DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

SAE: Recognize Basic MLE in Authentication frames even without H2E

Browse source 
IEEE P802.11be requires H2E to be used whenever SAE is used for ML
association. However, some early Wi-Fi 7 APs enable MLO without H2E.
Recognize this special case based on the fixed length Basic Multi-Link
element being at the end of the data that would contain the unknown
variable length Anti-Clogging Token field. The Basic Multi-Link element
in Authentication frames include the MLD MAC addreess in the Common Info
field and all subfields of the Presence Bitmap subfield of the
Multi-Link Control field of the element zero and consequently, has a
fixed length of 12 octets.

Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
This commit is contained in:
Jouni Malinen 2024-09-13 03:15:31 +03:00 • committed by Jouni Malinen
parent c97168f58a
commit ccba6921de
1 changed files with 22 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

22
wpa_supplicant/sme.c
View file

@ -1725,6 +1725,28 @@ static int sme_sae_auth(struct wpa_supplicant *wpa_s, u16 auth_transaction,
return -1; return -1;
} }
token_len = elen - 1; token_len = elen - 1;
#ifdef CONFIG_IEEE80211BE
} else if (wpa_s->valid_links && token_len > 12 &&
token_pos[token_len - 12] == WLAN_EID_EXTENSION &&
token_pos[token_len - 11] == 10 &&
token_pos[token_len - 10] ==
WLAN_EID_EXT_MULTI_LINK) {
/* IEEE P802.11be requires H2E to be used whenever SAE
* is used for ML association. However, some early
* Wi-Fi 7 APs enable MLO without H2E. Recognize this
* special case based on the fixed length Basic
* Multi-Link element being at the end of the data that
* would contain the unknown variable length
* Anti-Clogging Token field. The Basic Multi-Link
* element in Authentication frames include the MLD MAC
* addreess in the Common Info field and all subfields
* of the Presence Bitmap subfield of the Multi-Link
* Control field of the element zero and consequently,
* has a fixed length of 12 octets. */
wpa_printf(MSG_DEBUG,
"SME: Detected Basic Multi-Link element at the end of Anti-Clogging Token field");
token_len -= 12;
#endif /* CONFIG_IEEE80211BE */
} }
*ie_offset = token_pos + token_len - data; *ie_offset = token_pos + token_len - data;