DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Disable AP PIN on all interfaces controlled by the same process

Browse source 
When a single hostapd process is used to manage multiple interfaces,
disable AP PIN on all interfaces if an attack is detected on any
interface.
This commit is contained in:
Jouni Malinen 2010-10-08 17:24:58 +03:00 • committed by Jouni Malinen
parent 9290cc1800
commit e55f98f4b8
1 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
src/ap/wps_hostapd.c
View file

@ -475,11 +475,12 @@ static void hostapd_wps_reenable_ap_pin(void *eloop_data, void *user_ctx)
} }
static void hostapd_pwd_auth_fail(struct hostapd_data *hapd, static int wps_pwd_auth_fail(struct hostapd_data *hapd, void *ctx)
struct wps_event_pwd_auth_fail *data)
{ {
if (!data->enrollee || hapd->conf->ap_pin == NULL) struct wps_event_pwd_auth_fail *data = ctx;
return;
if (!data->enrollee || hapd->conf->ap_pin == NULL || hapd->wps == NULL)
return 0;
/* /*
* Registrar failed to prove its knowledge of the AP PIN. Lock AP setup * Registrar failed to prove its knowledge of the AP PIN. Lock AP setup
@ -490,7 +491,7 @@ static void hostapd_pwd_auth_fail(struct hostapd_data *hapd,
wpa_printf(MSG_DEBUG, "WPS: AP PIN authentication failure number %u", wpa_printf(MSG_DEBUG, "WPS: AP PIN authentication failure number %u",
hapd->ap_pin_failures); hapd->ap_pin_failures);
if (hapd->ap_pin_failures < 3) if (hapd->ap_pin_failures < 3)
return; return 0;
wpa_msg(hapd->msg_ctx, MSG_INFO, WPS_EVENT_AP_SETUP_LOCKED); wpa_msg(hapd->msg_ctx, MSG_INFO, WPS_EVENT_AP_SETUP_LOCKED);
hapd->wps->ap_setup_locked = 1; hapd->wps->ap_setup_locked = 1;
@ -512,7 +513,14 @@ static void hostapd_pwd_auth_fail(struct hostapd_data *hapd,
NULL); NULL);
} }
/* TODO: dualband AP may need to update other interfaces */ return 0;
}
static void hostapd_pwd_auth_fail(struct hostapd_data *hapd,
struct wps_event_pwd_auth_fail *data)
{
hostapd_wps_for_each(hapd, wps_pwd_auth_fail, data);
} }