hostapd/src
Jouni Malinen 824cb5a530 RSN: Ignore IGTK configuration errors with swapped KeyID values
There are number of deployed APs with broken PMF implementation where
the IGTK KDE uses swapped bytes in the KeyID field (0x0400 and 0x0500
instead of 4 and 5). Such APs cannot be trusted to implement BIP
correctly or provide a valid IGTK, so do not try to configure this key
with swapped KeyID bytes. Instead, continue without configuring the IGTK
so that the driver can drop any received group-addressed robust
management frames due to missing keys.

Normally, this error behavior would result in us disconnecting, but
there are number of deployed APs with this broken behavior, so as an
interoperability workaround, allow the connection to proceed.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-16 19:31:34 +03:00
..
ap mesh: Fix operations after SAE state machine removing the STA 2019-04-15 22:09:12 +03:00
common SAE: Fix confirm message validation in error cases 2019-04-09 17:11:15 +03:00
crypto Remove the unused crypto_ec_cofactor() function 2019-04-13 18:28:05 +03:00
drivers nl80211: Handle NL80211_CMD_PROBE_CLIENT command response 2019-04-16 01:53:18 +03:00
eap_common EAP-pwd: Remove unused checks for cofactor > 1 cases 2019-04-13 18:28:05 +03:00
eap_peer EAP-pwd: Remove unused checks for cofactor > 1 cases 2019-04-13 18:28:05 +03:00
eap_server EAP-pwd: Remove unused checks for cofactor > 1 cases 2019-04-13 18:28:05 +03:00
eapol_auth Add hostapd tls_flags parameter 2017-09-18 12:12:48 +03:00
eapol_supp More robust timer_tick_enabled tracking 2019-03-13 23:33:41 +02:00
fst UBSan: Define FST LLT macros without integer overflow 2019-02-25 19:48:49 +02:00
l2_packet wpa_supplicant: Don't reply to EAPOL if pkt_type is PACKET_OTHERHOST 2018-04-02 12:21:27 +03:00
p2p WPS: Add multi_ap_subelem to wps_build_wfa_ext() 2019-02-18 20:30:26 +02:00
pae mka: Avoid memory leak in unexpected case in RECEIVE 2019-04-15 22:50:06 +03:00
radius RADIUS server: Accept ERP keyName-NAI as user identity 2019-04-09 00:10:20 +03:00
rsn_supp RSN: Ignore IGTK configuration errors with swapped KeyID values 2019-04-16 19:31:34 +03:00
tls TLS: Add support for RFC 5705 TLS exporter context with internal TLS 2019-03-16 18:52:09 +02:00
utils tests: Module tests for const_time_*() functions 2019-04-09 17:11:15 +03:00
wps Multi-AP: Avoid memcpy(ptr, NULL, 0) in WPS Registrar initialization 2019-02-23 11:37:20 +02:00
lib.rules tests: TLS fuzzing tool 2019-02-11 02:35:29 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00