198f82a1e3
There is a race condition in GO Negotiation Request frame sending and processing that may end up with both devices sending GO Negotiation Response. This response frame was previously accepted even if a response had already been sent. This could result in two GO Negotiation Confirm frames being exchanged and consequently, with two separate GO Negotiations completing concurrently. These negotiations could result in getting mismatching parameters (e.g., both device could believe it was the GO). Fix this by ignoring GO Negotiation Response from the peer if twe have already sent a GO Negotiation Response frame and we have the higher P2P Device Address. This is similar to the rule used to determine whether to reply to GO Negotiation Request frame when Request was already sent, i.e., the same direction of GO Negotiation is maintained here to enforce that only the negotiation initiated by the device with smaller P2P Device Address is completed. Signed-hostap: Jouni Malinen <j@w1.fi> intended-for: hostap-1 |
||
|---|---|---|
| .. | ||
| Makefile | ||
| p2p.c | ||
| p2p.h | ||
| p2p_build.c | ||
| p2p_dev_disc.c | ||
| p2p_go_neg.c | ||
| p2p_group.c | ||
| p2p_i.h | ||
| p2p_invitation.c | ||
| p2p_parse.c | ||
| p2p_pd.c | ||
| p2p_sd.c | ||
| p2p_utils.c | ||