hostap/src
Jouni Malinen 2ab09656ae AP: Do not drop STA entry if PMF is used with full AP client state
This fixes a regression from commit
bb598c3bdd ('AP: Add support for full
station state'). That commit added code to remove and re-add the kernel
STA entry when processing Authentication frames with a driver that
advertises support for full AP client state. That resulted in bypassing
PMF protections for unprotected Authentication frames with such drivers
since the TK was lost in this operation.

It is simplest to skip the STA entry clearing in this type of case
completely to leave the TK in place and to process the new
authentication exchange otherwise normally. This matches the behavior
used with the drivers that do not implement full AP client state.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-11-29 16:26:00 +02:00
..
ap AP: Do not drop STA entry if PMF is used with full AP client state 2016-11-29 16:26:00 +02:00
common Add support for user configurable Beacon frame data rate for AP mode 2016-11-25 23:12:30 +02:00
crypto Extend AES-SIV implementation to support different key lengths 2016-10-10 19:40:59 +03:00
drivers nl80211: Configure Beacon frame TX rate if driver advertises support 2016-11-26 00:36:27 +02:00
eap_common TLS: Split tls_connection_prf() into two functions 2016-05-23 20:40:12 +03:00
eap_peer ERP: Make eap_peer_finish() callable 2016-10-22 18:26:00 +03:00
eap_server ERP: Update client identity based on EAP-Initiate/Re-auth 2016-10-22 23:13:17 +03:00
eapol_auth RADIUS: Share a single function for generating session IDs 2016-02-06 17:19:35 +02:00
eapol_supp ERP: Make eap_peer_finish() callable 2016-10-22 18:26:00 +03:00
fst FST: Fix search for peer's "other" connection 2016-09-08 11:17:45 +03:00
l2_packet l2_packet: Extend bridge workaround RX processing to cover two frames 2016-01-07 13:30:59 +02:00
p2p P2P: Clear old P2PS provision data 2016-10-29 00:55:49 +03:00
pae wpa_supplicant: Allow configuring the MACsec port for MKA 2016-11-20 00:35:31 +02:00
radius radius: Sanity check for NULL pointer segfault 2016-08-19 12:16:20 +03:00
rsn_supp TDLS: Fix checks on prohibit bits 2016-10-29 00:24:12 +03:00
tls Fix typo in DigestAlgorithn 2016-10-29 11:14:09 +03:00
utils Removed redundant NULL check for b in wpabuf_concat() 2016-10-28 19:05:08 +03:00
wps Share a single str_starts() implementation 2016-08-06 12:38:21 +03:00
lib.rules Add QUIET=1 option for make 2014-12-29 15:49:05 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00