fragattack: don't receive EAPOL over nl80211

This commit is contained in:
Mathy Vanhoef 2020-12-19 05:59:04 +04:00
parent 1c7d9224b5
commit 0465abe64c

View File

@ -617,6 +617,17 @@ static void wiphy_info_ext_feature_flags(struct wiphy_info_data *info,
if (ext_feature_isset(ext_features, len, if (ext_feature_isset(ext_features, len,
NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211)) NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
capa->flags |= WPA_DRIVER_FLAGS_CONTROL_PORT; capa->flags |= WPA_DRIVER_FLAGS_CONTROL_PORT;
/**
* FragAttacks: our script currently assumes that EAPOL frames are received
* as normal data frames. We could fix this by forwarding all EAPOL frames to
* the script over the control interface. However, for now we simply disable
* sending EAPOL frames over nl80211 so we don't have to modify the script.
*
* We disabled these two specific flags because during in the version used
* during the first months of the embargo there were not yet present in the
* hostap code that was used.
*/
#if 0
if (ext_feature_isset(ext_features, len, if (ext_feature_isset(ext_features, len,
NL80211_EXT_FEATURE_CONTROL_PORT_NO_PREAUTH)) NL80211_EXT_FEATURE_CONTROL_PORT_NO_PREAUTH))
capa->flags2 |= WPA_DRIVER_FLAGS2_CONTROL_PORT_RX; capa->flags2 |= WPA_DRIVER_FLAGS2_CONTROL_PORT_RX;
@ -624,6 +635,7 @@ static void wiphy_info_ext_feature_flags(struct wiphy_info_data *info,
ext_features, len, ext_features, len,
NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211_TX_STATUS)) NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211_TX_STATUS))
capa->flags2 |= WPA_DRIVER_FLAGS2_CONTROL_PORT_TX_STATUS; capa->flags2 |= WPA_DRIVER_FLAGS2_CONTROL_PORT_TX_STATUS;
#endif
if (ext_feature_isset(ext_features, len, if (ext_feature_isset(ext_features, len,
NL80211_EXT_FEATURE_VLAN_OFFLOAD)) NL80211_EXT_FEATURE_VLAN_OFFLOAD))