fragattacks/src/eap_peer
Jouni Malinen 17b7032891 EAP peer: Clear ignore flag in INITIALIZE state
While this is not part of RFC 4137, the way m.check(eapReqData) is
implemented in wpa_supplicant allows an EAP method to not update the
ignore value even though each such call is really supposed to get a new
response. It seems to be possible to hit a sequence where a previous EAP
authentication attempt terminates with sm->ignore set from the last
m.check() call and the following EAP authentication attempt could fail
to go through the expected code path if it does not clear the ignore
flag. This is likely only hit in some error cases, though. The hwsim
test cases could trigger this with the following sequence:
eap_proto_ikev2 ap_wps_m1_oom

Signed-off-by: Jouni Malinen <j@w1.fi>
2015-10-31 21:56:59 +02:00
..
eap_aka.c EAP-SIM/AKA: Explicitly check for header to include Reserved field 2015-05-03 16:33:03 +03:00
eap_config.h Add an option allow canned EAP-Success for wired IEEE 802.1X 2015-02-01 19:22:54 +02:00
eap_eke.c EAP-EKE: Add Session-Id 2015-05-24 11:58:45 +03:00
eap_fast_pac.c EAP-FAST peer: Avoid undefined behavior in pointer arithmetic 2015-10-24 21:43:54 +03:00
eap_fast_pac.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_fast.c EAP-FAST peer: Avoid undefined behavior in pointer arithmetic 2015-10-24 21:43:54 +03:00
eap_gpsk.c EAP-GPSK: Pass EAP identifier instead of full request 2015-05-03 16:32:28 +03:00
eap_gtc.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_i.h EAP peer: Replace MD5 with SHA1 in duplicate message workaround 2015-08-01 16:57:04 +03:00
eap_ikev2.c EAP-IKEv2 peer: Fix fragmentation reassembly 2014-12-21 00:48:24 +02:00
eap_leap.c EAP peer: Clear keying material on deinit 2014-07-02 12:38:48 +03:00
eap_md5.c EAP-MD5: Verify that CHAP operation succeeds 2012-08-16 18:49:02 +03:00
eap_methods.c Check os_snprintf() result more consistently - automatic 1 2014-12-08 11:42:07 +02:00
eap_methods.h HS 2.0R2: Add WFA server-only EAP-TLS peer method 2014-02-26 01:24:23 +02:00
eap_mschapv2.c Add build option to remove all internal RC4 uses 2015-08-02 16:52:56 +03:00
eap_otp.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_pax.c EAP-PAX: Fix PAX_STD-1 and PAX_STD-3 payload length validation 2015-05-03 16:32:36 +03:00
eap_peap.c EAP-TTLS/PEAP/FAST peer: Stop immediately on local TLS processing failure 2015-07-28 21:00:18 +03:00
eap_proxy_dummy.c eap_proxy: Add context data pointer to the get_imsi call 2013-10-23 20:51:46 +03:00
eap_proxy.h eap_proxy: Add context data pointer to the get_imsi call 2013-10-23 20:51:46 +03:00
eap_psk.c EAP peer: Clear keying material on deinit 2014-07-02 12:38:48 +03:00
eap_pwd.c EAP-pwd peer: Comment out MS password hash if CONFIG_FIPS=y 2015-08-02 16:52:56 +03:00
eap_sake.c EAP-SAKE: Pass EAP identifier instead of full request 2015-05-03 16:32:46 +03:00
eap_sim.c EAP-SIM/AKA: Explicitly check for header to include Reserved field 2015-05-03 16:33:03 +03:00
eap_tls_common.c Rename tls_connection_get_keys() to tls_connection_get_random() 2015-08-02 16:52:56 +03:00
eap_tls_common.h EAP-TLS/PEAP/TTLS/FAST: Move more towards using struct wpabuf 2015-05-03 16:32:23 +03:00
eap_tls.c pkcs11: Don't ask for a new PIN on TLS handshake failure 2015-07-07 19:25:31 +03:00
eap_tnc.c EAP-TNC: Limit maximum message buffer to 75000 bytes (CID 62873) 2014-06-13 16:03:45 +03:00
eap_ttls.c EAP-TTLS: Disable CHAP, MSCHAP, and MSCHAPV2 in CONFIG_FIPS=y builds 2015-08-01 21:07:44 +03:00
eap_vendor_test.c tests: Pending EAP peer processing with VENDOR-TEST 2015-01-28 13:09:31 +02:00
eap_wsc.c EAP-WSC peer: Reject connection on unexpected failure 2015-08-30 18:37:44 +03:00
eap.c EAP peer: Clear ignore flag in INITIALIZE state 2015-10-31 21:56:59 +02:00
eap.h Declare all read only data structures as const 2015-04-25 17:33:06 +03:00
ikev2.c EAP-IKEv2 peer: Avoid undefined behavior in pointer arithmetic 2015-10-24 21:43:54 +03:00
ikev2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
Makefile tests: Add eapol-fuzzer 2015-04-22 11:44:19 +03:00
mschapv2.c EAP-MSCHAPv2: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:48 +03:00
mschapv2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
tncc.c TNC: Fix minor memory leak (CID 62848) 2014-06-12 19:44:58 +03:00
tncc.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00