fragattacks/src/ap
Ilan Peer 38cb0a2db6 AP: Drop retransmitted auth/assoc/action frames
It is possible that a station device might miss an ACK for an
authentication, association, or action frame, and thus retransmit the
same frame although the frame is already being processed in the stack.
While the duplicated frame should really be dropped in the kernel or
firmware code where duplicate detection is implemented for data frames,
it is possible that pre-association cases are not fully addressed (which
is the case at least with mac80211 today) and the frame may be delivered
to upper layer stack.

In such a case, the local AP will process the retransmitted frame although
it has already handled the request, which might cause the station to get
confused and as a result disconnect from the AP, blacklist it, etc.

To avoid such a case, save the sequence control of the last processed
management frame and in case of retransmissions drop them.

Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2014-11-19 15:20:47 +02:00
..
accounting.c Add Acct-Multi-Session-Id into RADIUS Accounting messages 2014-10-18 10:38:17 +03:00
accounting.h Add Acct-Session-Id into Access-Request messages 2012-12-18 18:13:31 +02:00
acs.c ACS: Fix number of error path issues 2014-03-25 13:12:29 +02:00
acs.h Move declaration of hostapd_acs_completed() into correct header file 2013-12-31 19:34:43 +02:00
ap_config.c hostapd: Add wowlan_triggers config param 2014-11-16 17:09:11 +02:00
ap_config.h mesh: Make plink params configurable 2014-11-16 19:43:11 +02:00
ap_drv_ops.c Fix hostapd operation without hw_mode driver data 2014-11-17 01:08:04 +02:00
ap_drv_ops.h AP: Add support for setting bridge network parameter 2014-10-28 01:08:29 +02:00
ap_list.c Fix Beacon RX before AP setup completion 2014-02-06 15:22:06 +02:00
ap_list.h AP: Use monotonic time for AP list 2013-12-07 20:50:15 -08:00
ap_mlme.c Remove unused STA entry information 2014-03-15 09:57:10 +02:00
ap_mlme.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
authsrv.c hostapd: Allow OpenSSL cipherlist string to be configured 2014-10-12 11:52:05 +03:00
authsrv.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
beacon.c HT: Pass the smps_mode in AP parameters 2014-10-24 01:27:31 +03:00
beacon.h Remove obsolete license notifications 2013-12-24 22:59:52 +02:00
bss_load.c AP: Add support for BSS load element (STA Count, Channel Utilization) 2014-10-21 23:25:48 +03:00
bss_load.h AP: Add support for BSS load element (STA Count, Channel Utilization) 2014-10-21 23:25:48 +03:00
ctrl_iface_ap.c Print frame type name in debug output 2014-06-22 00:51:39 +03:00
ctrl_iface_ap.h Add chan_switch to ctrl interface of wpa_supplicant and hostapd 2013-11-17 17:12:58 +02:00
dfs.c DFS: Fix hostapd operation without hw_mode driver data 2014-11-17 01:14:35 +02:00
dfs.h hostapd: Configure spectrum management capability 2014-02-25 00:54:59 +02:00
dhcp_snoop.c AP: Add support for Proxy ARP, DHCP snooping mechanism 2014-10-28 01:08:29 +02:00
dhcp_snoop.h AP: Add support for Proxy ARP, DHCP snooping mechanism 2014-10-28 01:08:29 +02:00
drv_callbacks.c Remove unused EVENT_FT_RRB_RX 2014-11-01 19:27:48 +02:00
eap_user_db.c Clear hostapd configuration keys explicitly 2014-07-02 12:38:48 +03:00
gas_serv.c GAS: Do not reply to P2P SD query from generic GAS/ANQP server 2014-10-22 19:21:42 +03:00
gas_serv.h GAS server: Remove incomplete remote ANQP processing 2014-03-13 21:12:39 +02:00
hostapd.c AP: Add support for Proxy ARP, DHCP snooping mechanism 2014-10-28 01:08:29 +02:00
hostapd.h mesh: Add timer for SAE authentication in RSN mesh 2014-11-16 19:43:11 +02:00
hs20.c HS 2.0R2 AP: Add support for deauthentication request 2014-02-26 01:24:24 +02:00
hs20.h HS 2.0R2 AP: Add support for deauthentication request 2014-02-26 01:24:24 +02:00
hw_features.c wpa_supplicant: Use the 'no_ir' notation 2014-10-26 01:23:43 +03:00
hw_features.h Retry initial 20/40 MHz co-ex scan if the driver is busy 2014-04-29 12:52:09 +03:00
iapp.c IAPP: Avoid warnings on unused write 2014-10-11 18:03:38 +03:00
iapp.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
ieee802_1x.c Add external EAPOL transmission option for testing purposes 2014-10-10 18:40:57 +03:00
ieee802_1x.h Share a single definition of EAPOL-Key structure for WEP keys 2012-08-07 21:27:01 +03:00
ieee802_11_auth.c Use monotonic clock for RADIUS cache timeouts 2013-12-07 20:50:15 -08:00
ieee802_11_auth.h Use a shared function for freeing PSK list 2012-11-25 18:01:55 +02:00
ieee802_11_ht.c HT: Use cleaner way of generating pointer to a field (CID 68097) 2014-06-13 00:27:15 +03:00
ieee802_11_shared.c AP: Add support for Proxy ARP, DHCP snooping mechanism 2014-10-28 01:08:29 +02:00
ieee802_11_vht.c VHT: Remove useless validation code from Operating Mode Notification 2014-06-18 00:45:48 +03:00
ieee802_11.c AP: Drop retransmitted auth/assoc/action frames 2014-11-19 15:20:47 +02:00
ieee802_11.h Add AP mode support for HT 20/40 co-ex Action frame 2014-04-29 12:52:09 +03:00
Makefile Add CONFIG_CODE_COVERAGE=y option for gcov 2013-11-24 19:16:12 +02:00
p2p_hostapd.c Use P2P_IE_VENDOR_TYPE more consistently 2014-03-05 23:36:54 +02:00
p2p_hostapd.h Remove the GPL notification from files contributed by Atheros 2012-02-11 19:39:36 +02:00
peerkey_auth.c Remove a static analyzer warning about unused variable write 2014-03-02 17:15:12 +02:00
pmksa_cache_auth.c Suite B: PMKID derivation for AKM 00-0F-AC:11 2014-11-16 17:09:11 +02:00
pmksa_cache_auth.h Suite B: PMKID derivation for AKM 00-0F-AC:11 2014-11-16 17:09:11 +02:00
preauth_auth.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
preauth_auth.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
sta_info.c AP: Drop retransmitted auth/assoc/action frames 2014-11-19 15:20:47 +02:00
sta_info.h AP: Drop retransmitted auth/assoc/action frames 2014-11-19 15:20:47 +02:00
tkip_countermeasures.c AP: Use monotonic time for MMIC failure/TKIP countermeasures 2013-12-24 07:13:34 +02:00
tkip_countermeasures.h hostapd: Fix a regression in TKIP countermeasures processing 2012-11-18 13:06:03 +02:00
utils.c Move hostapd global callback functions into hapd_interfaces 2012-08-25 13:47:05 +03:00
vlan_init.c Revert "bridge: Track inter-BSS usage" 2014-03-08 11:35:08 +02:00
vlan_init.h Remove obsolete license notifications 2013-12-24 22:59:52 +02:00
vlan_util.c Add option to use netlink to create and remove VLAN interfaces 2012-08-10 14:09:05 +03:00
vlan_util.h Add option to use netlink to create and remove VLAN interfaces 2012-08-10 14:09:05 +03:00
wmm.c Remove obsolete license notifications 2013-12-24 22:59:52 +02:00
wmm.h Remove obsolete license notifications 2013-12-24 22:59:52 +02:00
wnm_ap.c WNM: Use cleaner way of generating pointer to a field (CID 68099) 2014-06-13 00:27:15 +03:00
wnm_ap.h Remove unnecessary EVENT_RX_ACTION 2013-12-29 17:18:17 +02:00
wpa_auth_ft.c AES: Extend key wrap design to support longer AES keys 2014-10-07 14:57:06 +03:00
wpa_auth_glue.c Add external EAPOL transmission option for testing purposes 2014-10-10 18:40:57 +03:00
wpa_auth_glue.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
wpa_auth_i.h FT: Add support for postponing FT response 2014-03-23 18:31:06 +02:00
wpa_auth_ie.c Suite B: Add AKM 00-0F-AC:11 2014-11-16 13:20:51 +02:00
wpa_auth_ie.h HS 2.0R2 AP: Add OSEN implementation 2014-02-26 01:24:24 +02:00
wpa_auth.c mesh: Start mesh peering after successful authentication 2014-11-16 19:43:11 +02:00
wpa_auth.h mesh: Add mesh robust security network 2014-11-16 19:43:06 +02:00
wps_hostapd.c P2P: Support GCMP as part of 60 GHz support 2014-10-27 17:15:09 +02:00
wps_hostapd.h WPS NFC: Add AP mode connection handover report 2014-01-27 21:10:55 +02:00