mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-12-02 04:08:26 -05:00
9e8fde2134
The ap_sta_deauth_cb and ap_sta_disassoc_cb eloop timeouts are used to clear a disconnecting STA from the kernel driver if the STA did not ACK the Deauthentication/Disassociation frame from the AP within two seconds. However, it was possible for a STA to not ACK such a frame, e.g., when the disconnection happened due to hostapd pruning old associations from other BSSes and the STA was not on the old channel anymore. If that same STA then started a new authentication/association with the BSS, the two second timeout could trigger during this new association and result in the STA entry getting removed from the kernel. Fix this by canceling these eloop timeouts when receiving an indication of a new authentication or association. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
182 lines
5.2 KiB
C
182 lines
5.2 KiB
C
/*
|
|
* hostapd / IEEE 802.11 MLME
|
|
* Copyright 2003-2006, Jouni Malinen <j@w1.fi>
|
|
* Copyright 2003-2004, Instant802 Networks, Inc.
|
|
* Copyright 2005-2006, Devicescape Software, Inc.
|
|
*
|
|
* This software may be distributed under the terms of the BSD license.
|
|
* See README for more details.
|
|
*/
|
|
|
|
#include "utils/includes.h"
|
|
|
|
#include "utils/common.h"
|
|
#include "common/ieee802_11_defs.h"
|
|
#include "ieee802_11.h"
|
|
#include "wpa_auth.h"
|
|
#include "sta_info.h"
|
|
#include "ap_mlme.h"
|
|
#include "hostapd.h"
|
|
|
|
|
|
#ifndef CONFIG_NO_HOSTAPD_LOGGER
|
|
static const char * mlme_auth_alg_str(int alg)
|
|
{
|
|
switch (alg) {
|
|
case WLAN_AUTH_OPEN:
|
|
return "OPEN_SYSTEM";
|
|
case WLAN_AUTH_SHARED_KEY:
|
|
return "SHARED_KEY";
|
|
case WLAN_AUTH_FT:
|
|
return "FT";
|
|
}
|
|
|
|
return "unknown";
|
|
}
|
|
#endif /* CONFIG_NO_HOSTAPD_LOGGER */
|
|
|
|
|
|
/**
|
|
* mlme_authenticate_indication - Report the establishment of an authentication
|
|
* relationship with a specific peer MAC entity
|
|
* @hapd: BSS data
|
|
* @sta: peer STA data
|
|
*
|
|
* MLME calls this function as a result of the establishment of an
|
|
* authentication relationship with a specific peer MAC entity that
|
|
* resulted from an authentication procedure that was initiated by
|
|
* that specific peer MAC entity.
|
|
*
|
|
* PeerSTAAddress = sta->addr
|
|
* AuthenticationType = sta->auth_alg (WLAN_AUTH_OPEN / WLAN_AUTH_SHARED_KEY)
|
|
*/
|
|
void mlme_authenticate_indication(struct hostapd_data *hapd,
|
|
struct sta_info *sta)
|
|
{
|
|
hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-AUTHENTICATE.indication(" MACSTR ", %s)",
|
|
MAC2STR(sta->addr), mlme_auth_alg_str(sta->auth_alg));
|
|
if (sta->auth_alg != WLAN_AUTH_FT && !(sta->flags & WLAN_STA_MFP))
|
|
mlme_deletekeys_request(hapd, sta);
|
|
ap_sta_clear_disconnect_timeouts(hapd, sta);
|
|
}
|
|
|
|
|
|
/**
|
|
* mlme_deauthenticate_indication - Report the invalidation of an
|
|
* authentication relationship with a specific peer MAC entity
|
|
* @hapd: BSS data
|
|
* @sta: Peer STA data
|
|
* @reason_code: ReasonCode from Deauthentication frame
|
|
*
|
|
* MLME calls this function as a result of the invalidation of an
|
|
* authentication relationship with a specific peer MAC entity.
|
|
*
|
|
* PeerSTAAddress = sta->addr
|
|
*/
|
|
void mlme_deauthenticate_indication(struct hostapd_data *hapd,
|
|
struct sta_info *sta, u16 reason_code)
|
|
{
|
|
hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-DEAUTHENTICATE.indication(" MACSTR ", %d)",
|
|
MAC2STR(sta->addr), reason_code);
|
|
if (!hapd->iface->driver_ap_teardown)
|
|
mlme_deletekeys_request(hapd, sta);
|
|
}
|
|
|
|
|
|
/**
|
|
* mlme_associate_indication - Report the establishment of an association with
|
|
* a specific peer MAC entity
|
|
* @hapd: BSS data
|
|
* @sta: peer STA data
|
|
*
|
|
* MLME calls this function as a result of the establishment of an
|
|
* association with a specific peer MAC entity that resulted from an
|
|
* association procedure that was initiated by that specific peer MAC entity.
|
|
*
|
|
* PeerSTAAddress = sta->addr
|
|
*/
|
|
void mlme_associate_indication(struct hostapd_data *hapd, struct sta_info *sta)
|
|
{
|
|
hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-ASSOCIATE.indication(" MACSTR ")",
|
|
MAC2STR(sta->addr));
|
|
if (sta->auth_alg != WLAN_AUTH_FT)
|
|
mlme_deletekeys_request(hapd, sta);
|
|
ap_sta_clear_disconnect_timeouts(hapd, sta);
|
|
}
|
|
|
|
|
|
/**
|
|
* mlme_reassociate_indication - Report the establishment of an reassociation
|
|
* with a specific peer MAC entity
|
|
* @hapd: BSS data
|
|
* @sta: peer STA data
|
|
*
|
|
* MLME calls this function as a result of the establishment of an
|
|
* reassociation with a specific peer MAC entity that resulted from a
|
|
* reassociation procedure that was initiated by that specific peer MAC entity.
|
|
*
|
|
* PeerSTAAddress = sta->addr
|
|
*/
|
|
void mlme_reassociate_indication(struct hostapd_data *hapd,
|
|
struct sta_info *sta)
|
|
{
|
|
hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-REASSOCIATE.indication(" MACSTR ")",
|
|
MAC2STR(sta->addr));
|
|
if (sta->auth_alg != WLAN_AUTH_FT)
|
|
mlme_deletekeys_request(hapd, sta);
|
|
ap_sta_clear_disconnect_timeouts(hapd, sta);
|
|
}
|
|
|
|
|
|
/**
|
|
* mlme_disassociate_indication - Report disassociation with a specific peer
|
|
* MAC entity
|
|
* @hapd: BSS data
|
|
* @sta: Peer STA data
|
|
* @reason_code: ReasonCode from Disassociation frame
|
|
*
|
|
* MLME calls this function as a result of the invalidation of an association
|
|
* relationship with a specific peer MAC entity.
|
|
*
|
|
* PeerSTAAddress = sta->addr
|
|
*/
|
|
void mlme_disassociate_indication(struct hostapd_data *hapd,
|
|
struct sta_info *sta, u16 reason_code)
|
|
{
|
|
hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-DISASSOCIATE.indication(" MACSTR ", %d)",
|
|
MAC2STR(sta->addr), reason_code);
|
|
mlme_deletekeys_request(hapd, sta);
|
|
}
|
|
|
|
|
|
void mlme_michaelmicfailure_indication(struct hostapd_data *hapd,
|
|
const u8 *addr)
|
|
{
|
|
hostapd_logger(hapd, addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-MichaelMICFailure.indication(" MACSTR ")",
|
|
MAC2STR(addr));
|
|
}
|
|
|
|
|
|
void mlme_deletekeys_request(struct hostapd_data *hapd, struct sta_info *sta)
|
|
{
|
|
hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_MLME,
|
|
HOSTAPD_LEVEL_DEBUG,
|
|
"MLME-DELETEKEYS.request(" MACSTR ")",
|
|
MAC2STR(sta->addr));
|
|
|
|
if (sta->wpa_sm)
|
|
wpa_remove_ptk(sta->wpa_sm);
|
|
}
|