fragattacks/src
Jouni Malinen afa2ffb413 SAE: Check Status Code in Authentication frames
While other authentication algorithms mark Status Code as being Reserved
in the case of the transaction number 1, SAE does not. Check that the
Status Code indicates success before creating SAE state. In addition,
fix the mesh anti-clogging token request parsing on big endian CPUs.

Transaction number 2 (confirm) can also have non-zero Status Code to
report an error. Those should be processed, but not replied to with yet
another error message. This could happen in mesh case. Avoid a loop of
error messages by dropping the non-success case without additional
response.

In addition, don't reply to unknown transaction numbers if the status
code is non-zero. This avoids a loop of error messages if an invalid
frame where to be injected (or unlikely corruption were to occur).

Signed-off-by: Jouni Malinen <j@w1.fi>
2014-12-15 00:06:56 +02:00
..
ap SAE: Check Status Code in Authentication frames 2014-12-15 00:06:56 +02:00
common Clean up VHT configuration validation 2014-12-14 19:00:38 +02:00
crypto OpenSSL: Simplify EAP-FAST peer workaround 2014-12-09 23:55:41 +02:00
drivers mesh: Add mesh interface creation command for mesh gate 2014-12-14 23:27:43 +02:00
eap_common ERP: Add TV/TLV parser 2014-12-04 12:08:59 +02:00
eap_peer ERP: Drop ERP keys on failure on the peer 2014-12-14 15:47:04 +02:00
eap_server Check os_snprintf() result more consistently - manual 2014-12-08 11:42:07 +02:00
eapol_auth Check os_snprintf() result more consistently - automatic 1 2014-12-08 11:42:07 +02:00
eapol_supp Check os_snprintf() result more consistently - automatic 1 2014-12-08 11:42:07 +02:00
l2_packet proxyarp: Do not limit NDISC snoop packet size to 150 2014-11-28 22:41:26 +02:00
p2p P2P: Check Invitation Response dialog token match for resend case 2014-12-09 16:26:47 +02:00
pae MACsec: Update protect frames and replay on reauthentication 2014-12-09 16:56:10 +02:00
radius ERP: Add ERP_FLUSH for hostapd 2014-12-14 15:47:04 +02:00
rsn_supp Check os_snprintf() result more consistently - manual 2014-12-08 11:42:07 +02:00
tls TLS: Add new cipher suites to tls_get_cipher() 2014-12-09 16:57:05 +02:00
utils Remove unused find_first_bit() 2014-12-14 19:01:25 +02:00
wps Check os_snprintf() result more consistently - automatic 1 2014-12-08 11:42:07 +02:00
lib.rules Add rules for building src/crypto as a library 2009-12-05 22:03:46 +02:00
Makefile MACsec: Add PAE implementation 2014-05-09 20:42:44 +03:00