eapol: relax secure bit check on 2/4

Old wpa_supplicant versions do not set the secure bit on 2/4 during
rekeys which causes IWD to reject the message and eventually time out.
Modern versions do set it correctly but even Android 13 (Pixel 5a)
still uses an ancient version of wpa_supplicant which does not set the
bit.

Relax this check and instead just print a warning but allow the message
to be processed.
This commit is contained in:
James Prestwood 2023-01-11 12:15:41 -08:00 committed by Denis Kenzior
parent b373d1fa69
commit 0930d0dffc
1 changed files with 1 additions and 2 deletions

View File

@ -512,8 +512,7 @@ bool eapol_verify_ptk_2_of_4(const struct eapol_key *ek, bool ptk_complete)
if (!ek->key_mic)
return false;
if (ek->secure != ptk_complete)
return false;
L_WARN_ON(ek->secure != ptk_complete);
if (ek->encrypted_key_data)
return false;