From 63ef918671068d33579e2d360714c44d9718abca Mon Sep 17 00:00:00 2001 From: Denis Kenzior Date: Mon, 20 Sep 2021 14:25:34 -0500 Subject: [PATCH] ap: validate group cipher Make sure to validate group_cipher from the STA similarly to how akm_suites and pairwise_ciphers are validated. --- src/ap.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/ap.c b/src/ap.c index d6802fda..7a1d59b9 100644 --- a/src/ap.c +++ b/src/ap.c @@ -1759,6 +1759,11 @@ static void ap_assoc_reassoc(struct sta_state *sta, bool reassoc, err = MMPDU_REASON_CODE_INVALID_AKMP; goto unsupported; } + + if (rsn_info.group_cipher != ap->group_cipher) { + err = MMPDU_REASON_CODE_INVALID_GROUP_CIPHER; + goto unsupported; + } } /* 802.11-2016 11.3.5.3 j) */