eapol: relax (but warn) on secure bit check in handshake 1/4

Hostapd commit bc36991791 now properly sets the secure bit on
message 1/4. This was addressed in an earlier IWD commit but
neglected to allow for backwards compatibility. The check is
fatal which now breaks earlier hostapd version (older than 2.10).

Instead warn on this condition rather than reject the rekey.

Fixes: 7fad6590bd ("eapol: allow 'secure' to be set on rekeys")
This commit is contained in:
James Prestwood 2023-04-10 11:00:49 -07:00 committed by Denis Kenzior
parent 44a37d7eae
commit a952cc6a47
1 changed files with 1 additions and 2 deletions

View File

@ -478,8 +478,7 @@ bool eapol_verify_ptk_1_of_4(const struct eapol_key *ek, size_t mic_len,
if (ek->key_mic)
return false;
if (ek->secure != ptk_complete)
return false;
L_WARN_ON(ek->secure != ptk_complete);
if (ek->encrypted_key_data)
return false;