470-wpa_ie_cap_workaround.patch 1.4 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556
  1. --- a/src/common/wpa_common.c
  2. +++ b/src/common/wpa_common.c
  3. @@ -953,6 +953,31 @@ const char * wpa_key_mgmt_txt(int key_mg
  4. }
  5. +static void wpa_fixup_wpa_ie_rsn(u8 *assoc_ie, const u8 *wpa_msg_ie,
  6. + size_t rsn_ie_len)
  7. +{
  8. + int pos, count;
  9. +
  10. + pos = sizeof(struct rsn_ie_hdr) + RSN_SELECTOR_LEN;
  11. + if (rsn_ie_len < pos + 2)
  12. + return;
  13. +
  14. + count = WPA_GET_LE16(wpa_msg_ie + pos);
  15. + pos += 2 + count * RSN_SELECTOR_LEN;
  16. + if (rsn_ie_len < pos + 2)
  17. + return;
  18. +
  19. + count = WPA_GET_LE16(wpa_msg_ie + pos);
  20. + pos += 2 + count * RSN_SELECTOR_LEN;
  21. + if (rsn_ie_len < pos + 2)
  22. + return;
  23. +
  24. + if (!assoc_ie[pos] && !assoc_ie[pos + 1] &&
  25. + (wpa_msg_ie[pos] || wpa_msg_ie[pos + 1]))
  26. + memcpy(&assoc_ie[pos], &wpa_msg_ie[pos], 2);
  27. +}
  28. +
  29. +
  30. int wpa_compare_rsn_ie(int ft_initial_assoc,
  31. const u8 *ie1, size_t ie1len,
  32. const u8 *ie2, size_t ie2len)
  33. @@ -960,8 +985,19 @@ int wpa_compare_rsn_ie(int ft_initial_as
  34. if (ie1 == NULL || ie2 == NULL)
  35. return -1;
  36. - if (ie1len == ie2len && os_memcmp(ie1, ie2, ie1len) == 0)
  37. - return 0; /* identical IEs */
  38. + if (ie1len == ie2len) {
  39. + u8 *ie_tmp;
  40. +
  41. + if (os_memcmp(ie1, ie2, ie1len) == 0)
  42. + return 0; /* identical IEs */
  43. +
  44. + ie_tmp = alloca(ie1len);
  45. + memcpy(ie_tmp, ie1, ie1len);
  46. + wpa_fixup_wpa_ie_rsn(ie_tmp, ie2, ie1len);
  47. +
  48. + if (os_memcmp(ie_tmp, ie2, ie1len) == 0)
  49. + return 0; /* only mismatch in RSN capabilties */
  50. + }
  51. #ifdef CONFIG_IEEE80211R
  52. if (ft_initial_assoc) {