From 02cd0ebb81150f4fdbf2ddb0431da33c52905817 Mon Sep 17 00:00:00 2001 From: Damien Bergamini Date: Wed, 1 Aug 2007 16:23:49 +0000 Subject: make sure the MIC field is set in group key handshake messages before passing the frame to the handlers. --- sys/net80211/ieee80211_input.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'sys') diff --git a/sys/net80211/ieee80211_input.c b/sys/net80211/ieee80211_input.c index 4a800dd2feb..aa3117bc40a 100644 --- a/sys/net80211/ieee80211_input.c +++ b/sys/net80211/ieee80211_input.c @@ -1,5 +1,5 @@ /* $NetBSD: ieee80211_input.c,v 1.24 2004/05/31 11:12:24 dyoung Exp $ */ -/* $OpenBSD: ieee80211_input.c,v 1.57 2007/08/01 16:16:09 damien Exp $ */ +/* $OpenBSD: ieee80211_input.c,v 1.58 2007/08/01 16:23:48 damien Exp $ */ /*- * Copyright (c) 2001 Atsushi Onoe * Copyright (c) 2002, 2003 Sam Leffler, Errno Consulting @@ -2519,6 +2519,8 @@ ieee80211_recv_eapol(struct ieee80211com *ic, struct mbuf *m0, ieee80211_recv_4way_msg1(ic, key, ni); } else { /* Group Key Handshake */ + if (!(info & EAPOL_KEY_KEYMIC)) + goto out; if (info & EAPOL_KEY_KEYACK) { if (key->desc == EAPOL_KEY_DESC_WPA1) ieee80211_recv_wpa_group_msg1(ic, key, ni); -- cgit v1.2.3