wpa_supplicant 0.5.11, wifi WPA2 certification 5.5.2 PMK cache case fails, when validate_ie during roaming

[Zheng BaoZhong-E13358]

Does anyone have some ideas about that?
 
Thanks in advance
Baozhong

________________________________

From: Zheng BaoZhong-E13358 
Sent: Tuesday, August 11, 2009 5:30 PM
To: hostap at lists.shmoo.com
Subject: wpa_supplicant 0.5.11, wifi WPA2 certification 5.5.2 PMK cache
case fails, when validate_ie during roaming


Hi, all
 
we are using TI 1271 chipset, and wpa_supplicant 0.5.11 version, and
when we run WPA2 certification 5.5.2 case, it fails about log
"W/wpa_supplicant( 1637): WPA: IE in 3/4 msg does not match with IE in
Beacon/ProbeResp (src=00:03:7f:00:d7:da)"
 
It locates in wpa_supplicant_process_3_of_4 about line "if
(wpa_supplicant_validate_ie(sm, sm->bssid, &ie) < 0)", and with more log
I analysis, we found it is caused maybe by
wpa_supplicant_event_associnfo in events.c
 
last lines in wpa_supplicant_event_associnfo function
 if (!wpa_found && data->assoc_info.beacon_ies)
  wpa_sm_set_ap_wpa_ie(wpa_s->wpa, NULL, 0);
 if (!rsn_found && data->assoc_info.beacon_ies)
  wpa_sm_set_ap_rsn_ie(wpa_s->wpa, NULL, 0);
 
Because TI driver does not include beacon_ies in assoc info event, and
sm->wpa_ie and sm->rsn_ie is not cleared, and it causes the match fails,
because sm->wpa_ie or sm->rsn_ie saves last AP (Broadcom AP) ie
information, which is compared with current (roam to) AP (Atheros) IE.
 
we change the related code liking
 if (!wpa_found)// && data->assoc_info.beacon_ies)
  wpa_sm_set_ap_wpa_ie(wpa_s->wpa, NULL, 0);
 if (!rsn_found)// && data->assoc_info.beacon_ies)
  wpa_sm_set_ap_rsn_ie(wpa_s->wpa, NULL, 0);
It means clear sm wpa_ie and rsn_ie if assoc info does not include
beacon ies or not found wpa/rsn ie.
 
It works for our case.
 
I also check wpa_supplicant 0.6.9 version, and it also has the issue per
my understanding.
Thanks
Baozhong
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20090811/53f214d9/attachment.htm