[PATCH 3/4] SAE: Fix confirm frame tx on error path

[Masashi Honma]

When sae_check_confirm() failed, confirm frame would be sent without data.
This causes "SAE: Too short confirm message" to opposite STA and this result in
continuous frame exchange.

Signed-off-by: Masashi Honma <masashi.honma at gmail.com>
---
 src/ap/ieee802_11.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ap/ieee802_11.c b/src/ap/ieee802_11.c
index b321cd5..66d39ad 100644
--- a/src/ap/ieee802_11.c
+++ b/src/ap/ieee802_11.c
@@ -721,6 +721,7 @@ static void handle_auth_sae(struct hostapd_data *hapd, struct sta_info *sta,
 			if (sae_check_confirm(sta->sae, mgmt->u.auth.variable,
 					      ((u8 *) mgmt) + len -
 					      mgmt->u.auth.variable) < 0) {
+				data = auth_build_sae_confirm(hapd, sta);
 				resp = WLAN_STATUS_UNSPECIFIED_FAILURE;
 				goto reply;
 			}
-- 
1.9.1