[PATCH] Use SA Query for 4-way handshake timeout

[James Herbert]

Andrei Otcheretianski,

Our interpretation of "11.13 SA Query procedures" in IEEE P802.11-REVme(tm)/D5.0
is that a STA may use SA Query in response to an unprotected Deauthentication
or Disassociation frame with reason code INVALID_CLASS2_FRAME or
INVALID_CLASS3_FRAME, but other uses where there might be a mismatch in
the association state between itself and the AP or PCP are not precluded.

Is that not the case? If it is not, how would you propose to resolve this
condition?

---
 wpa_supplicant/sme.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/wpa_supplicant/sme.c b/wpa_supplicant/sme.c
index 9b083cddd..6a335b5cb 100644
--- a/wpa_supplicant/sme.c
+++ b/wpa_supplicant/sme.c
@@ -3497,7 +3497,8 @@ void sme_event_unprot_disconnect(struct wpa_supplicant *wpa_s, const u8 *sa,
 	if (!ether_addr_equal(sa, wpa_s->bssid))
 		return;
 	if (reason_code != WLAN_REASON_CLASS2_FRAME_FROM_NONAUTH_STA &&
-	    reason_code != WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA)
+	    reason_code != WLAN_REASON_CLASS3_FRAME_FROM_NONASSOC_STA &&
+	    reason_code != WLAN_REASON_4WAY_HANDSHAKE_TIMEOUT)
 		return;
 	if (wpa_s->sme.sa_query_count > 0)
 		return;
-- 
2.25.1