[PATCH 2/2] AP: Do not store RSNXE for WPA 1

Benjamin Berg benjamin at sipsolutions.net
Thu Dec 18 08:19:34 PST 2025


From: Benjamin Berg <benjamin.berg at intel.com>

If the connection is using WPA 1, then the RSNXE will not be inclued in
the KDE. So do not store it to not trigger a verification mismatch later
because the RSNXE is not in the KDE as would be expected otherwise.

Signed-off-by: Benjamin Berg <benjamin.berg at intel.com>
---
 src/ap/wpa_auth_ie.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ap/wpa_auth_ie.c b/src/ap/wpa_auth_ie.c
index 220ac809f3..7094cf2345 100644
--- a/src/ap/wpa_auth_ie.c
+++ b/src/ap/wpa_auth_ie.c
@@ -1360,7 +1360,7 @@ wpa_validate_wpa_ie(struct wpa_authenticator *wpa_auth,
 	os_memcpy(sm->wpa_ie, wpa_ie, wpa_ie_len);
 	sm->wpa_ie_len = wpa_ie_len;
 
-	if (rsnxe && rsnxe_len) {
+	if (sm->wpa != WPA_VERSION_WPA && rsnxe && rsnxe_len) {
 		if (!sm->rsnxe || sm->rsnxe_len < rsnxe_len) {
 			os_free(sm->rsnxe);
 			sm->rsnxe = os_malloc(rsnxe_len);
-- 
2.51.1




More information about the Hostap mailing list