Commit Graph
390 Commits
Author SHA1 Message Date
Kapil Gupta 5e91cd87a8 fix(wpa_supplicant): Delay sending of EAP_START for EAP auth 2025-08-28 11:00:10 +05:30
tarun.kumar 4ad66853df fix(wifi): Sending disconnect event in connect fail and add enterprise check in Suite-B 192-bit certification 2025-08-28 10:58:19 +05:30
Sarvesh Bodakhe ddf7ea9de9 fix(wifi): prevent crash in WPS-registrar due to nested 'eap_wsc_reset()' calls
When a WPS handshake is already in progress and the enrollee sends another EAPOL-Start
(e.g., due to missed packets or timeout), the registrar resets its state by calling
'eap_wsc_reset()'. This function frees 'sm->eap_method_priv' and then calls
'esp_wifi_ap_wps_disable()', which internally triggers another call to 'eap_wsc_reset()'.

This results in a double reset where the second invocation accesses the already freed
'sm->eap_method_priv', leading to a crash.

This fix sets 'sm->eap_method_priv' to NULL immediately after freeing it to ensure
any subsequent calls to eap_wsc_reset() do not access an invalid pointer.
2025-08-01 08:46:41 +05:30
Kapil Gupta 297c9de26a fix(esp_wifi): Address review comments 2025-07-28 12:35:55 +05:30
Kapil Gupta 9c8ac5c3fb feat(esp_wifi): Add support to limit EAP methods
Added support to limit EAP method supported by device based on
user configuration.
2025-07-28 12:33:44 +05:30
Jiang Jiang Jian ca0f20941f Merge branch 'bugfix/fix_pmksa_cache_expired_after_sntp_issue_v5.4' into 'release/v5.4'
fix(wifi): fix pmksa cache expiration caused by sntp time synchronization issue(Backport v5.4)

See merge request espressif/esp-idf!40832
2025-07-28 13:57:25 +08:00
muhaidong f9fb14a3f3 fix(wifi): fix pmksa cache expiration caused by sntp time synchronization issue 2025-07-25 19:59:38 +08:00
tarun.kumar 7d56951775 fix(wifi): Made changes in api for sending bcast deauth frames 2025-07-25 16:49:39 +05:30
tarun.kumar 7a4c91b2ab fix(wifi): Resolve out-of-bounds memory access in ieee80211w_kde_add 2025-07-25 16:47:25 +05:30
tarun.kumar b8d7a33366 feat(wifi): Add SAE-EXT-KEY feature on softAP 2025-07-25 16:46:17 +05:30
tarun.kumar 68d8b1e7ca fix(softAP): Adjusted authentication mode for wpa-eap version 1 2025-07-14 12:28:08 +05:30
Jiang Jiang Jian f906de4eb6 Merge branch 'bugfix/incorrect_sae_pk_flag_v5.4' into 'release/v5.4'
Disable SAE-PK indication in Assoc Request when not configured (Backport v5.4)

See merge request espressif/esp-idf!39075
2025-05-28 17:56:27 +08:00
akshat bcd91ec882 bugfix(wifi): Fix incorrect SAE-PK advertisement in assoc request 2025-05-28 14:23:56 +08:00
Kapil Gupta 3e810f5936 fix(esp_wifi): Add eloop blocking call API for public APIs 2025-05-27 13:42:41 +05:30
Kapil Gupta 221f641eb8 fix(esp_wifi): Fixed static analyzer issues 2025-05-27 13:39:08 +05:30
tarun.kumar 96e06bd2ca fix(esp_wifi): Modifying os_time_t datatype for platform and compiler independence 2025-04-25 11:21:31 +05:30
Shreyas Sheth 8b979114e0 fix(esp_wifi): Fix send_confirm according to specification provided by IEEE 802.11 2025-04-16 11:56:20 +05:30
Kapil Gupta c2fad24731 fix(esp_wifi): Code cleanup for PR#15550 PR#15551
Closes https://github.com/espressif/esp-idf/pull/15550
Closes https://github.com/espressif/esp-idf/pull/15551
2025-04-08 17:57:27 +05:30
Michael Stoll 134b9ac589 feat(esp_wifi): Implement esp_eap_client_set_domain_match 2025-04-07 14:28:45 +05:30
Sajia a73c5c0312 fix(wifi): Fix crash when set config is called with changed password
Closes https://github.com/espressif/esp-idf/issues/15584
2025-04-06 15:22:15 +05:30
Sarvesh Bodakhe f8b1c0976a fix(wifi): Fix wrong PMKSA cache entry being used when wifi password is changed 2025-04-06 15:21:56 +05:30
Shreyas Sheth 3cbbcf25c7 fix(wifi): Fixed memory leak occurring in SAE PK connection 2025-02-13 12:02:13 +05:30
Kapil Gupta 3c085db83e fix(esp_wifi): fix some analyzer issues
Closes https://github.com/espressif/esp-idf/issues/15097
Closes https://github.com/espressif/esp-idf/issues/15098
Closes https://github.com/espressif/esp-idf/issues/15099
2025-02-10 15:46:30 +05:30
Aditi 318ad17991 fix(wpa_supplicant): Add two separate flags for RRM and WNM
Added two separate flags CONFIG_RRM(80211k) and CONFIG_WNM(80211v)
    flags under IEEE80211KV support flag.
2025-01-20 14:17:38 +08:00
Nachiket Kukade ba8494eb87 fix(wpa_supplicant): Fix some coverity issues in wpa_supplicant
1. Fix leak in SoftAP while sending SAE Confirm
2. Move NULL check before pointer is getting used
3. Remove some dead code
2025-01-15 19:42:12 +05:30
Shreyas Sheth 29a95d30cc fix(wifi): Resolve comments for softap fixes 2025-01-15 19:42:12 +05:30
Shreyas Sheth 913999b8c3 fix(wifi): Resolve comments on feature/softap_fixes_for_ceritification 2025-01-15 19:42:11 +05:30
Shreyas Sheth 98c47bbfae fix(wifi): Make sure auth is sent after sae process 2025-01-15 19:42:11 +05:30
Shreyas Sheth 81070bce92 feat(wifi): Add support for transition_disable for softAP
Bugfix rsnxe len for assoc req
2025-01-15 19:42:11 +05:30
Sarvesh Bodakhe 716c5731ec feat(wpa_supplicant): Add WIFI_EVENT_AP_WRONG_PASSWORD in SoftAP
This event is triggered when external station tries connecting to softAP
with wrong password.

Currently supported softAP AUTH modes: WPA-PSK, WPA2-PSK and WPA3-PSK (SAE-auth)
2025-01-15 19:42:11 +05:30
Shyamal Khachane 624878b6e2 fix(esp_wifi): Populate appropriate reason codes when softAP sends deauthentication
Populate appropriate reason for sending deauthentication when softAP receives
invalid RSN IE from association request
2024-10-21 11:31:17 +08:00
aditi beda284524 feat(esp_wifi): Add esp-idf specific changes
Added esp-idf implementation specific changes on top of the upstream updates.
2024-09-29 19:13:20 +08:00
aditi fbde07c953 feat(esp_wifi): Replace crypto_key with crypto_ec_key
Replaced all occurances of crypto_key with crypto_ec_key struct
    to make the code more consistent with upstream.
2024-09-29 19:13:20 +08:00
aditi_lonkar cab4dc15f4 feat(esp_wifi): Restructure dpp crypto Layer APIs
1) Update dpp implementation as per upstram hostapd tag hostap_2_10.
2) Move dpp crypto routines into a separate source code file.
2024-09-29 19:13:20 +08:00
yinqingzhao a8ede32979 fix(wifi): modify some SOC_WIFI_SUPPORT_5G to CONFIG_SOC_WIFI_SUPPORT_5G 2024-09-24 13:14:51 +08:00
Jiang Jiang Jian d076f0ad80 Merge branch 'feat/wifi_crypto_funcs_cleanup' into 'master'
Cleanup of wifi crypto funcs within wifi libs

See merge request espressif/esp-idf!30698
2024-09-23 21:08:50 +08:00
jgujarathi 52bcdb9400 refactor(esp_wifi): Cleanup of wifi crypto funcs within wifi libs
- Remove unnecessary funcs from wpa_crypto_funcs_t and consolidate some
  of their usages in wifi libs
2024-09-23 14:24:08 +05:30
Jouni Malinen 05874b938e SAE: Reject invalid Rejected Groups element in the parser
There is no need to depend on all uses (i.e., both hostapd and
wpa_supplicant) to verify that the length of the Rejected Groups field
in the Rejected Groups element is valid (i.e., a multiple of two octets)
since the common parser can reject the message when detecting this.

Signed-off-by: Jouni Malinen <j@w1.fi>
2024-09-23 12:05:02 +08:00
Jouni Malinen ba76df4f69 SAE: Check for invalid Rejected Groups element length explicitly
Instead of practically ignoring an odd octet at the end of the element,
check for such invalid case explicitly. This is needed to avoid a
potential group downgrade attack.

Signed-off-by: Jouni Malinen <j@w1.fi>
2024-09-23 12:05:02 +08:00
Jouni Malinen b6f91e403a SAE: Check that peer's rejected groups are not enabled in AP
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2024-09-23 12:05:02 +08:00
Kapil Gupta 903c11ff1a Merge branch 'bugfix/dpp_5ghz_chan_support' into 'master'
fix(esp_wifi): Add support for 5ghz channel list for easy connect

Closes WIFI-6420

See merge request espressif/esp-idf!32146
2024-09-20 14:46:05 +08:00
Kapil Gupta e24005c8db fix(esp_wifi): Add support for 5ghz channel list for easy connect 2024-09-20 14:46:05 +08:00
Kapil Gupta 52002bf92d fix(esp_wifi): Allow connection with WPA mode in WPS 2024-09-20 14:16:01 +08:00
Kapil Gupta 27cf5267a1 fix(esp_wifi): Added prints in btm roam for error condition 2024-09-18 14:44:24 +08:00
xuxiao 8780375859 feat(wifi): add wifi support for esp32c61 2024-08-30 20:43:06 +08:00
Shyamal Khachane 4e3951a587 fix(esp_wifi): Recompute keys in OWE if AP does not include PMKID in assoc response 2024-07-18 18:15:02 +08:00
Sarvesh Bodakhe 20a3be5191 fix(wpa_supplicant): Avoid delaying removal of wps enrollee by 10ms
This is no longer needed as eloop timers are now executed in wifi task context.
2024-07-11 14:53:27 +05:30
Sarvesh Bodakhe 54e61fbb97 fix(wpa_supplicant): Handle case when WPS registrar misses WSC_DONE sent by station
When registrar somehow misses the WSC_DONE sent by station and station
goes for next connection after sending deauth, make sure that softAP
disables the registrar.
2024-07-11 14:53:24 +05:30
Sarvesh Bodakheandjgujarathi ac508b5778 fix(wifi): Fix issue of supplicant using wrong parameters to configure bss
- Ensure that wpa_supplicant's state machine registers the requirement for rsnxe
  before deciding to add rsnxe to a assoc request.

Co-authored-by: jgujarathi <jash.gujarathi@espressif.com>
2024-07-01 15:32:45 +05:30
Alexey Lapshin f328e06ed4 fix(wpa_supplicant): fix warnings found by GNU static analyzer 2024-06-18 14:25:37 +08:00