mirror of
https://github.com/openwrt/openwrt.git
synced 2026-10-14 02:19:06 +04:00
Felix Fietkau
7519263cb1
A WPS enrollee associates with Open System authentication and without an RSNE; hostapd's check_assoc_ies() accepts a station with a WPS IE and drops its RSNE. IEEE 802.11-2024 12.12.2 forbids Open System authentication without encryption in the 6 GHz band. iface_wps() enabled WPS on any BSS that iface_auth_type() marked wps_possible (open, OWE and the personal modes) when wps_pushbutton or wps_label was set, whatever the band. hostapd_config_check_bss_6g() does not look at wps_state, so the 6 GHz link of an AP MLD ran WPS, and an enrollee was accepted with Open System authentication there. Clear wps_possible in iface_wps() for the 6 GHz band, as it already does for multi_ap 1. iface_wps() is the one place that decides whether WPS is written, so the rule holds for every auth type that sets wps_possible. Signed-off-by: Felix Fietkau <nbd@nbd.name>