Now I wish I'd written that mini WPA supplicant for IoT use I intended to write. I don't think I would've made this mistake :-)
Show this thread
-
I need to review the patches but the general idea is a failure to track the state of the handshake AIUI. The zero-key part is def. a bug.
Ultimately though, if you can patch it without breaking the spec (which you can), by definition it's not a spec bug but an impl bug.
