]> git.baikalelectronics.ru Git - kernel.git/commit
mac80211: Allow HE operation to be longer than expected.
authorBrian Norris <briannorris@chromium.org>
Tue, 23 Feb 2021 05:19:26 +0000 (13:19 +0800)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 16 Mar 2021 20:14:04 +0000 (21:14 +0100)
commit6a538c415a1cad724cdf43fefc2f0740815c0010
treece1c8f4c61ac2ee81f5a7f0dac15aae2504c1ec9
parent63d08705aab3ea80bb9f049d414af01e5261e225
mac80211: Allow HE operation to be longer than expected.

We observed some Cisco APs sending the following HE Operation IE in
associate response:

  ff 0a 24 f4 3f 00 01 fc ff 00 00 00

Its HE operation parameter is 0x003ff4, so the expected total length is
7 which does not match the actual length = 10. This causes association
failing with "HE AP is missing HE Capability/operation."

According to P802.11ax_D4 Table9-94, HE operation is extensible, and
according to 802.11-2016 10.27.8, STA should discard the part beyond
the maximum length and parse the truncated element.

Allow HE operation element to be longer than expected to handle this
case and future extensions.

Fixes: b16d93ef10e0 ("mac80211: refactor extended element parsing")
Signed-off-by: Brian Norris <briannorris@chromium.org>
Signed-off-by: Yen-lin Lai <yenlinlai@chromium.org>
Link: https://lore.kernel.org/r/20210223051926.2653301-1-yenlinlai@chromium.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/mlme.c
net/mac80211/util.c