]> git.ipfire.org Git - thirdparty/hostap.git/commit - src/ap/drv_callbacks.c
AP: Silently ignore management frame from unexpected source address
authorJouni Malinen <j@w1.fi>
Thu, 29 Aug 2019 08:52:04 +0000 (11:52 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 11 Sep 2019 09:28:37 +0000 (12:28 +0300)
commitd86d66dc073bc21d3b12faf4112062ae00c1773f
treebe21cc6328a27103b1e45a1361d5baba2e4ebd55
parenta84bf443887deee828a3b4422f63475709404d5c
AP: Silently ignore management frame from unexpected source address

Do not process any received Management frames with unexpected/invalid SA
so that we do not add any state for unexpected STA addresses or end up
sending out frames to unexpected destination. This prevents unexpected
sequences where an unprotected frame might end up causing the AP to send
out a response to another device and that other device processing the
unexpected response.

In particular, this prevents some potential denial of service cases
where the unexpected response frame from the AP might result in a
connected station dropping its association.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/ap/drv_callbacks.c
src/ap/ieee802_11.c