tests: WNM-Sleep Mode Request bounds checking for empty contents

The wnm_sleep_mode_proto test case was already covering number of
invalid WNM-Sleep Mode Request frame cases, but it was missing the
shortest possible case with a missing Dialog Token field. Add that as a
regression test case for bounds checking in
ieee802_11_rx_wnmsleep_req().

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

diff --git a/tests/hwsim/test_wnm.py b/tests/hwsim/test_wnm.py
index 192761633ce8e52343a735f33f8d90016fd65e7a..866cbfc794a4f5380836ec9a66bb2dc6e5921637 100644 (file)
--- a/tests/hwsim/test_wnm.py
+++ b/tests/hwsim/test_wnm.py
@@ -452,7 +452,8 @@ def test_wnm_sleep_mode_proto(dev, apdev):
 
     hdr = "d0003a01" + bssid.replace(':', '') + addr.replace(':', '') + bssid.replace(':', '') + "1000"
     hapd.set("ext_mgmt_frame_handling", "1")
-    tests = [ "0a1001",
+    tests = [ "0a10",
+              "0a1001",
               "0a10015d00",
               "0a10015d01",
               "0a10015d0400000000",