Commit 0e879ef1 authored Feb 13, 2019 by Johannes Berg Committed by Greg Kroah-Hartman Jun 25, 2019

mac80211: drop robust management frames from unknown TA



commit 588f7d39b3592a36fb7702ae3b8bdd9be4621e2f upstream.

When receiving a robust management frame, drop it if we don't have
rx->sta since then we don't have a security association and thus
couldn't possibly validate the frame.

Cc: stable@vger.kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent 17d941dc

net/mac80211/rx.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -3752,6 +3752,8 @@ static bool ieee80211_accept_frame(struct ieee80211_rx_data *rx)
		case NL80211_IFTYPE_STATION:
		if (!bssid && !sdata->u.mgd.use_4addr)
		return false;
		if (ieee80211_is_robust_mgmt_frame(skb) && !rx->sta)
		return false;
		if (multicast)
		return true;
		return ether_addr_equal(sdata->vif.addr, hdr->addr1);