diff options
author | Felix Fietkau <nbd@openwrt.org> | 2010-01-07 19:23:53 (GMT) |
---|---|---|
committer | John W. Linville <linville@tuxdriver.com> | 2010-01-08 20:49:28 (GMT) |
commit | d79074488083ec0d7ecd15352192dc1631f25643 (patch) | |
tree | 3ba73d537ca84153bc6412bf5b9fdcdf1e3e56b9 /net/mac80211/mlme.c | |
parent | 045cfb71a3901005bf6dcedae98cecb3360a0bfc (diff) | |
download | linux-fsl-qoriq-d79074488083ec0d7ecd15352192dc1631f25643.tar.xz |
mac80211: add missing sanity checks for action frames
Various missing sanity checks caused rejected action frames to be
interpreted as channel switch announcements, which can cause a client
mode interface to switch away from its operating channel, thereby losing
connectivity. This patch ensures that only spectrum management action
frames are processed by the CSA handling function and prevents rejected
action frames from getting processed by the MLME code.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Cc: stable@kernel.org
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/mac80211/mlme.c')
-rw-r--r-- | net/mac80211/mlme.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/net/mac80211/mlme.c b/net/mac80211/mlme.c index 3e1eab9..05a18f4 100644 --- a/net/mac80211/mlme.c +++ b/net/mac80211/mlme.c @@ -1963,7 +1963,9 @@ static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata, rma = ieee80211_rx_mgmt_disassoc(sdata, mgmt, skb->len); break; case IEEE80211_STYPE_ACTION: - /* XXX: differentiate, can only happen for CSA now! */ + if (mgmt->u.action.category != WLAN_CATEGORY_SPECTRUM_MGMT) + break; + ieee80211_sta_process_chanswitch(sdata, &mgmt->u.action.u.chan_switch.sw_elem, ifmgd->associated); |