diff options
| author |  Johannes Berg <johannes.berg@intel.com>
| 2023-10-01 13:01:09 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com>
| 2023-10-23 12:56:33 +0200 |
| commit | f3bd5932780091e214959ffdb1d91032ea4744be (patch) | |
| tree | 19f1cb670849856a69af7e9ac9422d268e0dca6c /net/mac80211 | |
| parent | wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2P... (diff) | |
| download | linux-f3bd5932780091e214959ffdb1d91032ea4744be.tar.gz linux-f3bd5932780091e214959ffdb1d91032ea4744be.tar.bz2 linux-f3bd5932780091e214959ffdb1d91032ea4744be.zip | |
wifi: mac80211: drop robust action frames before assoc
To be able to more easily understand the code, drop robust
action frames before being associated, even if there's no
MFP in the end, as they are Class 3 Frames and shouldn't
be transmitted in the first place.
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Gregory Greenman <gregory.greenman@intel.com>
Link: https://lore.kernel.org/r/20231001125722.b2fd37083371.Ie9f4906e2f6c698989bce6681956ed2f9454f27c@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211')
| -rw-r--r-- | net/mac80211/rx.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/net/mac80211/rx.c b/net/mac80211/rx.c index 051db97a92b4..6f679d2c0409 100644 --- a/net/mac80211/rx.c +++ b/net/mac80211/rx.c @@ -2474,6 +2474,15 @@ ieee80211_drop_unencrypted_mgmt(struct ieee80211_rx_data *rx) return RX_DROP_U_UNPROT_UNICAST_PUB_ACTION; } + /* + * Drop robust action frames before assoc regardless of MFP state, + * after assoc we also have decided on MFP or not. + */ + if (ieee80211_is_action(fc) && + ieee80211_is_robust_mgmt_frame(rx->skb) && + (!rx->sta || !test_sta_flag(rx->sta, WLAN_STA_ASSOC))) + return RX_DROP_U_UNPROT_ROBUST_ACTION; + return RX_CONTINUE; } |