Fix hostapd BSS_TM_REQ handling of bss_term parameter
The TSF field in BSS termination information was not cleared correctly.
It was supposed to be cleared to all zeros, but the memset call did not
point at offset 2; instead, it cleared it with 0x02 octets and also
cleared the subelement header with 0x02 octets while leaving two last
octets uninitialized.
Fixes: a30dff07fb
("Add BSS_TM_REQ command to send BSS Transition Management Request")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
This commit is contained in:
parent
e6ac47b47d
commit
2f68051395
1 changed files with 1 additions and 1 deletions
|
@ -883,7 +883,7 @@ static int hostapd_ctrl_iface_bss_tm_req(struct hostapd_data *hapd,
|
||||||
/* TODO: TSF configurable/learnable */
|
/* TODO: TSF configurable/learnable */
|
||||||
bss_term_dur[0] = 4; /* Subelement ID */
|
bss_term_dur[0] = 4; /* Subelement ID */
|
||||||
bss_term_dur[1] = 10; /* Length */
|
bss_term_dur[1] = 10; /* Length */
|
||||||
os_memset(bss_term_dur, 2, 8);
|
os_memset(&bss_term_dur[2], 0, 8);
|
||||||
end = os_strchr(pos, ',');
|
end = os_strchr(pos, ',');
|
||||||
if (end == NULL) {
|
if (end == NULL) {
|
||||||
wpa_printf(MSG_DEBUG, "Invalid bss_term data");
|
wpa_printf(MSG_DEBUG, "Invalid bss_term data");
|
||||||
|
|
Loading…
Reference in a new issue