[prev in list] [next in list] [prev in thread] [next in thread] 

List:       hostap
Subject:    [PATCH 1/2] RRM: Fix the parsing of the extended request subelement
From:       Andrei Otcheretianski <andrei.otcheretianski () intel ! com>
Date:       2023-12-26 13:30:15
Message-ID: 20231226133016.653703-1-andrei.otcheretianski () intel ! com
[Download RAW message or body]

From: Ilan Peer <ilan.peer@intel.com>

The extended request element is expected to also include the extended
ID.

Signed-off-by: Ilan Peer <ilan.peer@intel.com>
---
 wpa_supplicant/rrm.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/wpa_supplicant/rrm.c b/wpa_supplicant/rrm.c
index 1aa87bb017..ac37c7db48 100644
--- a/wpa_supplicant/rrm.c
+++ b/wpa_supplicant/rrm.c
@@ -1117,6 +1117,17 @@ static int wpas_rm_handle_beacon_req_subelem(struct wpa_supplicant *wpa_s,
 			return -1;
 		}
 
+		if (sid == WLAN_BEACON_REQUEST_SUBELEM_EXT_REQUEST) {
+			if (slen < 2 || subelem[0] != WLAN_EID_EXTENSION) {
+				wpa_printf(MSG_DEBUG,
+					   "Invalid extended request");
+				return -1;
+			}
+
+			subelem++;
+			slen--;
+		}
+
 		if ((sid == WLAN_BEACON_REQUEST_SUBELEM_REQUEST &&
 		     data->eids) ||
 		    (sid == WLAN_BEACON_REQUEST_SUBELEM_EXT_REQUEST &&
-- 
2.43.0


_______________________________________________
Hostap mailing list
Hostap@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/hostap
[prev in list] [next in list] [prev in thread] [next in thread]