Re: Associd out of (hardware) bounds

From: Bjoern A. Zeeb <bz_at_FreeBSD.org>
Date: Fri, 04 Nov 2022 19:37:38 UTC
On Mon, 31 Oct 2022, Martin Husemann wrote:

Hi Martin,


>
> I have a reproducable failure in my version of the net80211 code
> where I don't clearly see if (or why not) this would happen in the
> FreeBSD original too...
>
> I have a run(4) usb wifi adapter, which has a hardware limit on the
> assoc table and so sets vap->iv_max_aid (to RT2870_WCID_MAX) and also
> sets the ic->ic_newassoc callback to run_newassoc to handle this.
>
> I am in station mode and start wpa_supplicant to join my home network.
[...]
> Any here tested a run(4) recently?

Isn't iv_max_aid for hostap mode (only)?

run_newassoc() seems to check for "1" in case of STA in FreeBSD:
https://cgit.freebsd.org/src/blame/sys/dev/usb/wlan/if_run.c#n2780

/bz

-- 
Bjoern A. Zeeb                                                     r15:7