Remote panic with ath(4)

[Martin]

Hi,

there is a way to crash a connected wireless box
running with ath(4) by using another one with an
ath(4) interface in hostap mode.

Steps to reproduce:
# ifconfig ath0 powersavesleep 0
# ping <wireless-client-ip>


The panic is in:
ath_beacon_config()

Problem:
Fatal trap 18: integer divide fault while in kernel mode

on the wireless client uname shows:
FreeBSD 5.3-STABLE FreeBSD 5.3-STABLE #0:
Sat Jan 29 19:30:55 CET 2005 i386

Martin