#353: Checks in 1409+ make association with orinoco AP/OR impossible
-----------------------------------+----------------------------------------
Reporter: [EMAIL PROTECTED] | Owner:
Type: defect | Status: new
Priority: major | Milestone:
Component: madwifi: other | Version: trunk
Resolution: | Keywords:
Patch_attached: 0 |
-----------------------------------+----------------------------------------
Comment (by [EMAIL PROTECTED]):
I have the same problem, here's some info:
I looked though to the part of the code that was added in when parsing the
ASSOC_RESP and REASSOC_RESP.
It seems that my Orinoco AP (AP-2000, not sure what jason had) is creating
bad ASSOC_RESP frames.
Going through the element id calculations, it actually provides two
elements, one for the supported rates (id 1), and another element id 129,
which isn't listed in the ieee80211.h file, but a google search turned up
as saying agere wanted it for its private use.
This isn't the problem, the problem is there's 1 more byte after all the
subtractions, which in turn, makes the while loop (line 3035,
ieee80211_input.c) go again and the IEEE80211_VERIFY_LENGTH drops the
packet.
--
Ticket URL: <http://madwifi.org/ticket/353>
MadWifi <http://madwifi.org/>
Multiband Atheros Driver for Wireless Fidelity
