#1648: No bssid validation in ADHOC mode
-----------------------------------------+----------------------------------
Reporter: [EMAIL PROTECTED] | Owner:
Type: defect | Status: new
Priority: minor | Milestone:
Component: madwifi: 802.11 stack | Version: v0.9.3.3
Resolution: | Keywords: adhoc bssid validation
Patch_attached: 1 |
-----------------------------------------+----------------------------------
Changes (by mentor):
* priority: critical => minor
Old description:
> There is no BSSID validation when an interface is configured in ADHOC
> mode. So, under some conditions, an host accepts IP packets even if they
> have been sent by hosts with different ESSID and BSSID.
>
> You can reproduce this problem this way:
> - Configure two adhoc hosts with different ESSID and BSSID;
> - Set IP addresses of the same network to these hosts;
> - On both hosts set a static entry in the ARP table with the MAC of the
> other host;
> - Now you can ping or generate any kind of traffic between these hosts,
> even if they belong to different adhoc cells (they have different BSSID).
>
> I suggest a patch to correct this problem (attached, based on 0.9.3.3).
> It works but I'm not sure if it's 100% correct.
New description:
There is no BSSID validation when an interface is configured in ADHOC
mode. So, under some conditions, a host accepts IP packets even if they
have been sent by hosts with different ESSID and BSSID.
You can reproduce this problem this way:
- Configure two adhoc hosts with different ESSID and BSSID;
- Set IP addresses of the same network to these hosts;
- On both hosts set a static entry in the ARP table with the MAC of the
other host;
- Now you can ping or generate any kind of traffic between these hosts,
even if they belong to different adhoc cells (they have different BSSID).
I suggest a patch to correct this problem (attached, based on 0.9.3.3). It
works but I'm not sure if it's 100% correct.
--
Ticket URL: <http://madwifi.org/ticket/1648#comment:1>
madwifi.org <http://madwifi.org/>
Multiband Atheros Driver for Wireless Fidelity
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Madwifi-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/madwifi-tickets