CVSROOT: /cvs
Module name: src
Changes by: s...@cvs.openbsd.org 2016/12/17 11:35:54
Modified files:
sys/net80211 : ieee80211_crypto.c ieee80211_crypto.h
ieee80211_crypto_tkip.c ieee80211_node.c
ieee80211_var.h
Log message:
Complete our half-done implementation of TKIP countermeasures in hostap mode.
The previous code would disable the AP until next reboot upon MIC failure.
Instead, disable the AP for 60 seconds, as required by the 802.11 standard.
I randomly added a bit of time (up to 120 seconds total) just because we can.
Problem reported by Mathy Vanhoef, thanks!
ok deraadt@
random input reyk@
