Commit d1b1a5eb authored by Johannes Berg's avatar Johannes Berg
Browse files

wifi: mac80211: drop invalid source address OCB frames 



In OCB, don't accept frames from invalid source addresses
(and in particular don't try to create stations for them),
drop the frames instead.

Reported-by: default avatar <syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com>
Closes: https://lore.kernel.org/r/6788d2d9.050a0220.20d369.0028.GAE@google.com/


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
Tested-by: default avatar <syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com>
Link: https://patch.msgid.link/20250616171838.7433379cab5d.I47444d63c72a0bd58d2e2b67bb99e1fea37eec6f@changeid


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent a85b8544

net/mac80211/rx.c

+4 −0
Original line number Diff line number Diff line
@@ -4432,6 +4432,10 @@ static bool ieee80211_accept_frame(struct ieee80211_rx_data *rx) 
		if (!multicast &&

		    !ether_addr_equal(sdata->dev->dev_addr, hdr->addr1))

			return false;

		/* reject invalid/our STA address */

		if (!is_valid_ether_addr(hdr->addr2) ||

		    ether_addr_equal(sdata->dev->dev_addr, hdr->addr2))

			return false;

		if (!rx->sta) {

			int rate_idx;

			if (status->encoding != RX_ENC_LEGACY)