From 3c702be99add97af0c6607ca0e072c99ebf6ef01 Mon Sep 17 00:00:00 2001 From: Stefan Sperling Date: Mon, 2 May 2016 08:12:43 +0000 Subject: IEEE 802.11 sequence numbers wrap at 12 bit. Fix a case where ieee80211_ba_input() failed to account for that. ok tb@ --- sys/net80211/ieee80211_input.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'sys/net80211') diff --git a/sys/net80211/ieee80211_input.c b/sys/net80211/ieee80211_input.c index 2457e44d962..8c602488122 100644 --- a/sys/net80211/ieee80211_input.c +++ b/sys/net80211/ieee80211_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ieee80211_input.c,v 1.174 2016/04/28 15:00:27 stsp Exp $ */ +/* $OpenBSD: ieee80211_input.c,v 1.175 2016/05/02 08:12:42 stsp Exp $ */ /*- * Copyright (c) 2001 Atsushi Onoe @@ -740,7 +740,7 @@ ieee80211_input_ba(struct ieee80211com *ic, struct mbuf *m, } else { ic->ic_stats.is_ht_rx_ba_window_slide++; ieee80211_input_ba_seq(ic, ni, tid, - ba->ba_winstart + count); + (ba->ba_winstart + count) & 0xfff); ieee80211_input_ba_flush(ic, ni, ba); } } -- cgit v1.2.3