A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-26 06:33:19 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Ignore CSA request for invalid channel

Browse source 
In present scenario, STA disconnects with AP if it receives
invalid channel in CSA IE. In this case STA shouldn't
disconnect with AP as this request may come from a spoof AP.

Ignore this CSA request as it might be from spoof AP and
if it is from genuine AP heart beat failure happens and
results in disconnection. After disconnection DUT may
reconnect to same or other APs.

Mot-CRs-fixed: (CR)
CVE-Fixed: CVE-2023-28584
Bug: 285903061
Change-Id: Ic46ac6d6fa633bd6dbcb188ce616265f297bdf44
CRs-Fixed: 3390251

Signed-off-by: Ashutosh Verma <ashverma@motorola.com>
Change-Id: Ic46ac6d6fa633bd6dbcb188ce616265f297bdf44
Reviewed-on: https://gerrit.mot.com/2704837
SME-Granted: SME Approvals Granted
SLTApproved: Slta Waiver
Tested-by: Jira Key
Reviewed-by: Xiangpo Zhao <zhaoxp3@motorola.com>
Submit-Approved: Jira Key
This commit is contained in:
Aravind Kishore Sukla 2023-02-08 14:45:03 +05:30 • committed by panyq6
commit b2d4835430
1 changed files with 9 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

22
core/mac/src/pe/lim/lim_utils.c
View file

@ -1873,20 +1873,16 @@ static void __lim_process_channel_switch_timeout(struct pe_session *pe_session)
}
/*
* If the channel-list that AP is asking us to switch is invalid
* then we cannot switch the channel. Just disassociate from AP.
* We will find a better AP !!!
* The channel switch request received from AP is carrying
* invalid channel. It's ok to ignore this channel switch
* request as it might be from spoof AP. If it's from genuine
* AP, it may lead to heart beat failure and result in
* disconnection. DUT can go ahead and reconnect to it/any
* other AP once it disconnects.
*/
if ((pe_session->limMlmState ==
eLIM_MLM_LINK_ESTABLISHED_STATE) &&
(pe_session->limSmeState != eLIM_SME_WT_DISASSOC_STATE) &&
(pe_session->limSmeState != eLIM_SME_WT_DEAUTH_STATE)) {
pe_err("Invalid channel! Disconnect");
lim_tear_down_link_with_ap(mac, pe_session->peSessionId,
REASON_UNSUPPORTED_CHANNEL_CSA,
eLIM_LINK_MONITORING_DISASSOC);
return;
}
pe_err("Invalid channel freq %u Ignore CSA request",
channel_freq);
return;
}
switch (pe_session->gLimChannelSwitch.state) {
case eLIM_CHANNEL_SWITCH_PRIMARY_ONLY: