Drop fragmented 802.11 frames.
authorstsp <stsp@openbsd.org>
Tue, 18 May 2021 08:10:45 +0000 (08:10 +0000)
committerstsp <stsp@openbsd.org>
Tue, 18 May 2021 08:10:45 +0000 (08:10 +0000)
commitfe5684e3e62b0a1eb90a610b26dfcc30cf60ebce
tree292675fe11946097584b5b5d4e3a448ff10757a3
parent5e1eb03df39766f0bdfd8a11cbe03ed461e23b22
Drop fragmented 802.11 frames.

Fragmented frames were never of any practical use to us anyway, given that
our net80211 stack does not (yet?) re-assemble them.

Counter-measure against attacks where an arbitrary packet is injected in a
fragment with attacker-controlled content (via an AP which supports fragments).
See https://papers.mathyvanhoef.com/usenix2021.pdf
Section 6.8 "Treating fragments as full frames"

ok mpi@
sys/net80211/ieee80211_input.c