From 01c40890b297bb64e37dd3f9f04abe0a780090ad Mon Sep 17 00:00:00 2001
From: stsp <stsp@openbsd.org>
Date: Fri, 26 Mar 2021 10:18:55 +0000
Subject: [PATCH] Fix wrong sequence number wrap in ieee80211_recv_auth(). IEEE
 802.11 sequence numbers wrap around at 0xfff, not 0xffff. ok phessler@ kevlo@

---
 sys/net80211/ieee80211_input.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sys/net80211/ieee80211_input.c b/sys/net80211/ieee80211_input.c
index e6a38d62f51..a2de00f7bcd 100644
--- a/sys/net80211/ieee80211_input.c
+++ b/sys/net80211/ieee80211_input.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ieee80211_input.c,v 1.231 2021/03/23 12:03:44 stsp Exp $	*/
+/*	$OpenBSD: ieee80211_input.c,v 1.232 2021/03/26 10:18:55 stsp Exp $	*/
 
 /*-
  * Copyright (c) 2001 Atsushi Onoe
@@ -2040,7 +2040,7 @@ ieee80211_recv_auth(struct ieee80211com *ic, struct mbuf *m,
 			/* XXX hack to workaround calling convention */
 			IEEE80211_SEND_MGMT(ic, ni,
 			    IEEE80211_FC0_SUBTYPE_AUTH,
-			    IEEE80211_STATUS_ALG << 16 | ((seq + 1) & 0xffff));
+			    IEEE80211_STATUS_ALG << 16 | ((seq + 1) & 0xfff));
 		}
 #endif
 		return;
-- 
2.20.1