From 2a21c3058090148199c6197a82010109bf5b8737 Mon Sep 17 00:00:00 2001 From: damien Date: Tue, 12 Aug 2008 18:25:40 +0000 Subject: [PATCH] AES Key Wrap adds a 64-bit MIC to the payload but we pad the content of the frame so that it is a multiple of 8 bytes before encryption. So we must reserve up to 15 bytes in the mbuf for the worst case, not 8. --- sys/net80211/ieee80211_pae_output.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sys/net80211/ieee80211_pae_output.c b/sys/net80211/ieee80211_pae_output.c index 66b406978e1..2e8a341e708 100644 --- a/sys/net80211/ieee80211_pae_output.c +++ b/sys/net80211/ieee80211_pae_output.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ieee80211_pae_output.c,v 1.6 2008/08/12 18:22:41 damien Exp $ */ +/* $OpenBSD: ieee80211_pae_output.c,v 1.7 2008/08/12 18:25:40 damien Exp $ */ /*- * Copyright (c) 2007,2008 Damien Bergamini @@ -379,7 +379,7 @@ ieee80211_send_4way_msg3(struct ieee80211com *ic, struct ieee80211_node *ni) ((ni->ni_rsnprotos == IEEE80211_PROTO_RSN) ? 2 + 6 + k->k_len : 0) + ((ni->ni_flags & IEEE80211_NODE_MFP) ? 2 + 28 : 0) + - 8); + 15); if (m == NULL) return ENOMEM; key = mtod(m, struct ieee80211_eapol_key *); @@ -496,7 +496,7 @@ ieee80211_send_group_msg1(struct ieee80211com *ic, struct ieee80211_node *ni) ((ni->ni_rsnprotos == IEEE80211_PROTO_WPA) ? k->k_len : 2 + 6 + k->k_len) + ((ni->ni_flags & IEEE80211_NODE_MFP) ? 2 + 28 : 0) + - 8); + 15); if (m == NULL) return ENOMEM; key = mtod(m, struct ieee80211_eapol_key *); -- 2.20.1