HomeFreeBSD

net80211: fix TKIP trailer trimming w/ no rx parameters given

Description

net80211: fix TKIP trailer trimming w/ no rx parameters given

Previous work made trimming the TKIP trailer an optional thing
based on what the driver indicated it did with the received
frame. However, for drivers that aren't populating an RX frame
with an rx status - notably iwn(4) - exposed this bug.

If the driver doesn't expose any RX status then just restore
the previous behaviour.

This matches what was done in the CCMP code in ccmp_decap().

Locally tested:

  • iwn(4), STA mode, CCMP + TKIP groupwise network

Differential Revision: https://reviews.freebsd.org/D50638
Fixes: 731ff40069d28
Reviewed by: bz
Approved by: so
Security: FreeBSD-EN-25:13.wlan_tkip

(cherry picked from commit 36fcd52c2bd5a8a4b3d584564852f417fb83e762)
(cherry picked from commit 950343a170f06a0651b725058e0669b8d03b9d24)

Details

Provenance
adrianAuthored on Jun 2 2025, 12:11 AM
gordonCommitted on Aug 7 2025, 11:21 PM
Reviewer
bz
Differential Revision
D50638: net80211: fix TKIP trailer trimming w/ no rx parameters given
Parents
rGce4fe4c4bfcd: Add a new sysctl in order to diffrentiate UEFI architectures
Branches
Unknown
Tags
Unknown