arne/openwrt
1
0
Fork 0
forked from mirror/openwrt
Code Pull requests Activity

hostapd: ubus: fix beacon request reporting detail field size

Browse source 
The Reporting Detail value is a 1-byte field, but was written as le16,
producing a 2-byte write that also contradicts the length field of 1
in the subelement header.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
This commit is contained in:
Felix Fietkau 2026-03-18 15:58:52 +00:00
parent 0208089ded
commit c5564ba071
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
package/network/services/hostapd/src/src/ap/ubus.c
View file

@ -1248,7 +1248,7 @@ hostapd_rrm_beacon_req(struct ubus_context *ctx, struct ubus_object *obj,
/* as per 9-104 */
wpabuf_put_u8(req, 2);
wpabuf_put_u8(req, 1);
wpabuf_put_le16(req, reporting_detail);
wpabuf_put_u8(req, reporting_detail);
}
ret = hostapd_send_beacon_req(hapd, addr, 0, req);