From c5564ba071904cbbfe078f15b525676dba1cccab Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Wed, 18 Mar 2026 15:58:52 +0000 Subject: [PATCH] hostapd: ubus: fix beacon request reporting detail field size The Reporting Detail value is a 1-byte field, but was written as le16, producing a 2-byte write that also contradicts the length field of 1 in the subelement header. Signed-off-by: Felix Fietkau --- package/network/services/hostapd/src/src/ap/ubus.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/network/services/hostapd/src/src/ap/ubus.c b/package/network/services/hostapd/src/src/ap/ubus.c index 1a5b29ed9a..8e27606816 100644 --- a/package/network/services/hostapd/src/src/ap/ubus.c +++ b/package/network/services/hostapd/src/src/ap/ubus.c @@ -1248,7 +1248,7 @@ hostapd_rrm_beacon_req(struct ubus_context *ctx, struct ubus_object *obj, /* as per 9-104 */ wpabuf_put_u8(req, 2); wpabuf_put_u8(req, 1); - wpabuf_put_le16(req, reporting_detail); + wpabuf_put_u8(req, reporting_detail); } ret = hostapd_send_beacon_req(hapd, addr, 0, req);