wlan: Change to drop spurious Assoc/Reassoc frames
As per the current implementation all received management frames
will be queued in PE and processed sequentially.
In PMF SAP mode, if we receive Re/Assoc request frame from
connected peer we will send Re/Assoc response with retry later
status and initiate SA query to connected peer and disconnect if
we didn't receive SA query response with in timeout.
In the issue scenario DOS attack with Assoc/Reassoc frames were
injected on behalf of connected station in PMF mode and due to
flooding of this request frames there is a delay in processing
the SA query response frame sent by peer resulting in disconnection.
Change made to drop queuing Assoc/Reassoc frames sent by connected
peer in the below scenario's.
1)Avoid queuing, if time delta between last and current
Assoc/Reassoc frame is less than 1 sec.
2)Avoid queuing, if SA query is in progress.
Change-Id: Icf31f8efb3bf24dd76a0a2162cab423d4cac12b4
CRs-Fixed: 879505
4 files changed