commit df104d70c6cc62d8d7895a990e238bfc99f6cc77
author Dundi Raviteja <dundi@codeaurora.org> Wed Mar 10 11:56:36 2021 +0530
committer Karsten Tausche <karsten@fairphone.com> Thu Sep 30 13:43:28 2021 +0200
tree 9c60270c9798dc512104f18a8ec46c21b0ee8176
parent 09daf5f86ad267c5016127c5de5a490e1017ec9d

wlan: Drop invalid EAPOL packets in SAP mode

Drop inalid EAPOL packets in SAP mode which are not
destined to self mac address.

Change-Id: I9754dddf580e60bd88ddc6e28355162499a8d125
CRs-Fixed: 2868054
Issue: FP3SEC-52
(cherry picked from commit 8103f44eaf2f4fafdbcd33659eba8e57a78e9412)

CORE/HDD/src/wlan_hdd_softap_tx_rx.c

diff --git a/CORE/HDD/src/wlan_hdd_softap_tx_rx.c b/CORE/HDD/src/wlan_hdd_softap_tx_rx.c
index 38416ee..c728ae1 100644
--- a/CORE/HDD/src/wlan_hdd_softap_tx_rx.c
+++ b/CORE/HDD/src/wlan_hdd_softap_tx_rx.c
@@ -1728,9 +1728,19 @@
          return VOS_STATUS_E_FAILURE;
       }
 
-      if (TRUE == hdd_IsEAPOLPacket(pVosPacket))
+      if (TRUE == hdd_IsEAPOLPacket(pVosPacket)) {
           wlan_hdd_log_eapol(skb, WIFI_EVENT_DRIVER_EAPOL_FRAME_RECEIVED);
 
+          if (vos_mem_compare2(skb->data,
+                               pAdapter->macAddressCurrent.bytes, 6) != 0) {
+              VOS_TRACE(VOS_MODULE_ID_HDD_SAP_DATA, VOS_TRACE_LEVEL_ERROR,
+                        "Packet is not destined to this address, dropping");
+              kfree_skb(skb);
+              pVosPacket = pNextVosPacket;
+              continue;
+          }
+      }
+
       pVosPacket->pSkb = NULL;
       //hdd_softap_dump_sk_buff(skb);