WARP Project Forums - Wireless Open-Access Research Platform

This test in wlan_mac_ap.c line 1659 is in the case for processing received Probe Requests. It checks for an SSID match.

if((active_bss_info != NULL) && ((mac_payload_ptr_u8[1]==0) || (memcmp(mac_payload_ptr_u8+2, (u8*)active_bss_info->ssid, mac_payload_ptr_u8[1])==0))) {

It looks to me like the test will succeed for the case in which the SSID in the Probe Request is a prefix of the SSID of the AP, for example, ABCDEFG in the ProbeRequest will match ABCDEFGXXXXXXX in the  bss_info_t, which is clearly not the desired behavior.

The fix would be to include a test for equal lengths as well.

I haven't tested this but figured I'd see if anyone else had run into this.