Hi Martin, Issue has been tracked down and it was discovered that with key material v1 API FW, action delete is not supported. WEP encryption in such cases is disabled by resetting bit in mac_filter which happens in the same function. Patch has been posted to linux-wireless list; here is link for your reference: https://patchwork.kernel.org/patch/5505651/ I have added your "reported-by". Thanks, Avinash ________________________________________ From: Martin Fuzzey [mfuzzey@xxxxxxxxxxx] Sent: Wednesday, November 19, 2014 8:20 PM To: Avinash Patil Cc: John W. Linville; linux-wireless@xxxxxxxxxxxxxxx; Amitkumar Karwar Subject: Re: [REGRESSION] mwifiex: memory corruption on WEP disassociation Hi Avinash, On 19/11/14 09:44, Avinash Patil wrote: > Could you please check if issue is seen with this FW as well? > Here is link: > http://git.marvell.com/?p=mwifiex-firmware.git;a=commit;h=3f45b8c4cc1eb1d102bc3486b19677332dd215ab Tried that firmware (14.66.35.p52) with kernel 3.16, same issue. It still uses V1 keys. I also tried kernel 3.18-rc5 (with the original 14.66.9.p96 firmware) and, while it didn't crash, some logs I added showed that a short (10 byte) response was still being handed to mwifiex_ret_802_11_key_material_v1(). It didn't crash because I was "lucky" enough that the non initialized key length field happened to contain zero. Regards, Martin -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
