On Wed, 2017-08-02 at 09:01 +0200, Stanislaw Gruszka wrote: > The relevant mac80211 code look like this: > > ieee80211_rx_result > ieee80211_rx_h_michael_mic_verify(struct ieee80211_rx_data *rx) I believe that ieee80211_rx_h_decrypt() will drop the frames you're looking at, and I do think the original patch is correct. If MMIC validation was (and could be) done, then the frame must have been decrypted properly. johannes
