On Thu, 2011-01-27 at 00:16 +0200, Arik Nemtsov wrote: > > If we add the station before the response frame's ACK is received, we > > still have the race, and we need to delete if we don't get the ACK. If > > we add the station before we send the assoc response we get rid of this > > race, but also have to delete if we don't get the ACK. I guess that case > > is actually nicer in some way since we would have allowed the station to > > connect, so if spurious data frames go up because we don't get an ACK > > from the station that's no big deal? > > > > Maybe there's no need to delete the station even when no ACK is > received? It will get disconnected after the idle timeout anyway. And > it already passed authentication, so its not a DOS attack. > (If that's what you meant as well then I agree) Yeah -- except there's no timeout in mac80211, of course, so hostapd really has to delete it. johannes -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html