Re: [PATCH ath-next 0/2] wifi: ath11k/ath12k: drop TKIP frames too short for the Michael MIC

[Julius Bairaktaris]

On Thu, 12 Nov 2026 10:40:50 -0800, Jeff Johnson wrote:
> Is this a theoretical change or are you able to have firmware pass too short
> frames to the host?

Not shown on hardware yet. The overflow is in the host code and a
harness that runs the driver's MIC path under ASan hits it, but whether
the firmware hands such a fragment pair to the host is the open part.

I'll measure it on an IPQ8074 with ath11k. That needs a USB adapter
that can inject raw TKIP fragments, which I'm buying now. I'll reply
with the capture and dmesg either way; if the firmware drops the frame
before the host sees it, I'll withdraw the series.

Julius