Skip to content

Conversation

@bogdanbogush2
Copy link
Contributor

Reason for change:
Crash when client connects with 40MHz disabled in HT cap:

  1. Client sends 40 MHz disabled in HT cap

HT: STA 11:22:33:44:55:66 HT Capabilities Info: 0x402d
update_sta_ht STA 11:22:33:44:55:66 - no greenfield, num of non-gf stations 1
update_sta_ht STA 11:22:33:44:55:66 - 20 MHz HT, num of 20MHz HT STAs 1
HT: Forty MHz Intolerant is set by STA 11:22:33:44:55:66 in Association Request

  1. hostap tries to downgrade bandwith by setting secondary channel

ht40_intolerant_add
iface->conf->secondary_channel = 0;

  1. Since other parameters are not updated it later fails in __ieee802_11_set_beacon - hostapd_set_freq_params

20/40 MHz: center segment 0 (=3) and center freq 1 (=2412) not in sync

  1. Crash on params.freq->link_id = -1;

Test Procedure:

  1. Enable 40Mhz bandwidth
  2. Connect Iphone 16
  3. Check hostapd logs

Risks: Low
Priority: P1

@bogdanbogush2 bogdanbogush2 force-pushed the feature/RDKB-61540-4 branch 2 times, most recently from 01cb204 to 417f84d Compare November 3, 2025 16:53
Reason for change:
  Crash when client connects with 40MHz disabled in HT cap:
  1. Client sends 40 MHz disabled in HT cap

  HT: STA 11:22:33:44:55:66 HT Capabilities Info: 0x402d
  update_sta_ht STA 11:22:33:44:55:66 - no greenfield, num of non-gf stations 1
  update_sta_ht STA 11:22:33:44:55:66 - 20 MHz HT, num of 20MHz HT STAs 1
  HT: Forty MHz Intolerant is set by STA 11:22:33:44:55:66 in Association Request

  2. hostap tries to downgrade bandwith by setting secondary channel

  ht40_intolerant_add
  iface->conf->secondary_channel = 0;

  3. Since other parameters are not updated it later fails in __ieee802_11_set_beacon - hostapd_set_freq_params
  20/40 MHz: center segment 0 (=3) and center freq 1 (=2412) not in sync

  4. Crash on
  params.freq->link_id = -1;

Test Procedure:

  1. Enable 40Mhz bandwidth
  2. Connect Iphone 16
  3. Check hostapd logs

Risks: Low
Priority: P1

Signed-off-by: Bogdan Bogush <[email protected]>
Copy link
Contributor

@mateuszCieslak-GL mateuszCieslak-GL left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can this happen on different device as well (XB8/XB10)?

@bogdanbogush2
Copy link
Contributor Author

can this happen on different device as well (XB8/XB10)?

Broadcom driver does not have WPA_DRIVER_FLAGS_HT_2040_COEX capability flag set therefore it does not reproduce on these platforms.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants