@ -147,7 +147,7 @@ static int tdls_verify_mic(struct wlantest *wt, struct wlantest_tdls *tdls,
return - 1 ;
return - 1 ;
len = 2 * ETH_ALEN + 1 + 2 + 18 + 2 + elems - > rsn_ie_len +
len = 2 * ETH_ALEN + 1 + 2 + 18 + 2 + elems - > rsn_ie_len +
2 + elems - > timeout_int_len + 2 + elems - > ftie_len ;
2 + 5 + 2 + elems - > ftie_len ;
buf = os_zalloc ( len ) ;
buf = os_zalloc ( len ) ;
if ( buf = = NULL )
if ( buf = = NULL )
@ -169,8 +169,8 @@ static int tdls_verify_mic(struct wlantest *wt, struct wlantest_tdls *tdls,
os_memcpy ( pos , elems - > rsn_ie - 2 , 2 + elems - > rsn_ie_len ) ;
os_memcpy ( pos , elems - > rsn_ie - 2 , 2 + elems - > rsn_ie_len ) ;
pos + = 2 + elems - > rsn_ie_len ;
pos + = 2 + elems - > rsn_ie_len ;
/* 6) Timeout Interval IE */
/* 6) Timeout Interval IE */
os_memcpy ( pos , elems - > timeout_int - 2 , 2 + elems - > timeout_int_len ) ;
os_memcpy ( pos , elems - > timeout_int - 2 , 2 + 5 ) ;
pos + = 2 + elems - > timeout_int_len ;
pos + = 2 + 5 ;
/* 7) FTIE, with the MIC field of the FTIE set to 0 */
/* 7) FTIE, with the MIC field of the FTIE set to 0 */
os_memcpy ( pos , elems - > ftie - 2 , 2 + elems - > ftie_len ) ;
os_memcpy ( pos , elems - > ftie - 2 , 2 + elems - > ftie_len ) ;
pos + = 2 ;
pos + = 2 ;