My setup:
- Latest openWRT from svn (2523), standard configuration (non preemtible kernel)
- miniPCI Atheros AR5213A-00 and Atheros AR5213A-001
- on PC Engines WRAP.1E v1.11
On the WRAP i execute the following commands:
wlanconfig ath create wlandev wifi0 wlanmode ap
iwconfig ath0 essid testSSID enc aabbccddeeffaabbccddeeff00 channel 4 mode master
ifconfig ath0 up
On the client (MacOsX, Linux, Windows, ...) i try to associate with a wrong wep key. For instance on my osx command line i do the following:
<threepwood:davide># /System/Library/PrivateFrameworks/Apple80211.framework/Resources/airport -s
28 Infrastructure networks found:
SSID Security Ch Sig Vr ID IE BSSID WPA (Auth[]), (Cipher[])
Alice-08953902 WPA PSK 11 -66 -1 0 0 00:03:6f:90:b9:ed 1 (2,0,0,0), ( 2(TKIP),0,0,0)
Alice-87115966 WPA PSK 11 -62 -1 0 0 00:03:6f:92:04:85 1 (2,0,0,0), ( 2(TKIP),0,0,0)
testSSID WEP 4 -11 -1 0 0 06:0b:6b:4c:ee:9f 0 (0,0,0,0), (0,0,0,0)
USR5463 6 -63 -1 0 0 00:14:c1:2b:f9:58 0 (0,0,0,0), (0,0,0,0)
[...]
<threepwood:davide># /System/Library/PrivateFrameworks/Apple80211.framework/Resources/airport -AtestSSID
password: <something like "blablabla">
<threepwood:davide># /System/Library/PrivateFrameworks/Apple80211.framework/Resources/airport -AtestSSID
password: <again, something like "blablabla">
After this on the WRAP i get:
root@OpenWrt:/# BUG: unable to handle kernel NULL pointer dereference at virtual address 0000010c
printing eip:
c88f03d4
*pde = 00000000
Oops: 0000 [#1]
Modules linked in: ne2k_pci 8390 ath_pci wlan_xauth wlan_wep wlan_tkip wlan_ccmp wlan_acl ath_rate_minstrel ath_hal(P) wlan_scan_sta wlan_scan_ap wlan ipt
_TTL ipt_ttl ipt_TOS ipt_time ipt_tos xt_MARK xt_mark xt_mac xt_length ipt_ECN ipt_ecn xt_DSCP xt_dscp xt_CLASSIFY imq ipt_IMQ ipt_ipp2p xt_NOTRACK iptabl
e_raw xt_portscan xt_DELUDE xt_CHAOS xt_string ipt_recent xt_pkttype ipt_owner ipt_LOG xt_connbytes xt_helper xt_CONNMARK xt_connmark arptable_filter arpt
_mangle arp_tables tun ppp_async ppp_generic slhc crc_ccitt natsemi
CPU: 0
EIP: 0060:[<c88f03d4>] Tainted: P VLI
EFLAGS: 00010002 (2.6.22-rc5 #2)
eax: 00000000 ebx: c74d0000 ecx: 00000001 edx: 0000001f
esi: c74d016d edi: 00000000 ebp: 00000202 esp: c02b5c30
ds: 007b es: 007b fs: 0000 gs: 0000 ss: 0068
Process swapper (pid: 0, ti=c02b4000 task=c0296280 task.ti=c02b4000)
Stack: c88f003c c0122f04 c029de70 0000000c 000000b0 c7587000 c0123f25 c754a380
c74d0000 c74d0000 00000000 c7b58380 c88f0613 c12686e8 c754a380 c7587000
000d0002 000000b0 c88e984e 00000001 c7587800 c7b58380 00000001 c74d016d
Call Trace:
[<c88f003c>] <0> [<c0122f04>] <0> [<c0123f25>] <0> [<c88f0613>] <0> [<c88e984e>] <0> [<c88ed7ce>] <0> [<c88ddbd7>] <0> [<c0122f04>] <0> [<c0123f25>] <0>
[<c88d6a1d>] <0> [<c88eb4ac>] <0> [<c88d5310>] <0> [<c88ef91d>] <0> [<c88dd029>] <0> [<c011d53a>] <0> [<c010f10c>] <0> [<c010f074>] <0> [<c010f0d6>] <0> [
<c0103b8f>] <0> [<c0250a25>] <0> [<c0102513>] <0> [<c01012eb>] <0> [<c02c0000>] <0> [<c0101312>] <0> [<c0100b55>] <0> [<c02b6a03>] <0> [<c02b63e0>] <0> ==
=====================
Code: 44 24 28 83 7c 24 28 20 0f 85 37 ff ff ff 55 9d 83 c4 30 5b 5e 5f 5d c3 55 57 56 53 83 ec 20 89 d6 0f b6 52 05 83 e2 1f 9c 5d fa <8b> bc 90 90 00 00
00 e9 87 00 00 00 85 db 74 06 8b 47 04 89 43
EIP: [<c88f03d4>] SS:ESP 0068:c02b5c30
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..PC Engines WRAP.1C/1D/1E v1.11
640 KB Base Memory
130048 KB Extended Memory
[...]
openWRT kamikaze r2523 comes with madwifi r2420-20070602, but i've tried r2518-20070626 with the same results.
