| 1 | --- a/net80211/ieee80211_crypto_ccmp.c |
| 2 | +++ b/net80211/ieee80211_crypto_ccmp.c |
| 3 | @@ -273,7 +273,9 @@ ccmp_decap(struct ieee80211_key *k, stru |
| 4 | tid = ((struct ieee80211_qosframe *)wh)->i_qos[0] & IEEE80211_QOS_TID; |
| 5 | /* NB: assume IEEE80211_WEP_MINLEN covers the extended IV */ |
| 6 | pn = READ_6(ivp[0], ivp[1], ivp[4], ivp[5], ivp[6], ivp[7]); |
| 7 | - if (pn && pn <= k->wk_keyrsc[tid]) { |
| 8 | + if ((vap->iv_opmode != IEEE80211_M_IBSS) && |
| 9 | + (vap->iv_opmode != IEEE80211_M_AHDEMO) && |
| 10 | + (pn && pn <= k->wk_keyrsc[tid])) { |
| 11 | /* |
| 12 | * Replay violation. |
| 13 | */ |
| 14 | |
