PTK rekeying bug

[Simon Malthieu]

  Hi,

I have a bug with PTK rekeying, when I set this option in hostapd : 
wpa_ptk_rekey, the first PTK handshake goes well at the start of the 
connection (AP-STA), but after the rekey (The 4-way EAPOL handshake goes 
well), all the packets sent by the STA are truncated of 16 Bytes. For 
example with a ping I can see at the reception that all the ICMP packets 
have 16 Bytes less, but also the ARP packets.

They are well decrypted by the AP though. At the second rekey, the ptk 
handshake doesn't work because the EAPOL packets are truncated, hostapd 
says 'frame too short for this IEEE 802.1X packets' and disconnects the STA.

With a 3rd radio I can tell that the packets are truncated also in the 
air so it must be a STA problem. With the htt_dump (on the STA) debug 
option of ath10k I can tell that the packets are not altered here, the 
frames are ok

The problem still exists with latest compat-wireless (2015-12-03) and 
latest QCA988X firmware  : firmware-5.bin_10.2.4.70.15-2

I am using two compex cards (WLE900VX).

Thanks in advance for the help.