# DF-0290 -- Low

## Verdict: REPRODUCED (source-confirmed)

REAL: GANN replay check uses raw uint32 ie.gann_seq <= gr->gr_lastseq; near the 2^32 boundary a legitimate GANN is wrongly rejected or a replayed one accepted.

## Impact ceiling
none

## Cited refs
- sys/netproto/802_11/wlan/ieee80211_mesh.c:2649

## Fix
Use a signed-difference comparison ((int32_t)(a-b) <= 0) instead of the raw <=.

## Validation
Combined 60-finding fix kernel (findings/poc/_low_merged.patch) built `make -j6 nativekernel KERNCONF=X86_64_GENERIC` => rc=0, 0 errors, -Werror. fix_status=fixed.