kern/41116: net80211/wpi output panic in michael_mic

[pooka%iki.fi@localhost]

>Number:         41116
>Category:       kern
>Synopsis:       net80211/wpi output panic in michael_mic
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Apr 01 11:15:01 +0000 2009
>Originator:     Antti Kantee
>Release:        5.0_RC2, pretty close before RC3
>Organization:
>Environment:
>Description:
savecore: reboot after panic: panic: not enough data in following buffer, m_len 
1 need 2 

#1  0xc032b1ab in panic ()
#2  0xc01205b4 in michael_mic ()
#3  0xc0121409 in tkip_enmic ()
#4  0xc013358e in ieee80211_encap ()
#5  0xc03fabbf in wpi_start ()
#6  0xc037729e in ifq_enqueue ()
#7  0xc037cc44 in ether_output ()
#8  0xc014b181 in ip_output ()
#9  0xc0152600 in tcp_output ()
#10 0xc014fb9f in tcp_input ()
#11 0xc0148f55 in ip_input ()
#12 0xc0149526 in ipintr ()
#13 0xc031280c in softint_dispatch ()
#14 0xc0100e4d in Xsoftintr ()
#15 0x00000000 in ?? ()

>How-To-Repeat:
Use firefox with TKIP WEP on wpi?  Problem seems to be semi-rare,
this is the first time I've seen it and I've used this setup for almost
2 days already.
>Fix: