How to connect the real wireless to emulated (QEMU or UML) host

Hi All,

I need to connect the real WiFi NIC to the emulated host. I want to
test the untrusted WiFi application, which normally requires to be run
from the root account.
The bridging approach doesn't work, because of the problem mentioned
here:

http://linux-net.osdl.org/index.php/...reless_card.21
"...
This is a known problem, and it is not caused by the bridge code. Many
wireless cards don't allow spoofing of the source address. It is a
firmware restriction with some chipsets.
...."
It seems, that this is a case with my IPW3945ABG chipset.
It is quite interesting, as the WIFI NIC allows to set any MAC address
with the "ifconfig hw ether ...." and works correctly with the
modified MAC, but obviously is not able to send packages with the
modified sender's MAC as required by the bridging code :-(.

Is there any other alternative solution to "join" the NIC of the
emulated host with the real NIC?
--
TIA,
WZab

I have tested strictly the same setup using the wired NIC instead of
WiFi NIC, and everything works perfectly.
So the problem is obviously related to some WLAN chipset specific
"features".
WLAN works in the Ad-Hoc mode.