You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
openwrt/package/kernel/mac80211
David Bauer 0f1b5ce2f5 mac80211: drop data frames without key on encrypted links
If we know that we have an encrypted link (based on having had
a key configured for TX in the past) then drop all data frames
in the key selection handler if there's no key anymore.

This fixes an issue with mac80211 internal TXQs - there we can
buffer frames for an encrypted link, but then if the key is no
longer there when they're dequeued, the frames are sent without
encryption. This happens if a station is disconnected while the
frames are still on the TXQ.

Detecting that a link should be encrypted based on a first key
having been configured for TX is fine as there are no use cases
for a connection going from with encryption to no encryption.
With extended key IDs, however, there is a case of having a key
configured for only decryption, so we can't just trigger this
behaviour on a key being configured.

Cc: stable@vger.kernel.org
Reported-by: Jouni Malinen <j@w1.fi>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: David Bauer <mail@david-bauer.net>
4 years ago
..
files mac80211: fix detecting existing interface 4 years ago
patches mac80211: drop data frames without key on encrypted links 4 years ago
scripts mac80211: add a maintenance script for upstream backport commits 10 years ago
Makefile mac80211: adapt for single-instance wpad 4 years ago
ath.mk mac80211: switch to upstream owl-loader driver 5 years ago
broadcom.mk brcm2708: rename target to bcm27xx 4 years ago
intel.mk kernel: Remove support for kernel 3.18 5 years ago
marvell.mk kernel: Remove support for kernel 3.18 5 years ago
ralink.mk ramips: mt7620: fix dependencies 5 years ago
realtek.mk mac80211: rtl8723bs: fix missing MMC dependency 4 years ago