Commit 3ffcc659 authored by Johannes Berg's avatar Johannes Berg
Browse files

wifi: mac80211: check key taint for beacon protection 



This will likely never happen, but for completeness check
the key taint flag before using a key for beacon protection.

Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
Signed-off-by: default avatarGregory Greenman <gregory.greenman@intel.com>
Link: https://lore.kernel.org/r/20230301115906.cf2c3fee6f1f.I2f19b3e04e31c99bed3c9dc71935bf513b2cd177@changeid


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 3a867c7e

net/mac80211/tx.c

+6 −0
Original line number Diff line number Diff line
@@ -5115,6 +5115,12 @@ static int ieee80211_beacon_protect(struct sk_buff *skb, 
	tx.key = rcu_dereference(link->default_beacon_key);

	if (!tx.key)

		return 0;



	if (unlikely(tx.key->flags & KEY_FLAG_TAINTED)) {

		tx.key = NULL;

		return -EINVAL;

	}



	tx.local = local;

	tx.sdata = sdata;

	__skb_queue_head_init(&tx.skbs);