mac80211: fix rx->key NULL dereference during mic failure
authorArik Nemtsov <arik@wizery.com>
Wed, 22 Jun 2011 21:00:24 +0000 (00:00 +0300)
committerJohn W. Linville <linville@tuxdriver.com>
Mon, 27 Jun 2011 18:45:25 +0000 (14:45 -0400)
commita66b98db570a638afd909459e1e6bfa272344bd3
treee4e78a0602b46121548fad2e357f03d550d23c94
parent8fcbd4dc7a1b338b393dcd6869deb1725cf1a9f3
mac80211: fix rx->key NULL dereference during mic failure

Sometimes when reporting a MIC failure rx->key may be unset. This
code path is hit when receiving a packet meant for a multicast
address, and decryption is performed in HW.

Fortunately, the failing key_idx is not used for anything up to
(and including) usermode, so we allow ourselves to drop it on the
way up when a key cannot be retrieved.

Signed-off-by: Arik Nemtsov <arik@wizery.com>
Cc: stable@kernel.org
Signed-off-by: John W. Linville <linville@tuxdriver.com>
include/net/cfg80211.h
net/mac80211/wpa.c
net/wireless/nl80211.c