nagai/kernel
3
0
Fork 0
forked from mirrors/linux
Code Pull requests Activity

wifi: mac80211: flush queues on STA removal

Browse source 
When we remove a station, we first make it unreachable,
then we (must) remove its keys, and then remove the
station itself. Depending on the hardware design, if
we have hardware crypto at all, frames still sitting
on hardware queues may then be transmitted without a
valid key, possibly unencrypted or with a fixed key.

Fix this by flushing the queues when removing stations
so this cannot happen.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
This commit is contained in:
Johannes Berg 2023-03-31 16:59:16 +02:00
parent 2c9abe653b
commit 0b75a1b1e4
1 changed files with 8 additions and 0 deletions
repo.diff.show_diff_stats Download patch file Download diff file Expand all files Collapse all files

8
net/mac80211/sta_info.c
View file

@ -1294,6 +1294,14 @@ static void __sta_info_destroy_part2(struct sta_info *sta)
WARN_ON_ONCE(ret); WARN_ON_ONCE(ret);
} }
/* Flush queues before removing keys, as that might remove them
* from hardware, and then depending on the offload method, any
* frames sitting on hardware queues might be sent out without
* any encryption at all.
*/
if (local->ops->set_key)
ieee80211_flush_queues(local, sta->sdata, false);
/* now keys can no longer be reached */ /* now keys can no longer be reached */
ieee80211_free_sta_keys(local, sta); ieee80211_free_sta_keys(local, sta);