summaryrefslogtreecommitdiffstats
path: root/net/wireless
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2019-05-28 01:46:43 +0300
committerJohannes Berg <johannes.berg@intel.com>2019-05-28 09:22:12 +0200
commita71fd9dac23613d96ba3c05619a8ef4fd6cdf9b9 (patch)
tree6ec236650945100d3e9333edbb336b5c4cd56eee /net/wireless
parent33d915d9e8ce811d8958915ccd18d71a66c7c495 (diff)
downloadlinux-a71fd9dac23613d96ba3c05619a8ef4fd6cdf9b9.tar.bz2
mac80211: Do not use stack memory with scatterlist for GMAC
ieee80211_aes_gmac() uses the mic argument directly in sg_set_buf() and that does not allow use of stack memory (e.g., BUG_ON() is hit in sg_set_buf() with CONFIG_DEBUG_SG). BIP GMAC TX side is fine for this since it can use the skb data buffer, but the RX side was using a stack variable for deriving the local MIC value to compare against the received one. Fix this by allocating heap memory for the mic buffer. This was found with hwsim test case ap_cipher_bip_gmac_128 hitting that BUG_ON() and kernel panic. Cc: stable@vger.kernel.org Signed-off-by: Jouni Malinen <j@w1.fi> Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/wireless')
0 files changed, 0 insertions, 0 deletions