ath: Modify ath_key_delete() to not need full key entry
authorJouni Malinen <jouni@codeaurora.org>
Mon, 14 Dec 2020 17:21:17 +0000 (19:21 +0200)
committerSalvatore Bonaccorso <carnil@debian.org>
Thu, 23 Sep 2021 20:35:21 +0000 (21:35 +0100)
commit8d4af87613e7d1b7b564ef366a927043a13217a3
tree5a08857603251cd369e6da3747ede0c05efafd6b
parent3f6b56e1a6507e1210282d64db92fa93ee0bb6a5
ath: Modify ath_key_delete() to not need full key entry

Origin: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit?id=609c0cfd07f0ae6c444e064a59b46c5f3090b705
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-3702

commit 144cd24dbc36650a51f7fe3bf1424a1432f1f480 upstream.

tkip_keymap can be used internally to avoid the reference to key->cipher
and with this, only the key index value itself is needed. This allows
ath_key_delete() call to be postponed to be handled after the upper
layer STA and key entry have already been removed. This is needed to
make ath9k key cache management safer.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20201214172118.18100-5-jouni@codeaurora.org
Cc: Pali Rohár <pali@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Gbp-Pq: Topic bugfix
Gbp-Pq: Name ath-Modify-ath_key_delete-to-not-need-full-key-entry.patch
drivers/net/wireless/ath/ath.h
drivers/net/wireless/ath/ath5k/mac80211-ops.c
drivers/net/wireless/ath/ath9k/htc_drv_main.c
drivers/net/wireless/ath/ath9k/main.c
drivers/net/wireless/ath/key.c