• Johannes Berg's avatar
    mac80211: check PN correctly for GCMP-encrypted fragmented MPDUs · 9acc54be
    Johannes Berg authored
    Just like for CCMP we need to check that for GCMP the fragments
    have PNs that increment by one; the spec was updated to fix this
    security issue and now has the following text:
    
    	The receiver shall discard MSDUs and MMPDUs whose constituent
    	MPDU PN values are not incrementing in steps of 1.
    
    Adapt the code for CCMP to work for GCMP as well, luckily the
    relevant fields already alias each other so no code duplication
    is needed (just check the aliasing with BUILD_BUG_ON.)
    
    Cc: stable@vger.kernel.org
    Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
    9acc54be
ieee80211_i.h 65.4 KB