Commit 28a9bc68 authored Dec 17, 2014 by Johannes Berg

mac80211: free management frame keys when removing station



When writing the code to allow per-station GTKs, I neglected to
take into account the management frame keys (index 4 and 5) when
freeing the station and only added code to free the first four
data frame keys.

Fix this by iterating the array of keys over the right length.

Cc: stable@vger.kernel.org
Fixes: e31b8213 ("cfg80211/mac80211: allow per-station GTKs")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

parent 185076d6

net/mac80211/key.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -656,7 +656,7 @@ void ieee80211_free_sta_keys(struct ieee80211_local *local,
		int i;

		mutex_lock(&local->key_mtx);
		for (i = 0; i < NUM_DEFAULT_KEYS; i++) {
		for (i = 0; i < ARRAY_SIZE(sta->gtk); i++) {
		key = key_mtx_dereference(local, sta->gtk[i]);
		if (!key)
		continue;

Admin message