diff options
| author | Stefan Sperling <stsp@cvs.openbsd.org> | 2018-09-24 20:15:00 +0000 |
|---|---|---|
| committer | Stefan Sperling <stsp@cvs.openbsd.org> | 2018-09-24 20:15:00 +0000 |
| commit | ecc0dd7640442600f675d8684c8556b7e4ff1f54 (patch) | |
| tree | 4205f5d886b21be667dcd8f0295e42ae249ca0fb /sbin | |
| parent | e929521b41ae7b4604cff1a766ca503e2122e019 (diff) | |
Prevent ieee80211_get_txkey() from returning the integrity group temporal
key (IGTK) if a node doesn't have management frame protection (MFP) enabled.
The IGTK is not initialized if MFP is disabled, so using it triggers this
panic in ieee80211_encrypt(): panic("invalid key cipher 0x%x", k->k_cipher)
(As far as I can tell, at present, MFP is never enabled.)
Problem reported and fix tested by tj@ on athn(4) hostap
Diffstat (limited to 'sbin')
0 files changed, 0 insertions, 0 deletions