Re: [PATCH 1/1] macsec: handle missing macsec kernel module

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Aug 22, 2017 at 10:34:19AM +0200, Sabrina Dubroca wrote:
> -------- 8< --------
> From: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
> Date: Tue, 22 Aug 2017 10:25:26 +0200
> Subject: [PATCH] mka: add error handling for secy_init_macsec calls
> 
> secy_init_macsec() can fail (if ->macsec_init fails), and
> ieee802_1x_kay_init() should handle this and not let MKA run any
> further, because nothing is going to work anyway.
> 
> On failure, ieee802_1x_kay_init() must deinit its kay, which will free
> kay->ctx, so ieee802_1x_kay_init callers (only ieee802_1x_alloc_kay_sm)
> must not do it. Before this patch there is a double-free of the ctx
> argument when ieee802_1x_kay_deinit() was called.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux