Re: [PATCH 3/3] STA: Fix wpa_clear_keys() PTK key deletion logic

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Mar 23, 2020 at 07:42:28PM +0100, Alexander Wetzel wrote:
> We have to delete PTK keys when either BIT(0) or BIT(15) are zero and
> not only when both are zero.

Thanks, applied.

> I think that is a regression for "normal" cases which keep keys
> installed in HW we wanted to remove. (I've not tried that with tests.)

This should not really have any impact with nl80211 since cfg80211 is
removing the keys automatically, but yes, this could be a regression
with some other driver interfaces.

> By using ~wpa_s->keys_cleared we basically get "wpa_s->keys_set" and we
> can then check if either PTK ID 0 or PTK ID 1 are installed.
> 
> Maybe a sample:
> 1111 1111 1111 1110 = only PTK ID 0 installed
> wpa_s->keys_cleared & (BIT(0) | BIT(15)) == TRUE
> !(wpa_s->keys_cleared & (BIT(0) | BIT(15)) == FALSE
> 
> With the logic from the patch:
> 0000 0000 0000 0001 = only PTK ID 0 installed after reverting the bits
> ~wpa_s->keys_cleared & (BIT(0) | BIT(15)) == TRUE
> 
> And we enter the block which will check both bits and remove the keys
> when necessary.

Yeah.. This looked too strange to me and I change it to something that
seemed to make more sense, but did not really do what it needed to do.

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux