]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
net80211: fail for unicast traffic without unicast key
authordomienschepers <schepers.d@northeastern.edu>
Thu, 10 Nov 2022 00:00:00 +0000 (00:00 +0000)
committerBjoern A. Zeeb <bz@FreeBSD.org>
Mon, 26 Jun 2023 12:02:00 +0000 (12:02 +0000)
commit6c9bcecfb296b96a383012e02bc9582260588339
tree7e3fbbf56d50b15dd2cc7ea200fba67ae1a62ce6
parent992075d8f9edb9db87bc1361227bebdec7222d86
net80211: fail for unicast traffic without unicast key

Falling back to the multicast key may cause unicast traffic to leak.
Instead fail when no key is found.

For more information see the 'Framing Frames: Bypassing Wi-Fi Encryption
by Manipulating Transmit Queues' paper.

[ I updated the commit message to reference the paper and the code
comment to record historic behaviour as discussed in private email. ]

(cherry picked from commit 61605e0ae5d8f34b89b8e71e393f3006f511e86a)
sys/net80211/ieee80211_crypto.c