]> git.baikalelectronics.ru Git - kernel.git/commit
macsec: fix NULL deref in macsec_add_rxsa
authorSabrina Dubroca <sd@queasysnail.net>
Fri, 22 Jul 2022 09:16:27 +0000 (11:16 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Aug 2022 10:03:50 +0000 (12:03 +0200)
commitaa82c034937056b051bdb5705273d44d28f80fd5
treeb9ae57a90f0158a7e43b84458c16e69aacfef677
parentf43e3cca7c6b20dbb7d1f98071eec7bbdca1b22a
macsec: fix NULL deref in macsec_add_rxsa

[ Upstream commit 87658d84faa6f4868950512f5b1c0f7c37ec764d ]

Commit bb178617ead6 added a test on tb_sa[MACSEC_SA_ATTR_PN], but
nothing guarantees that it's not NULL at this point. The same code was
added to macsec_add_txsa, but there it's not a problem because
validate_add_txsa checks that the MACSEC_SA_ATTR_PN attribute is
present.

Note: it's not possible to reproduce with iproute, because iproute
doesn't allow creating an SA without specifying the PN.

Fixes: bb178617ead6 ("macsec: Netlink support of XPN cipher suites (IEEE 802.1AEbw)")
Link: https://bugzilla.kernel.org/show_bug.cgi?id=208315
Reported-by: Frantisek Sumsal <fsumsal@redhat.com>
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/macsec.c