]> git.baikalelectronics.ru Git - kernel.git/commit
macsec: validate ICV length on link creation
authorDavide Caratti <dcaratti@redhat.com>
Fri, 22 Jul 2016 13:07:58 +0000 (15:07 +0200)
committerDavid S. Miller <davem@davemloft.net>
Mon, 25 Jul 2016 17:55:39 +0000 (10:55 -0700)
commit766771f67eec71ccdcd7b2c4d0fc9117586012e1
treecbf6e16e690b6486b9a642a2614846f08da2368e
parent5813935791b1fd3231c50f430609b134b4904c1d
macsec: validate ICV length on link creation

Test the cipher suite initialization in case ICV length has a value
different than its default. If this test fails, creation of a new macsec
link will also fail. This avoids situations where further security
associations can't be added due to failures of crypto_aead_setauthsize(),
caused by unsupported user-provided values of the ICV length.

Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/macsec.c