diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2026-02-09 19:12:20 +0100 |
|---|---|---|
| committer | Sasha Levin <sashal@kernel.org> | 2026-03-04 07:20:59 -0500 |
| commit | 1f40fde293492d98fc2b61335ddc2a90c9f1b9b8 (patch) | |
| tree | 13998f543bd3139292028f2fd0e2e310d3a1d1b5 | |
| parent | 322437972f0a712767f6920ad34aba25f2e9b942 (diff) | |
| download | linux-1f40fde293492d98fc2b61335ddc2a90c9f1b9b8.tar.gz linux-1f40fde293492d98fc2b61335ddc2a90c9f1b9b8.tar.bz2 linux-1f40fde293492d98fc2b61335ddc2a90c9f1b9b8.zip | |
wifi: cfg80211: wext: fix IGTK key ID off-by-one
[ Upstream commit c8d7f21ead727485ebf965e2b4d42d4a4f0840f6 ]
The IGTK key ID must be 4 or 5, but the code checks against
key ID + 1, so must check against 5/6 rather than 4/5. Fix
that.
Reported-by: Jouni Malinen <j@w1.fi>
Fixes: 08645126dd24 ("cfg80211: implement wext key handling")
Link: https://patch.msgid.link/20260209181220.362205-2-johannes@sipsolutions.net
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
| -rw-r--r-- | net/wireless/wext-compat.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/wireless/wext-compat.c b/net/wireless/wext-compat.c index e3acfac7430a..52abda40dfb3 100644 --- a/net/wireless/wext-compat.c +++ b/net/wireless/wext-compat.c @@ -735,7 +735,7 @@ static int cfg80211_wext_siwencodeext(struct net_device *dev, idx = erq->flags & IW_ENCODE_INDEX; if (cipher == WLAN_CIPHER_SUITE_AES_CMAC) { - if (idx < 4 || idx > 5) { + if (idx < 5 || idx > 6) { idx = wdev->wext.default_mgmt_key; if (idx < 0) return -EINVAL; |