diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2013-02-23 01:14:20 +0100 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2013-03-06 16:36:00 +0100 |
| commit | 7b4396bd6868f3d665c5f4cb53a9bdde5a2f4bf2 (patch) | |
| tree | 432237208275a9a36b5a0caede4e0996cdb1c48e /net/mac80211 | |
| parent | 8d1f7ecd2af55c0c82ffd2bff0ef0b26f16ea69f (diff) | |
| download | linux-3.10-7b4396bd6868f3d665c5f4cb53a9bdde5a2f4bf2.tar.gz linux-3.10-7b4396bd6868f3d665c5f4cb53a9bdde5a2f4bf2.tar.bz2 linux-3.10-7b4396bd6868f3d665c5f4cb53a9bdde5a2f4bf2.zip | |
mac80211: flush keys when stopping AP
Since hostapd will remove keys this isn't usually
an issue, but we shouldn't leak keys to the next
BSS started on the same interface. For VLANs this
also fixes a bug, keys that aren't removed would
otherwise be leaked.
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211')
| -rw-r--r-- | net/mac80211/cfg.c | 5 | ||||
| -rw-r--r-- | net/mac80211/iface.c | 2 |
2 files changed, 5 insertions, 2 deletions
diff --git a/net/mac80211/cfg.c b/net/mac80211/cfg.c index 8baa561c8f5..9d708f9e246 100644 --- a/net/mac80211/cfg.c +++ b/net/mac80211/cfg.c @@ -1035,9 +1035,12 @@ static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev) sta_info_flush_defer(vlan); sta_info_flush_defer(sdata); rcu_barrier(); - list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) + list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) { sta_info_flush_cleanup(vlan); + ieee80211_free_keys(vlan); + } sta_info_flush_cleanup(sdata); + ieee80211_free_keys(sdata); sdata->vif.bss_conf.enable_beacon = false; clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state); diff --git a/net/mac80211/iface.c b/net/mac80211/iface.c index 8e0bf34f3f6..290de4d9969 100644 --- a/net/mac80211/iface.c +++ b/net/mac80211/iface.c @@ -840,7 +840,7 @@ static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, /* * Free all remaining keys, there shouldn't be any, - * except maybe group keys in AP more or WDS? + * except maybe in WDS mode? */ ieee80211_free_keys(sdata); |