Re: [PATCH 1/2] mac80211: Check port authorization in the ieee80211_tx_dequeue() case

Johannes Berg johannes@sipsolutions.net writes:

From: Jouni Malinen jouni@codeaurora.org

mac80211 used to check port authorization in the Data frame enqueue case when going through start_xmit(). However, that authorization status may change while the frame is waiting in a queue. Add a similar check in the dequeue case to avoid sending previously accepted frames after authorization change. This provides additional protection against potential leaking of frames after a station has been disconnected and the keys for it are being removed.

Cc: stable@vger.kernel.org Signed-off-by: Jouni Malinen jouni@codeaurora.org Signed-off-by: Johannes Berg johannes.berg@intel.com

Ah - nice find!

Acked-by: Toke Høiland-Jørgensen toke@redhat.com