]> www.infradead.org Git - users/jedix/linux-maple.git/commit
macsec: validate ICV length on link creation
authorDavide Caratti <dcaratti@redhat.com>
Fri, 22 Jul 2016 13:07:58 +0000 (15:07 +0200)
committerDhaval Giani <dhaval.giani@oracle.com>
Mon, 16 Jan 2017 19:49:10 +0000 (14:49 -0500)
commit950be028a2a4f9d45c7cae423bbe32aeacfa4d00
tree33247a2927105618daec0d367ebd6e33bc8d6064
parent57f63935e22b3c8e764672a445f5bc3079905339
macsec: validate ICV length on link creation

Test the cipher suite initialization in case ICV length has a value
different than its default. If this test fails, creation of a new macsec
link will also fail. This avoids situations where further security
associations can't be added due to failures of crypto_aead_setauthsize(),
caused by unsupported user-provided values of the ICV length.

Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
(cherry picked from commit f04c392d2dd97a985878f4380a1b054791301acf)

Orabug: 24614549

Signed-off-by: Ethan Zhao <ethan.zhao@oracle.com>
Signed-off-by: Dhaval Giani <dhaval.giani@oracle.com>
drivers/net/macsec.c