mac80211: Don't memset RXCB prior to PAE intercept
authorDenis Kenzior <denkenz@gmail.com>
Tue, 27 Aug 2019 22:41:19 +0000 (17:41 -0500)
committerJohannes Berg <johannes.berg@intel.com>
Thu, 29 Aug 2019 14:38:36 +0000 (16:38 +0200)
commitc8a41c6afa27b8c3f61622dfd882b912da9d6721
treeae9e0856e5bd800557c4e5c5706d8091900c7047
parentb9500577d361522a3d9f14da8cf41dc1d824904e
mac80211: Don't memset RXCB prior to PAE intercept

In ieee80211_deliver_skb_to_local_stack intercepts EAPoL frames if
mac80211 is configured to do so and forwards the contents over nl80211.
During this process some additional data is also forwarded, including
whether the frame was received encrypted or not.  Unfortunately just
prior to the call to ieee80211_deliver_skb_to_local_stack, skb->cb is
cleared, resulting in incorrect data being exposed over nl80211.

Fixes: 018f6fbf540d ("mac80211: Send control port frames over nl80211")
Cc: stable@vger.kernel.org
Signed-off-by: Denis Kenzior <denkenz@gmail.com>
Link: https://lore.kernel.org/r/20190827224120.14545-2-denkenz@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/rx.c