diff options
| author | Davide Caratti <dcaratti@redhat.com> | 2016-07-22 15:07:58 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-07-25 10:55:39 -0700 |
| commit | f04c392d2dd97a985878f4380a1b054791301acf (patch) | |
| tree | cbf6e16e690b6486b9a642a2614846f08da2368e /net/sctp/protocol.c | |
| parent | 34aedfee22967236adc3d9147c8b47b7f5bad26c (diff) | |
| download | lwn-f04c392d2dd97a985878f4380a1b054791301acf.tar.gz lwn-f04c392d2dd97a985878f4380a1b054791301acf.zip | |
macsec: validate ICV length on link creation
Test the cipher suite initialization in case ICV length has a value
different than its default. If this test fails, creation of a new macsec
link will also fail. This avoids situations where further security
associations can't be added due to failures of crypto_aead_setauthsize(),
caused by unsupported user-provided values of the ICV length.
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sctp/protocol.c')
0 files changed, 0 insertions, 0 deletions