hostapd/src/pae
Mike Siedzik bab1d0d359 mka: Fix resource leak when detecting duplicated SCI
If a live peer ever changes its Member Identifier (MI), the KaY
correctly detects a "duplicated SCI" but then proceeds to delete the
peer without deleting the peer's resources (i.e., RxSC, RxSAs, TxSAs).

Note that a remote peer's MI will change if and when an
ieee8021XPaePortInitialize is executed on the remote port.

The solution here is to ignore all MKPDUs containing the new MI until
after the peer (that corresponds to the old MI) expires and cleans up
its resources. After the old peer is removed reception of the next MKPDU
containing the new MI will result in the creation of a new peer with the
new MI.

Signed-off-by: Michael Siedzik <msiedzik@extremenetworks.com>
2018-12-26 16:42:25 +02:00
..
ieee802_1x_cp.c mka: Fix READY to TRANSMIT logic in CP state machine 2018-12-26 16:42:25 +02:00
ieee802_1x_cp.h mka: Get rid of struct ieee802_1x_cp_conf 2016-08-28 21:56:17 +03:00
ieee802_1x_kay.c mka: Fix resource leak when detecting duplicated SCI 2018-12-26 16:42:25 +02:00
ieee802_1x_kay.h mka: Fix lowest acceptable Packet Number (LPN) calculation and use 2018-12-26 16:42:25 +02:00
ieee802_1x_kay_i.h MKA: Mark frame structs packed 2018-12-25 17:29:15 +02:00
ieee802_1x_key.c MACsec: Add PAE implementation 2014-05-09 20:42:44 +03:00
ieee802_1x_key.h MACsec: Add PAE implementation 2014-05-09 20:42:44 +03:00
ieee802_1x_secy_ops.c mka: Fix lowest acceptable Packet Number (LPN) calculation and use 2018-12-26 16:42:25 +02:00
ieee802_1x_secy_ops.h mka: Fix lowest acceptable Packet Number (LPN) calculation and use 2018-12-26 16:42:25 +02:00
Makefile MACsec: Add PAE implementation 2014-05-09 20:42:44 +03:00