Skip to content

macsec: fix configurable ICV length

Davide Caratti netdev 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest3 patches 2 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3macsec: limit ICV length to 16 octetsdrivers/net/macsec.c include/uapi/linux/if_macsec.h+4 -20 replies
2/3macsec: fix error codes when a SA is createddrivers/net/macsec.c+36 -220 replies
3/3macsec: validate ICV length on link creationdrivers/net/macsec.c+13 -10 replies

Reviews trailers per patch

None of the 3 patches has a Reviewed-by or Acked-by of their own; the series has one for all of them.

PatchSabrina Dubroca
SeriesA-b
1/3
2/3
3/3

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH net 0/3] macsec: fix configurable ICV length

This series provides a fix for macsec configurable ICV length. The maximum length of ICV element has been made compliant to IEEE 802.1AE, and error reporting in case of cipher suite configuration failure has been improved. Finally, a test has been added to netlink verify() callback in order to avoid creation of macsec interfaces having user-provided ICV length values that are not supported by the cipher suite.

Davide Caratti (3):
macsec: limit ICV length to 16 octets
macsec: fix error codes when a SA is created
macsec: validate ICV length on link creation

 drivers/net/macsec.c           | 76 ++++++++++++++++++++++++++++--------------
 include/uapi/linux/if_macsec.h |  2 ++
 2 files changed, 53 insertions(+), 25 deletions(-)
Signature · 1 line
2.5.5