IEEE 802.1AE-2006 standard recommends that the ICV element in a MACsec frame should not exceed 16 octets: add MACSEC_STD_ICV_LEN in uapi definitions accordingly, and avoid accepting configurations where the ICV length exceeds the standard value. Leave definition of MACSEC_MAX_ICV_LEN unchanged for backwards compatibility with userspace programs.
Showing the changes to include/uapi (1 of 2 files). Show all
Unified · Split
| @@ -26,6 +26,8 @@ · 25 unmodified lines | ||
| 26 | 26 | |
| 27 | 27 | #define MACSEC_MIN_ICV_LEN 8 |
| 28 | 28 | #define MACSEC_MAX_ICV_LEN 32 |
| 29 | +/* upper limit for ICV length as recommended by IEEE802.1AE-2006 */ | |
| 30 | +#define MACSEC_STD_ICV_LEN 16 | |
| 29 | 31 | |
| 30 | 32 | enum macsec_attrs { |
| 31 | 33 | MACSEC_ATTR_UNSPEC, |