RE: [PATCH] wifi: rtw88: allow key removal when the CAM table is full

[Ping-Ke Shih]

Hungyu Lin <dennylin0707@xxxxxxxxx> wrote:
> rtw_ops_set_key() looks for a free CAM entry before checking the
> command. When all pairwise entries are in use, DISABLE_KEY returns
> -ENOSPC without clearing the existing entry.

Is this the actual case you met?

> 
> Move the allocation and bounds check into SET_KEY. DISABLE_KEY uses
> the existing key->hw_key_idx.
> 
> Fixes: 10d58823cb44 ("wifi: rtw88: fix out-of-bounds CAM write when key table is full")

Should it be ?

Fixes: e3037485c68e ("rtw88: new Realtek 802.11ac driver")

> Signed-off-by: Hungyu Lin <dennylin0707@xxxxxxxxx>

Then, 

Acked-by: Ping-Ke Shih <pkshih@xxxxxxxxxxx>