---

yaml
---
r: 236919
b: refs/heads/master
c: 45cbad6
h: refs/heads/master
i:
  236917: 78b1ab0
  236915: fcb14a8
  236911: 8d3ac09
v: v3

[refs]

@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 53e3b6e29eeda568fbe6c1e32d35cb56eea94415
+refs/heads/master: 45cbad6a1299842b5ae9a8a9c09630af063692f8

trunk/net/wireless/util.c

@@ -167,12 +167,15 @@ int cfg80211_validate_key_settings(struct cfg80211_registered_device *rdev,
 
 	/*
 	 * Disallow pairwise keys with non-zero index unless it's WEP
-	 * (because current deployments use pairwise WEP keys with
-	 * non-zero indizes but 802.11i clearly specifies to use zero)
+	 * or a vendor specific cipher (because current deployments use
+	 * pairwise WEP keys with non-zero indices and for vendor specific
+	 * ciphers this should be validated in the driver or hardware level
+	 * - but 802.11i clearly specifies to use zero)
 	 */
 	if (pairwise && key_idx &&
-	    params->cipher != WLAN_CIPHER_SUITE_WEP40 &&
-	    params->cipher != WLAN_CIPHER_SUITE_WEP104)
+	    ((params->cipher == WLAN_CIPHER_SUITE_TKIP) ||
+	     (params->cipher == WLAN_CIPHER_SUITE_CCMP) ||
+	     (params->cipher == WLAN_CIPHER_SUITE_AES_CMAC)))
 		return -EINVAL;
 
 	switch (params->cipher) {