2 files changed, 8 insertions, 0 deletions

diff --git a/net/mac802154/rx.c b/net/mac802154/rx.c
index d1c33c1d6b9b..42e96729dae6 100644
--- a/net/mac802154/rx.c
+++ b/net/mac802154/rx.c
@@ -87,6 +87,10 @@ ieee802154_subif_frame(struct ieee802154_sub_if_data *sdata,
 
         skb->dev = sdata->dev;
 
+        /* TODO this should be moved after netif_receive_skb call, otherwise
+         * wireshark will show a mac header with security fields and the
+         * payload is already decrypted.
+         */
         rc = mac802154_llsec_decrypt(&sdata->sec, skb);
         if (rc) {
                 pr_debug("decryption failed: %i\n", rc);
diff --git a/net/mac802154/tx.c b/net/mac802154/tx.c
index 5ee596e00a6d..b205bbec7bdf 100644
--- a/net/mac802154/tx.c
+++ b/net/mac802154/tx.c
@@ -129,6 +129,10 @@ ieee802154_subif_start_xmit(struct sk_buff *skb, struct net_device *dev)
         struct ieee802154_sub_if_data *sdata = IEEE802154_DEV_TO_SUB_IF(dev);
         int rc;
 
+        /* TODO we should move it to wpan_dev_hard_header and dev_hard_header
+         * functions. The reason is wireshark will show a mac header which is
+         * with security fields but the payload is not encrypted.
+         */
         rc = mac802154_llsec_encrypt(&sdata->sec, skb);
         if (rc) {
                 netdev_warn(dev, "encryption failed: %i\n", rc);