FILS: Fix FILS Realm Information ANQP-element construction

The loop to add hash values was supposed to be limited to at most 10000
values, but the count variable was not being decremented in the loop.
Fix this by decrementing counting for each iteration. This fixes
ANQP-element format in the unlikely case of there being more than 10000
configuration realms.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/src/ap/gas_serv.c b/src/ap/gas_serv.c
index 7595281d0fd6109bd246a2cf3a0b6a4495e43860..3878ce6d80d5b5dcf28973f4cf7eb5298f881adc 100644 (file)
--- a/src/ap/gas_serv.c
+++ b/src/ap/gas_serv.c
@@ -580,6 +580,7 @@ static void anqp_add_fils_realm_info(struct hostapd_data *hapd,
                        if (count == 0)
                                break;
                        wpabuf_put_data(buf, realm->hash, 2);
+                       count--;
                }
        }
 }