]> git.ipfire.org Git - thirdparty/hostap.git/commit
SAE: Fix confirm message validation in error cases
authorJouni Malinen <jouni@codeaurora.org>
Tue, 5 Mar 2019 21:43:25 +0000 (23:43 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 9 Apr 2019 14:11:15 +0000 (17:11 +0300)
commitac8fa9ef198640086cf2ce7c94673be2b6a018a0
tree1ced4d96690d642ac1a6758ca45cc7496a69e71e
parentcff138b0747fa39765cbc641b66cfa5d7f1735d1
SAE: Fix confirm message validation in error cases

Explicitly verify that own and peer commit scalar/element are available
when trying to check SAE confirm message. It could have been possible to
hit a NULL pointer dereference if the peer element could not have been
parsed. (CVE-2019-9496)

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/common/sae.c