]> git.ipfire.org Git - thirdparty/hostap.git/commit
wpa_supplicant: Fix buffer overflow in roaming_consortiums
authorAndrei Otcheretianski <andrei.otcheretianski@intel.com>
Sun, 16 Sep 2018 18:19:16 +0000 (21:19 +0300)
committerJouni Malinen <j@w1.fi>
Sun, 14 Oct 2018 17:47:35 +0000 (20:47 +0300)
commitac0ac1ddfdf3a68ee386e39fa9821a4dd0a50f6c
tree5409b9a737ac80ce6bd3571d9a38471f0eda1025
parent40432e6eb37d62dabbf4416f3062cdf2a2fa1b40
wpa_supplicant: Fix buffer overflow in roaming_consortiums

When configuring more than 36 roaming consortiums with SET_CRED, the
stack is smashed. Fix that by correctly verifying the
num_roaming_consortiums.

Fixes: 909a948b ("HS 2.0: Add a new cred block parameter roaming_consortiums")
Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com>
wpa_supplicant/config.c