]> git.ipfire.org Git - thirdparty/hostap.git/commit
EAP-PAX server: Fix message length checks for MSGDUMP level hexdump
authorJouni Malinen <j@w1.fi>
Fri, 19 Apr 2019 21:19:02 +0000 (00:19 +0300)
committerJouni Malinen <j@w1.fi>
Fri, 19 Apr 2019 21:27:15 +0000 (00:27 +0300)
commitfa52bc8b98b81b604655b117d2d1136956e21ba5
tree33f993b9f94a7ce8ade81395e71085214af4598a
parentb3c2b5d9f7d8dc652398968ad33e00fc2fdacbf1
EAP-PAX server: Fix message length checks for MSGDUMP level hexdump

EAP-PAX server implementation could end up reading beyond the end of the
buffer if MSGDUMP level debugging was enabled and a message without the
ICV field was received. Fix this by using more strict message length
validation.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/eap_server/eap_server_pax.c