]> git.ipfire.org Git - thirdparty/hostap.git/commit
projects / thirdparty / hostap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 724c0f1) | patch
WNM: Fix bounds checking in SSID List element matching
authorJouni Malinen <jouni@codeaurora.org>
Fri, 24 May 2019 22:29:47 +0000 (01:29 +0300)
committerJouni Malinen <j@w1.fi>
Fri, 24 May 2019 22:29:47 +0000 (01:29 +0300)
commit5bad612311ae6127765002408b3d9e48e7b94da2
tree1a26b282ea4fab70fb3133526102212dcf406f31tree
parent724c0f17b8f64edcccee960049094e33037014e0commit | diff
WNM: Fix bounds checking in SSID List element matching

The IE header length check was off-by-one and that could allow the loop
to read one octet beyond the end of the buffer before breaking out in
the second check.

Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14927
Fixes: 0a66ce3c49db ("WNM: Add support for SSID List element matching")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/ap/beacon.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.