WPS ER: Add validation of WPS attributes in proxied Probe Request

When strict validation is enabled in the build, check the WPS
attributes in proxied Probe Request frames.

diff --git a/src/wps/wps_er.c b/src/wps/wps_er.c
index feef04fbcf4b2063fea8a800ac6dd8f85553192d..030726e2dc5f8924190e437f89c354714e9df4a5 100644 (file)
--- a/src/wps/wps_er.c
+++ b/src/wps/wps_er.c
@@ -823,6 +823,12 @@ static void wps_er_process_wlanevent_probe_req(struct wps_er_ap *ap,
        wpa_hexdump_buf(MSG_MSGDUMP, "WPS ER: WLANEvent - Enrollee's message "
                        "(TLVs from Probe Request)", msg);
 
+       if (wps_validate_probe_req(msg, addr) < 0) {
+               wpa_printf(MSG_INFO, "WPS-STRICT: ER: Ignore invalid proxied "
+                          "Probe Request frame from " MACSTR, MAC2STR(addr));
+               return;
+       }
+
        if (wps_parse_msg(msg, &attr) < 0) {
                wpa_printf(MSG_DEBUG, "WPS ER: Failed to parse TLVs in "
                           "WLANEvent message");