From: Jouni Malinen <j@w1.fi>
Date: Sun, 31 Oct 2010 09:57:13 +0000 (+0200)
Subject: WPS ER: Add validation of WPS attributes in proxied Probe Request
X-Git-Tag: hostap-1-bp~919
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5245483f80134e71b75af83c4ee6b1bf9393387a;p=thirdparty%2Fhostap.git

WPS ER: Add validation of WPS attributes in proxied Probe Request

When strict validation is enabled in the build, check the WPS
attributes in proxied Probe Request frames.
---

diff --git a/src/wps/wps_er.c b/src/wps/wps_er.c
index feef04fbc..030726e2d 100644
--- a/src/wps/wps_er.c
+++ b/src/wps/wps_er.c
@@ -823,6 +823,12 @@ static void wps_er_process_wlanevent_probe_req(struct wps_er_ap *ap,
 	wpa_hexdump_buf(MSG_MSGDUMP, "WPS ER: WLANEvent - Enrollee's message "
 			"(TLVs from Probe Request)", msg);
 
+	if (wps_validate_probe_req(msg, addr) < 0) {
+		wpa_printf(MSG_INFO, "WPS-STRICT: ER: Ignore invalid proxied "
+			   "Probe Request frame from " MACSTR, MAC2STR(addr));
+		return;
+	}
+
 	if (wps_parse_msg(msg, &attr) < 0) {
 		wpa_printf(MSG_DEBUG, "WPS ER: Failed to parse TLVs in "
 			   "WLANEvent message");