DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Check sscanf() return value in TWT_SETUP parsing

Browse source 
Reject invalid values instead of proceeding.

Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2022-05-08 16:55:45 +03:00
parent 2982e50c15
commit 3f3ce0571c
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
wpa_supplicant/ctrl_iface.c
View file

@ -10027,8 +10027,9 @@ static int wpas_ctrl_iface_send_twt_setup(struct wpa_supplicant *wpa_s,
setup_cmd = atoi(tok_s + os_strlen(" setup_cmd="));
tok_s = os_strstr(cmd, " twt=");
if (tok_s)
sscanf(tok_s + os_strlen(" twt="), "%llu", &twt);
if (tok_s &&
sscanf(tok_s + os_strlen(" twt="), "%llu", &twt) != 1)
return -1;
tok_s = os_strstr(cmd, " requestor=");
if (tok_s)