DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

EAP-pwd peer: Check for unexpected state for ID exchange

Browse source 
Aborty processing if ID exchange processing is entered twice
unexpectedly. This avoids memory leaks in the function.

Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2018-05-28 16:17:20 +03:00
parent 44136f6ca2
commit 7280723fbf
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/eap_peer/eap_pwd.c
View file

@ -255,6 +255,12 @@ eap_pwd_perform_id_exchange(struct eap_sm *sm, struct eap_pwd_data *data,
data->prep = id->prep;
os_memcpy(data->token, id->token, sizeof(id->token));
if (data->id_server || data->grp) {
wpa_printf(MSG_INFO, "EAP-pwd: data was already allocated");
eap_pwd_state(data, FAILURE);
return;
}
data->id_server = os_malloc(payload_len - sizeof(struct eap_pwd_id));
if (data->id_server == NULL) {
wpa_printf(MSG_INFO, "EAP-PWD: memory allocation id fail");