DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

EAP-PEAP server: Fix Phase 2 TLV length in error case

Browse source 
The payload length in a Phase 2 TLV message reporting error was not set
correctly. Fix this to not include the TLVs that are included only in
success case.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
This commit is contained in:
Jouni Malinen 2015-01-28 16:15:58 +02:00 committed by Jouni Malinen
parent 95a15d793e
commit bfaefd5174
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/eap_server/eap_server_peap.c
View file

@ -344,12 +344,14 @@ static struct wpabuf * eap_peap_build_phase2_tlv(struct eap_sm *sm,
size_t mlen; size_t mlen;
mlen = 6; /* Result TLV */ mlen = 6; /* Result TLV */
if (data->crypto_binding != NO_BINDING) if (data->peap_version == 0 && data->tlv_request == TLV_REQ_SUCCESS &&
data->crypto_binding != NO_BINDING) {
mlen += 60; /* Cryptobinding TLV */ mlen += 60; /* Cryptobinding TLV */
#ifdef EAP_SERVER_TNC #ifdef EAP_SERVER_TNC
if (data->soh_response) if (data->soh_response)
mlen += wpabuf_len(data->soh_response); mlen += wpabuf_len(data->soh_response);
#endif /* EAP_SERVER_TNC */ #endif /* EAP_SERVER_TNC */
}
buf = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_TLV, mlen, buf = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_TLV, mlen,
EAP_CODE_REQUEST, id); EAP_CODE_REQUEST, id);