From ecbdc1a1fc0b0c4a08fb07181a9ba0c9a23f70ac Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Fri, 17 Feb 2017 11:35:35 +0200 Subject: [PATCH] Mark RSN msg 1/2 key data debug dump as key material This debug print can include GTK and IGTK, so use wpa_hexdump_key() instead of wpa_hexdump() for it to avoid undesired exposure of keys in debug log. Signed-off-by: Jouni Malinen --- src/rsn_supp/wpa.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/rsn_supp/wpa.c b/src/rsn_supp/wpa.c index a95c794ac..134987338 100644 --- a/src/rsn_supp/wpa.c +++ b/src/rsn_supp/wpa.c @@ -1393,7 +1393,8 @@ static int wpa_supplicant_process_1_of_2_rsn(struct wpa_sm *sm, int maxkeylen; struct wpa_eapol_ie_parse ie; - wpa_hexdump(MSG_DEBUG, "RSN: msg 1/2 key data", keydata, keydatalen); + wpa_hexdump_key(MSG_DEBUG, "RSN: msg 1/2 key data", + keydata, keydatalen); if (wpa_supplicant_parse_ies(keydata, keydatalen, &ie) < 0) return -1; if (ie.gtk && !(key_info & WPA_KEY_INFO_ENCR_KEY_DATA)) {