hostapd/src/eap_server
Jouni Malinen ee352f1e5a EAP-pwd: Add explicit total length limit
Instead of using implicit limit based on 16-bit unsigned integer having
a maximum value of 65535, limit the maximum length of a fragmented
EAP-pwd message explicitly to 15000 bytes. None of the supported groups
use longer messages, so it is fine to reject any longer message without
even trying to reassemble it. This will hopefully also help in reducing
false warnings from static analyzers (CID 68124).

Signed-off-by: Jouni Malinen <j@w1.fi>
2014-07-02 12:38:47 +03:00
..
eap.h RADIUS server: Add support for MAC ACL 2014-03-29 19:31:56 +02:00
eap_i.h TLS testing: Allow hostapd to be used as a TLS testing tool 2014-03-09 18:47:09 +02:00
eap_methods.h HS 2.0R2: Add WFA server-only EAP-TLS server method 2014-02-26 01:24:25 +02:00
eap_server.c TLS testing: Allow hostapd to be used as a TLS testing tool 2014-03-09 18:47:09 +02:00
eap_server_aka.c EAP-SIM/AKA: Pass EAP type as argument to eap_sim_msg_finish() 2014-07-02 12:38:47 +03:00
eap_server_eke.c EAP-EKE: Add server implementation 2013-07-07 20:30:10 +03:00
eap_server_fast.c EAP-FAST: Clean up TLV length validation (CID 62853) 2014-06-18 16:45:03 +03:00
eap_server_gpsk.c EAP-GPSK server: Use configured server identity 2013-07-07 20:30:10 +03:00
eap_server_gtc.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_server_identity.c RADIUS/EAP server: Use longer username buffer to avoid truncation 2014-06-02 17:36:51 +03:00
eap_server_ikev2.c EAP-IKEv2: Allow frag ack without integrity checksum 2014-05-11 22:47:25 +03:00
eap_server_md5.c EAP-MD5: Verify that CHAP operation succeeds 2012-08-16 18:49:02 +03:00
eap_server_methods.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_server_mschapv2.c RADIUS/EAP server: Use longer username buffer to avoid truncation 2014-06-02 17:36:51 +03:00
eap_server_pax.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_server_peap.c Remove PEAPv2 support 2014-01-07 10:45:11 +02:00
eap_server_psk.c EAP-PSK: Use configured server identity 2013-07-07 20:30:10 +03:00
eap_server_pwd.c EAP-pwd: Add explicit total length limit 2014-07-02 12:38:47 +03:00
eap_server_sake.c EAP-SAKE: Use configured server identity 2013-07-07 20:30:10 +03:00
eap_server_sim.c EAP-SIM/AKA: Pass EAP type as argument to eap_sim_msg_finish() 2014-07-02 12:38:47 +03:00
eap_server_tls.c HS 2.0R2: Add WFA server-only EAP-TLS server method 2014-02-26 01:24:25 +02:00
eap_server_tls_common.c TLS testing: Allow hostapd to be used as a TLS testing tool 2014-03-09 18:47:09 +02:00
eap_server_tnc.c EAP-TNC: Limit maximum message buffer to 75000 bytes (CID 62873) 2014-06-13 16:03:45 +03:00
eap_server_ttls.c RADIUS/EAP server: Use longer username buffer to avoid truncation 2014-06-02 17:36:51 +03:00
eap_server_vendor_test.c Use proper private enterprise number for EAP VENDOR-TEST 2012-08-22 21:37:19 +03:00
eap_server_wsc.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_sim_db.c EAP-SIM DB: Remove client socket file on connect() error 2014-02-15 21:39:31 +02:00
eap_sim_db.h EAP-SIM DB: Use pointer to struct eap_sim_db_data instead of void* 2012-09-01 21:48:48 +03:00
eap_tls_common.h HS 2.0R2: Add WFA server-only EAP-TLS server method 2014-02-26 01:24:25 +02:00
ikev2.c EAP-IKEV2 server: Fix invalid memory freeing operation 2013-02-09 01:20:36 +02:00
ikev2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
Makefile Add CONFIG_CODE_COVERAGE=y option for gcov 2013-11-24 19:16:12 +02:00
tncs.c TNC: Allow TNC to be enabled dynamically 2014-05-17 20:05:55 +03:00
tncs.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00