hostapd/src/eap_peer
Jouni Malinen ee352f1e5a EAP-pwd: Add explicit total length limit
Instead of using implicit limit based on 16-bit unsigned integer having
a maximum value of 65535, limit the maximum length of a fragmented
EAP-pwd message explicitly to 15000 bytes. None of the supported groups
use longer messages, so it is fine to reject any longer message without
even trying to reassemble it. This will hopefully also help in reducing
false warnings from static analyzers (CID 68124).

Signed-off-by: Jouni Malinen <j@w1.fi>
2014-07-02 12:38:47 +03:00
..
eap.c Skip network disabling on expected EAP failure 2014-01-08 16:42:15 +02:00
eap.h Skip network disabling on expected EAP failure 2014-01-08 16:42:15 +02:00
eap_aka.c EAP-SIM/AKA: Pass EAP type as argument to eap_sim_msg_finish() 2014-07-02 12:38:47 +03:00
eap_config.h Add SIM identifier to the network profile and cred block 2014-04-24 12:15:32 +03:00
eap_eke.c EAP-EKE: Fix typos in debug message 2014-06-14 17:26:52 +03:00
eap_fast.c EAP-FAST: Clean up TLV length validation (CID 62853) 2014-06-18 16:45:03 +03:00
eap_fast_pac.c wpa_supplicant: Fix NULL dereference in eap_fast_parse_end() 2014-02-13 15:58:21 +02:00
eap_fast_pac.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_gpsk.c EAP-GPSK: Clean up CSuite_List length validation (CID 62854) 2014-06-18 17:14:59 +03:00
eap_gtc.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_i.h Skip network disabling on expected EAP failure 2014-01-08 16:42:15 +02:00
eap_ikev2.c EAP-IKEv2: Remove obsolete ccns.pl project workarounds 2014-06-08 12:28:36 +03:00
eap_leap.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_md5.c EAP-MD5: Verify that CHAP operation succeeds 2012-08-16 18:49:02 +03:00
eap_methods.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_methods.h HS 2.0R2: Add WFA server-only EAP-TLS peer method 2014-02-26 01:24:23 +02:00
eap_mschapv2.c EAP-MSCHAPv2: Check hash function results more consistently (CID 68105) 2014-06-14 12:32:45 +03:00
eap_otp.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_pax.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_peap.c Remove PEAPv2 support 2014-01-07 10:45:11 +02:00
eap_proxy.h eap_proxy: Add context data pointer to the get_imsi call 2013-10-23 20:51:46 +03:00
eap_proxy_dummy.c eap_proxy: Add context data pointer to the get_imsi call 2013-10-23 20:51:46 +03:00
eap_psk.c EAP peer: Add Session-Id derivation to more EAP methods 2013-02-09 01:20:45 +02:00
eap_pwd.c EAP-pwd: Add explicit total length limit 2014-07-02 12:38:47 +03:00
eap_sake.c EAP peer: Add Session-Id derivation to more EAP methods 2013-02-09 01:20:45 +02:00
eap_sim.c EAP-SIM/AKA: Pass EAP type as argument to eap_sim_msg_finish() 2014-07-02 12:38:47 +03:00
eap_tls.c HS 2.0R2: Add WFA server-only EAP-TLS peer method 2014-02-26 01:24:23 +02:00
eap_tls_common.c HS 2.0R2: Add WFA server-only EAP-TLS peer method 2014-02-26 01:24:23 +02:00
eap_tls_common.h HS 2.0R2: Add WFA server-only EAP-TLS peer method 2014-02-26 01:24:23 +02:00
eap_tnc.c EAP-TNC: Limit maximum message buffer to 75000 bytes (CID 62873) 2014-06-13 16:03:45 +03:00
eap_ttls.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_vendor_test.c Use proper private enterprise number for EAP VENDOR-TEST 2012-08-22 21:37:19 +03:00
eap_wsc.c WPS: Remove unused WEP related functionality 2014-04-06 12:31:45 +03:00
ikev2.c EAP-IKEv2: Remove obsolete ccns.pl project workarounds 2014-06-08 12:28:36 +03:00
ikev2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
Makefile Add CONFIG_CODE_COVERAGE=y option for gcov 2013-11-24 19:16:12 +02:00
mschapv2.c MSCHAPv2: Check operation success for NT response generation 2012-08-16 18:42:27 +03:00
mschapv2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
tncc.c TNC: Fix minor memory leak (CID 62848) 2014-06-12 19:44:58 +03:00
tncc.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00