b64afe22aa
Confirm-before-commit validation step allowed execution to continue on error case. This could result in segfault in sae_check_confirm() if the temporary SAE data was not available (as it would not be, e.g., in case of an extra SAE confirm message being received after successful exchange). Fix this by stopping SAE processing immediately after detecting unexpected state for confirm message. In addition, make the public sae.c functions verify sae->tmp before dereferencing it to make this type of bugs less likely to result in critical issues. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com> |
||
|---|---|---|
| .. | ||
| defs.h | ||
| eapol_common.h | ||
| gas.c | ||
| gas.h | ||
| ieee802_11_common.c | ||
| ieee802_11_common.h | ||
| ieee802_11_defs.h | ||
| Makefile | ||
| privsep_commands.h | ||
| qca-vendor.h | ||
| sae.c | ||
| sae.h | ||
| version.h | ||
| wpa_common.c | ||
| wpa_common.h | ||
| wpa_ctrl.c | ||
| wpa_ctrl.h | ||