FreeBSD Bugzilla – Attachment 180244 Details for
Bug 217312
[patch] /sbin/ifconfig core dumps on bad WPS frame data
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
patch to detect bad length value in WPE IE attribute
ifieee80211.c.diff (text/plain), 523 bytes, created by
J.R. Oldroyd
on 2017-02-23 16:32:39 UTC
(
hide
)
Description:
patch to detect bad length value in WPE IE attribute
Filename:
MIME Type:
Creator:
J.R. Oldroyd
Created:
2017-02-23 16:32:39 UTC
Size:
523 bytes
patch
obsolete
>Index: ifieee80211.c >=================================================================== >--- ifieee80211.c (revision 314110) >+++ ifieee80211.c (working copy) >@@ -2997,6 +2997,14 @@ > uint16_t tlv_type = BE_READ_2(ie); > uint16_t tlv_len = BE_READ_2(ie + 2); > >+ /* some devices broadcast invalid WPS frames */ >+ if (tlv_len > len) { >+ printf("bad frame length tlv_type=0x%02x " >+ "tlv_len=%d len=%d", tlv_type, tlv_len, >+ len); >+ break; >+ } >+ > ie += 4, len -= 4; > > switch (tlv_type) {
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=180244">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 217312
: 180244