hostap/src
Michael Braun 71456dbdf2 FT: Check hapd->wpa_auth before RRB internal delivery
A malicious station could try to do FT-over-DS with a non WPA-enabled
BSS. When this BSS is located in the same hostapd instance, internal RRB
delivery will be used and thus the FT Action Frame will be processed by
a non-WPA enabled BSS. This processing used to crash hostapd as
hapd->wpa_auth is NULL. If the target BSS is on a different hostapd
instance, it will not listen for these packets and thus not crash.

Fix this by checking hapd->wpa_auth before delivery.

Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2016-02-28 17:45:45 +02:00
..
ap FT: Check hapd->wpa_auth before RRB internal delivery 2016-02-28 17:45:45 +02:00
common AP: Store STA supported operating classes information 2016-02-24 12:20:31 +02:00
crypto OpenSSL: Fix PKCS#12 parsing of extra certificates with OpenSSL 1.0.1 2016-02-16 18:30:55 +02:00
drivers nl80211: Add an option to specify the BSSID to scan for 2016-02-26 17:19:20 +02:00
eap_common EAP-PAX: Check hmac_sha1_vector() return value 2016-01-06 21:12:08 +02:00
eap_peer EAP-FAST peer: Remove fixed return value from eap_fast_parse_phase1() 2016-02-20 10:07:29 +02:00
eap_server EAP-pwd server: Use os_get_random() for unpredictable token 2016-02-19 18:44:40 +02:00
eapol_auth RADIUS: Share a single function for generating session IDs 2016-02-06 17:19:35 +02:00
eapol_supp Fix EAPOL reauth after FT protocol or offloaded PMKSA cache use 2015-11-19 21:16:18 +02:00
fst FST: Get rid of gcc extensions in structure/array initialization 2016-01-15 18:40:21 +02:00
l2_packet l2_packet: Extend bridge workaround RX processing to cover two frames 2016-01-07 13:30:59 +02:00
p2p P2P: Reduce off channel wait time for some P2P Action frames 2016-02-06 18:19:03 +02:00
pae MACsec: Update protect frames and replay on reauthentication 2014-12-09 16:56:10 +02:00
radius Add RADIUS Service-Type attribute with a value of Framed 2016-02-19 18:44:39 +02:00
rsn_supp SAE: Fix PMKID calculation for PMKSA cache 2016-02-18 21:07:47 +02:00
tls TLS: Make tls_cert_chain_failure_event() more robust 2015-12-28 18:31:11 +02:00
utils kqueue: Use 0 instead of NULL for udata 2016-02-18 17:40:12 +02:00
wps WPS: Use only os_get_random() for PIN generation 2016-02-19 18:44:40 +02:00
lib.rules Add QUIET=1 option for make 2014-12-29 15:49:05 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00