jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/src/eap_peer
History
Jouni Malinen 3f732d1fc3 Fix TLS message processing if Flags field is not present 
Previous version assumed that the Flags field is always present and
ended up reading one octet past the end of the buffer should the Flags
field be missing. The message length would also be set incorrectly
(size_t)-1 or (size_t)-5, but it looks like reassembly code ended up
failing in malloc before actually using this huge length to read data.

RFC 2716 uses a somewhat unclear description on what exactly is included
in the TLS Ack message ("no data" can refer to either Data field in 4.1
or TLS Data field in 4.2), so in theory, it would be possible for some
implementations to not include Flags field. However,
EAP-{PEAP,TTLS,FAST} need the Flags field in Ack messages, too, for
indicating the used version.

The EAP peer code will now accept the no-Flags case as an Ack message if
EAP workarounds are enabled (which is the default behavior). If
workarounds are disabled, the message without Flags field will be
rejected.

[Bug 292]
2008-12-30 12:28:02 +02:00
..
.gitignore Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap.c Added protection against EAP-AKA' -> EAP-AKA bidding down attacks 2008-12-05 22:25:47 +02:00
eap.h WPS: Moved mac_addr and uuid configuration into wps_context 2008-11-28 20:44:47 +02:00
eap_aka.c Don't include unused calls to SHA256 functions if EAP-AKA' is not enabled 2008-12-11 00:49:39 +02:00
eap_config.h Added preliminary Wi-Fi Protected Setup (WPS) implementation 2008-11-23 19:34:26 +02:00
eap_fast.c Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_fast_pac.c Fixed fwrite error path in eap_fast_write_pac not to free buf 2008-11-01 17:09:28 +02:00
eap_fast_pac.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_gpsk.c Reject GPSK-3 if ID_Server in it does not match with the value in GPSK-1 2008-11-23 20:06:13 +02:00
eap_gtc.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_i.h Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_ikev2.c Renamed MSG to PROC_MSG to avoid conflicts with MinGW winuser.h 2008-08-10 18:00:11 +03:00
eap_leap.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_md5.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_methods.c Add a starting point for EAP-AKA' (draft-arkko-eap-aka-kdf-10) 2008-12-02 20:12:49 +02:00
eap_methods.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_mschapv2.c Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_otp.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_pax.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_peap.c Fixed interoperability issue with PEAPv0 cryptobinding and NPS 2008-12-15 00:15:54 +02:00
eap_psk.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_sake.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_sim.c Add more verbose debug output for GSM-Milenage use (RAND,SRES,Kc) 2008-11-22 14:06:58 +02:00
eap_tls.c Separate OpenSSL engine configuration for Phase 2 2008-11-18 16:53:32 +02:00
eap_tls_common.c Fix TLS message processing if Flags field is not present 2008-12-30 12:28:02 +02:00
eap_tls_common.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_tnc.c Renamed MSG to PROC_MSG to avoid conflicts with MinGW winuser.h 2008-08-10 18:00:11 +03:00
eap_ttls.c Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_vendor_test.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_wsc.c Use wildcard UUID when setting AP PIN for Registrar in wpa_supplicant 2008-12-21 17:37:40 +02:00
ikev2.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
ikev2.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
Makefile Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
mschapv2.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
mschapv2.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
tncc.c Added option to force SoH version 1 (tnc=soh1) 2008-12-07 21:00:42 +02:00
tncc.h Added option to force SoH version 1 (tnc=soh1) 2008-12-07 21:00:42 +02:00