hostap/src/eap_common
Jouni Malinen 08ef4426a7 EAP-IKEv2: Fix the payload parser
The payload lengths were not properly verified and the first check on
there being enough buffer for the header was practically ignored. The
second check for the full payload would catch length issues, but this is
only after the potential read beyond the buffer. (CID 72687)

Signed-off-by: Jouni Malinen <j@w1.fi>
2014-10-11 19:22:30 +03:00
..
Makefile Add CONFIG_CODE_COVERAGE=y option for gcov 2013-11-24 19:16:12 +02:00
chap.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
chap.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_common.c Add extra validation of EAP header length field 2012-08-07 23:03:25 +03:00
eap_common.h Add extra validation of EAP header length field 2012-08-07 23:03:25 +03:00
eap_defs.h HS 2.0R2: Add WFA server-only EAP-TLS peer method 2014-02-26 01:24:23 +02:00
eap_eke_common.c EAP-EKE: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:47 +03:00
eap_eke_common.h EAP-EKE: Add peer implementation 2013-07-07 20:30:10 +03:00
eap_fast_common.c EAP-FAST: Clean up TLV length validation (CID 62853) 2014-06-18 16:45:03 +03:00
eap_fast_common.h EAP-FAST: Clean up TLV length validation (CID 62853) 2014-06-18 16:45:03 +03:00
eap_gpsk_common.c EAP-GPSK: Avoid dead increment by checking pos pointer 2014-07-02 12:38:48 +03:00
eap_gpsk_common.h EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_ikev2_common.c EAP-IKEv2: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:47 +03:00
eap_ikev2_common.h EAP-IKEv2: Remove obsolete ccns.pl project workarounds 2014-06-08 12:28:36 +03:00
eap_pax_common.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_pax_common.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_peap_common.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_peap_common.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_psk_common.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_psk_common.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_pwd_common.c Support building with BoringSSL 2014-10-07 01:18:03 +03:00
eap_pwd_common.h EAP-pwd peer: Export Session-Id through getSessionId callback 2014-05-11 21:22:55 +03:00
eap_sake_common.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_sake_common.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_sim_common.c EAP-SIM/AKA: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:47 +03:00
eap_sim_common.h EAP-SIM/AKA: Pass EAP type as argument to eap_sim_msg_finish() 2014-07-02 12:38:47 +03:00
eap_tlv_common.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_ttls.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_wsc_common.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_wsc_common.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
ikev2_common.c EAP-IKEv2: Fix the payload parser 2014-10-11 19:22:30 +03:00
ikev2_common.h EAP-IKEv2: Remove obsolete ccns.pl project workarounds 2014-06-08 12:28:36 +03:00