On Thu, Jan 26, 2017 at 04:24:06PM +0100, Johannes Berg wrote: > Instead of copying the struct wpa_auth_callbacks, just keep a > pointer to it, keep the context pointer separate, and let the > user just provide a static const structure. This reduces the > attack surface of heap overwrites, since the function pointers > move elsewhere. Thanks, applied. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
