Re: Fast BSS transition crashes hostapd 2.7-devel

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I Braun,

I tried it, but still failure/crash occurred.

Thanks,

On Tue, Jan 22, 2019 at 9:21 PM michael-dev <michael-dev@xxxxxxxxxxxxx> wrote:
>
> Am 15.01.2019 00:06, schrieb Abc Abc:
> > wpa_ft_pull_pmk_r1()
> >   wpa_ft_rrb_seq_req()
> >     wpa_ft_rrb_build(key, key_len, NULL, NULL, seq_req_auth, NULL,
> >       if (wpa_ft_rrb_lin(tlvs_enc0, tlvs_enc1, vlan, ----- all these
> > pointers are NULL. This will throw an error in generating Seq_number
> > request.
>
> if this call reproduces "FT: Failed to allocate plaintext", then
> os_zalloc returns NULL on zero argument.
>
> Can you try the following patch?
>
> diff --git a/src/ap/wpa_auth_ft.c b/src/ap/wpa_auth_ft.c
> index 60f0786a1..698fed62d 100644
> --- a/src/ap/wpa_auth_ft.c
> +++ b/src/ap/wpa_auth_ft.c
> @@ -426,6 +426,9 @@ static int wpa_ft_rrb_lin(const struct tlv_list
> *tlvs1,
>          tlv_len += wpa_ft_tlv_len(tlvs2);
>          tlv_len += wpa_ft_vlan_len(vlan);
>
> +       if (!tlv_len)
> +               return 0;
> +
>          *plain_len = tlv_len;
>          *plain = os_zalloc(tlv_len);
>          if (!*plain) {
>
>
> Regards,
> M. Braun
>
> _______________________________________________
> Hostap mailing list
> Hostap@xxxxxxxxxxxxxxxxxxx
> http://lists.infradead.org/mailman/listinfo/hostap

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux