[src/netbsd-6]: src/external/bsd/wpa/dist/src/eap_server external/bsd/wpa/dis...

[riz <riz%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7530d9d51979
branches:  netbsd-6
changeset: 774645:7530d9d51979
user:      riz <riz%NetBSD.org@localhost>
date:      Tue Oct 09 23:54:57 2012 +0000

description:
external/bsd/wpa/dist/src/eap_server/eap_server_tls_common.c    patch

        Fix overflow in hostapd.  PRE-SA-2012-07.
        [christos, ticket #597]

diffstat:

 external/bsd/wpa/dist/src/eap_server/eap_server_tls_common.c |  7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)

diffs (17 lines):

diff -r 20d5fe5df171 -r 7530d9d51979 external/bsd/wpa/dist/src/eap_server/eap_server_tls_common.c
--- a/external/bsd/wpa/dist/src/eap_server/eap_server_tls_common.c      Tue Oct 09 23:51:14 2012 +0000
+++ b/external/bsd/wpa/dist/src/eap_server/eap_server_tls_common.c      Tue Oct 09 23:54:57 2012 +0000
@@ -225,6 +225,13 @@
                        return -1;
                }
 
+               if (len > message_length) {
+                       wpa_printf(MSG_INFO, "SSL: Too much data (%zu bytes) "
+                                  "in first fragment of frame (TLS Message "
+                                  "Length %u bytes)", len, message_length);
+                       return -1;
+               }
+
                data->tls_in = wpabuf_alloc(message_length);
                if (data->tls_in == NULL) {
                        wpa_printf(MSG_DEBUG, "SSL: No memory for message");