Surya Prakash Sivaraj 83c55429be qcacld-3.0: Stop SAP on invalid RSN IE
Hostapd sends RSNIE with around 18AKMs. However, the driver
data structures allow storage upto 6 AKMs only. Therefore,
the dot11f unpack modules returns BAD IE. The akm suite
however carries the parsed count of 18.

The HDD caller checks only DOT11F_FAILED, which doesn't cover
many of the DOT11F_xx failure status codes. Therefore, instead
of failing BSS, the IE is processed further and access of 18
contiguous AKMs takes place leading to OOB read crash.

To fix this, check for all the failure status code and stop
the BSS upon RSN/WPA/WAPI IE parse failure.

Change-Id: I16399c8a5bd61b09d29cd88e35c0ec441c6b9af4
CRs-Fixed: 3445762
2023-03-30 14:43:58 -07:00
2021-12-22 23:01:44 -08:00
2023-01-27 16:09:29 -08:00
Описание
No description provided
Readme 226 MiB
Languages
C 98.7%
C++ 0.9%
Makefile 0.3%
Starlark 0.1%