From c0c11afaf1467e74769acc96344255c7828415b4 Mon Sep 17 00:00:00 2001 From: Eytan Lifshitz Date: Mon, 10 Feb 2014 12:55:07 +0200 Subject: [PATCH] wpa_supplicant: Fix NULL dereference in eap_fast_parse_end() In eap_fast_parse_end(), pos might be NULL if the line doesn't contain '='. Signed-hostap: Eytan Lifshitz --- src/eap_peer/eap_fast_pac.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/eap_peer/eap_fast_pac.c b/src/eap_peer/eap_fast_pac.c index 8c480b967..21d60983c 100644 --- a/src/eap_peer/eap_fast_pac.c +++ b/src/eap_peer/eap_fast_pac.c @@ -330,6 +330,8 @@ static const char * eap_fast_parse_end(struct eap_fast_pac **pac_root, static const char * eap_fast_parse_pac_type(struct eap_fast_pac *pac, char *pos) { + if (!pos) + return "Cannot parse pac type"; pac->pac_type = atoi(pos); if (pac->pac_type != PAC_TYPE_TUNNEL_PAC && pac->pac_type != PAC_TYPE_USER_AUTHORIZATION &&