mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-28 18:28:23 -05:00
P2P: Don't rely on dictionary ordering in wpas_dbus_handler_p2p_add_service
In most languages, DBus dictionaries are mapped to either sorted maps or hash tables, so you can't control the actual ordering of the generated a{sv}. Relying on ordering in this method is unnecessary and makes it use from DBus much harder. Signed-hostap: Adrien Bustany <adrien.bustany@nokia.com>
This commit is contained in:
parent
78039295e6
commit
c9b72c257a
@ -2073,7 +2073,7 @@ DBusMessage * wpas_dbus_handler_p2p_add_service(DBusMessage *message,
|
|||||||
if (!wpa_dbus_dict_open_read(&iter, &iter_dict, NULL))
|
if (!wpa_dbus_dict_open_read(&iter, &iter_dict, NULL))
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
if (wpa_dbus_dict_has_dict_entry(&iter_dict)) {
|
while (wpa_dbus_dict_has_dict_entry(&iter_dict)) {
|
||||||
if (!wpa_dbus_dict_get_entry(&iter_dict, &entry))
|
if (!wpa_dbus_dict_get_entry(&iter_dict, &entry))
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
@ -2085,23 +2085,30 @@ DBusMessage * wpas_dbus_handler_p2p_add_service(DBusMessage *message,
|
|||||||
bonjour = 1;
|
bonjour = 1;
|
||||||
else
|
else
|
||||||
goto error_clear;
|
goto error_clear;
|
||||||
wpa_dbus_dict_entry_clear(&entry);
|
} else if (!os_strcmp(entry.key, "version") &&
|
||||||
|
entry.type == DBUS_TYPE_INT32) {
|
||||||
|
version = entry.uint32_value;
|
||||||
|
} else if (!os_strcmp(entry.key, "service") &&
|
||||||
|
(entry.type == DBUS_TYPE_STRING)) {
|
||||||
|
service = os_strdup(entry.str_value);
|
||||||
|
} else if (!os_strcmp(entry.key, "query")) {
|
||||||
|
if ((entry.type != DBUS_TYPE_ARRAY) ||
|
||||||
|
(entry.array_type != DBUS_TYPE_BYTE))
|
||||||
|
goto error_clear;
|
||||||
|
query = wpabuf_alloc_copy(
|
||||||
|
entry.bytearray_value,
|
||||||
|
entry.array_len);
|
||||||
|
} else if (!os_strcmp(entry.key, "response")) {
|
||||||
|
if ((entry.type != DBUS_TYPE_ARRAY) ||
|
||||||
|
(entry.array_type != DBUS_TYPE_BYTE))
|
||||||
|
goto error_clear;
|
||||||
|
resp = wpabuf_alloc_copy(entry.bytearray_value,
|
||||||
|
entry.array_len);
|
||||||
}
|
}
|
||||||
|
wpa_dbus_dict_entry_clear(&entry);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (upnp == 1) {
|
if (upnp == 1) {
|
||||||
while (wpa_dbus_dict_has_dict_entry(&iter_dict)) {
|
|
||||||
if (!wpa_dbus_dict_get_entry(&iter_dict, &entry))
|
|
||||||
goto error;
|
|
||||||
|
|
||||||
if (!os_strcmp(entry.key, "version") &&
|
|
||||||
entry.type == DBUS_TYPE_INT32)
|
|
||||||
version = entry.uint32_value;
|
|
||||||
else if (!os_strcmp(entry.key, "service") &&
|
|
||||||
entry.type == DBUS_TYPE_STRING)
|
|
||||||
service = os_strdup(entry.str_value);
|
|
||||||
wpa_dbus_dict_entry_clear(&entry);
|
|
||||||
}
|
|
||||||
if (version <= 0 || service == NULL)
|
if (version <= 0 || service == NULL)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
@ -2109,37 +2116,15 @@ DBusMessage * wpas_dbus_handler_p2p_add_service(DBusMessage *message,
|
|||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
os_free(service);
|
os_free(service);
|
||||||
|
service = NULL;
|
||||||
} else if (bonjour == 1) {
|
} else if (bonjour == 1) {
|
||||||
while (wpa_dbus_dict_has_dict_entry(&iter_dict)) {
|
|
||||||
if (!wpa_dbus_dict_get_entry(&iter_dict, &entry))
|
|
||||||
goto error;
|
|
||||||
|
|
||||||
if (!os_strcmp(entry.key, "query")) {
|
|
||||||
if ((entry.type != DBUS_TYPE_ARRAY) ||
|
|
||||||
(entry.array_type != DBUS_TYPE_BYTE))
|
|
||||||
goto error_clear;
|
|
||||||
query = wpabuf_alloc_copy(
|
|
||||||
entry.bytearray_value,
|
|
||||||
entry.array_len);
|
|
||||||
} else if (!os_strcmp(entry.key, "response")) {
|
|
||||||
if ((entry.type != DBUS_TYPE_ARRAY) ||
|
|
||||||
(entry.array_type != DBUS_TYPE_BYTE))
|
|
||||||
goto error_clear;
|
|
||||||
resp = wpabuf_alloc_copy(entry.bytearray_value,
|
|
||||||
entry.array_len);
|
|
||||||
}
|
|
||||||
|
|
||||||
wpa_dbus_dict_entry_clear(&entry);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (query == NULL || resp == NULL)
|
if (query == NULL || resp == NULL)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0) {
|
if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0)
|
||||||
wpabuf_free(query);
|
|
||||||
wpabuf_free(resp);
|
|
||||||
goto error;
|
goto error;
|
||||||
}
|
query = NULL;
|
||||||
|
resp = NULL;
|
||||||
} else
|
} else
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
@ -2147,6 +2132,9 @@ DBusMessage * wpas_dbus_handler_p2p_add_service(DBusMessage *message,
|
|||||||
error_clear:
|
error_clear:
|
||||||
wpa_dbus_dict_entry_clear(&entry);
|
wpa_dbus_dict_entry_clear(&entry);
|
||||||
error:
|
error:
|
||||||
|
os_free(service);
|
||||||
|
wpabuf_free(query);
|
||||||
|
wpabuf_free(resp);
|
||||||
return wpas_dbus_error_invalid_args(message, NULL);
|
return wpas_dbus_error_invalid_args(message, NULL);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user