fragattacks/src/wps
Jouni Malinen ca68a8b561 WPS: Explicitly reject Public Key attribute with unexpected length
There is no need to try to derive DH shared key with a peer that tries
to use too short or too long DH Public Key. Previously, such cases ended
up implicitly getting rejected by the DH operations failing to produce
matching results. That is unnecessarily, so simply reject the message
completely if it does not have a Public Key with valid length. Accept
couple of octets shorter value to be used to avoid interoperability
issues if there are implementations that do not use zero-padding
properly.

Signed-off-by: Jouni Malinen <j@w1.fi>
2015-04-22 22:05:12 +03:00
..
http_client.c WPS: Do not use void* in arithmetic 2013-05-04 20:19:45 +03:00
http_client.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
http_server.c WPS: Print setsockopt() failure in debug log 2014-04-28 16:54:09 +03:00
http_server.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
http.h WPS: Move POST URL validation into web_connection_parse_post() 2009-12-12 16:48:50 +02:00
httpread.c WPS: Clean up indentation level (CID 68109) 2014-06-12 19:45:31 +03:00
httpread.h Remove the GPL notification from files contributed by Atheros 2012-02-11 19:39:36 +02:00
Makefile tests: Add p2p-fuzzer 2015-04-22 11:44:19 +03:00
ndef.c Make code path easier for static analyzers 2014-03-02 17:15:11 +02:00
upnp_xml.c WPS ER: Fix UPnP XML Device Description parser to find correct device 2011-08-31 13:56:03 +03:00
upnp_xml.h WPS ER: Fix UPnP XML Device Description parser to find correct device 2011-08-31 13:56:03 +03:00
wps_attr_build.c WPS: Enable WSC 2.0 support unconditionally 2014-03-25 18:33:21 +02:00
wps_attr_parse.c WPS: Explicitly reject Public Key attribute with unexpected length 2015-04-22 22:05:12 +03:00
wps_attr_parse.h WPS: Parse Registrar Configuration Methods 2014-03-05 23:26:16 +02:00
wps_attr_process.c WPS: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:47 +03:00
wps_common.c P2PS: WPS changes needed for P2PS default PIN 2015-02-02 16:55:45 +02:00
wps_defs.h WPS: Truncate variable length string attributes to maximum length 2015-04-22 22:05:12 +03:00
wps_dev_attr.c P2P NFC: Add WPS attribute building for P2P NFC 2014-01-27 21:10:55 +02:00
wps_dev_attr.h P2P NFC: Add WPS attribute building for P2P NFC 2014-01-27 21:10:55 +02:00
wps_enrollee.c WPS: Re-fix an interoperability issue with mixed mode and AP Settings 2015-01-19 18:35:59 +02:00
wps_er_ssdp.c WPS ER: Allow UPnP interface to be forced 2013-04-28 21:56:24 +03:00
wps_er.c WPS ER: Fix UDN parser to handle missing field 2014-06-07 17:35:22 +03:00
wps_er.h WPS ER: Allow UPnP interface to be forced 2013-04-28 21:56:24 +03:00
wps_i.h WPS: Extend per-station PSK to support ER case as well 2014-03-13 18:22:25 +02:00
wps_module_tests.c tests: Add module tests for WPS attribute parsing 2014-02-21 13:41:30 +02:00
wps_registrar.c P2PS: WPS changes needed for P2PS default PIN 2015-02-02 16:55:45 +02:00
wps_upnp_ap.c WPS: Enable WSC 2.0 support unconditionally 2014-03-25 18:33:21 +02:00
wps_upnp_event.c WPS UPnP: Add more priority for queuing EAP events 2010-10-17 21:30:25 +03:00
wps_upnp_i.h WPS: Remove unused send_wpabuf() 2013-12-29 10:00:33 +02:00
wps_upnp_ssdp.c WPS UPnP: Check os_get_random() result more consistently 2014-10-11 19:08:30 +03:00
wps_upnp_web.c Make dl_list_first() and dl_list_last() uses easier for static analyzers 2014-04-29 12:52:10 +03:00
wps_upnp.c WPS UPnP: Check os_get_random() result 2014-10-11 18:58:17 +03:00
wps_upnp.h WPS: Change concurrent radio AP to use only one WPS UPnP instance 2010-11-11 14:50:13 +02:00
wps_validate.c WPS-STRICT: Update valid Device Password ID and Config Error range 2014-01-27 21:44:31 +02:00
wps.c Use common is_ctrl_char() helper function 2015-04-22 11:44:19 +03:00
wps.h Use SSID_MAX_LEN define instead of value 32 when comparing SSID length 2015-04-22 11:44:18 +03:00