mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2025-02-20 11:03:03 -05:00
4cfa8b92ba
The case where the old RSNE included one or more PMKIDs and that RSNE was followed by another IE was handled incorrectly since the os_memmove() to move the end of the buffer when removing old PMKIDs was stopping copying at the end of the RSNE, not the end of the IE buffer. This could result in corrupting the IE that followed the RSNE. In practice, this broke FT-SAE with H2E by corrupting the RSNXE that is in the buffer after the RSNE. Fix this by copying the full end of the buffer (i.e., including the following RSNXE in the visible error case) when removing the old PMKIDs. Signed-off-by: Jouni Malinen <j@w1.fi>