fragattacks

mirror of https://github.com/vanhoefm/fragattacks.git synced 2024-11-25 00:38:24 -05:00

FragAttacks: Fragmentation & Aggregation Attacks

Go to file

Jouni Malinen 6a31440b86 Fix LCI request subelement processing Commit `4a742011ab` ('wpa_supplicant: Handle LCI request') introduced LCI request parsing in a manner that incremented the request pointer by four within wpas_rrm_build_lci_report() without decrementing len correspondingly. This could potentially result in get_ie() reading four octets beyond the buffer if a corrupted request is received. This would be applicable only if the LCI reporting was enabled explicitly ("SET LCI ..." control interface command). Fix this by updating the len variable to match the request pointer changes. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>		2017-01-03 15:18:29 +02:00
doc	Document new D-Bus WPS properties	2016-12-24 00:16:25 +02:00
eap_example	Fix typo in eap_example_server.c	2016-10-29 11:13:28 +03:00
hostapd	GAS: Remove unnecessarily duplicate gas_frag_limit configuration	2016-12-30 00:23:10 +02:00
hs20	HS 2.0 server: Remove redundant NULL check	2016-10-28 19:08:32 +03:00
mac80211_hwsim/tools	Remove obsolete mac80211_hwsim tests	2015-10-01 12:46:10 +03:00
radius_example	RADIUS: Redesign Request Authenticator generation	2016-02-06 17:19:35 +02:00
src	P2P: Fix compilation warning in p2p_add_device()	2016-12-30 00:49:24 +02:00
tests	tests: P2P autonomous GO switching channels with cfg80211 P2P Device	2016-12-30 23:56:35 +02:00
wlantest	Remove trailing whitespace	2016-12-28 14:31:42 +02:00
wpa_supplicant	Fix LCI request subelement processing	2017-01-03 15:18:29 +02:00
wpadebug	wpadebug: Add option to ignore SSL errors	2013-06-07 20:21:00 +03:00
wpaspy	wpaspy: Fix potentially referencing non existing attribute	2016-05-28 16:34:09 +03:00
.gitignore	gitignore static library files	2016-07-23 21:03:54 +03:00
Android.mk	Treat VER_2_1_DEVEL the same as VER_0_8_X	2013-12-14 21:23:39 -08:00
build_release	Drop OpenSSL 0.9.8 patches to add EAP-FAST support	2016-01-13 00:17:27 +02:00
CONTRIBUTIONS	Update copyright notices for the new year 2016	2016-01-01 13:42:04 +02:00
COPYING	Update copyright notices for the new year 2016	2016-01-01 13:42:04 +02:00
README	Update copyright notices for the new year 2016	2016-01-01 13:42:04 +02:00

README

wpa_supplicant and hostapd
--------------------------

Copyright (c) 2002-2016, Jouni Malinen <j@w1.fi> and contributors
All Rights Reserved.

These programs are licensed under the BSD license (the one with
advertisement clause removed).

If you are submitting changes to the project, please see CONTRIBUTIONS
file for more instructions.


This package may include either wpa_supplicant, hostapd, or both. See
README file respective subdirectories (wpa_supplicant/README or
hostapd/README) for more details.

Source code files were moved around in v0.6.x releases and compared to
earlier releases, the programs are now built by first going to a
subdirectory (wpa_supplicant or hostapd) and creating build
configuration (.config) and running 'make' there (for Linux/BSD/cygwin
builds).


License
-------

This software may be distributed, used, and modified under the terms of
BSD license:

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.

3. Neither the name(s) of the above-listed copyright holder(s) nor the
   names of its contributors may be used to endorse or promote products
   derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.