fragattacks/src
Jouni Malinen 08dc8efd29 Fix memcpy regression in PMK handling
The memcpy calls added for exposing the PMK from wpa_auth module could
end up trying to copy the same memory buffer on top of itself.
Overlapping memory areas are not allowed with memcpy, so this could
result in undefined behavior. Fix this by making the copies conditional
on the updated value actually coming from somewhere else.

Fixes: b08c9ad0c7 ("AP: Expose PMK outside of wpa_auth module")
Signed-off-by: Jouni Malinen <j@w1.fi>
2019-03-23 12:44:42 +02:00
..
ap Fix memcpy regression in PMK handling 2019-03-23 12:44:42 +02:00
common FILS: Fix KEK2 derivation for FILS+FT 2019-03-20 22:26:56 +02:00
crypto OpenSSL: Fix build with current BoringSSL 2019-03-19 18:24:09 +02:00
drivers nl80211: Clear keys from heap memory before freeing it for get_seqnum 2019-03-13 14:54:18 +02:00
eap_common EAP-pwd: Fix a memory leak in hunting-and-pecking loop 2019-03-07 00:27:12 +02:00
eap_peer Add support for an optional context parameter to TLS exporter 2019-03-16 18:52:09 +02:00
eap_server Add support for an optional context parameter to TLS exporter 2019-03-16 18:52:09 +02:00
eapol_auth Add hostapd tls_flags parameter 2017-09-18 12:12:48 +03:00
eapol_supp More robust timer_tick_enabled tracking 2019-03-13 23:33:41 +02:00
fst UBSan: Define FST LLT macros without integer overflow 2019-02-25 19:48:49 +02:00
l2_packet wpa_supplicant: Don't reply to EAPOL if pkt_type is PACKET_OTHERHOST 2018-04-02 12:21:27 +03:00
p2p WPS: Add multi_ap_subelem to wps_build_wfa_ext() 2019-02-18 20:30:26 +02:00
pae UBSan: Pack MACsec peer id structure 2019-02-25 19:48:49 +02:00
radius EAP-pwd server: Fix memory leak with salted passwords 2019-03-08 16:59:27 +02:00
rsn_supp DPP2: PFS for PTK derivation 2019-03-18 18:32:31 +02:00
tls TLS: Add support for RFC 5705 TLS exporter context with internal TLS 2019-03-16 18:52:09 +02:00
utils Remove forgotten os_strncpy() implementations 2019-03-10 15:56:51 +02:00
wps Multi-AP: Avoid memcpy(ptr, NULL, 0) in WPS Registrar initialization 2019-02-23 11:37:20 +02:00
lib.rules tests: TLS fuzzing tool 2019-02-11 02:35:29 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00