Jouni Malinen 95577884ca EAP-pwd peer: Fix error path for unexpected Confirm message ...

If the Confirm message is received from the server before the Identity
exchange has been completed, the group has not yet been determined and
data->grp is NULL. The error path in eap_pwd_perform_confirm_exchange()
did not take this corner case into account and could end up
dereferencing a NULL pointer and terminating the process if invalid
message sequence is received. (CVE-2015-5316)

Signed-off-by: Jouni Malinen <j@w1.fi>

2015-11-10 18:40:54 +02:00

..

eap_aka.c

EAP-SIM/AKA: Explicitly check for header to include Reserved field

2015-05-03 16:33:03 +03:00

eap_config.h

Add an option allow canned EAP-Success for wired IEEE 802.1X

2015-02-01 19:22:54 +02:00

eap_eke.c

EAP-EKE: Add Session-Id

2015-05-24 11:58:45 +03:00

eap_fast_pac.c

EAP-FAST peer: Avoid undefined behavior in pointer arithmetic

2015-10-24 21:43:54 +03:00

eap_fast_pac.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_fast.c

EAP-FAST peer: Avoid undefined behavior in pointer arithmetic

2015-10-24 21:43:54 +03:00

eap_gpsk.c

EAP-GPSK: Pass EAP identifier instead of full request

2015-05-03 16:32:28 +03:00

eap_gtc.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_i.h

EAP peer: Replace MD5 with SHA1 in duplicate message workaround

2015-08-01 16:57:04 +03:00

eap_ikev2.c

EAP-IKEv2 peer: Fix fragmentation reassembly

2014-12-21 00:48:24 +02:00

eap_leap.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_md5.c

EAP-MD5: Verify that CHAP operation succeeds

2012-08-16 18:49:02 +03:00

eap_methods.c

Check os_snprintf() result more consistently - automatic 1

2014-12-08 11:42:07 +02:00

eap_methods.h

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_mschapv2.c

Add build option to remove all internal RC4 uses

2015-08-02 16:52:56 +03:00

eap_otp.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_pax.c

EAP-PAX: Fix PAX_STD-1 and PAX_STD-3 payload length validation

2015-05-03 16:32:36 +03:00

eap_peap.c

EAP-TTLS/PEAP/FAST peer: Stop immediately on local TLS processing failure

2015-07-28 21:00:18 +03:00

eap_proxy_dummy.c

eap_proxy: Add context data pointer to the get_imsi call

2013-10-23 20:51:46 +03:00

eap_proxy.h

eap_proxy: Add context data pointer to the get_imsi call

2013-10-23 20:51:46 +03:00

eap_psk.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_pwd.c

EAP-pwd peer: Fix error path for unexpected Confirm message

2015-11-10 18:40:54 +02:00

eap_sake.c

EAP-SAKE: Pass EAP identifier instead of full request

2015-05-03 16:32:46 +03:00

eap_sim.c

EAP-SIM/AKA: Explicitly check for header to include Reserved field

2015-05-03 16:33:03 +03:00

eap_tls_common.c

Rename tls_connection_get_keys() to tls_connection_get_random()

2015-08-02 16:52:56 +03:00

eap_tls_common.h

EAP-TLS/PEAP/TTLS/FAST: Move more towards using struct wpabuf

2015-05-03 16:32:23 +03:00

eap_tls.c

pkcs11: Don't ask for a new PIN on TLS handshake failure

2015-07-07 19:25:31 +03:00

eap_tnc.c

EAP-TNC: Limit maximum message buffer to 75000 bytes (CID 62873)

2014-06-13 16:03:45 +03:00

eap_ttls.c

EAP-TTLS: Disable CHAP, MSCHAP, and MSCHAPV2 in CONFIG_FIPS=y builds

2015-08-01 21:07:44 +03:00

eap_vendor_test.c

tests: Pending EAP peer processing with VENDOR-TEST

2015-01-28 13:09:31 +02:00

eap_wsc.c

EAP-WSC peer: Reject connection on unexpected failure

2015-08-30 18:37:44 +03:00

eap.c

EAP peer: Clear ignore flag in INITIALIZE state

2015-10-31 21:56:59 +02:00

eap.h

Declare all read only data structures as const

2015-04-25 17:33:06 +03:00

ikev2.c

EAP-IKEv2 peer: Avoid undefined behavior in pointer arithmetic

2015-10-24 21:43:54 +03:00

ikev2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

Makefile

tests: Add eapol-fuzzer

2015-04-22 11:44:19 +03:00

mschapv2.c

EAP-MSCHAPv2: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:48 +03:00

mschapv2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

tncc.c

TNC: Fix minor memory leak (CID 62848)

2014-06-12 19:44:58 +03:00

tncc.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00