From: Felix Fietkau Date: Wed, 17 Oct 2012 18:16:56 +0000 (+0000) Subject: hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445) X-Git-Tag: reboot~12590 X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=26944502e3ac3625b25a2911894bcdd252e39b30;p=openwrt%2Fstaging%2Fblogic.git hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445) SVN-Revision: 33815 --- diff --git a/package/network/services/hostapd/patches/001-CVE-2012-4445.patch b/package/network/services/hostapd/patches/001-CVE-2012-4445.patch new file mode 100644 index 000000000000..1b8bdd00c5bd --- /dev/null +++ b/package/network/services/hostapd/patches/001-CVE-2012-4445.patch @@ -0,0 +1,17 @@ +--- a/src/eap_server/eap_server_tls_common.c ++++ b/src/eap_server/eap_server_tls_common.c +@@ -228,6 +228,14 @@ static int eap_server_tls_process_fragme + return -1; + } + ++ if (len > message_length) { ++ wpa_printf(MSG_INFO, "SSL: Too much data (%d bytes) in " ++ "first fragment of frame (TLS Message " ++ "Length %d bytes)", ++ (int) len, (int) message_length); ++ return -1; ++ } ++ + data->tls_in = wpabuf_alloc(message_length); + if (data->tls_in == NULL) { + wpa_printf(MSG_DEBUG, "SSL: No memory for message");