doc/share/security/patches/SA-12:07/hostapd-8.patch
2012-11-22 23:46:26 +00:00

18 lines
675 B
Diff

Index: contrib/wpa/src/eap_server/eap_tls_common.c
===================================================================
--- contrib/wpa/src/eap_server/eap_tls_common.c (revision 240976)
+++ contrib/wpa/src/eap_server/eap_tls_common.c (working copy)
@@ -220,6 +220,13 @@ static int eap_server_tls_process_fragment(struct
" over 64 kB)");
return -1;
}
+ if (len > message_length) {
+ wpa_printf(MSG_INFO, "SSL: Too much data (%d bytes) in "
+ "first fragment of frame (TLS Message "
+ "Length %d bytes)",
+ (int) len, (int) message_length);
+ return -1;
+ }
data->in_buf = wpabuf_alloc(message_length);
if (data->in_buf == NULL) {