Parcourir la source

WPS ER: Add validation of WPS attributes in proxied Probe Request

When strict validation is enabled in the build, check the WPS
attributes in proxied Probe Request frames.
Jouni Malinen il y a 14 ans
Parent
commit
5245483f80
1 fichiers modifiés avec 6 ajouts et 0 suppressions
  1. 6 0
      src/wps/wps_er.c

+ 6 - 0
src/wps/wps_er.c

@@ -823,6 +823,12 @@ static void wps_er_process_wlanevent_probe_req(struct wps_er_ap *ap,
 	wpa_hexdump_buf(MSG_MSGDUMP, "WPS ER: WLANEvent - Enrollee's message "
 			"(TLVs from Probe Request)", msg);
 
+	if (wps_validate_probe_req(msg, addr) < 0) {
+		wpa_printf(MSG_INFO, "WPS-STRICT: ER: Ignore invalid proxied "
+			   "Probe Request frame from " MACSTR, MAC2STR(addr));
+		return;
+	}
+
 	if (wps_parse_msg(msg, &attr) < 0) {
 		wpa_printf(MSG_DEBUG, "WPS ER: Failed to parse TLVs in "
 			   "WLANEvent message");