问题描述:
Address wpa_supplicant vulnerabilities
These CVEs were found by security review on P.Car:
CVE-2019-11555, CVE-2019-16275
This CL implements the required patches.
解决code:
---------------------------- src/ap/drv_callbacks.c ----------------------------
index 952a3d55..e3844d97 100644
@@ -131,6 +131,19 @@ int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
"hostapd_notif_assoc: Skip event with no address");
return -1;
}
+
+ if (is_multicast_ether_addr(addr) ||
+ is_zero_ether_addr(addr) ||
+ os_memcmp(addr, hapd->own_addr, ETH_ALEN) == 0) {
+ /* Do not process any frames with unexpected/invalid SA so that
+ * we do not add any state for unexpected STA addresses or end
+ * up sending out frames to unexpected destination. */
+ wpa_printf(MSG_DEBUG, "%s: Invalid SA=&