Segmentation Faults in hostapd with NetBSD

[Jouni Malinen]

On Tue, Jun 17, 2008 at 10:04:02PM +0200, tn2h wrote:

> I get the same problem on netbsd current 4.99.64 build this WE and 
> hostapd 0.6.2
> 
> here the backtrace
> 
> Program terminated with signal 11, Segmentation fault.
> #0  eapol_sm_step_run (sm=0xbb94f040)
>     at 
> /home/thom/nbsdcurr/src/usr.sbin/wpa/hostapd/../../../dist/wpa/src/utils/wpabuf.h:58
> 58              return buf->used;

Thanks for the trace. This looks like an issue that was fixed in hostapd
0.6.3. eapol_sm_step_run() needs to verify that
sm->eap_if->aaaEapRespData != NULL prior to the sm->eapol->cb.aaa_send()
call that dereference this pointer in couple of the function arguments.

-- 
Jouni Malinen                                            PGP id EFC895FA