Possible bug EAP-PWD

[Sergio NNX]

I'd like to report a runtime exception while testing EAP-PWD using eapol_test utility.

...
...
RADIUS packet matching with station
decapsulated EAP packet (code=1 id=1 len=21) from RADIUS server: EAP-Request-Unk
nown (52)
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Request id=1 method=52 vendor=0 vendorMethod=0
EAP: EAP entering state GET_METHOD
CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=52
EAP: Status notification: accept proposed method (param=PWD)
EAP: Initialize selected EAP method: vendor 0 method 52 (PWD)
CTRL-EVENT-EAP-METHOD EAP vendor 0 method 52 (PWD) selected
EAP: EAP entering state METHOD
EAP-pwd: processing frame: exch 1, len 15
EAP-PWD (peer): using group 0
EAP-PWD (peer): server sent id of - hexdump_ascii(len=6):
     73 65 72 76 65 72                                 server
EAP-pwd: unsupported group 0
EAP-PWD (peer): unable to compute PWE
EAP-PWD: PWD-ID-Req -> FAILURE
EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespDa
ta=00000000
EAP: EAP entering state SEND_RESPONSE
EAP: No eapRespData available
EAP: EAP entering state IDLE
...
...
[ Rutime exception here - see backtrace ]

Program received signal SIGSEGV, Segmentation fault.
0x0052149c in EC_GROUP_free ()
(gdb) bt
#0  0x0052149c in EC_GROUP_free ()
#1  0x0045922b in eap_pwd_deinit ()
#2  0x0047b094 in eap_deinit_prev_method ()
#3  0x0047be08 in eap_peer_sm_deinit ()
#4  0x0047af8a in eapol_sm_deinit ()
#5  0x00608187 in main ()

Cheers.

Sergio.
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.shmoo.com/pipermail/hostap/attachments/20140510/85466304/attachment.htm>