wpabuf overflow with WPS

[Jouni Malinen]

On Wed, Apr 27, 2016 at 04:18:23PM +0200, Xue Liu wrote:
> I use  trunk for  board. I would like to add WPS to it. The Clearfog
> board is working as Access Point enabling WPA2-PSK and WPS Push
> Button. The hostapd is started from shell with -dd and the
> configuration file from https://wireless.wiki.kernel.org/en/users/drivers/ath10k/configuration
> . After the AP started, I enable the WPS by|
> |
> 
> hostapd_cli wps_pbc

Which version of hostapd are you using?

> root at OpenWrt:~# hostapd -dd hostapd.cfg
> Configuration file: hostapd.cfg
> [ 2795.008571] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
> [ 2795.016774] device wlan0 entered promiscuous mode
> wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE
...

This does not look like complete debug information. OpenWrt has a custom
patch that makes debugging much more difficult by default. Could you
please re-run this with a build that actually enables debugging in
hostapd? I'm not sure how this is supposed to be done in OpenWrt, but
the patch that breaks this is
package/network/services/hostapd/410-limit_debug_messages.patch so
either that would need to be removed from the build or the
CONFIG_MSG_MIN_PRIORITY value would need to be defined somewhere in
the build configuration to allow proper debugging.

-- 
Jouni Malinen                                            PGP id EFC895FA