[PATCH] radius: sanity check for null pointer segfault

Eduardo Abinader eduardoabinader at gmail.com
Thu Aug 18 23:59:56 PDT 2016


Forgot to mention: the mib command was issued was during DFS
procedure. It may be noticed in the logs.



On Thu, Aug 18, 2016 at 7:16 PM, Eduardo Abinader
<eduardoabinader at gmail.com> wrote:
> I just reproduced:
>
> log file: http://pastebin.com/qbpFYWQV
> conf: http://pastebin.com/sGYNm2T5
>
> On Thu, Aug 18, 2016 at 7:14 PM, Jouni Malinen <j at w1.fi> wrote:
>> On Thu, Aug 18, 2016 at 09:57:47AM +0200, Eduardo Abinader wrote:
>>> I can provide logs later, but summarizing:
>>>
>>> 1) compiled with this defconfig: http://pastebin.com/7v5Zh4Ba
>>>
>>> 2) started a bss with no radius, just normal WPA-PSK
>>>
>>> 3) sent ctrl_iface mib command
>>>
>>> result: crash.
>>
>> There is actually already a hwsim test case that does this with
>> WPA-PSK.. In addition, I just tried this with a defconfig build and the
>> following hostapd.conf file without being able to reproduce.
>>
>> interface=wlan0
>> driver=nl80211
>> hw_mode=g
>> channel=1
>> ctrl_interface=/var/run/hostapd
>> ctrl_interface_group=adm
>> ssid=test-psk
>> wpa=2
>> wpa_key_mgmt=WPA-PSK
>> wpa_pairwise=CCMP
>> wpa_passphrase=12345678
>>
>> --
>> Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list