[PATCH] PMKSA: fix use-after-free in pmksa_cache_clone_entry()

Jouni Malinen j at w1.fi
Sat Sep 9 16:19:40 PDT 2017


On Thu, Sep 07, 2017 at 09:42:02PM -0400, Andrew Elble wrote:
> pmksa_cache_add_entry() may actually free old_entry if the pmksa cache
> is full. This can result in the pmksa cache containing entries with
> corrupt expiration times.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list