[PATCH] Using wpa_psk_radius=3 can lead to malformed RADIUS packets that do not conform to the standard for "Long Extended Type" as defined in RFC 6929.

Jouni Malinen j at w1.fi
Thu Jun 19 03:22:00 PDT 2025


On Thu, May 22, 2025 at 10:46:12PM -0700, Kellen Gattis wrote:
> This was observed when using wpa_psk_radius=3 in conjunction with
> wpa_key_mgmt=WPA-PSK FT-PSK that resulted in a RADIUS attribute for
> 245.26.11344.2 that was 256 octets in size.  The expected outcome was
> two fragments containing data sizes of 251 and 5 octets, but hostapd
> instead created a fragment of 256 octets (exceeded the size limit)
> followed by a fragment of 5 octets.
> 
> This patch will make it so the fragments preceding the final fragment
> will have the correct data size by using alen instead of data_len when
> running wpabuf_put_data.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list