[PATCH] DPP: Accept plain-text SSID in configurator parameter parsing

HungTsung Huang Jason.Huang2 at infineon.com
Tue Jun 30 21:35:51 PDT 2026


On Sat, Jun 06, 2026 at 05:18:47PM +0300, Jouni Malinen wrote:
Thanks for the review.

I am withdrawing this patch for now and do not plan to pursue upstreaming it further.

Best regards,
Jason Huang
> On Thu, May 21, 2026 at 11:58:42AM +0800, HungTsung Huang wrote:
> > I agree the current approach is too broad and risks breaking existing users.
> > I plan to revise as follows:
> > - Introduce a new parameter, ssid_str=, for plain-text SSID.
> > - Parse ssid_str= in a separate branch from ssid=.
> > - Reject ambiguous input when both ssid= and ssid_str= are present in the same command.
> 
> Please keep in mind that SSID is an arbitrary octet string that is
> allowed to contain values like nul (0x00) and newline and obvious things
> like " ssid=112233". In other words, this type of addition of
> ssid_str=<text> is not exactly robust and can cause lots of issues in
> various corner cases. This is exactly why the current design uses a
> hexdump of arbitrary binary data..
> 




More information about the Hostap mailing list