Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-10-05 19:08:52 +02:00
Code Releases Activity

eapol: Stricter length check in eapol_decrypt_key_data

Browse Source 
The plaintext key_data + padding must be at least 16 bytes so the
AES-encrypted key_data must be at least 24 bytes.
This commit is contained in:
Andrew Zaborowski 2017-08-31 04:04:49 +02:00 committed by Denis Kenzior
parent a0cde90814
commit 092ede1147
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/eapol.c
View File

@ -292,7 +292,7 @@ uint8_t *eapol_decrypt_key_data(const uint8_t *kek,
}
case EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES:
case EAPOL_KEY_DESCRIPTOR_VERSION_AES_128_CMAC_AES:
if (key_data_len < 8 || key_data_len % 8)
if (key_data_len < 24 || key_data_len % 8)
goto error;
if (!aes_unwrap(kek, key_data, key_data_len, buf))