CVS commit: src/external/bsd/wpa/dist/src

["Christos Zoulas" <christos%netbsd.org@localhost>]

Module Name:    src
Committed By:   christos
Date:           Tue May  3 18:19:44 UTC 2016

Modified Files:
        src/external/bsd/wpa/dist/src/utils: common.c common.h
        src/external/bsd/wpa/dist/src/wps: wps_attr_process.c

Log Message:
http://w1.fi/security/2016-1/0001-WPS-Reject-a-Credential-with-invalid-passphrase.patch
WPA/WPA2-Personal passphrase is not allowed to include control
characters. Reject a Credential received from a WPS Registrar both as
STA (Credential) and AP (AP Settings) if the credential is for WPAPSK or
WPA2PSK authentication type and includes an invalid passphrase.

This fixes an issue where hostapd or wpa_supplicant could have updated
the configuration file PSK/passphrase parameter with arbitrary data from
an external device (Registrar) that may not be fully trusted. Should
such data include a newline character, the resulting configuration file
could become invalid and fail to be parsed.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.5 -r1.2 src/external/bsd/wpa/dist/src/utils/common.c \
    src/external/bsd/wpa/dist/src/utils/common.h
cvs rdiff -u -r1.1.1.5 -r1.2 \
    src/external/bsd/wpa/dist/src/wps/wps_attr_process.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.