Remove old wpa_supplicant 2.3 override.
This commit is contained in:
parent
2aa8d37a10
commit
1a32656d44
@ -1,42 +0,0 @@
|
|||||||
From 9ed4eee345f85e3025c33c6e20aa25696e341ccd Mon Sep 17 00:00:00 2001
|
|
||||||
From: Jouni Malinen <jouni@qca.qualcomm.com>
|
|
||||||
Date: Tue, 7 Apr 2015 11:32:11 +0300
|
|
||||||
Subject: [PATCH] P2P: Validate SSID element length before copying it
|
|
||||||
(CVE-2015-1863)
|
|
||||||
|
|
||||||
This fixes a possible memcpy overflow for P2P dev->oper_ssid in
|
|
||||||
p2p_add_device(). The length provided by the peer device (0..255 bytes)
|
|
||||||
was used without proper bounds checking and that could have resulted in
|
|
||||||
arbitrary data of up to 223 bytes being written beyond the end of the
|
|
||||||
dev->oper_ssid[] array (of which about 150 bytes would be beyond the
|
|
||||||
heap allocation) when processing a corrupted management frame for P2P
|
|
||||||
peer discovery purposes.
|
|
||||||
|
|
||||||
This could result in corrupted state in heap, unexpected program
|
|
||||||
behavior due to corrupted P2P peer device information, denial of service
|
|
||||||
due to process crash, exposure of memory contents during GO Negotiation,
|
|
||||||
and potentially arbitrary code execution.
|
|
||||||
|
|
||||||
Thanks to Google security team for reporting this issue and smart
|
|
||||||
hardware research group of Alibaba security team for discovering it.
|
|
||||||
|
|
||||||
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
|
|
||||||
---
|
|
||||||
src/p2p/p2p.c | 1 +
|
|
||||||
1 file changed, 1 insertion(+)
|
|
||||||
|
|
||||||
diff --git a/src/p2p/p2p.c b/src/p2p/p2p.c
|
|
||||||
index f584fae..a45fe73 100644
|
|
||||||
--- a/src/p2p/p2p.c
|
|
||||||
+++ b/src/p2p/p2p.c
|
|
||||||
@@ -778,6 +778,7 @@ int p2p_add_device(struct p2p_data *p2p, const u8 *addr, int freq,
|
|
||||||
if (os_memcmp(addr, p2p_dev_addr, ETH_ALEN) != 0)
|
|
||||||
os_memcpy(dev->interface_addr, addr, ETH_ALEN);
|
|
||||||
if (msg.ssid &&
|
|
||||||
+ msg.ssid[1] <= sizeof(dev->oper_ssid) &&
|
|
||||||
(msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
|
|
||||||
os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
|
|
||||||
!= 0)) {
|
|
||||||
--
|
|
||||||
1.9.1
|
|
||||||
|
|
@ -1,61 +0,0 @@
|
|||||||
{ stdenv, fetchurl, lib, openssl, dbus_libs, pkgconfig, libnl
|
|
||||||
, readlineSupport ? true, readline
|
|
||||||
}:
|
|
||||||
|
|
||||||
assert readlineSupport -> readline != null;
|
|
||||||
|
|
||||||
stdenv.mkDerivation rec {
|
|
||||||
version = "2.3";
|
|
||||||
|
|
||||||
name = "wpa_supplicant-${version}";
|
|
||||||
|
|
||||||
src = fetchurl {
|
|
||||||
url = "http://hostap.epitest.fi/releases/${name}.tar.gz";
|
|
||||||
sha256 = "0skvkl6c10ls4s48b2wmf47h9j1y40nlzxnzn8hyaw2j0prmpapa";
|
|
||||||
};
|
|
||||||
|
|
||||||
extraConfig =
|
|
||||||
''
|
|
||||||
CONFIG_DEBUG_SYSLOG=y
|
|
||||||
CONFIG_CTRL_IFACE_DBUS=y
|
|
||||||
CONFIG_CTRL_IFACE_DBUS_NEW=y
|
|
||||||
CONFIG_CTRL_IFACE_DBUS_INTRO=y
|
|
||||||
CONFIG_DRIVER_NL80211=y
|
|
||||||
CONFIG_LIBNL32=y
|
|
||||||
${stdenv.lib.optionalString readlineSupport "CONFIG_READLINE=y"}
|
|
||||||
'';
|
|
||||||
|
|
||||||
preBuild = ''
|
|
||||||
cd wpa_supplicant
|
|
||||||
cp -v defconfig .config
|
|
||||||
echo "$extraConfig" >> .config
|
|
||||||
cat .config
|
|
||||||
substituteInPlace Makefile --replace /usr/local $out
|
|
||||||
export NIX_CFLAGS_COMPILE="$NIX_CFLAGS_COMPILE -I$(echo "${libnl}"/include/libnl*/)"
|
|
||||||
'';
|
|
||||||
|
|
||||||
buildInputs = [ openssl dbus_libs libnl ]
|
|
||||||
++ lib.optional readlineSupport readline;
|
|
||||||
|
|
||||||
nativeBuildInputs = [ pkgconfig ];
|
|
||||||
|
|
||||||
patches = [ ./0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch ];
|
|
||||||
|
|
||||||
postInstall = ''
|
|
||||||
mkdir -p $out/share/man/man5 $out/share/man/man8
|
|
||||||
cp -v "doc/docbook/"*.5 $out/share/man/man5/
|
|
||||||
cp -v "doc/docbook/"*.8 $out/share/man/man8/
|
|
||||||
mkdir -p $out/etc/dbus-1/system.d $out/share/dbus-1/system-services $out/etc/systemd/system
|
|
||||||
cp -v "dbus/"*service $out/share/dbus-1/system-services
|
|
||||||
sed -e "s@/sbin/wpa_supplicant@$out&@" -i "$out/share/dbus-1/system-services/"*
|
|
||||||
cp -v dbus/dbus-wpa_supplicant.conf $out/etc/dbus-1/system.d
|
|
||||||
cp -v "systemd/"*.service $out/etc/systemd/system
|
|
||||||
'';
|
|
||||||
|
|
||||||
meta = {
|
|
||||||
homepage = http://hostap.epitest.fi/wpa_supplicant/;
|
|
||||||
description = "A tool for connecting to WPA and WPA2-protected wireless networks";
|
|
||||||
maintainers = with stdenv.lib.maintainers; [marcweber urkud];
|
|
||||||
platforms = stdenv.lib.platforms.linux;
|
|
||||||
};
|
|
||||||
}
|
|
@ -57,7 +57,6 @@
|
|||||||
services.xserver.vaapiDrivers = [ pkgs.vaapiIntel ];
|
services.xserver.vaapiDrivers = [ pkgs.vaapiIntel ];
|
||||||
|
|
||||||
nixpkgs.config.packageOverrides = pkgs: rec {
|
nixpkgs.config.packageOverrides = pkgs: rec {
|
||||||
# wpa_supplicant = pkgs.callPackage ./pkgs/wpa_supplicant { };
|
|
||||||
};
|
};
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
|
Loading…
Reference in New Issue
Block a user