Re: [PATCH 0/2] Harden ctrl_iface_unix for wpa-supplicant
Jouni Malinen <[email protected]> Sat, 16 May 2020 17:06:58 +0300
| Newsgroups | gmane.linux.drivers.hostap |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Apr 29, 2020 at 09:53:14AM +0200, Andreas Tobler wrote: > we use the unix control interface to install certificate blobs on the > wpa-supplicant. We failed to install concatenated ca-certs since they > exceeded the allocated buffer size. It took a while to understand that > our blobs were too big. > These two snippets should help to install bigger blobs and also give > an abort if the buffer is too small for large commands. > > Andreas Tobler (2): > ctrl_iface_unix: Increase global ctrl receive buffer size > ctrl_iface_unix: Check read buffer size and exit if equal Thanks. I needed similar changes on the per-interface cases for testing and ended up adding more complete set of changes to address this across all control interface socket cases. -- Jouni Malinen PGP id EFC895FA