Re: [PATCH 0/2] Harden ctrl_iface_unix for wpa-supplicant

Jouni Malinen <[email protected]> Sat, 16 May 2020 17:06:58 +0300
Newsgroups gmane.linux.drivers.hostap
Message-ID <[email protected]>
On Wed, Apr 29, 2020 at 09:53:14AM +0200, Andreas Tobler wrote:
> we use the unix control interface to install certificate blobs on the
> wpa-supplicant. We failed to install concatenated ca-certs since they
> exceeded the allocated buffer size. It took a while to understand that
> our blobs were too big.
> These two snippets should help to install bigger blobs and also give
> an abort if the buffer is too small for large commands.
> 
> Andreas Tobler (2):
>   ctrl_iface_unix: Increase global ctrl receive buffer size
>   ctrl_iface_unix: Check read buffer size and exit if equal

Thanks. I needed similar changes on the per-interface cases for testing
and ended up adding more complete set of changes to address this across
all control interface socket cases.
 
-- 
Jouni Malinen                                            PGP id EFC895FA