sergiotarxz/nuttx-apps
sergiotarxz/nuttx-apps
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

wapi: Fix disconnect crash.

Browse Source 
The ssid string has no terminator, which causes a out of bounds.

Signed-off-by: liqinhui <liqinhui@xiaomi.com>
This commit is contained in:
liqinhui 2023-10-20 09:52:58 +08:00 committed by Petro Karashchenko
parent 4576b3923c
commit 5ae44f9bc4
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wireless/wapi/src/driver_wext.c
View File

@ -429,7 +429,7 @@ int wpa_driver_wext_get_auth_param(int sockfd, FAR const char *ifname,
void wpa_driver_wext_disconnect(int sockfd, FAR const char *ifname) void wpa_driver_wext_disconnect(int sockfd, FAR const char *ifname)
{ {
uint8_t ssid[WAPI_ESSID_MAX_SIZE]; uint8_t ssid[WAPI_ESSID_MAX_SIZE + 1];
const struct ether_addr bssid = const struct ether_addr bssid =
{ {
}; };
@ -471,6 +471,8 @@ void wpa_driver_wext_disconnect(int sockfd, FAR const char *ifname)
ssid[i] = rand() & 0xff; ssid[i] = rand() & 0xff;
} }
ssid[WAPI_ESSID_MAX_SIZE] = '\0';
if (wapi_set_essid(sockfd, ifname, if (wapi_set_essid(sockfd, ifname,
(FAR const char *)ssid, WAPI_ESSID_OFF) < 0) (FAR const char *)ssid, WAPI_ESSID_OFF) < 0)
{ {