openwrt/package/network/services/hostapd/patches
Stefan Lippers-Hollmann 1ca5de13a1 hostapd: P2P: Fix a corner case in peer addition based on PD Request
p2p_add_device() may remove the oldest entry if there is no room in the
peer table for a new peer. This would result in any pointer to that
removed entry becoming stale. A corner case with an invalid PD Request
frame could result in such a case ending up using (read+write) freed
memory. This could only by triggered when the peer table has reached its
maximum size and the PD Request frame is received from the P2P Device
Address of the oldest remaining entry and the frame has incorrect P2P
Device Address in the payload.

Fix this by fetching the dev pointer again after having called
p2p_add_device() so that the stale pointer cannot be used.

This fixes the following security vulnerabilities/bugs:

- CVE-2021-27803 - A vulnerability was discovered in how p2p/p2p_pd.c
  in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision
  discovery requests. It could result in denial of service or other
  impact (potentially execution of arbitrary code), for an attacker
  within radio range.

Fixes: 17bef1e97a50 ("P2P: Add peer entry based on Provision Discovery Request")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
2021-03-01 00:34:23 +01:00
..
001-HE-VHT-fix-frequency-setup-with-HE-enabled.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
002-mesh-fix-channel-init-order-disable-pri-sec-channel-.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
003-wpa_supplicant-handle-HT40-and-mode-downgrade-in-AP-.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
004-wpa_supplicant-fix-frequency-config-for-non-p2p-vht-.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
005-wpa_supplicant-enable-vht-and-he-in-default-config-p.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
006-hw_features-better-debug-messages-for-some-error-cas.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
007-dfs-use-helper-functions-for-vht-he-parameters.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
008-mesh-use-setup-completion-callback-to-complete-mesh-.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
009-mesh-update-ssid-frequency-as-pri-sec-channel-switch.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
010-mesh-Allow-DFS-channels-to-be-selected-if-dfs-is-ena.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
011-mesh-do-not-set-offchanok-on-DFS-channels-in-non-ETS.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
012-mesh-fix-channel-switch-error-during-CAC.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
013-mesh-inform-kernel-driver-DFS-handler-in-userspace.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
014-mesh-fixes-for-mesh-init-deinit.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
015-mesh-fix-DFS-deinit-init.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
016-tests-DFS-test-for-wpa_supplicant-mesh.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
017-mesh-fix-mesh_oom-test.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
018-mesh-move-mesh-freq-setting-to-own-function.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
019-mesh-use-deterministic-channel-on-channel-switch.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
020-ignore-4addr-mode-enabling-error.patch hostapd: backport ignoring 4addr mode enabling error 2021-02-20 10:38:48 +01:00
050-mesh-make-forwarding-configurable.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
060-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch hostapd: P2P: Fix a corner case in peer addition based on PD Request 2021-03-01 00:34:23 +01:00
100-daemonize_fix.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
110-notify-mgmt-frames.patch hostapd: add patch for setting 4addr mode in multi_ap 2021-02-13 13:44:22 +00:00
110-wolfssl-compile-fix.patch hostapd: Fix compile errors after wolfssl update 2020-08-27 12:11:47 +02:00
120-reconfigure-wps-credentials.patch hostapd: add patch for setting 4addr mode in multi_ap 2021-02-13 13:44:22 +00:00
200-multicall.patch hostapd: add patch for setting 4addr mode in multi_ap 2021-02-13 13:44:22 +00:00
300-noscan.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
301-mesh-noscan.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
310-rescan_immediately.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
320-optional_rfkill.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
330-nl80211_fix_set_freq.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
340-reload_freq_change.patch hostapd: bring back mesh patches 2020-05-21 10:21:59 +01:00
341-mesh-ctrl-iface-channel-switch.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
350-nl80211_del_beacon_bss.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
360-ctrl_iface_reload.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
370-ap_sta_support.patch hostapd: add patch for setting 4addr mode in multi_ap 2021-02-13 13:44:22 +00:00
380-disable_ctrl_iface_mib.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
381-hostapd_cli_UNKNOWN-COMMAND.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
390-wpa_ie_cap_workaround.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
400-wps_single_auth_enc_type.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
410-limit_debug_messages.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
420-indicate-features.patch hostapd: bring back mesh patches 2020-05-21 10:21:59 +01:00
430-hostapd_cli_ifdef.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
431-wpa_cli_ifdef.patch hostapd: unconditionally enable ap/mesh for wpa-cli 2020-01-28 14:38:43 +01:00
432-missing-typedef.patch
450-scan_wait.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
460-wpa_supplicant-add-new-config-params-to-be-used-with.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
461-driver_nl80211-use-new-parameters-during-ibss-join.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
463-add-mcast_rate-to-11s.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
464-fix-mesh-obss-check.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
470-survey_data_fallback.patch hostapd: update to latest Git hostap_2_9-1238-gdd2daf0848ed 2020-05-21 08:18:01 +02:00
500-lto-jobserver-support.patch hostapd: update to latest Git hostap_2_9-1331-g5a8b366233f5 2020-06-09 16:59:33 +02:00
599-wpa_supplicant-fix-warnings.patch hostapd: declare struct wpa_bss early 2019-09-19 23:43:27 +02:00
600-ubus_support.patch hostapd: update mesh DFS patches and add mesh HE support 2020-07-30 16:27:44 +01:00
700-wifi-reload.patch hostapd: add notifications for management frames 2021-02-12 08:52:41 +01:00
800-dfs-enter-DFS-state-if-no-available-channel-is-found.patch hostapd: fix patch offset 2020-11-23 22:53:15 +01:00
801-P2P-Fix-copying-of-secondary-device-types-for-P2P-gr.patch hostapd: add patch for setting 4addr mode in multi_ap 2021-02-13 13:44:22 +00:00