Page MenuHomeFreeBSD

wpa_supplicant: Fix CVE-2015-1863
AbandonedPublic

Authored by kwm on May 4 2015, 10:47 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, May 7, 3:30 AM
Unknown Object (File)
Wed, May 6, 4:22 AM
Unknown Object (File)
Sun, May 3, 10:43 AM
Unknown Object (File)
Apr 5 2026, 8:31 PM
Unknown Object (File)
Mar 31 2026, 10:57 AM
Unknown Object (File)
Mar 29 2026, 3:11 PM
Unknown Object (File)
Mar 28 2026, 11:24 PM
Unknown Object (File)
Mar 27 2026, 12:21 PM
Subscribers

Details

Reviewers
dumbbell
rpaulo
Summary

Fix CVE in wpa_supplicant inspired by
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199678

This should probably be MFC'd to the stable- and release branches.
But maybe we should get a so@ on boat for that? As a port person I'm
not familiar with the workflow to so such.

Test Plan

make buildworld
Install and using it at run-time.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

kwm retitled this revision from to wpa_supplicant: Fix CVE-2015-1863.
kwm updated this object.
kwm edited the test plan for this revision. (Show Details)

wpa_supplicant is maintained in a vendor branch before being imported into base:
https://svnweb.freebsd.org/base/vendor/wpa/

I suppose your patch needs to go there first, but I never worked with vendor import. @rpaulo will know better :-)

If you really must, go ahead and commit this patch, but please understand this code was never compiled in FreeBSD.