Page MenuHomeFreeBSD

wpa_supplicant: Fix CVE-2015-1863
AbandonedPublic

Authored by kwm on May 4 2015, 10:47 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Apr 5, 8:31 PM
Unknown Object (File)
Tue, Mar 31, 10:57 AM
Unknown Object (File)
Sun, Mar 29, 3:11 PM
Unknown Object (File)
Sat, Mar 28, 11:24 PM
Unknown Object (File)
Fri, Mar 27, 12:21 PM
Unknown Object (File)
Mar 10 2026, 6:02 PM
Unknown Object (File)
Mar 9 2026, 12:28 PM
Unknown Object (File)
Mar 9 2026, 11:38 AM
Subscribers

Details

Reviewers
dumbbell
rpaulo
Summary

Fix CVE in wpa_supplicant inspired by
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199678

This should probably be MFC'd to the stable- and release branches.
But maybe we should get a so@ on boat for that? As a port person I'm
not familiar with the workflow to so such.

Test Plan

make buildworld
Install and using it at run-time.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

kwm retitled this revision from to wpa_supplicant: Fix CVE-2015-1863.
kwm updated this object.
kwm edited the test plan for this revision. (Show Details)

wpa_supplicant is maintained in a vendor branch before being imported into base:
https://svnweb.freebsd.org/base/vendor/wpa/

I suppose your patch needs to go there first, but I never worked with vendor import. @rpaulo will know better :-)

If you really must, go ahead and commit this patch, but please understand this code was never compiled in FreeBSD.