From owner-freebsd-wireless@FreeBSD.ORG  Sun Apr 26 00:21:21 2015
Return-Path: <owner-freebsd-wireless@FreeBSD.ORG>
Delivered-To: freebsd-wireless@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 169C89B2
 for <freebsd-wireless@freebsd.org>; Sun, 26 Apr 2015 00:21:21 +0000 (UTC)
Received: from mail-oi0-f49.google.com (mail-oi0-f49.google.com
 [209.85.218.49])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id DA0CC1C1F
 for <freebsd-wireless@freebsd.org>; Sun, 26 Apr 2015 00:21:20 +0000 (UTC)
Received: by oiko83 with SMTP id o83so65842926oik.1
 for <freebsd-wireless@freebsd.org>; Sat, 25 Apr 2015 17:21:14 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:in-reply-to:references:date
 :message-id:subject:from:to:cc:content-type;
 bh=4LG0P+Uaw7X0FfbmW9z/U9QdmKNiJW888AQvy0xD14o=;
 b=YCMmT9wcswPefUAmQvBCp/VKygQ5VpNzuyROgON1jtP+tLR9H+eTJClvFVyRVYEx8M
 0NpRlkBTuf41IVRWCOPlUNi/KsxcU4SyQzN2Q6o++xynmMppmHbLz9JgVQMFxakZs61Y
 63td41+9dL42q2C5f1ZX4VB0OR+ZZStl668OTQ9Q2+AtbWz32yVoo3HED3OXCx9IAuOD
 U/Xlvgae/BKdk5qrdxt3fAU5xKJk6TEtXMWPLE9DIxJjOmvR0Zr7nVT8nf8qOdz4WwDr
 kOhT+g4YsMdC3s6IcB4ogheQBJdvfE1KyK1nK90u/YBlmcFjUK1WhfT15MpNZf7dqv0W
 2qZw==
X-Gm-Message-State: ALoCoQnFvYQIIIIPgrfnSaBvimgpK7FCMqY82oHVSVYPR37KmuEK5mBk+AhlF3h/GE1jiTMJgmWP
MIME-Version: 1.0
X-Received: by 10.60.101.195 with SMTP id fi3mr4336672oeb.65.1430007674333;
 Sat, 25 Apr 2015 17:21:14 -0700 (PDT)
Received: by 10.202.80.6 with HTTP; Sat, 25 Apr 2015 17:21:14 -0700 (PDT)
In-Reply-To: <CAPQ4ffuhZa3X-ra3EoPvdZ30cA5PFYuhyPP72dfdhnfSiyn1kg@mail.gmail.com>
References: <1537009.8hcWOSdFGB@akita>
 <CAPQ4ffuhZa3X-ra3EoPvdZ30cA5PFYuhyPP72dfdhnfSiyn1kg@mail.gmail.com>
Date: Sun, 26 Apr 2015 02:21:14 +0200
Message-ID: <CAPQ4ffsjyibQDGLyN7yKK2BLF8Scz_oy9QdCevpYnUQAwyfNAw@mail.gmail.com>
Subject: Re: CTF: wpa_supplicant/hostapd 2.4 import
From: Oliver Pinter <oliver.pinter@hardenedbsd.org>
To: Rui Paulo <rpaulo@me.com>
Cc: "freebsd-wireless@freebsd.org" <freebsd-wireless@freebsd.org>, 
 FreeBSD-Current <freebsd-current@freebsd.org>, security@freebsd.org
Content-Type: text/plain; charset=UTF-8
X-BeenThere: freebsd-wireless@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Discussions of 802.11 stack,
 tools device driver development." <freebsd-wireless.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-wireless>, 
 <mailto:freebsd-wireless-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-wireless/>
List-Post: <mailto:freebsd-wireless@freebsd.org>
List-Help: <mailto:freebsd-wireless-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-wireless>, 
 <mailto:freebsd-wireless-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Apr 2015 00:21:21 -0000

On 4/23/15, Oliver Pinter <oliver.pinter@hardenedbsd.org> wrote:
> Rui, FYI: http://w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt
>
> On Sun, Apr 19, 2015 at 9:41 PM, Rui Paulo <rpaulo@me.com> wrote:
>> Hi,
>>
>> Please test the new wpa_supplicant/hostapd.  Here's the patch against
>> FreeBSD
>> HEAD:
>>
>>         https://people.freebsd.org/~rpaulo/wpa-2.4.diff
>>
>> Thanks,

Hi Rui!

Could you please cherry-pick / merge this commit from DragonflyBSD:
https://github.com/DragonFlyBSD/DragonFlyBSD/commit/584c4a9f0c9071cb62abe9c870a2b08afe746a88
?

This fixes the CVE-2015-1863 .

>> --
>> Rui Paulo
>> _______________________________________________
>> freebsd-current@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-current
>> To unsubscribe, send any mail to
>> "freebsd-current-unsubscribe@freebsd.org"
>