projects / mech_eap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 89de07a) | patch
wpa_cli: Use os_exec() for action script execution
authorJouni Malinen <jouni@qca.qualcomm.com>
Mon, 6 Oct 2014 14:25:52 +0000 (17:25 +0300)
committerJouni Malinen <j@w1.fi>
Thu, 9 Oct 2014 14:38:25 +0000 (17:38 +0300)
commitc5f258de76dbb67fb64beab39a99e5c5711f41fe
tree9af2be30542c35a5c88e69e30dca08e268224659tree | snapshot
parent89de07a9442072f88d49869d8ecd8d42bae050a0commit | diff
wpa_cli: Use os_exec() for action script execution

Use os_exec() to run the action script operations to avoid undesired
command line processing for control interface event strings. Previously,
it could have been possible for some of the event strings to include
unsanitized data which is not suitable for system() use. (CVE-2014-3686)

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
wpa_supplicant/wpa_cli.c diff | blob | history
Moonshot GSS-API mechanism