hak5/wifipineapple-openwrt
1
0
Fork 0
mirror of https://github.com/hak5/wifipineapple-openwrt.git synced 2025-10-29 16:57:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
35,172 Commits 1 Branch 0 Tags
master
Commit Graph

65 Commits

Author SHA1 Message Date
Zoltan HERPAI
a1524efd13 CC: hostapd: fix WPA packet number reuse with replayed messages and key reinstallation 
Fixes:
- CERT case ID: VU#228519
- CVE-2017-13077
- CVE-2017-13078
- CVE-2017-13079
- CVE-2017-13080
- CVE-2017-13081
- CVE-2017-13082
- CVE-2017-13086
- CVE-2017-13087
- CVE-2017-13088

For more information, please refer to:
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
 2017-10-16 14:38:45 +02:00
Felix Fietkau
a4f8825e0f CC: hostapd: update to version 2016-06-15 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
 2017-10-16 14:12:39 +02:00
Michal Hrusecky
bb8a1d3adf CC: hostapd: Update to version 2016-05-05 
Fixes CVE-2016-4476 and few possible memory leaks.

Signed-off-by: Michal Hrusecky <Michal.Hrusecky@nic.cz>
 2017-10-16 14:07:36 +02:00
Felix Fietkau
d04634f2b7 CC: hostapd: fix mesh interface bridge handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 48529
 2017-10-16 14:06:29 +02:00
Felix Fietkau
b0f2c9d602 hostapd: update to version 2016-01-15 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
[Drop 014 - Zoltan HERPAI <wigyori@uid0.hu>]
 2017-10-16 13:41:14 +02:00
Imre Kaloz
b41b40c00d hostapd: add interoperability workaround for 80+80 and 160 MHz channels 
backport of f9fc9c242fa62c214dc4a92bd89ca9a36bc8308c

Signed-off-by: Imre Kaloz <kaloz@openwrt.org>
 2016-10-13 12:59:10 +02:00
Rafał Miłecki
ad0c12b24c hostapd: backport fix for AP SME drivers with monitor mode support 
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49299 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2016-06-19 19:56:13 +02:00
Rafał Miłecki
2cfe7ad046 hostapd: fix disassociation with FullMAC drivers and multi-BSS 
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r48202

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@48205 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2016-01-11 22:08:35 +00:00
Felix Fietkau
f044e32391 hostapd: fix post v2.4 security issues 
- WPS: Fix HTTP chunked transfer encoding parser (CVE-2015-4141)
- EAP-pwd peer: Fix payload length validation for Commit and Confirm
  (CVE-2015-4143)
- EAP-pwd server: Fix payload length validation for Commit and Confirm
  (CVE-2015-4143)
- EAP-pwd peer: Fix Total-Length parsing for fragment reassembly
  (CVE-2015-4144, CVE-2015-4145)
- EAP-pwd server: Fix Total-Length parsing for fragment reassembly
  (CVE-2015-4144, CVE-2015-4145)
- EAP-pwd peer: Fix asymmetric fragmentation behavior (CVE-2015-4146)
- NFC: Fix payload length validation in NDEF record parser (CVE-2015-8041)
- WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
  (CVE-2015-5310)
- EAP-pwd peer: Fix last fragment length validation (CVE-2015-5315)
- EAP-pwd server: Fix last fragment length validation (CVE-2015-5314)
- EAP-pwd peer: Fix error path for unexpected Confirm message (CVE-2015-5316)

Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>

Backport of r48185

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@48186 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2016-01-10 17:04:09 +00:00
Felix Fietkau
3a5b8f93ec hostapd: wait longer for inactive client probe (empty data frame) 
One second is not enough for some devices to ackowledge null data frame
which is sent at the end of ap_max_inactivity interval. In particular,
this causes severe Wi-Fi instability with Apple iPhone which may take
up to 3 seconds to respond.

Signed-off-by: Dmitry Ivanov <dima@ubnt.com>

Backport of r47149

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@47150 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-10-06 12:33:38 +00:00
Rafał Miłecki
f259e73985 hostapd: check for banned client on association event 
When using FullMAC drivers (e.g. brcmfmac) we don't get mgmt frames so
check for banned client in probe request handler won't ever be used.
Since cfg80211 provides us info about STA associating let's put a check
there.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r47064

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@47065 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-09-28 09:39:47 +00:00
Felix Fietkau
ced63a693f hostapd: add a new option to control HT coexistance separate from noscan 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45873 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-06-02 08:39:19 +00:00
Felix Fietkau
9633b360e3 hostapd: fix remote denial of service vulnerability in WMM action frame parsing 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45619 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-05-06 09:45:39 +00:00
Felix Fietkau
d763b3051a hostapd: backport fix for CVE-2015-1863, refresh patches 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45567 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-04-23 08:01:51 +00:00
John Crispin
4c367eb6ba hostapd: remove unused asprintf parameter 
r45270 removed ieee80211n=%d from the format string but didn't remove
the parameter itself. Though this probably doesn't cause any harm, it's
quite confusing and unneeded.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45351 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-04-10 08:31:26 +00:00
John Crispin
17540d8c1b hostapd: add update_beacon to ubus binding 
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45325 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-04-09 10:31:45 +00:00
Felix Fietkau
c6b0a52389 hostapd: when running AP+STA, preserve the AP 802.11n-enabled setting 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45270 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-04-04 17:51:46 +00:00
Felix Fietkau
646588cf5c hostapd: fix compile errors with nl80211 disabled (#19325) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45063 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-03-27 14:55:01 +00:00
Felix Fietkau
dbba30940d hostapd: fix a compiler warning in ap+station patch 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45062 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-03-27 14:54:53 +00:00
Felix Fietkau
8b3706cc62 hostapd: disable the bridge packet receive workaround, it is unnecessary on openwrt and could potentially harm performance 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45060 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-03-27 14:54:41 +00:00
Felix Fietkau
346bf51baf hostapd: add switch_chan and set_vendor_elements ubus methods 
Signed-off-by: Zefir Kurtisi <zefir.kurtisi@neratec.com>
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45046 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-03-26 23:33:52 +00:00
Felix Fietkau
0be32368ad hostapd: update hostapd to 2015-03-25 
madwifi was dropped upstream, can't find it anywhere in OpenWrt
either, thus finally burrying madwifi.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45045 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-03-26 23:33:47 +00:00
John Crispin
b79d1ca819 hostapd: backport BSSID black/whitelists 
This change adds the configuration options "bssid_whitelist" and
"bssid_blacklist" used to limit the AP selection of a network to a
specified (finite) set or discard certain APs.

This can be useful for environments where multiple networks operate
using the same SSID and roaming between those is not desired. It is also
useful to ignore a faulty or otherwise unwanted AP.

In many applications it is useful not just to enumerate a group of well
known access points, but to use a address/mask notation to match an
entire set of addresses (ca:ff:ee:00:00:00/ff:ff:ff:00:00:00).

This is especially useful if an OpenWrt device with two radios is used to
retransmit the same network (one in AP mode for other clients, one as STA for
the uplink); the following configuration prevents the device from associating
with itself, given that the own AP to be avoided is using the bssid
'C0:FF:EE:D0:0D:42':

config wifi-iface
	option device 'radio2'
	option network 'uplink'
	option mode 'sta'
	option ssid 'MyNetwork'
	option encryption 'none'
	list bssid_blacklist 'C0:FF:EE:D0:0D:42/00:FF:FF:FF:FF:FF'

This change consists of the following cherry-picked upstream commits:

b3d6a0a8259002448a29f14855d58fe0a624ab76
b83e455451a875ba233b3b8ac29aff8b62f064f2
79cd993a623e101952b81fa6a29c674cd858504f
(squashed to implement bssid_{white,black}lists)

0047306bc9ab7d46e8cc22ff9a3e876c47626473
(Add os_snprintf_error() helper)

Signed-off-by: Stefan Tomanek <stefan.tomanek+openwrt@wertarbyte.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44438 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-02-13 10:53:54 +00:00
Rafał Miłecki
dd59caa5bd hostapd: backport patch fixing handling new stations 
This patch fixes adding new stations for some specific drivers when
using more than 1 BSS.

Signed-off-by: Rafał Miłecki <zajec5@gmail.com>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43951 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2015-01-12 22:10:00 +00:00
Felix Fietkau
7d5e12fd4d hostapd: update to 2014-10-25 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43059 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-10-25 16:48:45 +00:00
Steven Barth
65c4baa4a6 hostapd: CVE-2014-3686 fixes 
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42942 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-10-17 06:15:35 +00:00
Felix Fietkau
09cdef74a8 hostapd: merge an upstream patch for pmksa cache 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42762 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-10-05 10:26:26 +00:00
Felix Fietkau
5d8c6d088a hostapd: add ubus bindings for wps 
With this patch WPS discovery can be started or canceled over ubus if
WPS is enabled in wireless configuration. This is equivalent of
'hostapd_cli wps_pbc' and 'hostapd_cli wps_cancel' commands.

Signed-off-by: Petar Koretic <petar.koretic@sartura.hr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42459 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-09-10 13:01:53 +00:00
Felix Fietkau
da75170df2 hostapd: add more missing ifdefs 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41863 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-07-28 22:52:39 +00:00
Felix Fietkau
b5a1ebe6df hostapd: add missing ifdef 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41855 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-07-28 10:36:51 +00:00
Felix Fietkau
d5f637f327 hostapd: prevent spurious 20/40 mhz channel bandwidth switches if noscan is enabled 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41828 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-07-25 14:29:58 +00:00
Felix Fietkau
7c3630cd52 hostapd: fix wpad-mini compile error (#16700) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41023 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-06-05 21:14:02 +00:00
Felix Fietkau
b7f384e765 hostapd: update to 2014-06-03 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41022 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-06-05 15:58:01 +00:00
Felix Fietkau
edd6307383 wpa_supplicant: fix locking hostapd to 20MHz (#12720) 
Fixed wpa_supplicant when the radio is in 40MHz mode so that it no
longer restarts hostapd with the second channel disabled.

Signed-off-by: Lance Chaney <furryfur1@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41019 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-06-05 14:55:10 +00:00
Felix Fietkau
3635a1d412 hostapd: add a package for eapol_test 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40782 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-05-19 21:58:48 +00:00
Felix Fietkau
27a58eb4ae hostapd: update to version 2014-04-24, fixes some dfs related issues 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40571 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-04-26 19:48:06 +00:00
Felix Fietkau
1617cf7da2 hostapd: update to version 2014-04-04 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40394 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-04-06 12:13:55 +00:00
Felix Fietkau
cb82ccb277 hostapd: fix deletion of wds sta interfaces in AP mode 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39765 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-02-28 14:43:53 +00:00
Felix Fietkau
fdd820a54a hostapd: fix frequency selection for ap+sta 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39426 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2014-01-30 13:21:30 +00:00
Felix Fietkau
e6a85bcd9a wpa_supplicant: fix interface combination parsing issues 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39155 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-12-21 19:42:45 +00:00
Felix Fietkau
a5b78a7edb wpa_supplicant: clean up hostapd control socket on exit to fix socket leak in ap+sta mode on wifi restarts 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38985 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-12-02 13:08:11 +00:00
Felix Fietkau
8b428d0899 hostapd: fix os_daemonize vs starting process race by creating the pid file in the parent 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38984 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-12-02 13:08:08 +00:00
Felix Fietkau
42370a3fa7 hostapd: always include p2p options in wpa_cli 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38981 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-12-02 13:07:46 +00:00
Felix Fietkau
5d000ddd9e hostapd: update to version 2013-11-20 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38914 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-11-25 15:43:15 +00:00
Felix Fietkau
5e8561171f hostapd: remove random pool support - the entropy it gathers is questionable and we have better entropy sources on common platforms now 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38852 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-11-18 13:54:26 +00:00
Felix Fietkau
23e82fd7ba hostapd: remove #ifdef MULTICALL around ap+sta support code (to support separately installed supplicant+hostapd) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38782 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-11-12 22:11:14 +00:00
Felix Fietkau
fbf4f2e570 hostapd: fix ubus reconnect handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37741 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-08-08 20:45:12 +00:00
Felix Fietkau
58b0b6c534 hostapd: update to latest version (20130707) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37738 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-08-08 16:04:19 +00:00
Felix Fietkau
485af0c163 hostapd: Fix WDS/WEP usage 
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37733 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-08-06 17:59:12 +00:00
Felix Fietkau
2905bd034c hostapd: Refresh patches 
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37731 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2013-08-06 17:59:05 +00:00