github/bettercap
1
0
Fork 0
mirror of https://github.com/bettercap/bettercap synced 2025-07-05 20:42:09 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: checking boundaries when parsing WPS vendor extensions (fixes #885)

Browse source
This commit is contained in:
Simone Margaritelli 2021-05-28 16:41:34 +02:00
parent 4690a23ace
commit 6c2c0da22c
1 changed files with 14 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

20
packets/dot11_wps_attrs.go
View file

@ -177,14 +177,22 @@ func dot11ParseWPSVendorExtension(data []byte, info *map[string]string) string {
size := len(data)
for offset := 3; offset < size; {
idByte := uint8(data[offset])
sizeByte := uint8(data[offset+1])
if idByte == wpsVersion2ID {
verByte := fmt.Sprintf("%x", data[offset+2])
(*info)["Version"] = wpsVersionDesc[verByte]
data = data[offset+3:]
if next := offset + 1; next < size {
sizeByte := uint8(data[next])
if idByte == wpsVersion2ID {
if next = offset + 2; next < size {
verByte := fmt.Sprintf("%x", data[next])
(*info)["Version"] = wpsVersionDesc[verByte]
if next = offset + 3; next < size {
data = data[next:]
}
break
}
}
offset += int(sizeByte) + 2
} else {
break
}
offset += int(sizeByte) + 2
}
}
return hex.EncodeToString(data)