From 9d4a0b844ae47893e2b928556901c22756f1d47c Mon Sep 17 00:00:00 2001 From: Patrik Flykt Date: Mon, 14 May 2012 15:20:44 +0300 Subject: [PATCH] config: Reject invalid SSID hexadecimal entries Reject provisioning .config file SSID entries that are not in hexadecimal. --- src/config.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/config.c b/src/config.c index 781427d..66e1316 100644 --- a/src/config.c +++ b/src/config.c @@ -258,7 +258,13 @@ static int load_service(GKeyFile *keyfile, const char *group, } for (i = 0; i < hex_ssid_len; i += 2) { - sscanf(hex_ssid + i, "%02x", &hex); + if (sscanf(hex_ssid + i, "%02x", &hex) <= 0) { + connman_warn("Invalid SSID %s", hex_ssid); + g_free(ssid); + g_free(hex_ssid); + err = -EILSEQ; + goto err; + } ssid[j++] = hex; } -- 2.7.4