UPSTREAM: hostapd_cli: Use os_exec() for action script execution
Use os_exec() to run the action script operations to avoid undesired
command line processing for control interface event strings. Previously,
it could have been possible for some of the event strings to include
unsanitized data which is not suitable for system() use. (CVE-2014-3686)
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
(cherry picked from commit 5d4fa2a29bef013e61185beb21a3ec110885eb9a)
BUG=chromium:425263
TEST=Compile test (no operational code paths modified)
Change-Id: I24bce35a4bfb6358b3d76b33c6c2cc65a5146b0f
Reviewed-on: https://chromium-review.googlesource.com/224764
Reviewed-by: Kees Cook <keescook@chromium.org>
Commit-Queue: Paul Stewart <pstew@chromium.org>
Tested-by: Paul Stewart <pstew@chromium.org>
1 file changed
