only allow key len %= 16
@@ -2905,6 +2905,7 @@ wpakey_t *wpak;
uint16_t keyinfo;
uint16_t authlen;
uint64_t rc;
+uint16_t kl;
if(caplen < (uint32_t)WPAKEY_SIZE)
{
@@ -2925,6 +2926,13 @@ if(authlen > caplen -4)
return;
}
+
+kl = ntohs(wpak->keylen);
+if((kl %16) != 0)
+ {
+ return;
+ }
+
if(memcmp(&nullnonce, wpak->nonce, 32) == 0)
{
eapolframecount++;
