Undefined behavior in wpa_eapol_key_send function (IDFGH-14307)

[safocl]

Answers checklist.

• I have read the documentation ESP-IDF Programming Guide and the issue is not addressed there.
• I have updated my IDF branch (master or release) to the latest version and checked that the issue is present there.
• I have searched the issue tracker for a similar issue and not found a similar issue.

General issue report

esp-idf/components/wpa_supplicant/src/rsn_supp/wpa.c

Line 245 in b5ac4fb

if (wpa_sm_get_bssid(sm, sm->bssid) < 0) {

contain UB with use wpa_sm_get_bssid(sm, sm->bssid) ->

static inline int   wpa_sm_get_bssid(struct wpa_sm *sm, u8 *bssid)
{
    memcpy(bssid, sm->bssid, ETH_ALEN);
    return 0;
}

copy from sm->bssid to bssid that is sm->bssid ->
"If the objects overlap (which is a violation of the restrict contract)(since C99), the behavior is undefined." https://en.cppreference.com/w/c/string/byte/memcpy

[KaeLL]

Nice catch.

[safocl]

#15097 (comment)