diff options
| author | Anton Nayshtut <qca_antonn@qca.qualcomm.com> | 2015-07-27 16:45:36 +0300 |
|---|---|---|
| committer | Linux Build Service Account <lnxbuild@localhost> | 2015-10-06 03:20:02 -0600 |
| commit | 4d637fc8944587300f6596a7de4554d3fc256fcf (patch) | |
| tree | f59b60525097af6cd3a78bd26cabe4c6464fb8ea /src/fst | |
| parent | bc99a14812cf9d9e7d318719953cb6d7a2a33d02 (diff) | |
| download | android_external_wpa_supplicant_8-4d637fc8944587300f6596a7de4554d3fc256fcf.tar.gz android_external_wpa_supplicant_8-4d637fc8944587300f6596a7de4554d3fc256fcf.tar.bz2 android_external_wpa_supplicant_8-4d637fc8944587300f6596a7de4554d3fc256fcf.zip | |
FST: Fix MB IE clearing on detach
This fixes an issue where freed MB IEs buffer memory could potentially
have been accessed after an interface is detached from FST group.
Without this fix, if an interface is detached from FST group, it can use
MB IEs buffer previously set by fst_iface_set_ies(), although the buffer
was released by fst_iface_delete().
Change-Id: Iaaf680c78c588e8692c6fae21920a10d8800585d
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Git-commit: 5e09f24a344d5043703a8d93cf51d9369247172f
Git-repo: git://w1.fi/srv/git/hostap.git
CRs-Fixed: 891455
Diffstat (limited to 'src/fst')
| -rw-r--r-- | src/fst/fst_iface.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/fst/fst_iface.c b/src/fst/fst_iface.c index 4fba9b1a..5a92d2c3 100644 --- a/src/fst/fst_iface.c +++ b/src/fst/fst_iface.c @@ -43,6 +43,7 @@ struct fst_iface * fst_iface_create(struct fst_group *g, const char *ifname, void fst_iface_delete(struct fst_iface *i) { + fst_iface_set_ies(i, NULL); wpabuf_free(i->mb_ie); os_free(i); } |