aboutsummaryrefslogtreecommitdiffstats
path: root/src/fst
diff options
context:
space:
mode:
authorAnton Nayshtut <qca_antonn@qca.qualcomm.com>2015-07-27 13:45:36 (GMT)
committerJouni Malinen <j@w1.fi>2015-08-03 14:40:29 (GMT)
commit5e09f24a344d5043703a8d93cf51d9369247172f (patch)
tree0224b005f374eb5987065fac45f1c70efec71a83 /src/fst
parent2665c26f91d0c19aa5745802635cc357abd79d67 (diff)
downloadhostap-5e09f24a344d5043703a8d93cf51d9369247172f.zip
hostap-5e09f24a344d5043703a8d93cf51d9369247172f.tar.gz
hostap-5e09f24a344d5043703a8d93cf51d9369247172f.tar.bz2
FST: Fix MB IE clearing on detach
This fixes an issue where freed MB IEs buffer memory could potentially have been accessed after an interface is detached from FST group. Without this fix, if an interface is detached from FST group, it can use MB IEs buffer previously set by fst_iface_set_ies(), although the buffer was released by fst_iface_delete(). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Diffstat (limited to 'src/fst')
-rw-r--r--src/fst/fst_iface.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/fst/fst_iface.c b/src/fst/fst_iface.c
index 4fba9b1..5a92d2c 100644
--- a/src/fst/fst_iface.c
+++ b/src/fst/fst_iface.c
@@ -43,6 +43,7 @@ struct fst_iface * fst_iface_create(struct fst_group *g, const char *ifname,
void fst_iface_delete(struct fst_iface *i)
{
+ fst_iface_set_ies(i, NULL);
wpabuf_free(i->mb_ie);
os_free(i);
}