aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/gas_query.c
diff options
context:
space:
mode:
authorJouni Malinen <jouni@qca.qualcomm.com>2012-09-28 14:09:15 (GMT)
committerJouni Malinen <j@w1.fi>2012-09-28 14:09:15 (GMT)
commitfa5c5b43e4b169dbd530c74e5e388a630901dc6e (patch)
tree7ecf125fa290b7e1de8eaea4325e8bb04c17e5a5 /wpa_supplicant/gas_query.c
parent6407f4132f9691f6f1263245e531000b73aa5862 (diff)
downloadhostap-fa5c5b43e4b169dbd530c74e5e388a630901dc6e.zip
hostap-fa5c5b43e4b169dbd530c74e5e388a630901dc6e.tar.gz
hostap-fa5c5b43e4b169dbd530c74e5e388a630901dc6e.tar.bz2
Interworking: Fix failed GAS query processing
The pending GAS entry must be removed from the list when it is removed. This fixes an issue with potential segfault due to freed memory being accessed if the driver fails to accept a GAS query. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
Diffstat (limited to 'wpa_supplicant/gas_query.c')
-rw-r--r--wpa_supplicant/gas_query.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/wpa_supplicant/gas_query.c b/wpa_supplicant/gas_query.c
index efa9be8..0d4ca8e 100644
--- a/wpa_supplicant/gas_query.c
+++ b/wpa_supplicant/gas_query.c
@@ -453,6 +453,7 @@ int gas_query_req(struct gas_query *gas, const u8 *dst, int freq,
if (gas_query_tx(gas, query, req) < 0) {
wpa_printf(MSG_DEBUG, "GAS: Failed to send Action frame to "
MACSTR, MAC2STR(query->addr));
+ dl_list_del(&query->list);
os_free(query);
return -1;
}