jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

nl80211: Fix memory leak on send_action error path

Browse source
This commit is contained in:
Jouni Malinen 2010-04-11 12:29:16 +03:00
parent 8d6399e455
commit f8bf142175
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/drivers/driver_nl80211.c
View file

@ -4889,8 +4889,10 @@ static int wpa_driver_nl80211_send_action(void *priv, unsigned int freq,
} }
msg = nlmsg_alloc(); msg = nlmsg_alloc();
if (!msg) if (!msg) {
os_free(buf);
return -1; return -1;
}
genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0, genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0,
NL80211_CMD_ACTION, 0); NL80211_CMD_ACTION, 0);
@ -4899,6 +4901,7 @@ static int wpa_driver_nl80211_send_action(void *priv, unsigned int freq,
NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, freq); NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, freq);
NLA_PUT(msg, NL80211_ATTR_FRAME, 24 + data_len, buf); NLA_PUT(msg, NL80211_ATTR_FRAME, 24 + data_len, buf);
os_free(buf); os_free(buf);
buf = NULL;
cookie = 0; cookie = 0;
ret = send_and_recv_msgs(drv, msg, cookie_handler, &cookie); ret = send_and_recv_msgs(drv, msg, cookie_handler, &cookie);
@ -4915,6 +4918,7 @@ static int wpa_driver_nl80211_send_action(void *priv, unsigned int freq,
ret = 0; ret = 0;
nla_put_failure: nla_put_failure:
os_free(buf);
nlmsg_free(msg); nlmsg_free(msg);
return ret; return ret;
} }