From fa5c5b43e4b169dbd530c74e5e388a630901dc6e Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Fri, 28 Sep 2012 17:09:15 +0300 Subject: [PATCH] Interworking: Fix failed GAS query processing The pending GAS entry must be removed from the list when it is removed. This fixes an issue with potential segfault due to freed memory being accessed if the driver fails to accept a GAS query. Signed-hostap: Jouni Malinen --- wpa_supplicant/gas_query.c | 1 + 1 file changed, 1 insertion(+) diff --git a/wpa_supplicant/gas_query.c b/wpa_supplicant/gas_query.c index efa9be8ed..0d4ca8ecb 100644 --- a/wpa_supplicant/gas_query.c +++ b/wpa_supplicant/gas_query.c @@ -453,6 +453,7 @@ int gas_query_req(struct gas_query *gas, const u8 *dst, int freq, if (gas_query_tx(gas, query, req) < 0) { wpa_printf(MSG_DEBUG, "GAS: Failed to send Action frame to " MACSTR, MAC2STR(query->addr)); + dl_list_del(&query->list); os_free(query); return -1; }