From fd67275b85fb9eeb3803991d62d74ddf3783d853 Mon Sep 17 00:00:00 2001 From: Eytan Lifshitz Date: Tue, 28 Jan 2014 09:32:34 +0200 Subject: [PATCH] wpa_supplicant: Fix wrong size memory allocation Fix memory allocation in wpa_scan_clone_params(), where the allocation request used the size of a pointer rather than the size of the structure. Signed-hostap: Eytan Lifshitz --- wpa_supplicant/scan.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/wpa_supplicant/scan.c b/wpa_supplicant/scan.c index 30da097d9..18d243ebd 100644 --- a/wpa_supplicant/scan.c +++ b/wpa_supplicant/scan.c @@ -1765,12 +1765,13 @@ wpa_scan_clone_params(const struct wpa_driver_scan_params *src) } if (src->filter_ssids) { - params->filter_ssids = os_malloc(sizeof(params->filter_ssids) * + params->filter_ssids = os_malloc(sizeof(*params->filter_ssids) * src->num_filter_ssids); if (params->filter_ssids == NULL) goto failed; os_memcpy(params->filter_ssids, src->filter_ssids, - sizeof(params->filter_ssids) * src->num_filter_ssids); + sizeof(*params->filter_ssids) * + src->num_filter_ssids); params->num_filter_ssids = src->num_filter_ssids; }