espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-07-30 10:47:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(wifi): Avoid dereferencing a dangling function pointer in WPS supplicant

Browse Source 
Avoid dereferencing a dangling function pointer in 'eap_server_sm_deinit()'.
This issue arises when hostap unregisteres EAP methods before it removes
the server state machine for station.
This commit is contained in:
Sarvesh Bodakhe
2024-01-25 12:01:21 +05:30
parent a62b13e3d7
commit aad6f44c25
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
components/wpa_supplicant/src/ap/wps_hostapd.c
View File

@ -321,6 +321,14 @@ fail:
return -1; return -1;
} }
#ifdef ESP_SUPPLICANT
static int ap_sta_server_sm_deinit(struct hostapd_data *hapd,
struct sta_info *sta, void *ctx)
{
ieee802_1x_free_station(hapd, sta);
return 0;
}
#endif /* ESP_SUPPLICANT */
void hostapd_deinit_wps(struct hostapd_data *hapd) void hostapd_deinit_wps(struct hostapd_data *hapd)
{ {
@ -332,6 +340,11 @@ void hostapd_deinit_wps(struct hostapd_data *hapd)
} }
wps_registrar_deinit(hapd->wps->registrar); wps_registrar_deinit(hapd->wps->registrar);
hapd->wps->registrar = NULL; hapd->wps->registrar = NULL;
#ifdef ESP_SUPPLICANT
ap_for_each_sta(hapd, ap_sta_server_sm_deinit, NULL);
#endif /* ESP_SUPPLICANT */
eap_server_unregister_methods(); eap_server_unregister_methods();
hapd->wps = NULL; hapd->wps = NULL;
hostapd_wps_clear_ies(hapd, 1); hostapd_wps_clear_ies(hapd, 1);