espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-08-04 21:24:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'bugfix/rsnxe_invalid_pointer_dereference' into 'master'

Browse Source 
wpa_supplicant: fix invalid pointer free

Closes WIFI-4672, WIFI-4673, and WIFI-4674

See merge request espressif/esp-idf!19287
This commit is contained in:
Kapil Gupta
2022-07-29 14:25:58 +08:00
parent 8d62485a12 465996fba5
commit ebd6a467b4
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
components/wpa_supplicant/src/rsn_supp/wpa.c
View File

@@ -2218,6 +2218,8 @@ bool wpa_sm_init(char * payload, WPA_SEND_FUNC snd_func,
sm->wpa_deauthenticate = wpa_deauth;
sm->wpa_neg_complete = wpa_neg_complete;
sm->key_install = false;
sm->ap_rsnxe = NULL;
sm->assoc_rsnxe = NULL;
spp_attrubute = esp_wifi_get_spp_attrubute_internal(WIFI_IF_STA);
sm->spp_sup.capable = ((spp_attrubute & WPA_CAPABILITY_SPP_CAPABLE) ? SPP_AMSDU_CAP_ENABLE : SPP_AMSDU_CAP_DISABLE);
@@ -2242,7 +2244,9 @@ void wpa_sm_deinit(void)
struct wpa_sm *sm = &gWpaSm;
pmksa_cache_deinit(sm->pmksa);
os_free(sm->ap_rsnxe);
sm->ap_rsnxe = NULL;
os_free(sm->assoc_rsnxe);
sm->assoc_rsnxe = NULL;
}