Double free or corruption with latest GIT tree

[Marcel Holtmann]

Hi Jouni,

> so I got this double free out of the blue while using the latest GIT
> tree from today.

and another one. This time when coming back from suspend and trying to
re-connect. Seems not D-Bus related.

Program terminated with signal 11, Segmentation fault.
#0  dl_list_add (list=<value optimized out>, item=<value optimized out>)
    at ../src/utils/list.h:36
36              list->next->prev = item;
(gdb) bt
#0  dl_list_add (list=<value optimized out>, item=<value optimized out>)
    at ../src/utils/list.h:36
#1  dl_list_add_tail (list=<value optimized out>, item=<value optimized out>)
    at ../src/utils/list.h:42
#2  wpa_bss_add (list=<value optimized out>, item=<value optimized out>) at bss.c:126
#3  wpa_bss_update_scan_res (list=<value optimized out>, item=<value optimized out>)
    at bss.c:193
#4  0x0000000000445e73 in wpa_supplicant_get_scan_results (wpa_s=0x1c36e00)
    at wpa_supplicant.c:1596
#5  0x000000000044a033 in wpa_supplicant_event_scan_results (wpa_s=0x1c36e00) at events.c:773
#6  0x000000000044b3c5 in wpa_supplicant_event (ctx=0x1c36e00, event=<value optimized out>,
    data=0x0) at events.c:1405
#7  0x0000000000457670 in process_event (msg=<value optimized out>, arg=0x1c33ab0)
    at ../src/drivers/driver_nl80211.c:755
#8  0x000000392001c4e4 in recvmsgs (cb=<value optimized out>, handle=<value optimized out>)
    at nl.c:724
#9  nl_recvmsgs (cb=<value optimized out>, handle=<value optimized out>) at nl.c:772
#10 0x0000000000452ac8 in wpa_driver_nl80211_event_receive (sock=<value optimized out>,
    eloop_ctx=0x1c33ab0, sock_ctx=<value optimized out>) at ../src/drivers/driver_nl80211.c:814
#11 0x000000000040c02b in eloop_sock_table_dispatch (table=0x684988, fds=0x1c368a0)
    at ../src/utils/eloop.c:216
#12 0x000000000040c669 in eloop_run () at ../src/utils/eloop.c:548
#13 0x0000000000445bb8 in wpa_supplicant_run (global=0x1c32850) at wpa_supplicant.c:2382
#14 0x000000000044d870 in main (argc=<value optimized out>, argv=<value optimized out>)
    at main.c:274

Regards

Marcel