pmksa_cache_remove() -- endless loop?

[Doug Smith]

Jouni,

Appears to be an endless loop in  pmksa_cache_remove() in <src/rsn_supp/pmksa_cache.c>:
https://git.w1.fi/cgit/hostap/tree/src/rsn_supp/pmksa_cache.c#n66

        e = pmksa->pmksa;
        while (e) {
                if (e == entry) {
                        pmksa->pmksa = entry->next;
                        break;
                }
                if (e->next == entry) {
                        e->next = entry->next;
                        break;
                }
        }

The loop will exit if there are no entries in the cache, or if entry is the first or second in the cache.
If not, then the loop repeats forever as e is never updated.

Regards,
Doug
THE INFORMATION CONTAINED IN THIS DOCUMENT IS OF A PROPRIETARY NATURE AND IS INTENDED TO BE KEPT CONFIDENTIAL BETWEEN THE SENDER AND THE INTENDED RECIPIENT. IT MAY NOT BE REPRODUCED OR USED WITHOUT EXPRESS WRITTEN PERMISSION OF EZURIO