[openwrt/openwrt] hostapd: fix potential double free in ubus code

LEDE Commits lede-commits at lists.infradead.org
Sat Jul 5 05:44:25 PDT 2025


nbd pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/6e1d4afa86ea907f360ff837687969be1e780fd6

commit 6e1d4afa86ea907f360ff837687969be1e780fd6
Author: Felix Fietkau <nbd at nbd.name>
AuthorDate: Sat Jun 28 21:20:44 2025 +0200

    hostapd: fix potential double free in ubus code
    
    Ensure that the object name is never freed twice
    
    Signed-off-by: Felix Fietkau <nbd at nbd.name>
---
 package/network/services/hostapd/src/src/ap/ubus.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/network/services/hostapd/src/src/ap/ubus.c b/package/network/services/hostapd/src/src/ap/ubus.c
index fab5f31282..a1420619a3 100644
--- a/package/network/services/hostapd/src/src/ap/ubus.c
+++ b/package/network/services/hostapd/src/src/ap/ubus.c
@@ -1788,6 +1788,7 @@ void hostapd_ubus_free_bss(struct hostapd_data *hapd)
 	}
 
 	free(name);
+	obj->name = NULL;
 }
 
 static void




More information about the lede-commits mailing list