[PATCH] P2P: Fix crash for failure case when WSC PIN is entered incorrectly.

Jouni Malinen j
Fri Apr 6 08:26:06 PDT 2012

On Tue, Apr 03, 2012 at 02:55:48PM -0700, Angie Chinchilla wrote:
> When forming a P2P group using WSC PIN method, if the pin is entered
> incorrectly the P2P client supplicant instance will crash as a result
> of cleanup happening on data that is still in use.

> - which calls wpa_supplicant_remove_iface()
> - which calls wpa_supplicant_deinit_iface()
> - which calls wpa_supplicant_cleanup()

This part is limited to the case where a separate P2P group interface is
used. I've tested this type of sequences many times in the past, but
apparently not with a group interface.

> If you fix this crash, you'll hit another. Fix it and then a segfault.
> The way we're cleaning up and deleting data from under ourselves here
> just isn't safe, so make the teardown portion of this async.

Thanks! Applied.

Jouni Malinen                                            PGP id EFC895FA

More information about the Hostap mailing list