[PATCH] MBO: Fix possible memory leak in anqp_send_req()

Andrei Otcheretianski andrei.otcheretianski at intel.com
Thu Jun 8 01:17:58 PDT 2017


From: Ilan Peer <ilan.peer at intel.com>

In case that an mbo object is allocated, but there is a failure
to resize the wpabuf, need to free the mbo object.

Signed-off-by: Ilan Peer <ilan.peer at intel.com>
---
 wpa_supplicant/interworking.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wpa_supplicant/interworking.c b/wpa_supplicant/interworking.c
index 3b4b639..dd5a724 100644
--- a/wpa_supplicant/interworking.c
+++ b/wpa_supplicant/interworking.c
@@ -2738,6 +2738,7 @@ int anqp_send_req(struct wpa_supplicant *wpa_s, const u8 *dst,
 		if (mbo) {
 			if (wpabuf_resize(&extra_buf, wpabuf_len(mbo))) {
 				wpabuf_free(extra_buf);
+				wpabuf_free(mbo);
 				return -1;
 			}
 			wpabuf_put_buf(extra_buf, mbo);
-- 
1.9.1




More information about the Hostap mailing list