From 40551a15c15ac6fd0a2e088363af6a2cd4415d56 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Sun, 28 Feb 2021 18:46:32 +0200 Subject: [PATCH] Fix a memory leak in WPS with ap_scan=2 The wpa_ie buffer is now allocated here and needs to be freed before returning from the function. Fixes: d2ba0d719e2a ("Move assoc param setting into a helper function") Signed-off-by: Jouni Malinen --- wpa_supplicant/wpa_supplicant.c | 1 + 1 file changed, 1 insertion(+) diff --git a/wpa_supplicant/wpa_supplicant.c b/wpa_supplicant/wpa_supplicant.c index 40068984b..6a02ed7c5 100644 --- a/wpa_supplicant/wpa_supplicant.c +++ b/wpa_supplicant/wpa_supplicant.c @@ -3559,6 +3559,7 @@ static void wpas_start_assoc_cb(struct wpa_radio_work *work, int deinit) wpa_s->scan_req = MANUAL_SCAN_REQ; wpa_s->reassociate = 1; wpa_supplicant_req_scan(wpa_s, 0, 0); + os_free(wpa_ie); return; #endif /* CONFIG_WPS */ } else {