commit a5d2bf247300fe35ff1d6e971116d9c8e6b8a87f
author Masashi Honma <masashi.honma@gmail.com> Wed Aug 26 17:32:38 2015 +0900
committer Jouni Malinen <j@w1.fi> Sat Sep 05 21:31:25 2015 +0300
tree d1804ea43921a4ec820d7047627d7ff710ae00b1
parent f029c44cf29c97d408eb15bad28137505862d95b

mesh: Fix segfault on error path

When wpa_init() in __mesh_rsn_auth_init() failed, empty rsn->auth caused
segmentation fault due to NULL pointer dereference when wpa_deinit() was
called. Fix this by checking the pointer before executing deinit steps.

Signed-off-by: Masashi Honma <masashi.honma@gmail.com>

wpa_supplicant/mesh_rsn.c

diff --git a/wpa_supplicant/mesh_rsn.c b/wpa_supplicant/mesh_rsn.c
index a140b97..9dce32f 100644
--- a/wpa_supplicant/mesh_rsn.c
+++ b/wpa_supplicant/mesh_rsn.c
@@ -190,7 +190,8 @@
 static void mesh_rsn_deinit(struct mesh_rsn *rsn)
 {
 	os_memset(rsn->mgtk, 0, sizeof(rsn->mgtk));
-	wpa_deinit(rsn->auth);
+	if (rsn->auth)
+		wpa_deinit(rsn->auth);
 }