Amazing-Mirror/fragattacks
1
0
Fork 0
mirror of https://github.com/vanhoefm/fragattacks.git synced 2024-11-25 08:48:31 -05:00
Code Issues Projects Releases Wiki Activity

UBSan: Avoid NULL pointer dereferences on an error path

Browse Source 
hapd->conf might be NULL in case initialized failed, so better be
prepared for that when debug printing interface name in the deinit path.

hostapd.c:312:54: runtime error: member access within null pointer of type 'struct hostapd_bss_config'
hostapd.c:351:29: runtime error: member access within null pointer of type 'struct hostapd_bss_config'
hostapd.c:2158:18: runtime error: member access within null pointer of type 'struct hostapd_bss_config'

Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2019-02-23 16:24:19 +02:00
parent 43216777e5
commit 8fc22fdde6
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/ap/hostapd.c
View File

@ -348,7 +348,7 @@ static void hostapd_free_hapd_data(struct hostapd_data *hapd)
if (!hapd->started) { if (!hapd->started) {
wpa_printf(MSG_ERROR, "%s: Interface %s wasn't started", wpa_printf(MSG_ERROR, "%s: Interface %s wasn't started",
__func__, hapd->conf->iface); __func__, hapd->conf ? hapd->conf->iface : "N/A");
return; return;
} }
hapd->started = 0; hapd->started = 0;
@ -431,7 +431,7 @@ static void hostapd_free_hapd_data(struct hostapd_data *hapd)
static void hostapd_cleanup(struct hostapd_data *hapd) static void hostapd_cleanup(struct hostapd_data *hapd)
{ {
wpa_printf(MSG_DEBUG, "%s(hapd=%p (%s))", __func__, hapd, wpa_printf(MSG_DEBUG, "%s(hapd=%p (%s))", __func__, hapd,
hapd->conf->iface); hapd->conf ? hapd->conf->iface : "N/A");
if (hapd->iface->interfaces && if (hapd->iface->interfaces &&
hapd->iface->interfaces->ctrl_iface_deinit) { hapd->iface->interfaces->ctrl_iface_deinit) {
wpa_msg(hapd->msg_ctx, MSG_INFO, WPA_EVENT_TERMINATING); wpa_msg(hapd->msg_ctx, MSG_INFO, WPA_EVENT_TERMINATING);
@ -506,7 +506,7 @@ static void hostapd_cleanup_iface(struct hostapd_iface *iface)
static void hostapd_clear_wep(struct hostapd_data *hapd) static void hostapd_clear_wep(struct hostapd_data *hapd)
{ {
if (hapd->drv_priv && !hapd->iface->driver_ap_teardown) { if (hapd->drv_priv && !hapd->iface->driver_ap_teardown && hapd->conf) {
hostapd_set_privacy(hapd, 0); hostapd_set_privacy(hapd, 0);
hostapd_broadcast_wep_clear(hapd); hostapd_broadcast_wep_clear(hapd);
} }
@ -2155,7 +2155,7 @@ static void hostapd_bss_deinit(struct hostapd_data *hapd)
if (!hapd) if (!hapd)
return; return;
wpa_printf(MSG_DEBUG, "%s: deinit bss %s", __func__, wpa_printf(MSG_DEBUG, "%s: deinit bss %s", __func__,
hapd->conf->iface); hapd->conf ? hapd->conf->iface : "N/A");
hostapd_bss_deinit_no_free(hapd); hostapd_bss_deinit_no_free(hapd);
wpa_msg(hapd->msg_ctx, MSG_INFO, AP_EVENT_DISABLED); wpa_msg(hapd->msg_ctx, MSG_INFO, AP_EVENT_DISABLED);
hostapd_cleanup(hapd); hostapd_cleanup(hapd);