mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-25 00:38:24 -05:00
f2d57282ad
entry->strarray_value was left to point to freed memory in case os_realloc_array() failed. This resulted in the following wpa_dbus_dict_entry_clear() trying to free an already freed memory area. In addition, the separately allocated strings in the array would have been leaked in such a case. Furthermore, wpa_dbus_dict_entry_clear() was not prepared for the possibility of the initial os_calloc() call failing and entry->strarray_value being NULL without array_len being cleared to zero. That would have resulted in reading uninitialized memory and NULL pointer dereference. Signed-off-by: Jouni Malinen <j@w1.fi> |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| dbus_common_i.h | ||
| dbus_common.c | ||
| dbus_common.h | ||
| dbus_dict_helpers.c | ||
| dbus_dict_helpers.h | ||
| dbus_new_handlers_p2p.c | ||
| dbus_new_handlers_p2p.h | ||
| dbus_new_handlers_wps.c | ||
| dbus_new_handlers.c | ||
| dbus_new_handlers.h | ||
| dbus_new_helpers.c | ||
| dbus_new_helpers.h | ||
| dbus_new_introspect.c | ||
| dbus_new.c | ||
| dbus_new.h | ||
| dbus_old_handlers_wps.c | ||
| dbus_old_handlers.c | ||
| dbus_old_handlers.h | ||
| dbus_old.c | ||
| dbus_old.h | ||
| dbus-wpa_supplicant.conf | ||
| fi.epitest.hostap.WPASupplicant.service.in | ||
| fi.w1.wpa_supplicant1.service.in | ||
| Makefile | ||