wpa_supplicant: Fix wrong size memory allocation

Fix memory allocation in wpa_scan_clone_params(), where the
allocation request used the size of a pointer rather than the
size of the structure.

Signed-hostap: Eytan Lifshitz <eytan.lifshitz@intel.com>

diff --git a/wpa_supplicant/scan.c b/wpa_supplicant/scan.c
index 30da097d902fc30cc44aecfc8c9a179d0d45e57d..18d243ebd40065857b2f65b6a3bfc996dc980f88 100644 (file)
--- a/wpa_supplicant/scan.c
+++ b/wpa_supplicant/scan.c
@@ -1765,12 +1765,13 @@ wpa_scan_clone_params(const struct wpa_driver_scan_params *src)
        }
 
        if (src->filter_ssids) {
-               params->filter_ssids = os_malloc(sizeof(params->filter_ssids) *
+               params->filter_ssids = os_malloc(sizeof(*params->filter_ssids) *
                                                 src->num_filter_ssids);
                if (params->filter_ssids == NULL)
                        goto failed;
                os_memcpy(params->filter_ssids, src->filter_ssids,
-                         sizeof(params->filter_ssids) * src->num_filter_ssids);
+                         sizeof(*params->filter_ssids) *
+                         src->num_filter_ssids);
                params->num_filter_ssids = src->num_filter_ssids;
        }