From: Jouni Malinen <j@w1.fi>
Date: Sun, 21 Jul 2013 12:21:38 +0000 (+0300)
Subject: IBSS RSN: Fix disconnect() with internal SME
X-Git-Tag: aosp-kk-from-upstream~121
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ec384c566a3320ab715ce374e43f033256ca1133;p=thirdparty%2Fhostap.git

IBSS RSN: Fix disconnect() with internal SME

Commit 1aef400bf03159d60109ce886943fbd26d88a6c3 implemented IBSS RSN
disconnect() call using sta_deauth() in a way that resulted in NULL
pointer dereference in driver_nl80211.c if SME was in user space. Fix
this by passing the own MAC address in the sta_deauth call.

Signed-hostap: Jouni Malinen <j@w1.fi>
---

diff --git a/wpa_supplicant/driver_i.h b/wpa_supplicant/driver_i.h
index 332ab2a26..ad33d3c82 100644
--- a/wpa_supplicant/driver_i.h
+++ b/wpa_supplicant/driver_i.h
@@ -133,7 +133,8 @@ static inline int wpa_drv_sta_deauth(struct wpa_supplicant *wpa_s,
 				     const u8 *addr, int reason_code)
 {
 	if (wpa_s->driver->sta_deauth) {
-		return wpa_s->driver->sta_deauth(wpa_s->drv_priv, NULL, addr,
+		return wpa_s->driver->sta_deauth(wpa_s->drv_priv,
+						 wpa_s->own_addr, addr,
 						 reason_code);
 	}
 	return -1;