]> git.ipfire.org Git - thirdparty/hostap.git/commit
Fix crash due to iteratively calling radio_remove_works()
authorShivani Baranwal <quic_shivbara@quicinc.com>
Tue, 4 Feb 2025 09:35:12 +0000 (15:05 +0530)
committerJouni Malinen <j@w1.fi>
Wed, 5 Feb 2025 20:54:10 +0000 (22:54 +0200)
commite35a79ab049e91ce9973344db710ecbf3966354a
tree2f6d9f229bb1fcca35ebe06373169accfe9054c9
parent58ea0a652958acdafc571f88cfa27d0e6aa04fa7
Fix crash due to iteratively calling radio_remove_works()

Commit 3242793cb8df ("P2P: Remove pending p2p-listen radio work on
stopping listen") added removal of all pending p2p-listen radio works
when P2P listen is stopped. But in case where p2p-listen radio work is
pending with work->started=1 and radio_remove_works() is called (e.g.,
as part of interface disabling), there is an attempt to remove radio
work iteratively from wpas_stop_listen() causing a crash.

To avoid this, add check to avoid iterative calls to wpas_stop_listen().

Signed-off-by: Shivani Baranwal <quic_shivbara@quicinc.com>
wpa_supplicant/p2p_supplicant.c