Clear the pending EAPOL RX on disconnection

Avoid any potentially unexpected behavior if the postponed EAPOL RX
could end up being processed in a different association that the one in
which the frame was postponed.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
index 77bc3c7a9cd00396817e5cd8b8fc7b5844a915de..bab2145723baabd5ba12987a4aa62922675f4765 100644 (file)
--- a/wpa_supplicant/events.c
+++ b/wpa_supplicant/events.c
@@ -436,6 +436,9 @@ void wpa_supplicant_mark_disassoc(struct wpa_supplicant *wpa_s)
 
        wpa_s->ssid_verified = false;
        wpa_s->bigtk_set = false;
+
+       wpabuf_free(wpa_s->pending_eapol_rx);
+       wpa_s->pending_eapol_rx = NULL;
 }