P2P: Make use wpas_p2p_reconsider_moving_go timeout gets canceled

The per-interface P2P data freeing function did not cover this eloop
timeout that could potentially have been registered. Explicitly cancel
this timeout to make sure no references to freed memory can remain in
such a case.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

diff --git a/wpa_supplicant/p2p_supplicant.c b/wpa_supplicant/p2p_supplicant.c
index 36fb05557d5c5762af4a49930fcbe1f632dbfa9d..1fbe15a5b0ada1ebfd39a7abe3b3e7af1b281aff 100644 (file)
--- a/wpa_supplicant/p2p_supplicant.c
+++ b/wpa_supplicant/p2p_supplicant.c
@@ -4776,6 +4776,7 @@ void wpas_p2p_deinit(struct wpa_supplicant *wpa_s)
        eloop_cancel_timeout(wpas_p2p_group_idle_timeout, wpa_s, NULL);
        wpas_p2p_remove_pending_group_interface(wpa_s);
        eloop_cancel_timeout(wpas_p2p_group_freq_conflict, wpa_s, NULL);
+       eloop_cancel_timeout(wpas_p2p_reconsider_moving_go, wpa_s, NULL);
        wpas_p2p_listen_work_done(wpa_s);
        if (wpa_s->p2p_send_action_work) {
                os_free(wpa_s->p2p_send_action_work->ctx);