wpa_supplicant: Fix memory leak in wfd_subelems error path

Memory allocated by calling function ieee802_11_vendor_ie_concat()
was not freed on an error path int ctrl_iface BSS command.

Signed-hostap: Eytan Lifshitz <eytan.lifshitz@intel.com>

diff --git a/wpa_supplicant/ctrl_iface.c b/wpa_supplicant/ctrl_iface.c
index ed332da8875daab63893d6b7a8598370d9b06105..663f4097405135a96b6356aa2ce1550d47472ed9 100644 (file)
--- a/wpa_supplicant/ctrl_iface.c
+++ b/wpa_supplicant/ctrl_iface.c
@@ -3504,8 +3504,10 @@ static int print_bss_info(struct wpa_supplicant *wpa_s, struct wpa_bss *bss,
                                                  WFD_IE_VENDOR_TYPE);
                if (wfd) {
                        ret = os_snprintf(pos, end - pos, "wfd_subelems=");
-                       if (ret < 0 || ret >= end - pos)
+                       if (ret < 0 || ret >= end - pos) {
+                               wpabuf_free(wfd);
                                return 0;
+                       }
                        pos += ret;
 
                        pos += wpa_snprintf_hex(pos, end - pos,