It was possible that nl80211_get_hw_feature_data() function would return NULL when num_modes is not set to zero. This might result in a later crash when accessing hw.modes. This may be reproduced with hwsim oom tests, for example, dbus_connect_oom. Fix that by zeroing num_modes if NULL is returned. Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx> --- src/drivers/driver_nl80211_capa.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/drivers/driver_nl80211_capa.c b/src/drivers/driver_nl80211_capa.c index 85706ef..1bea3ba 100644 --- a/src/drivers/driver_nl80211_capa.c +++ b/src/drivers/driver_nl80211_capa.c @@ -1771,6 +1771,7 @@ nl80211_get_hw_feature_data(void *priv, u16 *num_modes, u16 *flags) os_free(result.modes[i].rates); } os_free(result.modes); + *num_modes = 0; return NULL; } return wpa_driver_nl80211_postprocess_modes(result.modes, -- 1.9.1 _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap