nl80211: Fix memory leak on send_action error path

diff --git a/src/drivers/driver_nl80211.c b/src/drivers/driver_nl80211.c
index 268ddea..547da01 100644 (file)
--- a/src/drivers/driver_nl80211.c
+++ b/src/drivers/driver_nl80211.c
@@ -4889,8 +4889,10 @@ static int wpa_driver_nl80211_send_action(void *priv, unsigned int freq,
        }
 
        msg = nlmsg_alloc();
-       if (!msg)
+       if (!msg) {
+               os_free(buf);
                return -1;
+       }
 
        genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0,
                    NL80211_CMD_ACTION, 0);
@@ -4899,6 +4901,7 @@ static int wpa_driver_nl80211_send_action(void *priv, unsigned int freq,
        NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, freq);
        NLA_PUT(msg, NL80211_ATTR_FRAME, 24 + data_len, buf);
        os_free(buf);
+       buf = NULL;
 
        cookie = 0;
        ret = send_and_recv_msgs(drv, msg, cookie_handler, &cookie);
@@ -4915,6 +4918,7 @@ static int wpa_driver_nl80211_send_action(void *priv, unsigned int freq,
        ret = 0;
 
 nla_put_failure:
+       os_free(buf);
        nlmsg_free(msg);
        return ret;
 }