nl80211: Fix use-after-free in qca_nl80211_get_features()
authorPaul Stewart <pstew@chromium.org>
Fri, 10 Jun 2016 15:29:55 +0000 (08:29 -0700)
committerJouni Malinen <j@w1.fi>
Sat, 11 Jun 2016 09:12:23 +0000 (12:12 +0300)
commitfdc1188a85bb1e2c0a03e38724f6cd126ff374ad
treecdb8bbeae993f011263a4190dc6614e9b994cf46
parent61854f16ec6d4a8e026fcb344b66fb884cf15034
nl80211: Fix use-after-free in qca_nl80211_get_features()

Any data accessible from nla_data() is freed before the
send_and_recv_msgs() function returns, therefore we need to allocate
space for info.flags ourselves.

Signed-off-by: Paul Stewart <pstew@google.com>
src/drivers/driver_nl80211_capa.c