From 37769eb666aa614b76df9b537db35c2c70e3ac7a Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Sat, 30 Nov 2013 18:17:55 +0100 Subject: wireless: fix use-after-free bug Signed-off-by: Felix Fietkau --- wireless.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'wireless.c') diff --git a/wireless.c b/wireless.c index 23bedcc..daa4df7 100644 --- a/wireless.c +++ b/wireless.c @@ -495,6 +495,7 @@ vif_update(struct vlist_tree *tree, struct vlist_node *node_new, wdev = vif_new->wdev; if (vif_old && vif_new) { + vif_old->section = vif_new->section; if (blob_attr_equal(vif_old->config, vif_new->config)) { free(vif_new); return; @@ -505,7 +506,6 @@ vif_update(struct vlist_tree *tree, struct vlist_node *node_new, vif_old->config = blob_memdup(vif_new->config); wireless_interface_init_config(vif_old); free(vif_new); - vif_old->section = vif_new->section; } else if (vif_new) { D(WIRELESS, "Create new wireless interface %s on device %s\n", vif_new->name, wdev->name); vif_new->config = blob_memdup(vif_new->config); -- cgit v1.2.1