[Fix] Dereference after free in sta_remove_callback()

Change-Id: I0e3e98f588ea186c514090a86a1a5a9d78e10420
Signed-off-by: Nishant Chaprana <n.chaprana@samsung.com>

diff --git a/packaging/connman.spec b/packaging/connman.spec
index af8e27f..a2774df 100644 (file)
--- a/packaging/connman.spec
+++ b/packaging/connman.spec
@@ -5,7 +5,7 @@
 
 Name:           connman
 Version:        1.37
-Release:        33
+Release:        34
 License:        GPL-2.0+
 Summary:        Connection Manager
 Url:            http://connman.net

diff --git a/plugins/wifi.c b/plugins/wifi.c
index e74e2d9..322cfa0 100644 (file)
--- a/plugins/wifi.c
+++ b/plugins/wifi.c
@@ -5498,16 +5498,24 @@ static void sta_remove_callback(int result,
        if ((result < 0) || (info->wifi->ap_supported != WIFI_AP_SUPPORTED)) {
                info->wifi->tethering = false;
                connman_technology_tethering_notify(info->technology, false);
+#if !defined TIZEN_EXT
 
                g_free(info->ifname);
                g_free(info->ssid);
                g_free(info);
+#endif /* !defined TIZEN_EXT */
 
                if (info->wifi->ap_supported == WIFI_AP_SUPPORTED) {
                        g_free(info->wifi->tethering_param->ssid);
                        g_free(info->wifi->tethering_param);
                        info->wifi->tethering_param = NULL;
                }
+#if defined TIZEN_EXT
+
+               g_free(info->ifname);
+               g_free(info->ssid);
+               g_free(info);
+#endif /* defined TIZEN_EXT */
                return;
        }