tree dd5ba0562f7824bd55dca7683cd15747b3be9eba
parent 8fca585d33a5042eb7778b17ec38dbb9f133a758
author Jouni Malinen <jouni@codeaurora.org> 1612477697 +0200
committer Hai Shalom <haishalom@google.com> 1614136979 +0000

Flush pending control interface message for an interface to be removed

wpa_supplicant_ctrl_iface_deinit() was executed only if the
per-interface control interface initialization had been completed. This
is not the case if driver initialization fails and that could result in
leaving behind references to the freed wpa_s instance in a corner case
where control interface messages ended up getting queued.

Fix this by calling wpa_supplicant_ctrl_iface_deinit() in all cases to
cancel the potential eloop timeout for wpas_ctrl_msg_queue_timeout with
the reference to the wpa_s pointer. In addition, flush any pending
message from the global queue for this interface since such a message
cannot be of use after this and there is no need to leave them in the
queue until the global control interface gets deinitialized.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

Bug: 168314741
Test: Connect to Wi-Fi networks, enable SAP, verify correctness
Test: Run wifi_test PoC - verify no exception

Change-Id: I2dcc00b1b1db1f30432641c7202e0353eca55722