Re: Bug: wpa_supplicant uses hostapd_deinit_driver sometimes

On 6/10/20 12:22 PM, Markus Theil wrote:
> Hi,
>
> I encountered the following bug, when fiddling around with DFS in
> wpa_supplicant mesh mode.
>
> In some error cases, the hostapd code used by wpa_supplicant
> de-initializes the nl80211 driver under
> Linux without wpa_supplicant noticing it. This leads to use
> after-free-bugs. I attached the address sanitizer
> log below. In this case, I have two mesh stations connected to each
> other on a DFS channel and then trigger
> the ath10k DFS test. (echo 1 >
> /sys/kernel/debug/ieee80211/phy0/ath10k/dfs_simulate_radar).
For a little clarification of my test case, I'm using Peter Oh's DFS
patchset from this
mailing list with some memory fixes on top. It's currently WIP, so I
don't posted it yet.
The same issues may also surface if one uses the AP mode of
wpa_supplicant, which also
supports DFS.

Thanks to Daniel Golle, who was asking for clarification.