wireless: fix use-after-free bug

[project/netifd.git] / interface-event.c

diff --git a/interface-event.c b/interface-event.c
index fe4759e..3b0d1fa 100644 (file)
--- a/interface-event.c
+++ b/interface-event.c
@@ -14,7 +14,6 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
-#include <unistd.h>
 
 #include <libubox/uloop.h>
 
@@ -111,9 +110,9 @@ interface_queue_event(struct interface *iface, enum interface_event ev)
                last_ev = iface->hotplug_ev;
 
        iface->hotplug_ev = ev;
-       if (last_ev == ev && !list_empty(&iface->hotplug_list))
+       if ((last_ev == ev && ev != IFEV_UPDATE) && !list_empty(&iface->hotplug_list))
                list_del_init(&iface->hotplug_list);
-       else if (last_ev != ev && list_empty(&iface->hotplug_list))
+       else if ((last_ev != ev || ev == IFEV_UPDATE) && list_empty(&iface->hotplug_list))
                list_add(&iface->hotplug_list, &pending);
 
        if (!task.pending && !current)