owfd: wpa_ctrl: correctly init bufsize on internal reqs

If we send internal reqs, the reply-bufsize needs to be initialized to the
actual buffer size. Otherwise, we might write to invalid memory.

Signed-off-by: David Herrmann <dh.herrmann@gmail.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/src/wpa_ctrl.c b/src/wpa_ctrl.c
index 0155824..f4c7770 100644
--- a/src/wpa_ctrl.c
+++ b/src/wpa_ctrl.c
@@ -233,7 +233,7 @@ int owfd_wpa_ctrl_open(struct owfd_wpa_ctrl *wpa, const char *ctrl_path,
 {
 	int r;
 	char buf[10] = { 0 };
-	size_t len = 10;
+	size_t len = sizeof(buf);
 
 	if (owfd_wpa_ctrl_is_open(wpa))
 		return -EALREADY;
@@ -535,7 +535,7 @@ static int wpa_request(int fd, const void *cmd, size_t cmd_len,
 		       void *reply, size_t *reply_len, int64_t *t2)
 {
 	char buf[REQ_REPLY_MAX];
-	size_t l;
+	size_t l = REQ_REPLY_MAX;
 
 	int64_t *t, t1 = -1;
 	int r;