diff options
author | Holger Hans Peter Freyther <zecke@selfish.org> | 2010-11-03 19:01:58 +0100 |
---|---|---|
committer | Holger Hans Peter Freyther <zecke@selfish.org> | 2010-11-15 20:06:46 +0100 |
commit | 05c68841a835b3bbc5a95fa809e136e4e376154c (patch) | |
tree | 6bd4764672fc26a77ad1cfdf66c110fcb4a11aa6 /openbsc/include/openbsc/bsc_api.h | |
parent | 85334f1309c89cf99e6ea55ea119c5b0d143cb5f (diff) |
bsc_api: Fix a use after free error in the Clear Request path
The implementation of bsc_hack would call subscr_con_free before
the BSC API has had the chance to call gsm0808_clear to try to
release other channels. Fix that by adding a return value.
Diffstat (limited to 'openbsc/include/openbsc/bsc_api.h')
-rw-r--r-- | openbsc/include/openbsc/bsc_api.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/openbsc/include/openbsc/bsc_api.h b/openbsc/include/openbsc/bsc_api.h index b1fbb5711..5cdc37844 100644 --- a/openbsc/include/openbsc/bsc_api.h +++ b/openbsc/include/openbsc/bsc_api.h @@ -21,7 +21,7 @@ struct bsc_api { uint16_t rr_cause); void (*assign_fail)(struct gsm_subscriber_connection *conn, uint16_t rr_cause); - void (*clear_request)(struct gsm_subscriber_connection *conn, + int (*clear_request)(struct gsm_subscriber_connection *conn, uint32_t cause); void (*clear_compl)(struct gsm_subscriber_connection *conn); }; |