diff options
author | Alexander Couzens <lynxis@fe80.eu> | 2021-04-19 03:30:15 +0200 |
---|---|---|
committer | laforge <laforge@osmocom.org> | 2021-05-23 10:32:40 +0000 |
commit | a35c296b6be95f240fe9c4207e5eec8d7886ca61 (patch) | |
tree | fcf7a4bea9f8e9ae5bd70c6031538b009251fd67 /src/gb/gprs_ns2_sns.c | |
parent | fef61cd2ddf2576a8284f631e17d8397bf6f4d84 (diff) |
gprs_ns2: sns: fix del bind()
When the bind to be removed is not the last entry, it would
remove the wrong SNS bind resulting in use-after-free memory.
Change-Id: I79062d404ebba9d5c8f7f209bebde146fa08c71f
Diffstat (limited to 'src/gb/gprs_ns2_sns.c')
-rw-r--r-- | src/gb/gprs_ns2_sns.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/gb/gprs_ns2_sns.c b/src/gb/gprs_ns2_sns.c index c6e80afd..296a2e72 100644 --- a/src/gb/gprs_ns2_sns.c +++ b/src/gb/gprs_ns2_sns.c @@ -1995,6 +1995,7 @@ int gprs_ns2_sns_del_bind(struct gprs_ns2_nse *nse, if (tmp->bind == bind) { llist_del(&tmp->list); found = true; + break; } } |