From f7b06fbe0cedd32d7933fb00aae2a0c0baa9cf6a Mon Sep 17 00:00:00 2001 From: Holger Hans Peter Freyther Date: Mon, 3 May 2010 16:13:02 +0800 Subject: bsc: Speculative crash fix. Make sure the sccp_cc_timeout is stopped when we delete the associated data. There is one crash report that indicates that we have a pending timer that is inside freed memory. A crash could have occured when the connection to the MSC was lost while have unconfirmed connections. --- openbsc/src/bsc_msc_ip.c | 1 + 1 file changed, 1 insertion(+) diff --git a/openbsc/src/bsc_msc_ip.c b/openbsc/src/bsc_msc_ip.c index f760ad627..2e364ab0b 100644 --- a/openbsc/src/bsc_msc_ip.c +++ b/openbsc/src/bsc_msc_ip.c @@ -99,6 +99,7 @@ struct bss_sccp_connection_data *bss_sccp_create_data() void bss_sccp_free_data(struct bss_sccp_connection_data *data) { bsc_del_timer(&data->T10); + bsc_del_timer(&data->sccp_cc_timeout); bsc_del_timer(&data->sccp_it); if (data->sccp) bsc_free_queued(data->sccp); -- cgit v1.2.3