path: root/openbsc/src
diff options
authorHolger Hans Peter Freyther <zecke@selfish.org>2010-02-08 20:14:53 +0100
committerHolger Hans Peter Freyther <zecke@selfish.org>2010-02-08 20:14:53 +0100
commitfdc64f680679accb60f295f0c1712076877bd016 (patch)
tree2572d4221daf34e27425ded84b38df68568d2f04 /openbsc/src
parentab46372e2a2b381856cf6e6848497ce9f3b0ad2e (diff)
[bsc_msc_ip] Fix the re-queuing of packets...on-waves/0.3.1
* The MSC is sending us the next 04.08 packet before we have received the answer for the cipher model complete. The code was supposed to copy all packets from the current queue, to a new queue and then send the packets again. * This would (re)establish the different SAPIs. Now the requeuing code was grabbing the packet from the empty queue (NULL pointer) and we were dereferencing it. It appears that we need to use "head" until the queue is empty.
Diffstat (limited to 'openbsc/src')
1 files changed, 1 insertions, 1 deletions
diff --git a/openbsc/src/bssap.c b/openbsc/src/bssap.c
index 3a966f23f..3a283666c 100644
--- a/openbsc/src/bssap.c
+++ b/openbsc/src/bssap.c
@@ -1260,7 +1260,7 @@ void bts_unblock_queue(struct bss_sccp_connection_data *data)
/* now queue them again to send RSL establish and such */
while (!llist_empty(&head)) {
- msg = msgb_dequeue(&data->gsm_queue);
+ msg = msgb_dequeue(&head);
bts_queue_send(msg, (int) msg->smsh);