From 07d838a3bf866692f15d6d3bbc17e91451ace216 Mon Sep 17 00:00:00 2001 From: Holger Hans Peter Freyther Date: Thu, 8 Apr 2010 16:48:46 +0200 Subject: [paging] Do not use request after it was was destroyed.. Increment the counter before we call the remove request which is freeing the request... --- openbsc/src/paging.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'openbsc/src/paging.c') diff --git a/openbsc/src/paging.c b/openbsc/src/paging.c index 9c978bee6..3d16a21fb 100644 --- a/openbsc/src/paging.c +++ b/openbsc/src/paging.c @@ -208,11 +208,11 @@ static void paging_T3113_expired(void *data) sig_data.lchan = NULL; /* must be destroyed before calling cbfn, to prevent double free */ + counter_inc(req->bts->network->stats.paging.expired); cbfn_param = req->cbfn_param; cbfn = req->cbfn; paging_remove_request(&req->bts->paging, req); - counter_inc(req->bts->network->stats.paging.expired); dispatch_signal(SS_PAGING, S_PAGING_EXPIRED, &sig_data); if (cbfn) -- cgit v1.2.3