diff options
| author | Harald Welte <laforge@gnumonks.org> | 2018-04-14 15:04:28 +0200 |
|---|---|---|
| committer | Harald Welte <laforge@gnumonks.org> | 2018-04-14 15:07:36 +0200 |
| commit | ce96928e121fb59ad28e89b3987eaab1566c9a32 (patch) | |
| tree | 724719c0fe3ae5d6257062aef133e3a122fe5960 /include/Makefile.am | |
| parent | 99a8d235f3da4c2239126fd1ba5b9c6ef69835fc (diff) | |
smpp: Unset esme->acl on socket close
We set acl->esme during _process_bind(), but we don't clear it
in case the TCP connection for the ESME is dead. This leads to
a stale acl->esme pointer, which we will attempt to dereference
the next time a SMS is delivered to a route pointing to this acl,
where it will be a heap use-after-free.
This was discovered using AddressSanitizer and MSC_Tests.ttcn
Closes: OS#3168
Change-Id: I1f140d7f9c7d89f200ddbcd81a8df66de69fb3e4
Diffstat (limited to 'include/Makefile.am')
0 files changed, 0 insertions, 0 deletions