diff options
| author | Neels Hofmeyr <neels@hofmeyr.de> | 2017-11-18 22:22:59 +0100 |
|---|---|---|
| committer | Neels Hofmeyr <nhofmeyr@sysmocom.de> | 2017-11-20 13:49:32 +0000 |
| commit | b3fa355321de7e0b4f3b83afebba203aa579a7d4 (patch) | |
| tree | 263889cb227ba38ccb8affb6e44b85106789fdad /include | |
| parent | 1a5bcd5c3b3c84dbd1bf99fe08eaab51370fbef9 (diff) | |
vlr_gsupc_read_cb: fix use after free of GSUP msgb
osmo_gsup_decode() doesn't actually decode everything, it does leave quite a
number of pointers into the original msgb. Hence we must not deallocate the
gsup msgb before dispatching GSUP events.
Move msgb_free() to the bottom of vlr_gsupc_read_cb() and use rc and gotos to
early-exit if needed.
Change-Id: I16fc92dcf84e29fcf34712a2e8b0464ef08425ad
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions