diff options
author | Neels Hofmeyr <nhofmeyr@sysmocom.de> | 2016-12-22 01:58:03 +0100 |
---|---|---|
committer | Neels Hofmeyr <nhofmeyr@sysmocom.de> | 2017-02-03 00:34:02 +0100 |
commit | 35706ddd80c248a9ef26e702c81e9865a7b8cf6d (patch) | |
tree | 54362e84e949e7b7c8e6d96e2e056dec015733c6 /openbsc/tests/vty_test_runner.py | |
parent | 26adfd099b8af407b038ae3bc9c70eced829a386 (diff) |
gsm0408_rcv_cc: guard against NULL subscriber
Check conn->subscr against NULL.
gsm0408_rcv_cc() dereferences many conn members without checking presence: the
bts and lchan members may be expected to be NULL in the ongoing MSC split and
3G developments.
But the conn->subscr is initially NULL, so an MS sending a CC message before
something like a LU or CM Service Request will result in a segfault. Prevent
that.
Note: the upcoming VLR will be more restrictive on what messages are processed,
this is a "backport" to the situation on current master.
Change-Id: If067db7cc0dd3210d9eb1da15be6b637795a3ecf
Diffstat (limited to 'openbsc/tests/vty_test_runner.py')
0 files changed, 0 insertions, 0 deletions