diff options
| author | Andreas.Eversberg <jolly@eversberg.eu> | 2010-09-15 10:25:42 +0000 |
|---|---|---|
| committer | Andreas.Eversberg <jolly@eversberg.eu> | 2010-09-15 10:25:42 +0000 |
| commit | d33ffcc3f14f175843ad72066c0a3c83db1717ac (patch) | |
| tree | e95c7f0bda0778cdff1b9c146da3467781de5a56 | |
| parent | d7ba30c2a08b0b72ab35a03bd64ece0d86bb9886 (diff) | |
[layer23] Fix in LAPDm: reset send_buffer offset at resume
Without it, the offset of the last message in progess is used.
This caused undefined behaviour and crash.
This bug was found by Dieter.
| -rw-r--r-- | src/host/layer23/src/common/lapdm.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/host/layer23/src/common/lapdm.c b/src/host/layer23/src/common/lapdm.c index 1147c4f4..ca8ad380 100644 --- a/src/host/layer23/src/common/lapdm.c +++ b/src/host/layer23/src/common/lapdm.c @@ -1899,6 +1899,7 @@ static int rslms_rx_rll_res_req(struct msgb *msg, struct lapdm_datalink *dl) /* Replace message in the send-buffer (reconnect) */ if (dl->send_buffer) msgb_free(dl->send_buffer); + dl->send_out = 0; dl->send_buffer = msg; /* Discard partly received L3 message */ |