summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorAlex Badea <vamposdecampos@gmail.com>2010-11-21 22:45:23 +0200
committerHarald Welte <laforge@gnumonks.org>2010-11-21 23:33:27 +0100
commit30f17f5dd7d090e68e1eeb63b681b22676009061 (patch)
treeeaf81086738480317fabc76038fd956798d00d2e /src
parentec7349f28bf07fdd3cf173ee735107d2b6abcb53 (diff)
layer23 sysinfo: fix parsing of CBCH Mobile Allocation
When calling gsm48_decode_mobile_alloc(), read the length byte from payload data[], rather than from si->data[].
Diffstat (limited to 'src')
-rw-r--r--src/host/layer23/src/common/sysinfo.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/host/layer23/src/common/sysinfo.c b/src/host/layer23/src/common/sysinfo.c
index 9aa65c7b..8f6b1b58 100644
--- a/src/host/layer23/src/common/sysinfo.c
+++ b/src/host/layer23/src/common/sysinfo.c
@@ -682,7 +682,7 @@ short_read:
if (payload_len >= 1 && data[0] == GSM48_IE_CBCH_MOB_AL) {
if (payload_len < 1 || payload_len < 2 + data[1])
goto short_read;
- gsm48_decode_mobile_alloc(s->freq, data + 2, si->data[1],
+ gsm48_decode_mobile_alloc(s->freq, data + 2, data[1],
s->hopping, &s->hopp_len, 1);
payload_len -= 2 + data[1];
data += 2 + data[1];