In the function

static int transform_message(WAPEvent **e, WAPAddrTuple **tuple, 
                             List *push_headers, int cless_accepted, Octstr **type)

it is possible to invoke the 

    if (!content_transformable(push_headers)) 
        goto no_transform;

branch.

If this happens, then

    octstr_destroy(content.type);
    octstr_destroy(content.charset);

will be invoked on an uninitialised instance of content.
The result will be unpredictable.

Paul Keogh
ANAM Wireless Internet Solutions
http://www.anam.com                     
+353 1 284 7555 (wired)               +353 86 234 6047 (wireless)
Castle Yard, Saint Patrick's Road, Dalkey, County Dublin, Ireland
 

Reply via email to