See the two commits:

- in both cases the first item of the linked list is not freed,
- the freed memory is read
- lastly a NULL is freed (or in the second case, a NULL-dereference)
You can merge this Pull Request by running:

  git pull https://github.com/wdoekes/opensips wjd-xcapclient_mem_corrupt

Or you can view, comment on it, or merge it online at:

  https://github.com/OpenSIPS/opensips/pull/176

-- Commit Summary --

  * xcap_client: Fix possible memory curruption in destroy_xcapcb_list.
  * xcap_client: Fix memory leak and possible corruption in xcapFreeNodeSel.

-- File Changes --

    M modules/xcap_client/xcap_callbacks.c (6)
    M modules/xcap_client/xcap_functions.c (4)

-- Patch Links --

https://github.com/OpenSIPS/opensips/pull/176.patch
https://github.com/OpenSIPS/opensips/pull/176.diff

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/176
_______________________________________________
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel

Reply via email to