pespin has uploaded this change for review. (
https://gerrit.osmocom.org/c/libosmo-sigtran/+/38728?usp=email )
Change subject: rout: Fix rt pointer use-after-free
......................................................................
rout: Fix rt pointer use-after-free
The code path is accessing the integer fields of a struct just freed.
Fixes: 64e70ab8c20b5acc8e4717d5bcb08fcecf46bd98
Change-Id: I7966c554f1ce92946e828afeb1e07c735be341bf
---
M src/osmo_ss7_route.c
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.osmocom.org:29418/libosmo-sigtran
refs/changes/28/38728/1
diff --git a/src/osmo_ss7_route.c b/src/osmo_ss7_route.c
index 32e3eb7..dc48e28 100644
--- a/src/osmo_ss7_route.c
+++ b/src/osmo_ss7_route.c
@@ -228,7 +228,7 @@
/* Keep old behavior, return already existing route: */
if (rc == -EADDRINUSE) {
talloc_free(rt);
- return ss7_route_table_find_route_by_dpc_mask(rtbl, rt->cfg.pc,
rt->cfg.mask);
+ return ss7_route_table_find_route_by_dpc_mask(rtbl, pc, mask);
}
return rt;
--
To view, visit https://gerrit.osmocom.org/c/libosmo-sigtran/+/38728?usp=email
To unsubscribe, or for help writing mail filters, visit
https://gerrit.osmocom.org/settings?usp=email
Gerrit-MessageType: newchange
Gerrit-Project: libosmo-sigtran
Gerrit-Branch: master
Gerrit-Change-Id: I7966c554f1ce92946e828afeb1e07c735be341bf
Gerrit-Change-Number: 38728
Gerrit-PatchSet: 1
Gerrit-Owner: pespin <[email protected]>
