Attention is currently required from: daniel, fixeria, laforge, osmith.

View Change

1 comment:

• Patchset:

  • Patch Set #2:

    This looks very similar to https://osmocom.org/issues/6728 (use-after-free/double-free in osmo-bts). […]

    So what's the root problem according to you?

    IMO the root problem is that stream_srv is the talloc parent of the msgb being dispatched over its read_cb() (which is legit) and we are operating it in an incorrect way here, by not taking that into account.

    We simply didn't take into consideration this fact when we (I?) moved the code to the new osmo_stream_srv iofd-based API.

To view, visit change 40327. To unsubscribe, or for help writing mail filters, visit settings.