fixeria has uploaded this change for review. ( https://gerrit.osmocom.org/c/osmo-bsc/+/35334?usp=email )
Change subject: vgcs_fsm: fix NULL pointer dereference in vgcs_call_fsm_busy() ......................................................................
vgcs_fsm: fix NULL pointer dereference in vgcs_call_fsm_busy()
Change-Id: I14ad41bfa1ab3455a6a175cfb05341ca12c8d73e Fixes: CID#322299 --- M src/osmo-bsc/vgcs_fsm.c 1 file changed, 13 insertions(+), 1 deletion(-)
git pull ssh://gerrit.osmocom.org:29418/osmo-bsc refs/changes/34/35334/1
diff --git a/src/osmo-bsc/vgcs_fsm.c b/src/osmo-bsc/vgcs_fsm.c index 37473c5..1f2bbef 100644 --- a/src/osmo-bsc/vgcs_fsm.c +++ b/src/osmo-bsc/vgcs_fsm.c @@ -317,8 +317,10 @@ break; case VGCS_EV_MSC_DTAP: LOG_CALL(conn, LOGL_DEBUG, "MSC sends DTAP message to talker.\n"); - if (!conn->vgcs_call.talker) + if (!conn->vgcs_call.talker) { msgb_free(data); + break; + } rc = osmo_fsm_inst_dispatch(conn->vgcs_call.talker->vgcs_chan.fi, VGCS_EV_MSC_DTAP, data); if (rc < 0) msgb_free(data);