pespin has submitted this change. ( https://gerrit.osmocom.org/c/libosmo-sigtran/+/38728?usp=email ) Change subject: route: Fix rt pointer use-after-free ...................................................................... route: Fix rt pointer use-after-free The code path is accessing the integer fields of a struct just freed. Fixes: 64e70ab8c20b5acc8e4717d5bcb08fcecf46bd98 Change-Id: I7966c554f1ce92946e828afeb1e07c735be341bf --- M src/osmo_ss7_route.c 1 file changed, 1 insertion(+), 1 deletion(-) Approvals: Jenkins Builder: Verified fixeria: Looks good to me, approved diff --git a/src/osmo_ss7_route.c b/src/osmo_ss7_route.c index 32e3eb7..dc48e28 100644 --- a/src/osmo_ss7_route.c +++ b/src/osmo_ss7_route.c @@ -228,7 +228,7 @@ /* Keep old behavior, return already existing route: */ if (rc == -EADDRINUSE) { talloc_free(rt); - return ss7_route_table_find_route_by_dpc_mask(rtbl, rt->cfg.pc, rt->cfg.mask); + return ss7_route_table_find_route_by_dpc_mask(rtbl, pc, mask); } return rt; -- To view, visit https://gerrit.osmocom.org/c/libosmo-sigtran/+/38728?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: libosmo-sigtran Gerrit-Branch: master Gerrit-Change-Id: I7966c554f1ce92946e828afeb1e07c735be341bf Gerrit-Change-Number: 38728 Gerrit-PatchSet: 2 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: osmith <osmith(a)sysmocom.de> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de>