pespin has uploaded this change for review. ( https://gerrit.osmocom.org/c/libosmo-sigtran/+/38728?usp=email )
Change subject: rout: Fix rt pointer use-after-free ......................................................................
rout: Fix rt pointer use-after-free
The code path is accessing the integer fields of a struct just freed.
Fixes: 64e70ab8c20b5acc8e4717d5bcb08fcecf46bd98 Change-Id: I7966c554f1ce92946e828afeb1e07c735be341bf --- M src/osmo_ss7_route.c 1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.osmocom.org:29418/libosmo-sigtran refs/changes/28/38728/1
diff --git a/src/osmo_ss7_route.c b/src/osmo_ss7_route.c index 32e3eb7..dc48e28 100644 --- a/src/osmo_ss7_route.c +++ b/src/osmo_ss7_route.c @@ -228,7 +228,7 @@ /* Keep old behavior, return already existing route: */ if (rc == -EADDRINUSE) { talloc_free(rt); - return ss7_route_table_find_route_by_dpc_mask(rtbl, rt->cfg.pc, rt->cfg.mask); + return ss7_route_table_find_route_by_dpc_mask(rtbl, pc, mask); }
return rt;
-
pespin