Anybody else getting openbsc segfaults on IMSI Detach?

This is merely a historical archive of years 2008-2021, before the migration to mailman3.

A maintained and still updated list archive can be found at https://lists.osmocom.org/hyperkitty/list/OpenBSC@lists.osmocom.org/.

Tobias Engel t-openbsc at tobias.org
Thu Dec 13 14:39:38 UTC 2012


Hi,

I pulled a newer openbsc version today for the first time in several months.

Now, when a phone sends an IMSI Detach, osmo-nitb segfaults.

The reason seems to be:

osmo_msc.c:msc_compl_l3 gets called from gsm0408_rcvmsg, which in turn
calls gsm0408_dispatch which at some point ends up in
gsm48_rx_mm_imsi_detach_ind, which calls msc_release_connection, which
calls gsm0808_clear, which sets conn->bts = NULL.

Now, back in msc_compl_l3, trans_has_conn is called, which tries to
dereference conn->bts->network, which causes the segfault.

It might have been introduced with Holger's patch "msc: Attempt to
release the lchan immediately on IMSI Detach" (153b13b0), but that was
already in July...

-Tobias




More information about the OpenBSC mailing list