| commit | 108d58a59dfb073ee6e71ce52c4b3c497967d02b | [log] [tgz] |
|---|---|---|
| author | Holger Hans Peter Freyther <zecke@selfish.org> | Wed Jun 30 09:22:31 2010 +0800 |
| committer | Holger Hans Peter Freyther <zecke@selfish.org> | Wed Jun 30 11:59:29 2010 +0800 |
| tree | 128ec44eb0b65c3a504a97a67f373f7bf0f9232b | |
| parent | dea24e964985f2804d6ab56015e360a79786eae2 [diff] |
gsm_subscriber_base: Take a ref on the subscriber to avoid use after free On expired paging we might access a GSM Subscriber that has already been deleted. To avoid this we will add a subscr_get/subscr_put for the subscriber to the allocation and release path of the request. Reported-by: Richard Zahoransky