| commit | 76059b81797daca03dc6377734d61b811b29537a | [log] [tgz] |
|---|---|---|
| author | Philipp Maier <pmaier@sysmocom.de> | Fri Oct 02 17:35:25 2020 +0200 |
| committer | Philipp Maier <pmaier@sysmocom.de> | Fri Oct 02 17:38:12 2020 +0200 |
| tree | d7afa7a6b93930fed4405b758efdea047bb70f5a | |
| parent | 376aa9edaa5a8a32fe5b8351cce5400000da3dc1 [diff] |
gprs_sndcp: fix use after free When compression is turned on, an extra buffer "expnd" is allocated in the context of msg. This means that when msg is freed, expnd is freed as well and there is no need for freein it explcicitly, which, when it is done after freeng msg, causes talloc to abort. Change-Id: I8959b75e241ffabf9fa34c4cf014721584372b26