| commit | 3f8139c55fa71d5e2394a53b2e66e82d81c4f20d | [log] [tgz] |
|---|---|---|
| author | Vadim Yanitskiy <vyanitskiy@sysmocom.de> | Wed Jun 17 20:50:17 2020 +0700 |
| committer | laforge <laforge@osmocom.org> | Thu Jun 18 11:40:37 2020 +0000 |
| tree | ac5b88be9e7d5b38c9b8b60a5eee793f390e6233 | |
| parent | 98c09b3f305b520f80f743e459eed6787e91083b [diff] |
libosmo-mgcp-client: fix use-after-free in mgcp_client_tx() This function calls mgcp_client_pending_add(), that in its turn allocates a 'mgcp_response_pending' and appends it to the queue. In case of an error, it calls mgcp_client_handle_response() that would free the 'mgcp_response_pending', but this structure would still remain in the linked list (the queue). Change-Id: Id94bb93a6b0ea7b7241cf7868112e9bec3e60f0b