commit | 66efcbce659239a9d47e893293e88a9dc7cd8251 | [log] [tgz] |
---|---|---|
author | Holger Hans Peter Freyther <zecke@selfish.org> | Wed Jun 30 09:22:31 2010 +0800 |
committer | Holger Hans Peter Freyther <zecke@selfish.org> | Wed Jun 30 11:59:29 2010 +0800 |
tree | 128ec44eb0b65c3a504a97a67f373f7bf0f9232b | |
parent | 93d50e69d37b3e3bd5cd41967705b8645cfefdec [diff] |
gsm_subscriber_base: Take a ref on the subscriber to avoid use after free On expired paging we might access a GSM Subscriber that has already been deleted. To avoid this we will add a subscr_get/subscr_put for the subscriber to the allocation and release path of the request. Reported-by: Richard Zahoransky