| commit | 022193da73230fba5c65599fedcba606b71f9928 | [log] [tgz] |
|---|---|---|
| author | Harald Welte <laforge@osmocom.org> | Mon May 16 17:31:36 2022 +0200 |
| committer | Harald Welte <laforge@osmocom.org> | Mon May 16 17:33:42 2022 +0200 |
| tree | 0a95f8743d02ff7ad1aac9b04fd0e5aadb13eedc | |
| parent | 63494a6bef1a54f87742e83d9ad18f64d2dae2af [diff] |
smpp: Fix use-after-free bug when ESME disconnects but has write pending When the SMPP code free's an ESME it also free's the related write_queue and the osmo_fd contained therein. So if this happens while we are in esme_link_read_cb(), we must return -EBADF to make osmo_wqueue_bfd_cb() of libosmocore avoid further accessing related memory. Change-Id: I441d3b05c2f2556c530783a7f66c73adf6d845a1 Closes: OS#5565