commit 68b99a4a084eaf2e9a867e42853cea636691cca2
author Harald Welte <laforge@gnumonks.org> Tue May 18 12:05:42 2010 +0200
committer Harald Welte <laforge@gnumonks.org> Tue May 18 12:05:42 2010 +0200
tree 6a332440441e7b58b5312b1a1339d5736c3e1516
parent 803bd5ceb2598db0e7d085139c845d9f704b15ba

[GPRS] fix null pointer dereference in GMM

openbsc/src/gprs/gprs_gmm.c

diff --git a/openbsc/src/gprs/gprs_gmm.c b/openbsc/src/gprs/gprs_gmm.c
index f2e5362..d05f4cd 100644
--- a/openbsc/src/gprs/gprs_gmm.c
+++ b/openbsc/src/gprs/gprs_gmm.c
@@ -419,7 +419,7 @@
 		/* FIXME: Start some timer */
 		ctx->mm_state = GMM_COMMON_PROC_INIT;
 		ctx->tlli = msgb_tlli(msg);
-		msgid2mmctx(mmctx, msg);
+		msgid2mmctx(ctx, msg);
 		break;
 	case GSM_MI_TYPE_TMSI:
 		tmsi = strtoul(mi_string, NULL, 10);
@@ -430,7 +430,7 @@
 			/* FIXME: Start some timer */
 			ctx->mm_state = GMM_COMMON_PROC_INIT;
 			ctx->tlli = msgb_tlli(msg);
-			msgid2mmctx(mmctx, msg);
+			msgid2mmctx(ctx, msg);
 		}
 		break;
 	default: