commit 8e16e8b338e9963f353c8e0cfb02f80009e9150c
author Oliver Smith <osmith@sysmocom.de> Thu Jun 22 11:27:24 2023 +0200
committer osmith <osmith@sysmocom.de> Fri Jun 23 10:55:55 2023 +0000
tree 965f71db77a8aae3c0871fe991e017bb1837c107
parent 17399803a4fca01b1eaa505fe563b241f075f5c0

gsm48_cc_tx_alerting: check rc of sdp_msg_from_sdp_str

Fixes: CID#321280
Change-Id: Id372d2d844446d6667a00dae22bdf8ed36c599ba

src/libmsc/gsm_04_08_cc.c

diff --git a/src/libmsc/gsm_04_08_cc.c b/src/libmsc/gsm_04_08_cc.c
index 1d99421..5664f4c 100644
--- a/src/libmsc/gsm_04_08_cc.c
+++ b/src/libmsc/gsm_04_08_cc.c
@@ -1110,6 +1110,7 @@
 	struct gsm_mncc *alerting = arg;
 	struct msgb *msg = gsm48_msgb_alloc_name("GSM 04.08 CC ALERT");
 	struct gsm48_hdr *gh = (struct gsm48_hdr *) msgb_put(msg, sizeof(*gh));
+	int rc;
 
 	gh->msg_type = GSM48_MT_CC_ALERTING;
 
@@ -1128,7 +1129,11 @@
 	if (alerting->sdp[0]) {
 		struct call_leg *cl = trans->msc_a->cc.call_leg;
 		struct rtp_stream *rtp_cn = cl ? cl->rtp[RTP_TO_CN] : NULL;
-		sdp_msg_from_sdp_str(&trans->cc.remote, alerting->sdp);
+
+		rc = sdp_msg_from_sdp_str(&trans->cc.remote, alerting->sdp);
+		if (rc < 0)
+			return rc;
+
 		trans_cc_filter_run(trans);
 		LOG_TRANS(trans, LOGL_DEBUG, "msg_type=%s\n", get_mncc_name(alerting->msg_type));
 		if (rtp_cn) {