cellular-infrastructure
/
osmo-msc
mirror of https://gerrit.osmocom.org/osmo-msc
9
0
Fork 0
Code Issues Releases Wiki Activity
osmo-msc/src/libmsc
History
Pau Espin 86f212666a setup_trig_pag_evt: Fix heap-use-after-free 
Catched by osmo-gsm-tester running test voice:octphy.

Fixes following AddressSanitizer report:
==18864==ERROR: AddressSanitizer: heap-use-after-free on address 0x61a000016f18 at pc 0x55f1b29eee5c bp 0x7ffdaa2ac000 sp 0x7ffdaa2abff8
WRITE of size 8 at 0x61a000016f18 thread T0
    #0 0x55f1b29eee5b in setup_trig_pag_evt osmo-msc/src/libmsc/gsm_04_08.c:1490
    #1 0x55f1b2a086c1 in subscr_paging_dispatch osmo-msc/src/libmsc/gsm_subscriber.c:101
    #2 0x7fb88e07c1c9 in osmo_timers_update libosmocore/src/timer.c:257
    #3 0x7fb88e07f1b1 in osmo_select_main libosmocore/src/select.c:253
    #4 0x55f1b29b600b in main osmo-msc/msc_main.c:694
    #5 0x7fb88bebe2e0 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x202e0)
    #6 0x55f1b29b69f9 in _start (osmo-msc/bin/osmo-msc+0xf09f9)

Related: OS#3198

Change-Id: Ie7fdca4d48e247c77a53e81aec2b6bacd8fef678
 		2018-04-24 14:02:03 +02:00
..
Makefile.am dissolve libcommon-cs: mv a_reset.c to libmsc 2018-03-22 17:07:36 +01:00
a_iface.c DTAP: Ensure proper DLCI is used in MSC-originated DTAP 2018-04-09 16:41:10 +02:00
a_iface_bssap.c fix BSC Clear Request 2018-04-11 21:39:44 +00:00
a_reset.c dissolve libcommon-cs: mv a_reset.c to libmsc 2018-03-22 17:07:36 +01:00
ctrl_commands.c Add control command to expire subscriber 2018-01-05 10:10:35 +00:00
db.c Wrap osmo_strlcpy() calls 2018-02-05 12:57:06 +01:00
gsm_04_08.c setup_trig_pag_evt: Fix heap-use-after-free 2018-04-24 14:02:03 +02:00
gsm_04_11.c Remove unused GSM_PAGING_OOM 2018-04-24 11:35:37 +02:00
gsm_04_14.c remove bsc_api.h and all users - they're all dead code 2018-02-14 00:28:02 +01:00
gsm_04_80.c libmsc/gsm_04_80.c: drop unused 'in_msg' argument 2018-04-09 18:57:33 +00:00
gsm_subscriber.c Massive removal of unused code/structs/headers 2018-01-25 00:18:05 +01:00
iu_dummy.c iucs: Add a function to return the connection ID for the IU SCCP conn 2018-02-16 08:09:32 +00:00
iucs.c unify allocation of gsm_subscriber_connection 2018-04-05 01:10:32 +02:00
iucs_ranap.c properly receive BSSMAP Clear Complete and Iu Release Complete 2018-04-11 21:39:44 +00:00
mncc.c Massive removal of unused code/structs/headers 2018-01-25 00:18:05 +01:00
mncc_builtin.c Massive removal of unused code/structs/headers 2018-01-25 00:18:05 +01:00
mncc_sock.c dissolve libcommon: move talloc ctx into msc_main.c, drop talloc_ctx.c 2018-03-22 17:06:05 +01:00
msc_ifaces.c refactor subscr_conn and subscr_conn_fsm de-/alloc 2018-04-11 21:39:44 +00:00
msc_mgcp.c msc_mgcp: do not send wildcarded DLCX messages 2018-04-11 17:36:45 +02:00
msc_vty.c cosmetic: use enum ranap_nsap_addr_enc instead of int 2018-04-16 01:50:46 +02:00
osmo_msc.c msc conn ref counts: log human readable list of conn owners 2018-04-12 19:40:01 +00:00
rrlp.c Massive removal of unused code/structs/headers 2018-01-25 00:18:05 +01:00
silent_call.c Remove unused GSM_PAGING_OOM 2018-04-24 11:35:37 +02:00
smpp_openbsc.c Wrap osmo_strlcpy() calls 2018-02-05 12:57:06 +01:00
smpp_smsc.c smpp_smsc_conf: Fix heap-use-after-free 2018-04-17 16:10:35 +02:00
smpp_smsc.h libmsc: add support for SMPP delivery receipts 2017-08-27 02:33:49 +02:00
smpp_utils.c dissolve libcommon: drop debug.c 2018-03-22 17:05:42 +01:00
smpp_vty.c vty: skip installing cmds now always installed by default 2017-11-01 00:51:21 +01:00
sms_queue.c Remove unused GSM_PAGING_OOM 2018-04-24 11:35:37 +02:00
subscr_conn.c refactor VLR FSM result handling 2018-04-12 19:40:00 +00:00
transaction.c refactor subscr_conn and subscr_conn_fsm de-/alloc 2018-04-11 21:39:44 +00:00
ussd.c libmsc/ussd: don't overwrite rc if decoding failed 2018-04-12 09:27:44 +00:00