From f6d812b8821efcdf2024518a55db588d94988540 Mon Sep 17 00:00:00 2001 From: Pau Espin Pedrol Date: Fri, 31 Jul 2020 12:55:01 +0200 Subject: WIP: ipaccess: Fix use-after-free in ipaccess_drop Detected by enabling ASan and running BSC_Tests.TC_chopped_ipa_ping TTCN3 test. Related: OS#4688 Change-Id: I4f56af28ad8297846bcdc8ba7afe51fff0f9a00f --- src/input/ipaccess.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/input/ipaccess.c b/src/input/ipaccess.c index d81191c..30bcaf9 100644 --- a/src/input/ipaccess.c +++ b/src/input/ipaccess.c @@ -82,6 +82,7 @@ static int ipaccess_drop(struct osmo_fd *bfd, struct e1inp_line *line) { int ret = 1; struct e1inp_ts *e1i_ts = ipaccess_line_ts(bfd, line); + e1inp_line_get2(line, __func__); ipaccess_keepalive_fsm_cleanup(e1i_ts); @@ -108,6 +109,7 @@ static int ipaccess_drop(struct osmo_fd *bfd, struct e1inp_line *line) /* e1inp_sign_link_destroy releases the socket descriptors for us. */ line->ops->sign_link_down(line); + e1inp_line_put2(line, __func__); return ret; } -- cgit v1.2.3