]> git.ipfire.org Git - thirdparty/asterisk.git/commit
projects / thirdparty / asterisk.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b6a13f0) | patch
res_pjsip_pubsub: segfault in function publish_expire
authorAlexei Gradinari <alex2grad@gmail.com>
Thu, 5 Jul 2018 21:02:00 +0000 (17:02 -0400)
committerAlexei Gradinari <alex2grad@gmail.com>
Fri, 6 Jul 2018 20:06:19 +0000 (16:06 -0400)
commit9e615dac638eb34f1f431aa4294dfeb0195371d8
tree8a1361e724e361e209105faebd2036d7a3aa173atree | snapshot
parentb6a13f0fc24c82a4697f129490059b30cbaacdc1commit | diff
res_pjsip_pubsub: segfault in function publish_expire

The function pubsub_on_rx_publish_request incorrectly uses
of AST_SCHED_REPLACE_UNREF.

The AST_SCHED_REPLACE_UNREF should unref old '_data'.

Because of this, there may be a double unref
of variable 'publication' when ast_sched_del is unsuccessful
that leads to use after free of the 'publication' in publish_expire.

ASTERISK-27956 #close

Change-Id: Ie0f0cfc7e036953d890b188656010b325a5cdc82
res/res_pjsip_pubsub.c diff | blob | blame | history
Mirror of https://github.com/asterisk/asterisk.git