]> git.ipfire.org Git - thirdparty/asterisk.git/commit
Merged revisions 219520 via svnmerge from
authorDavid Vossel <dvossel@digium.com>
Fri, 18 Sep 2009 23:22:11 +0000 (23:22 +0000)
committerDavid Vossel <dvossel@digium.com>
Fri, 18 Sep 2009 23:22:11 +0000 (23:22 +0000)
commit16c81690bae2f15476e358cb2cbd76ab8b78cde0
tree233bf4ae4adf8119508e036446373260314ac98d
parentfcc585fb184df32d7cfd1fac0f4ddbb04285a4cb
Merged revisions 219520 via svnmerge from
https://origsvn.digium.com/svn/asterisk/trunk

................
  r219520 | dvossel | 2009-09-18 18:20:58 -0500 (Fri, 18 Sep 2009) | 15 lines

  Merged revisions 219519 via svnmerge from
  https://origsvn.digium.com/svn/asterisk/branches/1.4

  ........
    r219519 | dvossel | 2009-09-18 18:19:50 -0500 (Fri, 18 Sep 2009) | 9 lines

    iax2 frame double free

    The iax frame's retrans sched id was written over right
    before iax2_frame_free was called.  In iax2_frame_free that
    retrans id is used to delete the sched item.  By writing over
    the retrans field before the sched item could be deleted, it was
    possible for a retransmit to occur on a freed frame.
  ........
................

git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.6.1@219522 65c4cc65-6c06-0410-ace0-fbb531ad65f3
channels/chan_iax2.c