res_pjsip_mwi: potential double unref, and potential unwanted double link

When creating an unsolicited MWI aggregate subscription it was possible for
the subscription object to be double unref'ed. This patch removes the explicit
unref as it is not needed since the RAII_VAR will handle it at function end.

Less concerning there was also a bug that could potentially allow the aggregate
subscription object to be added to the unsolicited container twice. This patch
ensures it is added only once.

ASTERISK-28575

Change-Id: I9ccfdb5ea788bc0c3618db183aae235e53c12763

diff --git a/res/res_pjsip_mwi.c b/res/res_pjsip_mwi.c
index 46f890beb3457e49468771ee42949ea97dce4bac..d6bed74be851bf59b1fb34d5c4891799ca95cdc8 100644 (file)
--- a/res/res_pjsip_mwi.c
+++ b/res/res_pjsip_mwi.c
@@ -1289,6 +1289,13 @@ static int create_unsolicited_mwi_subscriptions(struct ast_sip_endpoint *endpoin
                        if (!aggregate_sub) {
                                return 0; /* No MWI aggregation for you */
                        }
+
+                       /*
+                        * Just in case we somehow get in the position of recreating with no previous
+                        * aggregate object, set recreate to false here in order to allow the new
+                        * object to be linked into the container below
+                        */
+                       recreate = 0;
                }
        }
 
@@ -1330,13 +1337,13 @@ static int create_unsolicited_mwi_subscriptions(struct ast_sip_endpoint *endpoin
 
        if (aggregate_sub) {
                if (ao2_container_count(aggregate_sub->stasis_subs)) {
-                       ao2_link_flags(unsolicited_mwi, aggregate_sub, OBJ_NOLOCK);
+                       /* Only link if we're dealing with a new aggregate object */
+                       if (!recreate) {
+                               ao2_link_flags(unsolicited_mwi, aggregate_sub, OBJ_NOLOCK);
+                       }
                        if (send_now && sub_added) {
                                send_notify(aggregate_sub, NULL, 0);
                        }
-               } else {
-                       /* No stasis subscriptions then no MWI data to aggregate */
-                       ao2_ref(aggregate_sub, -1);
                }
        }