res_pjsip_pubsub: On recreated notify fail deleted sub_tree is referenced

When recreating a subscription it is possible for a freed sub_tree
to be referenced when the initial NOTIFY fails to be created.

Change-Id: I681c215309aad01b21d611c2de47b3b0a6022788

diff --git a/res/res_pjsip_pubsub.c b/res/res_pjsip_pubsub.c
index 24c15540d1b8339087cd2436f45cf9cf7549687a..b0d86dcc14239d1458377b2fa605f3de617e6bc9 100644 (file)
--- a/res/res_pjsip_pubsub.c
+++ b/res/res_pjsip_pubsub.c
@@ -1388,8 +1388,9 @@ static int subscription_persistence_recreate(void *obj, void *arg, int flags)
                subscription_persistence_update(sub_tree, &rdata);
                if (generate_initial_notify(sub_tree->root)) {
                        pjsip_evsub_terminate(sub_tree->evsub, PJ_TRUE);
+               } else {
+                       send_notify(sub_tree, 1);
                }
-               send_notify(sub_tree, 1);
        } else {
                ast_sorcery_delete(ast_sip_get_sorcery(), persistence);
        }