res_pjsip_pubsub: On notify fail deleted sub_tree is then referenced

This change makes the send_notify of the sub_tree
not happen when the sub_tree has been deleted due
to the notify call failing, which avoids a crash.

ASTERISK-24970 #close

Change-Id: I1f20ffc08b192f59c457293b218025a693992cbf

diff --git a/res/res_pjsip_pubsub.c b/res/res_pjsip_pubsub.c
index 5a0f963dc0ed518f72c8c982b99998769b4d5ccf..0f08a0ff48d8f3d65eeb09f181e00691bc987542 100644 (file)
--- a/res/res_pjsip_pubsub.c
+++ b/res/res_pjsip_pubsub.c
@@ -2601,11 +2601,12 @@ static pj_bool_t pubsub_on_rx_subscribe_request(pjsip_rx_data *rdata)
                sip_subscription_accept(sub_tree, rdata, resp);
                if (generate_initial_notify(sub_tree->root)) {
                        pjsip_evsub_terminate(sub_tree->evsub, PJ_TRUE);
+               } else {
+                       send_notify(sub_tree, 1);
+                       ast_test_suite_event_notify("SUBSCRIPTION_ESTABLISHED",
+                                       "Resource: %s",
+                                       sub_tree->root->resource);
                }
-               send_notify(sub_tree, 1);
-               ast_test_suite_event_notify("SUBSCRIPTION_ESTABLISHED",
-                               "Resource: %s",
-                               sub_tree->root->resource);
        }
 
        resource_tree_destroy(&tree);