From: Jason Parker <jparker@digium.com>
Date: Fri, 20 Jul 2007 20:33:34 +0000 (+0000)
Subject: Merged revisions 76174 via svnmerge from
X-Git-Tag: 1.6.0-beta1~3^2~1991
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4a023add58b601fe085d3beb3a071bebe573bdfb;p=thirdparty%2Fasterisk.git

Merged revisions 76174 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4

........
r76174 | qwell | 2007-07-20 15:32:55 -0500 (Fri, 20 Jul 2007) | 2 lines

It's possible for sub->owner to be NULL here if you cancel the call immediately after/during sending a digit.

........


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@76175 65c4cc65-6c06-0410-ace0-fbb531ad65f3
---

diff --git a/channels/chan_skinny.c b/channels/chan_skinny.c
index f9f8ec12fe..4358997151 100644
--- a/channels/chan_skinny.c
+++ b/channels/chan_skinny.c
@@ -4463,7 +4463,7 @@ static int handle_message(struct skinny_req *req, struct skinnysession *s)
 
 		sub = find_subchannel_by_instance_reference(d, lineInstance, callReference);
 
-		if (sub && (sub->owner->_state <  AST_STATE_UP)) {
+		if (sub && (sub->owner && sub->owner->_state <  AST_STATE_UP)) {
 			char dgt;
 			int digit = letohl(req->data.keypad.button);