From: Jason Parker <jparker@digium.com>
Date: Fri, 20 Jul 2007 20:32:55 +0000 (+0000)
Subject: It's possible for sub->owner to be NULL here if you cancel the call immediately after... 
X-Git-Tag: 1.4.9~20
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=73452d34a16040962d3e8f66f81fce97b796abbf;p=thirdparty%2Fasterisk.git

It's possible for sub->owner to be NULL here if you cancel the call immediately after/during sending a digit.


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@76174 65c4cc65-6c06-0410-ace0-fbb531ad65f3
---

diff --git a/channels/chan_skinny.c b/channels/chan_skinny.c
index 4571c62dd0..82f01b70d3 100644
--- a/channels/chan_skinny.c
+++ b/channels/chan_skinny.c
@@ -4160,7 +4160,7 @@ static int handle_message(struct skinny_req *req, struct skinnysession *s)
 
 		sub = find_subchannel_by_instance_reference(d, lineInstance, callReference);
 
-		if (sub && (sub->owner->_state <  AST_STATE_UP)) {
+		if (sub && (sub->owner && sub->owner->_state <  AST_STATE_UP)) {
 			char dgt;
 			int digit = letohl(req->data.keypad.button);
 			size_t len;