]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
rlm_sigtran/mtp_layer3: NULL pointer dereference in mtp_link_sccp_data when slc[SLS...
authorAlexander Bainbridge-Sedivy <alex.bainbridge@inkbridge.io>
Mon, 1 Jun 2026 16:16:38 +0000 (12:16 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Tue, 2 Jun 2026 17:07:02 +0000 (13:07 -0400)
src/modules/rlm_sigtran/libosmo-m3ua/mtp_layer3.c

index a8bec5cd258b38e64435892374225c3f91c02a80..2b36e4f74e5486fc5da1ca938ebb6d01246617a8 100644 (file)
@@ -544,6 +544,13 @@ static int mtp_link_sccp_data(struct mtp_link_set *set, struct mtp_level_3_hdr *
                if (!out)
                        return -1;
 
+               if (!set->slc[sls]) {
+                       LOGP(DINP, LOGL_ERROR, "No link for SLS %u on %d/%s\n",
+                               sls, set->nr, set->name);
+                       msgb_free(out);
+                       return -1;
+               }
+
                mtp_link_submit(set->slc[MTP_LINK_SLS(hdr->addr)], out);
 
                return 0;