diff options
| author | Daniel Willmann <daniel@totalueberwachung.de> | 2012-12-25 23:15:50 +0100 |
|---|---|---|
| committer | Holger Hans Peter Freyther <zecke@selfish.org> | 2012-12-26 10:48:01 +0100 |
| commit | e523392c2c091f53c18edf2086d6966eec38561f (patch) | |
| tree | c74facf8897c5513adfa95e710d8388cfe170bad /src/gsm/lapd_core.c | |
| parent | 0167596c2bf19102eac8a69f5066eedbae72a167 (diff) | |
lapd: Check in rslms_rx_rll() if lapdm context was initialized earlier
This was found while implementing handover on a sysmobts. When we
receive a channel release request for a channel that was never really
activated (set_lapdm_context() was not called) we segfault in
lapd_recv_dlsap().
We now return early with -EINVAL in rslms_rx_rll() if we receive a
message that assumes set_lapdm_context() was already called.
These are:
* RSL_MT_UNIT_DATA_REQ
* RSL_MT_DATA_REQ
* RSL_MT_SUSP_REQ
* RSL_MT_REL_REQ
A test case was added to trigger the issue.
Diffstat (limited to 'src/gsm/lapd_core.c')
0 files changed, 0 insertions, 0 deletions