https://osmocom.org/https://osmocom.org/favicon.ico?16647414092018-11-09T13:42:13ZOpen Source Mobile Communicationslibosmo-netif - Bug #3685: heap use after free in osmo_stream_srv_write()https://osmocom.org/issues/3685?journal_id=125432018-11-09T13:42:13Zstsp
<ul><li><strong>Subject</strong> changed from <i>crash in osmo_stream_srv_write() with address sanitizer</i> to <i>heap use after free in osmo_stream_srv_write()</i></li></ul> libosmo-netif - Bug #3685: heap use after free in osmo_stream_srv_write()https://osmocom.org/issues/3685?journal_id=125442018-11-09T14:07:37Zstsp
<ul></ul><p>This problem can be fixed with two patches:</p>
<p>return error code from xua_srv_conn_cb() if conn is freed<br /><a class="external" href="https://gerrit.osmocom.org/#/c/libosmo-sccp/+/11704">https://gerrit.osmocom.org/#/c/libosmo-sccp/+/11704</a></p>
<p>detect freed connections in osmo_stream_srv_read()<br /><a class="external" href="https://gerrit.osmocom.org/c/libosmo-netif/+/11705">https://gerrit.osmocom.org/c/libosmo-netif/+/11705</a></p> libosmo-netif - Bug #3685: heap use after free in osmo_stream_srv_write()https://osmocom.org/issues/3685?journal_id=125482018-11-09T15:35:48Zstsp
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Resolved</i></li></ul><p>Above patches have been merged.</p>