diff options
author | Richard Mudgett <rmudgett@digium.com> | 2016-04-13 13:50:04 -0500 |
---|---|---|
committer | Richard Mudgett <rmudgett@digium.com> | 2016-04-22 16:44:04 -0500 |
commit | 1e93f3d7232a2a087a190a18e4a3f490a41d42d1 (patch) | |
tree | 799e6ae624b436e4f573b30ed9c800cbe5ac2356 /main/bridge.c | |
parent | 5e388d41888a1e1c4061003a4a090dbe797bca7a (diff) |
Bridge system: Fix memory leaks and double frees on impart failure.
You cannot reference the passed in features struct after calling
ast_bridge_impart(). Even if the call fails.
Change-Id: I902b88ba0d5d39520e670fb635078a367268ea21
Diffstat (limited to 'main/bridge.c')
-rw-r--r-- | main/bridge.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/main/bridge.c b/main/bridge.c index dad7cfa7c..c6f5e4988 100644 --- a/main/bridge.c +++ b/main/bridge.c @@ -2320,6 +2320,9 @@ int ast_bridge_add_channel(struct ast_bridge *bridge, struct ast_channel *chan, if (chan_bridge) { struct ast_bridge_channel *bridge_channel; + /* The channel is in a bridge so it is not getting any new features. */ + ast_bridge_features_destroy(features); + ast_bridge_lock_both(bridge, chan_bridge); bridge_channel = bridge_find_channel(chan_bridge, chan); @@ -2342,9 +2345,6 @@ int ast_bridge_add_channel(struct ast_bridge *bridge, struct ast_channel *chan, bridge_dissolve_check_stolen(chan_bridge, bridge_channel); ast_bridge_unlock(chan_bridge); ast_bridge_unlock(bridge); - - /* The channel was in a bridge so it is not getting any new features. */ - ast_bridge_features_destroy(features); } else { /* Slightly less easy case. We need to yank channel A from * where he currently is and impart him into our bridge. @@ -2352,6 +2352,7 @@ int ast_bridge_add_channel(struct ast_bridge *bridge, struct ast_channel *chan, yanked_chan = ast_channel_yank(chan); if (!yanked_chan) { ast_log(LOG_WARNING, "Could not gain control of channel %s\n", ast_channel_name(chan)); + ast_bridge_features_destroy(features); return -1; } if (ast_channel_state(yanked_chan) != AST_STATE_UP) { |