diff options
| author | Richard Mudgett <rmudgett@digium.com> | 2015-06-26 18:48:35 -0500 |
|---|---|---|
| committer | Richard Mudgett <rmudgett@digium.com> | 2015-07-06 15:38:15 -0500 |
| commit | 0d67e04359505a06409d8211bb0c2b65fe82125f (patch) | |
| tree | d5059fa1c6829f434439ea2c3a30eb3173a9e9d9 /res/res_hep_rtcp.c | |
| parent | 0422433f4722e6e692b0c84342e048feff344e80 (diff) | |
res_pjsip_mwi.c: Fix MWI subscription memory corruption crash.
MWI subscriptions can crash or corrupt memory when using the subscription
datastore to access the MWI subscription object because the datastore is
not holding a reference to the object.
* Give the subscription datastore a ref to the MWI subscription object.
It is unfortunate that the ref causes a circular ref chain that must be
explicitly broken to allow the memory to get released. The loop is broken
when the subscription is shutdown and if the subscription setup fails.
ASTERISK-25168 #close
Reported by: Carl Fortin
Change-Id: Ice4fa823f138ff10a6c74d280699c41a82836d4f
Diffstat (limited to 'res/res_hep_rtcp.c')
0 files changed, 0 insertions, 0 deletions