PentHertz
/
srsLTE
mirror of https://github.com/PentHertz/srsLTE.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix using deallocated PDU

This commit is contained in:
Ismael Gomez 2019-07-10 16:56:39 +02:00
parent 8c41625599
commit 11d42acb3a
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/include/srslte/upper/rlc_common.h
View File

@ -23,6 +23,7 @@
#define SRSLTE_RLC_COMMON_H
#include "srslte/common/block_queue.h"
#include <stdlib.h>
namespace srslte {
@ -167,6 +168,7 @@ public:
// Do not block
while (rx_pdu_resume_queue.try_pop(&p)) {
write_pdu(p.payload, p.nof_bytes);
free(p.payload);
}
is_suspended = false;
return true;
@ -203,7 +205,11 @@ private:
// Enqueues the PDU in the resume queue
void queue_pdu(uint8_t* payload, uint32_t nof_bytes)
{
pdu_t p = {payload, nof_bytes};
pdu_t p = {};
p.nof_bytes = nof_bytes;
p.payload = (uint8_t*)malloc(nof_bytes);
memcpy(p.payload, payload, nof_bytes);
// Do not block ever
if (!rx_pdu_resume_queue.try_push(p)) {
fprintf(stderr, "Error dropping PDUs while bearer suspended. Queue should be unbounded\n");