maki/openairinterface5g
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix clean_bwp_structures

Browse Source 
Also zero out the pointer in spCellConfigDedicated to avoid
use-after-free.
This commit is contained in:
francescomani
2025-12-03 13:30:11 +01:00
committed by Robert Schmidt
parent 1603077171
commit 0e7e030907
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openair2/LAYER2/NR_MAC_gNB/gNB_scheduler_primitives.c
+4 -4
View File
@@ -3472,9 +3472,9 @@ void clean_bwp_structures(NR_SpCellConfig_t *spCellConfig)
asn_sequence_del(&rel_dl->list, i, 1);
}
if (rel_dl->list.count == 0)
free_and_zero(rel_dl);
free_and_zero(spCellConfigDedicated->downlinkBWP_ToReleaseList);
if (add_dl->list.count == 0)
free_and_zero(add_dl);
free_and_zero(spCellConfigDedicated->downlinkBWP_ToAddModList);
}
if (spCellConfigDedicated->uplinkConfig->uplinkBWP_ToReleaseList) {
struct NR_UplinkConfig__uplinkBWP_ToReleaseList *rel_ul = spCellConfigDedicated->uplinkConfig->uplinkBWP_ToReleaseList;
@@ -3492,9 +3492,9 @@ void clean_bwp_structures(NR_SpCellConfig_t *spCellConfig)
asn_sequence_del(&rel_ul->list, i, 1);
}
if (rel_ul->list.count == 0)
free_and_zero(rel_ul);
free_and_zero(spCellConfigDedicated->uplinkConfig->uplinkBWP_ToReleaseList);
if (add_ul->list.count == 0)
free_and_zero(add_ul);
free_and_zero(spCellConfigDedicated->uplinkConfig->uplinkBWP_ToAddModList);
}
}