bugfix in rrc_eNB_s1AP.c. ue_context_p is used before checking if pointer is non-null.
This commit is contained in:
@@ -774,8 +774,8 @@ rrc_eNB_process_S1AP_DOWNLINK_NAS(
|
|||||||
ue_initial_id = S1AP_DOWNLINK_NAS (msg_p).ue_initial_id;
|
ue_initial_id = S1AP_DOWNLINK_NAS (msg_p).ue_initial_id;
|
||||||
eNB_ue_s1ap_id = S1AP_DOWNLINK_NAS (msg_p).eNB_ue_s1ap_id;
|
eNB_ue_s1ap_id = S1AP_DOWNLINK_NAS (msg_p).eNB_ue_s1ap_id;
|
||||||
ue_context_p = rrc_eNB_get_ue_context_from_s1ap_ids(instance, ue_initial_id, eNB_ue_s1ap_id);
|
ue_context_p = rrc_eNB_get_ue_context_from_s1ap_ids(instance, ue_initial_id, eNB_ue_s1ap_id);
|
||||||
srb_id = ue_context_p->ue_context.Srb2.Srb_info.Srb_id;
|
|
||||||
|
|
||||||
LOG_I(RRC, "[eNB %d] Received %s: ue_initial_id %d, eNB_ue_s1ap_id %d\n",
|
LOG_I(RRC, "[eNB %d] Received %s: ue_initial_id %d, eNB_ue_s1ap_id %d\n",
|
||||||
instance,
|
instance,
|
||||||
msg_name,
|
msg_name,
|
||||||
@@ -822,6 +822,9 @@ rrc_eNB_process_S1AP_DOWNLINK_NAS(
|
|||||||
} else {
|
} else {
|
||||||
PROTOCOL_CTXT_SET_BY_INSTANCE(&ctxt, instance, ENB_FLAG_YES, ue_context_p->ue_context.rnti, 0, 0);
|
PROTOCOL_CTXT_SET_BY_INSTANCE(&ctxt, instance, ENB_FLAG_YES, ue_context_p->ue_context.rnti, 0, 0);
|
||||||
|
|
||||||
|
srb_id = ue_context_p->ue_context.Srb2.Srb_info.Srb_id;
|
||||||
|
|
||||||
|
|
||||||
/* Is it the first income from S1AP ? */
|
/* Is it the first income from S1AP ? */
|
||||||
if (ue_context_p->ue_context.eNB_ue_s1ap_id == 0) {
|
if (ue_context_p->ue_context.eNB_ue_s1ap_id == 0) {
|
||||||
ue_context_p->ue_context.eNB_ue_s1ap_id = S1AP_DOWNLINK_NAS (msg_p).eNB_ue_s1ap_id;
|
ue_context_p->ue_context.eNB_ue_s1ap_id = S1AP_DOWNLINK_NAS (msg_p).eNB_ue_s1ap_id;
|
||||||
|
|||||||
Reference in New Issue
Block a user