• David Howells's avatar
    rxrpc: Don't access connection from call if pointer is NULL · f9dc5757
    David Howells authored
    The call state machine processor sets up the message parameters for a UDP
    message that it might need to transmit in advance on the basis that there's
    a very good chance it's going to have to transmit either an ACK or an
    ABORT.  This requires it to look in the connection struct to retrieve some
    of the parameters.
    
    However, if the call is complete, the call connection pointer may be NULL
    to dissuade the processor from transmitting a message.  However, there are
    some situations where the processor is still going to be called - and it's
    still going to set up message parameters whether it needs them or not.
    
    This results in a NULL pointer dereference at:
    
    	net/rxrpc/call_event.c:837
    
    To fix this, skip the message pre-initialisation if there's no connection
    attached.
    Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
    f9dc5757
call_event.c 32.6 KB