| commit | d70e8a6de72c361870bd9202110dac933d91992f | |
| author | Vadim Yanitskiy <vyanitskiy@sysmocom.de> | |
| Thu, 23 May 2024 01:50:00 +0000 (23 08:50 +0700) | ||
| committer | Vadim Yanitskiy <vyanitskiy@sysmocom.de> | |
| Thu, 23 May 2024 01:50:54 +0000 (23 08:50 +0700) | ||
| tree | 76e0296aa414ebc70316cd31dc5124d3653ec5b5 | treesnapshot (tar.gz zip) |
| parent | 7c00190b45205c2f1d2d8e708c1f6e9dd621ff69 | commitdiff |
trxcon/l1sched: fix NULL pointer dereference in tx_tch[fh]_fn()
If msg is NULL, we're inducing a BFI condition at the BTS side receiver
by sending a TCH/A[FH]S block with invalid CRC6. In this case we need
to skip the rest of the function and jump to send_burst immediately.
Change-Id: I159b2ed455377c77d8764f9320efd15333129afb
Fixes: 7c00190b "trxcon/l1sched: fix sending dummy TCH/A[FH]S blocks"
Fixes: CID#368538
If msg is NULL, we're inducing a BFI condition at the BTS side receiver
by sending a TCH/A[FH]S block with invalid CRC6. In this case we need
to skip the rest of the function and jump to send_burst immediately.
Change-Id: I159b2ed455377c77d8764f9320efd15333129afb
Fixes: 7c00190b "trxcon/l1sched: fix sending dummy TCH/A[FH]S blocks"
Fixes: CID#368538
| src/host/trxcon/src/sched_lchan_tchf.c | diffblobblamehistory | |
| src/host/trxcon/src/sched_lchan_tchh.c | diffblobblamehistory |