PPP timer function can free an already freed session obj on disconnect event

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Medium
    • Network Development Kit
    • NDK-558
    • 1.71
    • NDK_3_80_00

      This was discovered by a customer - see thread, which includes a workaround.

      https://e2e.ti.com/support/microcontrollers/other/f/908/t/906850

      The following free call in pppTimer() may result in a double free when there's a disconnect event (see hdlcSI(), the SI_MSG_CALLSTATUS and SI_CSTATUS_DISCONNECT cases):

      /* Remove reference */
              if( p->InUse == INUSE_IDLE )
                  pppFree( p );

            Assignee:
            TI User
            Reporter:
            TI User
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:

                Connection: Intermediate to External PROD System
                EXTSYNC-2333 - PPP timer function can free an alre...
                SYNCHRONIZED
                • Last Sync Date: