ofono/drivers/atmodem
Slava Monich 4a2915d52d atmodem: Fix use after free in sim_state_cb
==2941== Invalid read of size 4
==2941==    at 0x69338: sim_state_cb (sim.c:1301)
==2941==    by 0x71DCB: cpin_check_cb (atutil.c:567)
==2941==    by 0xA602B: at_chat_finish_command (gatchat.c:459)
==2941==    by 0xA6277: at_chat_handle_command_response (gatchat.c:521)
==2941==    by 0xA6587: have_line (gatchat.c:600)
==2941==    by 0xA6BB7: new_bytes (gatchat.c:759)
==2941==    by 0xAAFAF: received_data (gatio.c:124)
==2941==    by 0x4AF606F: g_main_dispatch (gmain.c:3154)
==2941==    by 0x4AF606F: g_main_context_dispatch (gmain.c:3769)
==2941==    by 0x4AF658F: g_main_loop_run (gmain.c:4034)
==2941==    by 0xBDDBB: main (main.c:261)
==2941==  Address 0x519c344 is 4 bytes inside a block of size 12 free'd
==2941==    at 0x4840B28: free (vg_replace_malloc.c:530)
==2941==    by 0x71F33: at_util_sim_state_query_free (atutil.c:613)
==2941==    by 0x6930B: sim_state_cb (sim.c:1297)
==2941==    by 0x71DCB: cpin_check_cb (atutil.c:567)
==2941==    by 0xA602B: at_chat_finish_command (gatchat.c:459)
==2941==    by 0xA6277: at_chat_handle_command_response (gatchat.c:521)
==2941==    by 0xA6587: have_line (gatchat.c:600)
==2941==    by 0xA6BB7: new_bytes (gatchat.c:759)
==2941==    by 0xAAFAF: received_data (gatio.c:124)
==2941==    by 0x4AF606F: g_main_dispatch (gmain.c:3154)
==2941==    by 0x4AF606F: g_main_context_dispatch (gmain.c:3769)
==2941==    by 0x4AF658F: g_main_loop_run (gmain.c:4034)
==2941==    by 0xBDDBB: main (main.c:261)
2017-10-05 11:11:13 -05:00
..
atmodem.c atmodem: Add lte atom driver 2017-09-05 10:44:22 -05:00
atmodem.h atmodem: Add lte atom driver 2017-09-05 10:44:22 -05:00
atutil.c atutil: Add logic for cgcontrdp to get address and netmask 2017-09-13 10:26:35 -05:00
atutil.h atutil: Add logic for cgcontrdp to get address and netmask 2017-09-13 10:26:35 -05:00
call-barring.c atmodem: remove pending idle callbacks at removal 2012-12-04 23:48:14 -06:00
call-forwarding.c atmodem: remove pending idle callbacks at removal 2012-12-04 23:48:14 -06:00
call-meter.c drivers: Update copyright information 2011-10-10 13:39:48 -07:00
call-settings.c atmodem: remove pending idle callbacks at removal 2012-12-04 23:48:14 -06:00
call-volume.c drivers: Update copyright information 2011-10-10 13:39:48 -07:00
cbs.c atmodem: Re-work the CBS driver 2012-12-04 23:47:58 -06:00
devinfo.c drivers: Update copyright information 2011-10-10 13:39:48 -07:00
gnss.c drivers: Update copyright information 2011-10-10 13:39:48 -07:00
gprs-context.c at/cdma/ifxmodem: Use /dev/net/tun to check for TUN support 2017-08-22 23:24:59 -05:00
gprs.c atmodem: correctly report lte bearer for huawei modems 2017-09-07 11:41:01 -05:00
lte.c atmodem: Add lte atom driver 2017-09-05 10:44:22 -05:00
network-registration.c atmodem: correctly report lte bearer for huawei modems 2017-09-07 11:41:01 -05:00
phonebook.c drivers: Update copyright information 2011-10-10 13:39:48 -07:00
sim-auth.c atmodem: remove pending idle callbacks at removal 2012-12-04 23:48:14 -06:00
sim.c atmodem: Fix use after free in sim_state_cb 2017-10-05 11:11:13 -05:00
sms.c atmodem: Fix SMS reception for Gemalto modems 2017-04-21 11:02:05 -05:00
stk.c atmodem: remove pending idle callbacks at removal 2012-12-04 23:48:14 -06:00
stk.h drivers: Update copyright information 2011-10-10 13:39:48 -07:00
ussd.c atmodem: Remove ussd atom in case we fail to init 2012-04-16 13:15:52 -05:00
vendor.h ifxmodem: support automatic context activation 2017-09-13 10:27:32 -05:00
voicecall.c atmodem: use g_slist_free_full 2016-04-22 15:20:11 -05:00