Files
open5gs/lib
Sukchan Lee 0bf649226b [SBI] Prevent UAF/double-free by using pool ID in timer callbacks (#4074)
- Use ogs_pool_id_calloc() / ogs_pool_id_free() instead of ogs_pool_alloc() / ogs_pool_free()
  to assign stable pool IDs to connection_t and ogs_sbi_session_t.
- Pass pool ID to ogs_timer_add() instead of raw pointer.
- In connection_timer_expired() and session_timer_expired(), resolve object via
  ogs_pool_find_by_id() and safely return if the object has already been freed.
- Add safety checks and error logs for invalid IDs and missing objects.

This prevents use-after-free or double-free crashes when timer callbacks
are triggered after the object has been freed under heavy load.
2025-09-17 21:50:47 +09:00
..
2025-04-06 18:36:57 +09:00
2025-04-06 18:37:36 +09:00
2025-06-17 17:34:46 +09:00
2025-09-14 10:36:00 +09:00
2025-06-17 17:34:18 +09:00