Actions
Bug #4724
closedcrash when a Paging Response contains an unknown mobile identity
Start date:
08/19/2020
Due date:
% Done:
100%
Resolution:
Spec Reference:
Description
When osmo-msc receives a Paging Response with an unknown mobile identity, msc_a_fsm_releasing_onenter() already discards all use counts.
After that, gsm48_rx_rr_pag_resp() again tries to remove the MSC_A_USE_PAGING_RESPONSE use count, resulting in a negative counter,
which the msc_a_put() macro asserts on and crashes osmo-msc.
Actions