{ "_class" : "hudson.matrix.MatrixBuild", "actions" : [ { "_class" : "hudson.model.CauseAction", "causes" : [ { "_class" : "org.jenkinsci.plugins.workflow.support.steps.build.BuildUpstreamCause", "shortDescription" : "Started by upstream project \"gerrit-osmo-bsc\" build number 1,716", "upstreamBuild" : 1716, "upstreamProject" : "gerrit-osmo-bsc", "upstreamUrl" : "job/gerrit-osmo-bsc/" } ] }, { }, { "_class" : "hudson.model.ParametersAction", "parameters" : [ { "_class" : "hudson.model.StringParameterValue", "name" : "COMMENT_TYPE", "value" : "" }, { "_class" : "hudson.model.StringParameterValue", "name" : "DISTRO", "value" : "" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_BRANCH", "value" : "master" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_CHANGE_NUMBER", "value" : "42010" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_HOST", "value" : "gerrit.osmocom.org" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_PATCHSET_NUMBER", "value" : "1" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_PATCHSET_REVISION", "value" : "44efd5b20b50ab894ed32ada3340fb5507b4852b" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_PATCHSET_UPLOADER_NAME", "value" : "pespin" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_PORT", "value" : "29418" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_PROJECT", "value" : "osmo-bsc" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_REFSPEC", "value" : "refs/changes/10/42010/1" }, { "_class" : "hudson.model.StringParameterValue", "name" : "GERRIT_REPO_URL", "value" : "ssh://jenkins@gerrit.osmocom.org:29418/osmo-bsc" }, { "_class" : "hudson.model.StringParameterValue", "name" : "PIPELINE_BUILD_URL", "value" : "https://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bsc/1716/" }, { "_class" : "hudson.model.StringParameterValue", "name" : "PROJECT_NAME", "value" : "osmo-bsc" }, { "_class" : "hudson.model.StringParameterValue", "name" : "BRANCH_CI", "value" : "master" } ] }, { "_class" : "jenkins.metrics.impl.TimeInQueueAction", "blockedDurationMillis" : 0, "blockedTimeMillis" : 0, "buildableDurationMillis" : 0, "buildableTimeMillis" : 0, "buildingDurationMillis" : 139069, "executingTimeMillis" : 139069, "executorUtilization" : 1.0, "subTaskCount" : 0, "waitingDurationMillis" : 8452, "waitingTimeMillis" : 8452 }, { }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "pespin/rel-1.13.1" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1672, "buildResult" : None, "marked" : { "SHA1" : "7de20fb47ca28b81b9860b74ed7743568a14cdf2", "branch" : [ { "SHA1" : "7de20fb47ca28b81b9860b74ed7743568a14cdf2", "name" : "pespin/rel-1.13.1" } ] }, "revision" : { "SHA1" : "7de20fb47ca28b81b9860b74ed7743568a14cdf2", "branch" : [ { "SHA1" : "7de20fb47ca28b81b9860b74ed7743568a14cdf2", "name" : "pespin/rel-1.13.1" } ] } }, "2023q1" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 933, "buildResult" : None, "marked" : { "SHA1" : "c77700e2ff02de4ee1ea953e825a727641d10164", "branch" : [ { "SHA1" : "c77700e2ff02de4ee1ea953e825a727641d10164", "name" : "2023q1" } ] }, "revision" : { "SHA1" : "c77700e2ff02de4ee1ea953e825a727641d10164", "branch" : [ { "SHA1" : "c77700e2ff02de4ee1ea953e825a727641d10164", "name" : "2023q1" } ] } }, "osmith/1.11.1" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1373, "buildResult" : None, "marked" : { "SHA1" : "0941436d417c109893da48649464e8a3c811b44b", "branch" : [ { "SHA1" : "0941436d417c109893da48649464e8a3c811b44b", "name" : "osmith/1.11.1" } ] }, "revision" : { "SHA1" : "0941436d417c109893da48649464e8a3c811b44b", "branch" : [ { "SHA1" : "0941436d417c109893da48649464e8a3c811b44b", "name" : "osmith/1.11.1" } ] } }, "osmith/1.9.1" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 404, "buildResult" : None, "marked" : { "SHA1" : "1ed5fbf65767a81a3827fc2cc5b10add66e11779", "branch" : [ { "SHA1" : "1ed5fbf65767a81a3827fc2cc5b10add66e11779", "name" : "osmith/1.9.1" } ] }, "revision" : { "SHA1" : "1ed5fbf65767a81a3827fc2cc5b10add66e11779", "branch" : [ { "SHA1" : "1ed5fbf65767a81a3827fc2cc5b10add66e11779", "name" : "osmith/1.9.1" } ] } }, "osmith/1.9.2" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 976, "buildResult" : None, "marked" : { "SHA1" : "67d1c27ea1aae29159f54fa65d50a74702a767ca", "branch" : [ { "SHA1" : "67d1c27ea1aae29159f54fa65d50a74702a767ca", "name" : "osmith/1.9.2" } ] }, "revision" : { "SHA1" : "67d1c27ea1aae29159f54fa65d50a74702a767ca", "branch" : [ { "SHA1" : "67d1c27ea1aae29159f54fa65d50a74702a767ca", "name" : "osmith/1.9.2" } ] } }, "osmith/1.12.3" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1573, "buildResult" : None, "marked" : { "SHA1" : "4a0f1f4213671190d3163ba38fe9f58534dd6a6f", "branch" : [ { "SHA1" : "4a0f1f4213671190d3163ba38fe9f58534dd6a6f", "name" : "osmith/1.12.3" } ] }, "revision" : { "SHA1" : "4a0f1f4213671190d3163ba38fe9f58534dd6a6f", "branch" : [ { "SHA1" : "4a0f1f4213671190d3163ba38fe9f58534dd6a6f", "name" : "osmith/1.12.3" } ] } }, "osmith/1.12.4" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1575, "buildResult" : None, "marked" : { "SHA1" : "49dde81223667770bea72f3f0cc4b378d2c0ea48", "branch" : [ { "SHA1" : "49dde81223667770bea72f3f0cc4b378d2c0ea48", "name" : "osmith/1.12.4" } ] }, "revision" : { "SHA1" : "49dde81223667770bea72f3f0cc4b378d2c0ea48", "branch" : [ { "SHA1" : "49dde81223667770bea72f3f0cc4b378d2c0ea48", "name" : "osmith/1.12.4" } ] } }, "osmith/1.13.3" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1675, "buildResult" : None, "marked" : { "SHA1" : "0cd176646030a2bf2c484e12efb8bdde4b79462f", "branch" : [ { "SHA1" : "0cd176646030a2bf2c484e12efb8bdde4b79462f", "name" : "osmith/1.13.3" } ] }, "revision" : { "SHA1" : "0cd176646030a2bf2c484e12efb8bdde4b79462f", "branch" : [ { "SHA1" : "0cd176646030a2bf2c484e12efb8bdde4b79462f", "name" : "osmith/1.13.3" } ] } }, "osmith/1.12.2" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1545, "buildResult" : None, "marked" : { "SHA1" : "be6bd146db7c2cf181bd0797ef8f9ebcee6902cb", "branch" : [ { "SHA1" : "be6bd146db7c2cf181bd0797ef8f9ebcee6902cb", "name" : "osmith/1.12.2" } ] }, "revision" : { "SHA1" : "be6bd146db7c2cf181bd0797ef8f9ebcee6902cb", "branch" : [ { "SHA1" : "be6bd146db7c2cf181bd0797ef8f9ebcee6902cb", "name" : "osmith/1.12.2" } ] } }, "osmith/1.13.1" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1668, "buildResult" : None, "marked" : { "SHA1" : "5365df321a7edf12131f02e50e2a267bd4e45dd8", "branch" : [ { "SHA1" : "5365df321a7edf12131f02e50e2a267bd4e45dd8", "name" : "osmith/1.13.1" } ] }, "revision" : { "SHA1" : "5365df321a7edf12131f02e50e2a267bd4e45dd8", "branch" : [ { "SHA1" : "5365df321a7edf12131f02e50e2a267bd4e45dd8", "name" : "osmith/1.13.1" } ] } }, "rel-1.12.1" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1472, "buildResult" : None, "marked" : { "SHA1" : "ee14219d4b764d6d1eabd122fbec150cace7044a", "branch" : [ { "SHA1" : "ee14219d4b764d6d1eabd122fbec150cace7044a", "name" : "rel-1.12.1" } ] }, "revision" : { "SHA1" : "ee14219d4b764d6d1eabd122fbec150cace7044a", "branch" : [ { "SHA1" : "ee14219d4b764d6d1eabd122fbec150cace7044a", "name" : "rel-1.12.1" } ] } }, "master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1718, "buildResult" : None, "marked" : { "SHA1" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "branch" : [ { "SHA1" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "name" : "master" } ] }, "revision" : { "SHA1" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "branch" : [ { "SHA1" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "name" : "master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "branch" : [ { "SHA1" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "name" : "master" } ] }, "remoteUrls" : [ "ssh://jenkins@gerrit.osmocom.org:29418/osmo-bsc" ], "scmName" : "" }, { }, { }, { "_class" : "org.jenkinsci.plugins.displayurlapi.actions.RunDisplayAction" } ], "artifacts" : [ ], "building" : False, "description" : None, "displayName" : "#1718", "duration" : 139069, "estimatedDuration" : 142723, "executor" : None, "fullDisplayName" : "gerrit-osmo-bsc-build #1718", "id" : "1718", "inProgress" : False, "keepLog" : False, "number" : 1718, "queueId" : 21732, "result" : "SUCCESS", "timestamp" : 1770036036560, "url" : "https://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bsc-build/1718/", "builtOn" : "", "changeSet" : { "_class" : "hudson.plugins.git.GitChangeSetList", "items" : [ { "_class" : "hudson.plugins.git.GitChangeSet", "affectedPaths" : [ "src/osmo-bsc/assignment_fsm.c" ], "commitId" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "timestamp" : 1770035588000, "author" : { "absoluteUrl" : "https://jenkins.osmocom.org/jenkins/user/pespin", "fullName" : "Pau Espin Pedrol" }, "authorEmail" : "pespin@sysmocom.de", "comment" : "assignment_fsm: Fix use-after-free of lchan->conn\u000a\u000aScenario:\u000a* A DYNAMIC/OSMOCOM TS in PDCH mode is selected to be used for TCH/F,\u000a hence the TS is being switched to TCH/F: RF Channel Release is being\u000a transmitted and waiting to receive RF Channel release ACK. Hence,\u000a lchan is in state LCHAN_ST_WAIT_TS_READY, and there's a conn with an\u000a assignment FSM pointing to it in conn->assignment.new_lchan.\u000a lchan->conn also points to the related conn.\u000a* The BSSMAP SCCP link goes down (link lost), which will terminate the\u000a conn->fi of all conns related to the MSC peer going down.\u000a During that teardown, first gscon_pre_term()->gscon_release_lchans()->\u000a assignment_reset() is called, which sets\u000a conn->assignment.new_lchan=NULL and calls lchan_release(). This path\u000a leaves conn->assignment.new_lchan->conn untouched!\u000a* Later in the call path, when finally the bsc_subscr is put() to 0\u000a references and associated lchan gets its lchan_forget_conn() called,\u000a it will access lchan->conn which was not freed in the previous step\u000a mentioned above during assignment_reset().\u000a\u000aThis patch fixes the issue by adding a lchan_forget_conn() after the\u000alchan_release() in assignment_reset(), to make sure the conn is no\u000alonger user by the lchan afterwards.\u000a\u000aRelated: OS#6936\u000aChange-Id: Ifbb9a61cd8a40d953ef5c2b52f9be9ef0dffefa4\u000a", "date" : "2026-02-02 13:33:08 +0100", "id" : "44efd5b20b50ab894ed32ada3340fb5507b4852b", "msg" : "assignment_fsm: Fix use-after-free of lchan->conn", "paths" : [ { "editType" : "edit", "file" : "src/osmo-bsc/assignment_fsm.c" } ] } ], "kind" : "git" }, "culprits" : [ { "absoluteUrl" : "https://jenkins.osmocom.org/jenkins/user/pespin", "fullName" : "Pau Espin Pedrol" } ], "runs" : [ { "number" : 1718, "url" : "https://jenkins.osmocom.org/jenkins/job/gerrit-osmo-bsc-build/a1=default,a2=default,a3=default,a4=default,label=osmocom-gerrit/1718/" } ] }