b2b_logic: fix possible crash while bridging

When processing a 200 OK while bridging, an old pointer to a temporary, already freed entity was being used when saving the out SDP for the second bridge entity.
OpenSIPS · Apr 3, 2023 · 91fdcfd · 91fdcfd
1 parent 4d0199f
commit 91fdcfd
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/b2b_logic/bridging.c b/modules/b2b_logic/bridging.c
@@ -699,6 +699,7 @@ int process_bridge_200OK(struct sip_msg* msg, str* extra_headers,
 			entity->sdp_type = B2BL_SDP_NORMAL;
 			entity->no =1;
 			tuple->bridge_entities[1] = entity;
+			bentity1 = entity;
 			if (0 != b2bl_add_client(tuple, entity))
 				return -1;
 		} else if (bentity1->type == B2B_CLIENT &&