From d7d0c10c21d0e19ed1d14f89dd46fdbd2a7e9a19 Mon Sep 17 00:00:00 2001 From: Russell Bryant Date: Wed, 24 Jan 2007 00:19:55 +0000 Subject: [PATCH] Merged revisions 51828 via svnmerge from https://origsvn.digium.com/svn/asterisk/branches/1.2 ........ r51828 | russell | 2007-01-23 18:17:50 -0600 (Tue, 23 Jan 2007) | 4 lines Don't set a new value for the END_ variable on the channel before using the old value. If you do, it will lead to accessing a memory address that has been free()'d. (issue #8895, arkadia) ........ git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@51829 65c4cc65-6c06-0410-ace0-fbb531ad65f3 --- apps/app_while.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/app_while.c b/apps/app_while.c index 33f9bbb512..8595916f30 100644 --- a/apps/app_while.c +++ b/apps/app_while.c @@ -231,8 +231,8 @@ static int _while_exec(struct ast_channel *chan, void *data, int end) pbx_builtin_setvar_helper(chan, my_name, NULL); snprintf(end_varname,VAR_SIZE,"END_%s",varname); if ((goto_str=pbx_builtin_getvar_helper(chan, end_varname))) { - pbx_builtin_setvar_helper(chan, end_varname, NULL); ast_parseable_goto(chan, goto_str); + pbx_builtin_setvar_helper(chan, end_varname, NULL); } else { int pri = find_matching_endwhile(chan); if (pri > 0) {