<p>See the two commits:</p>

<ul>
<li>in both cases the first item of the linked list is not freed,</li>
<li>the freed memory is read</li>
<li>lastly a NULL is freed (or in the second case, a NULL-dereference)</li>
</ul>

<hr>

<h4>You can merge this Pull Request by running</h4>
<pre>  git pull https://github.com/wdoekes/opensips wjd-xcapclient_mem_corrupt</pre>
<p>Or view, comment on, or merge it at:</p>
<p>&nbsp;&nbsp;<a href='https://github.com/OpenSIPS/opensips/pull/176'>https://github.com/OpenSIPS/opensips/pull/176</a></p>

<h4>Commit Summary</h4>
<ul>
  <li>xcap_client: Fix possible memory curruption in destroy_xcapcb_list.</li>
  <li>xcap_client: Fix memory leak and possible corruption in xcapFreeNodeSel.</li>
</ul>

<h4>File Changes</h4>
<ul>
  <li>
    <strong>M</strong>
    <a href="https://github.com/OpenSIPS/opensips/pull/176/files#diff-0">modules/xcap_client/xcap_callbacks.c</a>
    (6)
  </li>
  <li>
    <strong>M</strong>
    <a href="https://github.com/OpenSIPS/opensips/pull/176/files#diff-1">modules/xcap_client/xcap_functions.c</a>
    (4)
  </li>
</ul>

<h4>Patch Links:</h4>
<ul>
  <li><a href='https://github.com/OpenSIPS/opensips/pull/176.patch'>https://github.com/OpenSIPS/opensips/pull/176.patch</a></li>
  <li><a href='https://github.com/OpenSIPS/opensips/pull/176.diff'>https://github.com/OpenSIPS/opensips/pull/176.diff</a></li>
</ul>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br>Reply to this email directly or <a href='https://github.com/OpenSIPS/opensips/pull/176'>view it on GitHub</a>.<img src='https://github.com/notifications/beacon/5479561__eyJzY29wZSI6Ik5ld3NpZXM6QmVhY29uIiwiZXhwaXJlcyI6MTcxMDIzNTQ0MiwiZGF0YSI6eyJpZCI6Mjc0OTc3MDd9fQ==--7230fec27a55d9c1607eb164a44fb82cd70068e0.gif' height='1' width='1'></p>