Check numDlUpParam size when processing DlUpParamList

openair2/LAYER2/nr_pdcp/cucp_cuup_handler.c

@@ -261,10 +261,12 @@ void e1_bearer_context_modif(const e1ap_bearer_mod_req_t *req)
       if (f1inst < 0) // no F1-U?
         continue; // nothing to do
 
-      in_addr_t addr = {0};
-      memcpy(&addr, &to_modif->DlUpParamList[0].tlAddress, sizeof(in_addr_t));
-
-      GtpuUpdateTunnelOutgoingAddressAndTeid(f1inst, req->gNB_cu_cp_ue_id, to_modif->id, addr, to_modif->DlUpParamList[0].teId);
+      /* Loop through DL UP Transport Layer params list
+       * and update GTP tunnel outgoing addr and TEID */
+      for (int k = 0; k < to_modif->numDlUpParam; k++) {
+        in_addr_t addr = to_modif->DlUpParamList[k].tlAddress;
+        GtpuUpdateTunnelOutgoingAddressAndTeid(f1inst, req->gNB_cu_cp_ue_id, to_modif->id, addr, to_modif->DlUpParamList[k].teId);
+      }
     }
   }