fix: locking the session object when it's read by the api module (fixes #349)

modules/api_rest_controller.go

@@ -186,6 +186,9 @@ func (api *RestAPI) sessionRoute(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	session.I.Lock()
+	defer session.I.Unlock()
+
 	path := r.URL.String()
 	switch {
 	case path == "/api/session":

session/session.go

@@ -108,6 +108,18 @@ func New() (*Session, error) {
 	return s, nil
 }
 
+func (s *Session) Lock() {
+	s.Env.Lock()
+	s.Lan.Lock()
+	s.WiFi.Lock()
+}
+
+func (s *Session) Unlock() {
+	s.Env.Unlock()
+	s.Lan.Unlock()
+	s.WiFi.Unlock()
+}
+
 func (s *Session) Module(name string) (err error, mod Module) {
 	for _, m := range s.Modules {
 		if m.Name() == name {