2009-04-29 14:26:20

by Stuart Pook

[permalink] [raw]
Subject: bluetoothd 4.37 -> Segmentation fault

Hello

I'm getting Segmentation faults with bluez 4.37 and linux 2.6.30-rc2. I'm using a Linksys USBBT100 Bluetooth USB Adapter and a Jabra JX10 headset. Note that this seg fault came after I typed control-C. I typed control-C because the headset was not working with twinkle. Sometimes I'd get one-way audio (I'd hear but nothing was sent) and sometimes bluetoothd would say disconnected after a few seconds. I was unable to telephone this morning :-(.

I'm certain (?) that twinkle and bluetoothd are using the same libraries.

My VoIP client twinkle gets errors as well

:; twinkle ALSA lib pcm_bluetooth.c:1607:(audioservice_expect) BT_START_STREAM failed : Success(0)
ALSA lib pcm_bluetooth.c:1566:(audioservice_recv) Too short (1 bytes) IPC packet from bluetoothd
KCrash: Application 'twinkle' crashing...


:; twinkle ALSA lib pcm_bluetooth.c:1566:(audioservice_recv) Too short (0 bytes) IPC packet from bluetoothd
ALSA lib pcm_bluetooth.c:1607:(audioservice_expect) BT_START_STREAM failed : Success(0)
ALSA lib pcm_bluetooth.c:1566:(audioservice_recv) Too short (1 bytes) IPC packet from bluetoothd


: root; valgrind /usr/local/sbin/bluetoothd -dn
==6697== Memcheck, a memory error detector.
==6697== Copyright (C) 2002-2008, and GNU GPL'd, by Julian Seward et al.
==6697== Using LibVEX rev 1884, a library for dynamic binary translation.
==6697== Copyright (C) 2004-2008, and GNU GPL'd, by OpenWorks LLP.
==6697== Using valgrind-3.4.1-Debian, a dynamic binary instrumentation framework.
==6697== Copyright (C) 2000-2008, and GNU GPL'd, by Julian Seward et al.
==6697== For more details, rerun with: -v
==6697== bluetoothd[6697]: Bluetooth daemon 4.37
bluetoothd[6697]: Enabling debug information
bluetoothd[6697]: parsing main.conf
bluetoothd[6697]: discovto=0
bluetoothd[6697]: Key file does not have key 'PairableTimeout'
bluetoothd[6697]: pageto=8192
bluetoothd[6697]: name=%h-%d
bluetoothd[6697]: class=0x000100
bluetoothd[6697]: inqmode=0
bluetoothd[6697]: Key file does not have key 'InitiallyPowered'
bluetoothd[6697]: Key file does not have key 'RememberPowered'
bluetoothd[6697]: Key file does not have key 'DeviceID'
bluetoothd[6697]: Key file does not have key 'ReverseServiceDiscovery'
bluetoothd[6697]: Starting SDP server
bluetoothd[6697]: Loading plugins /usr/local/lib/bluetooth/plugins
bluetoothd[6697]: Parsing /etc/bluetooth/audio.conf failed: No such file or directory
bluetoothd[6697]: Unix socket created: 10
bluetoothd[6697]: Telephony plugin initialized
bluetoothd[6697]: HFP AG features: "Ability to reject a call" "Enhanced call status" "Extended Error Result Codes" bluetoothd[6697]: register_interface: path /org/bluez/6697/any
bluetoothd[6697]: Registered interface org.bluez.Service on path /org/bluez/6697/any
bluetoothd[6697]: HCI dev 0 registered
==6700== Syscall param ioctl(generic) points to unaddressable byte(s)
==6700== at 0x40007F2: (within /lib/ld-2.9.so)
==6700== by 0x112A5B: main (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6700== Address 0x0 is not stack'd, malloc'd or (recently) free'd
bluetoothd[6697]: child 6700 forked
bluetoothd[6697]: Entering main loop
==6700== ==6700== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 45 from 3)
==6700== malloc/free: in use at exit: 29,135 bytes in 329 blocks.
==6700== malloc/free: 638 allocs, 309 frees, 241,425 bytes allocated.
==6700== For counts of detected errors, rerun with: -v
==6700== searching for pointers to 329 not-freed blocks.
==6700== checked 114,748 bytes.
==6700== ==6700== LEAK SUMMARY:
==6700== definitely lost: 0 bytes in 0 blocks.
==6700== possibly lost: 744 bytes in 3 blocks.
==6700== still reachable: 28,391 bytes in 326 blocks.
==6700== suppressed: 0 bytes in 0 blocks.
==6700== Rerun with --leak-check=full to see details of leaked memory.
bluetoothd[6697]: child 6700 exited
bluetoothd[6697]: HCI dev 0 up
bluetoothd[6697]: Starting security manager 0
bluetoothd[6697]: headset_server_probe: path /org/bluez/6697/hci0
bluetoothd[6697]: Adding record with handle 0x10000
bluetoothd[6697]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001108-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001112-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[6697]: Adding record with handle 0x10001
bluetoothd[6697]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000111e-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000111f-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[6697]: a2dp_server_probe: path /org/bluez/6697/hci0
bluetoothd[6697]: SEP 0x4b522f8 registered: type:0 codec:0 seid:1
bluetoothd[6697]: Adding record with handle 0x10002
bluetoothd[6697]: Record pattern UUID 00000019-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000110a-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000110d-0000-1000-8000-00805f9
bluetoothd[6697]: avrcp_server_probe: path /org/bluez/6697/hci0
bluetoothd[6697]: Adding record with handle 0x10003
bluetoothd[6697]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000110c-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[6697]: Adding record with handle 0x10004
bluetoothd[6697]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[6697]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[6697]: register_interface: path /org/bluez/6697/hci0
bluetoothd[6697]: Registered interface org.bluez.Service on path /org/bluez/6697/hci0
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98
bluetoothd[6697]: btd_device_ref(0x4b82c50): ref=1
bluetoothd[6697]: Probe drivers for /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98
bluetoothd[6697]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[6697]: btd_device_ref(0x4b82c50): ref=2
bluetoothd[6697]: Registered interface org.bluez.Audio on path /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98
bluetoothd[6697]: Found Headset record
bluetoothd[6697]: Registered interface org.bluez.Headset on path /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98
bluetoothd[6697]: Found Handsfree record
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_14_A7_74_D3_AF
bluetoothd[6697]: btd_device_ref(0x4b9fe98): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_03_89_B7_F8_D3
bluetoothd[6697]: btd_device_ref(0x4ba4d90): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_0A_94_94_4F_B3
bluetoothd[6697]: btd_device_ref(0x4ba9c98): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_03_89_DC_5C_9F
bluetoothd[6697]: btd_device_ref(0x4baeb58): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_03_89_DC_FC_EC
bluetoothd[6697]: btd_device_ref(0x4bb3a68): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_03_89_FE_E6_19
bluetoothd[6697]: btd_device_ref(0x4bb8928): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_0E_6D_8F_91_6A
bluetoothd[6697]: btd_device_ref(0x4bbd7e8): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_17_E5_E6_25_AB
bluetoothd[6697]: btd_device_ref(0x4bc26a8): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_17_E5_16_88_6C
bluetoothd[6697]: btd_device_ref(0x4bc75d8): ref=1
bluetoothd[6697]: Creating device /org/bluez/6697/hci0/dev_00_17_E5_0C_EA_70
bluetoothd[6697]: btd_device_ref(0x4bcc498): ref=1
bluetoothd[6697]: Changing service classes to 0x480104
bluetoothd[6697]: Adapter /org/bluez/6697/hci0 has been enabled
bluetoothd[6697]: Computer is classified as desktop
bluetoothd[6697]: Current device class is 0x480104
bluetoothd[6697]: Setting 0x000104 for major/minor device class
bluetoothd[6697]: Changing major/minor class to 0x480104
bluetoothd[6697]: Agent registered for hci0 at :1.22:/org/bluez/agent/hci0
bluetoothd[6697]: Accepted new client connection on unix socket (fd=13)
bluetoothd[6697]: Audio API: BT_REQUEST <- BT_GET_CAPABILITIES
bluetoothd[6697]: Audio API: BT_RESPONSE -> BT_GET_CAPABILITIES
bluetoothd[6697]: Audio API: BT_REQUEST <- BT_OPEN
bluetoothd[6697]: open sco - object=ANY source=ANY destination=00:1A:45:2F:49:98 lock=write
bluetoothd[6697]: Audio API: BT_RESPONSE -> BT_OPEN
bluetoothd[6697]: Audio API: BT_REQUEST <- BT_SET_CONFIGURATION
bluetoothd[6697]: State changed /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
bluetoothd[6697]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[6697]: Discovered Handsfree service on RFCOMM channel 1
bluetoothd[6697]: /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98: Connecting to 00:1A:45:2F:49:98 channel 1
bluetoothd[6697]: link_key_request (sba=00:0C:41:E1:FF:30, dba=00:1A:45:2F:49:98)
bluetoothd[6697]: kernel auth requirements = 0x00
bluetoothd[6697]: stored link key type = 0x00
bluetoothd[6697]: Connection refused (111)
bluetoothd[6697]: Audio API: BT_RESPONSE -> BT_SET_CONFIGURATION
bluetoothd[6697]: telephony-dummy: device 0x4b93f20 disconnected
bluetoothd[6697]: State changed /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
bluetoothd[6697]: Audio API: BT_REQUEST <- BT_START_STREAM
bluetoothd[6697]: State changed /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
^Cbluetoothd[6697]: Removing adapter /org/bluez/6697/hci0
bluetoothd[6697]: headset_server_remove: path /org/bluez/6697/hci0
bluetoothd[6697]: Removing record with handle 0x10000
bluetoothd[6697]: Removing record with handle 0x10001
bluetoothd[6697]: a2dp_server_remove: path /org/bluez/6697/hci0
bluetoothd[6697]: Removing record with handle 0x10002
bluetoothd[6697]: avrcp_server_remove: path /org/bluez/6697/hci0
bluetoothd[6697]: Removing record with handle 0x10004
bluetoothd[6697]: Removing record with handle 0x10003
bluetoothd[6697]: unregister_interface: path /org/bluez/6697/hci0
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98
bluetoothd[6697]: Headset unregistered while device was connected!
bluetoothd[6697]: telephony-dummy: device 0x4b93f20 disconnected
bluetoothd[6697]: State changed /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
bluetoothd[6697]: Unregistered interface org.bluez.Headset on path /org/bluez/6697/hci0/dev_00_1A_45_2F_49_98
bluetoothd[6697]: btd_device_unref(0x4b82c50): ref=1
bluetoothd[6697]: btd_device_unref(0x4b82c50): ref=0
bluetoothd[6697]: device_free(0x4b82c50)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_14_A7_74_D3_AF
bluetoothd[6697]: btd_device_unref(0x4b9fe98): ref=0
bluetoothd[6697]: device_free(0x4b9fe98)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_03_89_B7_F8_D3
bluetoothd[6697]: btd_device_unref(0x4ba4d90): ref=0
bluetoothd[6697]: device_free(0x4ba4d90)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_0A_94_94_4F_B3
bluetoothd[6697]: btd_device_unref(0x4ba9c98): ref=0
bluetoothd[6697]: device_free(0x4ba9c98)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_03_89_DC_5C_9F
bluetoothd[6697]: btd_device_unref(0x4baeb58): ref=0
bluetoothd[6697]: device_free(0x4baeb58)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_03_89_DC_FC_EC
bluetoothd[6697]: btd_device_unref(0x4bb3a68): ref=0
bluetoothd[6697]: device_free(0x4bb3a68)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_03_89_FE_E6_19
bluetoothd[6697]: btd_device_unref(0x4bb8928): ref=0
bluetoothd[6697]: device_free(0x4bb8928)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_0E_6D_8F_91_6A
bluetoothd[6697]: btd_device_unref(0x4bbd7e8): ref=0
bluetoothd[6697]: device_free(0x4bbd7e8)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_17_E5_E6_25_AB
bluetoothd[6697]: btd_device_unref(0x4bc26a8): ref=0
bluetoothd[6697]: device_free(0x4bc26a8)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_17_E5_16_88_6C
bluetoothd[6697]: btd_device_unref(0x4bc75d8): ref=0
bluetoothd[6697]: device_free(0x4bc75d8)
bluetoothd[6697]: Removing device /org/bluez/6697/hci0/dev_00_17_E5_0C_EA_70
bluetoothd[6697]: btd_device_unref(0x4bcc498): ref=0
bluetoothd[6697]: device_free(0x4bcc498)
==6697== Syscall param ioctl(generic) points to unaddressable byte(s)
==6697== at 0x40007F2: (within /lib/ld-2.9.so)
==6697== by 0x11C81A: manager_remove_adapter (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== by 0x489EF06: g_slist_foreach (in /usr/lib/libglib-2.0.so.0.2000.1)
==6697== by 0x11CC21: manager_cleanup (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== by 0x126EC9: hcid_dbus_exit (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== by 0x112ADD: main (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== Address 0x0 is not stack'd, malloc'd or (recently) free'd
bluetoothd[6697]: Releasing agent :1.22, /org/bluez/agent/hci0
bluetoothd[6697]: Cleanup plugins
==6697== ==6697== Invalid read of size 4
==6697== at 0x4EE97E7: headset_cancel_stream (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x4EE222A: client_free (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x489EF06: g_slist_foreach (in /usr/lib/libglib-2.0.so.0.2000.1)
==6697== by 0x4EE2161: unix_exit (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x4EE19B5: audio_exit (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x11807C: plugin_cleanup (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== by 0x112AE4: main (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== Address 0x1c is not stack'd, malloc'd or (recently) free'd
==6697== ==6697== Process terminating with default action of signal 11 (SIGSEGV)
==6697== Access not within mapped region at address 0x1C
==6697== at 0x4EE97E7: headset_cancel_stream (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x4EE222A: client_free (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x489EF06: g_slist_foreach (in /usr/lib/libglib-2.0.so.0.2000.1)
==6697== by 0x4EE2161: unix_exit (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x4EE19B5: audio_exit (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
==6697== by 0x11807C: plugin_cleanup (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== by 0x112AE4: main (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
==6697== If you believe this happened as a result of a stack overflow in your
==6697== program's main thread (unlikely but possible), you can try to increase
==6697== the size of the main thread stack using the --main-stacksize= flag.
==6697== The main thread stack size used in this run was 8388608.
==6697== ==6697== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 45 from 3)
==6697== malloc/free: in use at exit: 34,878 bytes in 375 blocks.
==6697== malloc/free: 3,098 allocs, 2,723 frees, 1,846,161 bytes allocated.
==6697== For counts of detected errors, rerun with: -v
==6697== searching for pointers to 375 not-freed blocks.
==6697== checked 115,248 bytes.
==6697== ==6697== LEAK SUMMARY:
==6697== definitely lost: 36 bytes in 2 blocks.
==6697== possibly lost: 744 bytes in 3 blocks.
==6697== still reachable: 34,098 bytes in 370 blocks.
==6697== suppressed: 0 bytes in 0 blocks.
==6697== Rerun with --leak-check=full to see details of leaked memory.
Segmentation fault


2009-04-29 20:22:28

by Stuart Pook

[permalink] [raw]
Subject: bluetoothd git + aplay -> pcm_write:1442: write error: Input/output error

hi Luiz

On 29/04/09 21:37, Luiz Augusto von Dentz wrote:
> These looks like a ctrl+c case, although still a bug which should be
> investigates this has nothing to do with the crash you have
> experienced before.

Yes and I must admit that I don't really care what bluetoothd does when I kill it. I'd just like it to connect to my headset to I can talk to people!

I unplugged and replugged my bluetooth dongle. aplay gets a little further but dies after about 1 second. Tis been a long time sine aplay last worked.

Twinkle seems to work. Well it worked twice then for the following calls it just recorded noise.

:; aplay -vv -D JX10 /home/stuart/ws/music_test/Rebecca_Pidgeon-You_Got_Me-8000-mono.wav
Playing WAVE '/home/stuart/ws/music_test/Rebecca_Pidgeon-You_Got_Me-8000-mono.wav' : Signed 16 bit Little Endian, Rate 8000 Hz, Mono
Bluetooth Audio Device
Its setup is:
stream : PLAYBACK
access : RW_INTERLEAVED
format : S16_LE
subformat : STD
channels : 1
rate : 8000
exact rate : 8000 (8000/1)
msbits : 16
buffer_size : 4000
period_size : 1000
period_time : 125000
tstamp_mode : NONE
period_step : 1
avail_min : 1000
period_event : 0
start_threshold : 4000
stop_threshold : 4000
silence_threshold: 0
silence_size : 0
boundary : 2097152000
#+ | 00%aplay: pcm_write:1442: write error: Input/output error


: root; valgrind src/.libs/bluetoothd -dn
==19997== Memcheck, a memory error detector.
==19997== Copyright (C) 2002-2008, and GNU GPL'd, by Julian Seward et al.
==19997== Using LibVEX rev 1884, a library for dynamic binary translation.
==19997== Copyright (C) 2004-2008, and GNU GPL'd, by OpenWorks LLP.
==19997== Using valgrind-3.4.1-Debian, a dynamic binary instrumentation framework.
==19997== Copyright (C) 2000-2008, and GNU GPL'd, by Julian Seward et al.
==19997== For more details, rerun with: -v
==19997==
bluetoothd[19997]: Bluetooth daemon 4.37
bluetoothd[19997]: Enabling debug information
bluetoothd[19997]: parsing main.conf
bluetoothd[19997]: discovto=0
bluetoothd[19997]: Key file does not have key 'PairableTimeout'
bluetoothd[19997]: pageto=8192
bluetoothd[19997]: name=%h-%d
bluetoothd[19997]: class=0x000100
bluetoothd[19997]: inqmode=0
bluetoothd[19997]: Key file does not have key 'InitiallyPowered'
bluetoothd[19997]: Key file does not have key 'RememberPowered'
bluetoothd[19997]: Key file does not have key 'DeviceID'
bluetoothd[19997]: Key file does not have key 'ReverseServiceDiscovery'
bluetoothd[19997]: Starting SDP server
bluetoothd[19997]: Loading plugins /home/stuart/ws/install/bluez/git/bluez/plugins
bluetoothd[19997]: Parsing /etc/bluetooth/audio.conf failed: No such file or directory
bluetoothd[19997]: Unix socket created: 7
bluetoothd[19997]: Telephony plugin initialized
bluetoothd[19997]: HFP AG features: "Ability to reject a call" "Enhanced call status" "Extended Error Result Codes"
bluetoothd[19997]: register_interface: path /org/bluez/19997/any
bluetoothd[19997]: Registered interface org.bluez.Service on path /org/bluez/19997/any
bluetoothd[19997]: HCI dev 0 registered
bluetoothd[19997]: child 20000 forked
bluetoothd[19997]: Entering main loop
==20000== Syscall param ioctl(generic) points to unaddressable byte(s)
==20000== at 0x40007F2: (within /lib/ld-2.9.so)
==20000== by 0x4832513: device_devreg_setup (hciops.c:226)
==20000== by 0x4832638: device_event (hciops.c:255)
==20000== by 0x483279E: init_known_adapters (hciops.c:301)
==20000== by 0x4832BC6: hciops_setup (hciops.c:412)
==20000== by 0x11E5B8: manager_init_adapters (manager.c:552)
==20000== by 0x11240A: main (main.c:414)
==20000== Address 0x0 is not stack'd, malloc'd or (recently) free'd
bluetoothd[19997]: HCI dev 0 up
bluetoothd[19997]: Starting security manager 0
==20000==
==20000== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 77 from 3)
==20000== malloc/free: in use at exit: 30,146 bytes in 335 blocks.
==20000== malloc/free: 652 allocs, 317 frees, 242,876 bytes allocated.
==20000== For counts of detected errors, rerun with: -v
==20000== searching for pointers to 335 not-freed blocks.
==20000== checked 119,956 bytes.
==20000==
==20000== LEAK SUMMARY:
==20000== definitely lost: 0 bytes in 0 blocks.
==20000== possibly lost: 744 bytes in 3 blocks.
==20000== still reachable: 29,402 bytes in 332 blocks.
==20000== suppressed: 0 bytes in 0 blocks.
==20000== Rerun with --leak-check=full to see details of leaked memory.
bluetoothd[19997]: headset_server_probe: path /org/bluez/19997/hci0
bluetoothd[19997]: Adding record with handle 0x10000
bluetoothd[19997]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001108-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001112-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[19997]: Adding record with handle 0x10001
bluetoothd[19997]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000111e-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000111f-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[19997]: a2dp_server_probe: path /org/bluez/19997/hci0
bluetoothd[19997]: SEP 0x4b50968 registered: type:0 codec:0 seid:1
bluetoothd[19997]: Adding record with handle 0x10002
bluetoothd[19997]: Record pattern UUID 00000019-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000110a-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000110d-0000-1000-8000-00805f9
bluetoothd[19997]: avrcp_server_probe: path /org/bluez/19997/hci0
bluetoothd[19997]: Adding record with handle 0x10003
bluetoothd[19997]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000110c-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[19997]: Adding record with handle 0x10004
bluetoothd[19997]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19997]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[19997]: register_interface: path /org/bluez/19997/hci0
bluetoothd[19997]: Registered interface org.bluez.Service on path /org/bluez/19997/hci0
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19997]: btd_device_ref(0x4b812d8): ref=1
bluetoothd[19997]: Probe drivers for /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19997]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[19997]: btd_device_ref(0x4b812d8): ref=2
bluetoothd[19997]: Registered interface org.bluez.Audio on path /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19997]: Found Headset record
bluetoothd[19997]: Registered interface org.bluez.Headset on path /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19997]: Found Handsfree record
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_14_A7_74_D3_AF
bluetoothd[19997]: btd_device_ref(0x4b9e5e8): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_03_89_B7_F8_D3
bluetoothd[19997]: btd_device_ref(0x4ba34e0): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_0A_94_94_4F_B3
bluetoothd[19997]: btd_device_ref(0x4ba83e8): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_03_89_DC_5C_9F
bluetoothd[19997]: btd_device_ref(0x4bad2a8): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_03_89_DC_FC_EC
bluetoothd[19997]: btd_device_ref(0x4bb21b8): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_03_89_FE_E6_19
bluetoothd[19997]: btd_device_ref(0x4bb7078): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_0E_6D_8F_91_6A
bluetoothd[19997]: btd_device_ref(0x4bbbf38): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_17_E5_E6_25_AB
bluetoothd[19997]: btd_device_ref(0x4bc0df8): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_17_E5_16_88_6C
bluetoothd[19997]: btd_device_ref(0x4bc5d28): ref=1
bluetoothd[19997]: Creating device /org/bluez/19997/hci0/dev_00_17_E5_0C_EA_70
bluetoothd[19997]: btd_device_ref(0x4bcabe8): ref=1
bluetoothd[19997]: Changing service classes to 0x480104
bluetoothd[19997]: Adapter /org/bluez/19997/hci0 has been enabled
bluetoothd[19997]: child 20000 exited
bluetoothd[19997]: Computer is classified as desktop
bluetoothd[19997]: Current device class is 0x480104
bluetoothd[19997]: Setting 0x000104 for major/minor device class
bluetoothd[19997]: Changing major/minor class to 0x480104
bluetoothd[19997]: Agent registered for hci0 at :1.22:/org/bluez/agent/hci0
bluetoothd[19997]: Accepted new client connection on unix socket (fd=13)
bluetoothd[19997]: Audio API: BT_REQUEST <- BT_GET_CAPABILITIES
bluetoothd[19997]: Audio API: BT_RESPONSE -> BT_GET_CAPABILITIES
bluetoothd[19997]: Audio API: BT_REQUEST <- BT_OPEN
bluetoothd[19997]: open sco - object=ANY source=ANY destination=00:1A:45:2F:49:98 lock=write
bluetoothd[19997]: Audio API: BT_RESPONSE -> BT_OPEN
bluetoothd[19997]: Audio API: BT_REQUEST <- BT_SET_CONFIGURATION
bluetoothd[19997]: State changed /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
bluetoothd[19997]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[19997]: Discovered Handsfree service on RFCOMM channel 1
bluetoothd[19997]: /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: Connecting to 00:1A:45:2F:49:98 channel 1
bluetoothd[19997]: link_key_request (sba=00:0C:41:E1:FF:30, dba=00:1A:45:2F:49:98)
bluetoothd[19997]: kernel auth requirements = 0x00
bluetoothd[19997]: stored link key type = 0x00
bluetoothd[19997]: /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: Connected to 00:1A:45:2F:49:98
bluetoothd[19997]: Received AT+BRSF=27
bluetoothd[19997]: HFP HF features: "EC and/or NR function" "Call waiting and 3-way calling" "Voice recognition activation" "Remote volume control"
bluetoothd[19997]: Received AT+CIND=?
bluetoothd[19997]: Received AT+CIND?
bluetoothd[19997]: Received AT+CMER=3, 0, 0, 1
bluetoothd[19997]: Event reporting (CMER): mode=3, ind=1
bluetoothd[19997]: HFP Service Level Connection established
bluetoothd[19997]: telephony-dummy: device 0x4b925a8 connected
bluetoothd[19997]: State changed /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_CONNECTED
bluetoothd[19997]: Audio API: BT_RESPONSE -> BT_SET_CONFIGURATION
bluetoothd[19997]: Audio API: BT_REQUEST <- BT_START_STREAM
bluetoothd[19997]: State changed /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECTED -> HEADSET_STATE_PLAY_IN_PROGRESS
bluetoothd[19997]: Received AT+VGS=00
bluetoothd[19997]: SCO socket opened for headset /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19997]: SCO fd=20
bluetoothd[19997]: Audio API: BT_RESPONSE -> BT_START_STREAM
bluetoothd[19997]: Audio API: BT_INDICATION -> BT_NEW_STREAM
bluetoothd[19997]: State changed /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_PLAY_IN_PROGRESS -> HEADSET_STATE_PLAYING
bluetoothd[19997]: Unix client disconnected (fd=13)
bluetoothd[19997]: State changed /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_PLAYING -> HEADSET_STATE_CONNECTED
bluetoothd[19997]: client_free(0x4be9968)
bluetoothd[19997]: No matching connection found for handle 44
bluetoothd[19997]: telephony-dummy: device 0x4b925a8 disconnected
bluetoothd[19997]: State changed /org/bluez/19997/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECTED -> HEADSET_STATE_DISCONNECTED



--
If the From address bounces, please see http://www.pook.it/.

2009-04-29 19:37:16

by Luiz Augusto von Dentz

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

Hi Stuart,

On Wed, Apr 29, 2009 at 3:29 PM, Stuart Pook <[email protected]> wrote:
> ^Cbluetoothd[19530]: Removing adapter /org/bluez/19530/hci0
> bluetoothd[19530]: Removing device
> /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
> bluetoothd[19530]: Headset unregistered while device was connected!
> bluetoothd[19530]: telephony-dummy: device 0x4b925a8 disconnected
> bluetoothd[19530]: State changed
> /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98:
> HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
> bluetoothd[19530]: Unregistered interface org.bluez.Headset on path
> /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
> bluetoothd[19530]: unix_device_removed(0x4b925a8)
> ==19530== Invalid read of size 4
> ==19530== ? ?at 0x4EEE6A0: headset_unlock (headset.c:2555)
> ==19530== ? ?by 0x4EE4876: start_close (unix.c:1174)
> ==19530== ? ?by 0x4EE5B5B: unix_device_removed (unix.c:1674)
> ==19530== ? ?by 0x4EE9889: audio_device_unregister (device.c:630)
> ==19530== ? ?by 0x4EE776D: audio_remove (manager.c:759)
> ==19530== ? ?by 0x126799: device_remove (device.c:842)
> ==19530== ? ?by 0x123AA5: adapter_remove (adapter.c:2461)
> ==19530== ? ?by 0x11DEEA: manager_remove_adapter (manager.c:316)
> ==19530== ? ?by 0x489EF06: g_slist_foreach (in
> /usr/lib/libglib-2.0.so.0.2000.1)
> ==19530== ? ?by 0x11DF22: manager_cleanup (manager.c:321)
> ==19530== ? ?by 0x129686: hcid_dbus_exit (dbus-common.c:158)
> ==19530== ? ?by 0x11243F: main (main.c:426)
> ==19530== ?Address 0x464 is not stack'd, malloc'd or (recently) free'd
> ==19530== ==19530== Process terminating with default action of signal 11

These looks like a ctrl+c case, although still a bug which should be
investigates this has nothing to do with the crash you have
experienced before.

--
Luiz Augusto von Dentz
Engenheiro de Computa??o

2009-04-29 18:29:40

by Stuart Pook

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

hi Johan

On 29/04/09 19:42, Johan Hedberg wrote:
> The protocol doesn't change very often. Last time it changed was between
> 4.33 and 4.34. So it should be fine to use latest git with 4.37 plugins.

this is what I'm going. Mostly twinkle hangs until I type control-C at bluetoothd. Somethings twinkle crashes. Sometimes I get audio for 5 seconds and then the audio just stops.

:; twinkle
ALSA lib pcm_bluetooth.c:1607:(audioservice_expect) BT_START_STREAM failed : Success(0)
ALSA lib pcm_bluetooth.c:1566:(audioservice_recv) Too short (1 bytes) IPC packet from bluetoothd
KCrash: Application 'twinkle' crashing...
KCrash cannot reach kdeinit, launching directly.
:; twinkle
warning: The VAD has been replaced by a hack pending a complete rewrite
ALSA lib pcm_bluetooth.c:1566:(audioservice_recv) Too short (0 bytes) IPC packet from bluetoothd
KCrash: Application 'twinkle' crashing...
KCrash cannot reach kdeinit, launching directly.

I did a pull just a few minutes ago. I don't know any simple to let you know exactly what commits I have.

: root; valgrind src/.libs/bluetoothd -dn
==19530== Memcheck, a memory error detector.
==19530== Copyright (C) 2002-2008, and GNU GPL'd, by Julian Seward et al.
==19530== Using LibVEX rev 1884, a library for dynamic binary translation.
==19530== Copyright (C) 2004-2008, and GNU GPL'd, by OpenWorks LLP.
==19530== Using valgrind-3.4.1-Debian, a dynamic binary instrumentation framework.
==19530== Copyright (C) 2000-2008, and GNU GPL'd, by Julian Seward et al.
==19530== For more details, rerun with: -v
==19530==
bluetoothd[19530]: Bluetooth daemon 4.37
bluetoothd[19530]: Enabling debug information
bluetoothd[19530]: parsing main.conf
bluetoothd[19530]: discovto=0
bluetoothd[19530]: Key file does not have key 'PairableTimeout'
bluetoothd[19530]: pageto=8192
bluetoothd[19530]: name=%h-%d
bluetoothd[19530]: class=0x000100
bluetoothd[19530]: inqmode=0
bluetoothd[19530]: Key file does not have key 'InitiallyPowered'
bluetoothd[19530]: Key file does not have key 'RememberPowered'
bluetoothd[19530]: Key file does not have key 'DeviceID'
bluetoothd[19530]: Key file does not have key 'ReverseServiceDiscovery'
bluetoothd[19530]: Starting SDP server
bluetoothd[19530]: Loading plugins /home/stuart/ws/install/bluez/git/bluez/plugins
bluetoothd[19530]: Parsing /etc/bluetooth/audio.conf failed: No such file or directory
bluetoothd[19530]: Unix socket created: 7
bluetoothd[19530]: Telephony plugin initialized
bluetoothd[19530]: HFP AG features: "Ability to reject a call" "Enhanced call status" "Extended Error Result Codes"
bluetoothd[19530]: register_interface: path /org/bluez/19530/any
bluetoothd[19530]: Registered interface org.bluez.Service on path /org/bluez/19530/any
bluetoothd[19530]: HCI dev 0 registered
bluetoothd[19530]: child 19533 forked
bluetoothd[19530]: Entering main loop
==19533== Syscall param ioctl(generic) points to unaddressable byte(s)
==19533== at 0x40007F2: (within /lib/ld-2.9.so)
==19533== by 0x4832513: device_devreg_setup (hciops.c:226)
==19533== by 0x4832638: device_event (hciops.c:255)
==19533== by 0x483279E: init_known_adapters (hciops.c:301)
==19533== by 0x4832BC6: hciops_setup (hciops.c:412)
==19533== by 0x11E5B8: manager_init_adapters (manager.c:552)
==19533== by 0x11240A: main (main.c:414)
==19533== Address 0x0 is not stack'd, malloc'd or (recently) free'd
bluetoothd[19530]: HCI dev 0 up
bluetoothd[19530]: Starting security manager 0
==19533==
==19533== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 77 from 3)
==19533== malloc/free: in use at exit: 30,146 bytes in 335 blocks.
==19533== malloc/free: 652 allocs, 317 frees, 242,876 bytes allocated.
==19533== For counts of detected errors, rerun with: -v
==19533== searching for pointers to 335 not-freed blocks.
==19533== checked 119,956 bytes.
==19533==
==19533== LEAK SUMMARY:
==19533== definitely lost: 0 bytes in 0 blocks.
==19533== possibly lost: 744 bytes in 3 blocks.
==19533== still reachable: 29,402 bytes in 332 blocks.
==19533== suppressed: 0 bytes in 0 blocks.
==19533== Rerun with --leak-check=full to see details of leaked memory.
bluetoothd[19530]: headset_server_probe: path /org/bluez/19530/hci0
bluetoothd[19530]: Adding record with handle 0x10000
bluetoothd[19530]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001108-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001112-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[19530]: Adding record with handle 0x10001
bluetoothd[19530]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000111e-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000111f-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[19530]: a2dp_server_probe: path /org/bluez/19530/hci0
bluetoothd[19530]: SEP 0x4b50968 registered: type:0 codec:0 seid:1
bluetoothd[19530]: Adding record with handle 0x10002
bluetoothd[19530]: Record pattern UUID 00000019-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000110a-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000110d-0000-1000-8000-00805f9
bluetoothd[19530]: avrcp_server_probe: path /org/bluez/19530/hci0
bluetoothd[19530]: Adding record with handle 0x10003
bluetoothd[19530]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000110c-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[19530]: Adding record with handle 0x10004
bluetoothd[19530]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[19530]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[19530]: register_interface: path /org/bluez/19530/hci0
bluetoothd[19530]: Registered interface org.bluez.Service on path /org/bluez/19530/hci0
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19530]: btd_device_ref(0x4b812d8): ref=1
bluetoothd[19530]: Probe drivers for /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19530]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[19530]: btd_device_ref(0x4b812d8): ref=2
bluetoothd[19530]: Registered interface org.bluez.Audio on path /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19530]: Found Headset record
bluetoothd[19530]: Registered interface org.bluez.Headset on path /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19530]: Found Handsfree record
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_14_A7_74_D3_AF
bluetoothd[19530]: btd_device_ref(0x4b9e5e8): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_03_89_B7_F8_D3
bluetoothd[19530]: btd_device_ref(0x4ba34e0): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_0A_94_94_4F_B3
bluetoothd[19530]: btd_device_ref(0x4ba83e8): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_03_89_DC_5C_9F
bluetoothd[19530]: btd_device_ref(0x4bad2a8): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_03_89_DC_FC_EC
bluetoothd[19530]: btd_device_ref(0x4bb21b8): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_03_89_FE_E6_19
bluetoothd[19530]: btd_device_ref(0x4bb7078): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_0E_6D_8F_91_6A
bluetoothd[19530]: btd_device_ref(0x4bbbf38): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_17_E5_E6_25_AB
bluetoothd[19530]: btd_device_ref(0x4bc0df8): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_17_E5_16_88_6C
bluetoothd[19530]: btd_device_ref(0x4bc5d28): ref=1
bluetoothd[19530]: Creating device /org/bluez/19530/hci0/dev_00_17_E5_0C_EA_70
bluetoothd[19530]: btd_device_ref(0x4bcabe8): ref=1
bluetoothd[19530]: Changing service classes to 0x480104
bluetoothd[19530]: Adapter /org/bluez/19530/hci0 has been enabled
bluetoothd[19530]: child 19533 exited
bluetoothd[19530]: Computer is classified as desktop
bluetoothd[19530]: Current device class is 0x480104
bluetoothd[19530]: Setting 0x000104 for major/minor device class
bluetoothd[19530]: Changing major/minor class to 0x480104
bluetoothd[19530]: Agent registered for hci0 at :1.22:/org/bluez/agent/hci0
bluetoothd[19530]: Accepted new client connection on unix socket (fd=13)
bluetoothd[19530]: Audio API: BT_REQUEST <- BT_GET_CAPABILITIES
bluetoothd[19530]: Audio API: BT_RESPONSE -> BT_GET_CAPABILITIES
bluetoothd[19530]: Audio API: BT_REQUEST <- BT_OPEN
bluetoothd[19530]: open sco - object=ANY source=ANY destination=00:1A:45:2F:49:98 lock=write
bluetoothd[19530]: Audio API: BT_RESPONSE -> BT_OPEN
bluetoothd[19530]: Audio API: BT_REQUEST <- BT_SET_CONFIGURATION
bluetoothd[19530]: State changed /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
bluetoothd[19530]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[19530]: Unable to get service record: Connection timed out (110)
bluetoothd[19530]: Audio API: BT_RESPONSE -> BT_SET_CONFIGURATION
bluetoothd[19530]: telephony-dummy: device 0x4b925a8 disconnected
bluetoothd[19530]: State changed /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
bluetoothd[19530]: Audio API: BT_REQUEST <- BT_START_STREAM
bluetoothd[19530]: State changed /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
^Cbluetoothd[19530]: Removing adapter /org/bluez/19530/hci0
bluetoothd[19530]: Removing device /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19530]: Headset unregistered while device was connected!
bluetoothd[19530]: telephony-dummy: device 0x4b925a8 disconnected
bluetoothd[19530]: State changed /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
bluetoothd[19530]: Unregistered interface org.bluez.Headset on path /org/bluez/19530/hci0/dev_00_1A_45_2F_49_98
bluetoothd[19530]: unix_device_removed(0x4b925a8)
==19530== Invalid read of size 4
==19530== at 0x4EEE6A0: headset_unlock (headset.c:2555)
==19530== by 0x4EE4876: start_close (unix.c:1174)
==19530== by 0x4EE5B5B: unix_device_removed (unix.c:1674)
==19530== by 0x4EE9889: audio_device_unregister (device.c:630)
==19530== by 0x4EE776D: audio_remove (manager.c:759)
==19530== by 0x126799: device_remove (device.c:842)
==19530== by 0x123AA5: adapter_remove (adapter.c:2461)
==19530== by 0x11DEEA: manager_remove_adapter (manager.c:316)
==19530== by 0x489EF06: g_slist_foreach (in /usr/lib/libglib-2.0.so.0.2000.1)
==19530== by 0x11DF22: manager_cleanup (manager.c:321)
==19530== by 0x129686: hcid_dbus_exit (dbus-common.c:158)
==19530== by 0x11243F: main (main.c:426)
==19530== Address 0x464 is not stack'd, malloc'd or (recently) free'd
==19530==
==19530== Process terminating with default action of signal 11 (SIGSEGV)
==19530== Access not within mapped region at address 0x464
==19530== at 0x4EEE6A0: headset_unlock (headset.c:2555)
==19530== by 0x4EE4876: start_close (unix.c:1174)
==19530== by 0x4EE5B5B: unix_device_removed (unix.c:1674)
==19530== by 0x4EE9889: audio_device_unregister (device.c:630)
==19530== by 0x4EE776D: audio_remove (manager.c:759)
==19530== by 0x126799: device_remove (device.c:842)
==19530== by 0x123AA5: adapter_remove (adapter.c:2461)
==19530== by 0x11DEEA: manager_remove_adapter (manager.c:316)
==19530== by 0x489EF06: g_slist_foreach (in /usr/lib/libglib-2.0.so.0.2000.1)
==19530== by 0x11DF22: manager_cleanup (manager.c:321)
==19530== by 0x129686: hcid_dbus_exit (dbus-common.c:158)
==19530== by 0x11243F: main (main.c:426)
==19530== If you believe this happened as a result of a stack overflow in your
==19530== program's main thread (unlikely but possible), you can try to increase
==19530== the size of the main thread stack using the --main-stacksize= flag.
==19530== The main thread stack size used in this run was 8388608.
==19530==
==19530== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 77 from 3)
==19530== malloc/free: in use at exit: 45,425 bytes in 685 blocks.
==19530== malloc/free: 2,528 allocs, 1,843 frees, 1,159,834 bytes allocated.
==19530== For counts of detected errors, rerun with: -v
==19530== searching for pointers to 685 not-freed blocks.
==19530== checked 133,960 bytes.
==19530==
==19530== LEAK SUMMARY:
==19530== definitely lost: 24 bytes in 1 blocks.
==19530== possibly lost: 744 bytes in 3 blocks.
==19530== still reachable: 44,657 bytes in 681 blocks.
==19530== suppressed: 0 bytes in 0 blocks.
==19530== Rerun with --leak-check=full to see details of leaked memory.
Segmentation fault


aplay doesn't work either.

:; aplay -vv -D JX10 /home/stuart/ws/music_test/Rebecca_Pidgeon-You_Got_Me-8000-mono.wav
Playing WAVE '/home/stuart/ws/music_test/Rebecca_Pidgeon-You_Got_Me-8000-mono.wav' : Signed 16 bit Little Endian, Rate 8000 Hz, Mono
ALSA lib pcm_bluetooth.c:1607:(audioservice_expect) BT_START_STREAM failed : Success(0)
ALSA lib pcm_bluetooth.c:1566:(audioservice_recv) Too short (1 bytes) IPC packet from bluetoothd
aplay: set_params:1022: Unable to install hw params:
ACCESS: RW_INTERLEAVED
FORMAT: S16_LE
SUBFORMAT: STD
SAMPLE_BITS: 16
FRAME_BITS: 16
CHANNELS: 1
RATE: 8000
PERIOD_TIME: 125000
PERIOD_SIZE: 1000
PERIOD_BYTES: 2000
PERIODS: 4
BUFFER_TIME: 500000
BUFFER_SIZE: 4000
BUFFER_BYTES: 8000
TICK_TIME: [0 0]


bluetoothd[19575]: Accepted new client connection on unix socket (fd=13)
bluetoothd[19575]: Audio API: BT_REQUEST <- BT_GET_CAPABILITIES
bluetoothd[19575]: Audio API: BT_RESPONSE -> BT_GET_CAPABILITIES
bluetoothd[19575]: Audio API: BT_REQUEST <- BT_OPEN
bluetoothd[19575]: open sco - object=ANY source=ANY destination=00:1A:45:2F:49:98 lock=write
bluetoothd[19575]: Audio API: BT_RESPONSE -> BT_OPEN
bluetoothd[19575]: Audio API: BT_REQUEST <- BT_SET_CONFIGURATION
bluetoothd[19575]: State changed /org/bluez/19575/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
bluetoothd[19575]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[19575]: Unable to get service record: Connection timed out (110)
bluetoothd[19575]: Audio API: BT_RESPONSE -> BT_SET_CONFIGURATION
bluetoothd[19575]: telephony-dummy: device 0x4b92490 disconnected
bluetoothd[19575]: State changed /org/bluez/19575/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
bluetoothd[19575]: Audio API: BT_REQUEST <- BT_START_STREAM
bluetoothd[19575]: State changed /org/bluez/19575/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
bluetoothd[19575]: Unable to get service record: Connection reset by peer (104)
bluetoothd[19575]: Unable to get a SCO fd
bluetoothd[19575]: headset_resume_complete: resume failed
bluetoothd[19575]: Audio API: BT_ERROR -> BT_START_STREAM
bluetoothd[19575]: telephony-dummy: device 0x4b92490 disconnected
bluetoothd[19575]: State changed /org/bluez/19575/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_CONNECT_IN_PROGRESS -> HEADSET_STATE_DISCONNECTED
bluetoothd[19575]: Unix client disconnected (fd=13)
bluetoothd[19575]: client_free(0x4bed8e0)


--
If the From address bounces, please see http://www.pook.it/.

2009-04-29 17:42:30

by Johan Hedberg

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

Hi Stuart,

On Wed, Apr 29, 2009, Stuart Pook wrote:
> > The easiest way to try git and avoid messing with your current system is
> > to build using ./bootstrap-configure && make and run bluetoothd directly
> > from the source tree. bootstrap-configure uses the
> > --enable-maintainer-mode configure switch which makes bluetoothd load the
> > plugins right out of the source tree, so you don't need to worry about
> > version conflicts with your existing system.
>
> yes but I'm talking about mixing different plugins between bluetoothd
> and the clients (aplay and twinkle in my case). The clients use plugins
> from /usr/lib.

Ah, yes. Sorry about the misunderstanding. I thought you were referring to
plugins loaded by bluetoothd.

> Do bluetoothd and the clients have to use exactly the same plugins? How
> often does the protocol between the clients and bluetoothd change?

The protocol doesn't change very often. Last time it changed was between
4.33 and 4.34. So it should be fine to use latest git with 4.37 plugins.

Johan

2009-04-29 17:26:26

by Stuart Pook

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

hi Johan

Johan Hedberg wrote:

> The easiest way to try git and avoid messing with your current system is
> to build using ./bootstrap-configure && make and run bluetoothd directly
> from the source tree. bootstrap-configure uses the
> --enable-maintainer-mode configure switch which makes bluetoothd load the
> plugins right out of the source tree, so you don't need to worry about
> version conflicts with your existing system.

yes but I'm talking about mixing different plugins between bluetoothd and the clients (aplay and twinkle in my case). The clients use plugins from /usr/lib. Do bluetoothd and the clients have to use exactly the same plugins? How often does the protocol between the clients and bluetoothd change?

Stuart

2009-04-29 16:32:55

by Johan Hedberg

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

Hi Stuart,

On Wed, Apr 29, 2009, Stuart Pook wrote:
> > It'd be good if you could get a trace with debug symbols so we see the
> > exact line numbers.
>
> Why don't I have debug symbols? Does the default make not add debug
> symbols? I guess that I'll have to look at how I call configure.

I think --enable-debug should be enough.

> > However, before that could you check with latest git
> > if you still experience this crash.
>
> Do I have to update the client plugins as well or can I mix a bluetoothd
> from git with the plugins from 4.37?

The easiest way to try git and avoid messing with your current system is
to build using ./bootstrap-configure && make and run bluetoothd directly
from the source tree. bootstrap-configure uses the
--enable-maintainer-mode configure switch which makes bluetoothd load the
plugins right out of the source tree, so you don't need to worry about
version conflicts with your existing system.

> > There's at least one commit since
> > 4.37 (7fb4d906c00bf6e2ed03cc3e880bab52b8a984d6) that fixes a crash issue
> > with client_free.
>
> Should I always try the git version before reporting bugs?

If possible, yes please. It eliminates the question "has this been fixed
since the last release?" and makes it easier for the developers to match
the line numbers in the backtrace (assuming you have debug symbols) to
their development trees which are mostly based on latest git.

Johan

2009-04-29 16:14:55

by Stuart Pook

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

hi Johan

Johan Hedberg wrote:

> It'd be good if you could get a trace with debug symbols so we see the
> exact line numbers.

Why don't I have debug symbols? Does the default make not add debug symbols? I guess that I'll have to look at how I call configure.

> However, before that could you check with latest git
> if you still experience this crash.

Do I have to update the client plugins as well or can I mix a bluetoothd from git with the plugins from 4.37?

> There's at least one commit since
> 4.37 (7fb4d906c00bf6e2ed03cc3e880bab52b8a984d6) that fixes a crash issue
> with client_free.

Should I always try the git version before reporting bugs?

Stuart

2009-04-29 16:04:30

by Johan Hedberg

[permalink] [raw]
Subject: Re: bluetoothd 4.37 -> Segmentation fault

Hi Stuart,

Thanks for the report.

On Wed, Apr 29, 2009, Stuart Pook wrote:
>bluetoothd[6697]: Cleanup plugins
>==6697== ==6697== Invalid read of size 4
>==6697== at 0x4EE97E7: headset_cancel_stream (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
>==6697== by 0x4EE222A: client_free (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
>==6697== by 0x489EF06: g_slist_foreach (in /usr/lib/libglib-2.0.so.0.2000.1)
>==6697== by 0x4EE2161: unix_exit (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
>==6697== by 0x4EE19B5: audio_exit (in /usr/local/stow/bluez-4.37/lib/bluetooth/plugins/audio.so)
>==6697== by 0x11807C: plugin_cleanup (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
>==6697== by 0x112AE4: main (in /usr/local/stow/bluez-4.37/sbin/bluetoothd)
>==6697== Address 0x1c is not stack'd, malloc'd or (recently) free'd
>==6697== ==6697== Process terminating with default action of signal 11
>(SIGSEGV)

It'd be good if you could get a trace with debug symbols so we see the
exact line numbers. However, before that could you check with latest git
if you still experience this crash. There's at least one commit since 4.37
(7fb4d906c00bf6e2ed03cc3e880bab52b8a984d6) that fixes a crash issue with
client_free.

Johan

2009-05-02 20:06:00

by Johan Hedberg

[permalink] [raw]
Subject: Re: bluetoothd git version -> Segmentation fault

Hi Stuart,

On Sat, May 02, 2009, Stuart Pook wrote:
> bluetoothd seg faulted again. This time I didn't have to type control-C.
> I just ran it and it crashed. I last did a git pull a bit before
> 2009-04-29 20:17
<snip>
> bluetoothd[3300]: connect: Operation not permitted (1)
> ==3300== Invalid read of size 1
> ==3300== at 0x4826728: strlen (mc_replace_strmem.c:242)
> ==3300== by 0x498E677: vfprintf (in /lib/i686/cmov/libc-2.9.so)
> ==3300== by 0x4A2A635: __vsyslog_chk (in /lib/i686/cmov/libc-2.9.so)
> ==3300== by 0x4A2A706: vsyslog (in /lib/i686/cmov/libc-2.9.so)
> ==3300== by 0x12D457: error (logging.c:58)
> ==3300== by 0x4EEC176: get_record_cb (headset.c:1432)
> ==3300== by 0x12D9DA: search_completed_cb (glib-helper.c:209)
> ==3300== by 0x493F0B1: sdp_process (in /usr/local/stow/bluez-4.37/lib/libbluetooth.so.3.2.3)
> ==3300== by 0x12DA46: search_process_cb (glib-helper.c:228)
> ==3300== by 0x48B64AC: (within /usr/lib/libglib-2.0.so.0.2000.1)
> ==3300== by 0x487F847: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.2000.1)
> ==3300== by 0x4882DAA: (within /usr/lib/libglib-2.0.so.0.2000.1)
> ==3300== Address 0x5 is not stack'd, malloc'd or (recently) free'd
> ==3300== ==3300== Process terminating with default action of signal 11
> (SIGSEGV)

Thanks a lot for this trace! It turned out to be a simple format string
bug which is now fixed in git:
http://git.kernel.org/?p=bluetooth/bluez.git;a=commitdiff;h=ca06dd9c4d4d4c055583dd4e2b4a823264c3b687

Johan

2009-05-02 18:46:21

by Stuart Pook

[permalink] [raw]
Subject: bluetoothd git version -> Segmentation fault

hi

bluetoothd seg faulted again. This time I didn't have to type control-C. I just ran it and it crashed. I last did a git pull a bit before 2009-04-29 20:17

: root; valgrind src/.libs/bluetoothd -dn
==3300== Memcheck, a memory error detector.
==3300== Copyright (C) 2002-2008, and GNU GPL'd, by Julian Seward et al.
==3300== Using LibVEX rev 1884, a library for dynamic binary translation.
==3300== Copyright (C) 2004-2008, and GNU GPL'd, by OpenWorks LLP.
==3300== Using valgrind-3.4.1-Debian, a dynamic binary instrumentation framework.
==3300== Copyright (C) 2000-2008, and GNU GPL'd, by Julian Seward et al.
==3300== For more details, rerun with: -v
==3300==
bluetoothd[3300]: Bluetooth daemon 4.37
bluetoothd[3300]: Enabling debug information
bluetoothd[3300]: parsing main.conf
bluetoothd[3300]: discovto=0
bluetoothd[3300]: Key file does not have key 'PairableTimeout'
bluetoothd[3300]: pageto=8192
bluetoothd[3300]: name=%h-%d
bluetoothd[3300]: class=0x000100
bluetoothd[3300]: inqmode=0
bluetoothd[3300]: Key file does not have key 'InitiallyPowered'
bluetoothd[3300]: Key file does not have key 'RememberPowered'
bluetoothd[3300]: Key file does not have key 'DeviceID'
bluetoothd[3300]: Key file does not have key 'ReverseServiceDiscovery'
bluetoothd[3300]: Starting SDP server
bluetoothd[3300]: Loading plugins /home/stuart/ws/install/bluez/git/bluez/plugins
bluetoothd[3300]: Parsing /etc/bluetooth/audio.conf failed: No such file or directory
bluetoothd[3300]: Unix socket created: 7
bluetoothd[3300]: Telephony plugin initialized
bluetoothd[3300]: HFP AG features: "Ability to reject a call" "Enhanced call status" "Extended Error Result Codes"
bluetoothd[3300]: register_interface: path /org/bluez/3300/any
bluetoothd[3300]: Registered interface org.bluez.Service on path /org/bluez/3300/any
bluetoothd[3300]: HCI dev 0 registered
bluetoothd[3300]: child 3303 forked
bluetoothd[3300]: HCI dev 0 up
bluetoothd[3300]: Starting security manager 0
bluetoothd[3300]: periodic_inquiry_exit at adapter startup
==3303== Syscall param ioctl(generic) points to unaddressable byte(s)
==3303== at 0x40007F2: (within /lib/ld-2.9.so)
==3303== by 0x4832513: device_devreg_setup (hciops.c:226)
==3303== by 0x4832638: device_event (hciops.c:255)
==3303== by 0x483279E: init_known_adapters (hciops.c:301)
==3303== by 0x4832BC6: hciops_setup (hciops.c:412)
==3303== by 0x11E5B8: manager_init_adapters (manager.c:552)
==3303== by 0x11240A: main (main.c:414)
==3303== Address 0x0 is not stack'd, malloc'd or (recently) free'd
bluetoothd[3300]: headset_server_probe: path /org/bluez/3300/hci0
==3303==
==3303== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 77 from 3)
==3303== malloc/free: in use at exit: 30,144 bytes in 335 blocks.
==3303== malloc/free: 652 allocs, 317 frees, 242,846 bytes allocated.
==3303== For counts of detected errors, rerun with: -v
==3303== searching for pointers to 335 not-freed blocks.
bluetoothd[3300]: Adding record with handle 0x10000
==3303== checked 119,956 bytes.
==3303==
==3303== LEAK SUMMARY:
==3303== definitely lost: 0 bytes in 0 blocks.
==3303== possibly lost: 744 bytes in 3 blocks.
==3303== still reachable: 29,400 bytes in 332 blocks.
==3303== suppressed: 0 bytes in 0 blocks.
==3303== Rerun with --leak-check=full to see details of leaked memory.
bluetoothd[3300]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001108-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001112-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[3300]: Adding record with handle 0x10001
bluetoothd[3300]: Record pattern UUID 00000003-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000111e-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000111f-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001203-0000-1000-8000-00805f9
bluetoothd[3300]: a2dp_server_probe: path /org/bluez/3300/hci0
bluetoothd[3300]: SEP 0x4b50818 registered: type:0 codec:0 seid:1
bluetoothd[3300]: Adding record with handle 0x10002
bluetoothd[3300]: Record pattern UUID 00000019-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000110a-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000110d-0000-1000-8000-00805f9
bluetoothd[3300]: avrcp_server_probe: path /org/bluez/3300/hci0
bluetoothd[3300]: Adding record with handle 0x10003
bluetoothd[3300]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000110c-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[3300]: Adding record with handle 0x10004
bluetoothd[3300]: Record pattern UUID 00000017-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00000100-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 00001002-0000-1000-8000-00805f9
bluetoothd[3300]: Record pattern UUID 0000110e-0000-1000-8000-00805f9
bluetoothd[3300]: register_interface: path /org/bluez/3300/hci0
bluetoothd[3300]: Registered interface org.bluez.Service on path /org/bluez/3300/hci0
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_1A_45_2F_49_98
bluetoothd[3300]: btd_device_ref(0x4b81170): ref=1
bluetoothd[3300]: Probe drivers for /org/bluez/3300/hci0/dev_00_1A_45_2F_49_98
bluetoothd[3300]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[3300]: btd_device_ref(0x4b81170): ref=2
bluetoothd[3300]: Registered interface org.bluez.Audio on path /org/bluez/3300/hci0/dev_00_1A_45_2F_49_98
bluetoothd[3300]: Found Headset record
bluetoothd[3300]: Registered interface org.bluez.Headset on path /org/bluez/3300/hci0/dev_00_1A_45_2F_49_98
bluetoothd[3300]: Found Handsfree record
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_14_A7_74_D3_AF
bluetoothd[3300]: btd_device_ref(0x4b9e480): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_03_89_B7_F8_D3
bluetoothd[3300]: btd_device_ref(0x4ba3378): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_0A_94_94_4F_B3
bluetoothd[3300]: btd_device_ref(0x4ba8280): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_03_89_DC_5C_9F
bluetoothd[3300]: btd_device_ref(0x4bad140): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_03_89_DC_FC_EC
bluetoothd[3300]: btd_device_ref(0x4bb2050): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_03_89_FE_E6_19
bluetoothd[3300]: btd_device_ref(0x4bb6f10): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_0E_6D_8F_91_6A
bluetoothd[3300]: btd_device_ref(0x4bbbdd0): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_17_E5_E6_25_AB
bluetoothd[3300]: btd_device_ref(0x4bc0c90): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_17_E5_16_88_6C
bluetoothd[3300]: btd_device_ref(0x4bc5bc0): ref=1
bluetoothd[3300]: Creating device /org/bluez/3300/hci0/dev_00_17_E5_0C_EA_70
bluetoothd[3300]: btd_device_ref(0x4bcaa80): ref=1
bluetoothd[3300]: adapter_get_device(00:1A:45:2F:49:98)
bluetoothd[3300]: Changing service classes to 0x480104
bluetoothd[3300]: Adapter /org/bluez/3300/hci0 has been enabled
bluetoothd[3300]: Changing service classes to 0x480104
bluetoothd[3300]: Entering main loop
bluetoothd[3300]: child 3303 exited
bluetoothd[3300]: Computer is classified as desktop
bluetoothd[3300]: Current device class is 0x480104
bluetoothd[3300]: Setting 0x000104 for major/minor device class
bluetoothd[3300]: Changing major/minor class to 0x480104
bluetoothd[3300]: Agent registered for hci0 at :1.22:/org/bluez/agent/hci0
bluetoothd[3300]: Accepted new client connection on unix socket (fd=13)
bluetoothd[3300]: Audio API: BT_REQUEST <- BT_GET_CAPABILITIES
bluetoothd[3300]: Audio API: BT_RESPONSE -> BT_GET_CAPABILITIES
bluetoothd[3300]: Audio API: BT_REQUEST <- BT_OPEN
bluetoothd[3300]: open sco - object=ANY source=ANY destination=00:1A:45:2F:49:98 lock=write
bluetoothd[3300]: Audio API: BT_RESPONSE -> BT_OPEN
bluetoothd[3300]: Audio API: BT_REQUEST <- BT_SET_CONFIGURATION
bluetoothd[3300]: State changed /org/bluez/3300/hci0/dev_00_1A_45_2F_49_98: HEADSET_STATE_DISCONNECTED -> HEADSET_STATE_CONNECT_IN_PROGRESS
bluetoothd[3300]: Discovered Handsfree service on RFCOMM channel 1
bluetoothd[3300]: /org/bluez/3300/hci0/dev_00_1A_45_2F_49_98: Connecting to 00:1A:45:2F:49:98 channel 1
bluetoothd[3300]: connect: Operation not permitted (1)
==3300== Invalid read of size 1
==3300== at 0x4826728: strlen (mc_replace_strmem.c:242)
==3300== by 0x498E677: vfprintf (in /lib/i686/cmov/libc-2.9.so)
==3300== by 0x4A2A635: __vsyslog_chk (in /lib/i686/cmov/libc-2.9.so)
==3300== by 0x4A2A706: vsyslog (in /lib/i686/cmov/libc-2.9.so)
==3300== by 0x12D457: error (logging.c:58)
==3300== by 0x4EEC176: get_record_cb (headset.c:1432)
==3300== by 0x12D9DA: search_completed_cb (glib-helper.c:209)
==3300== by 0x493F0B1: sdp_process (in /usr/local/stow/bluez-4.37/lib/libbluetooth.so.3.2.3)
==3300== by 0x12DA46: search_process_cb (glib-helper.c:228)
==3300== by 0x48B64AC: (within /usr/lib/libglib-2.0.so.0.2000.1)
==3300== by 0x487F847: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.2000.1)
==3300== by 0x4882DAA: (within /usr/lib/libglib-2.0.so.0.2000.1)
==3300== Address 0x5 is not stack'd, malloc'd or (recently) free'd
==3300==
==3300== Process terminating with default action of signal 11 (SIGSEGV)
==3300== Access not within mapped region at address 0x5
==3300== at 0x4826728: strlen (mc_replace_strmem.c:242)
==3300== by 0x498E677: vfprintf (in /lib/i686/cmov/libc-2.9.so)
==3300== by 0x4A2A635: __vsyslog_chk (in /lib/i686/cmov/libc-2.9.so)
==3300== by 0x4A2A706: vsyslog (in /lib/i686/cmov/libc-2.9.so)
==3300== by 0x12D457: error (logging.c:58)
==3300== by 0x4EEC176: get_record_cb (headset.c:1432)
==3300== by 0x12D9DA: search_completed_cb (glib-helper.c:209)
==3300== by 0x493F0B1: sdp_process (in /usr/local/stow/bluez-4.37/lib/libbluetooth.so.3.2.3)
==3300== by 0x12DA46: search_process_cb (glib-helper.c:228)
==3300== by 0x48B64AC: (within /usr/lib/libglib-2.0.so.0.2000.1)
==3300== by 0x487F847: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.2000.1)
==3300== by 0x4882DAA: (within /usr/lib/libglib-2.0.so.0.2000.1)
==3300== If you believe this happened as a result of a stack overflow in your
==3300== program's main thread (unlikely but possible), you can try to increase
==3300== the size of the main thread stack using the --main-stacksize= flag.
==3300== The main thread stack size used in this run was 8388608.
==3300==
==3300== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 77 from 3)
==3300== malloc/free: in use at exit: 123,843 bytes in 737 blocks.
==3300== malloc/free: 2,487 allocs, 1,750 frees, 1,298,497 bytes allocated.
==3300== For counts of detected errors, rerun with: -v
==3300== searching for pointers to 737 not-freed blocks.
==3300== checked 212,588 bytes.
==3300==
==3300== LEAK SUMMARY:
==3300== definitely lost: 0 bytes in 0 blocks.
==3300== possibly lost: 744 bytes in 3 blocks.
==3300== still reachable: 123,099 bytes in 734 blocks.
==3300== suppressed: 0 bytes in 0 blocks.
==3300== Rerun with --leak-check=full to see details of leaked memory.
Segmentation fault



--
If the From address bounces, please see http://www.pook.it/.