Return-Path: From: Marcin Kraglak To: linux-bluetooth@vger.kernel.org Subject: [PATCH 1/7] shared/io: Remove disconnect handler in io_destroy Date: Tue, 28 Oct 2014 10:55:19 +0100 Message-Id: <1414490125-31339-1-git-send-email-marcin.kraglak@tieto.com> Sender: linux-bluetooth-owner@vger.kernel.org List-ID: Diconnect callback may be called after destroying IO in next mainloop iteration (it leada to reading freed data). Removing disconnect handler prevents that situation. --- src/shared/io-glib.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/shared/io-glib.c b/src/shared/io-glib.c index a2ada66..5ebde3d 100644 --- a/src/shared/io-glib.c +++ b/src/shared/io-glib.c @@ -115,6 +115,11 @@ void io_destroy(struct io *io) io->write_watch = 0; } + if (io->disconnect_watch > 0) { + g_source_remove(io->disconnect_watch); + io->disconnect_watch = 0; + } + g_io_channel_unref(io->channel); io->channel = NULL; -- 1.9.3