Received-SPF: pass (google.com: domain of linux-bluetooth-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Subject: Re: [PATCH BlueZ] avrcp: Fix crash while handling unsupported events
From:   patchwork-bot+bluetooth@kernel.org
Message-Id: <168030061878.9780.9987417728326612378.git-patchwork-notify@kernel.org>
Date:   Fri, 31 Mar 2023 22:10:18 +0000
References: <20230330234425.1064422-1-luiz.dentz@gmail.com>
In-Reply-To: <20230330234425.1064422-1-luiz.dentz@gmail.com>
To:     Luiz Augusto von Dentz <luiz.dentz@gmail.com>
Cc:     linux-bluetooth@vger.kernel.org
Precedence: bulk

Hello:

This patch was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Thu, 30 Mar 2023 16:44:25 -0700 you wrote:
> From: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
> 
> The following crash can be observed if the remote peer send and
> unsupported event:
> 
> ERROR: AddressSanitizer: heap-use-after-free on address 0x60b000148f11
>  at pc 0x559644552088 bp 0x7ffe28b3c7b0 sp 0x7ffe28b3c7a0
>  WRITE of size 1 at 0x60b000148f11 thread T0
>      #0 0x559644552087 in avrcp_handle_event profiles/audio/avrcp.c:3907
>      #1 0x559644536c22 in control_response profiles/audio/avctp.c:939
>      #2 0x5596445379ab in session_cb profiles/audio/avctp.c:1108
>      #3 0x7fbcb3e51c43 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x55c43)
>      #4 0x7fbcb3ea66c7  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xaa6c7)
>      #5 0x7fbcb3e512b2 in g_main_loop_run (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x552b2)
>      #6 0x559644754ab6 in mainloop_run src/shared/mainloop-glib.c:66
>      #7 0x559644755606 in mainloop_run_with_signal src/shared/mainloop-notify.c:188
>      #8 0x5596445bb963 in main src/main.c:1289
>      #9 0x7fbcb3bafd8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
>      #10 0x7fbcb3bafe3f in __libc_start_main_impl ../csu/libc-start.c:392
>      #11 0x5596444e8224 in _start (/usr/local/libexec/bluetooth/bluetoothd+0xf0224)
> 
> [...]

Here is the summary with links:
  - [BlueZ] avrcp: Fix crash while handling unsupported events
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=f54299a85067

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html