2023-03-14 21:15:55

by Luiz Augusto von Dentz

[permalink] [raw]
Subject: [bluez/bluez] 857d9b: shared/gatt-client: Fix crash on bt_gatt_client_id...

Branch: refs/heads/master
Home: https://github.com/bluez/bluez
Commit: 857d9b96b38401ce5666172ddea115d37ad6af70
Author: Luiz Augusto von Dentz <[email protected]>
Date: 2023-03-14 (Tue, 14 Mar 2023)

Changed paths:
M src/shared/gatt-client.c

Log Message:
shared/gatt-client: Fix crash on bt_gatt_client_idle_unregister

This fixes the following crash:

Invalid read of size 8
at 0x1E1E0B: bt_gatt_client_idle_unregister (gatt-client.c:3812)
by 0x1EB6BD: bt_bap_detach (bap.c:3821)
by 0x1EB6BD: bt_bap_detach (bap.c:3808)
by 0x1D5631: queue_foreach (queue.c:207)
by 0x1DCAA3: disconnect_cb (att.c:713)
by 0x1F4404: watch_callback (io-glib.c:157)
by 0x48BBC7E: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.7400.6)
by 0x4912117: ??? (in /usr/lib64/libglib-2.0.so.0.7400.6)
by 0x48BB24E: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.7400.6)
by 0x1F4A54: mainloop_run (mainloop-glib.c:66)
by 0x1F4E21: mainloop_run_with_signal (mainloop-notify.c:188)
by 0x1304B4: main (main.c:1428)
Address 0x28 is not stack'd, malloc'd or (recently) free'd