a2dp: Fix possible crash when accepting stream transport During the course of bt_io_accept the setup can be freed causing the callback to be called which can lead to the following crash: bluetoothd[853]: profiles/audio/a2dp.c:setup_unref() 0x8183c1c0: ref=0 bluetoothd[853]: profiles/audio/a2dp.c:setup_free() 0x8183c1c0 ... bluetoothd[853]: HUP or ERR on socket: Connection reset by peer (104) bluetoothd[853]: profiles/audio/a2dp.c:setup_unref() 0x8183c1c0: ref=-80438434 bluetoothd[853]: profiles/audio/a2dp.c:setup_free() 0x8183c1c0 0 0x80106888 in stream_free () 1 0xb7621d49 in g_slist_foreach () from /usr/lib/libglib-2.0.so.0 2 0xb7621d92 in g_slist_free_full () from /usr/lib/libglib-2.0.so.0 3 0x80107d09 in avdtp_unref () 4 0x8010273b in setup_unref () 5 0x80104c54 in transport_cb () 6 0x80136a9c in accept_cb ()

Diffstat

1 files changed, 22 insertions(+), 0 deletions(-)