shared/att: Fix crash when calling disconnect handlers When calling disconnect handlers the callback itself may remove items from the queue causing the following crash: Invalid read of size 8 at 0x4D1D3C: queue_foreach (queue.c:219) by 0x4D8369: disconnect_cb (att.c:590) by 0x4E4FAA: watch_callback (io-glib.c:170) by 0x50CD246: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.5200.3) by 0x50CD5E7: ??? (in /usr/lib64/libglib-2.0.so.0.5200.3) by 0x50CD901: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.5200.3) by 0x40CCC0: main (main.c:770) Address 0x888a888 is 8 bytes inside a block of size 16 free'd at 0x4C2FD18: free (vg_replace_malloc.c:530) by 0x4D1F9B: queue_remove_if (queue.c:302) by 0x4D763B: bt_att_unregister_disconnect (att.c:1206) by 0x4DC11E: bt_gatt_client_free (gatt-client.c:1762) by 0x4DC270: bt_gatt_client_unref (gatt-client.c:1903) by 0x4A316F: gatt_client_cleanup (device.c:573) by 0x4A326E: attio_cleanup (device.c:598) by 0x4A5EB9: att_disconnected_cb (device.c:4679) by 0x4D66D5: disconn_handler (att.c:538) by 0x4D1D4F: queue_foreach (queue.c:220) by 0x4D8369: disconnect_cb (att.c:590) by 0x4E4FAA: watch_callback (io-glib.c:170)

Diffstat

1 files changed, 11 insertions(+), 0 deletions(-)