Commit: 4691b95198fa6a801b17b73f259bbaaa3473b205
Parent: 2d58cc855d665d7dac89f10641766c41e924c906
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Committer: Szymon Janc <szymon.janc@codecoup.pl>
Date: 2017-12-20 21:58:00
Tree: a4c64d0a01f1d6bc7bccb5b77f52ea0045269be6

shared/att: Fix possible crash when security is changed When resending a PDU due to secure change the timeout_id shall also be removed otherwise the following crash may occur: Invalid read of size 8 at 0x489639: timeout_cb (att.c:405) by 0x49417C: timeout_callback (timeout-glib.c:34) by 0x4E84AB2: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x4E84049: g_main_context_dispatch (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x4E843EF: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x4E84711: g_main_loop_run (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x40B51F: main (main.c:770) Address 0x6ce5830 is 32 bytes inside a block of size 192 free'd at 0x4C2EDEB: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) by 0x48A89D: disconnect_cb (att.c:593) by 0x493D54: watch_callback (io-glib.c:170) by 0x4E84049: g_main_context_dispatch (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x4E843EF: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x4E84711: g_main_loop_run (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2) by 0x40B51F: main (main.c:770)

Diffstat

M src/shared/att.c | 6 ++++++

1 files changed, 6 insertions(+), 0 deletions(-)

View Full Diff | Patch