Parent: cb395e52c28088cfcf56d2fa53aae74af0942179
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Committer: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: 2013-05-13 23:17:29
Tree: 7d4e2cc2885881f7b7cf5fdc562c583c6cc9d044
AVRCP: Fix crash when no A2DP role is detected Invalid read of size 4 at 0x468370: btd_service_connecting_complete (service.c:315) by 0x41B70F: session_ct_init_control (avrcp.c:2790) by 0x41B1E0: state_changed (avrcp.c:2933) by 0x418054: avctp_set_state (avctp.c:548) by 0x41A2E4: avctp_connect_cb (avctp.c:1201) by 0x44F989: accept_cb (btio.c:201) by 0x4E77044: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.3400.2) by 0x4E77377: g_main_context_iterate.isra.24 (in /usr/lib64/libglib-2.0.so.0.3400.2) by 0x4E77771: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.3400.2) by 0x40A8EE: main (main.c:583) Address 0x20 is not stack'd, malloc'd or (recently) free'd If no A2DP is found assume the controller is the initiator as the target should not be able to initate a connection.
Diffstat
| M | profiles/audio/avctp.c | | | 7 | +++++++ |
| M | profiles/audio/avctp.h | | | 1 | + |
| M | profiles/audio/avrcp.c | | | 7 | ++++++- |
3 files changed, 14 insertions(+), 1 deletions(-)