Parent: 1d18443e6b5432a493ea300da978f4385802cfe7
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Committer: Johan Hedberg <johan.hedberg@intel.com>
Date: 2012-10-26 14:57:53
Tree: 864d18c71358bfe1592fc1cc7ba8fac81e6aaa04
core: Do not call the callback on btd_cancel_authorization btd_cancel_authorization should work like g_source_remove and not attempt to reach the callback as its maybe already invalid or lead to double free situations such as this: Invalid write of size 4 at 0x13D480: connection_lost (avdtp.c:1102) by 0x13F37A: session_cb (avdtp.c:2281) by 0x4C7B824: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x4C7BB57: ??? (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x4C7BF51: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x122B21: main (main.c:551) Address 0x6512ac0 is 32 bytes inside a block of size 1,184 free'd at 0x4A07786: free (vg_replace_malloc.c:446) by 0x4C8150E: g_free (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x13D4A9: connection_lost (avdtp.c:1216) by 0x13D55E: auth_cb (avdtp.c:2471) by 0x17E99A: service_auth_cancel (adapter.c:1021) by 0x183C67: btd_cancel_authorization (adapter.c:3358) by 0x13D477: connection_lost (avdtp.c:1098) by 0x13F37A: session_cb (avdtp.c:2281) by 0x4C7B824: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x4C7BB57: ??? (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x4C7BF51: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.3200.4) by 0x122B21: main (main.c:551)
Diffstat
| M | src/adapter.c | | | 5 | ++++- |
1 files changed, 4 insertions(+), 1 deletions(-)