Parent: 94a49c70822db9bbad54556fcf3bdede43cce601
Author: Rafal Michalski <michalski.raf@gmail.com>
Committer: Johan Hedberg <johan.hedberg@intel.com>
Date: 2011-06-14 12:07:18
Tree: 8bdb779df16d4956aa5918132ec6ac532a2da273
Fix invalid write to memory issue in media module Under some circumstances (such as terminating bluetoothd during music is streamed) endpoint object may be destroyed (memory for endpoint object is internally freed, directly by "media_endpoint_remove") after invoking "media_transport_destroy" (in "media_endpoint_clear_configuration") to destroy transport object (memory for transport object is directly freed by "media_transport_free"). It leads to invalid write issue (reported by valgrind) after assignment "endpoint->transport = NULL", since "endpoint" is "alias" pointer to endpoint object which is already out of date (memory for endpoint object has been already freed). This patch prevents from this issue by ensuring that assignment "endpoint->transport = NULL" would be executed when endpoint object certainly exists.
Diffstat
| M | audio/media.c | | | 3 | ++- |
1 files changed, 2 insertions(+), 1 deletions(-)