Commit: bf5ec167b66fc40f7c5f3abca58752fee0d4153b
Parent: 5ccbff0898fa4b006cb4b26c9b82cae129aa368f
Author: Pauli Virtanen <pav@iki.fi>
Committer: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: 2025-08-11 17:54:36
Tree: 36f2cd5f290e1a94328e70f5b44778dd8a6e60bd

bap: remove bap_update_cigs callback properly whan data is freed setup_free() may re-enable the CIG update callback. If this occurs in bap_data_free(), the callback crashes with UAF. Fix by moving clearing the callback after all setups are freed.

Diffstat

M profiles/audio/bap.c | 7 ++++- - -

1 files changed, 4 insertions(+), 3 deletions(-)

View Full Diff | Patch