Parent: acc4dfbfff2d7b2ffa97010738e530b94241bf46
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Committer: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: 2014-01-23 19:59:58
Tree: db9dcb11c8a426f15e7d4e78fb304b132970b298
android/A2DP: Fix invalid read after unregistering an endpoint The endpoint is unregistered but it was still accessible via endpoints list causing the following trace when audio HAL is closed: Invalid read of size 8 at 0x414A49: unregister_endpoint (a2dp.c:114) by 0x3862466477: g_slist_foreach (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x386246649A: g_slist_free_full (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x414985: audio_disconnected (a2dp.c:1446) by 0x40FD5C: audio_watch_cb (audio-ipc.c:79) by 0x38624492A5: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x3862449627: ??? (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x3862449A39: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x4034D5: main (main.c:449) Address 0x4cd5e68 is 8 bytes inside a block of size 32 free'd at 0x4A07577: free (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) by 0x386244EF7E: g_free (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x4159FD: bt_audio_close (a2dp.c:1296) by 0x40F629: ipc_handle_msg (ipc.c:95) by 0x40FD9F: audio_watch_cb (audio-ipc.c:67) by 0x38624492A5: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x3862449627: ??? (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x3862449A39: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.3800.2) by 0x4034D5: main (main.c:449)
Diffstat
| M | android/a2dp.c | | | 1 | + |
1 files changed, 1 insertions(+), 0 deletions(-)