Commit: e412f2a9dfd85b790d7d0317d00cbaf08666ac2a
Parent: cdcea1773a484767c766dccb63c32e0086d5bd4f
Author: Hsin-Yu Chao <hychao@chromium.org>
Committer: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: 2015-08-28 11:37:24
Tree: d107e1b9a942ee29874b022e6f6f5bcad8c4252a

audio/media - Fix crash at deferencing NULL pointer The boolean pointer passed in to config_cb could be NULL in media_endpoint_cancel(). In that case we should not derefence it but pass FALSE instead to indicate error. Below is the core dump to demonstrate the crash: config_cb (endpoint=0xb814ff40, ret=0x0, size=-1, user_data=0xb8157758) at profiles/audio/media.c:537 0xb6eb7ba4 in media_endpoint_cancel (request=0xb815b4d0) at profiles/audio/media.c:141 0xb6eb7c98 in media_endpoint_cancel_all (endpoint=0xb814ff40) at profiles/audio/media.c:149 clear_endpoint (endpoint=endpoint@entry=0xb814ff40) at profiles/audio/media.c:250 0xb6eb7e74 in endpoint_reply (call=<optimized out>, user_data=0xb815b4d0) at profiles/audio/media.c:277 0xb6d50336 in ?? () from /usr/lib/libdbus-1.so.3

Diffstat

M profiles/audio/media.c | 2 +-

1 files changed, 1 insertions(+), 1 deletions(-)

View Full Diff | Patch