From a010505f1961c06955cc10c9476f6ec2e4545478 Mon Sep 17 00:00:00 2001 From: Archie Pusaka Date: Tue, 20 Oct 2020 18:02:45 +0800 Subject: [PATCH] device: fix temporary_timer double free One instance of freeing temporary_timer is not followed by setting the variable to 0, causing potential double free. --- src/device.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/device.c b/src/device.c index a5ef46730..2800b276a 100644 --- a/src/device.c +++ b/src/device.c @@ -4477,8 +4477,10 @@ void device_remove(struct btd_device *device, gboolean remove_stored) disconnect_all(device); } - if (device->temporary_timer > 0) + if (device->temporary_timer > 0) { g_source_remove(device->temporary_timer); + device->temporary_timer = 0; + } if (device->store_id > 0) { g_source_remove(device->store_id); -- 2.47.3