mbox series

[BlueZ,0/1] bap: Remove entry of deleted device from bcast_pa_requests queue

Message ID 20240329154000.6056-1-vlad.pruteanu@nxp.com
Headers show
Series bap: Remove entry of deleted device from bcast_pa_requests queue | expand

Message

Vlad Pruteanu March 29, 2024, 3:39 p.m. UTC 
Currently if Broadcast Source device is removed it's entry in
bcast_pa_requests remains active. Thus, if the removal is done before
short_lived_pa_sync is called, crashes such as the one listed below
can occur. This patch fixes this by removing the deleted devices
from the queue mentioned above.

==105052==ERROR: AddressSanitizer: heap-use-after-free on address
0x60400001c418 at pc 0x55775caf1846 bp 0x7ffc83d9fb90 sp 0x7ffc83d9fb80
READ of size 8 at 0x60400001c418 thread T0
0 0x55775caf1845 in btd_service_get_device src/service.c:325
1 0x55775ca03da2 in short_lived_pa_sync profiles/audio/bap.c:2693
2 0x55775ca03da2 in pa_idle_timer profiles/audio/bap.c:1996

Vlad Pruteanu (1):
  bap: Remove entry of deleted device from bcast_pa_requests queue

 profiles/audio/bap.c | 11 +++++++++++
 1 file changed, 11 insertions(+)