* [PATCH] a2dp: Fix crash when SEP codec has not been initialized
@ 2022-03-25 9:27 Frédéric Danis
2022-03-25 11:01 ` bluez.test.bot
2022-03-25 20:06 ` [PATCH] " Luiz Augusto von Dentz
0 siblings, 2 replies; 4+ messages in thread
From: Frédéric Danis @ 2022-03-25 9:27 UTC (permalink / raw)
To: linux-bluetooth
If SEP has not been properly discovered avdtp_get_codec may return NULL
thus causing crashes such as when running AVRCP/TG/VLH/BI-01-C after
AVRCP/TG/RCR/BV-04-C
---
profiles/audio/a2dp.c | 17 ++++++++++++++---
1 file changed, 14 insertions(+), 3 deletions(-)
diff --git a/profiles/audio/a2dp.c b/profiles/audio/a2dp.c
index f761dbe54..7da008071 100644
--- a/profiles/audio/a2dp.c
+++ b/profiles/audio/a2dp.c
@@ -1995,7 +1995,12 @@ static gboolean get_codec(const GDBusPropertyTable *property,
{
struct a2dp_remote_sep *sep = data;
struct avdtp_service_capability *cap = avdtp_get_codec(sep->sep);
- struct avdtp_media_codec_capability *codec = (void *) cap->data;
+ struct avdtp_media_codec_capability *codec;
+
+ if (!cap)
+ return FALSE;
+
+ codec = (void *) cap->data;
dbus_message_iter_append_basic(iter, DBUS_TYPE_BYTE,
&codec->media_codec_type);
@@ -2008,10 +2013,16 @@ static gboolean get_capabilities(const GDBusPropertyTable *property,
{
struct a2dp_remote_sep *sep = data;
struct avdtp_service_capability *service = avdtp_get_codec(sep->sep);
- struct avdtp_media_codec_capability *codec = (void *) service->data;
- uint8_t *caps = codec->data;
+ struct avdtp_media_codec_capability *codec;
+ uint8_t *caps;
DBusMessageIter array;
+ if (!service)
+ return FALSE;
+
+ codec = (void *) service->data;
+ caps = codec->data;
+
dbus_message_iter_open_container(iter, DBUS_TYPE_ARRAY,
DBUS_TYPE_BYTE_AS_STRING, &array);
--
2.25.1
^ permalink raw reply related [flat|nested] 4+ messages in thread* RE: a2dp: Fix crash when SEP codec has not been initialized
2022-03-25 9:27 [PATCH] a2dp: Fix crash when SEP codec has not been initialized Frédéric Danis
@ 2022-03-25 11:01 ` bluez.test.bot
2022-03-25 20:06 ` [PATCH] " Luiz Augusto von Dentz
1 sibling, 0 replies; 4+ messages in thread
From: bluez.test.bot @ 2022-03-25 11:01 UTC (permalink / raw)
To: linux-bluetooth, frederic.danis
[-- Attachment #1: Type: text/plain, Size: 997 bytes --]
This is automated email and please do not reply to this email!
Dear submitter,
Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=626269
---Test result---
Test Summary:
CheckPatch PASS 1.59 seconds
GitLint PASS 1.10 seconds
Prep - Setup ELL PASS 52.73 seconds
Build - Prep PASS 0.92 seconds
Build - Configure PASS 10.45 seconds
Build - Make PASS 1841.06 seconds
Make Check PASS 12.83 seconds
Make Check w/Valgrind PASS 544.85 seconds
Make Distcheck PASS 292.04 seconds
Build w/ext ELL - Configure PASS 10.58 seconds
Build w/ext ELL - Make PASS 1798.41 seconds
Incremental Build with patchesPASS 0.00 seconds
---
Regards,
Linux Bluetooth
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH] a2dp: Fix crash when SEP codec has not been initialized
2022-03-25 9:27 [PATCH] a2dp: Fix crash when SEP codec has not been initialized Frédéric Danis
2022-03-25 11:01 ` bluez.test.bot
@ 2022-03-25 20:06 ` Luiz Augusto von Dentz
2022-03-28 18:16 ` Luiz Augusto von Dentz
1 sibling, 1 reply; 4+ messages in thread
From: Luiz Augusto von Dentz @ 2022-03-25 20:06 UTC (permalink / raw)
To: Frédéric Danis; +Cc: linux-bluetooth
Hi Frédéric,
On Fri, Mar 25, 2022 at 12:53 PM Frédéric Danis
<frederic.danis@collabora.com> wrote:
>
> If SEP has not been properly discovered avdtp_get_codec may return NULL
> thus causing crashes such as when running AVRCP/TG/VLH/BI-01-C after
> AVRCP/TG/RCR/BV-04-C
> ---
> profiles/audio/a2dp.c | 17 ++++++++++++++---
> 1 file changed, 14 insertions(+), 3 deletions(-)
>
> diff --git a/profiles/audio/a2dp.c b/profiles/audio/a2dp.c
> index f761dbe54..7da008071 100644
> --- a/profiles/audio/a2dp.c
> +++ b/profiles/audio/a2dp.c
> @@ -1995,7 +1995,12 @@ static gboolean get_codec(const GDBusPropertyTable *property,
> {
> struct a2dp_remote_sep *sep = data;
> struct avdtp_service_capability *cap = avdtp_get_codec(sep->sep);
> - struct avdtp_media_codec_capability *codec = (void *) cap->data;
> + struct avdtp_media_codec_capability *codec;
> +
> + if (!cap)
> + return FALSE;
> +
> + codec = (void *) cap->data;
>
> dbus_message_iter_append_basic(iter, DBUS_TYPE_BYTE,
> &codec->media_codec_type);
> @@ -2008,10 +2013,16 @@ static gboolean get_capabilities(const GDBusPropertyTable *property,
> {
> struct a2dp_remote_sep *sep = data;
> struct avdtp_service_capability *service = avdtp_get_codec(sep->sep);
> - struct avdtp_media_codec_capability *codec = (void *) service->data;
> - uint8_t *caps = codec->data;
> + struct avdtp_media_codec_capability *codec;
> + uint8_t *caps;
> DBusMessageIter array;
>
> + if (!service)
> + return FALSE;
> +
> + codec = (void *) service->data;
> + caps = codec->data;
> +
> dbus_message_iter_open_container(iter, DBUS_TYPE_ARRAY,
> DBUS_TYPE_BYTE_AS_STRING, &array);
>
> --
> 2.25.1
We should either have a .exist callback or not have the endpoint
registered if its codec is not available, I'm leaning toward the
latter given that it is useless to have the endpoint if it cannot be
used without the codec information.
--
Luiz Augusto von Dentz
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: [PATCH] a2dp: Fix crash when SEP codec has not been initialized
2022-03-25 20:06 ` [PATCH] " Luiz Augusto von Dentz
@ 2022-03-28 18:16 ` Luiz Augusto von Dentz
0 siblings, 0 replies; 4+ messages in thread
From: Luiz Augusto von Dentz @ 2022-03-28 18:16 UTC (permalink / raw)
To: Frédéric Danis; +Cc: linux-bluetooth
Hi Frédéric,
On Fri, Mar 25, 2022 at 1:06 PM Luiz Augusto von Dentz
<luiz.dentz@gmail.com> wrote:
>
> Hi Frédéric,
>
> On Fri, Mar 25, 2022 at 12:53 PM Frédéric Danis
> <frederic.danis@collabora.com> wrote:
> >
> > If SEP has not been properly discovered avdtp_get_codec may return NULL
> > thus causing crashes such as when running AVRCP/TG/VLH/BI-01-C after
> > AVRCP/TG/RCR/BV-04-C
> > ---
> > profiles/audio/a2dp.c | 17 ++++++++++++++---
> > 1 file changed, 14 insertions(+), 3 deletions(-)
> >
> > diff --git a/profiles/audio/a2dp.c b/profiles/audio/a2dp.c
> > index f761dbe54..7da008071 100644
> > --- a/profiles/audio/a2dp.c
> > +++ b/profiles/audio/a2dp.c
> > @@ -1995,7 +1995,12 @@ static gboolean get_codec(const GDBusPropertyTable *property,
> > {
> > struct a2dp_remote_sep *sep = data;
> > struct avdtp_service_capability *cap = avdtp_get_codec(sep->sep);
> > - struct avdtp_media_codec_capability *codec = (void *) cap->data;
> > + struct avdtp_media_codec_capability *codec;
> > +
> > + if (!cap)
> > + return FALSE;
> > +
> > + codec = (void *) cap->data;
> >
> > dbus_message_iter_append_basic(iter, DBUS_TYPE_BYTE,
> > &codec->media_codec_type);
> > @@ -2008,10 +2013,16 @@ static gboolean get_capabilities(const GDBusPropertyTable *property,
> > {
> > struct a2dp_remote_sep *sep = data;
> > struct avdtp_service_capability *service = avdtp_get_codec(sep->sep);
> > - struct avdtp_media_codec_capability *codec = (void *) service->data;
> > - uint8_t *caps = codec->data;
> > + struct avdtp_media_codec_capability *codec;
> > + uint8_t *caps;
> > DBusMessageIter array;
> >
> > + if (!service)
> > + return FALSE;
> > +
> > + codec = (void *) service->data;
> > + caps = codec->data;
> > +
> > dbus_message_iter_open_container(iter, DBUS_TYPE_ARRAY,
> > DBUS_TYPE_BYTE_AS_STRING, &array);
> >
> > --
> > 2.25.1
>
> We should either have a .exist callback or not have the endpoint
> registered if its codec is not available, I'm leaning toward the
> latter given that it is useless to have the endpoint if it cannot be
> used without the codec information.
In case you missed my response on slack, here is the suggestion change:
diff --git a/profiles/audio/a2dp.c b/profiles/audio/a2dp.c
index c3ac432a7..28654924b 100644
--- a/profiles/audio/a2dp.c
+++ b/profiles/audio/a2dp.c
@@ -2074,6 +2074,11 @@ static struct a2dp_remote_sep
*register_remote_sep(void *data, void *user_data)
if (sep)
return sep;
+ if (avdtp_get_codec(rsep)) {
+ error("Unable to get remote sep codec");
+ return NULL;
+ }
+
sep = new0(struct a2dp_remote_sep, 1);
sep->chan = chan;
sep->sep = rsep;
>
>
>
> --
> Luiz Augusto von Dentz
--
Luiz Augusto von Dentz
^ permalink raw reply related [flat|nested] 4+ messages in thread
end of thread, other threads:[~2022-03-28 18:17 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-03-25 9:27 [PATCH] a2dp: Fix crash when SEP codec has not been initialized Frédéric Danis
2022-03-25 11:01 ` bluez.test.bot
2022-03-25 20:06 ` [PATCH] " Luiz Augusto von Dentz
2022-03-28 18:16 ` Luiz Augusto von Dentz
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.