[bluez/bluez] 7a64bb: avdtp: Fix use-after-free in connection_lost

"github-actions[bot]" <[email protected]>
Newsgroups org.kernel.vger.linux-bluetooth
Message-ID <bluez/bluez/push/refs/heads/1142087/[email protected]>
  Branch: refs/heads/1142087
  Home:   https://github.com/bluez/bluez
  Commit: 7a64bbfbe39d139b4c890de6ba272183b7a29b61
      https://github.com/bluez/bluez/commit/7a64bbfbe39d139b4c890de6ba272183b7a29b61
  Author: Jinwang Li <[email protected]>
  Date:   2026-08-07 (Fri, 07 Aug 2026)

  Changed paths:
    M profiles/audio/avdtp.c

  Log Message:
  -----------
  avdtp: Fix use-after-free in connection_lost

release_stream() may free the session's a2dp_setup through
abort_cfm(). Subsequently, finalize_discovery() passes the same
freed a2dp_setup to discover_cb(), resulting in a use-after-free.

Call finalize_discovery() before release_stream() instead.

Assisted-by: Claude:claude-sonnet-5
Signed-off-by: Jinwang Li <[email protected]>



To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.