On Wed, 2014-05-14 at 09:12 +0300, Hannu Mallat wrote:
> It could happen that cleaning up the pending message in
> agent_receive_message() would as a side effect clear the last
> reference to the service via driver context unref function pointer.
> Service cleanup would then call connman_agent_cancel(), which would
> try to clean up the pending message for the second time as the pending
> pointer was still non-NULL.
>
> Fixed by decoupling the pointer to the pending request from the agent
> structure before calling agent_request_free().
Applied, thanks!
Patrik
_______________________________________________
connman mailing list
connman@connman.net
https://lists.connman.net/mailman/listinfo/connman
