On Tue, 2014-06-24 at 12:45 +0300, Slava Monich wrote:
> connect_service() calls __connman_service_connect() which may in turn
> call reply_pending() which unrefs service->pending and sets it to
> NULL. Therefore, connect_service() needs to check service->pending for
> NULL prior to calling dbus_message_unref() on it.

This depends how the dbus library has been compiled. With a suitable set
of defines it always crashes, with some others it functions even though
a NULL pointer is given.

How many more of these potential crashes might there be...?

Cheers,

        Patrik


_______________________________________________
connman mailing list
connman@connman.net
https://lists.connman.net/mailman/listinfo/connman

Reply via email to