Re: [PATCH BlueZ 0/2] a2dp: Fix crashes around pending SetConfiguration

[patchwork-bot+bluetooth@kernel.org]

Hello:

This series was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Thu,  1 Oct 2026 10:34:34 -0400 you wrote:
> bluetoothd 5.87 segfaulted in auto_config() with a G06-BT headset while
> WirePlumber 0.5.17 was stuck and its SetConfiguration calls ended in
> NoReply: the AVDTP channel went away while the reply was pending, and
> the reply then ran auto_config() with a NULL session.
> 
> Patch 2 fixes that crash and removes the MediaTransport created for the
> aborted request, so the next connection works. Patch 1 is an older,
> independent bug found while testing it: a rejected SetConfiguration
> leaves a dangling a2dp_stream on sep->streams, which ASAN reports as a
> use-after-free once the stream is configured again on the same session.
> 
> [...]

Here is the summary with links:
  - [BlueZ,1/2] a2dp: Fix UAF after rejected SetConfiguration
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=ef54133c69e9
  - [BlueZ,2/2] a2dp: Fix crash on NULL session in auto_config
    (no matching commit)

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html