[bluez/bluez] f3626f: gatt-database: remove database from dbs list when ...

[bluez/bluez] f3626f: gatt-database: remove database from dbs list when ...

[Pauli Virtanen]

  Branch: refs/heads/1080317
  Home:   https://github.com/bluez/bluez
  Commit: f3626f6349fece2f1f4f464381c56efd07cac5c6
      https://github.com/bluez/bluez/commit/f3626f6349fece2f1f4f464381c56efd07cac5c6
  Author: Pauli Virtanen <pav@iki.fi>
  Date:   2026-04-12 (Sun, 12 Apr 2026)

  Changed paths:
    M src/gatt-database.c

  Log Message:
  -----------
  gatt-database: remove database from dbs list when destroyed

btd_gatt_database_new() adds btd_gatt_database to the dbs lookup queue,
but nothing removes it from there even when destroying.

Fix by removing databases from the lookup queue before destroy.

Fixes crash on adapter removal in some cases:

ERROR: AddressSanitizer: heap-use-after-free on address 0x7bd476be1308
READ of size 8 at 0x7bd476be1308 thread T0
    #0 0x00000064562a in match_db
    #1 0x000000865410 in queue_find
    #2 0x000000645671 in btd_gatt_database_get
0x7bd476be1308 is located 8 bytes inside of 128-byte region [0x7bd476be1300,0x7bd476be>
freed by thread T0 here:
    #0 0x7f1478cee4cf in free.part.0
    #1 0x000000621625 in gatt_database_free
    #2 0x000000645582 in btd_gatt_database_destroy



To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications