From 66014e58283aa7140b4400d20d44b357d6d714cc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Barnab=C3=A1s=20P=C5=91cze?= <pobrn@protonmail.com>
Date: Tue, 11 Jul 2023 20:18:29 +0200
Subject: [PATCH] spa: bluez: backend-native: fix DTMF string leak

---
 spa/plugins/bluez5/backend-native.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/spa/plugins/bluez5/backend-native.c b/spa/plugins/bluez5/backend-native.c
index ecd4c7761..908ad9fa9 100644
--- a/spa/plugins/bluez5/backend-native.c
+++ b/spa/plugins/bluez5/backend-native.c
@@ -1163,10 +1163,9 @@ next_indicator:
 			return true;
 		}
 	} else if (spa_strstartswith(buf, "AT+VTS=")) {
-		char *dtmf;
+		char dtmf[2];
 		enum cmee_error error;
 
-		dtmf = calloc(1, 2);
 		if (sscanf(buf, "AT+VTS=%1s", dtmf) != 1) {
 			spa_log_debug(backend->log, "Failed to parse AT+VTS: \"%s\"", buf);
 			rfcomm_send_error(rfcomm, CMEE_AG_FAILURE);