mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-06-17 14:33:04 -04:00
Memory Safety: Medium Two calloc() calls in backend-native.c do not check the return value before dereferencing the pointer: 1. rfcomm_send_cmd_enqueue() allocates an rfcomm_cmd struct and immediately passes cmd->cmd to vsnprintf without a NULL check. 2. rfcomm_hfp_ag_clcc() allocates an updated_call struct and immediately dereferences updated_call->id without a NULL check. Both would crash on allocation failure. Add NULL checks that return an error instead of dereferencing NULL. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| g722 | ||
| a2dp-codec-aac.c | ||
| a2dp-codec-aptx.c | ||
| a2dp-codec-caps.h | ||
| a2dp-codec-faststream.c | ||
| a2dp-codec-lc3plus.c | ||
| a2dp-codec-ldac.c | ||
| a2dp-codec-opus-g.c | ||
| a2dp-codec-opus.c | ||
| a2dp-codec-sbc.c | ||
| asha-codec-g722.c | ||
| backend-hsphfpd.c | ||
| backend-native.c | ||
| backend-ofono.c | ||
| bap-codec-caps.h | ||
| bap-codec-lc3.c | ||
| bluez-hardware.conf | ||
| bluez5-dbus.c | ||
| bluez5-device.c | ||
| bt-latency.h | ||
| codec-loader.c | ||
| codec-loader.h | ||
| dbus-monitor.c | ||
| dbus-monitor.h | ||
| decode-buffer.h | ||
| defs.h | ||
| hci.c | ||
| hfp-codec-caps.h | ||
| hfp-codec-cvsd.c | ||
| hfp-codec-lc3-a127.c | ||
| hfp-codec-lc3-swb.c | ||
| hfp-codec-msbc.c | ||
| hfp-h2.h | ||
| iso-io.c | ||
| iso-io.h | ||
| media-codecs.c | ||
| media-codecs.h | ||
| media-sink.c | ||
| media-source.c | ||
| meson.build | ||
| midi-enum.c | ||
| midi-node.c | ||
| midi-parser.c | ||
| midi-server.c | ||
| midi.h | ||
| modemmanager.c | ||
| modemmanager.h | ||
| org.bluez.xml | ||
| player.c | ||
| player.h | ||
| plc.h | ||
| plugin.c | ||
| quirks.c | ||
| rate-control.h | ||
| README-MIDI.md | ||
| README-OPUS-A2DP.md | ||
| README-SBC-XQ.md | ||
| README-Telephony.md | ||
| rtp.h | ||
| sco-io.c | ||
| telephony.c | ||
| telephony.h | ||
| test-midi.c | ||
| upower.c | ||
| upower.h | ||