Crash occurs using BluetoothDevice.fetchUuidsWithSdp API

[Pradeep Panigrahi]

Hi Dbus experts,
I am getting a dbus crash while scanning for device. Please help me if
there is already possible any fix for this.

Root cause of crash:: Below dbus_assertion is failed
It's looks like during the operation (real)->len is equaled to
(real)->allocated which means that DBUS was not able to add
_DBUS_STRING_ALLOCATION_PADDING for one of the string.
This could be the corner case in DBUS.

WARN [ 4032.884348] (926:926) libdbus 926: assertion failed "(real)->len <=
((real)->allocated - _DBUS_STRING_ALLOCATION_PADDING)" file "external/dbus
/dbus/dbus-string.c" line 564 function _dbus_string_get_byte

which is leading to send below fatal signal to kernel

FATAL [ 4032.924390] (926:926) libc Fatal signal 11 (SIGSEGV) at 0xdeadbaad
(code=1), thread 926 (bluetoothd)

later kernel is crashed

WAR[ 1142.913962] == Native crash-info: ==
WAR[ 1142.914329] pid: 926, tid: 926, name: bluetoothd >>>
/system/bin/bluetoothd <<<
WAR[ 1142.914512] signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr
deadbaad
WAR[ 1142.920677]
WAR[ 1142.920677] backtrace:
WAR[ 1142.920982] #00 pc 000183aa /system/lib/libc.so
WAR[ 1142.921074] #01 pc 0000dc84 /system/lib/libc.so (abort+4)
WAR[ 1142.921226] #02 pc 00030cd9 /system/lib/libdbus.so (_dbus_abort+48)
WAR[ 1142.921318] #03 pc 0001971b /system/lib/libdbus.so
(_dbus_real_assert+34)
WAR[ 1142.921470] #04 pc 0002c451 /system/lib/libdbus.so
(_dbus_string_get_byte+156)
WAR[ 1142.921806] #05 pc 0001c789 /system/lib/libdbus.so
(_dbus_header_get_message_type+4)
WAR[ 1142.921898] #06 pc 00023c93 /system/lib/libdbus.so
WAR[ 1142.922020] #07 pc 0001625b /system/lib/libbluetoothd.so
WAR[ 1142.922111] #08 pc 0001649b /system/lib/libbluetoothd.so
WAR[ 1142.922264] #09 pc 00018565 /system/lib/libbluetoothd.so
WAR[ 1142.922356] #10 pc 0001a96f /system/lib/libglib.so
WAR[ 1142.922508] #11 pc 0001132d /system/lib/libglib.so
(g_main_context_dispatch+328)
WAR[ 1142.922661] #12 pc 00011723 /system/lib/libglib.so
WAR[ 1142.922752] #13 pc 00011ab7 /system/lib/libglib.so
(g_main_loop_run+330)
WAR[ 1142.922905] #14 pc 000196b5 /system/lib/libbluetoothd.so (main+2016)
WAR[ 1142.922996] #15 pc 00017213 /system/lib/libc.so (__libc_init+38)
WAR[ 1142.923149] #16 pc 000002f4 /system/bin/bluetoothd

INF[ 1142.923485] SysRq : Trigger a crash

ALE[ 1142.923698] Unable to handle kernel NULL pointer dereference at
virtual address 00000000
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/dbus/attachments/20130215/bfe553f4/attachment.html>