<html>
    <head>
      <base href="https://bugs.freedesktop.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - pulseaudio 10.0: crash in bluetooth module when an HSP/A2DP source connects"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=100237">100237</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>pulseaudio 10.0: crash in bluetooth module when an HSP/A2DP source connects
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>PulseAudio
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>modules
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>pulseaudio-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>manuel.lauss@gmail.com
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>pulseaudio-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>CC</th>
          <td>lennart@poettering.net
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=130268" name="attach_130268" title="full debug log">attachment 130268</a> <a href="attachment.cgi?id=130268&action=edit" title="full debug log">[details]</a></span>
full debug log

When I connect an HSP/A2DP source, pulseaudio 10 and current -git crash in the
bluez5 module:

D: [pulseaudio] bluez5-util.c: Properties changed in device
/org/bluez/hci0/dev_FC_A8_9A_AC_72_44
D: [pulseaudio] backend-native.c: dbus: path=/Profile/HSPAGProfile,
interface=org.bluez.Profile1, member=NewConnection
D: [pulseaudio] backend-native.c: dbus: NewConnection
path=/org/bluez/hci0/dev_FC_A8_9A_AC_72_44, fd=19, profile headset_head_unit
I: [pulseaudio] backend-native.c: doing listen
D: [pulseaudio] bluez5-util.c: Transport
/org/bluez/hci0/dev_FC_A8_9A_AC_72_44/fd19 state: disconnected -> idle
D: [pulseaudio] backend-native.c: Transport
/org/bluez/hci0/dev_FC_A8_9A_AC_72_44/fd19 available for profile
headset_head_unit
D: [pulseaudio] backend-native.c: RFCOMM << AT+VGS=15
D: [pulseaudio] backend-native.c: RFCOMM >> OK
I: [pulseaudio] backend-native.c: Lost RFCOMM connection.
D: [pulseaudio] bluez5-util.c: Transport
/org/bluez/hci0/dev_FC_A8_9A_AC_72_44/fd19 state: idle -> disconnected
D: [pulseaudio] bluez5-util.c: dbus: path=/MediaEndpoint/A2DPSource,
interface=org.bluez.MediaEndpoint1, member=SelectConfiguration
D: [pulseaudio] bluez5-util.c: Unknown interface
org.freedesktop.DBus.Introspectable found, skipping
D: [pulseaudio] bluez5-util.c: Unknown interface org.bluez.MediaTransport1
found, skipping
D: [pulseaudio] bluez5-util.c: Unknown interface
org.freedesktop.DBus.Properties found, skipping
D: [pulseaudio] bluez5-util.c: dbus: path=/MediaEndpoint/A2DPSource,
interface=org.bluez.MediaEndpoint1, member=SetConfiguration
D: [pulseaudio] bluez5-util.c: Transport
/org/bluez/hci0/dev_FC_A8_9A_AC_72_44/fd2 state: disconnected -> idle
E: [pulseaudio] bluez5-util.c: Assertion '!device->wait_for_profiles_timer'
failed at
/var/tmp/portage/media-sound/pulseaudio-10.0/work/pulseaudio-10.0/src/modules/bluetooth/bluez5-util.c:254,
function device_start_waiting_for_profiles(). Aborting.


pulseaudio then crashes; the backtrace of the corefile shows this:

#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007f4187cfce2a in __GI_abort () at abort.c:89
#2  0x00007f417b1eb9a5 in pa_bluetooth_transport_set_state () from
/usr/lib64/pulse-10.0/modules/libbluez5-util.so
#3  0x00007f417b1ee500 in endpoint_set_configuration.isra () from
/usr/lib64/pulse-10.0/modules/libbluez5-util.so
#4  0x00007f417b1ee95b in endpoint_handler () from
/usr/lib64/pulse-10.0/modules/libbluez5-util.so
#5  0x00007f41884a2d53 in ?? () from /usr/lib64/libdbus-1.so.3
#6  0x00007f418849431c in dbus_connection_dispatch () from
/usr/lib64/libdbus-1.so.3
#7  0x00007f41889c7524 in dispatch_cb () from
/usr/lib64/pulseaudio/libpulsecommon-10.0.so
#8  0x00007f4188c1a32e in pa_mainloop_dispatch () from /usr/lib64/libpulse.so.0
#9  0x00007f4188c1a53c in pa_mainloop_iterate () from /usr/lib64/libpulse.so.0
#10 0x00007f4188c1a5e0 in pa_mainloop_run () from /usr/lib64/libpulse.so.0
#11 0x00000000004070c9 in main ()

bluez-5.44 is used.</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
          <li>You are the QA Contact for the bug.</li>
      </ul>
    </body>
</html>