[Telepathy] [Bug 17646] New: Splitting a (channeltype, handletype) set between managers and factories could cause crashes.

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=17646

           Summary: Splitting a (channeltype, handletype) set between
                    managers and factories could cause crashes.
           Product: Telepathy
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: medium
         Component: telepathy-glib
        AssignedTo: telepathy at lists.freedesktop.org
        ReportedBy: will.thompson at collabora.co.uk


find_matching_channel_requests is used to figure out which requests are
satisfied or failed by TpChannelFactoryIface::new-channel and
::channel-error, respectively. But, in a pathological connection manager
where channels with the same ChannelType, TargetHandleType and
TargetHandle are sometimes managed by a TpChannelManager and other times
by a TpChannelFactoryIface, if the Factory signals something with that
CT, THT and TH first then the ChannelRequest known to the Manager will
be returned by find_matching_channel_requests. It will then be
prematurely answered and freed; when the Manager signals that token,
tp-glib will crash.

Being in this situation in the first place is insane, though.


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.