GNOME Bugzilla – Bug 777491
GUPnPServiceProxy crash in server_handler
Last modified: 2017-03-18 12:05:25 UTC
Created attachment 343799 [details] [review] patch to remove the handler unconditionally GUPnPServiceProxy installs a handler on the SoupServer that is owned by the GUPnPContext. As this server survives the GUPnPServiceProxy it is important that the handler is uninstalled when the service proxy is disposed. The handler is added in the subscribe() call and removed in the unsubscribe() call. However unsubscribe() is only called from dispose() if the subscribed flag is set. As we have seen warnings about unclassed pointers in cast to 'GUPnPServiceProxy' and observed crashes from server_handler() I suspect that there are circumstances when the server handler is not removed. The problems seem to occur only when there are obviously misbehaving UPnP devices on the network. Unfortunately we have only seen this in logs from customers and have not been able to actually reproduce such crashes.
Is that perhaps related to bug 747721?
(In reply to Jens Georg from comment #1) > Is that perhaps related to bug 747721? I don't think so. This report is about a problem in GUPnPServiceProxy, while bug 747721 seems to deal with a problem in GUPnPService.
Pushed with minor style fix