Hi Howard, On Thu, Mar 5, 2020 at 3:06 AM Howard Chung <howardchung@xxxxxxxxxx> wrote: > > Initialized avdtp_local_sep later since stream could be NULL. > --- > > profiles/audio/avdtp.c | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) > > diff --git a/profiles/audio/avdtp.c b/profiles/audio/avdtp.c > index 0e075f9ff..12d984866 100644 > --- a/profiles/audio/avdtp.c > +++ b/profiles/audio/avdtp.c > @@ -3566,7 +3566,7 @@ int avdtp_abort(struct avdtp *session, struct avdtp_stream *stream) > { > struct seid_req req; > int ret; > - struct avdtp_local_sep *sep = stream->lsep; > + struct avdtp_local_sep *sep; > > if (!stream && session->discover) { > /* Don't call cb since it being aborted */ > @@ -3581,6 +3581,7 @@ int avdtp_abort(struct avdtp *session, struct avdtp_stream *stream) > if (stream->lsep->state == AVDTP_STATE_ABORTING) > return -EINVAL; I suspect there i something else going on then just the lsep being NULL since we do check it on the line above it would have crashed anyway, is this perhaps the result of lsep being unregistered before the avdtp_abort is called? > + sep = stream->lsep; > avdtp_sep_set_state(session, sep, AVDTP_STATE_ABORTING); > > if (session->req && stream == session->req->stream) > -- > 2.25.0.265.gbab2e86ba0-goog > -- Luiz Augusto von Dentz