[0.2.135] fix crash by invalid mem access

- fix address type error about source buffer
  which cause the crash during destroy.

Change-Id: I902fcbd53f4658439e1c5129753d11942f8f2607

diff --git a/muse/src/muse_player.c b/muse/src/muse_player.c
index 7e0a597..4450223 100644 (file)
--- a/muse/src/muse_player.c
+++ b/muse/src/muse_player.c
@@ -1449,7 +1449,7 @@ int player_disp_set_memory_buffer(muse_module_h module)
                goto ERROR;
        }
 
-       PLAYER_RETURN_MSG(api, ret, module, MUSE_TYPE_INT, "bo_addr", bo_addr);
+       PLAYER_RETURN_MSG(api, ret, module, MUSE_TYPE_POINTER, "bo_addr", bo_addr);
 
        /* don't call bo unmap/unref here *
         * it will be released at player_disp_deinit_memory_buffer() during _destroy */
@@ -1471,7 +1471,7 @@ int player_disp_deinit_memory_buffer(muse_module_h module)        /* MUSE_PLAYER_API_DE
        intptr_t bo_addr;
        tbm_bo bo;
 
-       if (player_msg_get(bo_addr, muse_server_module_get_msg(module))) {
+       if (player_msg_get_type(bo_addr, muse_server_module_get_msg(module), POINTER)) {
 
                bo = (tbm_bo)bo_addr;
 

diff --git a/packaging/mmsvc-player.spec b/packaging/mmsvc-player.spec
index 2fcc9bf..8c40d16 100644 (file)
--- a/packaging/mmsvc-player.spec
+++ b/packaging/mmsvc-player.spec
@@ -1,6 +1,6 @@
 Name:       mmsvc-player
 Summary:    A Media Player module for muse server
-Version:    0.2.134
+Version:    0.2.135
 Release:    0
 Group:      Multimedia/Libraries
 License:    Apache-2.0