From: Seungbae Shin <seungbae.shin@samsung.com>
Date: Tue, 11 Apr 2023 06:54:49 +0000 (+0900)
Subject: tizenaudio-policy: Fix ASAN stack-buffer-overflow defect
X-Git-Tag: accepted/tizen/7.0/unified/20230413.155240^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=90dcc4ba9b06893fcf9f0645fd12ba08e9cb5dde;p=platform%2Fcore%2Fmultimedia%2Fpulseaudio-modules-tizen.git

tizenaudio-policy: Fix ASAN stack-buffer-overflow defect

==pulseaudio==586==ERROR: AddressSanitizer: stack-buffer-overflow
WRITE of size 8 at 0x007ffa2fa500 thread T0

[Version] 15.0.34
[Issue Type] Bug

Change-Id: Icb95313682de9acb7390196df5be03df122a2f26
---

diff --git a/packaging/pulseaudio-modules-tizen.spec b/packaging/pulseaudio-modules-tizen.spec
index 74c31ae..be642d8 100644
--- a/packaging/pulseaudio-modules-tizen.spec
+++ b/packaging/pulseaudio-modules-tizen.spec
@@ -2,7 +2,7 @@
 
 Name:             pulseaudio-modules-tizen
 Summary:          Pulseaudio modules for Tizen
-Version:          15.0.33
+Version:          15.0.34
 Release:          0
 Group:            Multimedia/Audio
 License:          LGPL-2.1+
diff --git a/src/module-tizenaudio-policy.c b/src/module-tizenaudio-policy.c
index 81dbb4e..6e799f5 100644
--- a/src/module-tizenaudio-policy.c
+++ b/src/module-tizenaudio-policy.c
@@ -528,7 +528,7 @@ static void load_loopback_module_by_parent_id(struct userdata* u, int32_t parent
 static void unload_loopback_modules_by_device_disconnect(struct userdata* u, pa_sink *sink, pa_source *source)
 {
     loopback_module *loopback;
-    int32_t parent_id;
+    intptr_t *parent_id;
     void *state;
 
     pa_assert(u);
@@ -539,8 +539,8 @@ static void unload_loopback_modules_by_device_disconnect(struct userdata* u, pa_
         if (loopback->module &&
            ((sink && (loopback->sink == sink)) ||
            (source && (loopback->source == source)))) {
-            pa_log_info("  -- unload module-loopback(%p) for parent_id(%d)", loopback->module, parent_id);
-            pa_hashmap_remove_and_free(u->loopback_modules, PA_INT_TO_PTR(parent_id));
+            pa_log_info("  -- unload module-loopback(%p) for parent_id(%d)", loopback->module, (int32_t)*parent_id);
+            pa_hashmap_remove_and_free(u->loopback_modules, parent_id);
         }
     }
 }