[Bluez-devel] [BUG] crash in pcm_bluetooth.c

Hi All,

I have a crash in pcm_bluetooth.c when i try a connection.

Here are the details :
I power on my bt headset (Sony Ericsson HBH970) - The headset opens
the connection...
Then i try to play an audio file -> SEG FAULT

$ gdb --args aplay -Dplug:bluetooth ~/sounds/enya- 44100Hz.wav
GNU gdb 6.6-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are

welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(gdb) r
Starting program: /usr/bin/aplay -Dplug:bluetooth ~/sounds/enya- 44100Hz.wav
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1211472192 (LWP 6891)]
(no debugging symbols found)
Lecture en cours WAVE '~/sounds/enya-44100Hz.wav' : Signed 16 bit Little
Endian, Taux 44100 Hz, Stéréo

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1211472192 (LWP 6891)]
0xb7b86196 in bluetooth_a2dp_write (io=0x8061940, areas=0x805a3e0,
offset=0, size=128)
at pcm_bluetooth.c:674
674 memcpy(a2dp->buffer + a2dp->count, a2dp-> sbc.data, a2dp->sbc.len);
$

When i launch the player again all is working ==> So this bug appears
only when the
headset is initiating the connection.

My setup:
* Ubuntu / Kernel 2.6.22-6
* This morning bluez-libs and bluez-utils cvs
* pcm_bluetooth.c version : REL-3_18: 1.64

Does anyone have a clue on this issues ?

Regards,

S. Baguet