Skip to content

services/voice_endpoint: Fix voice crash from invalid session setup result code#464

Merged
jplexer merged 1 commit into
coredevices:mainfrom
jplexer:voice_crash
Nov 13, 2025
Merged

services/voice_endpoint: Fix voice crash from invalid session setup result code#464
jplexer merged 1 commit into
coredevices:mainfrom
jplexer:voice_crash

Conversation

@jplexer
Copy link
Copy Markdown
Member

@jplexer jplexer commented Nov 13, 2025

A user experienced a watch crash when attempting voice replies to text messages.

The coredump revealed that the watch was sent a session setup result message with an invalid VoiceEndpointResult value of 0x11 (17). The VoiceEndpointResult enum only defines values 0x00-0x06, but the protocol handler in voice_endpoint.c was passing the raw message value to voice_handle_session_setup_result() without validation.

This invalid enum value caused undefined behavior that allowed code execution to reach an unexpected state, eventually triggering an assertion failure.

@jplexer jplexer requested a review from gmarull November 13, 2025 18:47
Signed-off-by: Joshua Jun <joshuajun@proton.me>
@jplexer jplexer merged commit 6ad71d7 into coredevices:main Nov 13, 2025
18 checks passed
@jplexer jplexer deleted the voice_crash branch November 14, 2025 08:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants