tree 139f96a3fd42b571e73f54f078c29459d5f39861
parent b95701b7723e4d00bc122d88bfb5bb27d971fe80
author Mikhail Fludkov <misha@pexip.com> 1503655140 +0200
committer Sebastian Dröge <sebastian@centricular.com> 1526306445 +0300

rtpsession: Fix on-feedback-rtcp race

If there is an external source which is about to timeout and be removed
from the source hashtable and we receive feedback RTCP packet with the
media ssrc of the source, we unlock the session in
rtp_session_process_feedback before emitting 'on-feedback-rtcp' signal
allowing rtcp timer to kick in and grab the lock. It will get rid of
the source and rtp_session_process_feedback will be left with RTPSource
with ref count 0.

The fix is to grab the ref to the RTPSource object in
rtp_session_process_feedback.

https://bugzilla.gnome.org/show_bug.cgi?id=795139