Bluez 4.60, Kernel 2.6.32.4 ofono git commit no: e82972722418407737c68631a78bb3c96e6f7d55 bluetoothd crash when process second terminate request from HFP hands free unit. test steps: 1) make a service level connection to HF AG from HF unit 2) make a outgoing call from HF unit 3) terminate the outgoing call 4) make a outgoing call again from HF unit 5) terminate the outgoing call 6) bluetoothd crash Possible root cause: bluetoothd function call trace #0 0xb7756424 in __kernel_vsyscall () #1 0xb74fd6d0 in raise () from /lib/tls/i686/cmov/libc.so.6 #2 0xb74ff098 in abort () from /lib/tls/i686/cmov/libc.so.6 #3 0xb753b24d in ?? () from /lib/tls/i686/cmov/libc.so.6 #4 0xb7541604 in ?? () from /lib/tls/i686/cmov/libc.so.6 #5 0xb76b4126 in g_free () from /usr/lib/libglib-2.0.so.0 #6 0xb77c8f8d in vc_free () from /usr/sbin/bluetoothd #7 0xb77ca443 in handle_vc_property_changed () from /usr/sbin/bluetoothd #8 0xb777efbe in signal_filter () from /usr/sbin/bluetoothd #9 0xb777e996 in message_filter () from /usr/sbin/bluetoothd #10 0xb76470d5 in dbus_connection_dispatch () from /lib/libdbus-1.so.3 #11 0xb777d498 in message_dispatch () from /usr/sbin/bluetoothd #12 0xb76ac2b6 in ?? () from /usr/lib/libglib-2.0.so.0 #13 0xb76abb88 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #14 0xb76af0eb in ?? () from /usr/lib/libglib-2.0.so.0 #15 0xb76af5ba in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #16 0xb77aac07 in main () from /usr/sbin/bluetoothd