From 018c8e795dabbb36933cfaf65d92a257c54f57b0 Mon Sep 17 00:00:00 2001
From: evgeny <evgeny@adaptto.ru>
Date: Sat, 26 Sep 2026 19:18:42 +0300
Subject: [PATCH] =?UTF-8?q?android:=20=D1=84=D0=B8=D0=BA=D1=81=20UAF=20Aud?=
 =?UTF-8?q?ioTrack=20=D0=BF=D1=80=D0=B8=20=D0=BF=D0=B5=D1=80=D0=B5=D0=BA?=
 =?UTF-8?q?=D0=BB=D1=8E=D1=87=D0=B5=D0=BD=D0=B8=D0=B8=20=D0=B3=D1=80=D1=83?=
 =?UTF-8?q?=D0=BF=D0=BF=D1=8B=20=D1=80=D0=B0=D1=86=D0=B8=D0=B8=20(start=20?=
 =?UTF-8?q?=E2=86=92=20releaseLocked)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../app/src/main/java/com/utun/chat/data/RadioAudioEngine.kt | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tools/chatgui-android/app/src/main/java/com/utun/chat/data/RadioAudioEngine.kt b/tools/chatgui-android/app/src/main/java/com/utun/chat/data/RadioAudioEngine.kt
index 86f07b23..7be1a082 100644
--- a/tools/chatgui-android/app/src/main/java/com/utun/chat/data/RadioAudioEngine.kt
+++ b/tools/chatgui-android/app/src/main/java/com/utun/chat/data/RadioAudioEngine.kt
@@ -82,7 +82,12 @@ class RadioAudioEngine {
 
     private fun startBlocking(group: Long) {
         if (!active || groupId != group) return
+
+        /* Переключение группы: гасим старое аудио (active=false даёт старым
+         * capture/play-потокам выйти до release, иначе UAF AudioTrack в playLoop). */
+        active = false
         releaseLocked(false)
+        active = true
 
         if (!NativeLib.radioAudioStart(group)) {
             active = false