Avoid deadlock on unknown user channel

fix.txt

@@ -37,14 +37,14 @@ Priority 0: security and crashers
    nil. Initialize the map in DialWithDialer and assign its owning client when
    actions are created. Add handler tests for add/remove/trigger.
 
-4. Unknown ChannelId deadlocks the protocol reader
+[x] 4. Unknown ChannelId deadlocks the protocol reader
    File: gumble/gumble/handlers.go
    In handleUserState, the unknown ChannelId branch takes c.volatile.Lock()
    again instead of unlocking before returning. This leaves the mutex locked
    forever. Replace with one unlock (prefer defer after acquisition) and add
    a malformed/out-of-order channel test.
 
-5. OpenAL Buffer.Delete deletes a source, not a buffer
+[x] 5. OpenAL Buffer.Delete deletes a source, not a buffer
    File: gumble/go-openal/openal/buffer.go
    Buffer.Delete calls C.walDeleteSource. It must call C.walDeleteBuffer.
    The current code reports invalid source errors and leaks OpenAL buffers.

gumble/gumble/handlers.go

@@ -660,7 +660,7 @@ func (c *Client) handleUserState(buffer []byte) error {
 			}
 			newChannel := c.Channels[*packet.ChannelId]
 			if newChannel == nil {
-				c.volatile.Lock()
+				c.volatile.Unlock()
 				return errInvalidProtobuf
 			}
 			if newChannel != user.Channel {

gumble/gumble/handlers_regression_test.go

@@ -0,0 +1,28 @@
+package gumble
+
+import (
+	"testing"
+	"time"
+
+	"git.stormux.org/storm/barnard/gumble/gumble/MumbleProto"
+	"google.golang.org/protobuf/proto"
+)
+
+// Regression: an out-of-order user move to an unknown channel used to lock
+// volatile twice, permanently deadlocking subsequent protocol handling.
+func TestUserStateUnknownChannelDoesNotDeadlock(t *testing.T) {
+	c := &Client{Config: NewConfig(), Users: make(Users), Channels: make(Channels)}
+	c.Users.create(1)
+	id, channel := uint32(1), uint32(99)
+	data, _ := proto.Marshal(&MumbleProto.UserState{Session: &id, ChannelId: &channel})
+	if err := c.handleUserState(data); err != errInvalidProtobuf {
+		t.Fatalf("got %v", err)
+	}
+	locked := make(chan struct{})
+	go func() { c.volatile.Lock(); c.volatile.Unlock(); close(locked) }()
+	select {
+	case <-locked:
+	case <-time.After(time.Second):
+		t.Fatal("volatile lock was left locked")
+	}
+}