diff options
| author | 2025-02-28 09:12:21 +0900 | |
|---|---|---|
| committer | 2025-03-05 17:20:08 +0900 | |
| commit | 4d78e342e546ec36418366b75017675dd3c71312 (patch) | |
| tree | 6979b4eb7c2bc14da239bd5c416636fa351542e9 /libs/binder/PermissionController.cpp | |
| parent | 48f26a3c63d9d96f2dab906b81142aaa9ecd03c9 (diff) | |
Support deleting param for preconnected sessions
Although we can pass arbitrary pointers to setup preconnected clients,
the lifetime isn't clear and it's very easy to make UAF bugs.
To prevent UAF, an additional function can be passed to delete param
when param is no longer required, effectively transferring the ownership
of param to RPC session.
Bug: 398890208
Test: atest MicrodroidTests
Change-Id: I1a1c149a56876f56fba81b89cdc90ee372d2d7fe
Diffstat (limited to 'libs/binder/PermissionController.cpp')
0 files changed, 0 insertions, 0 deletions