diff options
| author | 2020-09-22 13:05:15 -0700 | |
|---|---|---|
| committer | 2020-10-03 16:06:23 +0000 | |
| commit | 930b583557e46f14b6d0a0dc1700eb33f18a7714 (patch) | |
| tree | f3317e52504d127992700a4ddc0c136ecb7cde24 /libs/gui/BLASTBufferQueue.cpp | |
| parent | 669090928a6a6e87f36d07d63c14ea1b97f38d37 (diff) | |
Prevent mEventCache UAF in SensorEventConnection
Since there is no check to see if SensorEventConnection has been
destroyed, the mEventCache pointer can still be used even after it
was freed.
Bug: 168211968
Test: Run test code that attempts to enable a sensor after destroying
the SensorEventConnection, and verify no system_server crash occurs.
Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580
(cherry picked from commit 3e9afc163256db661b9039120d07501b3a8a7d99)
Diffstat (limited to 'libs/gui/BLASTBufferQueue.cpp')
0 files changed, 0 insertions, 0 deletions