diff options
| author | 2020-09-22 13:05:15 -0700 | |
|---|---|---|
| committer | 2020-11-18 22:51:39 +0000 | |
| commit | adb416ac460cb28ca03e7898bdd154b1d0f8c16b (patch) | |
| tree | 2df985d7da5c32e2fd69054e289430ee3804ffd9 /libs/gui/BLASTBufferQueue.cpp | |
| parent | 9243c1057f9c81734e0ce2413d1405d9aba04200 (diff) | |
Prevent mEventCache UAF in SensorEventConnection
Since there is no check to see if SensorEventConnection has been
destroyed, the mEventCache pointer can still be used even after it
was freed.
Bug: 168211968
Test: Run test code that attempts to enable a sensor after destroying
the SensorEventConnection, and verify no system_server crash occurs.
Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580
(cherry picked from commit 3e9afc163256db661b9039120d07501b3a8a7d99)
(cherry picked from commit 930b583557e46f14b6d0a0dc1700eb33f18a7714)
Diffstat (limited to 'libs/gui/BLASTBufferQueue.cpp')
0 files changed, 0 insertions, 0 deletions