diff options
| author | 2020-09-22 13:05:15 -0700 | |
|---|---|---|
| committer | 2020-10-02 11:24:49 -0700 | |
| commit | 3e9afc163256db661b9039120d07501b3a8a7d99 (patch) | |
| tree | fa4ec4960f9d248093be44c5d49d75a7907c2d85 /libs/gui/BufferQueueThreadState.cpp | |
| parent | a72accd83cc7f7144ad19439c24d4db7a1572141 (diff) | |
Prevent mEventCache UAF in SensorEventConnection
Since there is no check to see if SensorEventConnection has been
destroyed, the mEventCache pointer can still be used even after it
was freed.
Bug: 168211968
Test: Run test code that attempts to enable a sensor after destroying
the SensorEventConnection, and verify no system_server crash occurs.
Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Diffstat (limited to 'libs/gui/BufferQueueThreadState.cpp')
0 files changed, 0 insertions, 0 deletions