diff options
| author | 2023-11-22 09:56:54 -0500 | |
|---|---|---|
| committer | 2023-11-22 17:23:33 -0500 | |
| commit | fb4b73775dded64d853782e5e43bcb47f9b7413e (patch) | |
| tree | 3cadc907b09f89c582b95258907c1f945c31448b /libs/gui/LayerState.cpp | |
| parent | 81d8aadf7af97fbb6d9cec8ac48fba93b00b88e5 (diff) | |
SF: Fix UAF on pacesetter change during commit
During commit, the pacesetter's FrameTargeter could be destroyed after a
hotplug reconnect or a resolution change, via processDisplayChanged. The
reference in Scheduler::onFrameSignal was then dangling, causing a crash
when dereferenced later during composite.
Fixes: 308287117
Test: SchedulerTest.onFrameSignalMultipleDisplays
Change-Id: I413ee7d9967e731825106ef2b6d37fbfb15516ea
Diffstat (limited to 'libs/gui/LayerState.cpp')
0 files changed, 0 insertions, 0 deletions