diff options
| author | 2020-09-22 13:05:15 -0700 | |
|---|---|---|
| committer | 2020-10-02 16:40:09 +0000 | |
| commit | 09052cc6655ab2756c4c484b958cdaf29325e652 (patch) | |
| tree | 4e505d8dd01306b421a9175865b579f448c6da1c /services/surfaceflinger/RegionSamplingThread.cpp | |
| parent | d2a3e9b37e8175e69ade22e8cdd600421b71fb87 (diff) | |
Prevent mEventCache UAF in SensorEventConnection
Since there is no check to see if SensorEventConnection has been
destroyed, the mEventCache pointer can still be used even after it
was freed.
Bug: 168211968
Test: Run test code that attempts to enable a sensor after destroying
the SensorEventConnection, and verify no system_server crash occurs.
Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Diffstat (limited to 'services/surfaceflinger/RegionSamplingThread.cpp')
0 files changed, 0 insertions, 0 deletions