diff options
| author | 2020-09-22 13:05:15 -0700 | |
|---|---|---|
| committer | 2020-10-03 16:03:54 +0000 | |
| commit | 9fb3ea9c93b98a77e7899299019542e333da21fb (patch) | |
| tree | 2ce61c96012b63eceb2f3ec83bff9ed7b90961e2 /services/surfaceflinger/RegionSamplingThread.cpp | |
| parent | 59ffb3c974e5264fdc1bffee68cc30112161ecc2 (diff) | |
Prevent mEventCache UAF in SensorEventConnection
Since there is no check to see if SensorEventConnection has been
destroyed, the mEventCache pointer can still be used even after it
was freed.
Bug: 168211968
Test: Run test code that attempts to enable a sensor after destroying
the SensorEventConnection, and verify no system_server crash occurs.
Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580
Diffstat (limited to 'services/surfaceflinger/RegionSamplingThread.cpp')
0 files changed, 0 insertions, 0 deletions