commit | 09052cc6655ab2756c4c484b958cdaf29325e652 | [log] [tgz] |
---|---|---|
author | Arthur Ishiguro <arthuri@google.com> | Tue Sep 22 13:05:15 2020 -0700 |
committer | Arthur Ishiguro <arthuri@google.com> | Fri Oct 02 16:40:09 2020 +0000 |
tree | 4e505d8dd01306b421a9175865b579f448c6da1c | |
parent | d2a3e9b37e8175e69ade22e8cdd600421b71fb87 [diff] |
Prevent mEventCache UAF in SensorEventConnection Since there is no check to see if SensorEventConnection has been destroyed, the mEventCache pointer can still be used even after it was freed. Bug: 168211968 Test: Run test code that attempts to enable a sensor after destroying the SensorEventConnection, and verify no system_server crash occurs. Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580 Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580