commit | 3b27b3b3bb36274171a9abb31f3e3f6b53036cf0 | [log] [tgz] |
---|---|---|
author | Arthur Ishiguro <arthuri@google.com> | Tue Sep 22 13:05:15 2020 -0700 |
committer | Arthur Ishiguro <arthuri@google.com> | Sat Oct 03 08:52:06 2020 -0700 |
tree | 83c39cc001d7152c100cb92bed70151a2d5f252f | |
parent | 01f9863464fb07aea1f7f2180ec4eb76ab7e25ed [diff] |
Prevent mEventCache UAF in SensorEventConnection Since there is no check to see if SensorEventConnection has been destroyed, the mEventCache pointer can still be used even after it was freed. Bug: 168211968 Test: Run test code that attempts to enable a sensor after destroying the SensorEventConnection, and verify no system_server crash occurs. Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580 Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580