| commit | fb4b73775dded64d853782e5e43bcb47f9b7413e | [log] [tgz] |
|---|---|---|
| author | Dominik Laskowski <domlaskowski@google.com> | Wed Nov 22 09:56:54 2023 -0500 |
| committer | Dominik Laskowski <domlaskowski@google.com> | Wed Nov 22 17:23:33 2023 -0500 |
| tree | 3cadc907b09f89c582b95258907c1f945c31448b | |
| parent | 81d8aadf7af97fbb6d9cec8ac48fba93b00b88e5 [diff] |
SF: Fix UAF on pacesetter change during commit During commit, the pacesetter's FrameTargeter could be destroyed after a hotplug reconnect or a resolution change, via processDisplayChanged. The reference in Scheduler::onFrameSignal was then dangling, causing a crash when dereferenced later during composite. Fixes: 308287117 Test: SchedulerTest.onFrameSignalMultipleDisplays Change-Id: I413ee7d9967e731825106ef2b6d37fbfb15516ea