commit 9ba33b35860503814ed02bf5bcf5ff24e4056f6d
author Edwin Wong <edwinwong@google.com> Fri Feb 26 13:16:31 2021 -0800
committer Edwin Wong <edwinwong@google.com> Sat Feb 27 00:06:06 2021 +0000
tree d5f7f3d519cb1b0d3c7881cc7b810a72fd898665
parent 9bae1251cfbc6fde87896bf1264dd0bbded7c5e5

[RESTRICT AUTOMERGE] Fix UAF in clearkey service's MemoryFileSystem

Fixes the potential issue of a UAF(Used After Free)
of a MemoryFileSystem handle in clearkey hidl service.
The issue can occur in a race codition where the handle
can be freed twice.

Test: sts-tradefed
  sts-tradefed run sts-engbuild-no-spl-lock -m StsHostTestCases --test android.security.sts.Bug_176237595#testPocBug_176237595

Test: push to device with target_hwasan-userdebug build
  adb shell /data/local/tmp/Bug-176237595_sts64

Bug: 176237595
Change-Id: I22faef2a8bd7c27db4b5ff8797a2711f1ffe22fb