| commit | 9fb3ea9c93b98a77e7899299019542e333da21fb | [log] [tgz] |
|---|---|---|
| author | Arthur Ishiguro <arthuri@google.com> | Tue Sep 22 13:05:15 2020 -0700 |
| committer | Arthur Ishiguro <arthuri@google.com> | Sat Oct 03 16:03:54 2020 +0000 |
| tree | 2ce61c96012b63eceb2f3ec83bff9ed7b90961e2 | |
| parent | 59ffb3c974e5264fdc1bffee68cc30112161ecc2 [diff] |
Prevent mEventCache UAF in SensorEventConnection Since there is no check to see if SensorEventConnection has been destroyed, the mEventCache pointer can still be used even after it was freed. Bug: 168211968 Test: Run test code that attempts to enable a sensor after destroying the SensorEventConnection, and verify no system_server crash occurs. Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580 Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580