libbinder: onBinder* respect termination
Previously, these would leak binder objects if transactions occurred on
already terminated RpcState objects.
Fixes: 189345133
Test: binder_parcel_fuzzer (w/ leak repro), binderRpcTest
Change-Id: I68f86bf0656dd316691634d4fc411e6cac361449
diff --git a/libs/binder/RpcState.h b/libs/binder/RpcState.h
index aacb530..d63c1c3 100644
--- a/libs/binder/RpcState.h
+++ b/libs/binder/RpcState.h
@@ -81,7 +81,8 @@
* to the process, if this process already has one, or it takes ownership of
* that refcount
*/
- sp<IBinder> onBinderEntering(const sp<RpcSession>& session, const RpcAddress& address);
+ [[nodiscard]] status_t onBinderEntering(const sp<RpcSession>& session,
+ const RpcAddress& address, sp<IBinder>* out);
size_t countBinders();
void dump();