| commit | bbf3b377482aeac64c23556bcb2a129d944629ed | [log] [tgz] |
|---|---|---|
| author | Arthur Ishiguro <arthuri@google.com> | Tue Sep 22 13:05:15 2020 -0700 |
| committer | Arthur Ishiguro <arthuri@google.com> | Sat Oct 03 08:52:48 2020 -0700 |
| tree | 9921f18c4f3155b4d1d4e67582d0a7664eee1477 | |
| parent | 8d49c3fbae160936ac44a1213e53e6cf617ee867 [diff] |
Prevent mEventCache UAF in SensorEventConnection Since there is no check to see if SensorEventConnection has been destroyed, the mEventCache pointer can still be used even after it was freed. Bug: 168211968 Test: Run test code that attempts to enable a sensor after destroying the SensorEventConnection, and verify no system_server crash occurs. Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580 Merged-In: Ia9275b7cc574df371cdb2e1b80c6699df193b580