| commit | b0177a0828fe3f516326c1b63340ff153cc8beac | [log] [tgz] |
|---|---|---|
| author | Bart Van Assche <bvanassche@google.com> | Tue Oct 18 15:48:31 2022 -0700 |
| committer | Bart Van Assche <bvanassche@google.com> | Tue Oct 18 16:34:12 2022 -0700 |
| tree | 6937f1974212bce0e528d45085021702f103207d | |
| parent | 9457a9ab72e981b4bb7d0552a482c1132f3a5589 [diff] |
init/epoll: Fix a potential use-after-free If UnregisterHandler() is called from inside a handler for an event that has not yet been processed then that will result in a use-after-free. Fix this by passing file descriptors to epoll_ctl() instead of pointers to map elements. Bug: 213617178 Change-Id: Ie62e3a299af964271ec24cd8fc2e794042b77ee6 Signed-off-by: Bart Van Assche <bvanassche@google.com>