commit ea2a494f4fa12eea06fa5ccccf73c23b9a0a4db4
author Chad Brubaker <cbrubaker@google.com> Wed Sep 28 20:32:12 2016 +0000
committer android-build-merger <android-build-merger@google.com> Wed Sep 28 20:32:12 2016 +0000
tree 8b09394bcb91326b9db68196c244e4654c7e4560
parent 178dca1c55c771c88652d28e10a2a032c28d6518
parent fd05934b20094432d7dbd60cbf8d1d1c6b3f3bb6

Merge "keystore: fix memory leak from readKeymasterBlob" am: 3746fcf327 am: 1156db460e
am: fd05934b20

Change-Id: I460e14a523c56e2703fdad89c0f81368d3048bb5

keystore/IKeystoreService.cpp

diff --git a/keystore/IKeystoreService.cpp b/keystore/IKeystoreService.cpp
index 9217fae..6863a3c 100644
--- a/keystore/IKeystoreService.cpp
+++ b/keystore/IKeystoreService.cpp
@@ -1697,6 +1697,12 @@
             KeyCharacteristics outCharacteristics;
             int ret = getKeyCharacteristics(name, clientId.get(), appData.get(), uid,
                                             &outCharacteristics);
+            if (clientId.get() && clientId->data) {
+                free(const_cast<void*>(static_cast<const void*>(clientId->data)));
+            }
+            if (appData.get() && appData->data) {
+                free(const_cast<void*>(static_cast<const void*>(appData->data)));
+            }
             reply->writeNoException();
             reply->writeInt32(ret);
             reply->writeParcelable(outCharacteristics);
@@ -1732,6 +1738,12 @@
             int32_t uid = data.readInt32();
             ExportResult result;
             exportKey(name, format, clientId.get(), appData.get(), uid, &result);
+            if (clientId.get() && clientId->data) {
+                free(const_cast<void*>(static_cast<const void*>(clientId->data)));
+            }
+            if (appData.get() && appData->data) {
+                free(const_cast<void*>(static_cast<const void*>(appData->data)));
+            }
             reply->writeNoException();
             reply->writeParcelable(result);