commit | 3e9afc163256db661b9039120d07501b3a8a7d99 | [log] [tgz] |
---|---|---|
author | Arthur Ishiguro <arthuri@google.com> | Tue Sep 22 13:05:15 2020 -0700 |
committer | Arthur Ishiguro <arthuri@google.com> | Fri Oct 02 11:24:49 2020 -0700 |
tree | fa4ec4960f9d248093be44c5d49d75a7907c2d85 | |
parent | a72accd83cc7f7144ad19439c24d4db7a1572141 [diff] |
Prevent mEventCache UAF in SensorEventConnection Since there is no check to see if SensorEventConnection has been destroyed, the mEventCache pointer can still be used even after it was freed. Bug: 168211968 Test: Run test code that attempts to enable a sensor after destroying the SensorEventConnection, and verify no system_server crash occurs. Change-Id: Ia9275b7cc574df371cdb2e1b80c6699df193b580