commit 1d5fdf356dddc130a234d425a605e9db7de6aaec
author Mark Salyzyn <salyzyn@google.com> Sun Feb 04 15:27:23 2018 -0800
committer Mark Salyzyn <salyzyn@google.com> Mon Feb 05 11:00:59 2018 -0800
tree ca987adf8e492c5ed60fcc61d2ffb788e380abc0
parent abe25b1fcae452458dc967d8dde764c0bc7ca65d

lmkd: use after free

Remove a use-after free reference of procp->pid, using the already
captured pid variable.

Test: lmkd_unit_tests
Bug: 33808187
Change-Id: I3f5f8dd9acab2e28c81465d6195b73ae47e0a3c4

lmkd.c

diff --git a/lmkd.c b/lmkd.c
index b486a17..15471e0 100644
--- a/lmkd.c
+++ b/lmkd.c
@@ -615,11 +615,11 @@
     pid_remove(pid);
 
     if (r) {
-        ALOGE("kill(%d): errno=%d", procp->pid, errno);
+        ALOGE("kill(%d): errno=%d", pid, errno);
         return -1;
-    } else {
-        return tasksize;
     }
+
+    return tasksize;
 }
 
 /*