diff options
| author | Edwin Wong <edwinwong@google.com> | 2021-02-26 13:16:31 -0800 |
|---|---|---|
| committer | Edwin Wong <edwinwong@google.com> | 2021-02-27 00:06:06 +0000 |
| commit | 9ba33b35860503814ed02bf5bcf5ff24e4056f6d (patch) | |
| tree | d5f7f3d519cb1b0d3c7881cc7b810a72fd898665 /media/libmediatranscoding/TranscodingClientManager.cpp | |
| parent | 9bae1251cfbc6fde87896bf1264dd0bbded7c5e5 (diff) | |
[RESTRICT AUTOMERGE] Fix UAF in clearkey service's MemoryFileSystem
Fixes the potential issue of a UAF(Used After Free)
of a MemoryFileSystem handle in clearkey hidl service.
The issue can occur in a race codition where the handle
can be freed twice.
Test: sts-tradefed
sts-tradefed run sts-engbuild-no-spl-lock -m StsHostTestCases --test android.security.sts.Bug_176237595#testPocBug_176237595
Test: push to device with target_hwasan-userdebug build
adb shell /data/local/tmp/Bug-176237595_sts64
Bug: 176237595
Change-Id: I22faef2a8bd7c27db4b5ff8797a2711f1ffe22fb
Diffstat (limited to 'media/libmediatranscoding/TranscodingClientManager.cpp')
0 files changed, 0 insertions, 0 deletions