diff options
| author | Hyundo Moon <hdmoon@google.com> | 2020-01-31 19:27:52 +0900 |
|---|---|---|
| committer | Hyundo Moon <hdmoon@google.com> | 2020-02-04 22:03:27 +0900 |
| commit | 887be3216636566dfeacba29848d417f6a83deaf (patch) | |
| tree | ebc5c6537287d3a8c5163dc3e8904bb65a3230a8 /tools/aapt2/java/JavaClassGenerator_test.cpp | |
| parent | 2e000710b8b92bd2de24d33d40b6ba06ebf8b1e8 (diff) | |
Prevent the session count from being compromised
Some ways are found to reduce the session count multiple times by
destroying only one session:
1) Call MediaSession#release() multiple times.
2) Call MediaSession#release() and make the process crash
This CL fixes this problem by checking whether the session is already
destroyed in the MediaSessionService.
Also, another hole was found that calling MediaSession2#close()
decrements the session count, although the count does not increase
when creating the MediaSession2. This can be badly used for creating
MediaSession above limit. This CL also fixes this problem.
Bug: 143672815
Test: atest MediaSessionTest
Change-Id: I65225acc98d4bb0ce5cbb7e692675dd05ead635c
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator_test.cpp')
0 files changed, 0 insertions, 0 deletions