diff options
| author | David Stevens <stevensd@google.com> | 2020-10-15 10:35:46 +0900 |
|---|---|---|
| committer | David Stevens <stevensd@google.com> | 2020-10-22 09:45:09 +0900 |
| commit | be8f52e8b063eb350085c6733956e95576d3b369 (patch) | |
| tree | 245bf1666d6799fdf00c8a26f8053c2d669952af /identity/support/src/cppbor_parse.cpp | |
| parent | cdf176e17beb55a8d3db69ff9f1878706f90514f (diff) | |
graphics: fix use-after-free in mapper 2.0 passthrough
The mapper 2.0 gralloc passthrough keeps a set of the native_handle_t
pointers of all imported buffers. This change ensures that the
underlying HAL wrapper freeing the native_handle_t is performed
atomically with respect to accesses to the passthrough's native_handle_t
pointer set.
This fixes a race where a native_handle_t could be reallocated between
being freed by the HAL wrapper and removed from the passthrough's set,
which could then cause the import which happened to reallocate that
native_handle_t to spuriously fail.
Bug: 170798776
Test: Manually very no more spurious import failures in ARCVM's decoder.
Change-Id: I654a44e94adb319f54fb462f4484db414ca1b154
Diffstat (limited to 'identity/support/src/cppbor_parse.cpp')
0 files changed, 0 insertions, 0 deletions