tag | cbdb590c5be25bced83db1c2f884c86132c3cb35 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Wed Jul 05 14:50:02 2023 -0700 |
object | 676c16df8585f0b8178dc5c22fee18033ea03ec8 |
Android 13.0.0 release 0.103
commit | 676c16df8585f0b8178dc5c22fee18033ea03ec8 | [log] [tgz] |
---|---|---|
author | Nick Chung <nickchung@google.com> | Tue Mar 28 06:11:38 2023 +0000 |
committer | Nick Chung <nickchung@google.com> | Tue Mar 28 06:11:38 2023 +0000 |
tree | 67510ff7fe011860773f4baa11fd04ebcbcc316b | |
parent | 2bda1c9518373563be560d9e933ce4ce9f3270d6 [diff] |
Top: Fix lwis_top_event_subscribe() UAF The event_subscriber_list is used to subscribe and unsubscribe from events. The list may be removed before it is unsubscribed from, so it must be protected by a Spinlock to prevent data corruption. Bug: 239867994 Test: Fuzzing test. GCA Change-Id: Ibc8c2b218e16e5300bc68a3e4281fc0ba53adf62 Signed-off-by: Nick Chung <nickchung@google.com>