am skip reason: Change-Id Ib06fe25dc5353599b914f93d586f0de6eaf32241 with SHA-1 7c55be6d66 is in history
Change-Id: I304a4235cf26ab22334368b8ba35967a5d1ddc27
am skip reason: Change-Id Ib06fe25dc5353599b914f93d586f0de6eaf32241 with SHA-1 7c55be6d66 is in history
Change-Id: Ib620c3527e51988e93d076b6e5bb4e01cbe0e706
It is possible for sensor handles retrieved using
ASensorManager_getDefaultSensor() to become stale if the underlying
binder connection to the sensor service gets reset. This can be
triggered by ASensorManager_createEventQueue(), so any sensor handle
retrieved prior to this call may become stale, resulting in a use-after-
free when the handle is eventually registered with the queue. To avoid
this, the event queue is created before retrieving or registering the
sensor.
Bug: 150225255
Test: No longer crashes with proof-of-concept on Pixel 2 XL.
Change-Id: I243f6c68c734af3eb5488855d965a894b5fb99e5
It is possible for sensor handles retrieved using
ASensorManager_getDefaultSensor() to become stale if the underlying
binder connection to the sensor service gets reset. This can be
triggered by ASensorManager_createEventQueue(), so any sensor handle
retrieved prior to this call may become stale, resulting in a use-after-
free when the handle is eventually registered with the queue. To avoid
this, the event queue is created before retrieving or registering the
sensor.
Bug: 150225255
Test: No longer crashes with proof-of-concept on Pixel 2 XL.
Change-Id: I243f6c68c734af3eb5488855d965a894b5fb99e5
It is possible for sensor handles retrieved using
ASensorManager_getDefaultSensor() to become stale if the underlying
binder connection to the sensor service gets reset. This can be
triggered by ASensorManager_createEventQueue(), so any sensor handle
retrieved prior to this call may become stale, resulting in a use-after-
free when the handle is eventually registered with the queue. To avoid
this, the event queue is created before retrieving or registering the
sensor.
Bug: 150225255
Test: No longer crashes with proof-of-concept on Pixel 2 XL.
Change-Id: I243f6c68c734af3eb5488855d965a894b5fb99e5
It is possible for sensor handles retrieved using
ASensorManager_getDefaultSensor() to become stale if the underlying
binder connection to the sensor service gets reset. This can be
triggered by ASensorManager_createEventQueue(), so any sensor handle
retrieved prior to this call may become stale, resulting in a use-after-
free when the handle is eventually registered with the queue. To avoid
this, the event queue is created before retrieving or registering the
sensor.
Bug: 150225255
Test: No longer crashes with proof-of-concept on Pixel 2 XL.
Change-Id: I243f6c68c734af3eb5488855d965a894b5fb99e5
The webview_zygote denial should now be fixed; removing it from the list
so that we see if this regresses or continues to fail.
Bug: 149481620
Test: check for avc denials from webview_zygote
Change-Id: I2265ff314d1fa7956aa8b443040199acccb23e88
am skip reason: Change-Id I65fae513a7ea7592697e0be5c3d5acb3c97e4e69 with SHA-1 7c5c702eaa is in history
Change-Id: I9cde97f57f4c4a9ce443454860ee2fc5d4a08e3d
am skip reason: Change-Id I65fae513a7ea7592697e0be5c3d5acb3c97e4e69 with SHA-1 7c5c702eaa is in history
Change-Id: Ie9f79fae3a26f412bbb8bd30f0c29e04d60d26de
am skip reason: Change-Id I65fae513a7ea7592697e0be5c3d5acb3c97e4e69 with SHA-1 7c5c702eaa is in history
Change-Id: Idd3526541e5fa30a05850f5183c56b803b0ecec2
am skip reason: Change-Id I65fae513a7ea7592697e0be5c3d5acb3c97e4e69 with SHA-1 7c5c702eaa is in history
Change-Id: I732e2b85d661ffd2a02113d47529c4dadde41624
