| commit | e11559dbd508135a4db819dbaf811b41ceb1eb85 | [log] [tgz] |
|---|---|---|
| author | Henry Fang <quxiangfang@google.com> | Tue Jun 30 04:44:31 2020 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Tue Jun 30 04:44:31 2020 +0000 |
| tree | a6db3d9312fd467f8e666b7fa4d08b8dc0530c22 | |
| parent | dc600899cbde88e1c25d59fffe2a05aa33cc6040 [diff] | |
| parent | 2688c3b10f51989fb3ee8b8be6fa25b203c82aa8 [diff] |
Fix use after free issue am: bf0d7ca7e4 am: 2688c3b10f Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/av/+/12038058 Change-Id: I693acd38f9abcbd427ea0fb16130fa76b46c8836
diff --git a/services/mediaresourcemanager/ResourceManagerService.cpp b/services/mediaresourcemanager/ResourceManagerService.cpp index ff45c87..3d36f8e 100644 --- a/services/mediaresourcemanager/ResourceManagerService.cpp +++ b/services/mediaresourcemanager/ResourceManagerService.cpp
@@ -57,9 +57,11 @@ ALOGW("ResourceManagerService is dead as well."); return; } - service->removeResource(mPid, mClientId, false); service->overridePid(mPid, -1); + // thiz is freed in the call below, so it must be last call referring thiz + service->removeResource(mPid, mClientId, false); + } template <typename T>