Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 45b20251 authored by Fabien Sanglard's avatar Fabien Sanglard
Browse files

Fix security vulnerability 

Change-Id: I4c9ea3a3177131fa29d2561da71ef18bec3af108
Test: angler, marlin
Bug: 32628763
parent fefc4f4e

services/surfaceflinger/SurfaceFlinger.cpp

+1 −2
Original line number Diff line number Diff line
@@ -2152,8 +2152,7 @@ void SurfaceFlinger::setTransactionState( 
        if (s.client != NULL) {

            sp<IBinder> binder = IInterface::asBinder(s.client);

            if (binder != NULL) {

                String16 desc(binder->getInterfaceDescriptor());

                if (desc == ISurfaceComposerClient::descriptor) {

                if (binder->queryLocalInterface(ISurfaceComposerClient::descriptor) != NULL) {

                    sp<Client> client( static_cast<Client *>(s.client.get()) );

                    transactionFlags |= setClientStateLocked(client, s.state);

                }

services/surfaceflinger/SurfaceFlinger_hwc1.cpp

+1 −2
Original line number Diff line number Diff line
@@ -2168,8 +2168,7 @@ void SurfaceFlinger::setTransactionState( 
        if (s.client != NULL) {

            sp<IBinder> binder = IInterface::asBinder(s.client);

            if (binder != NULL) {

                String16 desc(binder->getInterfaceDescriptor());

                if (desc == ISurfaceComposerClient::descriptor) {

                if (binder->queryLocalInterface(ISurfaceComposerClient::descriptor) != NULL) {

                    sp<Client> client( static_cast<Client *>(s.client.get()) );

                    transactionFlags |= setClientStateLocked(client, s.state);

                }