Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9745c8f6 authored by Lajos Molnar's avatar Lajos Molnar Committed by Tim Schumacher
Browse files

OMXNodeInstance: use a lock around OMX::freeNode 

This is to avoid a concurrent use after free if other OMX commands
are being executed before the node is marked as deleted.

Bug: 63666573
Change-Id: I7720dd900bfa252f8675e0c56191adbf52aa957e
CVE-2017-13154
parent c0492916

media/libstagefright/omx/OMXNodeInstance.cpp

+2 −0
Original line number Diff line number Diff line
@@ -266,6 +266,8 @@ status_t OMXNodeInstance::freeNode(OMXMaster *master) { 
            break;

    }



    Mutex::Autolock _l(mLock);



    ALOGV("calling destroyComponentInstance");

    OMX_ERRORTYPE err = master->destroyComponentInstance(

            static_cast<OMX_COMPONENTTYPE *>(mHandle));