Prevent use-after-free of HID reports
BTA sends the the HID report pointer to BTIF and deallocates it immediately. This is now prevented by providing a deep copy callback function for HID reports when tranferring context from BTA to BTIF. Bug: 227620181 Test: Build Hardware-assisted AddressSanitizer image, connect with a Bluetooth HID device. Change-Id: Icef7a7ed1185b4283ee4fe4f812ca154d8f1b825
Loading
Please register or sign in to comment