Close race condition in binderDied()
It was possible for a binderDied() call to occur while the death recipient list containing the object was being iterated, in which case we could invalidate an object reference out from under the iteration, causing a VM abort. We now interlock the binderDied() deref operation with the list's locking semantics to prevent this. Bug 15831054 (cherry picked from commit 090c08ff) Change-Id: If0027d3ac4da1153284a425dd9b2819a203481ab
Loading
Please register or sign in to comment