Skip to content
Commit 140f2b41 authored by Christopher Tate's avatar Christopher Tate Committed by Narayan Kamath
Browse files

Close race condition in binderDied()

It was possible for a binderDied() call to occur while the death
recipient list containing the object was being iterated, in which
case we could invalidate an object reference out from under the
iteration, causing a VM abort.  We now interlock the binderDied()
deref operation with the list's locking semantics to prevent this.

Bug 15831054

(cherry picked from commit 090c08ff)

Change-Id: If0027d3ac4da1153284a425dd9b2819a203481ab
parent 3976a569
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment