diff options
| author | Mohan Srinivasan <srmohan@google.com> | 2017-08-09 12:16:56 -0700 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2017-08-12 15:26:33 +0200 |
| commit | eb610d4a453f9bbb85696178df81f906e0099191 (patch) | |
| tree | 1da919848a85d2f99eb30bc60fb69dc0163a62a9 /include/linux/dynamic_debug.h | |
| parent | 3606e6abded9f3ccd0a394e2c62b051fa202f2b6 (diff) | |
ANDROID: keychord: Fix races in keychord_write.
There are multiple bugs caused by threads racing in keychord_write.
1) Threads racing through this function can cause the same element to
be added to a linked list twice (multiple calls to
input_register_handler() for the same input_handler struct). And the
races can also cause an element in a linked list that doesn't exist
attempted to be removed (multiple calls to input_unregister_handler()
with the same input_handler struct).
2) The races can also cause duplicate kfree's of the keychords
struct.
Bug: 64133562
Bug: 63974334
Change-Id: I6329a4d58c665fab5d3e96ef96391e07b4941e80
Signed-off-by: Mohan Srinivasan <srmohan@google.com>
(cherry picked from commit 59584701f1e2ce8ce024570576b206bea6ac69cf)
Diffstat (limited to 'include/linux/dynamic_debug.h')
0 files changed, 0 insertions, 0 deletions