• Michael Stahl's avatar
    cppuhelper: fix use-after-free race in OWeakConnectionPoint · 131e6040
    Michael Stahl yazdı
    OWeakObject::m_pWeakConnectionPoint is returned from
    OWeakObject::queryAdapter(), and stored in
    OWeakRefListener::m_xWeakConnectionPoint.
    
    This is cleared in OWeakRefListener::dispose(), called from
    OWeakConnectionPoint::dispose(), called from
    OWeakObject::disposeWeakConnectionPoint(), but it can happen that
    another thread is in WeakReferenceHelper::get() and has copied
    m_xWeakConnectionPoint onto the stack before the OWeakObject is
    released and deleted, then calls OWeakConnectionPoint::queryAdapted()
    after it is released, accessing the dead m_pObject.
    
    Change-Id: I7782e6fb7e07f5a48cf7064115217376714ba8e8
    131e6040
Adı
Son kayıt (commit)
Son güncelleme
..
access_control.cxx Loading commit data...
bootstrap.cxx Loading commit data...
compat.cxx Loading commit data...
component.cxx Loading commit data...
component_context.cxx Loading commit data...
defaultbootstrap.cxx Loading commit data...
exc_thrower.cxx Loading commit data...
factory.cxx Loading commit data...
findsofficepath.c Loading commit data...
gcc3.map Loading commit data...
implbase.cxx Loading commit data...
implbase_ex.cxx Loading commit data...
implementationentry.cxx Loading commit data...
interfacecontainer.cxx Loading commit data...
loadsharedlibcomponentfactory.hxx Loading commit data...
macro_expander.cxx Loading commit data...
macro_expander.hxx Loading commit data...
paths.cxx Loading commit data...
paths.hxx Loading commit data...
propertysetmixin.cxx Loading commit data...
propshlp.cxx Loading commit data...
servicemanager.cxx Loading commit data...
servicemanager.hxx Loading commit data...
shlib.cxx Loading commit data...
supportsservice.cxx Loading commit data...
tdmgr.cxx Loading commit data...
typemanager.cxx Loading commit data...
typemanager.hxx Loading commit data...
typeprovider.cxx Loading commit data...
unourl.cxx Loading commit data...
weak.cxx Loading commit data...