| commit | 4fab9ac04e444f8ad057e67006320ca25381948e | [log] [tgz] |
|---|---|---|
| author | Dima Zavin <dima@android.com> | Thu Mar 24 11:12:00 2011 -0700 |
| committer | Dima Zavin <dima@android.com> | Tue Apr 19 15:16:18 2011 -0700 |
| tree | 66e909ccd2adb164bf3820116dfee49eaf5d2196 | |
| parent | bdaaec1ba0a7cf832ad7fe475a7c541ed9973e52 [diff] |
libcutils: hashmap: save next pointer in forEach before calling callback If the callback passed to forEach tries to remove the element it was passed, there's a use-after-free of the entry pointer in forEach. Change-Id: Ia364b4775c9c55780b23f683b30cbff511b7f944 Signed-off-by: Dima Zavin <dima@android.com>