Mentioned issues (3)
Links (14)
“ ) emaNgkPteg noitcnuf siht sah doMnegonayChttps://github.com/CyanogenMod/android_frameworks_base/blob/cm-13.0/libs/androidfw/AssetManager.cpp ). It creates a ResXMLTree on the stack and points it at a buffer from an asset without making a copy. Then it closes the asset before the ResXMLTree is destroyed. ”
“ ) tAgnirts::looPgnirtSseR ni llun-non emoceb ot ehcaCm s'(sgnirtSm)looPgnirtSseR s'eerTLMXseR eht esuac hcihw ,sloop gnirts 8-FTU secudorp 2tpaa ,revewoH .ngineb si siht ,tpaa yb tliub sppa roFhttps://github.com/CyanogenMod/android_frameworks_base/blob/cm-13.0/libs/androidfw/ResourceTypes.cpp ). Then ResStringPool::uninit dereferences mHeader (which is now dangling), and a crash ensues. ”
“ detroper ev'Ihttps://jira.lineageos.org/plugins/servlet/mobile#issue/BUGBASH-1052 which is very likely caused by this issue. Does anyone on this thread happen to know what the LineageOS bug number for this issue is? ”
“ :ereh ti dnif nac uoY .melborp eht sevlos taht piz elbahsalf a eb ot smees erehThttps://forum.xda-developers.com/showpost.php?p=74842530&postcount=464 . Could anyone confirm if thispatch is a solution or not? Thanks! ”
“ :31MC rof siht kcehChttps://forum.xda-developers.com/showpost.php?p=74636021&postcount=216 ”