tree 6120bff9e6f3435942173785d6357351a0397e5c
parent 373280ea8e4263ef731e0ddb2abba86d8718126a
author Devan Yu <devanyu@pigweed.infra.roller.google.com> 1790507079 -0700
committer CQ Bot Account <pigweed-scoped@luci-project-accounts.iam.gserviceaccount.com> 1790507079 -0700

roll: third_party/pigweed pw_bluetooth_sapphire: Fix GATT server UAF and secure client notify

queue

Clear the service change callback in the `GenericAttributeService`
destructor to prevent a Use-After-Free (UAF) when subsequent services
are registered.

Secure `ResolvePendingNotifyRequests` by moving the queue to the stack
before iterating and checking that the `RemoteCharacteristic` is not
destroyed by a callback.

Original-Fixed: b/510063922
Original-Fixed: b/535170015
Original-Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/482625
Original-Revision: e90dd4228811099b31738c2a34423a227ea0552c

Rolled-Repo: https://pigweed.googlesource.com/pigweed/pigweed
Rolled-Commits: c1cce82424f245..e90dd422881109
Roll-Count: 1
Roller-URL: https://cr-buildbucket.appspot.com/build/8669511718777519633
GitWatcher: ignore
CQ-Do-Not-Cancel-Tryjobs: true
Change-Id: I0442ba3429b628ba439da8467a904018aee00944
Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/examples/+/487569