arnavsharma990 opened a new pull request, #20146:
URL: https://github.com/apache/nuttx/pull/20146

   
   ## Summary
   
   * Add watchdog teardown to sensor_close().
   * Clear user->fds before freeing the subscriber.
   * Cancel the per-subscriber fetch watchdog to prevent sensor_fetch_expired()
     from accessing freed memory.
   
   ## Impact
   
   This fixes a use-after-free race in the sensor uORB upper half when
   sensor_close() races with an armed fetch watchdog.
   
   There are no API or configuration changes. The change is limited to
   subscriber teardown in drivers/sensors/sensor.c.
   
   ## Testing
   
   - Ran `tools/checkpatch.sh -f drivers/sensors/sensor.c`
   - checkpatch passed with no errors.
   - Verified the change mirrors the existing watchdog teardown in
     sensor_poll().
   - No hardware-board testing was performed.
   
   Fixes #20145.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to