| commit | cdd0be1b2d639a31eae9acbb49771653ec86510f | |
| author | rsesek@chromium.org <rsesek@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | |
| Tue, 3 Jun 2014 10:48:26 +0000 (3 10:48 +0000) | ||
| committer | rsesek@chromium.org <rsesek@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | |
| Tue, 3 Jun 2014 10:48:26 +0000 (3 10:48 +0000) | ||
| tree | dbe55a59ac16560d5aefe74a3d90f7cbec171b34 | treesnapshot (tar.gz zip) |
| parent | 98e5a9e1c8c1dd1931850a4e0bd99124c67d3c95 | commitdiff |
Do not double-unref send rights when using POLICY_SUBSTITUE_PORT.
By destroying the reply message, the already-copied-out right will be unrefed
again, leading to an over-release of send rights.
This also requires that Rule(POLICY_SUBSTITUTE_PORT) users provide a send right
that can be duplicated with MACH_MSG_TYPE_COPY_SEND, rather than using MAKE_SEND.
BUG=367863
R=mark@chromium.org
Review URL: https://codereview.chromium.org/306123012
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@274467 0039d316-1c4b-4281-b951-d872f2087c98
By destroying the reply message, the already-copied-out right will be unrefed
again, leading to an over-release of send rights.
This also requires that Rule(POLICY_SUBSTITUTE_PORT) users provide a send right
that can be duplicated with MACH_MSG_TYPE_COPY_SEND, rather than using MAKE_SEND.
BUG=367863
R=mark@chromium.org
Review URL: https://codereview.chromium.org/306123012
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@274467 0039d316-1c4b-4281-b951-d872f2087c98