master

Ttianshiliu25fix: prevent heap corruption when a request is torn down

a845c4fb创建于 12 天前历史提交

文件	最后提交记录	最后更新时间
companion_token_auth_handler.cpp	refine auth result codes, drop late callbacks, fix RemoveHostBinding after restart - Propagate precise ResultCode through cross-device request helpers instead of collapsing failures to GENERAL_ERROR; centralize the CDA<->UserAuth mapping and add the EXCEED_LIMIT code. Extract ConvertRustErrorCode into rust_error_code_converter.h so the Rust-to-CDA mapping is unit-testable. - Drop late IPC and user-auth callbacks after a request is cancelled or completed through a shared IsFinished() guard; extend the guard to the remaining async reply handlers (HandleSendDelegateAuthResultReply, HandlePeerDeviceStatusChanged) for consistency. - Resolve RemoveHostBinding through persisted binding status so it still works after a service restart. - Reject obtain-token when companion auth is blocked or the host user has switched, and validate the companion user id in the token auth handler, including rejecting INVALID_USER_ID when the device is locked. - Add unit tests for the result code converter, the Rust-to-CDA error code mapping, the HandlePeerDeviceStatusChanged behavior change, and the IsFinished late-callback drop guard. Signed-off-by: Tianshi Liu <tianshi.liu@huawei.com> 🤖 AI[51%] 🔧 Human Fixed[0%] 🧑 Human[49%] 👌 AI Adopted[100%] Change-Id: I6b4f4a6829c207b4fa0e85b7996117d536d4bc57	15 天前
host_token_auth_request.cpp	fix: prevent heap corruption when a request is torn down A request is destroyed synchronously inside RequestManager::Remove's deque erase, so a subscription cleanup that ran complex logic inline corrupted the heap (jemalloc "may double free"). Reset every request's subscriptions in Destroy() (which always runs before the destructor, since Remove is posted from Destroy) and defer the complex parts of subscription cleanups to the next resident event-loop turn. 🤖 AI[18%] 🔧 Human Fixed[0%] 🧑 Human[82%] 👌 AI Adopted[100%] Change-Id: I66a965b03f67f13513dcc066f920cad90012309e Signed-off-by: Tianshi Liu <tianshi.liu@huawei.com>	12 天前
token_auth_message.cpp	feat: add LogTracer file ID definitions for error path tracing Change-Id: Ib4d59ccd17f5a0f64c50cfc88ee577aa8e9146e2 Signed-off-by: Tianshi Liu <tianshi.liu@huawei.com>	3 个月前