Skip to content

binder: Wait for security policy checks before transport termination - #13157

Open
neonjava wants to merge 1 commit into
grpc:masterfrom
neonjava:fix/binder-auth-termination
Open

neonjava wants to merge 1 commit into
grpc:masterfrom
neonjava:fix/binder-auth-termination

Conversation

@neonjava

@neonjava neonjava commented Nov 1, 2026

Copy link
Copy Markdown

During shutdown, BinderServerTransport could report termination while a security policy invocation was still starting or running.

This change tracks in-progress policy invocations and delays the transport termination callback until they have returned. Pending authorization results are cancelled during shutdown, and termination proceeds immediately when no policy invocation is running.

Fixes #12938.

Testing: :grpc-binder:testDebugUnitTest — 507 tests, 0 failures, 17 skipped.

Prevent a server transport from declaring termination while a security policy
call is still entering or running. Cancel pending authorization results
promptly, then notify termination once the policy invocation returns.

Fixes grpc#12938.
@linux-foundation-easycla

linux-foundation-easycla Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

CLA Signed
The committers listed above are authorized under a signed CLA.

  • ✅ login: neonjava / name: neonjava (a9f0a55)

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

binder: A Server might check its SecurityPolicy even after declaring termination

1 participant