Abhishek Singh 6dab51a3af dsp-kernel: use-after-free (UAF) in global maps ...

Currently, remote heap maps get added to the global list before the
fastrpc_internal_mmap function completes the mapping. Meanwhile, the
fastrpc_internal_munmap function accesses the map, starts unmapping, and
frees the map before the fastrpc_internal_mmap function completes,
resulting in a use-after-free (UAF) issue. Add the map to the list after
the fastrpc_internal_mmap function completes the mapping.

Signed-off-by: Abhishek Singh <quic_abhishes@quicinc.com>
Change-Id: I8aa23cf215e53d0613774c2b2657954bca6c72f4

2024-04-27 15:24:20 +05:30

..

adsprpc_compat.c

msm: adsprpc: To avoid null pointer dereference

2023-01-31 23:44:36 -08:00

adsprpc_compat.h

adsprpc: Add initial src files to new target

2022-08-12 17:41:38 -07:00

adsprpc_rpmsg.c

adsprpc: Enable fastrpc trusted driver

2023-03-16 14:14:25 -07:00

adsprpc_shared.h

msm: adsprpc: Handle UAF in fastrpc_mmap_remove_ssr

2024-03-05 11:29:50 +05:30

adsprpc_socket.c

adsprpc: Add check to prevent out of bound access

2024-03-04 18:24:29 +05:30

adsprpc.c

dsp-kernel: use-after-free (UAF) in global maps

2024-04-27 15:24:20 +05:30

cdsp-loader.c

dsp-kernel: dsp: Update CDSP state flag after image unloading

2023-02-28 11:57:11 +05:30

fastrpc_trace.h

msm: adsprpc: add ftrace for dspsignal events for perf debugging

2023-08-16 10:58:45 -07:00