98ca55499e8c3daac02d3f094fede3c88e0b996c

Thread 1 can make a to call fastrpc_mmap_create under internal mem map and release fl->map_mutex. Thread 2 can make call to internal mem unmap, acquire fl->map_mutex and get same map though fastrpc_mmap_remove. Thread 1 fail in fastrpc_mem_map_to_dsp jumps to bail and do map free. Thread 2 still holds same map which can lead use after free. Serialize fastrpc internal mem map and unmap. Change-Id: I54a3602914b43fc67635c0de193bd21aa13daaa3 Signed-off-by: DEEPAK SANNAPAREDDY <quic_sdeeredd@quicinc.com>
Deskripsi
No description provided
Languages
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%