DEEPAK SANNAPAREDDY 98ca55499e msm: adsprpc : Fix use after free in fastrpc_internal_mem_unmap
Thread 1 can make a to call fastrpc_mmap_create under internal mem map
and release fl->map_mutex. Thread 2 can make call to internal mem unmap,
acquire fl->map_mutex and get same map though fastrpc_mmap_remove.
Thread 1 fail in fastrpc_mem_map_to_dsp jumps to bail and do map free.
Thread 2 still holds same map which can lead use after free. Serialize
fastrpc internal mem map and unmap.

Change-Id: I54a3602914b43fc67635c0de193bd21aa13daaa3
Signed-off-by: DEEPAK SANNAPAREDDY <quic_sdeeredd@quicinc.com>
2023-10-09 11:48:56 +05:30
2022-10-20 10:29:34 -07:00
2023-09-12 23:41:01 +05:30
2023-06-12 11:04:11 -07:00
2023-01-26 23:23:19 -08:00
2023-01-26 23:23:19 -08:00
Deskripsi
No description provided
226 MiB
Languages
C 98.7%
C++ 0.9%
Makefile 0.3%
Starlark 0.1%