Santosh Sakore a2f9f978b1 msm: adsprpc: Handle UAF in fastrpc_buf_free
Thread T1 add buffer to fl->cached_bufs and release fl->hlock and holding
buffer reference. Now thread T2 will aquire fl->hlock and free buffer in
fastrpc_cached_buf_list_free(). T1 will dereference the freed buffer.
Moving reference buffer uses for T1 inside fl->hlock to avoid UAF.

Change-Id: I5f08d5497099133f87d55f5879cfe50c2ba23ae6
Signed-off-by: Santosh Sakore <quic_ssakore@quicinc.com>
2023-04-11 09:03:05 -07:00
2022-10-20 10:29:34 -07:00
2023-03-07 20:31:53 -08:00
2022-10-13 11:49:51 -07:00
2023-01-26 23:23:19 -08:00
2023-01-26 23:23:19 -08:00
Popis
Nebyl uveden žádný popis
226 MiB
Jazyky
C 98.7%
C++ 0.9%
Makefile 0.3%
Starlark 0.1%