a2f9f978b19dd8f19ec3d61d4f9c00e497c8d70c

Thread T1 add buffer to fl->cached_bufs and release fl->hlock and holding buffer reference. Now thread T2 will aquire fl->hlock and free buffer in fastrpc_cached_buf_list_free(). T1 will dereference the freed buffer. Moving reference buffer uses for T1 inside fl->hlock to avoid UAF. Change-Id: I5f08d5497099133f87d55f5879cfe50c2ba23ae6 Signed-off-by: Santosh Sakore <quic_ssakore@quicinc.com>
Popis
Nebyl uveden žádný popis
Jazyky
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%