diff options
| author | Srinivasarao P <spathi@codeaurora.org> | 2018-10-29 16:44:50 +0530 |
|---|---|---|
| committer | Srinivasarao P <spathi@codeaurora.org> | 2018-11-12 12:12:49 +0530 |
| commit | f2b44c5c18564f604bae396783e26f7d05a333c6 (patch) | |
| tree | a3256e5ac58e2cf315c6eb0faabcdfbcc8980eb4 /include/linux/overflow.h | |
| parent | f1587d8660239a4371a73d10a2c56834d7daf6cc (diff) | |
staging: android: ion: fix ION_IOC_IMPORT use-after-free
The use-after-free issue can also occur with ION_IOC_IMPORT
just like in the commit 2c155709e4ef2d86d0176aac82e44c048a7e0255
("staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free").
This is due to reacquiring client->lock in pass_to_user().
Change-Id: Ib5f3297504763c341b3ce343ef18538ce2c9c7d5
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
Diffstat (limited to 'include/linux/overflow.h')
0 files changed, 0 insertions, 0 deletions