diff options
| author | Srinivasarao P <spathi@codeaurora.org> | 2018-10-24 12:32:36 +0530 |
|---|---|---|
| committer | Srinivasarao P <spathi@codeaurora.org> | 2018-10-25 15:44:19 +0530 |
| commit | 52ad8f0aff9106ce15cd6c1ff6a029255cb6843a (patch) | |
| tree | 9bffd444d05b6879f868ac251aa9116a441267cb /kernel/bpf/arraymap.c | |
| parent | a36b6328efdd11fb4002ea0427c95e3cf0e4fd20 (diff) | |
ion: remove unsafe function ion_handle_get_by_id()
The function ion_handle_get_by_id() is called from function
msm_ion_custom_ioctl(), so we retained it even though it got
deleted in commit 2c155709e4ef2d86d0176aac82e44c048a7e0255
("staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free").
This can lead to same use-after-free scenario with
ION_IOC_{CLEAN_CACHES,INV_CACHES,CLEAN_INV_CACHES} so removing
this unsafe function and holding client->lock for entire operation.
Change-Id: I536cfa69465ad692794500e3b31ac137d04940ff
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
Diffstat (limited to 'kernel/bpf/arraymap.c')
0 files changed, 0 insertions, 0 deletions