diff options
| author | Pratham Pratap <prathampratap@codeaurora.org> | 2017-05-16 14:22:38 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-05-16 01:59:48 -0700 |
| commit | 1509025cbfb80e50080f7a7cfb0fc828277c1820 (patch) | |
| tree | 759a5df57929a8035a31fa53b3558a81d2bbf8d0 /tools/perf/scripts/python | |
| parent | 75a9d0fee5b264c89afdc8b155848625fcbe9ca0 (diff) | |
USB: f_qc_rndis: Prevent use-after-free for _rndis_qc
Assume that there are two threads, thread1 is setting
value of _rndis_qc variable in rndis_qc_bind_config_vendor
function. Thread2 jumps in and get the value of _rndis_qc
in rndis_qc_open_dev function before it is freed in
rndis_qc_bind_config_vendor function, since rndis_ipa_init
or usb_add_function failed. Use-after-free will happen as
Thread2 is referencing freed objects. To prevent this
spinlock is used where ever it is needed to protect
_rndis_qc variable.
Change-Id: I4da50c125e401e90abec3dc6b4e2c4a504a63ba0
Signed-off-by: Pratham Pratap <prathampratap@codeaurora.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions