Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit f1b7dbbc authored by Vasantha Balla's avatar Vasantha Balla
Browse files

msm: vidc: Fix possible UAF during buffer unregister call



[1] During buffer unregister, CVP buffer lock is released immediately
after finding buffer in register buffer list. UAF might happen if two
threads execute same unregister command as buffer free happens after
unregister done.
[2] Hold CVP buffer lock through out in unregister and unregister done
calls.

Change-Id: I8b6734410369ab990081c558ba846b6dfbfc8588
Signed-off-by: default avatarVasantha Balla <quic_vballa@quicinc.com>
parent 942a41f5
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment