Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit f983b5a1 authored by Daniel Perez-Zoghbi's avatar Daniel Perez-Zoghbi
Browse files

qcedev: fix UAF in qcedev_smmu



External researcher found UAF in qcedev_smmu.c on an error condition in
qcedev_check_and_map_buffer. When an error occurs, we free binfo, but it
is still kept in the registeredbufs list. The fix removes it from the
list before freeing binfo.

Change-Id: I0327e456bd46106b12c36a5a21305407aae428dd
Signed-off-by: default avatarDaniel Perez-Zoghbi <quic_dperezzo@quicinc.com>
parent d8204f4d
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment