Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 47b51892 authored by qctecmdr's avatar qctecmdr Committed by Gerrit - the friendly Code Review server
Browse files

Merge "msm: adsprpc: prevent use-after-free from fastrpc ctx"

parents 85082b1d 0739405b

drivers/char/adsprpc.c

+2 −1
Original line number Diff line number Diff line
@@ -2589,7 +2589,8 @@ static int fastrpc_invoke_send(struct smq_invoke_ctx *ctx, 
	}

	err = rpmsg_send(channel_ctx->rpdev->ept, (void *)msg, sizeof(*msg));

	trace_fastrpc_rpmsg_send(fl->cid, (uint64_t)ctx, msg->invoke.header.ctx,

		handle, ctx->sc, msg->invoke.page.addr, msg->invoke.page.size);

		handle, msg->invoke.header.sc, msg->invoke.page.addr,

		msg->invoke.page.size);

	mutex_unlock(&channel_ctx->rpmsg_mutex);

 bail:

	return err;