Merge "msm: adsprpc: Handle UAF in fastrpc_buf_free" (60fe6483) · Commits · e / devices / android_kernel_fairphone_FP5

drivers/char/adsprpc.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1017,8 +1017,8 @@ static void fastrpc_buf_free(struct fastrpc_buf *buf, int cache)
		}
		hlist_add_head(&buf->hn, &fl->cached_bufs);
		fl->num_cached_buf++;
		spin_unlock(&fl->hlock);
		buf->type = -1;
		spin_unlock(&fl->hlock);
		return;
		}
		skip_buf_cache: