Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6f9f631c authored by Santosh Sakore's avatar Santosh Sakore
Browse files

msm: adsprpc: use-after-free (UAF) in global maps



Currently, remote heap maps get added to the global list before the
fastrpc_internal_mmap function completes the mapping. Meanwhile, the
fastrpc_internal_munmap function accesses the map, starts unmapping, and
frees the map before the fastrpc_internal_mmap function completes,
resulting in a use-after-free (UAF) issue. Add the map to the list after
the fastrpc_internal_mmap function completes the mapping.

Change-Id: Ia524f142edba57a1f389dd0e5c83a1967c7f5a59
Acked-by: default avatarAbhishek Singh <abhishes@qti.qualcomm.com>
Signed-off-by: default avatarSantosh Sakore <quic_ssakore@quicinc.com>
parent 1ddb3759
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment