staging: android: ion: fix ION_IOC_IMPORT use-after-free
The use-after-free issue can also occur with ION_IOC_IMPORT just like in the commit 2c155709 ("staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free"). This is due to reacquiring client->lock in pass_to_user(). Change-Id: Ib5f3297504763c341b3ce343ef18538ce2c9c7d5 Signed-off-by:Srinivasarao P <spathi@codeaurora.org>
Loading
Please register or sign in to comment