Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit f029aa4c authored by Arun Kumar Neelakantam's avatar Arun Kumar Neelakantam
Browse files

soc: qcom: bam_dmux: Fix pointer access after free issue



The rx skb pointer contains the bam dmux channel id and dereference skb
pointer to get the bam dmux channel information. In fail cases the channel
id is deference from the free skb result in bad memory access.

Cache the bam dmux channel id locally to avoid the accessing from invalid
pointer.

CRs-Fixed: 717621
Change-Id: I4775c6f04d4737a08716ba06209aa00e2b2116b9
Signed-off-by: default avatarArun Kumar Neelakantam <aneela@codeaurora.org>
parent 2a0e8b68
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment