diff options
| author | Vinayak Menon <vinmenon@codeaurora.org> | 2018-06-13 20:59:29 +0530 |
|---|---|---|
| committer | Siqi Lin <siqilin@google.com> | 2018-09-05 12:05:10 -0700 |
| commit | b4d590393681da9ddf21b64622ed00f0fee5fe19 (patch) | |
| tree | 3ed9a21d6b25acfbd1894f4415d55b57b73ed69f /net/lapb/lapb_timer.c | |
| parent | 1c048f532f8e7a7c412baa36a4e215c0223712a7 (diff) | |
ion: invalidate the pool pointers after free
ion_system_heap_destroy_pools frees the pool, but
does not invalidate the pointer. This can result in
a double free if ion_system_heap_create_pools fails,
and then causes ion_system_heap_create to call into
ion_system_heap_destroy_pools again from the error
path. This can happen in ion_system_heap_create when
one of the secure pool creation fails.
Bug: 70638103
Change-Id: Ic73ca78722aa5a575cc4dd7c1caa560b518094f2
Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org>
Signed-off-by: Siqi Lin <siqilin@google.com>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions