diff options
| author | Santosh Sakore <quic_ssakore@quicinc.com> | 2024-05-23 18:58:00 +0530 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2024-09-06 03:24:02 +0300 |
| commit | d218deda160f9c91f1ce7ad3b70f6ab044377728 (patch) | |
| tree | 0225c8da436062620c376ddf146b24158071a2d9 /scripts/gdb/linux/utils.py | |
| parent | 29904a9ebc67e4d06c4dddeb74efa5e4e0e44dd0 (diff) | |
msm: adsprpc: use-after-free (UAF) in global maps
Currently, remote heap maps get added to the global list before the
fastrpc_internal_mmap function completes the mapping. Meanwhile, the
fastrpc_internal_munmap function accesses the map, starts unmapping, and
frees the map before the fastrpc_internal_mmap function completes,
resulting in a use-after-free (UAF) issue. Add the map to the list after
the fastrpc_internal_mmap function completes the mapping.
Change-Id: I73c536718f3228b7cbb7a19b76270e0dd3e32bd1
Acked-by: Abhishek Singh <abhishes@qti.qualcomm.com>
Signed-off-by: Santosh Sakore <quic_ssakore@quicinc.com>
(cherry picked from commit 6f39d9be6244a1c23397fd959bee425be4440849)
Diffstat (limited to 'scripts/gdb/linux/utils.py')
0 files changed, 0 insertions, 0 deletions