diff options
| author | Abhinav Parihar <quic_parihar@quicinc.com> | 2024-12-17 18:34:34 +0530 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2025-04-08 16:59:29 +0300 |
| commit | e71ed640d014c2972b6f629045e0f1ff899f5be0 (patch) | |
| tree | 336d884ecabc8609de32c187291af39375c95b8d /tools/perf/scripts/python/export-to-sqlite.py | |
| parent | 43e207c6b31338d533f94b97a5c0323b3400501a (diff) | |
BACKPORT: dsp-kernel: Add attribute and flag checks during map creation
A persistence map is expected to hold refs=2 during its creation.
However, the Fuzzy test can create a persistence map by configuring
a mismatch between attributes and flags using the KEEP MAP attribute
and FD NOMAP flags. This sets the map reference count to 1. The user
then calls fastrpc_internal_munmap_fd to free the map since it
doesn't check flags, which can cause a use-after-free (UAF) for the
file map and shared buffer. Add a check to restrict DMA handle
maps with invalid attributes.
Change-Id: I2f024ef99cc2a0487010504166e3af3433d5302d
Acked-by: Santosh <quic_ssakore@quicinc.com>
Signed-off-by: Abhinav Parihar <quic_parihar@quicinc.com>
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions