msm: adsprpc: use-after-free (UAF) in global maps
Currently, remote heap maps get added to the global list before the fastrpc_internal_mmap function completes the mapping. Meanwhile, the fastrpc_internal_munmap function accesses the map, starts unmapping, and frees the map before the fastrpc_internal_mmap function completes, resulting in a use-after-free (UAF) issue. Add the map to the list after the fastrpc_internal_mmap function completes the mapping. Change-Id: I73c536718f3228b7cbb7a19b76270e0dd3e32bd1 Acked-by:Abhishek Singh <abhishes@qti.qualcomm.com> Signed-off-by:
Santosh Sakore <quic_ssakore@quicinc.com>
Loading
-
mentioned in commit 990e5f13
-
mentioned in commit 8e9ea905
-
mentioned in commit caa7f90b
-
mentioned in commit 4672ec17
-
mentioned in commit 32aa49ab
-
mentioned in commit 430729ae
-
mentioned in commit e19bf9ae
-
mentioned in commit 54604978
-
mentioned in commit 9a48a985
-
mentioned in commit f62a72e0
-
mentioned in commit f2cb08b5
-
mentioned in commit 212fe6ee
-
mentioned in commit 5431f20f
-
mentioned in commit 4ade7a25
Please sign in to comment