Sunil Khatri 78cae93b24 msm: kgsl: Protect the event->handle with spinlock ...

event->handle pointer can be used after free due to
the race condition between kgsl_sync_callback and
kgsl_sync_fence_async_cancel.

Protect the event->handle with a spinlock to
avoid concurrent access issues.

Bug: 62949902
Change-Id: I3719e401af9ece82ac68b72f2aef784c7fdc1104
Signed-off-by: Sunil Khatri <sunilkh@codeaurora.org>
CVE-2017-11092
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>

2019-08-08 15:00:18 +02:00

..

drm

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

gpu_sysfs

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

ion

ANDROID: ion: Protect kref from userspace manipulation

2019-08-08 12:19:52 +02:00

msm

msm: kgsl: Protect the event->handle with spinlock

2019-08-08 15:00:18 +02:00

stub

…

vga

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

Makefile

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00