Viktor Slavkovic f689b67a36 staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl ...

A lock-unlock is missing in ASHMEM_SET_SIZE ioctl which can result in a
race condition when mmap is called. After the !asma->file check, before
setting asma->size, asma->file can be set in mmap. That would result in
having different asma->size than the mapped memory size. Combined with
ASHMEM_UNPIN ioctl and shrinker invocation, this can result in memory
corruption.

Bug: 66954097
Signed-off-by: Viktor Slavkovic <viktors@google.com>
Change-Id: I268225133f96fde0fadd1ec621aafef27d392d65

2018-01-09 15:40:58 +08:00

..

fiq_debugger

fiq_debugger: rockchip: move uart_init to the last

2017-12-20 14:10:18 +08:00

ion

staging: ion: rockchip: reserve memory region for ion

2017-11-16 09:54:31 +08:00

trace

Merge branch 'android-4.4'

2016-02-18 15:18:27 +08:00

uapi

Merge branch 'android-4.4'

2016-02-18 15:18:27 +08:00

ashmem.c

staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl

2018-01-09 15:40:58 +08:00

ashmem.h

rk: revert to v3.10

2015-11-11 15:57:28 +08:00

Kconfig

fiq_debugger: move into drivers/staging/android/fiq_debugger/

2016-02-16 13:52:26 -08:00

lowmemorykiller.c

Merge tag 'lsk-v4.4-17.08-android' of git://git.linaro.org/kernel/linux-linaro-stable.git

2017-09-01 18:56:00 +08:00

Makefile

staging: android: add timed gpio driver to present vibrator control interface to userspace

2016-09-05 14:50:28 +08:00

rk_timed_gpio.c

staging: android: add timed gpio driver to present vibrator control interface to userspace

2016-09-05 14:50:28 +08:00

sw_sync.c

rk: revert to v3.10

2015-11-11 15:57:28 +08:00

sw_sync.h

rk: revert to v3.10

2015-11-11 15:57:28 +08:00

sync_debug.c

Staging: android: fix line length coding style issue in sync_debug.c

2015-01-17 16:17:11 -08:00

sync.c

CHROMIUM: android: Unconditionally remove callbacks in sync_fence_free()

2016-02-16 13:53:26 -08:00

sync.h

rk: revert to v3.10

2015-11-11 15:57:28 +08:00

timed_gpio.c

rk: revert to v3.10

2015-11-11 15:57:28 +08:00

timed_gpio.h

Staging: android: timed_gpio: Removed spaces before tabs

2012-02-29 15:52:52 -08:00

timed_output.c

drivers/staging: make android timed_output.c explicitly non-modular

2015-10-12 21:12:17 -07:00

timed_output.h

staging: android: timed_output: fix a checkpatch warning

2014-02-11 12:27:30 -08:00

TODO

rk: revert to v3.10

2015-11-11 15:57:28 +08:00