surface-duo-oss-platform.ve.../drivers/cam_req_mgr
Yash Upadhyay 336163ddec msm: camera: memmgr: Avoid TOCTOU buffer access on multiple use of same fd
Fd is a user-accessible value, referring it multiple times
leads to TOCTOU issues. Dma_buf can be freed after the 1st
use of fd and userspace can create another dma_buf but with
same fd. In such scenario, during 2nd use of fd, we may get
a different dma_buf with different length. To avoid this, we
can use same dma_buf instead of retrieving it twice using same
fd. In this change FD is accessed only once in syscall.

CRs-Fixed: 3159446
Change-Id: I00eb6dd3d798165f5c6c0bd59feabe80a68592b1
Signed-off-by: Yash Upadhyay <quic_yupadhya@quicinc.com>
2022-08-03 10:04:47 +05:30
..
Makefile msm: camera: smmu: Move to ioremap APIs for using FW memory 2019-12-04 18:13:10 -08:00
cam_mem_mgr.c msm: camera: memmgr: Avoid TOCTOU buffer access on multiple use of same fd 2022-08-03 10:04:47 +05:30
cam_mem_mgr.h msm: camera: reqmgr: reader writer locks to avoid memory faults 2022-01-07 17:22:12 +05:30
cam_mem_mgr_api.h msm: camera: req_mgr: Header file comment fixes 2020-02-03 17:35:50 -08:00
cam_req_mgr_core.c msm: camera: reqmgr: Reset the slot if it is applied 2022-04-28 09:48:17 +05:30
cam_req_mgr_core.h msm: camera: reqmgr: Validate the link handle 2022-03-15 09:22:45 +05:30
cam_req_mgr_core_defs.h Camera: Bring over camera driver changes 2019-07-08 10:24:55 -07:00
cam_req_mgr_debug.c msm: camera: common: Merge camera-kernel.3.1 changes in camera-kernel.4.0 2020-10-13 12:08:01 +05:30
cam_req_mgr_debug.h msm: camera: common: Merge camera-kernel.3.1 changes in camera-kernel.4.0 2020-10-13 12:08:01 +05:30
cam_req_mgr_dev.c msm: camera: reqmgr: reader writer locks to avoid memory faults 2022-01-07 17:22:12 +05:30
cam_req_mgr_dev.h Revert "Revert "msm: camera: req_mgr: Enhance camera v4l2 subdev shutdown sequence"" 2021-05-09 11:56:02 -07:00
cam_req_mgr_interface.h Revert "msm: camera: req_mgr: Re-design CRM to support multi links in sync mode" 2021-04-15 11:27:25 +05:30
cam_req_mgr_timer.c msm: camera: req_mgr: Fix kmem_cache definition 2019-11-20 14:50:23 -08:00
cam_req_mgr_timer.h msm: camera: req_mgr: Header file comment fixes 2020-02-03 17:35:50 -08:00
cam_req_mgr_util.c msm: camera: reqmgr: reader writer locks to avoid memory faults 2022-01-07 17:22:12 +05:30
cam_req_mgr_util.h Revert "Revert "msm: camera: req_mgr: Enhance camera v4l2 subdev shutdown sequence"" 2021-05-09 11:56:02 -07:00
cam_req_mgr_util_priv.h Camera: Bring over camera driver changes 2019-07-08 10:24:55 -07:00
cam_req_mgr_workq.c msm: camera: core: Add delay detection support 2021-06-28 07:58:28 -07:00
cam_req_mgr_workq.h msm: camera: core: Add delay detection support 2021-06-28 07:58:28 -07:00
cam_subdev.h msm: camera: reqmgr: reader writer locks to avoid memory faults 2022-01-07 17:22:12 +05:30