Re: Re: [RFC PATCH] staging/android/ion : fix a race condition in the ion driver

2016-02-18 Thread EunTaik Lee
2016-02-18 3:54 GMT+09:00 Laura Abbott : > On 02/16/2016 10:32 PM, EunTaik Lee wrote: >> There was a use-after-free problem in the ion driver. >> >> The problem is detected as an unaligned access in the >> spin lock functions since it uses load exclusive >> instruction. In some cases it corrupts

Re: [RFC PATCH] staging/android/ion : fix a race condition in the ion driver

2016-02-17 Thread Laura Abbott
On 02/16/2016 10:32 PM, EunTaik Lee wrote: > There was a use-after-free problem in the ion driver. > > The problem is detected as an unaligned access in the > spin lock functions since it uses load exclusive > instruction. In some cases it corrupts the slub's > free pointer which causes a unalig

[RFC PATCH] staging/android/ion : fix a race condition in the ion driver

2016-02-16 Thread EunTaik Lee
There was a use-after-free problem in the ion driver. The problem is detected as an unaligned access in the spin lock functions since it uses load exclusive instruction. In some cases it corrupts the slub's free pointer which causes a unaligned access to the next free pointer.(thus the kmalloc fu