Skip to content
Snippets Groups Projects
Commit 5594135a authored by Nick Desaulniers's avatar Nick Desaulniers Committed by John Dias
Browse files

ANDROID: ion: Protect kref from userspace manipulation


This separates the kref for ion handles into two components.
Userspace requests through the ioctl will hold at most one
reference to the internally used kref. All additional requests
will increment a separate counter, and the original reference is
only put once that counter hits 0. This protects the kernel from
a poorly behaving userspace.

Bug: 34276203

Change-Id: Ibc36bc4405788ed0fea7337b541cad3be2b934c0
Signed-off-by: default avatarDaniel Rosenberg <drosen@google.com>
parent ebe8f069
No related merge requests found
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment