Skip to content
  • Srinivasarao P's avatar
    ion: remove unsafe function ion_handle_get_by_id() · 52ad8f0a
    Srinivasarao P authored
    The function ion_handle_get_by_id() is called from function
    msm_ion_custom_ioctl(), so we retained it even though it got
    deleted in commit 2c155709
    
    
    ("staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free").
    
    This can lead to same use-after-free scenario with
    ION_IOC_{CLEAN_CACHES,INV_CACHES,CLEAN_INV_CACHES} so removing
    this unsafe function and holding client->lock for entire operation.
    
    Change-Id: I536cfa69465ad692794500e3b31ac137d04940ff
    Signed-off-by: default avatarSrinivasarao P <spathi@codeaurora.org>
    52ad8f0a