Jann Horn c26958cb5a Take mmap lock in cacheflush syscall ...

We need to take the mmap lock around find_vma() and subsequent use of the
VMA. Otherwise, we can race with concurrent operations like munmap(), which
can lead to use-after-free accesses to freed VMAs.

Fixes: 1000197d80 ("nios2: System calls handling")
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Ley Foon Tan <ley.foon.tan@intel.com>

2021-02-19 15:01:59 +08:00

1.3 KiB

Raw Blame History

View Raw