| commit | 434a761c85532a6b33bb6512385732dfefb6b651 | [log] [tgz] |
|---|---|---|
| author | Will McVicker <willmcvicker@google.com> | Tue Apr 13 15:59:41 2021 -0700 |
| committer | Maarten Derks <maarten@fairphone.com> | Mon Aug 09 10:45:43 2021 +0200 |
| tree | 14efec53003fadd634d5a35f66d867ed743e22f9 | |
| parent | dd1f40ebe90eaf2f6cc8e1d73cd6eac148a0de3a [diff] |
ANDROID: xt_qtaguid: fix UAF race
Make sure to hold the sock_tag_list_lock while accessing the tag to
avoid a race between getting the tag and free'ing the tag.
Issue: SEC-3060
Bug: 184018316
Fixes: c7ca0ac69702 ("ANDROID: netfilter: xt_qtaguid: add qtaguid matching module")
Signed-off-by: Will McVicker <willmcvicker@google.com>
Change-Id: I62404bdaa602586e00821a7d4c5f9b9868a0e90a
(cherry picked from commit 2398e650c58a6f4877dafce649188290f6e3b4f5)