A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-10 06:09:23 -04:00
Code Issues Projects Releases Packages Wiki Activity

ion: Restore secure system heap buffers' heap pointer after being freed

Browse source 
When a secure system heap buffer is freed, the buffer's heap pointer
is changed to the system heap, so that the buffer's pages can be freed
into the secure pools properly. However, the buffer's heap pointer
is not reset back to the secure system heap after the buffer has been
freed.

This is problematic, as the ION buffer tracking code uses the buffer's
heap pointer to figure out which heap's memory accounting stats it has
to decrement when a buffer is freed. In this case, we end up not
decrementing the system secure heap's memory accounting stats, but
instead, decrement the system heap's accounting stats, which is not
correct.

After freeing a buffer's pages, restore the buffer's heap pointer to
the secure system heap, to ensure that the correct heap's accounting
stats are adjusted.

Change-Id: I4ade80660fb5585a2be93be4929db5c534351c2d
Signed-off-by: Isaac J. Manjarres <isaacm@codeaurora.org>
This commit is contained in:
Isaac J. Manjarres 2020-11-23 12:35:50 -08:00
commit 387fa7403c
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
drivers/staging/android/ion/heaps/ion_system_secure_heap.c
View file

@ -68,6 +68,12 @@ static void ion_system_secure_heap_free(struct ion_buffer *buffer)
buffer->heap = secure_heap->sys_heap;
secure_heap->sys_heap->ops->free(buffer);
/*
* Restore buffer's heap pointer to the system secure heap, so that
* the ION memory accounting code uses the system secure heap's stats
* instead of the system heap stats.
*/
buffer->heap = heap;
}
static int ion_system_secure_heap_allocate(struct ion_heap *heap,