staging/ion: free ION buffer after gem object unreference 92/116892/2 accepted/tizen/mobile/20170306.222524 accepted/tizen/unified/20170309.075125 submit/tizen/20170306.071857 submit/tizen_unified/20170308.100420 submit/tizen_unified/20170309.100419
authorVishnu Pratap Singh <vishnu.ps@samsung.com>
Thu, 2 Mar 2017 01:15:14 +0000 (10:15 +0900)
committerJoonyoung Shim <jy0922.shim@samsung.com>
Thu, 2 Mar 2017 01:30:14 +0000 (10:30 +0900)
commit91abd955d8535c01fd39487b1c066c3758668dee
tree5d3cca985cdc7eaa948aa7400a81590cf6f419f6
parent8e681ebe206ae9e8ee3c9549d5218fb4536d39dd
staging/ion: free ION buffer after gem object unreference

It's bug that ION buffer is accessed to unreference gem object after ION
buffer is freed. It can cause memory corruption.

Change-Id: Idbfb5f66e8223b408d529d88b5af5079daac7018
Fixes: 03a9b03a2ab2 ("staging/ion: decrease gem reference count in release of dma-buf")
Signed-off-by: Vishnu Pratap Singh <vishnu.ps@samsung.com>
Signed-off-by: Joonyoung Shim <jy0922.shim@samsung.com>
drivers/staging/android/ion/ion.c