> > [Analysis] > > gsm_msg on the tx_ctrl_list or tx_data_list of gsm_mux > > can be freed by multi threads through ioctl,which leads > > to the occurrence of uaf. Protect it by gsm tx lock. > > LGTM. But Daniel might have a different opinion... Looks also good to me. I did not test it, but this will most likely solve one of the many multi-threading issues in the n_gsm driver. Best regards, Daniel Starke
