linux

mirror of https://github.com/FEX-Emu/linux.git synced 2025-03-04 10:38:20 +00:00

History

Todd Kjos 1698174271 binder: fix incorrect calculation for num_valid

For BINDER_TYPE_PTR and BINDER_TYPE_FDA transactions, the
num_valid local was calculated incorrectly causing the
range check in binder_validate_ptr() to miss out-of-bounds
offsets.

Fixes: bde4a19fc04f ("binder: use userspace pointer as base of buffer space")
Signed-off-by: Todd Kjos <tkjos@google.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20191213202531.55010-1-tkjos@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-12-14 09:10:47 +01:00

binder_alloc_selftest.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282

2019-06-05 17:36:37 +02:00

binder_alloc.c

binder: Handle start==NULL in binder_update_page_range()

2019-11-14 11:44:47 +08:00

binder_alloc.h

binder: return errors from buffer copy functions

2019-07-01 08:42:47 +02:00

binder_internal.h

binder: prevent UAF read in print_binder_transaction_log_entry()