forge/linux-uconsole
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions
linux-uconsole/drivers/android
History
Todd Kjos 64b698c15a UPSTREAM: binder: fix incorrect calculation for num_valid 
commit 1698174271 upstream.

For BINDER_TYPE_PTR and BINDER_TYPE_FDA transactions, the
num_valid local was calculated incorrectly causing the
range check in binder_validate_ptr() to miss out-of-bounds
offsets.

Fixes: bde4a19fc0 ("binder: use userspace pointer as base of buffer space")
Change-Id: Ida77db13d8e5b726f0b14513f55c2b30277338cd
Signed-off-by: Todd Kjos <tkjos@google.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20191213202531.55010-1-tkjos@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 145988638
Signed-off-by: Todd Kjos <tkjos@google.com>
2019-12-18 19:49:13 +00:00
..
binder.c UPSTREAM: binder: fix incorrect calculation for num_valid 2019-12-18 19:49:13 +00:00
binder_alloc.c This is the 4.19.89 stable release 2019-12-13 10:01:10 +01:00
binder_alloc.h BACKPORT: binder: use userspace pointer as base of buffer space 2019-03-25 15:08:18 -07:00
binder_alloc_selftest.c UPSTREAM: binder: fix sparse issue in binder_alloc_selftest.c 2019-03-25 15:08:19 -07:00
binder_internal.h UPSTREAM: binder: Add binder_proc logging to binderfs 2019-12-08 21:46:53 -08:00
binder_trace.h BACKPORT: binder: use userspace pointer as base of buffer space 2019-03-25 15:08:18 -07:00
binderfs.c UPSTREAM: binder: Add binder_proc logging to binderfs 2019-12-08 21:46:53 -08:00
Kconfig UPSTREAM: binder: implement binderfs 2019-12-08 21:41:34 -08:00
Makefile UPSTREAM: binder: implement binderfs 2019-12-08 21:41:34 -08:00