Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Todd Kjos 34d8a89fe1 binder: fix incorrect calculation for num_valid ... commit 16981742717b04644a41052570fb502682a315d2 upstream. For BINDER_TYPE_PTR and BINDER_TYPE_FDA transactions, the num_valid local was calculated incorrectly causing the range check in binder_validate_ptr() to miss out-of-bounds offsets. Fixes: bde4a19fc0 ("binder: use userspace pointer as base of buffer space") Signed-off-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20191213202531.55010-1-tkjos@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-12-17 19:55:33 +01:00
..
binder.c	binder: fix incorrect calculation for num_valid	2019-12-17 19:55:33 +01:00
binder_alloc.c	binder: Handle start==NULL in binder_update_page_range()	2019-12-13 08:43:25 +01:00
binder_alloc.h	binder: return errors from buffer copy functions	2019-07-01 08:42:47 +02:00
binder_alloc_selftest.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282	2019-06-05 17:36:37 +02:00
binder_internal.h	binder: prevent UAF read in print_binder_transaction_log_entry()	2019-10-10 14:39:22 +02:00
binder_trace.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282	2019-06-05 17:36:37 +02:00
binderfs.c	binder: Add binder_proc logging to binderfs	2019-09-04 13:31:26 +02:00
Kconfig
Makefile