android/android_kernel_samsung_sm8650
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6dde3d399b
android_kernel_samsung_sm8650/drivers
History
Carlos Llamas 5e5adb0e04 FROMLIST: binder: check offset alignment in binder_get_object() 
Commit 6d98eb95b4 ("binder: avoid potential data leakage when copying
txn") introduced changes to how binder objects are copied. In doing so,
it unintentionally removed an offset alignment check done through calls
to binder_alloc_copy_from_buffer() -> check_buffer().

These calls were replaced in binder_get_object() with copy_from_user(),
so now an explicit offset alignment check is needed here. This avoids
later complications when unwinding the objects gets harder.

It is worth noting this check existed prior to commit 7a67a39320
("binder: add function to copy binder object from buffer"), likely
removed due to redundancy at the time.

Fixes: 6d98eb95b4 ("binder: avoid potential data leakage when copying txn")
Cc:  <stable@vger.kernel.org>
Acked-by: Todd Kjos <tkjos@google.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>

Bug: 320661088
Link: https://lore.kernel.org/all/20240330190115.1877819-1-cmllamas@google.com/
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Change-Id: Iaddabaa28de7ba7b7d35dbb639d38ca79dbc5077
(cherry picked from commit 0c9784b747)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-18 11:26:36 +01:00
..
accessibility
acpi Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
amba amba: bus: fix refcount leak 2023-09-13 09:42:56 +02:00
android FROMLIST: binder: check offset alignment in binder_get_object() 2024-04-18 11:26:36 +01:00
ata Merge 6.1.65 into android14-6.1-lts 2023-12-20 13:31:28 +00:00
atm Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
auxdisplay auxdisplay: hd44780: move cursor home after clear display command 2023-12-08 08:51:16 +01:00
base Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
bcma
block Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
bluetooth Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
bus Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
cdrom
char This is the 6.1.63 stable release 2023-11-27 16:59:46 +00:00
clk Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
clocksource Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
comedi
connector
counter counter: microchip-tcb-capture: Fix the use of internal GCLK logic 2023-10-19 23:08:58 +02:00
cpufreq Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
cpuidle Merge branch 'android14-6.1' into branch 'android14-6.1-lts' 2023-10-31 17:20:05 +00:00
crypto Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
cxl Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
dax
dca
devfreq Merge branch 'android14-6.1' into branch 'android14-6.1-lts' 2024-01-11 08:06:52 +00:00
dio
dma Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
dma-buf Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1 2024-01-24 17:34:59 +00:00
edac Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
eisa
extcon extcon: cht_wc: add POWER_SUPPLY dependency 2023-09-13 09:42:53 +02:00
firewire Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
firmware Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
fpga
fsi fsi: aspeed: Reset master errors after CFAM reset 2023-09-13 09:42:54 +02:00
gnss
gpio Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
gpu Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
greybus
hid Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
hsi
hte hte: tegra: Fix missing error code in tegra_hte_test_probe() 2023-11-20 11:51:58 +01:00
hv This is the 6.1.53 stable release 2023-09-18 09:57:37 +00:00
hwmon Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
hwspinlock hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation 2023-09-19 12:28:05 +02:00
hwtracing Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
i2c Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
i3c i3c: master: svc: fix random hot join failure since timeout error 2023-11-28 17:07:17 +00:00
idle intel_idle: add Emerald Rapids Xeon support 2023-10-10 22:00:44 +02:00
iio Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
infiniband Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
input Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
interconnect Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
iommu FROMLIST: iommu: Avoid races around default domain allocations 2024-03-13 16:02:40 +00:00
ipack
irqchip BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 2024-01-26 10:14:07 +00:00
isdn
leds Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
macintosh
mailbox This is the 6.1.54 stable release 2023-10-17 12:03:09 +00:00
mcb mcb: fix error handling for different scenarios when parsing 2023-11-28 17:07:13 +00:00
md Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
media Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
memory
memstick
message
mfd Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
misc ANDROID: uid_sys_stat: fix data-error of cputime and io 2024-03-08 23:30:44 +00:00
mmc Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
most
mtd Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
mux
net Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
nfc
ntb ntb: Fix calculation ntb_transport_tx_free_entry() 2023-09-13 09:43:02 +02:00
nubus
nvdimm nd_btt: Make BTT lanes preemptible 2023-11-20 11:52:05 +01:00
nvme Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
nvmem nvmem: imx: correct nregs for i.MX6UL 2023-11-02 09:35:31 +01:00
of Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
opp
parisc parisc/power: Fix power soft-off when running on qemu 2023-11-28 17:07:14 +00:00
parport Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
pci Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
pcmcia pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() 2023-11-20 11:52:13 +01:00
peci
perf perf: hisi: Fix use-after-free when register pmu fails 2023-11-20 11:52:01 +01:00
phy Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1 2024-01-24 17:34:59 +00:00
pinctrl Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
platform Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
pnp
power Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
powercap ANDROID: idle_inject: Export function symbols 2024-01-25 19:43:25 +00:00
pps
ps3
ptp ptp: annotate data-race around q->head and q->tail 2023-11-28 17:07:05 +00:00
pwm Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
rapidio
ras
regulator regulator: mt6358: Fail probe on unknown chip ID 2023-11-20 11:51:56 +01:00
remoteproc
reset Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
rpmsg rpmsg: glink: Add check for kstrdup 2023-09-13 09:42:58 +02:00
rtc rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call 2023-11-20 11:52:13 +01:00
s390 Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
sbus
scsi Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
sh
siox
slimbus
soc Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
soundwire Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
spi Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
spmi Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
ssb
staging Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
target Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
tc
tee tee: optee: Fix supplicant based device enumeration 2023-12-13 18:39:12 +01:00
thermal This is the 6.1.63 stable release 2023-11-27 16:59:46 +00:00
thunderbolt Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
tty Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
ufs UPSTREAM: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR 2024-02-26 17:25:00 +00:00
uio Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
usb Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" 2024-04-02 10:30:51 +00:00
vdpa Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
vfio Merge 6.1.56 into android14-6.1-lts 2023-10-27 09:17:04 +00:00
vhost This is the 6.1.64 stable release 2023-12-12 18:41:13 +00:00
video Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
virt Merge branch 'android14-6.1' into branch 'android14-6.1-lts' 2023-12-19 19:05:29 +00:00
virtio UPSTREAM: virtio: Add support for no-reset virtio PCI PM 2024-02-14 00:31:36 +00:00
vlynq
w1
watchdog Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" 2024-03-07 21:18:27 +00:00
xen Merge 6.1.65 into android14-6.1-lts 2023-12-20 13:31:28 +00:00
zorro
Kconfig
Makefile