mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-27 03:10:12 +00:00
![]() For BINDER_TYPE_PTR and BINDER_TYPE_FDA transactions, the
num_valid local was calculated incorrectly causing the
range check in binder_validate_ptr() to miss out-of-bounds
offsets.
Fixes:
|
||
---|---|---|
.. | ||
binder.c | ||
binder_alloc.c | ||
binder_alloc.h | ||
binder_alloc_selftest.c | ||
binder_internal.h | ||
binder_trace.h | ||
binderfs.c | ||
Kconfig | ||
Makefile |