Skip to content
Commit e907b131 authored by Hridya Valsaraju's avatar Hridya Valsaraju Committed by Greg Kroah-Hartman
Browse files

binder: prevent transactions to context manager from its own process.



commit 49ed9694 upstream.

Currently, a transaction to context manager from its own process
is prevented by checking if its binder_proc struct is the same as
that of the sender. However, this would not catch cases where the
process opens the binder device again and uses the new fd to send
a transaction to the context manager.

Reported-by: default avatar <syzbot+8b3c354d33c4ac78bfad@syzkaller.appspotmail.com>
Signed-off-by: default avatarHridya Valsaraju <hridya@google.com>
Acked-by: default avatarTodd Kjos <tkjos@google.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20190715191804.112933-1-hridya@google.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 7d20e3ba
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment