[PATCH] ANDROID: binder: prevent transactions into own process.

Greg KH gregkh at linuxfoundation.org
Wed Mar 28 08:19:21 UTC 2018


On Wed, Mar 28, 2018 at 09:29:03AM +0200, Martijn Coenen wrote:
> This can't happen with normal nodes (because you can't get a ref
> to a node you own), but it could happen with the context manager;
> to make the behavior consistent with regular nodes, reject
> transactions into the context manager by the process owning it.
> 
> Reported-by: syzbot+09e05aba06723a94d43d at syzkaller.appspotmail.com
> Signed-off-by: Martijn Coenen <maco at android.com>

Does this need to go to older kernels as well?

I have a script that picks up everything the syzbot finds and tries to
backport them, after they are applied in Linus's tree.  Might as well
catch things before we have to rely on my script :)

thanks,

greg k-h


More information about the devel mailing list