summaryrefslogtreecommitdiff
path: root/drivers/android
AgeCommit message (Expand)AuthorFilesLines
2024-09-12binder: fix UAF caused by offsets overwriteCarlos Llamas1-0/+1
2024-08-19binder: fix hang of unregistered readersCarlos Llamas1-3/+1
2024-06-16binder: fix max_thread type inconsistencyCarlos Llamas1-2/+2
2024-05-02binder: check offset alignment in binder_get_object()Carlos Llamas1-1/+3
2024-02-23binder: signal epoll threads of self-workCarlos Llamas1-0/+10
2024-01-25binder: fix race between mmput() and do_exit()Carlos Llamas1-2/+2
2024-01-25binder: fix use-after-free in shinker's callbackCarlos Llamas1-1/+5
2024-01-25binder: fix unused alloc->free_async_spaceCarlos Llamas1-7/+4
2024-01-25binder: fix async space check for 0-sized buffersCarlos Llamas1-3/+4
2024-01-25binder: fix comment on binder_alloc_new_buf() return valueCarlos Llamas1-1/+1
2024-01-25binder: fix trivial typo of binder_free_buf_locked()Carlos Llamas1-1/+1
2024-01-25binder: use EPOLLERR from eventpoll.hCarlos Llamas1-1/+1
2023-08-16binder: fix memory leak in binder_init()Qi Zheng3-0/+8
2023-06-05binder: fix UAF caused by faulty buffer cleanupCarlos Llamas1-6/+20
2023-01-04file: Rename __close_fd_get_file close_fd_get_fileEric W. Biederman1-1/+1
2022-12-02binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0Alessandro Astone1-0/+3
2022-12-02binder: Address corner cases in deferred copy and fixupAlessandro Astone1-1/+6
2022-12-02binder: fix pointer cast warningArnd Bergmann1-1/+2
2022-12-02binder: defer copies of pre-patched txn dataTodd Kjos1-25/+274
2022-12-02binder: read pre-translated fds from sender bufferTodd Kjos1-7/+32
2022-12-02binder: avoid potential data leakage when copying txnTodd Kjos1-24/+70
2022-11-10binder: fix UAF of alloc->vma in race with munmap()Carlos Llamas1-3/+3
2022-09-08binder: fix UAF of ref->proc caused by race conditionCarlos Llamas1-0/+12
2022-09-05io_uring: disable polling pollfree filesPavel Begunkov1-0/+1
2022-01-27binder: fix handling of error during copyTodd Kjos1-2/+2
2022-01-05binder: fix async_free_space accounting for empty parcelsTodd Kjos1-1/+1
2021-12-14binder: use wake_up_pollfree()Eric Biggers1-12/+9
2021-12-01binder: fix test regression due to sender_euid changeTodd Kjos1-1/+1
2021-11-18binder: use cred instead of task for getsecidTodd Kjos1-1/+1
2021-11-18binder: use cred instead of task for selinux checksTodd Kjos1-6/+6
2021-11-18binder: use euid from cred instead of using taskTodd Kjos1-1/+7
2021-11-12binder: don't detect sender/target during buffer cleanupTodd Kjos1-7/+7
2021-09-30binder: make sure fd closes completeTodd Kjos1-6/+17
2020-12-30binder: add flag to clear buffer on txn completeTodd Kjos3-1/+52
2020-10-17task_work: cleanup notification modesJens Axboe1-1/+1
2020-10-10binder: fix UAF when releasing todo listTodd Kjos1-25/+10
2020-10-05binder: simplify the return expression of binder_mmapLiu Shixin1-14/+4
2020-09-16binder: remove redundant assignment to pointer nColin Ian King1-1/+1
2020-09-03binder: print warnings when detecting oneway spamming.Martijn Coenen4-6/+58
2020-09-03binderfs: make symbol 'binderfs_fs_parameters' staticWei Yongjun1-1/+1
2020-09-03binder: Modify commentsYangHui1-1/+1
2020-09-03binder: Remove bogus warning on failed same-process transactionJann Horn1-2/+0
2020-07-29drivers: android: Fix the SPDX comment styleMrinal Pandey1-1/+1
2020-07-29drivers: android: Fix a variable declaration coding style issueMrinal Pandey1-0/+1
2020-07-29drivers: android: Remove braces for a single statement if-else blockMrinal Pandey1-3/+2
2020-07-29drivers: android: Remove the use of else after returnMrinal Pandey1-2/+1
2020-07-29drivers: android: Fix a variable declaration coding style issueMrinal Pandey1-0/+1
2020-07-29binder: Prevent context manager from incrementing ref 0Jann Horn1-1/+14
2020-07-23binder: Don't use mmput() from shrinker function.Tetsuo Handa1-1/+1
2020-06-23binder: fix null deref of proc->contextTodd Kjos1-7/+7