summaryrefslogtreecommitdiff
path: root/drivers/android
AgeCommit message (Expand)AuthorFilesLines
2024-09-12binder: fix UAF caused by offsets overwriteCarlos Llamas1-0/+1
2024-08-19binder: fix hang of unregistered readersCarlos Llamas1-3/+1
2024-05-25binder: fix max_thread type inconsistencyCarlos Llamas2-2/+2
2024-04-27binder: check offset alignment in binder_get_object()Carlos Llamas1-1/+3
2024-02-23binder: signal epoll threads of self-workCarlos Llamas1-0/+10
2024-01-25binder: fix race between mmput() and do_exit()Carlos Llamas1-2/+2
2024-01-25binder: fix unused alloc->free_async_spaceCarlos Llamas1-7/+4
2024-01-25binder: fix async space check for 0-sized buffersCarlos Llamas1-3/+4
2024-01-25binder: fix comment on binder_alloc_new_buf() return valueCarlos Llamas1-1/+1
2024-01-25binder: fix trivial typo of binder_free_buf_locked()Carlos Llamas1-1/+1
2024-01-25binder: fix use-after-free in shinker's callbackCarlos Llamas1-1/+5
2024-01-25binder: use EPOLLERR from eventpoll.hCarlos Llamas1-1/+1
2023-12-13binder: fix memory leaks of spam and pending workCarlos Llamas1-0/+1
2023-08-16binder: fix memory leak in binder_init()Qi Zheng3-0/+8
2023-06-05binder: fix UAF of alloc->vma in race with munmap()Carlos Llamas1-3/+3
2023-06-05binder: add lockless binder_alloc_(set|get)_vma()Carlos Llamas1-15/+7
2023-06-05Revert "android: binder: stop saving a pointer to the VMA"Carlos Llamas3-16/+15
2023-06-05Revert "binder_alloc: add missing mmap_lock calls when using the VMA"Carlos Llamas1-21/+10
2023-06-05binder: fix UAF caused by faulty buffer cleanupCarlos Llamas1-6/+20
2023-02-25binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0Alessandro Astone1-0/+3
2023-02-25binder: Address corner cases in deferred copy and fixupAlessandro Astone1-1/+6
2023-02-25binder: fix pointer cast warningArnd Bergmann1-1/+2
2023-02-25binder: defer copies of pre-patched txn dataTodd Kjos1-25/+274
2023-02-25binder: read pre-translated fds from sender bufferTodd Kjos1-7/+32
2022-12-02binder: validate alloc->mm in ->mmap() handlerCarlos Llamas1-0/+7
2022-09-23binder: remove inaccurate mmap_assert_locked()Carlos Llamas1-7/+0
2022-09-08binder: fix alloc->vma_vm_mm null-ptr dereferenceCarlos Llamas1-2/+2
2022-09-08binder: fix UAF of ref->proc caused by race conditionCarlos Llamas1-0/+12
2022-09-05android: binder: fix lockdep check on clearing vmaLiam Howlett1-1/+8
2022-08-31binder_alloc: add missing mmap_lock calls when using the VMALiam Howlett1-10/+21
2022-08-17android: binder: stop saving a pointer to the VMALiam R. Howlett3-18/+16
2022-08-17binder: fix redefinition of seq_file attributesCarlos Llamas3-107/+100
2022-01-27binder: avoid potential data leakage when copying txnTodd Kjos1-24/+70
2022-01-27binder: fix handling of error during copyTodd Kjos1-2/+2
2022-01-05binder: fix async_free_space accounting for empty parcelsTodd Kjos1-1/+1
2021-12-14binder: use wake_up_pollfree()Eric Biggers1-12/+9
2021-12-01binder: fix test regression due to sender_euid changeTodd Kjos1-1/+1
2021-11-12binder: don't detect sender/target during buffer cleanupTodd Kjos1-7/+7
2021-11-12binder: use cred instead of task for getsecidTodd Kjos1-10/+1
2021-11-12binder: use cred instead of task for selinux checksTodd Kjos1-6/+6
2021-11-12binder: use euid from cred instead of using taskTodd Kjos2-1/+7
2021-09-14binder: make sure fd closes completeTodd Kjos1-6/+17
2021-09-14binder: fix freeze raceLi Li2-6/+31
2021-08-03binder: Add invalid handle info in user error logRamji Jiyani1-2/+2
2021-07-21binderfs: add support for feature filesCarlos Llamas1-0/+39
2021-05-13binder: Return EFAULT if we fail BINDER_ENABLE_ONEWAY_SPAM_DETECTIONLuca Stefani1-1/+1
2021-04-27Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+10
2021-04-10binder: tell userspace to dump current backtrace when detected oneway spammingHang Lu4-8/+48
2021-04-10binder: fix the missing BR_FROZEN_REPLY in binder_return_stringsHang Lu2-2/+3
2021-03-24binder: BINDER_GET_FROZEN_INFO ioctlMarco Ballesio2-0/+61
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-27 12:22:38 +0000