summaryrefslogtreecommitdiff
path: root/drivers/android
AgeCommit message (Expand)AuthorFilesLines
2024-05-02binder: check offset alignment in binder_get_object()Carlos Llamas1-1/+3
2024-02-23binder: signal epoll threads of self-workCarlos Llamas1-0/+10
2024-01-26binder: fix unused alloc->free_async_spaceCarlos Llamas1-5/+3
2024-01-26binder: fix race between mmput() and do_exit()Carlos Llamas1-2/+2
2024-01-26binder: fix use-after-free in shinker's callbackCarlos Llamas1-1/+5
2024-01-26binder: fix async space check for 0-sized buffersCarlos Llamas1-3/+4
2024-01-26binder: fix comment on binder_alloc_new_buf() return valueCarlos Llamas1-1/+1
2024-01-26binder: fix trivial typo of binder_free_buf_locked()Carlos Llamas1-1/+1
2024-01-26binder: use EPOLLERR from eventpoll.hCarlos Llamas1-1/+1
2023-08-16binder: fix memory leak in binder_init()Qi Zheng3-0/+8
2023-06-05binder: fix UAF caused by faulty buffer cleanupCarlos Llamas1-6/+20
2022-12-08binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0Alessandro Astone1-0/+3
2022-12-08binder: Address corner cases in deferred copy and fixupAlessandro Astone1-1/+6
2022-12-08binder: fix pointer cast warningArnd Bergmann1-1/+2
2022-12-08binder: defer copies of pre-patched txn dataTodd Kjos1-25/+274
2022-12-08binder: read pre-translated fds from sender bufferTodd Kjos1-7/+32
2022-12-08binder: avoid potential data leakage when copying txnTodd Kjos1-24/+70
2022-11-10binder: fix UAF of alloc->vma in race with munmap()Carlos Llamas1-3/+3
2022-09-15binder: fix UAF of ref->proc caused by race conditionCarlos Llamas1-0/+12
2022-09-05io_uring: disable polling pollfree filesPavel Begunkov1-0/+1
2022-01-27binder: fix handling of error during copyTodd Kjos1-2/+2
2022-01-05binder: fix async_free_space accounting for empty parcelsTodd Kjos1-1/+1
2021-12-14binder: use wake_up_pollfree()Eric Biggers1-12/+9
2021-12-01binder: fix test regression due to sender_euid changeTodd Kjos1-1/+1
2021-11-17binder: use cred instead of task for getsecidTodd Kjos1-1/+1
2021-11-17binder: use cred instead of task for selinux checksTodd Kjos1-6/+6
2021-11-17binder: use euid from cred instead of using taskTodd Kjos1-1/+7
2021-11-12binder: don't detect sender/target during buffer cleanupTodd Kjos1-7/+7
2021-09-30binder: make sure fd closes completeTodd Kjos1-6/+17
2020-12-30binder: add flag to clear buffer on txn completeTodd Kjos3-1/+52
2020-10-29binder: Remove bogus warning on failed same-process transactionJann Horn1-2/+0
2020-10-29binder: fix UAF when releasing todo listTodd Kjos1-25/+10
2020-08-11binder: Prevent context manager from incrementing ref 0Jann Horn1-1/+14
2020-07-29binder: Don't use mmput() from shrinker function.Tetsuo Handa1-1/+1
2020-06-30binder: fix null deref of proc->contextTodd Kjos1-7/+7
2020-03-25binderfs: use refcount for binder control devices tooChristian Brauner1-0/+1
2020-03-12binder: prevent UAF for binderfs devices IIChristian Brauner3-18/+16
2020-03-12binder: prevent UAF for binderfs devicesChristian Brauner2-1/+17
2020-02-01binder: fix log spam for existing debugfs file creation.Martin Fuzzey1-18/+19
2019-12-17binder: fix incorrect calculation for num_validTodd Kjos1-2/+2
2019-12-13binder: Handle start==NULL in binder_update_page_range()Jann Horn1-3/+5
2019-12-13binder: Prevent repeated use of ->mmap() via NULL mappingJann Horn1-5/+6
2019-12-13binder: Fix race between mmap() and binder_alloc_print_pages()Jann Horn1-8/+14
2019-10-17binder: Don't modify VMA bounds in ->mmap handlerJann Horn2-9/+4
2019-10-10binder: Fix comment headers on binder_alloc_prepare_to_free()Joel Fernandes (Google)1-1/+1
2019-10-10binder: prevent UAF read in print_binder_transaction_log_entry()Christian Brauner2-2/+4
2019-09-04binder: Add binder_proc logging to binderfsHridya Valsaraju3-39/+121
2019-09-04binder: Make transaction_log available in binderfsHridya Valsaraju3-29/+53
2019-09-04binder: Add stats, state and transactions filesHridya Valsaraju3-10/+153
2019-09-04binder: add a mount option to show global statsHridya Valsaraju1-2/+43