bd1eff9741
Opening the binder driver and sharing the file returned with other processes (e.g. by calling fork) can crash the kernel. Prevent these crashes with the following changes: - Add a mutex to protect against two processes mmapping the same binder_proc. - After locking mmap_sem, check that the vma we want to access (still) points to the same mm_struct. - Use proc->tsk instead of current to get the files struct since this is where we get the rlimit from. Signed-off-by: Arve Hjønnevåg <arve@android.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|---|---|---|
| .. | ||
| switch | ||
| ashmem.c | ||
| ashmem.h | ||
| binder.c | ||
| binder.h | ||
| Kconfig | ||
| logger.c | ||
| logger.h | ||
| lowmemorykiller.c | ||
| Makefile | ||
| ram_console.c | ||
| ram_console.h | ||
| timed_gpio.c | ||
| timed_gpio.h | ||
| timed_output.c | ||
| timed_output.h | ||
| TODO | ||