summaryrefslogtreecommitdiff
path: root/drivers/android
AgeCommit message (Expand)Author
2025-10-29binder: remove "invalid inc weak" checkAlice Ryhl
2024-09-12binder: fix UAF caused by offsets overwriteCarlos Llamas
2024-08-19binder: fix hang of unregistered readersCarlos Llamas
2024-05-25binder: fix max_thread type inconsistencyCarlos Llamas
2024-04-27binder: check offset alignment in binder_get_object()Carlos Llamas
2024-02-23binder: signal epoll threads of self-workCarlos Llamas
2024-01-25binder: fix race between mmput() and do_exit()Carlos Llamas
2024-01-25binder: fix unused alloc->free_async_spaceCarlos Llamas
2024-01-25binder: fix async space check for 0-sized buffersCarlos Llamas
2024-01-25binder: fix comment on binder_alloc_new_buf() return valueCarlos Llamas
2024-01-25binder: fix trivial typo of binder_free_buf_locked()Carlos Llamas
2024-01-25binder: fix use-after-free in shinker's callbackCarlos Llamas
2024-01-25binder: use EPOLLERR from eventpoll.hCarlos Llamas
2023-12-13binder: fix memory leaks of spam and pending workCarlos Llamas
2023-08-16binder: fix memory leak in binder_init()Qi Zheng
2023-06-05binder: fix UAF of alloc->vma in race with munmap()Carlos Llamas
2023-06-05binder: add lockless binder_alloc_(set|get)_vma()Carlos Llamas
2023-06-05Revert "android: binder: stop saving a pointer to the VMA"Carlos Llamas
2023-06-05Revert "binder_alloc: add missing mmap_lock calls when using the VMA"Carlos Llamas
2023-06-05binder: fix UAF caused by faulty buffer cleanupCarlos Llamas
2023-02-25binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0Alessandro Astone
2023-02-25binder: Address corner cases in deferred copy and fixupAlessandro Astone
2023-02-25binder: fix pointer cast warningArnd Bergmann
2023-02-25binder: defer copies of pre-patched txn dataTodd Kjos
2023-02-25binder: read pre-translated fds from sender bufferTodd Kjos
2022-12-02binder: validate alloc->mm in ->mmap() handlerCarlos Llamas
2022-09-23binder: remove inaccurate mmap_assert_locked()Carlos Llamas
2022-09-08binder: fix alloc->vma_vm_mm null-ptr dereferenceCarlos Llamas
2022-09-08binder: fix UAF of ref->proc caused by race conditionCarlos Llamas
2022-09-05android: binder: fix lockdep check on clearing vmaLiam Howlett
2022-08-31binder_alloc: add missing mmap_lock calls when using the VMALiam Howlett
2022-08-17android: binder: stop saving a pointer to the VMALiam R. Howlett
2022-08-17binder: fix redefinition of seq_file attributesCarlos Llamas
2022-01-27binder: avoid potential data leakage when copying txnTodd Kjos
2022-01-27binder: fix handling of error during copyTodd Kjos
2022-01-05binder: fix async_free_space accounting for empty parcelsTodd Kjos
2021-12-14binder: use wake_up_pollfree()Eric Biggers
2021-12-01binder: fix test regression due to sender_euid changeTodd Kjos
2021-11-12binder: don't detect sender/target during buffer cleanupTodd Kjos
2021-11-12binder: use cred instead of task for getsecidTodd Kjos
2021-11-12binder: use cred instead of task for selinux checksTodd Kjos
2021-11-12binder: use euid from cred instead of using taskTodd Kjos
2021-09-14binder: make sure fd closes completeTodd Kjos
2021-09-14binder: fix freeze raceLi Li
2021-08-03binder: Add invalid handle info in user error logRamji Jiyani
2021-07-21binderfs: add support for feature filesCarlos Llamas
2021-05-13binder: Return EFAULT if we fail BINDER_ENABLE_ONEWAY_SPAM_DETECTIONLuca Stefani
2021-04-27Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2021-04-10binder: tell userspace to dump current backtrace when detected oneway spammingHang Lu
2021-04-10binder: fix the missing BR_FROZEN_REPLY in binder_return_stringsHang Lu