aboutsummaryrefslogtreecommitdiffstats
path: root/drivers/android
AgeCommit message (Expand)Author
2024-05-02binder: check offset alignment in binder_get_object()Carlos Llamas
2024-02-23binder: signal epoll threads of self-workCarlos Llamas
2024-01-25binder: fix unused alloc->free_async_spaceCarlos Llamas
2024-01-25binder: fix race between mmput() and do_exit()Carlos Llamas
2024-01-25binder: fix use-after-free in shinker's callbackCarlos Llamas
2024-01-25binder: fix async space check for 0-sized buffersCarlos Llamas
2024-01-25binder: fix comment on binder_alloc_new_buf() return valueCarlos Llamas
2024-01-25binder: fix trivial typo of binder_free_buf_locked()Carlos Llamas
2024-01-25binder: use EPOLLERR from eventpoll.hCarlos Llamas
2023-08-16binder: fix memory leak in binder_init()Qi Zheng
2023-06-05binder: fix UAF caused by faulty buffer cleanupCarlos Llamas
2022-12-08binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0Alessandro Astone
2022-12-08binder: Address corner cases in deferred copy and fixupAlessandro Astone
2022-12-08binder: fix pointer cast warningArnd Bergmann
2022-12-08binder: defer copies of pre-patched txn dataTodd Kjos
2022-12-08binder: read pre-translated fds from sender bufferTodd Kjos
2022-12-08binder: avoid potential data leakage when copying txnTodd Kjos
2022-11-10binder: fix UAF of alloc->vma in race with munmap()Carlos Llamas
2022-09-15binder: fix UAF of ref->proc caused by race conditionCarlos Llamas
2022-09-05io_uring: disable polling pollfree filesPavel Begunkov
2022-01-27binder: fix handling of error during copyTodd Kjos
2022-01-05binder: fix async_free_space accounting for empty parcelsTodd Kjos
2021-12-14binder: use wake_up_pollfree()Eric Biggers
2021-12-01binder: fix test regression due to sender_euid changeTodd Kjos
2021-11-17binder: use cred instead of task for getsecidTodd Kjos
2021-11-17binder: use cred instead of task for selinux checksTodd Kjos
2021-11-17binder: use euid from cred instead of using taskTodd Kjos
2021-11-12binder: don't detect sender/target during buffer cleanupTodd Kjos
2021-09-30binder: make sure fd closes completeTodd Kjos
2020-12-30binder: add flag to clear buffer on txn completeTodd Kjos
2020-10-29binder: Remove bogus warning on failed same-process transactionJann Horn
2020-10-29binder: fix UAF when releasing todo listTodd Kjos
2020-08-11binder: Prevent context manager from incrementing ref 0Jann Horn
2020-07-29binder: Don't use mmput() from shrinker function.Tetsuo Handa
2020-06-30binder: fix null deref of proc->contextTodd Kjos
2020-03-25binderfs: use refcount for binder control devices tooChristian Brauner
2020-03-12binder: prevent UAF for binderfs devices IIChristian Brauner
2020-03-12binder: prevent UAF for binderfs devicesChristian Brauner
2020-02-01binder: fix log spam for existing debugfs file creation.Martin Fuzzey
2019-12-17binder: fix incorrect calculation for num_validTodd Kjos
2019-12-13binder: Handle start==NULL in binder_update_page_range()Jann Horn
2019-12-13binder: Prevent repeated use of ->mmap() via NULL mappingJann Horn
2019-12-13binder: Fix race between mmap() and binder_alloc_print_pages()Jann Horn
2019-10-17binder: Don't modify VMA bounds in ->mmap handlerJann Horn
2019-10-10binder: Fix comment headers on binder_alloc_prepare_to_free()Joel Fernandes (Google)
2019-10-10binder: prevent UAF read in print_binder_transaction_log_entry()Christian Brauner
2019-09-04binder: Add binder_proc logging to binderfsHridya Valsaraju
2019-09-04binder: Make transaction_log available in binderfsHridya Valsaraju
2019-09-04binder: Add stats, state and transactions filesHridya Valsaraju
2019-09-04binder: add a mount option to show global statsHridya Valsaraju