mirror of
https://github.com/torvalds/linux.git
synced 2026-06-10 07:32:29 +02:00
(from https://patchwork.kernel.org/patch/9817807/) The log->next index for the transaction log was not protected when incremented. This led to a case where log->next++ resulted in an index larger than ARRAY_SIZE(log->entry) and eventually a bad access to memory. Fixed by making the log index an atomic64 and converting to an array by using "% ARRAY_SIZE(log->entry)" Also added "complete" field to the log entry which is written last to tell the print code whether the entry is complete Bug: 62038227 Test: tested manually Change-Id: I1bb1c1a332a6ac458a626f5bedd05022b56b91f2 Signed-off-by: Todd Kjos <tkjos@google.com> |
||
|---|---|---|
| .. | ||
| binder_alloc.c | ||
| binder_alloc.h | ||
| binder_trace.h | ||
| binder.c | ||
| Kconfig | ||
| Makefile | ||