linux/drivers/android
Todd Kjos 11c025c88e FROMLIST: binder: use atomic for transaction_log index
(from https://patchwork.kernel.org/patch/9817807/)

The log->next index for the transaction log was
not protected when incremented. This led to a
case where log->next++ resulted in an index
larger than ARRAY_SIZE(log->entry) and eventually
a bad access to memory.

Fixed by making the log index an atomic64 and
converting to an array by using "% ARRAY_SIZE(log->entry)"

Also added "complete" field to the log entry which is
written last to tell the print code whether the
entry is complete

Bug: 62038227
Test: tested manually
Change-Id: I1bb1c1a332a6ac458a626f5bedd05022b56b91f2
Signed-off-by: Todd Kjos <tkjos@google.com>
2017-08-11 19:31:04 +05:30
..
binder_alloc.c FROMLIST: binder: add more debug info when allocation fails. 2017-08-11 19:31:04 +05:30
binder_alloc.h FROMLIST: binder: protect against two threads freeing buffer 2017-08-11 19:31:04 +05:30
binder_trace.h FROMLIST: binder: separate out binder_alloc functions 2017-08-11 19:31:04 +05:30
binder.c FROMLIST: binder: use atomic for transaction_log index 2017-08-11 19:31:04 +05:30
Kconfig ANDROID: binder: add hwbinder,vndbinder to BINDER_DEVICES. 2017-04-10 13:28:07 +05:30
Makefile FROMLIST: binder: move binder_alloc to separate file 2017-08-11 19:31:04 +05:30