Xu YiPing 52d7f79173 FROMLIST: binder: fix memory corruption in binder_transaction binder ... (from https://patchwork.kernel.org/patch/9939405/) commit 7a4408c6bd ("binder: make sure accesses to proc/thread are safe") made a change to enqueue tcomplete to thread->todo before enqueuing the transaction. However, in err_dead_proc_or_thread case, the tcomplete is directly freed, without dequeued. It may cause the thread->todo list to be corrupted. So, dequeue it before freeing. Bug: 65333488 Change-Id: Id063a4db18deaa634f4d44aa6ebca47bea32537a Signed-off-by: Xu YiPing <xuyiping@hisilicon.com> Signed-off-by: Todd Kjos <tkjos@google.com>		2017-09-18 21:14:34 +01:00
..
binder_alloc_selftest.c	FROMLIST: android: binder: Add global lru shrinker to binder	2017-09-18 21:14:31 +01:00
binder_alloc.c	FROMLIST: android: binder: Add page usage in binder stats	2017-09-18 21:14:32 +01:00
binder_alloc.h	FROMLIST: android: binder: Add page usage in binder stats	2017-09-18 21:14:32 +01:00
binder_trace.h	FROMLIST: android: binder: Add shrinker tracepoints	2017-09-18 21:14:32 +01:00
binder.c	FROMLIST: binder: fix memory corruption in binder_transaction binder	2017-09-18 21:14:34 +01:00
Kconfig	FROMLIST: android: binder: Add allocator selftest	2017-09-18 21:14:31 +01:00
Makefile	FROMLIST: android: binder: Add allocator selftest	2017-09-18 21:14:31 +01:00