OSDN Git Service

binder: fix BUG_ON found by selinux-testsuite
authorTodd Kjos <tkjos@android.com>
Wed, 20 Mar 2019 22:35:45 +0000 (15:35 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 21 Mar 2019 05:50:47 +0000 (06:50 +0100)
commit5997da82145bb7c9a56d834894cb81f81f219344
tree64e26347034da32870b33ee8aaee56402324c74f
parent9e98c678c2d6ae3a17cb2de55d17f69dddaa231b
binder: fix BUG_ON found by selinux-testsuite

The selinux-testsuite found an issue resulting in a BUG_ON()
where a conditional relied on a size_t going negative when
checking the validity of a buffer offset.

Fixes: 7a67a39320df ("binder: add function to copy binder object from buffer")
Reported-by: Paul Moore <paul@paul-moore.com>
Tested-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Todd Kjos <tkjos@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/android/binder.c