OSDN Git Service

binder: fix handling of misaligned binder object
authorTodd Kjos <tkjos@android.com>
Thu, 14 Feb 2019 23:22:57 +0000 (15:22 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 2 May 2019 07:58:56 +0000 (09:58 +0200)
commit6bf7d3c5c0c5dad650bfc4345ed553c18b69d59e
tree6878d60c3aaa303ac448a7848b4b707f735d5a11
parent8c37f7c23c02f6ac020ffdc746026c2363b23a5a
binder: fix handling of misaligned binder object

commit 26528be6720bb40bc8844e97ee73a37e530e9c5e upstream.

Fixes crash found by syzbot:
kernel BUG at drivers/android/binder_alloc.c:LINE! (2)

Reported-and-tested-by: syzbot+55de1eb4975dec156d8f@syzkaller.appspotmail.com
Signed-off-by: Todd Kjos <tkjos@google.com>
Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org>
Cc: stable <stable@vger.kernel.org> # 5.0, 4.19, 4.14
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/android/binder_alloc.c