Re: [PATCH 2/3] binder: Prevent repeated use of ->mmap() via NULL mapping

2019-10-19 Thread Christian Brauner
On Fri Oct 18, 2019 at 10:56 PM Jann Horn wrote: > binder_alloc_mmap_handler() attempts to detect the use of ->mmap() on a > binder_proc whose binder_alloc has already been initialized by checking > whether alloc->buffer is non-zero. > > Before commit 880211667b20 ("binder: remove kernel vm_area f

[PATCH 2/3] binder: Prevent repeated use of ->mmap() via NULL mapping

2019-10-18 Thread Jann Horn
binder_alloc_mmap_handler() attempts to detect the use of ->mmap() on a binder_proc whose binder_alloc has already been initialized by checking whether alloc->buffer is non-zero. Before commit 880211667b20 ("binder: remove kernel vm_area for buffer space"), alloc->buffer was a kernel mapping addre