tree 55252ef44dcce9852579b158fd7070a71529ed95
parent f54b97b2253ff56697dca92df4cd0cb0539586ad
author Peter Lee <peter.lee@hi-p.com> 1476431409 +0800
committer Teemu Hukkanen <teemu@fairphone.com> 1478254043 +0100

FPII-2470 : [Part 1/4] Update: Elevation of privilege vulnerability in Zygote process CVE-2016-3911 A-30963384

High
An elevation of privilege in the Zygote process could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
Note: This is an update to CVE-2016-3911, which was released as part of the September 2016 Partner Security Bulletin.
Additional technical details:
A-30963384	
The original fix targeted resource file descriptors. After further analysis, this issue affects all file descriptors leaked from Zygote to its children. A malicious process can modify the seek position of any of these file descriptors, and the seek location in all other processes could be affected.
The fix is designed to close the file descriptors and reopen them when the Zygote forks.

Change-Id: I712811dcc4eb5c51a4e1f551d4473a793c73e04c