| commit | 65156262ad6e6d9964109d5e6716f5a3d6b029c4 | [log] [tgz] |
|---|---|---|
| author | Ariel Yin <ayin@google.com> | Fri Jan 13 15:05:54 2017 -0800 |
| committer | chrmhoffmann <chrmhoffmann@gmail.com> | Sun Aug 06 12:33:05 2017 +0200 |
| tree | 76e4a54b9e2ff7a4d29df84475892f54a47097d7 | |
| parent | 6a69e46f377d1243a15eb7c632bbefc60e79b0b3 [diff] |
ANDROID: ion: check for kref overflow Userspace can cause the kref to handles to increment arbitrarily high. Ensure it does not overflow. Signed-off-by: Daniel Rosenberg <drosen@google.com> Bug: 31992382 Test: See bug for poc AOSP-Change-Id: I6bff1df385742b1d836d43180dc87fadcea80782 CVE-2017-0507 [haggertk]: Backport to 3.4/msm8974 Change-Id: I02347c215d567c611fc9a3689c009506988d189a Original-Change-Id: Iac5c5163dce4fa7facd0e690d07dd9e48558c50f