tree 0b87ea5744cad2f49d4cb14495956970ef5c4843
parent a4d62d944e45ad5f061542fc8829ce6be1d95a82
author Keith Mok <keithmok@google.com> 1693441895 +0000
committer Bharath <bharath@teamb58.org> 1705514847 +0530

Add seal if ashmem-dev is backed by memfd

Need to seal the buffer size in align with ashmem if set to PROT_READ
only to prevent untrusted remote process to shrink the buffer size and
crash it.

Bug: 294609150
Test: build
Ignore-AOSP-First: Security
(cherry picked from commit f83c5c8fecf89d9315945368aa20350c2f235cc0)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:61a2897733e15a12b7aa2dfd99957e83cbe59351)
Merged-In: I9288cf30b41e84ad8d3247c204e20482912bff69
Change-Id: I9288cf30b41e84ad8d3247c204e20482912bff69