Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / system / libhwbinder / c377d192954324d4c8f0c19aa2341b3fb59e0f6b
commitc377d192954324d4c8f0c19aa2341b3fb59e0f6b[log] [tgz]
authorDianne Hackborn <hackbod@google.com>Mon Mar 21 10:36:54 2016 -0700
committerSuprabh Shukla <suprabh@google.com>Wed Mar 23 01:16:32 2016 +0000
treea8c114b040757fb27cec2d8fbd3b24de65e1f9ba
parenta93140d2001742e80dba945175352c99ca34039b [diff]
Fix issue #27252896: Security Vulnerability -- weak binder

Sending transaction to freed BBinder through weak handle
can cause use of a (mostly) freed object.  We need to try to
safely promote to a strong reference first.

Change-Id: Ic9c6940fa824980472e94ed2dfeca52a6b0fd342
(cherry picked from commit c11146106f94e07016e8e26e4f8628f9a0c73199)
1 file changed
tree: a8c114b040757fb27cec2d8fbd3b24de65e1f9ba
  1. include/
  2. Android.mk
  3. AppOpsManager.cpp
  4. Binder.cpp
  5. BpBinder.cpp
  6. BufferedTextOutput.cpp
  7. Debug.cpp
  8. IAppOpsCallback.cpp
  9. IAppOpsService.cpp
  10. IBatteryStats.cpp
  11. IInterface.cpp
  12. IMemory.cpp
  13. IPCThreadState.cpp
  14. IPermissionController.cpp
  15. IServiceManager.cpp
  16. MemoryBase.cpp
  17. MemoryDealer.cpp
  18. MemoryHeapBase.cpp
  19. Parcel.cpp
  20. PermissionCache.cpp
  21. ProcessState.cpp
  22. Static.cpp
  23. TextOutput.cpp