Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-31 Thread Arve Hjønnevåg
On Wed, Aug 31, 2016 at 6:22 AM, Greg Kroah-Hartman wrote: > On Thu, Aug 18, 2016 at 08:00:59PM -0700, Arve Hjønnevåg wrote: >> On Thu, Aug 18, 2016 at 7:30 PM, ZhaoJunmin Zhao(Junmin) >> wrote: >> > >> > >> > 在 2016/8/18 23:23, Greg Kroah-Hartman 写道: >> >> >> >> On Tue, Aug 16, 2016 at 07:44:59P

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-31 Thread Greg Kroah-Hartman
On Thu, Aug 18, 2016 at 08:00:59PM -0700, Arve Hjønnevåg wrote: > On Thu, Aug 18, 2016 at 7:30 PM, ZhaoJunmin Zhao(Junmin) > wrote: > > > > > > 在 2016/8/18 23:23, Greg Kroah-Hartman 写道: > >> > >> On Tue, Aug 16, 2016 at 07:44:59PM -0700, Arve Hjønnevåg wrote: > >>> > >>> On Mon, Aug 15, 2016 at 7:

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-18 Thread Arve Hjønnevåg
On Thu, Aug 18, 2016 at 7:30 PM, ZhaoJunmin Zhao(Junmin) wrote: > > > 在 2016/8/18 23:23, Greg Kroah-Hartman 写道: >> >> On Tue, Aug 16, 2016 at 07:44:59PM -0700, Arve Hjønnevåg wrote: >>> >>> On Mon, Aug 15, 2016 at 7:58 AM, Greg Kroah-Hartman >>> wrote: On Thu, Jun 16, 2016 at 12:45:33AM

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-18 Thread ZhaoJunmin Zhao(Junmin)
在 2016/8/18 23:23, Greg Kroah-Hartman 写道: On Tue, Aug 16, 2016 at 07:44:59PM -0700, Arve Hjønnevåg wrote: On Mon, Aug 15, 2016 at 7:58 AM, Greg Kroah-Hartman wrote: On Thu, Jun 16, 2016 at 12:45:33AM +0200, Jann Horn wrote: If /dev/binder is opened and the opener process then e.g. calls exe

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-18 Thread Greg Kroah-Hartman
On Tue, Aug 16, 2016 at 07:44:59PM -0700, Arve Hjønnevåg wrote: > On Mon, Aug 15, 2016 at 7:58 AM, Greg Kroah-Hartman > wrote: > > On Thu, Jun 16, 2016 at 12:45:33AM +0200, Jann Horn wrote: > >> If /dev/binder is opened and the opener process then e.g. calls execve, > >> proc->vma_vm_mm will still

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-16 Thread Arve Hjønnevåg
On Mon, Aug 15, 2016 at 7:58 AM, Greg Kroah-Hartman wrote: > On Thu, Jun 16, 2016 at 12:45:33AM +0200, Jann Horn wrote: >> If /dev/binder is opened and the opener process then e.g. calls execve, >> proc->vma_vm_mm will still point to the location of the now-freed >> mm_struct. If the process then

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-08-15 Thread Greg Kroah-Hartman
On Thu, Jun 16, 2016 at 12:45:33AM +0200, Jann Horn wrote: > If /dev/binder is opened and the opener process then e.g. calls execve, > proc->vma_vm_mm will still point to the location of the now-freed > mm_struct. If the process then calls ioctl(binder_fd, ...), the dangling > proc->vma_vm_mm point

Re: [PATCH v2] android: binder: fix dangling pointer comparison

2016-06-17 Thread Chen Feng
looks good to me. On 2016/6/16 6:45, Jann Horn wrote: > If /dev/binder is opened and the opener process then e.g. calls execve, > proc->vma_vm_mm will still point to the location of the now-freed > mm_struct. If the process then calls ioctl(binder_fd, ...), the dangling > proc->vma_vm_mm pointer w