Gitiles
Code Review Sign In
review.blissroms.org / platform_system_libhwbinder / 839f707a38ed15685da48bbd5f4458817b5a54c6
commit839f707a38ed15685da48bbd5f4458817b5a54c6[log] [tgz]
authorDianne Hackborn <hackbod@google.com>Mon Mar 21 10:36:54 2016 -0700
committerDianne Hackborn <hackbod@google.com>Mon Mar 21 10:36:54 2016 -0700
treee1da7e8e44401f5d358a415dcd40179ad5a00b58
parent826df9895e549a61b0221adbdbf2f83acdffc616 [diff]
Fix issue #27252896: Security Vulnerability -- weak binder

Sending transaction to freed BBinder through weak handle
can cause use of a (mostly) freed object.  We need to try to
safely promote to a strong reference first.

Change-Id: Ic9c6940fa824980472e94ed2dfeca52a6b0fd342
1 file changed
tree: e1da7e8e44401f5d358a415dcd40179ad5a00b58
  1. include/
  2. tests/
  3. Android.mk
  4. AppOpsManager.cpp
  5. Binder.cpp
  6. BpBinder.cpp
  7. BufferedTextOutput.cpp
  8. Debug.cpp
  9. IAppOpsCallback.cpp
  10. IAppOpsService.cpp
  11. IBatteryStats.cpp
  12. IInterface.cpp
  13. IMediaResourceMonitor.cpp
  14. IMemory.cpp
  15. IPCThreadState.cpp
  16. IPermissionController.cpp
  17. IProcessInfoService.cpp
  18. IResultReceiver.cpp
  19. IServiceManager.cpp
  20. MemoryBase.cpp
  21. MemoryDealer.cpp
  22. MemoryHeapBase.cpp
  23. Parcel.cpp
  24. PermissionCache.cpp
  25. PersistableBundle.cpp
  26. ProcessInfoService.cpp
  27. ProcessState.cpp
  28. Static.cpp
  29. Status.cpp
  30. TextOutput.cpp