Commit ec185535 authored by Alice Ryhl's avatar Alice Ryhl
Browse files

ANDROID: rust_binder: fail if objects are out of order



This fixes an issue where the driver incorrectly allows objects to be
translated out of order. This can result in previously translated
objects being overwritten by unrelated data, which would cause problems
when the objects are destroyed.

Thank you to Michał Bednarski for discovering the first security issue
in Rust Binder.

Reported-by: default avatarMichał Bednarski <bednarski.michal2@gmail.com>
Signed-off-by: default avatarAlice Ryhl <aliceryhl@google.com>
Change-Id: If83edaff266f6edc7ec70ec8475f4f9953362ad3
Bug: 278052745
parent ac68e23d
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment