ANDROID: rust_binder: fail if objects are out of order
This fixes an issue where the driver incorrectly allows objects to be translated out of order. This can result in previously translated objects being overwritten by unrelated data, which would cause problems when the objects are destroyed. Thank you to Michał Bednarski for discovering the first security issue in Rust Binder. Reported-by:Michał Bednarski <bednarski.michal2@gmail.com> Signed-off-by:
Alice Ryhl <aliceryhl@google.com> Change-Id: If83edaff266f6edc7ec70ec8475f4f9953362ad3 Bug: 278052745
Loading
Please sign in to comment