Received: by 2002:a05:6358:4e97:b0:b3:742d:4702 with SMTP id ce23csp610592rwb; Thu, 18 Aug 2022 09:07:04 -0700 (PDT) X-Google-Smtp-Source: AA6agR5mJ4/dauWk0K5xDXzLPg2nDwz1AiTcQQ7UWo1C6NoQ3TBnTlXbZOSxD0GM38FKrQPXp69M X-Received: by 2002:a65:6cca:0:b0:427:17e6:b32b with SMTP id g10-20020a656cca000000b0042717e6b32bmr2805898pgw.349.1660838824384; Thu, 18 Aug 2022 09:07:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1660838824; cv=none; d=google.com; s=arc-20160816; b=yasCsoyrY51wQgoSTQMk894zzOWiYRXNq70+zLcNCrzrdjuwrKsSAP6axRnkpIGlA6 8TnrbmUvaHdUZ9cHwDJlPeLjwY4od3pqahEE+5C54NvnIh0dE8+DaTUk5ZtsrkvseHcI xR2RigfvR2lTluThgfPwwvezlNXd6rTgxfRopYBIbYe/ggiftwgBDazWDbGJdLL0n7LC 5A7c0CcWYR+lwuHDWFvswP6zfS+P+mESMcECQZfgFb5zyLNpzCcdylDJNIKmk9VYpSiD aRlaabx9KJP4LIugIC9mdC5OyvRbMhC0jCBUi2HhKKsLijWjydkgqHIVh46MCAzf40oL DbbA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=w6M+FZJJ529vb411UeOf1PfHGJuystXwWwsN/lXPQtE=; b=cJUFzME7dKJuDmQVqW73qK2Ur3WfimjkOdcxhvZYEPKUNM6VTX2jqMPJhCnRqJmXvR ADtgSTEoGcq+eSkB2F9vResXQQPWOPchU+Mx7jdmuBI+gMJjbAtarFAoWSMYJYaVQIvc jU4sSQEcaJuWaVDAPnOwdkCYDrv9BQYDZ1SUtugZpkJGlb2h+UPwBQM08fRTlReSaQy2 bXWubdE5hNROIDGyH0NkdEws8aIwOKytS0OtkYOg1zYsJLvccT4z0dok3Tl77eXANG5J qgIUxc9Z7tQbzOhtHaSbOcrXo5y8rHz1lvHMbpQ5ynSDEm+brndV//3wVJX0nEtMVOng ZFqw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=Udpcf6Wh; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id ip3-20020a17090b314300b001f4fc60c4dcsi2005952pjb.6.2022.08.18.09.06.51; Thu, 18 Aug 2022 09:07:04 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=Udpcf6Wh; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1343845AbiHRPs5 (ORCPT + 99 others); Thu, 18 Aug 2022 11:48:57 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:43998 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1343810AbiHRPsy (ORCPT ); Thu, 18 Aug 2022 11:48:54 -0400 Received: from mail-pg1-x52c.google.com (mail-pg1-x52c.google.com [IPv6:2607:f8b0:4864:20::52c]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id A1EF0DF31 for ; Thu, 18 Aug 2022 08:48:52 -0700 (PDT) Received: by mail-pg1-x52c.google.com with SMTP id 24so1592537pgr.7 for ; Thu, 18 Aug 2022 08:48:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc; bh=w6M+FZJJ529vb411UeOf1PfHGJuystXwWwsN/lXPQtE=; b=Udpcf6WhVCKSO6CCB5Al6hFLQuP0MS00JNK1tDth+LmtB9UU6RMGcnLFHOJv0Fybgw S23Rgca2ss5H4e+cl3zZEwW+y0HHjyY9+3/DohzadykEeluLL3uBlrIc2cDvEQpEK1i4 lnOpf1PI0TnMrQjW3fAY4aEIMEdqnuev71sYHjImfqQyxLFKge2gYGjAWVOWoKOD4sjR je/C8HNym8Co3vT7BWNs6UcLN37hyUJEa/ARm/CNVUHO4DXC2aS6+Z2mDtff4BSNoJY5 FUiS5M11y13LGQI4ektSY2NVzlv3Lhll9onjaIN2aO+4snoqzF0FQA3+UR1Gwt7gAs11 cgEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc; bh=w6M+FZJJ529vb411UeOf1PfHGJuystXwWwsN/lXPQtE=; b=lFCRPMnnPK3LSng5fcZkordH0TinB9KxspBYrHreINTAWVyGW04eVLQ0TiSwCNvm1D UD96aVuU6mdd4Q4okjp4hzHMb81xFZp/BbjSjqPPd/gnxrh6KZKuqdE+7wYmRKa42s7u w8A9bdUBIduTnY8kK4w1Ife5TqIZ7aitTPP9Ol7DuVNPQ3kUCN89W9I+lN30MnW2eUI5 MBLi2cz9T75S2aNm17g1Sbolbd9lxhaVvQtH2e313vu/LhZPnAEBfS6jlZElFnX8vsQO IsfDlKqixRSPh6lpl4JZXBU1rquAqZFyoVZHHxXdMxvqFH2t2OOJAMqQrl+nGgKKGQ9l CRMA== X-Gm-Message-State: ACgBeo0oRESnuRAyG7ruifs5mJSHz0D/jKeXCt3GWtCetug1A5yI6acY wvWdvWfE0PsFEdCU7hDX2Bg7DA== X-Received: by 2002:a05:6a00:1343:b0:52e:8174:fc37 with SMTP id k3-20020a056a00134300b0052e8174fc37mr3536471pfu.32.1660837731931; Thu, 18 Aug 2022 08:48:51 -0700 (PDT) Received: from google.com (157.214.185.35.bc.googleusercontent.com. [35.185.214.157]) by smtp.gmail.com with ESMTPSA id v31-20020a63481f000000b004277f43b736sm1437620pga.92.2022.08.18.08.48.50 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 18 Aug 2022 08:48:50 -0700 (PDT) Date: Thu, 18 Aug 2022 15:48:46 +0000 From: Carlos Llamas To: Greg Kroah-Hartman Cc: Arve =?iso-8859-1?B?SGr4bm5lduVn?= , Todd Kjos , Martijn Coenen , Christian Brauner , Joel Fernandes , Suren Baghdasaryan , kernel-team@android.com, linux-kernel@vger.kernel.org, stable@vger.kernel.org Subject: Re: [PATCH] binder: fix UAF of ref->proc caused by race condition Message-ID: References: <20220801182511.3371447-1-cmllamas@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Status: No, score=-14.4 required=5.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, ENV_AND_HDR_SPF_MATCH,FSL_HELO_FAKE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE, SPF_PASS,T_SCC_BODY_TEXT_LINE,USER_IN_DEF_DKIM_WL,USER_IN_DEF_SPF_WL autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Aug 18, 2022 at 07:26:01AM +0200, Greg Kroah-Hartman wrote: > On Wed, Aug 17, 2022 at 10:04:50PM +0000, Carlos Llamas wrote: > > On Wed, Aug 03, 2022 at 09:29:24AM +0200, Greg Kroah-Hartman wrote: > > > > > > Thanks, I'll add this when I queue it up after 5.20-rc1 is out. > > > > > > greg k-h > > > > Hi Greg, > > > > I think this might have fallen through the cracks, I can't find it in > > char-misc or linux-next trees. > > -rc1 only came out a few days ago, and I have a lot to catch up on: > $ mdfrm -c ~/mail/todo/ > 1770 messages in /home/gregkh/mail/todo/ > > Please give me a chance... > > thanks, > > greg k-h Oh my bad, I got mixed up with 5.20-rc1 and 6.0-rc1. Please disregard my previous email.