Received: by 2002:a05:6358:45e:b0:b5:b6eb:e1f9 with SMTP id 30csp3509117rwe; Mon, 29 Aug 2022 13:19:10 -0700 (PDT) X-Google-Smtp-Source: AA6agR6jMCuSWEIJQliNNtMaZSr8IGkdJ8g/8C3afRlIsVwwVt/CTQCbtOGABp/DTgh2blHWwqcH X-Received: by 2002:a17:907:2e01:b0:730:9ecc:cd28 with SMTP id ig1-20020a1709072e0100b007309ecccd28mr14267582ejc.360.1661804350107; Mon, 29 Aug 2022 13:19:10 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1661804350; cv=none; d=google.com; s=arc-20160816; b=Ipsvozju2AiQYfiMoSkJuFvA+yKU+eMg0pQEXQ5Ud46zsTc1n7+8QEu2EieYjyW+r6 scqaBUc9XyU2MFu7MUGr5F9rBeU6K6OIfQXbdiA9lUNfIlHCsfszoVEfdRRbXz7kAEnq zL6RGOR0xVOEvMxgdcTSGYVuOPFx2s+iF+dePZt9BrOIMXblimt/nWTn5PYZncO2/zsa LoV/3y2ReUQgg3YhQj+PdpDqmvo8fvc3FCIoDQlQVFhygkIXhh+LlpMJit2537S8o/RG gaNX3yNimV2WDpyoI7XfTHeeifWUSAjvXMWwyyxS6z2Ao0Cz4TVMVyFN6Zcr0DM/Rw8p Kbsg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:cc:to:from:subject :message-id:mime-version:date:dkim-signature; bh=uqHUoZfTdvbY1QkERHZdR/htcU1OMwPMgXPQ3z9IokU=; b=lD3gnwxkrDGe2CYilt6qBz7fPaxOBGOVWuavsMrL0G+0Drp55a7T5zLxDuo5+2VC6f RA9JgqYBigNpWwXwTgFeTUoIjIqYc9vsJBQUdu2yjEFnahnqMoZaTDKIDTVIhzo2LbX3 I9fEZeCpQR4Ne4sO6OzkOyFJGZXMbWIq86vy2zKrG0TJc00hqpZ26sNTWUf4y10tEIg8 MwuQV7cGWMeW2GwILWGxiweE4OWf2/nwD3GxEIIq0ugwpIWICzRZ1HFuefOba/AA6ndn LlNro9JoqZ4hoKx3Jge8ikpOOQrvKHrLtQGqcUsWgbWljtwVGzY2QTWkUSL/F31u9tyI uhJA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=O583rz8b; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id s20-20020a056402521400b00448ab5d3ba3si1062444edd.1.2022.08.29.13.18.44; Mon, 29 Aug 2022 13:19:10 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=O583rz8b; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230082AbiH2UNA (ORCPT + 99 others); Mon, 29 Aug 2022 16:13:00 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55506 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229457AbiH2UM7 (ORCPT ); Mon, 29 Aug 2022 16:12:59 -0400 Received: from mail-pg1-x549.google.com (mail-pg1-x549.google.com [IPv6:2607:f8b0:4864:20::549]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 8928695E7B for ; Mon, 29 Aug 2022 13:12:58 -0700 (PDT) Received: by mail-pg1-x549.google.com with SMTP id r74-20020a632b4d000000b0041bc393913eso4514979pgr.10 for ; Mon, 29 Aug 2022 13:12:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=content-transfer-encoding:cc:to:from:subject:message-id :mime-version:date:from:to:cc; bh=uqHUoZfTdvbY1QkERHZdR/htcU1OMwPMgXPQ3z9IokU=; b=O583rz8bjT46gbhtE7PR64LQzDsu+I5Jq9bPPo6SKcPZmSv0Y9Br4VWqKBqzkg6Mgu 2vP3wdsOIIocLncCVLR6A1b1CvhxKexkEKAKbKSbJpPGrvQ5x53/syel/n2CUaKYzFsy Qn6Cgwq+ZR5afqZJykvAr8ActNXXkzQb9MI0TujSCzfL7GiSB/ND8F6SBugnPNwX0Hyo uwoXF6U4Z7LMMFQMzvviCo/g38QckQ2vXg2H6ro66CcxYcfr7HyGrdwCOiA6xSVC57Fp oyc+5RpxDesbKQqx8fsdGJdDlhfW0I8kwjQKaagST28HEu5c2B3MO2fy0to5waWyamtt 6htw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:cc:to:from:subject:message-id :mime-version:date:x-gm-message-state:from:to:cc; bh=uqHUoZfTdvbY1QkERHZdR/htcU1OMwPMgXPQ3z9IokU=; b=XjVI6eSPnc/cHVSJWtg1qAOj5C7Th9h0usgCoH1MVigojqy2V7N016vMzKoLDdGscU Yce9yxjVlIHIrNeQ6z8GgvbWO5i/xyrK0B+JHAnRfRAEWN0VmF3y5AwdjRYE9nywrRN8 3WAs5SKCj9tLfn4e/3MsWwpgJuJHeZUtaw+qcKXOg3D5Cr4h5A7GfiQSLe9JVxxofwyJ Zr8WNu3mdi0FocV28W7Pvg6MOCdLb8wBruzWUhYREknseRBr1n7ge2vUHeLYxBU/tw3Q n83NzgKxk4/Zkv7IiIbh7sAstjKBujJWXuQHmfI203qIm8C8LqGjowxVvdVxxWLUjF2y R8QA== X-Gm-Message-State: ACgBeo2TNtp67mew1SxWQQSItY3Fy58UvoKhUuLjDD6nxPebqbFSOktW XBlwbxeNXT67og3J+dA33VxMz2AEhnj5LQ== X-Received: from xllamas.c.googlers.com ([fda3:e722:ac3:cc00:7f:e700:c0a8:5070]) (user=cmllamas job=sendgmr) by 2002:aa7:888d:0:b0:538:328b:2ffb with SMTP id z13-20020aa7888d000000b00538328b2ffbmr7159243pfe.82.1661803978001; Mon, 29 Aug 2022 13:12:58 -0700 (PDT) Date: Mon, 29 Aug 2022 20:12:47 +0000 Mime-Version: 1.0 X-Mailer: git-send-email 2.37.2.672.g94769d06f0-goog Message-ID: <20220829201254.1814484-1-cmllamas@google.com> Subject: [PATCH 0/7] fix null-ptr-deref in binder_alloc and others From: Carlos Llamas To: Greg Kroah-Hartman Cc: kernel-team@android.com, Carlos Llamas , "=?UTF-8?q?Arve=20Hj=C3=B8nnev=C3=A5g?=" , Todd Kjos , Martijn Coenen , Joel Fernandes , Christian Brauner , Suren Baghdasaryan , Andrew Morton , Liam Howlett , linux-kernel@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-9.6 required=5.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE,USER_IN_DEF_DKIM_WL autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This patch series fixes primarily a null dereference of alloc->vma_vm_mm reported by syzbot which unfortunately is quite easy to reproduce. Also, included here are several other patches for more trivial things I found along the way. -- Carlos Llamas Cc: Greg Kroah-Hartman Cc: "Arve Hj=C3=B8nnev=C3=A5g" Cc: Todd Kjos Cc: Martijn Coenen Cc: Joel Fernandes Cc: Christian Brauner Cc: Suren Baghdasaryan Cc: Andrew Morton Cc: Liam Howlett Cc: kernel-team@android.com Cc: linux-kernel@vger.kernel.org Carlos Llamas (7): binder: fix alloc->vma_vm_mm null-ptr dereference binder: fix trivial kernel-doc typo binder: rename alloc->vma_vm_mm to alloc->mm binder: remove binder_alloc_set_vma() binder: remove unused binder_alloc->buffer_free binder: fix binder_alloc kernel-doc warnings binderfs: remove unused INTSTRLEN macro drivers/android/binder_alloc.c | 55 +++++++++++----------------------- drivers/android/binder_alloc.h | 12 ++++---- drivers/android/binderfs.c | 1 - 3 files changed, 22 insertions(+), 46 deletions(-) --=20 2.37.2.672.g94769d06f0-goog