Skip to content
Snippets Groups Projects
  1. Oct 27, 2023
  2. Oct 06, 2023
  3. Oct 05, 2023
  4. Sep 15, 2023
    • Keith Mok's avatar
      File size seal for memory mapped region · f2c1d9d2
      Keith Mok authored
      When using memfd for cross process communication, we always need to seal
      the file size, otherwise remote process and shrink the size we memory
      mapped and thus crash the originate process causing a DoS
      
      Bug: 294609150
      Test: Build
      Ignore-AOSP-First: security
      Change-Id: Ibc263c4f78df897e884378e3d984a188ca8772c7
      Merged-In: Ibc263c4f78df897e884378e3d984a188ca8772c7
      (cherry picked from commit 3d9f1e3b)
      f2c1d9d2
  5. Jul 11, 2023
  6. Jul 06, 2023
    • sergiuferentz's avatar
      Fix for heap-use-after-free in GPUService.cpp · 24a7874b
      sergiuferentz authored
      This adds a unit test and fix for the bug reported by libfuzzer.
      Changes made:
       * Expose GPUService as testable code.
       * Update main_gpuservice.cpp to use the new GpuService now located at
         gpuservice/GpuService.h
       * Make initializer threads members of GpuService
       * Join the threads in destructor to prevent heap-use-after-free.
       * Add unit test that waits 3 seconds after deallocation to ensure no
         wrong access is made.
      
      Merged-In: I4d1d2d4658b575bf2c8f425f91f68f03114ad029
      Bug: 282919145
      Test: Added unit test and ran on device with ASAN
      Change-Id: I4d1d2d4658b575bf2c8f425f91f68f03114ad029
      (cherry picked from commit 3c00cbc0)
      24a7874b
  7. Jul 05, 2023
    • sergiuferentz's avatar
      Fix for heap-use-after-free in GPUService.cpp · 7fb70780
      sergiuferentz authored
      This adds a unit test and fix for the bug reported by libfuzzer.
      Changes made:
       * Expose GPUService as testable code.
       * Update main_gpuservice.cpp to use the new GpuService now located at
         gpuservice/GpuService.h
       * Make initializer threads members of GpuService
       * Join the threads in destructor to prevent heap-use-after-free.
       * Add unit test that waits 3 seconds after deallocation to ensure no
         wrong access is made.
      
      Merged-In: I4d1d2d4658b575bf2c8f425f91f68f03114ad029
      Bug: 282919145
      Test: Added unit test and ran on device with ASAN
      Change-Id: I4d1d2d4658b575bf2c8f425f91f68f03114ad029
      (cherry picked from commit 3c00cbc0)
      7fb70780
  8. Jun 29, 2023
Loading