a90d46376b
When ashmem file is being mmapped the resulting vma->vm_file points to the backing shmem file with the generic fops that do not check ashmem permissions like fops of ashmem do. Fix that by disallowing mapping operation for backing shmem file. Bug: 142938932 Bug: 142903466 Reported-by: Jann Horn <jannh@google.com> Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I718dfca02c83845f8a41d88506871b0aa21326d7 CVE-2020-0009 Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org> |
||
|---|---|---|
| .. | ||
| android | ||
| asus_oled | ||
| bcm | ||
| ced1401 | ||
| comedi | ||
| cptm1217 | ||
| crystalhd | ||
| csr | ||
| cxt1e1 | ||
| dgrp | ||
| dwc2 | ||
| echo | ||
| et131x | ||
| frontier | ||
| ft1000 | ||
| fwserial | ||
| gdm72xx | ||
| gobi | ||
| goldfish | ||
| iio | ||
| imx-drm | ||
| keucr | ||
| line6 | ||
| media | ||
| netlogic | ||
| nvec | ||
| octeon | ||
| olpc_dcon | ||
| ozwpan | ||
| panel | ||
| phison | ||
| quickstart | ||
| rtl8187se | ||
| rtl8192e | ||
| rtl8192u | ||
| rtl8712 | ||
| rts5139 | ||
| samsung/sec_notifier | ||
| sb105x | ||
| sbe-2t3e3 | ||
| sep | ||
| serqt_usb2 | ||
| silicom | ||
| slicoss | ||
| sm7xxfb | ||
| speakup | ||
| ste_rmi4 | ||
| ti-soc-thermal | ||
| tidspbridge | ||
| usbip | ||
| vme | ||
| vnswap | ||
| vt6655 | ||
| vt6656 | ||
| winbond | ||
| wlags49_h2 | ||
| wlags49_h25 | ||
| wlan-ng | ||
| xgifb | ||
| zcache | ||
| Kconfig | ||
| Makefile | ||
| staging.c | ||