)]}'
{
  "commit": "baa23246e93ffa94d05c5702355a3fafa81efeac",
  "tree": "0a05e5384b53de96dbaf12fd5a2f453bd458c269",
  "parents": [
    "3d213a626d2d94a41e06e85eeb23fe623e10bc63"
  ],
  "author": {
    "name": "Alessandro Astone",
    "email": "ales.astone@gmail.com",
    "time": "Fri Apr 15 14:00:14 2022 +0200"
  },
  "committer": {
    "name": "Treehugger Robot",
    "email": "treehugger-gerrit@google.com",
    "time": "Mon Nov 28 23:46:20 2022 +0000"
  },
  "message": "UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds\u003d0\n\nSome android userspace is sending BINDER_TYPE_FDA objects with\nnum_fds\u003d0. Like the previous patch, this is reproducible when\nplaying a video.\n\nBefore commit 09184ae9b575 BINDER_TYPE_FDA objects with num_fds\u003d0\nwere \u0027correctly handled\u0027, as in no fixup was performed.\n\nAfter commit 09184ae9b575 we aggregate fixup and skip regions in\nbinder_ptr_fixup structs and distinguish between the two by using\nthe skip_size field: if it\u0027s 0, then it\u0027s a fixup, otherwise skip.\nWhen processing BINDER_TYPE_FDA objects with num_fds\u003d0 we add a\nskip region of skip_size\u003d0, and this causes issues because now\nbinder_do_deferred_txn_copies will think this was a fixup region.\n\nTo address that, return early from binder_translate_fd_array to\navoid adding an empty skip region.\n\nFixes: 09184ae9b575 (\"binder: defer copies of pre-patched txn data\")\nAcked-by: Todd Kjos \u003ctkjos@google.com\u003e\nCc: stable \u003cstable@kernel.org\u003e\nSigned-off-by: Alessandro Astone \u003cales.astone@gmail.com\u003e\nLink: https://lore.kernel.org/r/20220415120015.52684-1-ales.astone@gmail.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\nBug: 257685302\n(cherry picked from commit ef38de9217a04c9077629a24652689d8fdb4c6c6)\nChange-Id: I34fab41c0c1beee366a5df4724b263e4385ad13b\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "bce74dfb4150aba9a607d1182efc30510b07a1a1",
      "old_mode": 33188,
      "old_path": "drivers/android/binder.c",
      "new_id": "f0d8989a2130c19aff421b9e41883cea1ad8f78f",
      "new_mode": 33188,
      "new_path": "drivers/android/binder.c"
    }
  ]
}
