)]}'
{
  "commit": "bf4f9bc41c3b5203e1e7284e1de78e82f0630473",
  "tree": "617062c5fb925511557b723d64d3fd78f32c0adb",
  "parents": [
    "64d58bc3d3eacce0c83202e0e50e3ec050cbd801"
  ],
  "author": {
    "name": "Carlos Llamas",
    "email": "cmllamas@google.com",
    "time": "Sat Mar 30 19:01:14 2024 +0000"
  },
  "committer": {
    "name": "Pindar Yang",
    "email": "pindaryang@google.com",
    "time": "Wed Apr 03 07:16:23 2024 +0000"
  },
  "message": "FROMLIST: binder: check offset alignment in binder_get_object()\n\nCommit 6d98eb95b450 (\"binder: avoid potential data leakage when copying\ntxn\") introduced changes to how binder objects are copied. In doing so,\nit unintentionally removed an offset alignment check done through calls\nto binder_alloc_copy_from_buffer() -\u003e check_buffer().\n\nThese calls were replaced in binder_get_object() with copy_from_user(),\nso now an explicit offset alignment check is needed here. This avoids\nlater complications when unwinding the objects gets harder.\n\nIt is worth noting this check existed prior to commit 7a67a39320df\n(\"binder: add function to copy binder object from buffer\"), likely\nremoved due to redundancy at the time.\n\nFixes: 6d98eb95b450 (\"binder: avoid potential data leakage when copying txn\")\nCc:  \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\n\nBug: 320661088\nBug: 332642763\nLink: https://lore.kernel.org/all/20240330190115.1877819-1-cmllamas@google.com/\nChange-Id: Iaddabaa28de7ba7b7d35dbb639d38ca79dbc5077\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\nBug: 332642763\nSigned-off-by: Pindar Yang \u003cpindaryang@google.com\u003e\n(cherry picked from commit 668dfb812db727a038035a2386057811f5f08fb0)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "57295e600607c694698dbd867b20127642e34b9d",
      "old_mode": 33188,
      "old_path": "drivers/android/binder.c",
      "new_id": "29f6a1bd739c4b86e68bb5e678029d351d07d142",
      "new_mode": 33188,
      "new_path": "drivers/android/binder.c"
    }
  ]
}