)]}'
{
  "commit": "2366df17799480c2aa09f785e04165df6f49ac2b",
  "tree": "1e66ea7a831e8e640b3fe7bd350fc5d784a93da5",
  "parents": [
    "81237a2845d274bcfbf27c9e22400e85dd00a445"
  ],
  "author": {
    "name": "Carlos Llamas",
    "email": "cmllamas@google.com",
    "time": "Sat Mar 30 19:01:14 2024 +0000"
  },
  "committer": {
    "name": "Lee Jones",
    "email": "joneslee@google.com",
    "time": "Thu Apr 18 11:34:44 2024 +0100"
  },
  "message": "FROMLIST: binder: check offset alignment in binder_get_object()\n\nCommit 6d98eb95b450 (\"binder: avoid potential data leakage when copying\ntxn\") introduced changes to how binder objects are copied. In doing so,\nit unintentionally removed an offset alignment check done through calls\nto binder_alloc_copy_from_buffer() -\u003e check_buffer().\n\nThese calls were replaced in binder_get_object() with copy_from_user(),\nso now an explicit offset alignment check is needed here. This avoids\nlater complications when unwinding the objects gets harder.\n\nIt is worth noting this check existed prior to commit 7a67a39320df\n(\"binder: add function to copy binder object from buffer\"), likely\nremoved due to redundancy at the time.\n\nFixes: 6d98eb95b450 (\"binder: avoid potential data leakage when copying txn\")\nCc:  \u003cstable@vger.kernel.org\u003e\nAcked-by: Todd Kjos \u003ctkjos@google.com\u003e\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\n\nBug: 320661088\nLink: https://lore.kernel.org/all/20240330190115.1877819-1-cmllamas@google.com/\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\nChange-Id: Iaddabaa28de7ba7b7d35dbb639d38ca79dbc5077\n(cherry picked from commit 0c9784b747c6a960e5b922e9ccff382db1b73ce4)\nSigned-off-by: Lee Jones \u003cjoneslee@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4f89346dd283ce30e360738175ad4d2e9d0c3859",
      "old_mode": 33188,
      "old_path": "drivers/android/binder.c",
      "new_id": "8ab22e1229b5d15a0a235857793ccec269c331fd",
      "new_mode": 33188,
      "new_path": "drivers/android/binder.c"
    }
  ]
}