)]}'
{
  "commit": "c9e77b58a030b96d183d51e0877f2ba971e6c171",
  "tree": "f503b0d4ed526bbe6f5c1213b3e5724e9e11a363",
  "parents": [
    "1536934f8ccf399f145d32013f9e72be336eb6de"
  ],
  "author": {
    "name": "Carlos Llamas",
    "email": "cmllamas@google.com",
    "time": "Sat Mar 30 19:01:14 2024 +0000"
  },
  "committer": {
    "name": "mdb:android-git",
    "email": "superproject-auto-update@invalid",
    "time": "Thu Apr 18 18:08:38 2024 +0000"
  },
  "message": "FROMLIST: binder: check offset alignment in binder_get_object()\n\nCommit 6d98eb95b450 (\"binder: avoid potential data leakage when copying\ntxn\") introduced changes to how binder objects are copied. In doing so,\nit unintentionally removed an offset alignment check done through calls\nto binder_alloc_copy_from_buffer() -\u003e check_buffer().\n\nThese calls were replaced in binder_get_object() with copy_from_user(),\nso now an explicit offset alignment check is needed here. This avoids\nlater complications when unwinding the objects gets harder.\n\nIt is worth noting this check existed prior to commit 7a67a39320df\n(\"binder: add function to copy binder object from buffer\"), likely\nremoved due to redundancy at the time.\n\nFixes: 6d98eb95b450 (\"binder: avoid potential data leakage when copying txn\")\nCc:  \u003cstable@vger.kernel.org\u003e\nAcked-by: Todd Kjos \u003ctkjos@google.com\u003e\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\n\nBug: 320661088\nBug: 332642003\nLink: https://lore.kernel.org/all/20240330190115.1877819-1-cmllamas@google.com/\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\nChange-Id: Iaddabaa28de7ba7b7d35dbb639d38ca79dbc5077\nBug: 332642003\nSigned-off-by: Pindar Yang \u003cpindaryang@google.com\u003e\n(cherry picked from commit 7859c5c9ebc6b0201ea804078a2329184b58ace5)\nSigned-off-by: Lee Jones \u003cjoneslee@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "149ba18604ec71cac89d9c75df322fa9ccd2181f",
      "old_mode": 57344,
      "old_path": "common",
      "new_id": "49c89f4bf1abf52541e1644b56ceb8a112ed6feb",
      "new_mode": 57344,
      "new_path": "common"
    }
  ]
}