linux/drivers/staging/android
Suren Baghdasaryan aa5122eaa8 staging: android: ashmem: Disallow ashmem memory from being remapped
commit 6d67b0290b upstream.

When ashmem file is mmapped, the resulting vma->vm_file points to the
backing shmem file with the generic fops that do not check ashmem
permissions like fops of ashmem do. If an mremap is done on the ashmem
region, then the permission checks will be skipped. Fix that by disallowing
mapping operation on the backing shmem file.

Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Cc: stable <stable@vger.kernel.org> # 4.4,4.9,4.14,4.18,5.4
Signed-off-by: Todd Kjos <tkjos@google.com>
Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org>
Link: https://lore.kernel.org/r/20200127235616.48920-1-tkjos@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2020-02-28 17:23:31 +01:00
..
ion compat_ioctl: move more drivers to compat_ptr_ioctl 2019-10-23 17:23:44 +02:00
uapi staging: android: ion: Add the GPL exception for syscalls 2019-02-14 10:47:20 +01:00
ashmem.c staging: android: ashmem: Disallow ashmem memory from being remapped 2020-02-28 17:23:31 +01:00
ashmem.h staging: android: Clean up license identifiers 2018-05-08 13:24:15 +02:00
Kconfig staging: remove redundant 'default n' from Kconfig 2019-04-16 13:39:01 +02:00
Makefile staging: add missing SPDX lines to Makefile files 2019-04-03 11:10:15 +02:00
TODO staging: android: Remove ion device tree bindings from the TODO 2019-08-21 05:48:06 -07:00
vsoc.c hrtimer/treewide: Use hrtimer_sleeper_start_expires() 2019-08-01 17:43:16 +02:00