| commit | 5997da82145bb7c9a56d834894cb81f81f219344 | [log] [tgz] |
|---|---|---|
| author | Todd Kjos <tkjos@android.com> | Wed Mar 20 15:35:45 2019 -0700 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Thu Mar 21 06:50:47 2019 +0100 |
| tree | 64e26347034da32870b33ee8aaee56402324c74f | |
| parent | 9e98c678c2d6ae3a17cb2de55d17f69dddaa231b [diff] |
binder: fix BUG_ON found by selinux-testsuite
The selinux-testsuite found an issue resulting in a BUG_ON()
where a conditional relied on a size_t going negative when
checking the validity of a buffer offset.
Fixes: 7a67a39320df ("binder: add function to copy binder object from buffer")
Reported-by: Paul Moore <paul@paul-moore.com>
Tested-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Todd Kjos <tkjos@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>