]> git.ipfire.org Git - thirdparty/linux.git/commit
rust_binder: avoid mem::take on delivered_deaths
authorAlice Ryhl <aliceryhl@google.com>
Tue, 11 Nov 2025 14:23:33 +0000 (14:23 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 26 Nov 2025 12:26:59 +0000 (13:26 +0100)
commit6c37bebd8c926ad01ef157c0d123633a203e5c0d
tree5fb1f397283b9c4ea9118a62ee4ecdc11bc5ea04
parent3e0ae02ba831da2b707905f4e602e43f8507b8cc
rust_binder: avoid mem::take on delivered_deaths

Similar to the previous commit, List::remove is used on
delivered_deaths, so do not use mem::take on it as that may result in
violations of the List::remove safety requirements.

I don't think this particular case can be triggered because it requires
fd close to run in parallel with an ioctl on the same fd. But let's not
tempt fate.

Cc: stable@vger.kernel.org
Fixes: eafedbc7c050 ("rust_binder: add Rust Binder driver")
Signed-off-by: Alice Ryhl <aliceryhl@google.com>
Acked-by: Miguel Ojeda <ojeda@kernel.org>
Link: https://patch.msgid.link/20251111-binder-fix-list-remove-v1-2-8ed14a0da63d@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/android/binder/process.rs