|
attempt to add with overflow in rust_binder::rust_binder_ioctl
|
-1 |
syz, C |
|
|
13 |
13d |
20d
|
1/1 |
12d |
BACKPORT: FROMGIT: rust_binder: avoid overflow in get_node_debug_info()
|
|
BUG: soft lockup in x64_sys_call (2)
origin:upstream
|
1 |
syz, C |
|
|
6 |
253d |
252d
|
1/1 |
244d |
FROMGIT: rust_binder: call set_notification_done() without proc lock
|
|
BUG: soft lockup in rust_binder_main::rust_binder_ioctl
origin:upstream
|
1 |
syz, C |
|
|
9 |
252d |
252d
|
1/1 |
245d |
FROMGIT: rust_binder: call set_notification_done() without proc lock
|
|
attempt to subtract with overflow in <kernel::task::Task>::rlimit_nice
|
-1 |
syz, C |
|
|
4 |
378d |
378d
|
1/1 |
280d |
ANDROID: rust: fix overflow in rlimit_nice()
|
|
attempt to subtract with overflow in <rust_binder::thread::Thread>::do_set_priority
origin:downstream
|
-1 |
syz, C |
|
|
2 |
412d |
412d
|
1/1 |
280d |
ANDROID: rust_binder: fix overflow in to_kernel_prio()
|
|
KASAN: null-ptr-deref Write in rust_binderfs_remove_file
origin:downstream
|
12 |
syz, C |
|
|
199 |
490d |
502d
|
1/1 |
490d |
ANDROID: rust_binder: remove binder_logs/procs/pid immediately
|
|
kernel BUG in rust_helper_BUG
origin:downstream
|
-1 |
syz, C |
|
|
352 |
501d |
503d
|
1/1 |
491d |
ANDROID: rust_binder: print and avoid underflow with invalid refcnt
|
|
null pointer dereference occurred in <kernel::sync::poll::PollTable>::from_ptr
origin:downstream
|
-1 |
syz, C |
|
|
1716 |
492d |
501d
|
1/1 |
492d |
ANDROID: rust_binder: allow PollTable to be null
|
|
attempt to add with overflow in <rust_binder::thread::Thread>::copy_transaction_data
origin:downstream
|
-1 |
syz, C |
|
|
5 |
498d |
501d
|
1/1 |
496d |
ANDROID: rust_binder: enforce that overflow in ptr_align is checked
|
|
attempt to add with overflow in <ashmem_rust::Ashmem as kernel::miscdevice::MiscDevice>::mmap
origin:downstream
|
-1 |
syz, C |
|
|
154 |
497d |
501d
|
1/1 |
496d |
ANDROID: ashmem: fix overflow on __page_align
|
|
attempt to subtract with overflow in <ashmem_rust::Ashmem as kernel::miscdevice::MiscDevice>::ioctl
|
-1 |
syz, C |
|
|
5 |
498d |
498d
|
1/1 |
496d |
ANDROID: ashmem_rust: return EINVAL on offset > size
|