Conversation

twitter.com/DanielMicay/st It's worth noting that CONFIG_DEBUG_LIST is enabled in GrapheneOS with panic on data corruption, which according to bugs.chromium.org/p/project-zero breaks the exploit primitive. However, this is just one vulnerability, and many won't be mitigated like that.

Quote Tweet

Daniel Micay

@DanielMicay

Oct 4, 2019

Unfortunately, due to lack of resources and support, it hasn't yet been possible to start doing this for the ongoing revival of the project. In the past, I used to do it myself, but don't have the time and energy available anymore and people aren't stepping up to fill that gap.

Show this thread

Replying to

TBF this bug is purely in Android, not Linux. Binder is Android nonsense. :-)

Replying to

Binder is in the upstream kernel and is used outside of Android too. It's used to implement userspace mobile device drivers which are used elsewhere. It's the communication mechanism between the sandboxes. Other OSes reuse those drivers even if they use dbus, etc. elsewhere.

Replying to

Ah, I was under the mistaken impression it had its own syscalls and never saw them land in the syscall table, but apparently it's just ioctls on device nodes. TIL

Daniel Micay

@DanielMicay

Replying to

@RichFelker

It was merged in Linux 3.19. It originates from BeOS / Palm rather than Android too. It was something existing that Android ended up adopting and using as a very core part of the OS from an early point. Now, since it's the only one of these things upstream, others use it.

1:15 PM · Oct 4, 2019Twitter Web App

Replying to

and

lkml.org/lkml/2009/6/25 and angryredplanet.com/~hackbod/ are worth looking through to get an idea of where that came from. The Linux Binder used by Android has changed a lot even just in the past couple years though (for example these changes source.android.com/devices/archit).