anbox-modules/binder
Anthony a59d8a3b10 binder: call looked-up kernel functions through a push+ret trampoline with IBT
The kernel seals the ENDBR64 of functions it never calls indirectly
(kallsyms_lookup_name, can_nice, the security_binder_* hooks...), so
stepping back over ENDBR64 is not enough: there is none left, and the
indirect call still raises #CP when binderfs is mounted. Reach these
functions with push+ret, which IBT does not track.
2026-10-13 22:39:31 +02:00
..
binder_alloc.c binder: don't relock after LRU_REMOVED_RETRY on Linux >= 6.13 2026-10-13 22:25:42 +02:00
binder_alloc.h Fix for kernel 6.13+ 2025-08-01 07:22:20 +02:00
binder_internal.h Update binder to the latest version 2021-09-26 18:54:51 +02:00
binder_trace.h Update binder to the latest version 2021-09-26 18:54:51 +02:00
binder.c Fix for kernel 6.14+ 2025-08-01 07:22:20 +02:00
binder.h Update binder to the latest version 2021-09-26 18:54:51 +02:00
binderfs.c Fix for Linux 6.19 2026-03-30 20:20:21 +02:00
compat_version.h fix for RHEL 10.1 2026-03-30 19:26:13 +02:00
deps.c binder: call looked-up kernel functions through a push+ret trampoline with IBT 2026-10-13 22:39:31 +02:00
deps.h Fix: remove the redundant header inclusion 2026-07-07 21:27:36 +02:00
dkms.conf Import kernel module source from original Anbox repository 2018-06-08 17:20:21 +02:00
Makefile Update binder to the latest version 2021-09-26 18:54:51 +02:00