From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.218.70 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1792572783; b=WTzoO+QsOfnDsCcp6J6S7CpsR60opjIG+pgUg7s0BbBpgUmFTtWzzo+vbze//nvxPvtX kRGaSqHmHgpgLyAOOXFUvNX2Kt+DSIpj3ikdGfJwIpMRL8qchF47RTBnEi+jqOjvI7FxO uon3i+sb7dvFEPoagHx9eQ+OU2foxHpKQGISgHNO15RQ8qlgJiYYTSMmHUrllpPSBwciE qoDhpT18dTxysArafDn7Ynqp+oN5AMhs67OFIg46qIz+ba2CmWESyYxiH/8i3kDs/fGji +G/hqb24v+YBZymIBgK5oWT/nzfghSZupI2s6dKckx2q6ko0SztgqsFexp6LEnhhzNA== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792572783; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Received:Date:In-Reply-To: Mime-Version:References:X-Mailer:Message-ID:Subject:From:To:Cc: Content-Type; bh=m3J+GsX+WNpN+CNr8o/skDM1rV99zjekIdQOJ3w/ua0=; b=Po4VLyUhjjkoeFgBN0veTuixgeGAZAvYr4FEGgoR+CGdRg6Ygg5D7OUzGOEclK+UgpjU z7X3qlTGs8h0zvwWIGduM779vFYXUzKOBMrQI4k0tzqt1bBXbiheTdrgD4foaAJqyVbVA N7XYrJDB7HKxRa+JYwhPcV2hr44I4rAPW4YEx/KURRVIdZQ6Dl+TJbbgJmEk1PJReMlhd aFBpGVRnVJJkxOQ2v/dUCI6eQ5MrzboHvTCUG03s+YeHKbEpYR+nhNVsUKjarMosAbHpk gfaaXtfNfFtWIR856mQGuc3jd8CI/9B923zOb6MzSEHbflma73jwsCwBqq13yQN78KA== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=google.com; spf=pass smtp.mailfrom=flex--aliceryhl.bounces.google.com; dkim=pass header.d=google.com header.i=@google.com header.a=rsa-sha256 header.s=20251104 header.b=MNPQzdb7; arc=none smtp.remote-ip=209.85.218.70 Received: from mail-ej1-f70.google.com (mail-ej1-f70.google.com [209.85.218.70]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8FA39606A329 for ; Wed, 21 Oct 2026 08:53:02 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 8FA39606A329 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--aliceryhl.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=google.com header.i=@google.com header.a=rsa-sha256 header.s=20251104 header.b=MNPQzdb7 Received: by mail-ej1-f70.google.com with SMTP id a640c23a62f3a-c2dd399f761so38115866b.3 for ; Wed, 21 Oct 2026 01:53:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1792572781; x=1793177581; darn=vger.kernel.org; h=content-type:cc:to:from:subject:message-id:references:mime-version :in-reply-to:date:from:to:cc:subject:date:message-id:reply-to :content-type; bh=m3J+GsX+WNpN+CNr8o/skDM1rV99zjekIdQOJ3w/ua0=; b=MNPQzdb7P63mm6CKF2vwz6MZWbbjyNcwYGU7Xzd7v0DUgk0fHkOQZX4e911gjbIvj6 4qgwYk2bqxZNiBKz51ltd6ivtO1oFJAs1P9S46hiSUD2LeAKhtRZmL7gxwZFoFmSt4/G IBQatVnZI3I/7G6KRni11rbLJVrGdi/OVNCFAlDod3o8BRmHfuGHQn8ttwK681ap+s1L xRlOFy1wFruXgOA8zKzDFORlfHFEjI1vn2p7+BlplHEsVAjnhJu20+GoPS5W04rqX90n rpks1pyUQf9czLA8tL0Wh5wvAIUFA0rvsVaCT+dEj2pQb5lvD3yi/evBXpckn9omjGRS 5ojw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792572781; x=1793177581; h=content-type:cc:to:from:subject:message-id:references:mime-version :in-reply-to:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=m3J+GsX+WNpN+CNr8o/skDM1rV99zjekIdQOJ3w/ua0=; b=Yj0zJi96Ow1cmtObrqYWUG7SzlhaghaV4fgdv7A37pYXuocPn472SbJMsa2PbBwdfm 7xgfvIJqk8h75qoS/wT9QKV5LMT0N9NKaRze/q235kSGfg9a9uHk788vcRMmw81QMIxJ qW95QiutdPx80eUITXQWcJ7i7PljZdkRCGYMFp+KkV6M7d/HnWmK4AiPNvzbCdk9tj0Y kvzDRKDSI6gyMQDRtjPPYu6tXRusra7cZUwItoc1jodScRoa1ds4goISeyUTUAfY05P8 xbBxlq7FsYgxUB85akOAc1csJ5mYHafiPeCu3QTn6q8nECnR3Dn4NYIjmsxIedlQvs/k z9ww== X-Forwarded-Encrypted: i=1; AKwUvBxdoeI44yD42+BDQhAxqKcXZkpIKGaqtd/ry6GscX2/d2E6vNgxyxeBA5IHtS8vjg7cL6txaSR9kPBpHwo=@vger.kernel.org X-Gm-Message-State: AFq9FYLCUpJERcO2wU5g4RpNiwIA2zaiAHqjUdfeacxIMC8qXZClVkwW MMtkV8Vod4nSkigWxKKe9tMpu6j5Ty3yFSL3GjftK1GWCf0rI7Jz+wf4ye99KLN7vExN48W1zxP vt2VMcCdAdJuGptX5Vg== X-Received: from ejei26.prod.google.com ([2002:a17:906:39da:b0:c46:7d04:db16]) (user=aliceryhl job=prod-delivery.src-stubby-dispatcher) by 2002:a17:906:4fce:b0:c44:9a32:b27 with SMTP id a640c23a62f3a-c4679682019mr123208266b.25.1792572779086; Wed, 21 Oct 2026 01:52:59 -0700 (PDT) Date: Wed, 21 Oct 2026 08:52:58 +0000 In-Reply-To: <20261021033257.1359428-1-cmllamas@google.com> X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list Mime-Version: 1.0 References: <2026101318-stingy-crescent-b47e@gregkh> <20261021033257.1359428-1-cmllamas@google.com> X-Mailer: git-send-email 2.56.0.212.g129ede20d9-goog Message-ID: <20261021085258.427331-1-aliceryhl@google.com> Subject: Re: [PATCH v2] rust_binder: add state_hashed and transactions_hashed files From: Alice Ryhl To: Carlos Llamas Cc: Alice Ryhl , Greg Kroah-Hartman , Miguel Ojeda , Boqun Feng , Gary Guo , "=?UTF-8?q?Bj=C3=B6rn=20Roy=20Baron?=" , Benno Lossin , Andreas Hindborg , Trevor Gross , Danilo Krummrich , Daniel Almeida , Tamir Duberstein , Alexandre Courbot , "=?UTF-8?q?Onur=20=C3=96zkan?=" , kernel-team@android.com, linux-kernel@vger.kernel.org, rust-for-linux@vger.kernel.org, "=?UTF-8?q?Arve=20Hj=C3=B8nnev=C3=A5g?=" , Todd Kjos , Christian Brauner Content-Type: text/plain; charset="UTF-8" On Wed, Oct 21, 2026 at 03:32:57AM +0000, Carlos Llamas wrote: > The 'state' and 'transactions' binderfs files print the userspace ptr > and cookie of each node as raw values, which leaks the userspace memory > layout and forces access to these files to be heavily restricted. Add > hashed versions of these files, as done for the C driver in commit > 57483a362741 ("binder: Create safe versions of binder log files"), so > that access to them can be granted more broadly. > > Pass a 'hashed' flag down the debug_print() chain and print the ptr and > cookie through a new MaybeHashed helper, which either prints the raw > value or hashes it like %p does. Everything else in the files remains > unchanged: > > $ grep "node 2:" /dev/binderfs/binder_logs/state* > state: node 2: u000000003cf2c740 c0000000000000000 hs true ... > state_hashed: node 2: u00000000abab9b6d c0000000000000000 hs true ... > > Assisted-by: LLM > Signed-off-by: Carlos Llamas Reviewed-by: Alice Ryhl