tree 0978cb6e77e84d278700c6b2e075b47b8a712ab1
parent cef637a4fb112f4b8cd8e53abcbedbaca226ea36
author Keith Mok <keithmok@google.com> 1693441895 +0000
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1702330729 +0000

Add seal if ashmem-dev is backed by memfd

Need to seal the buffer size in align with ashmem if set to PROT_READ
only to prevent untrusted remote process to shrink the buffer size and
crash it.

Bug: 294609150
Test: build
Ignore-AOSP-First: Security
(cherry picked from commit f83c5c8fecf89d9315945368aa20350c2f235cc0)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:61a2897733e15a12b7aa2dfd99957e83cbe59351)
Merged-In: I9288cf30b41e84ad8d3247c204e20482912bff69
Change-Id: I9288cf30b41e84ad8d3247c204e20482912bff69