Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIONREAD pipe 1 is 1 #1

Open
Ko-Hi-Dev opened this issue Aug 16, 2023 · 4 comments
Open

FIONREAD pipe 1 is 1 #1

Ko-Hi-Dev opened this issue Aug 16, 2023 · 4 comments

Comments

@Ko-Hi-Dev
Copy link

Ko-Hi-Dev commented Aug 16, 2023

Device: Vivo
Model: X80 Pro
Security Patch:
[ro.build.version.security_patch]: [2022-08-01]
[ro.vendor.build.security_patch]: [2021-12-05]
Kernel Matches: Yes

Error Message:

whats been modified:

init_task
init_cred
_buf_ops

to vivo values
extracted kallsyms from vivo device

PD2186:/data/local/tmp $ rm -rf vivo_shrinker
PD2186:/data/local/tmp $ ./exp vivo.kallsyms
got 0xffffffc0101b219c for commit_creds
got 0xffffffc012400068 for anon_pipe_buf_ops
got 0xffffffc012aebfc0 for init_task
got 0xffffffc012b00780 for init_cred
got 0xffffffc012ebcbf0 for selinux_state
global data at 0x777e4cb000, buffer at 0x777d202000
preparing...
[] STAGE 1: defragmentation
[
] STAGE 2: trigger the bug
[] STAGE 3: free the cache
[
] STAGE 4: reclaim the page
FIONREAD pipe 1 is 1
failed, please retry

@Ko-Hi-Dev Ko-Hi-Dev changed the title Fails to find symnol FIONREAD pipe 1 is 1 Aug 16, 2023
@Markakd
Copy link
Owner

Markakd commented Aug 17, 2023

If the exp keeps showing this message and the kernel does not crash, it means the kernel is patched XD

@Ko-Hi-Dev
Copy link
Author

Ko-Hi-Dev commented Aug 17, 2023

If the exp keeps showing this message and the kernel does not crash, it means the kernel is patched XD

That seems very unlikely? Since this was patched in October? Maybe mediatek isn't vulnerable? Or they got it patched early?

Judging by the

ro.build.version.security_patch]: [2022-08-01]
[ro.vendor.build.security_patch]: [2021-12-05

It really shouldn't, unless OEM got the patch early?

@Markakd
Copy link
Owner

Markakd commented Aug 18, 2023

Not quite sure, upstream patched this bug in Aug last year

@Ko-Hi-Dev
Copy link
Author

Not quite sure, upstream patched this bug in Aug last year

Ah okay I see , I get segmentation fault when running so might be patched.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants