Is it possible to port to other kernel versions?

[Anonymous941]

How can I add other kernel versions, such as 3.8? Here is what I get when attempting to run the program, I'm assuming it's because of an incompatible kernel:

I BADSPIN : ==========================================
I BADSPIN : Bad Spin Exploit (CVE-2022-20421) by 0xkol
I BADSPIN : ==========================================
I BADSPIN : [x] Looking for binder_proc's inner_lock offset
I BADSPIN : [x] Trigger vulnerability... (mode = 1)
I BADSPIN : [11937:11937] New binder client: A
I BADSPIN : SYSCHK(ioctl(fd, BINDER_WRITE_READ, &bwr))
I BADSPIN : [11939:11939] New binder client: C
I BADSPIN : SYSCHK(ioctl(fd, BINDER_WRITE_READ, &bwr))
I BADSPIN : [11938:11938] New binder client: B
I BADSPIN : SYSCHK(ioctl(fd, BINDER_WRITE_READ, &bwr))
I BADSPIN : [x] Found binder_proc's inner_lock offset: 0 (vuln_fd 0)
I BADSPIN : 
I BADSPIN : [x] Unsupported inner_lock offset: Must be >= 520 and aligned to 8.
I BADSPIN : [x] Exit.

[Anonymous941]

@0xkol The source of the error is that this ioctl operation:

badspin/src/binder_client.c

Line 25 in 5db8712

SYSCHK(ioctl(fd, BINDER_WRITE_READ, &bwr));

returns -1, with errno set to 22 EINVAL. After a lot of experimentation, it turns out to be because I am building for a 32-bit CPU and must add #define BINDER_IPC_32BIT to binder.h. After adding that line, however, I get another error:

token_manager.c:142: int token_manager_register(int, uint32_t, binder_uintptr_t, binder_uintptr_t, struct token *): assertion "bbo->hdr.type == BINDER_TYPE_PTR" failed
token_manager.c:142: int token_manager_register(int, uint32_t, binder_uintptr_t, binder_uintptr_t, struct token *): assertion "bbo->hdr.type == BINDER_TYPE_PTR" failed
token_manager.c:142: int token_manager_register(int, uint32_t, binder_uintptr_t, binder_uintptr_t, struct token *): assertion "bbo->hdr.type == BINDER_TYPE_PTR" failed
==========================================
Bad Spin Exploit (CVE-2022-20421) by 0xkol
==========================================
[x] Looking for binder_proc's inner_lock offset
[x] Trigger vulnerability... (mode = 1)
[x] Found binder_proc's inner_lock offset: 0 (vuln_fd 0)

[x] Unsupported inner_lock offset: Must be >= 520 and aligned to 8.
[x] Exit.