Android Binder Security Note On >Passing Binder Through Another Binder<

This memo describes certain details of the Android mechanism of passing binder through another binder. The aim of this paper is to describe certain technical details of this mechanism as well as to point out some obvious security weaknesses. For the sake of simplicity, we do not include description of the whole Android binder framework here. The interested reader may check the OpenBinder documentation by Dianne K. Hackborn that is still available in [1]. Despite it not being compatible with the Android binder framework, a lot of OpenBinder general ideas seem to still apply.