{"push_id":1148207792,"size":9,"distinct_size":9,"ref":"refs/heads/aosp-new/android-msm-seed-3.10-marshmallow-mr2","head":"8a5d2914c3649e2a83be48957724fd181d00dc1e","before":"c03cbb2219e2da30404db3c599647c7687d7c7e9","commits":[{"sha":"d804699922bb59b1cbcc406d444c74a8d95c34ed","author":{"name":"Ravi Kumar Alamanda","email":"7901f7143d62b4c6f41d6c66c31e13cbb4bb3057@codeaurora.org"},"message":"ASoC: msm: audio-effects: fix stack overread and heap overwrite\n\nFix overwrite of updt_params allocated in heap, and stack overread\nwhere param pointer is passed from user space.\n\nBug: 27555177\nBug: 26876409\nChange-Id: Ida8bdb7da2fcb97023dce3b6eafe4b899a51cb66\nSigned-off-by: Ravi Kumar Alamanda <arkumar@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/d804699922bb59b1cbcc406d444c74a8d95c34ed"},{"sha":"312006bd2977f9e11f3d5f392f6c32e7f59ec9e2","author":{"name":"Robb Glasser","email":"b0c5b77df4bff135c4bb9b77cfba385da1f20c54@google.com"},"message":"msm: kgsl: Cast perfcounter query count to an unsigned int\n\nIn adreno_perfcounter_query_group() make sure to cast the user passed\ncount to an unsigned int before comparing it to the group count.\nOtherwise the user count could be interpeted as a signed int and\nhilarity ensues.\n\nChange-Id: Ie86da3d2a0cc2647ddf865d3f56e7925522246a0\nSigned-off-by: Jordan Crouse <jcrouse@codeaurora.org>\nSigned-off-by: Sunil Khatri <sunilkh@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/312006bd2977f9e11f3d5f392f6c32e7f59ec9e2"},{"sha":"34ae94be885d00109f99aa32200d4bed7732b07d","author":{"name":"Adrian Salido-Moreno","email":"88403eeddd99c2f7c43e324f3769cbc7ce2fe0db@codeaurora.org"},"message":"msm: mdss: fix possible out-of-bounds and overflow issue in mdp debugfs\n\nThere are few cases where the count argument passed by the user\nspace is not validated, which can potentially lead to out of bounds\nor overflow issues. In some cases, kernel might copy more data than\nwhat is requested. Add necessary checks to avoid such cases.\n\nBUG=27407865\n\nChange-Id: Idaac148e9c2c82408c4cf4a867e92fca3a6b5429\nSigned-off-by: Veera Sundaram Sankaran <veeras@codeaurora.org>\nSigned-off-by: Adrian Salido-Moreno <adrianm@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/34ae94be885d00109f99aa32200d4bed7732b07d"},{"sha":"ef387bdb1198fc212e29d1965ee521cdc8a50161","author":{"name":"Robb Glasser","email":"b0c5b77df4bff135c4bb9b77cfba385da1f20c54@google.com"},"message":"qcacld-2.0: Fix buffer overwrite problem in CCXBEACONREQ\n\nSet the number of IE fields to minimum of input data and\nSIR_ESE_MAX_MEAS_IE_REQS.\n\nChange-Id: Ie53cfec7872ab69530bbb8932f9f9e85fb319f92\nCRs-Fixed: 993561\nBug: 27424603\nSigned-off-by: Srinivas Girigowda <sgirigow@codeaurora.org>\nSigned-off-by: Thierry Strudel <tstrudel@google.com>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/ef387bdb1198fc212e29d1965ee521cdc8a50161"},{"sha":"be1616ffb0d30de7a6f7d008cbef357eae5a0836","author":{"name":"Rajesh Kemisetti","email":"eb3c69d0c46395023fcec2d6245f10d8d8475c76@codeaurora.org"},"message":"msm: kgsl: Add missing checks for alloc size and sglen\n\nIn _kgsl_sharedmem_page_alloc():\n\n- Make len of type size_t to be in line with size.\n- Check for boundary limits of requested alloc size before honoring.\n- Make sure sglen is greater than zero before marking it as end\nof sg list.\n\nBug: 27804025\nChange-Id: I8b9e225e515a0f31593df6f4cad253236475d0ae\nSigned-off-by: Rajesh Kemisetti <rajeshk@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/be1616ffb0d30de7a6f7d008cbef357eae5a0836"},{"sha":"5b9487d1444ee00ce7010497292a9e181432eb1d","author":{"name":"Robb Glasser","email":"b0c5b77df4bff135c4bb9b77cfba385da1f20c54@google.com"},"message":"msm: camera: ispif: Validate VFE num input during reset\n\nUserspace supplies the actual number of used VFEs in session to ISPIF.\nValidate the userspace input value and if found to be invalid, return\nerror.\n\nCRs-Fixed: 898074\nSigned-off-by: Venu Yeshala <vyeshala@codeaurora.org>\nSigned-off-by: Suman Mukherjee<sumam@codeaurora.org>\nChange-Id: I3288ddb6404e817a705a92281b4c54666f372c56","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/5b9487d1444ee00ce7010497292a9e181432eb1d"},{"sha":"362612fc1f18556a3443a7cd473df6745a40267b","author":{"name":"Robb Glasser","email":"b0c5b77df4bff135c4bb9b77cfba385da1f20c54@google.com"},"message":"wlan: validate essid length before processing scan req\n\nPresently we are not validating the length of the essid received\nand directly copying the buffer without size checking.\nPerform bound checking before processing the scan req.\n\nChange-Id: I786e4feb67bf039df3d217138a412da54f51787d\nCRs-fixed: 890228","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/362612fc1f18556a3443a7cd473df6745a40267b"},{"sha":"7185da2190b327854ae2d0bcef91b1f5bdbb78ed","author":{"name":"Ravi Kumar Alamanda","email":"7901f7143d62b4c6f41d6c66c31e13cbb4bb3057@codeaurora.org"},"message":"ASoC: msm: disable unwanted module\n\n- disable compilation of unwanted modules\n\nBug: 27976772\nBug: 27531992\nChange-Id: I9df4efd899032fb9219a286fe469d7b2f476686f\nSigned-off-by: vivek mehta <mvivek@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/7185da2190b327854ae2d0bcef91b1f5bdbb78ed"},{"sha":"8a5d2914c3649e2a83be48957724fd181d00dc1e","author":{"name":"yanghong1","email":"803eee56e2aa2f204c8d16f58fb6dca499fc691e@longcheer.net"},"message":"LCM: add booyi otm1287 sec panel\n\nadd booyi otm1287 sec panel driver init code\n\nTouchscreen: support booyi-himax module\n\n- firmware version: 0x15\n\n- Increase i2c rate for touchscreen\n\n- add 10 point\n\n- fix tp bug\n\nChange-Id: I3e08bec2c5c59c4f58d977a835985a64fa6c0fe7\nSigned-off-by: yanghong1 <yanghong1@longcheer.net>","distinct":true,"url":"https://api.github.com/repos/olivieer/kernel_msm/commits/8a5d2914c3649e2a83be48957724fd181d00dc1e"}]}
{"actor":{"display_login":"pepe-bot"}}