{"push_id":1149142757,"size":10,"distinct_size":10,"ref":"refs/heads/20160608","head":"1dfb8022fa6b71fccfb7928918af9daaf5c8fd83","before":"479c1f4abe79cb704564eb6b12ef72bcbc82d414","commits":[{"sha":"6eac0d04781a1d9455c774a1a9bdf5e034488d35","author":{"name":"Suman Mukherjee","email":"e3ab071fd017dcf1d764b3b87de4a547154648cf@codeaurora.org"},"message":"msm: camera: ispif: Validate VFE num input during reset\n\nUserspace supplies the actual number of used VFEs in session to ISPIF.\nValidate the userspace input value and if found to be invalid, return\nerror.\n\nBUG=27600832\n\nChange-Id: I91944434e9a83d34af765c40bf8ad297a09ce2f5","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/6eac0d04781a1d9455c774a1a9bdf5e034488d35"},{"sha":"f4919620e7a7281f47f4639565694239fcba73c2","author":{"name":"Suman Mukherjee","email":"e3ab071fd017dcf1d764b3b87de4a547154648cf@codeaurora.org"},"message":"msm: camera: ispif: Validate VFE num input during reset\n\nUserspace supplies the actual number of used VFEs in session to ISPIF.\nValidate the userspace input value and if found to be invalid, return\nerror.\n\nBUG=27600832\n\nChange-Id: I3b0312e960e3f2cfd71889e369d588eb292b8df4","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/f4919620e7a7281f47f4639565694239fcba73c2"},{"sha":"79ec9dde076ed4d5d86dc5e35e55ec3ee18b0b8d","author":{"name":"Adrian Salido-Moreno","email":"88403eeddd99c2f7c43e324f3769cbc7ce2fe0db@codeaurora.org"},"message":"msm: mdss: fix possible out-of-bounds and overflow issue in mdp debugfs\n\nThere are few cases where the count argument passed by the user\nspace is not validated, which can potentially lead to out of bounds\nor overflow issues. In some cases, kernel might copy more data than\nwhat is requested. Add necessary checks to avoid such cases.\n\nBUG=27407629\nBUG=27407865\n\nChange-Id: I32ccccce3179346fd261ffc5b3a379230e7b413f","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/79ec9dde076ed4d5d86dc5e35e55ec3ee18b0b8d"},{"sha":"b7036d90b2ffe5514e5371d973624d4d4ef277e6","author":{"name":"Damir Didjusto","email":"8983791ae9b05648c1ee9759b688531bad755c37@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: Add check for DSP status before using the size\n\nAdd the check for the DSP return status code before using the size\nto copy the data into the destination buffer. If the DSP returns\nan error, the size should not be used, error should be returned\ninstead.\n\nCRs-fixed: 668331\nChange-Id: Ia27de9f59fbd14ac5c829ba3f1d89a0175f7a7a1\nSigned-off-by: Damir Didjusto <damird@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/b7036d90b2ffe5514e5371d973624d4d4ef277e6"},{"sha":"c1ddb3259122509e5264afb8c2abbd0e3fcee856","author":{"name":"Ben Romberger","email":"2772df8d823613470d53736f8956ebb045c68740@codeaurora.org"},"message":"ASoC: msm: Add bounds checking to ADM get params\n\nAdd additional bounds checking to ADM get params.\nValidate that all buffer sizes are valid before\ndereferencing.\n\n00b404eb had already added most of this change for\nthis kernel, so only add the missing check and\nclean up the whitespace a little.\n\nBUG=27947307\n\nChange-Id: Iae3643985b5b72b78606f4dff94f8068ee0ddc09","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/c1ddb3259122509e5264afb8c2abbd0e3fcee856"},{"sha":"7694dc64881c930221262cfdc2650971121cef25","author":{"name":"Rajesh Kemisetti","email":"eb3c69d0c46395023fcec2d6245f10d8d8475c76@codeaurora.org"},"message":"msm: kgsl: Add missing checks for alloc size and sglen\n\nIn _kgsl_sharedmem_page_alloc():\n\n- Make len of type size_t to be in line with size.\n- Check for boundary limits of requested alloc size before honoring.\n- Make sure sglen is greater than zero before marking it as end\n  of sg list.\n\nBUG=27475454\n\nChange-Id: I8e18aad2118f58ce677050ff4c4a4b0823c4b4b3","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/7694dc64881c930221262cfdc2650971121cef25"},{"sha":"33ba857b18a1e10ff97cef530945da1d82adec37","author":{"name":"Sunil Khatri","email":"c2fa09c6a63ee27656efbed7bd5e770f84d009d0@codeaurora.org"},"message":"msm: kgsl: Cast perfcounter query count to an unsigned int\n\nIn adreno_perfcounter_query_group() make sure to cast the user passed\ncount to an unsigned int before comparing it to the group count.\nOtherwise the user count could be interpeted as a signed int and\nhilarity ensues.\n\nChange-Id: I139d2fcd21ab13f59d08b0ac5113f9d5dc6103ca\nSigned-off-by: Jordan Crouse <jcrouse@codeaurora.org>\nSigned-off-by: Sunil Khatri <sunilkh@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/33ba857b18a1e10ff97cef530945da1d82adec37"},{"sha":"bfc96bdba4d62763114669f38729d8b264db1865","author":{"name":"Thierry Strudel","email":"d91a09988021b738ebcc7e5a85aaf180a4dfaa4b@google.com"},"message":"prima: Fix buffer overwrite problem in CCXBEACONREQ\n\nSet the number of IE fields to minimum of input data and\nSIR_ESE_MAX_MEAS_IE_REQS.\n\nChange-Id: Ie53cfec7872ab69530bbb8932f9f9e85fb319f92\nCRs-Fixed: 993561\nBug: 27424603\nSigned-off-by: Srinivas Girigowda <sgirigow@codeaurora.org>\nSigned-off-by: Thierry Strudel <tstrudel@google.com>","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/bfc96bdba4d62763114669f38729d8b264db1865"},{"sha":"de2d01cd8fbed940595608f9692d30363f4d4536","author":{"name":"Ravi Kumar Alamanda","email":"7901f7143d62b4c6f41d6c66c31e13cbb4bb3057@codeaurora.org"},"message":"ASoC: msm: audio-effects: fix stack overread and heap overwrite\n\nFix overwrite of updt_params allocated in heap, and stack overread\nwhere param pointer is passed from user space.\n\nBug: 27555224\nChange-Id: Ida8bdb7da2fcb97023dce3b6eafe4b899a51cb66\nSigned-off-by: Ravi Kumar Alamanda <arkumar@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/de2d01cd8fbed940595608f9692d30363f4d4536"},{"sha":"1dfb8022fa6b71fccfb7928918af9daaf5c8fd83","author":{"name":"Ravi Kumar Alamanda","email":"7901f7143d62b4c6f41d6c66c31e13cbb4bb3057@codeaurora.org"},"message":"ASoC: msm: disable unwanted module\n\n- disable compilation of unwanted modules\n\nBug: 27976772\nBug: 27531992\nChange-Id: I9df4efd899032fb9219a286fe469d7b2f476686f","distinct":true,"url":"https://api.github.com/repos/leekindo/android_kernel_oneplus_msm8974/commits/1dfb8022fa6b71fccfb7928918af9daaf5c8fd83"}]}
{"actor":{"display_login":"leekindo"}}