{"push_id":1302651510,"size":17,"distinct_size":17,"ref":"refs/heads/nougat","head":"39c9aa6dcea8ad39421f81ca981fa917ad402575","before":"b8588cc720a5f54e7892f21fa2e9fdaefb35879a","commits":[{"sha":"38e258ae390600a17e55487fff30c306fafe1d80","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"FROMLIST: mm: mmap: Add new /proc tunable for mmap_base ASLR.\n\n(cherry picked from commit https://lkml.org/lkml/2015/12/21/337)\n\nASLR  only uses as few as 8 bits to generate the random offset for the\nmmap base address on 32 bit architectures. This value was chosen to\nprevent a poorly chosen value from dividing the address space in such\na way as to prevent large allocations. This may not be an issue on all\nplatforms. Allow the specification of a minimum number of bits so that\nplatforms desiring greater ASLR protection may determine where to place\nthe trade-off.\n\nBug: 24047224\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: Ic74424e07710cd9ccb4a02871a829d14ef0cc4bc","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/38e258ae390600a17e55487fff30c306fafe1d80"},{"sha":"9feb64349f8e4eee42a0a56ac3a51eca8542e675","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"FROMLIST: arm: mm: support ARCH_MMAP_RND_BITS.\n\n(cherry picked from commit https://lkml.org/lkml/2015/12/21/341)\n\narm: arch_mmap_rnd() uses a hard-code value of 8 to generate the\nrandom offset for the mmap base address.  This value represents a\ncompromise between increased ASLR effectiveness and avoiding\naddress-space fragmentation. Replace it with a Kconfig option, which\nis sensibly bounded, so that platform developers may choose where to\nplace this compromise. Keep 8 as the minimum acceptable value.\n\nBug: 24047224\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: I2f6c18a0060e1c21b53200ecdcfde9a8c2e3db98","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/9feb64349f8e4eee42a0a56ac3a51eca8542e675"},{"sha":"a5ea42e4a05dd6dadf8565d6e6fc0e695529ca0b","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_NEWSPDINFO\n\ncommit 2b7834d3e1b828429faa5dc41a480919e52d3f31 upstream (net-next).\n\nThis new command is missing.\n\nChange-Id: If511000c19aa9af7220ff775d88ace9834b35dcb\nFixes: 880a6fab8f6b (\"xfrm: configure policy hash table thresholds by netlink\")\nReported-by: Christophe Gouault <christophe.gouault@6wind.com>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/a5ea42e4a05dd6dadf8565d6e6fc0e695529ca0b"},{"sha":"1c7b96272faf239a7ed07028af6377c0529a0068","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_GETSPDINFO\n\ncommit 5e6deebafb45fb271ae6939d48832e920b8fb74e upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Id0a0d9bf7a4af98a8f761fec902d1296138a911f\nFixes: ecfd6b183780 (\"[XFRM]: Export SPD info\")\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/1c7b96272faf239a7ed07028af6377c0529a0068"},{"sha":"2714effc2ac4824eb5bbc8801e983f05b115e8b8","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFO\n\ncommit 5b5800fad072133e4a9c2efbf735baaac83dec86 upstream (net-next).\n\nThese commands are missing.\n\nChange-Id: I3fd1d3d700592c653e1a5c5199125805d55aaa95\nFixes: 28d8909bc790 (\"[XFRM]: Export SAD info.\")\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/2714effc2ac4824eb5bbc8801e983f05b115e8b8"},{"sha":"8559c57114656f21d1fd3d8010133ec7b781857b","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_REPORT\n\ncommit b0b59b0056acd6f157a04cc895f7e24692fb08aa upstream (net-next).\n\nThis command is missing.\n\nChange-Id: I8fa3b1b9815296d3b001244d2212f79f5654bd01\nFixes: 97a64b4577ae (\"[XFRM]: Introduce XFRM_MSG_REPORT.\")\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/8559c57114656f21d1fd3d8010133ec7b781857b"},{"sha":"bc8ea1502b0cfcb96ebf843c38914451c3475709","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_MIGRATE\n\ncommit 8d465bb777179c4bea731b828ec484088cc9fbc1 upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Id2c9344ca1ab2c96e0b758ad1efb38e16cf23b86\nFixes: 5c79de6e79cd (\"[XFRM]: User interface for handling XFRM_MSG_MIGRATE\")\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/bc8ea1502b0cfcb96ebf843c38914451c3475709"},{"sha":"3a0591e64202df3f2de6067d44b4640e70e53a7c","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_MAPPING\n\ncommit bd2cba07381a6dba60bc1c87ed8b37931d244da1 upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Ida52130382e42355e5f3b39134aa61a1ea98026d\nFixes: 3a2dfbe8acb1 (\"xfrm: Notify changes in UDP encapsulation via netlink\")\nCC: Martin Willi <martin@strongswan.org>\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/3a0591e64202df3f2de6067d44b4640e70e53a7c"},{"sha":"2dfaad0769052fd6e050cdf89ae2ff420b19d2c9","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: diag: Support destroying TCP sockets.\n\nThis implements SOCK_DESTROY for TCP sockets. It causes all\nblocking calls on the socket to fail fast with ECONNABORTED and\ncauses a protocol close of the socket. It informs the other end\nof the connection by sending a RST, i.e., initiating a TCP ABORT\nas per RFC 793. ECONNABORTED was chosen for consistency with\nFreeBSD.\n\n[Backport of net-next c1e64e298b8cad309091b95d8436a0255c84f54a]\n\nChange-Id: Ice9aad37741fe497341d1d2a51e0b70601a99c90\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/2dfaad0769052fd6e050cdf89ae2ff420b19d2c9"},{"sha":"7b07d01e9f5c9063a7acbace818f1e521ab3a15d","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: tcp: deal with listen sockets properly in tcp_abort.\n\nWhen closing a listen socket, tcp_abort currently calls\ntcp_done without clearing the request queue. If the socket has a\nchild socket that is established but not yet accepted, the child\nsocket is then left without a parent, causing a leak.\n\nFix this by setting the socket state to TCP_CLOSE and calling\ninet_csk_listen_stop with the socket lock held, like tcp_close\ndoes.\n\nTested using net_test. With this patch, calling SOCK_DESTROY on a\nlisten socket that has an established but not yet accepted child\nsocket results in the parent and the child being closed, such\nthat they no longer appear in sock_diag dumps.\n\n[Backport of net-next 2010b93e9317cc12acd20c4aed385af7f9d1681e]\n\nChange-Id: I2b9c38fab194b3c4e11439047ead9582c811d4c2\nReported-by: Eric Dumazet <eric.dumazet@gmail.com>\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/7b07d01e9f5c9063a7acbace818f1e521ab3a15d"},{"sha":"a92470f829a2cdb5b656b104c956e18cfcd605ef","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"onyx: enable CONFIG_INET_DIAG_DESTROY\n\nChange-Id: Ic85f75b6a6f1a9a6db2dd2fe2dc7af6fd1a5fcd6","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/a92470f829a2cdb5b656b104c956e18cfcd605ef"},{"sha":"a951da97eadc793f5c4be6c9e9f76f163f41dbbb","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"FROMLIST: drivers: char: random: add get_random_long()\n\n(cherry picked from commit https://lkml.org/lkml/2016/2/4/831)\n\nd07e22597d1d355 (\"mm: mmap: add new /proc tunable for mmap_base ASLR\")\nadded the ability to choose from a range of values to use for entropy\ncount in generating the random offset to the mmap_base address.  The\nmaximum value on this range was set to 32 bits for 64-bit x86 systems, but\nthis value could be increased further, requiring more than the 32 bits of\nrandomness provided by get_random_int(), as is already possible for arm64.\nAdd a new function: get_random_long() which more naturally fits with the\nmmap usage of get_random_int() but operates exactly the same as\nget_random_int().\n\nAlso, fix the shifting constant in mmap_rnd() to be an unsigned long so\nthat values greater than 31 bits generate an appropriate mask without\noverflow.  This is especially important on x86, as its shift instruction\nuses a 5-bit mask for the shift operand, which meant that any value for\nmmap_rnd_bits over 31 acts as a no-op and effectively disables mmap_base\nrandomization.\n\nFinally, replace calls to get_random_int() with get_random_long() where\nappropriate.\n\nBug: 26963541\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: Ie7552631b5db86f3482cf15e7dc916d89c1c502b","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/a951da97eadc793f5c4be6c9e9f76f163f41dbbb"},{"sha":"717fa8ae82d5fa655c2e37a393841b2d54bbe986","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"BACKPORT: FROMLIST: mm: ASLR: use get_random_long()\n\n(cherry picked from commit https://lkml.org/lkml/2016/2/4/833)\n\nReplace calls to get_random_int() followed by a cast to (unsigned long)\nwith calls to get_random_long().  Also address shifting bug which, in case\nof x86 removed entropy mask for mmap_rnd_bits values > 31 bits.\n\nBug: 26963541\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: Ie577b21a0678cf4b21eae06bddd8ccb27cbe70ff","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/717fa8ae82d5fa655c2e37a393841b2d54bbe986"},{"sha":"141c0e9f16579e0b13cad930b9a33d7dec9b3f51","author":{"name":"Eric Dumazet","email":"b3d77ad2db30f558882cc0c038be5a3cf96611f9@google.com"},"message":"net: add sk_fullsock() helper\n\nWe have many places where we want to check if a socket is\nnot a timewait or request socket. Use a helper to avoid\nhard coding this.\n\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\n\n[backported from net-next 1d0ab253872cdd3d8e7913f59c266c7fd01771d0]\n[lorenzo@google.com: removed TCPF_NEW_SYN_RECV, and added a comment to add it back.]\n\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\n\nBug: 24163529\nChange-Id: Ibf09017e1ab00af5e6925273117c335d7f515d73","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/141c0e9f16579e0b13cad930b9a33d7dec9b3f51"},{"sha":"ef16c41170cc6b452258f2f13b9d187617839c2e","author":{"name":"Eric Dumazet","email":"b3d77ad2db30f558882cc0c038be5a3cf96611f9@google.com"},"message":"ipv6: inet6_sk() should use sk_fullsock()\n\nSYN_RECV & TIMEWAIT sockets are not full blown, they do not have a pinet6\npointer.\n\nBug: 24163529\nChange-Id: I6ce67a190d67d200c6ebeb81d2daeb9c86cd7581\nFixes: ca6fb0651883 (\"tcp: attach SYNACK messages to request sockets instead of listener\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/ef16c41170cc6b452258f2f13b9d187617839c2e"},{"sha":"f54017ce0ad1e06a1ab3a7a7ebe578ead8e1a179","author":{"name":"Ordenkrieger","email":"edd16fab51b61ea74a92683f7510b31c1dba2f85@googlemail.com"},"message":"Revert \"onyx: enable CONFIG_INET_DIAG_DESTROY\"\n\nThis reverts commit a92470f829a2cdb5b656b104c956e18cfcd605ef.","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/f54017ce0ad1e06a1ab3a7a7ebe578ead8e1a179"},{"sha":"39c9aa6dcea8ad39421f81ca981fa917ad402575","author":{"name":"Ordenkrieger","email":"edd16fab51b61ea74a92683f7510b31c1dba2f85@googlemail.com"},"message":"Revert \"Windows Desktop\"\n\nThis reverts commit 568dd89f7b22eb0fc0769ac7b9f1672a5167835f.","distinct":true,"url":"https://api.github.com/repos/Ordenkrieger/android_kernel_cyanogen_msm8974/commits/39c9aa6dcea8ad39421f81ca981fa917ad402575"}]}
{"actor":{"display_login":"Ordenkrieger"}}