{"push_id":1130457366,"size":14,"distinct_size":14,"ref":"refs/heads/caf/aosp-common/android-3.10","head":"ed0b9b4e69b8beaa6bd3da338fa5a31cc0c3db2a","before":"43ab3a2a8a60576d8a51d7c829a2b0b61a2a8088","commits":[{"sha":"1201271405a1f0cf34d5d5bed40214d4609ed2f4","author":{"email":"b28fe47f344ea47a742972f6caa7ef1537d21708@google.com","name":"Daniel Rosenberg"},"message":"vfs: change d_canonical_path to take two paths\n\nbug: 23904372\nChange-Id: I4a686d64b6de37decf60019be1718e1d820193e6\nSigned-off-by: Daniel Rosenberg <drosen@google.com>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/1201271405a1f0cf34d5d5bed40214d4609ed2f4"},{"sha":"2564b249a2e804887cea367f88c37316b28f224f","author":{"email":"b28fe47f344ea47a742972f6caa7ef1537d21708@google.com","name":"Daniel Rosenberg"},"message":"fuse: Add support for d_canonical_path\n\nAllows FUSE to report to inotify that it is acting\nas a layered filesystem. The userspace component\nreturns a string representing the location of the\nunderlying file. If the string cannot be resolved\ninto a path, the top level path is returned instead.\n\nbug: 23904372\nChange-Id: Iabdca0bbedfbff59e9c820c58636a68ef9683d9f\nSigned-off-by: Daniel Rosenberg <drosen@google.com>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/2564b249a2e804887cea367f88c37316b28f224f"},{"sha":"3c714201e02ec08652be4b9544a5267e79bde3a9","author":{"email":"4bb1064d1f46929ded0070376617aece30f0ee54@google.com","name":"Mark Salyzyn"},"message":"BACKPORT: f2fs: add a max block check for get_data_block_bmap\n\n(cherry pick from commit 179448bfe4cd201e98e728391c6b01b25c849fe8)\n\nThis patch adds a max block check for get_data_block_bmap.\n\nTrinity test program will send a block number as parameter into\nioctl_fibmap, which will be used in get_node_path(), when the block\nnumber large than f2fs max blocks, it will trigger kernel bug.\n\nSigned-off-by: Yunlei He <heyunlei@huawei.com>\nSigned-off-by: Xue Liu <liuxueliu.liu@huawei.com>\n[Jaegeuk Kim: fix missing condition, pointed by Chao Yu]\nSigned-off-by: Jaegeuk Kim <jaegeuk@kernel.org>\nBug: 28271368\nChange-Id: Ia5acae04522993d5b60a0bcb5ccc184c66532be8","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/3c714201e02ec08652be4b9544a5267e79bde3a9"},{"sha":"105dc6ece2b4aa79d0165dd461a3f23c4f39bef0","author":{"email":"5b4de6d90b3d4185ed5afe686aad4ea88ac71343@intel.com","name":"Jeremy Compostella"},"message":"dm: fix dm_substitute_devices()\n\nWhen candidate is the last parameter, candidate_end points to the '\\0'\ncharacter and not the DM_FIELD_SEP character.  In such a situation, we\nshould not move the candidate_end pointer one character backward.\n\n(Cherry-picked from https://android-review.googlesource.com/#/c/221680/)\nSigned-off-by: Jeremy Compostella <jeremy.compostella@intel.com>\nChange-Id: Ifc042e07da99fcfdfd46811d4208b39b427a6d99","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/105dc6ece2b4aa79d0165dd461a3f23c4f39bef0"},{"sha":"6a3520b6879c302037ff282186ec7c4ff4a478d2","author":{"email":"5b4de6d90b3d4185ed5afe686aad4ea88ac71343@intel.com","name":"Jeremy Compostella"},"message":"ANDROID: dm: use name_to_dev_t\n\nThis patch makes android_verity_ctr() parse its block device string\nparameter with name_to_dev_t().  It allows the use of less hardware\nrelated block device reference like PARTUUID for instance.\n\n(Cherry-picked from https://android-review.googlesource.com/#/c/215901)\n\nChange-Id: Idb84453e70cc11abd5ef3a0adfbb16f8b5feaf07\nSigned-off-by: Jeremy Compostella <jeremy.compostella@intel.com>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/6a3520b6879c302037ff282186ec7c4ff4a478d2"},{"sha":"e950a7f43d8b3638558ea8f92cbfab514cbdf7b6","author":{"email":"29cc19d80ad832477786ab039dc70d6bdbbfe33b@google.com","name":"Janis Danisevskis"},"message":"UPSTREAM: procfs: fixes pthread cross-thread naming if !PR_DUMPABLE\n\nThe PR_DUMPABLE flag causes the pid related paths of the\nproc file system to be owned by ROOT. The implementation\nof pthread_set/getname_np however needs access to\n/proc/<pid>/task/<tid>/comm.\nIf PR_DUMPABLE is false this implementation is locked out.\n\nThis patch installs a special permission function for\nthe file \"comm\" that grants read and write access to\nall threads of the same group regardless of the ownership\nof the inode. For all other threads the function falls back\nto the generic inode permission check.\n\nSigned-off-by: Janis Danisevskis <jdanis@google.com>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/e950a7f43d8b3638558ea8f92cbfab514cbdf7b6"},{"sha":"7de8a8d76486b61be58266d4ce63520aa4118c24","author":{"email":"4645f7897fd33786a2ee1264d590b3c400559d85@linuxfoundation.org","name":"Greg Kroah-Hartman"},"message":"UPSTREAM: AIO: properly check iovec sizes\n\n(cherry pick from commit ff19ac8fb71e8a2bf07d61b959062998139c1104)\n\nIn Linus's tree, the iovec code has been reworked massively, but in\nolder kernels the AIO layer should be checking this before passing the\nrequest on to other layers.\n\nMany thanks to Ben Hawkes of Google Project Zero for pointing out the\nissue.\n\nReported-by: Ben Hawkes <hawkes@google.com>\nAcked-by: Benjamin LaHaise <bcrl@kvack.org>\nTested-by: Willy Tarreau <w@1wt.eu>\n[backported to 3.10 - willy]\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nBug: 28794373\nChange-Id: I4b5010629f484a15499245ba18d4f65d81c08ef5","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/7de8a8d76486b61be58266d4ce63520aa4118c24"},{"sha":"75bfc5babcc3cd717a5558af2422d578a4db20fd","author":{"email":"4b8373d016f277527198385ba72fda0feb5da015@hurleysoftware.com","name":"Peter Hurley"},"message":"UPSTREAM: tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)\n\n(cherry pick from commit 5c17c861a357e9458001f021a7afa7aab9937439)\n\nioctl(TIOCGETD) retrieves the line discipline id directly from the\nldisc because the line discipline id (c_line) in termios is untrustworthy;\nuserspace may have set termios via ioctl(TCSETS*) without actually\nchanging the line discipline via ioctl(TIOCSETD).\n\nHowever, directly accessing the current ldisc via tty->ldisc is\nunsafe; the ldisc ptr dereferenced may be stale if the line discipline\nis changing via ioctl(TIOCSETD) or hangup.\n\nWait for the line discipline reference (just like read() or write())\nto retrieve the \"current\" line discipline id.\n\nCc: <stable@vger.kernel.org>\nSigned-off-by: Peter Hurley <peter@hurleysoftware.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nBug: 28409131\nChange-Id: I8e0a1c6cd51f2cc05ee45995c7ac05cd770c650b","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/75bfc5babcc3cd717a5558af2422d578a4db20fd"},{"sha":"3504ad92b1c3e225b8c92e36f190ac08b48a71be","author":{"email":"75ea6bb7bfc1186f92d26164de5f9268c9a45b59@rowland.harvard.edu","name":"Alan Stern"},"message":"UPSTREAM: USB: fix invalid memory access in hub_activate()\n\n(cherry pick from commit e50293ef9775c5f1cf3fcc093037dd6a8c5684ea)\n\nCommit 8520f38099cc (\"USB: change hub initialization sleeps to\ndelayed_work\") changed the hub_activate() routine to make part of it\nrun in a workqueue.  However, the commit failed to take a reference to\nthe usb_hub structure or to lock the hub interface while doing so.  As\na result, if a hub is plugged in and quickly unplugged before the work\nroutine can run, the routine will try to access memory that has been\ndeallocated.  Or, if the hub is unplugged while the routine is\nrunning, the memory may be deallocated while it is in active use.\n\nThis patch fixes the problem by taking a reference to the usb_hub at\nthe start of hub_activate() and releasing it at the end (when the work\nis finished), and by locking the hub interface while the work routine\nis running.  It also adds a check at the start of the routine to see\nif the hub has already been disconnected, in which nothing should be\ndone.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: Alexandru Cornea <alexandru.cornea@intel.com>\nTested-by: Alexandru Cornea <alexandru.cornea@intel.com>\nFixes: 8520f38099cc (\"USB: change hub initialization sleeps to delayed_work\")\nCC: <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nBug: 28712303\nChange-Id: If1682f4ee74563a4ba003a3332bfb5f79e8b1e50","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/3504ad92b1c3e225b8c92e36f190ac08b48a71be"},{"sha":"a42516506b2eb647f8e7d47d3e1b38637142be04","author":{"email":"86995a091f8a1385082bd10715048b52ee386a6a@google.com","name":"Lorenzo Colitti"},"message":"Revert \"ping: prevent NULL pointer dereference on write to msg_name\"\n\nThis reverts commit 5a0312add72620b4bd67ccb7cde887ef2b95cd6d.\n\nBug: 28347599\nChange-Id: Ia4d6e97c52cd9b035669a5464631f850195778db","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/a42516506b2eb647f8e7d47d3e1b38637142be04"},{"sha":"1ad7f4b67337194d668fd8983fad0c84eff00fac","author":{"email":"331be22c6b63ca3e0a03d408c2d906b1b02cd5f2@stressinduktion.org","name":"Hannes Frederic Sowa"},"message":"inet: prevent leakage of uninitialized memory to user in recv syscalls\n\nOnly update *addr_len when we actually fill in sockaddr, otherwise we\ncan return uninitialized memory from the stack to the caller in the\nrecvfrom, recvmmsg and recvmsg syscalls. Drop the the (addr_len == NULL)\nchecks because we only get called with a valid addr_len pointer either\nfrom sock_common_recvmsg or inet_recvmsg.\n\nIf a blocking read waits on a socket which is concurrently shut down we\nnow return zero and set msg_msgnamelen to 0.\n\n[cherry-pick of net-next bceaa90240b6019ed73b49965eac7d167610be69]\n\nBug: 28347599\nChange-Id: Id292aa64697c5b5bccc8e0f7d9236b519454ef27\nReported-by: mpb <mpb.mail@gmail.com>\nSuggested-by: Eric Dumazet <eric.dumazet@gmail.com>\nSigned-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/1ad7f4b67337194d668fd8983fad0c84eff00fac"},{"sha":"b1576ab17bd1df6ef2ee1c9743ebd29ce3abaa9a","author":{"email":"331be22c6b63ca3e0a03d408c2d906b1b02cd5f2@stressinduktion.org","name":"Hannes Frederic Sowa"},"message":"ping: prevent NULL pointer dereference on write to msg_name\n\nA plain read() on a socket does set msg->msg_name to NULL. So check for\nNULL pointer first.\n\n[Cherry-pick of net-next cf970c002d270c36202bd5b9c2804d3097a52da0]\n\nBug: 28347599\nChange-Id: If071c128e91b7869d0fd57a958490ec6e1f488f9\nSigned-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/b1576ab17bd1df6ef2ee1c9743ebd29ce3abaa9a"},{"sha":"1011d9959bc00fa35795a113efb37b718310a21e","author":{"email":"331be22c6b63ca3e0a03d408c2d906b1b02cd5f2@stressinduktion.org","name":"Hannes Frederic Sowa"},"message":"inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions\n\nCommit bceaa90240b6019ed73b49965eac7d167610be69 (\"inet: prevent leakage\nof uninitialized memory to user in recv syscalls\") conditionally updated\naddr_len if the msg_name is written to. The recv_error and rxpmtu\nfunctions relied on the recvmsg functions to set up addr_len before.\n\nAs this does not happen any more we have to pass addr_len to those\nfunctions as well and set it to the size of the corresponding sockaddr\nlength.\n\nThis broke traceroute and such.\n\n[backport of net-next 85fbaa75037d0b6b786ff18658ddf0b4014ce2a4]\n\nBug: 28347599\nChange-Id: I9d7b5aa834a6c475fcfc7ab288f389833648506f\nFixes: bceaa90240b6 (\"inet: prevent leakage of uninitialized memory to user in recv syscalls\")\nReported-by: Brad Spengler <spender@grsecurity.net>\nReported-by: Tom Labanowski\nCc: mpb <mpb.mail@gmail.com>\nCc: David S. Miller <davem@davemloft.net>\nCc: Eric Dumazet <eric.dumazet@gmail.com>\nSigned-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/1011d9959bc00fa35795a113efb37b718310a21e"},{"sha":"ed0b9b4e69b8beaa6bd3da338fa5a31cc0c3db2a","author":{"email":"a4a9764687115057dfb6081f6c434bf20156ee3b@google.com","name":"Jin Qian"},"message":"USB: fix undeclared hub_release error in x86 build\n\ndrivers/usb/core/hub.c: In function 'hub_activate':\ndrivers/usb/core/hub.c:1001:25: error: 'hub_release' undeclared (first use in this function)\n    kref_put(&hub->kref, hub_release);\n\nChange-Id: I94e829a7ac7c53027638b8093883dad02ac353c1","distinct":true,"url":"https://api.github.com/repos/Jackeagle/kernel_msm-3.10/commits/ed0b9b4e69b8beaa6bd3da338fa5a31cc0c3db2a"}]}
{"actor":{"display_login":"Jackeagle"}}