{"push_id":1075754460,"size":4,"distinct_size":4,"ref":"refs/heads/lollipop_mr2","head":"40d5c5f01d103bf11fafe8e0b6bbe131d21fd4f8","before":"833215c7e700f8b26fd421171958f1e348858c81","commits":[{"sha":"f23a2bb9a2f2166de305f572be25c71f19075ee3","author":{"email":"aa3c7c95f56dfecb6054e113a481e5676a5cf6fd@codeaurora.org","name":"Xu Han"},"message":"msm: camera: Add NULL check in msm_actuator\n\nNULL check on function pointers and actuator control struct\nis necessary to prevent errors.\n\nChange-Id: I212e8558c649e0d432d232dbb99e58b7a064829b\nSigned-off-by: Xu Han <hanxu@codeaurora.org>\nSigned-off-by: VijayaKumar T M <vtmuni@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/BlackSoulxxx/kernel_sony_msm8974/commits/f23a2bb9a2f2166de305f572be25c71f19075ee3"},{"sha":"da1a64678e8a4bb1929ebdd2f7b896cc5c6cec58","author":{"email":"785dce9813c74aa517a07b7a1160c1a9cdebd7be@codeaurora.org","name":"Swetha Chikkaboraiah"},"message":"msm: perf: Protect buffer overflow due to malicious user\n\nIn function krait_pmu_disable_event, parameter hwc comes from\nuserspace and is untrusted.The function krait_clearpmu is called\nafter the function get_krait_evtinfo.\nFunction get_krait_evtinfo as parameter krait_evt_type variable\nwhich is used to extract the groupcode(reg) which is bound to\n KRAIT_MAX_L1_REG (is 3). After validation,one code path modifies\ngroupcode(reg):If this code path executes, groupcode(reg) can be\n3,4, 5, or 6. In krait_clearpmu groupcode used to access array\nkrait_functions whose size is 3. Since groupcode can be 3,4,5,6\naccessing array krait_functions lead to bufferoverlflow.\nThis change will validate groupcode not to exceed 3 .\n\nChange-Id: I48c92adda137d8a074b4e1a367a468195a810ca1\nCRs-fixed: 962450\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/BlackSoulxxx/kernel_sony_msm8974/commits/da1a64678e8a4bb1929ebdd2f7b896cc5c6cec58"},{"sha":"5483e69cf01b5b3db5b37c58d6177b22c9b0c141","author":{"email":"7b5808c70170881a2434b8413e6a5a4d85400d1e@codeaurora.org","name":"Kishor PK"},"message":"msm: perf: validate input argument of ev_constraints functions\n\nValidate input argument before writing into\npmu_constraints_codes array.\n\nCRs-Fixed: 975404\nChange-Id: Id68b1d2201ab1af783af2236833b1dc894e08cc7\nSigned-off-by: Kishor PK <kpbhat@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/BlackSoulxxx/kernel_sony_msm8974/commits/5483e69cf01b5b3db5b37c58d6177b22c9b0c141"},{"sha":"40d5c5f01d103bf11fafe8e0b6bbe131d21fd4f8","author":{"email":"f66cc59a245d146467efed1402e6d2f55ef6f900@google.com","name":"Patrick Tjin"},"message":"msm: ipc_socket: fix leak of kernel memory to userspace\n\nLimit the size of copy to the minimum of what was asked\nfor or the number of results returned to prevent leaking of\nuninitialized kernel memory to userspace.\n\nBug: 24157888\n\nSigned-off-by: Patrick Tjin <pattjin@google.com>\nChange-Id: I39f2e56716a1543aa6e3fa42140dc18cc470faf9","distinct":true,"url":"https://api.github.com/repos/BlackSoulxxx/kernel_sony_msm8974/commits/40d5c5f01d103bf11fafe8e0b6bbe131d21fd4f8"}]}