{"push_id":1053100630,"size":10,"distinct_size":1,"ref":"refs/heads/Elite-merged","head":"0b6932934dfbf7935187fc2cbe73f93d50159ba0","before":"4543422c615feab43e8e6b5606d04e223946aa14","commits":[{"sha":"22d61e0a1408e4a38b2cd1f13642b75633df012e","author":{"email":"f66cc59a245d146467efed1402e6d2f55ef6f900@google.com","name":"Patrick Tjin"},"message":"net: wireless: bcmdhd: Do not print out device name on invalid length\n\nBug: 27142322\n\nChange-Id: Ifd2a311bc15124f629c02ecc0340504a965b70a9\nSigned-off-by: Patrick Tjin <pattjin@google.com>","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/22d61e0a1408e4a38b2cd1f13642b75633df012e"},{"sha":"a85ad8f77bf313f51234d510626de918d4b5a712","author":{"email":"f66cc59a245d146467efed1402e6d2f55ef6f900@google.com","name":"Patrick Tjin"},"message":"misc/drv2605: Fixup security issues with data access\n\nBug: 25981545\n\nSigned-off-by: Patrick Tjin <pattjin@google.com>\nChange-Id: I673e55c20b5e86309fdf286b7a902662abe6dc00","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/a85ad8f77bf313f51234d510626de918d4b5a712"},{"sha":"b31ac1e5622eb8df8e34965e58558bbe6b34ca3a","author":{"email":"8f8b6109cd5e7b75746932bf5dcf69e763e1f0b2@codeaurora.org","name":"Deva Ramasubramanian"},"message":"msm: vidc: Do sanity check for different IOCTL cmd\n\nWrong buffer length or buffer type sent by V4L2 client\nis not handled properly in V4L2 framework, which results\nin page fault situation in different IOCTL functions\nlike prepare buf. Do a sanity check for the same.\n\nAuthor: Pushkaraj Patil <ppatil@codeaurora.org>\n\nChange-Id: I795076e8f7fc6d511eb728f44cd50015e704ffa1\nSigned-off-by: Pushkaraj Patil <ppatil@codeaurora.org>\nSigned-off-by: Praveen Chavan <pchavan@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/b31ac1e5622eb8df8e34965e58558bbe6b34ca3a"},{"sha":"f46735f3f4d7316de8ea276b776759b6963127dc","author":{"email":"8f8b6109cd5e7b75746932bf5dcf69e763e1f0b2@codeaurora.org","name":"Deva Ramasubramanian"},"message":"msm: vidc: Make buffer validity checks stronger\n\nCheck for the exact number of planes that we advertised to the client\nrather than the worst-case checks.\n\nSigned-off-by: Deva Ramasubramanian <dramasub@codeaurora.org>\n\nChange-Id: Ibaf705367db98beb0e01bb2c3087126cf2ba73e8\nSigned-off-by: Deva Ramasubramanian <dramasub@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/f46735f3f4d7316de8ea276b776759b6963127dc"},{"sha":"a82b180bb119f23c583c8d8069881d7ea7e906f0","author":{"email":"8aceadea1e0c82daf6b8c0d881366d29d83d4981@codeaurora.org","name":"Skylar Chang"},"message":"msm: ipa: fix the mux_channel buffer overflow\n\nAdd the check on ipa wan-driver to check if\nreceiving more than MAX_NUM_OF_MUX_CHANNEL times\ndifferent RMNET_IOCTL_ADD_MUX_CHANNEL ioctls\nfrom netmgrd.\n\nBug: 27316871\nChange-Id: I335bcaf9e15ed51f72c9999aa6f05643065eb8ad\nSigned-off-by: Yuan Lin <yualin@google.com>","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/a82b180bb119f23c583c8d8069881d7ea7e906f0"},{"sha":"06ec64c1d65f5a57d51dd2883b15633cdd61941c","author":{"email":"d1996fe015c1f347dddf6c16199179596b8014db@codeaurora.org","name":"Naveen Ramaraj"},"message":"msm: perf: validate input argument of ev_constraints functions\n\nValidate input argument before writing into pmu_constraints_codes\narray\n\nChange-Id: Id68b1d2201ab1af783af2236833b1dc894e08cc7\nSigned-off-by: Kishor PK <kpbhat@codeaurora.org>\nSigned-off-by: Naveen Ramaraj <nramaraj@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/06ec64c1d65f5a57d51dd2883b15633cdd61941c"},{"sha":"86f0372f71a5cebe0dec80ce5b0c881eb47ec05e","author":{"email":"f66cc59a245d146467efed1402e6d2f55ef6f900@google.com","name":"Patrick Tjin"},"message":"Keep history after reset to 9a3e9ef","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/86f0372f71a5cebe0dec80ce5b0c881eb47ec05e"},{"sha":"7b1def2717a2cbba522cea1165c069825c30dfca","author":{"email":"73675debcd8a436be48ec22211dcf44fe0df0a64@decadent.org.uk","name":"Ben Hutchings"},"message":"pipe: iovec: Fix memory corruption when retrying atomic copy as non-atomic\n\npipe_iov_copy_{from,to}_user() may be tried twice with the same iovec,\nthe first time atomically and the second time not.  The second attempt\nneeds to continue from the iovec position, pipe buffer offset and\nremaining length where the first attempt failed, but currently the\npipe buffer offset and remaining length are reset.  This will corrupt\nthe piped data (possibly also leading to an information leak between\nprocesses) and may also corrupt kernel memory.\n\nThis was fixed upstream by commits f0d1bec9d58d (\"new helper:\ncopy_page_from_iter()\") and 637b58c2887e (\"switch pipe_read() to\ncopy_page_to_iter()\"), but those aren't suitable for stable.  This fix\nfor older kernel versions was made by Seth Jennings for RHEL and I\nhave extracted it from their update.\n\nCVE-2015-1805\n\nBug: 27275324\nChange-Id: I459adb9076fcd50ff1f1c557089c4e421b036ec4\nReferences: https://bugzilla.redhat.com/show_bug.cgi?id=1202855\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n(cherry picked from commit 85c34d007116f8a8aafb173966a605fb03532f45)","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/7b1def2717a2cbba522cea1165c069825c30dfca"},{"sha":"ae8e7adfc76546ce6f79f56a56fc133b5e0de043","author":{"email":"f66cc59a245d146467efed1402e6d2f55ef6f900@google.com","name":"Patrick Tjin"},"message":"Revert \"Keep history after reset to 9a3e9ef\"\n\nThis reverts commit 86f0372f71a5cebe0dec80ce5b0c881eb47ec05e, reversing\nchanges made to 06ec64c1d65f5a57d51dd2883b15633cdd61941c.\n\nChange-Id: I8bf3d97e292de687b29efff33950ddf779cbb842\nSigned-off-by: Patrick Tjin <pattjin@google.com>","distinct":false,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/ae8e7adfc76546ce6f79f56a56fc133b5e0de043"},{"sha":"0b6932934dfbf7935187fc2cbe73f93d50159ba0","author":{"email":"054f6175462eb9de5b827969140a0092efb4e374@gmail.com","name":"Forrest Marble"},"message":"Merge remote-tracking branch 'remotes/android/android-msm-shamu-3.10-marshmallow-mr1' into Elite-merged","distinct":true,"url":"https://api.github.com/repos/Elite-Kernels/elite_shamu/commits/0b6932934dfbf7935187fc2cbe73f93d50159ba0"}]}