{"push_id":1479116508,"size":82,"distinct_size":82,"ref":"refs/heads/n","head":"600dc8554a8eb4883a5998af1967c12611b36099","before":"c335ead69118a3dba174c78f952f3668e0ee1010","commits":[{"sha":"6bce519459353080af1585bbc57d217c67092c8c","author":{"name":"Ruchi Kandoi","email":"1d1bb2ca737b8740d7a99166510e781fa0bc7c0b@google.com"},"message":"uid_cputime: Check for the range while removing range of UIDs.\n\nChecking if the uid_entry->uid matches the uid intended to be removed will\nprevent deleting unwanted uid_entry.\nType cast the key for the hashtable to the same size, as when they were\ninserted. This will make sure that we can find the uid_entry we want.\n\nBug: 25195548\nChange-Id: I567942123cfb20e4b61ad624da19ec4cc84642c1\nSigned-off: Ruchi kandoi <kandoiruchi@google.com>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/6bce519459353080af1585bbc57d217c67092c8c"},{"sha":"ce8469306bff95064fac9ae6a230ce50f2104d19","author":{"name":"Jeff Vander Stoep","email":"3c7c1df314a95c4ce859cc668e778f3e3567dbe8@google.com"},"message":"Revert \"security: lsm_audit: add ioctl specific auditing\"\n\nThis reverts commit c8c3cd48e44fe12a41cd20e46d36fcfe5a759fd7.\n\nBug: 22846070\nChange-Id: Ibf79b4c76f22f0af2d39e377b551151837a782cd\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\n(cherry picked from commit ce753d2d1443156c89e84016a06357ccc3bfc978)","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/ce8469306bff95064fac9ae6a230ce50f2104d19"},{"sha":"4dfb60abbc524486cb53e7d5efecee81078d03b8","author":{"name":"Jeff Vander Stoep","email":"3c7c1df314a95c4ce859cc668e778f3e3567dbe8@google.com"},"message":"security: add ioctl specific auditing to lsm_audit\n\n(cherry pick from commit 671a2781ff01abf4fdc8904881fc3abd3a8279af)\n\nAdd information about ioctl calls to the LSM audit data. Log the\nfile path and command number.\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Nick Kralevich <nnk@google.com>\n[PM: subject line tweak]\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nBug: 22846070\nChange-Id: Iccba24f0f53e93595aaf16b2d3b04c02dac5f7a1\n\n(cherry picked from commit 5d6b7565325288975f18a4d5215b0727491e22b7)","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/4dfb60abbc524486cb53e7d5efecee81078d03b8"},{"sha":"ef15951a729ec969df732cb8d9c385f59b5ed846","author":{"name":"Ruchi Kandoi","email":"1d1bb2ca737b8740d7a99166510e781fa0bc7c0b@google.com"},"message":"wakeup: Add the guard condition for len in pm_get_active_wakeup_sources\n\nCheck if the len is not greater than maximum to prevent buffer overflow.\n\nSigned-off-by: Ruchi Kandoi <kandoiruchi@google.com>\nChange-Id: I575b0a72bb5448b68353408d71fa8b83420c9088","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/ef15951a729ec969df732cb8d9c385f59b5ed846"},{"sha":"699f22eadffc7a0067723b7d057bc32474f429da","author":{"name":"John Stultz","email":"43a1884c0f1dca3e1332089eeb4ce74424519f3b@linaro.org"},"message":"ANDROID: exec_domains: Disable request_module() call for personalities\n\n(cherry pick from commit a9ac1262ce80c287562e604f3bb24f232fcb686e)\n\nWith Android M, Android environments use a separate execution\ndomain for 32bit processes.\nSee:\nhttps://android-review.googlesource.com/#/c/122131/\n\nThis results in systems that use kernel modules to see selinux\naudit noise like:\n  type=1400 audit(28.989:15): avc: denied { module_request } for\n  pid=1622 comm=\"app_process32\" kmod=\"personality-8\"\n  scontext=u:r:zygote:s0 tcontext=u:r:kernel:s0 tclass=system\n\nWhile using kernel modules is unadvised, some systems do require\nthem.\n\nThus to avoid developers adding sepolicy exceptions to allow for\nrequest_module calls, this patch disables the logic which tries\nto call request_module for the 32bit personality (ie:\npersonality-8), which doesn't actually exist.\n\nSigned-off-by: John Stultz <john.stultz@linaro.org>\nChange-Id: I32774083340e0f928d0e3bb4295517218e23c66c","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/699f22eadffc7a0067723b7d057bc32474f429da"},{"sha":"eeef321aab6681476db95aaeaac717bfad7bffed","author":{"name":"Riley Andrews","email":"ec394072c869ae2f7d03d8e22257cb0e3246a0c6@google.com"},"message":"sched: add sched blocked tracepoint which dumps out context of sleep.\n\nDecare war on uninterruptible sleep. Add a tracepoint which\nwalks the kernel stack and dumps the first non-scheduler function\ncalled before the scheduler is invoked.\n\nChange-Id: I19e965d5206329360a92cbfe2afcc8c30f65c229\nSigned-off-by: Riley Andrews <riandrews@google.com>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/eeef321aab6681476db95aaeaac717bfad7bffed"},{"sha":"fb9c6b30add47562aac39d0969425ef0ff6cde94","author":{"name":"Ruchi Kandoi","email":"1d1bb2ca737b8740d7a99166510e781fa0bc7c0b@google.com"},"message":"trace: cpufreq: Add tracing for min/max cpufreq\n\nChange-Id: I73f6ec437c1f805437d9376abb6510d1364b07ec\nSigned-off-by: Ruchi Kandoi <kandoiruchi@google.com>\n\nConflicts:\n\tdrivers/cpufreq/cpufreq.c\n\tinclude/trace/events/power.h","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/fb9c6b30add47562aac39d0969425ef0ff6cde94"},{"sha":"af679ba707d814a821434e7f95236736e003a540","author":{"name":"Oleg Nesterov","email":"66df68a59e3b21ba65b9e7f3fee04bb7abd7ddc2@redhat.com"},"message":"UPSTREAM: proc: make proc_fd_permission() thread-friendly\n\n(cherry pick from commit 96d0df79f2644fc823f26c06491e182d87a90c2a)\n\nproc_fd_permission() says \"process can still access /proc/self/fd after it\nhas executed a setuid()\", but the \"task_pid() = proc_pid() check only\nhelps if the task is group leader, /proc/self points to\n/proc/<leader-pid>.\n\nChange this check to use task_tgid() so that the whole thread group can\naccess its /proc/self/fd or /proc/<tid-of-sub-thread>/fd.\n\nNotes:\n\t- CLONE_THREAD does not require CLONE_FILES so task->files\n\t  can differ, but I don't think this can lead to any security\n\t  problem. And this matches same_thread_group() in\n\t  __ptrace_may_access().\n\n\t- /proc/self should probably point to /proc/<thread-tid>, but\n\t  it is too late to change the rules. Perhaps it makes sense\n\t  to add /proc/thread though.\n\nTest-case:\n\n\tvoid *tfunc(void *arg)\n\t{\n\t\tassert(opendir(\"/proc/self/fd\"));\n\t\treturn NULL;\n\t}\n\n\tint main(void)\n\t{\n\t\tpthread_t t;\n\t\tpthread_create(&t, NULL, tfunc, NULL);\n\t\tpthread_join(t, NULL);\n\t\treturn 0;\n\t}\n\nfails if, say, this executable is not readable and suid_dumpable = 0.\n\nSigned-off-by: Oleg Nesterov <oleg@redhat.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nBug: 26016905\nChange-Id: Ifdd6403a8fccd073122e89d3547c13ccc08f0dce","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/af679ba707d814a821434e7f95236736e003a540"},{"sha":"78b583b4817da63813aff12028088840b25f12a0","author":{"name":"Oleg Nesterov","email":"66df68a59e3b21ba65b9e7f3fee04bb7abd7ddc2@redhat.com"},"message":"UPSTREAM: proc: actually make proc_fd_permission() thread-friendly\n\n(cherry pick from commit 54708d2858e79a2bdda10bf8a20c80eb96c20613)\n\nThe commit 96d0df79f264 (\"proc: make proc_fd_permission() thread-friendly\")\nfixed the access to /proc/self/fd from sub-threads, but introduced another\nproblem: a sub-thread can't access /proc/<tid>/fd/ or /proc/thread-self/fd\nif generic_permission() fails.\n\nChange proc_fd_permission() to check same_thread_group(pid_task(), current).\n\nFixes: 96d0df79f264 (\"proc: make proc_fd_permission() thread-friendly\")\nReported-by: \"Jin, Yihua\" <yihua.jin@intel.com>\nSigned-off-by: Oleg Nesterov <oleg@redhat.com>\nCc: \"Eric W. Biederman\" <ebiederm@xmission.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nBug: 26016905\nChange-Id: I1894c78d0b13f0bde8cde84bd142ba67590dc0f1","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/78b583b4817da63813aff12028088840b25f12a0"},{"sha":"4d8932236f51ed6b814148baae52e02bce54b882","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"FROMLIST: mm: mmap: Add new /proc tunable for mmap_base ASLR.\n\n(cherry picked from commit https://lkml.org/lkml/2015/12/21/337)\n\nASLR  only uses as few as 8 bits to generate the random offset for the\nmmap base address on 32 bit architectures. This value was chosen to\nprevent a poorly chosen value from dividing the address space in such\na way as to prevent large allocations. This may not be an issue on all\nplatforms. Allow the specification of a minimum number of bits so that\nplatforms desiring greater ASLR protection may determine where to place\nthe trade-off.\n\nBug: 24047224\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: I66ac01c6f4f2c8dcfc84d1f1e99490b8385b3ed4","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/4d8932236f51ed6b814148baae52e02bce54b882"},{"sha":"c794148bf2748a27d29584f3f644f49ef486f16e","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"FROMLIST: arm: mm: support ARCH_MMAP_RND_BITS.\n\n(cherry picked from commit https://lkml.org/lkml/2015/12/21/341)\n\narm: arch_mmap_rnd() uses a hard-code value of 8 to generate the\nrandom offset for the mmap base address.  This value represents a\ncompromise between increased ASLR effectiveness and avoiding\naddress-space fragmentation. Replace it with a Kconfig option, which\nis sensibly bounded, so that platform developers may choose where to\nplace this compromise. Keep 8 as the minimum acceptable value.\n\nBug: 24047224\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: I89c23a8737c981116a67381c241fdd5556e2b043","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/c794148bf2748a27d29584f3f644f49ef486f16e"},{"sha":"7428499251e5d3a4e9f01f0abb0cd0e4cdb32e80","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"BACKPORT: FROMLIST: arm64: mm: support ARCH_MMAP_RND_BITS.\n\n(cherry picked from commit https://lkml.org/lkml/2015/12/21/340)\n\narm64: arch_mmap_rnd() uses STACK_RND_MASK to generate the\nrandom offset for the mmap base address.  This value represents a\ncompromise between increased ASLR effectiveness and avoiding\naddress-space fragmentation. Replace it with a Kconfig option, which\nis sensibly bounded, so that platform developers may choose where to\nplace this compromise. Keep default values as new minimums.\n\nBug: 24047224\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: I7caf105b838cfc3ab55f275e1a061eb2b77c9a2a","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/7428499251e5d3a4e9f01f0abb0cd0e4cdb32e80"},{"sha":"f3c206b44ee3f8303f64761a85afde455a886c8c","author":{"name":"dcashman","email":"3d629d435dc38ffde22fdd784f2eb4e36e384463@google.com"},"message":"FROMLIST: x86: mm: support ARCH_MMAP_RND_BITS.\n\n(cherry picked from commit https://lkml.org/lkml/2015/12/21/339)\n\nx86: arch_mmap_rnd() uses hard-coded values, 8 for 32-bit and 28 for\n64-bit, to generate the random offset for the mmap base address.\nThis value represents a compromise between increased ASLR\neffectiveness and avoiding address-space fragmentation. Replace it\nwith a Kconfig option, which is sensibly bounded, so that platform\ndevelopers may choose where to place this compromise. Keep default\nvalues as new minimums.\n\nBug: 24047224\nSigned-off-by: Daniel Cashman <dcashman@android.com>\nSigned-off-by: Daniel Cashman <dcashman@google.com>\nChange-Id: I4f0cb7159406166fbc9f8938ba8d3e24b72eeefb","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/f3c206b44ee3f8303f64761a85afde455a886c8c"},{"sha":"ddbf348a4295060c3ebaf94446a7fc07cbeb2d6d","author":{"name":"Kees Cook","email":"999bfbbf6e15a9d6aba3dfebadcec55340f87c3f@chromium.org"},"message":"UPSTREAM: seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO\n\nThe value resulting from the SECCOMP_RET_DATA mask could exceed MAX_ERRNO\nwhen setting errno during a SECCOMP_RET_ERRNO filter action.  This makes\nsure we have a reliable value being set, so that an invalid errno will not\nbe ignored by userspace.\n\nSigned-off-by: Kees Cook <keescook@chromium.org>\nReported-by: Dmitry V. Levin <ldv@altlinux.org>\nCc: Andy Lutomirski <luto@amacapital.net>\nCc: Will Drewry <wad@chromium.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\n\n(cherry picked from commit 580c57f1076872ebc2427f898b927944ce170f2d)\nSigned-off-by: Kees Cook <keescook@google.com>\nChange-Id: I069b2e858c626283819b9f0fc308c35c3c847b55","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/ddbf348a4295060c3ebaf94446a7fc07cbeb2d6d"},{"sha":"da1c674259603d401de2cb72a22e89d183e3d39d","author":{"name":"Martijn Coenen","email":"af3eddcbb421ceabee93fcfeaefd7af1c6299549@google.com"},"message":"UPSTREAM: memcg: Only free spare array when readers are done\n\nA spare array holding mem cgroup threshold events is kept around\nto make sure we can always safely deregister an event and have an\narray to store the new set of events in.\n\nIn the scenario where we're going from 1 to 0 registered events, the\npointer to the primary array containing 1 event is copied to the spare\nslot, and then the spare slot is freed because no events are left.\nHowever, it is freed before calling synchronize_rcu(), which means\nreaders may still be accessing threshold->primary after it is freed.\n\nFixed by only freeing after synchronize_rcu().\n\nChange-Id: Iee3ad8eb400612ec24898832eb19ff34eb2aecb4\nSigned-off-by: Martijn Coenen <maco@google.com>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/da1c674259603d401de2cb72a22e89d183e3d39d"},{"sha":"443beb8de308030f3e6241fbc9680be8f51542ba","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: diag: split inet_diag_dump_one_icsk into two\n\nCurrently, inet_diag_dump_one_icsk finds a socket and then dumps\nits information to userspace. Split it into a part that finds the\nsocket and a part that dumps the information.\n\n[Backport of net-next b613f56ec9baf30edf5d9d607b822532a273dad7]\n\nChange-Id: I7aec27aca9c3e395e41332fe4e59d720042e0609\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/443beb8de308030f3e6241fbc9680be8f51542ba"},{"sha":"136bfedf8b4b57a23ebc8b451108af6653588692","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: diag: Add the ability to destroy a socket.\n\nThis patch adds a SOCK_DESTROY operation, a destroy function\npointer to sock_diag_handler, and a diag_destroy function\npointer.  It does not include any implementation code.\n\n[Backport of net-next 64be0aed59ad519d6f2160868734f7e278290ac1]\n\nChange-Id: I3db262a7e41f1f8452ff0968d4001234598190d8\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/136bfedf8b4b57a23ebc8b451108af6653588692"},{"sha":"568f7ccb8059a378736cd3b3d1c228414a0ff5fc","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: diag: Support SOCK_DESTROY for inet sockets.\n\nThis passes the SOCK_DESTROY operation to the underlying protocol\ndiag handler, or returns -EOPNOTSUPP if that handler does not\ndefine a destroy operation.\n\nMost of this patch is just renaming functions. This is not\nstrictly necessary, but it would be fairly counterintuitive to\nhave the code to destroy inet sockets be in a function whose name\nstarts with inet_diag_get.\n\n[Backport of net-next 6eb5d2e08f071c05ecbe135369c9ad418826cab2]\n\nChange-Id: Iee2c858bf11c48f54890b85b87821a2a2d7109e1\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/568f7ccb8059a378736cd3b3d1c228414a0ff5fc"},{"sha":"5bc53fe46d6f7e5ef915ca979feab6c3fbe1aa49","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: diag: Support destroying TCP sockets.\n\nThis implements SOCK_DESTROY for TCP sockets. It causes all\nblocking calls on the socket to fail fast with ECONNABORTED and\ncauses a protocol close of the socket. It informs the other end\nof the connection by sending a RST, i.e., initiating a TCP ABORT\nas per RFC 793. ECONNABORTED was chosen for consistency with\nFreeBSD.\n\n[Backport of net-next c1e64e298b8cad309091b95d8436a0255c84f54a]\n\nChange-Id: Ice9aad37741fe497341d1d2a51e0b70601a99c90\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/5bc53fe46d6f7e5ef915ca979feab6c3fbe1aa49"},{"sha":"7fe8ac2aba28db8f5ff5736b4e24d503575d1fef","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"net: tcp: deal with listen sockets properly in tcp_abort.\n\nWhen closing a listen socket, tcp_abort currently calls\ntcp_done without clearing the request queue. If the socket has a\nchild socket that is established but not yet accepted, the child\nsocket is then left without a parent, causing a leak.\n\nFix this by setting the socket state to TCP_CLOSE and calling\ninet_csk_listen_stop with the socket lock held, like tcp_close\ndoes.\n\nTested using net_test. With this patch, calling SOCK_DESTROY on a\nlisten socket that has an established but not yet accepted child\nsocket results in the parent and the child being closed, such\nthat they no longer appear in sock_diag dumps.\n\n[Backport of net-next 2010b93e9317cc12acd20c4aed385af7f9d1681e]\n\nChange-Id: I2b9c38fab194b3c4e11439047ead9582c811d4c2\nReported-by: Eric Dumazet <eric.dumazet@gmail.com>\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/isnehalkiran/kernel-msm-3.10/commits/7fe8ac2aba28db8f5ff5736b4e24d503575d1fef"}]}
{"actor":{"display_login":"isnehalkiran"}}