{"push_id":1282332069,"size":34,"distinct_size":34,"ref":"refs/heads/cm-13.0","head":"ab11dbfa97a79576babc752d92e04846968fad39","before":"fec6f6f6eefc4ce3f3b774279b1a7a7689cdd7b3","commits":[{"sha":"b5eb67744215b3434a36b9251e28da3dc2a638a6","author":{"name":"Rajesh Kemisetti","email":"eb3c69d0c46395023fcec2d6245f10d8d8475c76@codeaurora.org"},"message":"msm: kgsl: Add missing checks for alloc size and sglen\n\nIn _kgsl_sharedmem_page_alloc(), check for boundary limits\nof requested alloc size before honoring and make sure sglen\nis greater than zero before marking it as end of sg list.\n\nChange-Id: I8b9e225e515a0f31593df6f4cad253236475d0ae\nSigned-off-by: Rajesh Kemisetti <rajeshk@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/b5eb67744215b3434a36b9251e28da3dc2a638a6"},{"sha":"f370ee82abc626c3faa6393feda8333184ccea96","author":{"name":"VijayaKumar T M","email":"1d0ce10e1a0c1123629a10b62c852901ec1872b2@codeaurora.org"},"message":"msm: camera: isp: Fix warning and errors based on static analysis\n\nThis change fixes the warning/errors from static analysis\n\nConflicts:\n        drivers/media/platform/msm/camera_v2/isp/msm_buf_mgr.c\n        drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c\n        drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c\n        drivers/media/platform/msm/camera_v2/ispif/msm_ispif.c\n\n-Fix checkpatch errors and warnings.\n\nCRs-fixed: 992942\nChange-Id: Iaf90ab4c1d17f903d03458d76cab1b4c0a5c8836\nSigned-off-by: Jing Zhou <jzhou70@codeaurora.org>\nSigned-off-by: VijayaKumar T M <vtmuni@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/f370ee82abc626c3faa6393feda8333184ccea96"},{"sha":"ee0e3a1f17957cb739ee65f811915a1937216869","author":{"name":"VijayaKumar T M","email":"1d0ce10e1a0c1123629a10b62c852901ec1872b2@codeaurora.org"},"message":"msm: camera: ispif: Validate VFE num input during reset\n\nUserspace supplies the actual number of used VFEs in session to ISPIF.\nValidate the userspace input value and if found to be invalid, return\nerror.\n\nCRs-Fixed: 898074\nSigned-off-by: Venu Yeshala <vyeshala@codeaurora.org>\nSigned-off-by: VijayaKumar T M <vtmuni@codeaurora.org>\nChange-Id: I3288ddb6404e817a705a92281b4c54666f372c56","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/ee0e3a1f17957cb739ee65f811915a1937216869"},{"sha":"42e58eb20308e21002315dfe9cd9495d5fc3028d","author":{"name":"Weiyin Jiang","email":"25745fd6cb0247e11bcb32583c6893d37cc23b30@codeaurora.org"},"message":"ASoC: msm: audio-effects: fix stack overread and heap overwrite\n\nFix overwrite of updt_params allocated in heap, and stack overread\nwhere param pointer is passed from user space.\n\nCRs-Fixed: 989628\nChange-Id: Ida8bdb7da2fcb97023dce3b6eafe4b899a51cb66\nSigned-off-by: Weiyin Jiang <wjiang@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/42e58eb20308e21002315dfe9cd9495d5fc3028d"},{"sha":"3625ac78cafcb40986bf56631729f6cd51353d47","author":{"name":"Patrick Daly","email":"78479ab4153ef5619bc927755d9ca2e5cd01b75a@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: DAP: Fix unprotected userspace access\n\nUse get_user() & friends to access userspace addresses.\n\nChange-Id: I9741a60e53f6253da27913175e9b8c4abbf50db9\nSigned-off-by: Patrick Daly <pdaly@codeaurora.org>\nSigned-off-by: Pradnya Chaphekar <pradnyac@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/3625ac78cafcb40986bf56631729f6cd51353d47"},{"sha":"b0e3e94825224ed6898a1dfe78a966b22d9671db","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"msm: camera: ispif: Validate VFE num input during reset\"","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/b0e3e94825224ed6898a1dfe78a966b22d9671db"},{"sha":"78ba753d76b8be3a58a490d7f552671e313f1a7b","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"ASoC: msm: audio-effects: fix stack overread and heap overwrite\"","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/78ba753d76b8be3a58a490d7f552671e313f1a7b"},{"sha":"bb175ed2969a1699ca47beec0c3f22cda182a1a5","author":{"name":"Ashish Jain","email":"3e10641df9807bff93b1e25d356444d11eb9880f@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: DAP: Fix buffer overflow\n\nAdd check to avoid out of bound access.\nCheck return value of get_user api.\n\nCRs-Fixed: 997025\nChange-Id: Ibbace116ac206007fa1928555838285304737737\nSigned-off-by: Ashish Jain <ashishj@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/bb175ed2969a1699ca47beec0c3f22cda182a1a5"},{"sha":"abded73a2a7bcba9a5cb1b0c361e96af424ad5f1","author":{"name":"Vijayavardhan Vennapusa","email":"fd1e89cda16e187a1514e87daf32db280e01223d@codeaurora.org"},"message":"USB: dwc3: debugfs: Add boundary check in dwc3_store_ep_num()\n\nUser can pass arguments as part of write to requests and endpoint number\nwill be calculated based on the arguments. There is a chance that driver\ncan access ep structue that is not allocated due to invalid arguments\npassed by user. Hence fix the issue by having check and return error in\ncase of invalid arguments.\n\nChange-Id: I060ea878b55ce0f9983b91c50e58718c8a2c2fa1\nSigned-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/abded73a2a7bcba9a5cb1b0c361e96af424ad5f1"},{"sha":"0c148b9a9028c566eac680f19e5d664b483cdee3","author":{"name":"Srinivasarao P","email":"5838be2f68866147a6b98dc0567ce3ec89ebe5fc@codeaurora.org"},"message":"qcom: ssr: Fix possible overflow when copying firmware name\n\nArray overflow can occur in firmware_name_store(), if the variable\nbuf contains the string larger than size of subsys->desc->fw_name\n\nChange-Id: Ice39d7a1eb0b5f53125cc5d528021a99b9f7ff90\nSigned-off-by: Srinivasarao P <spathi@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/0c148b9a9028c566eac680f19e5d664b483cdee3"},{"sha":"02ab815d6f6e786b8db96f26ff057410e9c4f8b9","author":{"name":"Manu Gautam","email":"876e9847b0240db58d29900a57b080fdd1e2cc11@codeaurora.org"},"message":"usb: f_serial: Check for SMD data length in GSER_IOCTL\n\nIf user tries to send SMD data more than the driver\nbuffer can handle then fail the same and print\nerror message. This smd_write is exposed to userspace\nthrough ioctl using a misc device.\n\nChange-Id: Ie8a1c1c0799cd10cef512ad6b1e1e95001dd43b2\nSigned-off-by: Manu Gautam <mgautam@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/02ab815d6f6e786b8db96f26ff057410e9c4f8b9"},{"sha":"dfbf602dda47077bbb3e1aad86e5dacb33dd7875","author":{"name":"Ashish Jain","email":"3e10641df9807bff93b1e25d356444d11eb9880f@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: DAP: Add check to validate data length\n\nValidate input data length to ensure only relevant data\nis copied.\n\nCRs-Fixed: 1027585\nChange-Id: I67eb4f162f944bbf4d9e55fb8fe93759e6b8ff91\nSigned-off-by: Ashish Jain <ashishj@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/dfbf602dda47077bbb3e1aad86e5dacb33dd7875"},{"sha":"e80ed24f9c567a404bf9b2fbfa287706b7815fda","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"ASoC: msm: qdsp6v2: DAP: Add check to validate data length\"","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/e80ed24f9c567a404bf9b2fbfa287706b7815fda"},{"sha":"d51e4ceef6423fccc45a928931c377d93d0041b1","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"USB: dwc3: debugfs: Add boundary check in dwc3_store_ep_num()\"","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/d51e4ceef6423fccc45a928931c377d93d0041b1"},{"sha":"25b08e1a8eaab01c491a598f113d2fba4b21b538","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge AU_LINUX_ANDROID_LA.BF64.1.2.2_RB4.06.00.01.180.059 on remote branch\n\nChange-Id: I661de40926d030960d233d33c8f761c2b7570648","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/25b08e1a8eaab01c491a598f113d2fba4b21b538"},{"sha":"27769bc5e82dc7ea2475681e7e419fee6a219cbe","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"usb: f_serial: Check for SMD data length in GSER_IOCTL\"","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/27769bc5e82dc7ea2475681e7e419fee6a219cbe"},{"sha":"6e22d1e557ed357cb0eefb2d656871380161b2ca","author":{"name":"Alan Stern","email":"5c4cbde65af01ad64f5b2177d0cd78ab5b01e5a1@rowland.harvard.edu"},"message":"USB: fix invalid memory access in hub_activate()\n\nCommit 8520f38099cc (\"USB: change hub initialization sleeps to\ndelayed_work\") changed the hub_activate() routine to make part of it\nrun in a workqueue.  However, the commit failed to take a reference to\nthe usb_hub structure or to lock the hub interface while doing so.  As\na result, if a hub is plugged in and quickly unplugged before the work\nroutine can run, the routine will try to access memory that has been\ndeallocated.  Or, if the hub is unplugged while the routine is\nrunning, the memory may be deallocated while it is in active use.\n\nThis patch fixes the problem by taking a reference to the usb_hub at\nthe start of hub_activate() and releasing it at the end (when the work\nis finished), and by locking the hub interface while the work routine\nis running.  It also adds a check at the start of the routine to see\nif the hub has already been disconnected, in which nothing should be\ndone.\n\nChange-Id: Id2899a7ca22aebc83c767317af71036966bc86e6\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: Alexandru Cornea <alexandru.cornea@intel.com>\nTested-by: Alexandru Cornea <alexandru.cornea@intel.com>\nFixes: 8520f38099cc (\"USB: change hub initialization sleeps to delayed_work\")\nCC: <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nGit-commit: e50293ef9775c5f1cf3fcc093037dd6a8c5684ea\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nSigned-off-by: Chandana Kishori Chiluveru <cchiluve@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/6e22d1e557ed357cb0eefb2d656871380161b2ca"},{"sha":"b3f50c4659dfd3cea2389ec935a6c0dfa26e6075","author":{"name":"Ashish Jain","email":"3e10641df9807bff93b1e25d356444d11eb9880f@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: DAP: Allocate param buffer with correct size\n\nSize of param buffer should be big enough to hold param length\nof data and param payload.\n\nCRs-Fixed: 1033525\nChange-Id: I6fa58f87a7c7df5f0485ea5b368ea090eb8bedb4\nSigned-off-by: Ashish Jain <ashishj@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/b3f50c4659dfd3cea2389ec935a6c0dfa26e6075"},{"sha":"9b1b165f72d0a6b2db33ee44544ba532580fb941","author":{"name":"Ashish Jain","email":"3e10641df9807bff93b1e25d356444d11eb9880f@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: DAP: Add check to validate param length\n\nTo avoid buffer overflow, validate input length used to\nfetch visualizer data.\n\nCRs-Fixed: 1033540\nChange-Id: I445d1ba3bce47308bc31ae24a70d5ee358f22a2d\nSigned-off-by: Ashish Jain <ashishj@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/9b1b165f72d0a6b2db33ee44544ba532580fb941"},{"sha":"9923b05463a4ca9b851f545c0256134feef3c0be","author":{"name":"Weiyin Jiang","email":"25745fd6cb0247e11bcb32583c6893d37cc23b30@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: support multi-ch and samplerate > 48K for NT wma\n\nNT and compress offload wma mode are exercised, we need to implement\nchanges in framework so that both have the same restrictions.\n\nMeanwhile, we will remove any limitation in driver to support\nmultichannel and sample rate more than 48KHz wma playback in NT path.\n\nAdd extra option to support default channel mapping for both\nback-speaker and side-speaker flavor.\n\nCRs-Fixed: 870824\nChange-Id: I639fb29a880f774502c8b005577cd9c62162c30d\nSigned-off-by: Weiyin Jiang <wjiang@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/thune-xiaobai/android_kernel_xiaomi_libra/commits/9923b05463a4ca9b851f545c0256134feef3c0be"}]}
{"actor":{"display_login":"thune-xiaobai"}}