{"push_id":1230324909,"size":18,"distinct_size":18,"ref":"refs/heads/maul","head":"46d28b28a500adbdaf93cbea0e82b0cb19d43ec6","before":"8987a6245bbdefedbd3d99fe679f728b6b962683","commits":[{"sha":"0b60f0d4eb68f109faaf68f35044a34282020c38","author":{"name":"Trevor Bunker","email":"eb816db881c3f52b05cfd207df4e71101d51cc3f@google.com"},"message":"spi-contexthub: fix double free vulnerability\n\nBug: 28817378\nChange-Id: I53efaddba41c7f4b1ebc4070fd4f4591e4243e35","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/0b60f0d4eb68f109faaf68f35044a34282020c38"},{"sha":"4261afa4edff61af043e997dfb2de6b5c2549272","author":{"name":"Veena Sambasivan","email":"f3dea2712a9835ef757537fe50b353b17bceb98a@codeaurora.org"},"message":"Revert \"Perf: arm64: stop counters when going into hotplug\"\n\nThis reverts commit ff90fe97c99e697d5f77290bd74a92b472375817 .\n(\"Perf: arm64: stop counters when going into hotplug\")\n\nThis change is being reverted so that it can be replaced\nby equivalent functionality from upstream.\n\nBug: 28086229\nChange-Id: Ib542f86b83617b8ea5e582f41e164cececb0e60f\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>\nSigned-off-by: Veena Sambasivan <veenas@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/4261afa4edff61af043e997dfb2de6b5c2549272"},{"sha":"c0c1d4d83166bfd5f275cc65a148722c92c12c83","author":{"name":"Veena Sambasivan","email":"f3dea2712a9835ef757537fe50b353b17bceb98a@codeaurora.org"},"message":"Revert \"Perf: arm64: restore registers after reset\"\n\nThis reverts commit d42a3dae16d93a45cf6f099c4b67697b0764496d .\n(\"Perf: arm64: restore registers after reset\")\n\nThis change is being reverted so that it can be replaced\nby equivalent functionality from upstream.\n\nBug: 28086229\nChange-Id: Ie217c0a655a961057badcd00732d96891d507e71\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>\nSigned-off-by: Veena Sambasivan <veenas@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/c0c1d4d83166bfd5f275cc65a148722c92c12c83"},{"sha":"946792b33755a0ed7c8d2f5ab48359280fe60746","author":{"name":"Veena Sambasivan","email":"f3dea2712a9835ef757537fe50b353b17bceb98a@codeaurora.org"},"message":"Revert \"Perf: arm64: fix disable of pmu irq during hotplug\"\n\nThis reverts commit fd64280eb500a20d26ef7d1e792233eeb00e74b4 .\n(\"Perf: arm64: fix disable of pmu irq during hotplug\")\n\nThis change is being reverted so that it can be replaced\nby equivalent functionality from upstream.\n\nBug: 28086229\nChange-Id: I94fb8218698d0bdda1c33b81ce16a0c0d3d326dd\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>\nSigned-off-by: Veena Sambasivan <veenas@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/946792b33755a0ed7c8d2f5ab48359280fe60746"},{"sha":"cb1f70c252cc76ebc9b8668597c7dddb1f75633e","author":{"name":"Veena Sambasivan","email":"f3dea2712a9835ef757537fe50b353b17bceb98a@codeaurora.org"},"message":"Revert \"Perf: arm64: support hotplug and power collapse\"\n\nThis reverts commit 19d3bf8ee8edafbbe36c8164fca09683571c8a1d .\n(\"Perf: arm64: support hotplug and power collapse\")\n\nThis change is being reverted so that it can be replaced\nby equivalent functionality from upstream.\n\nBug: 28086229\nChange-Id: Iffd577bb7d7070791749a79aabf3a07eaa202532\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>\nSigned-off-by: Veena Sambasivan <veenas@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/cb1f70c252cc76ebc9b8668597c7dddb1f75633e"},{"sha":"db3d74d19a7335a0adf0bf4cc0576e8e3720139c","author":{"name":"Veena Sambasivan","email":"f3dea2712a9835ef757537fe50b353b17bceb98a@codeaurora.org"},"message":"perf: arm64: implement CPU_PM notifier\n\nWhen a CPU is suspended (either through suspend-to-RAM or CPUidle),\nits PMU registers content can be lost, which means that counters\nregisters values that were initialized on power down entry have to be\nreprogrammed on power-up to make sure the counters set-up is preserved\n(ie on power-up registers take the reset values on Cold or Warm reset,\nwhich can be architecturally UNKNOWN).\n\nTo guarantee seamless profiling conditions across a core power down\nthis patch adds a CPU PM notifier to ARM pmus, that upon CPU PM\nentry/exit from low-power states saves/restores the pmu registers\nset-up (by using the ARM perf API), so that the power-down/up cycle does\nnot affect the perf behaviour (apart from a black-out period between\npower-up/down CPU PM notifications that is unavoidable).\n\nBug: 28086229\nCc: Will Deacon <will.deacon@arm.com>\nCc: Sudeep Holla <sudeep.holla@arm.com>\nCc: Daniel Lezcano <daniel.lezcano@linaro.org>\nCc: Mathieu Poirier <mathieu.poirier@linaro.org>\nCc: Mark Rutland <mark.rutland@arm.com>\nAcked-by: Ashwin Chaugule <ashwin.chaugule@linaro.org>\nAcked-by: Kevin Hilman <khilman@baylibre.com>\nSigned-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>\nSigned-off-by: Will Deacon <will.deacon@arm.com>\nGit-commit: da4e4f18afe0f3729d68f3785c5802f786d36e34\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\n[schikk@codeaurora.org: ported the change for 3.10 kernel]\nChange-Id: I249afadd85f96ec89989fa015090c484748abb17\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>\n\nSigned-off-by: Veena Sambasivan <veenas@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/db3d74d19a7335a0adf0bf4cc0576e8e3720139c"},{"sha":"9d3a3667d82bda548f28f38c406a81eff6c12715","author":{"name":"Veena Sambasivan","email":"f3dea2712a9835ef757537fe50b353b17bceb98a@codeaurora.org"},"message":"perf: arm64: fix RCU usage on pmu resume from low-power\n\nCommit ( perf: arm64: implement CPU_PM notifier)\nadded code in the arm perf infrastructure that allows the kernel to\nsave/restore perf counters whenever the CPU enters a low-power\nstate. The kernel saves/restores the counters for each active event\nthrough the armpmu_{stop/start} ARM pmu API, so that the low-power state\nenter/exit cycle is emulated through pmu start/stop operations for each\nevent in use.\n\nHowever, calling armpmu_start() for each active event on power up\nexecutes code that requires RCU locking (perf_event_update_userpage())\nto be functional, so, given that the core may call the CPU_PM notifiers\nwhile running the idle thread in an quiescent RCU state this is not\nallowed as detected through the following splat when kernel is run with\nCONFIG_PROVE_LOCKING enabled:\n\n[   49.293286]\n[   49.294761] ===============================\n[   49.298895] [ INFO: suspicious RCU usage. ]\n[   49.303031] 4.6.0-rc3+ #421 Not tainted\n[   49.306821] -------------------------------\n[   49.310956] include/linux/rcupdate.h:872 rcu_read_lock() used\nillegally while idle!\n[   49.318530]\n[   49.318530] other info that might help us debug this:\n[   49.318530]\n[   49.326451]\n[   49.326451] RCU used illegally from idle CPU!\n[   49.326451] rcu_scheduler_active = 1, debug_locks = 0\n[   49.337209] RCU used illegally from extended quiescent state!\n[   49.342892] 2 locks held by swapper/2/0:\n[   49.346768]  #0:  (cpu_pm_notifier_lock){......}, at:\n[<ffffff8008163c28>] cpu_pm_exit+0x18/0x80\n[   49.355492]  #1:  (rcu_read_lock){......}, at: [<ffffff800816dc38>]\nperf_event_update_userpage+0x0/0x260\n\nThis patch wraps the armpmu_start() call (that indirectly calls\nperf_event_update_userpage()) on CPU_PM notifier power state exit (or\nfailed entry) within the RCU_NONIDLE() macro so that the RCU subsystem\nis made aware the calling cpu is not idle from an RCU perspective for\nthe armpmu_start() call duration, therefore fixing the issue.\n\nBug: 28086229\nFixes: da4e4f18afe0 (\"drivers/perf: arm_pmu: implement CPU_PM notifier\")\nSigned-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>\nReported-by: James Morse <james.morse@arm.com>\nSuggested-by: Kevin Hilman <khilman@baylibre.com>\nCc: Ashwin Chaugule <ashwin.chaugule@linaro.org>\nCc: Kevin Hilman <khilman@baylibre.com>\nCc: Sudeep Holla <sudeep.holla@arm.com>\nCc: Daniel Lezcano <daniel.lezcano@linaro.org>\nCc: Mathieu Poirier <mathieu.poirier@linaro.org>\nAcked-by: Mark Rutland <mark.rutland@arm.com>\nAcked-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>\nAcked-by: Will Deacon <will.deacon@arm.com>\nSigned-off-by: Catalin Marinas <catalin.marinas@arm.com>\nGit-commit: cbcc72e037b8a3eb1fad3c1ae22021df21c97a51\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\n[schikk@codeaurora.org: ported the change for 3.10 kernel]\nChange-Id: I8376beb62a597b03806744df3aba26bd6deee6c2\nSigned-off-by: Swetha Chikkaboraiah <schikk@codeaurora.org>\n\nSigned-off-by: Veena Sambasivan <veenas@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/9d3a3667d82bda548f28f38c406a81eff6c12715"},{"sha":"b5637a1ac2a5854ec63a846def48093ab9ab0166","author":{"name":"Sunil Khatri","email":"c2fa09c6a63ee27656efbed7bd5e770f84d009d0@codeaurora.org"},"message":"msm: kgsl: Defer adding the mem entry to a process\n\nIf we add the mem entry pointer in the process idr and rb tree\ntoo early, other threads can do operations on the entry by\nguessing the ID or GPU address before the object gets returned\nby the creating operation.\n\nAllocate an ID for the object but don't assign the pointer until\nright before the creating function returns ensuring that another\noperation can't access it until it is ready.\n\nBug: 28026365\nBug: 28377352\nCRs-Fixed: 1002974\nChange-Id: Ic0dedbadc0dd2125bd2a7bcc152972c0555e07f8\nSigned-off-by: Jordan Crouse <jcrouse@codeaurora.org>\nSigned-off-by: Sunil Khatri <sunilkh@codeaurora.org>\nSigned-off-by: Santhosh Punugu <spunug@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/b5637a1ac2a5854ec63a846def48093ab9ab0166"},{"sha":"1867f5b14fc5a8a1d236957d72462e7d30140ecd","author":{"name":"kangjie","email":"c6dbead15f805a0881e9469feef97d17b99af2f6@gmail.com"},"message":"fix infoleak in rtnetlink\n\nthe stack object “map” has a total size of 32 bytes. Its last 4\nbytes are padding generated by compiler. These padding bytes are\nnot initialized and sent out via “nla_put”\n\nBug: 28620102\n\nChange-Id: I13da380c6fe8abca49e3cf9f05293c02b44d2e5e\nSigned-off-by: kangjie <kangjielu@gmail.com>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/1867f5b14fc5a8a1d236957d72462e7d30140ecd"},{"sha":"28619e196525a09d99f3aefd2fad2e05afbe876a","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@ZenIV.linux.org.uk"},"message":"net: validate the range we feed to iov_iter_init() in sys_sendto/sys_recvfrom\n\nBug: 28759139\nChange-Id: I561a14b514d714838ef539a94275b117d7f475f4\nCc: stable@vger.kernel.org # v3.19\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/28619e196525a09d99f3aefd2fad2e05afbe876a"},{"sha":"1a6eb0ab542d4f87fce2e3e4f442a627067d90b7","author":{"name":"Vegard Nossum","email":"9c44e0ed746b5c309b0bf31e4bae8fb5eb72beb1@oracle.com"},"message":"sched: Fix information leak in sys_sched_getattr()\n\nWe're copying the on-stack structure to userspace, but forgot to give\nthe right number of bytes to copy. This allows the calling process to\nobtain up to PAGE_SIZE bytes from the stack (and possibly adjacent\nkernel memory).\n\nThis fix copies only as much as we actually have on the stack\n(attr->size defaults to the size of the struct) and leaves the rest of\nthe userspace-provided buffer untouched.\n\nFound using kmemcheck + trinity.\n\nFixes: d50dde5a10f30 (\"sched: Add new scheduler syscalls to support an extended scheduling parameters ABI\")\n\nBug: 28731691\nChange-Id: Iaf2ecb4d2b0fa9df09539f2fc9ad6fd123d87aa2\nCc: Dario Faggioli <raistlin@linux.it>\nCc: Juri Lelli <juri.lelli@gmail.com>\nCc: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Vegard Nossum <vegard.nossum@oracle.com>\nSigned-off-by: Peter Zijlstra <peterz@infradead.org>\nLink: http://lkml.kernel.org/r/1392585857-10725-1-git-send-email-vegard.nossum@oracle.com\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/1a6eb0ab542d4f87fce2e3e4f442a627067d90b7"},{"sha":"700f16d5f2e6ddaf275045fb7e361bbf370bda72","author":{"name":"Eric Dumazet","email":"b3d77ad2db30f558882cc0c038be5a3cf96611f9@google.com"},"message":"ipv6: add complete rcu protection around np->opt\n\n[ Upstream commit 45f6fad84cc305103b28d73482b344d7f5b76f39 ]\n\nThis patch addresses multiple problems :\n\nUDP/RAW sendmsg() need to get a stable struct ipv6_txoptions\nwhile socket is not locked : Other threads can change np->opt\nconcurrently. Dmitry posted a syzkaller\n(http://github.com/google/syzkaller) program desmonstrating\nuse-after-free.\n\nStarting with TCP/DCCP lockless listeners, tcp_v6_syn_recv_sock()\nand dccp_v6_request_recv_sock() also need to use RCU protection\nto dereference np->opt once (before calling ipv6_dup_options())\n\nThis patch adds full RCU protection to np->opt\n\nBUG: 28746669\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nAcked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Jiri Slaby <jslaby@suse.cz>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/700f16d5f2e6ddaf275045fb7e361bbf370bda72"},{"sha":"b5323688ec31c785af4b49a53e688fded0c17304","author":{"name":"Dan Carpenter","email":"60b2bf2bc0bec4ca4a4b046ca7ef9255248abff8@oracle.com"},"message":"UPSTREAM: ALSA: compress: fix an integer overflow check\n\nI previously added an integer overflow check here but looking at it now,\nit's still buggy.\n\nThe bug happens in snd_compr_allocate_buffer().  We multiply\n\".fragments\" and \".fragment_size\" and that doesn't overflow but then we\nsave it in an unsigned int so it truncates the high bits away and we\nallocate a smaller than expected size.\n\nFixes: b35cc8225845 ('ALSA: compress_core: integer overflow in snd_compr_allocate_buffer()')\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nBug: 28592007\nChange-Id: I3ef098ada955449fdd109d37b2176da849dd26af\nSigned-off-by: Thierry Strudel <tstrudel@google.com>\n(cherry picked from commit 6215e5ede23285ddfee10d2e4ba0cc2d4c046205)","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/b5323688ec31c785af4b49a53e688fded0c17304"},{"sha":"adf0d7340f396f277f35fc070bd2a33a4dff2489","author":{"name":"Ben Hutchings","email":"9c85637c38b80821c7bd8a03bde7b59da81ab77d@decadent.org.uk"},"message":"BACKPORT: perf tools: Document the perf sysctls\n\nperf_event_paranoid was only documented in source code and a perf error\nmessage.  Copy the documentation from the error message to\nDocumentation/sysctl/kernel.txt.\n\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: linux-doc@vger.kernel.org\nLink: http://lkml.kernel.org/r/20160119213515.GG2637@decadent.org.uk\n[ Remove reference to external Documentation file, provide info inline, as before ]\nSigned-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>\n\nBug: 29054680\nChange-Id: I13e73cfb2ad761c94762d0c8196df7725abdf5c5","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/adf0d7340f396f277f35fc070bd2a33a4dff2489"},{"sha":"4a2def76621ebef8563cc6302d08264bda8cfd30","author":{"name":"Jeff Vander Stoep","email":"3c7c1df314a95c4ce859cc668e778f3e3567dbe8@google.com"},"message":"FROMLIST: security,perf: Allow further restriction of perf_event_open\n\nWhen kernel.perf_event_open is set to 3 (or greater), disallow all\naccess to performance events by users without CAP_SYS_ADMIN.\nAdd a Kconfig symbol CONFIG_SECURITY_PERF_EVENTS_RESTRICT that\nmakes this value the default.\n\nThis is based on a similar feature in grsecurity\n(CONFIG_GRKERNSEC_PERF_HARDEN).  This version doesn't include making\nthe variable read-only.  It also allows enabling further restriction\nat run-time regardless of whether the default is changed.\n\nhttps://lkml.org/lkml/2016/1/11/587\n\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>\n\nBug: 29054680\nChange-Id: Iff5bff4fc1042e85866df9faa01bce8d04335ab8","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/4a2def76621ebef8563cc6302d08264bda8cfd30"},{"sha":"2ab8dd3eb753c4b8fda43b0e9cf1f3938cee2462","author":{"name":"Jeff Vander Stoep","email":"3c7c1df314a95c4ce859cc668e778f3e3567dbe8@google.com"},"message":"ANDROID: restrict access to perf events\n\nAdd:\nCONFIG_SECURITY_PERF_EVENTS_RESTRICT=y\n\nto android-base.cfg\n\nThe kernel.perf_event_paranoid sysctl is set to 3 by default.\nNo unprivileged use of the perf_event_open syscall will be\npermitted unless it is changed.\n\nBug: 29054680\nChange-Id: Ie7512259150e146d8e382dc64d40e8faaa438917","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/2ab8dd3eb753c4b8fda43b0e9cf1f3938cee2462"},{"sha":"e0fe451b8e29a61a6900a81718a225f70cdc6ccd","author":{"name":"DespairFactor","email":"6904a290c267cf5f33bdf47657c1786fb7feccef@outlook.com"},"message":"defconfig: enable SECURITY_PERF_EVENTS_RESTRICT\n\nBug: 29119870\nChange-Id: Ie0b2aa5b0a53281b215b8f87fd88a2344624f2f0\nSigned-off-by: Mekala Natarajan <mnatarajan@google.com>","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/e0fe451b8e29a61a6900a81718a225f70cdc6ccd"},{"sha":"46d28b28a500adbdaf93cbea0e82b0cb19d43ec6","author":{"name":"DespairFactor","email":"6904a290c267cf5f33bdf47657c1786fb7feccef@outlook.com"},"message":"build: R34","distinct":true,"url":"https://api.github.com/repos/DespairFactor/angler/commits/46d28b28a500adbdaf93cbea0e82b0cb19d43ec6"}]}
{"actor":{"display_login":"DespairFactor"}}