{"push_id":2778247101,"size":820,"distinct_size":0,"ref":"refs/heads/korg/stable/master","head":"1ffaddd029c867d134a1dde39f540dcc8c52e274","before":"9d3cce1e8b8561fed5f383d22a4d6949db4eadbe","commits":[{"sha":"d6990976af7c5d8f55903bfb4289b6fb030bf754","author":{"name":"Eyal Birger","email":"795a5dda0defe3b6cf4023da30695907d9e4cdcf@gmail.com"},"message":"vti6: fix PMTU caching and reporting on xmit\n\nWhen setting the skb->dst before doing the MTU check, the route PMTU\ncaching and reporting is done on the new dst which is about to be\nreleased.\n\nInstead, PMTU handling should be done using the original dst.\n\nThis is aligned with IPv4 VTI.\n\nFixes: ccd740cbc6 (\"vti6: Add pmtu handling to vti6_xmit.\")\nSigned-off-by: Eyal Birger <eyal.birger@gmail.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/d6990976af7c5d8f55903bfb4289b6fb030bf754"},{"sha":"74c11e300c103af47db5b658fdcf28002421e250","author":{"name":"Alexey Brodkin","email":"1fa739873496c8c0c1b521f2061ee5fa4a0306e8@synopsys.com"},"message":"ARC: Explicitly add -mmedium-calls to CFLAGS\n\nGCC built for arc*-*-linux has \"-mmedium-calls\" implicitly enabled by default\nthus we don't see any problems during Linux kernel compilation.\n----------------------------->8------------------------\narc-linux-gcc -mcpu=arc700 -Q --help=target | grep calls\n  -mlong-calls                          [disabled]\n  -mmedium-calls                        [enabled]\n----------------------------->8------------------------\n\nBut if we try to use so-called Elf32 toolchain with GCC configured for\narc*-*-elf* then we'd see the following failure:\n----------------------------->8------------------------\ninit/do_mounts.o: In function 'init_rootfs':\ndo_mounts.c:(.init.text+0x108): relocation truncated to fit: R_ARC_S21W_PCREL\nagainst symbol 'unregister_filesystem' defined in .text section in fs/filesystems.o\n\narc-elf32-ld: final link failed: Symbol needs debug section which does not exist\nmake: *** [vmlinux] Error 1\n----------------------------->8------------------------\n\nThat happens because neither \"-mmedium-calls\" nor \"-mlong-calls\" are enabled in\nElf32 GCC:\n----------------------------->8------------------------\narc-elf32-gcc -mcpu=arc700 -Q --help=target | grep calls\n  -mlong-calls                          [disabled]\n  -mmedium-calls                        [disabled]\n----------------------------->8------------------------\n\nNow to make it possible to use Elf32 toolchain for building Linux kernel\nwe're explicitly add \"-mmedium-calls\" to CFLAGS.\n\nAnd since we add \"-mmedium-calls\" to the global CFLAGS there's no point in\nhaving per-file copies thus removing them.\n\nSigned-off-by: Alexey Brodkin <abrodkin@synopsys.com>\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/74c11e300c103af47db5b658fdcf28002421e250"},{"sha":"c1e3f64f87381ed3768b9247ab0cd08b41927da6","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"qtnfmac: fix NULL pointer dereference\n\nIn case *vif* is NULL at 655: if (!vif), the execution path jumps to\nlabel out, where *vif* is dereferenced at 679:\n\nif (vif->sta_state == QTNF_STA_CONNECTING)\n\nFix this by immediately returning when *vif* is NULL instead of\njumping to label out.\n\nAddresses-Coverity-ID: 1469567 (\"Dereference after null check\")\nFixes: 480daa9cb62c (\"qtnfmac: fix invalid STA state on EAPOL failure\")\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nReviewed-by: Sergey Matyukevich <sergey.matyukevich.os@quanenna.com>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/c1e3f64f87381ed3768b9247ab0cd08b41927da6"},{"sha":"755abd247a3da273af3b90d1dd31bc61794ae7d7","author":{"name":"Xinming Hu","email":"8b9c60c177136f4289bffc27dc182e6e6ad5798f@marvell.com"},"message":"MAINTAINERS: update Xinming's email address\n\nI'd like to use this new gmail from now on.\n\nCc: Ganapathi Bhat <gbhat@marvell.com>\nSigned-off-by: Xinming Hu <huxm@marvell.com>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/755abd247a3da273af3b90d1dd31bc61794ae7d7"},{"sha":"97d1e3dc8d98f97b65350f8ab221e6d061705abc","author":{"name":"Luc Van Oostenryck","email":"dd9f43619da47dffa3d6afc8bcbb7c8c20e3f8a0@gmail.com"},"message":"nds32: define __NDS32_E[BL]__ for sparse\n\nnds32 depends on the macros '__NDS32_E[BL]__' to correctly\nselect or define endian-specific macros, structures or pieces\nof code.\n\nThese macros are predefined by the compiler but sparse knows nothing\nabout them and thus may pre-process files differently from what\nGCC would.\n\nFix this by adding '-D__NDS32_E[BL]__' to CHECKFLAGS.\n\nSigned-off-by: Luc Van Oostenryck <luc.vanoostenryck@gmail.com>\nAcked-by: Greentime Hu <greentime@andestech.com>\nSigned-off-by: Greentime Hu <greentime@andestech.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/97d1e3dc8d98f97b65350f8ab221e6d061705abc"},{"sha":"a78945c357f58665d6a5da8a69e085898e831c70","author":{"name":"Guenter Roeck","email":"ba324ca7b1c77fc20bb970d5aff6eea9377918a5@roeck-us.net"},"message":"nds32: Fix build error caused by configuration flag rename\n\nFix build error on nds32 due to the merge of commit e3d5980568f (\"lib:\nRename compiler intrinsic selects to GENERIC_LIB_*\") during the 4.18\nmerge window which renames Kconfig symbols. This had raced with commit\naeaa7af744fa (\"nds32: lib: To use generic lib instead of libgcc to\nprevent the symbol undefined issue.\") merged late in the 4.17 cycle,\nwhich added selects to nds32 using the original Kconfig symbol names.\n\nWhen they came together in merge commit 763f96944c95 (\"Merge tag\n'mips_4.18' of\ngit://git.kernel.org/pub/scm/linux/kernel/git/mips/linux\") this resulted\nin the following build errors:\n\nnds32le-linux-ld: kernel/time/timekeeping.o: in function `timekeeping_init':\ntimekeeping.c:(.init.text+0x140): undefined reference to `__ashldi3'\nnds32le-linux-ld: timekeeping.c:(.init.text+0x144): undefined reference to `__ashldi3'\nnds32le-linux-ld: timekeeping.c:(.init.text+0x17e): undefined reference to `__lshrdi3'\nnds32le-linux-ld: timekeeping.c:(.init.text+0x182): undefined reference to `__lshrdi3'\nnds32le-linux-ld: drivers/clocksource/mmio.o: in function `clocksource_mmio_init':\nmmio.c:(.init.text+0x54): undefined reference to `__lshrdi3'\nnds32le-linux-ld: mmio.c:(.init.text+0x58): undefined reference to `__lshrdi3'\n\nRename all 6 selects in nds32 and adjust the ordering accordingly to be\nalphabetical.\n\nFixes: 763f96944c95 (\"Merge tag 'mips_4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux\")\nSigned-off-by: Guenter Roeck <linux@roeck-us.net>\n[jhogan@kernel.org: Rename all 6 symbols, sort, update commit message]\nSigned-off-by: James Hogan <jhogan@kernel.org>\nCc: Greentime Hu <green.hu@gmail.com>\nCc: Vincent Chen <deanbo422@gmail.com>\nCc: Matt Redfearn <matt.redfearn@mips.com>\nCc: Palmer Dabbelt <palmer@sifive.com>\nAcked-by: Greentime Hu <greentime@andestech.com>\nSigned-off-by: Greentime Hu <greentime@andestech.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/a78945c357f58665d6a5da8a69e085898e831c70"},{"sha":"45c180bc29babbedd6b8c01b975780ef44d9d09c","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"xfrm_user: prevent leaking 2 bytes of kernel memory\n\nstruct xfrm_userpolicy_type has two holes, so we should not\nuse C99 style initializer.\n\nKMSAN report:\n\nBUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:140 [inline]\nBUG: KMSAN: kernel-infoleak in _copy_to_iter+0x1b14/0x2800 lib/iov_iter.c:571\nCPU: 1 PID: 4520 Comm: syz-executor841 Not tainted 4.17.0+ #5\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x185/0x1d0 lib/dump_stack.c:113\n kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1117\n kmsan_internal_check_memory+0x138/0x1f0 mm/kmsan/kmsan.c:1211\n kmsan_copy_to_user+0x7a/0x160 mm/kmsan/kmsan.c:1253\n copyout lib/iov_iter.c:140 [inline]\n _copy_to_iter+0x1b14/0x2800 lib/iov_iter.c:571\n copy_to_iter include/linux/uio.h:106 [inline]\n skb_copy_datagram_iter+0x422/0xfa0 net/core/datagram.c:431\n skb_copy_datagram_msg include/linux/skbuff.h:3268 [inline]\n netlink_recvmsg+0x6f1/0x1900 net/netlink/af_netlink.c:1959\n sock_recvmsg_nosec net/socket.c:802 [inline]\n sock_recvmsg+0x1d6/0x230 net/socket.c:809\n ___sys_recvmsg+0x3fe/0x810 net/socket.c:2279\n __sys_recvmmsg+0x58e/0xe30 net/socket.c:2391\n do_sys_recvmmsg+0x2a6/0x3e0 net/socket.c:2472\n __do_sys_recvmmsg net/socket.c:2485 [inline]\n __se_sys_recvmmsg net/socket.c:2481 [inline]\n __x64_sys_recvmmsg+0x15d/0x1c0 net/socket.c:2481\n do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\nRIP: 0033:0x446ce9\nRSP: 002b:00007fc307918db8 EFLAGS: 00000293 ORIG_RAX: 000000000000012b\nRAX: ffffffffffffffda RBX: 00000000006dbc24 RCX: 0000000000446ce9\nRDX: 000000000000000a RSI: 0000000020005040 RDI: 0000000000000003\nRBP: 00000000006dbc20 R08: 0000000020004e40 R09: 0000000000000000\nR10: 0000000040000000 R11: 0000000000000293 R12: 0000000000000000\nR13: 00007ffc8d2df32f R14: 00007fc3079199c0 R15: 0000000000000001\n\nUninit was stored to memory at:\n kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]\n kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]\n kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685\n kmsan_memcpy_origins+0x11d/0x170 mm/kmsan/kmsan.c:527\n __msan_memcpy+0x109/0x160 mm/kmsan/kmsan_instr.c:413\n __nla_put lib/nlattr.c:569 [inline]\n nla_put+0x276/0x340 lib/nlattr.c:627\n copy_to_user_policy_type net/xfrm/xfrm_user.c:1678 [inline]\n dump_one_policy+0xbe1/0x1090 net/xfrm/xfrm_user.c:1708\n xfrm_policy_walk+0x45a/0xd00 net/xfrm/xfrm_policy.c:1013\n xfrm_dump_policy+0x1c0/0x2a0 net/xfrm/xfrm_user.c:1749\n netlink_dump+0x9b5/0x1550 net/netlink/af_netlink.c:2226\n __netlink_dump_start+0x1131/0x1270 net/netlink/af_netlink.c:2323\n netlink_dump_start include/linux/netlink.h:214 [inline]\n xfrm_user_rcv_msg+0x8a3/0x9b0 net/xfrm/xfrm_user.c:2577\n netlink_rcv_skb+0x37e/0x600 net/netlink/af_netlink.c:2448\n xfrm_netlink_rcv+0xb2/0xf0 net/xfrm/xfrm_user.c:2598\n netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]\n netlink_unicast+0x1680/0x1750 net/netlink/af_netlink.c:1336\n netlink_sendmsg+0x104f/0x1350 net/netlink/af_netlink.c:1901\n sock_sendmsg_nosec net/socket.c:629 [inline]\n sock_sendmsg net/socket.c:639 [inline]\n ___sys_sendmsg+0xec8/0x1320 net/socket.c:2117\n __sys_sendmsg net/socket.c:2155 [inline]\n __do_sys_sendmsg net/socket.c:2164 [inline]\n __se_sys_sendmsg net/socket.c:2162 [inline]\n __x64_sys_sendmsg+0x331/0x460 net/socket.c:2162\n do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\nLocal variable description: ----upt.i@dump_one_policy\nVariable was created at:\n dump_one_policy+0x78/0x1090 net/xfrm/xfrm_user.c:1689\n xfrm_policy_walk+0x45a/0xd00 net/xfrm/xfrm_policy.c:1013\n\nByte 130 of 137 is uninitialized\nMemory access starts at ffff88019550407f\n\nFixes: c0144beaeca42 (\"[XFRM] netlink: Use nla_put()/NLA_PUT() variantes\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nCc: Steffen Klassert <steffen.klassert@secunet.com>\nCc: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/45c180bc29babbedd6b8c01b975780ef44d9d09c"},{"sha":"c987ac6f1f088663b6dad39281071aeb31d450a8","author":{"name":"Neil Armstrong","email":"619b324efbf5f7848de055bdc8bef4c0dd7c8ef5@baylibre.com"},"message":"clk: meson-gxbb: set fclk_div2 as CLK_IS_CRITICAL\n\nOn Amlogic Meson GXBB & GXL platforms, the SCPI Cortex-M4 Co-Processor\nseems to be dependent on the FCLK_DIV2 to be operationnal.\n\nThe issue occurred since v4.17-rc1 by freezing the kernel boot when\nthe 'schedutil' cpufreq governor was selected as default :\n\n  [   12.071837] scpi_protocol scpi: SCP Protocol 0.0 Firmware 0.0.0 version\n  domain-0 init dvfs: 4\n  [   12.087757] hctosys: unable to open rtc device (rtc0)\n  [   12.087907] cfg80211: Loading compiled-in X.509 certificates for regulatory database\n  [   12.102241] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'\n\nBut when disabling the MMC driver, the boot finished but cpufreq failed to\nchange the CPU frequency :\n\n  [   12.153045] cpufreq: __target_index: Failed to change cpu frequency: -5\n\nA bisect between v4.16 and v4.16-rc1 gave\n05f814402d61 (\"clk: meson: add fdiv clock gates\") to be the first bad commit.\nThis commit added support for the missing clock gates before the fixed PLL\nfixed dividers (FCLK_DIVx) and the clock framework basically disabled\nall the unused fixed dividers, thus disabled a critical clock path for\nthe SCPI Co-Processor.\n\nThis patch simply sets the FCLK_DIV2 gate as critical to ensure\nnobody can disable it.\n\nFixes: 05f814402d61 (\"clk: meson: add fdiv clock gates\")\nSigned-off-by: Neil Armstrong <narmstrong@baylibre.com>\nTested-by: Kevin Hilman <khilman@baylibre.com>\n[few corrections in the commit description]\nSigned-off-by: Jerome Brunet <jbrunet@baylibre.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/c987ac6f1f088663b6dad39281071aeb31d450a8"},{"sha":"2f24ef7413a4d91657ef04e77c27ce0b313e6c95","author":{"name":"Alexey Brodkin","email":"df74735e5e8e4da139876d19d7450f461d604b9f@synopsys.com"},"message":"ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP\n\nmachine_desc->init_per_cpu() hook is supposed to be per cpu\ninitialization and would seem to apply  equally to UP and/or SMP.\nInfact the comment in header file seems to suggest it works for\nUP too, which was not the case and this patch.\n\nThis enables !CONFIG_SMP build for platforms such as hsdk.\n\nSigned-off-by: Alexey Brodkin <abrodkin@synopsys.com>\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>\n[vgupta: trimmeed changelog]","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/2f24ef7413a4d91657ef04e77c27ce0b313e6c95"},{"sha":"7813c14c9475dbebcd7f41bd498426d01255acf9","author":{"name":"Jerome Brunet","email":"112e8b3ceb2d19b85876d8b6266daec3a6b188f2@baylibre.com"},"message":"clk: meson: audio-divider is one based\n\nThe audio divider is one based. This offset was mistakenly dropped from\nrecalc_rate() when migrating to clk_regmap.\n\nFixes: 88a4e1283681 (\"clk: meson: migrate the audio divider clock to clk_regmap\")\nAcked-by: Neil Armstrong <narmstrong@baylibre.com>\nSigned-off-by: Jerome Brunet <jbrunet@baylibre.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/7813c14c9475dbebcd7f41bd498426d01255acf9"},{"sha":"76053854f7d10ca4fa492495f65798e3d48a64c4","author":{"name":"Gustavo Pimentel","email":"3baca1966637ebc5de20b0b6ce4f5a3d448c1e4b@synopsys.com"},"message":"ARC: [plat-hsdk] Add PCIe support\n\nAdd PCI support to the ARC HSDK platform allowing to use the generic PCI\nsetup functions.\n\nSigned-off-by: Gustavo Pimentel <gustavo.pimentel@synopsys.com>\nAcked-by: Alexey Brodkin <abrodkin@synopsys.com>\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/76053854f7d10ca4fa492495f65798e3d48a64c4"},{"sha":"b5685d2687d6612adf5eac519eb7008f74dfd1ec","author":{"name":"Sven Eckelmann","email":"dd860110a62b19214c4ee03aec0abffecb4e86b8@narfation.org"},"message":"batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump\n\nA reference for the best gateway is taken when the list of gateways in the\nmesh is sent via netlink. This is necessary to check whether the currently\ndumped entry is the currently selected gateway or not. This information is\nthen transferred as flag BATADV_ATTR_FLAG_BEST.\n\nAfter the comparison of the current entry is done,\nbatadv_iv_gw_dump_entry() has to decrease the reference counter again.\nOtherwise the reference will be held and thus prevents a proper shutdown of\nthe batman-adv interfaces (and some of the interfaces enslaved in it).\n\nFixes: efb766af06e3 (\"batman-adv: add B.A.T.M.A.N. IV bat_gw_dump implementations\")\nReported-by: Andreas Ziegler <dev@andreas-ziegler.de>\nTested-by: Andreas Ziegler <dev@andreas-ziegler.de>\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nAcked-by: Marek Lindner <mareklindner@neomailbox.ch>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/b5685d2687d6612adf5eac519eb7008f74dfd1ec"},{"sha":"9713cb0cf19f1cec6c007e3b37be0697042b6720","author":{"name":"Sven Eckelmann","email":"dd860110a62b19214c4ee03aec0abffecb4e86b8@narfation.org"},"message":"batman-adv: Fix bat_v best gw refcnt after netlink dump\n\nA reference for the best gateway is taken when the list of gateways in the\nmesh is sent via netlink. This is necessary to check whether the currently\ndumped entry is the currently selected gateway or not. This information is\nthen transferred as flag BATADV_ATTR_FLAG_BEST.\n\nAfter the comparison of the current entry is done,\nbatadv_v_gw_dump_entry() has to decrease the reference counter again.\nOtherwise the reference will be held and thus prevents a proper shutdown of\nthe batman-adv interfaces (and some of the interfaces enslaved in it).\n\nFixes: b71bb6f924fe (\"batman-adv: add B.A.T.M.A.N. V bat_gw_dump implementations\")\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nAcked-by: Marek Lindner <mareklindner@neomailbox.ch>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/9713cb0cf19f1cec6c007e3b37be0697042b6720"},{"sha":"36dc621ceca1be3ec885aeade5fdafbbcc452a6d","author":{"name":"Sven Eckelmann","email":"dd860110a62b19214c4ee03aec0abffecb4e86b8@narfation.org"},"message":"batman-adv: Fix debugfs path for renamed hardif\n\nbatman-adv is creating special debugfs directories in the init\nnet_namespace for each valid hard-interface (net_device). But it is\npossible to rename a net_device to a completely different name then the\noriginal one.\n\nIt can therefore happen that a user registers a new net_device which gets\nthe name \"wlan0\" assigned by default. batman-adv is also adding a new\ndirectory under $debugfs/batman-adv/ with the name \"wlan0\".\n\nThe user then decides to rename this device to \"wl_pri\" and registers a\ndifferent device. The kernel may now decide to use the name \"wlan0\" again\nfor this new device. batman-adv will detect it as a valid net_device and\ntries to create a directory with the name \"wlan0\" under\n$debugfs/batman-adv/. But there already exists one with this name under\nthis path and thus this fails. batman-adv will detect a problem and\nrollback the registering of this device.\n\nbatman-adv must therefore take care of renaming the debugfs directories\nfor hard-interfaces whenever it detects such a net_device rename.\n\nFixes: 5bc7c1eb44f2 (\"batman-adv: add debugfs structure for information per interface\")\nReported-by: John Soros <sorosj@gmail.com>\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/36dc621ceca1be3ec885aeade5fdafbbcc452a6d"},{"sha":"6da7be7d24b2921f8215473ba7552796dff05fe1","author":{"name":"Sven Eckelmann","email":"dd860110a62b19214c4ee03aec0abffecb4e86b8@narfation.org"},"message":"batman-adv: Fix debugfs path for renamed softif\n\nbatman-adv is creating special debugfs directories in the init\nnet_namespace for each created soft-interface (batadv net_device). But it\nis possible to rename a net_device to a completely different name then the\noriginal one.\n\nIt can therefore happen that a user registers a new batadv net_device with\nthe name \"bat0\". batman-adv is then also adding a new directory under\n$debugfs/batman-adv/ with the name \"wlan0\".\n\nThe user then decides to rename this device to \"bat1\" and registers a\ndifferent batadv device with the name \"bat0\". batman-adv will then try to\ncreate a directory with the name \"bat0\" under $debugfs/batman-adv/ again.\nBut there already exists one with this name under this path and thus this\nfails. batman-adv will detect a problem and rollback the registering of\nthis device.\n\nbatman-adv must therefore take care of renaming the debugfs directories for\nsoft-interfaces whenever it detects such a net_device rename.\n\nFixes: c6c8fea29769 (\"net: Add batman-adv meshing protocol\")\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/6da7be7d24b2921f8215473ba7552796dff05fe1"},{"sha":"4a519b83da16927fb98fd32b0f598e639d1f1859","author":{"name":"Linus Lüssing","email":"1dd561f221e05f08425aa0351cbf66864fb4804d@c0d3.blue"},"message":"batman-adv: Avoid storing non-TT-sync flags on singular entries too\n\nSince commit 54e22f265e87 (\"batman-adv: fix TT sync flag inconsistencies\")\nTT sync flags and TT non-sync'd flags are supposed to be stored\nseparately.\n\nThe previous patch missed to apply this separation on a TT entry with\nonly a single TT orig entry.\n\nThis is a minor fix because with only a single TT orig entry the DDoS\nissue the former patch solves does not apply.\n\nFixes: 54e22f265e87 (\"batman-adv: fix TT sync flag inconsistencies\")\nSigned-off-by: Linus Lüssing <linus.luessing@c0d3.blue>\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/4a519b83da16927fb98fd32b0f598e639d1f1859"},{"sha":"a44ebeff6bbd6ef50db41b4195fca87b21aefd20","author":{"name":"Linus Lüssing","email":"1dd561f221e05f08425aa0351cbf66864fb4804d@c0d3.blue"},"message":"batman-adv: Fix multicast TT issues with bogus ROAM flags\n\nWhen a (broken) node wrongly sends multicast TT entries with a ROAM\nflag then this causes any receiving node to drop all entries for the\nsame multicast MAC address announced by other nodes, leading to\npacket loss.\n\nFix this DoS vector by only storing TT sync flags. For multicast TT\nnon-sync'ing flag bits like ROAM are unused so far anyway.\n\nFixes: 1d8ab8d3c176 (\"batman-adv: Modified forwarding behaviour for multicast packets\")\nReported-by: Leonardo Mörlein <me@irrelefant.net>\nSigned-off-by: Linus Lüssing <linus.luessing@c0d3.blue>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/a44ebeff6bbd6ef50db41b4195fca87b21aefd20"},{"sha":"8cc88773855f988d6a3bbf102bbd9dd9c828eb81","author":{"name":"Tommi Rantala","email":"c755d75da996119e2b4da9802b6e31e9cdd8d509@nokia.com"},"message":"xfrm: fix missing dst_release() after policy blocking lbcast and multicast\n\nFix missing dst_release() when local broadcast or multicast traffic is\nxfrm policy blocked.\n\nFor IPv4 this results to dst leak: ip_route_output_flow() allocates\ndst_entry via __ip_route_output_key() and passes it to\nxfrm_lookup_route(). xfrm_lookup returns ERR_PTR(-EPERM) that is\npropagated. The dst that was allocated is never released.\n\nIPv4 local broadcast testcase:\n ping -b 192.168.1.255 &\n sleep 1\n ip xfrm policy add src 0.0.0.0/0 dst 192.168.1.255/32 dir out action block\n\nIPv4 multicast testcase:\n ping 224.0.0.1 &\n sleep 1\n ip xfrm policy add src 0.0.0.0/0 dst 224.0.0.1/32 dir out action block\n\nFor IPv6 the missing dst_release() causes trouble e.g. when used in netns:\n ip netns add TEST\n ip netns exec TEST ip link set lo up\n ip link add dummy0 type dummy\n ip link set dev dummy0 netns TEST\n ip netns exec TEST ip addr add fd00::1111 dev dummy0\n ip netns exec TEST ip link set dummy0 up\n ip netns exec TEST ping -6 -c 5 ff02::1%dummy0 &\n sleep 1\n ip netns exec TEST ip xfrm policy add src ::/0 dst ff02::1 dir out action block\n wait\n ip netns del TEST\n\nAfter netns deletion we see:\n[  258.239097] unregister_netdevice: waiting for lo to become free. Usage count = 2\n[  268.279061] unregister_netdevice: waiting for lo to become free. Usage count = 2\n[  278.367018] unregister_netdevice: waiting for lo to become free. Usage count = 2\n[  288.375259] unregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFixes: ac37e2515c1a (\"xfrm: release dst_orig in case of error in xfrm_lookup()\")\nSigned-off-by: Tommi Rantala <tommi.t.rantala@nokia.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/8cc88773855f988d6a3bbf102bbd9dd9c828eb81"},{"sha":"12dfa2f68ab659636e092db13b5d17cf9aac82af","author":{"name":"Ping-Ke Shih","email":"ea6025b70891bad3f189def6af4d8957132cf560@realtek.com"},"message":"rtlwifi: Fix kernel Oops \"Fw download fail!!\"\n\nWhen connecting to AP, mac80211 asks driver to enter and leave PS quickly,\nbut driver deinit doesn't wait for delayed work complete when entering PS,\nthen driver reinit procedure and delay work are running simultaneously.\nThis will cause unpredictable kernel oops or crash like\n\nrtl8723be: error H2C cmd because of Fw download fail!!!\nWARNING: CPU: 3 PID: 159 at drivers/net/wireless/realtek/rtlwifi/\n\t rtl8723be/fw.c:227 rtl8723be_fill_h2c_cmd+0x182/0x510 [rtl8723be]\nCPU: 3 PID: 159 Comm: kworker/3:2 Tainted: G       O     4.16.13-2-ARCH #1\nHardware name: ASUSTeK COMPUTER INC. X556UF/X556UF, BIOS X556UF.406\n\t       10/21/2016\nWorkqueue: rtl8723be_pci rtl_c2hcmd_wq_callback [rtlwifi]\nRIP: 0010:rtl8723be_fill_h2c_cmd+0x182/0x510 [rtl8723be]\nRSP: 0018:ffffa6ab01e1bd70 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffffa26069071520 RCX: 0000000000000001\nRDX: 0000000080000001 RSI: ffffffff8be70e9c RDI: 00000000ffffffff\nRBP: 0000000000000000 R08: 0000000000000048 R09: 0000000000000348\nR10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000\nR13: ffffa26069071520 R14: 0000000000000000 R15: ffffa2607d205f70\nFS:  0000000000000000(0000) GS:ffffa26081d80000(0000) knlGS:000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000443b39d3000 CR3: 000000037700a005 CR4: 00000000003606e0\nCall Trace:\n ? halbtc_send_bt_mp_operation.constprop.17+0xd5/0xe0 [btcoexist]\n ? ex_btc8723b1ant_bt_info_notify+0x3b8/0x820 [btcoexist]\n ? rtl_c2hcmd_launcher+0xab/0x110 [rtlwifi]\n ? process_one_work+0x1d1/0x3b0\n ? worker_thread+0x2b/0x3d0\n ? process_one_work+0x3b0/0x3b0\n ? kthread+0x112/0x130\n ? kthread_create_on_node+0x60/0x60\n ? ret_from_fork+0x35/0x40\nCode: 00 76 b4 e9 e2 fe ff ff 4c 89 ee 4c 89 e7 e8 56 22 86 ca e9 5e ...\n\nThis patch ensures all delayed works done before entering PS to satisfy\nour expectation, so use cancel_delayed_work_sync() instead. An exception\nis delayed work ips_nic_off_wq because running task may be itself, so add\na parameter ips_wq to deinit function to handle this case.\n\nThis issue is reported and fixed in below threads:\nhttps://github.com/lwfinger/rtlwifi_new/issues/367\nhttps://github.com/lwfinger/rtlwifi_new/issues/366\n\nTested-by: Evgeny Kapun <abacabadabacaba@gmail.com> # 8723DE\nTested-by: Shivam Kakkar <shivam543@gmail.com> # 8723BE on 4.18-rc1\nSigned-off-by: Ping-Ke Shih <pkshih@realtek.com>\nFixes: cceb0a597320 (\"rtlwifi: Add work queue for c2h cmd.\")\nCc: Stable <stable@vger.kernel.org> # 4.11+\nReviewed-by: Larry Finger <Larry.Finger@lwfinger.net>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/12dfa2f68ab659636e092db13b5d17cf9aac82af"},{"sha":"373c83a801f15b1e3d02d855fad89112bd4ccbe0","author":{"name":"Michael Trimarchi","email":"17b9e1c64588c7fa6419b4d29dc1f4426279ba01@amarulasolutions.com"},"message":"brcmfmac: stop watchdog before detach and free everything\n\nUsing built-in in kernel image without a firmware in filesystem\nor in the kernel image can lead to a kernel NULL pointer deference.\nWatchdog need to be stopped in brcmf_sdio_remove\n\nThe system is going down NOW!\n[ 1348.110759] Unable to handle kernel NULL pointer dereference at virtual address 000002f8\nSent SIGTERM to all processes\n[ 1348.121412] Mem abort info:\n[ 1348.126962]   ESR = 0x96000004\n[ 1348.130023]   Exception class = DABT (current EL), IL = 32 bits\n[ 1348.135948]   SET = 0, FnV = 0\n[ 1348.138997]   EA = 0, S1PTW = 0\n[ 1348.142154] Data abort info:\n[ 1348.145045]   ISV = 0, ISS = 0x00000004\n[ 1348.148884]   CM = 0, WnR = 0\n[ 1348.151861] user pgtable: 4k pages, 48-bit VAs, pgdp = (____ptrval____)\n[ 1348.158475] [00000000000002f8] pgd=0000000000000000\n[ 1348.163364] Internal error: Oops: 96000004 [#1] PREEMPT SMP\n[ 1348.168927] Modules linked in: ipv6\n[ 1348.172421] CPU: 3 PID: 1421 Comm: brcmf_wdog/mmc0 Not tainted 4.17.0-rc5-next-20180517 #18\n[ 1348.180757] Hardware name: Amarula A64-Relic (DT)\n[ 1348.185455] pstate: 60000005 (nZCv daif -PAN -UAO)\n[ 1348.190251] pc : brcmf_sdiod_freezer_count+0x0/0x20\n[ 1348.195124] lr : brcmf_sdio_watchdog_thread+0x64/0x290\n[ 1348.200253] sp : ffff00000b85be30\n[ 1348.203561] x29: ffff00000b85be30 x28: 0000000000000000\n[ 1348.208868] x27: ffff00000b6cb918 x26: ffff80003b990638\n[ 1348.214176] x25: ffff0000087b1a20 x24: ffff80003b94f800\n[ 1348.219483] x23: ffff000008e620c8 x22: ffff000008f0b660\n[ 1348.224790] x21: ffff000008c6a858 x20: 00000000fffffe00\n[ 1348.230097] x19: ffff80003b94f800 x18: 0000000000000001\n[ 1348.235404] x17: 0000ffffab2e8a74 x16: ffff0000080d7de8\n[ 1348.240711] x15: 0000000000000000 x14: 0000000000000400\n[ 1348.246018] x13: 0000000000000400 x12: 0000000000000001\n[ 1348.251324] x11: 00000000000002c4 x10: 0000000000000a10\n[ 1348.256631] x9 : ffff00000b85bc40 x8 : ffff80003be11870\n[ 1348.261937] x7 : ffff80003dfc7308 x6 : 000000078ff08b55\n[ 1348.267243] x5 : 00000139e1058400 x4 : 0000000000000000\n[ 1348.272550] x3 : dead000000000100 x2 : 958f2788d6618100\n[ 1348.277856] x1 : 00000000fffffe00 x0 : 0000000000000000\n\nSigned-off-by: Michael Trimarchi <michael@amarulasolutions.com>\nAcked-by: Arend van Spriel <arend.vanspriel@broadcom.com>\nTested-by: Andy Shevchenko <andy.shevchenko@gmail.com>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/373c83a801f15b1e3d02d855fad89112bd4ccbe0"}]}
{"actor":{"display_login":"mifl"}}