{"push_id":2720037186,"size":9,"distinct_size":9,"ref":"refs/heads/cm-14.1","head":"d6965647f818d13393ec8608c96f84efede2552e","before":"684e9f185eabe3f3da563188662c588571f0a145","commits":[{"sha":"42cab2042fdcee0f0e80e151812f887912731112","author":{"name":"tinlin","email":"dde27ca0b4fe28cfdb0765fcbea98bb9e414b436@codeaurora.org"},"message":"qcacld-2.0: Compare ssid IE length in limLookupNaddHashEntry\n\nIn commit I5c79bff3427a842036af788fea5003a96c7696a6,\nssid IE length address is compared in limLookupNaddHashEntry,\nwhich results memory leak. Compare ssid IE length to fix\nthis issue.\n\nChange-Id: I8fbf12b612297443319a9f5ff17140758200721b\nCRs-Fixed: 2266859","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/42cab2042fdcee0f0e80e151812f887912731112"},{"sha":"4ef1db74dedaf44b40751b34f208116f7fa6b1bf","author":{"name":"Lihua Liu","email":"9fc3e64f1b100e1e0f2d7167a430be56eb3d902c@codeaurora.org"},"message":"qcacld-2.0: Add vdev id sanity check in wma stats event handlers\n\nPropagation from qcacld-3.0 to qcacld-2.0\n\nStats events are sent by WLAN FW based on over the air frame reception\nand may contain incorrect vdev id hence sanitize vdev id received from\nFW in stats events before accessing interface array based on it.\n\nChange-Id: I4ecc73fc27285c98c0ea8cebc27955213cd68399\nCRs-Fixed: 2264008","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/4ef1db74dedaf44b40751b34f208116f7fa6b1bf"},{"sha":"7ce462891bbbed40010266b83b1a053d957319bf","author":{"name":"Alok Kumar","email":"4065aaaeceaffcb96b0bedc74b6a669017ffc328@codeaurora.org"},"message":"qcacld-2.0: Fix information leak issue during memcpy\n\nThe buffer allocated with lenth \"ATH6KL_FWLOG_PAYLOAD_SIZE \"\nis not initialized, this may lead to information leak during\nmemcpy when len < ATH6KL_FWLOG_PAYLOAD_SIZE.\n\nTo resolve this issue, memset the buffer for length\n(ATH6KL_FWLOG_PAYLOAD_SIZE - len) to 0\n\nChange-Id: If4a49347d674ad2af0438b408a4a4b9308c61026\nCRs-Fixed: 2253103","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/7ce462891bbbed40010266b83b1a053d957319bf"},{"sha":"74aeda9a48b1e33902731311bed00b41b98e335e","author":{"name":"Ke Huang","email":"2a33d47dd86f8bda98ba4b1c661b29e658bad25a@codeaurora.org"},"message":"qcacld-2.0: Fix the dsrc_config fail issue\n\nRevert the changes of Validating NLA attr in\nwlan_hdd_cfg80211_ocb_set_config API to fix the\ndsrc_config fail issue.\n\nChange-Id: I5037498a510820a86cba9e61149640a957b46086\nCRs-Fixed: 2218073","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/74aeda9a48b1e33902731311bed00b41b98e335e"},{"sha":"6e87474bdcb2b8cb5eb114c59796123beaf23dc1","author":{"name":"lifeng","email":"e9013a864836aa2025c7ce32c2e0399d9d5917a1@qti.qualcomm.com"},"message":"qcacld-2.0: Fix buffer overwrite in limMlmAddBss()\n\npropagation from qcacld-3.0 to qcacld-2.0\n\nFix buffer overwrite in limMlmAddBss() by adding\nvalidation check.\n\nChange-Id: I67b8b63b6de33390ee5288fc6f6cef52f9203c1f\nCRs-Fixed: 2268657","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/6e87474bdcb2b8cb5eb114c59796123beaf23dc1"},{"sha":"ddd53dd575db1a46c2206aa4ddedf0524ffda99e","author":{"name":"Tiger Yu","email":"62f72082223e4c26deb23937228d00ac28370ed2@codeaurora.org"},"message":"qcacld-2.0: Fix buffer overflow in process_tx_info and process_rx_info\n\nCurrently data in \"pl_tgt_hdr\" is used directly from firmware without\nany length check which may cause buffer over-read.\n\nTo address this issue add length check before accessing data offset\n\nChange-Id: Ic2930fdf7168b79a8522be282b0e1cd19214742a\nCRs-Fixed: 2240226","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/ddd53dd575db1a46c2206aa4ddedf0524ffda99e"},{"sha":"8dfd752f716edc423c7271be3ee4f49369a86be1","author":{"name":"Sravan Kumar Kairam","email":"6578f482633a39983995a5a7b5c91070144a0355@codeaurora.org"},"message":"qcacld-2.0: Fix possible OOB issue in ol_tx_desc_update_group_credit\n\nCurrently tx desc id is extracted from HTT message and it is used\nwithout check. This may cause possible OOB array read. To address\nthis add check for valid tx desc id.\n\nChange-Id: I121fc4d550aa587f00ec315e3a20dfb136f4d7af\nCRs-Fixed: 2225461","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/8dfd752f716edc423c7271be3ee4f49369a86be1"},{"sha":"0b4acc6b76763aa0a10fe5bfff3297eecb3d1a4b","author":{"name":"Zhang Qian","email":"e788586d308283082e1fac3a0a7a915067b3c554@codeaurora.org"},"message":"qcacld-2.0: Add length check for UDP response payload\n\nStrlen() is unsafe to get string length. Change it to strnlen in\nwma_send_udp_resp_offload_cmd to avoid potential OOB read.\n\nChange-Id: I8b6fd9239b7f9e4bdb4facd217bbc1f9f914ac4c\nCRs-Fixed: 2226834","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/0b4acc6b76763aa0a10fe5bfff3297eecb3d1a4b"},{"sha":"d6965647f818d13393ec8608c96f84efede2552e","author":{"name":"Rakesh Pillai","email":"a1a75c72a8c8e92ad2a03477fdec5d7d3868406a@codeaurora.org"},"message":"qcacld-2.0: Fix Use-After-Free in ol_txrx_pdev_detach\n\nThe use TAILQ_FOREACH for freeing the fw_stats list during\npdev detach causes a use-after-free condition, which can lead\nto unexpected behavior during the driver load or unload.\nFix the possible Use-after-free condition in pdev detach, by\nusing TAILQ_FOREACH_SAFE instead of TAILQ_FOREACH for freeing\nthe fw_stats list.\n\nCRs-Fixed: 2257124\nChange-Id: I5dfcc5e3f0d2e77a5f6226eca06bc6ab1af4e643","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/d6965647f818d13393ec8608c96f84efede2552e"}]}
{"actor":{"display_login":"syphyr"}}