{"push_id":2410061221,"size":1000,"distinct_size":1,"ref":"refs/heads/rpi-4.9.80-re4son","head":"64d5810a9f65c825c05dd0f316f62e6f0b1e10c5","before":"8f04cb23b3c711d3c3c2749fb37765db4e4a85e5","commits":[{"sha":"985b5b238436f015e4368d82c032d3ce085efe17","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-buf/sw-sync: Prevent user overflow on timeline advance\n\ncommit 8f66d3aa1735bc95ae58d846a157357e8d41abb8 upstream.\n\nThe timeline is u32, which limits any single advance to INT_MAX so that\nwe can detect all fences that need signaling.\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nCc: Sumit Semwal <sumit.semwal@linaro.org>\nCc: Sean Paul <seanpaul@chromium.org>\nCc: Gustavo Padovan <gustavo@padovan.org>\nReviewed-by: Sean Paul <seanpaul@chromium.org>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170629125930.821-3-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/985b5b238436f015e4368d82c032d3ce085efe17"},{"sha":"f14ad42b8743897d140808467ed4ae3ce93bd0a5","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-buf/sw-sync: Reduce irqsave/irqrestore from known context\n\ncommit a6aa8fca4d792c72947e341d7842d2f700534335 upstream.\n\nIf we know the context under which we are called, then we can use the\nsimpler form of spin_lock_irq (saving the save/restore).\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nCc: Sumit Semwal <sumit.semwal@linaro.org>\nCc: Sean Paul <seanpaul@chromium.org>\nCc: Gustavo Padovan <gustavo@padovan.org>\nReviewed-by: Sean Paul <seanpaul@chromium.org>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170629125930.821-4-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/f14ad42b8743897d140808467ed4ae3ce93bd0a5"},{"sha":"1bf0b23c07f1e23f23c05d4f8223ebdebd13c3f1","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-buf/sw-sync: sync_pt is private and of fixed size\n\ncommit 3b52ce44e720c240afc4c4b03140d7b7811b23bd upstream.\n\nSince sync_pt is only allocated from a single location and is no longer\nthe base class for fences (that is struct dma_fence) it no longer needs\na generic unsized allocator.\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nCc: Sumit Semwal <sumit.semwal@linaro.org>\nCc: Sean Paul <seanpaul@chromium.org>\nCc: Gustavo Padovan <gustavo@padovan.org>\nReviewed-by: Sean Paul <seanpaul@chromium.org>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170629125930.821-5-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/1bf0b23c07f1e23f23c05d4f8223ebdebd13c3f1"},{"sha":"e82ecb230924314b848b68f5dade1ccf38bea838","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-buf/sw-sync: Fix locking around sync_timeline lists\n\ncommit d3862e44daa7a0c94d2f6193502a8c49379acfce upstream.\n\nThe sync_pt were not adding themselves atomically to the timeline lists,\ncorruption imminent.  Only a single list is required to track the\nunsignaled sync_pt, so reduce it and rename the lock more appropriately\nalong with using idiomatic names to distinguish a list from links along\nit.\n\nv2: Prevent spinlock recursion on free during create (next patch) and\nfixup crossref in kerneldoc\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nCc: Sumit Semwal <sumit.semwal@linaro.org>\nCc: Sean Paul <seanpaul@chromium.org>\nCc: Gustavo Padovan <gustavo@padovan.org>\nReviewed-by: Sean Paul <seanpaul@chromium.org>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170629210532.5617-1-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/e82ecb230924314b848b68f5dade1ccf38bea838"},{"sha":"db767404ad09b419779704fff4709a25f1dc252b","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-buf/sw-sync: Use an rbtree to sort fences in the timeline\n\ncommit f1e8c67123cf171e2b0357e885e426328b241d7d upstream.\n\nReduce the list iteration when incrementing the timeline by storing the\nfences in increasing order.\n\nv2: Prevent spinlock recursion on free during create\nv3: Fixup rebase conflict inside comments that escaped the compiler.\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nCc: Sumit Semwal <sumit.semwal@linaro.org>\nCc: Sean Paul <seanpaul@chromium.org>\nCc: Gustavo Padovan <gustavo@padovan.org>\nReviewed-by: Sean Paul <seanpaul@chromium.org>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170629211253.22766-1-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/db767404ad09b419779704fff4709a25f1dc252b"},{"sha":"4496b88c06744a9a92088e1924c0b39e225898b2","author":{"name":"Gustavo Padovan","email":"f0cfc385c99d41b4038b74144a18c01795200237@collabora.com"},"message":"dma-buf/sw_sync: move timeline_fence_ops around\n\ncommit 150b6a9d7d6fffb95c0a5349960a10569e8218b5 upstream.\n\nWe are going to use timeline_fence_signaled() in a internal function in\nthe next commit.\n\nCc: Chris Wilson <chris@chris-wilson.co.uk>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nReviewed-by: Chris Wilson <chris@chris-wilson.co.uk>\nLink: https://patchwork.freedesktop.org/patch/msgid/20170729152217.8362-1-gustavo@padovan.org\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/4496b88c06744a9a92088e1924c0b39e225898b2"},{"sha":"9ae85fabdfc0c74c2ac32219e116546e2a5a6309","author":{"name":"Gustavo Padovan","email":"f0cfc385c99d41b4038b74144a18c01795200237@collabora.com"},"message":"dma-buf/sw_sync: clean up list before signaling the fence\n\ncommit 3792b7c1a70815fe4e954221c096f9278638fd21 upstream.\n\nIf userspace already dropped its own reference by closing the sw_sync\nfence fd we might end up in a deadlock where\ndma_fence_is_signaled_locked() will trigger the release of the fence and\nthus try to hold the lock to remove the fence from the list.\n\ndma_fence_is_signaled_locked() tries to release/free the fence and hold\nthe lock in the process.\n\nWe fix that by changing the order operation and clean up the list and\nrb-tree first.\n\nv2: Drop fence get/put dance and manipulate the list first (Chris Wilson)\n\nCc: Chris Wilson <chris@chris-wilson.co.uk>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nReviewed-by: Chris Wilson <chris@chris-wilson.co.uk>\nLink: https://patchwork.freedesktop.org/patch/msgid/20170729152217.8362-2-gustavo@padovan.org\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/9ae85fabdfc0c74c2ac32219e116546e2a5a6309"},{"sha":"f55d17e9c3af7bf2fdb38c52a9abe4d4cfc0137c","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-fence: Clear fence->status during dma_fence_init()\n\ncommit 83dd1376fd92f33bdeca9e83d479534a4e7f870b upstream.\n\nAs the fence->status is an optional field that may be set before\ndma_fence_signal() is called to convey that the fence completed with an\nerror, we have to ensure that it is always set to zero on initialisation\nso that the typical use (i.e. unset) always flags a successful completion.\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nReviewed-by: Tvrtko Ursulin <tvrtko.ursulin@intel.com>\nReviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>\nReviewed-by: Sumit Semwal <sumit.semwal@linaro.org>\nSigned-off-by: Sumit Semwal <sumit.semwal@linaro.org>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170104141222.6992-1-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/f55d17e9c3af7bf2fdb38c52a9abe4d4cfc0137c"},{"sha":"d3b029a44e14f5226fd9b410a0a70eb9b7ed6beb","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-fence: Wrap querying the fence->status\n\ncommit d6c99f4bf093a58d3ab47caaec74b81f18bc4e3f upstream.\n\nThe fence->status is an optional field that is only valid once the fence\nhas been signaled. (Driver may fill the fence->status with an error code\nprior to calling dma_fence_signal().) Given the restriction upon its\nvalidity, wrap querying of the fence->status into a helper\ndma_fence_get_status().\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nReviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>\nReviewed-by: Sumit Semwal <sumit.semwal@linaro.org>\nSigned-off-by: Sumit Semwal <sumit.semwal@linaro.org>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170104141222.6992-2-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/d3b029a44e14f5226fd9b410a0a70eb9b7ed6beb"},{"sha":"f5e0724e76c2c8efb4d3dc43c24228b409bbbfe9","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"dma-fence: Introduce drm_fence_set_error() helper\n\ncommit a009e975da5c7d42a7f5eaadc54946eb5f76c9af upstream.\n\nThe dma_fence.error field (formerly known as dma_fence.status) is an\noptional field that may be set by drivers before calling\ndma_fence_signal(). The field can be used to indicate that the fence was\ncompleted in err rather than with success, and is visible to other\nconsumers of the fence and to userspace via sync_file.\n\nThis patch renames the field from status to error so that its meaning is\nhopefully more clear (and distinct from dma_fence_get_status() which is\na composite between the error state and signal state) and adds a helper\nthat validates the preconditions of when it is suitable to adjust the\nerror field.\n\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nReviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>\nReviewed-by: Sumit Semwal <sumit.semwal@linaro.org>\nSigned-off-by: Sumit Semwal <sumit.semwal@linaro.org>\nLink: http://patchwork.freedesktop.org/patch/msgid/20170104141222.6992-3-chris@chris-wilson.co.uk\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/f5e0724e76c2c8efb4d3dc43c24228b409bbbfe9"},{"sha":"424bdc5df002f9f9d802f488f27696a68c0a5c59","author":{"name":"Dominik Behr","email":"c8739490d1272ac9444ad5bcdd0a3337c4c6b157@chromium.org"},"message":"dma-buf/sw_sync: force signal all unsignaled fences on dying timeline\n\ncommit ea4d5a270b57fa8d4871f372ca9b97b7697fdfda upstream.\n\nTo avoid hanging userspace components that might have been waiting on the\nactive fences of the destroyed timeline we need to signal with error all\nremaining fences on such timeline.\n\nThis restore the default behaviour of the Android sw_sync framework, which\nAndroid still relies on. It was broken on the dma fence conversion a few\nyears ago and never fixed.\n\nv2: Do not bother with cleanup do the list (Chris Wilson)\n\nReviewed-by: Chris Wilson <chris@chris-wilson.co.uk>\nSigned-off-by: Dominik Behr <dbehr@chromium.org>\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.com>\nLink: https://patchwork.freedesktop.org/patch/msgid/20170907190246.16425-2-gustavo@padovan.org\n[s/dma_fence/fence/g - gregkh]\nCc: Jisheng Zhang <Jisheng.Zhang@synaptics.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/424bdc5df002f9f9d802f488f27696a68c0a5c59"},{"sha":"3a83421d482e7d7c6f4251dcd825548e5262c054","author":{"name":"Gustavo Padovan","email":"f0cfc385c99d41b4038b74144a18c01795200237@collabora.co.uk"},"message":"dma-buf/sync_file: hold reference to fence when creating sync_file\n\ncommit 30cd85dd6edc86ea8d8589efb813f1fad41ef233 upstream.\n\nfence referencing was out of balance. It was not taking any ref to the\nfence at creating time, but it was putting a reference when freeing the\nsync file.\n\nThis patch fixes the balancing issue by getting a reference for the fence\nwhen creating the sync_file.\n\nSigned-off-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>\nSigned-off-by: Sean Paul <seanpaul@chromium.org>\nLink: http://patchwork.freedesktop.org/patch/msgid/1476899313-22241-1-git-send-email-gustavo@padovan.org\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/3a83421d482e7d7c6f4251dcd825548e5262c054"},{"sha":"0af23e49316d7870b8f2550a72052bf7d608f230","author":{"name":"Daniel Vetter","email":"4f5189bfa310957cda373dea5355a767cfa5df2f@ffwll.ch"},"message":"dma-buf: Update kerneldoc for sync_file_create\n\ncommit 24a367348a017555f982a9ee137070a7a821fa97 upstream.\n\nThis was missed when adding a dma_fence_get call. While at it also\nremove the kerneldoc for the static inline helper - no point\ndocumenting internals down to every detail.\n\nFixes: 30cd85dd6edc (\"dma-buf/sync_file: hold reference to fence when creating sync_file\")\nCc: Gustavo Padovan <gustavo.padovan@collabora.co.uk>\nCc: Sean Paul <seanpaul@chromium.org>\nCc: linux-doc@vger.kernel.org\nCc: Jonathan Corbet <corbet@lwn.net>\nCc: Sumit Semwal <sumit.semwal@linaro.org>\nSigned-off-by: Daniel Vetter <daniel.vetter@intel.com>\nReviewed-by: Gustavo Padovan <gustavo.padovan@collabora.co.uk>\nSigned-off-by: Sumit Semwal <sumit.semwal@linaro.org>\nLink: http://patchwork.freedesktop.org/patch/msgid/20161209185309.1682-3-daniel.vetter@ffwll.ch\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/0af23e49316d7870b8f2550a72052bf7d608f230"},{"sha":"e328dff288e68a94ae1ef0c43e3f8c6ad9fbf297","author":{"name":"Mike Looijmans","email":"87da5b72704065dbd43667b66d4cb4a117f1d631@topic.nl"},"message":"usb: hub: Cycle HUB power when initialization fails\n\ncommit 973593a960ddac0f14f0d8877d2d0abe0afda795 upstream.\n\nSometimes the USB device gets confused about the state of the initialization and\nthe connection fails. In particular, the device thinks that it's already set up\nand running while the host thinks the device still needs to be configured. To\nwork around this issue, power-cycle the hub's output to issue a sort of \"reset\"\nto the device. This makes the device restart its state machine and then the\ninitialization succeeds.\n\nThis fixes problems where the kernel reports a list of errors like this:\n\nusb 1-1.3: device not accepting address 19, error -71\n\nThe end result is a non-functioning device. After this patch, the sequence\nbecomes like this:\n\nusb 1-1.3: new high-speed USB device number 18 using ci_hdrc\nusb 1-1.3: device not accepting address 18, error -71\nusb 1-1.3: new high-speed USB device number 19 using ci_hdrc\nusb 1-1.3: device not accepting address 19, error -71\nusb 1-1-port3: attempt power cycle\nusb 1-1.3: new high-speed USB device number 21 using ci_hdrc\nusb-storage 1-1.3:1.2: USB Mass Storage device detected\n\nSigned-off-by: Mike Looijmans <mike.looijmans@topic.nl>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/e328dff288e68a94ae1ef0c43e3f8c6ad9fbf297"},{"sha":"34ba2f04a480101c3d60918a45f68ff66973ef49","author":{"name":"Yu Chen","email":"e666631206d99c940ba12bbc4710a486fcdaf065@huawei.com"},"message":"usb: xhci: fix panic in xhci_free_virt_devices_depth_first\n\ncommit 80e457699a8dbdd70f2d26911e46f538645c55fc upstream.\n\nCheck vdev->real_port 0 to avoid panic\n[    9.261347] [<ffffff800884a390>] xhci_free_virt_devices_depth_first+0x58/0x108\n[    9.261352] [<ffffff800884a814>] xhci_mem_cleanup+0x1bc/0x570\n[    9.261355] [<ffffff8008842de8>] xhci_stop+0x140/0x1c8\n[    9.261365] [<ffffff80087ed304>] usb_remove_hcd+0xfc/0x1d0\n[    9.261369] [<ffffff80088551c4>] xhci_plat_remove+0x6c/0xa8\n[    9.261377] [<ffffff80086e928c>] platform_drv_remove+0x2c/0x70\n[    9.261384] [<ffffff80086e6ea0>] __device_release_driver+0x80/0x108\n[    9.261387] [<ffffff80086e7a1c>] device_release_driver+0x2c/0x40\n[    9.261392] [<ffffff80086e5f28>] bus_remove_device+0xe0/0x120\n[    9.261396] [<ffffff80086e2e34>] device_del+0x114/0x210\n[    9.261399] [<ffffff80086e9e00>] platform_device_del+0x30/0xa0\n[    9.261403] [<ffffff8008810bdc>] dwc3_otg_work+0x204/0x488\n[    9.261407] [<ffffff80088133fc>] event_work+0x304/0x5b8\n[    9.261414] [<ffffff80080e31b0>] process_one_work+0x148/0x490\n[    9.261417] [<ffffff80080e3548>] worker_thread+0x50/0x4a0\n[    9.261421] [<ffffff80080e9ea0>] kthread+0xe8/0x100\n[    9.261427] [<ffffff8008083680>] ret_from_fork+0x10/0x50\n\nThe problem can occur if xhci_plat_remove() is called shortly after\nxhci_plat_probe(). While xhci_free_virt_devices_depth_first been\ncalled before the device has been setup and get real_port initialized.\nThe problem occurred on Hikey960 and was reproduced by Guenter Roeck\non Kevin with chromeos-4.4.\n\nFixes: ee8665e28e8d (\"xhci: free xhci virtual devices with leaf nodes first\")\nCc: Guenter Roeck <groeck@google.com>\nReviewed-by: Guenter Roeck <groeck@chromium.org>\nTested-by: Guenter Roeck <linux@roeck-us.net>\nSigned-off-by: Fan Ning <fanning4@hisilicon.com>\nSigned-off-by: Li Rui <lirui39@hisilicon.com>\nSigned-off-by: yangdi <yangdi10@hisilicon.com>\nSigned-off-by: Yu Chen <chenyu56@huawei.com>\nSigned-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/34ba2f04a480101c3d60918a45f68ff66973ef49"},{"sha":"05ffc7ed55279d659a3e6786e1ffa54eb280a80d","author":{"name":"Masakazu Mokuno","email":"2a3a61c4a6e0d6f346e566b4fa1b1d420b3c1d0c@gmail.com"},"message":"USB: core: Add type-specific length check of BOS descriptors\n\ncommit 81cf4a45360f70528f1f64ba018d61cb5767249a upstream.\n\nAs most of BOS descriptors are longer in length than their header\n'struct usb_dev_cap_header', comparing solely with it is not sufficient\nto avoid out-of-bounds access to BOS descriptors.\n\nThis patch adds descriptor type specific length check in\nusb_get_bos_descriptor() to fix the issue.\n\nSigned-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/05ffc7ed55279d659a3e6786e1ffa54eb280a80d"},{"sha":"d6ab871c432dbb30d8a186347f4d9ebd22041b6a","author":{"name":"Mateusz Berezecki","email":"c115efd1e60b8bd71741a93e4c310b46fbf20919@fastmail.fm"},"message":"USB: Increase usbfs transfer limit\n\ncommit 1129d270cbfbb7e2b1ec3dede4a13930bdd10e41 upstream.\n\nPromote a variable keeping track of USB transfer memory usage to a\nwider data type and allow for higher bandwidth transfers from a large\nnumber of USB devices connected to a single host.\n\nSigned-off-by: Mateusz Berezecki <mateuszb@fastmail.fm>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/d6ab871c432dbb30d8a186347f4d9ebd22041b6a"},{"sha":"545c10375330c9212227a6a7efd84f49ccd6c9b2","author":{"name":"Dan Carpenter","email":"60b2bf2bc0bec4ca4a4b046ca7ef9255248abff8@oracle.com"},"message":"USB: devio: Prevent integer overflow in proc_do_submiturb()\n\ncommit 57999d1107c1e60c2ca7088f2ac0f819e2f554b3 upstream.\n\nThere used to be an integer overflow check in proc_do_submiturb() but\nwe removed it.  It turns out that it's still required.  The\nuurb->buffer_length variable is a signed integer and it's controlled by\nthe user.  It can lead to an integer overflow when we do:\n\n\tnum_sgs = DIV_ROUND_UP(uurb->buffer_length, USB_SG_SIZE);\n\nIf we strip away the macro then that line looks like this:\n\n\tnum_sgs = (uurb->buffer_length + USB_SG_SIZE - 1) / USB_SG_SIZE;\n                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\nIt's the first addition which can overflow.\n\nFixes: 1129d270cbfb (\"USB: Increase usbfs transfer limit\")\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/545c10375330c9212227a6a7efd84f49ccd6c9b2"},{"sha":"20c315ebabc5a63b0bb169ddd60455ee0b70633e","author":{"name":"Oliver Neukum","email":"af55dedc0d50bd691239218b486da844e4a16906@suse.com"},"message":"USB: usbfs: Filter flags passed in from user space\n\ncommit 446f666da9f019ce2ffd03800995487e79a91462 upstream.\n\nUSBDEVFS_URB_ISO_ASAP must be accepted only for ISO endpoints.\nImprove sanity checking.\n\nReported-by: Andrey Konovalov <andreyknvl@google.com>\nSigned-off-by: Oliver Neukum <oneukum@suse.com>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/20c315ebabc5a63b0bb169ddd60455ee0b70633e"},{"sha":"08dd03812e8b1dba97eb00092a8cfbe8a7ebc13c","author":{"name":"Colin Ian King","email":"61b69653f478c16de27cbf2a77617b5a614a704a@canonical.com"},"message":"usb: host: fix incorrect updating of offset\n\ncommit 1d5a31582ef046d3b233f0da1a68ae26519b2f0a upstream.\n\nThe variable temp is incorrectly being updated, instead it should\nbe offset otherwise the loop just reads the same capability value\nand loops forever.  Thanks to Alan Stern for pointing out the\ncorrect fix to my original fix.  Fix also cleans up clang warning:\n\ndrivers/usb/host/ehci-dbg.c:840:4: warning: Value stored to 'temp'\nis never read\n\nFixes: d49d43174400 (\"USB: misc ehci updates\")\nSigned-off-by: Colin Ian King <colin.king@canonical.com>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/Re4son/re4son-raspberrypi-linux/commits/08dd03812e8b1dba97eb00092a8cfbe8a7ebc13c"}]}
{"actor":{"display_login":"Re4son"}}