{"push_id":2607148554,"size":939,"distinct_size":939,"ref":"refs/heads/android-4.14","head":"5737f543d5adc54e5781777f1c3a96d98a4008d1","before":"b3805106dbc8f0a0b079196f0eaf08c46bd26f8a","commits":[{"sha":"99e5f1a4b96d2b236b565965143d37c5b3a26838","author":{"name":"Jaegeuk Kim","email":"71255387a32c360dfbe6dfb7aaeb123bf1dc8cb6@kernel.org"},"message":"UPSTREAM: f2fs: clear PageError on writepage - part 2\n\nThis patch clears PageError in some pages tagged by read path, but when we\nwrite the pages with valid contents, writepage should clear the bit likewise\next4.\n\nChange-Id: I9a5362d46de8a0e70274d1e1af17ec6b83b543af\nReviewed-by: Chao Yu <yuchao0@huawei.com>\nSigned-off-by: Jaegeuk Kim <jaegeuk@kernel.org>\n(cherry picked from commit ea3ffc6f12afa6e3c84173ec94601bc635e0900e)","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/99e5f1a4b96d2b236b565965143d37c5b3a26838"},{"sha":"2ae4606507f1804b19b369f757a83c324f4246d2","author":{"name":"Jaegeuk Kim","email":"71255387a32c360dfbe6dfb7aaeb123bf1dc8cb6@kernel.org"},"message":"UPSTREAM: f2fs: avoid fsync() failure caused by EAGAIN in writepage()\n\npageout() in MM traslates EAGAIN, so calls handle_write_error()\n -> mapping_set_error() -> set_bit(AS_EIO, ...).\n file_write_and_wait_range() will see EIO error, which is critical\n to return value of fsync() followed by atomic_write failure to user.\n\nChange-Id: Ifdd5e09defcf0705901ff7f23001d68a811da3af\nSigned-off-by: Jaegeuk Kim <jaegeuk@kernel.org>\n(cherry picked from commit 1ccd6c4ff9ccd74bb87903067618815d326af242)","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/2ae4606507f1804b19b369f757a83c324f4246d2"},{"sha":"3a928a262c1c1c63c929ebe40c181376afbcfe41","author":{"name":"Xin Long","email":"ed9bd6f22d2a1e0b1507d3ddc300dc248265d19a@gmail.com"},"message":"geneve: update skb dst pmtu on tx path\n\ncommit 52a589d51f1008f62569bf89e95b26221ee76690 upstream.\n\nCommit a93bf0ff4490 (\"vxlan: update skb dst pmtu on tx path\") has fixed\na performance issue caused by the change of lower dev's mtu for vxlan.\n\nThe same thing needs to be done for geneve as well.\n\nNote that geneve cannot adjust it's mtu according to lower dev's mtu\nwhen creating it. The performance is very low later when netperfing\nover it without fixing the mtu manually. This patch could also avoid\nthis issue.\n\nSigned-off-by: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nCc: Thomas Deutschmann <whissi@gentoo.org>\nCc: Eddie Chapman <eddie@ehuk.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/3a928a262c1c1c63c929ebe40c181376afbcfe41"},{"sha":"6a3c946b205fd5bc3be583a1f3adbda11128e7ed","author":{"name":"Nicolas Dichtel","email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com"},"message":"net: don't call update_pmtu unconditionally\n\ncommit f15ca723c1ebe6c1a06bc95fda6b62cd87b44559 upstream.\n\nSome dst_ops (e.g. md_dst_ops)) doesn't set this handler. It may result to:\n\"BUG: unable to handle kernel NULL pointer dereference at           (null)\"\n\nLet's add a helper to check if update_pmtu is available before calling it.\n\nFixes: 52a589d51f10 (\"geneve: update skb dst pmtu on tx path\")\nFixes: a93bf0ff4490 (\"vxlan: update skb dst pmtu on tx path\")\nCC: Roman Kapl <code@rkapl.cz>\nCC: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nCc: Thomas Deutschmann <whissi@gentoo.org>\nCc: Eddie Chapman <eddie@ehuk.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/6a3c946b205fd5bc3be583a1f3adbda11128e7ed"},{"sha":"e9caf1e1d5d4a74956a358800af20cb5d8cd2eae","author":{"name":"Tejun Heo","email":"546b05909706652891a87f7bfe385ae147f61f91@kernel.org"},"message":"percpu: include linux/sched.h for cond_resched()\n\ncommit 71546d100422bcc2c543dadeb9328728997cd23a upstream.\n\nmicroblaze build broke due to missing declaration of the\ncond_resched() invocation added recently.  Let's include linux/sched.h\nexplicitly.\n\nSigned-off-by: Tejun Heo <tj@kernel.org>\nReported-by: kbuild test robot <fengguang.wu@intel.com>\nCc: Guenter Roeck <linux@roeck-us.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/e9caf1e1d5d4a74956a358800af20cb5d8cd2eae"},{"sha":"63d9df9eb7a587c528d3fd97054835a7bdc430c1","author":{"name":"LEROY Christophe","email":"4e2d3d12816ace76f1cfa36c1816509bd24cf089@c-s.fr"},"message":"crypto: talitos - fix IPsec cipher in length\n\ncommit 2b1227301a8e4729409694e323b72c064c47cb6b upstream.\n\nFor SEC 2.x+, cipher in length must contain only the ciphertext length.\nIn case of using hardware ICV checking, the ICV length is provided via\nthe \"extent\" field of the descriptor pointer.\n\nCc: <stable@vger.kernel.org> # 4.8+\nFixes: 549bd8bc5987 (\"crypto: talitos - Implement AEAD for SEC1 using HMAC_SNOOP_NO_AFEU\")\nReported-by: Horia Geantă <horia.geanta@nxp.com>\nSigned-off-by: Christophe Leroy <christophe.leroy@c-s.fr>\nTested-by: Horia Geantă <horia.geanta@nxp.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\n[backported to 4.9.y, 4.14.y]\nSigned-off-by: Horia Geantă <horia.geanta@nxp.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/63d9df9eb7a587c528d3fd97054835a7bdc430c1"},{"sha":"c8a622ed9e53a8ac56a52d90920c8f991fc99aaf","author":{"name":"Ard Biesheuvel","email":"66d3c5fdaeea7ff1f996ad04f2c45e08ab38e2f5@linaro.org"},"message":"ACPI / button: make module loadable when booted in non-ACPI mode\n\ncommit ac1e55b1fdb27c1b07a0a6fe519f1291ff1e7d40 upstream.\n\nModules such as nouveau.ko and i915.ko have a link time dependency on\nacpi_lid_open(), and due to its use of acpi_bus_register_driver(),\nthe button.ko module that provides it is only loadable when booted in\nACPI mode. However, the ACPI button driver can be built into the core\nkernel as well, in which case the dependency can always be satisfied,\nand the dependent modules can be loaded regardless of whether the\nsystem was booted in ACPI mode or not.\n\nSo let's fix this asymmetry by making the ACPI button driver loadable\nas a module even if not booted in ACPI mode, so it can provide the\nacpi_lid_open() symbol in the same way as when built into the kernel.\n\nSigned-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>\n[ rjw: Minor adjustments of comments, whitespace and names. ]\nSigned-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/c8a622ed9e53a8ac56a52d90920c8f991fc99aaf"},{"sha":"c1e76c30079d81f09691d61f2a355a8deb9b8fc5","author":{"name":"Kristian Evensen","email":"ed4b9e36d7b45c95d901f5fd73a0ec1ecb6083b0@gmail.com"},"message":"USB: serial: option: Add support for Quectel EP06\n\ncommit 71a0483d56e784b1e11f38f10d7e22d265dbe244 upstream.\n\nThe Quectel EP06 is a Cat. 6 LTE modem, and the interface mapping is as\nfollows:\n\n0: Diag\n1: NMEA\n2: AT\n3: Modem\n\nInterface 4 is QMI and interface 5 is ADB, so they are blacklisted.\n\nThis patch should also be considered for -stable. The QMI-patch for this\nmodem is already in the -stable-queue.\n\nv1->v2:\n* Updated commit prefix (thanks Johan Hovold)\n* Updated commit message slightly.\n\nSigned-off-by: Kristian Evensen <kristian.evensen@gmail.com>\nAcked-by: Johan Hovold <johan@kernel.org>\nCc: Bjørn Mork <bjorn@mork.no>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/c1e76c30079d81f09691d61f2a355a8deb9b8fc5"},{"sha":"5f6e6d063ac1836b1a012bf886b2c76b4f86d0de","author":{"name":"Takashi Iwai","email":"4596b3305151c7ee743192a95d394341e3d3b644@suse.de"},"message":"ALSA: hda - Fix incorrect usage of IS_REACHABLE()\n\ncommit 6a30abaa40b62aed46ef12ea4c16c48565bdb376 upstream.\n\nThe commit c469652bb5e8 (\"ALSA: hda - Use IS_REACHABLE() for\ndependency on input\") simplified the dependencies with IS_REACHABLE()\nmacro, but it broke due to its incorrect usage: it should have been\nIS_REACHABLE(CONFIG_INPUT) instead of IS_REACHABLE(INPUT).\n\nFixes: c469652bb5e8 (\"ALSA: hda - Use IS_REACHABLE() for dependency on input\")\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/5f6e6d063ac1836b1a012bf886b2c76b4f86d0de"},{"sha":"e5e9a770cec20bb51a8024fbaa890e5d0bcbb521","author":{"name":"Takashi Iwai","email":"4596b3305151c7ee743192a95d394341e3d3b644@suse.de"},"message":"ALSA: pcm: Check PCM state at xfern compat ioctl\n\ncommit f13876e2c33a657a71bcbb10f767c0951b165020 upstream.\n\nSince snd_pcm_ioctl_xfern_compat() has no PCM state check, it may go\nfurther and hit the sanity check pcm_sanity_check() when the ioctl is\ncalled right after open.  It may eventually spew a kernel warning, as\ntriggered by syzbot, depending on kconfig.\n\nThe lack of PCM state check there was just an oversight.  Although\nit's no real crash, the spurious kernel warning is annoying, so let's\nadd the proper check.\n\nReported-by: syzbot+1dac3a4f6bc9c1c675d4@syzkaller.appspotmail.com\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/e5e9a770cec20bb51a8024fbaa890e5d0bcbb521"},{"sha":"dfe7f043bcfccc02362958273cec0dacd1343244","author":{"name":"Takashi Iwai","email":"4596b3305151c7ee743192a95d394341e3d3b644@suse.de"},"message":"ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()\n\ncommit 8f22e52528cc372b218b5f100457469615c733ce upstream.\n\nThe sequencer virmidi code has an open race at its output trigger\ncallback: namely, virmidi keeps only one event packet for processing\nwhile it doesn't protect for concurrent output trigger calls.\n\nsnd_virmidi_output_trigger() tries to process the previously\nunfinished event before starting encoding the given MIDI stream, but\nthis is done without any lock.  Meanwhile, if another rawmidi stream\nstarts the output trigger, this proceeds further, and overwrites the\nevent package that is being processed in another thread.  This\neventually corrupts and may lead to the invalid memory access if the\nevent type is like SYSEX.\n\nThe fix is just to move the spinlock to cover both the pending event\nand the new stream.\n\nThe bug was spotted by a new fuzzer, RaceFuzzer.\n\nBugLink: http://lkml.kernel.org/r/20180426045223.GA15307@dragonet.kaist.ac.kr\nReported-by: DaeRyong Jeong <threeearcat@gmail.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/dfe7f043bcfccc02362958273cec0dacd1343244"},{"sha":"9581fff37b1aaafe675c2fe05dd59a8c13094e91","author":{"name":"Takashi Sakamoto","email":"d5ec7d0cd8074757a1f5eb708bc105c3065a65ea@sakamocchi.jp"},"message":"ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation for array index\n\ncommit 52759c0963510a2843774aac9b65ccaed3308dc0 upstream.\n\nAt a commit f91c9d7610a ('ALSA: firewire-lib: cache maximum length of\npayload to reduce function calls'), maximum size of payload for tx\nisochronous packet is cached to reduce the number of function calls.\n\nThis cache was programmed to updated at a first callback of ohci1394 IR\ncontext. However, the maximum size is required to queueing packets before\nstarting the isochronous context.\n\nAs a result, the cached value is reused to queue packets in next time to\nstarting the isochronous context. Then the cache is updated in a first\ncallback of the isochronous context. This can cause kernel NULL pointer\ndereference in a below call graph:\n\n(sound/firewire/amdtp-stream.c)\namdtp_stream_start()\n->queue_in_packet()\n  ->queue_packet()\n    (drivers/firewire/core-iso.c)\n    ->fw_iso_context_queue()\n      ->struct fw_card_driver.queue_iso()\n      (drivers/firewire/ohci.c)\n      = ohci_queue_iso()\n        ->queue_iso_packet_per_buffer()\n          buffer->pages[page]\n\nThe issued dereference occurs in a case that:\n - target unit supports different stream formats for sampling transmission\n   frequency.\n - maximum length of payload for tx stream in a first trial is bigger\n   than the length in a second trial.\n\nIn this case, correct number of pages are allocated for DMA and the 'pages'\narray has enough elements, while index of the element is wrongly calculated\naccording to the old value of length of payload in a call of\n'queue_in_packet()'. Then it causes the issue.\n\nThis commit fixes the critical bug. This affects all of drivers in ALSA\nfirewire stack in Linux kernel v4.12 or later.\n\n[12665.302360] BUG: unable to handle kernel NULL pointer dereference at 0000000000000030\n[12665.302415] IP: ohci_queue_iso+0x47c/0x800 [firewire_ohci]\n[12665.302439] PGD 0\n[12665.302440] P4D 0\n[12665.302450]\n[12665.302470] Oops: 0000 [#1] SMP PTI\n[12665.302487] Modules linked in: ...\n[12665.303096] CPU: 1 PID: 12760 Comm: jackd Tainted: P           OE   4.13.0-38-generic #43-Ubuntu\n[12665.303154] Hardware name:                  /DH77DF, BIOS KCH7710H.86A.0069.2012.0224.1825 02/24/2012\n[12665.303215] task: ffff9ce87da2ae80 task.stack: ffffb5b8823d0000\n[12665.303258] RIP: 0010:ohci_queue_iso+0x47c/0x800 [firewire_ohci]\n[12665.303301] RSP: 0018:ffffb5b8823d3ab8 EFLAGS: 00010086\n[12665.303337] RAX: ffff9ce4f4876930 RBX: 0000000000000008 RCX: ffff9ce88a3955e0\n[12665.303384] RDX: 0000000000000000 RSI: 0000000034877f00 RDI: 0000000000000000\n[12665.303427] RBP: ffffb5b8823d3b68 R08: ffff9ce8ccb390a0 R09: ffff9ce877639ab0\n[12665.303475] R10: 0000000000000108 R11: 0000000000000000 R12: 0000000000000003\n[12665.303513] R13: 0000000000000000 R14: ffff9ce4f4876950 R15: 0000000000000000\n[12665.303554] FS:  00007f2ec467f8c0(0000) GS:ffff9ce8df280000(0000) knlGS:0000000000000000\n[12665.303600] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[12665.303633] CR2: 0000000000000030 CR3: 00000002dcf90004 CR4: 00000000000606e0\n[12665.303674] Call Trace:\n[12665.303698]  fw_iso_context_queue+0x18/0x20 [firewire_core]\n[12665.303735]  queue_packet+0x88/0xe0 [snd_firewire_lib]\n[12665.303770]  amdtp_stream_start+0x19b/0x270 [snd_firewire_lib]\n[12665.303811]  start_streams+0x276/0x3c0 [snd_dice]\n[12665.303840]  snd_dice_stream_start_duplex+0x1bf/0x480 [snd_dice]\n[12665.303882]  ? vma_gap_callbacks_rotate+0x1e/0x30\n[12665.303914]  ? __rb_insert_augmented+0xab/0x240\n[12665.303936]  capture_prepare+0x3c/0x70 [snd_dice]\n[12665.303961]  snd_pcm_do_prepare+0x1d/0x30 [snd_pcm]\n[12665.303985]  snd_pcm_action_single+0x3b/0x90 [snd_pcm]\n[12665.304009]  snd_pcm_action_nonatomic+0x68/0x70 [snd_pcm]\n[12665.304035]  snd_pcm_prepare+0x68/0x90 [snd_pcm]\n[12665.304058]  snd_pcm_common_ioctl1+0x4c0/0x940 [snd_pcm]\n[12665.304083]  snd_pcm_capture_ioctl1+0x19b/0x250 [snd_pcm]\n[12665.304108]  snd_pcm_capture_ioctl+0x27/0x40 [snd_pcm]\n[12665.304131]  do_vfs_ioctl+0xa8/0x630\n[12665.304148]  ? entry_SYSCALL_64_after_hwframe+0xe9/0x139\n[12665.304172]  ? entry_SYSCALL_64_after_hwframe+0xe2/0x139\n[12665.304195]  ? entry_SYSCALL_64_after_hwframe+0xdb/0x139\n[12665.304218]  ? entry_SYSCALL_64_after_hwframe+0xd4/0x139\n[12665.304242]  ? entry_SYSCALL_64_after_hwframe+0xcd/0x139\n[12665.304265]  ? entry_SYSCALL_64_after_hwframe+0xc6/0x139\n[12665.304288]  ? entry_SYSCALL_64_after_hwframe+0xbf/0x139\n[12665.304312]  ? entry_SYSCALL_64_after_hwframe+0xb8/0x139\n[12665.304335]  ? entry_SYSCALL_64_after_hwframe+0xb1/0x139\n[12665.304358]  SyS_ioctl+0x79/0x90\n[12665.304374]  ? entry_SYSCALL_64_after_hwframe+0x72/0x139\n[12665.304397]  entry_SYSCALL_64_fastpath+0x24/0xab\n[12665.304417] RIP: 0033:0x7f2ec3750ef7\n[12665.304433] RSP: 002b:00007fff99e31388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n[12665.304465] RAX: ffffffffffffffda RBX: 00007fff99e312f0 RCX: 00007f2ec3750ef7\n[12665.304494] RDX: 0000000000000000 RSI: 0000000000004140 RDI: 0000000000000007\n[12665.304522] RBP: 0000556ebc63fd60 R08: 0000556ebc640560 R09: 0000000000000000\n[12665.304553] R10: 0000000000000001 R11: 0000000000000246 R12: 0000556ebc63fcf0\n[12665.304584] R13: 0000000000000000 R14: 0000000000000007 R15: 0000000000000000\n[12665.304612] Code: 01 00 00 44 89 eb 45 31 ed 45 31 db 66 41 89 1e 66 41 89 5e 0c 66 45 89 5e 0e 49 8b 49 08 49 63 d4 4d 85 c0 49 63 ff 48 8b 14 d1 <48> 8b 72 30 41 8d 14 37 41 89 56 04 48 63 d3 0f 84 ce 00 00 00\n[12665.304713] RIP: ohci_queue_iso+0x47c/0x800 [firewire_ohci] RSP: ffffb5b8823d3ab8\n[12665.304743] CR2: 0000000000000030\n[12665.317701] ---[ end trace 9d55b056dd52a19f ]---\n\nFixes: f91c9d7610a ('ALSA: firewire-lib: cache maximum length of payload to reduce function calls')\nCc: <stable@vger.kernel.org> # v4.12+\nSigned-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/9581fff37b1aaafe675c2fe05dd59a8c13094e91"},{"sha":"4e3460ae33c6a10d4908e3235070cbe0a7a3a280","author":{"name":"Robert Rosengren","email":"0af6cd949ac1597dccd064c04aa240ab9ec64971@axis.com"},"message":"ALSA: aloop: Mark paused device as inactive\n\ncommit 306a4f3ca7f3c7dfa473ebd19d66e40e59d99734 upstream.\n\nShow paused ALSA aloop device as inactive, i.e. the control\n\"PCM Slave Active\" set as false. Notification sent upon state change.\n\nThis makes it possible for client capturing from aloop device to know if\ndata is expected. Without it the client expects data even if playback\nis paused.\n\nSigned-off-by: Robert Rosengren <robert.rosengren@axis.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/4e3460ae33c6a10d4908e3235070cbe0a7a3a280"},{"sha":"bd0e2aec5686bc5aa9b93f5609d35b483321f751","author":{"name":"Takashi Iwai","email":"4596b3305151c7ee743192a95d394341e3d3b644@suse.de"},"message":"ALSA: aloop: Add missing cable lock to ctl API callbacks\n\ncommit 76b3421b39bd610546931fc923edcf90c18fa395 upstream.\n\nSome control API callbacks in aloop driver are too lazy to take the\nloopback->cable_lock and it results in possible races of cable access\nwhile it's being freed.  It eventually lead to a UAF, as reported by\nfuzzer recently.\n\nThis patch covers such control API callbacks and add the proper mutex\nlocks.\n\nReported-by: DaeRyong Jeong <threeearcat@gmail.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/bd0e2aec5686bc5aa9b93f5609d35b483321f751"},{"sha":"f4438b15755e2cf1a9ce15090efb649e1bb1b997","author":{"name":"Mathieu Desnoyers","email":"007bef6a47fb57dff675bfa1b0b798b4bdfbfc25@efficios.com"},"message":"tracepoint: Do not warn on ENOMEM\n\ncommit d66a270be3310d7aa132fec0cea77d3d32a0ff75 upstream.\n\nTracepoint should only warn when a kernel API user does not respect the\nrequired preconditions (e.g. same tracepoint enabled twice, or called\nto remove a tracepoint that does not exist).\n\nSilence warning in out-of-memory conditions, given that the error is\nreturned to the caller.\n\nThis ensures that out-of-memory error-injection testing does not trigger\nwarnings in tracepoint.c, which were seen by syzbot.\n\nLink: https://lkml.kernel.org/r/001a114465e241a8720567419a72@google.com\nLink: https://lkml.kernel.org/r/001a1140e0de15fc910567464190@google.com\nLink: http://lkml.kernel.org/r/20180315124424.32319-1-mathieu.desnoyers@efficios.com\n\nCC: Peter Zijlstra <peterz@infradead.org>\nCC: Jiri Olsa <jolsa@redhat.com>\nCC: Arnaldo Carvalho de Melo <acme@kernel.org>\nCC: Alexander Shishkin <alexander.shishkin@linux.intel.com>\nCC: Namhyung Kim <namhyung@kernel.org>\nCC: stable@vger.kernel.org\nFixes: de7b2973903c6 (\"tracepoint: Use struct pointer instead of name hash for reg/unreg tracepoints\")\nReported-by: syzbot+9c0d616860575a73166a@syzkaller.appspotmail.com\nReported-by: syzbot+4e9ae7fa46233396f64d@syzkaller.appspotmail.com\nSigned-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>\nSigned-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/f4438b15755e2cf1a9ce15090efb649e1bb1b997"},{"sha":"2c698f7b169a5534c783a6f3ab35f8db275f456b","author":{"name":"Bryant G Ly","email":"1024ba5f11bcf6a7ffb2ce4b8b54f508dfeeefbd@linux.vnet.ibm.com"},"message":"scsi: target: Fix fortify_panic kernel exception\n\ncommit f5957dade4f373b04fa1f5315a489f18cc2c4cb4 upstream.\n\nmemcmp() requires the two buffers passed as arguments to be at least\n'size' bytes long, otherwise a fortify_panic will trigger.\n\nUse memchr_inv() instead of memcmp() to determine whether the received\npayload is zeroed or not.\n\nThe bug was found by running a block backstore via LIO.\n\n[  496.212958] Call Trace:\n[  496.212960] [c0000007e58e3800] [c000000000cbbefc] fortify_panic+0x24/0x38 (unreliable)\n[  496.212965] [c0000007e58e3860] [d00000000f150c28] iblock_execute_write_same+0x3b8/0x3c0 [target_core_iblock]\n[  496.212976] [c0000007e58e3910] [d000000006c737d4] __target_execute_cmd+0x54/0x150 [target_core_mod]\n[  496.212982] [c0000007e58e3940] [d000000006d32ce4] ibmvscsis_write_pending+0x74/0xe0 [ibmvscsis]\n[  496.212991] [c0000007e58e39b0] [d000000006c74fc8] transport_generic_new_cmd+0x318/0x370 [target_core_mod]\n[  496.213001] [c0000007e58e3a30] [d000000006c75084] transport_handle_cdb_direct+0x64/0xd0 [target_core_mod]\n[  496.213011] [c0000007e58e3aa0] [d000000006c75298] target_submit_cmd_map_sgls+0x1a8/0x320 [target_core_mod]\n[  496.213021] [c0000007e58e3b30] [d000000006c75458] target_submit_cmd+0x48/0x60 [target_core_mod]\n[  496.213026] [c0000007e58e3bd0] [d000000006d34c20] ibmvscsis_scheduler+0x370/0x600 [ibmvscsis]\n[  496.213031] [c0000007e58e3c90] [c00000000013135c] process_one_work+0x1ec/0x580\n[  496.213035] [c0000007e58e3d20] [c000000000131798] worker_thread+0xa8/0x600\n[  496.213039] [c0000007e58e3dc0] [c00000000013a468] kthread+0x168/0x1b0\n[  496.213044] [c0000007e58e3e30] [c00000000000b528] ret_from_kernel_thread+0x5c/0xb4\n\n[mkp: tweaked commit message]\n\nFixes: 2237498f0b5c (\"target/iblock: Convert WRITE_SAME to blkdev_issue_zeroout\")\nSigned-off-by: Bryant G. Ly <bryantly@linux.vnet.ibm.com>\nReviewed-by: Steven Royer <seroyer@linux.vnet.ibm.com>\nTested-by: Taylor Jakobson <tjakobs@us.ibm.com>\nCc: Christoph Hellwig <hch@lst.de>\nCc: Nicholas Bellinger <nab@linux-iscsi.org>\nCc: <stable@vger.kernel.org> # v4.13+\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/2c698f7b169a5534c783a6f3ab35f8db275f456b"},{"sha":"894937021946214de310ebafef6462a19c6dfaba","author":{"name":"Dmitry Torokhov","email":"6b8646d310837fed93a129ed3c979b90c7f2674f@gmail.com"},"message":"Input: leds - fix out of bound access\n\ncommit 6bd6ae639683c0b41f46990d5c64ff9fbfa019dc upstream.\n\nUI_SET_LEDBIT ioctl() causes the following KASAN splat when used with\nled > LED_CHARGING:\n\n[ 1274.663418] BUG: KASAN: slab-out-of-bounds in input_leds_connect+0x611/0x730 [input_leds]\n[ 1274.663426] Write of size 8 at addr ffff88003377b2c0 by task ckb-next-daemon/5128\n\nThis happens because we were writing to the led structure before making\nsure that it exists.\n\nReported-by: Tasos Sahanidis <tasos@tasossah.com>\nTested-by: Tasos Sahanidis <tasos@tasossah.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/894937021946214de310ebafef6462a19c6dfaba"},{"sha":"10579ed39e20ed896347711640122e54e33455b5","author":{"name":"Vittorio Gambaletta (VittGam)","email":"1d90681f61ad975eae8c67663ddcc4c1dff95365@vittgam.net"},"message":"Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro\n\ncommit f372b81101e6895252298e563d634d5e44ae81e7 upstream.\n\nThis patch adds the correct platform data information for the Caroline\nChromebook, so that the mouse button does not get stuck in pressed state\nafter the first click.\n\nThe Samus button keymap and platform data definition are the correct\nones for Caroline, so they have been reused here.\n\nSigned-off-by: Vittorio Gambaletta <linuxbugs@vittgam.net>\nSigned-off-by: Salvatore Bellizzi <lkml@seppia.net>\nTested-by: Guenter Roeck <groeck@chromium.org>\nCc: stable@vger.kernel.org\n[dtor: adjusted vendor spelling to match shipping firmware]\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/10579ed39e20ed896347711640122e54e33455b5"},{"sha":"fcd835be6c17b30fc608ab72323c7a57a34b8296","author":{"name":"Ping-Ke Shih","email":"ea6025b70891bad3f189def6af4d8957132cf560@realtek.com"},"message":"rtlwifi: btcoex: Add power_on_setting routine\n\ncommit a44709bba70fb9badc44b6a551415b152db13182 upstream.\n\nAfter mac power-on sequence, wifi will start to work so notify btcoex the\nevent to configure registers especially related to antenna. This will not\nonly help to assign antenna but also to yield better user experience.\n\nSigned-off-by: Ping-Ke Shih <pkshih@realtek.com>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/fcd835be6c17b30fc608ab72323c7a57a34b8296"},{"sha":"b68c7af0b2e7d3675c67e977b200466e26142a7e","author":{"name":"Ping-Ke Shih","email":"ea6025b70891bad3f189def6af4d8957132cf560@realtek.com"},"message":"rtlwifi: cleanup 8723be ant_sel definition\n\ncommit af8a41cccf8f469165c6debc8fe07c5fd2ca501a upstream.\n\nSome HP laptops have only a single wifi antenna. This would not be a\nproblem except that they were shipped with an incorrectly encoded\nEFUSE. It should have been possible to open the computer and transfer\nthe antenna connection to the other terminal except that such action\nmight void the warranty, and moving the antenna broke the Windows\ndriver. The fix was to add a module option that would override the\nEFUSE encoding. That was done with commit c18d8f509571 (\"rtlwifi:\nrtl8723be: Add antenna select module parameter\"). There was still a\nproblem with Bluetooth coexistence, which was addressed with commit\nbaa170229095 (\"rtlwifi: btcoexist: Implement antenna selection\").\nThere were still problems, thus there were commit 0ff78adeef11\n(\"rtlwifi: rtl8723be: fix ant_sel code\") and commit 6d6226928369\n(\"rtlwifi: btcoexist: Fix antenna selection code\"). Despite all these\nattempts at fixing the problem, the code is not yet right. A proper\nfix is important as there are now instances of laptops having\nRTL8723DE chips with the same problem.\n\nThe module parameter ant_sel is used to control antenna number and path.\nAt present enum ANT_{X2,X1} is used to define the antenna number, but\nthis choice is not intuitive, thus change to a new enum ANT_{MAIN,AUX}\nto make it more readable. This change showed examples where incorrect\nvalues were used. It was also possible to remove a workaround in\nhalbtcoutsrc.c.\n\nThe experimental results with single antenna connected to specific path\nare now as follows:\n  ant_sel  ANT_MAIN(#1)  ANT_AUX(#2)\n     0        -8            -62\n     1        -62           -10\n     2        -6            -60\n\nSigned-off-by: Ping-Ke Shih <pkshih@realtek.com>\nFixes: c18d8f509571 (\"rtlwifi: rtl8723be: Add antenna select module parameter\")\nFixes: baa170229095 (\"rtlwifi: btcoexist: Implement antenna selection\")\nFixes: 0ff78adeef11 (\"rtlwifi: rtl8723be: fix ant_sel code\")\nFixes: 6d6226928369 (\"rtlwifi: btcoexist: Fix antenna selection code\")\nCc: Stable <stable@vger.kernel.org> # 4.7+\nReviewed-by: Larry Finger <Larry.Finger@lwfinger.net>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/youling257/android-4.9/commits/b68c7af0b2e7d3675c67e977b200466e26142a7e"}]}
{"actor":{"display_login":"youling257"}}