{"push_id":3172360729,"size":87,"distinct_size":2,"ref":"refs/heads/SONY-LA.UM.7.4.r1-03000-8x98.0_upstream_new","head":"5c295f3cb32e6a18224138b28c122583553f7645","before":"42155353528e96fa4249aab1727354addfc84bed","commits":[{"sha":"de06a3146c1932aa0cf78a721f19d3daa6aca538","author":{"name":"Dennis Wassenberg","email":"9904d09f91f413bbce5ce9ff7693490f4944ae00@secunet.com"},"message":"usb: core: Fix hub port connection events lost\n\ncommit 22454b79e6de05fa61a2a72d00d2eed798abbb75 upstream.\n\nThis will clear the USB_PORT_FEAT_C_CONNECTION bit in case of a hub port reset\nonly if a device is was attached to the hub port before resetting the hub port.\n\nUsing a Lenovo T480s attached to the ultra dock it was not possible to detect\nsome usb-c devices at the dock usb-c ports because the hub_port_reset code\nwill clear the USB_PORT_FEAT_C_CONNECTION bit after the actual hub port reset.\nUsing this device combo the USB_PORT_FEAT_C_CONNECTION bit was set between the\nactual hub port reset and the clear of the USB_PORT_FEAT_C_CONNECTION bit.\nThis ends up with clearing the USB_PORT_FEAT_C_CONNECTION bit after the\nnew device was attached such that it was not detected.\n\nThis patch will not clear the USB_PORT_FEAT_C_CONNECTION bit if there is\ncurrently no device attached to the port before the hub port reset.\nThis will avoid clearing the connection bit for new attached devices.\n\nSigned-off-by: Dennis Wassenberg <dennis.wassenberg@secunet.com>\nAcked-by: Mathias Nyman <mathias.nyman@linux.intel.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/de06a3146c1932aa0cf78a721f19d3daa6aca538"},{"sha":"cb4cb3eab5388df1b9604baed7ad97c8509d97d5","author":{"name":"Aaron Ma","email":"6d75ab49fa4401d16749457e532362eb5fdb78e3@canonical.com"},"message":"usb: xhci: fix timeout for transition from RExit to U0\n\ncommit a5baeaeabcca3244782a9b6382ebab6f8a58f583 upstream.\n\nThis definition is used by msecs_to_jiffies in milliseconds.\nAccording to the comments, max rexit timeout should be 20ms.\nAlign with the comments to properly calculate the delay.\n\nVerified on Sunrise Point-LP and Cannon Lake.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Aaron Ma <aaron.ma@canonical.com>\nSigned-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/cb4cb3eab5388df1b9604baed7ad97c8509d97d5"},{"sha":"9fefd2252c8efca78f578d478acedb360b9bdd2c","author":{"name":"Greg Kroah-Hartman","email":"4645f7897fd33786a2ee1264d590b3c400559d85@linuxfoundation.org"},"message":"MAINTAINERS: Add Sasha as a stable branch maintainer\n\ncommit cb5d21946d2a2f4687c482ab4604af1d29dac35a upstream.\n\nSasha has somehow been convinced into helping me with the stable kernel\nmaintenance.  Codify this slip in good judgement before he realizes what\nhe really signed up for :)\n\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nAcked-by: Sasha Levin <sashal@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/9fefd2252c8efca78f578d478acedb360b9bdd2c"},{"sha":"79faf409b184b586f05f0b5cdee60953f5541d0b","author":{"name":"Emmanuel Grumbach","email":"643a80aaf16a8332d6a70921c14d4bb265446494@intel.com"},"message":"iwlwifi: mvm: support sta_statistics() even on older firmware\n\ncommit ec484d03ef0df8d34086b95710e355a259cbe1f2 upstream.\n\nThe oldest firmware supported by iwlmvm do support getting\nthe average beacon RSSI. Enable the sta_statistics() call\nfrom mac80211 even on older firmware versions.\n\nFixes: 33cef9256342 (\"iwlwifi: mvm: support beacon statistics for BSS client\")\nCc: stable@vger.kernel.org # 4.2+\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/79faf409b184b586f05f0b5cdee60953f5541d0b"},{"sha":"ebd55db37fa7856ddc182da5587dd2189940d987","author":{"name":"Dominique Martinet","email":"9c69231df81d8a56bd8fc6741579751b95573585@cea.fr"},"message":"v9fs_dir_readdir: fix double-free on p9stat_read error\n\ncommit 81c99089bce693b94b775b6eb888115d2d540086 upstream.\n\np9stat_read will call p9stat_free on error, we should only free the\nstruct content on success.\n\nThere also is no need to \"p9stat_init\" st as the read function will\nzero the whole struct for us anyway, so clean up the code a bit while\nwe are here.\n\nLink: http://lkml.kernel.org/r/1535410108-20650-1-git-send-email-asmadeus@codewreck.org\nSigned-off-by: Dominique Martinet <dominique.martinet@cea.fr>\nReported-by: syzbot+d4252148d198410b864f@syzkaller.appspotmail.com\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/ebd55db37fa7856ddc182da5587dd2189940d987"},{"sha":"9891fda685f1a9da69012bb39aad81b67870cf5e","author":{"name":"Tetsuo Handa","email":"3d00b54ad717112934d0b63b7ac2975b44022a61@I-love.SAKURA.ne.jp"},"message":"bfs: add sanity check at bfs_fill_super()\n\ncommit 9f2df09a33aa2c76ce6385d382693f98d7f2f07e upstream.\n\nsyzbot is reporting too large memory allocation at bfs_fill_super() [1].\nSince file system image is corrupted such that bfs_sb->s_start == 0,\nbfs_fill_super() is trying to allocate 8MB of continuous memory. Fix\nthis by adding a sanity check on bfs_sb->s_start, __GFP_NOWARN and\nprintf().\n\n[1] https://syzkaller.appspot.com/bug?id=16a87c236b951351374a84c8a32f40edbc034e96\n\nLink: http://lkml.kernel.org/r/1525862104-3407-1-git-send-email-penguin-kernel@I-love.SAKURA.ne.jp\nSigned-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nReported-by: syzbot <syzbot+71c6b5d68e91149fc8a4@syzkaller.appspotmail.com>\nReviewed-by: Andrew Morton <akpm@linux-foundation.org>\nCc: Tigran Aivazian <aivazian.tigran@gmail.com>\nCc: Matthew Wilcox <willy@infradead.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/9891fda685f1a9da69012bb39aad81b67870cf5e"},{"sha":"8b97e045bd6d37f96f161e4d371ae174148e1587","author":{"name":"Xin Long","email":"ed9bd6f22d2a1e0b1507d3ddc300dc248265d19a@gmail.com"},"message":"sctp: clear the transport of some out_chunk_list chunks in sctp_assoc_rm_peer\n\ncommit df132eff463873e14e019a07f387b4d577d6d1f9 upstream.\n\nIf a transport is removed by asconf but there still are some chunks with\nthis transport queuing on out_chunk_list, later an use-after-free issue\nwill be caused when accessing this transport from these chunks in\nsctp_outq_flush().\n\nThis is an old bug, we fix it by clearing the transport of these chunks\nin out_chunk_list when removing a transport in sctp_assoc_rm_peer().\n\nReported-by: syzbot+56a40ceee5fb35932f4d@syzkaller.appspotmail.com\nSigned-off-by: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/8b97e045bd6d37f96f161e4d371ae174148e1587"},{"sha":"b689a81a4c2ac139a3fdb92b08aab6dd73bc6108","author":{"name":"Andrew Price","email":"00ff151dcddbb8c0ece8870aa35711df2c4bbf29@redhat.com"},"message":"gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd\n\ncommit 4c62bd9cea7bcf10292f7e4c57a2bca332942697 upstream.\n\nWhen alloc_percpu() fails, sdp gets freed but sb->s_fs_info still points\nto the same address. Move the assignment after that error check so that\ns_fs_info can only point to a valid sdp or NULL, which is checked for\nlater in the error path, in gfs2_kill_super().\n\nReported-by: syzbot+dcb8b3587445007f5808@syzkaller.appspotmail.com\nSigned-off-by: Andrew Price <anprice@redhat.com>\nSigned-off-by: Bob Peterson <rpeterso@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/b689a81a4c2ac139a3fdb92b08aab6dd73bc6108"},{"sha":"6f80fe0dc1830b2e50a2b9cc854f497a77561fca","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"llc: do not use sk_eat_skb()\n\ncommit 604d415e2bd642b7e02c80e719e0396b9d4a77a6 upstream.\n\nsyzkaller triggered a use-after-free [1], caused by a combination of\nskb_get() in llc_conn_state_process() and usage of sk_eat_skb()\n\nsk_eat_skb() is assuming the skb about to be freed is only used by\nthe current thread. TCP/DCCP stacks enforce this because current\nthread holds the socket lock.\n\nllc_conn_state_process() wants to make sure skb does not disappear,\nand holds a reference on the skb it manipulates. But as soon as this\nskb is added to socket receive queue, another thread can consume it.\n\nThis means that llc must use regular skb_unlink() and kfree_skb()\nso that both producer and consumer can safely work on the same skb.\n\n[1]\nBUG: KASAN: use-after-free in atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]\nBUG: KASAN: use-after-free in refcount_read include/linux/refcount.h:43 [inline]\nBUG: KASAN: use-after-free in skb_unref include/linux/skbuff.h:967 [inline]\nBUG: KASAN: use-after-free in kfree_skb+0xb7/0x580 net/core/skbuff.c:655\nRead of size 4 at addr ffff8801d1f6fba4 by task ksoftirqd/1/18\n\nCPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 4.19.0-rc8+ #295\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x1c4/0x2b6 lib/dump_stack.c:113\n print_address_description.cold.8+0x9/0x1ff mm/kasan/report.c:256\n kasan_report_error mm/kasan/report.c:354 [inline]\n kasan_report.cold.9+0x242/0x309 mm/kasan/report.c:412\n check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n check_memory_region+0x13e/0x1b0 mm/kasan/kasan.c:267\n kasan_check_read+0x11/0x20 mm/kasan/kasan.c:272\n atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]\n refcount_read include/linux/refcount.h:43 [inline]\n skb_unref include/linux/skbuff.h:967 [inline]\n kfree_skb+0xb7/0x580 net/core/skbuff.c:655\n llc_sap_state_process+0x9b/0x550 net/llc/llc_sap.c:224\n llc_sap_rcv+0x156/0x1f0 net/llc/llc_sap.c:297\n llc_sap_handler+0x65e/0xf80 net/llc/llc_sap.c:438\n llc_rcv+0x79e/0xe20 net/llc/llc_input.c:208\n __netif_receive_skb_one_core+0x14d/0x200 net/core/dev.c:4913\n __netif_receive_skb+0x2c/0x1e0 net/core/dev.c:5023\n process_backlog+0x218/0x6f0 net/core/dev.c:5829\n napi_poll net/core/dev.c:6249 [inline]\n net_rx_action+0x7c5/0x1950 net/core/dev.c:6315\n __do_softirq+0x30c/0xb03 kernel/softirq.c:292\n run_ksoftirqd+0x94/0x100 kernel/softirq.c:653\n smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164\n kthread+0x35a/0x420 kernel/kthread.c:246\n ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413\n\nAllocated by task 18:\n save_stack+0x43/0xd0 mm/kasan/kasan.c:448\n set_track mm/kasan/kasan.c:460 [inline]\n kasan_kmalloc+0xc7/0xe0 mm/kasan/kasan.c:553\n kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:490\n kmem_cache_alloc_node+0x144/0x730 mm/slab.c:3644\n __alloc_skb+0x119/0x770 net/core/skbuff.c:193\n alloc_skb include/linux/skbuff.h:995 [inline]\n llc_alloc_frame+0xbc/0x370 net/llc/llc_sap.c:54\n llc_station_ac_send_xid_r net/llc/llc_station.c:52 [inline]\n llc_station_rcv+0x1dc/0x1420 net/llc/llc_station.c:111\n llc_rcv+0xc32/0xe20 net/llc/llc_input.c:220\n __netif_receive_skb_one_core+0x14d/0x200 net/core/dev.c:4913\n __netif_receive_skb+0x2c/0x1e0 net/core/dev.c:5023\n process_backlog+0x218/0x6f0 net/core/dev.c:5829\n napi_poll net/core/dev.c:6249 [inline]\n net_rx_action+0x7c5/0x1950 net/core/dev.c:6315\n __do_softirq+0x30c/0xb03 kernel/softirq.c:292\n\nFreed by task 16383:\n save_stack+0x43/0xd0 mm/kasan/kasan.c:448\n set_track mm/kasan/kasan.c:460 [inline]\n __kasan_slab_free+0x102/0x150 mm/kasan/kasan.c:521\n kasan_slab_free+0xe/0x10 mm/kasan/kasan.c:528\n __cache_free mm/slab.c:3498 [inline]\n kmem_cache_free+0x83/0x290 mm/slab.c:3756\n kfree_skbmem+0x154/0x230 net/core/skbuff.c:582\n __kfree_skb+0x1d/0x20 net/core/skbuff.c:642\n sk_eat_skb include/net/sock.h:2366 [inline]\n llc_ui_recvmsg+0xec2/0x1610 net/llc/af_llc.c:882\n sock_recvmsg_nosec net/socket.c:794 [inline]\n sock_recvmsg+0xd0/0x110 net/socket.c:801\n ___sys_recvmsg+0x2b6/0x680 net/socket.c:2278\n __sys_recvmmsg+0x303/0xb90 net/socket.c:2390\n do_sys_recvmmsg+0x181/0x1a0 net/socket.c:2466\n __do_sys_recvmmsg net/socket.c:2484 [inline]\n __se_sys_recvmmsg net/socket.c:2480 [inline]\n __x64_sys_recvmmsg+0xbe/0x150 net/socket.c:2480\n do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nThe buggy address belongs to the object at ffff8801d1f6fac0\n which belongs to the cache skbuff_head_cache of size 232\nThe buggy address is located 228 bytes inside of\n 232-byte region [ffff8801d1f6fac0, ffff8801d1f6fba8)\nThe buggy address belongs to the page:\npage:ffffea000747dbc0 count:1 mapcount:0 mapping:ffff8801d9be7680 index:0xffff8801d1f6fe80\nflags: 0x2fffc0000000100(slab)\nraw: 02fffc0000000100 ffffea0007346e88 ffffea000705b108 ffff8801d9be7680\nraw: ffff8801d1f6fe80 ffff8801d1f6f0c0 000000010000000b 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff8801d1f6fa80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb\n ffff8801d1f6fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n>ffff8801d1f6fb80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc\n                               ^\n ffff8801d1f6fc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff8801d1f6fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/6f80fe0dc1830b2e50a2b9cc854f497a77561fca"},{"sha":"a841f370dbe2bbb2c252748cc5148f6dfce02d63","author":{"name":"Y.C. Chen","email":"0968d00f77f76cc29418fbbc7b629560a8e3e3ea@aspeedtech.com"},"message":"drm/ast: change resolution may cause screen blurred\n\ncommit 1a37bd823891568f8721989aed0615835632d81a upstream.\n\nThe value of pitches is not correct while calling mode_set.\nThe issue we found so far on following system:\n- Debian8 with XFCE Desktop\n- Ubuntu with KDE Desktop\n- SUSE15 with KDE Desktop\n\nSigned-off-by: Y.C. Chen <yc_chen@aspeedtech.com>\nCc: <stable@vger.kernel.org>\nTested-by: Jean Delvare <jdelvare@suse.de>\nReviewed-by: Jean Delvare <jdelvare@suse.de>\nSigned-off-by: Dave Airlie <airlied@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/a841f370dbe2bbb2c252748cc5148f6dfce02d63"},{"sha":"6c284c9ff8d82280a71c83fc88ac4db148f7cec2","author":{"name":"Y.C. Chen","email":"0968d00f77f76cc29418fbbc7b629560a8e3e3ea@aspeedtech.com"},"message":"drm/ast: fixed cursor may disappear sometimes\n\ncommit 7989b9ee8bafe5cc625381dd0c3c4586de27ca26 upstream.\n\nSigned-off-by: Y.C. Chen <yc_chen@aspeedtech.com>\nCc: <stable@vger.kernel.org>\nReviewed-by: Dave Airlie <airlied@redhat.com>\nSigned-off-by: Dave Airlie <airlied@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/6c284c9ff8d82280a71c83fc88ac4db148f7cec2"},{"sha":"1d8016389d026c3291588b40be10b8441f1ef2d5","author":{"name":"Marc Kleine-Budde","email":"4a0ea1158d3cc63151119c05b1bff00c0bdbf421@pengutronix.de"},"message":"can: dev: can_get_echo_skb(): factor out non sending code to __can_get_echo_skb()\n\ncommit a4310fa2f24687888ce80fdb0e88583561a23700 upstream.\n\nThis patch factors out all non sending parts of can_get_echo_skb() into\na seperate function __can_get_echo_skb(), so that it can be re-used in\nan upcoming patch.\n\nCc: linux-stable <stable@vger.kernel.org>\nSigned-off-by: Marc Kleine-Budde <mkl@pengutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/1d8016389d026c3291588b40be10b8441f1ef2d5"},{"sha":"385e1c3bbe57e13115153573747754ca39db80b0","author":{"name":"Marc Kleine-Budde","email":"4a0ea1158d3cc63151119c05b1bff00c0bdbf421@pengutronix.de"},"message":"can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to access frame length\n\ncommit 200f5c49f7a2cd694436bfc6cb0662b794c96736 upstream.\n\nThis patch replaces the use of \"struct can_frame::can_dlc\" by \"struct\ncanfd_frame::len\" to access the frame's length. As it is ensured that\nboth structures have a compatible memory layout for this member this is\nno functional change. Futher, this compatibility is documented in a\ncomment.\n\nCc: linux-stable <stable@vger.kernel.org>\nSigned-off-by: Marc Kleine-Budde <mkl@pengutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/385e1c3bbe57e13115153573747754ca39db80b0"},{"sha":"a48b4b9cd6714f899f05d2580c7efb3700d744f3","author":{"name":"Marc Kleine-Budde","email":"4a0ea1158d3cc63151119c05b1bff00c0bdbf421@pengutronix.de"},"message":"can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb is accessed out of bounds\n\ncommit e7a6994d043a1e31d5b17706a22ce33d2a3e4cdc upstream.\n\nIf the \"struct can_priv::echo_skb\" is accessed out of bounds would lead\nto a kernel crash. Better print a sensible warning message instead and\ntry to recover.\n\nCc: linux-stable <stable@vger.kernel.org>\nSigned-off-by: Marc Kleine-Budde <mkl@pengutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/a48b4b9cd6714f899f05d2580c7efb3700d744f3"},{"sha":"3583903f9d8bbfc5402ac4f02d7f155b94f9ec5f","author":{"name":"Marc Kleine-Budde","email":"4a0ea1158d3cc63151119c05b1bff00c0bdbf421@pengutronix.de"},"message":"can: dev: __can_get_echo_skb(): print error message, if trying to echo non existing skb\n\ncommit 7da11ba5c5066dadc2e96835a6233d56d7b7764a upstream.\n\nPrior to echoing a successfully transmitted CAN frame (by calling\ncan_get_echo_skb()), CAN drivers have to put the CAN frame (by calling\ncan_put_echo_skb() in the transmit function). These put and get function\ntake an index as parameter, which is used to identify the CAN frame.\n\nA driver calling can_get_echo_skb() with a index not pointing to a skb\nis a BUG, so add an appropriate error message.\n\nCc: linux-stable <stable@vger.kernel.org>\nSigned-off-by: Marc Kleine-Budde <mkl@pengutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/3583903f9d8bbfc5402ac4f02d7f155b94f9ec5f"},{"sha":"cf0f464facd6a3150f8bbaf3ce84d24e1b2b68ff","author":{"name":"Mathias Nyman","email":"2d4473c5e67eb83655334d4e9a7757f781607241@linux.intel.com"},"message":"usb: xhci: Prevent bus suspend if a port connect change or polling state is detected\n\ncommit 2f31a67f01a8beb22cae754c53522cb61a005750 upstream.\n\nUSB3 roothub might autosuspend before a plugged USB3 device is detected,\ncausing USB3 device enumeration failure.\n\nUSB3 devices don't show up as connected and enabled until USB3 link trainig\ncompletes. On a fast booting platform with a slow USB3 link training the\nlink might reach the connected enabled state just as the bus is suspending.\n\nIf this device is discovered first time by the xhci_bus_suspend() routine\nit will be put to U3 suspended state like the other ports which failed to\nsuspend earlier.\n\nThe hub thread will notice the connect change and resume the bus,\nmoving the port back to U0\n\nThis U0 -> U3 -> U0 transition right after being connected seems to be\ntoo much for some devices, causing them to first go to SS.Inactive state,\nand finally end up stuck in a polling state with reset asserted\n\nFix this by failing the bus suspend if a port has a connect change or is\nin a polling state in xhci_bus_suspend().\n\nDon't do any port changes until all ports are checked, buffer all port\nchanges and only write them in the end if suspend can proceed\n\nCc: stable@vger.kernel.org\nSigned-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/cf0f464facd6a3150f8bbaf3ce84d24e1b2b68ff"},{"sha":"8bb923f515810bfffce78ad81f8ab8637dcf38ac","author":{"name":"Scott Wood","email":"6e153e0b007d41886131fe1b3c497d3f384be07d@buserror.net"},"message":"KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE\n\n[ Upstream commit 28c5bcf74fa07c25d5bd118d1271920f51ce2a98 ]\n\nTRACE_INCLUDE_PATH and TRACE_INCLUDE_FILE are used by\n<trace/define_trace.h>, so like that #include, they should\nbe outside #ifdef protection.\n\nThey also need to be #undefed before defining, in case multiple trace\nheaders are included by the same C file.  This became the case on\nbook3e after commit cf4a6085151a (\"powerpc/mm: Add missing tracepoint for\ntlbie\"), leading to the following build error:\n\n   CC      arch/powerpc/kvm/powerpc.o\nIn file included from arch/powerpc/kvm/powerpc.c:51:0:\narch/powerpc/kvm/trace.h:9:0: error: \"TRACE_INCLUDE_PATH\" redefined\n[-Werror]\n  #define TRACE_INCLUDE_PATH .\n  ^\nIn file included from arch/powerpc/kvm/../mm/mmu_decl.h:25:0,\n                  from arch/powerpc/kvm/powerpc.c:48:\n./arch/powerpc/include/asm/trace.h:224:0: note: this is the location of\nthe previous definition\n  #define TRACE_INCLUDE_PATH asm\n  ^\ncc1: all warnings being treated as errors\n\nReported-by: Christian Zigotzky <chzigotzky@xenosoft.de>\nSigned-off-by: Scott Wood <oss@buserror.net>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/8bb923f515810bfffce78ad81f8ab8637dcf38ac"},{"sha":"6d39dd9c0db11dcd354b5e2170d34e67afb6b863","author":{"name":"Anson Huang","email":"d8ba6480d02099be470b272acfb04413dd504c7e@nxp.com"},"message":"cpufreq: imx6q: add return value check for voltage scale\n\n[ Upstream commit 6ef28a04d1ccf718eee069b72132ce4aa1e52ab9 ]\n\nAdd return value check for voltage scale when ARM clock\nrate change fail.\n\nSigned-off-by: Anson Huang <Anson.Huang@nxp.com>\nAcked-by: Viresh Kumar <viresh.kumar@linaro.org>\nSigned-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/6d39dd9c0db11dcd354b5e2170d34e67afb6b863"},{"sha":"606576a969e704f4dbefae6fbcf3de17deb75a49","author":{"name":"Trond Myklebust","email":"cc958843532c615cbd4920e868f78c7985331a5a@hammerspace.com"},"message":"SUNRPC: Fix a bogus get/put in generic_key_to_expire()\n\n[ Upstream commit e3d5e573a54dabdc0f9f3cb039d799323372b251 ]\n\nSigned-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/606576a969e704f4dbefae6fbcf3de17deb75a49"},{"sha":"a4cfd4595d98af7dd0e6efece9aa31ea464bec03","author":{"name":"Prarit Bhargava","email":"fe4655370dc87a32329d591d6e8472329333dfad@redhat.com"},"message":"kdb: Use strscpy with destination buffer size\n\n[ Upstream commit c2b94c72d93d0929f48157eef128c4f9d2e603ce ]\n\ngcc 8.1.0 warns with:\n\nkernel/debug/kdb/kdb_support.c: In function ‘kallsyms_symbol_next’:\nkernel/debug/kdb/kdb_support.c:239:4: warning: ‘strncpy’ specified bound depends on the length of the source argument [-Wstringop-overflow=]\n     strncpy(prefix_name, name, strlen(name)+1);\n     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\nkernel/debug/kdb/kdb_support.c:239:31: note: length computed here\n\nUse strscpy() with the destination buffer size, and use ellipses when\ndisplaying truncated symbols.\n\nv2: Use strscpy()\n\nSigned-off-by: Prarit Bhargava <prarit@redhat.com>\nCc: Jonathan Toppins <jtoppins@redhat.com>\nCc: Jason Wessel <jason.wessel@windriver.com>\nCc: Daniel Thompson <daniel.thompson@linaro.org>\nCc: kgdb-bugreport@lists.sourceforge.net\nReviewed-by: Daniel Thompson <daniel.thompson@linaro.org>\nSigned-off-by: Daniel Thompson <daniel.thompson@linaro.org>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":false,"url":"https://api.github.com/repos/derfelot/android_kernel_sony_msm8998/commits/a4cfd4595d98af7dd0e6efece9aa31ea464bec03"}]}
{"actor":{"display_login":"derfelot"}}