{"push_id":2757486189,"size":20,"distinct_size":20,"ref":"refs/heads/8.1.0-unified","head":"792ca414c3e8cc69d7ecfc32087cdeacd6e6e84d","before":"5712fe118f9db3521e7fbd15c17f79e283ff2143","commits":[{"sha":"8a162bd8cb8cc007092a23289019d90693162823","author":{"name":"Ritesh Harjani","email":"9dca834b0a38e96a2a5a05425ca5e3d7c89ca765@codeaurora.org"},"message":"ANDROID: sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries.\n\nsdcardfs_name_match gets a 'name' argument from the underlying FS.\nThis need not be null terminated string.\nSo in sdcardfs_name_match -> qstr_case_eq -> we should use\nstr_n_case_eq.\n\nThis happens because few of the entries in lower level FS may not be\nNULL terminated and may have some garbage characters passed while\ndoing sdcardfs_name_match.\n\nFor e.g.\n # dmesg |grep Download\n [  103.646386] sdcardfs_name_match: q1->name=.nomedia, q1->len=8,\n q2->name=Download\\x17\\x80\\x03, q2->len=8\n [  104.021340] sdcardfs_name_match: q1->name=.nomedia, q1->len=8,\n q2->name=Download\\x17\\x80\\x03, q2->len=8\n [  105.196864] sdcardfs_name_match: q1->name=.nomedia, q1->len=8,\n q2->name=Download\\x17\\x80\\x03, q2->len=8\n [  109.113521] sdcardfs_name_match: q1->name=logs, q1->len=4,\n q2->name=Download\\x17\\x80\\x03, q2->len=8\n\nNow when we try to create a directory with different case for a such\nfiles. SDCARDFS creates a entry if it could not find the underlying\nentry in it's dcache.\n\nTo reproduce:-\n1. bootup the device wait for some time after sdcardfs mounting to\n   complete.\n2. cd /storage/emulated/0\n3. echo 3 > /proc/sys/vm/drop_caches\n4. mkdir download\n\nWe now start seeing two entries with name.\nDownload & download.\n\nChange-Id: I976d92a220a607dd8cdb96c01c2041c5c2bc3326\nSigned-off-by: Ritesh Harjani <riteshh@codeaurora.org>\nbug: 75987238\n(cherry picked from commit c9d72d4ead65bf91fe75eeb528bf7ff0451d6d64)","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/8a162bd8cb8cc007092a23289019d90693162823"},{"sha":"e650c00f9218d3eaf5faf2e75339f68c793088cb","author":{"name":"guoling","email":"b47560805ffbea14645ebe13816affe393d9a8bf@oneplus.com"},"message":"Improve NFC power consumption\n\nModify CLK_REQ and adjust suspend strategy.\n\nChange-Id: Icc196c58a963012ff7316d1f9c69e0e19cbea4ca","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/e650c00f9218d3eaf5faf2e75339f68c793088cb"},{"sha":"adb5d63ef0b78024ea8cefde39d5ac26ea003b10","author":{"name":"liuhaituo","email":"19b6dc07aee9b127ddc05b52aed09a67220b5bc4@oneplus.net"},"message":"Improve power consumption\n\nKeep micbias on when headset is inserted.\n\nChange-Id: I2c3f5e975a60542f5e02b770904de6f5485e00fe","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/adb5d63ef0b78024ea8cefde39d5ac26ea003b10"},{"sha":"303d9ae23a6685cf1d94e3e7be45394f18e90bca","author":{"name":"yangfangbiao","email":"9c31aac5dfe96d9fe3be797ab997d3a3f878e850@oneplus.com"},"message":"Fix usb issue\n\nAjust apsd result.\n\nChange-Id: Ia6f8323d60c210913a2a00353c22d6a306fee645","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/303d9ae23a6685cf1d94e3e7be45394f18e90bca"},{"sha":"3abe8bdb69bacf3b28754a063492a33a3218333c","author":{"name":"liwei","email":"968ba988c540cee7ac38244330fb79805074b805@oneplus.net"},"message":"Improve stability\n\nUse create_workqueue instead of alloc_workqueue.\n\nChange-Id: Ice6aaa9b4b64f340cad53b4915dc22887895e33b","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/3abe8bdb69bacf3b28754a063492a33a3218333c"},{"sha":"9fa1600e689141248a287613a616d8901577a3a4","author":{"name":"liuhaituo","email":"19b6dc07aee9b127ddc05b52aed09a67220b5bc4@oneplus.net"},"message":"Improve power consumption\n\nForbiden ELECT_REM irq and don't use it.\n\nChange-Id: Ifefc90b45c2773c0a793159fa71b89f4a9a80673","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/9fa1600e689141248a287613a616d8901577a3a4"},{"sha":"a50c7907c6587795a3c85e15304427777b333e2b","author":{"name":"Eric Biggers","email":"6f6115196800bbe9712b3f04c7e40093bb382fc5@google.com"},"message":"KEYS: add missing permission check for request_key() destination\n\ncommit 4dca6ea1d9432052afb06baf2e3ae78188a4410b upstream.\n\nWhen the request_key() syscall is not passed a destination keyring, it\nlinks the requested key (if constructed) into the \"default\" request-key\nkeyring.  This should require Write permission to the keyring.  However,\nthere is actually no permission check.\n\nThis can be abused to add keys to any keyring to which only Search\npermission is granted.  This is because Search permission allows joining\nthe keyring.  keyctl_set_reqkey_keyring(KEY_REQKEY_DEFL_SESSION_KEYRING)\nthen will set the default request-key keyring to the session keyring.\nThen, request_key() can be used to add keys to the keyring.\n\nBoth negatively and positively instantiated keys can be added using this\nmethod.  Adding negative keys is trivial.  Adding a positive key is a\nbit trickier.  It requires that either /sbin/request-key positively\ninstantiates the key, or that another thread adds the key to the process\nkeyring at just the right time, such that request_key() misses it\ninitially but then finds it in construct_alloc_key().\n\nFix this bug by checking for Write permission to the keyring in\nconstruct_get_dest_keyring() when the default keyring is being used.\n\nWe don't do the permission check for non-default keyrings because that\nwas already done by the earlier call to lookup_user_key().  Also,\nrequest_key_and_link() is currently passed a 'struct key *' rather than\na key_ref_t, so the \"possessed\" bit is unavailable.\n\nWe also don't do the permission check for the \"requestor keyring\", to\ncontinue to support the use case described by commit 8bbf4976b59f\n(\"KEYS: Alter use of key instantiation link-to-keyring argument\") where\n/sbin/request-key recursively calls request_key() to add keys to the\noriginal requestor's destination keyring.  (I don't know of any users\nwho actually do that, though...)\n\nChange-Id: Ia71763d553444aa6a1923cb5b490e4209c55d618\nFixes: 3e30148c3d52 (\"[PATCH] Keys: Make request-key create an authorisation key\")\nSigned-off-by: Eric Biggers <ebiggers@google.com>\nSigned-off-by: David Howells <dhowells@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/a50c7907c6587795a3c85e15304427777b333e2b"},{"sha":"dbf1465587f07270ff7520f78811eb39f663cdc5","author":{"name":"davidliu","email":"7546526724b212b31deee8eada88c34e18db02cd@oneplus.net”"},"message":"USB: core: only clean up what we allocated\n\nWhen cleaning up the configurations, make sure we only free the number\nof configurations and interfaces that we could have allocated.\n\nChange-Id: I24abb1a0847eed94445dd318cfeeea66e12a05b5\nReported-by: Andrey Konovalov <andreyknvl@xxxxxxxxxx>\nCc: stable <stable@xxxxxxxxxxxxxxx>\nSigned-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/dbf1465587f07270ff7520f78811eb39f663cdc5"},{"sha":"4cb7c872073d1fccee15706452096872b065e8f5","author":{"name":"Eric Biggers","email":"6f6115196800bbe9712b3f04c7e40093bb382fc5@google.com"},"message":"crypto: hmac - require that the underlying hash algorithm is unkeyed\n\nBecause the HMAC template didn't check that its underlying hash\nalgorithm is unkeyed, trying to use \"hmac(hmac(sha3-512-generic))\"\nthrough AF_ALG or through KEYCTL_DH_COMPUTE resulted in the inner HMAC\nbeing used without having been keyed, resulting in sha3_update() being\ncalled without sha3_init(), causing a stack buffer overflow.\n\nThis is a very old bug, but it seems to have only started causing real\nproblems when SHA-3 support was added (requires CONFIG_CRYPTO_SHA3)\nbecause the innermost hash's state is ->import()ed from a zeroed buffer,\nand it just so happens that other hash algorithms are fine with that,\nbut SHA-3 is not.  However, there could be arch or hardware-dependent\nhash algorithms also affected; I couldn't test everything.\n\nFix the bug by introducing a function crypto_shash_alg_has_setkey()\nwhich tests whether a shash algorithm is keyed.  Then update the HMAC\ntemplate to require that its underlying hash algorithm is unkeyed.\n\nHere is a reproducer:\n\n    #include <linux/if_alg.h>\n    #include <sys/socket.h>\n\n    int main()\n    {\n        int algfd;\n        struct sockaddr_alg addr = {\n            .salg_type = \"hash\",\n            .salg_name = \"hmac(hmac(sha3-512-generic))\",\n        };\n        char key[4096] = { 0 };\n\n        algfd = socket(AF_ALG, SOCK_SEQPACKET, 0);\n        bind(algfd, (const struct sockaddr *)&addr, sizeof(addr));\n        setsockopt(algfd, SOL_ALG, ALG_SET_KEY, key, sizeof(key));\n    }\n\nHere was the KASAN report from syzbot:\n\n    BUG: KASAN: stack-out-of-bounds in memcpy include/linux/string.h:341  [inline]\n    BUG: KASAN: stack-out-of-bounds in sha3_update+0xdf/0x2e0  crypto/sha3_generic.c:161\n    Write of size 4096 at addr ffff8801cca07c40 by task syzkaller076574/3044\n\n    CPU: 1 PID: 3044 Comm: syzkaller076574 Not tainted 4.14.0-mm1+ #25\n    Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS  Google 01/01/2011\n    Call Trace:\n      __dump_stack lib/dump_stack.c:17 [inline]\n      dump_stack+0x194/0x257 lib/dump_stack.c:53\n      print_address_description+0x73/0x250 mm/kasan/report.c:252\n      kasan_report_error mm/kasan/report.c:351 [inline]\n      kasan_report+0x25b/0x340 mm/kasan/report.c:409\n      check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n      check_memory_region+0x137/0x190 mm/kasan/kasan.c:267\n      memcpy+0x37/0x50 mm/kasan/kasan.c:303\n      memcpy include/linux/string.h:341 [inline]\n      sha3_update+0xdf/0x2e0 crypto/sha3_generic.c:161\n      crypto_shash_update+0xcb/0x220 crypto/shash.c:109\n      shash_finup_unaligned+0x2a/0x60 crypto/shash.c:151\n      crypto_shash_finup+0xc4/0x120 crypto/shash.c:165\n      hmac_finup+0x182/0x330 crypto/hmac.c:152\n      crypto_shash_finup+0xc4/0x120 crypto/shash.c:165\n      shash_digest_unaligned+0x9e/0xd0 crypto/shash.c:172\n      crypto_shash_digest+0xc4/0x120 crypto/shash.c:186\n      hmac_setkey+0x36a/0x690 crypto/hmac.c:66\n      crypto_shash_setkey+0xad/0x190 crypto/shash.c:64\n      shash_async_setkey+0x47/0x60 crypto/shash.c:207\n      crypto_ahash_setkey+0xaf/0x180 crypto/ahash.c:200\n      hash_setkey+0x40/0x90 crypto/algif_hash.c:446\n      alg_setkey crypto/af_alg.c:221 [inline]\n      alg_setsockopt+0x2a1/0x350 crypto/af_alg.c:254\n      SYSC_setsockopt net/socket.c:1851 [inline]\n      SyS_setsockopt+0x189/0x360 net/socket.c:1830\n      entry_SYSCALL_64_fastpath+0x1f/0x96\n\nChange-Id: Iefbb261d936ab9b496f4ccda1c2251a323ca8df9\nReported-by: syzbot <syzkaller@googlegroups.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Eric Biggers <ebiggers@google.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/4cb7c872073d1fccee15706452096872b065e8f5"},{"sha":"08c88f49969da32fb8d5c296865832f7ae71ba71","author":{"name":"Eric Biggers","email":"6f6115196800bbe9712b3f04c7e40093bb382fc5@google.com"},"message":"crypto: pcrypt - fix freeing pcrypt instances\n\npcrypt is using the old way of freeing instances, where the ->free()\nmethod specified in the 'struct crypto_template' is passed a pointer to\nthe 'struct crypto_instance'.  But the crypto_instance is being\nkfree()'d directly, which is incorrect because the memory was actually\nallocated as an aead_instance, which contains the crypto_instance at a\nnonzero offset.  Thus, the wrong pointer was being kfree()'d.\n\nFix it by switching to the new way to free aead_instance's where the\n->free() method is specified in the aead_instance itself.\n\nChange-Id: Ic05483d131ab9a32ddb44148f7d31b0f2daf30ff\nReported-by: syzbot <syzkaller@googlegroups.com>\nFixes: 0496f56065e0 (\"crypto: pcrypt - Add support for new AEAD interface\")\nCc: <stable@vger.kernel.org> # v4.2+\nSigned-off-by: Eric Biggers <ebiggers@google.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/08c88f49969da32fb8d5c296865832f7ae71ba71"},{"sha":"a472e7f646db66737a1d01e49b5eea6d4c992fdf","author":{"name":"davidliu","email":"7546526724b212b31deee8eada88c34e18db02cd@oneplus.net”"},"message":"Quote from Documentation/filesystems/sysfs.txt:\n\n  show() must not use snprintf() when formatting the value to be\n  returned to user space. If you can guarantee that an overflow\n  will never happen you can use sprintf() otherwise you must use\n  scnprintf().\n\nCommit 4efe874aace5 (\"PCI: Don't read past the end of sysfs\n\"driver_override\" buffer\") introduced such a snprintf() usage from\ndriver_override_show() while at the same time tweaking\ndriver_override_store() such that the write buffer can't ever get\noverflowed.\n\nReasoning:\nSince aforementioned commit, driver_override_store() only accepts to be\nwritten buffers less than PAGE_SIZE - 1 in size.\n\nThe then kstrndup()'ed driver_override string will be at most PAGE_SIZE - 1\nin length, including the trailing '\\0'.\n\nAfter the addition of a '\\n' in driver_override_show(), the result won't\nexceed PAGE_SIZE characters in length, again including the trailing '\\0'.\n\nHence, snprintf(buf, PAGE_SIZE, ...) and sprintf(buf, ...) are equivalent\nat this point.\n\nReplace the former by the latter in order to adhere to the rules in\nDocumentation/filesystems/sysfs.txt.\n\nThis is a style fix only and there's no change in functionality.\n\nSigned-off-by: Nicolai Stange <nstange@suse.de>\nChange-Id: I22463aad4524c195b3066641fb92aa899c9cb212\n(cherry picked from commit b4bdb05de732307e3b8cba7a063826d23a36a968)","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/a472e7f646db66737a1d01e49b5eea6d4c992fdf"},{"sha":"dac35285f58114e1fafbdb24f18eeb1646e91a44","author":{"name":"davidliu","email":"7546526724b212b31deee8eada88c34e18db02cd@oneplus.net”"},"message":"nsfs: mark dentry with DCACHE_RCUACCESS\nAndrey reported a use-after-free in __ns_get_path():\n\n  spin_lock include/linux/spinlock.h:299 [inline]\n  lockref_get_not_dead+0x19/0x80 lib/lockref.c:179\n  __ns_get_path+0x197/0x860 fs/nsfs.c:66\n  open_related_ns+0xda/0x200 fs/nsfs.c:143\n  sock_ioctl+0x39d/0x440 net/socket.c:1001\n  vfs_ioctl fs/ioctl.c:45 [inline]\n  do_vfs_ioctl+0x1bf/0x1780 fs/ioctl.c:685\n  SYSC_ioctl fs/ioctl.c:700 [inline]\n  SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691\n\nWe are under rcu read lock protection at that point:\n\n        rcu_read_lock();\n        d = atomic_long_read(&ns->stashed);\n        if (!d)\n                goto slow;\n        dentry = (struct dentry *)d;\n        if (!lockref_get_not_dead(&dentry->d_lockref))\n                goto slow;\n        rcu_read_unlock();\n\nbut don't use a proper RCU API on the free path, therefore a parallel\n__d_free() could free it at the same time.  We need to mark the stashed\ndentry with DCACHE_RCUACCESS so that __d_free() will be called after all\nreaders leave RCU.\n\nChange-Id: I4c0a578b3b4c5769ff757962ecae93cdf71dcef9\nFixes: e149ed2b805f (\"take the targets of /proc/*/ns/* symlinks to separate fs\")\nCc: Alexander Viro <viro@zeniv.linux.org.uk>\nCc: Andrew Morton <akpm@linux-foundation.org>\nReported-by: Andrey Konovalov <andreyknvl@google.com>\nSigned-off-by: Cong Wang <xiyou.wangcong@gmail.com>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nGit-commit: 073c516ff73557a8f7315066856c04b50383ac34\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nSigned-off-by: Chintan Pandya <cpandya@codeaurora.org>\n(cherry picked from commit 58d07e613ab18d9ce6aac1d2f0dbb80e10082472)","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/dac35285f58114e1fafbdb24f18eeb1646e91a44"},{"sha":"c9400b8d7a9561409de62b15cd7644cce51e72ba","author":{"name":"Johannes Thumshirn","email":"76e27a2cf2160151c27b307564ef391a743f57c5@suse.de"},"message":"UPSTREAM: scsi: sg: don't return bogus Sg_requests\n\nIf the list search in sg_get_rq_mark() fails to find a valid request, we\nreturn a bogus element. This then can later lead to a GPF in\nsg_remove_scat().\n\nSo don't return bogus Sg_requests in sg_get_rq_mark() but NULL in case\nthe list search doesn't find a valid request.\n\nBug: 79090045\nSigned-off-by: Johannes Thumshirn <jthumshirn@suse.de>\nReported-by: Andrey Konovalov <andreyknvl@google.com>\nCc: Hannes Reinecke <hare@suse.de>\nCc: Christoph Hellwig <hch@lst.de>\nCc: Doug Gilbert <dgilbert@interlog.com>\nReviewed-by: Hannes Reinecke <hare@suse.de>\nAcked-by: Doug Gilbert <dgilbert@interlog.com>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Chenbo Feng <fengc@google.com>\n(cherry picked from commit 48ae8484e9fc324b4968d33c585e54bc98e44d61)\n\nChange-Id: If95d1a8eef3748c9937201e524184b89a5eaaf2e\nBug: 75300370\n(cherry picked from commit 50fe6dcad62a1e06435da13e0d4271c9d090a2e8)","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/c9400b8d7a9561409de62b15cd7644cce51e72ba"},{"sha":"7eec69083817851006ca20d0b8fadc1e16b1745d","author":{"name":"Krzysztof Opasiak","email":"4c491ef279967ee84b1d28e44f3e74be7a08ac30@gmail.com"},"message":"usb: gadget: f_hid: fix: Prevent accessing released memory\n\ncommit aa65d11aa008f4de58a9cee7e121666d9d68505e upstream.\n\nWhen we unlock our spinlock to copy data to user we may get\ndisabled by USB host and free the whole list of completed out\nrequests including the one from which we are copying the data\nto user memory.\n\nTo prevent from this let's remove our working element from\nthe list and place it back only if there is sth left when we\nfinish with it.\n\nFixes: 99c515005857 (\"usb: gadget: hidg: register OUT INT endpoint for SET_REPORT\")\nCc: stable@vger.kernel.org\nTested-by: David Lechner <david@lechnology.com>\nBug: 74447444\nSigned-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>\nSigned-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>\nCc: Jerry Zhang <zhangjerry@google.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nChange-Id: I8ae852534fc97ff8423398033583e5a6b5b77770\n(cherry picked from commit c8eb5f79f2d6a45f31cf8bfc68bfa3bf1a92fab4)","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/7eec69083817851006ca20d0b8fadc1e16b1745d"},{"sha":"fa071338652f7b7d1c7dc9552f4904f9e23fe59e","author":{"name":"Felipe F. Tonello","email":"608e01334f5575f10813efa40ce0102f2dc0a75e@felipetonello.com"},"message":"usb: gadget: define free_ep_req as universal function\n\ncommit 079fe5a6da616891cca1a26e803e1df2a87e9ae5 upstream.\n\nThis function is shared between gadget functions, so this avoid unnecessary\nduplicated code and potentially avoid memory leaks.\n\n(cherry picked from commit 0446437c8bb63e03e05fa0024abc1bb27eaf037c)\n\nBug: 74447444\nReviewed-by: Robert Baldyga <r.baldyga@samsung.com>\nSigned-off-by: Felipe F. Tonello <eu@felipetonello.com>\nSigned-off-by: Felipe Balbi <balbi@ti.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nChange-Id: I3381e4642073f3c8f42b543e4d474a7fde2f73c7\n(cherry picked from commit d289ed125c7028dcd0f29e4c1c12337c22b58b02)","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/fa071338652f7b7d1c7dc9552f4904f9e23fe59e"},{"sha":"1294aebdea662875e40d20d2837ef556a3ad1272","author":{"name":"Tharun Kumar Merugu","email":"012990c70e5a1c15d9a3a222f92d1c1f726a82e2@codeaurora.org"},"message":"msm: ADSPRPC: Use ID in response to get context pointer\n\nSend context ID in rpc header instead of context pointer.\nValidate context ID received in response and get context pointer.\n\nChange-Id: I9cfd10d0c1b25c3085b8e15c7ca1c8ff214bf10d\nAcked-by: Viswanatham Paduchuri <vpaduchu@qti.qualcomm.com>\nSigned-off-by: Tharun Kumar Merugu <mtharu@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/1294aebdea662875e40d20d2837ef556a3ad1272"},{"sha":"e9c141595548505ecac7a3e43c9d173a543561a7","author":{"name":"wangdongdong","email":"14c20748540676a430d7f97ba9f4e1923c9bd21a@oneplus.net"},"message":"ASoC: msm: qdsp6v2: check for buffer size before read\n\nCheck for debugfs ops buf size passed before reading\nto avoid reading out of bounds.\n\nChange-Id: Idd5e755ac16448af5751e2f3381097f234e74a74\nSigned-off-by: Karthikeyan Mani <kmani@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/e9c141595548505ecac7a3e43c9d173a543561a7"},{"sha":"40f9cb9f60dee7d86e727c1f994bdd9416a8581a","author":{"name":"Carter Cooper","email":"ff1e5ded47dd5c88716d0ac2f671fd3e0c0ebc6d@codeaurora.org"},"message":"msm: kgsl: Properly remove ref count on gpuobj_sync failure\n\nThe user can pass bad data into kgsl_ioctl_gpuobj_sync(). If\n_copy_from_user() fails do to bad data, undo any current\nreferences taken through this ioctl call.\n\nChange-Id: I56195520b9dadba20ee419658fc2cbb282b8449c\nSigned-off-by: Carter Cooper <ccooper@codeaurora.org>\nSigned-off-by: samit vats <svats@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/40f9cb9f60dee7d86e727c1f994bdd9416a8581a"},{"sha":"42ee19df789487291cc2c6f2c7e881dc3fceee34","author":{"name":"hecaiqiang","email":"d4e24e41c059d89a60d59e55dde8255e98a6fa86@oneplus.com"},"message":"Improve usb stability\n\nenable and disable endpoints in interrupt context.\n\nChange-Id: Ib6e390af88d7a34ca74a29f267a7ff14e1e649c4","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/42ee19df789487291cc2c6f2c7e881dc3fceee34"},{"sha":"792ca414c3e8cc69d7ecfc32087cdeacd6e6e84d","author":{"name":"mTresk","email":"2a6542a41bb73cfaf15fd0014dbf257aafaf4999@gmail.com"},"message":"Merge branch 'oneplus/QC8998_O_8.1' of https://github.com/OnePlusOSS/android_kernel_oneplus_msm8998 into 8.1.0-unified\n\nChange-Id: I7cf933b9bb2c6efd5cffdbb566f1b2ec39731ce6","distinct":true,"url":"https://api.github.com/repos/mTresk/android_kernel_oneplus_msm8998/commits/792ca414c3e8cc69d7ecfc32087cdeacd6e6e84d"}]}
{"actor":{"display_login":"mTresk"}}