| Commit message (Collapse) | Author | Age |
|---|
| |\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0
313e787f28bb Merge "power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED" into kernel.lnx.4.4.r37-rel
dfa5b807ec2c Merge changes I0ab244e6,I05a4aa96 into kernel.lnx.4.4.r37-rel
c900b4827149 msm: ipa: Fix array out of bound and use after NULL check
b562b057dd2a msm: ipa: Fix pointer checked for NULL may be used
216dfe7e7a14 usb: phy-msm-susb-qmp: Add checks to check clk_enabled
2c0a97a53f77 power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED
56d12bfe26c3 Merge commit '09d42880fd9f4d04317f030021b85323b8f8b9b9' into HEAD
09d42880fd9f Merge "msm: camera_v2: isp: update the frame drop during error case"
19d79e95f10c Merge "msm:camera: add trace log support for VFE events"
3ae0451881ca Merge "msm: camera_v2: Remove sysfs bind/unbind files"
45b4ac208b7b msm:camera: add trace log support for VFE events
5974bd4025ea msm: camera_v2: Fix page fault issue in camera ISP
ed8c0918eeb1 Merge "icnss: Reduce the shutdown timeout from 50sec to 15sec"
7e4d8780224c Merge "drm/msm/dsi-staging: Add range check in debugfs_dump_info_read"
978400398a92 icnss: Reduce the shutdown timeout from 50sec to 15sec
4e08c8cbacd4 msm: camera_v2: Remove sysfs bind/unbind files
79a8f215703e Merge "ASoC: sdm660_cdc: Set speaker amplifier enable bit"
c0f636f83226 Merge "cnss2: Update board data file name format"
bd48b0a101e8 Merge "msm: kgsl: Add missing check for snapshot IB dump"
2f5e49a21882 Merge "defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998"
46ece1ae20ad Merge "sched/walt: Fix the memory leak of idle task load pointers"
78540133736a Merge "soc: qcom: smem: validate fields of shared structures"
196d97abd323 Merge "Merge android-4.4.183 (94fd428) into msm-4.4"
fad4d2e83739 Merge "msm: kgsl: Change data type for GPU ib vote"
54d23a97a07e Merge "drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh"
1379d11803dd msm: kgsl: Add missing check for snapshot IB dump
2c8f4699fdd0 defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998
fcc47ec62ae1 soc: qcom: smem: validate fields of shared structures
7151def9c713 ASoC: sdm660_cdc: Set speaker amplifier enable bit
f395d5810f27 sched/walt: Fix the memory leak of idle task load pointers
03f0af3c211e drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh
f6ee0c2bb45d drivers: thermal: Use FCAP scm call instead of DMAX in KTM
cb7df67908b0 msm: kgsl: Change data type for GPU ib vote
c94369b4c1fc cnss2: print firmware cap info in stats
9a1c2880320b Merge android-4.4.183 (94fd428) into msm-4.4
94fd42809f7d Merge 4.4.183 into android-4.4
308743255040 Linux 4.4.183
df7ba8162ca1 Abort file_remove_privs() for non-reg. files
8f6345a11caa coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
3692bc31c1ff Revert "crypto: crypto4xx - properly set IV after de- and encrypt"
39c7c903c63d scsi: libsas: delete sas port if expander discover failed
a272035ea1bf scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
af8cd6101bf5 net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
b25c62cc16e0 KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
7ef8d778cf3e ia64: fix build errors by exporting paddr_to_nid()
432030b25b86 configfs: Fix use-after-free when accessing sd->s_dentry
d5a18c8609f3 i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
be1b9df5bba1 net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
0bb6c295e463 gpio: fix gpio-adp5588 build errors
dd961efe8dee perf/ring_buffer: Add ordering to rb->nest increment
8abd8a9a975e perf/ring_buffer: Fix exposing a temporarily decreased data_head
3e74b3f05abf x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
f4678b7808e7 mISDN: make sure device name is NUL terminated
e2f9c0f73454 sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
753aa7556089 neigh: fix use-after-free read in pneigh_get_next
709d8771fab7 lapb: fixed leak of control-blocks.
1777c35e8d47 ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
6f057abd08d1 be2net: Fix number of Rx queues used for flow hashing
7139a9f6246d ax25: fix inconsistent lock state in ax25_destroy_timer
f1a5c6b083bc USB: serial: option: add Telit 0x1260 and 0x1261 compositions
a67d65958e2a USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
b8ee804bba8f USB: serial: pl2303: add Allied Telesis VT-Kit3
f14747c88170 USB: usb-storage: Add new ID to ums-realtek
038c192699a9 USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
8f6b0e59d2a0 drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
6e0c7e73232f drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
ce391e4cdef8 KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
a1b9c6b4cba0 KVM: x86/pmu: do not mask the value that is written to fixed PMUs
7caddacf863f usbnet: ipheth: fix racing condition
f80a35fcb9e9 scsi: bnx2fc: fix incorrect cast to u64 on shift operation
da51a322f197 scsi: lpfc: add check for loss of ndlp when sending RRQ
3a2ff1088c2a Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
1f8233ca3a48 ASoC: cs42xx8: Add regcache mask dirty
91f1fc1ae409 cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
8b47af927e2e bcache: fix stack corruption by PRECEDING_KEY()
a2aabf288bf7 i2c: acorn: fix i2c warning
d774bd27b4f5 ptrace: restore smp_rmb() in __ptrace_may_access()
5aff00ee839a signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
0b871fc866eb fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
c05fed507582 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
be499b84c3bd libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
d7a18814fff9 ALSA: seq: Cover unsubscribe_port() in list_mutex
4282a0b1db65 Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"
cd23996afa14 futex: Fix futex lock the wrong page
38fbd5c2d572 ARM: exynos: Fix undefined instruction during Exynos5422 resume
5767587907fd pwm: Fix deadlock warning when removing PWM device
113a78a0a537 ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa
78184953a2ed pwm: tiehrpwm: Update shadow register for disabling PWMs
d24e22cde8b3 dmaengine: idma64: Use actual device for DMA transfers
533171620cd5 gpio: gpio-omap: add check for off wake capable gpios
3b4652ba9d78 PCI: xilinx: Check for __get_free_pages() failure
c869210e0ac6 video: imsttfb: fix potential NULL pointer dereferences
5c7fbc5f6a7d video: hgafb: fix potential NULL pointer dereference
bea8fa863ce9 PCI: rcar: Fix a potential NULL pointer dereference
76208df36d7a PCI: rpadlpar: Fix leaked device_node references in add/remove paths
100468652e5a ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
927d2be77e6c ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
8aee025af280 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
b49501f51371 clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
4270dc6a7a79 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
845676341c2d platform/chrome: cros_ec_proto: check for NULL transfer function
c7155e51cf85 x86/PCI: Fix PCI IRQ routing table memory leak
198a54f07f51 nfsd: allow fh_want_write to be called twice
e6779b264d69 fuse: retrieve: cap requested size to negotiated max_write
742cb74bf108 nvmem: core: fix read buffer in place
750c55e69cca ALSA: hda - Register irq handler after the chip initialization
09ad374f23ce iommu/vt-d: Set intel_iommu_gfx_mapped correctly
9e4ed17b9416 f2fs: fix to do sanity check on valid block count of segment
534ef922376e f2fs: fix to avoid panic in do_recover_data()
90a238a8a2d2 ntp: Allow TAI-UTC offset to be set to zero
25be7d51a012 drm/bridge: adv7511: Fix low refresh rate selection
8fdebdd06c4b perf/x86/intel: Allow PEBS multi-entry in watermark mode
dee1ba919ca2 mfd: twl6040: Fix device init errors for ACCCTL register
4110c4188853 mfd: intel-lpss: Set the device in reset state when init
1bef19130b5b kernel/sys.c: prctl: fix false positive in validate_prctl_map()
937fa1624a1f mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
fceb0be41836 mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
9c8d4d77e3aa hugetlbfs: on restore reserve error path retain subpool reservation
d8129a5d7a9d ipc: prevent lockup on alloc_msg and free_msg
50c0db539937 sysctl: return -EINVAL if val violates minmax
8b9241b052a2 fs/fat/file.c: issue flush after the writeback of FAT
335e20ca9562 Merge "soc: qcom: glink_spi_xprt: Sanitize input for short cmd"
abc2a59bfdb9 Merge "soc: qcom: hab: add error handling when dt item is missing"
9998d2e52dd4 mm: add /proc/pid/smaps_rollup
a2165163680e Merge "msm: ais: sensor: actuator: fix out of bound read for bivcm region params"
7ec9476039c1 soc: qcom: hab: add error handling when dt item is missing
7967865bb4c4 msm: ais: sensor: actuator: fix out of bound read for bivcm region params
14f9c777669f Merge "Merge android-4.4.182 (9c4ab57) into msm-4.4"
eee21eb4a635 ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf
f1adac4c222b ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset
291c54b284a4 i2c: virtio: reallocate memory for each msg buffer
ca64572d5459 Merge changes into msm-4.4
a32f2cd75906 Merge android-4.4.182 (9c4ab57) into msm-4.4
2ae4cde5790c Merge "i2c: refine the driver of i2c virtualization"
9c4ab5729952 Merge 4.4.182 into android-4.4
33790f2eda73 Linux 4.4.182
f938ae0ce5ef tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
e757d052f3b8 tcp: add tcp_min_snd_mss sysctl
ad472d3a9483 tcp: tcp_fragment() should apply sane memory limits
4657ee0fe05e tcp: limit payload size of sacked skbs
17c66e9e49a1 Merge "msm: vidc: add additional check to avoid out of bound access"
4e933027e684 Merge "Merge android-4.4.181 (bd858d7) into msm-4.4"
be5afd934314 i2c: refine the driver of i2c virtualization
f1057f82fa62 msm: vidc: add additional check to avoid out of bound access
c176a066dfd3 diag: dci: Correct out of bounds check in processing dci pkt rsp
cc47c2c325b9 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP"
1f3eb68e71cd msm: adsprpc: maintain local copy of rpra offloaded to DSP
a50f44266d21 Merge "diag: Prevent out-of-bound access while processing userspace data"
c658076e45e0 Merge "ASoC: msm: Add support for AVS version check"
f328b4d28d25 Merge "arm: dts: msm: Add avs-version dt property for 8996"
5dbfa1533af8 diag: Prevent out-of-bound access while processing userspace data
eb0322ea9b07 arm: dts: msm: Add avs-version dt property for 8996
5ef154a26639 Merge android-4.4.181 (bd858d7) into msm-4.4
7caeb5cb7c4f soc: qcom: glink_spi_xprt: Sanitize input for short cmd
17fd8dbacb92 Merge "soc: qcom: hab: add missing variable declaration"
1cc130f95ec7 UPSTREAM: binder: check for overflow when alloc for security context
784672577648 BACKPORT: binder: fix race between munmap() and direct reclaim
849ecbea5548 soc: qcom: hab: add missing variable declaration
bd858d730975 Merge 4.4.181 into android-4.4
0434b31d567e Merge "dwc3-msm: Fix dwc3_drd_state_string for undefined state"
411c38c969a7 Merge "usb: dwc3-msm: Ensure hardware is reset during role change"
8dce56fa0ccf Merge "usb: dwc3-msm: add enum for drd_states to remove otg_state usage"
d7b7345c3a5d Linux 4.4.181
f1d7eebd9d67 ethtool: check the return value of get_regs_len
647f72b0d75c ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
c9696a8f3e64 fuse: Add FOPEN_STREAM to use stream_open()
3bf0c459615a fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
0f5fab865ae9 drm/gma500/cdv: Check vbt config bits when detecting lvds panels
e087f7519114 genwqe: Prevent an integer overflow in the ioctl
59565e894518 MIPS: pistachio: Build uImage.gz by default
8061c23f5378 fuse: fallocate: fix return with locked inode
cf30c1953467 parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
f0d1e74c8120 rcu: locking and unlocking need to always be at least barriers
44657dbba7c4 pktgen: do not sleep with the thread lock held.
eded0b11c7a3 net: rds: fix memory leak in rds_ib_flush_mr_pool
54dd5e352cf7 net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
cc475966e5f7 neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
e5c6de6694ed ethtool: fix potential userspace buffer overflow
8795708bc939 media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
2b13a9580ef9 usb: gadget: fix request length error for isoc transfer
8b15aae1baa2 net: cdc_ncm: GetNtbFormat endian fix
613b4bc1951d Revert "x86/build: Move _etext to actual end of .text"
6ad730b83178 userfaultfd: don't pin the user memory in userfaultfd_file_create()
4e06554db5e5 brcmfmac: add subtype check for event handling in data path
993b68aa3ef7 brcmfmac: add length checks in scheduled scan result handler
35bcfbad5d94 brcmfmac: fix incorrect event channel deduction
8c12de962667 brcmfmac: revise handling events in receive path
5f4688a15c24 brcmfmac: screening firmware event packet
6da841e9ae87 brcmfmac: Add length checks on firmware events
c55a2cffa5ca bnx2x: disable GSO where gso_size is too big for hardware
a33b6d4c8bc7 net: create skb_gso_validate_mac_len()
c53c1a821d62 binder: replace "%p" with "%pK"
5280efe442b2 binder: Replace "%p" with "%pK" for stable
336c16621785 CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM
360f8fe46f74 kernel/signal.c: trace_signal_deliver when signal_group_exit
7a47d1873120 memcg: make it work on sparse non-0-node systems
5db0a9c3cc52 tty: max310x: Fix external crystal register setup
e498745310d0 tty: serial: msm_serial: Fix XON/XOFF
986adddb9d8f drm/nouveau/i2c: Disable i2c bus access after ->fini()
bf8f6b43c2e7 ALSA: hda/realtek - Set default power save node to 0
494447b90d6d Btrfs: fix race updating log root item during fsync
af34de02a6a7 scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
e85d002556ea scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
8282730a0afa media: smsusb: better handle optional alignment
0bce1ea89712 media: usb: siano: Fix false-positive "uninitialized variable" warning
b1782be70e1e media: usb: siano: Fix general protection fault in smsusb
d52c0ffb383f USB: rio500: fix memory leak in close after disconnect
b92be99a0c8b USB: rio500: refuse more than one device at a time
ee9d750e9ac8 USB: Add LPM quirk for Surface Dock GigE adapter
30e66d7d2fb9 USB: sisusbvga: fix oops in error path of sisusb_probe
018b7ea9ca24 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
f5e1ec93b208 usb: xhci: avoid null pointer deref when bos field is NULL
017e6726a4fb xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
ec70e2c130d6 include/linux/bitops.h: sanitize rotate primitives
fbbc4fe02a31 sparc64: Fix regression in non-hypervisor TLB flush xcall
5bce46edeb72 tipc: fix modprobe tipc failed after switch order of device registration -v2
416d252ba926 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
f1613a9e1bdc xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
383687e15cd0 crypto: vmx - ghash: do nosimd fallback manually
61ba8e9f51b3 net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
1d33a3ebd945 bnxt_en: Fix aggregation buffer leak under OOM condition.
7d423301240b tipc: Avoid copying bytes beyond the supplied data
332bff9d9a08 usbnet: fix kernel crash after disconnect
16ffb5f7c335 net: stmmac: fix reset gpio free missing
4f9c73aa2930 net-gro: fix use-after-free read in napi_gro_frags()
5cbaa135a0e1 llc: fix skb leak in llc_build_and_send_ui_pkt()
36a7222071d1 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
9fbf1ac57c7a ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
0984cb76d294 spi: Fix zero length xfer bug
854415f37aae spi: rspi: Fix sequencer reset during initialization
c927451887c1 spi : spi-topcliff-pch: Fix to handle empty DMA buffers
445c07409179 scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
3a5d11332896 media: saa7146: avoid high stack usage with clang
5a96cf10dc5c media: go7007: avoid clang frame overflow warning with KASAN
0e9f0805eeea media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
9effa38946b6 scsi: qla4xxx: avoid freeing unallocated dma memory
95f0bb0a6c83 usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
1909121a6192 rcutorture: Fix cleanup path for invalid torture_type strings
1081d04a0443 tty: ipwireless: fix missing checks for ioremap
c05b2ed7bc1b virtio_console: initialize vtermno value for ports
348ec7b9a1c1 media: wl128x: prevent two potential buffer overflows
557ae685914b spi: tegra114: reset controller on probe
5e75d5e2cd0c cxgb3/l2t: Fix undefined behaviour
dc2a8861fdb8 ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
971e4a273242 ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
5db3c5adf44a HID: core: move Usage Page concatenation to Main item
cb7872f12835 chardev: add additional check for minor range overlap
5680f59f0f15 x86/ia32: Fix ia32_restore_sigcontext() AC leak
94032b2e05c9 arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
04f45a555ec3 scsi: ufs: Avoid configuring regulator with undefined voltage range
60bcfed2ad60 scsi: ufs: Fix regulator load and icc-level configuration
0a597d2badef brcmfmac: fix race during disconnect when USB completion is in progress
f95ab00ab455 brcmfmac: convert dev_init_lock mutex to completion
db74ef82ca8b b43: shut up clang -Wuninitialized variable warning
951fbf92381a brcmfmac: fix missing checks for kmemdup
1d3ee4d7fc6a rtlwifi: fix a potential NULL pointer dereference
6d7b052d8466 iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
e98ef6767e41 iio: hmc5843: fix potential NULL pointer dereferences
a86d06179423 iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
4400dcd69478 x86/build: Keep local relocations with ld.lld
75ffb58460e3 cpufreq: pmac32: fix possible object reference leak
3d041608fd4b cpufreq/pasemi: fix possible object reference leak
4d02f33a4f42 cpufreq: ppc_cbe: fix possible object reference leak
6be923556aad s390: cio: fix cio_irb declaration
65e3cb04a5a2 extcon: arizona: Disable mic detect if running when driver is removed
db7eb206560c PM / core: Propagate dev->power.wakeup_path when no callbacks
066a286679b4 mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
6a783be705ba mmc: sdhci-of-esdhc: add erratum eSDHC5 support
8b0e6af16ae6 mmc_spi: add a status check for spi_sync_locked
a30e90a8eb3a scsi: libsas: Do discovery on empty PHY to update PHY info
915defac2a9a hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
0eb8a476ffc5 hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
79deb6abd1f5 hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
92b4d16997c4 hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
e3e58378c678 hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
488920af3bb3 RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
2ff310e6dae2 i40e: don't allow changes to HW VLAN stripping on active port VLANs
bc791e819503 x86/irq/64: Limit IST stack overflow check to #DB stack
3557f0857767 USB: core: Don't unbind interfaces following device reset failure
6f5e198878fb sched/core: Handle overflow in cpu_shares_write_u64
9812286a63a1 sched/core: Check quota and period overflow at usec to nsec conversion
9d4961a415ed powerpc/numa: improve control of topology updates
82077215ed25 media: pvrusb2: Prevent a buffer overflow
ca865598abf1 media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
a8e0739d465e audit: fix a memory leak bug
ff3038fe657d media: ov2659: make S_FMT succeed even if requested format doesn't match
2d97a3abcf2f media: au0828: stop video streaming only when last user stops
115ccd9ca776 media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
1433d7a0937b media: coda: clear error return value before picture run
5cadb7ae715f dmaengine: at_xdmac: remove BUG_ON macro in tasklet
af8b5d7d9477 pinctrl: pistachio: fix leaked of_node references
74dd38a5a447 HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
9bffc62051a9 mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
ae6b1f761180 x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
b059848e119f smpboot: Place the __percpu annotation correctly
28d8827a09b0 x86/build: Move _etext to actual end of .text
d3eb2caf6d41 bcache: avoid clang -Wunintialized warning
7bf3463abc95 bcache: add failure check to run_cache_set() for journal replay
d4547049bb7f bcache: fix failure in journal relplay
5789884b98ab bcache: return error immediately in bch_journal_replay()
50d25ca802f5 net: cw1200: fix a NULL pointer dereference
af2fb022b390 mwifiex: prevent an array overflow
4b24af093631 ASoC: fsl_sai: Update is_slave_mode with correct value
c1045350a6c4 mac80211/cfg80211: update bss channel on channel switch
a3c50ef9fd43 dmaengine: pl330: _stop: clear interrupt status
958848a1d97c w1: fix the resume command API
e4163587c4ee rtc: 88pm860x: prevent use-after-free on device remove
a898d150956b brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()
5e1a879d9ab3 spi: pxa2xx: fix SCR (divisor) calculation
3d521a6fba45 ASoC: imx: fix fiq dependencies
af283aba93bb powerpc/boot: Fix missing check of lseek() return value
dba032038c95 mmc: core: Verify SD bus width
333e8303d6e0 cxgb4: Fix error path in cxgb4_init_module
6948c6bc17d6 gfs2: Fix lru_count going negative
635c71d11234 tools include: Adopt linux/bits.h
ed2faf464d9b perf tools: No need to include bitops.h in util.h
a1f254dc06f9 at76c50x-usb: Don't register led_trigger if usb_register_driver failed
f5e4337e4a9c ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
e39af96f4dc1 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
a04e71a0dbc6 media: cpia2: Fix use-after-free in cpia2_exit
28eeeb86046e fbdev: fix WARNING in __alloc_pages_nodemask bug
bf8474c64846 hugetlb: use same fault hash key for shared and private mappings
6bc153907900 fbdev: fix divide error in fb_var_to_videomode
5c9a20390c01 btrfs: sysfs: don't leak memory when failing add fsid
0fa88718cdc5 Btrfs: fix race between ranged fsync and writeback of adjacent ranges
2f5ac0bd2ef7 gfs2: Fix sign extension bug in gfs2_update_stats
8aae5e98fec2 crypto: vmx - CTR: always increment IV as quadword
582bb52e4803 Revert "scsi: sd: Keep disk read-only when re-reading partition"
bd020b331706 bio: fix improper use of smp_mb__before_atomic()
603212bdc59c KVM: x86: fix return value for reserved EFER
75d63b131b73 ext4: do not delete unlinked inode from orphan list on failed truncate
31943685dd49 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
7d64186e7910 btrfs: Honour FITRIM range constraints during free space trim
57e84e4c073d md/raid: raid5 preserve the writeback action after the parity check
9013f4870848 Revert "Don't jump to compute_result state from check_result state"
0c57364fa0f4 perf bench numa: Add define for RUSAGE_THREAD if not present
66ee750cfdd7 ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
fc0208b3428d power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
dd37fa44dffa KVM: arm/arm64: Ensure vcpu target is unset on reset failure
fe4f461ba517 xfrm4: Fix uninitialized memory read in _decode_session4
cd0848733f25 vti4: ipip tunnel deregistration fixes.
8fd94b65d207 xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
86040d722b29 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
daea41651d43 dm delay: fix a crash when invalid device is specified
566004721c90 PCI: Mark Atheros AR9462 to avoid bus reset
0dc2ad06ddad fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
4673eae95b53 fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
c996722f7fff fbdev: sm712fb: fix support for 1024x768-16 mode
ebfadb510e3c fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM
c92bde52742c fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
0d5cd17ce037 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
ca5ce8db7f23 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
6c2fb5beecba fbdev: sm712fb: fix brightness control on reboot, don't set SR30
dbc86a927d66 perf intel-pt: Fix sample timestamp wrt non-taken branches
eedc9a210f9f perf intel-pt: Fix improved sample timestamp
f5da0aeca525 perf intel-pt: Fix instructions sampling rate
a5b2e4b6ac21 memory: tegra: Fix integer overflow on tick value calculation
11988047b39a tracing: Fix partial reading of trace event's id file
a7929c94860e ceph: flush dirty inodes before proceeding with remount
3c99cd905ba9 iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
40857ab73988 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
73724958d129 fuse: fix writepages on 32bit
12060f4740ca clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
4676a07add08 NFS4: Fix v4.0 client state corruption when mount
e8623e7a8f4b media: ov6650: Fix sensor possibly not detected on probe
dffc9e5ffae5 cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
b8ab0c4effb8 of: fix clang -Wunsequenced for be32_to_cpu()
2a98d346396a intel_th: msu: Fix single mode with IOMMU
bc065776c31e md: add mddev->pers to avoid potential NULL pointer dereference
ade291d2230a stm class: Fix channel free in stm output free path
65d14634b694 tipc: fix modprobe tipc failed after switch order of device registration
ff69bb4be643 tipc: switch order of device registration to fix a crash
2ff783f3e05e ppp: deflate: Fix possible crash in deflate_init
dd20e0c039fe net/mlx4_core: Change the error print to info print
b2f72a431142 net: avoid weird emergency message
70064f7ea100 KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
5e9bc16ff49f ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
98529ecd313b ext4: zero out the unused memory region in the extent tree block
9ff6372e5a6b fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount
bfce20eaf18e writeback: synchronize sync(2) against cgroup writeback membership switches
cd042379c6ad crypto: arm/aes-neonbs - don't access already-freed walk.iv
b70e97ae5d8e crypto: salsa20 - don't access already-freed walk.iv
6dc48d059646 crypto: chacha20poly1305 - set cra_name correctly
b82055365307 crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
de087dd9f5c6 crypto: gcm - Fix error return code in crypto_gcm_create_common()
064d0c5a9ae6 ipmi:ssif: compare block number correctly for multi-part return messages
bef039b2419e bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
5651075a1ce3 bcache: fix a race between cache register and cacheset unregister
686e4352e3d8 Btrfs: do not start a transaction at iterate_extent_inodes()
b268b6e501ed ext4: fix ext4_show_options for file systems w/o journal
f3b9c26f191b ext4: actually request zeroing of inode table after grow
e5100e7fa78e tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
592a36c59f4c mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
e3a74fbc42ca ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
b614485b6b93 mm/mincore.c: make mincore() more conservative
80cc516ed783 ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
e6bf706cee3f ASoC: max98090: Fix restore of DAPM Muxes
2a8188c68e0a ALSA: hda/realtek - EAPD turn on later
1bbb08c8ab6a ALSA: hda/hdmi - Consider eld_valid when reporting jack event
2d8956305ae8 ALSA: usb-audio: Fix a memory leak bug
b1c1888ad6c9 crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
2ee7c2310cd0 crypto: crct10dif-generic - fix use via crypto_shash_digest()
2ee0dd38a0a0 crypto: vmx - fix copy-paste error in CTR mode
f7dee0816e5d ARM: exynos: Fix a leaked reference by adding missing of_node_put
ce814dc7e811 x86/speculation/mds: Improve CPU buffer clear documentation
4d68e2bf3834 x86/speculation/mds: Revert CPU buffer clear on double fault exit
b1d850962510 ASoC: msm: Add support for AVS version check
fbf98df8d02a cnss2: Update board data file name format
5e073ffd6668 drm/msm/dsi-staging: Add range check in debugfs_dump_info_read
9600b86489f9 dwc3-msm: Fix dwc3_drd_state_string for undefined state
cc96e0915225 usb: dwc3-msm: Ensure hardware is reset during role change
02d74bda3466 usb: dwc3-msm: add enum for drd_states to remove otg_state usage
e4e5a975f4ae Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.4.y' into android-4.4
2d812ba62ee4 f2fs: link f2fs quota ops for sysfile
6dc3fb0ba854 fs: sdcardfs: Add missing option to show_options
* Excluded commits:
8be3b55c4cc7 msm: camera_v2: isp: update the frame drop during error case
28e17c1f6505 msm: camera_v2: isp: handle frame drop due to scheduling latency
Change-Id: Ib67f22a311625da7dd130d2491ef9e035b1db54f
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
|
| | |\ |
|
| | | |\
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* refs/heads/tmp-bd858d7
Linux 4.4.181
ethtool: check the return value of get_regs_len
ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
fuse: Add FOPEN_STREAM to use stream_open()
fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
drm/gma500/cdv: Check vbt config bits when detecting lvds panels
genwqe: Prevent an integer overflow in the ioctl
MIPS: pistachio: Build uImage.gz by default
fuse: fallocate: fix return with locked inode
parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
rcu: locking and unlocking need to always be at least barriers
pktgen: do not sleep with the thread lock held.
net: rds: fix memory leak in rds_ib_flush_mr_pool
net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
ethtool: fix potential userspace buffer overflow
media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
usb: gadget: fix request length error for isoc transfer
net: cdc_ncm: GetNtbFormat endian fix
Revert "x86/build: Move _etext to actual end of .text"
userfaultfd: don't pin the user memory in userfaultfd_file_create()
brcmfmac: add subtype check for event handling in data path
brcmfmac: add length checks in scheduled scan result handler
brcmfmac: fix incorrect event channel deduction
brcmfmac: revise handling events in receive path
brcmfmac: screening firmware event packet
brcmfmac: Add length checks on firmware events
bnx2x: disable GSO where gso_size is too big for hardware
net: create skb_gso_validate_mac_len()
binder: replace "%p" with "%pK"
binder: Replace "%p" with "%pK" for stable
CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM
kernel/signal.c: trace_signal_deliver when signal_group_exit
memcg: make it work on sparse non-0-node systems
tty: max310x: Fix external crystal register setup
tty: serial: msm_serial: Fix XON/XOFF
drm/nouveau/i2c: Disable i2c bus access after ->fini()
ALSA: hda/realtek - Set default power save node to 0
Btrfs: fix race updating log root item during fsync
scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
media: smsusb: better handle optional alignment
media: usb: siano: Fix false-positive "uninitialized variable" warning
media: usb: siano: Fix general protection fault in smsusb
USB: rio500: fix memory leak in close after disconnect
USB: rio500: refuse more than one device at a time
USB: Add LPM quirk for Surface Dock GigE adapter
USB: sisusbvga: fix oops in error path of sisusb_probe
USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
usb: xhci: avoid null pointer deref when bos field is NULL
xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
include/linux/bitops.h: sanitize rotate primitives
sparc64: Fix regression in non-hypervisor TLB flush xcall
tipc: fix modprobe tipc failed after switch order of device registration -v2
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
crypto: vmx - ghash: do nosimd fallback manually
net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
bnxt_en: Fix aggregation buffer leak under OOM condition.
tipc: Avoid copying bytes beyond the supplied data
usbnet: fix kernel crash after disconnect
net: stmmac: fix reset gpio free missing
net-gro: fix use-after-free read in napi_gro_frags()
llc: fix skb leak in llc_build_and_send_ui_pkt()
ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
spi: Fix zero length xfer bug
spi: rspi: Fix sequencer reset during initialization
spi : spi-topcliff-pch: Fix to handle empty DMA buffers
scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
media: saa7146: avoid high stack usage with clang
media: go7007: avoid clang frame overflow warning with KASAN
media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
scsi: qla4xxx: avoid freeing unallocated dma memory
usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
rcutorture: Fix cleanup path for invalid torture_type strings
tty: ipwireless: fix missing checks for ioremap
virtio_console: initialize vtermno value for ports
media: wl128x: prevent two potential buffer overflows
spi: tegra114: reset controller on probe
cxgb3/l2t: Fix undefined behaviour
ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
HID: core: move Usage Page concatenation to Main item
chardev: add additional check for minor range overlap
x86/ia32: Fix ia32_restore_sigcontext() AC leak
arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
scsi: ufs: Avoid configuring regulator with undefined voltage range
scsi: ufs: Fix regulator load and icc-level configuration
brcmfmac: fix race during disconnect when USB completion is in progress
brcmfmac: convert dev_init_lock mutex to completion
b43: shut up clang -Wuninitialized variable warning
brcmfmac: fix missing checks for kmemdup
rtlwifi: fix a potential NULL pointer dereference
iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
iio: hmc5843: fix potential NULL pointer dereferences
iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
x86/build: Keep local relocations with ld.lld
cpufreq: pmac32: fix possible object reference leak
cpufreq/pasemi: fix possible object reference leak
cpufreq: ppc_cbe: fix possible object reference leak
s390: cio: fix cio_irb declaration
extcon: arizona: Disable mic detect if running when driver is removed
PM / core: Propagate dev->power.wakeup_path when no callbacks
mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
mmc: sdhci-of-esdhc: add erratum eSDHC5 support
mmc_spi: add a status check for spi_sync_locked
scsi: libsas: Do discovery on empty PHY to update PHY info
hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
i40e: don't allow changes to HW VLAN stripping on active port VLANs
x86/irq/64: Limit IST stack overflow check to #DB stack
USB: core: Don't unbind interfaces following device reset failure
sched/core: Handle overflow in cpu_shares_write_u64
sched/core: Check quota and period overflow at usec to nsec conversion
powerpc/numa: improve control of topology updates
media: pvrusb2: Prevent a buffer overflow
media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
audit: fix a memory leak bug
media: ov2659: make S_FMT succeed even if requested format doesn't match
media: au0828: stop video streaming only when last user stops
media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
media: coda: clear error return value before picture run
dmaengine: at_xdmac: remove BUG_ON macro in tasklet
pinctrl: pistachio: fix leaked of_node references
HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
smpboot: Place the __percpu annotation correctly
x86/build: Move _etext to actual end of .text
bcache: avoid clang -Wunintialized warning
bcache: add failure check to run_cache_set() for journal replay
bcache: fix failure in journal relplay
bcache: return error immediately in bch_journal_replay()
net: cw1200: fix a NULL pointer dereference
mwifiex: prevent an array overflow
ASoC: fsl_sai: Update is_slave_mode with correct value
mac80211/cfg80211: update bss channel on channel switch
dmaengine: pl330: _stop: clear interrupt status
w1: fix the resume command API
rtc: 88pm860x: prevent use-after-free on device remove
brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()
spi: pxa2xx: fix SCR (divisor) calculation
ASoC: imx: fix fiq dependencies
powerpc/boot: Fix missing check of lseek() return value
mmc: core: Verify SD bus width
cxgb4: Fix error path in cxgb4_init_module
gfs2: Fix lru_count going negative
tools include: Adopt linux/bits.h
perf tools: No need to include bitops.h in util.h
at76c50x-usb: Don't register led_trigger if usb_register_driver failed
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
media: cpia2: Fix use-after-free in cpia2_exit
fbdev: fix WARNING in __alloc_pages_nodemask bug
hugetlb: use same fault hash key for shared and private mappings
fbdev: fix divide error in fb_var_to_videomode
btrfs: sysfs: don't leak memory when failing add fsid
Btrfs: fix race between ranged fsync and writeback of adjacent ranges
gfs2: Fix sign extension bug in gfs2_update_stats
crypto: vmx - CTR: always increment IV as quadword
Revert "scsi: sd: Keep disk read-only when re-reading partition"
bio: fix improper use of smp_mb__before_atomic()
KVM: x86: fix return value for reserved EFER
ext4: do not delete unlinked inode from orphan list on failed truncate
fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
btrfs: Honour FITRIM range constraints during free space trim
md/raid: raid5 preserve the writeback action after the parity check
Revert "Don't jump to compute_result state from check_result state"
perf bench numa: Add define for RUSAGE_THREAD if not present
ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
KVM: arm/arm64: Ensure vcpu target is unset on reset failure
xfrm4: Fix uninitialized memory read in _decode_session4
vti4: ipip tunnel deregistration fixes.
xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
dm delay: fix a crash when invalid device is specified
PCI: Mark Atheros AR9462 to avoid bus reset
fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
fbdev: sm712fb: fix support for 1024x768-16 mode
fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM
fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
fbdev: sm712fb: fix brightness control on reboot, don't set SR30
perf intel-pt: Fix sample timestamp wrt non-taken branches
perf intel-pt: Fix improved sample timestamp
perf intel-pt: Fix instructions sampling rate
memory: tegra: Fix integer overflow on tick value calculation
tracing: Fix partial reading of trace event's id file
ceph: flush dirty inodes before proceeding with remount
iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
fuse: fix writepages on 32bit
clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
NFS4: Fix v4.0 client state corruption when mount
media: ov6650: Fix sensor possibly not detected on probe
cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
of: fix clang -Wunsequenced for be32_to_cpu()
intel_th: msu: Fix single mode with IOMMU
md: add mddev->pers to avoid potential NULL pointer dereference
stm class: Fix channel free in stm output free path
tipc: fix modprobe tipc failed after switch order of device registration
tipc: switch order of device registration to fix a crash
ppp: deflate: Fix possible crash in deflate_init
net/mlx4_core: Change the error print to info print
net: avoid weird emergency message
KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
ext4: zero out the unused memory region in the extent tree block
fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount
writeback: synchronize sync(2) against cgroup writeback membership switches
crypto: arm/aes-neonbs - don't access already-freed walk.iv
crypto: salsa20 - don't access already-freed walk.iv
crypto: chacha20poly1305 - set cra_name correctly
crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
crypto: gcm - Fix error return code in crypto_gcm_create_common()
ipmi:ssif: compare block number correctly for multi-part return messages
bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
bcache: fix a race between cache register and cacheset unregister
Btrfs: do not start a transaction at iterate_extent_inodes()
ext4: fix ext4_show_options for file systems w/o journal
ext4: actually request zeroing of inode table after grow
tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
mm/mincore.c: make mincore() more conservative
ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
ASoC: max98090: Fix restore of DAPM Muxes
ALSA: hda/realtek - EAPD turn on later
ALSA: hda/hdmi - Consider eld_valid when reporting jack event
ALSA: usb-audio: Fix a memory leak bug
crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
crypto: crct10dif-generic - fix use via crypto_shash_digest()
crypto: vmx - fix copy-paste error in CTR mode
ARM: exynos: Fix a leaked reference by adding missing of_node_put
x86/speculation/mds: Improve CPU buffer clear documentation
x86/speculation/mds: Revert CPU buffer clear on double fault exit
f2fs: link f2fs quota ops for sysfile
fs: sdcardfs: Add missing option to show_options
Conflicts:
drivers/scsi/sd.c
drivers/scsi/ufs/ufshcd.c
Change-Id: If6679c7cc8c3fee323c749ac359353fbebfd12d9
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
[ Upstream commit 4b0a2c5ff7215206ea6135a405f17c5f6fca7d00 ]
For regular serial ports we do not initialize value of vtermno
variable. A garbage value is assigned for non console ports.
The value can be observed as a random integer with [1].
[1] vim /sys/kernel/debug/virtio-ports/vport*p*
This patch initialize the value of vtermno for console serial
ports to '1' and regular serial ports are initiaized to '0'.
Reported-by: siliu@redhat.com
Signed-off-by: Pankaj Gupta <pagupta@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
commit 55be8658c7e2feb11a5b5b33ee031791dbd23a69 upstream.
According to ipmi spec, block number is a number that is incremented,
starting with 0, for each new block of message data returned using the
middle transaction.
Here, the 'blocknum' is data[0] which always starts from zero(0) and
'ssif_info->multi_pos' starts from 1.
So, we need to add +1 to blocknum while comparing with multi_pos.
Fixes: 7d6380cd40f79 ("ipmi:ssif: Fix handling of multi-part return messages").
Reported-by: Kiran Kolukuluru <kirank@ami.com>
Signed-off-by: Kamlakant Patel <kamlakantp@marvell.com>
Message-Id: <1556106615-18722-1-git-send-email-kamlakantp@marvell.com>
[Also added a debug log if the block numbers don't match.]
Signed-off-by: Corey Minyard <cminyard@mvista.com>
Cc: stable@vger.kernel.org # 4.4
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Correct the out of bounds check and prevent moving the temp pointer
further than out of bounds check which is not necessary while
processing dci pkt rsp.
Change-Id: I01f8cd7454aff81b24c986eade35c79724976151
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | |\ \ \ |
|
| | | |/ /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Since DSP is not supposed to modify the base pointer rpra of the
input/output arguments offloaded to DSP, maintain a local copy of
the pointer and use it after receiving interrupt from DSP.
Change-Id: I4afade7184cb2aca148060fb0cda06c6174f3b55
Acked-by: Maitreyi Gupta <maitreyi@qti.qualcomm.com>
Signed-off-by: Tharun Kumar Merugu <mtharu@codeaurora.org>
Signed-off-by: Mohammed Nayeem Ur Rahman <mohara@codeaurora.org>
|
| | |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Proper buffer length checks are missing in diagchar_write
handlers for userspace data while processing the same buffer.
Change-Id: I5b8095766e09c22f164398089505fe827fee8b54
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| |\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0
bcf671504f41 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP" into kernel.lnx.4.4.r37-rel
621c16b0342c Merge "arm: dts: msm: Add avs-version dt property for 8996" into kernel.lnx.4.4.r37-rel
22fbeb474b52 Merge "msm: sensor: actuator: fix out of bound read for bivcm region params" into kernel.lnx.4.4.r37-rel
579b4b461cca Merge "diag: Prevent out-of-bound access while processing userspace data" into kernel.lnx.4.4.r37-rel
aff3d9629d10 arm: dts: msm: Add avs-version dt property for 8996
fbf5254e319b msm: sensor: actuator: fix out of bound read for bivcm region params
d73a74c20cb2 msm: adsprpc: maintain local copy of rpra offloaded to DSP
3c1b5fa08460 diag: Prevent out-of-bound access while processing userspace data
d929c539a8e5 msm: ais: sensor: actuator: fix out of bound read for bivcm region params
77a2432a11c2 ASoC: msm: Add support for AVS version check
51ae92e6a401 Merge commit '06ceb6bb61d15d96906733a0a4e1ca5a53a9fe3e' into HEAD
06ceb6bb61d1 Merge "msm: ipa3: Fix to validate check for IP type"
c7c174351b81 Merge "diag: Prevent out-of-bound access while processing non-hdlc pkt"
bc914679ea33 msm: ipa3: Fix to validate check for IP type
f275209c759d diag: Prevent out-of-bound access while processing non-hdlc pkt
77b17af341a0 Merge "ARM: dts: msm: Add support for float charger detection on MSM8996"
c9c1e20784b5 Merge "phy: qusb: Add support for DP DM pulsing for HS PHY"
5c004decb393 Merge "dsp: afe: check for minimum size before payload access"
f7f2404ce1e5 Merge "soc: msm8998: Add 16ch playback and record support for TDM"
0ee704100065 dsp: afe: check for minimum size before payload access
074cdf9e72eb Merge "cnss2: Return failure if bus type do not match"
f73796d0e9f6 Merge "asoc: Update max channels for TDM ports"
3691a75c38f2 soc: msm8998: Add 16ch playback and record support for TDM
4067f83f16aa Merge "ARM: dts: msm: Enable DP DM pulsing support on MSM8996"
ced9c94ab135 Merge "soc: qcom: hab: Add open local-cancel and compiler warning fixes"
1058027c8de2 Merge "msm: ipa: fix to validate input parameters"
c53f4c9b5b07 Merge "net: sockev: avoid races between sockev and socket_close"
c447f451f23b msm: ipa: fix to validate input parameters
0e71405de372 phy: qusb: Add support for DP DM pulsing for HS PHY
923d660f4f8e ARM: dts: msm: Add support for float charger detection on MSM8996
669f50368505 usb: dwc3: Support float charger detection
b924e5efad9c net: sockev: avoid races between sockev and socket_close
ecf5d04a091c i2c: add virtual i2c driver
3973929bb0c0 asoc: Update max channels for TDM ports
f5b94d9b13a2 Merge "fbdev: msm: check the length of the external input buffer properly"
866e7cab7632 Merge "power: qpnp-smbcharger: Add support for dpdm pulsing"
69b14d87db0c Merge "diag: Prevent out-of-bound access while processing dci transaction"
16819b1724ca Merge "diag: Prevent out-of-bound access while processing mask commands"
77b2a5118029 Merge "soc: qcom: smem: validate fields of shared structures"
9c9f59ad526d Merge "msm: mdss: assign block_id for INTF_3"
9482fdb2ac26 Merge "asoc: Ratelimit error logs to avoid excessive logging"
c0d5faa72def ARM: dts: msm: Enable DP DM pulsing support on MSM8996
20cff2eff8b0 soc: qcom: hab: Add open local-cancel and compiler warning fixes
2835220d65c2 power: qpnp-smbcharger: Add support for dpdm pulsing
705aac6195a3 Merge "msm: ais : Lock Implementation for avoid race condition"
e405d025f373 cnss2: Return failure if bus type do not match
cce422722518 soc: qcom: smem: validate fields of shared structures
24cedeb24492 Merge "Merge android-4.4.180 (71cb827) into msm-4.4"
01fcd88c0f94 fbdev: msm: check the length of the external input buffer properly
2f6ef8a30b78 Merge "usb: f_gsi: Increase max control transfer size to 8K"
cfb05dba8254 Merge "msm: ipa_v2: Protect ipa default routing table"
44607545fc3a Merge "qcom: smcinvoke: Fix stack overflow for arr_filp"
b29d59a33d59 Merge "defconfig: msm8996: Enable radio configs"
fa9dbbba7210 qcom: smcinvoke: Fix stack overflow for arr_filp
17fe44d6eb8a msm: ais : Lock Implementation for avoid race condition
547234bc3905 Merge "arm: dts: msm: Add usbin-vadc dt property for 8996"
780ec0d56272 Merge android-4.4.180 (71cb827) into msm-4.4
fe304a42badc Merge "power: qpnp-smbcharger: Add voltage now property in usb psy"
01abac7367ec Merge "soc: qcom: ipc_router_mhi_xprt: Handle error condition"
d1a5c0380504 Merge "ARM: dts: msm: Enable HDMI audio support for 8996"
f5704ee3fc16 Merge "defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS"
726ccfec942d power: qpnp-smbcharger: Add voltage now property in usb psy
c77bbe685168 Merge "msm: ais: handle the error value returned during get clock"
765d3befd4ec msm: ais: handle the error value returned during get clock
716a46317a4f power: qpnp-smbcharger: Add support for float charger detection
f228ed90951d Merge "ARM: dts: msm: Update avb flag and partition names for auto"
fde6bcd6f665 arm: dts: msm: Add usbin-vadc dt property for 8996
f8572fa1920f Merge "ASoC: msm: Update codec name in HDMI dai link"
64c7fea7a615 Merge "serial: msm_serial_hs: Align to HW assisted flow control support"
4249d4516299 asoc: Ratelimit error logs to avoid excessive logging
095ed32dd71f serial: msm_serial_hs: Align to HW assisted flow control support
a4cc4b94d2cc usb: f_gsi: Increase max control transfer size to 8K
14ff0dc12ed0 Merge "ARM: dts: msm: add support for apq8096pro CDP"
6666379ae0e6 msm: mdss: assign block_id for INTF_3
79e903bcd908 soc: qcom: ipc_router_mhi_xprt: Handle error condition
4efd54ad69f1 Merge "pwm: pwm-qpnp: Fix the order of configuring PWM value"
af0d3ed849b5 Merge "msm: camera: jpegdma: Added missing lock for dqbuf and streamon"
71cb827c0249 Merge 4.4.180 into android-4.4
0f654c12cd72 Linux 4.4.180
5f3cf6b82211 powerpc/lib: fix book3s/32 boot failure due to code patching
95100d253fee powerpc/booke64: set RI in default MSR
9db489ed4971 drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
f518072d1ae1 drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
7a22a4ea67b7 bonding: fix arp_validate toggling in active-backup mode
6e72e6897efe ipv4: Fix raw socket lookup for local traffic
6e36b31c1b07 vrf: sit mtu should not be updated when vrf netdev is the link
6044ab2a05f6 vlan: disable SIOCSHWTSTAMP in container
bf4d21eed0d7 packet: Fix error path in packet_init
1261f44db98c net: ucc_geth - fix Oops when changing number of buffers in the ring
24d2a86b8968 bridge: Fix error path for kobject_init_and_add()
b8bb7bc326f2 powerpc/64s: Include cpu header
27d9e822a716 USB: serial: fix unthrottle races
f2387d0c3467 USB: serial: use variable for status
6db8c0882912 x86/bugs: Change L1TF mitigation string to match upstream
71041afe26a3 x86/speculation/mds: Fix documentation typo
693eb3bdaf19 Documentation: Correct the possible MDS sysfs values
0f961ec59305 x86/mds: Add MDSUM variant to the MDS documentation
3092ad5c4f2e x86/speculation/mds: Add 'mitigations=' support for MDS
a50e2ca5757f x86/speculation: Support 'mitigations=' cmdline option
31a2c5f7a25b cpu/speculation: Add 'mitigations=' cmdline option
2b26dff34698 x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
0144cbc12474 x86/speculation/mds: Fix comment
e2896d6b1e48 x86/speculation/mds: Add SMT warning message
06deb655ae26 x86/speculation: Move arch_smt_update() call to after mitigation decisions
5b0f1f5b4f58 x86/cpu/bugs: Use __initconst for 'const' init data
48204fd98023 Documentation: Add MDS vulnerability documentation
e0e64cdc7fd9 Documentation: Move L1TF to separate directory
9fe26a407f0e x86/speculation/mds: Add mitigation mode VMWERV
3fb41b4e2d38 x86/speculation/mds: Add sysfs reporting for MDS
1e9a9ef67033 x86/speculation/l1tf: Document l1tf in sysfs
8c7398befdf1 x86/speculation/mds: Add mitigation control for MDS
d4c1e6cbbcdc x86/speculation/mds: Conditionally clear CPU buffers on idle entry
a41a2dee403d x86/speculation/mds: Clear CPU buffers on exit to user
7a6c2a6c4235 x86/speculation/mds: Add mds_clear_cpu_buffers()
f223c10cf176 x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
adef560d1ef8 x86/speculation/mds: Add BUG_MSBDS_ONLY
179adc415f94 x86/speculation/mds: Add basic bug infrastructure for MDS
8be7f1183d2f x86/speculation: Consolidate CPU whitelists
683f9fba8c27 x86/msr-index: Cleanup bit defines
6eb1dfb0e945 kvm: x86: Report STIBP on GET_SUPPORTED_CPUID
f8515b2d8c86 x86/speculation: Provide IBPB always command line options
867931a6cc51 x86/speculation: Add seccomp Spectre v2 user space protection mode
0ec9baa28b62 x86/speculation: Enable prctl mode for spectre_v2_user
ff99c966c627 x86/speculation: Add prctl() control for indirect branch speculation
bc8a006cb385 x86/speculation: Prevent stale SPEC_CTRL msr content
b784ff22d682 x86/speculation: Prepare arch_smt_update() for PRCTL mode
29652de33320 x86/speculation: Split out TIF update
e2dafdd0084b x86/speculation: Prepare for conditional IBPB in switch_mm()
708f3ed763fc x86/speculation: Avoid __switch_to_xtra() calls
2db6cf1eba01 x86/process: Consolidate and simplify switch_to_xtra() code
2959c3e36f65 x86/speculation: Prepare for per task indirect branch speculation control
a5e8a06268dc x86/speculation: Add command line control for indirect branch speculation
92bc99ff0724 x86/speculation: Unify conditional spectre v2 print functions
3d2149a49e7b x86/speculataion: Mark command line parser data __initdata
ad70092da835 x86/speculation: Mark string arrays const correctly
77aaa118c5d1 x86/speculation: Reorder the spec_v2 code
892d9881b437 x86/speculation: Rework SMT state change
1f562beba75c sched: Add sched_smt_active()
f576a78075ba x86/Kconfig: Select SCHED_SMT if SMP enabled
f68790685aa5 x86/speculation: Reorganize speculation control MSRs update
41ebb68d9a67 x86/speculation: Rename SSBD update functions
9ef693a75208 x86/speculation: Disable STIBP when enhanced IBRS is in use
6a598ce52f69 x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common()
fb4a4fc139a5 x86/speculation: Remove unnecessary ret variable in cpu_show_common()
809e50eb21e5 x86/speculation: Clean up spectre_v2_parse_cmdline()
f97a530be08f x86/speculation: Update the TIF_SSBD comment
0440c2c5e2d2 x86/speculation: Propagate information about RSB filling mitigation to sysfs
dc23d0241b97 x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
4a215a1155ce x86/speculation: Apply IBPB more strictly to avoid cross-process data leak
122b3ad3a068 x86/mm: Use WRITE_ONCE() when setting PTEs
7c50deefa1e9 KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled
2422db18b660 x86/cpu: Sanitize FAM6_ATOM naming
2329f765b53a x86/microcode: Update the new microcode revision unconditionally
0ee359e14c08 x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
12043f0eb5fd x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
9029b6908e1d x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR
8d1385ea4c67 locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file
76869c022795 x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features
a9f354ad1c1d x86/bugs: Add AMD's SPEC_CTRL MSR usage
99bd3817b6d7 x86/bugs: Add AMD's variant of SSB_NO
2b8e34665e8f x86/speculation: Simplify the CPU bug detection logic
efcb85dd2644 x86/speculation: Support Enhanced IBRS on future CPUs
042c6aee6572 x86/cpufeatures: Hide AMD-specific speculation flags
dc7e3b052ab4 x86/MCE: Save microcode revision in machine check records
30c66b528e1f x86/microcode/intel: Check microcode revision before updating sibling threads
c2a357d9b429 bitops: avoid integer overflow in GENMASK(_ULL)
d7a711b64ff8 x86: stop exporting msr-index.h to userland
98cc1464cfd6 x86/microcode/intel: Add a helper which gives the microcode revision
5ec6421c21c6 locking/static_keys: Provide DECLARE and well as DEFINE macros
40f6c72df9d8 Don't jump to compute_result state from check_result state
07d35512e494 x86/vdso: Pass --eh-frame-hdr to the linker
9767260be0b4 cw1200: fix missing unlock on error in cw1200_hw_scan()
ccc2b0f8d4be gpu: ipu-v3: dp: fix CSC handling
795c76f4e50f selftests/net: correct the return value for run_netsocktests
83494cfb0d29 s390: ctcm: fix ctcm_new_device error return code
4c78631d884d ipvs: do not schedule icmp errors from tunnels
2b46b98576cb init: initialize jump labels before command line option parsing
a54c490cecd5 tools lib traceevent: Fix missing equality check for strcmp
5664d3298b3b KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing
b79c1ea82e3b s390/3270: fix lockdep false positive on view->lock
825c6401f9e9 s390/dasd: Fix capacity calculation for large volumes
905b8964c9d9 libnvdimm/btt: Fix a kmemdup failure check
3007ae4bbf26 HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
c15b4f9f4699 HID: input: add mapping for Expose/Overview key
45679938dc6f iio: adc: xilinx: fix potential use-after-free on remove
619c8933e4af platform/x86: sony-laptop: Fix unintentional fall-through
8ce5ae6912e3 netfilter: compat: initialize all fields in xt_init
a9bdfbd494da timer/debug: Change /proc/timer_stats from 0644 to 0600
e212945fe525 ASoC: Intel: avoid Oops if DMA setup fails
faf458605614 ipv6: fix a potential deadlock in do_ipv6_setsockopt()
dcb33fe3d9a6 UAS: fix alignment of scatter/gather segments
d016dc1bd29a Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
dd150bcc93ff Bluetooth: hidp: fix buffer overflow
15a12bde0fd9 scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
88246eb7bf37 usb: dwc3: Fix default lpm_nyet_threshold value
1aec586c25ee genirq: Prevent use-after-free and work list corruption
2984aa6d4a78 iommu/amd: Set exclusion range correctly
4294ec58537d scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
93beb0decfe2 perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
5ea6b626b917 ASoC: tlv320aic32x4: Fix Common Pins
b7bbb5ce955b ASoC: cs4270: Set auto-increment bit for register writes
79132626f8c7 ASoC:soc-pcm:fix a codec fixup issue in TDM case
fe3f6511c9af scsi: libsas: fix a race condition when smp task timeout
0f83a55ca07e media: v4l2: i2c: ov7670: Fix PLL bypass register values
d96fc7729c44 x86/mce: Improve error message when kernel cannot recover, p2
08794d181ff6 selinux: never allow relabeling on context mounts
3bf16c452b91 Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
90b8ab9ee10f staging: iio: adt7316: fix the dac write calculation
7c4744e2c75c staging: iio: adt7316: fix the dac read calculation
a45018ff3c06 staging: iio: adt7316: allow adt751x to use internal vref for all dacs
55153b108922 usb: usbip: fix isoc packet num validation in get_pipe
3401512b7831 ARM: iop: don't use using 64-bit DMA masks
03fd6e162398 ARM: orion: don't use using 64-bit DMA masks
9fcbabe209a2 xsysace: Fix error handling in ace_setup
66c57ab148a0 hugetlbfs: fix memory leak for resv_map
550ce5b3b45b net: hns: Fix WARNING when remove HNS driver with SMMU enabled
c8d4b98eeed4 net: hns: Use NAPI_POLL_WEIGHT for hns driver
4af8444aff7c scsi: storvsc: Fix calculation of sub-channel count
4328fca13020 vfio/pci: use correct format characters
891c92860383 rtc: da9063: set uie_unsupported when relevant
02395682f19b debugfs: fix use-after-free on symlink traversal
90a015d4d782 jffs2: fix use-after-free on symlink traversal
cd43ccbfb5fb bonding: show full hw address in sysfs for slave entries
88020a14a0b7 igb: Fix WARN_ONCE on runtime suspend
6c24038d84a7 rtc: sh: Fix invalid alarm warning for non-enabled alarm
e9358b9a5db1 HID: debug: fix race condition with between rdesc_show() and device removal
1b2b6db7765e USB: core: Fix bug caused by duplicate interface PM usage counter
b384399a518c USB: core: Fix unterminated string returned by usb_string()
7a52b950902d USB: w1 ds2490: Fix bug caused by improper use of altsetting array
438b075fc77d USB: yurex: Fix protection fault after device removal
c6ae8a5a4396 packet: validate msg_namelen in send directly
aed15cc2ced6 bnxt_en: Improve multicast address setup logic.
c7a9d69b727a ipv6: invert flowlabel sharing check in process and user mode
82ae1a89b134 ipv6/flowlabel: wait rcu grace period before put_pid()
0fe65e4eac33 ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
bdbc15205b51 ALSA: line6: use dynamic buffers
e1a5cdbf7cb3 vfio/type1: Limit DMA mappings per container
e0d9031feb2f kconfig/[mn]conf: handle backspace (^H) key
8c2bbe210936 libata: fix using DMA buffers on stack
4767c30a2bac scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
cd2bdca329c1 ceph: fix use-after-free on symlink traversal
4663cb7947dd usb: u132-hcd: fix resource leak
783552a9865c scsi: qla4xxx: fix a potential NULL pointer dereference
f18c946e6cf1 net: ethernet: ti: fix possible object reference leak
64206dd039fd net: ibm: fix possible object reference leak
ae35f101789b net: xilinx: fix possible object reference leak
c0d641aa264a net: ks8851: Set initial carrier state to down
f41b4fd83fef net: ks8851: Delay requesting IRQ until opened
195aac29efe3 net: ks8851: Reassert reset pin if chip ID check fails
36b1240d4e47 net: ks8851: Dequeue RX packets explicitly
1710b4ad56db ARM: dts: pfla02: increase phy reset duration
fd1f90b4fa83 usb: gadget: net2272: Fix net2272_dequeue()
61fb6fa9b32b usb: gadget: net2280: Fix net2280_dequeue()
4ff888ea38c1 usb: gadget: net2280: Fix overrun of OUT messages
b9cf1bc4e31e sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
6e361910119b netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
d311479911c7 qlcnic: Avoid potential NULL pointer dereference
1652d1194af5 usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set
4f2df9fd0769 usbnet: ipheth: prevent TX queue timeouts when device not ready
aa24636d3dc2 Documentation: Add nospectre_v1 parameter
c816ec25621b powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg
6a56ecdfd3b2 powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup'
1a26467578d8 powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms
42b46e985c99 powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit)
5bed4b351268 powerpc/fsl: Emulate SPRN_BUCSR register
4168b2e356bc powerpc/fsl: Flush branch predictor when entering KVM
ec206826323a powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used
389fd9776f3e ipv4: set the tcp_min_rtt_wlen range from 0 to one day
8cab9c87ee0f net: stmmac: move stmmac_check_ether_addr() to driver probe
1990e41b2339 team: fix possible recursive locking when add slaves
510a733497d3 ipv4: add sanity checks in ipv4_link_failure()
f480eb03c88a Revert "block/loop: Use global lock for ioctl() operation."
f08db490b406 bpf: reject wrong sized filters earlier
0b7d9b8571ad tipc: check link name with right length in tipc_nl_compat_link_set
625634be3b8b tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
cafee685fb48 netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
cec54a8e694c NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
76c279c7b6f8 fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
28bd672e7a9f intel_th: gth: Fix an off-by-one in output unassigning
20159939a8b4 slip: make slhc_free() silently accept an error pointer
2996e89c2d62 tipc: handle the err returned from cmd header function
9d688aa11077 powerpc/fsl: Fix the flush of branch predictor.
990c7be76516 powerpc/security: Fix spectre_v2 reporting
5f9678d9c8c7 powerpc/fsl: Update Spectre v2 reporting
0454f7b3282b powerpc/fsl: Flush the branch predictor at each kernel entry (64bit)
932e8acaa806 powerpc/fsl: Add nospectre_v2 command line argument
4cbfad23be50 powerpc/fsl: Fix spectre_v2 mitigations reporting
b76f9074d0f3 powerpc/fsl: Add macro to flush the branch predictor
526adfdf029e powerpc/fsl: Add infrastructure to fixup branch predictor flush
7fe905d0973e powerpc: Avoid code patching freed init sections
ee1a6e164cac powerpc/powernv: Query firmware for count cache flush settings
67fb764be590 powerpc/pseries: Query hypervisor for count cache flush settings
bda04af8692d powerpc/64s: Add support for software count cache flush
bfeafa01fa09 powerpc/64s: Add new security feature flags for count cache flush
a8d13b364862 powerpc/asm: Add a patch_site macro & helpers for patching instructions
0273c6d73a03 powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
b7f47c8f0f4c powerpc/64: Make meltdown reporting Book3S 64 specific
04a682df27c1 powerpc/64: Call setup_barrier_nospec() from setup_arch()
e7b3fb43b970 powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC
4fb0382d987e powerpc/64: Make stf barrier PPC_BOOK3S_64 specific.
58dbc8def949 powerpc/64: Disable the speculation barrier from the command line
d000015f6283 powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2
b6a4dce40cb7 powerpc/64s: Enhance the information in cpu_show_spectre_v1()
1110c3ad0b66 powerpc: Use barrier_nospec in copy_from_user()
2a90ebba2fcc powerpc/64: Use barrier_nospec in syscall entry
990ce72a3bab powerpc/64s: Enable barrier_nospec based on firmware settings
39e71d5ae83f powerpc/64s: Patch barrier_nospec in modules
083c37a1bb61 powerpc/64s: Add support for ori barrier_nospec patching
fde08a5d395e powerpc/64s: Add barrier_nospec
7b9f9ce1a7a0 powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
27296b7879d5 powerpc/64s: Fix section mismatch warnings from setup_rfi_flush()
8b1f9a4e2136 powerpc/pseries: Restore default security feature flags on setup
adde5de432d6 powerpc: Move default security feature flags
b3be4dcbd1a2 powerpc/pseries: Fix clearing of security feature flags
d9594148817b powerpc/64s: Wire up cpu_show_spectre_v2()
fe126d25bad7 powerpc/64s: Wire up cpu_show_spectre_v1()
5097bf81e845 powerpc/pseries: Use the security flags in pseries_setup_rfi_flush()
10f8cd737a03 powerpc/powernv: Use the security flags in pnv_setup_rfi_flush()
495c34251785 powerpc/64s: Enhance the information in cpu_show_meltdown()
dde12e9b3e86 powerpc/64s: Move cpu_show_meltdown()
3b99b3b3fb97 powerpc/powernv: Set or clear security feature flags
2b206ee648f3 powerpc/pseries: Set or clear security feature flags
d34ea7873f82 powerpc: Add security feature flags for Spectre/Meltdown
8249ee94a9ca powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration
7777d9cb2c1c powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags
e5c8265abdbb powerpc/rfi-flush: Differentiate enabled and patched flush types
8b58add49fef powerpc/rfi-flush: Always enable fallback flush on pseries
22c697163e4d powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again
d04664376129 powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code
f93ae3415cf7 powerpc/powernv: Support firmware disable of RFI flush
e1759aacdd16 powerpc/pseries: Support firmware disable of RFI flush
d9052a2ede31 powerpc/64s: Improve RFI L1-D cache flush fallback
13dc9b34c873 powerpc/xmon: Add RFI flush related fields to paca dump
80c305aeeb09 USB: Consolidate LPM checks to avoid enabling LPM twice
9dad11965ed2 USB: Add new USB LPM helpers
fad515213059 sunrpc: don't mark uninitialised items as VALID.
498e9066b480 nfsd: Don't release the callback slot unless it was actually held
b8d15c06cf0c ceph: fix ci->i_head_snapc leak
811fb30278b4 ceph: ensure d_name stability in ceph_dentry_hash()
2f14dae91560 sched/numa: Fix a possible divide-by-zero
10dbe2292758 trace: Fix preempt_enable_no_resched() abuse
15c2ac78cb73 MIPS: scall64-o32: Fix indirect syscall number load
fd49607468ba cifs: do not attempt cifs operation on smb2+ rename error
4c78eadb3489 KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number
485d15db01ca kbuild: simplify ld-option implementation
cd1e9004ddd5 Merge "defconfig: msm8996: Enable PAN emulation"
a4b99d2c643c Merge "defconfig: msm8996: Disable DEVPORT"
b79e25fe5818 msm: camera : Lock Implementation for avoid race condition
ce469a70f3bc ANDROID: cuttlefish_defconfig: Disable DEVTMPFS
d5f7b0a5556b diag: Prevent out-of-bound access while processing dci transaction
cfef4f88308a diag: Prevent out-of-bound access while processing mask commands
c9fa4db90a83 pwm: pwm-qpnp: Fix the order of configuring PWM value
fe15f47306a1 ANDROID: Move from clang r349610 to r353983c.
8cb9bdaac97a Merge upstream-f2fs-stable-linux-4.4.y into android-4.4
592adc484920 drm/msm: ensure display driver probe completion
77c04577d922 Merge "msm: camera_v2: handle the error value returned during get clock"
5e144157195d icnss: Add check on msa region
6183ceb8d1e7 msm: camera_v2: handle the error value returned during get clock
779dfa61f7b1 msm: ipa_v2: Protect ipa default routing table
8b5d9f6f8eac ARM: dts: msm: add support for apq8096pro CDP
59dda5e0dcec ASoC: msm: Update codec name in HDMI dai link
0cba1d4c1422 f2fs: fix to avoid accessing xattr across the boundary
f32a4e2decb0 ARM: dts: msm: Enable HDMI audio support for 8996
c44c78fab1a2 ARM: dts: msm: Update avb flag and partition names for auto
ee588a7f2329 f2fs: fix to avoid potential race on sbi->unusable_block_count access/update
993543bcbad2 f2fs: add tracepoint for f2fs_filemap_fault()
b60ff4b3605c f2fs: introduce DATA_GENERIC_ENHANCE
43c33bc93b79 f2fs: fix to handle error in f2fs_disable_checkpoint()
9ca2000e9d76 f2fs: remove redundant check in f2fs_file_write_iter()
b6bb1574fce6 f2fs: fix to be aware of readonly device in write_checkpoint()
04139be9047a f2fs: fix to skip recovery on readonly device
25f68cbbdb86 f2fs: fix to consider multiple device for readonly check
a90ff12b2ff5 f2fs: relocate chksum_offset for large_nat_bitmap feature
ad199c5f600f f2fs: allow unfixed f2fs_checkpoint.checksum_offset
a3df88564441 f2fs: Replace spaces with tab
12a9d38a0b11 f2fs: insert space before the open parenthesis '('
e3057056de10 f2fs: allow address pointer number of dnode aligning to specified size
c351f529e220 f2fs: introduce f2fs_read_single_page() for cleanup
8ac217148510 f2fs: mark is_extension_exist() inline
2c8359eee2ad f2fs: fix to set FI_UPDATE_WRITE correctly
5f2085bab2e2 f2fs: fix to avoid panic in f2fs_inplace_write_data()
d6fe88aef4c1 f2fs: fix to do sanity check on valid block count of segment
1c3e295f67d0 f2fs: fix to do sanity check on valid node/block count
4ffbe8fee8a4 f2fs: fix to avoid panic in do_recover_data()
65f109d717d4 f2fs: fix to do sanity check on free nid
c60f9c6ced33 f2fs: fix to do checksum even if inode page is uptodate
9a080abdc30b f2fs: fix to avoid panic in f2fs_remove_inode_page()
c0bcbe425670 f2fs: fix to clear dirty inode in error path of f2fs_iget()
299dea1adf40 f2fs: remove new blank line of f2fs kernel message
9b4fc7359ca2 f2fs: fix wrong __is_meta_io() macro
02fb7afdd5f0 f2fs: fix to avoid panic in dec_valid_node_count()
5caebe607e13 f2fs: fix to avoid panic in dec_valid_block_count()
b5bc76046b10 f2fs: fix to use inline space only if inline_xattr is enable
9bc578bf83ee f2fs: fix to retrieve inline xattr space
0d7333632d79 f2fs: fix error path of recovery
b9973998d9df f2fs: fix to avoid deadloop in foreground GC
5047402dec0e f2fs: data: fix warning Using plain integer as NULL pointer
5bed19fbbba0 f2fs: add tracepoint for f2fs_file_write_iter()
7e37cc9d7161 f2fs: add comment for conditional compilation statement
00e77f15eb1d f2fs: fix potential recursive call when enabling data_flush
6b25d4ac2e7d f2fs: improve discard handling with multi-device volumes
c4c54093c71d f2fs: Reduce zoned block device memory usage
2c124ddd98a9 f2fs: Fix use of number of devices
8e638383c1bf msm: camera: jpegdma: Added missing lock for dqbuf and streamon
2bc83184b422 defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS
81bbb1b91ed2 defconfig: msm8996: Enable radio configs
0b570560f091 radio: add Silabs FM radio support for msm8996
152bacdd85c4 ANDROID: Communicates LMK events to userland where they can be logged
dc0d6bda9e08 defconfig: msm8996: Disable DEVPORT
70d7ff1aa709 defconfig: msm8996: Disable EXT2 and EXT3 FS configs
339eab8aede0 defconfig: msm8996: Enable PAN emulation
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
Change-Id: Iac613f6970faeadc98d9ed40aae0d96042502ce4
|
| | |\ \ \
| | | | |
| | | | |
| | | | | |
kernel.lnx.4.4.r37-rel
|
| | | |/ /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Since DSP is not supposed to modify the base pointer rpra of the
input/output arguments offloaded to DSP, maintain a local copy of
the pointer and use it after receiving interrupt from DSP.
Change-Id: I4afade7184cb2aca148060fb0cda06c6174f3b55
Acked-by: Maitreyi Gupta <maitreyi@qti.qualcomm.com>
Signed-off-by: Tharun Kumar Merugu <mtharu@codeaurora.org>
Signed-off-by: Mohammed Nayeem Ur Rahman <mohara@codeaurora.org>
|
| | |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Proper buffer length checks are missing in diagchar_write
handlers for userspace data while processing the same buffer.
Change-Id: I5b8095766e09c22f164398089505fe827fee8b54
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
While parsing non-hdlc packet buffer length passed to hdlc
recovery is not updated after parsing partial packet, Which
can lead to out-of-bound access. The patch passes the updated
buffer length for the same.
Change-Id: I5596f8c5a72680684c9c9056dccaf33e3c36832c
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| | |\ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Proper buffer length check is missing for dci userspace data
buffer before processing the dci transaction. The patch adds
proper check for the same.
Change-Id: I68c0e8c41d4e05493adecf8a1fcacea708dfafa2
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| | |\| | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Mask commands are being processed without proper check of buffer
length, which can lead to out of bound access. The patch adds
proper check for buffer length.
Change-Id: I6eb7ad01fb86f0cd0fb32390cfedd518428a64ba
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| |\| | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0
406cc39b36ea update markings as per reference
24fb5a925534 Merge changes Icd8b7e33,I275cb471,I7f7420c7,Ib8552e66 into kernel.lnx.4.4.r37-rel
0766f7d0f3a2 Merge "dsp: afe: check for minimum size before payload access" into kernel.lnx.4.4.r37-rel
a6207a7ffe45 msm: camera_v2: handle the error value returned during get clock.
342c54c1fff1 msm: ais: handle the error value returned during get clock
82b8bf6d259a msm: camera : Lock Implementation for avoid race condition.
98ca69a73a10 msm: ais : Lock Implementation for avoid race condition
0e3021b2b072 dsp: afe: check for minimum size before payload access
73b996d01780 Merge 22dc337a69af6c8b2aceecb3cbaef9049ef4fb73 on remote branch
22dc337a69af Merge "msm: mdss: mdp: mixer allocation for pluggable primary display"
830b7b50b385 Merge "msm: kgsl: Fix race condition while making page as dirty"
cd6e1cd22ba4 Merge "diag: Validate command length against size of command structure"
7939ca71f88f Merge "misc: ksbridge: Add support for sending uevent with pid/vid"
a4b2d7442de2 Merge "usb: misc: lvstest: allow specifying port for compliance mode"
0052d7171569 Merge "usb: misc: lvstest: add entry to place port in compliance mode"
64baae1cd96f Merge "usb: xhci: Support enabling of compliance mode for xhci 1.1"
5ee084c81212 Merge "drm/msm/sde: fix null pointer dereference"
40adef7ded1b Merge "Merge android-4.4.179 (aab9adb) into msm-4.4"
061ce1d939fa diag: Validate command length against size of command structure
2b163b082a57 misc: ksbridge: Add support for sending uevent with pid/vid
1d02b55727d5 msm: kgsl: Fix race condition while making page as dirty
adebb0daf71c drm/msm/sde: fix null pointer dereference
589a44d37aba Merge "icnss: Add a flag to indicate PDR"
d5f5ce057085 usb: misc: lvstest: allow specifying port for compliance mode
210c76dde3d4 usb: misc: lvstest: add entry to place port in compliance mode
b989396a449f usb: xhci: Support enabling of compliance mode for xhci 1.1
57cc803c86c0 Merge "defconfig: msm: Enable USB3 Link Layer test driver for 8996 Auto"
d65b615af64f Merge "ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target"
34c8ac8b2bda Merge "soc: qcom: secure_buffer: Process large SG tables in batches"
b08dd67c711f icnss: Add a flag to indicate PDR
32ebd2b51c3a ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target
680e896288b6 soc: qcom: secure_buffer: Process large SG tables in batches
43808cc02cbc Merge "msm: adm: validate ADSP payload size before access"
f4d62ca185dd cnss2: Expose idle restart/shutdown APIs
5a03c1bc9c2b Merge "ARM: dts: msm: move bluetooth node under /vendor for 8996 platform"
b5b335db32a1 drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode
52fbc05fb3f3 ARM: dts: msm: move bluetooth node under /vendor for 8996 platform
325632da862b Merge android-4.4.179 (aab9adb) into msm-4.4
78a2fca7feac Merge "drm/msm: ekms: Wait for a vblank in ekms disable"
1a886ff9a1ed Merge "diag: Check buffer size against command structure size"
9a7a4b510d9f diag: Check buffer size against command structure size
f175c863efb4 Merge "msm: ipa3: add check to load gsi fw once"
67fabb639087 msm: ipa3: add check to load gsi fw once
5b134f53b323 msm: adm: validate ADSP payload size before access
33ddfc515d05 Merge "msm: ipa: Move NAT invalid protocol define to uapi"
aab9adb4b81b Merge 4.4.179 into android-4.4
ecfba02e8979 Merge "cfg80211/nl80211: Offload OWE processing to user space in AP mode"
744acb857e4b Merge "dsp: afe: check for payload size before payload access"
f3cf97aa3cfd msm: ipa: Move NAT invalid protocol define to uapi
f12b2d3f77a5 cnss2: Expose PCIe DRV connection status
641f454cb5de dsp: afe: check for payload size before payload access
d9f2f007f3f0 Merge "diag: dci: Validate dci response length before parsing"
5875149a400a Linux 4.4.179
e6ca59daafd0 kernel/sysctl.c: fix out-of-bounds access when setting file-max
70a0882cd600 Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()"
abc81720ea87 ALSA: info: Fix racy addition/deletion of nodes
0e4d4e0d6ba9 mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n
4088997e5dc1 device_cgroup: fix RCU imbalance in error case
20fdfad30c43 sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
568f6b28743c Revert "kbuild: use -Oz instead of -Os when using clang"
9090d691a874 mac80211: do not call driver wake_tx_queue op during reconfig
e70a2d376c59 kprobes: Fix error check when reusing optimized probes
abb5b93fe0f5 kprobes: Mark ftrace mcount handler functions nokprobe
3dda8d29b56e x86/kprobes: Verify stack frame on kretprobe
bc76b595cd13 arm64: futex: Restore oldval initialization to work around buggy compilers
7977328f4265 crypto: x86/poly1305 - fix overflow during partial reduction
f94135f92d97 ALSA: core: Fix card races between register and disconnect
0241c6f9f56c staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
9f2bf97bb6c3 staging: comedi: ni_usb6501: Fix use of uninitialized mutex
1d149c6cfcd1 staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
32ae16ff1eaf staging: comedi: vmk80xx: Fix use of uninitialized semaphore
dc4f96499d43 io: accel: kxcjk1013: restore the range after resume.
07921e3cb1ea iio: adc: at91: disable adc channel interrupt in timeout case
c69e21be54b4 iio: ad_sigma_delta: select channel when reading register
e20204c43c0b iio/gyro/bmg160: Use millidegrees for temperature scale
eaa303a2d65d KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
83a98463d6f9 tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
5721b1717bd6 modpost: file2alias: check prototype of handler
5a25b6f93f84 modpost: file2alias: go back to simple devtable lookup
e9a60ab1609a crypto: crypto4xx - properly set IV after de- and encrypt
faac81f7cb34 ipv4: ensure rcu_read_lock() in ipv4_link_failure()
fbf569d2beee ipv4: recompile ip options in ipv4_link_failure
b6d37bba0f7a tcp: tcp_grow_window() needs to respect tcp_space()
b1aaee5a97c9 net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
dc20066a631c net: bridge: multicast: use rcu to access port list from br_multicast_start_querier
423ffcd5136c net: atm: Fix potential Spectre v1 vulnerabilities
d8e18cccd25e bonding: fix event handling for stacked bonds
9ca0f944a76b appletalk: Fix compile regression
54a07fff4b21 ovl: fix uid/gid when creating over whiteout
df57807765dd tpm/tpm_crb: Avoid unaligned reads in crb_recv()
c947b45f2e0c include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
aaedb76c488e lib/div64.c: off by one in shift
d49a75f5add4 appletalk: Fix use-after-free in atalk_proc_exit
4528b128bbbc ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
3d1167107004 iommu/dmar: Fix buffer overflow during PCI bus notification
cc8c23ad5ec8 crypto: sha512/arm - fix crash bug in Thumb2 build
8a2dd49a63c7 crypto: sha256/arm - fix crash bug in Thumb2 build
740562f32daa cifs: fallback to older infolevels on findfirst queryinfo retry
c49c3925a846 ACPI / SBS: Fix GPE storm on recent MacBookPro's
1e3975db46da ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms
3e56f3036b4d serial: uartps: console_setup() can't be placed to init section
045aac482ad9 f2fs: fix to do sanity check with current segment number
6891371a2d57 9p locks: add mount option for lock retry interval
ff831803330c 9p: do not trust pdu content for stat item size
ec759c0015fb rsi: improve kernel thread handling to fix kernel panic
48fda9500637 ext4: prohibit fstrim in norecovery mode
0f2d3133530a fix incorrect error code mapping for OBJECTID_NOT_FOUND
35ee305cfe4c x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
158c4cb0d686 iommu/vt-d: Check capability before disabling protected memory
1a883611e2f2 x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
c2dc2fdc0cd1 x86/hpet: Prevent potential NULL pointer dereference
b17b42fbad1b perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
98977a809cda perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test
8b89e3c3cf7f perf evsel: Free evsel->counts in perf_evsel__exit()
f0023871b339 perf top: Fix error handling in cmd_top()
63e03efad5ec tools/power turbostat: return the exit status of a command
3a3e67537041 thermal/int340x_thermal: fix mode setting
25c001949c93 thermal/int340x_thermal: Add additional UUIDs
149f72ff296e ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration
9bb0b8e34607 mmc: davinci: remove extraneous __init annotation
b33c00770b36 IB/mlx4: Fix race condition between catas error reset and aliasguid flows
0a2741cd5269 ALSA: sb8: add a check for request_region
574469ec6dcf ALSA: echoaudio: add a check for ioremap_nocache
0e9bb07a374a ext4: report real fs size after failed resize
d8ef8e9465ef ext4: add missing brelse() in add_new_gdb_meta_bg()
e92dc325a560 perf/core: Restore mmap record type correctly
653ee8df1f32 PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
34419534a70a xtensa: fix return_address
e15f3c34844e sched/fair: Do not re-read ->h_load_next during hierarchical load calculation
c082a57d41de xen: Prevent buffer overflow in privcmd ioctl
442ebc685261 arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
e9b63a38da24 ARM: dts: at91: Fix typo in ISC_D0 on PC9
39aecae01dd2 genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
f449309b7f43 block: do not leak memory in bio_copy_user_iov()
ad344fb86201 ASoC: fsl_esai: fix channel swap issue when stream starts
4e843163c6d9 include/linux/bitrev.h: fix constant bitrev
ae9981cee7b3 ALSA: seq: Fix OOB-reads from strlcpy
3efb978c3c73 ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
8ed95ff262aa net: ethtool: not call vzalloc for zero sized memory request
0ede14314f6d netns: provide pure entropy for net_hash_mix()
68337354043a tcp: Ensure DCTCP reacts to losses
03328716cb33 sctp: initialize _pad of sockaddr_in before copying to user memory
1edf53ecd2ae qmi_wwan: add Olicard 600
91d95c98c6c2 openvswitch: fix flow actions reallocation
c4e97b06cfdc net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock().
a04dde4e15d7 ipv6: sit: reset ip header pointer in ipip6_rcv
c0aeeafae944 ipv6: Fix dangling pointer when ipv6 fragment
c9b31a7e6726 tty: ldisc: add sysctl to prevent autoloading of ldiscs
c3e76f072adb tty: mark Siemens R3964 line discipline as BROKEN
780e236c3737 lib/string.c: implement a basic bcmp
7c45b45fd6e9 x86/vdso: Drop implicit common-page-size linker flag
79739ad2d0ac x86: vdso: Use $LD instead of $CC to link
b79e268b1fb4 x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
a34640de4046 kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
1eb40df35d99 binfmt_elf: switch to new creds when switching to new mm
7ad57b32aa08 drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
04ce0e76959c dmaengine: tegra: avoid overflow of byte tracking
589562152f36 x86/build: Mark per-CPU symbols as absolute explicitly for LLD
517fbf72718e wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
f2606873984e regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
98bbbf661567 media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration
421d2aae103c netfilter: physdev: relax br_netfilter dependency
10fc10c3270d dmaengine: imx-dma: fix warning comparison of distinct pointer types
e5cb8ab4b0e0 hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
cdc7a66f679e soc/tegra: fuse: Fix illegal free of IO base address
407f1a8b8d7d hwrng: virtio - Avoid repeated init of completion
a6adffa0fff4 media: mt9m111: set initial frame size other than 0x0
d1ba82ccffab tty: increase the default flip buffer limit to 2*640K
d9c190a5ee92 ARM: avoid Cortex-A9 livelock on tight dmb loops
c627e297b9b6 mt7601u: bump supported EEPROM version
5735cd4e0c78 soc: qcom: gsbi: Fix error handling in gsbi_probe()
b396b5e89be6 ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
46ff76bd4ea1 cdrom: Fix race condition in cdrom_sysctl_register
6b8382afa7af fbdev: fbmem: fix memory access if logo is bigger than the screen
267da08ea979 bcache: improve sysfs_strtoul_clamp()
97f00d95dfb0 bcache: fix input overflow to sequential_cutoff
d775179e00cd bcache: fix input overflow to cache set sysfs file io_error_halflife
b25147b49301 ALSA: PCM: check if ops are defined before suspending PCM
b67ef52116de ARM: 8833/1: Ensure that NEON code always compiles with Clang
7d4d46f51d6c kprobes: Prohibit probing on bsearch()
f1289edae514 leds: lp55xx: fix null deref on firmware load failure
abcbad869e68 media: mx2_emmaprp: Correct return type for mem2mem buffer helpers
0bc5f939031c media: s5p-g2d: Correct return type for mem2mem buffer helpers
9f127b7284eb media: s5p-jpeg: Correct return type for mem2mem buffer helpers
3967d2d6bcc9 media: sh_veu: Correct return type for mem2mem buffer helpers
853e3862a8d0 SoC: imx-sgtl5000: add missing put_device()
7a3626330297 perf test: Fix failure of 'evsel-tp-sched' test on s390
09a6db51dcb4 scsi: megaraid_sas: return error when create DMA pool failed
98f7f1cf74e4 IB/mlx4: Increase the timeout for CM cache
f8d1bf871805 e1000e: Fix -Wformat-truncation warnings
3bd631e5360e mmc: omap: fix the maximum timeout setting
1c2bfc4636de ARM: 8840/1: use a raw_spinlock_t in unwind
2f36d3ea8c55 coresight: etm4x: Add support to enable ETMv4.2
2ad89a6a0dba scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
f3666bfc4bc4 usb: chipidea: Grab the (legacy) USB PHY by phandle first
be8e9e9ebffb tools lib traceevent: Fix buffer overflow in arg_eval
2e5086f3ac6f fs: fix guard_bio_eod to check for real EOD errors
8f983d2cbfad cifs: Fix NULL pointer dereference of devname
4a430ac683b3 dm thin: add sanity checks to thin-pool and external snapshot creation
1605df0045d9 cifs: use correct format characters
1eaab115dc7c fs/file.c: initialize init_files.resize_wait
9b7e7899386f f2fs: do not use mutex lock in atomic context
6c96456d9302 ocfs2: fix a panic problem caused by o2cb_ctl
b1399497b701 mm/slab.c: kmemleak no scan alien caches
cb4d6cd27604 mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
2ea83494ce11 mm/page_ext.c: fix an imbalance with kmemleak
4970a8ba94ca mm/cma.c: cma_declare_contiguous: correct err handling
722a15d798ff enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
cf503f1b938f sysctl: handle overflow for file-max
28833fee9f4a gpio: gpio-omap: fix level interrupt idling
f7b7a59b47a0 tracing: kdb: Fix ftdump to not sleep
09f4e69e09f5 h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
f6e4bc5003ff CIFS: fix POSIX lock leak and invalid ptr deref
a6efba2fc33b tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
59ae59920af8 Bluetooth: Fix decrementing reference count twice in releasing socket
02bfc06ca2fa i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
b3b489eea284 mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
a526c14d841b tty/serial: atmel: Add is_half_duplex helper
6f88ce1ff225 lib/int_sqrt: optimize initial value compute
3f44dacd111a ext4: cleanup bh release code in ext4_ind_remove_space()
20df60004a3a arm64: debug: Ensure debug handlers check triggering exception level
a930f8ce2003 arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
c1cd71e6ee5e diag: dci: Validate dci response length before parsing
2f026ab7c4c7 Merge "msm: wlan: Update regulatory rules for JM"
cb95c3b72b79 msm: wlan: Update regulatory rules for JM
ef08a221c531 Merge "msm: wlan: Update regulatory database"
220e29e977aa msm: wlan: Update regulatory database
d7d16e7e87d2 Merge "defconfig: msm: Enable MFSE QMI client driver on automotive"
3cb076a33884 Merge "soc: qcom: Add QMI client driver for MFSE service"
c5319c46a1c1 Merge "ARM: dts: msm: Limit USB3 maximum speed to high for MSM8996 ADP"
1ba1a2f71fc1 defconfig: msm: Enable USB3 Link Layer test driver for 8996 Auto
748303a5169c Merge "dsp: q6core: validate payload size before memory copy"
9f6ce3043e2e Merge "msm: ext_disp: re-initialize hpd completion before signaling events"
d3a9050f4f7f msm: ext_disp: re-initialize hpd completion before signaling events
3d1854afebdb Merge "diag: Prevent out of bound access while getting build mask"
57a9ae0f5688 Merge "diag: Check command size against the minimum before parsing"
5c6e98d4e4da Merge "diag: dci: Add missing length check before parsing the buffer"
ef3ade93af0f diag: Prevent out of bound access while getting build mask
337a4a87989e diag: Check command size against the minimum before parsing
c2b12fecfa29 diag: dci: Add missing length check before parsing the buffer
0ef01d4c95a8 dsp: q6core: validate payload size before memory copy
38d4aa7f0277 msm: For camera driver Adding null checks to uninitialize
147ed3c774d9 Merge "Revert "cfg80211/nl80211: Offload OWE processing to user space""
523d657b6d08 drm/msm: ekms: Wait for a vblank in ekms disable
633bf5e4dbca cfg80211/nl80211: Offload OWE processing to user space in AP mode
8a44273ed583 Revert "cfg80211/nl80211: Offload OWE processing to user space"
f555a6f2d830 ARM: dts: msm: Limit USB3 maximum speed to high for MSM8996 ADP
d680847c5813 defconfig: msm: Enable MFSE QMI client driver on automotive
a419e9823ca9 soc: qcom: Add QMI client driver for MFSE service
74f9ab0d3ed3 Make arm64 serial port config compatible with crosvm
e85ceffc863d msm: mdss: mdp: mixer allocation for pluggable primary display
07797f0ce789 Fix merge issue with 4.4.178
abe4979abd87 Fix merge issue with 4.4.177
aa922bed25d4 ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS
Change-Id: I0eca09f00b012afd72006541b20fb23969c4531e
|
| | |\ \ \ |
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
While processing a packet containing command request, buffer size
need to be checked against size of the command structures that is
being parsed to prevent possible out of bound access.
CRs-Fixed: 2432633
Change-Id: I048bdbd0c096a6d03501bdd5b1d2d4bb50d45dd6
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | |\ \ \ \
| | | |_|/
| | |/| |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* refs/heads/tmp-aab9adb
Linux 4.4.179
kernel/sysctl.c: fix out-of-bounds access when setting file-max
Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()"
ALSA: info: Fix racy addition/deletion of nodes
mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n
device_cgroup: fix RCU imbalance in error case
sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
Revert "kbuild: use -Oz instead of -Os when using clang"
mac80211: do not call driver wake_tx_queue op during reconfig
kprobes: Fix error check when reusing optimized probes
kprobes: Mark ftrace mcount handler functions nokprobe
x86/kprobes: Verify stack frame on kretprobe
arm64: futex: Restore oldval initialization to work around buggy compilers
crypto: x86/poly1305 - fix overflow during partial reduction
ALSA: core: Fix card races between register and disconnect
staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
staging: comedi: ni_usb6501: Fix use of uninitialized mutex
staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
staging: comedi: vmk80xx: Fix use of uninitialized semaphore
io: accel: kxcjk1013: restore the range after resume.
iio: adc: at91: disable adc channel interrupt in timeout case
iio: ad_sigma_delta: select channel when reading register
iio/gyro/bmg160: Use millidegrees for temperature scale
KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
modpost: file2alias: check prototype of handler
modpost: file2alias: go back to simple devtable lookup
crypto: crypto4xx - properly set IV after de- and encrypt
ipv4: ensure rcu_read_lock() in ipv4_link_failure()
ipv4: recompile ip options in ipv4_link_failure
tcp: tcp_grow_window() needs to respect tcp_space()
net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
net: bridge: multicast: use rcu to access port list from br_multicast_start_querier
net: atm: Fix potential Spectre v1 vulnerabilities
bonding: fix event handling for stacked bonds
appletalk: Fix compile regression
ovl: fix uid/gid when creating over whiteout
tpm/tpm_crb: Avoid unaligned reads in crb_recv()
include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
lib/div64.c: off by one in shift
appletalk: Fix use-after-free in atalk_proc_exit
ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
iommu/dmar: Fix buffer overflow during PCI bus notification
crypto: sha512/arm - fix crash bug in Thumb2 build
crypto: sha256/arm - fix crash bug in Thumb2 build
cifs: fallback to older infolevels on findfirst queryinfo retry
ACPI / SBS: Fix GPE storm on recent MacBookPro's
ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms
serial: uartps: console_setup() can't be placed to init section
f2fs: fix to do sanity check with current segment number
9p locks: add mount option for lock retry interval
9p: do not trust pdu content for stat item size
rsi: improve kernel thread handling to fix kernel panic
ext4: prohibit fstrim in norecovery mode
fix incorrect error code mapping for OBJECTID_NOT_FOUND
x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
iommu/vt-d: Check capability before disabling protected memory
x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
x86/hpet: Prevent potential NULL pointer dereference
perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test
perf evsel: Free evsel->counts in perf_evsel__exit()
perf top: Fix error handling in cmd_top()
tools/power turbostat: return the exit status of a command
thermal/int340x_thermal: fix mode setting
thermal/int340x_thermal: Add additional UUIDs
ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration
mmc: davinci: remove extraneous __init annotation
IB/mlx4: Fix race condition between catas error reset and aliasguid flows
ALSA: sb8: add a check for request_region
ALSA: echoaudio: add a check for ioremap_nocache
ext4: report real fs size after failed resize
ext4: add missing brelse() in add_new_gdb_meta_bg()
perf/core: Restore mmap record type correctly
PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
xtensa: fix return_address
sched/fair: Do not re-read ->h_load_next during hierarchical load calculation
xen: Prevent buffer overflow in privcmd ioctl
arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
ARM: dts: at91: Fix typo in ISC_D0 on PC9
genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
block: do not leak memory in bio_copy_user_iov()
ASoC: fsl_esai: fix channel swap issue when stream starts
include/linux/bitrev.h: fix constant bitrev
ALSA: seq: Fix OOB-reads from strlcpy
ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
net: ethtool: not call vzalloc for zero sized memory request
netns: provide pure entropy for net_hash_mix()
tcp: Ensure DCTCP reacts to losses
sctp: initialize _pad of sockaddr_in before copying to user memory
qmi_wwan: add Olicard 600
openvswitch: fix flow actions reallocation
net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock().
ipv6: sit: reset ip header pointer in ipip6_rcv
ipv6: Fix dangling pointer when ipv6 fragment
tty: ldisc: add sysctl to prevent autoloading of ldiscs
tty: mark Siemens R3964 line discipline as BROKEN
lib/string.c: implement a basic bcmp
x86/vdso: Drop implicit common-page-size linker flag
x86: vdso: Use $LD instead of $CC to link
x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
binfmt_elf: switch to new creds when switching to new mm
drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
dmaengine: tegra: avoid overflow of byte tracking
x86/build: Mark per-CPU symbols as absolute explicitly for LLD
wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration
netfilter: physdev: relax br_netfilter dependency
dmaengine: imx-dma: fix warning comparison of distinct pointer types
hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
soc/tegra: fuse: Fix illegal free of IO base address
hwrng: virtio - Avoid repeated init of completion
media: mt9m111: set initial frame size other than 0x0
tty: increase the default flip buffer limit to 2*640K
ARM: avoid Cortex-A9 livelock on tight dmb loops
mt7601u: bump supported EEPROM version
soc: qcom: gsbi: Fix error handling in gsbi_probe()
ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
cdrom: Fix race condition in cdrom_sysctl_register
fbdev: fbmem: fix memory access if logo is bigger than the screen
bcache: improve sysfs_strtoul_clamp()
bcache: fix input overflow to sequential_cutoff
bcache: fix input overflow to cache set sysfs file io_error_halflife
ALSA: PCM: check if ops are defined before suspending PCM
ARM: 8833/1: Ensure that NEON code always compiles with Clang
kprobes: Prohibit probing on bsearch()
leds: lp55xx: fix null deref on firmware load failure
media: mx2_emmaprp: Correct return type for mem2mem buffer helpers
media: s5p-g2d: Correct return type for mem2mem buffer helpers
media: s5p-jpeg: Correct return type for mem2mem buffer helpers
media: sh_veu: Correct return type for mem2mem buffer helpers
SoC: imx-sgtl5000: add missing put_device()
perf test: Fix failure of 'evsel-tp-sched' test on s390
scsi: megaraid_sas: return error when create DMA pool failed
IB/mlx4: Increase the timeout for CM cache
e1000e: Fix -Wformat-truncation warnings
mmc: omap: fix the maximum timeout setting
ARM: 8840/1: use a raw_spinlock_t in unwind
coresight: etm4x: Add support to enable ETMv4.2
scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
usb: chipidea: Grab the (legacy) USB PHY by phandle first
tools lib traceevent: Fix buffer overflow in arg_eval
fs: fix guard_bio_eod to check for real EOD errors
cifs: Fix NULL pointer dereference of devname
dm thin: add sanity checks to thin-pool and external snapshot creation
cifs: use correct format characters
fs/file.c: initialize init_files.resize_wait
f2fs: do not use mutex lock in atomic context
ocfs2: fix a panic problem caused by o2cb_ctl
mm/slab.c: kmemleak no scan alien caches
mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
mm/page_ext.c: fix an imbalance with kmemleak
mm/cma.c: cma_declare_contiguous: correct err handling
enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
sysctl: handle overflow for file-max
gpio: gpio-omap: fix level interrupt idling
tracing: kdb: Fix ftdump to not sleep
h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
CIFS: fix POSIX lock leak and invalid ptr deref
tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
Bluetooth: Fix decrementing reference count twice in releasing socket
i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
tty/serial: atmel: Add is_half_duplex helper
lib/int_sqrt: optimize initial value compute
ext4: cleanup bh release code in ext4_ind_remove_space()
arm64: debug: Ensure debug handlers check triggering exception level
arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
Make arm64 serial port config compatible with crosvm
Fix merge issue with 4.4.178
Fix merge issue with 4.4.177
ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS
Change-Id: I0d6e7b00f0198867803d5fe305ce13e205cc7518
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
commit 442601e87a4769a8daba4976ec3afa5222ca211d upstream
Return -E2BIG when the transfer is incomplete. The upper layer does
not retry, so not doing that is incorrect behaviour.
Cc: stable@vger.kernel.org
Fixes: a2871c62e186 ("tpm: Add support for Atmel I2C TPMs")
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Jerry Snitselaar <jsnitsel@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
commit 3d7a850fdc1a2e4d2adbc95cc0fc962974725e88 upstream
The current approach to read first 6 bytes from the response and then tail
of the response, can cause the 2nd memcpy_fromio() to do an unaligned read
(e.g. read 32-bit word from address aligned to a 16-bits), depending on how
memcpy_fromio() is implemented. If this happens, the read will fail and the
memory controller will fill the read with 1's.
This was triggered by 170d13ca3a2f, which should be probably refined to
check and react to the address alignment. Before that commit, on x86
memcpy_fromio() turned out to be memcpy(). By a luck GCC has done the right
thing (from tpm_crb's perspective) for us so far, but we should not rely on
that. Thus, it makes sense to fix this also in tpm_crb, not least because
the fix can be then backported to stable kernels and make them more robust
when compiled in differing environments.
Cc: stable@vger.kernel.org
Cc: James Morris <jmorris@namei.org>
Cc: Tomas Winkler <tomas.winkler@intel.com>
Cc: Jerry Snitselaar <jsnitsel@redhat.com>
Fixes: 30fc8d138e91 ("tpm: TPM 2.0 CRB Interface")
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Reviewed-by: Jerry Snitselaar <jsnitsel@redhat.com>
Acked-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Sasha Levin (Microsoft) <sashal@kernel.org>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
commit c7084edc3f6d67750f50d4183134c4fb5712a5c8 upstream.
The n_r3964 line discipline driver was written in a different time, when
SMP machines were rare, and users were trusted to do the right thing.
Since then, the world has moved on but not this code, it has stayed
rooted in the past with its lovely hand-crafted list structures and
loads of "interesting" race conditions all over the place.
After attempting to clean up most of the issues, I just gave up and am
now marking the driver as BROKEN so that hopefully someone who has this
hardware will show up out of the woodwork (I know you are out there!)
and will help with debugging a raft of changes that I had laying around
for the code, but was too afraid to commit as odds are they would break
things.
Many thanks to Jann and Linus for pointing out the initial problems in
this codebase, as well as many reviews of my attempts to fix the issues.
It was a case of whack-a-mole, and as you can see, the mole won.
Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
[ Upstream commit 24d48a61f2666630da130cc2ec2e526eacf229e3 ]
Commit '3d035f580699 ("drivers/char/hpet.c: allow user controlled mmap for
user processes")' introduced a new kernel command line parameter hpet_mmap,
that is required to expose the memory map of the HPET registers to
user-space. Unfortunately the kernel command line parameter 'hpet_mmap' is
broken and never takes effect due to missing '=' character in the __setup()
code of hpet_mmap_enable.
Before this patch:
dmesg output with the kernel command line parameter hpet_mmap=1
[ 0.204152] HPET mmap disabled
dmesg output with the kernel command line parameter hpet_mmap=0
[ 0.204192] HPET mmap disabled
After this patch:
dmesg output with the kernel command line parameter hpet_mmap=1
[ 0.203945] HPET mmap enabled
dmesg output with the kernel command line parameter hpet_mmap=0
[ 0.204652] HPET mmap disabled
Fixes: 3d035f580699 ("drivers/char/hpet.c: allow user controlled mmap for user processes")
Signed-off-by: Buland Singh <bsingh@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
[ Upstream commit aef027db48da56b6f25d0e54c07c8401ada6ce21 ]
The virtio-rng driver uses a completion called have_data to wait for a
virtio read to be fulfilled by the hypervisor. The completion is reset
before placing a buffer on the virtio queue and completed by the virtio
callback once data has been written into the buffer.
Prior to this commit, the driver called init_completion on this
completion both during probe as well as when registering virtio buffers
as part of a hwrng read operation. The second of these init_completion
calls should instead be reinit_completion because the have_data
completion has already been inited by probe. As described in
Documentation/scheduler/completion.txt, "Calling init_completion() twice
on the same completion object is most likely a bug".
This bug was present in the initial implementation of virtio-rng in
f7f510ec1957 ("virtio: An entropy device, as suggested by hpa"). Back
then the have_data completion was a single static completion rather than
a member of one of potentially multiple virtrng_info structs as
implemented later by 08e53fbdb85c ("virtio-rng: support multiple
virtio-rng devices"). The original driver incorrectly used
init_completion rather than INIT_COMPLETION to reset have_data during
read.
Tested by running `head -c48 /dev/random | hexdump` within crosvm, the
Chrome OS virtual machine monitor, and confirming that the virtio-rng
driver successfully produces random bytes from the host.
Signed-off-by: David Tolnay <dtolnay@gmail.com>
Tested-by: David Tolnay <dtolnay@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
| | | |/ /
| |/| |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Validate the buffer size against the parsing command structure size
before parsing to prevent possible out of bound error case.
CRs-Fixed: 2437341
Change-Id: I31c9a556539fce403691294a76160ae4936e7065
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Prevent possible out of bound access due to missing length check
while extracting dci packet response by adding proper checks.
CRs-Fixed: 2434571
Change-Id: I7b6972bf6559bdca99333a75d989cd6d3431b801
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | |\ \ \ |
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add check for minimum length before typecasting to build mask
structure to prevent out of bound access.
CRs-Fixed: 2431005
Change-Id: I97b439ead62c8a67869c9209442ef771308f2d3f
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | |\ \ \ \ |
|
| | | |/ / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add check for minimum length before typecasting to build mask
structure to prevent out of bound access while processing
get msg mask command.
CRs-Fixed: 2431047
Change-Id: I5b8341f278b0b46359800e43c604c5671261c728
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | |/ / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Missing check against a structure is added to prevent possible
out of bound access while processing dci packet response.
CRs-Fixed: 2434612
Change-Id: I32c83dcc70bcf6465723be669d23e9f523e82755
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| |\| | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0
d4f47e6c2367 defconfig: msm8996: Enable radio configs
9f27be024a7f Merge "radio: add Silabs FM radio support for msm8996" into kernel.lnx.4.4.r37-rel
4fe98eb7bec2 defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS
0c7d031bda1b radio: add Silabs FM radio support for msm8996
1f558d13f0f2 Merge "ASoC: msm: Add support for AVS version check" into kernel.lnx.4.4.r37-rel
d104a604676a dsp: correct comparison condition for VSS_ICOMMON_RSP_GET_PARAM_V3
edef41f4dd6e ASoC: msm: Add support for AVS version check
837581d8c691 Merge "Revert "ASoC: msm: Add support for AVS version check."" into kernel.lnx.4.4.r37-rel
9e558fb9e3ee Merge "Revert "ASoC: msm: Add AVS version check for ADSP 2.7."" into kernel.lnx.4.4.r37-rel
9d3be6c18d3a Revert "ASoC: msm: Add support for AVS version check."
d5d09e79ec00 Revert "ASoC: msm: Add AVS version check for ADSP 2.7."
72d4da407550 Merge "defconfig: msm8996: Enable PAN emulation" into kernel.lnx.4.4.r37-rel
f6e50563bac0 defconfig: msm8996: Enable PAN emulation
e0743de00dbb ARM: dts: msm: move bluetooth node under /vendor for 8996 platform
433d0135344e Merge "drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode" into kernel.lnx.4.4.r37-rel
46150d3805a6 Merge changes I72e0c499,Iceb44b1f into kernel.lnx.4.4.r37-rel
6b9dcbcd8ed4 drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode
b819c88494b4 defconfig: msm8996: Disable DEVPORT
5dc9c9cdad31 defconfig: msm8996: Disable EXT2 and EXT3 FS configs
7020e575305b ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target
2d8f5e66d396 Merge e0f69caa36e88038fc27962308b0bb865759736d on remote branch
e0f69caa36e8 Merge changes into msm-4.4
d1f0a27facf5 Merge "msm: sps: Update debug message format specifier"
ff6c90ba7689 Merge "ASoC: msm: Check adsp state after SSR"
8589eec6817a Merge "lsm: check payload size validity before using it as array index"
3c74f04c2acd msm: sps: Update debug message format specifier
8229f3db343f ASoC: msm: Check adsp state after SSR
8b618604151d Merge "cnss2: Remove setting recovery state during driver unload"
30af8d44d51c Merge "cnss2: Add device version to SOC info structure"
9d116c810844 Merge "msm: kgsl: Add common Boot KPI marker"
27f1619b2f38 cnss2: Add device version to SOC info structure
110e25da9d04 Merge "drm/msm/sde: fix null pointer dereference"
e41fee9833ae lsm: check payload size validity before using it as array index
f3ec53af1d65 Merge "drm: msm: sde: remove hdr property setting error message"
e69141d2f854 Merge "drm: msm: sde: improve display interface timeout mechanism"
7ddcfc4bd2a3 Merge "drm/msm/sde: do not send stop splash signal from eDRM to LK"
00389026f8c9 cnss2: Remove setting recovery state during driver unload
a18089dad122 drm/msm: ensure msm_drm probe and eDRM Probe completion
15e17660ba55 Merge "icnss: return recovery success to wlan driver"
e3b50ff0b555 Merge "usb: xhci: Reduce command abort handshake timeout"
b6645f622203 Merge "usb: xhci: remove unnecessary second abort try"
f02dfcce2cb2 Merge "usb: XHCI: Implement xhci_handshake_check_state() API"
bb31c0f2ef11 icnss: return recovery success to wlan driver
dd7aeab5ed91 drm: msm: sde: improve display interface timeout mechanism
61436825c4de drm/msm/sde: do not send stop splash signal from eDRM to LK
c8fffde012b6 drm/msm/sde: fix null pointer dereference
e2a49d1ee492 msm: kgsl: Add common Boot KPI marker
55b4dd9721ab Merge "Merge android-4.4.178 (7af10f2) into msm-4.4"
6a75b0f79e6d Merge "diag: Update new msg, log and event logging codes"
e776f6472683 diag: Update new msg, log and event logging codes
04235478f297 cnss2: Support USB SSR and disconnect scenarios
9ec08ea59b83 cnss2: Export a platform API to force collect ramdump
6e658671eeac drm: msm: sde: remove hdr property setting error message
f5387f19b78d Merge "dsp: q6usm: Release spinlock before return if invalid payload size"
43751312d7a1 Merge android-4.4.178 (7af10f2) into msm-4.4
14c735f15182 msm: v4l2loopback: to resolve issues for kernel defconfigs
26e111f650c7 msm: v4l2loopback: to enable 4l2loopback in kernel defconfigs
ef1fab24b2da Merge "fbdev: msm: remove check for rgb source format"
4594ebbba3cc Merge "drm/msm: adjust HDMI DDC speed configuration"
e124f4878919 Merge "drm/msm/sde: add post_disable stage for phys encoder"
7af10f2966c2 Merge 4.4.178 into android-4.4
12ae58ca7ec4 Linux 4.4.178
b1b1efe07ea0 stm class: Hide STM-specific options if STM is disabled
c003b5675d34 coresight: removing bind/unbind options from sysfs
455b9a675ecf arm64: support keyctl() system call in 32-bit mode
d14ac4368f22 Revert "USB: core: only clean up what we allocated"
78d145f71db5 xhci: Fix port resume done detection for SS ports with LPM enabled
9aacea736c9a KVM: Reject device ioctls from processes other than the VM's creator
5ce6e5bd23f0 x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
0fe681f4ef50 perf intel-pt: Fix TSC slip
e250a5ac0e12 gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
6271fa6fc366 fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
98bc2f91e918 Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
6c1c9cfc2fdd USB: serial: option: add Olicard 600
09d3f1eb8499 USB: serial: option: set driver_info for SIM5218 and compatibles
6ef819f7158a USB: serial: mos7720: fix mos_parport refcount imbalance on error path
ef0d78184aff USB: serial: ftdi_sio: add additional NovaTech products
7139e4d5bf83 USB: serial: cp210x: add new device id
327ee45823eb serial: sh-sci: Fix setting SCSCR_TIE while transferring data
7124c71944ee serial: max310x: Fix to avoid potential NULL pointer dereference
2e7c2f25e902 staging: vt6655: Fix interrupt race condition on device start up.
17400647682a staging: vt6655: Remove vif check from vnt_interrupt
13f6808ec2bb tty: atmel_serial: fix a potential NULL pointer dereference
21da2b461fbd scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices
d8007fb2e816 scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
2f369124b97a scsi: sd: Fix a race between closing an sd device and sd I/O
49ad73985443 ALSA: pcm: Don't suspend stream in unrecoverable PCM state
c07db6f073ab ALSA: pcm: Fix possible OOB access in PCM oss plugins
f98242a8debb ALSA: seq: oss: Fix Spectre v1 vulnerability
619ae9f179de ALSA: rawmidi: Fix potential Spectre v1 vulnerability
e162927cd161 ALSA: compress: add support for 32bit calls in a 64bit kernel
ed2f3c82b0b4 ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
61bde5e5af49 btrfs: raid56: properly unmap parity page in finish_parity_scrub()
a23f00416aae btrfs: remove WARN_ON in log_dir_items
48b22ac58998 mac8390: Fix mmio access size probe
981cb03ec5a6 sctp: get sctphdr by offset in sctp_compute_cksum
c5874f35b86b vxlan: Don't call gro_cells_destroy() before device is unregistered
6c362ffe2a22 tcp: do not use ipv6 header for ipv4 flow
617ac1aa4dd4 packets: Always register packet sk in the same order
dd3351b81fac Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net)
2c2d8a1c8f12 net: rose: fix a possible stack overflow
b969da5f7e8d net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
3f1c0e4b7965 mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
2f242b299bcd dccp: do not use ipv6 header for ipv4 flow
46c8459158ae stmmac: copy unicast mac address to MAC registers
949c4ef45eee cfg80211: size various nl80211 messages correctly
695fc282c337 mmc: mmc: fix switch timeout issue caused by jiffies precision
c89eceddfaeb arm64: kconfig: drop CONFIG_RTC_LIB dependency
4a024ea936b6 video: fbdev: Set pixclock = 0 in goldfishfb
d200cc995188 cpu/hotplug: Handle unbalanced hotplug enable/disable
13e84cdbd790 usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG
0752035a776e usb: gadget: configfs: add mutex lock before unregister gadget
01855b6299eb ipv6: fix endianness error in icmpv6_err
b0351a51ffda stm class: Fix stm device initialization order
2040e80d8095 stm class: Do not leak the chrdev in error path
fbfaa26fa9e7 PM / Hibernate: Call flush_icache_range() on pages restored in-place
60e4a50d332b arm64: kernel: Include _AC definition in page.h
2ba2cca736d8 perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops
e5a19cf78a23 mac80211: fix "warning: ‘target_metric’ may be used uninitialized"
08d870c51ec5 arm64/kernel: fix incorrect EL0 check in inv_entry macro
823e262919f9 ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies
a99d340dc70b staging: goldfish: audio: fix compiliation on arm
9d4b4395067b staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT
efa2ec29dd4e staging: ashmem: Add missing include
4dcbf6fa3b47 staging: ashmem: Avoid deadlock with mmap/shrink
021c0d5cdfc0 asm-generic: Fix local variable shadow in __set_fixmap_offset
43ea28e71c2d coresight: etm4x: Check every parameter used by dma_xx_coherent.
58af2f0f6fdf coresight: "DEVICE_ATTR_RO" should defined as static.
c66866b13b3c stm class: Fix a race in unlinking
8c0bfd9d7cb3 stm class: Fix unbalanced module/device refcounting
f34bc5ad7a84 stm class: Guard output assignment against concurrency
bc9d781bed9d stm class: Fix unlocking braino in the error path
65b52bbc35a6 stm class: Support devices with multiple instances
ffb2f3f86b3a stm class: Prevent user-controllable allocations
30e94dc24edd stm class: Fix link list locking
a556f0babe56 stm class: Fix locking in unbinding policy path
03d7b4edf78a coresight: remove csdev's link from topology
a2828b944591 coresight: release reference taken by 'bus_find_device()'
3e2070abcc90 coresight: coresight_unregister() function cleanup
f485f972de3d coresight: fixing lockdep error
9bda5e6b1819 writeback: initialize inode members that track writeback history
cb8251f8d667 Revert "mmc: block: don't use parameter prefix if built as module"
ab3f1a5b9ce5 net: diag: support v4mapped sockets in inet_diag_find_one_icsk()
6f311381f318 perf: Synchronously free aux pages in case of allocation failure
b6496f00a29d arm64: hide __efistub_ aliases from kallsyms
2aeca9a27ba4 hid-sensor-hub.c: fix wrong do_div() usage
bdf3c006b9a2 vmstat: make vmstat_updater deferrable again and shut down on idle
119dbcde59da android: unconditionally remove callbacks in sync_fence_free()
7276c3fbd3b6 ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor
717da8c75b41 ARM: 8458/1: bL_switcher: add GIC dependency
1f2c3b46811d efi: stub: define DISABLE_BRANCH_PROFILING for all architectures
599dcbf7e8c6 arm64: fix COMPAT_SHMLBA definition for large pages
4afe1affaa6d mmc: block: Allow more than 8 partitions per card
e43196819cc3 sched/fair: Fix new task's load avg removed from source CPU in wake_up_new_task()
ade4560e4fea Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
d22036003893 Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
a1402232e193 ath10k: avoid possible string overflow
ee8f5d476dc9 rtc: Fix overflow when converting time64_t to rtc_time
0cd08672e0aa USB: core: only clean up what we allocated
466ab66b5c2f lib/int_sqrt: optimize small argument
7a47e3c3232d serial: sprd: clear timeout interrupt only rather than all interrupts
4104b44e5d92 usb: renesas_usbhs: gadget: fix unused-but-set-variable warning
e86206bd8758 arm64: traps: disable irq in die()
a3fbab100127 Hang/soft lockup in d_invalidate with simultaneous calls
4a97f086f192 serial: sprd: adjust TIMEOUT to a big value
7ed7c0386ef2 tcp/dccp: drop SYN packets if accept queue is full
a12cf3214235 usb: gadget: Add the gserial port checking in gs_start_tx()
36be44e1905d usb: gadget: composite: fix dereference after null check coverify warning
c0f71babf7bb kbuild: setlocalversion: print error to STDERR
1e647cf23fb2 extcon: usb-gpio: Don't miss event during suspend/resume
7f69a980f635 mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON
1394b1bdfd00 mmc: core: fix using wrong io voltage if mmc_select_hs200 fails
aa8b7ed21685 arm64: mm: Add trace_irqflags annotations to do_debug_exception()
df2ca3271569 usb: dwc3: gadget: Fix suspend/resume during device mode
f2427238c9ed mmc: core: shut up "voltage-ranges unspecified" pr_info()
6a0f5752f1fd mmc: sanitize 'bus width' in debug output
40c01c8301b8 mmc: make MAN_BKOPS_EN message a debug
282d5f0567be mmc: debugfs: Add a restriction to mmc debugfs clock setting
c8816bb0ed6d mmc: pwrseq_simple: Make reset-gpios optional to match doc
4d026d221b34 ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
2569eed24d93 ALSA: hda - Record the current power state before suspend/resume calls
4aada79c6793 locking/lockdep: Add debug_locks check in __lock_downgrade()
786207750b49 media: v4l2-ctrls.c/uvc: zero v4l2_event
a8dea33440f1 mmc: tmio_mmc_core: don't claim spurious interrupts
c37fd9822514 ext4: brelse all indirect buffer in ext4_ind_remove_space()
2ebfb9ae0047 ext4: fix data corruption caused by unaligned direct AIO
2b6575ed8c7e ext4: fix NULL pointer dereference while journal is aborted
2f59c12b47c1 futex: Ensure that futex address is aligned in handle_futex_death()
8df0d57e5c08 MIPS: Fix kernel crash for R6 in jump label branch function
5c06f2409550 mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
c30b41bbbb87 udf: Fix crash on IO error during truncate
8b12fd7c5f36 drm/vmwgfx: Don't double-free the mode stored in par->set_mode
e884f7d5c627 mmc: pxamci: fix enum type confusion
74a50c62c4ee Merge "msm: v4l2loopback: to create V4L2 loopback devices"
023eab95f93f Merge changes into msm-4.4
b6870ada9882 dsp: q6usm: Release spinlock before return if invalid payload size
6a214b82afd7 Merge "Merge android-4.4.177 (0c3b8c4) into msm-4.4"
b20fa86720f8 ANDROID: drop CONFIG_INPUT_KEYCHORD from cuttlefish and ranchu
6e016ebde638 Merge "Scsi: ufs: fix issue of task tag in used"
643dbe00f480 UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGED
1dca5a048f4f scripts: gcc-wrapper: Route the GCC errors to stderr
11306d8c058e Scsi: ufs: fix issue of task tag in used
1c25c9cc4ab7 Merge upstream-f2fs-stable-linux-4.4.y into android-4.4
2fe82d10f2fe Merge "msm: asm: validate ADSP data before access"
337623ba25ee Merge "soc: qcom: subsystem_notif_virt: Add waitqueue support for SSR"
3ad287e4ef9a msm: v4l2loopback: to create V4L2 loopback devices
af3c1903749c drm/msm/sde: add post_disable stage for phys encoder
daaf0eeb1ce4 Merge "usb: gadget: f_fs: Queue request after setting is_busy flag"
9e6526c9a143 UPSTREAM: net: socket: set sock->sk to NULL after calling proto_ops::release()
ab9f5d883785 soc: qcom: subsystem_notif_virt: Add waitqueue support for SSR
bff3c3db6b11 Merge "drivers: soc: qcom: Added check to avoid opening multiple instance"
a7aa04bc7002 Merge "msm: vidc: Disable DCVS in DTSI"
184af681d4c4 Merge "msm: vidc: Add common Boot KPI marker"
10ea8a72f6da Merge "drm/msm: read V' only for non-zero device count repeater"
1c738b6a5f82 usb: gadget: f_fs: Queue request after setting is_busy flag
108157a55130 msm: asm: validate ADSP data before access
1b1e63b1a766 drm/msm: adjust HDMI DDC speed configuration
38e93647f780 drm/msm: read V' only for non-zero device count repeater
83fc1fe4359f Merge "icnss: Add Api to Block/Unblock modem shutdown"
5ac9e067c5d6 msm: vidc: Disable DCVS in DTSI
5219134535d3 msm: vidc: Add common Boot KPI marker
90059640cc78 Merge "cnss2: Initialize plat_priv during bus_init"
6a53afbc7e9d Merge "icnss: Defer modem graceful shutdown until probe complete"
8846ee70c326 icnss: Add Api to Block/Unblock modem shutdown
1174076aa273 icnss: Defer modem graceful shutdown until probe complete
a7370a6289ea cnss2: Initialize plat_priv during bus_init
9ccdcef08733 cnss2: Add QCN7605 USB for cold boot cal via fs_ready
6543b0a4ad9a Merge "diag: Add protection while accessing usb_info's buffer table"
c739d9858bb9 diag: Add protection while accessing usb_info's buffer table
875833b037e1 diag: Free usb buffer's entry after removing from list
19342ee004a9 Merge android-4.4.177 (0c3b8c4) into msm-4.4
0c3b8c486664 Merge 4.4.177 into android-4.4
6b50202a4d53 Linux 4.4.177
5d8f03acc1a4 KVM: X86: Fix residual mmio emulation request to userspace
8c7543e3b8eb KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
2866808ffc0f KVM: nVMX: Sign extend displacements of VMX instr's mem operands
71e005f009ff drm/radeon/evergreen_cs: fix missing break in switch statement
e4de142d0a07 media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
25c4c4519352 rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
06a7cc29d18a PM / wakeup: Rework wakeup source timer cancellation
d18bcfe45510 nfsd: fix wrong check in write_v4_end_grace()
d2f777c50bfa nfsd: fix memory corruption caused by readdir
295aac3a5a37 NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
a853de72abbe NFS: Fix an I/O request leakage in nfs_do_recoalesce
128f60fe3bb0 md: Fix failed allocation of md_register_thread
4426d5f7be8f perf intel-pt: Fix overlap calculation for padding
5664e60dc0b1 perf auxtrace: Define auxtrace record alignment
ecd307da7771 perf intel-pt: Fix CYC timestamp calculation after OVF
58cc0b4098d3 NFS41: pop some layoutget errors to application
cbb0f82ebbc4 dm: fix to_sector() for 32bit
fd2ebccb5884 ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
7ea0c2f9788a powerpc/83xx: Also save/restore SPRG4-7 during suspend
d9fbe055bc95 powerpc/powernv: Make opal log only readable by root
aa3995f04e39 powerpc/wii: properly disable use of BATs when requested.
788b1a98f415 powerpc/32: Clear on-stack exception marker upon exception return
86ca0da1ddb0 jbd2: fix compile warning when using JBUFFER_TRACE
1fb35b7eda3d jbd2: clear dirty flag when revoking a buffer from an older transaction
98257572f7c7 serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup()
1a366cb3ae98 serial: 8250_pci: Fix number of ports for ACCES serial cards
7bc0cb4da25e perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks
fefcb294a459 i2c: tegra: fix maximum transfer size
ddc6521426c9 parport_pc: fix find_superio io compare code, should use equal test.
dba3801e8dc8 intel_th: Don't reference unassigned outputs
c8d2a21fdf51 kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
49b3c4a292b0 mm/vmalloc: fix size check for remap_vmalloc_range_partial()
f7572a4534b5 dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
96ad35532ccc clk: ingenic: Fix round_rate misbehaving with non-integer dividers
64847df5bff1 ext2: Fix underflow in ext2_max_size()
8b710dc8a5e2 ext4: fix crash during online resizing
0d97ba8b9a5f cpufreq: pxa2xx: remove incorrect __init annotation
b14854612972 cpufreq: tegra124: add missing of_node_put()
9bde9df79f24 crypto: pcbc - remove bogus memcpy()s with src == dest
efe908169f4f Btrfs: fix corruption reading shared and compressed extents after hole punching
eb4763b1bb4a btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
22058c290c94 m68k: Add -ffreestanding to CFLAGS
5c6e7bd3a627 scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
1cda5468c04a scsi: virtio_scsi: don't send sc payload with tmfs
62a86906494d s390/virtio: handle find on invalid queue gracefully
185ca832f7d7 clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
3e08ffef4286 clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
3f0edcec1da0 regulator: s2mpa01: Fix step values for some LDOs
f20f5fca3b45 regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
84d798497ea9 ACPI / device_sysfs: Avoid OF modalias creation for removed device
19c53c1f817e tracing: Do not free iter->trace in fail path of tracing_open_pipe()
b1faf3d2b5b4 CIFS: Fix read after write for files with read caching
a2ef87f9d268 crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
aa9c7ee2922a stm class: Prevent division by zero
5f4c9964d107 tmpfs: fix uninitialized return value in shmem_link
8bbb2ce3da91 net: set static variable an initial value in atl2_probe()
8e91a0b4d5f1 mac80211_hwsim: propagate genlmsg_reply return code
5115ca2ba428 phonet: fix building with clang
225bbd61b3ab ARC: uacces: remove lp_start, lp_end from clobber list
f8f413336b0c tmpfs: fix link accounting when a tmpfile is linked in
aa5740d660ac arm64: Relax GIC version check during early boot
c8380f42e82e ASoC: topology: free created components in tplg load error
764498fa2d2b net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
0b6f466dfc62 pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
3685be7cb47f net: systemport: Fix reception of BPDUs
75330ce98d95 scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
526efb1049bf assoc_array: Fix shortcut creation
823c717dbf5d ARM: 8824/1: fix a migrating irq bug when hotplug cpu
27bd1497181c Input: st-keyscan - fix potential zalloc NULL dereference
c18daf1bdae9 i2c: cadence: Fix the hold bit setting
65513463874c Input: matrix_keypad - use flush_delayed_work()
4e873fa21052 ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized
21442c73253b s390/dasd: fix using offset into zero size array error
e212aa684767 gpu: ipu-v3: Fix CSI offsets for imx53
8512f804fd88 gpu: ipu-v3: Fix i.MX51 CSI control registers offset
82351c83b1c5 crypto: ahash - fix another early termination in hash walk
ef3e805c9476 crypto: caam - fixed handling of sg list
5672988e09e1 stm class: Fix an endless loop in channel allocation
fdeefd2af1f3 ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
d96e50a53ba1 9p/net: fix memory leak in p9_client_create
f289ac1f6eb2 9p: use inode->i_lock to protect i_size_write() under 32-bit
7b5115689bf9 media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
b83f73aa7608 It's wrong to add len to sector_nr in raid10 reshape twice
9b37b964775e fs/9p: use fscache mutex rather than spinlock
f83a38bf2ccd ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56
e13ab6c19547 tcp/dccp: remove reqsk_put() from inet_child_forget()
dcf54e4f0717 gro_cells: make sure device is up in gro_cells_receive()
2d5f55d65a36 net/hsr: fix possible crash in add_timer()
b0e8ca9a1eb3 vxlan: Fix GRO cells race condition between receive and link delete
195e9aa9fe13 vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
cb604342bc85 ipvlan: disallow userns cap_net_admin to change global mode/flags
f412aeb9167d missing barriers in some of unix_sock ->addr and ->path accesses
b4986f23b4d8 net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
a1b4ace43842 mdio_bus: Fix use-after-free on device_register fails
c1b7d9363334 net/x25: fix a race in x25_bind()
2eace0d069ff net/mlx4_core: Fix qp mtt size calculation
0c21ccb8d70e net/mlx4_core: Fix reset flow when in command polling mode
191aa19ab8c1 tcp: handle inet_csk_reqsk_queue_add() failures
d31b540d63b1 route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
d15bfd4603dc ravb: Decrease TxFIFO depth of Q3 and Q2 to one
051612738631 pptp: dst_release sk_dst_cache in pptp_sock_destruct
e0b2bbd93ef0 net/x25: reset state in x25_connect()
70ed8a0a9ec3 net/x25: fix use-after-free in x25_device_event()
d84e9d3c97ee net: sit: fix UBSAN Undefined behaviour in check_6rd
453e3b319d28 net: hsr: fix memory leak in hsr_dev_finalize()
a795edbd6cd7 l2tp: fix infoleak in l2tp_ip6_recvmsg()
52f6c8da89b9 KEYS: restrict /proc/keys by credentials at open time
b71ec041cce3 netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options
a55ea87f70ae netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters
c92b434e70db netfilter: nfnetlink_log: just returns error for unknown command
9a07167f70a7 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
da517f513b86 udplite: call proper backlog handlers
ec117204466e ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420
a20168a13836 Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls"
a264be2b4108 ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
7570acb21061 futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
f7ff45b8c3f2 iscsi_ibft: Fix missing break in switch statement
91c44982f503 Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
4038a524616e Input: wacom_serial4 - add support for Wacom ArtPad II tablet
861e94995054 MIPS: Remove function size check in get_frame_info()
39ee160c4f82 perf symbols: Filter out hidden symbols from labels
74daf70b852a s390/qeth: fix use-after-free in error path
683c0116fbc1 dmaengine: dmatest: Abort test in case of mapping error
86785a16817c dmaengine: at_xdmac: Fix wrongfull report of a channel as in use
4560637bde5c irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable
e83b1928c838 ARM: pxa: ssp: unneeded to free devm_ allocated data
648fca89b734 autofs: fix error return in autofs_fill_super()
0d456fae1fb5 autofs: drop dentry reference only when it is never used
5d5a802ec2eb fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
fcd11325572d mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
3ba0452668ea mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
d4cf6d934f72 x86_64: increase stack size for KASAN_EXTRA
b8c82bd0cc5e x86/kexec: Don't setup EFI info if EFI runtime is not enabled
3cefd2a42568 cifs: fix computation for MAX_SMB2_HDR_SIZE
177a51b9adad platform/x86: Fix unmet dependency warning for SAMSUNG_Q10
930cc2bd8d5c scsi: libfc: free skb when receiving invalid flogi resp
e7e01b2acf94 nfs: Fix NULL pointer dereference of dev_name
35709d642488 gpio: vf610: Mask all GPIO interrupts
ec1f9572c841 net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup()
f398c84acf98 net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
a270c6f52f5a net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case
3afc8b846438 xtensa: SMP: limit number of possible CPUs by NR_CPUS
19960e19a7f9 xtensa: SMP: mark each possible CPU as present
ce73d179cf66 xtensa: smp_lx200_defconfig: fix vectors clash
56b84e420189 xtensa: SMP: fix secondary CPU initialization
f6efc18bbfc3 xtensa: SMP: fix ccount_timer_shutdown
9974f32f34d5 iommu/amd: Fix IOMMU page flush when detach device from a domain
81f097d689e5 ipvs: Fix signed integer overflow when setsockopt timeout
e5bff433d050 IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
aa7fb4026321 perf tools: Handle TOPOLOGY headers with no CPU
a4fa2a130412 vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
bba078c9fc3c media: uvcvideo: Fix 'type' check leading to overflow
c9b1f8506672 ip6mr: Do not call __IP6_INC_STATS() from preemptible context
aaf68ba03cf7 net: dsa: mv88e6xxx: Fix u64 statistics
dc18101f95fa netlabel: fix out-of-bounds memory accesses
aba029c8e7a8 hugetlbfs: fix races and page leaks during migration
5b98f0928666 MIPS: irq: Allocate accurate order pages for irq stack
0adb8a1d60b1 applicom: Fix potential Spectre v1 vulnerabilities
5d58d8969037 x86/CPU/AMD: Set the CPB bit unconditionally on F17h
3f7902c723cf net: phy: Micrel KSZ8061: link failure after cable connect
b98af83bc709 net: avoid use IPCB in cipso_v4_error
826987f6f98f net: Add __icmp_send helper.
51d27870ecf1 xen-netback: fix occasional leak of grant ref mappings under memory pressure
6e7339d5ee30 net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
7fb2b5380fee bnxt_en: Drop oversize TX packets to prevent errors.
7e7a271035c4 team: Free BPF filter when unregistering netdev
89ef111eb52f sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
d28a029290fd net-sysfs: Fix mem leak in netdev_register_kobject
fcee2927c057 staging: lustre: fix buffer overflow of string buffer
b48715dcf16b isdn: isdn_tty: fix build warning of strncpy
eeb234f7f907 ncpfs: fix build warning of strncpy
c776cff6de52 sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names
c8d66722d84b cpufreq: Use struct kobj_attribute instead of struct global_attr
25d05441f9e5 USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
a78f651889f4 USB: serial: cp210x: add ID for Ingenico 3070
83e29e445132 USB: serial: option: add Telit ME910 ECM composition
e90171edbef7 x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
40952b6a649b mm: enforce min addr even if capable() in expand_downwards()
7404c65cac2d mmc: spi: Fix card detection during probe
1a8ccbf263d6 powerpc: Always initialize input array when calling epapr_hypercall()
05de33f10001 KVM: arm/arm64: Fix MMIO emulation data handling
be96dcc315c7 arm/arm64: KVM: Feed initialized memory to MMIO accesses
37131ae9135c KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1
31f49f68d27e cfg80211: extend range deviation for DMG
39aabcb7dcf9 mac80211: don't initiate TDLS connection if station is not associated to AP
b83f68e0396c ibmveth: Do not process frames after calling napi_reschedule
14ae77e8a4f8 net: altera_tse: fix connect_local_phy error path
ff028bbb57aa scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
e9fdf60dafdc serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
f5c5093be741 mac80211: fix miscounting of ttl-dropped frames
e120f9d8596e ARC: fix __ffs return value to avoid build warnings
bf36c587df83 ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
df7a151d53b1 ASoC: dapm: change snprintf to scnprintf for possible overflow
8751b9509990 usb: gadget: Potential NULL dereference on allocation error
f84996563d7b usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
0a9ecf2b3012 thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
c56caf662ad1 ALSA: compress: prevent potential divide by zero bugs
2fa06f59d44e ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
59f6c707704a drm/msm: Unblock writer if reader closes file
bbb07fa8dfe3 scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
82774efd6d34 libceph: handle an empty authorize reply
0effb9fb3dfe Revert "bridge: do not add port to router list when receives query with source 0.0.0.0"
2c2433eba19a ARCv2: Enable unaligned access in early ASM code
6f0ec47b9a61 net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
9a24e9286b5b sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
bd49916ee0f7 team: avoid complex list operations in team_nl_cmd_options_set()
e41a4dc253df net/packet: fix 4gb buffer limit due to overflow check
b76ca18c8588 batman-adv: fix uninit-value in batadv_interface_tx()
00c3ec3af87a KEYS: always initialize keyring_index_key::desc_len
d76ef3c98024 KEYS: user: Align the payload buffer
2ef22c73c241 RDMA/srp: Rework SCSI device reset handling
1c3d88357065 isdn: avm: Fix string plus integer warning from Clang
65aac32fee80 leds: lp5523: fix a missing check of return value of lp55xx_read
4949b728976c atm: he: fix sign-extension overflow on large shift
fd8662fa5930 isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
2b285e446056 MIPS: jazz: fix 64bit build
61c0c195980b scsi: isci: initialize shost fully before calling scsi_add_host()
40ff741a7b49 scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
5647975ec2b6 MIPS: ath79: Enable OF serial ports in the default config
b8265637ec8a net: hns: Fix use after free identified by SLUB debug
d8189ee86c3a mfd: mc13xxx: Fix a missing check of a register-read failure
81456de2d4b3 mfd: wm5110: Add missing ASRC rate register
6a422b0676ed mfd: qcom_rpm: write fw_version to CTRL_REG
c02e9400dc2e mfd: ab8500-core: Return zero in get_register_interruptible()
40f1c388f263 mfd: db8500-prcmu: Fix some section annotations
2309acaeee2d mfd: twl-core: Fix section annotations on {,un}protect_pm_master
3e442a35c361 mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
1e73c0aeb3ee KEYS: allow reaching the keys quotas exactly
d3f2228a22ab numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
1ff6adf14549 ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
a71fc927e552 Revert "ANDROID: arm: process: Add display of memory around registers when displaying regs."
8940467d34f9 drivers: soc: qcom: Added check to avoid opening multiple instance
47fae5d1652c usb: xhci: Reduce command abort handshake timeout
7de60546d8f1 usb: xhci: remove unnecessary second abort try
b6a6377d0e09 usb: XHCI: Bailout command abort operation upon XHCI remove
70dc54f5deaa usb: XHCI: Implement xhci_handshake_check_state() API
331c1249b130 fbdev: msm: remove check for rgb source format
Change-Id: I78d7ebcce7a7fc0a6709c4fb602e88fa919ceec5
|
| | |\ \ \ |
|
| | | |\| |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* refs/heads/tmp-0c3b8c4
Linux 4.4.177
KVM: X86: Fix residual mmio emulation request to userspace
KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
KVM: nVMX: Sign extend displacements of VMX instr's mem operands
drm/radeon/evergreen_cs: fix missing break in switch statement
media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
PM / wakeup: Rework wakeup source timer cancellation
nfsd: fix wrong check in write_v4_end_grace()
nfsd: fix memory corruption caused by readdir
NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
NFS: Fix an I/O request leakage in nfs_do_recoalesce
md: Fix failed allocation of md_register_thread
perf intel-pt: Fix overlap calculation for padding
perf auxtrace: Define auxtrace record alignment
perf intel-pt: Fix CYC timestamp calculation after OVF
NFS41: pop some layoutget errors to application
dm: fix to_sector() for 32bit
ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
powerpc/83xx: Also save/restore SPRG4-7 during suspend
powerpc/powernv: Make opal log only readable by root
powerpc/wii: properly disable use of BATs when requested.
powerpc/32: Clear on-stack exception marker upon exception return
jbd2: fix compile warning when using JBUFFER_TRACE
jbd2: clear dirty flag when revoking a buffer from an older transaction
serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup()
serial: 8250_pci: Fix number of ports for ACCES serial cards
perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks
i2c: tegra: fix maximum transfer size
parport_pc: fix find_superio io compare code, should use equal test.
intel_th: Don't reference unassigned outputs
kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
mm/vmalloc: fix size check for remap_vmalloc_range_partial()
dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
clk: ingenic: Fix round_rate misbehaving with non-integer dividers
ext2: Fix underflow in ext2_max_size()
ext4: fix crash during online resizing
cpufreq: pxa2xx: remove incorrect __init annotation
cpufreq: tegra124: add missing of_node_put()
crypto: pcbc - remove bogus memcpy()s with src == dest
Btrfs: fix corruption reading shared and compressed extents after hole punching
btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
m68k: Add -ffreestanding to CFLAGS
scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
scsi: virtio_scsi: don't send sc payload with tmfs
s390/virtio: handle find on invalid queue gracefully
clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
regulator: s2mpa01: Fix step values for some LDOs
regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
ACPI / device_sysfs: Avoid OF modalias creation for removed device
tracing: Do not free iter->trace in fail path of tracing_open_pipe()
CIFS: Fix read after write for files with read caching
crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
stm class: Prevent division by zero
tmpfs: fix uninitialized return value in shmem_link
net: set static variable an initial value in atl2_probe()
mac80211_hwsim: propagate genlmsg_reply return code
phonet: fix building with clang
ARC: uacces: remove lp_start, lp_end from clobber list
tmpfs: fix link accounting when a tmpfile is linked in
arm64: Relax GIC version check during early boot
ASoC: topology: free created components in tplg load error
net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
net: systemport: Fix reception of BPDUs
scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
assoc_array: Fix shortcut creation
ARM: 8824/1: fix a migrating irq bug when hotplug cpu
Input: st-keyscan - fix potential zalloc NULL dereference
i2c: cadence: Fix the hold bit setting
Input: matrix_keypad - use flush_delayed_work()
ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized
s390/dasd: fix using offset into zero size array error
gpu: ipu-v3: Fix CSI offsets for imx53
gpu: ipu-v3: Fix i.MX51 CSI control registers offset
crypto: ahash - fix another early termination in hash walk
crypto: caam - fixed handling of sg list
stm class: Fix an endless loop in channel allocation
ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
9p/net: fix memory leak in p9_client_create
9p: use inode->i_lock to protect i_size_write() under 32-bit
media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
It's wrong to add len to sector_nr in raid10 reshape twice
fs/9p: use fscache mutex rather than spinlock
ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56
tcp/dccp: remove reqsk_put() from inet_child_forget()
gro_cells: make sure device is up in gro_cells_receive()
net/hsr: fix possible crash in add_timer()
vxlan: Fix GRO cells race condition between receive and link delete
vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
ipvlan: disallow userns cap_net_admin to change global mode/flags
missing barriers in some of unix_sock ->addr and ->path accesses
net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
mdio_bus: Fix use-after-free on device_register fails
net/x25: fix a race in x25_bind()
net/mlx4_core: Fix qp mtt size calculation
net/mlx4_core: Fix reset flow when in command polling mode
tcp: handle inet_csk_reqsk_queue_add() failures
route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
ravb: Decrease TxFIFO depth of Q3 and Q2 to one
pptp: dst_release sk_dst_cache in pptp_sock_destruct
net/x25: reset state in x25_connect()
net/x25: fix use-after-free in x25_device_event()
net: sit: fix UBSAN Undefined behaviour in check_6rd
net: hsr: fix memory leak in hsr_dev_finalize()
l2tp: fix infoleak in l2tp_ip6_recvmsg()
KEYS: restrict /proc/keys by credentials at open time
netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options
netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters
netfilter: nfnetlink_log: just returns error for unknown command
netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
udplite: call proper backlog handlers
ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420
Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls"
ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
iscsi_ibft: Fix missing break in switch statement
Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
Input: wacom_serial4 - add support for Wacom ArtPad II tablet
MIPS: Remove function size check in get_frame_info()
perf symbols: Filter out hidden symbols from labels
s390/qeth: fix use-after-free in error path
dmaengine: dmatest: Abort test in case of mapping error
dmaengine: at_xdmac: Fix wrongfull report of a channel as in use
irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable
ARM: pxa: ssp: unneeded to free devm_ allocated data
autofs: fix error return in autofs_fill_super()
autofs: drop dentry reference only when it is never used
fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
x86_64: increase stack size for KASAN_EXTRA
x86/kexec: Don't setup EFI info if EFI runtime is not enabled
cifs: fix computation for MAX_SMB2_HDR_SIZE
platform/x86: Fix unmet dependency warning for SAMSUNG_Q10
scsi: libfc: free skb when receiving invalid flogi resp
nfs: Fix NULL pointer dereference of dev_name
gpio: vf610: Mask all GPIO interrupts
net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup()
net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case
xtensa: SMP: limit number of possible CPUs by NR_CPUS
xtensa: SMP: mark each possible CPU as present
xtensa: smp_lx200_defconfig: fix vectors clash
xtensa: SMP: fix secondary CPU initialization
xtensa: SMP: fix ccount_timer_shutdown
iommu/amd: Fix IOMMU page flush when detach device from a domain
ipvs: Fix signed integer overflow when setsockopt timeout
IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
perf tools: Handle TOPOLOGY headers with no CPU
vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
media: uvcvideo: Fix 'type' check leading to overflow
ip6mr: Do not call __IP6_INC_STATS() from preemptible context
net: dsa: mv88e6xxx: Fix u64 statistics
netlabel: fix out-of-bounds memory accesses
hugetlbfs: fix races and page leaks during migration
MIPS: irq: Allocate accurate order pages for irq stack
applicom: Fix potential Spectre v1 vulnerabilities
x86/CPU/AMD: Set the CPB bit unconditionally on F17h
net: phy: Micrel KSZ8061: link failure after cable connect
net: avoid use IPCB in cipso_v4_error
net: Add __icmp_send helper.
xen-netback: fix occasional leak of grant ref mappings under memory pressure
net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
bnxt_en: Drop oversize TX packets to prevent errors.
team: Free BPF filter when unregistering netdev
sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
net-sysfs: Fix mem leak in netdev_register_kobject
staging: lustre: fix buffer overflow of string buffer
isdn: isdn_tty: fix build warning of strncpy
ncpfs: fix build warning of strncpy
sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names
cpufreq: Use struct kobj_attribute instead of struct global_attr
USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
USB: serial: cp210x: add ID for Ingenico 3070
USB: serial: option: add Telit ME910 ECM composition
x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
mm: enforce min addr even if capable() in expand_downwards()
mmc: spi: Fix card detection during probe
powerpc: Always initialize input array when calling epapr_hypercall()
KVM: arm/arm64: Fix MMIO emulation data handling
arm/arm64: KVM: Feed initialized memory to MMIO accesses
KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1
cfg80211: extend range deviation for DMG
mac80211: don't initiate TDLS connection if station is not associated to AP
ibmveth: Do not process frames after calling napi_reschedule
net: altera_tse: fix connect_local_phy error path
scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
mac80211: fix miscounting of ttl-dropped frames
ARC: fix __ffs return value to avoid build warnings
ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
ASoC: dapm: change snprintf to scnprintf for possible overflow
usb: gadget: Potential NULL dereference on allocation error
usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
ALSA: compress: prevent potential divide by zero bugs
ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
drm/msm: Unblock writer if reader closes file
scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
libceph: handle an empty authorize reply
Revert "bridge: do not add port to router list when receives query with source 0.0.0.0"
ARCv2: Enable unaligned access in early ASM code
net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
team: avoid complex list operations in team_nl_cmd_options_set()
net/packet: fix 4gb buffer limit due to overflow check
batman-adv: fix uninit-value in batadv_interface_tx()
KEYS: always initialize keyring_index_key::desc_len
KEYS: user: Align the payload buffer
RDMA/srp: Rework SCSI device reset handling
isdn: avm: Fix string plus integer warning from Clang
leds: lp5523: fix a missing check of return value of lp55xx_read
atm: he: fix sign-extension overflow on large shift
isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
MIPS: jazz: fix 64bit build
scsi: isci: initialize shost fully before calling scsi_add_host()
scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
MIPS: ath79: Enable OF serial ports in the default config
net: hns: Fix use after free identified by SLUB debug
mfd: mc13xxx: Fix a missing check of a register-read failure
mfd: wm5110: Add missing ASRC rate register
mfd: qcom_rpm: write fw_version to CTRL_REG
mfd: ab8500-core: Return zero in get_register_interruptible()
mfd: db8500-prcmu: Fix some section annotations
mfd: twl-core: Fix section annotations on {,un}protect_pm_master
mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
KEYS: allow reaching the keys quotas exactly
numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
Revert "ANDROID: arm: process: Add display of memory around registers when displaying regs."
ANDROID: mnt: Propagate remount correctly
ANDROID: cuttlefish_defconfig: Add support for AC97 audio
ANDROID: overlayfs: override_creds=off option bypass creator_cred
FROMGIT: binder: create node flag to request sender's security context
Conflicts:
arch/arm/kernel/irq.c
drivers/media/v4l2-core/videobuf2-v4l2.c
sound/core/compress_offload.c
Change-Id: I998f8d53b0c5b8a7102816034452b1779a3b69a3
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
commit d7ac3c6ef5d8ce14b6381d52eb7adafdd6c8bb3c upstream.
IndexCard is indirectly controlled by user-space, hence leading to
a potential exploitation of the Spectre variant 1 vulnerability.
This issue was detected with the help of Smatch:
drivers/char/applicom.c:418 ac_write() warn: potential spectre issue 'apbs' [r]
drivers/char/applicom.c:728 ac_ioctl() warn: potential spectre issue 'apbs' [r] (local cap)
Fix this by sanitizing IndexCard before using it to index apbs.
Notice that given that speculation windows are large, the policy is
to kill the speculation on the first load and not worry if it can be
completed with a dependent load/store [1].
[1] https://lore.kernel.org/lkml/20180423164740.GY17484@dhcp22.suse.cz/
Cc: stable@vger.kernel.org
Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
| | |\ \ \ \ |
|
| | | |/ / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently there a possibility of NULL pointer dereference while
accessing usb_info's buffer table due to missing proper protection.
The patch adds protection for the same.
Change-Id: I974a70a48e7ac47b42bc237aac4db1b9e47be6be
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| | |/ / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Currently, there is possibility of memory leak due to not
freeing allocated memory for usb buffer's entry after
removing it from list. The patch handle this by freeing
the entry.
Change-Id: Idb08ecad859749e6ab1b09184362de38de4a9836
Signed-off-by: Hardik Arya <harya@codeaurora.org>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
https://toolchains.bootlin.com
https://releases.linaro.org/components/toolchain/binaries/latest-7/aarch64-linux-gnu/
Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This matches the similar clause directly above it.
Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>
|
| |/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Currently we set CONFIG_CC_OPTIMIZE_FOR_SIZE which suppressed the compiler
warning of unused variables which can lead undefined behavior e.g. memory
corruption and panic. See https://lkml.org/lkml/2013/3/25/347.
This patch fixes all the uninitilized variables in kernel
Bug: 33353384
Test: On device
Signed-off-by: Wei Wang <wvw@google.com>
Change-Id: I0ae1082f447b435d71156d471878ba71aa16c378
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Prevent DCI clients' task structs from being deallocated to provide
diag driver a chance to clean up its dci client list. Also update
dci client list pid reference count properly to prevent any resource
leakage.
Change-Id: Ie15df7103ef1ec733e1e0d08a0a22b4da6b418b3
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| |/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Verify that user applications are not using the kernel RPC message
handle to restrict them from directly attaching to guest OS on the
remote subsystem.
Change-Id: Icfa114a12f2bebbe815eb9930027fded51f717fd
Acked-by: Thyagarajan Venkatanarayanan <venkatan@qti.qualcomm.com>
Signed-off-by: Tharun Kumar Merugu <mtharu@codeaurora.org>
Signed-off-by: Mohammed Nayeem Ur Rahman <mohara@codeaurora.org>
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Prevent DCI clients' task structs from being deallocated to provide
diag driver a chance to clean up its dci client list. Also update
dci client list pid reference count properly to prevent any resource
leakage.
Bug: 68726653
Change-Id: I31c61442a48ac263fd9ff341f6c29db8ace90952
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Validate the dci entries and its task structure before
accessing structure members to prevent copying dci data to
invalid entries.
Change-Id: I07c59ef0705bc52a8268b0dc984ebfa9d26d178e
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
|
