-
Notifications
You must be signed in to change notification settings - Fork 12
/
Copy pathlog.txt
2458 lines (1760 loc) · 87.2 KB
/
log.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
commit 683ace5c8472e087dc85bfb336ab83c48e10ead4
Merge: fc3de9a bce0767
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 26 06:14:04 2014 -0800
Merge "Merge ef500a89616f2d562538f0bf09d82f23a495fbd2 on remote branch"
commit bce0767f1ef286a59dc08f7f00923ff52d9c05a6
Merge: fc3de9a ef500a8
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 26 03:42:48 2014 -0700
Merge ef500a89616f2d562538f0bf09d82f23a495fbd2 on remote branch
Change-Id: I62875ee7757a6684d10753f9d36633161a59a4dc
commit ef500a89616f2d562538f0bf09d82f23a495fbd2
Merge: cfc402d 818a2da
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 24 15:10:02 2014 -0800
Merge "crypto: msm: ota: fix possible buffer overflow issue"
commit cfc402da3883c3c7d17f3b399c9e23e1451fd526
Merge: ac3bba4 8492b12
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 24 15:09:45 2014 -0800
Merge "misc: qfpfuse: Fix overflow condition"
commit 818a2da2078b806e4b4559aa4c95aaae9e7f2d3b
Author: Venkatesh Yadav Abbarapu <[email protected]>
Date: Mon Feb 17 17:45:32 2014 +0530
crypto: msm: ota: fix possible buffer overflow issue
This patch replaces snprintf with scnprintf to prevent
possible buffer overflow issues
CRs-Fixed: 562347
Change-Id: I56aebd24557dccc547ff86cb8853ace0602b6e50
Acked-by: Radhakrishna Popuri <[email protected]>
Signed-off-by: Venkatesh Yadav Abbarapu <[email protected]>
commit 8492b12220d230cce5ba9dec71d82c56dc62566e
Author: Venkatesh Yadav Abbarapu <[email protected]>
Date: Mon Feb 17 16:48:33 2014 +0530
misc: qfpfuse: Fix overflow condition
Fix potential integer overflow for ioctl command to avoid incorrect
buffer allocation. Use the stack for data buffering to avoid the
small buffer allocation for improved performance. Increase the fuse
blow timeout in the driver to cover all QFPROM implementations.
CRs-Fixed: 550574,550575
Change-Id: Iee3cc1d38aa5dbf8ef693a43a0ca716fc8724c62
Acked-by: Radhakrishna Popuri <[email protected]>
Signed-off-by: Venkatesh Yadav Abbarapu <[email protected]>
commit ac3bba4e95c6377a8f3ced42403243c13dd22821
Merge: e88c406 9afb4a6
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Sat Feb 22 02:18:15 2014 -0800
Merge "arm: mach-msm: fix integer overflow in DFE_IOCTL_COMMAND"
commit 9afb4a61c957c09529e6c6b63ff48ba9285d2e36
Author: Venkatesh Yadav Abbarapu <[email protected]>
Date: Mon Nov 11 18:02:27 2013 +0530
arm: mach-msm: fix integer overflow in DFE_IOCTL_COMMAND
Added error checks for upper limit of param.num in
DFE_IOCTL_COMMAND
Change-Id: I0143813d38ec7a5dfa7a8307b075daf7d4a4d101
Acked-by: John Nicholas <[email protected]>
Signed-off-by: Venkatesh Yadav Abbarapu <[email protected]>
commit e88c406bfdbc00861e9a11fa08166f1f26ac377a
Merge: f128f5c 6427e5c
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 20 23:55:14 2014 -0800
Merge "msm: msm_bus: Don't divide RPM BW requests"
commit f128f5cd262dbbcd37c3cb6b0a1dc75225d527cd
Merge: b4c91a7 87d24ee
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 20 10:19:19 2014 -0800
Merge "msm: camera: Cleanup msm generic buf queue handling"
commit b4c91a72b2908f1ef04da8fcf491eecfb267ea58
Merge: e53d943 15f0338
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 20 10:19:18 2014 -0800
Merge "msm: camera2: cpp: Release vb2 buffer in cpp driver on error"
commit e53d943e914a99120fa40fa7381c521592d3da69
Merge: 6d58e55 f8a5d49
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 20 00:14:22 2014 -0800
Merge "ARM: dts: msm: Change the capless mode for 8226 qrd"
commit 6427e5c4a16773792164bb3a8817e4c5f1d2b2b9
Author: Girish Mahadevan <[email protected]>
Date: Mon Feb 3 18:20:48 2014 -0700
msm: msm_bus: Don't divide RPM BW requests
When sending bandwidth requests to slave don't divide the request by
the number of ports as this is done at the RPM driver.
CRs-Fixed: 611965
Change-Id: Ie6870b66d1621677d94e4441136aed89bbdb6595
Signed-off-by: Girish Mahadevan <[email protected]>
commit fc3de9a1dad2cbc55fa23cd82148d8d7eb27185f
Merge: a3bb528 4be012f
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 19 06:03:31 2014 -0800
Merge "Merge 05f4115eec3dac2f8c7e9599fee1bd7833245083 on remote branch"
commit 4be012faa8e6e4d9b64750d487fe6441ccdf1a43
Merge: a3bb528 05f4115
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 19 04:44:57 2014 -0700
Merge 05f4115eec3dac2f8c7e9599fee1bd7833245083 on remote branch
Change-Id: I559e64146398c6183c3a237b26b401403db341dc
commit f8a5d49d7f6ecfe450f6ecb0e5e07d0ae97e4a62
Author: Kunlei Zhang <[email protected]>
Date: Tue Jan 21 10:41:04 2014 +0800
ARM: dts: msm: Change the capless mode for 8226 qrd
msm8226-qrd.dtsi is included by many 8226 or 8926 dts,
but not all the boards have the external cap for micbias1.
For example, 8926 qrd board doesn't have the cap.
So remove the external cap for micbias1 in this dtsi
and add it into the specific board dts who uses the cap.
CRs-fixed: 572412
Change-Id: I196657fabbab46ff6ff8d36b25554da50fab9f16
Signed-off-by: Kunlei Zhang <[email protected]>
commit 6d58e551b7510a804923b5370ca21aaf4b57dcbd
Merge: 05f4115 cce150a
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 18 16:14:54 2014 -0800
Merge "[media] media: Init the reserved fields of struct media_link_desc"
commit cce150abb169fb4672432be1978777d7d3215905
Author: Deva Ramasubramanian <[email protected]>
Date: Fri Jan 24 12:38:37 2014 -0800
[media] media: Init the reserved fields of struct media_link_desc
struct media_link_desc is copy_to_user'ed as the return value of
MEDIA_IOC_ENUM_LINKS. When copying, the driver is omitting to initialise
the reserved fields. This commit fixes that by initialising the
reserved fields to 0.
CRs-Fixed: 570757
Change-Id: I230e2666c0845cc36399518a0f2c94db664382d1
Signed-off-by: Deva Ramasubramanian <[email protected]>
commit 05f4115eec3dac2f8c7e9599fee1bd7833245083
Merge: 79334df beb3d0f
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 17 02:27:11 2014 -0800
Merge "mmc: block: check for NULL pointer before dereferencing"
commit beb3d0fb29b66ab711d67924087cd463a7dd6d40
Author: Asutosh Das <[email protected]>
Date: Fri Jan 24 11:36:07 2014 +0530
mmc: block: check for NULL pointer before dereferencing
mmc block data can be NULL. Hence, check for NULL before
dereferencing md.
CRs-Fixed: 562259
Change-Id: I0182c216ec73347cdd2ea464f593839fffd242a9
Signed-off-by: Asutosh Das <[email protected]>
commit 79334df209a55e19d3e2ffa2c1e31dc8023d9530
Merge: 00104ec 4a5198c
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 13 09:24:28 2014 -0800
Merge "msm: reap unused audio files"
commit a3bb52813d8fff1e6a1bf0645536647a6751b7dd
Merge: c9547da 6d2b396
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 12 07:09:58 2014 -0800
Merge "Merge commit '00104ecb0cd8d7a6cd9215cb2d61c9521442d605' into HEAD."
commit 6d2b396457521a9bb5a9c3000db876a3301ac538
Merge: c9547da 00104ec
Author: Abhishek Ranjan <[email protected]>
Date: Wed Feb 12 19:55:53 2014 +0530
Merge commit '00104ecb0cd8d7a6cd9215cb2d61c9521442d605' into HEAD.
Conflicts:
arch/arm/boot/dts/dsi-panel-ssd2080m-720p-video.dtsi
Change-Id: I0b2f9bbf97b3f488d8eb31264c57816ee6f6543e
Signed-off-by: Abhishek Ranjan <[email protected]>
commit 00104ecb0cd8d7a6cd9215cb2d61c9521442d605
Merge: f56b86f d5eea97
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 11 08:16:51 2014 -0800
Merge "radio: iris: Prevent loss of data"
commit f56b86f074dce7247153e7feafc8918a92ba184f
Merge: f8d0161 84d5181
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 11 06:09:04 2014 -0800
Merge "msm: ultrasound: add verifications of some input parameters"
commit f8d016183c797daa64bbea8216e9cbb2bb1abf87
Merge: ea0f093 e19d6599
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 11 00:43:26 2014 -0800
Merge "fbcmap: prevent memory overflow"
commit ea0f0935ad2c2996c7e7b11fa069d92834e9702a
Merge: 59765aa ce58ba2
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 11 00:43:24 2014 -0800
Merge "msm: camera: Fix various small issues in Actuator driver"
commit 59765aa79b52f6f37768b13bc89ce68084284605
Merge: 2e8eaef 508b034
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 10 21:48:04 2014 -0800
Merge "msm: vidc: Check input arguments correctly"
commit 2e8eaef16ee8ea6bfe7a60d9232dc26630185238
Merge: 3a4ee72 6d7cf19
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 10 21:48:01 2014 -0800
Merge "msm: usbaudio: Add check for NULL before dereferencing"
commit 84d51813b2365fbb14666fde0671709604660fc8
Author: Baruch Eruchimovitch <[email protected]>
Date: Mon Oct 14 15:49:41 2013 +0300
msm: ultrasound: add verifications of some input parameters
Some security vulnerabilities were found.
To fix them, additional verifications of some input parameters
are required.
CRs-Fixed: 554575, 554560, 555030
Change-Id: Ie87a433bcda89c3e462cfd511c168e8306056020
Signed-off-by: Baruch Eruchimovitch <[email protected]>
commit d5eea97f8dfff60f656885f9b8d3c172f39d6074
Author: Ayaz Ahmad <[email protected]>
Date: Wed Nov 6 16:38:20 2013 +0530
radio: iris: Prevent loss of data
Down casting a variable may lead to loss
of data, other various kind of subtle errors.
Change-Id: I4c9ce24393a0b6cb1b006cbb3801d6c9e360f70f
CRs-Fixed: 569313
Signed-off-by: Ayaz Ahmad <[email protected]>
commit 6d7cf19c4cac9df142cf6e335cf915117420f558
Author: Mayank Rana <[email protected]>
Date: Fri Oct 18 14:46:36 2013 +0530
msm: usbaudio: Add check for NULL before dereferencing
kzalloc() and usb_ifnum_to_if() both APIs can return NULL. Current
code is not checking return value and derefencing which may crash
device if it is set to NULL. Fix this by checking return value
against NULL and handling the same.
CRs-Fixed: 562273
Change-Id: Idfae0baf5fdedd658a8bb04e5ad95ff5fb4472d1
Signed-off-by: Mayank Rana <[email protected]>
Signed-off-by: Saket Saurabh <[email protected]>
commit e19d65997578fca596e17aacef7e56fc6bd66984
Author: Shalabh Jain <[email protected]>
Date: Tue Nov 12 15:10:44 2013 -0800
fbcmap: prevent memory overflow
Add bounds check before copying data to prevent
buffer overflow.
Change-Id: I47b9685b1ab13c4863fb6db62bbb9497a00b36da
Signed-off-by: Shalabh Jain <[email protected]>
commit 508b0346d4d75e6bf4686eae6bdaafbd8f0ae406
Author: Deva Ramasubramanian <[email protected]>
Date: Mon Nov 4 13:31:33 2013 -0800
msm: vidc: Check input arguments correctly
This commit fixes some minor bugs in which input arguments or malloc
return values were being insufficiently validated.
Change-Id: Ib0b3d2ded29384b49ec61a5fc275d3aca1fd6e14
Signed-off-by: Deva Ramasubramanian <[email protected]>
commit ce58ba2ab6b4ef346f7f273905395d4eb046669f
Author: Hariram Purushothaman <[email protected]>
Date: Wed Jul 24 10:42:21 2013 -0700
msm: camera: Fix various small issues in Actuator driver
Bound check and validate userspace parameters direction,
number of steps and direction sign. Also fix possible
memory leak in certain error cases.
CRs-Fixed: 511349
Change-Id: Icaa324468574494fb40f2de78e522090806744cb
Signed-off-by: Hariram Purushothaman <[email protected]>
commit 3a4ee7227e27f1a7d3fa8d43434811af3f6ee68d
Merge: 5c32d70 d963e05
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 10 04:27:36 2014 -0800
Merge "msm: qdsp6v2: memset stack buffer allocation."
commit 5c32d709b16ad8fd2defe3e3e9ea1da061dc1533
Merge: 9d30249 52738b5
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Mon Feb 10 02:00:49 2014 -0800
Merge "Fix a few incorrectly checked [io_]remap_pfn_range() calls"
commit 9d30249266b8766930d4811d22f7fbe141c3d86f
Merge: 7359145 51597c5
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Sun Feb 9 21:57:18 2014 -0800
Merge "uio: provide vm access to UIO_MEM_PHYS maps"
commit 52738b5bdac4df494ec30000ab2233f1a1ca4f96
Author: Linus Torvalds <[email protected]>
Date: Tue Jan 28 09:01:19 2014 +0530
Fix a few incorrectly checked [io_]remap_pfn_range() calls
Nico Golde reports a few straggling uses of [io_]remap_pfn_range() that
really should use the vm_iomap_memory() helper. This trivially converts
two of them to the helper, and comments about why the third one really
needs to continue to use remap_pfn_range(), and adds the missing size
check.
CRs-Fixed: 570735
Change-Id: I927a67ea80fea5ed706749ead9defb1e72633952
Reported-by: Nico Golde <[email protected]>
Signed-off-by: Linus Torvalds <[email protected].
Git-commit: 7314e613d5ff9f0934f7a0f74ed7973b903315d1
Git-repo: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
[[email protected]:resolve trivial merge conflicts]
Signed-off-by: Pratibhasagar V <[email protected]>
commit 7359145707aece1eb7eb776d81dbb78da0cdb2ce
Merge: 6fb6bda 112bfff
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Sun Feb 9 01:48:12 2014 -0800
Merge "diag: dci: Index DCI client table by client id"
commit 6fb6bdaa5570836dd8ba05aefb7aa732825d02c8
Merge: 0de304a b3a31320
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Sat Feb 8 09:18:12 2014 -0800
Merge "ASoC: msm: Add Buffer overflow check"
commit 51597c5ff3545a4f49db64702ddb13c5d05318a4
Author: Uwe Kleine-König <[email protected]>
Date: Wed Aug 7 13:02:53 2013 +0200
uio: provide vm access to UIO_MEM_PHYS maps
This makes it possible to let gdb access mappings of the process that is
being debugged.
uio_mmap_logical was moved and uio_vm_ops renamed to group related code
and differentiate to new stuff.
CRs-Fixed: 570735
Change-Id: I8a5ff343727cc58fedfeb73f3466cc9a7f153e84
Signed-off-by: Uwe Kleine-König <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Git-commit: 7294151d0592e0ff48c61fca9fd7c93d613134da
Git-repo: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Signed-off-by: Pratibhasagar V <[email protected]>
commit 0de304a750678b37f0495f03252f6c8752b6f4c0
Merge: 9740a36 ab8afab
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 05:35:10 2014 -0800
Merge "qseecom: Copy userspace buffer into kernel space before dereferencing"
commit 9740a36e0705c1c155409a57a967cb31a7ab9172
Merge: 01ccaa3 c8d2ddf
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 05:35:08 2014 -0800
Merge "qseecom: Add checks for user space buffer pointers"
commit 01ccaa3811793ab274d72d350c0db0caaab8562e
Merge: 1d0fc09 617a5ff
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 05:35:06 2014 -0800
Merge "qseecom: Remove debug messages"
commit 1d0fc09984d06b053bcaefdf0f2f7c1e166545c5
Merge: 51e43e5 47c8f77
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 05:35:05 2014 -0800
Merge "thermal: qpnp-adc-tm: Fix format specifier in snprintf"
commit 51e43e52eace98e9bf5f0854e69b8074478a8745
Merge: 2953502 4d84fa9
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 05:35:02 2014 -0800
Merge "msm: ADSPRPC: Add checks for erroneous values"
commit 29535029fc934c823ef9b3ad2c9037d2d053316b
Merge: f547d29 c15ffbe
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 05:35:00 2014 -0800
Merge "msm: audio: initialize the structure before sending to user space"
commit f547d294081197b738d3bd8ee2db1b9e52d5e9ed
Merge: c077b58 4821d6f
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 03:17:41 2014 -0800
Merge "msm: kgsl: Fix mem leak when page allocation fails"
commit c077b58d4802a25aeb24687b642c5604ff623542
Merge: 01c8677 7598d2e
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 03:17:40 2014 -0800
Merge "msm: camera: prevent invalid access through mmap"
commit 01c86771274b38ceb3aca5bca7bc89637b5989b8
Merge: 8251dd9 2d1126b
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 03:17:38 2014 -0800
Merge "msm: platform: qpnp-clkdiv: fix potential null pointer dereference"
commit b3a31320c332401ea60f1a7c9d1740cf464fe99c
Author: Mohammad Johny Shaik <[email protected]>
Date: Thu Jan 2 14:32:12 2014 +0530
ASoC: msm: Add Buffer overflow check
The overflow check is required to ensure that user space data
in kernel may not go beyond buffer boundary.
Change-Id: I7d94a209c0b8818bfb9c65f8c13a5f5e36c49e2d
CRs-Fixed: 563086
Signed-off-by: Mohammad Johny Shaik <[email protected]>
commit 8251dd9d1fd37e8e31a89761b10285f8b6adf507
Merge: 7136ff0 e1ff1b9
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 01:17:37 2014 -0800
Merge "tspp: Protect against buffer overflow"
commit 7136ff0072177ddf96ee01f35c526bbf96cf8e24
Merge: 0dbbb33 90461a8
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 01:17:34 2014 -0800
Merge "gpu: ion: Use list_for_each_safe on error path."
commit 0dbbb338c3bfb88102d6de3923688895ff32eb7b
Merge: eb8e944 e56f81a
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 01:17:32 2014 -0800
Merge "msm: mdss: Avoid variable overloading"
commit eb8e94413d146b62efbf27de1b3eac4804b0e8b0
Merge: 859bde8 9cdd2d1
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 01:17:30 2014 -0800
Merge "radio: tavarua: Added NULL checks for input arguments."
commit 859bde8b0401b7ad64f5c74542482f3760fefe32
Merge: 6bbade4 a62aced
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 01:17:29 2014 -0800
Merge "msm: mdss: hdmi: Security check for EDID 3D data parsing"
commit 6bbade4171a45285d867a88935ac2fd081ba34f5
Merge: a764a30 79722d3
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Fri Feb 7 01:17:27 2014 -0800
Merge "msm: kgsl: Protect against a potential overflow in kgsl_sg_alloc"
commit a764a3028cc08dc2f1ee86941daff1e86dbb89fc
Merge: 8d08652 183d2cf
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 6 22:58:08 2014 -0800
Merge "msm: qdsp6v2: Deleting kernel driver from arch/arm/mach-msm"
commit 8d08652e90d869e87e1b4778ef22d2305fc95aab
Merge: 8ce1c75 712d352
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 6 22:58:07 2014 -0800
Merge "msm: qdsp6v2: Deleting kernel driver from arch/arm/mach-msm/qdsp6v2"
commit 4821d6f72b9a4fa9e4b11c41303c510f1d9c8d2e
Author: Hareesh Gundu <[email protected]>
Date: Fri Jan 3 11:56:44 2014 +0530
msm: kgsl: Fix mem leak when page allocation fails
Page allocation may fail during OOM condition. Update
sglen and size to correct value (allocated) so that
they get freed in kgsl_sharedmem_free().
Change-Id: I1aa0ca77bb767523dfcf0f6cc3a21eac2b6b80e4
Signed-off-by: Hareesh Gundu <[email protected]>
commit ab8afab55dd8364fd7709fb979517ea0d4285884
Author: Hariprasad Dhalinarasimha <[email protected]>
Date: Fri Sep 27 18:38:53 2013 -0700
qseecom: Copy userspace buffer into kernel space before dereferencing
ION memory is used for user space to kernel space data passing.
This is directly accessible in kernel. But, if the IOCTL is called
from user space without using User space library, then data might
be pointing to some other memory location, in which case, it would
not be possible to dereference this location in kernel & hence it
would be accessing invalid memory.
Change-Id: Ic50c76ee8b2a696dbb786fce3a68cdc782e15268
Signed-off-by: Hariprasad Dhalinarasimha <[email protected]>
commit c8d2ddfb895448e8dd6ececdd99c6d7a04abf2ac
Author: Zhen Kong <[email protected]>
Date: Mon Nov 25 13:05:35 2013 -0800
qseecom: Add checks for user space buffer pointers
Validate pointers send from user space and pointers
embedded within the mesasge sent from user space.
Change-Id: I1be54924ef3d301908af6e8d4e6506f2aa7f6428
Signed-off-by: Mona Hossain <[email protected]>
Signed-off-by: Zhen Kong <[email protected]>
commit 2d1126b70cf88e15e641ebb4551d1ed957c392d5
Author: David Collins <[email protected]>
Date: Tue Dec 10 13:59:52 2013 -0800
msm: platform: qpnp-clkdiv: fix potential null pointer dereference
Add a return statement in the spmi resource null check in
qpnp_clkdiv_probe(). This is needed in order to avoid
dereferencing a null pointer in a subsequent statement.
Change-Id: Iaf5d5797016c96a136e93c8e5837f7f8f31d1e47
CRs-Fixed: 563655
Signed-off-by: David Collins <[email protected]>
commit e1ff1b99c5d7e60226c3026b0f90a9c7d67032fe
Author: Hamad Kadmany <[email protected]>
Date: Sun Nov 17 11:31:01 2013 +0200
tspp: Protect against buffer overflow
Change filter->priority to unsigned int. Since it was defined as integer,
it may have had negative value and cause accessing an array outside
of its region
CRs-Fixed: 561802, 561825
Change-Id: Ie72aa09b07e79b0b67081b74e3b2057de30f03d0
Signed-off-by: Hamad Kadmany <[email protected]>
commit 617a5ff53e48e2c6367e8268aa7e0f0edf7ba9d8
Author: Mona Hossain <[email protected]>
Date: Thu Oct 3 13:58:45 2013 -0700
qseecom: Remove debug messages
Remove unnecessary debug messages.
Change-Id: Ida80fbc1376f15753f8329c44550b14d8f4de163
Signed-off-by: Mona Hossain <[email protected]>
commit 47c8f777acfe53d0a07292fc5b6498b2ff24a5d7
Author: Dipen Parmar <[email protected]>
Date: Fri Oct 18 15:53:36 2013 +0530
thermal: qpnp-adc-tm: Fix format specifier in snprintf
Add format specifier in snprintf to avoid security
vulnerability issues.
Change-Id: I6ea67633348341267e0646912a6b428709410c78
Signed-off-by: Dipen Parmar <[email protected]>
commit 90461a807a176c0783a4f5ceb165b3f74a5608e6
Author: Laura Abbott <[email protected]>
Date: Thu Nov 14 07:24:29 2013 -0800
gpu: ion: Use list_for_each_safe on error path.
On an error, the list of pages is walked and destroyed. Since the list
is being destroyed, use list_for_each_safe to avoid list corruption.
Change-Id: Ia397a11d2d890b3458745820c79df2adaa088ade
CRs-Fixed: 565183
Signed-off-by: Laura Abbott <[email protected]>
commit 4d84fa9eda4cc7ea7b1e734451d3d559229ec301
Author: Mitchel Humpherys <[email protected]>
Date: Fri Oct 25 12:05:47 2013 -0700
msm: ADSPRPC: Add checks for erroneous values
Check for invalid parameters passed in user invocation
and validate the return values using appropriate macros.
Change-Id: If529873d025ac0c13725efbedda5a58fae327722
Acked-by: Sathish Ambley <[email protected]>
Signed-off-by: Mitchel Humpherys <[email protected]>
commit c15ffbe6052159f9296bef0ff8425f980e95f976
Author: Fred Oh <[email protected]>
Date: Mon Sep 30 11:47:33 2013 -0700
msm: audio: initialize the structure before sending to user space
If uninitialzied structure is passed from kernel to user space, it
may contain contain sensitive information that will be leaked.
Change-Id: I4926185703b84c38710dd7d1271d3684aab5361e
Signed-off-by: Fred Oh <[email protected]>
commit e56f81a6fe3039dfa46d55de79c54d619e619ead
Author: Shalabh Jain <[email protected]>
Date: Mon Nov 4 11:57:16 2013 -0800
msm: mdss: Avoid variable overloading
A particular variable is overloaded and used in 2 different
contexts. This causes overwriting of original value and leads
to incorrect error handling. This code adds a new variable to
avoid such condition.
Change-Id: Ibd040e6b4ce95759cc0011304940365c70e6c12a
Signed-off-by: Shalabh Jain <[email protected]>
commit 9cdd2d14911888f27b449de2154574160e33a24a
Author: Satish Kodishala <[email protected]>
Date: Mon Nov 25 13:02:10 2013 +0530
radio: tavarua: Added NULL checks for input arguments.
Added NULL checks for input arguments.
Change-Id: Ie39c2b3254c95925723735423c81b99da59ee6ad
CRs-fixed: 548405
Signed-off-by: Satish Kodishala <[email protected]>
commit a62aced9b161c88afb04ed60dce974146664e887
Author: Ajay Singh Parmar <[email protected]>
Date: Wed Oct 2 13:11:54 2013 -0700
msm: mdss: hdmi: Security check for EDID 3D data parsing
While parsing EDID (Extended display identification data) received
from TV for 3D data and other, proper buffer overflow check is done
to avoid data overflow or overwrite.
Also, replace snprintf with scnprintf for better memory copy results.
CRs-Fixed: 542823
Change-Id: I2603beea6eb88a92b013a1a45d960a4c3ba6c09b
Signed-off-by: Ajay Singh Parmar <[email protected]>
commit 79722d36030ba4bf46c17696f510ceb64db514de
Author: Jordan Crouse <[email protected]>
Date: Wed Oct 30 10:42:58 2013 -0600
msm: kgsl: Protect against a potential overflow in kgsl_sg_alloc
Avoid allocating a scatterlist so large that it overflows the size
passed to the memory allocators.
CRs-fixed: 564448
Change-Id: Ic0dedbad2ab421ddec8f3be38d61c9bdf9ae5bd4
Signed-off-by: Jordan Crouse <[email protected]>
commit 112bfffc2d6a475f5820c915f659755efe11eed2
Author: Katish Paran <[email protected]>
Date: Fri Jan 31 12:00:37 2014 +0530
diag: dci: Index DCI client table by client id
Diag driver maintains a table of all DCI clients. This table
is currently indexed by the PID of the clients. Make changes
to index the table base on an unique client id.
Change-Id: I57bfab9eae1381882b8eb6270d7ac212e0aaf271
CRs-fixed: 590721
Signed-off-by: Katish Paran <[email protected]>
commit 8ce1c7574a2bf06f61cbc800869bc4c9087ed8ba
Merge: 0ee6b5f 5cef975
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Thu Feb 6 03:13:35 2014 -0800
Merge "diag: Fix for diag debugfs buffer overflow"
commit 0ee6b5f12f5bbd10afd740bed8729085625cbcde
Merge: 7a22456 7cd9cc4
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 5 06:24:31 2014 -0800
Merge "msm: bam_dmux: Fix race condition during SSR"
commit 183d2cf34607f2a18e83f8cc4700e182e2489033
Author: Asish Bhattacharya <[email protected]>
Date: Wed Oct 30 19:04:00 2013 +0530
msm: qdsp6v2: Deleting kernel driver from arch/arm/mach-msm
Drivers are registering under misc driver but exists under arch/arm/mach
Change-Id: I6210ed2ffbc38608914fb765b8e50ac6d97950ff
CRs-Fixed: 554492
Signed-off-by: Asish Bhattacharya <[email protected]>
Signed-off-by: Mohammad Johny Shaik <[email protected]>
commit 7a224568570b81605894451ca5df74893dcc684a
Merge: 96e091c eebfb8e
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 5 04:21:20 2014 -0800
Merge "slim_ngd: Add NULL pointer check apart from error check"
commit 96e091c36f6c897533d4ee3219dc02681f1da4d0
Merge: ca2c033 4a06419
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Wed Feb 5 02:02:48 2014 -0800
Merge "qdsp5: memset stack buffer allocation."
commit 7cd9cc40f7d59b842b02576805a84cbac6e2f51f
Author: Arun Kumar Neelakantam <[email protected]>
Date: Fri Oct 11 14:34:02 2013 +0530
msm: bam_dmux: Fix race condition during SSR
BAM DMUX drivers set the global flags to identify the SSR during
SUBSYS_BEFORE_SHUTDOWN notification, but the flags change is not reflected
in some code paths like msm_bam_dmux_write().
Add the SSR flag check and SRCU locking to complete all pending bam dmux
writes before returning the control in SSR call back function for
SUBSYS_BEFORE_SHUTDOWN notification.
CRs-Fixed: 584805
Change-Id: I26647b485977943f272c44f7450ed6c4a4aa62f3
Signed-off-by: Arun Kumar Neelakantam <[email protected]>
commit 712d352f69a725012c1df24b3622abe7b369f131
Author: Asish Bhattacharya <[email protected]>
Date: Tue Nov 5 15:09:23 2013 -0800
msm: qdsp6v2: Deleting kernel driver from arch/arm/mach-msm/qdsp6v2
Driver is registering under misc driver but exists under arch/arm/mach
Change-Id: I0930d3f56767569edefa1af3c7d45a724a219ce3
CRs-Fixed: 548017
Signed-off-by: Mohammad Johny Shaik <[email protected]>
commit ca2c03398a1550a52107b5abdebcb89a9db2c0af
Merge: cefeb18 bbba3a2
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 07:11:05 2014 -0800
Merge "mm: fix calculation of dirtyable memory"
commit cefeb18f5feb8c67f3e02f556efef1d1c9b57eaf
Merge: 137ff18 7a7c23a
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 07:10:57 2014 -0800
Merge "ondemand: add sysfs entry for down_diff_multi_core"
commit 137ff18907d9c1a21326797684b11e1b01fe5de8
Merge: 0187324 8c34654
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:03:06 2014 -0800
Merge "msm: ipa: Fix the format string vulnerability."
commit 01873247be93e39099d612886e09ea53193d9613
Merge: 62f83f3 f85410e
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:03:05 2014 -0800
Merge "msm: ipa: add null check and initialize the variable"
commit 62f83f3213df95880a7008aa191bc823dcfa5275
Merge: 1f63b8e a93007c
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:59 2014 -0800
Merge "msm: buspm: Correct size type in buspm_xfer_req"
commit 1f63b8e6919de16cef3235422af59627f9c664d4
Merge: 1823805 38cb0ca
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:57 2014 -0800
Merge "mdss: Fix null point dereference in mdss_mdp_pp_init"
commit 1823805898b8b69cd2db3d410a8ad07c0c6325d0
Merge: 62a5861 5381d00
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:55 2014 -0800
Merge "msm: mdss: Sanitize read of panel properties"
commit 62a586113c22997014545c63ebd3df7c6a3fdda7
Merge: 9c73c92 a98b5a8
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:53 2014 -0800
Merge "msm: mdss: Prevent NULL pointer access"
commit 9c73c922968d1e388b232f66b41b6a4cfd8c5753
Merge: b4919d9 479e0ae
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:52 2014 -0800
Merge "ASoC: msm: DTS parameter validation"
commit b4919d9402372c2474757e47f93a8100845335b5
Merge: f561111 ef6c716
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:50 2014 -0800
Merge "msm: camera_v2: cci: check for NULL pointer"
commit f561111426fcda3b873fd8f8c34dfbb53e167030
Merge: 43fb3d42 8b87d4c
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:44 2014 -0800
Merge "radio: iris: Avoid NULL pointer dereferencing"
commit 43fb3d4272be27cd8868c85ace543c08a015ce53
Merge: 1be5c01 bae7b90
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:42 2014 -0800
Merge "radio: iris: Avoid inconsistent free"
commit 1be5c01334960c3d669c9d74ae1bbb96d125773b
Merge: d6bd151 74af8be
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:40 2014 -0800
Merge "radio: iris: Avoid memory leak and NULL pointer dereferencing"
commit d6bd151d62d0ad7fc1964e52a05687c447767202
Merge: 838c0d6 97dfbd2
Author: Linux Build Service Account <lnxbuild@localhost>
Date: Tue Feb 4 05:02:38 2014 -0800
Merge "ASoc: msm: qdsp6v2: Fix for NULL check"
commit bbba3a28163f4c7ad6c6876b8618f5740295ad8e
Author: Sonny Rao <[email protected]>
Date: Thu Dec 20 15:05:07 2012 -0800
mm: fix calculation of dirtyable memory
The system uses global_dirtyable_memory() to calculate number of
dirtyable pages/pages that can be allocated to the page cache. A bug
causes an underflow thus making the page count look like a big unsigned
number. This in turn confuses the dirty writeback throttling to
aggressively write back pages as they become dirty (usually 1 page at a
time). This generally only affects systems with highmem because the
underflowed count gets subtracted from the global count of dirtyable
memory.
The problem was introduced with v3.2-4896-gab8fabd
Fix is to ensure we don't get an underflowed total of either highmem or
global dirtyable memory.
Change-Id: Ib0c4a8f99870edc5ded863b88a472f2836c690d2
Signed-off-by: Sonny Rao <[email protected]>
Signed-off-by: Puneet Kumar <[email protected]>
Acked-by: Johannes Weiner <[email protected]>
Tested-by: Damien Wyart <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Git-commit: c8b74c2f6604923de91f8aa6539f8bb934736754
Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Signed-off-by: Laura Abbott <[email protected]>
commit 7a7c23a3a845612315f93c2c782663ebd801d871
Author: Krishna Vanka <[email protected]>
Date: Wed Dec 11 14:56:15 2013 +0530
ondemand: add sysfs entry for down_diff_multi_core
This change adds sysfs entry for the ondemand governor's attribute
down_differential_multi_core. This is required to be able to program
this knob to attain better perf/power for use cases like camcorder.
CRs-fixed: 561456
Change-Id: Ib7c1223215c6b714c286c231ed37f3abfae741c6
Signed-off-by: Krishna Vanka <[email protected]>
commit 5cef9752135347eacb62c57c04a88a9cb13c14ab
Author: Sreelakshmi Gownipalli <[email protected]>
Date: Tue Jan 14 16:54:46 2014 -0800
diag: Fix for diag debugfs buffer overflow
Diag debugfs buffer has potential buffer overflow scenario which can cause
memory corruption. Added safeguard to prevent this.
Crs-fixed: 585147
Change-Id: Ie1f099bb4bb626adff99ae225966aef70c1bc15e
Signed-off-by: Sreelakshmi Gownipalli <[email protected]>
commit d963e05c1e16194d819fbbde0d62ff8e9fe328bc
Author: Mohammad Johny Shaik <[email protected]>
Date: Wed Dec 4 15:56:41 2013 +0530
msm: qdsp6v2: memset stack buffer allocation.
This is needed to avoid garbage data in uninitialized variables.
Change-Id: Id5921e369055d846b990380be6355ad464518a10
CRs-Fixed: 554301
Signed-off-by: Yeleswarapu, Nagaradhesh <[email protected]>
commit 97dfbd25892aff510925fad93aa4bcd4cf810d84
Author: Mingming Yin <[email protected]>