{"push_id":2210285554,"size":309,"distinct_size":280,"ref":"refs/heads/lineage-15.0","head":"379157f02d85c6d28b41e1ae9c2606479dfd1bec","before":"5e5420032bd0f7bc9dccf26273d5345d44e357fd","commits":[{"sha":"946a13875c461e89b86d3c5591a0f8cef42c8b99","author":{"name":"Ashish Kumar Dhanotiya","email":"7d699db8eba266aab8757e9baa4e23ab2cb09870@codeaurora.org"},"message":"qcacld-2.0: Fix regression in wlan_hdd_add_hostapd_conf_vsie api\n\nCurrently In wlan_hdd_add_hostapd_conf_vsie api after checking the\nlength of element, return is being done because of which it is skipping\nthe remaining elements.\n\nTo fix this issue, don't return after invalid length, instead process\nthe remaining elements.\n\nChange-Id: I1b370bc30a4400aa4fd5fce5783741272c64386a\nCRs-Fixed: 2078352","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/946a13875c461e89b86d3c5591a0f8cef42c8b99"},{"sha":"1f2f8086a48035d9e1560b585c7898d2fce76c36","author":{"name":"Ashish Kumar Dhanotiya","email":"7d699db8eba266aab8757e9baa4e23ab2cb09870@codeaurora.org"},"message":"qcacld-2.0: Add an attribute to represent PNO/EPNO Request ID\n\nThis request ID was wrongly referred from the REQUEST_ID in\nenum qca_wlan_vendor_attr_gscan_config_params which is mapped to\nQCA_WLAN_VENDOR_ATTR_PNO_PASSPOINT_LIST_PARAM_NUM in PNO Config.\nHence define a different attribute to represent the request ID\nfor the PNO Config.\n\nCRs-Fixed: 2066628\nChange-Id: I2b5efe78605d07d92db564a987ea0ae4ff0a2cc8","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/1f2f8086a48035d9e1560b585c7898d2fce76c36"},{"sha":"29753051eafc2701f104390367aa2f97cda49bf1","author":{"name":"Vignesh Viswanathan","email":"ac8078762fb0b1f12af9e4ebde85ff297f515827@codeaurora.org"},"message":"qcacld-2.0: Add sanity check to avoid len overflow issue in WMI event data\n\nIn WMI/WMA, data from event buffer from FW is used without\nsanity checks for upper limit in multiple places. This might\nlead to a potential integer overflow further leading to buffer\ncorruption\n\nAdd upper bound checks for max limit of event buffer (1536)\nin all affected places to prevent the potential integer\noverflow\n\nChange-Id: I30826bb69939bcf02ac850bd2d22ada4795b3c98\nCRs-Fixed: 2098519","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/29753051eafc2701f104390367aa2f97cda49bf1"},{"sha":"899156faddb08db1191dc19b35c04d4660ed2845","author":{"name":"Mohammed Javid","email":"8ac1ea830510c533b5e712c0a9734492c55fa2d3@codeaurora.org"},"message":"msm: ipa: Add mutext protection when updating notify req cache\n\nIOCTL interface to send QMI NOTIFY REQ messages can be called\nfrom multiple contexts which can result into buffer overflow of\nmsg cache. Make a change to add mutext protection to prevent\nbuffer overflow.\n\nChange-Id: I22c37f2b61051494123c5c9599c56560ac7e3418\nAcked-by: Pooja Kumari <kumarip@qti.qualcomm.com>\nSigned-off-by: Mohammed Javid <mjavid@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/899156faddb08db1191dc19b35c04d4660ed2845"},{"sha":"8f43b385aef160e920869945f99f0f880df7e5a2","author":{"name":"Ghanim Fodi","email":"53432ca6c36875fe62c204f44969e75fcbf314f6@codeaurora.org"},"message":"msm: ipa: Protect access to ipa3_qmi_ctx variable by lock\n\nipa3_qmi_ctx is a global variable that may be accessed by\ndifferent worker threads. Protect the access to it\nusing mutex lock so that the access will be always atomic.\n\nChange-Id: Iaf0c95d66817833c8e8123b12e94a7a01ab8df2c\nCRs-fixed: 2056414\nSigned-off-by: Ghanim Fodi <gfodi@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/8f43b385aef160e920869945f99f0f880df7e5a2"},{"sha":"a78bc5092ae027f549cef6ca2cb1786450dec85e","author":{"name":"Rajeev Kumar Sirasanagandla","email":"032ebf83d6b2dd744c10ac9e3d38cdd12cc8f4f1@codeaurora.org"},"message":"qcacld-2.0: Fix invalid buffer access in send mgmt tx\n\nIn __wlan_hdd_mgmt_tx, there is potential buffer over-read in access of\npublic action frame type due to array index out of bounds.\n\nTo address this, check for payload length before\nWLAN_HDD_PUBLIC_ACTION_FRAME_TYPE_OFFSET access.\n\nChange-Id: I9e3b4ef0878d934f3425d91bb6ea4a37b1892a3d\nCRs-Fixed: 2088768","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/a78bc5092ae027f549cef6ca2cb1786450dec85e"},{"sha":"c9312eb3063bde5b1adc88f214527a903749415e","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"qcacld-2.0: Fix invalid buffer access in send mgmt tx\"","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/c9312eb3063bde5b1adc88f214527a903749415e"},{"sha":"713df556bcc6ad075e3873e91092ebb9efe92ed5","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"qcacld-2.0: Fix regression in wlan_hdd_add_hostapd_conf_vsie api\"","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/713df556bcc6ad075e3873e91092ebb9efe92ed5"},{"sha":"2815bb5c7b12ce430f328bd4c5151643fa43917b","author":{"name":"Chris Lew","email":"92526cc55a75cd70ca3d87ac485ab5e1b38c8b7c@codeaurora.org"},"message":"soc: qcom: smp2p: spinlock_test: Initialize work item\n\nInitialize the has_locked member before running SSR\nspinlock test to ensure consistent results.\n\nCRs-Fixed: 2091946\nChange-Id: Ifad37541a94668b496aa9204dc80920b9a7ff244\nSigned-off-by: Chris Lew <clew@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/2815bb5c7b12ce430f328bd4c5151643fa43917b"},{"sha":"d9ef3e2fdc9ff41dddf5df02d023158c4ba7531c","author":{"name":"Jin Qian","email":"0a9aa3d3574a19f4323dcc26c6c102ebcca97ce1@google.com"},"message":"f2fs: sanity check segment count\n\nF2FS uses 4 bytes to represent block address. As a result, supported\nsize of disk is 16 TB and it equals to 16 * 1024 * 1024 / 2 segments.\n\nSigned-off-by: Jin Qian <jinqian@google.com>\nSigned-off-by: Jaegeuk Kim <jaegeuk@kernel.org>\nGit-repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git\nGit-commit: b9dd46188edc2f0d1f37328637860bb65a771124\n[srkupp@codeaurora.org: Resolved minor conflict]\nSigned-off-by: Srinivasa Rao Kuppala <srkupp@codeaurora.org>\nChange-Id: Id1a67927262451762a4d423fa50b370ec3cdb56c","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/d9ef3e2fdc9ff41dddf5df02d023158c4ba7531c"},{"sha":"b71778c610ac16c3ede2b261e996882c69fab46f","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Promotion of wlan-cld2.driver.lnx.1.0.c2-00062.\n\nCRs      Change ID                                   Subject\n--------------------------------------------------------------------------------------------------------------\n2088768   I9e3b4ef0878d934f3425d91bb6ea4a37b1892a3d   qcacld-2.0: Fix invalid buffer access in send mgmt tx\n2098519   I30826bb69939bcf02ac850bd2d22ada4795b3c98   qcacld-2.0: Add sanity check to avoid len overflow issue\n2078352   I1b370bc30a4400aa4fd5fce5783741272c64386a   qcacld-2.0: Fix regression in wlan_hdd_add_hostapd_conf_\n2066628   I2b5efe78605d07d92db564a987ea0ae4ff0a2cc8   qcacld-2.0: Add an attribute to represent PNO/EPNO Reque\n\nChange-Id: I74818a020b7d4345bb3c8a11cac82d7363c665a5\nCRs-Fixed: 2078352, 2066628, 2088768, 2098519","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/b71778c610ac16c3ede2b261e996882c69fab46f"},{"sha":"a6afff2717791ceb281354833d4489123ae62605","author":{"name":"Sridhar Selvaraj","email":"9ee4d8c2fef21b5ef7d54e3d52a213c4fd8ed081@codeaurora.org"},"message":"qcacld-2.0: Fix incorrect processing of encrypted auth frame\n\nqcacld-3.0 to qcacld-2.0 propagation.\n\nFix incorrect processing of encrypted auth frame by allocating\nappropriate local buffer and using correct type for frame length.\n\nChange-Id: I87d6f4c3c43dd332d5b1877ddf4b3b46a717468b\nCRs-Fixed: 2082544","distinct":true,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/a6afff2717791ceb281354833d4489123ae62605"},{"sha":"40749949f07fd22a62ee3246fe8b10ae8df9148c","author":{"name":"Sunil Khatri","email":"c2fa09c6a63ee27656efbed7bd5e770f84d009d0@codeaurora.org"},"message":"msm: kgsl: Use vma_area_struct with proper locks\n\nMake sure to use proper locks when using the\nvma_struct_area. This will avoid the race condition\nin a scenario where one thread gets a vma_struct_area\nand other thread is unmapping the vma from the process.\n\nChange-Id: I6c7837d1a8dd24fc6955ab5be8b1917a42f2cb53\nSigned-off-by: Sunil Khatri <sunilkh@codeaurora.org>\nSigned-off-by: Archana Sriram <apsrir@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/40749949f07fd22a62ee3246fe8b10ae8df9148c"},{"sha":"b43b4a8f6a848bec7f431cc1aef4e278ccac4e27","author":{"name":"Vignesh Viswanathan","email":"ac8078762fb0b1f12af9e4ebde85ff297f515827@codeaurora.org"},"message":"qcacld-2.0: Fix out-of-bounds access in limProcessActionFrameNoSession\n\nCurrently in the function limProcessActionFrameNoSession, mem_cmp\nis done on the received frame pointer without validating the frame_len\nwhich could lead to out-of-bounds memory access if the frame_len is\nnot matching the size of action_hdr.\n\nAdd check to validate the frame_len with action_hdr size before doing\nmem_cmp for the p2p oui.\n\nChange-Id: I39329d1a9ef45614d3c617db11a7a7f5ec2aaaec\nCRs-Fixed: 2109967","distinct":true,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/b43b4a8f6a848bec7f431cc1aef4e278ccac4e27"},{"sha":"99d765028e9d003aa7e67d132929247d26ba73fd","author":{"name":"Michael Bestas","email":"a34205b8ff9665156084c1c4c0b7eda522376dd6@lineageos.org"},"message":"Fix \"BACKPORT: ARM: wire up getrandom syscall\"\n\n* Syscalls need to be greater than __NR_last_syscall+1 in order to\n  account for the padding in the syscall table\n\nChange-Id: Ide15e25e8a2287fff29c75d898c935318b660ea2","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/99d765028e9d003aa7e67d132929247d26ba73fd"},{"sha":"3710665c6f7cd45dccc9737c8b92cd4e2f5deb1d","author":{"name":"Adrian Salido","email":"6d635a0a76d943c7a6d2808755e208535d850b07@google.com"},"message":"dm ioctl: prevent stack leak in dm ioctl call\n\ncommit 4617f564c06117c7d1b611be49521a4430042287 upstream.\n\nWhen calling a dm ioctl that doesn't process any data\n(IOCTL_FLAGS_NO_PARAMS), the contents of the data field in struct\ndm_ioctl are left initialized.  Current code is incorrectly extending\nthe size of data copied back to user, causing the contents of kernel\nstack to be leaked to user.  Fix by only copying contents before data\nand allow the functions processing the ioctl to override.\n\nCRs-Fixed: 2094612\nChange-Id: Id643af806105d898c53afae4e7760709c7f0896c\nSigned-off-by: Adrian Salido <salidoa@google.com>\nReviewed-by: Alasdair G Kergon <agk@redhat.com>\nSigned-off-by: Mike Snitzer <snitzer@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nGit-commit: 4617f564c06117c7d1b611be49521a4430042287\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nSigned-off-by: Shadab Naseem <snaseem@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/3710665c6f7cd45dccc9737c8b92cd4e2f5deb1d"},{"sha":"cf354684d99bff151a43aed31d8581fbc38a1aa2","author":{"name":"Udaya Bhaskara Reddy Mallavarapu","email":"029eca4ea84717723a826146a37cdfba69c9c3d8@codeaurora.org"},"message":"drivers: media: broadcast: Fix security vulnerability issue\n\nInformation leak issue is reported in mpq_sdmx_log_level_write\nfunction. Added check to validate count is not zero and initialize\nthe string.\n\nChange-Id: Ieb2ed88c2d7d778c56be2ec3b9875270a9c74dce\nSigned-off-by: Udaya Bhaskara Reddy Mallavarapu <udaym@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/cf354684d99bff151a43aed31d8581fbc38a1aa2"},{"sha":"be8c1b96e845612a0a6e8f36aa40eb8a4cd05e18","author":{"name":"Brahmaji K","email":"a46c808b4ebb2e07b21ac407e20a7b17e22e3539@codeaurora.org"},"message":"qseecom: Fix accessing userspace memory in kernel space\n\nUse put_user API to write the data from kernel space to\nuserspace to avoid accessing userspace memory directly\nin kernel space.\n\nChange-Id: I649fe2597e80ccad50cf16b355e220734810e94c\nSigned-off-by: Brahmaji K <bkomma@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/be8c1b96e845612a0a6e8f36aa40eb8a4cd05e18"},{"sha":"b265bbf2515e5fb9b8b7e4d286a48063b26f6f78","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"drivers: media: broadcast: Fix security vulnerability issue\"","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/b265bbf2515e5fb9b8b7e4d286a48063b26f6f78"},{"sha":"c76e6708e5db9283e7ec14c9225f5e9ebeb9f09a","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"qseecom: Fix accessing userspace memory in kernel space\"","distinct":false,"url":"https://api.github.com/repos/WouldChar/android_kernel_nubia_msm8994/commits/c76e6708e5db9283e7ec14c9225f5e9ebeb9f09a"}]}
{"actor":{"display_login":"WouldChar"}}