{"push_id":1958323276,"size":12,"distinct_size":12,"ref":"refs/heads/kernel.lnx.3.18.r28-rel","head":"9b9087d05f49506f62d4810f1e4f47f827de167d","before":"6dc59c6bcd44cba31b3aa684050295473f5de600","commits":[{"sha":"6528f2e59d9724ffe13b39a2e8b25c639c3d1fca","author":{"name":"Brahmaji K","email":"a46c808b4ebb2e07b21ac407e20a7b17e22e3539@codeaurora.org"},"message":"qseecom: Fix accessing userspace memory in kernel space\n\nUse put_user API to write the data from kernel space to\nuserspace to avoid accessing userspace memory directly\nin kernel space.\n\nChange-Id: I649fe2597e80ccad50cf16b355e220734810e94c\nSigned-off-by: Brahmaji K <bkomma@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/6528f2e59d9724ffe13b39a2e8b25c639c3d1fca"},{"sha":"6062f68f81e7757202f47b51b7be2c95960d601e","author":{"name":"Krishna Manikandan","email":"09b83fdcc8acff41d1f94b5219f696bb563eee1a@codeaurora.org"},"message":"msm: mdss: Add check for ioctl calls\n\nA check is added to ensure that only the supported\nioctl calls are allowed to proceed further and\nall other ioctl calls are returned early.\n\nChange-Id: I30f69bc9c60384d01f990bd1830ddc1d8aa9241e\nSigned-off-by: Krishna Manikandan <mkrishn@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/6062f68f81e7757202f47b51b7be2c95960d601e"},{"sha":"336918df1325244e02b5547aee1a546175f42baf","author":{"name":"VijayaKumar T M","email":"1d0ce10e1a0c1123629a10b62c852901ec1872b2@codeaurora.org"},"message":"msm: sensor: Add mutex lock during ois power down operations\n\nProtecting operations performed during ois powerdown\nfrom race condition by adding mutex locks.\n\nCRs-Fixed: 2081806\nChange-Id: I27a735fd69d3e98fdd2ed48456336c560b6f3adc\nSigned-off-by: VijayaKumar T M <vtmuni@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/336918df1325244e02b5547aee1a546175f42baf"},{"sha":"f86705cd8cc433371d8b16b84d43d83312296611","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"msm: mdss: Add check for ioctl calls\" into kernel.lnx.3.18.r28-rel","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/f86705cd8cc433371d8b16b84d43d83312296611"},{"sha":"e7f7b09a74c0b0cc2457fb9110edc56ec5c9cc97","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"msm: sensor: Add mutex lock during ois power down operations\" into kernel.lnx.3.18.r28-rel","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/e7f7b09a74c0b0cc2457fb9110edc56ec5c9cc97"},{"sha":"17fb3d4083a455a04588c5ce6c418aca3ba37dfd","author":{"name":"Sunil Khatri","email":"c2fa09c6a63ee27656efbed7bd5e770f84d009d0@codeaurora.org"},"message":"msm: kgsl: Protect the event->handle with spinlock\n\nevent->handle pointer can be used after free due to\nthe race condition between kgsl_sync_callback and\nkgsl_sync_fence_async_cancel.\n\nProtect the event->handle with a spinlock to\navoid concurrent access issues.\n\nChange-Id: I3719e401af9ece82ac68b72f2aef784c7fdc1104\nSigned-off-by: Sunil Khatri <sunilkh@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/17fb3d4083a455a04588c5ce6c418aca3ba37dfd"},{"sha":"b984b7c3d213a6c78713fa1644f9de5125daf372","author":{"name":"Jin Qian","email":"0a9aa3d3574a19f4323dcc26c6c102ebcca97ce1@google.com"},"message":"BACKPORT: f2fs: sanity check log_blocks_per_seg\n\nf2fs currently only supports 4KB block size and 2MB segment size.\nSanity check log_blocks_per_seg == 9, i.e. 2MB/4KB = (1 << 9)\n\nPartially\n(cherry-picked from commit 9a59b62fd88196844cee5fff851bee2cfd7afb6e)\n\nf2fs: do more integrity verification for superblock\n\nDo more sanity check for superblock during ->mount.\n\nSigned-off-by: Chao Yu <chao2.yu@samsung.com>\nSigned-off-by: Jaegeuk Kim <jaegeuk@kernel.org>\n\nSigned-off-by: Jin Qian <jinqian@google.com>\nBug: 36817013\nChange-Id: I0be52e54fba82083068337ceb9f7ad985a87319f\nGit-repo: https://android.googlesource.com/kernel/common\nGit-commit: 3c1659a14b13e66d1d1ab926e242489bda494752\nSigned-off-by: Dennis Cagle <dcagle@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/b984b7c3d213a6c78713fa1644f9de5125daf372"},{"sha":"226362ae3e80d21c2eb7289fd0d89b1e6b65d8d4","author":{"name":"Thomas Gleixner","email":"352b5f5ba0189d2583768a9bb8247f98115b9038@linutronix.de"},"message":"timerfd: Protect the might cancel mechanism proper\n\nThe handling of the might_cancel queueing is not properly protected, so\nparallel operations on the file descriptor can race with each other and\nlead to list corruptions or use after free.\n\nProtect the context for these operations with a seperate lock.\n\nThe wait queue lock cannot be reused for this because that would create a\nlock inversion scenario vs. the cancel lock. Replacing might_cancel with an\natomic (atomic_t or atomic bit) does not help either because it still can\nrace vs. the actual list operation.\n\nChange-Id: Ib0fc09f70b40be38badbbf674aacaa5c24a466b7\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nCc: \"linux-fsdevel@vger.kernel.org\"\nCc: syzkaller <syzkaller@googlegroups.com>\nCc: Al Viro <viro@zeniv.linux.org.uk>\nCc: linux-fsdevel@vger.kernel.org\nLink: http://lkml.kernel.org/r/alpine.DEB.2.20.1701311521430.3457@nanos\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nGit-repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git\nGit-commit: 1e38da300e1e395a15048b0af1e5305bd91402f6\nSigned-off-by: Dennis Cagle <dcagle@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/226362ae3e80d21c2eb7289fd0d89b1e6b65d8d4"},{"sha":"f474bbe797cd34d7ac8601f3be14ed9bfe42dba7","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"BACKPORT: f2fs: sanity check log_blocks_per_seg\" into kernel.lnx.3.18.r28-rel","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/f474bbe797cd34d7ac8601f3be14ed9bfe42dba7"},{"sha":"d75b2a7de96c685269a422dbbf2f3af5b61b7227","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@quicinc.com"},"message":"Merge \"timerfd: Protect the might cancel mechanism proper\" into kernel.lnx.3.18.r28-rel","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/d75b2a7de96c685269a422dbbf2f3af5b61b7227"},{"sha":"bb536a309faa9971d4114b971c0237fdbc480f02","author":{"name":"Jin Qian","email":"0a9aa3d3574a19f4323dcc26c6c102ebcca97ce1@google.com"},"message":"f2fs: sanity check segment count\n\nF2FS uses 4 bytes to represent block address. As a result, supported\nsize of disk is 16 TB and it equals to 16 * 1024 * 1024 / 2 segments.\n\nSigned-off-by: Jin Qian <jinqian@google.com>\nSigned-off-by: Jaegeuk Kim <jaegeuk@kernel.org>\n[dcagle@codeaurora.org: Resolve merge conflict]\nChange-Id: I64d9be6dcc4ab5d8a45359c69d6163ed0209e8fe\nGit-repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git\nGit-commit: b9dd46188edc2f0d1f37328637860bb65a771124\nSigned-off-by: Dennis Cagle <dcagle@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/bb536a309faa9971d4114b971c0237fdbc480f02"},{"sha":"9b9087d05f49506f62d4810f1e4f47f827de167d","author":{"name":"Jin Qian","email":"0a9aa3d3574a19f4323dcc26c6c102ebcca97ce1@android.com"},"message":"FROMLIST: f2fs: sanity check checkpoint segno and blkoff\n\nMake sure segno and blkoff read from raw image are valid.\n\n(url https://sourceforge.net/p/linux-f2fs/mailman/message/35835945)\n\nSigned-off-by: Jin Qian <jinqian@google.com>\nBug: 36588520\nChange-Id: Iba66ab97d3d0870ea48b5ef192d9075f225a934a\nGit-repo: https://android.googlesource.com/kernel/msm\nGit-commit: bac1f6d0d42c2cb696c1508afcbf71b0893e0c9a\nSigned-off-by: Dennis Cagle <dcagle@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/mifl/android_kernel_qcom_msm-3.18/commits/9b9087d05f49506f62d4810f1e4f47f827de167d"}]}
{"actor":{"display_login":"mifl"}}