{"push_id":1679931317,"size":700,"distinct_size":700,"ref":"refs/heads/cm-14.1","head":"e744426f96adad05e337d0364fbaf9954ef8f884","before":"6bb0b2a7b7dfff5ba7de3391cd9338e96fc328b7","commits":[{"sha":"01dc5a1ad526a1b1abd5dbad7fb3d486dbd39bf4","author":{"name":"Xiaoyu Ye","email":"4fe3c823f9e37491ec092bac150fe34d2be8ede2@codeaurora.org"},"message":"misc: qcom: qdsp6v2: Add range check in function aac_in_ioctl_shared\n\nAdd range check for cfg->sample_rate to prevent the user space from\nproviding an invalid sample rate.\n\nCRs-Fixed: 1108109\nChange-Id: I17ccda0901aa4ad84d6e2f78679d71aa327f42eb\nSigned-off-by: Xiaoyu Ye <benyxy@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/01dc5a1ad526a1b1abd5dbad7fb3d486dbd39bf4"},{"sha":"b2c273cdc0358279778b4d1eb3e9a002e6b65acf","author":{"name":"Sravan Kumar D.V.N","email":"abf7935c73c29741abfcccc59dbb988a1fafdc0f@codeaurora.org"},"message":"msm: mdss: Fix possible integer overflow\n\nAvoid possible integer overflow while validating mdp3\nlut config parameters.\n\nChange-Id: Ie3f59748e613fbbf755a98dcc688491a8c4e2cca\nCRs-Fixed: 1104664\nSigned-off-by: Sravan Kumar D.V.N <sravank1@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/b2c273cdc0358279778b4d1eb3e9a002e6b65acf"},{"sha":"d86fc175863b2d90a760b587e3186b877fdcc257","author":{"name":"Raju P.L.S.S.S.N","email":"f1927163654a6c4704b8a5dc13d664f17df5656d@codeaurora.org"},"message":"msm: pm: Add mutex lock for shared data\n\nThe buffer allocated in file open operations need to be\nprotected as there can be a possiblity of use-after-free\nscenario.\n\nProcess A              B\n        |              |\n      open             |\n        |              |\n      read started     |\n        |             close\n\nAdd mutex lock to protect the buffer to avoid this.\n\nChange-Id: I1e066fd0a047bcec2af7829015089d5c882fb2f3\nSigned-off-by: Raju P.L.S.S.S.N <rplsssn@codeaurora.org>\nSigned-off-by: Naresh Malladi <namall@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/d86fc175863b2d90a760b587e3186b877fdcc257"},{"sha":"be75e07b87493591e466ee44633d108cfc42343d","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"msm: mdss: Fix possible integer overflow\"","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/be75e07b87493591e466ee44633d108cfc42343d"},{"sha":"0f840f5c1a6198746c1714f118c900a96bf299a8","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"msm: pm: Add mutex lock for shared data\"","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/0f840f5c1a6198746c1714f118c900a96bf299a8"},{"sha":"b18bda8d63c3d79ae8b27c67538e789439bed886","author":{"name":"VijayaKumar T M","email":"1d0ce10e1a0c1123629a10b62c852901ec1872b2@codeaurora.org"},"message":"msm: camera: Add check to ensure task wont hog CPU\n\nIn case the userspace code manipulates the list to be circular\nThis way the task will hog the CPU in while loop.\n\nCRs-Fixed: 1064608\nChange-Id: Ie896fd3da326e5e972266d8004baecf8681aea6d\nSigned-off-by: VijayaKumar T M <vtmuni@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/b18bda8d63c3d79ae8b27c67538e789439bed886"},{"sha":"437ace777fbc5d21bf1f201d601c33ba80f93f96","author":{"name":"VijayaKumar T M","email":"1d0ce10e1a0c1123629a10b62c852901ec1872b2@codeaurora.org"},"message":"msm: camera: Validate size param before allocating memory\n\nWhen ever i2c write is initiated check size param for NULL\nand in case of sequence write check for maximun allowed\nsize per i2c sequence write.\n\nCRs-Fixed: 779253\nChange-Id: Ib9fa1d620e888ba8410b241d08895af993b6d960\nSigned-off-by: VijayaKumar T M <vtmuni@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/437ace777fbc5d21bf1f201d601c33ba80f93f96"},{"sha":"2710ab6ef48d54a4263d0a8d16090e9757bf3c87","author":{"name":"Sahitya Tummala","email":"b7bf508aab3e5632db28abf288bf9b4635713caf@codeaurora.org"},"message":"uio: fix potential use after free issue when accessing debug_buffer\n\nThe variable debug_buffer is a global variable which is allocated\nand free'd when open/close is called on debugfs file -\n\"/sys/kernel/debug/rmt_storage/info\". The current code doesn't\nhave locks to handle concurrent accesses to the above file.\nThis results into use after free issue when debug_buffer is\naccessed by two threads at the same time. Fix this by adding\na mutex lock to protect this global variable.\n\nChange-Id: I6bc3f0ae2d7fca3ca9fe8561612f5863b6c3268a\nSigned-off-by: Sahitya Tummala <stummala@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/2710ab6ef48d54a4263d0a8d16090e9757bf3c87"},{"sha":"dcb5db9b4b8724d162922d8b18d8bb006ab0f152","author":{"name":"Siena Richard","email":"d38b195d0a21dccff7df190f3906e3fea13874b3@codeaurora.org"},"message":"ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure\n\nCompletely deallocate the cal block if creation fails to ensure no\nmemory leaks are present.\n\nCRs-Fixed: 1112751\nChange-Id: I76916c8b3f7e8e9b864dc39dab96f7d330774473\nSigned-off-by: Siena Richard <sienar@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/dcb5db9b4b8724d162922d8b18d8bb006ab0f152"},{"sha":"d67d71fe51b9925d34da217b32abf471c94d14d7","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"msm: camera: Validate size param before allocating memory\"","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/d67d71fe51b9925d34da217b32abf471c94d14d7"},{"sha":"c2b40d2268d04ffda9fa72f79e4490ef6639bd2d","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure\"","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/c2b40d2268d04ffda9fa72f79e4490ef6639bd2d"},{"sha":"58fb26343ed239d0fc204b1af56a89bc438f0b49","author":{"name":"Zhen Kong","email":"b999fb1d59364862997bac94d5b793be36d63b01@codeaurora.org"},"message":"crypto: msm: check length before copying to buf in _debug_stats_read\n\nMake sure that `len` is not larger than `count` before copying data\nto userspace `buf` in _debug_stats_read().\n\nChange-Id: Iafb7cfa3828653f8c28183c812797c3d9a183da1\nSigned-off-by: Zhen Kong <zkong@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/58fb26343ed239d0fc204b1af56a89bc438f0b49"},{"sha":"f4a143e7b6c7b3a3dd23547852348327e23fbc95","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"crypto: msm: check length before copying to buf in _debug_stats_read\"","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/f4a143e7b6c7b3a3dd23547852348327e23fbc95"},{"sha":"2405589c04569a7840304207135b7933b7d4cdd8","author":{"name":"Siena Richard","email":"d38b195d0a21dccff7df190f3906e3fea13874b3@codeaurora.org"},"message":"drivers: soc: add mutex to prevent response being processed twice\n\nAdd a mutex to prevent two threads from processing the same response\nat the same time. This ensures responses are processed completely and\nsequentially.\n\nCRs-Fixed: 1116015\nChange-Id: Id2ef32edb939f8af2850b54bd6f6f447939c0732\nSigned-off-by: Siena Richard <sienar@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/2405589c04569a7840304207135b7933b7d4cdd8"},{"sha":"03da17554b88933dcba83df475a5a67899be7378","author":{"name":"Srinivasarao P","email":"5838be2f68866147a6b98dc0567ce3ec89ebe5fc@codeaurora.org"},"message":"defconfig: disable cp_access\n\ncpaccess module gives userspace control over system control\nregisters so disable cp_access module.\n\nChange-Id: Ib49412957f91ce65f4350c5c72358b1c53eed43e\nSigned-off-by: Srinivasarao P <spathi@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/03da17554b88933dcba83df475a5a67899be7378"},{"sha":"d2d63a1b113dc3bef7517cae74f434d8d2013aaa","author":{"name":"Linux Build Service Account","email":"2384cb4e42a14e5d91b44a81612a69803086d401@localhost"},"message":"Merge \"defconfig: disable cp_access\"","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/d2d63a1b113dc3bef7517cae74f434d8d2013aaa"},{"sha":"037f629c20e9cf9c20b0251bce856444e5e6abd2","author":{"name":"Rajesh Bondugula","email":"3062b73d3088701829fade9d0214b3b9a768fa40@codeaurora.org"},"message":"msm: camera: sensor: Validate destination step position\n\ndest_step_position is sent from userspace and is used in\nkernel to calculate the final DAC value.\ndest_step_position must be validated against total steps.\nActuator will have an unexpected behavior if lens value is\nprogramed to actuator based on invalid dest_step_position.\n\nCRs-Fixed: 1102580\nChange-Id: Idcd97043d3bd583d8577233d446a99d1829a4ee6\nSigned-off-by: Rajesh Bondugula <rajeshb@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/037f629c20e9cf9c20b0251bce856444e5e6abd2"},{"sha":"40489c664ff5007021ea69fddde0de55e97b3c71","author":{"name":"Vevek Venkatesan","email":"8c485a22bf9077f681299510534726e675a8d282@codeaurora.org"},"message":"input: touchscreen: gt9xx: fix memory corruption in Goodix driver\n\nFix memory corruption in Goodix touchscreen driver, by resetting\nthe global structure cmd_head to zero (except *data and wr flag)\nin goodix_tool_write handler on error case.\n\nChange-Id: I4f7f8f464b93571627b922b10c10a65826228e42\nSigned-off-by: Vevek Venkatesan <vevekv@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/40489c664ff5007021ea69fddde0de55e97b3c71"},{"sha":"678246ef49e14ed7021493c46e210c701265d972","author":{"name":"Shantanu Jain","email":"dd0a07d03dafba016d85c4422605068323098e5d@codeaurora.org"},"message":"input: touchscreen: remove msg21xx mstar touch driver\n\nRemove msg21xx mstar touch driver from the kernel code\nas it has never been used in any of the recent platforms.\n\nChange-Id: I0ac1f93d9736c402732b6c4a8d22b1bf3500e4c4\nSigned-off-by: Vevek Venkatesan <vevekv@codeaurora.org>\nSigned-off-by: Shantanu Jain <shjain@codeaurora.org>\nSigned-off-by: Yasir Malik <ymalik@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/678246ef49e14ed7021493c46e210c701265d972"},{"sha":"3b288d58f56409bf412488e2848c209e54b65479","author":{"name":"Dhoat Harpal","email":"d064cb049e64882a7552886e9e26de971379bed3@codeaurora.org"},"message":"soc: qcom: smem: Fix uninitialized usage of a stack variable\n\nvariable size is output variable and is not initialized,\nprinting it can lead to information leak.\n\nvariable size is removed from log message.\n\nCRs-Fixed: 1093837\nChange-Id: I95cf227bb82a2ee7c6f43db151f75a942e8e55ce\nSigned-off-by: Dhoat Harpal <hdhoat@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/LineageOS/android_kernel_huawei_msm8916/commits/3b288d58f56409bf412488e2848c209e54b65479"}]}
{"actor":{"display_login":"lineageos-gerrit"}}