{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":503021495,"defaultBranch":"lineage-20","name":"android_kernel_qcom_sdm845","ownerLogin":"LineageOS","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-06-13T15:53:26.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/24304779?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715112801.0","currentOid":""},"activityList":{"items":[{"before":"e83ba9a6afa76cec699aaa72c5647bf24c0d3609","after":"17c0c585223421dac5d5f1948ffa896e2dbbbbd6","ref":"refs/heads/lineage-20","pushedAt":"2024-05-07T20:13:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"UPSTREAM: af_unix: Fix null-ptr-deref in unix_stream_sendpage().\n\nBing-Jhong Billy Jheng reported null-ptr-deref in unix_stream_sendpage()\nwith detailed analysis and a nice repro.\n\nunix_stream_sendpage() tries to add data to the last skb in the peer's\nrecv queue without locking the queue.\n\nIf the peer's FD is passed to another socket and the socket's FD is\npassed to the peer, there is a loop between them.  If we close both\nsockets without receiving FD, the sockets will be cleaned up by garbage\ncollection.\n\nThe garbage collection iterates such sockets and unlinks skb with\nFD from the socket's receive queue under the queue's lock.\n\nSo, there is a race where unix_stream_sendpage() could access an skb\nlocklessly that is being released by garbage collection, resulting in\nuse-after-free.\n\nTo avoid the issue, unix_stream_sendpage() must lock the peer's recv\nqueue.\n\nNote the issue does not exist in 6.5+ thanks to the recent sendpage()\nrefactoring.\n\nThis patch is originally written by Linus Torvalds.\n\nBUG: unable to handle page fault for address: ffff988004dd6870\nPF: supervisor read access in kernel mode\nPF: error_code(0x0000) - not-present page\nPGD 0 P4D 0\nPREEMPT SMP PTI\nCPU: 4 PID: 297 Comm: garbage_uaf Not tainted 6.1.46 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nRIP: 0010:kmem_cache_alloc_node+0xa2/0x1e0\nCode: c0 0f 84 32 01 00 00 41 83 fd ff 74 10 48 8b 00 48 c1 e8 3a 41 39 c5 0f 85 1c 01 00 00 41 8b 44 24 28 49 8b 3c 24 48 8d 4a 40 <49> 8b 1c 06 4c 89 f0 65 48 0f c7 0f 0f 94 c0 84 c0 74 a1 41 8b 44\nRSP: 0018:ffffc9000079fac0 EFLAGS: 00000246\nRAX: 0000000000000070 RBX: 0000000000000005 RCX: 000000000001a284\nRDX: 000000000001a244 RSI: 0000000000400cc0 RDI: 000000000002eee0\nRBP: 0000000000400cc0 R08: 0000000000400cc0 R09: 0000000000000003\nR10: 0000000000000001 R11: 0000000000000000 R12: ffff888003970f00\nR13: 00000000ffffffff R14: ffff988004dd6800 R15: 00000000000000e8\nFS:  00007f174d6f3600(0000) GS:ffff88807db00000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffff988004dd6870 CR3: 00000000092be000 CR4: 00000000007506e0\nPKRU: 55555554\nCall Trace:\n <TASK>\n ? __die_body.cold+0x1a/0x1f\n ? page_fault_oops+0xa9/0x1e0\n ? fixup_exception+0x1d/0x310\n ? exc_page_fault+0xa8/0x150\n ? asm_exc_page_fault+0x22/0x30\n ? kmem_cache_alloc_node+0xa2/0x1e0\n ? __alloc_skb+0x16c/0x1e0\n __alloc_skb+0x16c/0x1e0\n alloc_skb_with_frags+0x48/0x1e0\n sock_alloc_send_pskb+0x234/0x270\n unix_stream_sendmsg+0x1f5/0x690\n sock_sendmsg+0x5d/0x60\n ____sys_sendmsg+0x210/0x260\n ___sys_sendmsg+0x83/0xd0\n ? kmem_cache_alloc+0xc6/0x1c0\n ? avc_disable+0x20/0x20\n ? percpu_counter_add_batch+0x53/0xc0\n ? alloc_empty_file+0x5d/0xb0\n ? alloc_file+0x91/0x170\n ? alloc_file_pseudo+0x94/0x100\n ? __fget_light+0x9f/0x120\n __sys_sendmsg+0x54/0xa0\n do_syscall_64+0x3b/0x90\n entry_SYSCALL_64_after_hwframe+0x69/0xd3\nRIP: 0033:0x7f174d639a7d\nCode: 28 89 54 24 1c 48 89 74 24 10 89 7c 24 08 e8 8a c1 f4 ff 8b 54 24 1c 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 33 44 89 c7 48 89 44 24 08 e8 de c1 f4 ff 48\nRSP: 002b:00007ffcb563ea50 EFLAGS: 00000293 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f174d639a7d\nRDX: 0000000000000000 RSI: 00007ffcb563eab0 RDI: 0000000000000007\nRBP: 00007ffcb563eb10 R08: 0000000000000000 R09: 00000000ffffffff\nR10: 00000000004040a0 R11: 0000000000000293 R12: 00007ffcb563ec28\nR13: 0000000000401398 R14: 0000000000403e00 R15: 00007f174d72c000\n </TASK>\n\nBug: 299922588\nFixes: 869e7c62486e (\"net: af_unix: implement stream sendpage support\")\nReported-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>\nReviewed-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>\nCo-developed-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n(cherry picked from commit 790c2f9d15b594350ae9bca7b236f2b1859de02c)\nSigned-off-by: Lee Jones <joneslee@google.com>\nChange-Id: Ied4a40e6ae0e594ef84f36287bc6194602935585","shortMessageHtmlLink":"UPSTREAM: af_unix: Fix null-ptr-deref in unix_stream_sendpage()."}},{"before":"ffef8b1ed6baa50d988e78f47b7160e5a2d2845e","after":"e83ba9a6afa76cec699aaa72c5647bf24c0d3609","ref":"refs/heads/lineage-20","pushedAt":"2024-04-22T16:23:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"Revert \"msm: vidc: Dynamic resolution crop enable for SDM845\"\n\nThis feature seems to require updated venus firmware, as it breaks\nvidc completely. As it's unlikely any SDM845 device will get a\nfirmware update, let's revert this change.\n\nThis reverts commit 07a303b15a3ab6c7091bd731e8cbd2dec323dea2.\n\nChange-Id: I5d3397c9d90e9eae129dc555ef9acc1bafd7c473","shortMessageHtmlLink":"Revert \"msm: vidc: Dynamic resolution crop enable for SDM845\""}},{"before":"b1923f95063c3f0aacecafacfc02eb505e08c661","after":"ffef8b1ed6baa50d988e78f47b7160e5a2d2845e","ref":"refs/heads/lineage-20","pushedAt":"2024-04-20T22:15:16.000Z","pushType":"push","commitsCount":43,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"Merge tag 'LA.UM.8.3.c25-08900-sdm845.0' of https://git.codelinaro.org/clo/la/kernel/msm-4.9 into android13-4.9-sdm845\n\n\"LA.UM.8.3.c25-08900-sdm845.0\"\n\n* tag 'LA.UM.8.3.c25-08900-sdm845.0' of https://git.codelinaro.org/clo/la/kernel/msm-4.9:\n  iommu: Fix missing return check of arm_lpae_init_pte\n  msm: vidc: modify allocation of hfi_cmd_sys_set_property_packet\n  msm: vidc: Dynamic resolution crop enable for SDM845\n  msm: vidc: Change minimum frame qp to 0\n  msm: vidc: Fix for dynamic resolution crop issue\n  msm: ADSPRPC: Add reference count for context map\n  msm: vidc: Fix max value of base layer pid\n  msm: kgsl: Prevent wrap around during user address mapping\n  bus: mhi: misc: Add check for dev_rp if it is iommu range or not\n\n Conflicts:\n\tdrivers/char/adsprpc.c\n\tdrivers/gpu/msm/kgsl_iommu.c\n\nChange-Id: Icddefe39498eaa0bfbb36128e5468e20e18f65d5","shortMessageHtmlLink":"Merge tag 'LA.UM.8.3.c25-08900-sdm845.0' of <a href=\"https://git.codelinaro.org/clo/la/kernel/msm-4.9\" rel=\"nofollow\">https://git.codelinaro.or…</a>"}},{"before":"89839b440dd93baaf24467c72493557550d87177","after":"b1923f95063c3f0aacecafacfc02eb505e08c661","ref":"refs/heads/lineage-20","pushedAt":"2024-04-16T14:55:27.000Z","pushType":"push","commitsCount":20,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"Merge branch 'for-kernel-version-from-4.1.0' of https://github.com/namjaejeon/linux-exfat-oot into android13-4.9-sdm845\n\n* 'for-kernel-version-from-4.1.0' of https://github.com/namjaejeon/linux-exfat-oot:\n  exfat: github action: run buiuld and tests on for-kernel-version-from-4.1.0 branch\n  exfat: fix ALIGN_DOWN undefined error\n  exfat: using ffs instead of internal logic\n  exfat: using hweight instead of internal logic\n  exfat: fix ctime is not updated\n  exfat: fix setting uninitialized time to ctime/atime\n  exfat: convert to new timestamp accessors\n  exfat: convert to ctime accessor functions\n  exfat: fs: pass the request_mask to generic_fillattr\n  exfat: convert to simple_rename_timestamp\n  exfat: ensure that ctime is updated whenever the mtime is\n  exfat: fs: add CONFIG_BUFFER_HEAD\n  exfat: use fat ioctls definitions from include/uapi/linux/msdos_fs.h\n  exfat: github action: remove liunx-4.1 source to get more disk space\n  exfat: support create zero-size directory\n  exfat: support handle zero-size directory\n  exfat: add ioctls for accessing attributes\n  exfat: vfs: get rid of old '->iterate' directory operation\n\nChange-Id: I6d3d42c4c356f7518b44e9779ed20bfd4f7c6b08","shortMessageHtmlLink":"Merge branch 'for-kernel-version-from-4.1.0' of <a href=\"https://github.com/namjaejeon/linux-exfat-oot\">https://github.com/na…</a>"}},{"before":"26dd511c9170ce14eef2f2fa5edf10fa258a359a","after":"89839b440dd93baaf24467c72493557550d87177","ref":"refs/heads/lineage-20","pushedAt":"2024-04-01T21:46:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"iommu: Fix missing return check of arm_lpae_init_pte\n\nUAF scenario may occur in clients with EL1 privileges for\niova mappings when we miss to check the return value of\narm_lpae_init_pte which may lead to an PTE be counted as\nit was set even if it was already existing. This can cause a\ndangling IOMMU PTE to be left mapped pointing to a\nfreed object and cause UAF in the client if the dangling PTE\nis accessed after a failed unmap operation.\n\nFixes: 27de1978c331 (\"ANDROID: GKI: iommu/io-pgtable-arm: LPAE related updates by vendor\")\nChange-Id: I674b9b520e705b8f8e63ba20ed76e64cb2fe0f47\nSigned-off-by: Pratyush Brahma <quic_pbrahma@quicinc.com>","shortMessageHtmlLink":"iommu: Fix missing return check of arm_lpae_init_pte"}},{"before":"ca7591127ed4b3a4b45684af6502d74c3eb7c0ec","after":"26dd511c9170ce14eef2f2fa5edf10fa258a359a","ref":"refs/heads/lineage-20","pushedAt":"2024-03-25T15:01:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"BACKPORT: memshare: Prevent possible integer overflow\n\nPrevent possible integer overflow by sanitizing the alloc request\nsize coming from the client against allottable amount of memory.\n\nChange-Id: I74cb0f7b0808f20299586969fd5c810d44c3e576\nSigned-off-by: Manoj Prabhu B <quic_bmanoj@quicinc.com>\nSigned-off-by: Michael Bestas <mkbestas@lineageos.org>","shortMessageHtmlLink":"BACKPORT: memshare: Prevent possible integer overflow"}},{"before":"7d7f154f68c8429652017a95dc6e81053cbd3e90","after":"ca7591127ed4b3a4b45684af6502d74c3eb7c0ec","ref":"refs/heads/lineage-20","pushedAt":"2024-03-22T21:47:13.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"arm64: mm: Update perf accounting to handle poison faults\n\nRe-organise the perf accounting for fault handling in preparation for\nenabling handling of hardware poison faults in subsequent commits. The\nchange updates perf accounting to be inline with the behaviour on\nx86.\n\nWith this update, the perf fault accounting -\n\n  * Always report PERF_COUNT_SW_PAGE_FAULTS\n\n  * Doesn't report anything else for VM_FAULT_ERROR (which includes\n    hwpoison faults)\n\n  * Reports PERF_COUNT_SW_PAGE_FAULTS_MAJ if it's a major\n    fault (indicated by VM_FAULT_MAJOR)\n\n  * Otherwise, reports PERF_COUNT_SW_PAGE_FAULTS_MIN\n\nChange-Id: I4be2180ef9d046fb4f8edcbcc9dc30ce0c6622d2\nSigned-off-by: Punit Agrawal <punit.agrawal@arm.com>\nSigned-off-by: Will Deacon <will.deacon@arm.com>","shortMessageHtmlLink":"arm64: mm: Update perf accounting to handle poison faults"}},{"before":"5320a64c2ffeffd5d40d73af5afce6d3e69b10fd","after":"7d7f154f68c8429652017a95dc6e81053cbd3e90","ref":"refs/heads/lineage-20","pushedAt":"2024-02-13T19:06:47.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"coresight: Fix clang 14.x forbidden warnings/errors\n\nFix the sscanf overflow on the destination argument without\nthe specifier.\n\nChange-Id: Iffc4967b1e11b3a91c97416cedc411a00b9bfc3b\nSigned-off-by: Manjunatha Madana <quic_c_mamanj@quicinc.com>","shortMessageHtmlLink":"coresight: Fix clang 14.x forbidden warnings/errors"}},{"before":"6c584e732245c25c55ad6a2ef3e6de8e8ce50ba2","after":"5320a64c2ffeffd5d40d73af5afce6d3e69b10fd","ref":"refs/heads/lineage-20","pushedAt":"2024-01-04T19:24:10.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"dsp: q6lsm: Address use after free for mmap handle\n\nThe global declared mmap_handle can be left dangling\nfor case when the handle is freed by the calling function.\nFix is to address this. Also add a check to make sure\nthe mmap_handle is accessed legally.\n\nChange-Id: I367f8a41339aa0025b545b125ee820220efedeee\nSigned-off-by: Soumya Managoli <quic_c_smanag@quicinc.com>","shortMessageHtmlLink":"dsp: q6lsm: Address use after free for mmap handle"}},{"before":"58c8b3aebd02cb9e476705e92033821a8ad28a56","after":"6c584e732245c25c55ad6a2ef3e6de8e8ce50ba2","ref":"refs/heads/lineage-20","pushedAt":"2023-12-13T00:07:15.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"regulator: Fix error checking for debugfs_create_dir\n\n[ Upstream commit 2bf1c45be3b8f3a3f898d0756c1282f09719debd ]\n\nThis patch fixes the error checking in core.c in debugfs_create_dir.\nThe correct way to check if an error occurred is 'IS_ERR' inline function.\n\nChange-Id: I9da7dd14ffa0f394400f2751e332b1f5d3209f28\nSigned-off-by: Osama Muhammad <osmtendev@gmail.com\nSuggested-by: Ivan Orlov <ivan.orlov0322@gmail.com\nLink: https://lore.kernel.org/r/20230515172938.13338-1-osmtendev@gmail.com\nSigned-off-by: Mark Brown <broonie@kernel.org\nSigned-off-by: Sasha Levin <sashal@kernel.org>","shortMessageHtmlLink":"regulator: Fix error checking for debugfs_create_dir"}},{"before":"796069d06be7c7a274f2c723ab9112dc1c97495f","after":"58c8b3aebd02cb9e476705e92033821a8ad28a56","ref":"refs/heads/lineage-20","pushedAt":"2023-12-12T22:41:53.000Z","pushType":"push","commitsCount":9,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"msm: kgsl: Prevent wrap around during user address mapping\n\nWhen setting svm region during the gpuobj import ioctl call for a usermem\naddress, there is a possibility of a very large input size causing the\nregion's 64-bit end address to wrap around. This can cause the region\nto incorrectly be considered valid, ultimately allowing a use after free\nscenario. To prevent this, detect the occurrence of a wrap and reject the\nimport.\n\nChange-Id: I4a88f56c58b830d4342e47dc1d1f6290c78ab6b4\nSigned-off-by: Mohammed Mirza Mandayappurath Manzoor <quic_mmandaya@quicinc.com>\nSigned-off-by: Puranam V G Tejaswi <quic_pvgtejas@quicinc.com>","shortMessageHtmlLink":"msm: kgsl: Prevent wrap around during user address mapping"}},{"before":"f00103486c895d55db2387c528a02f23a4396e4c","after":"796069d06be7c7a274f2c723ab9112dc1c97495f","ref":"refs/heads/lineage-20","pushedAt":"2023-12-12T22:39:45.000Z","pushType":"push","commitsCount":11,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"Merge tag 'LA.UM.10.3.c25-00400-sdm845.0' of https://git.codelinaro.org/clo/la/kernel/msm-4.9 into android13-4.9-sdm845\n\n\"LA.UM.10.3.c25-00400-sdm845.0\"\n\n-----\n\nMerge list:\n\n2c691e37 msm: kgsl: Zap performance counters across context switches\ncc4445fc msm: kgsl: Add a sysfs node to control performance counter reads\nd43346f6 Merge 975d708f8613e08048ceddeedae69c6bbdfa00b1 on remote branch\n975d708f Merge \"msm: camera: reqmgr: reader writer locks to avoid memory faults\"\n4d3d93cb diag: Validate the dci client before sending dci packet\nc1281451 msm: camera: reqmgr: reader writer locks to avoid memory faults\n886ff86e Merge \"msm: camera: reqmgr: reader writer locks to avoid memory faults\"\n199b0eae diag: Ensure dci entry is valid before sending the packet\n6f0d0c6b msm: camera: cdm: Acquire mutex lock before accessing client data\n3064ec89 msm: camera: reqmgr: reader writer locks to avoid memory faults\n\n-----\n\nThe kgsl patches above are already included.\n\nConflicts:\n- drivers/gpu/msm/adreno.h\n- drivers/gpu/msm/adreno_a6xx_preempt.c\n\nChange-Id: I1795b0c91be002fd70435c6e1787b354fd5bdc3d\nSigned-off-by: Alexander Martinz <amartinz@shiftphones.com>","shortMessageHtmlLink":"Merge tag 'LA.UM.10.3.c25-00400-sdm845.0' of <a href=\"https://git.codelinaro.org/clo/la/kernel/msm-4.9\" rel=\"nofollow\">https://git.codelinaro.o…</a>"}},{"before":"73335cab0ddde7bbfd35e2270cec3d539daa858b","after":"f00103486c895d55db2387c528a02f23a4396e4c","ref":"refs/heads/lineage-20","pushedAt":"2023-11-07T16:14:57.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"ASoC: msm-pcm-voip: Avoid interger underflow\n\nThere is no check for voip pkt pkt_len,if it contains the\nminimum required data. This can lead to integer underflow.\nAdd check for the same.\n\nChange-Id: I91d4f2ad8dfb060cdb2ab9e36dc9f886ea40908a\nSigned-off-by: Soumya Managoli <quic_c_smanag@quicinc.com>","shortMessageHtmlLink":"ASoC: msm-pcm-voip: Avoid interger underflow"}},{"before":"deaf422bb794f3bae2a5857ad7d9c71403104e35","after":"73335cab0ddde7bbfd35e2270cec3d539daa858b","ref":"refs/heads/lineage-20","pushedAt":"2023-10-25T11:02:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"sched/tune: Increase the cgroup limit to 8\n\nWe have 7 groups that is: background/ camera-daemon/ foreground/ rt/\nnnapi-hal/ top-app and root group. Adding another one for testing.\n\nBug: 150582812\nTest: Build\nChange-Id: I2d749a7bde4ad4c7c05f7218c9a5f39f8533acae\nSigned-off-by: Wei Wang <wvw@google.com>\n(cherry picked from commit 33b0444720e2d492326e4713179d5363472aba8b)\nSigned-off-by: davidchao <davidchao@google.com>","shortMessageHtmlLink":"sched/tune: Increase the cgroup limit to 8"}},{"before":"533e3a0cb5dde68474afaf90881cedb0e5d6de87","after":"deaf422bb794f3bae2a5857ad7d9c71403104e35","ref":"refs/heads/lineage-20","pushedAt":"2023-10-25T11:02:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"sched/tune: fix suspicious RCU usage warning\n\nBelow warning is observed during boot when lockdep is enabled.\nFix it by adding RCU lock around sched_boost_enabled usage.\n\n[    0.158789] WARNING: suspicious RCU usage\n[    0.158819] include/linux/cgroup.h:477 \\\n\t\tsuspicious rcu_dereference_check() usage!\n[    0.158935] Call trace:\n[    0.158948]  dump_backtrace+0x0/0x190\n[    0.158958]  show_stack+0x20/0x30\n[    0.158970]  dump_stack+0xe8/0x13c\n[    0.158981]  lockdep_rcu_suspicious+0x128/0x150\n[    0.158994]  task_sched_boost+0x90/0xa8\n[    0.159005]  pick_next_task_fair+0x7f8/0x9e0\n[    0.159016]  __schedule+0x92c/0x1028\n[    0.159026]  schedule_idle+0x24/0x40\n[    0.159038]  do_idle+0x270/0x2a8\n[    0.159049]  cpu_startup_entry+0x24/0x28\n[    0.159060]  secondary_start_kernel+0x168/0x178.\n\nChange-Id: Id1d95744aa91d8aafee9ec0c413468b5ee18f0db\nSigned-off-by: Satya Durga Srinivasu Prabhala <satyap@codeaurora.org>","shortMessageHtmlLink":"sched/tune: fix suspicious RCU usage warning"}},{"before":"47b8aa70e1d40915e10d40c593e54eeecc4ca4c8","after":"533e3a0cb5dde68474afaf90881cedb0e5d6de87","ref":"refs/heads/lineage-20","pushedAt":"2023-10-25T11:01:58.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"ipa_v3: Fix enum conversion warnings\n\nclang-15 complains:\ndrivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c:499:41: error: implicit\nconversion from enumeration type 'enum ipa_ip_type_enum_v01'\nto different enumeration type 'enum ipa_ip_type'\n[-Werror,-Wenum-conversion]\n        q6_ul_flt_rule_ptr->ip = flt_spec_ptr->ip_type;\n                               ~ ~~~~~~~~~~~~~~^~~~~~~\ndrivers/platform/msm/ipa/ipa_v3/rmnet_ipa.c:500:45: error: implicit\nconversion from enumeration type 'enum ipa_filter_action_enum_v01'\nto different enumeration type 'enum ipa_flt_action'\n[-Werror,-Wenum-conversion]\n        q6_ul_flt_rule_ptr->action = flt_spec_ptr->filter_action;\n                                   ~ ~~~~~~~~~~~~~~^~~~~~~~~~~~~\n2 errors generated.\n\nChange-Id: I7a40b0d7b082836670b6551f2a04aa141d240153","shortMessageHtmlLink":"ipa_v3: Fix enum conversion warnings"}},{"before":"61a7bb0bec36ff92b8620a7974c856b95b044dd4","after":"47b8aa70e1d40915e10d40c593e54eeecc4ca4c8","ref":"refs/heads/lineage-20","pushedAt":"2023-09-21T13:25:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"BACKPORT: qcacld-3.0: Ignore CSA request for invalid channel\n\nIn present scenario, STA disconnects with AP if it receives\ninvalid channel in CSA IE. In this case STA shouldn't\ndisconnect with AP as this request may come from a spoof AP.\n\nIgnore this CSA request as it might be from spoof AP and\nif it is from genuine AP heart beat failure happens and\nresults in disconnection. After disconnection DUT may\nreconnect to same or other APs.\n\nChange-Id: I840508dd27d8c313a3e8f74c4e1f5aa64eecf6f9\nCRs-Fixed: 3390251","shortMessageHtmlLink":"BACKPORT: qcacld-3.0: Ignore CSA request for invalid channel"}},{"before":"873bce734f798ca6c48823b13eed295e6375f639","after":"61a7bb0bec36ff92b8620a7974c856b95b044dd4","ref":"refs/heads/lineage-20","pushedAt":"2023-08-31T15:31:38.000Z","pushType":"push","commitsCount":46,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"Merge branch 'master' of https://github.com/namjaejeon/linux-exfat-oot into android13-4.9-sdm845\n\n* 'master' of https://github.com/namjaejeon/linux-exfat-oot:\n  exfat: add necessary header for vmalloc\n  exfat: release s_lock before calling dir_emit()\n  exfat: check if filename entries exceeds max filename length\n  exfat: github action: make space for running xfstests\n  exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree\n  exfat: splice: Use filemap_splice_read() instead of generic_file_splice_read()\n  exfat: fs: build the legacy direct I/O code conditionally\n  exfat: fs: port ->rename() to pass mnt_idmap\n  exfat: fs: port ->mkdir() to pass mnt_idmap\n  exfat: fs: port ->create() to pass mnt_idmap\n  exfat: fs: port ->getattr() to pass mnt_idmap\n  exfat: fs: port ->setattr() to pass mnt_idmap\n  exfat: fix the newly allocated clusters are not freed in error handling\n  exfat: don't print error log in normal case\n  exfat: remove unneeded code from exfat_alloc_cluster()\n  exfat: remove ->writepage\n  exfat: handle unreconized benign secondary entries\n  exfat: fix inode->i_blocks for non-512 byte sector size device\n  exfat: redefine DIR_DELETED as the bad cluster number\n  exfat: fix reporting fs error when reading dir beyond EOF\n  exfat: fix unexpected EOF while reading dir\n  exfat: reuse exfat_find_location() to simplify exfat_get_dentry_set()\n  exfat: fix overflow in sector and cluster conversion\n  exfat: remove i_size_write() from __exfat_truncate()\n  exfat: remove argument 'size' from exfat_truncate()\n  exfat: remove unnecessary arguments from exfat_find_dir_entry()\n  exfat: remove unneeded codes from __exfat_rename()\n  exfat: remove call ilog2() from exfat_readdir()\n  exfat: remove generic/286\n  exfat: fix python package installation failure\n  exfat: github actions: add apt-get update command\n  exfat: treewide: use get_random_u32() when possible\n  exfat: replace magic numbers with Macros\n  exfat: rename exfat_free_dentry_set() to exfat_put_dentry_set()\n  exfat: move exfat_entry_set_cache from heap to stack\n  exfat: support dynamic allocate bh for exfat_entry_set_cache\n  exfat: reduce the size of exfat_entry_set_cache\n  exfat: add SECTOR_SIZE macro\n  exfat: hint the empty entry which at the end of cluster chain\n  exfat: simplify empty entry hint\n  exfat: add auto-test using github action\n  exfat: remove travis-CI test\n\nChange-Id: Ia289f4db697b9ca142b5b066390797768adae696","shortMessageHtmlLink":"Merge branch 'master' of <a href=\"https://github.com/namjaejeon/linux-exfat-oot\">https://github.com/namjaejeon/linux-exfat-oot</a> …"}},{"before":"e11675bf36468a4ec097e7ecd775843e3c5c8c03","after":"873bce734f798ca6c48823b13eed295e6375f639","ref":"refs/heads/lineage-20","pushedAt":"2023-06-06T20:07:04.424Z","pushType":"push","commitsCount":3,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"ASoC: msm-pcm-q6-v2: Add dsp buf check\n\nCurrent logic copies user buf size of data\nfrom the avail dsp buf at a given offset.\nIf this offset returned from DSP in READ_DONE event\ngoes out of bounds or is corrupted, then it can lead to\nout of bounds DSP buffer access, resulting in memory fault.\nFix is to add check for this buf offset, if it is within\nthe buf size range.\n\nChange-Id: I7753cc6db394704dbb959477150141d42b836bef\nSigned-off-by: Soumya Managoli <quic_c_smanag@quicinc.com>","shortMessageHtmlLink":"ASoC: msm-pcm-q6-v2: Add dsp buf check"}},{"before":"51f779e15ab84be79f468b4b8a6a4faaf4e01197","after":"e11675bf36468a4ec097e7ecd775843e3c5c8c03","ref":"refs/heads/lineage-20","pushedAt":"2023-05-31T14:16:00.091Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"power: qpnp-smb2: Implement battery charging_enabled node\n\nChange-Id: Id08c169f0c507390eab070d1ae77bfb992b50b81","shortMessageHtmlLink":"power: qpnp-smb2: Implement battery charging_enabled node"}},{"before":"c9a8069339f2c0b63500150328c60bf616a47d2f","after":"51f779e15ab84be79f468b4b8a6a4faaf4e01197","ref":"refs/heads/lineage-20","pushedAt":"2023-05-22T18:22:40.388Z","pushType":"push","commitsCount":12,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"Revert \"ASoC: ops: Fix the bounds checking in snd_soc_put_volsw_sx and snd_soc_put_xr_sx\"\n\nThis is now properly fixed in 1d2326b3a1380844d7899dec4929ff37e3a41a1e.\n\nThis reverts commit 6d6a178f582a801b7e15bec1b61cc7816b35d9d0.\n\nChange-Id: I12e26bc35c4d7e0f87ff024a7073638c915fec4a","shortMessageHtmlLink":"Revert \"ASoC: ops: Fix the bounds checking in snd_soc_put_volsw_sx an…"}},{"before":"2f56f8521281af39d1280b6c293f1072fe4460ad","after":"c9a8069339f2c0b63500150328c60bf616a47d2f","ref":"refs/heads/lineage-20","pushedAt":"2023-05-03T17:24:03.000Z","pushType":"push","commitsCount":6,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"ALSA: control: use counting semaphore as write lock for ELEM_WRITE operation\n\nIn ALSA control interface, applications can execute two types of request\nfor value of members on each element; ELEM_READ and ELEM_WRITE. In ALSA\ncontrol core, these two requests are handled within read lock of a\ncounting semaphore, therefore several processes can run to execute these\ntwo requests at the same time. This has an issue because ELEM_WRITE\nrequests have an effect to change state of the target element. Concurrent\naccess should be controlled for each of ELEM_READ/ELEM_WRITE case.\n\nThis commit uses the counting semaphore as write lock for ELEM_WRITE\nrequests, while use it as read lock for ELEM_READ requests. The state of\na target element is maintained exclusively between ELEM_WRITE/ELEM_READ\noperations.\n\nThere's a concern. If the counting semaphore is acquired for read lock\nin implementations of 'struct snd_kcontrol.put()' in each driver, this\ncommit shall cause dead lock. As of v4.13-rc5, 'snd-mixer-oss.ko',\n'snd-emu10k1.ko' and 'snd-soc-sst-atom-hifi2-platform.ko' includes codes\nfor read locks, but these are not in a call graph from\n'struct snd_kcontrol.put(). Therefore, this commit is safe.\n\nIn current implementation, the same solution is applied for the other\noperations to element; e.g. ELEM_LOCK and ELEM_UNLOCK. There's another\ndiscussion about an overhead to maintain concurrent access to an element\nduring operating the other elements on the same card instance, because the\nlock primitive is originally implemented to maintain a list of elements on\nthe card instance. There's a substantial difference between\nper-element-list lock and per-element lock.\n\nHere, let me investigate another idea to add per-element lock to maintain\nthe concurrent accesses with inquiry/change requests to an element. It's\nnot so frequent for applications to operate members on elements, while\nadding a new lock primitive to structure increases memory footprint for\nall of element sets somehow. Experimentally, inquiry operation is more\nfrequent than change operation and usage of counting semaphore for the\ninquiry operation brings no blocking to the other inquiry operations. Thus\nthe overhead is not so critical for usual applications. For the above\nreasons, in this commit, the per-element lock is not introduced.\n\nSigned-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Alexander Grund <theflamefire89@gmail.com>\nSigned-off-by: Ulrich Hecht <uli+cip@fpond.eu>\nChange-Id: I2e14b47c0854ef14883a3e2c5628b3fa9f772a71","shortMessageHtmlLink":"ALSA: control: use counting semaphore as write lock for ELEM_WRITE op…"}},{"before":"4ed8c1699142ca91ca68d484f9f32e9b15beeb1a","after":"2f56f8521281af39d1280b6c293f1072fe4460ad","ref":"refs/heads/lineage-20","pushedAt":"2023-04-08T15:12:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"ANDROID: usb: f_accessory: Check buffer size when initialised via composite\n\nWhen communicating with accessory devices via USBFS, the initialisation\ncall-stack looks like:\n\n  ConfigFS > Gadget ConfigFS > UDC > Gadget ConfigFS > Composite\n\nEventually ending up in composite_dev_prepare() where memory for the\ndata buffer is allocated and initialised.  The default size used for the\nallocation is USB_COMP_EP0_BUFSIZ (4k).  When handling bulk transfers,\nacc_ctrlrequest() needs to be able to handle buffers up to\nBULK_BUFFER_SIZE (16k).  Instead of adding new generic attributes to\n'struct usb_request' to track the size of the allocated buffer, we can\nsimply split off the affected thread of execution to travel via a\nknowledgeable abstracted function acc_ctrlrequest_composite() where we\ncan complete the necessary specific checks.\n\nBug: 264029575\nSigned-off-by: Lee Jones <joneslee@google.com>\nChange-Id: Ia1280f85499621d3fa57f7262b4a2c80f4be7773\nSigned-off-by: Lee Jones <joneslee@google.com>","shortMessageHtmlLink":"ANDROID: usb: f_accessory: Check buffer size when initialised via com…"}},{"before":"3750c11cb318274e7c73cf6e3a2a657833e78d59","after":"4ed8c1699142ca91ca68d484f9f32e9b15beeb1a","ref":"refs/heads/lineage-20","pushedAt":"2023-03-19T15:28:41.291Z","pushType":"push","commitsCount":4,"pusher":{"login":"lineageos-gerrit","name":null,"path":"/lineageos-gerrit","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/24783018?s=80&v=4"},"commit":{"message":"ARM64/errata: Ensure vulnerable CPUs are actually flagged on `is_spectrev2_safe()`\n\nThis updates logic introduced by commit 6deba989 to ensure affected CPUs\nare properly flagged as affected by Spectre BHB, either by SMCCC or PSCI\nmethods of detection.\n\nSigned-off-by: Albert I <kras@raphielgang.org>\n[jjpprrrr: change !(A || B) to (!B && !A) to take advantage of short\ncircuit when B (PSCI) is the more likely case]\nSigned-off-by: Chenyang Zhong <zhongcy95@gmail.com>\nChange-Id: I1da47886c5e1f1331ece977813ae3ec832d13af3","shortMessageHtmlLink":"ARM64/errata: Ensure vulnerable CPUs are actually flagged on `is_spec…"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEQ_fH5wA","startCursor":null,"endCursor":null}},"title":"Activity · LineageOS/android_kernel_qcom_sdm845"}