{"push_id":855142556,"size":14,"distinct_size":14,"ref":"refs/heads/bullhead","head":"a4bb124b5ce92d02a487d1cfecb0592876653148","before":"f8454c114ce2513cc1d6eb62b58026793d6fd790","commits":[{"sha":"cf3b19e543ae4cebf0967bf1fc97dbaea9fe60fe","author":{"email":"dcc2b772defa18622a340d324a717fd6b8ee2807@samsung.com","name":"Andrzej Hajda"},"message":"[media] v4l2-compat-ioctl32: fix alignment for ARM64\n\nAlignment/padding rules on AMD64 and ARM64 differs. To allow properly match\ncompatible ioctls on ARM64 kernels without breaking AMD64 some fields\nshould be aligned using compat_s64 type and in one case struct should be\nunpacked.\n\nSigned-off-by: Andrzej Hajda <a.hajda@samsung.com>\nCc: <stable@vger.kernel.org>      # for v3.10 and up\n[hans.verkuil@cisco.com: use compat_u64 instead of compat_s64 in v4l2_input32]\nSigned-off-by: Hans Verkuil <hans.verkuil@cisco.com>\n\nSigned-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>\nSigned-off-by: HouHongxun <houhongxun@gmail.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/cf3b19e543ae4cebf0967bf1fc97dbaea9fe60fe"},{"sha":"c382b968966917d6b2b7906d2e216d2ee2105aeb","author":{"email":"586dce2b5b41882e50b9a0eefaf3387b8b8c8cc6@linux.vnet.ibm.com","name":"Hon Ching \\(Vicky\\) Lo"},"message":"vTPM: fix memory allocation flag for rtce buffer at kernel boot\n\nAt ibm vtpm initialzation, tpm_ibmvtpm_probe() registers its interrupt\nhandler, ibmvtpm_interrupt, which calls ibmvtpm_crq_process to allocate\nmemory for rtce buffer.  The current code uses 'GFP_KERNEL' as the\ntype of kernel memory allocation, which resulted a warning at\nkernel/lockdep.c.  This patch uses 'GFP_ATOMIC' instead so that the\nallocation is high-priority and does not sleep.\n\nCc: stable@kernel.org\nSigned-off-by: Hon Ching(Vicky) Lo <honclo@linux.vnet.ibm.com>\nSigned-off-by: Peter Huewe <peterhuewe@gmx.de>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/c382b968966917d6b2b7906d2e216d2ee2105aeb"},{"sha":"60ebbe07e991020443f226f85899ba5fa33dbd0d","author":{"email":"f67ebac65f82621ab64bb70f51fe3c9b506304a9@mediatek.com","name":"Tiffany Lin"},"message":"[media] media: vb2 dma-contig: Fully cache synchronise buffers in prepare and finish\n\nIn videobuf2 dma-contig memory type the prepare and finish ops, instead of\npassing the number of entries in the original scatterlist as the \"nents\"\nparameter to dma_sync_sg_for_device() and dma_sync_sg_for_cpu(), the value\nreturned by dma_map_sg() was used. Albeit this has been suggested in\ncomments of some implementations (which have since been corrected), this\nis wrong.\n\nFixes: 199d101efdba (\"v4l: vb2-dma-contig: add prepare/finish to dma-contig allocator\")\n\nCc: stable@vger.kernel.org # for v3.8 and up\nSigned-off-by: Tiffany Lin <tiffany.lin@mediatek.com>\nSigned-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/60ebbe07e991020443f226f85899ba5fa33dbd0d"},{"sha":"dc3338c14fe7748f1213020add55c1acc4f41117","author":{"email":"ff359ca7f9aedbb05cd6aa3d17e7b3b3ad3b25c9@google.com","name":"Ruchi Kandoi"},"message":"uid_cputime: Check for the range while removing range of UIDs.\n\nChecking if the uid_entry->uid matches the uid intended to be removed will\nprevent deleting unwanted uid_entry.\nType cast the key for the hashtable to the same size, as when they were\ninserted. This will make sure that we can find the uid_entry we want.\n\nBug: 25195548\nChange-Id: I567942123cfb20e4b61ad624da19ec4cc84642c1\nSigned-off: Ruchi kandoi <kandoiruchi@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/dc3338c14fe7748f1213020add55c1acc4f41117"},{"sha":"3e27aa0ca09918e1289068be9e4a194925695586","author":{"email":"10a8c465cefc9bdd6c925e26964d23c90f1141cc@google.com","name":"Dmitry Torokhov"},"message":"net: fix iterating over hashtable in tcp_nuke_addr()\n\nThe actual size of the tcp hashinfo table is tcp_hashinfo.ehash_mask + 1\nso we need to adjust the loop accordingly to get the sockets hashed into\nthe last bucket.\n\nChange-Id: I796b3c7b4a1a7fa35fba9e5192a4a403eb6e17de\nSigned-off-by: Dmitry Torokhov <dtor@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/3e27aa0ca09918e1289068be9e4a194925695586"},{"sha":"e92738055139dd87314203a2ff98aad2eda8dc0d","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"Revert \"SELinux: ss: Fix policy write for ioctl operations\"\n\nThis reverts commit 8cdfb356b51e29494ca0b9e4e86727d6f841a52d.\n\nBug: 22846070\nChange-Id: I4dd2fd5a1d7fb3ae8f74a5decdf8fb9d5cd43def\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/e92738055139dd87314203a2ff98aad2eda8dc0d"},{"sha":"e6ffbd28bed4f9d53b5e7aeb638ec62d84d51939","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"Revert \"SELinux: use deletion-safe iterator to free list\"\n\nThis reverts commit 98a4d82a78914c2496989d669ecae04dedcf361f.\n\nBug: 22846070\nChange-Id: Ic047824591e8d94f937c052846ab387864c04fd7\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/e6ffbd28bed4f9d53b5e7aeb638ec62d84d51939"},{"sha":"95039c42ce4f70b275dc7c5fc0d62c83d9607fff","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"Revert \"SELinux: per-command whitelisting of ioctls\"\n\nThis reverts commit 8daca972e410f42a4fc1fe2de804c50013b24a28.\n\nBug: 22846070\nChange-Id: Ia2d1e2b0f46ccb0328626286216e38378650505b\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/95039c42ce4f70b275dc7c5fc0d62c83d9607fff"},{"sha":"46919ab4e159016c4c9e137e3c8dd0083aff04b8","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"Revert \"security: lsm_audit: add ioctl specific auditing\"\n\nThis reverts commit c8c3cd48e44fe12a41cd20e46d36fcfe5a759fd7.\n\nBug: 22846070\nChange-Id: Ibf79b4c76f22f0af2d39e377b551151837a782cd\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/46919ab4e159016c4c9e137e3c8dd0083aff04b8"},{"sha":"0cf5bd673cdbe9bb1b447864ec545685fe192abc","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"selinux: remove unnecessary pointer reassignment\n\n(cherry pick from commit 83d4a806ae46397f606de7376b831524bd3a21e5)\n\nCommit f01e1af445fa (\"selinux: don't pass in NULL avd to avc_has_perm_noaudit\")\nmade this pointer reassignment unnecessary. Avd should continue to reference\nthe stack-based copy.\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Stephen Smalley <sds@tycho.nsa.gov>\n[PM: tweaked subject line]\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nBug: 22846070\nChange-Id: I4aef4b95820e813c370525310e37f5da22d25efc","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/0cf5bd673cdbe9bb1b447864ec545685fe192abc"},{"sha":"a40a99f55ffcaf71a2fe5432c23def4c12c803e7","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"security: add ioctl specific auditing to lsm_audit\n\n(cherry pick from commit 671a2781ff01abf4fdc8904881fc3abd3a8279af)\n\nAdd information about ioctl calls to the LSM audit data. Log the\nfile path and command number.\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Nick Kralevich <nnk@google.com>\n[PM: subject line tweak]\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nBug: 22846070\nChange-Id: Iccba24f0f53e93595aaf16b2d3b04c02dac5f7a1","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/a40a99f55ffcaf71a2fe5432c23def4c12c803e7"},{"sha":"b16129ef43f142f4e1f577d0ba9b212fda8e1a5d","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"selinux: extended permissions for ioctls\n\n(cherry picked from commit fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a)\n\nAdd extended permissions logic to selinux. Extended permissions\nprovides additional permissions in 256 bit increments. Extend the\ngeneric ioctl permission check to use the extended permissions for\nper-command filtering. Source/target/class sets including the ioctl\npermission may additionally include a set of commands. Example:\n\nallowxperm <source> <target>:<class> ioctl unpriv_app_socket_cmds\nauditallowxperm <source> <target>:<class> ioctl priv_gpu_cmds\n\nWhere unpriv_app_socket_cmds and priv_gpu_cmds are macros\nrepresenting commonly granted sets of ioctl commands.\n\nWhen ioctl commands are omitted only the permissions are checked.\nThis feature is intended to provide finer granularity for the ioctl\npermission that may be too imprecise. For example, the same driver\nmay use ioctls to provide important and benign functionality such as\ndriver version or socket type as well as dangerous capabilities such\nas debugging features, read/write/execute to physical memory or\naccess to sensitive data. Per-command filtering provides a mechanism\nto reduce the attack surface of the kernel, and limit applications\nto the subset of commands required.\n\nThe format of the policy binary has been modified to include ioctl\ncommands, and the policy version number has been incremented to\nPOLICYDB_VERSION_XPERMS_IOCTL=30 to account for the format\nchange.\n\nThe extended permissions logic is deliberately generic to allow\ncomponents to be reused e.g. netlink filters\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Nick Kralevich <nnk@google.com>\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nBug: 22846070\nChange-Id: I1573d6b2d0ced27e82b6447318aa5b3065021a5b","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/b16129ef43f142f4e1f577d0ba9b212fda8e1a5d"},{"sha":"f450e13b26769d884eba1cbe5fced73d8ec1c6de","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"selinux: Android kernel compatibility with M userspace\n\nNOT intended for new Android devices - this commit is unnecessary\nfor a target device that does not have a previous M variant.\n\nDO NOT upstream. Android only.\n\nMotivation:\n\nThis commit mitigates a mismatch between selinux kernel and\nselinux userspace. The selinux ioctl white-listing binary policy\nformat that was accepted into Android M differs slightly from what\nwas later accepted into the upstream kernel. This leaves Android\nmaster branch kernels incompatible with Android M releases. This\npatch restores backwards compatibility. This is important because:\n\n1. kernels may be updated on a different cycle than the rest of the\n   OS e.g. security patching.\n2. Android M bringup may still be ongoing for some devices. The\n   same kernel should work for both M and master.\n\nBackwards compatibility is achieved by checking for an Android M\npolicy characteristic during initial policy read and converting to\nupstream policy format. The inverse conversion is done for policy\nwrite as required for CTS testing.\n\nBug: 22846070\nChange-Id: I2f1ee2eee402f37cf3c9df9f9e03c1b9ddec1929\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/f450e13b26769d884eba1cbe5fced73d8ec1c6de"},{"sha":"a4bb124b5ce92d02a487d1cfecb0592876653148","author":{"email":"a4a9764687115057dfb6081f6c434bf20156ee3b@google.com","name":"Jin Qian"},"message":"uid_cputime: fix cputime overflow\n\nConverting cputime_t to usec caused overflow when the value is greater\nthan 1 hour. Use msec and convert to unsigned long long to support bigger\nrange.\n\nBug: 22461683\n\nChange-Id: I853fe3e8e7dbf0d3e2cc5c6f9688a5a6e1f1fb3e\nSigned-off-by: Jin Qian <jinqian@google.com>","distinct":true,"url":"https://api.github.com/repos/hohoxu/n5kernel/commits/a4bb124b5ce92d02a487d1cfecb0592876653148"}]}