{"push_id":847706948,"size":11,"distinct_size":11,"ref":"refs/heads/6.0","head":"b848ef6f8f3f6b6ec0a8100eca70ce7c8ada065c","before":"793c0e5b47abfa870ac9b09be686627b0f8da4d8","commits":[{"sha":"c8cb8d538f9303034e0273674313006666fb8da6","author":{"email":"ac4417675058ee801982d41e9fbe2446371bb54e@gmail.com","name":"Joe Schubert"},"message":"Revert \"SELinux: use deletion-safe iterator to free list\"\n\nThis reverts commit 0581f8da5483a183de311220d7645e6229b4a934.","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/c8cb8d538f9303034e0273674313006666fb8da6"},{"sha":"45a0360061ffbfb0fcb760b069675df76350ccef","author":{"email":"ac4417675058ee801982d41e9fbe2446371bb54e@gmail.com","name":"Joe Schubert"},"message":"Revert \"SELinux: per-command whitelisting of ioctls\"\n\nThis reverts commit 8eadf321fadd596a3001b19fd2d89e5f98169d9a.\n\nConflicts:\n\tsecurity/selinux/ss/avtab.c","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/45a0360061ffbfb0fcb760b069675df76350ccef"},{"sha":"e69d5d51b148c5e9fc7128f481ffa6ad477b6847","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"selinux: remove unnecessary pointer reassignment\n\n(cherry pick from commit 83d4a806ae46397f606de7376b831524bd3a21e5)\n\nCommit f01e1af445fa (\"selinux: don't pass in NULL avd to avc_has_perm_noaudit\")\nmade this pointer reassignment unnecessary. Avd should continue to reference\nthe stack-based copy.\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Stephen Smalley <sds@tycho.nsa.gov>\n[PM: tweaked subject line]\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nBug: 22846070\nChange-Id: I4aef4b95820e813c370525310e37f5da22d25efc","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/e69d5d51b148c5e9fc7128f481ffa6ad477b6847"},{"sha":"87090eea74f8155f2612fda58e8ac6dff587f6c2","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"selinux: extended permissions for ioctls\n\n(cherry picked from commit fa1aa143ac4a682c7f5fd52a3cf05f5a6fe44a0a)\n\nAdd extended permissions logic to selinux. Extended permissions\nprovides additional permissions in 256 bit increments. Extend the\ngeneric ioctl permission check to use the extended permissions for\nper-command filtering. Source/target/class sets including the ioctl\npermission may additionally include a set of commands. Example:\n\nallowxperm <source> <target>:<class> ioctl unpriv_app_socket_cmds\nauditallowxperm <source> <target>:<class> ioctl priv_gpu_cmds\n\nWhere unpriv_app_socket_cmds and priv_gpu_cmds are macros\nrepresenting commonly granted sets of ioctl commands.\n\nWhen ioctl commands are omitted only the permissions are checked.\nThis feature is intended to provide finer granularity for the ioctl\npermission that may be too imprecise. For example, the same driver\nmay use ioctls to provide important and benign functionality such as\ndriver version or socket type as well as dangerous capabilities such\nas debugging features, read/write/execute to physical memory or\naccess to sensitive data. Per-command filtering provides a mechanism\nto reduce the attack surface of the kernel, and limit applications\nto the subset of commands required.\n\nThe format of the policy binary has been modified to include ioctl\ncommands, and the policy version number has been incremented to\nPOLICYDB_VERSION_XPERMS_IOCTL=30 to account for the format\nchange.\n\nThe extended permissions logic is deliberately generic to allow\ncomponents to be reused e.g. netlink filters\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Nick Kralevich <nnk@google.com>\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nBug: 22846070\nChange-Id: I1573d6b2d0ced27e82b6447318aa5b3065021a5b","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/87090eea74f8155f2612fda58e8ac6dff587f6c2"},{"sha":"4e379e7110618434afc511342a954f368f296097","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"selinux: Android kernel compatibility with M userspace\n\nNOT intended for new Android devices - this commit is unnecessary\nfor a target device that does not have a previous M variant.\n\nDO NOT upstream. Android only.\n\nMotivation:\n\nThis commit mitigates a mismatch between selinux kernel and\nselinux userspace. The selinux ioctl white-listing binary policy\nformat that was accepted into Android M differs slightly from what\nwas later accepted into the upstream kernel. This leaves Android\nmaster branch kernels incompatible with Android M releases. This\npatch restores backwards compatibility. This is important because:\n\n1. kernels may be updated on a different cycle than the rest of the\n   OS e.g. security patching.\n2. Android M bringup may still be ongoing for some devices. The\n   same kernel should work for both M and master.\n\nBackwards compatibility is achieved by checking for an Android M\npolicy characteristic during initial policy read and converting to\nupstream policy format. The inverse conversion is done for policy\nwrite as required for CTS testing.\n\nBug: 22846070\nChange-Id: I2f1ee2eee402f37cf3c9df9f9e03c1b9ddec1929\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/4e379e7110618434afc511342a954f368f296097"},{"sha":"62341f12992975cb48e6966bcc0e1eac506c63e2","author":{"email":"51b0aed1a48556115b152d4619664105ddea9243@lge.com","name":"Kyungsik Lee"},"message":"decompressor: add LZ4 decompressor module\n\nAdd support for LZ4 decompression in the Linux Kernel.  LZ4 Decompression\nAPIs for kernel are based on LZ4 implementation by Yann Collet.\n\nBenchmark Results(PATCH v3)\nCompiler: Linaro ARM gcc 4.6.2\n\n1. ARMv7, 1.5GHz based board\n   Kernel: linux 3.4\n   Uncompressed Kernel Size: 14MB\n        Compressed Size  Decompression Speed\n   LZO  6.7MB            20.1MB/s, 25.2MB/s(UA)\n   LZ4  7.3MB            29.1MB/s, 45.6MB/s(UA)\n\n2. ARMv7, 1.7GHz based board\n   Kernel: linux 3.7\n   Uncompressed Kernel Size: 14MB\n        Compressed Size  Decompression Speed\n   LZO  6.0MB            34.1MB/s, 52.2MB/s(UA)\n   LZ4  6.5MB            86.7MB/s\n- UA: Unaligned memory Access support\n- Latest patch set for LZO applied\n\nThis patch set is for adding support for LZ4-compressed Kernel.  LZ4 is a\nvery fast lossless compression algorithm and it also features an extremely\nfast decoder [1].\n\nBut we have five of decompressors already and one question which does\narise, however, is that of where do we stop adding new ones?  This issue\nhad been discussed and came to the conclusion [2].\n\nRussell King said that we should have:\n\n - one decompressor which is the fastest\n - one decompressor for the highest compression ratio\n - one popular decompressor (eg conventional gzip)\n\nIf we have a replacement one for one of these, then it should do exactly\nthat: replace it.\n\nThe benchmark shows that an 8% increase in image size vs a 66% increase\nin decompression speed compared to LZO(which has been known as the\nfastest decompressor in the Kernel).  Therefore the \"fast but may not be\nsmall\" compression title has clearly been taken by LZ4 [3].\n\n[1] http://code.google.com/p/lz4/\n[2] http://thread.gmane.org/gmane.linux.kbuild.devel/9157\n[3] http://thread.gmane.org/gmane.linux.kbuild.devel/9347\n\nLZ4 homepage: http://fastcompression.blogspot.com/p/lz4.html\nLZ4 source repository: http://code.google.com/p/lz4/\n\nSigned-off-by: Kyungsik Lee <kyungsik.lee@lge.com>\nSigned-off-by: Yann Collet <yann.collet.73@gmail.com>\nCc: \"H. Peter Anvin\" <hpa@zytor.com>\nCc: Ingo Molnar <mingo@elte.hu>\nCc: Thomas Gleixner <tglx@linutronix.de>\nCc: Russell King <rmk@arm.linux.org.uk>\nCc: Borislav Petkov <bp@alien8.de>\nCc: Florian Fainelli <florian@openwrt.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/62341f12992975cb48e6966bcc0e1eac506c63e2"},{"sha":"8171bbeefc95c508cf860f73820279b85f635d5c","author":{"email":"d9c384f6b6e27869ff3b53bd225c29030ac4166b@gmail.com","name":"Sergey Senozhatsky"},"message":"lz4: fix compression/decompression signedness mismatch\n\nLZ4 compression and decompression functions require different in\nsignedness input/output parameters: unsigned char for compression and\nsigned char for decompression.\n\nChange decompression API to require \"(const) unsigned char *\".\n\nSigned-off-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>\nCc: Kyungsik Lee <kyungsik.lee@lge.com>\nCc: Geert Uytterhoeven <geert@linux-m68k.org>\nCc: Yann Collet <yann.collet.73@gmail.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/8171bbeefc95c508cf860f73820279b85f635d5c"},{"sha":"e3e1010cc68440e6304a82aa75b38e95babf7d9d","author":{"email":"81addaf2b3de238efaf0d9cab41b694990e42b0b@wiktel.com","name":"Richard Laager"},"message":"lib/lz4: correct the LZ4 license\n\n(cherry pick from commit ee8a99bdb47f32327bdfaffe35b900ca7161ba4e)\n\nThe LZ4 code is listed as using the \"BSD 2-Clause License\".\n\nSigned-off-by: Richard Laager <rlaager@wiktel.com>\nAcked-by: Kyungsik Lee <kyungsik.lee@lge.com>\nCc: Chanho Min <chanho.min@lge.com>\nCc: Richard Yao <ryao@gentoo.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\n[ The 2-clause BSD can be just converted into GPL, but that's rude and\n  pointless, so don't do it   - Linus ]\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nBug: 24810447\nChange-Id: I332c38794d84d261092ff61a8e4d5d98b4666db8\n\nConflicts:\n\tlib/lz4/lz4_compress.c\n\tlib/lz4/lz4hc_compress.c","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/e3e1010cc68440e6304a82aa75b38e95babf7d9d"},{"sha":"18c6df51cb2ab7c6c71f29e457cc7940cd0133a7","author":{"email":"4645f7897fd33786a2ee1264d590b3c400559d85@linuxfoundation.org","name":"Greg Kroah-Hartman"},"message":"lz4: ensure length does not wrap\n\n(cherry pick from commit 206204a1162b995e2185275167b22468c00d6b36)\n\nGiven some pathologically compressed data, lz4 could possibly decide to\nwrap a few internal variables, causing unknown things to happen.  Catch\nthis before the wrapping happens and abort the decompression.\n\nReported-by: \"Don A. Bailey\" <donb@securitymouse.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nBug: 24810447\nChange-Id: Ie008fb8b69f1a1bbf40900fe2d49fff41e7d300b","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/18c6df51cb2ab7c6c71f29e457cc7940cd0133a7"},{"sha":"f5b2e42d48a4754d923cc388f35eb732f0f3ddad","author":{"email":"4645f7897fd33786a2ee1264d590b3c400559d85@linuxfoundation.org","name":"Greg Kroah-Hartman"},"message":"lz4: fix another possible overrun\n\n(cherry pick from commit 4148c1f67abf823099b2d7db6851e4aea407f5ee)\n\nThere is one other possible overrun in the lz4 code as implemented by\nLinux at this point in time (which differs from the upstream lz4\ncodebase, but will get synced at in a future kernel release.)  As\npointed out by Don, we also need to check the overflow in the data\nitself.\n\nWhile we are at it, replace the odd error return value with just a\n\"simple\" -1 value as the return value is never used for anything other\nthan a basic \"did this work or not\" check.\n\nReported-by: \"Don A. Bailey\" <donb@securitymouse.com>\nReported-by: Willy Tarreau <w@1wt.eu>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nBug: 24810447\nChange-Id: If06c4719c0b6db3e3e9b693b50fa2218ed1f5078","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/f5b2e42d48a4754d923cc388f35eb732f0f3ddad"},{"sha":"b848ef6f8f3f6b6ec0a8100eca70ce7c8ada065c","author":{"email":"d10d94ce41612a5f13ee0adbc05024eaad7da55f@gmail.com","name":"APOPHIS9283"},"message":"Enable LZ4","distinct":true,"url":"https://api.github.com/repos/team-vortex/vortex-mm/commits/b848ef6f8f3f6b6ec0a8100eca70ce7c8ada065c"}]}