{"push_id":659301624,"size":11,"distinct_size":11,"ref":"refs/heads/lollipop-caf","head":"9d0c34a05511339db8febcd8f4d3e9fb1f79a451","before":"5fa595e91232913bcd90fcdd35b2c94b83e63a26","commits":[{"sha":"54ec76ddceb9bf0c7f2f3c9d7c6e2095649a016e","author":{"email":"6c81a7e275706687a5edcbeeec7ded4a5dcad6c5@peak-system.com","name":"Stephane Grosjean"},"message":"can: peak_pci: prevent use after free at netdev removal\n\ncommit 0b5a958cf4df3a5cd578b861471e62138f55c85e upstream.\n\nAs remarked by Christopher R. Baker in his post at\n\nhttp://marc.info/?l=linux-can&m=139707295706465&w=2\n\nthere's a possibility for an use after free condition at device removal.\n\nThis simplified patch introduces an additional variable to prevent the issue.\nThanks for catching this.\n\nReported-by: Christopher R. Baker <cbaker@rec.ri.cmu.edu>\nSigned-off-by: Stephane Grosjean <s.grosjean@peak-system.com>\nSigned-off-by: Marc Kleine-Budde <mkl@pengutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/54ec76ddceb9bf0c7f2f3c9d7c6e2095649a016e"},{"sha":"be7afde0456277a19dff9b06ecd0f84439d98f80","author":{"email":"0bda9a89324ffe2d19adec61a9f1cd9f8c8e45f0@tiscali.nl","name":"Paul Bolle"},"message":"staging: tidspbridge: check for CONFIG_SND_OMAP_SOC_MCBSP\n\ncommit d3921a03a89acb1b9ca599590c0131c89f8737d8 upstream.\n\nCommit d0f47ff17f29 (\"ASoC: OMAP: Build config cleanup for McBSP\")\nremoved the Kconfig symbol OMAP_MCBSP. It left two checks for\nCONFIG_OMAP_MCBSP untouched.\n\nConvert these to checks for CONFIG_SND_OMAP_SOC_MCBSP. That must be\ncorrect, since that re-enables calls to functions that are all found in\nsound/soc/omap/mcbsp.c. And that file is built only if\nCONFIG_SND_OMAP_SOC_MCBSP is defined.\n\nFixes: d0f47ff17f29 (\"ASoC: OMAP: Build config cleanup for McBSP\")\nSigned-off-by: Paul Bolle <pebolle@tiscali.nl>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/be7afde0456277a19dff9b06ecd0f84439d98f80"},{"sha":"d6e64c80e39588e6c857ac1e9248cd68e521c552","author":{"email":"ff341aa343d564f9e53e9dcb6996be8c04859a66@oracle.com","name":"Dan Carpenter"},"message":"applicom: dereferencing NULL on error path\n\ncommit 8bab797c6e5724a43b7666ad70860712365cdb71 upstream.\n\nThis is a static checker fix.  The \"dev\" variable is always NULL after\nthe while statement so we would be dereferencing a NULL pointer here.\n\nFixes: 819a3eba4233 ('[PATCH] applicom: fix error handling')\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/d6e64c80e39588e6c857ac1e9248cd68e521c552"},{"sha":"5ae63b66efb5fbc81e69520ccb21f56d64ddd1db","author":{"email":"3d137cbcc79a0a89c72e4e9b642446ed2999ace4@amd.com","name":"Huang Rui"},"message":"usb: usbtest: fix unlink write error with pattern 1\n\ncommit e4d58f5dcb7d7be45df8def31881ebfae99c75da upstream.\n\nTEST 12 and TEST 24 unlinks the URB write request for N times. When\nhost and gadget both initialize pattern 1 (mod 63) data series to\ntransfer, the gadget side will complain the wrong data which is not\nexpected.  Because in host side, usbtest doesn't fill the data buffer\nas mod 63 and this patch fixed it.\n\n[20285.488974] dwc3 dwc3.0.auto: ep1out-bulk: Transfer Not Ready\n[20285.489181] dwc3 dwc3.0.auto: ep1out-bulk: reason Transfer Not Active\n[20285.489423] dwc3 dwc3.0.auto: ep1out-bulk: req ffff8800aa6cb480 dma aeb50800 length 512 last\n[20285.489727] dwc3 dwc3.0.auto: ep1out-bulk: cmd 'Start Transfer' params 00000000 a9eaf000 00000000\n[20285.490055] dwc3 dwc3.0.auto: Command Complete --> 0\n[20285.490281] dwc3 dwc3.0.auto: ep1out-bulk: Transfer Not Ready\n[20285.490492] dwc3 dwc3.0.auto: ep1out-bulk: reason Transfer Active\n[20285.490713] dwc3 dwc3.0.auto: ep1out-bulk: endpoint busy\n[20285.490909] dwc3 dwc3.0.auto: ep1out-bulk: Transfer Complete\n[20285.491117] dwc3 dwc3.0.auto: request ffff8800aa6cb480 from ep1out-bulk completed 512/512 ===> 0\n[20285.491431] zero gadget: bad OUT byte, buf[1] = 0\n[20285.491605] dwc3 dwc3.0.auto: ep1out-bulk: cmd 'Set Stall' params 00000000 00000000 00000000\n[20285.491915] dwc3 dwc3.0.auto: Command Complete --> 0\n[20285.492099] dwc3 dwc3.0.auto: queing request ffff8800aa6cb480 to ep1out-bulk length 512\n[20285.492387] dwc3 dwc3.0.auto: ep1out-bulk: Transfer Not Ready\n[20285.492595] dwc3 dwc3.0.auto: ep1out-bulk: reason Transfer Not Active\n[20285.492830] dwc3 dwc3.0.auto: ep1out-bulk: req ffff8800aa6cb480 dma aeb51000 length 512 last\n[20285.493135] dwc3 dwc3.0.auto: ep1out-bulk: cmd 'Start Transfer' params 00000000 a9eaf000 00000000\n[20285.493465] dwc3 dwc3.0.auto: Command Complete --> 0\n\nSigned-off-by: Huang Rui <ray.huang@amd.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/5ae63b66efb5fbc81e69520ccb21f56d64ddd1db"},{"sha":"4f87a48e3a14b0c42a0d488d6a301bf63c116e35","author":{"email":"75ea6bb7bfc1186f92d26164de5f9268c9a45b59@rowland.harvard.edu","name":"Alan Stern"},"message":"USB: usbtest: add a timeout for scatter-gather tests\n\ncommit 32b36eeae6a859670d2939a7d6136cb5e9ed64f8 upstream.\n\nIn usbtest, tests 5 - 8 use the scatter-gather library in usbcore\nwithout any sort of timeout.  If there's a problem in the gadget or\nhost controller being tested, the test can hang.\n\nThis patch adds a 10-second timeout to the tests, so that they will\nfail gracefully with an ETIMEDOUT error instead of hanging.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: Huang Rui <ray.huang@amd.com>\nTested-by: Huang Rui <ray.huang@amd.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/4f87a48e3a14b0c42a0d488d6a301bf63c116e35"},{"sha":"aa130e95f0cf478e4be785dc0e351a1a6a268db4","author":{"email":"0bda9a89324ffe2d19adec61a9f1cd9f8c8e45f0@tiscali.nl","name":"Paul Bolle"},"message":"usb: gadget: rename CONFIG_USB_GADGET_PXA25X\n\ncommit d30f2065d6da377cc76771aca5a9850cfca8723b upstream.\n\nCommit 193ab2a60700 (\"usb: gadget: allow multiple gadgets to be built\")\nbasically renamed the Kconfig symbol USB_GADGET_PXA25X to USB_PXA25X. It\ndid not rename the related macros in use at that time. Commit\nc0a39151a405 (\"ARM: pxa: fix inconsistent CONFIG_USB_PXA27X\") did so for\nall but one macro. Rename that last macro too now.\n\nFixes: 193ab2a60700 (\"usb: gadget: allow multiple gadgets to be built\")\nSigned-off-by: Paul Bolle <pebolle@tiscali.nl>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/aa130e95f0cf478e4be785dc0e351a1a6a268db4"},{"sha":"21db56d7df1d0cf62d0ea05576e2decc1655304b","author":{"email":"75ea6bb7bfc1186f92d26164de5f9268c9a45b59@rowland.harvard.edu","name":"Alan Stern"},"message":"USB: EHCI: avoid BIOS handover on the HASEE E200\n\ncommit b0a50e92bda3c4aeb8017d4e6c6e92146ebd5c9b upstream.\n\nLeandro Liptak reports that his HASEE E200 computer hangs when we ask\nthe BIOS to hand over control of the EHCI host controller.  This\ndefinitely sounds like a bug in the BIOS, but at the moment there is\nno way to fix it.\n\nThis patch works around the problem by avoiding the handoff whenever\nthe motherboard and BIOS version match those of Leandro's computer.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: Leandro Liptak <leandroliptak@gmail.com>\nTested-by: Leandro Liptak <leandroliptak@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/21db56d7df1d0cf62d0ea05576e2decc1655304b"},{"sha":"dc3eeced7ffb1ccf353e2e9131de1066a4fb0ecd","author":{"email":"6a430eed381e126d51a8cce8db662f765ce314bc@gmail.com","name":"Johan Hovold"},"message":"USB: option: fix runtime PM handling\n\ncommit acf47d4f9c39b1cba467aa9442fc2efe0b1da741 upstream.\n\nFix potential I/O while runtime suspended due to missing PM operations\nin send_setup.\n\nFixes: 383cedc3bb43 (\"USB: serial: full autosuspend support for the\noption driver\")\n\nSigned-off-by: Johan Hovold <jhovold@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/dc3eeced7ffb1ccf353e2e9131de1066a4fb0ecd"},{"sha":"41b875c5282178f8ff09ff9e365ba9bfaf600a8b","author":{"email":"e7984595ec0368ff920a7b3521dc7093683f6f26@intel.com","name":"Tony Luck"},"message":"mm/memory-failure.c-failure: send right signal code to correct thread\n\ncommit a70ffcac741d31a406c1d2b832ae43d658e7e1cf upstream.\n\nWhen a thread in a multi-threaded application hits a machine check because\nof an uncorrectable error in memory - we want to send the SIGBUS with\nsi.si_code = BUS_MCEERR_AR to that thread.  Currently we fail to do that\nif the active thread is not the primary thread in the process.\ncollect_procs() just finds primary threads and this test:\n\n\tif ((flags & MF_ACTION_REQUIRED) && t == current) {\n\nwill see that the thread we found isn't the current thread and so send a\nsi.si_code = BUS_MCEERR_AO to the primary (and nothing to the active\nthread at this time).\n\nWe can fix this by checking whether \"current\" shares the same mm with the\nprocess that collect_procs() said owned the page.  If so, we send the\nSIGBUS to current (with code BUS_MCEERR_AR).\n\nSigned-off-by: Tony Luck <tony.luck@intel.com>\nSigned-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>\nReported-by: Otto Bruggeman <otto.g.bruggeman@intel.com>\nCc: Andi Kleen <andi@firstfloor.org>\nCc: Borislav Petkov <bp@suse.de>\nCc: Chen Gong <gong.chen@linux.jf.intel.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/41b875c5282178f8ff09ff9e365ba9bfaf600a8b"},{"sha":"be7140ece3001b67a16932285d63cbf959b437d9","author":{"email":"e7984595ec0368ff920a7b3521dc7093683f6f26@intel.com","name":"Tony Luck"},"message":"mm/memory-failure.c: don't let collect_procs() skip over processes for MF_ACTION_REQUIRED\n\ncommit 74614de17db6fb472370c426d4f934d8d616edf2 upstream.\n\nWhen Linux sees an \"action optional\" machine check (where h/w has reported\nan error that is not in the current execution path) we generally do not\nwant to signal a process, since most processes do not have a SIGBUS\nhandler - we'd just prematurely terminate the process for a problem that\nthey might never actually see.\n\ntask_early_kill() decides whether to consider a process - and it checks\nwhether this specific process has been marked for early signals with\n\"prctl\", or if the system administrator has requested early signals for\nall processes using /proc/sys/vm/memory_failure_early_kill.\n\nBut for MF_ACTION_REQUIRED case we must not defer.  The error is in the\nexecution path of the current thread so we must send the SIGBUS\nimmediatley.\n\nFix by passing a flag argument through collect_procs*() to\ntask_early_kill() so it knows whether we can defer or must take action.\n\nSigned-off-by: Tony Luck <tony.luck@intel.com>\nSigned-off-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>\nCc: Andi Kleen <andi@firstfloor.org>\nCc: Borislav Petkov <bp@suse.de>\nCc: Chen Gong <gong.chen@linux.jf.intel.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/be7140ece3001b67a16932285d63cbf959b437d9"},{"sha":"9d0c34a05511339db8febcd8f4d3e9fb1f79a451","author":{"email":"d3abdf3e2800e6cb849f11b81e6eb50b34d96431@google.com","name":"Hugh Dickins"},"message":"mm: fix sleeping function warning from __put_anon_vma\n\ncommit 7f39dda9d86fb4f4f17af0de170decf125726f8c upstream.\n\nTrinity reports BUG:\n\n  sleeping function called from invalid context at kernel/locking/rwsem.c:47\n  in_atomic(): 0, irqs_disabled(): 0, pid: 5787, name: trinity-c27\n\n__might_sleep < down_write < __put_anon_vma < page_get_anon_vma <\nmigrate_pages < compact_zone < compact_zone_order < try_to_compact_pages ..\n\nRight, since conversion to mutex then rwsem, we should not put_anon_vma()\nfrom inside an rcu_read_lock()ed section: fix the two places that did so.\nAnd add might_sleep() to anon_vma_free(), as suggested by Peter Zijlstra.\n\nFixes: 88c22088bf23 (\"mm: optimize page_lock_anon_vma() fast-path\")\nReported-by: Dave Jones <davej@redhat.com>\nSigned-off-by: Hugh Dickins <hughd@google.com>\nCc: Peter Zijlstra <peterz@infradead.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n\nConflicts:\n\tmm/rmap.c","distinct":true,"url":"https://api.github.com/repos/smac0628/android_kernel_htc_msm8974/commits/9d0c34a05511339db8febcd8f4d3e9fb1f79a451"}]}