{"push_id":599857592,"size":4,"distinct_size":4,"ref":"refs/heads/atr-aosp-cm11","head":"498cb242f14c0eb48c48785bb27df6db46a11bae","before":"434052d19b5508278e50bea7da748be95c6ffbb8","commits":[{"sha":"339b2cb7d4876f4acf7389c38fc85cc5e35801ee","author":{"email":"d2f0bc2f6cbabd319d2e18d1e6732f98155b1100@gmx.at","name":"Christian Neumüller"},"message":"bcmdhd wireless: Fix off by one in initialization.\n\nAn sprintf in dhd_write_macaddr wrote a rogue null byte after the buffer.\nFound with CONFIG_CC_STACKPROTECTOR=y (idea of Lanchon at XDA Developers [1]).\n\n[1]: http://forum.xda-developers.com/showthread.php?p=55306602\n\nPanic, on a Samsung Galaxy S2 i9100, was:\n\n<0>[   26.412257] c1 Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: bf013a2c\n<0>[   26.412315] c1\n<4>[   26.412334] c1 Backtrace:\n<4>[   26.412382] c1 [<c064e5b8>] (dump_backtrace+0x0/0x10c) from [<c0b91e6c>] (dump_stack+0x18/0x1c)\n<4>[   26.412439] c1  r6:e211e820 r5:c0ed4760 r4:c0f5c940 r3:271aed5c\n<4>[   26.412496] c1 [<c0b91e54>] (dump_stack+0x0/0x1c) from [<c0b92204>] (panic+0x80/0x1ac)\n<4>[   26.412561] c1 [<c0b92184>] (panic+0x0/0x1ac) from [<c0684be0>] (init_oops_id+0x0/0x58)\n<4>[   26.412613] c1  r3:271aed5c r2:271aed00 r1:bf013a2c r0:c0cb8880\n<4>[   26.412663] c1  r7:e273bc32\n<4>[   26.412742] c1 [<c0684bc4>] (__stack_chk_fail+0x0/0x1c) from [<bf013a2c>] (dhd_write_macaddr+0x2e4/0x310 [dhd])\n<4>[   26.412864] c1 [<bf013748>] (dhd_write_macaddr+0x0/0x310 [dhd]) from [<bf01a554>] (dhd_bus_start+0x1a4/0x2e0 [dhd])\n<4>[   26.412985] c1 [<bf01a3b0>] (dhd_bus_start+0x0/0x2e0 [dhd]) from [<bf020558>] (dhdsdio_probe+0x4a4/0x72c [dhd])\n<4>[   26.413097] c1 [<bf0200b4>] (dhdsdio_probe+0x0/0x72c [dhd]) from [<bf00c0ec>] (bcmsdh_probe+0xf8/0x150 [dhd])\n<4>[   26.413206] c1 [<bf00bff4>] (bcmsdh_probe+0x0/0x150 [dhd]) from [<bf00e038>] (bcmsdh_sdmmc_probe+0x54/0xbc [dhd])\n<4>[   26.413304] c1 [<bf00dfe4>] (bcmsdh_sdmmc_probe+0x0/0xbc [dhd]) from [<c09a7fe8>] (sdio_bus_probe+0xfc/0x108)\n<4>[   26.413368] c1  r5:e2d97000 r4:e2d97008\n<4>[   26.413414] c1 [<c09a7eec>] (sdio_bus_probe+0x0/0x108) from [<c0896764>] (driver_probe_device+0x94/0x1a8)\n<4>[   26.413474] c1  r8:00000000 r7:bf067414 r6:e2d9703c r5:c0f6ddb8 r4:e2d97008\n<4>[   26.413531] c1 r3:c09a7eec\n<4>[   26.413563] c1 [<c08966d0>] (driver_probe_device+0x0/0x1a8) from [<c089690c>] (__driver_attach+0x94/0x98)\n<4>[   26.413624] c1  r7:e2e631e0 r6:e2d9703c r5:bf067414 r4:e2d97008\n<4>[   26.413683] c1 [<c0896878>] (__driver_attach+0x0/0x98) from [<c0895678>] (bus_for_each_dev+0x4c/0x94)\n<4>[   26.413742] c1  r6:c0896878 r5:bf067414 r4:00000000 r3:c0896878\n<4>[   26.413799] c1 [<c089562c>] (bus_for_each_dev+0x0/0x94) from [<c0896428>] (driver_attach+0x24/0x28)\n<4>[   26.413857] c1  r6:c0f02af0 r5:bf067414 r4:bf067414\n<4>[   26.413904] c1 [<c0896404>] (driver_attach+0x0/0x28) from [<c08960c8>] (bus_add_driver+0x180/0x250)\n<4>[   26.413970] c1 [<c0895f48>] (bus_add_driver+0x0/0x250) from [<c0896e14>] (driver_register+0x80/0x150)\n<4>[   26.414037] c1 [<c0896d94>] (driver_register+0x0/0x150) from [<c09a8128>] (sdio_register_driver+0x2c/0x30)\n<4>[   26.414131] c1 [<c09a80fc>] (sdio_register_driver+0x0/0x30) from [<bf00e250>] (sdio_function_init+0x3c/0x8c [dhd])\n<4>[   26.414244] c1 [<bf00e214>] (sdio_function_init+0x0/0x8c [dhd]) from [<bf00c19c>] (bcmsdh_register+0x1c/0x24 [dhd])\n<4>[   26.414311] c1  r5:00000004 r4:bf06a3c4\n<4>[   26.414398] c1 [<bf00c180>] (bcmsdh_register+0x0/0x24 [dhd]) from [<bf027990>] (dhd_bus_register+0x24/0x48 [dhd])\n<4>[   26.414515] c1 [<bf02796c>] (dhd_bus_register+0x0/0x48 [dhd]) from [<bf07618c>] (init_module+0x18c/0x284 [dhd])\n<4>[   26.414610] c1 [<bf076000>] (init_module+0x0/0x284 [dhd]) from [<c06448f8>] (do_one_initcall+0x128/0x1a8)\n<4>[   26.414683] c1 [<c06447d0>] (do_one_initcall+0x0/0x1a8) from [<c06b9710>] (sys_init_module+0xdf8/0x1b1c)\n<4>[   26.414756] c1 [<c06b8918>] (sys_init_module+0x0/0x1b1c) from [<c064a8c0>] (ret_fast_syscall+0x0/0x30)\n<2>[   26.414861] c0 CPU0: stopping\n<4>[   26.414886] c0 Backtrace:\n<4>[   26.414920] c0 [<c064e5b8>] (dump_backtrace+0x0/0x10c) from [<c0b91e6c>] (dump_stack+0x18/0x1c)\n<4>[   26.414977] c0  r6:c0d54000 r5:c0eb5d08 r4:00000006 r3:271aed5c\n<4>[   26.415039] c0 [<c0b91e54>] (dump_stack+0x0/0x1c) from [<c06444bc>] (do_IPI+0x258/0x29c)\n<4>[   26.415102] c0 [<c0644264>] (do_IPI+0x0/0x29c) from [<c064a340>] (__irq_svc+0x80/0x130)\n<4>[   26.415156] c0 Exception stack(0xc0d55ef0 to 0xc0d55f38)\n<4>[   26.415197] c0 5ee0:                                     3b9ac9ff 540deacd 01c99e53 00072679\n<4>[   26.415258] c0 5f00: c0f5a468 00000000 c0d54000 00000000 c1b540a8 412fc091 00000000 c0d55f64\n<4>[   26.415317] c0 5f20: 540deacd c0d55f38 c06aa768 c065bd78 20000013 ffffffff\n<4>[   26.415380] c0 [<c065bd3c>] (exynos4_enter_idle+0x0/0x174) from [<c099a890>] (cpuidle_idle_call+0xa4/0x120)\n<4>[   26.415442] c0  r7:00000000 r6:00000001 r5:c0f815ac r4:c1b540b8\n<4>[   26.415498] c0 [<c099a7ec>] (cpuidle_idle_call+0x0/0x120) from [<c064bd40>] (cpu_idle+0xc4/0x100)\n<4>[   26.415554] c0  r8:4000406a r7:c0ba09a8 r6:c0f59ec4 r5:c0ebd8c4 r4:c0d54000\n<4>[   26.415610] c0 r3:c099a7ec\n<4>[   26.415641] c0 [<c064bc7c>] (cpu_idle+0x0/0x100) from [<c0b83238>] (rest_init+0x8c/0xa4)\n<4>[   26.415694] c0  r7:c1b51180 r6:c0f59e00 r5:00000002 r4:c0d54000\n<4>[   26.415752] c0 [<c0b831ac>] (rest_init+0x0/0xa4) from [<c00089c4>] (start_kernel+0x2dc/0x330)\n<4>[   26.415807] c0  r5:c063d944 r4:c0eb5d34\n<4>[   26.415845] c0 [<c00086e8>] (start_kernel+0x0/0x330) from [<40008044>] (0x40008044)\n\nChange-Id: Iaa907383e196fdf787ae4660977b58de79212de1","distinct":true,"url":"https://api.github.com/repos/AstroProfundis/android_kernel_samsung_sc03e/commits/339b2cb7d4876f4acf7389c38fc85cc5e35801ee"},{"sha":"0ef5a06bceb576a1135770111577f7700fe1ef93","author":{"email":"d2f0bc2f6cbabd319d2e18d1e6732f98155b1100@gmx.at","name":"Christian Neumüller"},"message":"bcmdhd wireless: Fix more off by one errors.\n\nThese were not detected by the stack protector, either because the functions\nwhere not called or because the corruption hits a local variable.\n\nChange-Id: I385c81b133ee09c28df56597df3fb25d9c063f43","distinct":true,"url":"https://api.github.com/repos/AstroProfundis/android_kernel_samsung_sc03e/commits/0ef5a06bceb576a1135770111577f7700fe1ef93"},{"sha":"a3732c055167df76ff7afedcaa59b76be52bb567","author":{"email":"d2f0bc2f6cbabd319d2e18d1e6732f98155b1100@gmx.at","name":"Christian Neumüller"},"message":"bcmdhd wireless: Fix sprintf/sscanf format strings.\n\n%X is int. This is too wide for the chars used there, so use %hhx instead. Avoid\nundefined pointer casts from char* to unsigned int* in sscanf calls.\n\nAlso use the already defined MACF and update it with %hhx instead of typing this\nlong format string all over again.\nAdd MACF_U which is the same as MACF but with uppercase hex (%hhX instead of %hhx).\n\nChange-Id: Idd2465e0d05bca9b05566abeec05a5ad59a577ad","distinct":true,"url":"https://api.github.com/repos/AstroProfundis/android_kernel_samsung_sc03e/commits/a3732c055167df76ff7afedcaa59b76be52bb567"},{"sha":"498cb242f14c0eb48c48785bb27df6db46a11bae","author":{"email":"0fe94206fb42d47dd99ea95d3945aaadc16d75e3@gmail.com","name":"Allen Zhong"},"message":"Merge remote-tracking branch 'cm/cm-11.0' into atr-aosp-cm11","distinct":true,"url":"https://api.github.com/repos/AstroProfundis/android_kernel_samsung_sc03e/commits/498cb242f14c0eb48c48785bb27df6db46a11bae"}]}