{"push_id":600930353,"size":104,"distinct_size":104,"ref":"refs/heads/lollipop-hammerhead","head":"a8df6b084d5081d6b422d632a11c1d178db8b255","before":"9ad30491fca21b4a576e8d544dfc9ff1d01d4c63","commits":[{"sha":"8f74ef1823cc3c93f58fe6e65816ea42dfdd1be9","author":{"email":"8dcb73d3151da6cb1ccc5cb471442932e4b77796@codeaurora.org","name":"Naseer Ahmed"},"message":"msm: mdss: refactor command mode vsync control logic\n\nCurrent logic is prone to corner case when mdss_mdp_remove_vsync_handler\nis called twice: once from mdss_mdp_cmd_stop and again from vsync ctrl\nlogic. Need to properly identify the second call and avoid resetting the\nrdptr ticks which prevent from clocks being turned off properly.\n\nChange-Id: I9eeebd0c16e67a249508980427c81fa2e339edec\nSigned-off-by: Adrian Salido-Moreno <adrianm@codeaurora.org>\nSigned-off-by: Naseer Ahmed <naseer@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/8f74ef1823cc3c93f58fe6e65816ea42dfdd1be9"},{"sha":"9c50fb3da54214a047b9ebafbe85c9f5de020f8e","author":{"email":"8dcb73d3151da6cb1ccc5cb471442932e4b77796@codeaurora.org","name":"Naseer Ahmed"},"message":"msm: mdss: avoid clocks on if panel is not on for command mode\n\nThere are cases where vsync enable may happen before panel has been\nturned on. In this case MDP clocks and specially DSI clocks shouldn't\nget turned on if the panel is not ready yet. Add a check to ensure\nclocks are not turned on and wait for panel to be turned on later on,\nvsync events will be enabled then.\n\nChange-Id: I522a1ecafc3949582e049d247a443725672d2d47\nSigned-off-by: Adrian Salido-Moreno <adrianm@codeaurora.org>\nSigned-off-by: Naseer Ahmed <naseer@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/9c50fb3da54214a047b9ebafbe85c9f5de020f8e"},{"sha":"44d2b56ba28fcbd4b31f987c583730d5acc393b6","author":{"email":"8dcb73d3151da6cb1ccc5cb471442932e4b77796@codeaurora.org","name":"Naseer Ahmed"},"message":"msm: mdss: keep clocks on during kickoff operation\n\nThere is deadlock scenario where work thread to turn clocks off is\ntrying to acquire DSI's mdp_busy lock while holding clk_mtx to turn\nmdp clocks on.  Meanwhile kickoff thread holds mdp_busy lock and\ntrying to acquire clk_mtx to turn on clock.\nThis patch ensure that clocks are kept on and work thread is not\nscheduled while kickoff is in progress so that deadlock will not happen.\n\nChange-Id: Iceb5db431a7f9f0e1f56a0e3c1ced2d08d762b86\nSigned-off-by: Huaibin Yang <huaibiny@codeaurora.org>\nSigned-off-by: Kuogee Hsieh <khsieh@codeaurora.org>\nSigned-off-by: Naseer Ahmed <naseer@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/44d2b56ba28fcbd4b31f987c583730d5acc393b6"},{"sha":"b20cd141e2a1c326af7eda2ee532e9903173ceea","author":{"email":"8dcb73d3151da6cb1ccc5cb471442932e4b77796@codeaurora.org","name":"Naseer Ahmed"},"message":"msm: mdss: ensure retire fences are signaled during panel off\n\nWhen turning off command mode panel, if retire fences are still active\nand suspend sequence goes through some fences may remain active.\nIf fences remain active command panel off sequence would stop signaling\nvsyncs and would throw off the timeline. To fix this clear the retire\ntimeline when turning panel off.\n\nChange-Id: I32a5fe0f81b16fa2ef959c7f05e484fb9f9f8598\nSigned-off-by: Adrian Salido-Moreno <adrianm@codeaurora.org>\n\nConflicts:\n\tdrivers/video/msm/mdss/mdss_mdp_overlay.c\nSigned-off-by: Naseer Ahmed <naseer@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/b20cd141e2a1c326af7eda2ee532e9903173ceea"},{"sha":"d5201ce67b5e128504f9de356086f6c5c1b30792","author":{"email":"20deeb1c04e9ac926e776af1891f18fc65995bf0@google.com","name":"Eric Laurent"},"message":"ALSA: compress: change the way sample rates are sent to kernel\n\nThe usage of SNDRV_RATES is not effective as we can have rates like 12000 or\nsome other ones used by decoders. This change the usage of this to use the raw\nHz values to be sent to kernel\n\nBug: 17398311.\n\nSigned-off-by: Vinod Koul <vinod.koul@intel.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Eric Laurent <elaurent@google.com>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/d5201ce67b5e128504f9de356086f6c5c1b30792"},{"sha":"bd0288cccfbf8b1427c636d0291118362aee8786","author":{"email":"5cf69c63beb17bf38d63aa0e923ee8256af0e205@intel.com","name":"Vinod Koul"},"message":"ALSA: compress: remove the sample rate check\n\ncommit f0e9c080 - \"ALSA: compress: change the way sample rates are sent to\nkernel\" changed the way sample rates are sent. So now we don't need to check for\nPCM_RATE_xxx in kernel\n\nBug: 17398311.\n\nSigned-off-by: Vinod Koul <vinod.koul@intel.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Eric Laurent <elaurent@google.com>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/bd0288cccfbf8b1427c636d0291118362aee8786"},{"sha":"172073f6197f8c7939ef66a8f84a091f88e37178","author":{"email":"20deeb1c04e9ac926e776af1891f18fc65995bf0@google.com","name":"Eric Laurent"},"message":"ALSA: compress: update comment for sample rate in snd_codec\n\nBug: 17398311.\n\nSigned-off-by: Vinod Koul <vinod.koul@intel.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Eric Laurent <elaurent@google.com>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/172073f6197f8c7939ef66a8f84a091f88e37178"},{"sha":"d3963191ba8f4872b19cd7a4a1a47a852bcf9366","author":{"email":"20deeb1c04e9ac926e776af1891f18fc65995bf0@google.com","name":"Eric Laurent"},"message":"ALSA: compress: update struct snd_codec_desc for sample rate\n\nNow that we don't use SNDRV_PCM_RATE_xxx bit fields for sample rate, we need to\nchange the description to an array for describing the sample rates supported by\nthe sink/source\n\nBug: 17398311.\n\nSigned-off-by: Vinod Koul <vinod.koul@intel.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Eric Laurent <elaurent@google.com>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/d3963191ba8f4872b19cd7a4a1a47a852bcf9366"},{"sha":"1a7caa02eb83fd3f0bcca7673a753c619b4c889c","author":{"email":"20deeb1c04e9ac926e776af1891f18fc65995bf0@google.com","name":"Eric Laurent"},"message":"ALSA: compress: add num_sample_rates in snd_codec_desc\n\nthis gives ability to convey the valid values of supported rates in\nsample_rates array\n\nBug: 17398311.\n\nSigned-off-by: Vinod Koul <vinod.koul@intel.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Eric Laurent <elaurent@google.com>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/1a7caa02eb83fd3f0bcca7673a753c619b4c889c"},{"sha":"3e54525ab5ec32276736bbb61a1e635a0f4415c6","author":{"email":"20deeb1c04e9ac926e776af1891f18fc65995bf0@google.com","name":"Eric Laurent"},"message":"ASoC: msm: fix compress codec capabilies\n\nUpdate msm_compr_get_codec_caps() to comply with\nchanges in snd_codec_desc structure.\n\nBug: 17398311.\n\nSigned-off-by: Eric Laurent <elaurent@google.com>","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/3e54525ab5ec32276736bbb61a1e635a0f4415c6"},{"sha":"04cd41c4b05110ade132551e92fcd3c262cb2365","author":{"email":"2cc0d0d76de2e6f37b92deeb83c85cb306fc5dc1@amacapital.net","name":"Andy Lutomirski"},"message":"Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs\n\nWith this change, calling\n  prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)\ndisables privilege granting operations at execve-time.  For example, a\nprocess will not be able to execute a setuid binary to change their uid\nor gid if this bit is set.  The same is true for file capabilities.\n\nAdditionally, LSM_UNSAFE_NO_NEW_PRIVS is defined to ensure that\nLSMs respect the requested behavior.\n\nTo determine if the NO_NEW_PRIVS bit is set, a task may call\n  prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0);\nIt returns 1 if set and 0 if it is not set. If any of the arguments are\nnon-zero, it will return -1 and set errno to -EINVAL.\n(PR_SET_NO_NEW_PRIVS behaves similarly.)\n\nThis functionality is desired for the proposed seccomp filter patch\nseries.  By using PR_SET_NO_NEW_PRIVS, it allows a task to modify the\nsystem call behavior for itself and its child tasks without being\nable to impact the behavior of a more privileged task.\n\nAnother potential use is making certain privileged operations\nunprivileged.  For example, chroot may be considered \"safe\" if it cannot\naffect privileged tasks.\n\nNote, this patch causes execve to fail when PR_SET_NO_NEW_PRIVS is\nset and AppArmor is in use.  It is fixed in a subsequent patch.\n\nSigned-off-by: Andy Lutomirski <luto@amacapital.net>\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: updated change desc\nv17: using new define values as per 3.4\n\nConflicts:\n\tinclude/linux/prctl.h\n\tkernel/sys.c","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/04cd41c4b05110ade132551e92fcd3c262cb2365"},{"sha":"c0e919bf5cb42071bf494e97ccc7adf3560a6df0","author":{"email":"28c604219333b0b085913923f8c4c96032f02c12@canonical.com","name":"John Johansen"},"message":"Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVS\n\nAdd support for AppArmor to explicitly fail requested domain transitions\nif NO_NEW_PRIVS is set and the task is not unconfined.\n\nTransitions from unconfined are still allowed because this always results\nin a reduction of privileges.\n\nAcked-by: Eric Paris <eparis@redhat.com>\nSigned-off-by: Will Drewry <wad@chromium.org>\nSigned-off-by: John Johansen <john.johansen@canonical.com>\nSigned-off-by: Andy Lutomirski <luto@amacapital.net>\n\nv18: new acked-by, new description","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/c0e919bf5cb42071bf494e97ccc7adf3560a6df0"},{"sha":"4efa79fdf42f44ed75b114c5d29baebf55eeff67","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"sk_run_filter: add BPF_S_ANC_SECCOMP_LD_W\n\nIntroduces a new BPF ancillary instruction that all LD calls will be\nmapped through when skb_run_filter() is being used for seccomp BPF.  The\nrewriting will be done using a secondary chk_filter function that is run\nafter skb_chk_filter.\n\nThe code change is guarded by CONFIG_SECCOMP_FILTER which is added,\nalong with the seccomp_bpf_load() function later in this series.\n\nThis is based on http://lkml.org/lkml/2012/3/2/141\n\nSuggested-by: Indan Zupancic <indan@nul.nu>\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Eric Dumazet <eric.dumazet@gmail.com>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: rebase\n...\nv15: include seccomp.h explicitly for when seccomp_bpf_load exists.\nv14: First cut using a single additional instruction\n... v13: made bpf functions generic.","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/4efa79fdf42f44ed75b114c5d29baebf55eeff67"},{"sha":"270842831accf6410d2f2ed5e495cb8540f78834","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"net/compat.c,linux/filter.h: share compat_sock_fprog\n\nAny other users of bpf_*_filter that take a struct sock_fprog from\nuserspace will need to be able to also accept a compat_sock_fprog\nif the arch supports compat calls.  This change allows the existing\ncompat_sock_fprog be shared.\n\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Serge Hallyn <serge.hallyn@canonical.com>\nAcked-by: Eric Dumazet <eric.dumazet@gmail.com>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: tasered by the apostrophe police\nv14: rebase/nochanges\nv13: rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc\nv12: rebase on to linux-next\nv11: introduction","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/270842831accf6410d2f2ed5e495cb8540f78834"},{"sha":"466e716fc98bcc0a96cfbc2915fe6878a55c06b3","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"seccomp: kill the seccomp_t typedef\n\nReplaces the seccomp_t typedef with struct seccomp to match modern\nkernel style.\n\nSigned-off-by: Will Drewry <wad@chromium.org>\nReviewed-by: James Morris <jmorris@namei.org>\nAcked-by: Serge Hallyn <serge.hallyn@canonical.com>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: rebase\n...\nv14: rebase/nochanges\nv13: rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc\nv12: rebase on to linux-next\nv8-v11: no changes\nv7: struct seccomp_struct -> struct seccomp\nv6: original inclusion in this series.","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/466e716fc98bcc0a96cfbc2915fe6878a55c06b3"},{"sha":"08d00c9ca160c37b17a12b1fc199420c3316f522","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"asm/syscall.h: add syscall_get_arch\n\nAdds a stub for a function that will return the AUDIT_ARCH_* value\nappropriate to the supplied task based on the system call convention.\n\nFor audit's use, the value can generally be hard-coded at the\naudit-site.  However, for other functionality not inlined into syscall\nentry/exit, this makes that information available.  seccomp_filter is\nthe first planned consumer and, as such, the comment indicates a tie to\nCONFIG_HAVE_ARCH_SECCOMP_FILTER.\n\nSuggested-by: Roland McGrath <mcgrathr@chromium.org>\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Serge Hallyn <serge.hallyn@canonical.com>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: comment and change reword and rebase.\nv14: rebase/nochanges\nv13: rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc\nv12: rebase on to linux-next\nv11: fixed improper return type\nv10: introduced","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/08d00c9ca160c37b17a12b1fc199420c3316f522"},{"sha":"0f07c396db031e8dcff88932edd149cbb90d01f8","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"arch/x86: add syscall_get_arch to syscall.h\n\nAdd syscall_get_arch() to export the current AUDIT_ARCH_* based on system call\nentry path.\n\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Serge Hallyn <serge.hallyn@canonical.com>\nReviewed-by: H. Peter Anvin <hpa@zytor.com>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: - update comment about x32 tasks\n     - rebase to v3.4-rc2\nv17: rebase and reviewed-by\nv14: rebase/nochanges\nv13: rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/0f07c396db031e8dcff88932edd149cbb90d01f8"},{"sha":"5274ef39a2f93e2f1fde0e09fbf717d9bba0c064","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"seccomp: add system call filtering using BPF\n\n[This patch depends on luto@mit.edu's no_new_privs patch:\n   https://lkml.org/lkml/2012/1/30/264\n The whole series including Andrew's patches can be found here:\n   https://github.com/redpig/linux/tree/seccomp\n Complete diff here:\n   https://github.com/redpig/linux/compare/1dc65fed...seccomp\n]\n\nThis patch adds support for seccomp mode 2.  Mode 2 introduces the\nability for unprivileged processes to install system call filtering\npolicy expressed in terms of a Berkeley Packet Filter (BPF) program.\nThis program will be evaluated in the kernel for each system call\nthe task makes and computes a result based on data in the format\nof struct seccomp_data.\n\nA filter program may be installed by calling:\n  struct sock_fprog fprog = { ... };\n  ...\n  prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &fprog);\n\nThe return value of the filter program determines if the system call is\nallowed to proceed or denied.  If the first filter program installed\nallows prctl(2) calls, then the above call may be made repeatedly\nby a task to further reduce its access to the kernel.  All attached\nprograms must be evaluated before a system call will be allowed to\nproceed.\n\nFilter programs will be inherited across fork/clone and execve.\nHowever, if the task attaching the filter is unprivileged\n(!CAP_SYS_ADMIN) the no_new_privs bit will be set on the task.  This\nensures that unprivileged tasks cannot attach filters that affect\nprivileged tasks (e.g., setuid binary).\n\nThere are a number of benefits to this approach. A few of which are\nas follows:\n- BPF has been exposed to userland for a long time\n- BPF optimization (and JIT'ing) are well understood\n- Userland already knows its ABI: system call numbers and desired\n  arguments\n- No time-of-check-time-of-use vulnerable data accesses are possible.\n- system call arguments are loaded on access only to minimize copying\n  required for system call policy decisions.\n\nMode 2 support is restricted to architectures that enable\nHAVE_ARCH_SECCOMP_FILTER.  In this patch, the primary dependency is on\nsyscall_get_arguments().  The full desired scope of this feature will\nadd a few minor additional requirements expressed later in this series.\nBased on discussion, SECCOMP_RET_ERRNO and SECCOMP_RET_TRACE seem to be\nthe desired additional functionality.\n\nNo architectures are enabled in this patch.\n\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Serge Hallyn <serge.hallyn@canonical.com>\nReviewed-by: Indan Zupancic <indan@nul.nu>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: - rebase to v3.4-rc2\n     - s/chk/check/ (akpm@linux-foundation.org,jmorris@namei.org)\n     - allocate with GFP_KERNEL|__GFP_NOWARN (indan@nul.nu)\n     - add a comment for get_u32 regarding endianness (akpm@)\n     - fix other typos, style mistakes (akpm@)\n     - added acked-by\nv17: - properly guard seccomp filter needed headers (leann@ubuntu.com)\n     - tighten return mask to 0x7fff0000\nv16: - no change\nv15: - add a 4 instr penalty when counting a path to account for seccomp_filter\n       size (indan@nul.nu)\n     - drop the max insns to 256KB (indan@nul.nu)\n     - return ENOMEM if the max insns limit has been hit (indan@nul.nu)\n     - move IP checks after args (indan@nul.nu)\n     - drop !user_filter check (indan@nul.nu)\n     - only allow explicit bpf codes (indan@nul.nu)\n     - exit_code -> exit_sig\nv14: - put/get_seccomp_filter takes struct task_struct\n       (indan@nul.nu,keescook@chromium.org)\n     - adds seccomp_chk_filter and drops general bpf_run/chk_filter user\n     - add seccomp_bpf_load for use by net/core/filter.c\n     - lower max per-process/per-hierarchy: 1MB\n     - moved nnp/capability check prior to allocation\n       (all of the above: indan@nul.nu)\nv13: - rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc\nv12: - added a maximum instruction count per path (indan@nul.nu,oleg@redhat.com)\n     - removed copy_seccomp (keescook@chromium.org,indan@nul.nu)\n     - reworded the prctl_set_seccomp comment (indan@nul.nu)\nv11: - reorder struct seccomp_data to allow future args expansion (hpa@zytor.com)\n     - style clean up, @compat dropped, compat_sock_fprog32 (indan@nul.nu)\n     - do_exit(SIGSYS) (keescook@chromium.org, luto@mit.edu)\n     - pare down Kconfig doc reference.\n     - extra comment clean up\nv10: - seccomp_data has changed again to be more aesthetically pleasing\n       (hpa@zytor.com)\n     - calling convention is noted in a new u32 field using syscall_get_arch.\n       This allows for cross-calling convention tasks to use seccomp filters.\n       (hpa@zytor.com)\n     - lots of clean up (thanks, Indan!)\n v9: - n/a\n v8: - use bpf_chk_filter, bpf_run_filter. update load_fns\n     - Lots of fixes courtesy of indan@nul.nu:\n     -- fix up load behavior, compat fixups, and merge alloc code,\n     -- renamed pc and dropped __packed, use bool compat.\n     -- Added a hidden CONFIG_SECCOMP_FILTER to synthesize non-arch\n        dependencies\n v7:  (massive overhaul thanks to Indan, others)\n     - added CONFIG_HAVE_ARCH_SECCOMP_FILTER\n     - merged into seccomp.c\n     - minimal seccomp_filter.h\n     - no config option (part of seccomp)\n     - no new prctl\n     - doesn't break seccomp on systems without asm/syscall.h\n       (works but arg access always fails)\n     - dropped seccomp_init_task, extra free functions, ...\n     - dropped the no-asm/syscall.h code paths\n     - merges with network sk_run_filter and sk_chk_filter\n v6: - fix memory leak on attach compat check failure\n     - require no_new_privs || CAP_SYS_ADMIN prior to filter\n       installation. (luto@mit.edu)\n     - s/seccomp_struct_/seccomp_/ for macros/functions (amwang@redhat.com)\n     - cleaned up Kconfig (amwang@redhat.com)\n     - on block, note if the call was compat (so the # means something)\n v5: - uses syscall_get_arguments\n       (indan@nul.nu,oleg@redhat.com, mcgrathr@chromium.org)\n      - uses union-based arg storage with hi/lo struct to\n        handle endianness.  Compromises between the two alternate\n        proposals to minimize extra arg shuffling and account for\n        endianness assuming userspace uses offsetof().\n        (mcgrathr@chromium.org, indan@nul.nu)\n      - update Kconfig description\n      - add include/seccomp_filter.h and add its installation\n      - (naive) on-demand syscall argument loading\n      - drop seccomp_t (eparis@redhat.com)\n v4:  - adjusted prctl to make room for PR_[SG]ET_NO_NEW_PRIVS\n      - now uses current->no_new_privs\n        (luto@mit.edu,torvalds@linux-foundation.com)\n      - assign names to seccomp modes (rdunlap@xenotime.net)\n      - fix style issues (rdunlap@xenotime.net)\n      - reworded Kconfig entry (rdunlap@xenotime.net)\n v3:  - macros to inline (oleg@redhat.com)\n      - init_task behavior fixed (oleg@redhat.com)\n      - drop creator entry and extra NULL check (oleg@redhat.com)\n      - alloc returns -EINVAL on bad sizing (serge.hallyn@canonical.com)\n      - adds tentative use of \"always_unprivileged\" as per\n        torvalds@linux-foundation.org and luto@mit.edu\n v2:  - (patch 2 only)","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/5274ef39a2f93e2f1fde0e09fbf717d9bba0c064"},{"sha":"8ceaf587e29c280e113d917963a67ac8b6d9f3eb","author":{"email":"50cb10d2be062154b17ab4d66a4eab34f1cf1c84@chromium.org","name":"Kees Cook"},"message":"seccomp: remove duplicated failure logging\n\nThis consolidates the seccomp filter error logging path and adds more\ndetails to the audit log.\n\nSigned-off-by: Will Drewry <wad@chromium.org>\nSigned-off-by: Kees Cook <keescook@chromium.org>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: make compat= permanent in the record\nv15: added a return code to the audit_seccomp path by wad@chromium.org\n     (suggested by eparis@redhat.com)\nv*: original by keescook@chromium.org","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/8ceaf587e29c280e113d917963a67ac8b6d9f3eb"},{"sha":"d563702d0902136cdc428751a7ee991155718b7e","author":{"email":"72416dde44ea762d19e3a7a555e3b59ce98f8eea@chromium.org","name":"Will Drewry"},"message":"seccomp: add SECCOMP_RET_ERRNO\n\nThis change adds the SECCOMP_RET_ERRNO as a valid return value from a\nseccomp filter.  Additionally, it makes the first use of the lower\n16-bits for storing a filter-supplied errno.  16-bits is more than\nenough for the errno-base.h calls.\n\nReturning errors instead of immediately terminating processes that\nviolate seccomp policy allow for broader use of this functionality\nfor kernel attack surface reduction.  For example, a linux container\ncould maintain a whitelist of pre-existing system calls but drop\nall new ones with errnos.  This would keep a logically static attack\nsurface while providing errnos that may allow for graceful failure\nwithout the downside of do_exit() on a bad call.\n\nThis change also changes the signature of __secure_computing.  It\nappears the only direct caller is the arm entry code and it clobbers\nany possible return value (register) immediately.\n\nSigned-off-by: Will Drewry <wad@chromium.org>\nAcked-by: Serge Hallyn <serge.hallyn@canonical.com>\nReviewed-by: Kees Cook <keescook@chromium.org>\nAcked-by: Eric Paris <eparis@redhat.com>\n\nv18: - fix up comments and rebase\n     - fix bad var name which was fixed in later revs\n     - remove _int() and just change the __secure_computing signature\nv16-v17: ...\nv15: - use audit_seccomp and add a skip label. (eparis@redhat.com)\n     - clean up and pad out return codes (indan@nul.nu)\nv14: - no change/rebase\nv13: - rebase on to 88ebdda6159ffc15699f204c33feb3e431bf9bdc\nv12: - move to WARN_ON if filter is NULL\n       (oleg@redhat.com, luto@mit.edu, keescook@chromium.org)\n     - return immediately for filter==NULL (keescook@chromium.org)\n     - change evaluation to only compare the ACTION so that layered\n       errnos don't result in the lowest one being returned.\n       (keeschook@chromium.org)\nv11: - check for NULL filter (keescook@chromium.org)\nv10: - change loaders to fn\n v9: - n/a\n v8: - update Kconfig to note new need for syscall_set_return_value.\n     - reordered such that TRAP behavior follows on later.\n     - made the for loop a little less indent-y\n v7: - introduced","distinct":true,"url":"https://api.github.com/repos/Euphoria-OS/android_kernel_msm/commits/d563702d0902136cdc428751a7ee991155718b7e"}]}