In an issue very similar to 4e461c777e (xt_qtaguid: Fix panic
caused by synack processing), we were seeing panics on occasion
in testing.
In this case, it was the same issue, but caused by a different
call path, as the sk being returned from qtaguid_find_sk() was
not a full socket. Resulting in the sk->sk_socket deref to fail.
This patch adds an extra check to ensure the sk being retuned
is a full socket, and if not it returns NULL.
Change-Id: Icee0df589ea8d61a999e8c7ea3afdcf4a40b412b
CRs-Fixed: 1035969
Reported-by: Milosz Wasilewski <milosz.wasilewski@linaro.org>
Signed-off-by: John Stultz <john.stultz@linaro.org>
Git-commit: cc0063b8eb
Git-repo: https://android.googlesource.com/kernel/common/
Signed-off-by: Bryse Flowers <bflowers@codeaurora.org>
In upstream commit ca6fb06518
(tcp: attach SYNACK messages to request sockets instead of
listener)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca6fb0651883
The building of synack messages was changed, which made it so
the skb->sk points to a casted request_sock. This is problematic,
as there is no sk_socket in a request_sock. So when the qtaguid_mt
function tries to access the sk->sk_socket, it accesses uninitialized
memory.
After looking at how other netfilter implementations handle this,
I realized there was a skb_to_full_sk() helper added, which the
xt_qtaguid code isn't yet using.
This patch adds its use, and resovles panics seen when accessing
uninitialzed memory when processing synack packets.
Change-Id: Id0dbb7853aba221c1926e44616524fed90677602
CRs-Fixed: 1035969
Reported-by: YongQin Liu <yongquin.liu@linaro.org>
Signed-off-by: John Stultz <john.stultz@linaro.org>
Git-commit: 4e461c777e
Git-repo: https://android.googlesource.com/kernel/common/
Signed-off-by: Bryse Flowers <bflowers@codeaurora.org>
If link recovery succeeds after a hibern8 exit failure,
return success as the link is active now for use.
Change-Id: I76ac226a2a1e33dd9c6240cac3443a03355bb75e
Signed-off-by: Venkat Gopalakrishnan <venkatg@codeaurora.org>
All FW errors such as SYS_ERROR, SESSION_ERROR and timeouts
will be treated as Fatal.
CRs-Fixed: 1037031
Change-Id: I12463f98cf50f5c8cdfdd47775dec075219974d6
Signed-off-by: Chinmay Sawarkar <chinmays@codeaurora.org>
Existing CPE(Codec Processing Engine) driver supports single session.
Add support for two sessions with different sampling rates.
CRs-fixed: 1022917
Change-Id: Icb355cd07db9cc66632ac0ea14464c5610919725
Signed-off-by: Sudheer Papothi <spapothi@codeaurora.org>
Signed-off-by: Vidyakumar Athota <vathota@codeaurora.org>
Add the all-ramp-up-done and all-ramp-down-done interrupts
to the flash-led device for pmicobalt. These interrupts will
be used to notify the flash-led clients when all leds have
completed ramping up or down after the flash is triggered.
CRs-Fixed: 921325
Change-Id: I39a6ba34e43dab8035bf232d0e640e72d7a34575
Signed-off-by: Devesh Jhunjhunwala <deveshj@codeaurora.org>
Add support to register and handle the all-ramp-up-done
and all-ramp-down-done irqs for flash-led.
CRs-Fixed: 921325
Change-Id: I843a008dbe6900f9f16c202a05435dbaf7a37627
Signed-off-by: Devesh Jhunjhunwala <deveshj@codeaurora.org>
Add device tree support for ITE Tech touch controller driver.
Change-Id: I2671b7c30b0f2ed1d7ad788f29b7f900a2a1cdcc
Signed-off-by: Shantanu Jain <shjain@codeaurora.org>
Signed-off-by: Abinaya P <abinayap@codeaurora.org>