Stuffs relevant with ioctl are only for hab driver
itself and hab clients in user space. Those hab clients
in kernel dose not need them. So here uapi/linux/habmm.h
is refined into two files as habmmid.h and hab_ioctl.h.
Change-Id: I9344e3e3fec88a042ec1915a9c0d51a28cea6e9a
Signed-off-by: Yong Ding <yongding@codeaurora.org>
skb_header_pointer will copy data into the buffer if data is spread
across pages, else share pointer within skb->data. In
xt_socket_lookup_slow_v4, data is copied into udphdr, and later
th->doff is accessed, causing a out-of-bounds. This
access will only work if the data is not split across pages.
Copy data into tcphdr buffer for TCP packets instead.
Change-Id: Ifd6e15ece27fcf5bd02ae17571ab43f6df3ceb21
Fixes: a583636a ("inet: refactor inet[6]_lookup functions to take skb")
Signed-off-by: Tejaswi Tanikella <tejaswit@codeaurora.org>
KTM prolong KTM hotplug mitigation, cpu frequency mitigation etc. till
thermal-engine takes over. It is helping thermal runaway issues during
the boot time from KTM kernel late init level to thermal-engine
starts. Since BCL is also using KTM interface for mitigation, it
delays BCL mitigation till thermal-engine starts. Again target which
has LMH support enables Tj based mitigation very early in the boot.
So there is no risk of thermal runaway issues mentioned above.
Enable KTM interrupt mode mitigation back from kernel late init
itself. This reverts commit <07f3dcfc7f7c> ("msm: thermal: Prolong
KTM mitigation till thermal-engine takesover").
Change-Id: I7e4beaed2dd003c6ed36cc10e4bf003826fad827
Signed-off-by: Manaf Meethalavalappu Pallikunhi <manafm@codeaurora.org>
This change will wrap the 'hpd_off' flag with pluggable displays.
In non-pluggable display case 'hpd_off' flag prevents disabling
of HPD clocks and hence display subsystem doesn't got into suspend
state.
Change-Id: I28ade8fb60a60a15f1d23009de63bbf9f10c7c77
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
in_pkt pointer is holding dangling pointer address even after calling
release_pkt() which causing use-after-free.
Set the in_pkt pointer to NULL after free.
CRs-Fixed: 2210859
Change-Id: If5e01c0109c947e52f3ff269c9b2b50ac0dc2bdf
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>
The WLAN driver qcacld-3.2 depends on CNSS2, CFG80211 and ralated
defconfigs. So, add these defconfigs to enable WLAN over PCIe in
virtual platform msm8996_gvmq.
Change-Id: I3ade33ef26bc057b96b4b283669293a43a79b101
Signed-off-by: Ferry Zhou <tianguiz@codeaurora.org>
The device tree node qcom,cnss includes all WLAN related hardware
configurations including power supply regulators and pinctrl
configuration etc. So, add qcom,cnss into the dts of Linux/Android
virtual platform msm8996_gvmq to enable WLAN over PCIe.
Change-Id: I0dbefbeefb7c6e843e55f32a8b33c4113a3a2e6e
Signed-off-by: Ferry Zhou <tianguiz@codeaurora.org>
When firmware crashes during WLAN host driver loads, collects
firmware dump and proceeds with SSR as normal cases.
Change-Id: If2ac7da3c2db4b4116949d092ad53299f23c87e0
Signed-off-by: Yue Ma <yuem@codeaurora.org>
In cnss_mhi_notify_status(), NULL check should be performed before
dereference for pci_priv.
Change-Id: Iea5a6e2b8be9b07c235b02bfe02292f24da882d8
Signed-off-by: Yue Ma <yuem@codeaurora.org>
When set_buffers fails, binfo is freed and again accessed
while freeing smem memory.
CRs-Fixed: 2118860
Change-Id: Ifdd683f907862665e34d6d39d5a8634984804c01
Signed-off-by: Chinmay Sawarkar <chinmays@codeaurora.org>
Signed-off-by: Sanjay Singh <sisanj@codeaurora.org>
In the msm8996 telematics vplatform, only these MMID groups
for QCPE, clock, FDE and test are added into its device node.
Change-Id: Ib527a4e3a79ebf84fd6f47db66baa324eedb5300
Signed-off-by: Yong Ding <yongding@codeaurora.org>
Reset cipher_req.creq.dst and cipher_req.creq.src pointer to NULL
before returning from the function, and initialize scatterlist
variable before using it.
Change-Id: I5d5eee06a5213a05b20bf459ef0bf0c433fadbdd
Signed-off-by: Zhen Kong <zkong@codeaurora.org>
Signed-off-by: Parai Wang <fpwang@codeaurora.org>
The hypervisor does not support PCI_MSM, and uses PCI_HOST_GENERIC
instead. After this change, the cnss2/PCIe for WLAN in metal case
depends on PCI_MSM, while in GVM case depends on PCI_HOST_GENERIC.
Currently, the WLAN chip is powered up by hypervisor. So, just
bypass power related code.
Change-Id: Icf13fb11c5e18f6e48746fe82f1b4392559dd5b0
Signed-off-by: Ferry Zhou <tianguiz@codeaurora.org>
Add msm audio ion vm device node to be compatible
with virtualized audio ion platform driver for
msm8996 automotive platform.
Change-Id: Ifaa396a8447080255a70eec5c2ddd3adf803d18f
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
In the code, there are certain calls that can
try to access the bffer pointer variable after
free, as the same pointer can be freed at
RELEASE_BUF call at the same time.
Change-Id: I4f7a48613b614138916ae33e7783b0c172330321
Signed-off-by: Meera Gande <mgande@codeaurora.org>
Make sure data is flushed before updating write index by adding a wmb.
Change-Id: I3d17ed56b64ac9ca399a0ef11a638027c1ba36ae
Signed-off-by: Chris Lew <clew@codeaurora.org>
Export wake_to_idle APIs so that external modules can access these
functions to improve performance.
CRs-Fixed: 2166787
Change-Id: I0863a2e80a303c7584ca52ef81c19d369e840662
Signed-off-by: Srinivas Girigowda <sgirigow@codeaurora.org>
With such hab entry in the ivi vplatform's device tree,
hab driver will get its configurations dynamically. So
it will not use the default configurations any more.
Change-Id: Idbfc17d2b9ecc6bd18e3aa8901b9bbfbe20636f2
Signed-off-by: Yong Ding <yongding@codeaurora.org>
If the splash clean up is trigger, the MDP core power on call should
be skipped. MDP core already turned on in sde_kms_hw_init() if splash
handoff enabled.
Change-Id: Ie19c4eb2d0455b0c19615e3bb29aae4b4c6c8abf
Signed-off-by: Camus Wong <camusw@codeaurora.org>
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
Since 'commit f332a9d53e33 ("softirq: defer softirq processing to
ksoftirqd if CPU is busy with RT")', all softirqs are deferred
to ksoftirqd if one of the potentially long softirqs are pending.
This can significantly delay processing of tasklets and timers,
which are frequently designed to be running at high priority.
Defer only the potentially slow softirqs to ksoftirqd.
Change-Id: I7a2ef7c59749ccf086066c59962ff326786da6f4
Signed-off-by: Björn Davidsson <bjorn.davidsson@sony.com>
[clingutla@codeaurora.org:- Renamed local variables and refactored
deferred logic to macro for avoiding potential deadlock.]
Signed-off-by: Lingutla Chandrasekhar <clingutla@codeaurora.org>