Commit graph

598247 commits

Author SHA1 Message Date
Taniya Das
343f7e30c1 clk: msm: osm: Update maximum number of bytes to read from buffer
Currently the number of maximum bytes to be copied from buffer is
incorrectly using the size of buffer. Replace to use the count
which is the maximum number of bytes to be read.

Change-Id: I797c4dc0af626e347dfef43a754d0c469585ba55
Signed-off-by: Taniya Das <tdas@codeaurora.org>
2018-04-05 10:59:40 +05:30
Mohammed Javid
5b2f7c5ec7 msm: ipa2: Fix IPA kernel NULL pointer dereference
Add changes to fix IPA kernel NULL pointer dereference issue

Change-Id: I090d900688f13bc80616e7a3c49f7e1d6cf1be0b
Acked-by: Ashok Vuyyuru <avuyyuru@qti.qualcomm.com>
Signed-off-by: Mohammed Javid <mjavid@codeaurora.org>
2018-04-05 10:49:16 +05:30
Sameer Thalappil
9b96f692c0 icnss: Consider recovery as FW down
When WLAN driver encounters FW timeout scenarios, it may check if the
FW is down by calling icnss_is_fw_down() API. Recovery should also be
considered as FW down, as FW has not completely recovered and ready
for WLAN communication.

Change-Id: I4c9e15aacc5605dca823e2cfcbf6f87152aaa78e
CRs-Fixed: 2218795
Signed-off-by: Sameer Thalappil <sameert@codeaurora.org>
2018-04-04 18:24:29 -07:00
Harsh Sahu
d24de74649 fbdev: msm: check buffer size before writing to user buffer
Check the number of bytes to copy against the size of the
user buffer before copy to user to avoid buffer overflow.

Change-Id: Icdd3d4e755deca19fa431e903620bd9e4c701c89
Signed-off-by: Harsh Sahu <hsahu@codeaurora.org>
2018-04-04 16:36:01 -07:00
Linux Build Service Account
4be74d4c07 Merge "slimbus: Avoid uninitialized variable access" 2018-04-04 11:24:26 -07:00
Linux Build Service Account
8fd574794d Merge "msm: mdss: Fix for wrong length in copy_to_user" 2018-04-04 11:24:24 -07:00
Kiran Gunda
2db4db75bf leds: qpnp-flash-v2: Fix HW_STROBE configuration
As per the hardware recommendation, configure the LED1 to
HW_STROBE mode when LED2 or LED3 is configured in HW_STROBE
mode. This enables hardware strobe option working for LED2/3
channels.

CRs-Fixed: 2213325
Change-Id: I1ceaa7477b8d0c18e03fbdea9d5347d0e75fc0f0
Signed-off-by: Kiran Gunda <kgunda@codeaurora.org>
2018-04-04 12:41:32 +05:30
Kiran Gunda
1a91cd330a leds: qpnp-flash-v2: Add support for multi-strobe
Multi-strobe option is used to enable/disable the LEDs
back-to-back without disabling the module in the HW_STROBE mode.
Hence, enable the multi-strobe option if the LED is configured
in HW_STROBE mode.

Change-Id: I3e16254c6dcb4c4ae0b295cd7eea4e8ee8e1c2c7
Signed-off-by: Kiran Gunda <kgunda@codeaurora.org>
2018-04-04 10:40:46 +05:30
Linux Build Service Account
7405e11851 Merge "ARM: dts: msm: remove modem region reserved on APQ8096 ADP" 2018-04-03 14:37:36 -07:00
Linux Build Service Account
96d58750b8 Merge "usb: gsi: Don't disable endpoints as part of flow control" 2018-04-03 14:37:35 -07:00
Linux Build Service Account
635513cc1a Merge "wcnss: update the regulator parsing and config method" 2018-04-03 14:37:32 -07:00
Linux Build Service Account
1afa9c51ce Merge "input: touchscreen: Fix uninitialized variable usage in Atmel driver" 2018-04-03 14:37:30 -07:00
Linux Build Service Account
aae13ca421 Merge "msm: sde: check buffer size before writing to user buffer" 2018-04-03 14:37:29 -07:00
Linux Build Service Account
38ce262d11 Merge "u_ctrl_qti: Increase MAX_QTI_PKT_SIZE to 8K" 2018-04-03 14:37:26 -07:00
Sarada Prasanna Garnayak
93a468587d wcnss: update the regulator parsing and config method
Use the resource managed regulator API for the wcnss
regulator parsing and configuration.

CRs-Fixed: 2214888
Change-Id: Ib376893c26bb9aa797e7e9df25cc7302a84a3726
Signed-off-by: Sarada Prasanna Garnayak <sgarna@codeaurora.org>
2018-04-03 04:35:33 -07:00
Sarada Prasanna Garnayak
ec3266a99d wcnss: fix the wcnss power up sequence after ssr
Update the voltage regulator enable/disable status
during proxy vote and unvote request by wcnss wlan
module.

CRs-Fixed: 2211050
Change-Id: I334df98612b0915fe00d5390fbcd37c95e9f6509
Signed-off-by: Sarada Prasanna Garnayak <sgarna@codeaurora.org>
2018-04-03 04:35:28 -07:00
Linux Build Service Account
660f3d97f2 Merge "adv7481: Enable ADV7481 driver on Auto CDP" 2018-04-03 01:19:59 -07:00
Harsh Sahu
54f1b8b469 msm: sde: check buffer size before writing to user buffer
Check the number of bytes to copy against the size of the
user buffer before copy to user to avoid buffer overflow.

Change-Id: I95083227cfefaf1a81815296145b0c370127e061
Signed-off-by: Harsh Sahu <hsahu@codeaurora.org>
2018-04-03 00:05:53 -07:00
Venkata Prahlad Valluru
4ff082fbfa input: touchscreen: Fix uninitialized variable usage in Atmel driver
Initialize variables that are passed by reference, so that
they can be used safely afterwards, irrespective of the
called function actions.

Change-Id: Ib7fa26b0682c719cabdb9cb94f206a93e3eaaf63
Signed-off-by: Venkata Prahlad Valluru <vvalluru@codeaurora.org>
2018-04-03 11:55:52 +05:30
Yimin Peng
bb5f7ce39e ARM: dts: msm: remove modem region reserved on APQ8096 ADP
DRAM diet requires to remove reserved modem memory.

Change-Id: I919ee1b9cc003d9851a7ec92ba116020044742cf
Signed-off-by: Yimin Peng <yiminp@codeaurora.org>
2018-04-03 14:11:27 +08:00
Hardik Arya
4afc00eaff diag: Allocate DCI memory using vzalloc instead of kzalloc
Currently there is a possibility of kmalloc failing
when system is running low on memory condition.
The patch changes the dci memory allocation from
kzalloc to vzalloc.

CRs-Fixed: 2195818
Change-Id: I92b20d8e77ce5b2a96212f9d0757fbbff2703891
Signed-off-by: Hardik Arya <harya@codeaurora.org>
2018-04-02 15:45:50 +05:30
Linux Build Service Account
225f40883b Merge "diag: Remove hdlc status dependeny on session_info" 2018-04-02 01:45:30 -07:00
Linux Build Service Account
d3f27d035d Merge "soc: qcom: hab: refine hab driver's header files" 2018-04-02 01:45:28 -07:00
Linux Build Service Account
d83747f35c Merge "drm: msm: fix potential NULL pointer dereference" 2018-04-02 01:45:27 -07:00
Suprith Malligere Shankaregowda
169f31f159 adv7481: Enable ADV7481 driver on Auto CDP
Add DTSI entries for ADV7481 on Auto CDP. This is the
HDMI-CSI conversion bridge chip. Also enable the required
CSIDs in camera sensor DTSI.

Change-Id: I972cd2cd538cddf9012fc52400b2980930f77775
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
2018-04-01 23:10:37 -07:00
Ajay Agarwal
38c3542e5b ARM: dts: msm: Allow pm_suspend in host mode for msm8996 Auto CDP
Add device tree flag to allow system suspend on automotive CDP
platforms with USB devices connected that do not support runtime
suspend.

Change-Id: Ia2c7cff130d811627ef7de24822b68506af37e01
Signed-off-by: Ajay Agarwal <ajaya@codeaurora.org>
2018-04-01 16:54:16 +05:30
Linux Build Service Account
dd13676f45 Merge "spmi: msm: add virtual SPMI interrupt support" 2018-03-30 12:49:51 -07:00
Yong Ding
83681f8f7d soc: qcom: hab: refine hab driver's header files
Stuffs relevant with ioctl are only for hab driver
itself and hab clients in user space. Those hab clients
in kernel dose not need them. So here uapi/linux/habmm.h
is refined into two files as habmmid.h and hab_ioctl.h.

Change-Id: I9344e3e3fec88a042ec1915a9c0d51a28cea6e9a
Signed-off-by: Yong Ding <yongding@codeaurora.org>
2018-03-30 03:16:43 -07:00
Linux Build Service Account
75409cea49 Merge "msm: pcie: Add proper check before accessing variables" 2018-03-29 21:37:15 -07:00
Arun Kumar Neelakantam
049880397c net: ipc_router: Fix buffer overflow during memcpy
The increment logic of u64 pointer in skb_copy_to_log_buf() leads to
buffer overflow.

Modify the proto type of skb_copy_to_log_buf() function to accept
only unsigned char pointer.

CRs-Fixed: 2212592
Change-Id: I8affff1316656c1060ec57f2fb10b46f85314358
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>
2018-03-29 20:16:29 +05:30
Linux Build Service Account
4502101297 Merge "msm: thermal: Initialize KTM interrupt mode at kernel late init level" 2018-03-29 02:54:11 -07:00
Vijayavardhan Vennapusa
28c73541e3 u_ctrl_qti: Increase MAX_QTI_PKT_SIZE to 8K
increase MAX_QTI_PKT_SIZE to 8KB to handle QMI messages of bigger
length of 8KB.

Change-Id: I479794c9563ae89b9062b75031b6cdc739a0f620
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
2018-03-28 22:07:44 -07:00
Linux Build Service Account
9896df099c Merge "nf: xt_socket: Fix out-of-bounds in xt_socket_lookup_slow_v{4,6}" 2018-03-28 15:28:08 -07:00
Linux Build Service Account
c638be9b40 Merge "msm: ADSPRPC: Validate rpra to avoid Null pointer dereference" 2018-03-28 15:28:07 -07:00
Linux Build Service Account
2a5b9922bf Merge "drm/msm: check hpd_off flag only for pluggable displays" 2018-03-28 15:28:06 -07:00
Linux Build Service Account
ac5f95a1a7 Merge "soc: qcom: ipc_router_smd_xprt: Set pointer to NULL after free" 2018-03-28 15:28:04 -07:00
Linux Build Service Account
ca7292c0ff Merge "cnss2: Fix dereference before NULL check issue" 2018-03-28 15:28:03 -07:00
Linux Build Service Account
1ccccc02c1 Merge "cnss2: Support collecting firmware dump during driver load" 2018-03-28 15:28:02 -07:00
Linux Build Service Account
538e1c6d03 Merge "msm: vidc: Fix use after free issue in set_output_buffers" 2018-03-28 15:28:01 -07:00
Linux Build Service Account
09ff85fe7f Merge "defconfig: Add WLAN related defconfigs for msm8996_gvmq" 2018-03-28 15:27:59 -07:00
Linux Build Service Account
189db53495 Merge "ARM: dts: Add qcom,cnss for WLAN on vplatform msm8996_gvmq" 2018-03-28 15:27:58 -07:00
Linux Build Service Account
2b4db72cec Merge "ARM: dts: msm: add the hab entry into the msm8996 telematics vplatform" 2018-03-28 15:27:57 -07:00
Linux Build Service Account
905fb03643 Merge "sched: Export wake_to_idle API" 2018-03-28 15:27:56 -07:00
Linux Build Service Account
cce73b6eb4 Merge "crypto: msm: reset pointer before returning from the function" 2018-03-28 15:27:54 -07:00
Linux Build Service Account
4494f37ab3 Merge "soc: qcom: hab: add habmm_socket_query support" 2018-03-28 15:27:52 -07:00
Derek Chen
c230fbe3c0 ASoC: msm: qdsp6v2: add 24b capture support for tert mi2s
Add support for 24 bits capture for Tertiary MI2S
interface in CPU DAI links.

Change-Id: I2453c5e7efb957d9c2a1fb832c1a456d0672af9a
Signed-off-by: Derek Chen <chenche@codeaurora.org>
2018-03-28 10:57:21 -07:00
Tejaswi Tanikella
b116697fb5 nf: xt_socket: Fix out-of-bounds in xt_socket_lookup_slow_v{4,6}
skb_header_pointer will copy data into the buffer if data is spread
across pages, else share pointer within skb->data. In
xt_socket_lookup_slow_v4, data is copied into udphdr, and later
th->doff is accessed, causing a out-of-bounds. This
access will only work if the data is not split across pages.

Copy data into tcphdr buffer for TCP packets instead.

Change-Id: Ifd6e15ece27fcf5bd02ae17571ab43f6df3ceb21
Fixes: a583636a ("inet: refactor inet[6]_lookup functions to take skb")
Signed-off-by: Tejaswi Tanikella <tejaswit@codeaurora.org>
2018-03-28 07:43:00 -07:00
Manaf Meethalavalappu Pallikunhi
255ce53eb8 msm: thermal: Initialize KTM interrupt mode at kernel late init level
KTM prolong KTM hotplug mitigation, cpu frequency mitigation etc. till
thermal-engine takes over. It is helping thermal runaway issues during
the boot time from KTM kernel late init level to thermal-engine
starts. Since BCL is also using KTM interface for mitigation, it
delays BCL mitigation till thermal-engine starts. Again target which
has LMH support enables Tj based mitigation very early in the boot.
So there is no risk of thermal runaway issues mentioned above.

Enable KTM interrupt mode mitigation back from kernel late init
itself. This reverts commit <07f3dcfc7f7c> ("msm: thermal: Prolong
KTM mitigation till thermal-engine takesover").

Change-Id: I7e4beaed2dd003c6ed36cc10e4bf003826fad827
Signed-off-by: Manaf Meethalavalappu Pallikunhi <manafm@codeaurora.org>
2018-03-28 18:22:38 +05:30
Rahul Sharma
b86526c85e drm/msm: check hpd_off flag only for pluggable displays
This change will wrap the 'hpd_off' flag with pluggable displays.
In non-pluggable display case 'hpd_off' flag prevents disabling
of HPD clocks and hence display subsystem doesn't got into suspend
state.

Change-Id: I28ade8fb60a60a15f1d23009de63bbf9f10c7c77
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
2018-03-27 22:01:10 -07:00
Arun Kumar Neelakantam
8d26f80ebc soc: qcom: ipc_router_smd_xprt: Set pointer to NULL after free
in_pkt pointer is holding dangling pointer address even after calling
release_pkt() which causing use-after-free.

Set the in_pkt pointer to NULL after free.

CRs-Fixed: 2210859
Change-Id: If5e01c0109c947e52f3ff269c9b2b50ac0dc2bdf
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>
2018-03-28 10:30:26 +05:30