Check the number of bytes to copy against the size of the
user buffer before copy to user to avoid buffer overflow.
Change-Id: Icdd3d4e755deca19fa431e903620bd9e4c701c89
Signed-off-by: Harsh Sahu <hsahu@codeaurora.org>
Use the resource managed regulator API for the wcnss
regulator parsing and configuration.
CRs-Fixed: 2214888
Change-Id: Ib376893c26bb9aa797e7e9df25cc7302a84a3726
Signed-off-by: Sarada Prasanna Garnayak <sgarna@codeaurora.org>
Update the voltage regulator enable/disable status
during proxy vote and unvote request by wcnss wlan
module.
CRs-Fixed: 2211050
Change-Id: I334df98612b0915fe00d5390fbcd37c95e9f6509
Signed-off-by: Sarada Prasanna Garnayak <sgarna@codeaurora.org>
Check the number of bytes to copy against the size of the
user buffer before copy to user to avoid buffer overflow.
Change-Id: I95083227cfefaf1a81815296145b0c370127e061
Signed-off-by: Harsh Sahu <hsahu@codeaurora.org>
Initialize variables that are passed by reference, so that
they can be used safely afterwards, irrespective of the
called function actions.
Change-Id: Ib7fa26b0682c719cabdb9cb94f206a93e3eaaf63
Signed-off-by: Venkata Prahlad Valluru <vvalluru@codeaurora.org>
Add DTSI entries for ADV7481 on Auto CDP. This is the
HDMI-CSI conversion bridge chip. Also enable the required
CSIDs in camera sensor DTSI.
Change-Id: I972cd2cd538cddf9012fc52400b2980930f77775
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
Stuffs relevant with ioctl are only for hab driver
itself and hab clients in user space. Those hab clients
in kernel dose not need them. So here uapi/linux/habmm.h
is refined into two files as habmmid.h and hab_ioctl.h.
Change-Id: I9344e3e3fec88a042ec1915a9c0d51a28cea6e9a
Signed-off-by: Yong Ding <yongding@codeaurora.org>
increase MAX_QTI_PKT_SIZE to 8KB to handle QMI messages of bigger
length of 8KB.
Change-Id: I479794c9563ae89b9062b75031b6cdc739a0f620
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
skb_header_pointer will copy data into the buffer if data is spread
across pages, else share pointer within skb->data. In
xt_socket_lookup_slow_v4, data is copied into udphdr, and later
th->doff is accessed, causing a out-of-bounds. This
access will only work if the data is not split across pages.
Copy data into tcphdr buffer for TCP packets instead.
Change-Id: Ifd6e15ece27fcf5bd02ae17571ab43f6df3ceb21
Fixes: a583636a ("inet: refactor inet[6]_lookup functions to take skb")
Signed-off-by: Tejaswi Tanikella <tejaswit@codeaurora.org>
KTM prolong KTM hotplug mitigation, cpu frequency mitigation etc. till
thermal-engine takes over. It is helping thermal runaway issues during
the boot time from KTM kernel late init level to thermal-engine
starts. Since BCL is also using KTM interface for mitigation, it
delays BCL mitigation till thermal-engine starts. Again target which
has LMH support enables Tj based mitigation very early in the boot.
So there is no risk of thermal runaway issues mentioned above.
Enable KTM interrupt mode mitigation back from kernel late init
itself. This reverts commit <07f3dcfc7f7c> ("msm: thermal: Prolong
KTM mitigation till thermal-engine takesover").
Change-Id: I7e4beaed2dd003c6ed36cc10e4bf003826fad827
Signed-off-by: Manaf Meethalavalappu Pallikunhi <manafm@codeaurora.org>
This change will wrap the 'hpd_off' flag with pluggable displays.
In non-pluggable display case 'hpd_off' flag prevents disabling
of HPD clocks and hence display subsystem doesn't got into suspend
state.
Change-Id: I28ade8fb60a60a15f1d23009de63bbf9f10c7c77
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
in_pkt pointer is holding dangling pointer address even after calling
release_pkt() which causing use-after-free.
Set the in_pkt pointer to NULL after free.
CRs-Fixed: 2210859
Change-Id: If5e01c0109c947e52f3ff269c9b2b50ac0dc2bdf
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>
The WLAN driver qcacld-3.2 depends on CNSS2, CFG80211 and ralated
defconfigs. So, add these defconfigs to enable WLAN over PCIe in
virtual platform msm8996_gvmq.
Change-Id: I3ade33ef26bc057b96b4b283669293a43a79b101
Signed-off-by: Ferry Zhou <tianguiz@codeaurora.org>
The device tree node qcom,cnss includes all WLAN related hardware
configurations including power supply regulators and pinctrl
configuration etc. So, add qcom,cnss into the dts of Linux/Android
virtual platform msm8996_gvmq to enable WLAN over PCIe.
Change-Id: I0dbefbeefb7c6e843e55f32a8b33c4113a3a2e6e
Signed-off-by: Ferry Zhou <tianguiz@codeaurora.org>
When firmware crashes during WLAN host driver loads, collects
firmware dump and proceeds with SSR as normal cases.
Change-Id: If2ac7da3c2db4b4116949d092ad53299f23c87e0
Signed-off-by: Yue Ma <yuem@codeaurora.org>
In cnss_mhi_notify_status(), NULL check should be performed before
dereference for pci_priv.
Change-Id: Iea5a6e2b8be9b07c235b02bfe02292f24da882d8
Signed-off-by: Yue Ma <yuem@codeaurora.org>
When set_buffers fails, binfo is freed and again accessed
while freeing smem memory.
CRs-Fixed: 2118860
Change-Id: Ifdd683f907862665e34d6d39d5a8634984804c01
Signed-off-by: Chinmay Sawarkar <chinmays@codeaurora.org>
Signed-off-by: Sanjay Singh <sisanj@codeaurora.org>
Currently GSI endpoints are disabled when host enables
flow control for RNDIS function. When these endpoints are
enabled again as part of flow control disable, no transactions
are observed on these endpoints. Fix this by not disabling the
endpoints as part of flow control enable but just stop the
active transfers on these endpoints.
Change-Id: I391a7048188b2a63e2df993fcebf7a6e78eaef14
Signed-off-by: Sriharsha Allenki <sallenki@codeaurora.org>
In the msm8996 telematics vplatform, only these MMID groups
for QCPE, clock, FDE and test are added into its device node.
Change-Id: Ib527a4e3a79ebf84fd6f47db66baa324eedb5300
Signed-off-by: Yong Ding <yongding@codeaurora.org>
Reset cipher_req.creq.dst and cipher_req.creq.src pointer to NULL
before returning from the function, and initialize scatterlist
variable before using it.
Change-Id: I5d5eee06a5213a05b20bf459ef0bf0c433fadbdd
Signed-off-by: Zhen Kong <zkong@codeaurora.org>
Signed-off-by: Parai Wang <fpwang@codeaurora.org>
