Commit graph

598196 commits

Author SHA1 Message Date
Linux Build Service Account
fb048ed53e Merge "ARM: dts: msm: Enable PMIC-GPIO clients for msm8996 GVM" 2018-04-14 13:44:49 -07:00
Linux Build Service Account
03da9df1d7 Merge "ARM: dts: msm: Add USB devices for msm8996 GVM" 2018-04-14 13:44:47 -07:00
Linux Build Service Account
071d16fa62 Merge "defconfig: msm-auto: Make hotplug section size as 256 MB" 2018-04-13 04:52:23 -07:00
Linux Build Service Account
991252149c Merge "net: ipc_router: Fix buffer overflow during memcpy" 2018-04-13 04:52:22 -07:00
Linux Build Service Account
0d75fa8af2 Merge "msm: camera: Framedrop notification" 2018-04-13 04:52:20 -07:00
Linux Build Service Account
4ca97c41f1 Merge "ANDROID: fuse: Add null terminator to path in canonical path to avoid issue" 2018-04-13 04:52:18 -07:00
Linux Build Service Account
7c5a58c945 Merge "msm: ais: jpegdma: Fix for ASAN issues in jpegdma module" 2018-04-13 04:52:17 -07:00
Linux Build Service Account
6950f08dc3 Merge "leds: qpnp-flash-v2: Fix HW_STROBE configuration" 2018-04-13 04:52:15 -07:00
Linux Build Service Account
9c00a6d3a8 Merge "ANDROID: uid_sys_stats: Replace tasklist lock with RCU in uid_cputime_show" 2018-04-12 18:21:55 -07:00
Linux Build Service Account
0bf17f6178 Merge "ARM: dts: msm: Allow pm_suspend in host mode for msm8996 Auto CDP" 2018-04-12 18:21:53 -07:00
Linux Build Service Account
bef554d6c9 Merge "clk: msm: Fix signal interrupt issue for virtual clock" 2018-04-12 18:21:51 -07:00
Linux Build Service Account
5c27031002 Merge "sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries." 2018-04-12 18:21:49 -07:00
Linux Build Service Account
6230ae3c42 Merge "f2fs: Set GF_NOFS in read_cache_page_gfp while doing f2fs_quota_read" 2018-04-12 18:21:47 -07:00
Vivek Kumar
e720318c38 ARM: dts: msm: Enable PMIC-GPIO clients for msm8996 GVM
Enable PMIC-GPIO clients in la-dts file which are on SMPI bus
for msm8996 GVM.These clients use virtual spmi-arb driver.

Change-Id: I6e6da2ac77a0fffea548e777b5dba9239cf76a18
Signed-off-by: Vivek Kumar <vivekuma@codeaurora.org>
2018-04-12 15:29:11 +05:30
Vivek Kumar
7d2a0a988a ARM: dts: msm: Enable blsp_uart node for msm8996 GVM
Enable blsp_uart device node for uart-passthrough in
la-gvm specific DT file for msm8996 GVM.

Change-Id: I3907e982573f3052e56fcfdd19c76822d336aa14
Signed-off-by: Vivek Kumar <vivekuma@codeaurora.org>
2018-04-12 15:27:27 +05:30
Vivek Kumar
333c8e6e89 ARM: dts: msm: Add USB devices for msm8996 GVM
Add USB device for android in USB specific DT file.
Enable required devices for USB pass-through in LA
specific DT file for msm8996 GVM.

Change-Id: Ic007607dcfb2dd8ee9839ad58d451b6a98c5fb06
Signed-off-by: Vivek Kumar <vivekuma@codeaurora.org>
2018-04-12 15:25:56 +05:30
Linux Build Service Account
2e8cbd520c Merge "USB: f_accessory: Check dev pointer before decoding ctrl request" 2018-04-11 19:18:42 -07:00
Linux Build Service Account
e718c5461b Merge "ath10k: enable neighbor solicitation offload in wow suspend" 2018-04-11 19:18:41 -07:00
Linux Build Service Account
4703302cc7 Merge "ARM: dts: msm: add qrng for gvm on msm8996" 2018-04-11 19:18:40 -07:00
Linux Build Service Account
eff7b38ee8 Merge "ais: report csid error event to user" 2018-04-11 19:18:38 -07:00
Vivek Kumar
2592d786e8 usb: msm: Add missing android-usb related documentation
This change adds the missing documentation related to
device tree bindings for android-usb functionality.

Change-Id: Iee24c0a6a333792983a5bea00adaa9a697ab70e3
Signed-off-by: Vivek Kumar <vivekuma@codeaurora.org>
2018-04-11 18:07:30 -07:00
Arun KS
0e4865bff9 defconfig: msm-auto: Make hotplug section size as 256 MB
On Mojave board, hotplug-able memory size is 256 MB. This depends
on DDR configuration. Configure HOTPLUG_SIZE_BITS to match this.

Change-Id: I014be9240f665cb1754fe701b4d57cf898b5f693
Signed-off-by: Arun KS <arunks@codeaurora.org>
2018-04-11 17:48:08 +05:30
Zhiqiang Tu
eddcb31158 clk: msm: Fix signal interrupt issue for virtual clock
Virtual clock operations returned error when received signal.
Uninterruptible flag is added in receiving response to avoid
being interrupted by signal.

Change-Id: Id3b5b56432751ec5b49c36a028444c0360fe811f
Signed-off-by: Zhiqiang Tu <ztu@codeaurora.org>
2018-04-10 22:27:00 -07:00
Yong Ding
785f45b603 soc: qcom: hab: add the uninterruptible receive support
In the blocking mode of habmm_socket_recv(), it is an
interruptible wait by default. Here, the uninterruptible
version is added.

Change-Id: Iba9ee10afb3f2529a99a9c90f6fc0cb56fb9cb08
Signed-off-by: Yong Ding <yongding@codeaurora.org>
2018-04-11 13:11:49 +08:00
Ritesh Harjani
bb700dcf67 f2fs: Set GF_NOFS in read_cache_page_gfp while doing f2fs_quota_read
Quota code itself is serializing the operations by taking mutex_lock.
It seems a below race can happen if GF_NOFS is not used in f2fs_quota_read

__switch_to+0x88
__schedule+0x5b0
schedule+0x78
schedule_preempt_disabled+0x20
__mutex_lock_slowpath+0xdc   		//mutex owner is itself
mutex_lock+0x2c
dquot_commit+0x30			//mutex_lock(&dqopt->dqio_mutex);
dqput+0xe0
__dquot_drop+0x80
dquot_drop+0x48
f2fs_evict_inode+0x218
evict+0xa8
dispose_list+0x3c
prune_icache_sb+0x58
super_cache_scan+0xf4
do_shrink_slab+0x208
shrink_slab.part.40+0xac
shrink_zone+0x1b0
do_try_to_free_pages+0x25c
try_to_free_pages+0x164
__alloc_pages_nodemask+0x534
do_read_cache_page+0x6c
read_cache_page+0x14
f2fs_quota_read+0xa4
read_blk+0x54
find_tree_dqentry+0xe4
find_tree_dqentry+0xb8
find_tree_dqentry+0xb8
find_tree_dqentry+0xb8
qtree_read_dquot+0x68
v2_read_dquot+0x24
dquot_acquire+0x5c			// mutex_lock(&dqopt->dqio_mutex);
dqget+0x238
__dquot_initialize+0xd4
dquot_initialize+0x10
dquot_file_open+0x34
f2fs_file_open+0x6c
do_dentry_open+0x1e4
vfs_open+0x6c
path_openat+0xa20
do_filp_open+0x4c
do_sys_open+0x178

Change-Id: I6cc8417ad00426fd93bb42841e20217c0e44103a
Signed-off-by: Ritesh Harjani <riteshh@codeaurora.org>
2018-04-10 21:39:41 -07:00
Arun KS
684b489a31 arm64: Make section size configurable for hotplug
On arm64, currently section size is hard-coded to 1G.
Make this configurable if hotplug is enabled to support
more finer granularity for hotplug-able memory.

Change-Id: I5327ead37069176f4ba34657133fab303fb15b82
Signed-off-by: Arun KS <arunks@codeaurora.org>
2018-04-10 15:36:39 +05:30
Vijayavardhan Vennapusa
1b1943b755 USB: f_accessory: Check dev pointer before decoding ctrl request
In case of poweroff charging mode, accessory function instance
is not created and due to this, _acc_dev will be NULL. If target
is connected to Accessory dock in poweroff charging mode, there
is a chance dev pointer is accessed, which is NULL. Hence add a
check before processing control request and return error if it is
NULL.

Change-Id: I4f1deb9d764b8c0bd1d7837cbc43a2933167f568
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
2018-04-10 02:53:48 -07:00
Sarada Prasanna Garnayak
9368586ebe ath10k: enable neighbor solicitation offload in wow suspend
In IPV6 the neighbor solicitations are used by nodes to determine
the link layer address of a neighbor and neighbor advertisements
are used by nodes to respond to a neighbor solicitation message.

During WOW suspend offload the neighbor solicitation packet handling
method to WLAN firmware, this adds support to prevent the device
wakeup by neighbor solicitation packet.

CRs-Fixed: 2217590
Change-Id: I5d860e6651b7c62223d9d00886fc386dcf647cab
Signed-off-by: Sarada Prasanna Garnayak <sgarna@codeaurora.org>
2018-04-10 00:36:44 -07:00
Parai Wang
db39e8e834 ARM: dts: msm: add qrng for gvm on msm8996
Add device node qualcomm hardware random generator, so that to provide
real random number if qrng is enabled.
This is for security purpose for the application.

Change-Id: Ib359b39ec5c32cb05ed1e38c1ad377657e5c47ae
Signed-off-by: Parai Wang <fpwang@codeaurora.org>
2018-04-09 20:03:49 -07:00
Ritesh Harjani
ce0786116c sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries.
sdcardfs_name_match gets a 'name' argument from the underlying FS.
This need not be null terminated string.
So in sdcardfs_name_match -> qstr_case_eq -> we should use
str_n_case_eq.

This happens because few of the entries in lower level FS may not be
NULL terminated and may have some garbage characters passed while
doing sdcardfs_name_match.

For e.g.
 # dmesg |grep Download
 [  103.646386] sdcardfs_name_match: q1->name=.nomedia, q1->len=8,
 q2->name=Download\x17\x80\x03, q2->len=8
 [  104.021340] sdcardfs_name_match: q1->name=.nomedia, q1->len=8,
 q2->name=Download\x17\x80\x03, q2->len=8
 [  105.196864] sdcardfs_name_match: q1->name=.nomedia, q1->len=8,
 q2->name=Download\x17\x80\x03, q2->len=8
 [  109.113521] sdcardfs_name_match: q1->name=logs, q1->len=4,
 q2->name=Download\x17\x80\x03, q2->len=8

Now when we try to create a directory with different case for a such
files. SDCARDFS creates a entry if it could not find the underlying
entry in it's dcache.

To reproduce:-
1. bootup the device wait for some time after sdcardfs mounting to
   complete.
2. cd /storage/emulated/0
3. echo 3 > /proc/sys/vm/drop_caches
4. mkdir download

We now start seeing two entries with name.
Download & download.

Change-Id: I976d92a220a607dd8cdb96c01c2041c5c2bc3326
Signed-off-by: Ritesh Harjani <riteshh@codeaurora.org>
2018-04-09 04:25:18 -07:00
Archana Sriram
d620817f3a msm: kgsl: Enhance reading lm_sequence in _execute_reg_sequence()
Modified conditional checks to read lm_sequence so as to avoid
the possibility of pointer overflow.

CRs-Fixed: 2212443
Change-Id: I72b30e35996c40f23fc81739e27724b1188f1c05
Signed-off-by: Archana Sriram <apsrir@codeaurora.org>
2018-04-09 03:57:51 -07:00
annamraj
5925180360 msm: camera: Framedrop notification
Notify the frame drop using ioctl
VIDIOC_MSM_BUF_MNGR_BUF_ERROR

Change-Id: Ide54d98fd05e19f5e2d7e88b6b65e151aa257334
Signed-off-by: annamraj <annamraj@codeaurora.org>
2018-04-09 14:09:04 +05:30
Ritesh Harjani
ba869c9422 ANDROID: fuse: Add null terminator to path in canonical path to avoid issue
page allocated in fuse_dentry_canonical_path to be handled in
fuse_dev_do_write is allocated using __get_free_pages(GFP_KERNEL).
This may not return a page with data filled with 0. Now this
page may not have a null terminator at all.
If this happens and userspace fuse daemon screws up by passing a string
to kernel which is not NULL terminated (or did not fill anything),
then inside fuse driver in kernel when we try to do
strlen(fuse_dev_write->kern_path->getname_kernel)
on that page data -> it may give us issue with kernel paging request.

Unable to handle kernel paging request at virtual address
------------[ cut here ]------------
<..>
PC is at strlen+0x10/0x90
LR is at getname_kernel+0x2c/0xf4
<..>
strlen+0x10/0x90
kern_path+0x28/0x4c
fuse_dev_do_write+0x5b8/0x694
fuse_dev_write+0x74/0x94
do_iter_readv_writev+0x80/0xb8
do_readv_writev+0xec/0x1cc
vfs_writev+0x54/0x64
SyS_writev+0x64/0xe4
el0_svc_naked+0x24/0x28

To avoid this we should ensure in case of FUSE_CANONICAL_PATH,
the page is null terminated.

Change-Id: I33ca7cc76b4472eaa982c67bb20685df451121f5
Bug: 75984715
[Daniel - small edit, using args size ]
Signed-off-by: Daniel Rosenberg <drosen@google.com>
Git-Repo: https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?h=aosp-new/android-4.9&id=4fb542f2aa1414cea5686efcf72a411b7213c375
Git-Commit: 4fb542f2aa1414cea5686efcf72a411b7213c375
Signed-off-by: Ritesh Harjani <riteshh@codeaurora.org>
2018-04-09 00:57:41 -07:00
Suprith Malligere Shankaregowda
0a5632c04d msm: ais: jpegdma: Fix for ASAN issues in jpegdma module
Adding Lock mechanism to avoid concurrency issues between reqbufs
and streamoff calls.

Change-Id: Ic915d346d0aa60d71007a359760a6a573734b6e5
Signed-off-by: Suprith Malligere Shankaregowda <supgow@codeaurora.org>
2018-04-08 21:06:23 -07:00
Linux Build Service Account
ef00227cce Merge "clk: msm: osm: Update maximum number of bytes to read from buffer" 2018-04-08 07:55:03 -07:00
Linux Build Service Account
a04dcd98a4 Merge "qseecom: fix issues when processing blocked listener request" 2018-04-07 19:52:38 -07:00
Linux Build Service Account
85e30309f0 Merge "qseecom: block system signals when waiting for listener available" 2018-04-07 19:52:37 -07:00
Linux Build Service Account
1a206ae00d Merge "Revert "msm: vidc: Add support for decoder STOP command"" 2018-04-07 19:52:36 -07:00
Linux Build Service Account
81a479b128 Merge "ASoC: msm: qdsp6v2: add 24b capture support for tert mi2s" 2018-04-07 19:52:34 -07:00
Linux Build Service Account
8ca646263b Merge "[drm/sde] fix uninitialized src/dst size in sde plane" 2018-04-07 19:52:33 -07:00
Zhen Kong
4aa1034bf7 qseecom: fix issues when processing blocked listener request
When processing blocked listener request, ptr_app's app_blocked
flag should be set to prevent it being unloaded at this time;
Besides, need to check unblock request's scm_call response result
to see if it is blocked again; and removed redundant codes.

Change-Id: I2d72a88e9e600d6b7e944ae978b9d89a7b6db242
Signed-off-by: Zhen Kong <zkong@codeaurora.org>
2018-04-06 12:42:51 -07:00
Zhen Kong
b3ba6ffa2c qseecom: block system signals when waiting for listener available
Make change to block system signals when qseecom is waiting for
a blocked listener becomes available. This will prevent qseecom
being waken up by power collapse and returning to kernel, which
may cause XPU violation as TA req/resp buffer is still XPU protected
at this time

Change-Id: Ie5ea16f11ad653937236de042afb1bb5710123e6
Signed-off-by: Zhen Kong <zkong@codeaurora.org>
2018-04-06 12:42:38 -07:00
Camus Wong
d3fd31550b [drm/sde] fix uninitialized src/dst size in sde plane
SDE plane src/dst size is uninitialized and programmed to hw when
only color format is changed. This change will only configure hw
when src/dst size is calculated.

Change-Id: I5953f899a2c503b1d8f2577c28a67711b9ed9a67
Signed-off-by: Camus Wong <camusw@codeaurora.org>
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
2018-04-05 23:52:59 -07:00
Linux Build Service Account
0148dbacea Merge "diag: Allocate DCI memory using vzalloc instead of kzalloc" 2018-04-05 18:47:25 -07:00
Linux Build Service Account
756af063bd Merge "icnss: Consider recovery as FW down" 2018-04-05 18:47:24 -07:00
Linux Build Service Account
08acb0dfc3 Merge "msm: ipa2: Fix IPA kernel NULL pointer dereference" 2018-04-05 18:47:22 -07:00
Linux Build Service Account
fa6082745d Merge "fbdev: msm: check buffer size before writing to user buffer" 2018-04-05 18:47:21 -07:00
Linux Build Service Account
8dc67c0f98 Merge "xhci: plat: Avoid xhci_resume if skip_resume flag is set" 2018-04-05 18:47:19 -07:00
Andy Sun
366c6fbe65 ais: report csid error event to user
Enable CSID error interrupts, and sending the error status
to user mode components as v4l2 event.

Change-Id: I62a08a88ebc39e1192136ba1c9179f709f5439f5
Signed-off-by: Andy Sun <bins@codeaurora.org>
2018-04-06 08:31:01 +08:00
Sanjay Singh
ee2e90e8fd Revert "msm: vidc: Add support for decoder STOP command"
This reverts commit 84d22be9dc ("msm: vidc: Add support for decoder
 STOP command")
There is regression for Video playback with this commit. Therefore,
it needs to be reverted.
Change-Id: Ibc4ca31c48e148063de60f59ea90d693d5657163
Signed-off-by: Sanjay Singh <sisanj@codeaurora.org>
2018-04-05 14:39:48 +05:30