Structures in shared memory that can be modified by remote
processors may have untrusted values, they should be validated
before use.
Adding proper validation before using fields of shared
structures.
CRs-Fixed: 2421611
Change-Id: Ifed71c506a26105eac3db9ee35f086d7dbf5a3a3
Signed-off-by: Deepak Kumar Singh <deesin@codeaurora.org>
arr_filp is an alias to filp_to_release. It is exposed
to access indices greater than allotted space of 15 bytes,
equal to size of OBJECT_COUNTS_MAX_OO. This change fixes
the stack overflow by taking an independent variable to track
the number of output objects.
Change-Id: Idca9cef3c69693d27d4ca3d0e0b4845fc27c998a
Signed-off-by: Anmolpreet Kaur <anmolpre@codeaurora.org>
Add VOLTAGE_NOW power supply property to expose the USB voltage.
Change-Id: I3041aafaf365c205e53451a5d4ee79dcfe6b78bf
Signed-off-by: Kavya Nunna <knunna@codeaurora.org>
currently only NULL pointer check is used to validate the return
value from clk_get, this change to handle all the failures.
This snapshot is taken from auto-kernel.lnx.4.4.c1
ported it from auto-kernel.lnx.4.4.c1 to 4.4
Change-Id: I275cb4717c675baf528e05c50058f2c6b0025011
Signed-off-by: E V Ravi <evenka@codeaurora.org>
PMI8996 charger does not detect FLOAT adapter. To support it,
FLOAT detection is done by the USB driver and notified to PMIC
by reporting -ETIMEDOUT through the CURRENT_MAX power-supply
property. Charger then configures the charge current to 1500mA.
Change-Id: I6abd4668b41988d98465f00402aa2be558054cdd
Signed-off-by: Kavya Nunna <knunna@codeaurora.org>
If client enables HW AUTOCTS mode then set UPSTAT_AUTOCTS,otherwise
serial core disables TX fully at the framework layer and
no communication happens.
Signed-off-by: Mitul Golani <mgolani@codeaurora.org>
Change-Id: I13d6048fc2aeacd2f0078fc38f43e07cfd5a5850
Max packet size that GNSS can use is 8K.
Increase the max buff size support in driver from 4K
to 8K so that transfers larger than 4K are not failed
Change-Id: If74a7d9994101a55d27ff92258b8ab7ef2d54a50
Signed-off-by: Manu Gautam <mgautam@codeaurora.org>
Handle error condition and clean up resources in case of
failure with mhi driver.
Change-Id: I6de1ebe9063bc0cf4492a8334f242bf34e352e70
Signed-off-by: Rama Krishna Phani A <rphani@codeaurora.org>
Lock Implementation for avoid race condition leading
to out-of-bound write in "msm_vb2_queue_setup
CRs-Fixed: 2362627
Change-Id: I7f7420c7437b9ac2f215929a8614b0846e890c98
Signed-off-by: Vijay kumar Tumati <vtumati@codeaurora.org>
Signed-off-by: Haibin Liu <haibinl@codeaurora.org>
The hardware expects the PWM MSB value to be written
before LSB to avoid glitches in the output. Fix this.
Change-Id: I048bdbd0c096a6d03501bdd5b1d2d4bb50d45dd7
Signed-off-by: Anirudh Ghayal <aghayal@codeaurora.org>
This change is done so that in non display platform
indefinite wait is not introduced, however for platforms where
display driver is probed asynchronously we still
wait for completion.
Change-Id: I14932ee2c0e52330975529ca0be34b6e2521d05e
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
When icnss receive server arrive it send wlfw_msa_mem_info_send_sync_msg
QMI request to firmware and in response expect range of addresses and size
to be mapped. Add condition to check whether addresses in response falls
under valid range otherwise it asserts.
Change-Id: I9a8542cb6c3b3cefe112d1f08a76dd2eadf68d2f
Signed-off-by: Naman Padhiar <npadhiar@codeaurora.org>
currently only NULL pointer check is used to validate the return
value from clk_get, this change to handle all the failures.
This snapshot is taken from msm-4.9
Ported it from 4.9 to 4.4
Change-Id: Icd8b7e33d0f235a7c5dde2307972a594908e6a60
Signed-off-by: Sumalatha Malothu <smalot@codeaurora.org>
Protect ipa default routing table from
addition, deletion and modification once after
default rule added by ipa driver.
Change-Id: I4b8fdd9208425c5eb0bceed0ce62fb7d7a075e36
Signed-off-by: Akshay Pandit <pandit@codeaurora.org>
Change HDMI codec name in dai link to
align with the hdmi codec driver name.
Change-Id: I77fa781bb5149a21d7f7aadd819dc0c0296ac4f2
Signed-off-by: Soumya Managoli <smanag@codeaurora.org>
Update vendor avb flag and remove recovery partition from vbmeta
partition list as auto does not support recovery partition.
Change-Id: Idc6c5e2c2eb2cccd32223e77404fb06ef9e02908
Signed-off-by: Vagdhan Kanukurthi <vagdhank@codeaurora.org>
Added missing lock to avoid race conditon for dqbuf and
streamon
CRs-Fixed: 2376566
Change-Id: I1c0ef9014914a9892c4d443600618c52d0aeebfa
Signed-off-by: VijayaKumar T M <vtmuni@codeaurora.org>
While processing a packet containing command request, buffer size
need to be checked against size of the command structures that is
being parsed to prevent possible out of bound access.
CRs-Fixed: 2432633
Change-Id: I048bdbd0c096a6d03501bdd5b1d2d4bb50d45dd6
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
Add required support in ksbridge driver to send uevent with vendor id
and product id details.
Change-Id: I22974dfa63665e6ddcbda2f7d11c68f716c1c760
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
