Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm
/
8ed8e504f14a1b726f5ce16a0c0ac6d61ac217b7
8ed8e50
KEYS: Don't permit request_key() to construct a new keyring
by David Howells
· 9 years ago
1e7c24a
KEYS: Fix stale key registration at error path
by Takashi Iwai
· 10 years ago
829089b
key: Fix resource leak
by Alan Cox
· 12 years ago
a1d714b
Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and security keys
by Mathieu Desnoyers
· 12 years ago
f60eef7
keys: fix race with concurrent install_user_keyrings()
by David Howells
· 12 years ago
c1a72df
BACKPORT: msm: adsprpc: Use unsigned integer for length values
by Dennis Cagle
· 7 years ago
544dcfd
BACKPORT: futex: Prevent overflow by strengthen input validation
by Li Jinyue
· 7 years ago
5a50667
BACKPORT: futex: Remove requirement for lock_page() in get_futex_key()
by Mel Gorman
· 9 years ago
2cf02d4
futex: Fix a race condition between REQUEUE_PI and task death
by Brian Silverman
· 10 years ago
b579353
futex: Ensure get_futex_key_refs() always implies a barrier
by Catalin Marinas
· 10 years ago
400a14a
futex: Unlock hb->lock in futex_wait_requeue_pi() error path
by Thomas Gleixner
· 10 years ago
e94cdf7
rtmutex: Plug slow unlock race
by Thomas Gleixner
· 11 years ago
2ea8735
rtmutex: Handle deadlock detection smarter
by Thomas Gleixner
· 11 years ago
1fabdbb
rtmutex: Detect changes in the pi lock chain
by Thomas Gleixner
· 11 years ago
12c1ed0
rtmutex: Fix deadlock detector for real
by Thomas Gleixner
· 11 years ago
aa76baa
futex: Make lookup_pi_state more robust
by Thomas Gleixner
· 11 years ago
4dddf67
futex: Always cleanup owner tid in unlock_pi
by Thomas Gleixner
· 11 years ago
5808c72
futex: Validate atomic acquisition in futex_lock_pi_atomic()
by Thomas Gleixner
· 11 years ago
b3cbd89
futex: Prevent attaching to kernel threads
by Thomas Gleixner
· 11 years ago
4e83753
futex: Add another early deadlock detection check
by Thomas Gleixner
· 11 years ago
1ee4f05
futex: fix handling of read-only-mapped hugepages
by Linus Torvalds
· 11 years ago
0f846bb
futex: Take hugepages into account when generating futex_key
by Zhang Yi
· 12 years ago
f8597ae
hugetlbfs: fix mmap failure in unaligned size request
by Naoya Horiguchi
· 12 years ago
4db14f6
futex: Revert "futex: Mark get_robust_list as deprecated"
by Thomas Gleixner
· 12 years ago
2b3c872
futex: avoid wake_futex() for a PI futex_q
by Darren Hart
· 12 years ago
7c0713b
futex: Handle futex_pi OWNER_DIED take over correctly
by Thomas Gleixner
· 12 years ago
73bca9c
futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi()
by Darren Hart
· 13 years ago
f95d7d0
futex: Fix bug in WARN_ON for NULL q.pi_state
by Darren Hart
· 13 years ago
c1838d2
futex: Test for pi_mutex on fault in futex_wait_requeue_pi()
by Darren Hart
· 13 years ago
bf51ef8
msm: adsprpc: Fix race conditions on same buffer
by Tharun Kumar Merugu
· 7 years ago
a666d66
UPSTREAM: ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
by Alexander Potapenko
· 8 years ago
3d9756f
diag: Validate copying length against source buffer length
by Hardik Arya
· 7 years ago
ef36863
crypto: hmac - require that the underlying hash algorithm is unkeyed
by Eric Biggers
· 7 years ago
db75f87
msm: sensor: actuator: avoid accessing out of bound memory
by Haibin Liu
· 7 years ago
49a48a4
msm: vidc: Fix use after free bug in set_output_buffers
by Chinmay Sawarkar
· 7 years ago
df782bd
loop: fix concurrent lo_open/lo_release
by Linus Torvalds
· 7 years ago
9a1aa86
Input: gtco - fix potential out-of-bound access
by Dmitry Torokhov
· 7 years ago
bd170eb
msm: ipa: Fix the handling of default IPA header
by Ghanim Fodi
· 7 years ago
44560a2
net: usb: rmnet_usb_ctrl: Fix use after free issue
by Sai Krishna Juturi
· 7 years ago
11a210e
sctp: do not peel off an assoc from one netns to another one
by Xin Long
· 7 years ago
e7f3f9f
net: ipv4: emulate READ_ONCE() on ->hdrincl bit-field in raw_sendmsg()
by Nicolai Stange
· 7 years ago
18ed6c3
net: ipv4: fix for a race condition in raw_sendmsg
by Mohamed Ghannam
· 7 years ago
1c911cd
ipv4: Avoid reading user iov twice after raw_probe_proto_opt
by Herbert Xu
· 10 years ago
5b400da
ipv4: Use standard iovec primitive in raw_probe_proto_opt
by Herbert Xu
· 10 years ago
88395c5
UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()
by Eric Biggers
· 7 years ago
cf889f6
ASoC: apr: Add validity check to APR port
by Aditya Bavanari
· 7 years ago
aed116f
BACKPORT: USB: core: harden cdc_parse_cdc_header
by Marissa Wall
· 7 years ago
106c738
cdc-acm: prevent infinite loop when parsing CDC headers.
by Quentin Casasnovas
· 10 years ago
a5a3ba4
cdc-acm: add sanity checks
by Oliver Neukum
· 10 years ago
98e2602
ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
by Takashi Iwai
· 7 years ago
e80c08a
USB: fix out-of-bounds in usb_set_configuration
by Greg Kroah-Hartman
· 7 years ago
d9fbd68
HID: usbhid: fix out-of-bounds bug
by Jaejoong Kim
· 7 years ago
816c02c
USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
by Alan Stern
· 7 years ago
f591920
USB: serial: console: fix use-after-free after failed setup
by Johan Hovold
· 7 years ago
f736675
msm:ipa: Fix to incorrect structure access
by Mohammed Javid
· 8 years ago
f63cdb6
msm: ipa: Prevent multiple header deletion from user space
by Ghanim Fodi
· 8 years ago
21fc0f7
ASoC: msm: qdsp6v2: Set freed pointers to NULL
by Aditya Bavanari
· 7 years ago
18906ad
diag: Add protection while de-initializing clients
by Mohit Aggarwal
· 8 years ago
e640177
BACKPORT: packet: in packet_do_bind, test fanout with bind_lock held
by Marissa Wall
· 7 years ago
870e82a
ALSA: usb-audio: Kill stray URB at exiting
by Takashi Iwai
· 7 years ago
c3d4a71
msm: vidc: update the check to ignore extradata plane in dqbuf
by Praveen Chavan
· 9 years ago
16d0335
msm: vidc: add ion_handle checking before mapping buffers
by Praveen Chavan
· 9 years ago
9fd90e7
msm: vidc: Add same fd ref only for static buffer mode
by Surajit Podder
· 10 years ago
893536a
wcnss: fix the potential buffer flow issue in firmware setup
by Sarada Prasanna Garnayak
· 8 years ago
052effe
wcnss: Fix mismatch between format and argument in pr_err()
by Jeff Johnson
· 11 years ago
b5768a6
msm: camera: Return -NOTTY on invalid ioctl command.
by Trishansh Bhardwaj
· 7 years ago
2e43a4e
msm: sensor: Validationg function pointers before using them
by VijayaKumar T M
· 8 years ago
c5593a0
msm: camera: sensor: Validate destination step position
by Rajesh Bondugula
· 8 years ago
4098ac8
msm: camera: validate num_streams in stream_cfg_cmd before using it
by Gaoxiang Chen
· 8 years ago
db56ff6
mqueue: fix a use-after-free in sys_mq_notify()
by Cong Wang
· 8 years ago
4c49736
Sanitize 'move_pages()' permission checks
by Linus Torvalds
· 8 years ago
7b983f1
tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
by Wei Wang
· 8 years ago
75bdf91
KEYS: prevent KEYCTL_READ on negative key
by Eric Biggers
· 7 years ago
64fa6cd
KEYS: fix dereferencing NULL payload with nonzero length
by Eric Biggers
· 8 years ago
8b98179
packet: fix tp_reserve race in packet_set_ring
by Willem de Bruijn
· 8 years ago
6758127
packet: hold bind lock when rebinding to fanout hook
by Ben Hutchings
· 7 years ago
740bf0f
diag: Add mutex protection while reading dci debug statistics
by Sreelakshmi Gownipalli
· 7 years ago
b5816e4
msm: vidc: WARN_ON() reveals fuction addresses
by Ariel Yin
· 8 years ago
bd924fe
ANDROID: qtaguid: Fix the UAF probelm with tag_ref_tree
by Chenbo Feng
· 7 years ago
16ed9c1
rtac: add size check when reading cal data kvaddr buffer
by kunleiz
· 7 years ago
1e191c5
ASoC: wcd9xxx: restrict debugfs permission
by Karthikeyan Mani
· 7 years ago
13fee7c
USB: core: prevent malicious bNumInterfaces overflow
by Alan Stern
· 7 years ago
1a63b62
usb: config->desc.bLength may not exceed amount of data returned by the device
by Hans de Goede
· 12 years ago
193f237
ipsec: Fix aborted xfrm policy dump crash
by Ben Hutchings
· 7 years ago
9bee074
iovec: make sure the caller actually wants anything in memcpy_fromiovecend
by Paul Lawrence
· 7 years ago
5ca98ba
ANDROID: sound: rawmidi: Hold lock around realloc
by Daniel Rosenberg
· 7 years ago
4fa1fe9
clocksource: arch_timer: make virtual counter access configurable
by Greg Hackmann
· 7 years ago
e8acc9f
staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
by Viktor Slavkovic
· 7 years ago
6931318
crypto: algif_skcipher - Load TX SG list after waiting
by Herbert Xu
· 9 years ago
49ca11d
ANDROID: sdcardfs: fix potential crash when reserved_mb is not zero
by Lianjun Huang
· 7 years ago
ee93c70
leds: trigger: ledtrig-backlight: Fix invalid memory access in fb_event notification callback
by Manfred Schlaegl
· 12 years ago
8249a07
msm: mdss: Make LEDS_TRIGGER_BACKLIGHT work
by Ricardo Cerqueira
· 9 years ago
e59ae0b
FP2: disable KSM
by chrmhoffmann
· 7 years ago
0368080
ANDROID: sdcardfs: Don't d_drop in d_revalidate
by Daniel Rosenberg
· 7 years ago
0f0c980
ANDROID: sdcardfs: Set s_root to NULL after putting
by Daniel Rosenberg
· 7 years ago
5ae351e
ANDROID: sdcardfs: d_make_root calls iput
by Daniel Rosenberg
· 7 years ago
ff80533
ANDROID: sdcardfs: Check for private data earlier
by Daniel Rosenberg
· 7 years ago
396bf57
ANDROID: fuse: Add null terminator to path in canonical path to avoid issue
by Ritesh Harjani
· 7 years ago
dbd58bd
ANDROID: sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries.
by Ritesh Harjani
· 7 years ago
7d0e3e9
ANDROID: sdcardfs: Set num in extension_details during make_item
by Ritesh Harjani
· 7 years ago
Next »