Avoid corrupting the cb_list by setting timestamp before signal.
The fence driver changed in msm-5.4 by creating a union for the
fence cb_list, timestamp, and rcu. Therefore only one of these
fields can be used at a time. Fence driver will take care of
setting the timestamp during dma_fence_signal after it has
cached the cb_list. Also, use fence framework API to set fence
error instead of modifying the dma_fence struct directly.
Change-Id: I58dbaa495027cb575f4f0b03275ca4aa551ecacb
Signed-off-by: Steve Cohen <cohens@codeaurora.org>
Add sysfs node on crtc to trigger sde wake up early.
The command to trigger wake up early give in shell:
echo 1 > /sys/class/drm/sde-crtc-*/early_wakeup
Bug: 150196517
Test: trigger wake up and switch display power state
Test: testInflatingEmojiListViewFling
Test: testBrowseContentScroll
Change-Id: I96e6ad73e83e8a9e3e5e65e064c92f8e6a6d63f8
Signed-off-by: Midas Chien <midaschieh@google.com>
"LA.UM.9.12.c25-04100-SMxx50.QSSI13c28.0"
* tag 'LA.UM.9.12.c25-04100-SMxx50.QSSI13c28.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
asoc: codec: avoid out of bound write to map array.
dsp: q6voice: Adds checks for an integer overflow
Conflicts:
techpack/audio/asoc/codecs/rouleur/rouleur.c
techpack/audio/asoc/codecs/wcd937x/wcd937x.c
Change-Id: I56dc8bb76492c2000138048ca1a48ed66c38e5d9
dsi_display_clk_ctrl is assigned as a callback function to struct
sde_connector_ops::clk_ctrl. This changes changes the function type to
match the pointer type to avoid Control-Flow Integrity (CFI) failures.
Bug: 148470764
Change-Id: Id67a6971a597b047524cf6eac6c48c057e8f9e9a
Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
Since commit 84af7a6194 ("checkpatch: kconfig: prefer 'help' over
'---help---'"), the number of '---help---' has been gradually
decreasing, but there are still more than 2400 instances.
This commit finishes the conversion. While I touched the lines,
I also fixed the indentation.
There are a variety of indentation styles found.
a) 4 spaces + '---help---'
b) 7 spaces + '---help---'
c) 8 spaces + '---help---'
d) 1 space + 1 tab + '---help---'
e) 1 tab + '---help---' (correct indentation)
f) 1 tab + 1 space + '---help---'
g) 1 tab + 2 spaces + '---help---'
In order to convert all of them to 1 tab + 'help', I ran the
following commend:
$ find . -name 'Kconfig*' | xargs sed -i 's/^[[:space:]]*---help---/\thelp/'
Change-Id: I12e529786e66b62eaaede154b7264c67a0d37bf9
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Based on newer qcom kernels, change rmnet_shs_assign and
rmnet_perf_core_deaggregate from void to int.
Add missing argument to rmnet_perf_deag_entry.
Required after "READ_ONCE: Simplify implementations of {READ,WRITE}_ONCE()"
Change-Id: Idc4e844212148f26fb81a5f2287a133bff4c71b5
In an effort to reset the DP controller states on a disconnect, the
driver is issuing a SW reset to the controller. But SW reset on
the controller doesn't necessarily restore the controller to its
full reset state. It only resets part of the logic. So if for some
reason the MST streams were not disabled properly, ie. the slot
allocations were not reset properly in the controller, then a SW
reset would result in the DP controller raising state interrupts.
Since this SW reset is issued in the tail end of the disconnect
processing, the driver turns off all the clocks and also
removes the irq handler. This results in an interrupt storm at
the MDSS top level.
This change removes the SW reset on the disconnect path and
relies on the SW reset that already exists in the connect path
to restore controller state.
Change-Id: Ie7115e17d3c50c46c83c6f0e333da5cb534b8227
Signed-off-by: Rajkumar Subbiah <quic_rsubbia@quicinc.com>
Signed-off-by: Sandeep Gangadharaiah <quic_sandgang@quicinc.com>
The irq register and unregister calls in ppdone timeout
path can result in race condition which can lead to
scenarios where irqs will be enabled with no
callback registered. Add vblank mutex lock to avoid
such scenarios.
Change-Id: I02b07b773d6b9a28c3af431eb3d8314292769f12
Signed-off-by: Krishna Manikandan <mkrishn@codeaurora.org>
If there is unbalanced refcount for any interrupt, irq_stat_mask
does not get clear during suspend. On resume, enable irq is not
called leading to ctrl ISR permanently disabled. This is a defensive
check to recover from such scenario.
Change-Id: If78a1be5286f9b6e7ca5241cb5c980e60da00a48
Signed-off-by: daiss1 <daiss1@lenovo.com>
Reviewed-on: https://gerrit.mot.com/2088247
SLTApproved: Slta Waiver
SME-Granted: SME Approvals Granted
Tested-by: Jira Key
Reviewed-by: Guobin Zhang <zhanggb@motorola.com>
Submit-Approved: Jira Key
Replace all the occurrences of FIELD_SIZEOF() with sizeof_field() except
at places where these are defined. Later patches will remove the unused
definition of FIELD_SIZEOF().
This patch is generated using following script:
EXCLUDE_FILES="include/linux/stddef.h|include/linux/kernel.h"
git grep -l -e "\bFIELD_SIZEOF\b" | while read file;
do
if [[ "$file" =~ $EXCLUDE_FILES ]]; then
continue
fi
sed -i -e 's/\bFIELD_SIZEOF\b/sizeof_field/g' $file;
done
Change-Id: I24296633f28fea05d12618c8e47dc8acb8df18d8
Signed-off-by: Pankaj Bharadiya <pankaj.laxminarayan.bharadiya@intel.com>
Link: https://lore.kernel.org/r/20190924105839.110713-3-pankaj.laxminarayan.bharadiya@intel.com
Co-developed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: David Miller <davem@davemloft.net> # for net
Return type of ext4_page_mkwrite and ext4_filemap_fault are
changed to use vm_fault_t type.
With this patch all the callers of block_page_mkwrite_return()
are changed to handle vm_fault_t. So converting the return type
of block_page_mkwrite_return() to vm_fault_t.
Add these changes for msm drivers as well.
Change-Id: I4a274cc17da41dfbe34f4eaefff22db4a1754329
Signed-off-by: Souptick Joarder <jrdr.linux@gmail.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Matthew Wilcox <willy@infradead.org>
trace_printk is recommended for debugging purpose as it
requires temporary memory to handle strings. If used
anywhere within the kernel, memory will be allocated to it.
Hence removed it to avoid any unnecessary memory allocation.
Change-Id: If7b0cada91c97b21987f91e0ff7b7a15ce2145e2
Signed-off-by: Faiz Nabi Kuchay <quic_fkuchay@quicinc.com>
Signed-off-by: Hridaya Prajapati <info.hridayaprajapati@gmail.com>
"LA.UM.9.15.2.r1-11100-KAMORTA.QSSI14.0"
* tag 'LA.UM.9.15.2.r1-11100-KAMORTA.QSSI14.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
asoc: codec: avoid out of bound write to map array
asoc: codec: avoid out of bound write to map array
dsp: q6voice: Changing data type from %d to %ld
dsp: q6voice: Add buf size check for cvp cal data
Conflicts:
techpack/audio/asoc/codecs/wcd938x/wcd938x.c
Change-Id: I7d1385928f2945ca39e10a6d5a8b7cc497ea9d26
LA.UM.9.12.r1-18500-SMxx50.QSSI14.0
* tag 'LA.UM.9.12.r1-18500-SMxx50.QSSI14.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/camera-kernel:
msm: camera: sensor: handling condition for random read
msm: camera: memmgr: Remove the mutex lock for kref variable
Change-Id: If9f25f4c833965e83ea19a60de3bbd515dc81144
ANC headphones are no longer supported, removed dead code related to the feature.
Change-Id: I3dd51b5b1d9f77fd870947608f8a14fc3f7aeed0
Signed-off-by: Akhil Karuturi <akarutur@codeaurora.org>
"LA.UM.9.15.2.r1-10600-KAMORTA.QSSI14.0"
* tag 'LA.UM.9.15.2.r1-10600-KAMORTA.QSSI14.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/camera-kernel:
msm: camera: memmgr: Remove the mutex lock for kref variable
msm: camera: memmgr: Add refcount to track umd in use buffers
msm: camera: sensor: Handling race condition in util api
msm: camera: common: Fix possible OOB reads and writes operations
Change-Id: Ic30b7c9d5683965ee182c28681387a9725a83b17
"LA.UM.9.15.2.r1-10600-KAMORTA.QSSI14.0"
* tag 'LA.UM.9.15.2.r1-10600-KAMORTA.QSSI14.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
dsp: q6lsm: Check size of payload before access
asoc: codecs: Fix for the SSR issue on qcm2150
dsp: q6voice: Adds checks for an integer overflow
asoc: Fix out-of-bound write
dsp: q6voice: Adds checks for an integer overflow
Fix for OOB access issue
dsp: q6lsm: Check size of payload before access
Change-Id: I708a0be36841731d8c5126b8135123b642a8a7d7
"LA.UM.9.12.1.r1-09700-SMxx50.QSSI12.0"
* tag 'LA.UM.9.12.1.r1-09700-SMxx50.QSSI12.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
dsp: q6voice: Adds checks for an integer overflow
asoc: Fix out-of-bound write
dsp: q6voice: Adds checks for an integer overflow
dsp: q6lsm: Check size of payload before access
Fix for OOB access issue
Audio legacy: Integer overflow in msm_lsm_ioctl_compat during audio playback usecase. size = sizeof(p_info_32) + p_info_32.param_size; This overflow issue may result heap overflow during copying the data: memcpy(param_info_rsp, &p_info_32, sizeof(p_info_32));
ASoC: Resolve use after free in listen sound client
dsp: q6lsm: Add check for payload buffer
ASoC: msm-pcm-voip: Avoid interger underflow
soc: swr-mstr: Store and compare dev_addr along with dev_num
Conflicts:
techpack/audio/asoc/msm-compress-q6-v2.c
techpack/audio/asoc/msm-pcm-routing-v2.c
Change-Id: I76045565c18bea94657ac7bbb46a49058f108f8d
Return correct error code when session
is not supported since remaining memory
is not sufficient to proceed current session
Bug: 273301608
Test: CtsMediaMiscTestCases:android.media.misc.cts.ResourceManagerTest#testAVCVideoCodecReclaimHighResolution
Change-Id: Ib989b7ad41606303f2ff3359768105b10cf9393d
Return correct error code when session
is not supported when max mbpf limit
is reached.
Bug: 273301608
Test: CtsMediaMiscTestCases android.media.misc.cts.ResourceManagerTest#testReclaimResourceMixVsNonsecureHighResolution
Change-Id: I50739758df36d534970101977a1f64a465ba3e77
Cross-checked with msm-4.14 and msm-5.15 tags. The change does not exist
as a separate commit and is squashed into the initial import.
Change-Id: Ib3defedf0fbd5b7cdccdfba26383313ff05b4ef0
Signed-off-by: Alexander Winkowski <dereference23@outlook.com>
Cross-checked with msm-5.15 tag. The change does not exist as a separate
commit and is squashed into the initial import.
Change-Id: Ie922c512d7ea24661d3179cfd156ab8eb6fcc363
Signed-off-by: Alexander Winkowski <dereference23@outlook.com>
During Dynamic mode switch case, input_register_handler
is called even after it is registered leading to
list double add warnings and panic.
Change-Id: I312112deb08c998af516252f2117bc629eb13b37
"LA.UM.9.15.2.r1-09400-KAMORTA.QSSI14.0"
* tag 'LA.UM.9.15.2.r1-09400-KAMORTA.QSSI14.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
Audio legacy: Integer overflow in msm_lsm_ioctl_compat during audio playback usecase. size = sizeof(p_info_32) + p_info_32.param_size; This overflow issue may result heap overflow during copying the data: memcpy(param_info_rsp, &p_info_32, sizeof(p_info_32));
Change-Id: I8869b37a4cc5223d37ec0169efb6eb2965916dd6
"LA.UM.9.15.2.r1-09300-KAMORTA.QSSI12.0"
* tag 'LA.UM.9.15.2.r1-09300-KAMORTA.QSSI12.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
ASoC: bolero: Add check for CMPDR switch
ASoC: wcd937x: Add flag to decide RX_MUTE for HPHL and EAR
ASoC: msm-audio-effects-q6-v2: Add BPF order check
dsp: q6afe: Add check for fbsp state
dsp: q6asm: Add check for ADSP payload size
ASoC: msm-pcm-host-voice: Check validity of session idx
dsp: q6lsm: Address use after free for mmap handle
ASoC: Resolve use after free in listen sound client
dsp: q6lsm: Add check for payload buffer
ASoC: msm-pcm-host-voice: Check validity of session idx
dsp: q6lsm: Address use after free for mmap handle
dsp: q6lsm: Add check for payload buffer
ASoC: Resolve use after free in listen sound client
ASoC: msm-lsm-client: Integer overflow check
ASoC: dsp: q6core: Avoid use after free
ASoC: msm-pcm-q6-v2: Add dsp buf check
ASoC: msm-pcm-q6-v2: Add dsp buf check
asoc: changes to fix KW errors.
Change-Id: I1f9e980140a7e5941e16650781b61e6b5fde7c8b
When CONFIG_DEBUG_FS is disabled, the call to
debugfs_create_dir will result in an error.
Add a check of the config to avoid the error.
Change-Id: I7a79dbc5c4c5e1e3192a11d55ad9b7994788f30f
Signed-off-by: ziqic <quic_ziqic_01@quicinc.com>
"LA.UM.9.12.r1-17400-SMxx50.QSSI13.0"
* tag 'LA.UM.9.12.r1-17400-SMxx50.QSSI13.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/video-driver:
msm : Cap framerate for all Intra setting
msm : Cap framerate for all Intra setting
video: driver: Return proper error code
video: driver: Return proper error code
Change-Id: I6a750e08cd103f054a993ff8cc3eb147f2beafa6
"LA.UM.9.12.r1-16200-SMxx50.QSSI12.0"
* tag 'LA.UM.9.12.r1-16200-SMxx50.QSSI12.0' of https://git.codelinaro.org/clo/la/platform/vendor/opensource/audio-kernel:
dsp: add lock in ion free to avoid use after free
ASoC: Resolve use after free in listen sound client
Conflicts:
techpack/audio/dsp/msm_audio_ion.c
Change-Id: I44bcbc386cbfa2f6e3d1eef9b8bd1109d0df9b8c
Conversion of negative "num_modules" var value
will result in max possible unsigned int value
and hence can cause mem corruption when accessed.
Resolve this by assigning the same data type
to "num_modules" var as used in the calling fn.
Change-Id: I4c9d7215b9c7345637e1eb3a1992a41fef71c5cb
Signed-off-by: Soumya Managoli <quic_c_smanag@quicinc.com>
