Enable config to support SHIPPING_API_LEVEL 30 for msm8937_32go
Change-Id: Ie132b141e5a2cde2f7f0f498e084da40540f210d
Signed-off-by: Rahul Shahare <rshaha@codeaurora.org>
With the configfs filesystem it’s possible to manipulate kernel
object by creating/deleting folders into /config path. Here port
object is created by a mkdir and leads to allocate this object,
while the rmdir system call leads to free this object.
If one thread does these two operations of creation and deletion
of the folder and one tries to open it, it can lead to a
race condition where port object can be freed by the time
it is used in f_cdev_open leading to use after free error.
Fix this by using embedded struct device and the refcounting
mechanism built-in which increases and decreases refcount upon
creation and deletion of port and port will be freed when
reference count is zero ensuring that "port" object survives
until the last user releases it.
Change-Id: I88701ef161c9f3215631da81c3a8d4c980d12b25
Signed-off-by: Rohith Kollalsi <rkollals@codeaurora.org>
Enable config to support SHIPPING_API_LEVEL 30 for msm8937_32.
Change-Id: I796eb45d0d866851e26eab62aa28b7d52907127e
Signed-off-by: Rahul Shahare <rshaha@codeaurora.org>
In case 'mdss_rotator_req_init' function fails, the
error handling code frees the 'req' struct which
is not yet allocated. Correct this error scenario
by freeing the 'req' struct only for cases where it
is already allocated.
Change-Id: If9089c59497fef628528e6a462eb5a4699453214
Signed-off-by: Nirmal Abraham <nabrah@codeaurora.org>
tiocspgrp() takes two tty_struct pointers: One to the tty that userspace
passed to ioctl() (`tty`) and one to the TTY being changed (`real_tty`).
These pointers are different when ioctl() is called with a master fd.
To properly lock real_tty->pgrp, we must take real_tty->ctrl_lock.
This bug makes it possible for racing ioctl(TIOCSPGRP, ...) calls on
both sides of a PTY pair to corrupt the refcount of `struct pid`,
leading to use-after-free errors.
Fixes: 47f86834bb ("redo locking of tty->pgrp")
CC: stable@kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Reviewed-by: Jiri Slaby <jirislaby@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: I0dee7d6745ff1e740de5f8008da63bc9a3c55d0d
Git-commit: 54ffccbf053b5b6ca4f6e45094b942fab92a25fc
Git-repo: https://android.googlesource.com/kernel/msm
Signed-off-by: urevanth <urevanth@codeaurora.org>
Adding support for register writes and values to change the duty
cycle of the fan.
Change-Id: I91efd154e9490c4dc1ecc8f84890fc1ef1eaf307
Signed-off-by: Rajesh Bharathwaj <rajeshbharathwaj@codeaurora.org>
Unfork Android.
This reverts commit 8e5e42d5ae.
Perf_event_paranoid=3 is no longer needed on Android. Access control
of perf events is now done by selinux. See:
https://patchwork.kernel.org/patch/11185793/.
Bug: 120445712
Bug: 137092007
Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
Change-Id: Iba493424174b30baff460caaa25a54a472c87bd4
Git-commit: 025a1ee618
Git-repo: https://android.googlesource.com/kernel/common/
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
Some UDC may require allocation of some extra bytes for
TX buffer due to hardware requirement. Add necessary
changes for the same.
Change-Id: Ia0ec21bbbe7d514f840f482d0e063559d4231338
Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org>
Signed-off-by: Ajay Agarwal <ajaya@codeaurora.org>
If composition switch happens while epfile_io() is in progress,
there is a chance that gadget pointer is accessed after unbind(),
which could be NULL. This could cause accessing NULL pointer and
results in panic. Fix the issue by accessing member variables from
local copy instead of directly accessing from ffs->gadget.
Change-Id: Iec61725da9c82e8c06e66acb8a6bdbc98ff9444a
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
USB AXI prefetch requires additional 256 bytes than actual required
buffer size for USB IN endpoint. But Currently driver is allocating
for USB OUT endpoint. Hence fix this by allocating extra buffer for
USB IN endpoint only.
Change-Id: I3c2d299d8dce3d826b153856e2cd8366b33a2dd6
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
Some UDC may require allocation of some extra bytes for
the TX buffer due to hardware requirement. Add necessary
changes for the same.
Change-Id: I06bc5e5bbf154e335868bb65158bd4e03ab855e9
Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org>
Signed-off-by: ChandanaKishori Chiluveru <cchilu@codeaurora.org>
Signed-off-by: Ajay Agarwal <ajaya@codeaurora.org>
Signed-off-by: Vijayavardhan Vennapusa <vvreddy@codeaurora.org>
Some UDC may require allocation of some extra bytes for
TX buffer due to hardware requirement. Add necessary
changes for the same.
Change-Id: I186cfc876f52e694113b895dfc4044948cb1fb2d
Signed-off-by: Sujeet Kumar <ksujeet@codeaurora.org>
Signed-off-by: ChandanaKishori Chiluveru <cchilu@codeaurora.org>
Signed-off-by: Ajay Agarwal <ajaya@codeaurora.org>
Add device tree properties "qcom,ramp-up-step" and
"qcom,ramp-down-step", to configure the time steps for
flash ramp up and ramp down.
Change-Id: I80ff9394ab4af29398522a1abbaba991b67db918
Signed-off-by: Jishnu Prakash <jprakash@codeaurora.org>
Correct the arguments type to align with format string(%pK) in printk
statements. Crash issue with data abort is seen because of this, use
&binfo->smem[i] instead of binfo->smem[i].
Change-Id: Ie595f402aa0427694a9e7e3477f81d626224d956
Signed-off-by: Paras Nagda <pnagda@codeaurora.org>
Currently the flags which are set based on the
property read on bus mode are not correct, as
a result of which the Venus buses are not voted
correctly and are always set to 0.
Initializing the flag based on the above read
will make the Venus buses to vote correctly and no
issue will be seen when the video is suspended
via power key press.
Change-Id: I0675f95267b4fe4a14138cbc4258282f81c52886
Signed-off-by: Paras Nagda <pnagda@codeaurora.org>
Add support to compile the kernel without the dtbs appended to it.
All the dtbs are concatenated to form dtb.img. Boot image with header
version 2 will now have this dtb.img added towards the end at an offset.
Change-Id: I0538d7744f1c7a8ef26885c1bb4277000e98146e
Signed-off-by: Rahul Shahare <rshaha@codeaurora.org>
Add support to compile the kernel without the dtbs appended to it.
All the dtbs are concatenated to form dtb.img. Boot image with header
version 2 will now have this dtb.img added towards the end at an offset.
Change-Id: I487e43861d4dcde0b0c35213a254af46d1e9aa50
Signed-off-by: Rahul Shahare <rshaha@codeaurora.org>
Currently we allocate a new dma region for our image headers to pass
into TZ for image verification. Instead reuse the previously allocated
region for the main firmware body to store the image header to avoid
having to allocate more memory than needed.
Change-Id: I1e50df2b417d9823c4e75f28134a3f9e078463aa
Signed-off-by: Kyle Yan <kyan@codeaurora.org>
Signed-off-by: Archana Sriram <apsrir@codeaurora.org>
Changes vdd_nominal rate max values for csi clocks
mapping the frequency table.
Change-Id: I0ba1d9217344edef1cdfaa2754399a6af8a80f4b
Signed-off-by: Chetan C R <cchinnad@codeaurora.org>
Add support to compile the kernel without the dtbs appended to it.
All the dtbs are concatenated to form dtb.img. Boot image with header
version 2 will now have this dtb.img added towards the end at an offset.
Change-Id: Iaae15939274eb15599f96add327873ad6a07c5f5
Signed-off-by: Rahul Shahare <rshaha@codeaurora.org>
smcinvoke expects result in scm call resp.ret[1] and type in ret[0],
while qseecom expects result in ret[0] and type in ret[1]. To simplify
API interface and code changes in smcinvoke, here internally switch
result and resp_type.
Change-Id: I925ff08e370ed9b7935b81c97a3aa20c783a5c45
Signed-off-by: Anmolpreet Kaur <anmolpre@codeaurora.org>
Added extra checks to reject session request
when third party applications spawn signed PD.
Change-Id: I9d975cc29113ff651b543fbe765feea3b11fbe94
Acked-by: Krishnaiah Tadakamalla <ktadakam@qti.qualcomm.com>
Signed-off-by: Jeya R <jeyr@codeaurora.org>
Add a delay of 60ms for QM215 target during power up
sequence.
Change-Id: Ia9dc30bc83a307b636eb7c6a42bf9f04c1cc36aa
Signed-off-by: Vandana Jain <vandja@codeaurora.org>
