<feed xmlns='http://www.w3.org/2005/Atom'>
<title>xavi/android_kernel_m2note/drivers/misc, branch lp-5.1</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://gitea.privatedns.org/xavi/android_kernel_m2note/atom?h=lp-5.1</id>
<link rel='self' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/atom?h=lp-5.1'/>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/'/>
<updated>2016-11-11T01:48:27+00:00</updated>
<entry>
<title>Revert "hand-pick: mediatek:remove unnecessary sido call flow"</title>
<updated>2016-11-11T01:48:27+00:00</updated>
<author>
<name>Moyster</name>
<email>oysterized@gmail.com</email>
</author>
<published>2016-11-11T01:48:27+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=e1db96f8e55f339667730924ae4790ca0b6212f8'/>
<id>urn:sha1:e1db96f8e55f339667730924ae4790ca0b6212f8</id>
<content type='text'>
This reverts commit 9a7858491639342b5d3c8d496d3b9370d2330591.
</content>
</entry>
<entry>
<title>wlan: WiFi Direct CTS fixs</title>
<updated>2016-11-11T01:45:23+00:00</updated>
<author>
<name>dragonpt</name>
<email>cesar.maximo@gmail.com</email>
</author>
<published>2015-12-26T22:53:22+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=6edc46d3895d540494b3e9a108b834ce331d66c0'/>
<id>urn:sha1:6edc46d3895d540494b3e9a108b834ce331d66c0</id>
<content type='text'>
Cylen Yao &lt;cylen.yao@mediatek.com&gt;

Details:
  1. WiFi Direct CTS tests will fail as supplicant and driver could
     not keep sync in following case:

     1.1 supplicant will request channel when do p2p listen, but
         driver/firmware has not switch to the target channel when
         supplicant get remain on channel credit by call driver API
         of remain on channel; This will make supplicant and driver
         in unsync state which will make supplicant fail to go to
         listen state randomly.

     1.2 Supplicant and driver will also keep unsync when do mgmt
         frame TX; supplicant will do other task once mgmt frame TX
         is returned by calling  driver API mgmt_tx, but, driver has
         not actually TX the mgmt frame out. In extremely case, driver
         will drop the second mgmt frame if the previous on has not
         been TX out, just as the group owner test case.
</content>
</entry>
<entry>
<title>Fix "Security Vulnerability - kernel info leak of wifi driver"</title>
<updated>2016-11-11T01:45:18+00:00</updated>
<author>
<name>cm</name>
<email>cesar.maximo@gmail.com</email>
</author>
<published>2016-09-18T19:59:40+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=9ca4665f7f2411dc66445c84c07e5a7d87adbde3'/>
<id>urn:sha1:9ca4665f7f2411dc66445c84c07e5a7d87adbde3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Fix compiling</title>
<updated>2016-11-07T12:44:27+00:00</updated>
<author>
<name>fire855</name>
<email>thefire855@gmail.com</email>
</author>
<published>2016-09-28T17:56:41+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=6da64c283201ca29819a500bcab7db470a6e4a16'/>
<id>urn:sha1:6da64c283201ca29819a500bcab7db470a6e4a16</id>
<content type='text'>
</content>
</entry>
<entry>
<title>mt6735: Add an RGB configuration sys attr driver for videox/corr10</title>
<updated>2016-11-07T12:44:27+00:00</updated>
<author>
<name>Diogo Ferreira</name>
<email>defer@cyngn.com</email>
</author>
<published>2016-04-07T14:11:28+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=e625effbbac96ae9a921ef470b95dccd100adfdf'/>
<id>urn:sha1:e625effbbac96ae9a921ef470b95dccd100adfdf</id>
<content type='text'>
Adds the RGB configuration node which leverages the gamma subsystem to
perform color correction.

The new node takes rgb triplets that range from 0-2000 each, computes
the gamma registers and dispatches them to the gamma correction
subsystem.

Change-Id: Iac9d3cbd4f423ccfffb8d665c29cfd251767a398
</content>
</entry>
<entry>
<title>Fix "arbitrary write-zero in mtkfb_ioctl() of Mediatek driver" issue</title>
<updated>2016-11-07T12:44:26+00:00</updated>
<author>
<name>yang-cy.chen</name>
<email>yang-cy.chen@mediatek.com</email>
</author>
<published>2016-05-05T11:15:31+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=800ad797e9b960bde4a4a39269f6ecb613a802e9'/>
<id>urn:sha1:800ad797e9b960bde4a4a39269f6ecb613a802e9</id>
<content type='text'>
Problem:
lack of boundary check of user input parameter to cause arbitrary write-zero.

Solution:
remove unused code from driver

Bug num:28175025,28175027

Signed-off-by: yang-cy.chen &lt;yang-cy.chen@mediatek.com&gt;
(cherry picked from commit c811910368f393068b343ebdcb6d515dc33cd710)

Change-Id: Ie59f5dd742b6b2295f63f76583a5cac2bdcf5d53
Ticket: PORRIDGE-398
</content>
</entry>
<entry>
<title>Fix "stack overflow in Mediatek Thermal driver" issue</title>
<updated>2016-11-07T12:44:26+00:00</updated>
<author>
<name>yang-cy.chen</name>
<email>yang-cy.chen@mediatek.com</email>
</author>
<published>2016-05-05T12:08:15+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=b4fe50b65774f9eb62f8bbcba8378225b6f66aec'/>
<id>urn:sha1:b4fe50b65774f9eb62f8bbcba8378225b6f66aec</id>
<content type='text'>
Problem:
lack of boundary check of user input parameter before copy_from_user.

Solution:
Add boundary protection to prevent buffer overflow

Bug num:28332766

Change-Id: I8536ae241070e59fbb15449bd3bca00d895e0b3f
Signed-off-by: yang-cy.chen &lt;yang-cy.chen@mediatek.com&gt;
Ticket: PORRIDGE-398
</content>
</entry>
<entry>
<title>Fix "Security Vulnerability - arbitrary address write ddp_drv.c" issue</title>
<updated>2016-11-07T12:44:25+00:00</updated>
<author>
<name>yang-cy.chen</name>
<email>yang-cy.chen@mediatek.com</email>
</author>
<published>2016-05-20T10:38:34+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=6e2509709a0b7207ff7e3c1ad7ab1e211db54dda'/>
<id>urn:sha1:6e2509709a0b7207ff7e3c1ad7ab1e211db54dda</id>
<content type='text'>
Problem:
user input parameter without validation

Solution:
Remove legacy code to prevent buffer overflow

Bug num:28402341

Signed-off-by: yang-cy.chen &lt;yang-cy.chen@mediatek.com&gt;
(cherry picked from commit 76884c3948a5896c7d724a6852e9f8d1403fa9d0)

Change-Id: I77467ae0c0652c7f44238b0320a1a6fef71c0d97
Ticket: PORRIDGE-398
</content>
</entry>
<entry>
<title>Fix "Security Vulnerability - kernel info leak  ddp_drv.c" issue</title>
<updated>2016-11-07T12:44:25+00:00</updated>
<author>
<name>yang-cy.chen</name>
<email>yang-cy.chen@mediatek.com</email>
</author>
<published>2016-05-20T10:47:39+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=5eb598c9b6d357d3cb3eb9178e44b20446c475c6'/>
<id>urn:sha1:5eb598c9b6d357d3cb3eb9178e44b20446c475c6</id>
<content type='text'>
Problem:
user input parameter without validation

Solution:
Remove legacy code to prevent buffer overflow

Bug num:28402240

Signed-off-by: yang-cy.chen &lt;yang-cy.chen@mediatek.com&gt;
(cherry picked from commit a8a18e931e3772d1bef10ec0b4611aa25831f0c0)

Change-Id: I046968817190fc054225fb8c73f87574ec8db511
Ticket: PORRIDGE-398
</content>
</entry>
<entry>
<title>hand-pick: mediatek:remove unnecessary sido call flow</title>
<updated>2016-11-07T12:44:22+00:00</updated>
<author>
<name>Moyster</name>
<email>oysterized@gmail.com</email>
</author>
<published>2016-10-03T12:27:02+00:00</published>
<link rel='alternate' type='text/html' href='https://gitea.privatedns.org/xavi/android_kernel_m2note/commit/?id=9a7858491639342b5d3c8d496d3b9370d2330591'/>
<id>urn:sha1:9a7858491639342b5d3c8d496d3b9370d2330591</id>
<content type='text'>
Problem:
unnecessary sido call flow cause watchdog timeout

Solution:
remove unnecessary part that cause the issue

Bug num:20566147

Change-Id: Iee332f38d339808f7245b4b0271b0f353f4081c4
Signed-off-by: yang-cy.chen &lt;yang-cy.chen@mediatek.com&gt;
</content>
</entry>
</feed>
