fix(dts): remove duplicate label on qnovo_fet_ctrl_default#3
Open
PeronGH wants to merge 356 commits into
Open
Conversation
Skip save and restore of GIC SPI configuration, if the GICV3 drivers hasn't been initialized. Change-Id: I1bc32f58eef349487b2096ea2c26d491ee45a433 Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>
Some of the GICD registers could be read in and stored as zeros if an intterupt is triggered around the same time as the system sleep. The pending state of the interrupt would be latched but the configuration registers for the interrupt is reset. To ensure that the interrupt triggers, restore the interrupts configuration around System sleep notification. Change-Id: Ib04720241e8fa4382383bd08897c4e19aaaded8c Signed-off-by: Mahesh Sivasubramanian <msivasub@codeaurora.org> Signed-off-by: Pavel Dubrova <pashadubrova@gmail.com>
This register is present only on new SoCs and shouldn't be present on older ones like MSM8998 or SDM630. For this reason, warn the user, but do not fail if this register is not found, as it's used only there and it's not necessary for core driver functionality.
The spss-util driver provides utilities required for the Secure Processor Subsystem (SPSS). It provides the fuse state for key selection and the SPSS HW version. Legacy spss not support load spss by UEFI and also not support CMAC/IAR feature. Change-Id: Iea0d66ed66a2817850f99f74bf716d33db956812 Signed-off-by: Santosh Dronamraju <sdronamr@codeaurora.org>
Legacy spss not support load spss by UEFI and also not support CMAC/IAR feature.
Add debug support for sdm845 target for sde driver. Signed-off-by: Pavel Dubrova <pashadubrova@gmail.com>
SID register may not be declared on the legacy SoCs (SDM660, SDM845, etc.), which will lead to the SDE driver fail, prevent this by adding the appropriate checks. Signed-off-by: Pavel Dubrova <pashadubrova@gmail.com>
SDM845's MDP manages the tear interrupts inside the MDP interrupt itself, so there's no external tear interrupt.
In 4.14 kernel the definition of the active interface for cont splash was changed[1], which is invalid for older SoCs (SDM845/660), for them a different bit[2] must be used to check the active interface. Hence add a proper check for these legacy SoCs to the get_ctl_intf function and protect it by checking the SDE HW revision. [1] https://source.codeaurora.org/quic/la/kernel/msm-4.14/commit/?h=LA.UM.9.1.r1-11400-SMxxx0.0&id=75cc47bfa5f8ffb8ee43d6597ac2e8c74093cd91 [2] https://source.codeaurora.org/quic/la/kernel/msm-4.9/tree/drivers/gpu/drm/msm/sde/sde_rm.c?h=LA.UM.10.3.r1-00500-sdm845.0#n1433 Signed-off-by: Pavel Dubrova <pashadubrova@gmail.com>
Legacy ways use no FSA4480 MUX chip: there you just pull GPIOs and call it a day. Handle this usecase. [Pavel Dubrova] Update snd_soc_codec to snd_soc_component API. Signed-off-by: Pavel Dubrova <pashadubrova@gmail.com>
Some SoCs were released with a DSP firmware using CVP v2.0 and CVD v2.3, but the same versions got a modification on later firmwares found on, for example, SM8150. Unfortunately, the new firmware doesn't declare a different version for CVP nor CVD, but the old one does not support the device_channels command, with the channel_info command being the only option to set the CVP channels right: this is found to happen on SDM845's DSP firmware. For this reason, check if the current machine is SDM845 and force sending the CVP channel info command on there: this way, the DSP doesn't return any error and we're able to use advanced features, like AEC and (A)ANC.
Add ALSA based machine driver for SDM845 target to provide initial audio support. Add audio config files and change Android.mk, Makefile and Kbuild to enable audio modules for SDM845 target. Signed-off-by: Pavel Dubrova <pashadubrova@gmail.com>
From msm-4.14 as of commit "msm: vidc: Release cvp buffer lock in invalid buffer case".
Signed-off-by: Sultan Alsawaf <sultan@kerneltoast.com> Change-Id: I3839d059c7666250519423c5417bcc4b3785d0e2
Currently we are returning 0 in SMMU fault handler. However, if we return -EINVAL, then smmu driver assumes page fault handler is not installed and prints a list of useful debug information. CRs-Fixed: 2344373 Change-Id: I3ca6731eb9a30b7d4ef03f4d580e622d9a8c6c0f Signed-off-by: Vaibhav Deshu Venkatesh <vdeshuve@codeaurora.org>
Non secure loading of firmware is not supported, hence removing the support. CRs-Fixed: 2358497 Change-Id: I1da79824deefd48f42570051be352de7649f1855 Signed-off-by: Chinmay Sawarkar <chinmays@codeaurora.org>
IOMMU initialization APIs have been deprecated and replaced by device tree properties. IOMMU driver will map/unmap and attach/detach device at bootup, based on the dtsi entries. CRs-Fixed: 2358497 Change-Id: I2be820ed406c46209e927e5f7f861e75d67e966a Signed-off-by: Chinmay Sawarkar <chinmays@codeaurora.org>
Stolen from techpack/video
Bus bandwidth voting can be achieved by directly call the bus apis. DevFreq functionality is not utilized nor necessary. Also, video bus bandwidth votes are dynamic and cannot conform to the OPP table entries. CRs-Fixed: 2384822 Change-Id: Ib83f51d7d07efe24a256e0287433e7a28e2ae057 Signed-off-by: Chinmay Sawarkar <chinmays@codeaurora.org> Signed-off-by: Vikash Garodia <vgarodia@codeaurora.org>
Avoid null pointer dereference to fix video SSR usecase failures. Change-Id: I8bf00673ed9fb2e013bd2c5e8be8860d9d741ec4 CRs-Fixed: 2438294 Signed-off-by: Amit Shekhar <ashekhar@codeaurora.org>
These register writes were missing on the VPU4 clock-on config, but they are needed for some SoCs to correctly initialize the Venus.
Legacy SoCs have got old VE firmwares and some of the features in this vidc driver release are unsupported by these. We need it working as soon as possible, so adopt this dirty way of dealing with it.
Add fw cycles and fw-vpp-cycles for correct calculation of HFR and VPP usecases. Also, fix the power collapse delay and hw response timeout for older firmwares.
* Ignoring an ignore flag, yikes * Also replace skip_initramf with want_initramf (omitting last letter for Magisk since it binary patches that out of kernel, I'm not even sure why we're supporting that mess) Co-authored-by: Erfan Abdi <erfangplus@gmail.com> Change-Id: Ifdf726f128bc66bf860bbb71024f94f56879710f
For Android 9 launch A/B devices migrating to Android 10 style system-as-root, `androidboot.force_normal_boot=1` must be passed in cmdline when booting into normal or charger mode. However, it is not always possible for one to modify the bootloader to adhere to these changes. As a workaround, one can use the presence of the `skip_initramfs` flag in cmdline to to decide whether to append the new flag to cmdline on the kernel side. Co-authored-by: jabashque <jabashque@gmail.com> Change-Id: Ia00ea2c54e2a7d2275e552837039033adb98d0ff
Change-Id: I22b5eb981c886d9280957f6bd1047fc76ac9916b
…L_BOOT Change-Id: I89f115c5757cdb7edb74bd45f881c5b8a7acd644
Change-Id: Ia7642d730b0a68e045f19c6a3fd00ce3c8844379
For some reason those break the DRM notifier
Taken from SM8250_R_11.0
Taken from SM8250_R_11.0
For some reason the Dash type doesn't work without this
kref_put causes crash if refcount is zero. This change prevents crash by checking if refcount value. CRs-Fixed: 2553290 Change-Id: Ie9a950b289cdb2b8fca8c5d025be540d926eadbd Signed-off-by: Trishansh Bhardwaj <tbhardwa@codeaurora.org>
- Change to dereference s_ctrl only after proper NULL Dereference Check. CRs-Fixed: 3875406 Change-Id: I8e2c717b22efff2a7d6503d38c048e30eff230da Signed-off-by: Swami Reddy Reddy <quic_swamired@quicinc.com>
Due to scheduling delays there is a possibility that the abort/destroy ACK from FW cannot be processed within the current timeout. Hence increasing the timeout to account for these delays. Change-Id: Ia8f670e67dfb3db47e71b1d1e9eeba79bde7f277 Signed-off-by: Karthik Anantha Ram <kartanan@codeaurora.org>
Bumping up the maximum number of ICP contexts from 36 to 54. Change-Id: I8da5a2fadae8a9a0a0814c73b82450f884217d1e Signed-off-by: Karthik Anantha Ram <kartanan@codeaurora.org>
Using last clk index doesn't gaurantee the src clock rates are populated properly, instead use src clock index which is already saved pointing to the correct src clock array. Change-Id: I90369bd2d0aefed74ba738a0deb5768d43e6e576 Signed-off-by: Jigarkumar Zala <jzala@codeaurora.org>
drivers/media/platform/msm/camera_oneplus/cam_sensor_module/cam_sensor_io/cam_sensor_cci_i2c.c:23:20: error: variable length arrays are a C99 feature [-Werror,-Wvla-extension]
Change-Id: I2c199704cef3e32d0c103876b3681d30ea22f316
Test: Open Settings -> Battery -> Battery information Change-Id: I755c1baf2045ecd14ca3f82544fe61a9a63f0b41
Test: Open Settings -> Battery -> Battery information after idling for
longer period of time.
Change-Id: I6326ea9589734aca370df1118492266c4e14e4bd
The node name was repeated as a label, causing a build error with strict DT compilers.
EdwinMoq
force-pushed
the
lineage-23.2-4.19
branch
from
7e8cb3e to
7881cc0
Compare
EdwinMoq
pushed a commit
that referenced
this pull request
May 3, 2026
[ Upstream commit df9ac55abd18628bd8cff687ea043660532a3654 ] If the export_binary parameter is disabled on runtime, profiles that were loaded before that will still have their rawdata stored in apparmorfs, with a symbolic link to the rawdata on the policy directory. When one of those profiles are replaced, the rawdata is set to NULL, but when trying to resolve the symbolic links to rawdata for that profile, it will try to dereference profile->rawdata->name when profile->rawdata is now NULL causing an oops. Fix it by checking if rawdata is set. [ 168.653080] BUG: kernel NULL pointer dereference, address: 0000000000000088 [ 168.657420] #PF: supervisor read access in kernel mode [ 168.660619] #PF: error_code(0x0000) - not-present page [ 168.663613] PGD 0 P4D 0 [ 168.665450] Oops: Oops: 0000 [#1] SMP NOPTI [ 168.667836] CPU: 1 UID: 0 PID: 1729 Comm: ls Not tainted 6.19.0-rc7+ #3 PREEMPT(voluntary) [ 168.672308] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.679327] RIP: 0010:rawdata_get_link_base.isra.0+0x23/0x330 [ 168.682768] Code: 90 90 90 90 90 90 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 55 d0 48 85 ff 0f 84 e3 01 00 00 <48> 83 3c 25 88 00 00 00 00 0f 84 d4 01 00 00 49 89 f6 49 89 cc e8 [ 168.689818] RSP: 0018:ffffcdcb8200fb80 EFLAGS: 00010282 [ 168.690871] RAX: ffffffffaee74ec0 RBX: 0000000000000000 RCX: ffffffffb0120158 [ 168.692251] RDX: ffffcdcb8200fbe0 RSI: ffff88c187c9fa80 RDI: ffff88c186c98a80 [ 168.693593] RBP: ffffcdcb8200fbc0 R08: 0000000000000000 R09: 0000000000000000 [ 168.694941] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88c186c98a80 [ 168.696289] R13: 00007fff005aaa20 R14: 0000000000000080 R15: ffff88c188f4fce0 [ 168.697637] FS: 0000790e81c58280(0000) GS:ffff88c20a957000(0000) knlGS:0000000000000000 [ 168.699227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.700349] CR2: 0000000000000088 CR3: 000000012fd3e000 CR4: 0000000000350ef0 [ 168.701696] Call Trace: [ 168.702325] <TASK> [ 168.702995] rawdata_get_link_data+0x1c/0x30 [ 168.704145] vfs_readlink+0xd4/0x160 [ 168.705152] do_readlinkat+0x114/0x180 [ 168.706214] __x64_sys_readlink+0x1e/0x30 [ 168.708653] x64_sys_call+0x1d77/0x26b0 [ 168.709525] do_syscall_64+0x81/0x500 [ 168.710348] ? do_statx+0x72/0xb0 [ 168.711109] ? putname+0x3e/0x80 [ 168.711845] ? __x64_sys_statx+0xb7/0x100 [ 168.712711] ? x64_sys_call+0x10fc/0x26b0 [ 168.713577] ? do_syscall_64+0xbf/0x500 [ 168.714412] ? do_user_addr_fault+0x1d2/0x8d0 [ 168.715404] ? irqentry_exit+0xb2/0x740 [ 168.716359] ? exc_page_fault+0x90/0x1b0 [ 168.717307] entry_SYSCALL_64_after_hwframe+0x76/0x7e Fixes: 1180b4c ("apparmor: fix dangling symlinks to policy rawdata after replacement") Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Sasha Levin <sashal@kernel.org> Signed-off-by: Ulrich Hecht <uli@kernel.org>
EdwinMoq
force-pushed
the
lineage-23.2-4.19
branch
from
8c6c54f to
686e118
Compare
EdwinMoq
force-pushed
the
lineage-23.2-4.19
branch
from
686e118 to
c874c80
Compare
EdwinMoq
pushed a commit
that referenced
this pull request
May 13, 2026
[ Upstream commit 5cb81eeda909dbb2def209dd10636b51549a3f8a ] ctnetlink_dump_exp_ct() stores a conntrack pointer in cb->data for the netlink dump callback ctnetlink_exp_ct_dump_table(), but drops the conntrack reference immediately after netlink_dump_start(). When the dump spans multiple rounds, the second recvmsg() triggers the dump callback which dereferences the now-freed conntrack via nfct_help(ct), leading to a use-after-free on ct->ext. The bug is that the netlink_dump_control has no .start or .done callbacks to manage the conntrack reference across dump rounds. Other dump functions in the same file (e.g. ctnetlink_get_conntrack) properly use .start/.done callbacks for this purpose. Fix this by adding .start and .done callbacks that hold and release the conntrack reference for the duration of the dump, and move the nfct_help() call after the cb->args[0] early-return check in the dump callback to avoid dereferencing ct->ext unnecessarily. BUG: KASAN: slab-use-after-free in ctnetlink_exp_ct_dump_table+0x4f/0x2e0 Read of size 8 at addr ffff88810597ebf0 by task ctnetlink_poc/133 CPU: 1 UID: 0 PID: 133 Comm: ctnetlink_poc Not tainted 7.0.0-rc2+ #3 PREEMPTLAZY Call Trace: <TASK> ctnetlink_exp_ct_dump_table+0x4f/0x2e0 netlink_dump+0x333/0x880 netlink_recvmsg+0x3e2/0x4b0 ? aa_sk_perm+0x184/0x450 sock_recvmsg+0xde/0xf0 Allocated by task 133: kmem_cache_alloc_noprof+0x134/0x440 __nf_conntrack_alloc+0xa8/0x2b0 ctnetlink_create_conntrack+0xa1/0x900 ctnetlink_new_conntrack+0x3cf/0x7d0 nfnetlink_rcv_msg+0x48e/0x510 netlink_rcv_skb+0xc9/0x1f0 nfnetlink_rcv+0xdb/0x220 netlink_unicast+0x3ec/0x590 netlink_sendmsg+0x397/0x690 __sys_sendmsg+0xf4/0x180 Freed by task 0: slab_free_after_rcu_debug+0xad/0x1e0 rcu_core+0x5c3/0x9c0 Fixes: e844a92 ("netfilter: ctnetlink: allow to dump expectation per master conntrack") Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Sasha Levin <sashal@kernel.org> [uli: backport to 4.19] Signed-off-by: Ulrich Hecht <uli@kernel.org>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
19 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The node name was repeated as a label, causing a build error with strict DT compilers.