joel16/android_kernel_sony_msm8994
1
0
Fork 0
mirror of https://github.com/joel16/android_kernel_sony_msm8994.git synced 2024-11-23 12:10:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

32.4.A.1.54

Browse Source 
Change-Id: Ic4f2eb73062796bb6c45f4bbf7dac622c59d827c
This commit is contained in:
Olivier Karasangabo 2017-11-06 16:37:38 +01:00
parent cd52e38c03
commit b8942be386
No known key found for this signature in database
GPG Key ID: C5C93AF8ED1CCEB5
4 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
drivers/soc/qcom/pil-msa.c
View File

@ -477,6 +477,14 @@ int pil_mss_reset_load_mba(struct pil_desc *pil)
goto err_mss_reset;
}
count = fw->size;
if (count > SZ_1M) {
dev_err(pil->dev, "%s fw image loading into memory is failed due to fw size overflow\n",
__func__);
ret = -EINVAL;
goto err_mss_reset;
}
memcpy(mba_virt, data, count);
wmb();

5
drivers/video/msm/mdss/mdss_mdp_pp.c
View File

@ -3419,6 +3419,11 @@ int mdss_mdp_gamut_config(struct mdp_gamut_cfg_data *config,
*copyback = 1;
mdss_mdp_clk_ctrl(MDP_BLOCK_POWER_OFF);
} else {
if (pp_gm_has_invalid_lut_size(config)) {
pr_debug("invalid lut size for gamut\n");
ret = -EINVAL;
goto gamut_config_exit;
}
local_cfg = *config;
tbl_off = mdss_pp_res->gamut_tbl[disp_num];
for (i = 0; i < MDP_GAMUT_TABLE_NUM; i++) {

2
include/linux/sysrq.h
View File

@ -18,7 +18,7 @@
#include <linux/types.h>
/* Enable/disable SYSRQ support by default (0==no, 1==yes). */
#define SYSRQ_DEFAULT_ENABLE 1
#define SYSRQ_DEFAULT_ENABLE 0
/* Possible values of bitmask for enabling sysrq functions */
/* 0x0001 is reserved for enable everything */

2
net/packet/af_packet.c
View File

@ -3665,6 +3665,8 @@ static int packet_set_ring(struct sock *sk, union tpacket_req_u *req_u,
rb->frames_per_block = req->tp_block_size/req->tp_frame_size;
if (unlikely(rb->frames_per_block <= 0))
goto out;
if (unlikely(req->tp_block_size > UINT_MAX / req->tp_block_nr))
goto out;
if (unlikely((rb->frames_per_block * req->tp_block_nr) !=
req->tp_frame_nr))
goto out;