summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-09-08dsp: q6core: validate payload size before access for AVCSandroid-14.0.0_r0.47android-14.0.0_r0.12android-msm-redbull-4.19-android14-releaseandroid-msm-redbull-4.19-android14Bubble Fang
Payload size is not checked before payload access for AVCS. Check size to avoid out-of-boundary memory access. Bug: 295039120 Change-Id: Ie7dd953c5fc12c73c7114a11ba6e45536c888869 Signed-off-by: Bubble Fang <bubblefang@google.com>
2023-09-01ASoC: msm-pcm-host-voice: Address buffer overflow in hpcm copyBubble Fang
Add check for the max hpcm_buf_node size before copy to avoid buffer out of bounds issue. Bug: 290061915 Change-Id: Ida4cd1b2f59a751458b10b9d53e50eb39f4e299c Signed-off-by: Bubble Fang <bubblefang@google.com>
2023-09-01ASoC: msm-pcm-voip: Avoid interger underflowBubble Fang
There is no check for voip pkt pkt_len,if it contains the min required data. This can lead to integer underflow. Add check for the same. Bug: 295019252 Change-Id: I13925fc3447f18e6c37e4a4978de3fd83b812be7 Signed-off-by: Bubble Fang <bubblefang@google.com>
2023-08-08dsp: afe: check for param size before copyingandroid-u-qpr1-beta-1_r0.6android-u-beta-5.3_r0.6android-14.0.0_r0.1android-msm-redbull-4.19-u-beta5.3android-msm-redbull-4.19-android14-qpr1-betaArnold Chuang
check for the proper param size before copying, to avoid buffer overflow. Bug: 290061247 Change-Id: I8f643fe49a7afde11bd52f6e9c96e2a5bcc1c369 Signed-off-by: Arnold Chuang <cchuangg@google.com>
2023-04-26Merge branch 'LA.UM.9.12.C10.11.00.00.840.535' via branch ↵android-u-beta-5_r0.6android-u-beta-5.2_r0.2android-u-beta-4_r0.6android-u-beta-3_r0.1android-msm-redbull-4.19-u-beta5.2android-msm-redbull-4.19-u-beta5android-msm-redbull-4.19-u-beta4android-msm-redbull-4.19-u-beta3JohnnLee
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Bug: 272199761 Change-Id: Ic3fe2e078b1f522bf400899923341d6e732362ac Signed-off-by: JohnnLee <johnnlee@google.com>
2023-04-16Merge android-msm-pixel-4.19-tm-qpr3 into android-msm-pixel-4.19PixelBot AutoMerger
SBMerger: 516612970 Change-Id: I220c551142464321c68a42841b3767ccccfb777b Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
2023-03-21From: Soumya Managoli <quic_c_smanag@quicinc.com>android-t-qpr3-beta-3_r0.2android-t-qpr3-beta-3.1_r0.2android-13.0.0_r0.81android-13.0.0_r0.122android-13.0.0_r0.111android-13.0.0_r0.102android-msm-redbull-4.19-t-qpr3-beta-3android-msm-redbull-4.19-android13-qpr3Bubble Fang
Date: Fri, 6 Jan 2023 14:37:20 +0530 Subject: [PATCH] ASoC: msm-pcm-q6-v2: Add dsp buf check Current logic copies user buf size of data from the avail dsp buf at a given offset. If this offset returned from DSP in READ_DONE event goes out of bounds or is corrupted, then it can lead to out of bounds DSP buffer access, resulting in memory fault. Fix is to add check for this buf offset, if it is within the buf size range. Bug: 271880369 Note: From a4374817ccc8686f86aa708243ecda95da28e216 Test: Local test Change-Id: I964d760a19c574f0151f00cf9aba2a9592aabc29 Signed-off-by: Bubble Fang <bubblefang@google.com>
2023-03-06Merge branch 'LA.UM.9.12.C10.11.00.00.840.535' via branch ↵Wilson Sung
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Change-Id: Ia5bd6362505ae2c799c07f2942fc7d7e786a5166
2023-01-18ASoC: msm-pcm-q6-v2: Add dsp buf checkSoumya Managoli
Current logic copies user buf size of data from the avail dsp buf at a given offset. If this offset returned from DSP in READ_DONE event goes out of bounds or is corrupted, then it can lead to out of bounds DSP buffer access, resulting in memory fault. Fix is to add check for this buf offset, if it is within the buf size range. Change-Id: I7753cc6db394704dbb959477150141d42b836bef Signed-off-by: Soumya Managoli <quic_c_smanag@quicinc.com>
2022-12-21Merge branch 'LA.UM.9.12.C10.11.00.00.840.478' via branch ↵android-u-preview-2_r0.1android-u-beta-2_r0.1android-u-beta-2.1_r0.1android-u-beta-1_r0.2android-msm-redbull-4.19-u-preview-2android-msm-redbull-4.19-u-beta2android-msm-redbull-4.19-u-beta1JohnnLee
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Bug: 261541074 Change-Id: I9afc4042670bd395febcc0906666b49ca88f044d Signed-off-by: JohnnLee <johnnlee@google.com>
2022-12-20Merge branch 'LA.UM.9.12.C10.11.00.00.840.478' via branch ↵Wilson Sung
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Change-Id: I4b5bfeacc3b1799d29f54922654f330242dfc636
2022-11-01soc: swr-mstr: Store and compare dev_addr along with dev_numShalini Manjunatha
-> If enumeration is changed runtime, dev_num gets changed -> so it might result in different dev_num for same device -> between swrm_connect_port and swr_disconnect_port while powering up and down of widget -> This results in not emptying the port_req list, hence swrm not going to suspend state -> This results into adsp not going to sleep state Change-Id: I80326a35f0cac7f7be30cbbee119a8ba247a0f76
2022-10-27Merge branch 'LA.UM.9.12.C10.11.00.00.840.415' via branch ↵android-u-preview-1_r0.1android-msm-redbull-4.19-u-preview-1JohnnLee
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Bug: 253163588 Change-Id: Id8f721dfcc23ead6f4c6adc36a7b8471f3584aab Signed-off-by: JohnnLee <johnnlee@google.com>
2022-10-26Merge branch 'LA.UM.9.12.C10.11.00.00.840.415' via branch ↵Wilson Sung
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Change-Id: I9fada88babca9903940b66d51ce9e94cd0c8bcf7
2022-05-10asoc: codecs: Add nullptr checkShazmaan Ali
fix for nullptr deref issue Change-Id: I26acf2c5c696038c6d5c64d858174b2f2c58a7d3 Signed-off-by: Shazmaan Ali <quic_shazmaan@quicinc.com>
2022-03-25Merge branch 'LA.UM.9.12.C10.11.00.00.840.265' via branch ↵android-t-qpr3-beta-2_r0.2android-t-qpr3-beta-1_r0.2android-t-qpr2-beta-3_r0.2android-t-qpr2-beta-3.2_r0.3android-t-qpr2-beta-2_r0.2android-t-qpr2-beta-1_r0.3android-t-qpr1-beta-3_r0.1android-t-qpr1-beta-2_r0.3android-t-qpr1-beta-1_r0.2android-t-beta-4_r0.3android-t-beta-3_r0.3android-t-beta-3.3_r0.3android-t-beta-3.2_r0.3android-13.0.0_r0.72android-13.0.0_r0.67android-13.0.0_r0.62android-13.0.0_r0.57android-13.0.0_r0.52android-13.0.0_r0.47android-13.0.0_r0.42android-13.0.0_r0.3android-13.0.0_r0.18android-13.0.0_r0.13android-msm-redbull-4.19-t-qpr3-beta-2android-msm-redbull-4.19-t-qpr2-beta-3.2android-msm-redbull-4.19-t-qpr2-beta-1android-msm-redbull-4.19-t-qpr1-beta-2android-msm-redbull-4.19-t-beta-4android-msm-redbull-4.19-t-beta-3android-msm-redbull-4.19-android13-qpr3-beta1android-msm-redbull-4.19-android13-qpr2-betaandroid-msm-redbull-4.19-android13-qpr2android-msm-redbull-4.19-android13-qpr1-beta-3android-msm-redbull-4.19-android13-qpr1-betaandroid-msm-redbull-4.19-android13-qpr1android-msm-redbull-4.19-android13JohnnLee
'qcom-msm-4.19-7250' into android-msm-pixel-4.19 Bug: 223958127 Signed-off-by: JohnnLee <johnnlee@google.com> Change-Id: I8f0ea5df66808aad098a2da633f62ede0d8cc792
2022-01-31asoc: changes to fix KW errorsLakshman Chaluvaraju
Add changes to fix KW errors. Change-Id: I87fc8bf5b2753cef6af881713637e9521389708d Signed-off-by: Lakshman Chaluvaraju <quic_lchalu@quicinc.com>
2022-01-27Merge branch 'LA.UM.9.12.C10.11.00.00.840.201' via branch ↵android-t-beta-2_r0.3android-msm-redbull-4.19-t-beta-2JohnnLee
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Bug: 210578498 Signed-off-by: JohnnLee <johnnlee@google.com> Change-Id: I9ba8fa5ddf164cb72f578b4e2820a733ebf52516
2022-01-18Merge android-msm-pixel-4.19-sc-qpr3 into android-msm-pixel-4.19android-t-preview-2_r0.3android-t-beta-1_r0.3android-msm-redbull-4.19-t-preview-2android-msm-redbull-4.19-t-beta-1Lucas Wei
SBMerger: 410055097 Change-Id: I779faebb5351fc3eeebd5f6c09afbb98ebfe56b1 Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com> Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-01-16Merge android-msm-barbet-4.19-sc-qpr3 into android-msm-pixel-4.19PixelBot AutoMerger
SBMerger: 410055097 Change-Id: Ie6dbecd41666345280346e33848e0e6b7c594071 Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
2022-01-16Merge android-msm-barbet-4.19-sc-v2 into android-msm-barbet-4.19-sc-qpr3android-s-qpr3-beta-3_r0.4android-s-qpr3-beta-2_r0.4android-s-qpr3-beta-1_r0.4android-12.1.0_r0.34android-12.1.0_r0.27android-msm-barbet-4.19-s-qpr3-beta-3android-msm-barbet-4.19-s-qpr3-beta-2android-msm-barbet-4.19-android12-qpr3PixelBot AutoMerger
SBMerger: 410055097 Change-Id: I6652548d397f3ece7171c9818b74a787f8d7adf1 Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
2022-01-16Merge android-msm-barbet-4.19-sc-qpr1 into android-msm-barbet-4.19-sc-v2android-12.1.0_r0.21android-12.1.0_r0.15android-msm-barbet-4.19-android12LPixelBot AutoMerger
SBMerger: 410055097 Change-Id: I5391cae04af7410dcc81eacfe0af07db013db78e Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
2022-01-16Merge android-msm-pixel-4.19-sc-v2 into android-msm-pixel-4.19-sc-qpr3android-s-qpr3-beta-3_r0.3android-s-qpr3-beta-2_r0.3android-s-qpr3-beta-1_r0.3android-12.1.0_r0.33android-12.1.0_r0.26android-msm-redbull-4.19-s-qpr3-beta-3android-msm-redbull-4.19-s-qpr3-beta-2android-msm-redbull-4.19-android12-qpr3PixelBot AutoMerger
SBMerger: 410055097 Change-Id: I4b7c4b507445afd9f5bee23ee2fb7e8f728443ef Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
2022-01-09Merge android-msm-pixel-4.19-sc-qpr1 into android-msm-pixel-4.19-sc-v2android-s-v2-beta-3_r0.4android-12.1.0_r0.4android-12.1.0_r0.20android-12.1.0_r0.14android-msm-redbull-4.19-s-v2-beta-3android-msm-redbull-4.19-android12LPixelBot AutoMerger
SBMerger: 410055097 Change-Id: Iab9a6c665744bb1534a4ae729feba2b43a4b850e Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
2022-01-05Merge branch 'LA.UM.9.12.C10.11.00.00.840.201' into HEADWilson Sung
Change-Id: I81665aae9d704afcbcb3a969a67245508b2e31f9
2021-12-02Merge branch 'LA.UM.9.12.C10.11.00.00.840.150' into HEADWilson Sung
Change-Id: Iaa12e82b4f6b2ef4786dc4934d3df12b17679882
2021-11-24Merge branch 'android-msm-barbet-4.19-sc-security' into ↵android-12.0.0_r0.41android-12.0.0_r0.35android-msm-barbet-4.19-android12-qpr1Eva Huang
android-msm-barbet-4.19-sc-qpr1 Jan 2022.1 Bug: 204278602 Change-Id: If0896ff2c81f88271be9ac79679b62e13fac3fd9
2021-11-24Merge branch 'android-msm-pixel-4.19-sc-security' into ↵android-12.0.0_r0.40android-12.0.0_r0.34android-msm-redbull-4.19-android12-qpr1Eva Huang
android-msm-pixel-4.19-sc-qpr1 Jan 2022.1 Bug: 204278602 Change-Id: Id767184f62836ddb9e70edbdaadab6c2c0feab31
2021-11-24Asoc: check for invalid voice session idBubble Fang
Add check to return if session id is invalid. From 28a5f166422bf0b8b91dc348d02e62212ee0b261 Mon Sep 17 00:00:00 2001 From: Lakshman Chaluvaraju <lchalu@codeaurora.org> Date: Tue, 8 Jun 2021 10:43:20 +0530 Bug: 190503256 Signed-off-by: Bubble Fang <bubblefang@google.com> Change-Id: I2833f375e7c971d2006de3d0c3d0a05ccf535111 (cherry picked from commit 43667cf179dda119cb8e6224fff04511c4c0045d)
2021-11-16ASoC: wcd937x: Update EAR PA CnP FSM sequenceSoumya Managoli
EAR PA short switch is not released after PA is turned on and off. Address this hardware issue by updating the EAR PA CnP FSM while EAR power down sequence. Change-Id: If4269c30c13572db1b252f223368d444b9250901 Signed-off-by: Soumya Managoli <smanag@codeaurora.org>
2021-11-07Asoc: check for invalid voice session idBubble Fang
Add check to return if session id is invalid. From 28a5f166422bf0b8b91dc348d02e62212ee0b261 Mon Sep 17 00:00:00 2001 From: Lakshman Chaluvaraju <lchalu@codeaurora.org> Date: Tue, 8 Jun 2021 10:43:20 +0530 Bug: 190503256 Signed-off-by: Bubble Fang <bubblefang@google.com> Change-Id: I2833f375e7c971d2006de3d0c3d0a05ccf535111
2021-08-26Asoc: check for invalid voice session idLakshman Chaluvaraju
Add check to return if session id is invalid. Change-Id: Ida0e07b78657102a3bf6e73a1ca23c44ad112426 Signed-off-by: Lakshman Chaluvaraju <lchalu@codeaurora.org>
2021-08-12Merge "dsp: fix out of bound access for cal_data size"qctecmdr
2021-08-04audio: use codec_dai name to saperate codec settingandroid-t-preview-1_r0.3android-msm-redbull-4.19-t-preview-1vincenttew
use realtime codec_dai name to correct hw parameter flow because the config will mixed up CIRRUS and TI flow. Bug: 194766973 Test: build pass, playback/record pass on affected device Signed-off-by: vincenttew <vincenttew@google.com> Change-Id: I948643d976108876fa363972714d31fc10a22c08
2021-07-26Merge 'android-msm-barbet-4.19' into android-msm-pixel-4.19Lucas Wei
Bug: 194667419 Signed-off-by: Lucas Wei <lucaswei@google.com> Change-Id: I6ce5a4180292b85b304d1efe6440e4f52c37e93f
2021-07-06dsp: update size check for set/get VI param functionKunlei Zhang
In afe_set_cal_sp_th_vi_cfg and afe_get_cal_sp_th_vi_param functions, data size is not checked properly which might lead to out of bounds access. Add data_size check to avoid out of bounds access. Change-Id: Ibe049300c609d0d717309bccc65cac876ac075f7 Signed-off-by: Kunlei Zhang <kunleiz@codeaurora.org>
2021-07-06dsp: fix out of bound access for cal_data sizeKunlei Zhang
Add change to fix cal_data index out of bounds error. Change-Id: I8c8e62835e496c0f35fdc09757f4206c52020727 Signed-off-by: Kunlei Zhang <kunleiz@codeaurora.org>
2021-07-01asoc: codecs: retry for soundwire slave enumerationShashi Kant Maurya
Retry for soundwire slave enumeration during bootup before EPROBE_DEFER to avoid soundcard enumeration failures. Change-Id: I083ec76fc84a2b367f93a2dc166a1419a75ff8b4 Signed-off-by: Shashi Kant Maurya <smaury@codeaurora.org>
2021-06-22Merge android-msm-pixel-4.19 into android-msm-barbet-4.19android-s-v2-beta-3_r0.5android-s-v2-beta-2_r0.5android-s-v2-beta-1_r0.5android-s-beta-5_r0.6android-12.1.0_r0.5android-12.0.0_r0.7android-12.0.0_r0.25android-12.0.0_r0.15android-msm-barbet-4.19-s-v2-beta-3android-msm-barbet-4.19-s-v2-beta-1android-msm-barbet-4.19-s-beta-5android-msm-barbet-4.19-android12-v2-beta-2android-msm-barbet-4.19-android12Lucas Wei
Bug: 187909050 Signed-off-by: Lucas Wei <lucaswei@google.com> Change-Id: I5355253bce3b7c945ea75f94f24d22ec601dacf5
2021-06-22Merge LA.UM.9.12.C10.11.00.00.840.010 via branch ↵android-s-v2-beta-2_r0.4android-s-v2-beta-1_r0.4android-s-beta-5_r0.5android-s-beta-4_r0.5android-12.0.0_r0.6android-12.0.0_r0.24android-12.0.0_r0.14android-msm-redbull-4.19-s-beta-5android-msm-redbull-4.19-s-beta-4android-msm-redbull-4.19-android12-v2-beta-2android-msm-redbull-4.19-android12android-msm-redbull--s-v2-beta-1Lucas Wei
'qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3' into android-msm-pixel-4.19 Conflicts: dsp/q6adm.c dsp/rtac.c include/dsp/q6adm-v2.h Bug: 187909050 Signed-off-by: Lucas Wei <lucaswei@google.com> Change-Id: I9261f1c48a33410da347a0ed29da4b93d4ec0ec9
2021-06-21soc: add check condition before enabling irqJason Hsu
Enable interrupt request only when the interrupt is in disabled state. Bug: 187655844 Signed-off-by: Jason Hsu <jasonchhsu@google.com> Change-Id: I18d32113be7b81d5ea120bd7fd696474efd5229d
2021-06-17asoc: codec: Playback Amp power up/down time optimization.vijeth.po
In-order reduce the power down and hence to improve audio-server restart time following time optimization is done. 1. Add common delay after both Amp is powered down. a. Use 16ms instead of 20ms 2. Remove extra delay added in tas256x_set_power_shutdown() 3. Use usleep_range() instead of msleep for less than 20ms in power up/down related functions. Bug: 171941028 Signed-off-by: vincenttew <vincenttew@google.com> Change-Id: I9d169b73f140c0b6b65d4f035193e3f687624aaa
2021-06-16Merge branch 'android-msm-barbet-4.19-rvc' into android-msm-barbet-4.19Lucas Wei
Change-Id: Ia2fddd6b1983f7a496fdb494397016638e661623 Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-06-07Merge remote-tracking branch 'android-msm-barbet-4.19-rvc-security' into ↵android-11.0.0_r0.116android-11.0.0_r0.106android-msm-barbet-4.19-android11-d2achigoliu
android-msm-barbet-4.19-rvc Aug 2021.1 Bug: 189715888 Bug: 189715042 Change-Id: I3798f624b84783365dddcbeb89dc9cdafc267736
2021-06-07Merge remote-tracking branch 'android-msm-pixel-4.19-rvc-security' into ↵achigoliu
android-msm-barbet-4.19-rvc-security Bug: 189715042 Change-Id: I48ea48ce48b6bcfd40dfb89545a64bcc5443d88c
2021-06-07Merge branch 'android-msm-pixel-4.19-rvc-qpr3' into android-msm-pixel-4.19android-s-beta-3_r0.5android-msm-redbull-4.19-s-beta-3Lucas Wei
Change-Id: I5c2d11ab5e5fd04cb4a6cef1cfe18b2877c99ff6 Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-06-03Merge branch 'android-msm-pixel-4.19-rvc-security' into ↵android-11.0.0_r0.115android-11.0.0_r0.105android-11.0.0_r0.100android-msm-redbull-4.19-android11-qpr3Eva Huang
android-msm-pixel-4.19-rvc-qpr3 Aug 2021.1 Bug: 189715888 Change-Id: Ic5e1225a3932b92943fe5fbaea2d363efd776725
2021-05-18Merge branch 'LA.UM.9.12.C10.11.00.00.840.010' into ↵Wilson Sung
qcom-msm-4.19-7250-audio-drivers.lnx.4.0.r3 Change-Id: I5401782d473b0b04922bd526d2b69e40565d7b51
2021-05-10dsp: Feedback path cfg to support 3rd party spkr protection algorithms.Vangala, Amarnath
Backward compatibility change to set 'feedback path cfg' to AFE_MODULE_FEEDBACK, to support 3rd party spkr protection algorithms. Change-Id: I9af731902fbc5bc69f130a4f30d8fc5f18ceaace Signed-off-by: Vangala, Amarnath <avangala@codeaurora.org>
2021-05-03Merge branch android-msm-pixel-4.19 into android-msm-barbet-4.19JohnnLee
Conflicts: asoc/codecs/Kbuild dsp/q6afe.c Bug: 184813985 Change-Id: I1ac7afebff5a637726ed6770cf4e4e3fc0fa59ac
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-24 18:03:03 +0000