[RAMEN9610-14220] asoc: samsung: add checking for SYSMMU status in suspend

Change-Id: Ibe0e27bd882f4d31607a291f3915f6c95bcd7404
Signed-off-by: Hyunwoong Kim <khw0178.kim@samsung.com>

[RAMEN9610-14210][COMMON][9610] arm64: dts: dump sfr of gic for debugging

Change-Id: I5f92e40db398d5ba3768c8bee936d405042d358c
Signed-off-by: Donghyeok Choe <d7271.choe@samsung.com>

[RAMEN9610-14210][COMMON] soc: samsung: re-engineering for exynos_err_parse

Change-Id: Iafe6c1f2cf6ab92c3ac9086839ae10e7da04bc24
Signed-off-by: Donghyeok Choe <d7271.choe@samsung.com>

[RAMEN9610-14210][COMMON] samsung: handler: introduce exynos-handler functions

This patch adds new feature of exynos-hanlder. It can include
several specific interrupt handler for debugging.

Change-Id: I23f1a9775ea7ea44ec07d9b1979666f621a9d047
Signed-off-by: Donghyeok Choe <d7271.choe@samsung.com>

[RAMEN9610-14210][COMMON][9610] arm64: dts: add ECC error interrupts for exynos-handler

Change-Id: I579139f664c38cf5ad59062c9c7d20b5f80072bc
Signed-off-by: Donghyeok Choe <d7271.choe@samsung.com>

[RAMEN9610-14207][COMMON] scsi: ufs: UFS power recovery when probe fail.

Check GPIO when UFS probe error case. And if gpio has abnormal state.
I will be retry.

Change-Id: I5d4028493d1e907d7b3ebd399fb8c7696675f3c8
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>

[RAMEN9610-14207][COMMON] arm64: dts: Add UFS power gpio.

For device power control.

Change-Id: I886c46070fd8023f018fdb9e086dcf087b7f4579
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>

[RAMEN9610-14126][9610] drivers: battery: fix rp current level using condition

Change-Id: I9959be3d5ad9c2c9cbe0943bc86bcd37e5487035
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-14114][common][9610] wlbt: fix defconfig for user binary

Change-Id: I6cc1c7c6c655ae55b5b39e2e33f5bde2dd5654bc
Signed-off-by: Youngsoo <youngss.kim@samsung.com>

[RAMEN9610-14114] [9610] wlbt: fix completion when ignoring SABLE request in wlbtd

When we get rapid requests for SABLE generation, to serialise while processing current request,
we ignore requests other than "fw_panic" in wlbtd and send a msg "ignoring" back to kernel.
We must complete in this case as well.

We must complete one completion upon message from wlbtdi, which has
waiter(s). completion_done() API does the check without modifying
the completion in anyway and returns false if there are waiters and
true otherwise

SCSC-Bug-Id: ssb-51156
Change-Id: Ieabcd8377a3040bdcfe51e4310eb55d84c693446
Signed-off-by: Purnendu Kapadia <p.kapadia@samsung.com>

[RAMEN9610-14121][COMMON] sched: cpufreq_schedutil: add irq_work_sync to wait completion

Change-Id: I3e60ee16bebeecc7e0731c87a3ca23058f20fa71
Signed-off-by: Sangkyu Kim <skwith.kim@samsung.com>

[RAMEN9610-14113] [9610] usb: support usb panel

Change-Id: Ic4c9862bdaf21fa906f583ca061fa5fa3f77f99f
Signed-off-by: Kim Taejeong <tj.kim@samsung.com>

[RAMEN9610-14123] [COMMON] ANDROID: mnt: Propagate remount correctly

This switches over to propagation_next to respect
namepsace semantics.

Test: Remounting to change the options of a fs with mount based
options should propagate to all shared copies of that mount,
and the slaves/indirect slaves of those.
Bug: 122428178
Signed-off-by: Daniel Rosenberg <drosen@google.com>
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>
Change-Id: Ieee91e3f0e5012dffa7b8a84de300ab9e6c460a9

[RAMEN9610-14079] [COMMON] ANDROID: mnt: Fix next_descendent

next_descendent did not properly handle the case
where the initial mount had no slaves. In this case,
we would look for the next slave, but since don't
have a master, the check for wrapping around to the
start of the list will always fail. Instead, we check
for this case, and ensure that we end the iteration
when we come back to the root.

Signed-off-by: Daniel Rosenberg <drosen@google.com>
Bug: 62094374
Change-Id: I43dfcee041aa3730cb4b9a1161418974ef84812e
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>

[RAMEN9610-14032] gud: add force recovery for TEE crash

In case of TEE crash at boot time, device cannot start correctly because
some android services depends on TEE cannot run. So, to recover this
situation, this patch added forced panic() to restart device and
to recorver TEE.

Change-Id: I50e67ef6e865227ff28d4b31c7eee3cdd1244276
Signed-off-by: Jungtae Kim <jt1217.kim@samsung.com>

[RAMEN9610-14018][common][9610] wlbt : hip4_sampler enable when we enable SCSC_WLAN_HIP4_PROFILING

Change-Id: I036f72902d646bcd41561c6b6966ccbe9adb3e7d
Signed-off-by: Youngsoo <youngss.kim@samsung.com>

[RAMEN9610-13999][COMMON] mmc: dw_mmc: set the drto timer only if drto does not occur

In the SOC where drto(Data response timeout)does not occur,
the corresponding function can be set separately.

Change-Id: I4b4bb53006fc4ca2932cb47b71fd2cbcc9da8ded
Signed-off-by: dukhyun kwon <d_hyun.kwon@samsung.com>

[RAMEN9610-13997][COMMON] drivers: usb/usbpd: support role swap

Change-Id: I9d6ec02ed07bf81b1104324f2dfd2a0d62c3ed54
Signed-off-by: Kim Taejeong <tj.kim@samsung.com>

[RAMEN9610-13942][common] Revert "[RAMEN9610-13676][Common][9610][7885][7872][7570] wlbt : Mac Randomization will not be performed during Scheduled Scan."

This reverts commit 8b860d72a37035015d9d59dba3c418a76eaee3ea.

Change-Id: I645d58d2d6653f92c7e12bb1b2232f1b92c2af38

[RAMEN9610-13893][COMMON] arm64: dts: Add UFS INT min lock.

Set UFS int min lock to L1(533MHz clock) at working.
For stability.

Change-Id: I6add28900e8ac9b6cbd4e2e4b4e86fb56a7287bb
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>

[RAMEN9610-13893][COMMON] scsi: ufs: fix exception event handling

The device can set the exception event bit in one of the response UPIU,
for example to notify the need for urgent BKOPs operation.  In such a
case, the host driver calls ufshcd_exception_event_handler to handle
this notification.  When trying to check the exception event status (for
finding the cause for the exception event), the device may be busy with
additional SCSI commands handling and may not respond within the 100ms
timeout.

To prevent that, we need to block SCSI commands during handling of
exception events and allow retransmissions of the query requests, in
case of timeout.

Change-Id: I428c7c98e5ac90aba528404d4c63e684b18180a7
Signed-off-by: Subhash Jadavani <subhashj@codeaurora.org>
Signed-off-by: Maya Erez <merez@codeaurora.org>
Signed-off-by: Can Guo <cang@codeaurora.org>
Signed-off-by: Asutosh Das <asutoshd@codeaurora.org>
Reviewed-by: Subhash Jadavani <subhashj@codeaurora.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: JaeHun Jung <jh0801.jung@samsung.com>

[RAMEN9610-13853][COMMON] drivers: charger: Add log for input OCP register

Change-Id: Ie1d36f13729e83d16bd2a835e226854b7951c78f
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-13838][9610] fbdev: dpu: fixed prevent issue

CID: 261450 Uninitialized scalar variable

Change-Id: Ie5964517a13f948da2dc7c82c94971d70e556c8c
Signed-off-by: ChiHun Won <chihun.won@samsung.com>

[RAMEN9610-13834] [COMMON] soc: samsung: Added wakeup source logging on exynos-pm.

Change-Id: Ic21c8669565c21b380afde9bb8d369a1ac4a90ef
Signed-off-by: Jeonghoon Jang <jnghn.jang@samsung.com>

[RAMEN9610-13834] [9610] arm64: dts: Added ws-name on exynos-pm.

Change-Id: I21d455a6f446980100f78d2ae92e12df8664e276
Signed-off-by: Jeonghoon Jang <jnghn.jang@samsung.com>

[RAMEN9610-13834] ANDROID: power: wakeup_reason: Added log_wakeup_reason_name.

Change-Id: Ia58f79b5c31136d0d1715ffd8489895627b7e71c
Signed-off-by: Jeonghoon Jang <jnghn.jang@samsung.com>

[RAMEN9610-13834] [COMMON] soc: samsung: Added wakeup_stats property on exynos-pm.

Change-Id: Ia567974c453b39d7ffd69768ef33643822843392
Signed-off-by: Jeonghoon Jang <jnghn.jang@samsung.com>

[RAMEN9610-13834] [9610] soc: samsung: Added wakeup_stats property on exynos-pm.

Change-Id: I95d94af858dac49863d80a1bd5b2e91c37bb8c46
Signed-off-by: Jeonghoon Jang <jnghn.jang@samsung.com>

[RAMEN9610-13834] Revert "[RAMEN9610-11554][9610] soc: samsung: cal-if: Added cal_print_wakeup_reason."

This reverts commit 17f55953d5f4226b8ccae46009455c8ada078f44.

Change-Id: Id4f6333957949c70b9c550cdb539df5b14dcc86f

[RAMEN9610-13804][COMMON] media: radio: Fix 'Missing autoscan 87.5Mhz'

Change-Id: Ia2f1ed7b30a4c5a45bb622c817d44a7206cc2976
Signed-off-by: Yunsu Kim <iamyunsu.kim@samsung.com>

[RAMEN9610-13798][common]Revert "[9610] wlbt: Read FW TxGood, RxGood, TxBad counters"

This reverts commit 59028f6be4b1a957511e740ff8812aee47f0f013.

Change-Id: I05879f2fb680ee6acc6099f06d95ce977c00bf40

[ERD][RAMEN9610-13615]  IFPMIC: S2MU00X: current control for thermal action

Change-Id: Ib6fe1fb23c3126c383c137e4cf503912f90f8a05
Signed-off-by: jinchul kim <jinchul7.kim@samsung.com>

[ERD][RAMEN9610-13615] fimc-is2: Enable a change to sensor fps use by sysfs

Change-Id: I302e4e6ee6c81d668066488d7c2d712a8f5ffd2c
Signed-off-by: dan huh <dan.huh@samsung.com>

[ERD][RAMEN9610-13615] arm64: configs: Enable NTC_THERMISTOR

Change-Id: I45dd831a09e42503edf810ddf6edb6634f662aaa
Signed-off-by: Hyeonseong Gil <hs.gil@samsung.com>

[ERD][RAMEN9610-13615] [9610] arm64: dts: Enable Thermistor node

Change-Id: I9ead9c45fe7c4f1a464c91e69bdb25a1d812557f
Signed-off-by: Hyeonseong Gil <hs.gil@samsung.com>
Signed-off-by: Hanjun Shin <hanjun.shin@samsung.com>

[ERD][RAMEN9610-13615] hwmon: ntc_thermistor: Add condition of iio convert

From mainline, ntc_thermistor uses iio_convert_raw_to_processed()
for microvolt conversion.
But, if adc driver does not support scaling, the API just pass raw
values as processed. Then, the driver misunderstands the values as microvolt.
So, we added iio_convert_support property from device-tree.
In our BSP, not supprot iio_convert, microvolt will be convert
by using pullup_uv.

Change-Id: Idcc2fe11835d7c0ca69c4b06e40129bafb756df4
Signed-off-by: Hyeonseong Gil <hs.gil@samsung.com>

[ERD][RAMEN9610-13615] [COMMON] hwmon: ntc_thermistor: Use pdev->name for register

Change-Id: Idf68d4be62a666bbd75ab83a6392ee1e5af3b8e8
Signed-off-by: Hyeonseong Gil <hs.gil@samsung.com>

[ERD][RAMEN9610-13615] fbdev: dpu20: panel: max_brightness constraints is added for thermal solution

Change-Id: I48ef05fea81b348fe753584cff5f385243a1750c
Signed-off-by: hwangjae lee <hj-yo.lee@samsung.com>
Signed-off-by: Hanjun Shin <hanjun.shin@samsung.com>

[RAMEN9610-13766][COMMON] drivers: muic: support unstable usb connection

Change-Id: I89085baf6c58b5bdba84d6af58f558bf696bdf28
Signed-off-by: Kim Taejeong <tj.kim@samsung.com>

[RAMEN9610-13756] asoc: abox: add delay to ensure that ABOX core is suspended

Change-Id: I4d9bf28e20973231fa3d4086fe6dd2c39bb29554
Signed-off-by: hayoung78.joo <hayoung78.joo@samsung.com>

[RAMEN9610-13741][Common][9610] fix to avoid invalid scan channel

When channel scan was triggered for ACS, invalid channel was shwon.
This patch add protection code to avoid kernel panic.

Change-Id: Ic84aaddb8f145ffbb4d37c46d1a9a0d8d08b1ea0

[RAMEN9610-13690] fmp: add invalid pointer check

Change-Id: I331b878539a60c86b65c98196b2630963e4d1eb2
Signed-off-by: Boojin Kim <boojin.kim@samsung.com>

[RAMEN9610-13676][Common][9610][7885][7872][7570] wlbt : Mac Randomization will not be performed during Scheduled Scan.

Mac Randomization will not be performed during Scheduled Scan.

Change-Id: Ia65a2f2c10228d2ac78f3db6e73b00a93de53329
SCSC-Bug-Id: SSB-50850
Signed-off-by: Mohit Ghuley <mohit.ghuley@samsung.com>

[RAMEN9610-13673][9610] soc: samsung: cal-if: Add to clear cpu sequencer when cpu up.

Change-Id: Ie88223a5ebb6323293f5dbab8c4388634a898d1f
Signed-off-by: lakkyung.jung <lakkyung.jung@samsung.com>

[RAMEN9610-13671][COMMON] media: radio: Optimize seek time

Change-Id: I1047b8a5f19f8309c29b4b56478b96a0d6d8633d
Signed-off-by: Yunsu Kim <iamyunsu.kim@samsung.com>

[RAMEN9610-13665][common] Wlbt: FM request API should signal active mxman

Signal FM requests to the "active" mxman context,
so that requests can be consumed during WLBT recovery,
instead of querying via the service structure that
could be NULL during the recovery phase.

Remove the service driver API for FM LDO control.

Change-Id: Icd3dadb0105ab3266639f2b83d81c353a89cc0b0
SCSC-Bug-Id: SSB-50826
Signed-off-by: Ivan Priest <i.priest@samsung.com>

[RAMEN9610-13636][common][prevent][9610] wlbt: fix CID261400

CID 261400 (#1 of 1): Resource leak (RESOURCE_LEAK)
8. leaked_storage: Variable firm going out of scope leaks the storage it points to.

func should return after free resources.

Change-Id: I9dcb8ff93c05785e6da10bab24660bb4f97a2db6

[RAMEN9610-13634][common][9610] wlbt: NAPI: prevent issues in hip4.c

Resolve Prevent reported issues in hip4.c

Change-Id: I5f57e53c546242b3f789b8f8921f0e710fe77916
SCSC-Bug-Id: SSB-50793
Signed-off-by: Debabrata Purohit <d.purohit@samsung.com>

[RAMEN9610-13634][common][7570][7872][7885][9610] wlbt: Prevent issues in nl80211_vendor.c and cfg80211_ops.c

Changes done to fix prevent issues in nl80211_vendor.c
and cfg80211_ops.c files.

Change-Id: Icffd273de1c0a0dde1e201b73fc3709df0e5e1d4
SCSC-Bug-Id: SSB-50792
Signed-off-by: Srishti Piplani <srishti.p@samsung.com>

[RAMEN9610-13626][COMMON][9610] drivers : fix pd communication timing for mac

Change-Id: I1a47f5803fba91e0050571be211427e3daaaf846
Signed-off-by: Junhan Bae <junhan84.bae@samsung.com>

[RAMEN9610-13624] sound: core: decrease read/write timeout to 1 second

Read/Write timeout was 10 seconds.
But default timeout value of android audio server is 5 second.
If read/write is blocked for 10 seconds in read/write ioctl,
it exceeds the timeout of audio server.

Change-Id: Ia823419594f4a3e35ab38bc2d3103acaf99545be
Signed-off-by: hayoung78.joo <hayoung78.joo@samsung.com>

[RAMEN9610-13621] crypto: disable cfi on crypto_cts_encrypt

Change-Id: I9e7adc6b8700e7a4ba7fb8a33d229ae243e59539
Signed-off-by: Munjoo Kim <munjoo.kim@samsung.com>

[RAMEN9610-13609][common][RAMEN9610-13609][9610] wlbt: scheduling while atomic

Cause:
For intra BSS relay, the SKBs are allocated with
GFP_KERNEL flag. this is done in atomic context, which can be fatal.

Resolution:
Allocate the SKBs with GFP_ATOMIC flag.

Change-Id: I667ad314c7c1f95b7b2bda73a9d2252668b6efa6
SCSC-Bug-Id: SSB-50805
Signed-off-by: Debabrata Purohit <d.purohit@samsung.com>

[RAMEN9610-13608][COMMON][RAMEN9610-13599] lib: dss: fix to set debug level

This commit fixes to set wrong debug level.
It was detected by prevent.

Change-Id: I5a7f76da3bb083e0091644b317e03bf38fc68896
Signed-off-by: Hosung Kim <hosung0.kim@samsung.com>

[RAMEN9610-13448] arm64: remove dma zone

DMA zone (ZONE_DMA) is not necessary in Exynos SoCs because all
peripherals are capable of 36-bit wide DMA access.

Change-Id: I04749a3cd42e3d07d3a41ba1a2259c1159931173
Signed-off-by: Cho KyongHo <pullip.cho@samsung.com>

[RAMEN9610-13496][COMMON] arm64: configs: enable USB video class to support USB camera

Change-Id: I32e91b9108a6af90d6b0d5bbdb12d6769f26566e
Signed-off-by: Kisang Lee <kisang80.lee@samsung.com>

[RAMEN9610-13496][COMMON] media: vb2: modify code to support USB camera

Compile error occures after enable CONFIG_USB_VIDEO_CLASS. This patch
modified code to fit changed function prototype.

Change-Id: Iee717c5da94be504a9237528d95334b6a6762225
Signed-off-by: Kisang Lee <kisang80.lee@samsung.com>

[common][RAMEN9610-13443][9610] wlbt: host update 6.64.2

1. Protect SMAPPER from possible spurious interrupts
2. slsi_convert_tlv_data_to_value should be outside
3. NAPI: config RPS
4. NAPI: increase retry time when no space in FB queue
5. NAPI: false watchdog trigger
6. [9610][7885][7872][7570] wlbt: Notify CFG regarding the Disconnection, on ...
7. [9610][7885][7872][7570] wlbt: Perform Dual Interface registration in ...
8. wlbt: update host induced error code
9. increment scsc_release to 6.64.2

Change-Id: I0bc936a5ce4ecdd905b1deba629db7f816fc43f3
Signed-off-by: Youngsoo <youngss.kim@samsung.com>

[RAMEN9610-13390][COMMON] mmc: dw_mmc: Change card_detect_delay

When SD card removed in slot that can happen
sometimes abnormal removed in 0ms delay.
So, Set to 200ms for stability.

Change-Id: Ie5bf4ff4424888ab0c9f1686bb02b3b7e1c7a76c
Signed-off-by: dukhyun kwon <d_hyun.kwon@samsung.com>

[RAMEN9610-13376][COMMON] media: radio: align 0xFFF240 shared by WLBT

Change-Id: I3eb970bac5033f02093edfd5d3fe79a997925c34
Signed-off-by: Yunsu Kim <iamyunsu.kim@samsung.com>

[RAMEN9610-13333][COMMON] soc: samsung: seclog: add code which check valdation of address

code which checks validation of v_log_addr address has been added.

Change-Id: Ia26ebdf8200fa3538fa3f27d03334df1cc716927
Signed-off-by: Jang Hyunsung <hs79.jang@samsung.com>

[RAMEN9610-13366][COMMON] ufs: add ufs dump stuct log for ufs err debug.

Change-Id: Icba94e44882161e39d5e1e6aa20b120cf85812b9
Signed-off-by: dukhyun kwon <d_hyun.kwon@samsung.com>

[RAMEN9610-13315][9610] include: fuelgauge: change capacity learning cycle

Change-Id: I4b388c11704ce6d3aa7cb3caea63c8769237773d
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-13248][9610] drivers: battery: add full charge condition

When battery is fully charged, charging current is
near to 0mA. So it need to be added for full charge check
condition.

Change-Id: If6adc9431b977ec769aef112b8709e81561024c0
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-13248][9610] drivers: battery: Maintain 1%, until raw SOC reaches 0%

Change-Id: Ide0b42cd839d9320ea92c8f59bbdd7b618a31798
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-13205] asoc: abox: register abox log debugfs file node at system probe

Change-Id: Ib30d3a9ddabe268ef61e0904a1a000053c476f4f
Signed-off-by: hayoung78.joo <hayoung78.joo@samsung.com>

[RAMEN9610-13185][COMMON][9610] drivers : fix ccic driver for PD 2.0 communication

Change-Id: I60371c71a841cbe58914bfc27d0db2303162b65d
Signed-off-by: Junhan Bae <junhan84.bae@samsung.com>

[RAMEN9610-13159][common][MODAP-20690][9610] wlbt: NAPI: do not use GRO path in BA timer context

When releasing frames from BA timer context, do not use
napi_gro_receive() as that can corrupt the kernel GRO lists.

Resolution:
Use non-NAPI path when releasing frames from BA timer context.

Change-Id: I9ac803e0a69d6eca3bb8c69e1be8bdfb152b4058
SCSC-Bug-Id: SSB-50448
Signed-off-by: Debabrata Purohit <d.purohit@samsung.com>

[RAMEN9610-13131][COMMON] ASoC: abox: enable timer 0 at wake up from WFI

Timer can be enabled without proper setting, if kernel enable a timer
before initializing by firmware. It cause malfunction on the ABOX.

change-Id: I1840cd676a47ed73773fa9bf916123da082b7b9a
Signed-off-by: ShinHyung <s47.kang@samsung.com>

[RAMEN9610-13098][COMMON] soc: samsung: exynos-reboot: clear RAMDUMP SCRATCH register

This patch clears RAMDUMP SCRATCH register in case of device power off.

As soon as the devcie power is down and then the device power is up with pin reset,
the device can enter fastboot mode when power up.
To avoid this situation we should clear RAMDUMP SCRATCH register.

Change-Id: I01c05fa6c67bc8ea1c7dcd11a4e2777f279c87af
Signed-off-by: Youngmin Nam <youngmin.nam@samsung.com>

[RAMEN9610-13087][COMMON] i2c: s3c2410: Add IICCON SFR dump for debug

Change-Id: Iabbde5e3601a6f7d605b5859e30ebc34322f0062
Signed-off-by: Kyungwoo Kang <kwoo.kang@samsung.com>

[RAMEN9610-13083][9610] drivers: battery: use offset for max_rawsoc calc.

Change-Id: Ifae02fb2cdde804ff4ffd128b8b901c6b8aaeccb
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-13080][COMMON] media: radio: revert workaround for ldo control unstable

Change-Id: I92d332436694ad206b14a2940f3283e342ed68b2
Signed-off-by: Yunsu Kim <iamyunsu.kim@samsung.com>

[RAMEN9610-13050][COMMON] media: radio: Modify AGC tunning value

- Fix FM radio signal is worst then before

Change-Id: I0e8727717406983efa13340b1202009e57666883
Signed-off-by: Yunsu Kim <iamyunsu.kim@samsung.com>

[RAMEN9610-13049][common][9610][7885][7872][7570] wlbt: Update P2P GO Channel in Driver, on receiving Channel Switched Indication from Firmware.

Update P2P GO Channel in Driver, on receiving
Channel Switched Indication from Firmware.

Change-Id: Idb9f3076231d915d62f61acc73cf34f2f28bf99c
SCSC-Bug-Id: SSB-50359
Signed-off-by: Mohit Ghuley <mohit.ghuley@samsung.com>

[RAMEN9610-13030][9610] drivers: battery: Add C type Rp current setting

Change-Id: I9525b6c4b70600d97283aefecb848ab0bfe38a9a
Signed-off-by: Keunho Hwang <keunho.hwang@samsung.com>

[RAMEN9610-13030][9610] drivers : add ccic rp current level check fucntion

Change-Id: I6e300c7e3f8b1024370d2a424d2c6e6ced5dc348
Signed-off-by: Junhan Bae <junhan84.bae@samsung.com>

[RAMEN9610-13018][COMMON] iommu/exynos: check return value and retry if PTW fault

Change-Id: Ic6eabb2d13a22f629fe8aa7384e96fe01228ce8a
Signed-off-by: Janghyuck Kim <janghyuck.kim@samsung.com>

[RAMEN9610-12969][COMMON] iommu/exynos: retry when PTW fault occur

Change-Id: I3e425c2e611d65c6b619b3e21c46fce7de7fde18
Signed-off-by: Janghyuck Kim <janghyuck.kim@samsung.com>

[RAMEN9610-12937][COMMON] media: radio: fix FM open fail

Add polling for wlbt shared ldo stable

Change-Id: Ic3f80ca8a419238b2ad37028c1b2595855777d79
Signed-off-by: Yunsu Kim <iamyunsu.kim@samsung.com>

[RAMEN9610-12936] Merge branch 'android-4.14-spl-topic' into exynos9609

Change-Id: Id67c98b5dc18655b935b52e1404568279621c15a

[RAMEN9610-12909][COMMON] muic: irq init sequnece change

Problem: Kernel panic
Cause: Before work queue init, the work is called in ISR
Solution: Sequence is modified that the order on work queue and irq init
is reversed.

Change-Id: I99dfac1f36d01bb1c608e71cb88a95ad190aa34f
Signed-off-by: Kim Taejeong <tj.kim@samsung.com>

Merge branch 'android-4.14-spl-topic' into exynos9609

Change-Id: I1d2f8981e4f53d40d9149fa555e24702d6985226

media: em28xx: Fix use-after-free when disconnecting

[ Upstream commit 910b0797fa9e8af09c44a3fa36cb310ba7a7218d ]

Fix bug by moving the i2c_unregister_device calls after deregistration
of dvb frontend.

The new style i2c drivers already destroys the frontend object at
i2c_unregister_device time.
When the dvb frontend is unregistered afterwards it leads to this oops:

  [ 6058.866459] BUG: unable to handle kernel NULL pointer dereference at 00000000000001f8
  [ 6058.866578] IP: dvb_frontend_stop+0x30/0xd0 [dvb_core]
  [ 6058.866644] PGD 0
  [ 6058.866646] P4D 0

  [ 6058.866726] Oops: 0000 [#1] SMP
  [ 6058.866768] Modules linked in: rc_pinnacle_pctv_hd(O) em28xx_rc(O) si2157(O) si2168(O) em28xx_dvb(O) em28xx(O) si2165(O) a8293(O) tda10071(O) tea5767(O) tuner(O) cx23885(O) tda18271(O) videobuf2_dvb(O) videobuf2_dma_sg(O) m88ds3103(O) tveeprom(O) cx2341x(O) v4l2_common(O) dvb_core(O) rc_core(O) videobuf2_memops(O) videobuf2_v4l2(O) videobuf2_core(O) videodev(O) media(O) bluetooth ecdh_generic ums_realtek uas rtl8192cu rtl_usb rtl8192c_common rtlwifi usb_storage snd_hda_codec_realtek snd_hda_codec_hdmi snd_hda_codec_generic i2c_mux snd_hda_intel snd_hda_codec snd_hwdep x86_pkg_temp_thermal snd_hda_core kvm_intel kvm irqbypass [last unloaded: videobuf2_memops]
  [ 6058.867497] CPU: 2 PID: 7349 Comm: kworker/2:0 Tainted: G        W  O    4.13.9-gentoo #1
  [ 6058.867595] Hardware name: MEDION E2050 2391/H81H3-EM2, BIOS H81EM2W08.308 08/25/2014
  [ 6058.867692] Workqueue: usb_hub_wq hub_event
  [ 6058.867746] task: ffff88011a15e040 task.stack: ffffc90003074000
  [ 6058.867825] RIP: 0010:dvb_frontend_stop+0x30/0xd0 [dvb_core]
  [ 6058.867896] RSP: 0018:ffffc90003077b58 EFLAGS: 00010293
  [ 6058.867964] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000010040001f
  [ 6058.868056] RDX: ffff88011a15e040 RSI: ffffea000464e400 RDI: ffff88001cbe3028
  [ 6058.868150] RBP: ffffc90003077b68 R08: ffff880119390380 R09: 000000010040001f
  [ 6058.868241] R10: ffffc90003077b18 R11: 000000000001e200 R12: ffff88001cbe3028
  [ 6058.868330] R13: ffff88001cbe68d0 R14: ffff8800cf734000 R15: ffff8800cf734098
  [ 6058.868419] FS:  0000000000000000(0000) GS:ffff88011fb00000(0000) knlGS:0000000000000000
  [ 6058.868511] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
  [ 6058.868578] CR2: 00000000000001f8 CR3: 00000001113c5000 CR4: 00000000001406e0
  [ 6058.868662] Call Trace:
  [ 6058.868705]  dvb_unregister_frontend+0x2a/0x80 [dvb_core]
  [ 6058.868774]  em28xx_dvb_fini+0x132/0x220 [em28xx_dvb]
  [ 6058.868840]  em28xx_close_extension+0x34/0x90 [em28xx]
  [ 6058.868902]  em28xx_usb_disconnect+0x4e/0x70 [em28xx]
  [ 6058.868968]  usb_unbind_interface+0x6d/0x260
  [ 6058.869025]  device_release_driver_internal+0x150/0x210
  [ 6058.869094]  device_release_driver+0xd/0x10
  [ 6058.869150]  bus_remove_device+0xe4/0x160
  [ 6058.869204]  device_del+0x1ce/0x2f0
  [ 6058.869253]  usb_disable_device+0x99/0x270
  [ 6058.869306]  usb_disconnect+0x8d/0x260
  [ 6058.869359]  hub_event+0x93d/0x1520
  [ 6058.869408]  ? dequeue_task_fair+0xae5/0xd20
  [ 6058.869467]  process_one_work+0x1d9/0x3e0
  [ 6058.869522]  worker_thread+0x43/0x3e0
  [ 6058.869576]  kthread+0x104/0x140
  [ 6058.869602]  ? trace_event_raw_event_workqueue_work+0x80/0x80
  [ 6058.869640]  ? kthread_create_on_node+0x40/0x40
  [ 6058.869673]  ret_from_fork+0x22/0x30
  [ 6058.869698] Code: 54 49 89 fc 53 48 8b 9f 18 03 00 00 0f 1f 44 00 00 41 83 bc 24 04 05 00 00 02 74 0c 41 c7 84 24 04 05 00 00 01 00 00 00 0f ae f0 <48> 8b bb f8 01 00 00 48 85 ff 74 5c e8 df 40 f0 e0 48 8b 93 f8
  [ 6058.869850] RIP: dvb_frontend_stop+0x30/0xd0 [dvb_core] RSP: ffffc90003077b58
  [ 6058.869894] CR2: 00000000000001f8
  [ 6058.875880] ---[ end trace 717eecf7193b3fc6 ]---

Signed-off-by: Matthias Schwarzott <zzam@gentoo.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

FROMGIT: binder: create node flag to request sender's security context

To allow servers to verify client identity, allow a node
flag to be set that causes the sender's security context
to be delivered with the transaction. The BR_TRANSACTION
command is extended in BR_TRANSACTION_SEC_CTX to
contain a pointer to the security context string.

Signed-off-by: Todd Kjos <tkjos@google.com>
Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit ec74136ded792deed80780a2f8baf3521eeb72f9
 https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
 master)
Change-Id: I44496546e2d0dc0022f818a45cd52feb1c1a92cb
Signed-off-by: Todd Kjos <tkjos@google.com>

binder: fix race that allows malicious free of live buffer

commit 7bada55ab50697861eee6bb7d60b41e68a961a9c upstream.

Malicious code can attempt to free buffers using the BC_FREE_BUFFER
ioctl to binder. There are protections against a user freeing a buffer
while in use by the kernel, however there was a window where
BC_FREE_BUFFER could be used to free a recently allocated buffer that
was not completely initialized. This resulted in a use-after-free
detected by KASAN with a malicious test program.

This window is closed by setting the buffer's allow_user_free attribute
to 0 when the buffer is allocated or when the user has previously freed
it instead of waiting for the caller to set it. The problem was that
when the struct buffer was recycled, allow_user_free was stale and set
to 1 allowing a free to go through.

Signed-off-by: Todd Kjos <tkjos@google.com>
Acked-by: Arve Hjønnevåg <arve@android.com>
Cc: stable <stable@vger.kernel.org> # 4.14
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

UPSTREAM: ANDROID: binder: change down_write to down_read

binder_update_page_range needs down_write of mmap_sem because
vm_insert_page need to change vma->vm_flags to VM_MIXEDMAP unless
it is set. However, when I profile binder working, it seems
every binder buffers should be mapped in advance by binder_mmap.
It means we could set VM_MIXEDMAP in binder_mmap time which is
already hold a mmap_sem as down_write so binder_update_page_range
doesn't need to hold a mmap_sem as down_write.
Please use proper API down_read. It would help mmap_sem contention
problem as well as fixing down_write abuse.

Ganesh Mahendran tested app launching and binder throughput test
and he said he couldn't find any problem and I did binder latency
test per Greg KH request(Thanks Martijn to teach me how I can do)
I cannot find any problem, too.

Cc: Ganesh Mahendran <opensource.ganesh@gmail.com>
Cc: Joe Perches <joe@perches.com>
Cc: Arve Hjønnevåg <arve@android.com>
Cc: Todd Kjos <tkjos@google.com>
Reviewed-by: Martijn Coenen <maco@android.com>
Signed-off-by: Minchan Kim <minchan@kernel.org>
Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 720c241924046aff83f5f2323232f34a30a4c281)

Change-Id: I8358ceaaab4030f7122c95308dcad59557cad411

UPSTREAM: ANDROID: binder: correct the cmd print for BINDER_WORK_RETURN_ERROR

When to execute binder_stat_br the e->cmd has been modifying as BR_OK
instead of the original return error cmd, in fact we want to know the
original return error, such as BR_DEAD_REPLY or BR_FAILED_REPLY, etc.
instead of always BR_OK, in order to avoid the value of the e->cmd is
always BR_OK, so we need assign the value of the e->cmd to cmd before
e->cmd = BR_OK.

Signed-off-by: songjinshi <songjinshi@xiaomi.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 838d5565669aa5bb7deb605684a5970d51d5eaf6)

Change-Id: I425b32c5419a491c6b9ceee7c00dde6513e0421d

UPSTREAM: ANDROID: binder: remove 32-bit binder interface.

New devices launching with Android P need to use the 64-bit
binder interface, even on 32-bit SoCs [0].

This change removes the Kconfig option to select the 32-bit
binder interface. We don't think this will affect existing
userspace for the following reasons:
1) The latest Android common tree is 4.14, so we don't
   believe any Android devices are on kernels >4.14.
2) Android devices launch on an LTS release and stick with
   it, so we wouldn't expect devices running on <= 4.14 now
   to upgrade to 4.17 or later. But even if they did, they'd
   rebuild the world (kernel + userspace) anyway.
3) Other userspaces like 'anbox' are already using the
   64-bit interface.

Note that this change doesn't remove the 32-bit UAPI
itself; the reason for that is that Android userspace
always uses the latest UAPI headers from upstream, and
userspace retains 32-bit support for devices that are
upgrading. This will be removed as well in 2-3 years,
at which point we can remove the code from the UAPI
as well.

Finally, this change introduces build errors on archs where
64-bit get_user/put_user is not supported, so make binder
unavailable on m68k (which wouldn't want it anyway).

[0]: https://android-review.googlesource.com/c/platform/build/+/595193

Signed-off-by: Martijn Coenen <maco@android.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 1190b4e38f97023154e6b3bef61b251aa5f970d0)

Change-Id: I73dadf1d7b45a42bb18be5d5d3f5c090e61866de

UPSTREAM: android: binder: Use true and false for boolean values

Assign true or false to boolean variables instead of an integer value.

This issue was detected with the help of Coccinelle.

Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Cc: Todd Kjos <tkjos@android.com>
Cc: Martijn Coenen <maco@android.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 197410ad884eb18b31d48e9d8e64cb5a9e326f2f)

Change-Id: I30bed831d6b6ff2e9e3e521ccc5d6836f0b30944

UPSTREAM: android: binder: Use octal permissions

checkpatch warns against the use of symbolic permissions,
this patch migrates all symbolic permissions in the binder
driver to octal permissions.

Test: debugfs nodes created by binder have the same unix
permissions prior to and after this patch was applied.

Signed-off-by: Harsh Shandilya <harsh@prjkt.io>
Cc: "Arve Hjønnevåg" <arve@android.com>
Cc: Todd Kjos <tkjos@android.com>
Cc: Martijn Coenen <maco@android.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 21d02ddf716669e182a13b69b4dd928cf8ef5e0f)

Change-Id: I8152fe280ead1d04d89593e813a722f9eb5def27

UPSTREAM: android: binder: Prefer __func__ to using hardcoded function name

Coding style fixup

Signed-off-by: Elad Wexler <elad.wexler@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 00c41cddebde8d1a635bf81a7b255b7e56fd0d15)

Change-Id: I795e2a9f525c4a8df5cd0a81842a88529ba54f21

UPSTREAM: ANDROID: binder: make binder_alloc_new_buf_locked static and indent its arguments

The function binder_alloc_new_buf_locked() is only used in this file, so
make it static. Also clean up sparse warning:

drivers/android/binder_alloc.c:330:23: warning: no previous prototype
for ‘binder_alloc_new_buf_locked’ [-Wmissing-prototypes]

In addition, the line of the function name exceeds 80 characters when
add static for this function, hence indent its arguments anew.

Signed-off-by: Xiongwei Song <sxwjean@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 3f827245463a57f5ef64a665e1ca64eed0da00a5)

Change-Id: I6b379df815d30f9b3e9f1dd50334375123b25bbc

UPSTREAM: android: binder: Check for errors in binder_alloc_shrinker_init().

Both list_lru_init() and register_shrinker() might return an error.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Cc: Sherry Yang <sherryy@android.com>
Cc: Michal Hocko <mhocko@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 533dfb250d1c8d2bb8c9b65252f7b296b29913d4)

Change-Id: I5325ccaf34a04179ef3dae73dd8f3abfd6e21565

[RAMEN9610-12817][COMMON][9610] driver : fix vsafe voltage and vbus check fail log

Change-Id: I0639d7149460b43dc02b2c7b94f870ec7fc5c158
Signed-off-by: Junhan Bae <junhan84.bae@samsung.com>

[RAMEN9610-12700][Common] Revert "fix not releasing hip4_wake_lock"

This reverts commit d8ed961c7594adba0beb962ac76546c48ef3cbc4.

Change-Id: I1eb2fff62589620b2783c96382c3b3a4f1701683

[RAMEN9610-12705][Mptool]:Porting factory mode function.

Change-Id: I94b6a98c28ce9841af90ed01274cb99621a559b5
Signed-off-by: yan0414.chen <yan0414.chen@samsung.com>

[RAMEN9610-12700][Common] wlbt: Mac Randomization Fixes

Mac randomization Fixes and optimization

Change-Id: I26d6dea2162c202cd962abcc6fadb3b54b6950a1
SCSC-Bug-Id: SSB-48540
Signed-off-by: Kavitha Velayutham <k.velayutham@samsung.com>

[RAMEN9610-12700][Common] wlbt: NAPI: fix wakelocks

Fix broken HIP wakelocks for NAPI config.

Change-Id: I1ca71171a9c8084a8050facbaa431139c53e93f9
SCSC-Bug-Id: SSB-49805
Signed-off-by: Debabrata Purohit <d.purohit@samsung.com>

[RAMEN9610-12700][Common] wlbt: Fix interrupt leakage

SSB-49603 has introduced a regression where intr_tohost interrupt is not
getting freed on hip4_deinit. If BT remains on, and WIFI runs few on-off
cycles we will see that allocation will eventually fail.

Change-Id: I3419b3f47ad7fc75970d30e870efe607469c3a27
SCSC-Bug-Id: SSB-49808
Signed-off-by: Albert Cano <a.canocamps@samsung.com>