)]}'
{
  "commit": "3d213a626d2d94a41e06e85eeb23fe623e10bc63",
  "tree": "17970b741585d1759c3c679f22fb34cc8a6011ee",
  "parents": [
    "9d1efccf5ec3030499a1222db05ad4787cb09cbf"
  ],
  "author": {
    "name": "Alessandro Astone",
    "email": "ales.astone@gmail.com",
    "time": "Fri Apr 15 14:00:15 2022 +0200"
  },
  "committer": {
    "name": "Treehugger Robot",
    "email": "treehugger-gerrit@google.com",
    "time": "Mon Nov 28 23:46:20 2022 +0000"
  },
  "message": "UPSTREAM: binder: Address corner cases in deferred copy and fixup\n\nWhen handling BINDER_TYPE_FDA object we are pushing a parent fixup\nwith a certain skip_size but no scatter-gather copy object, since\nthe copy is handled standalone.\nIf BINDER_TYPE_FDA is the last children the scatter-gather copy\nloop will never stop to skip it, thus we are left with an item in\nthe parent fixup list. This will trigger the BUG_ON().\n\nThis is reproducible in android when playing a video.\nWe receive a transaction that looks like this:\n    obj[0] BINDER_TYPE_PTR, parent\n    obj[1] BINDER_TYPE_PTR, child\n    obj[2] BINDER_TYPE_PTR, child\n    obj[3] BINDER_TYPE_FDA, child\n\nFixes: 09184ae9b575 (\"binder: defer copies of pre-patched txn data\")\nAcked-by: Todd Kjos \u003ctkjos@google.com\u003e\nCc: stable \u003cstable@kernel.org\u003e\nSigned-off-by: Alessandro Astone \u003cales.astone@gmail.com\u003e\nLink: https://lore.kernel.org/r/20220415120015.52684-2-ales.astone@gmail.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\nBug: 257685302\n(cherry picked from commit 2d1746e3fda0c3612143d7c06f8e1d1830c13e23)\nChange-Id: I3963a98dfc48b01d7bb8166aaa90341818bf6416\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9f9d7f59ce7c1ead06a12ed4ff9c60783fcf7034",
      "old_mode": 33188,
      "old_path": "drivers/android/binder.c",
      "new_id": "bce74dfb4150aba9a607d1182efc30510b07a1a1",
      "new_mode": 33188,
      "new_path": "drivers/android/binder.c"
    }
  ]
}