)]}'
{
  "commit": "0453a5c0766e01a3738e3a5d679014daa8e3a4a6",
  "tree": "f5173f5b32453128f713a627c112ee85c63620b6",
  "parents": [
    "6c981919f4222f42903fbb18be8619f421a2c386"
  ],
  "author": {
    "name": "Sam Agazaryan",
    "email": "samagazaryan@google.com",
    "time": "Thu Oct 08 04:55:10 2026 +0000"
  },
  "committer": {
    "name": "mdb:gbmc-git-owners",
    "email": "superproject-auto-update@invalid",
    "time": "Wed Oct 07 23:32:56 2026 -0700"
  },
  "message": "i2c-ast2600: change bus recovery return type from u8 to int\n\nast2600_i2c_recover_bus() returns negative errno values (-EPROTO \u003d -71, -ETIMEDOUT \u003d -110) when bus recovery fails, but its return type is declared as u8.\n\nWhen ast2600_i2c_master_xfer() assigns the u8 return value to int ret,\nthe truncated unsigned value is zero-extended instead of sign-extended, turning -EPROTO (-71) into +185 (0xb9) and -ETIMEDOUT (-110) into +146 (0x92). Because non-negative return values from master_xfer indicate the number of i2c_msg structs transferred, i2cdev_ioctl_rdwr() treats the failed transfer as succeeding and returns 185 to userspace, causing i2ctransfer to read past its stack-allocated msgs[] array and crash\nwith SIGSEGV.\n\nChange the return type of ast2600_i2c_recover_bus() from u8 to int so\nnegative error codes are preserved.\n\nGoogle-Bug-Id: 569827897\nChange-Id: I1817fb09a303ef1118231eb71e39dcc1d1bdf733\nSigned-off-by: Sam Agazaryan \u003csamagazaryan@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "abf801ee77dbe5bceadfe788a42f9535b73271df",
      "old_mode": 57344,
      "old_path": "linux/5.15",
      "new_id": "46f56001ac44388660d8182980029ed2eecdf08a",
      "new_mode": 57344,
      "new_path": "linux/5.15"
    }
  ]
}