| Age | Commit message (Collapse) | Author |
|---|
|
pi-qpr3-b-release
Change-Id: Ib615fa37d8484fbec23f3d48b9c8d22ddfb59b01
|
|
27a6e3d26 Merge branch 'android-msm-marlin-3.18-pi-qpr2' into android-msm-marlin-3.18-pi-qpr3
a43f6ab6a Merge branch 'android-msm-marlin-3.18-pi-qpr1' into android-msm-marlin-3.18-pi-qpr2
3dd3a4355 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
0d83251e7 Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
690aecf90 qcacld-2.0: Avoid int overflow in csrScanSavePreferredNetworkFound
20318ed0e qcacld-2.0: Avoid integer underflow in dot11f_unpack functions
c97b4a0a0 msm: vidc: ensure codec count is in supported session range
a1b88db1e qcacld-2.0: Fix possible buffer overflow in sirConvertAddtsRsp2Struct
7b388db6d msm: vidc: Ensure validity of shared Q indices
2aba0ddf1 FROMLIST: arm64: Build vDSO with -ffixed-x18
101bd5241 media: uvcvideo: Fix 'type' check leading to overflow
ead8682a0 scsi: ufs: internal clean up
b1d5f3e05 scsi: ufs: revert ufshcd_shutdown
bd58f6ce4 scsi: ufs: revise commit 3b1c6a2b ("disallow SECURITY_PROTOCOL_IN without _OUT")
da80b1b66 scsi: ufs: revise commit ecd2676bd513 ("disallow SECURITY_PROTOCOL_IN without _OUT")
1f855b8a7 scsi: ufs: fix shutdown race condition
f09854220 scsi: ufs: error out all issued requests after shutdown
cda441d5f Revert "scsi: ufs: stub UFS shutdown handler"
832656711 scsi: ufs: fix sleep in atomic context
d83d48b67 scsi: ufs: Fix compilation error in ufs cmd logging
52c6b9bbe scsi: ufs: add support for logging custom events
c23a5b040 scsi: ufs: fix the UFS command tracing events
57621a6d0 scsi: ufs: update ufs command logging infrastructure
22b404fe1 scsi: ufs: add command logging infrastructure
a3d0c0b92 scsi: ufs: disallow SECURITY_PROTOCOL_IN without _OUT
100fecf05 scsi/ufs: print UFS health info in kernel log
cf284d757 scsi: ufs: Add clock ungating to a separate workqueue
1fbf2ee61 scsi: ufs: fix typecasting in vendor quirk
4cf9aa6c8 scsi: ufs: fix race between hibern8 failure recovery and error handler
3f0e12b2e scsi: ufs-debugfs: add error state
e8867a299 scsi: ufs: kick start clock scaling only after device detection
a7b86a3d2 scsi: ufs-qcom: fix bug with read/modify write of UFS_CFG1
fb9a2fa58 scsi: ufs: disable clock scaling
Linux version 3.18.131-g27a6e3d260f4 (android-
build@xpcc9.ams.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 12 22:06:12 UTC 2019
Bug: 78601190
Bug: 79898356
Bug: 111127989
Bug: 111760968
Bug: 112907825
Bug: 114073969
Bug: 114399807
Bug: 118444167
Bug: 118672487
Bug: 121178760
Bug: 122331452
Bug: 122478803
Bug: 123533258
Bug: 128798879
Bug: 128824063
Bug: 129964466
Change-Id: I9ed98ab1facf4cffa8d310f7b97e6cb49ccc4b50
Source-Branch: android-msm-marlin-3.18-pi-qpr3
Pick-Prebuilt: 242588995
Signed-off-by: Kelly Rossmoyer <krossmo@google.com>
|
|
pi-qpr3-b-release
Change-Id: Ie1c1be263d471e8b0ac6d8dec5c5ef2d854bc78a
|
|
021e5400c Merge branch 'android-msm-marlin-3.18-pi-qpr2' into android-msm-marlin-3.18-pi-qpr3
9e8804e3a Merge branch 'android-msm-marlin-3.18-pi-qpr1' into android-msm-marlin-3.18-pi-qpr2
dcfd115a3 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
2db7ee588 Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
8a1dd35a8 msm:ipa:Prevent rt rule deletion if rt rule id is invalid
cebcb3bb8 UPSTREAM: seccomp: Fix tracer exit notifications during fatal signals
357104de5 UPSTREAM: arm64/ptrace: run seccomp after ptrace
bac2f2dde UPSTREAM: arm/ptrace: run seccomp after ptrace
7734d5abc BACKPORT: x86/ptrace: run seccomp after ptrace
5ae321ce0 UPSTREAM: seccomp: recheck the syscall after RET_TRACE
450b2551a BACKPORT: seccomp: remove 2-phase API
d23b5e7e8 BACKPORT: x86/entry: Get rid of two-phase syscall entry work
33f5077dc BACKPORT: seccomp: Add a seccomp_data parameter secure_computing()
6a2409120 BACKPORT: x86/entry/64: Always run ptregs-using syscalls on the slow path
d3d92a6a9 BACKPORT: x86/syscalls: Add syscall entry qualifiers
52bd7fc2d BACKPORT: x86/syscalls: Move compat syscall entry handling into syscalltbl.sh
c97dd82f8 BACKPORT: x86/syscalls: Remove __SYSCALL_COMMON and __SYSCALL_X32
c13dcfc3c UPSTREAM: x86/syscalls: Refactor syscalltbl.sh
1bfa0f6cb qcacld-2.0: Fix OOB read in limProcessDeauthFrame
Linux version 3.18.131-g021e5400cb88 (android-
build@wphp1.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 6 03:19:07 UTC 2019
Bug: 78528839
Bug: 119769499
Bug: 120486022
Bug: 124464469
Change-Id: I1b3de73bdfbab9e300e76f7c358e89e4377e466a
Source-Branch: android-msm-marlin-3.18-pi-qpr3
Signed-off-by: Maggie White <maggiewhite@google.com>
Signed-off-by: Harrison Lingren <hlingren@google.com>
|
|
528ac5911 Merge branch 'android-msm-marlin-3.18-pi-qpr2' into android-msm-marlin-3.18-pi-qpr3
07d4b32e5 LTS: Merge 3.18.131 into android-msm-marlin-3.18-pi-qpr3
86ce49485 Merge 3.18.131 into android-msm-marlin-3.18-lts
fa42fea0d Linux 3.18.131
eac164f40 wil6210: missing length check in wmi_set_ie
fa3ec41ea swiotlb: clean up reporting
a31f342e6 sr: pass down correctly sized SCSI sense buffer
2f5f58a8b posix-timers: Sanitize overrun handling
50ebcbade ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command
05f119e61 ALSA: isa/wavefront: prevent some out of bound writes
03f848117 i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI device node
0c55f36ca cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)
ba3a743b4 ARM: 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address handling
7271a4ef8 libata: whitelist all SAMSUNG MZ7KM* solid-state disks
12325d43b Input: omap-keypad - fix keyboard debounce configuration
1f9506d73 ide: pmac: add of_node_put()
62f93d303 drivers/tty: add missing of_node_put()
e67a42859 drivers/sbus/char: add of_node_put()
899574b56 sbus: char: add of_node_put()
038b3f124 SUNRPC: Fix a potential race in xprt_connect()
bfdc42a41 bonding: fix 802.3ad state sent to partner when unbinding slave
6ee260375 x86/earlyprintk/efi: Fix infinite loop on some screen widths
aef3cacd6 scsi: vmw_pscsi: Rearrange code to avoid multiple calls to free_irq during unload
fafbd50bf scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
075264c07 powerpc: Look for "stdout-path" when setting up legacy consoles
4ed458ca7 tracing: Fix memory leak of instance function hash filters
e0b24233e tracing: Fix memory leak in set_trigger_filter()
0fe2a841c MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
9f589fc54 powerpc/boot: Fix random libfdt related build errors
b3c0cbdfc timer/debug: Change /proc/timer_list from 0444 to 0400
12a8b1ee2 lib/interval_tree_test.c: allow users to limit scope of endpoint
fee4071f2 lib/rbtree-test: lower default params
91b813d95 lib/rbtree_test.c: make input module parameters
042a1f481 lib/interval_tree_test.c: allow full tree search
cf283dbec lib/interval_tree_test.c: make test options module parameters
81b9ad740 Merge 3.18.130 into android-msm-marlin-3.18-lts
49a6ef532 Linux 3.18.130
1ee4aba9b selftests: Move networking/timestamping from Documentation
deadac7f1 staging: rts5208: fix gcc-8 logic error warning
ecf8d2b25 vme: ca91cx42: fix LM_CTL address mask
4d94d6b2d vme: Fix wrong pointer utilization in ca91cx42_slave_get
8b0673c3f exec: avoid gcc-8 warning for get_task_comm
1eb9d7920 kconfig: Avoid format overflow warning from GCC 8.1
78047d77b staging: speakup: Replace strncpy with memcpy
e643399ec matroxfb: fix size of memcpy
1bb31e3fb pstore: Convert console write to use ->write_buf
c65f79f6b ocfs2: fix potential use after free
35318849b debugobjects: avoid recursive calls with kmemleak
e14858279 hfsplus: do not free node before using
417baf058 hfs: do not free node before using
408303b1c ocfs2: fix deadlock caused by ocfs2_defrag_extent()
ddf7572f6 fscache, cachefiles: remove redundant variable 'cache'
64703bf3a fscache: fix race between enablement and dropping of object
97f2494f4 drm/ast: fixed reading monitor EDID not stable issue
38c29898c KVM: x86: fix empty-body warnings
6d22ef74f USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
0f5a5ea30 USB: omap_udc: fix omap_udc_start() on 15xx machines
3737d8b65 USB: omap_udc: fix crashes on probe error and module removal
9ea692784 USB: omap_udc: use devm_request_irq()
4eb2095c8 exportfs: do not read dentry after free
ba318581c ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
d536c4e93 ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
e91a56155 Btrfs: send, fix infinite loop due to directory rename dependencies
d2fc85f40 hwmon: (w83795) temp4_type has writable permission
9453bca34 s390/cpum_cf: Reject request for sampling in event initialization
b8115cdf3 sysv: return 'err' instead of 0 in __sysv_write_inode
b8468796b ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
8b0c50ca0 ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
6699df660 ipv6: Check available headroom in ip6_xmit() even without options
ba5720a0d neighbour: Avoid writing before skb->head in neigh_hh_output()
eb75b9b7e tun: forbid iface creation with rtnl ops
f1d28c6ce rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
5b0d097a6 net: Prevent invalid access to skb->prev in __qdisc_drop_all
a0c61bf02 net: 8139cp: fix a BUG triggered by changing mtu with network traffic
1315e9f2c Merge 3.18.129 into android-msm-marlin-3.18-lts
40f34a091 Linux 3.18.129
fd87821b4 mac80211: fix reordering of buffered broadcast packets
302846379 mac80211: Clear beacon_int in ieee80211_do_stop
e0e93c095 kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
545f26411 Staging: lustre: remove two build warnings
37f288d71 USB: serial: option: add device ID for HP lt2523 (Novatel E371)
33a33be67 xhci: Prevent U1/U2 link pm states if exit latency is too long
f78567a5f SUNRPC: Fix leak of krb5p encode pages
bceb7beee ALSA: pcm: Fix interval evaluation with openmin/max
d26525be5 ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
c746195bf ALSA: hda: Add support for AMD Stoney Ridge
d672c306e USB: check usb_get_extra_descriptor for proper size
79c8eb037 usb: appledisplay: Add 27" Apple Cinema Display
b8d501299 usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
e6992eadc powerpc/vdso64: Use double word compare on pointers
c48697169 net: amd: add missing of_node_put()
99f138ba1 net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts
24b5b19b5 net/mlx4: Fix UBSAN warning of signed integer overflow
26105b6b4 net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
f6379158d can: rcar_can: Fix erroneous registration
907acbc70 iommu/ipmmu-vmsa: Fix crash on early domain free
f4ee7fac5 usb: gadget: dummy: fix nonsensical comparisons
599379965 mm: cleancache: fix corruption on missed inode invalidation
10373f978 Input: xpad - quirk all PDP Xbox One gamepads
d747e3033 kgdboc: Fix warning with module build
5cd41dce7 kgdboc: Fix restrict error
c221c390c scsi: csiostor: Avoid content leaks and casts
a6d3f0246 ALSA: trident: Suppress gcc string warning
efb4251b4 scsi: scsi_devinfo: cleanly zero-pad devinfo strings
a37acf28a drm/ast: Fix incorrect free on ioregs
001aaa0ed mips: fix mips_get_syscall_arg o32 check
4b73de2a8 uprobes: Fix handle_swbp() vs. unregister() + register() race once more
89e230b36 iser: set sector for ambiguous mr status errors
b02e5ce46 kdb: use memmove instead of overlapping memcpy
9b72f39ce scsi: bfa: convert to strlcpy/strlcat
c9684d103 drm: gma500: fix logic error
7e3e3d934 ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
4952646d4 kernfs: Replace strncpy with memcpy
c6c893b2d unifdef: use memcpy instead of strncpy
85be96186 kobject: Replace strncpy with memcpy
de050e1a2 disable stringop truncation warnings for now
7b1fe42a5 Kbuild: suppress packed-not-aligned warning for default setting only
dc9311917 usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
591c2660e USB: usb-storage: Add new IDs to ums-realtek
df001cdfb dmaengine: at_hdmac: fix module unloading
f7d0d9589 dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
4dde2f5f7 ext2: fix potential use after free
9198b5bac ALSA: sparc: Fix invalid snd_free_pages() at error path
310c205b0 ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
88f27f2ba ALSA: wss: Fix invalid snd_free_pages() at error path
db417f1a6 usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
39893831b s390/qeth: fix length check in SNMP processing
e4fc666e5 rapidio/rionet: do not free skb before reading its length
c06ae62e5 Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"
eb71c2997 xpad: remove unused xpad_identify_controller() definition
536c27335 Merge 3.18.128 into android-msm-marlin-3.18-lts
bf297c09a Merge 3.18.127 into android-msm-marlin-3.18-lts
d838d7471 Merge 3.18.126 into android-msm-marlin-3.18-lts
5e37406ee Merge 3.18.125 into android-msm-marlin-3.18-lts
919b449e5 msm-ion build fixes/hacks for 3.18.124
3879c163e Linux 3.18.128
7a0be1dcd drm/ast: Remove existing framebuffers before loading driver
580c3e9a8 af_unix: move unix_mknod() out of bindlock
b45757619 tty: wipe buffer if not echoing data
c428d528f tty: wipe buffer.
c47386bdb scsi: qla2xxx: do not queue commands when unloading
904cc8505 scsi: ufs: fix race between clock gating and devfreq scaling work
32ed30b72 scsi: ufshcd: Fix race between clk scaling and ungate work
340aac228 scsi: ufs: fix bugs related to null pointer access and array size
aba29c20d cw1200: Don't leak memory if krealloc failes
41d1c56f2 Input: xpad - add support for Xbox1 PDP Camo series gamepad
964813700 Input: xpad - fix GPD Win 2 controller name
7c541fe80 Input: xpad - add GPD Win 2 Controller USB IDs
2a1605650 Input: xpad - avoid using __set_bit() for capabilities
69fe32cdd Input: xpad - fix some coding style issues
8caa7c885 Input: xpad - add PDP device id 0x02a4
849e8175a Input: xpad - add support for PDP Xbox One controllers
2da1f7c60 Input: xpad - validate USB endpoint type during probe
3aa211c85 Input: xpad - fix PowerA init quirk for some gamepad models
7bb59fe0e Input: xpad - constify usb_device_id
bb7169f3d Input: xpad - sync supported devices with XBCD
b9805bd26 Input: xpad - sync supported devices with 360Controller
2de9c977c Input: xpad - add USB IDs for Mad Catz Brawlstick and Razer Sabertooth
b8b7dbfd1 Input: xpad - sync supported devices with xboxdrv
d87b189bb Input: xpad - sort supported devices by USB ID
7738fceb1 Input: xpad - support some quirky Xbox One pads
151773474 Input: xpad - restore LED state after device resume
d91bbfcc4 Input: xpad - fix stuck mode button on Xbox One S pad
237ff9b10 Input: xpad - don't depend on endpoint order
7fe76c3e5 Input: xpad - simplify error condition in init_output
44787a795 Input: xpad - move reporting xbox one home button to common function
29ddc01c9 Input: xpad - correctly sort vendor id's
9cb595806 Input: xpad - use correct product id for x360w controllers
2d92cafaa Input: xpad - fix Xbox One rumble stopping after 2.5 secs
d4830857b Input: xpad - add product ID for Xbox One S pad
7d17ca91d Input: xpad - power off wireless 360 controllers on suspend
40b3de594 Input: xpad - fix oops when attaching an unknown Xbox One gamepad
db3d42826 Input: xpad - fix rumble on Xbox One controllers with 2015 firmware
1a9409ebb Input: xpad - xbox one elite controller support
adde3608c Input: xpad - add more third-party controllers
f1976de81 Input: xpad - prevent spurious input from wired Xbox 360 controllers
898971df5 Input: xpad - move pending clear to the correct location
e95ccc0f3 Input: xpad - add Mad Catz FightStick TE 2 VID/PID
3a9a52382 Input: xpad - remove unused function
186e965ed Input: xpad - correct xbox one pad device name
b4f7f63c2 Input: xpad - use LED API when identifying wireless controllers
0d5f5eafb Input: xpad - workaround dead irq_out after suspend/ resume
162a94765 Input: xpad - update Xbox One Force Feedback Support
c190dccbb Input: xpad - correctly handle concurrent LED and FF requests
7a0a65d15 Input: xpad - handle "present" and "gone" correctly
a03c1ce2b Input: xpad - remove spurious events of wireless xpad 360 controller
d6d5f0290 Input: xpad - fix clash of presence handling with LED setting
80426963a Input: xpad - query wireless controller state at init
7e0f79ac7 Input: xpad - move the input device creation to a new function
8d20f7d97 Input: xpad - x360w: report dpad as buttons and axes
9a249a885 Input: xpad - factor out URB submission in xpad_play_effect
e2e233d1a Input: xpad - remove needless bulk out URB used for LED setup
12a85e058 Input: xpad - use ida() for finding the pad_nr
a9040f812 Input: xpad - clarify LED enumeration
76caf6084 Input: xpad - fix Razer Atrox Arcade Stick button mapping
6f6c54ceb Input: xpad - add Covert Forces edition of the Xbox One controller
b92cf9056 Input: xpad - re-send LED command on present event
302210379 Input: xpad - set the LEDs properly on XBox Wireless controllers
70d7e0cb4 Input: xpad - add rumble support for Xbox One controller
69700b23e Input: initialize device counter variables with -1
d5942fa8b arm64: remove no-op -p linker flag
a4a8c9e8c tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset
ff1bb8061 powerpc/numa: Suppress "VPHN is not supported" messages
1bdb2d2f0 kdb: Use strscpy with destination buffer size
6093733ec SUNRPC: Fix a bogus get/put in generic_key_to_expire()
a5824456e cpufreq: imx6q: add return value check for voltage scale
7da5b2c86 can: dev: __can_get_echo_skb(): print error message, if trying to echo non existing skb
a02dbcb5c can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb is accessed out of bounds
ffd6e56d4 can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to access frame length
4b382304b can: dev: can_get_echo_skb(): factor out non sending code to __can_get_echo_skb()
ac861eab3 drm/ast: change resolution may cause screen blurred
52e6b86ba drm/ast: fixed cursor may disappear sometimes
7b24638e7 llc: do not use sk_eat_skb()
e458d80f6 gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
26e51e528 sctp: clear the transport of some out_chunk_list chunks in sctp_assoc_rm_peer
eab1f5600 bfs: add sanity check at bfs_fill_super()
9b939ec70 v9fs_dir_readdir: fix double-free on p9stat_read error
161a4fe3a usb: core: Fix hub port connection events lost
376f40525 Linux 3.18.127
40e10ccf9 HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
9265b0aba new helper: uaccess_kernel()
4c2354477 ACPI / platform: Add SMB0001 HID to forbidden_id_list
a5470231b USB: misc: appledisplay: add 20" Apple Cinema Display
601b80e01 misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data
7f1643f1d usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB
f4dd27ef4 USB: quirks: Add no-lpm quirk for Raydium touchscreens
012091662 usb: cdc-acm: add entry for Hiro (Conexant) modem
5221513ba uio: Fix an Oops on load
89a61fca2 media: v4l: event: Add subscription to list before calling "add" operation
dcb3855e2 Revert "Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV"
eace49080 SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer()
987bd96e8 Revert "Revert "drm/i915: Fix mutex->owner inspection race under DEBUG_MUTEXES""
f14086aed zram: close udev startup race condition as default groups
11859268c lib/raid6: Fix arm64 test build
e6c0fca31 s390/vdso: add missing FORCE to build targets
94ece43a0 clk: samsung: exynos5420: Enable PERIS clocks for suspend
b2eafabc1 fs/exofs: fix potential memory leak in mount option parsing
0330faf4b um: Give start_idle_thread() a return code
20a0f450a hfsplus: prevent btree data loss on root split
5ca719432 hfs: prevent btree data loss on root split
bb55901e2 reiserfs: propagate errors from fill_with_dentries() properly
12c4de6ef net-gro: reset skb->pkt_type in napi_reuse_skb()
1ed089625 Linux 3.18.126
d59d983f7 hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
3763666bb configfs: replace strncpy with memcpy
ace9067ef fuse: fix leaked notify reply
7b86a9a6c sunrpc: correct the computation for page_ptr when truncating
02948fa1d mount: Prevent MNT_DETACH from disconnecting locked mounts
dad4132a1 mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
5bcdd9f4e mount: Retest MNT_LOCKED in do_umount
f1dbaa10a ext4: fix buffer leak in __ext4_read_dirblock() on error path
2af2a0030 ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
69535d7ee ext4: release bs.bh before re-using in ext4_xattr_block_find()
3c0f99bb2 ext4: fix possible leak of sbi->s_group_desc_leak in error path
eebf0feb5 ext4: avoid possible double brelse() in add_new_gdb() on error path
e66a1ebd8 ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing
256e71ccb ext4: avoid buffer leak in ext4_orphan_add() after prior errors
f817fb9e4 ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
1ffb05683 ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
c6a2eadf2 ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
9cd2f90b0 ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
2b23c27fb ext4: add missing brelse() update_backups()'s error path
f50147c4f arch/alpha, termios: implement BOTHER, IBSHIFT and termios2
7e06e5d8c termios, tty/tty_baudrate.c: fix buffer overrun
c80c604b2 mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
d7ba42866 ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
5673feab0 mach64: fix image corruption due to reading accelerator registers
d913c88a4 mach64: fix display corruption on big endian machines
5a6726d76 libceph: bump CEPH_MSG_MAX_DATA_LEN
2d42bc697 xtensa: fix boot parameters address translation
0869341c3 cdrom: fix improper type cast, which can leat to information leak.
78a2d6e9a 9p: clear dangling pointers in p9stat_free
b29137a4c media: tvp5150: fix width alignment during set_selection()
d409f43d8 powerpc/boot: Ensure _zimage_start is a weak symbol
9f8aad551 MIPS: kexec: Mark CPU offline before disabling local IRQ
2eb660399 media: pci: cx23885: handle adding to list failure
62d3277ec drm/omap: fix memory barrier bug in DMM driver
286f4a0fa powerpc/nohash: fix undefined behaviour when testing page size support
ac284ea8d tty: check name length in tty_find_polling_driver()
526ba18a5 dm: remove duplicate dm_get_live_table() in __dm_destroy()
2b4fc4a19 Cramfs: fix abad comparison when wrap-arounds occur
2a30b6b06 media: em28xx: make v4l2-compliance happier by starting sequence on zero
5304ba183 media: em28xx: fix input name for Terratec AV 350
03221e77a media: em28xx: use a default format if TRY_FMT fails
6680575d6 kgdboc: Passing ekgdboc to command line causes panic
0ede8c2b5 TC: Set DMA masks for devices
fd0fbac2f dm ioctl: harden copy_params()'s copy_from_user() from malicious users
4c0f637a5 lockd: fix access beyond unterminated strings in prints
dc6b735ee nfsd: Fix an Oops in free_session()
d698fa836 NFSv4.1: Fix the r/wsize checking
cbf78f49c printk: Fix panic caused by passing log_buf_len to command line
e6b4e1eea smb3: on kerberos mount if server doesn't specify auth type use krb5
a1f82fd7b smb3: do not attempt cifs operation in smb3 query info error path
ef61a0bdb smb3: allow stats which track session and share reconnects to be reset
23bbddabb w1: omap-hdq: fix missing bus unregister at removal
82a0fb54d iio: adc: at91: fix wrong channel number in triggered buffer mode
ebfe1077b iio: adc: at91: fix acking DRDY irq on simple conversions
b4e60099f kbuild: fix kernel/bounds.c 'W=1' warning
2d5aa4831 ima: fix showing large 'violations' or 'runtime_measurements_count'
f47ed13a8 crypto: lrw - Fix out-of bounds access on counter overflow
d4e37066b signal/GenWQE: Fix sending of SIGKILL
4d5b3d6d9 ext4: initialize retries variable in ext4_da_write_inline_data_begin()
844c9383f gfs2_meta: ->mount() can get NULL dev_name
877b9f576 jbd2: fix use after free in jbd2_log_do_checkpoint()
0aecd68fc net/ipv4: defensive cipso option parsing
451205899 signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init
9796453d4 scsi: lpfc: Correct soft lockup when running mds diagnostics
97b7b0e40 uio: ensure class is registered before devices
50057d1de usb: chipidea: Prevent unbalanced IRQ disable
be43710ec ext4: fix argument checking in EXT4_IOC_MOVE_EXT
269863421 scsi: esp_scsi: Track residual for PIO transfers
36dd0a3a3 ath10k: schedule hardware restart if WMI command times out
37d1e8fb1 kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
024cbc8a7 x86: boot: Fix EFI stub alignment
b14945fd2 mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
dac648046 perf tools: Cleanup trace-event-info 'tdata' leak
3f237bd15 perf tools: Free temporary 'sys' string in read_event_files()
4357e8c0a tun: Consistently configure generic netdev params via rtnetlink
1459c44d5 swim: fix cleanup on setup error
8ba611c90 ataflop: fix error handling during setup
1a0f142ec locking/lockdep: Fix debug_locks off performance problem
17a4e5534 selftests: ftrace: Add synthetic event syntax testcase
249e20f72 net: qla3xxx: Remove overflowing shift statement
6157f7096 sparc: Throttle perf events properly.
ab9c44bc8 sparc: Fix single-pcr perf event counter management.
a915c8db5 x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided
e09de4ff4 ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
936445237 pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2267b7026 jffs2: free jffs2_sb_info through jffs2_kill_sb()
b637bc601 bcache: fix miss key refill->end in writeback
651188d46 Merge 3.18.124 into android-msm-marlin-3.18-lts
78e0897dd Linux 3.18.125
6937db48a sched/fair: Fix throttle_list starvation with low CFS quota
341d66bbf USB: fix the usbfs flag sanitization for control transfers
07e370349 cdc-acm: correct counting of UART states in serial state notification
fdbbd4180 cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
fa6810e7d net: sched: gred: pass the right attribute to gred_change_table_def()
0e71018ab rtnetlink: Disallow FDB configuration for non-Ethernet device
d64a8204d net: drop skb on failure in ip_check_defrag()
55eb3e7e4 sctp: fix race on sctp_id2asoc
e29dae465 r8169: fix NAPI handling under high load
410155b75 net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules
242384b37 net: socket: fix a missing-check bug
f28d8265c net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
b719ba2ba ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called
03628bad5 ipv6: mcast: fix a use-after-free in inet6_mc_check
0f1490a75 mremap: properly flush TLB before releasing the page
01393bd29 /proc/iomem: only expose physical resource addresses to privileged users
df10e01a5 perf tools: Disable parallelism for 'make clean'
b9e6f13b0 fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
323783624 unix: correctly track in-flight fds in sending process user_struct
7746e511c x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs
a5bb227c4 net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
e57bb9912 USB: hub: fix up early-exit pathway in hub_activate
7938ba3f9 KEYS: put keyring if install_session_keyring_to_cred() fails
7b8052e19 igb: fix NULL derefs due to skipped SR-IOV enabling
d255d18a3 ovl: fix open in stacked overlay
61fde28f9 iwlwifi: pcie: correctly define 7265-D cfg
beb685c85 sctp: translate network order to host order when users get a hmacid
ce2c2e073 vfs: Make sendfile(2) killable even better
ffad2775c PCI: Fix devfn for VPD access through function 0
c7f6eab8d x86/ldt: Fix small LDT allocation for Xen
1c857dc0e Revert "SCSI: Fix NULL pointer dereference in runtime PM"
f46c09f2f mm: migrate: hugetlb: putback destination hugepage to active list
73c72ba64 perf: Fix PERF_EVENT_IOC_PERIOD deadlock
4ac4abf7f libata: blacklist Micron 500IT SSD with MU01 firmware
3bf6a2fad igb: Unpair the queues when changing the number of queues
b48138a2c Btrfs: do not ignore errors from btrfs_lookup_xattr in do_setxattr
52a25e71c tty: audit: Fix audit source
21bfce667 ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
7e746c555 ALSA: hda - Add headset mic support for Acer Aspire V5-573G
3d9578e68 rtlwifi: rtl8821ae: Fix lockups on boot
90e2ce568 rtlwifi: rtl8821ae: Fix system lockups on boot
98a1c516e selftests: Introduce a new script to generate tc batch file
d6412f344 mtd: blkdevs: fix potential deadlock + lockdep warnings
ae7009efa ASoC: dapm: Don't add prefix to widget stream name
9e452e6fb lib: make memzero_explicit more robust against dead store elimination
a8497facb dm9000: Fix irq trigger type setup on non-dt platforms
a13209d9b MIPS: Fix up obsolete cpu_set usage
7c852f4aa perf bench numa: Fix to show proper convergence stats
a5b943b46 net: ethernet: davicom: fix devicetree irq resource
e55a9657b ext4: fix an ext3 collapse range regression in xfstests
b66c199a3 x86/idle: Restore trace_cpu_idle to mwait_idle() calls
aa4b7331d tty: serial: fsl_lpuart: fix clearing of receive flag
5bfeb44f8 iommu/vt-d: Fix VM domain ID leak
315ef93a2 net/mlx4_en: Remove dependency between timestamping capability and service_task
8b2969d19 arm/arm64: KVM: Take mmap_sem in stage2_unmap_vm
e1db66a5f dm: fix AB-BA deadlock in __dm_destroy()
086753c47 pinctrl: imx25: ensure that a pin with id i is at position i in the info array
6a7f6b478 Btrfs: avoid syncing log in the fast fsync path when not necessary
7df4d34da of/pci: Remove duplicate kfree in of_pci_get_host_bridge_resources()
3379b5064 x86/irq: Check for valid irq descriptor in check_irq_vectors_for_cpu_disable()
df26890c3 rcu: Clear need_qs flag to prevent splat
9bba2bdd8 nfs: fix high load average due to callback thread sleeping
efc0f8599 rtnl: don't account unused struct ifla_port_vsi in rtnl_port_size
bb3c06686 quota: Fix maximum quota limit settings
db03188bc clk: rockchip: fix deadlock possibility in cpuclk
65afec843 ARM: dts: disable CCI on exynos5420 based arndale-octa
21b25db92 drivers: bus: check cci device tree node status
12c2155a4 perf tools: Fix segfault for symbol annotation on TUI
0ebc7b86d perf tools: Avoid build splat for syscall numbers with uclibc
65474ace1 perf tools: Fix statfs.f_type data type mismatch build error with uclibc
32eaad579 perf machine: Fix __machine__findnew_thread() error path
da28482dc perf/x86/intel: Fix bug for "cycles:p" and "cycles:pp" on SLM
34215ab7b perf/rapl: Fix sysfs_show() initialization for RAPL PMU
ac6e3ff93 tracing: Fix enabling of syscall events on the command line
e6e3cb2c2 fbdev/broadsheetfb: fix memory leak
8b46b06ab ARM: at91: board-dt-sama5: add phy_fixup to override NAND_Tree
8b247933c ARM: at91/dt: sam9263: Add missing clocks to lcdc node
3a6f4448e ARM: at91: sama5d3: dt: correct the sound route
ef4bfab24 ARM: at91/dt: sama5d4: fix the timer reg length
17a4b6183 mcb: mcb-pci: Only remap the 1st 0x200 bytes of BAR 0
924dfb717 serial: samsung: Add the support for Exynos5433 SoC
a1d8cb5b1 Revert "tty: Fix pty master poll() after slave closes v2"
ac38cf0e5 usb: host: ehci-tegra: request deferred probe when failing to get phy
c17101a61 uas: disable UAS on Apricorn SATA dongles
500378d94 USB: EHCI: adjust error return code
d0dde4509 scsi: ->queue_rq can't sleep
f871c0366 arm: dts: Use pmu_system_controller phandle for dp phy
2204b0498 NFSv4: Remove incorrect check in can_open_delegated()
226af5ac0 NFS: Ignore transport protocol when detecting server trunking
0d63979c1 Linux 3.18.124
ab94214d6 ebtables: arpreply: Add the standard target sanity check
72c687726 ubifs: Check for name being NULL while mounting
e289e1959 cgroup: Fix deadlock in cpu hotplug path
4faa55828 ext4: avoid running out of journal credits when appending to an inline file
524100251 jbd2: don't mark block as modified if the handle is out of credits
292dc9673 ext4: add more inode number paranoia checks
fd2634366 ext4: never move the system.data xattr out of the inode body
f8b8db07a ext4: always verify the magic number in xattr blocks
912e35d18 ext4: add corruption check in ext4_xattr_set_entry()
5141d3334 ext4: fix false negatives *and* false positives in ext4_check_descriptors()
6f6da33de ext4: always check block group bounds in ext4_init_block_bitmap()
08b1fd27c ext4: fix check to prevent initializing reserved inodes
8d419749b ext4: only look at the bg_flags field if it is valid
974abf888 USB: serial: simple: add Motorola Tetra MTP6550 id
d9e61bdd8 PM / core: Clear the direct_complete flag on errors
726063c5d mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
8858d0c43 PCI: Reprogram bridge prefetch registers on resume
b1f378d83 x86/vdso: Fix vDSO syscall fallback asm constraint regression
430d094da x86/vdso: Fix asm constraints on vDSO syscall fallbacks
39e616e07 fbdev/omapfb: fix omapfb_memory_read infoleak
ea20fab57 proc: restrict kernel stack dumps to root
01f7e0293 mtd: fsl-quadspi: fix macro collision problems with READ/WRITE
685adc73d Make file credentials available to the seqfile interfaces
8c6fbba67 dm thin metadata: fix __udivdi3 undefined on 32-bit
1c07a7cc5 ocfs2: fix locking for res->tracking and dlm->tracking_list
1b42ccdce crypto: mxs-dcp - Fix wait logic on chan threads
ada05f73e smb2: fix missing files in root share directory listing
b4f13b686 xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
f1cf612e3 xen/manage: don't complain about an empty value in control/sysrq node
fd51d7c16 cifs: read overflow in is_valid_oplock_break()
50997bdef s390/qeth: don't dump past end of unknown HW header
f56aa68da r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
43f67da4e hexagon: modify ffs() and fls() to return int
ece65461b arch/hexagon: fix kernel/dma.c build warning
b4387536c dm thin metadata: try to avoid ever aborting transactions
699c47709 fs/cifs: suppress a string overflow warning
8c44ff379 USB: yurex: Check for truncation in yurex_read()
d90c01400 RDMA/ucma: check fd type in ucma_migrate_id()
e467ada01 mm: madvise(MADV_DODUMP): allow hugetlbfs pages
792de67fc tools/vm/page-types.c: fix "defined but not used" warning
257907358 tools/vm/slabinfo.c: fix sign-compare warning
15ace3408 mac80211: shorten the IBSS debug messages
3655a530e mac80211: Fix station bandwidth setting after channel switch
869ce9b1b mac80211: fix a race between restart and CSA flows
33865da6e fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
1ed8736a8 net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
3f5fc65ee RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
5f2da71a1 cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
9f91fbeec gpio: adp5588: Fix sleep-in-atomic-context bug
44e7dfa5e mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
0a76f11d2 KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function
10c134df9 media: v4l: event: Prevent freeing event subscriptions while accessed
a46148c3e arm64: KVM: Sanitize PSTATE.M when being set from userspace
4e249d032 hwmon: (adt7475) Make adt7475_read_word() return errors
666a30542 e1000: ensure to free old tx/rx rings in set_ringparam()
aa7ef1ed1 e1000: check on netif_running() before calling e1000_up()
4aee59581 thermal: of-thermal: disable passive polling when thermal zone is disabled
683626073 ext4: verify the depth of extent tree in ext4_find_extent()
d26e09111 arm64: KVM: Tighten guest core register access from userspace
d82ad70e8 staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free
be6f6eaab scsi: target: iscsi: Use bin2hex instead of a re-implementation
05bebb438 USB: remove LPM management from usb_driver_claim_interface()
f30969311 Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()"
24e5fc95f USB: usbdevfs: restore warning for nonsensical flags
2ea01479e USB: usbdevfs: sanitize flags more
530d53709 media: uvcvideo: Support realtek's UVC 1.5 device
843b66cb6 slub: make ->cpu_partial unsigned int
48ba1bb31 USB: handle NULL config in usb_find_alt_setting()
75e71d43b USB: fix error handling in usb_driver_claim_interface()
6ea058b70 spi: rspi: Fix interrupted DMA transfers
5a5b2a2bd spi: sh-msiof: Fix handling of write value for SISTR register
f4da70be9 spi: tegra20-slink: explicitly enable/disable clock
784a10df0 serial: cpm_uart: return immediately from console poll
0facefd1d floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
0fb40f7dd nfsd: fix corrupted reply to badly ordered compound
5199f517a module: exclude SHN_UNDEF symbols from kallsyms api
8e74d3173 ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs
b4bc21f12 scsi: bnx2i: add error handling for ioremap_nocache
fafbfb107 HID: hid-ntrig: add error handling for sysfs_create_group
d02f9650d ARM: mvebu: declare asm symbols as character arrays in pmsu.c
cbc56a12d wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()
1ae2ccc92 rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
ebfb72d5e ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
f2286545c media: tm6000: add error handling for dvb_register_adapter
7376ca3d0 drivers/tty: add error handling for pcmcia_loop_config
59c5b0c02 staging: android: ashmem: Fix mmap size validation
4e8a8b0b7 media: soc_camera: ov772x: correct setting of banding filter
56ebe9e42 Merge 3.18.123 into android-msm-marlin-3.18-lts
921b2fed6 Linux 3.18.123
66688f619 USB: serial: ti_usb_3410_5052: fix array underflow in completion handler
cf9bbea62 drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
32ab7310c ALSA: pcm: Fix snd_interval_refine first/last with open min/max
4a8fd0459 rtc: bq4802: add error handling for devm_ioremap
4d50d942b parport: sunbpp: fix error return code
03ace9d6d ARM: hisi: check of_iomap and fix missing of_node_put
073b26b9b ARM: hisi: handle of_iomap and fix missing of_node_put
ebb9196a1 MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
0bcaafbf8 mtdchar: fix overflows in adjustment of `count`
2e866a275 audit: fix use-after-free in audit_add_watch
1a92b397c binfmt_elf: Respect error return from `regset->active'
34f39bdb0 CIFS: fix wrapping bugs in num_entries()
cece1875d cifs: prevent integer overflow in nxt_dir_entry()
6f3e0e8ac usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()
a89c7b5a8 USB: yurex: Fix buffer over-read in yurex_write()
2fd95e988 usb: misc: uss720: Fix two sleep-in-atomic-context bugs
a9cdf4ce5 USB: serial: io_ti: fix array underflow in completion handler
c601d90f7 usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
da7a5b540 usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()
fbc35884e USB: Add quirk to support DJI CineSSD
15567156d usb: Don't die twice if PCI xhci host is not responding in resume
9ca1bf5ee Tools: hv: Fix a bug in the key delete code
9778987cf IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
bd4971c34 xen/netfront: fix waiting for xenbus state change
36a991618 pstore: Fix incorrect persistent ram buffer mapping
e6858a995 RDMA/cma: Protect cma dev list with lock
31f0ff10c platform/x86: toshiba_acpi: Fix defined but not used build warnings
9cac5f329 s390/qeth: reset layer2 attribute on layer switch
1437dd397 s390/qeth: fix race in used-buffer accounting
67f5abb49 mac80211: restrict delayed tailroom needed decrement
98cc98203 powerpc/powernv: opal_put_chars partial write fix
8eb6f3c1e perf powerpc: Fix callchain ip filtering
026d9d4ba fbdev: Distinguish between interlaced and progressive modes
2a227c0ac perf powerpc: Fix callchain ip filtering when return address is in a register
a4e5e18d2 fbdev/via: fix defined but not used warning
f697031f5 video: goldfishfb: fix memory leak on driver remove
bae63ef69 fbdev: omapfb: off by one in omapfb_register_client()
955a815d1 mtd/maps: fix solutionengine.c printk format warnings
40c863784 MIPS: ath79: fix system restart
3916385fc gfs2: Special-case rindex for gfs2_grow
0d46dece5 xfrm: fix 'passing zero to ERR_PTR()' warning
b741bcfe2 ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
4601c4744 ALSA: msnd: Fix the default sample sizes
2b8f74c8f mm: get rid of vmacache_flush_all() entirely
a4508e038 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
449fab4df xhci: Fix use-after-free in xhci_free_virt_device
84562954b MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
ae3ab8fd4 f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
7092eb81a mfd: ti_am335x_tscadc: Fix struct clk memory leak
c919a6827 partitions/aix: fix usage of uninitialized lv_info and lvname structures
845a0a1b2 partitions/aix: append null character to print data from disk
2541d77bf net: dcb: For wild-card lookups, use priority -1, not 0
351bce359 net: mvneta: fix mtu change on port without link
d8596403e gpio: ml-ioh: Fix buffer underwrite on probe error path
04924815b x86/mm: Remove in_nmi() warning from vmalloc_fault()
128b37430 Bluetooth: hidp: Fix handling of strncpy for hid->name information
9e8f26c2d scsi: 3ware: fix return 0 on the error path of probe
a9ab27336 ata: libahci: Correct setting of DEVSLP register
220146d5c MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
412d0c789 ath10k: prevent active scans on potential unusable channels
9e4dac32a macintosh/via-pmu: Add missing mmio accessors
4d9f6cff6 tty: rocket: Fix possible buffer overwrite on register_PCI
9b48a687f uio: potential double frees if __uio_register_device() fails
f2675e34b md/raid5: fix data corruption of replacements after originals dropped
cb8ef134e scsi: target: fix __transport_register_session locking
209c27b04 Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
45845e2f8 staging/rts5208: Fix read overflow in memcpy
0ee00fd88 staging: rt5208: Fix a sleep-in-atomic bug in xd_copy_page
7ec63987f kthread: fix boot hang (regression) on MIPS/OpenRISC
3fb2459d9 kthread: Fix use-after-free if kthread fork fails
689d21030 cfq: Give a chance for arming slice idle timer in case of group_idle
933ce26bd i2c: xiic: Make the start and the byte count write atomic
cb4009e1c ASoC: wm8994: Fix missing break in switch
dd6ff2938 Fixes: Commit 86af955d02bb ("mm: numa: avoid waiting on freed migrated pages")
566f4e263 enic: do not call enic_change_mtu in enic_probe
f24049f47 irda: Only insert new objects into the global database via setsockopt
9f0547e07 irda: Fix memory leak caused by repeated binds of irda socket
2daf1a749 kbuild: make missing $DEPMOD a Warning instead of an Error
fa2d7df55 debugobjects: Make stack check warning more informative
174b32e22 btrfs: Don't remove block group that still has pinned down bytes
56f338b39 btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized
cb17dca7e btrfs: replace: Reset on-disk dev stats value after replace
5fcb40fd1 powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
5a1632617 SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
bf638d307 smb3: fix reset of bytes read and written stats
d4d534751 selftests/powerpc: Kill child processes on SIGINT
e95db7598 power: battery: batt_shutdown_lock was held not release.
1edcc8f5f charger: fix lower charging current with DCP charger
65edcb49f qpnp-smbcharger:smb parallel charge not enable with type-c charger
75ccb8e77 PREUPLOAD: Add checkpatch hook
087daa00f Enable CONFIG_HID_SONY for pixel 1 devices
4bd21a05c marlin_defconfig: remove unused governors
236f4369f LTS: Merge 3.18.122 into android-msm-marlin-3.18
0ac716e6e Merge android-msm-marlin-3.18-pi-qpr1 into android-msm-marlin-3.18
5c5190754 qpnp-smbcharger: fix slower charging with type-C charger
58689c61e htc_battery: fix chg_dis_reason being set abnormally
6c9e926f7 htc_battery: fix slower charging with type-C chargers after boot
5243cadce pmic: qpnp-power-on: Dump PMIC registers on unknown cases
a9fb9f09e binder: Add instramentation to dump_ref_desc_tree()
bf1d24714 sched/sysctl: Check user input value of sysctl_sched_time_avg
e4f937428 Merge android-msm-marlin-3.18-pi into android-msm-marlin-3.18
ab17a75b3 Merge android-msm-marlin-3.18-pi into android-msm-marlin-3.18
06f6381e6 qcacld-2.0: wlan host driver upgrade to 4.4.25.051
31eeed230 qcacld-2.0: Flush scan list if temp list is greater than CSR_MAX_BSS_SUPPORT
7426a0c98 cnss: Update bus scale request at end of unregister
0b6976f59 cpufreq_stats: Reset cpufreq_task_stats right after dup_task_struct
Linux version 3.18.131-g528ac59 (android-build@abfarm339) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Jan 22
02:13:07 UTC 2019
Bug: 11048817
Bug: 30870027
Bug: 63040388
Bug: 79441921
Bug: 80495857
Bug: 110201845
Bug: 110418817
Bug: 111081202
Bug: 111431828
Bug: 113087942
Bug: 113088636
Bug: 113164315
Bug: 113282725
Bug: 113298614
Bug: 115413969
Bug: 115649896
Bug: 115684360
Bug: 116032043
Bug: 122351661
Change-Id: I2f95f7c0153d72dd93a5793c05962307ee4b39bc
Source-Branch: android-msm-marlin-3.18-pi-qpr3
Signed-off-by: Petri Gynther <pgynther@google.com>
|
|
665c9a1d4 Merge branch 'android-msm-marlin-3.18-pi-qpr1' into android-msm-marlin-3.18-pi-qpr2
c31e2d78b Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
eccd57866 Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
d3d9fdf92 Revert "Revert "msm: vidc: ignore processing responses in invalid state""
e06da1578 Revert "msm: vidc: ignore processing responses in invalid state"
5a19ffd24 UPSTREAM: binder: fix race that allows malicious free of live buffer
42abdbd97 binder: create node flag to request sender's security context
04a180786 msm: vidc: do not set video state to DEINIT very early
aeac61419 qcacld-2.0: Integer overflow in wma_unified_link_peer_stats_event_handler
d7af6a17f qcacld-2.0: Fix OOB write in wma_extscan_change_results_event_handler
761f35015 qcacld-2.0: Possible buffer overflow in wma_stats_ext_event_handler
fc76f1627 qcacld-2.0: Fix buffer overflow in ol_tx_inspect_handler
49c8c596a jbd2: don't mark block as modified if the handle is out of credits
efa3e263c ext4: avoid running out of journal credits when appending to an inline file
fbfcd73a9 af_key: unconditionally clone on broadcast
0a721fbba Revert "Revert "msm: vidc: ignore processing responses in invalid state""
4195485b6 qcacld-2.0: Add length check in ndp event handler
96227283d qcacld-2.0: Add vdev id sanity check in wma stats event handlers
Linux version 3.18.122-g665c9a1 (android-build@abfarm338) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jan 11
21:46:31 UTC 2019
Bug: 25646100
Bug: 109741946
Bug: 111127853
Bug: 111128301
Bug: 111128838
Bug: 112277221
Bug: 112278150
Bug: 116855682
Bug: 117311198
Bug: 119053086
Bug: 120487091
Bug: 120647440
Bug: 122351661
Change-Id: Icd06a80ebfadd87ae17cfb156f87bb8d58a853d0
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Miguel de Dios <migueldedios@google.com>
Test: build, boot, flash, setup, wifi, video/YT, apps, webpage, camera
|
|
8cf5239d5 Merge android-msm-marlin-3.18-pi-qpr1 into -pi-qpr2
f2646f50d Merge android-msm-marlin-3.18-pi into -pi-qpr1
8e04596a2 Revert "msm: vidc: ignore processing responses in invalid state"
Linux version 3.18.122-g8cf5239d58fd (android-
build@wphq5.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed Dec 12 23:34:23 UTC 2018
Bug: 120647440
Change-Id: I5da163a8266af5c0d5276593a01cca37af8faf9d
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Petri Gynther <pgynther@google.com>
|
|
e760c8f3b Merge branch 'android-msm-marlin-3.18-pi-qpr1' into android-msm-marlin-3.18-pi-qpr2
afb742820 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
09cd7113f Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
5dbdd3698 binder: fix race between munmap() and direct reclaim
d1d838864 msm: ipa3: Fix to validate the user inputs
fa4051e05 ext4: add corruption check in ext4_xattr_set_entry()
c72ec0abd ext4: always verify the magic number in xattr blocks
87a895c7c /proc/iomem: only expose physical resource addresses to privileged users
b5fe55044 Make file credentials available to the seqfile interfaces
9b38b2987 msm: ipa: Protect ipa default routing table
73594b468 msm: vidc: ignore processing responses in invalid state
10dfe3d27 UPSTREAM: binder: fix proc->files use-after-free
143582c95 Revert "FROMLIST: binder: fix proc->files use-after-free"
b26b1d7ff Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-security-next
Linux version 3.18.122-ge760c8f3be79 (android-
build@wprl12.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Fri Nov 30 04:21:30 UTC 2018
Bug: 109741776
Bug: 116406063
Bug: 117422211
Bug: 119052051
Bug: 119053086
Bug: 119687561
Bug: 120025196
Bug: 120025789
Test: booted on marlin
Change-Id: I8446896f1b0cae07b75479953760135a193f7bf0
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Siddharth Kapoor <ksiddharth@google.com>
|
|
409022857 Merge android-msm-marlin-3.18-pi-qpr1 into -pi-qpr2
16330f2b3 Merge android-msm-marlin-3.18-pi into -pi-qpr1
486754a4d mremap: properly flush TLB before releasing the page
Linux version 3.18.122-g409022857f70 (android-
build@wphl8.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Fri Nov 9 16:23:31 UTC 2018
Bug: 118836219
Change-Id: Idbc2f367937b9ddfc6a583617fbe03fc4942e24a
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Petri Gynther <pgynther@google.com>
|
|
9d08d9aa0 Fix SMMU fault on LPASS
6836e69ce Merge branch 'android-msm-marlin-3.18-pi-qpr1' into android-msm-marlin-3.18-pi-qpr2
005f45ee6 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
fe0b5874c Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
d3d78ed40 mm: get rid of vmacache_flush_all() entirely
b0ee76834 ext4: add more inode number paranoia checks
8a5902ee8 ext4: verify the depth of extent tree in ext4_find_extent()
d8dbc90ca ext4: never move the system.data xattr out of the inode body
f3c8dc90d ext4: only look at the bg_flags field if it is valid
68e64d650 ext4: don't update checksum of new initialized bitmaps
7a2b31971 Fix up non-directory creation in SGID directories
f483d4503 f2fs: fix to do sanity check with reserved blkaddr of inline inode
37c0f754f Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-security-next
Linux version 3.18.122-g9d08d9aa0830 (android-
build@wprc4.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed Nov 7 19:22:45 UTC 2018
Bug: 113148515
Bug: 113452403
Bug: 113818193
Bug: 116406122
Bug: 116406509
Bug: 116406625
Bug: 116406626
Bug: 117280327
Bug: 118159841
Change-Id: I797318123cf12b9acabca8de1e4d68c1e0d0b313
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Siyuan Zhou <siyuanzhou@google.com>
|
|
e89fdf539 scsi/ufs: use 16 queue depth for Samsung UFS part
4d912869a scsi: ufs: nullify lrbp->cmd inside of valid tag period
Linux version 3.18.122-ge89fdf539fc3 (android-
build@wphr1.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Thu Oct 18 17:11:00 UTC 2018
Bug: 73305279
Bug: 112733446
Change-Id: I573d5fe7bf45193d314b028fce624222a4a194ff
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
|
|
04093b7c5 Merge branch 'android-msm-marlin-3.18-pi-qpr1' into android-msm-marlin-3.18-pi-qpr2
4212e6b8d Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
ae2f29938 Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
60e9f50ed msm: sps: Suppress bind/unbind attributes
24eea1aaf msm: camera: Fix out-of-bounds read in string class name.
b90ab3996 qpnp-smbcharger:smb parallel charge not enable with type-c charger
f2b9e223f Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-security-next
Linux version 3.18.122-g04093b7c52fb (android-
build@wpiv4.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Fri Oct 12 16:52:03 UTC 2018
Bug: 114041685
Bug: 114042002
Bug: 115413969
Bug: 117289242
Change-Id: I2334d1faf8eaef5d7563188d3a24f0655848a6cb
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Siqi Lin <siqilin@google.com>
|
|
d4cb70231 LTS: Merge 3.18.122 into android-msm-marlin-3.18-pi-qpr2
4aea5eb64 Merge 3.18.122 into android-msm-marlin-3.18-lts
c0305995d Linux 3.18.122
b271f88e1 bcache: release dc->writeback_lock properly in bch_writeback_thread()
054206a27 getxattr: use correct xattr length
6f2f65ee0 udlfb: set optimal write delay
76391112d fb: fix lost console when the user unplugs a USB adapter
6c4dcc23d pwm: tiehrpwm: Fix disabling of output of PWMs
37ca931c0 ubifs: Fix synced_i_size calculation for xattr inodes
d6510124f Revert "UBIFS: Fix potential integer overflow in allocation"
155279d48 ubifs: Fix memory leak in lprobs self-check
7d024b6d8 userns: move user access out of the mutex
8a749f3ef userns; Correct the comment in map_write
a1ca395b1 sys: don't hold uts_sem while accessing userspace memory
3680c7ecd osf_getdomainname(): use copy_to_user()
76b5c9f1a mm/tlb: Remove tlb_remove_table() non-concurrent condition
8c6a5c96a ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
86e40c0cc pnfs/blocklayout: off by one in bl_map_stripe()
02de522ac 9p: fix multiple NULL-pointer-dereferences
eb67901b5 uprobes: Use synchronize_rcu() not synchronize_sched()
73b5c3dc5 kthread, tracing: Don't expose half-written comm when creating kthreads
a5a4dfa99 tracing/blktrace: Fix to allow setting same value
38a39e3dd tracing: Do not call start/stop() functions when tracing_on does not change
76eb62bdb iio: ad9523: Fix return value for ad952x_store()
a3442d68f iio: ad9523: Fix displayed phase
ceef7b21c dm cache metadata: save in-core policy_hint_size to on-disk superblock
d90fb2996 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
7bba0ec33 net/9p/client.c: version pointer uninitialized
fd38cf65a 9p/virtio: fix off-by-one error in sg list bounds check
43a2089a1 powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
b3f3454eb powerpc/fadump: handle crash memory ranges array index overflow
fec7d721a spi: davinci: fix a NULL pointer dereference
35ae0fdc1 Merge tag 3.18.121 into android-msm-marlin-3.18-lts
ba6984fc0 Linux 3.18.121
2f2943858 cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status
86c0a645f scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
a6abc9376 scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
1d7acd2e1 MIPS: Correct the 64-bit DSP accumulator register size
7ab91fb42 kprobes: Make list and blacklist root user read only
be4f8c44a s390/pci: fix out of bounds access during irq setup
dc826c93c s390/qdio: reset old sbal_state flags
0fd19868d pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
3aeaed1e8 ASoC: sirf: Fix potential NULL pointer dereference
aa6ba5e2f udl-kms: fix crash due to uninitialized memory
953d8afde udl-kms: handle allocation failure
8f02d4bb5 udl-kms: change down_interruptible to down
e0dd67c76 fuse: Add missed unlock_page() to fuse_readpages_fill()
9b39c90f1 fuse: Don't access pipe->buffers without pipe_lock()
91196d94b x86/process: Re-export start_thread()
a030af4fe KVM: arm/arm64: Skip updating PMD entry if no change
107c387a9 KVM: arm/arm64: Skip updating PTE entry if no change
872f590e7 arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
1f9e5416a ext4: reset error code in ext4_find_entry in fallback
ef2d2e24f s390/kvm: fix deadlock when killed by oom
8e46b7744 btrfs: don't leak ret from do_chunk_alloc
4c41a07ae mm/memory.c: check return value of ioremap_prot
f3ab0500e scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
ea0f60426 scsi: fcoe: drop frames in ELS LOGO error path
7ae3f84f2 drivers: net: lmc: fix case value for target abort error
0171efb22 arc: fix type warnings in arc/mm/cache.c
04b68e45e arc: fix build errors in arc/include/asm/delay.h
e5b4032ba enic: handle mtu change for vf properly
af47ed842 Revert "MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum"
417ea4338 tools/power turbostat: Read extended processor family from CPUID
33a11da05 zswap: re-check zswap_is_full() after do zswap_shrink()
fdb2cd0ff selftests/ftrace: Add snapshot and tracing_on test case
582db66ca cachefiles: Wait rather than BUG'ing on "Unexpected object collision"
4eabf1e29 cachefiles: Fix refcounting bug in backing-file read monitoring
a60d0786f fscache: Allow cancelled operations to be enqueued
903d5b843 net: axienet: Fix double deregister of mdio
73b89b6f9 bnx2x: Fix invalid memory access in rss hash config path.
da1ab9d3f media: staging: omap4iss: Include asm/cacheflush.h after generic includes
b725b8a21 can: mpc5xxx_can: check of_iomap return before use
4dafaff5d atl1c: reserve min skb headroom
479400078 net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
944dbf3b3 tools/power turbostat: fix -S on UP systems
2b8e010e3 usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
546157553 tools: usb: ffs-test: Fix build on big endian systems
a438b32e4 usb/phy: fix PPC64 build errors in phy-fsl-usb.c
97f07e588 usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue()
c51c58d75 usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller()
2d72c0a96 drm/imx: imx-ldb: check if channel is enabled before printing warning
ce7c57f67 drm/imx: imx-ldb: disable LDB on driver bind
ad020ae8a scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
115b73804 nl80211: Add a missing break in parse_station_flags
491e335a5 mac80211: add stations tied to AP_VLANs during hw reconfig
0b389a690 xfrm: free skb if nlsk pointer is NULL
ea0926cca xfrm: fix missing dst_release() after policy blocking lbcast and multicast
9a21340d0 Cipso: cipso_v4_optptr enter infinite loop
319bc6ceb sched/sysctl: Check user input value of sysctl_sched_time_avg
7c0d2615e Merge 3.18.120 into android-msm-marlin-3.18-lts
a5f9be357 Linux 3.18.120
88f8dcdb6 reiserfs: fix broken xattr handling (heap corruption, bad retval)
3311a3935 PCI: hotplug: Don't leak pci_slot on registration failure
c1d01e128 packet: refine ring v3 block size test to hold one frame
c022960cd netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
966e597ed xfrm_user: prevent leaking 2 bytes of kernel memory
5554e8fc6 staging: android: ion: check for kref overflow
dfd380594 tcp: identify cryptic messages as TCP seq # bugs
45d5a5d0d net: qca_spi: Make sure the QCA7000 reset is triggered
1357eabe9 net: qca_spi: Avoid packet drop during initial sync
01c755b1b net: usb: rtl8150: demote allmulti message to dev_dbg()
9012fe049 qlogic: check kstrtoul() for errors
89a9bc2df ixgbe: Be more careful when modifying MAC filters
c76800bd4 ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller
7fed6b5ed drm/armada: fix colorkey mode property
f8ebc472b ARM: pxa: irq: fix handling of ICMR registers in suspend/resume
2e792ad70 netfilter: x_tables: set module owner for icmp(6) matches
46ed892ba smsc75xx: Add workaround for gigabit link up hardware errata.
766c02b66 tracing: Use __printf markup to silence compiler
d9823784f ARM: imx_v4_v5_defconfig: Select ULPI support
d35f87465 m68k: fix "bad page state" oops on ColdFire boot
7af7d6ec7 bnx2x: Fix receiving tx-timeout in error or recovery state.
f4ed9d9d6 drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes
0d8e0d1c6 md/raid10: fix that replacement cannot complete recovery after reassemble
c641c7147 dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()
a750989e3 ARM: dts: da850: Fix interrups property for gpio
915d80fd2 perf report powerpc: Fix crash if callchain is empty
9b99d54ba ARM: dts: am437x: make edt-ft5x06 a wakeup source
7acdfaef2 brcmfmac: stop watchdog before detach and free everything
99b61ce7d cxgb4: when disabling dcb set txq dcb priority to 0
f1630f80a Smack: Mark inode instant in smack_task_to_inode
79093b9d5 ipv6: mcast: fix unsolicited report interval after receiving querys
9773c6dbf locking/lockdep: Do not record IRQ state within lockdep code
a5eb5cb96 net: davinci_emac: match the mdio device against its compatible if possible
d4a1dd4e5 net: propagate dev_get_valid_name return code
318b0e847 net: hamradio: use eth_broadcast_addr
2416eb02d enic: initialize enic->rfs_h.lock in enic_probe
f26b61f75 arm64: make secondary_start_kernel() notrace
c302a0ec5 usb: gadget: composite: fix delayed_status race condition when set_interface
bd3db434b usb: dwc2: fix isoc split in transfer with no data
3b0134e63 selftests: sync: add config fragment for testing sync framework
20b50fb6a netfilter: ipv6: nf_defrag: reduce struct net memory waste
f6d57daec isdn: Disable IIOCDBGVAR
9515219e9 Bluetooth: avoid killing an already killed socket
0af583b90 serial: 8250_dw: always set baud rate in dw8250_set_termios
382627a4d USB: serial: sierra: fix potential deadlock at close
23a5e8570 ALSA: vxpocket: Fix invalid endian conversions
270ba2ca0 ALSA: memalloc: Don't exceed over the requested size
88c9ef778 ALSA: cs5535audio: Fix invalid endian conversion
75890e929 ALSA: virmidi: Fix too long output trigger loop
9c0951918 ALSA: vx222: Fix invalid endian conversions
2ccea620f vsock: split dwork to avoid reinitializations
31b912a5b net_sched: fix NULL pointer dereference when delete tcindex filter
8a6eecdb4 net_sched: Fix missing res info when create new tc_index filter
71e6f3f1c llc: use refcount_inc_not_zero() for llc_sap_find()
719710e96 l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
63615faa6 dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart()
0afe7f887 Merge 3.18.119 into android-msm-marlin-3.18-lts
56f284cb9 Merge 3.18.118 into android-msm-marlin-3.18-lts
c5deb8ce5 Merge 3.18.117 into android-msm-marlin-3.18-lts
7447d3b4d Merge 3.18.116 into android-msm-marlin-3.18-lts
5169e3ddf Merge 3.18.115 into android-msm-marlin-3.18-lts
6ac164da4 Merge 3.18.114 into android-msm-marlin-3.18-lts
6937e343a Merge 3.18.113 into android-msm-marlin-3.18-lts
8cad3062d Merge 3.18.112 into android-msm-marlin-3.18-lts
b1dbb50a2 Merge 3.18.110 into android-msm-marlin-3.18-lts
29b887231 Merge 3.18.109 into android-msm-marlin-3.18-lts
18e6ee044 Linux 3.18.119
adfdcfe1c Bluetooth: hidp: buffer overflow in hidp_process_report
4b55d18a7 crypto: ablkcipher - fix crash flushing dcache in error path
c34837dee crypto: blkcipher - fix crash flushing dcache in error path
58a60fc8e crypto: vmac - separate tfm and request context
b39ac2f45 crypto: vmac - require a block cipher with 128-bit block size
cd635c1cb kbuild: verify that $DEPMOD is installed
982ad049e i2c: ismt: fix wrong device address when unmap the data buffer
cdc103fb6 mm: slub: fix format mismatches in slab_err() callers
84d2099e7 ALSA: info: Check for integer overflow in snd_info_entry_write()
208255c7a kprobes/x86: Fix %p uses in error messages
af773a647 ARM: dts: imx6sx: fix irq for pcie bridge
4111fe47e fix __legitimize_mnt()/mntput() race
6f4d6842e fix mntput/mntput race
7f48b39f2 root dentries need RCU-delayed freeing
38b901473 xen/netfront: don't cache skb_shinfo()
d093dfa6f Merge 3.18.108 into android-msm-marlin-3.18-lts
7a71189c8 Merge 3.18.107 into android-msm-marlin-3.18-lts
36172a61a Merge 3.18.106 into android-msm-marlin-3.18-lts
66c1658bd Merge 3.18.105 into android-msm-marlin-3.18-lts
8458a90ed Merge 3.18.103 into android-msm-marlin-3.18-lts
830f9674e Linux 3.18.118
31430f2b9 jfs: Fix inconsistency between memory allocation and ea_buf->max_size
fed22131f ring_buffer: tracing: Inherit the tracing setting to next ring buffer
fa4bbed87 scsi: qla2xxx: Return error when TMF returns
2de35a8aa scsi: qla2xxx: Fix ISP recovery on unload
f42178c0f scsi: sg: fix minor memory leak in error path
fc7ec0c4e crypto: padlock-aes - Fix Nano workaround data corruption
c4682ea44 virtio_balloon: fix another race between migration and ballooning
a64e47ee1 can: ems_usb: Fix memory leak on ems_usb_disconnect()
4a60e5435 squashfs: more metadata hardenings
a220a703b squashfs: more metadata hardening
1aa222b3b net: dsa: Do not suspend/resume closed slave_dev
95478b56a inet: frag: enforce memory limits earlier
88b3bd578 ipv4: remove BUG_ON() from fib_compute_spec_dst
6f46f91cb tcp: add one more quick ack after after ECN events
0ecfeef99 tcp: refactor tcp_ecn_check_ce to remove sk type cast
d8c80fae4 tcp: do not aggressively quick ack after ECN events
c4af43493 tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode
de0e64045 tcp: do not force quickack when receiving out-of-order packets
fb062d526 xen-netfront: wait xenbus state change when load module manually
30a1af4f5 NET: stmmac: align DMA stuff to largest cache line length
2474de0a6 squashfs: be more careful about metadata corruption
84b819b34 random: mix rdrand with entropy sent in from userspace
9c2663418 media: si470x: fix __be16 annotations
0c567f08f media: omap3isp: fix unbalanced dma_iommu_mapping
75a89c2ad crypto: authenc - don't leak pointers to authenc keys
da49259e2 crypto: authencesn - don't leak pointers to authenc keys
1b2c23459 usb: hub: Don't wait for connect state at resume for powered-off ports
1813d3888 microblaze: Fix simpleImage format generation
d882e5210 rsi: Fix 'invalid vdd' warning in mmc
d06c846db ipconfig: Correctly initialise ic_nameservers
3944d0e03 drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
bf35cb47c ALSA: hda/ca0132: fix build failure when a local macro is defined
44daa6a44 media: siano: get rid of __le32/__le16 cast warnings
59b3c7d45 bpf: fix references to free_bpf_prog_info() in comments
ac64c4d04 scsi: megaraid: silence a static checker bug
120f719ad scsi: 3w-xxxx: fix a missing-check bug
02b36483d scsi: 3w-9xxx: fix a missing-check bug
745255bd2 perf: fix invalid bit in diagnostic entry
bdd9b8485 s390/cpum_sf: Add data entry sizes to sampling trailer entry
cd181d859 media: saa7164: Fix driver name in debug output
95d6785b9 libata: Fix command retry decision
6d9cd1279 tty: Fix data race in tty_insert_flip_string_fixed_flag
ad4d00d20 HID: i2c-hid: check if device is there before really probing
1a9b0f083 powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by Starlet
c70d92d28 drm/radeon: fix mode_valid's return type
ee7b57a20 ALSA: usb-audio: Apply rate limit to warning messages in URB complete callback
55d1f0491 media: smiapp: fix timeout checking in smiapp_read_nvm
85733056d md: fix NULL dereference of mddev->pers in remove_and_add_spares()
ac34de0df regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops
ee9460d40 ALSA: emu10k1: Rate-limit error messages about page errors
c656aaac0 scsi: ufs: fix exception event handling
6af19d06d PCI: pciehp: Request control of native hotplug only if supported
723139e8e powerpc/8xx: fix invalid register expression in head_8xx.S
9261dfa00 powerpc/powermac: Mark variable x as unused
12a9b5fc3 powerpc/powermac: Add missing prototype for note_bootable_part()
6d5f93d2f powerpc/chrp/time: Make some functions static, add missing header include
a4b3eaf0b powerpc/32: Add a missing include header
84e90658e ath: Add regulatory mapping for Bahamas
6c4084933 ath: Add regulatory mapping for Bermuda
bbd7480ed ath: Add regulatory mapping for Serbia
4b2c7cf52 ath: Add regulatory mapping for Tanzania
f0589b82d ath: Add regulatory mapping for Uganda
396b5e679 ath: Add regulatory mapping for APL2_FCCA
55d497964 ath: Add regulatory mapping for APL13_WORLD
31d83e727 ath: Add regulatory mapping for ETSI8_WORLD
d3fbe970e ath: Add regulatory mapping for FCC3_ETSIC
0bedc117b PCI: Prevent sysfs disable of device while driver is attached
8362d3e90 wlcore: sdio: check for valid platform device data before suspend
cb0d96f44 mwifiex: handle race during mwifiex_usb_disconnect
a7bb99f52 ASoC: dpcm: fix BE dai not hw_free and shutdown
c5061ffff perf/x86/intel/uncore: Correct fixed counter index check for NHM
a461ae004 perf/x86/intel/uncore: Correct fixed counter index check in generic code
031e96b6f usbip: usbip_detach: Fix memory, udev context and udev leak
b3ab44845 RDMA/mad: Convert BUG_ONs to error flows
7bae72078 hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()
77e6abf43 infiniband: fix a possible use-after-free bug
bef7079cf rtc: ensure rtc_set_alarm fails when alarms are not supported
4148e331c mm/slub.c: add __printf verification to slab_err()
f6581cff8 mm: vmalloc: avoid racy handling of debugobjects in vunmap
942172d5f ALSA: fm801: add error handling for snd_ctl_add
da2858dce ALSA: emu10k1: add error handling for snd_ctl_add
490106d97 tracing: Quiet gcc warning about maybe unused link variable
15165b72a tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure
606ce67d8 tracing: Fix possible double free in event_enable_trigger_func()
4361f73aa tracing: Fix double free of event_trigger_data
f7d8fe3d2 Merge 3.18.102 into android-msm-marlin-3.18-lts
128a125d0 Merge 3.18.101 into android-msm-marlin-3.18-lts
dbba166b0 Linux 3.18.117
430c3fdb1 turn off -Wattribute-alias
3a71ae051 ARM: fix put_user() for gcc-8
57a617aa6 can: xilinx_can: fix RX overflow interrupt not being enabled
0e368141b can: xilinx_can: keep only 1-2 frames in TX FIFO to fix TX accounting
159b65a11 can: xilinx_can: fix device dropping off bus on RX overrun
e7337c5f5 can: xilinx_can: fix RX loop if RXNEMP is asserted without RXOK
ce03b315b usb: gadget: f_fs: Only return delayed status when len is 0
72254c877 usb: core: handle hub C_PORT_OVER_CURRENT condition
fd620d990 usb: cdc_acm: Add quirk for Castles VEGA3000
d932145a8 tcp: detect malicious patterns in tcp_collapse_ofo_queue()
25c28af9e tcp: avoid collapses in tcp_prune_queue() if possible
1e758a795 tcp: do not delay ACK in DCTCP upon CE status change
8c11f488b tcp: do not cancel delay-AcK on DCTCP special ACK
e76a28ca1 tcp: helpers to send special DCTCP ack
7d776e16e tcp: fix dctcp delayed ACK schedule
411d7e3c1 rtnetlink: add rtnl_link_state check in rtnl_configure_link
f3f461a94 net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper
88021f225 ip: hash fragments consistently
15245b3e7 skbuff: Unconditionally copy pfmemalloc in __skb_clone()
8428d1ead net: Don't copy pfmemalloc flag in __copy_skb_header()
f970e4928 ptp: fix missing break in switch
58635c84d ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns
dd3851437 ARC: mm: allow mprotect to make stack mappings executable
ade78e53c ARC: Fix CONFIG_SWAP
bfa30d8ad ALSA: rawmidi: Change resized buffers atomically
b7bd86d8c fat: fix memory allocation failure handling of match_strdup()
49347a32f x86/MCE: Remove min interval polling limitation
7612025fb Linux 3.18.116
2384b0c00 net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
143b72d69 rds: avoid unenecessary cong_update in loop transport
76432817f KEYS: DNS: fix parsing multiple options
16bfc60e6 netfilter: ebtables: reject non-bridge targets
776bfa105 net/mlx5: Fix command interface race in polling mode
1c67c117d net_sched: blackhole: tell upper qdisc about dropped packets
861aa1501 vhost_net: validate sock before trying to put its fd
4c208c55e tcp: prevent bogus FRTO undos with non-SACK flows
d179a7dfd tcp: fix Fast Open key endianness
8b2d8b165 net: sungem: fix rx checksum support
718973a33 net/mlx5: Fix incorrect raw command length parsing
9e2b29951 net: dccp: switch rx_tstamp_last_feedback to monotonic clock
32109863c net: dccp: avoid crash in ccid3_hc_rx_send_feedback()
bb447b804 crypto: crypto4xx - fix crypto4xx_build_pdr, crypto4xx_build_sdr leak
2750ee7cf crypto: crypto4xx - remove bad list_del
e3e746f52 bcm63xx_enet: do not write to random DMA channel on BCM6345
1bba4e033 bcm63xx_enet: correct clock usage
eb5e1aa8d loop: remember whether sysfs_create_group() was done
09b7c3365 RDMA/ucm: Mark UCM interface as BROKEN
e472ba153 PM / hibernate: Fix oops at snapshot_write()
316a80137 loop: add recursion validation to LOOP_CHANGE_FD
73078f5bd netfilter: x_tables: initialise match/target check parameter struct
c5f2c5be9 Fix up non-directory creation in SGID directories
56777c546 xhci: xhci-mem: off by one in xhci_stream_id_to_ring()
b85c88f59 usb: quirks: add delay quirks for Corsair Strafe
a10a393dc USB: serial: mos7840: fix status-register error handling
b261643c6 USB: yurex: fix out-of-bounds uaccess in read handler
81739d0b6 USB: serial: keyspan_pda: fix modem-status error handling
f6a154848 ibmasm: don't write out of bounds in read handler
ac35b6688 Linux 3.18.115
ea2db4202 netfilter: nf_log: don't hold nf_log_mutex during user access
1e4c8faf6 mtd: cfi_cmdset_0002: Change erase functions to check chip good only
9603812da mtd: cfi_cmdset_0002: Change erase functions to retry for error
2fe0a82d4 mtd: cfi_cmdset_0002: Change definition naming to retry write operation
b04e6327e mtd: rawnand: mxc: set spare area size register explicitly
7e236e61e dm bufio: drop the lock when doing GFP_NOIO allocation
317a19057 dm bufio: avoid sleeping while holding the dm_bufio lock
e324a92ac media: cx25840: Use subdev host data for PLL override
f7e1dd8eb HID: debug: check length before copy_to_user()
5fe18b3dd HID: i2c-hid: Fix "incomplete report" noise
55b0c5e2e ext4: add more mount time checks of the superblock
15b85a060 ext4: clear i_data in ext4_inode_info when removing inline data
780f50a6d ext4: make sure bitmaps and the inode table don't overlap with bg descriptors
5e779fdf7 cifs: Fix infinite loop when using hard mount option
be37222d7 scsi: sg: mitigate read/write abuse
5e841bacf net/sonic: Use dma_mapping_error()
57fc43773 net: qmi_wwan: Add Netgear Aircard 779S
5331fcb28 atm: zatm: fix memcmp casting
f81f7e53d netfilter: ebtables: handle string from userspace with care
2eb1e3517 ubi: fastmap: Correctly handle interrupted erasures in EBA
5fc5afdf1 x86/boot: Fix early command-line parsing when matching at end
61377422d staging: android: ion: Return an ERR_PTR in ion_map_kernel
4a62ba3b8 n_tty: Fix stall at n_tty_receive_char_special().
e903eb4a7 Linux 3.18.114
394926ffb dm thin: handle running out of data space vs concurrent discard
ac85c4fb7 block: Fix transfer when chunk sectors exceeds max
c35f570dc udf: Detect incorrect directory size
5893d1770 xen: Remove unnecessary BUG_ON from __unbind_from_irq()
7568ba6cc video: uvesafb: Fix integer overflow in allocation
626fb9323 nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir
ea5c4686b media: dvb_frontend: fix locking issues at dvb_frontend_get_event()
098a47258 media: cx231xx: Add support for AverMedia DVD EZMaker 7
77edeac40 media: v4l2-compat-ioctl32: prevent go past max size
8d2e0fa5a backlight: tps65217_bl: Fix Device Tree node lookup
3b68ebcc1 backlight: max8925_bl: Fix Device Tree node lookup
d39a3268a backlight: as3711_bl: Fix Device Tree node lookup
b8a649591 UBIFS: Fix potential integer overflow in allocation
5f14b0326 scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails
ed7221a6e time: Make sure jiffies_to_msecs() preserves non-zero time periods
92394f1b6 MIPS: io: Add barrier after register read in inX()
85997c346 PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on resume
06f0be2c0 MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum
07caec859 mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking.
520516d1a mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary
e592114ae mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips
ca99cdecc mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock()
a84a8c9aa mtd: cfi_cmdset_0002: Change write buffer to check correct value
576abfc8f ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size
b2bbfbc82 powerpc/fadump: Unregister fadump on kexec down path.
bab0b551f powerpc/ptrace: Fix enforcement of DAWR constraints
b62056bae powerpc/ptrace: Fix setting 512B aligned breakpoints with PTRACE_SET_DEBUGREG
13cdfec91 powerpc/mm/hash: Add missing isync prior to kernel stack SLB switch
e80011e53 fuse: don't keep dead fuse_conn at fuse_fill_super().
7863da30c fuse: atomic_o_trunc should truncate pagecache
e6365d1be ipmi:bt: Set the timeout before doing a capabilities check
291c3c760 branch-check: fix long->int truncation when profiling branches
e7e6fc525 mips: ftrace: fix static function graph tracing
f304c2500 ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup
6e4b52162 ASoC: cirrus: i2s: Fix LRCLK configuration
6ab330ac4 ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it
7dc58b124 usb: do not reset if a low-speed or full-speed device timed out
f81354e73 signal/xtensa: Consistenly use SIGBUS in do_unaligned_user
a90c0e905 m68k/mm: Adjust VM area to be unmapped by gap size for __iounmap()
c77dc4a47 fs/binfmt_misc.c: do not allow offset overflow
53ae91e01 w1: mxc_w1: Enable clock before calling clk_get_rate() on it
ffed4eb19 libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
22a528e79 libata: zpodd: small read overflow in eject_tray()
7f4a2ad30 libata: zpodd: make arrays cdb static, reduces object code size
4c223b42c ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream()
cd40764f0 btrfs: scrub: Don't use inode pages for device replace
8295fb016 ext4: fix fencepost error in check for inode count overflow during resize
f7eb9c228 ext4: update mtime in ext4_punch_hole even if no blocks are released
c4005b74d tcp: do not overshoot window_clamp in tcp_rcv_space_adjust()
173109cff ARM: 8753/1: decompressor: add a missing parameter to the addruart macro
78ec0643a ARM: davinci: board-dm646x-evm: set VPIF capture card name
680d754ee i2c: viperboard: return message count on master_xfer success
ee02e109c i2c: pmcmsp: fix error return from master_xfer
e80f75ff8 i2c: pmcmsp: return message count on master_xfer success
bcfde08b7 ARM: keystone: fix platform_domain_notifier array overrun
ec18c66a1 usb: musb: fix remote wakeup racing with suspend
315b9373c agp: uninorth: make two functions static
af26bfa10 can: dev: increase bus-off message severity
f88360cf1 driver core: add __printf verification to __ata_ehi_pushv_desc
385963f49 drm/omap: fix possible NULL ref issue in tiler_reserve_2d
cbbc5cd15 mac80211: Adjust SAE authentication timeout
a6f92551f kthread, sched/wait: Fix kthread_parkme() wait-loop
791e025b2 scsi: vmw-pvscsi: return DID_BUS_BUSY for adapter-initated aborts
4e9853939 hexagon: export csum_partial_copy_nocheck
5e61306dc hexagon: add memset_io() helper
f4999df1d ARM: davinci: board-dm355-evm: fix broken networking
4d74ecf60 bpf: fix uninitialized variable in bpf tools
3332858e2 x86/cpu/intel: Add missing TLB cpuid values
575d77279 rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp
fec89a240 selftests: ftrace: Add a testcase for multiple actions on trigger
1585e5607 arm64: ptrace: remove addr_limit manipulation
66d1331ce net: phy: marvell: clear wol event before setting it
f22893b2a scsi: isci: Fix infinite loop in while loop
220bc438c parisc: time: Convert read_persistent_clock() to read_persistent_clock64()
5f3b0340a drm/msm: Fix possible null dereference on failure of get_pages()
34bce3629 scsi: iscsi: respond to netlink with unicast when appropriate
b224e2250 isofs: fix potential memory leak in mount option parsing
a0f8bcad0 s390/smsgiucv: disable SMSG on module unload
5d8260703 MIPS: io: Add barrier after register read in readX()
6eb068779 fsnotify: fix ignore mask logic in send_to_group()
cc9473be4 af_key: Always verify length of provided sadb_key
2ce6f3e71 tools build: Fix Makefile(s) to properly invoke tools build
444e094fd tools build: No need to make libapi for perf explicitly
31767764c Linux 3.18.113
bc4225d64 rtnetlink: validate attributes in do_setlink()
e384b1454 team: use netdev_features_t instead of u32
dcd71a232 net/mlx4: Fix irq-unsafe spinlock usage
7f56a980d net: usb: cdc_mbim: add flag FLAG_SEND_ZLP
6c2d8d7ad net/packet: refine check for priv area size
c9912b7d9 isdn: eicon: fix a missing-check bug
8c79f7300 ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds
843e5ed69 enic: set DMA mask to 47 bit
19775c929 dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect()
fde5217c8 bnx2x: use the right constant
1a1682259 drm: set FMODE_UNSIGNED_OFFSET for drm files
3bbdc2a45 mmap: relax file size limit for regular files
bf3ff1088 mmap: introduce sane default mmap limits
6d64aecd1 mm: fix the NULL mapping case in __isolate_lru_page()
43e631b78 fix io_destroy()/aio_complete() race
d4dd8e5bb drm/i915: Disable LVDS on Radiant P845
38de6fffc MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs
c78305763 tcp: avoid integer overflows in tcp_rcv_space_adjust()
4ff12f87c cfg80211: further limit wiphy names to 64 bytes
b1ebe5e9a selinux: KASAN: slab-out-of-bounds in xattr_getsecurity
7ca1225a5 tracing: Fix crash when freeing instances with event triggers
b0b357c20 Linux 3.18.112
f451da609 Revert "vti4: Don't override MTU passed on link creation via IFLA_MTU"
8eb1ef076 Linux 3.18.111
96239f495 kdb: make "mdr" command repeat
4543d30f5 regulator: of: Add a missing 'of_node_put()' in an error handling path of 'of_regulator_match()'
2c5716056 scsi: lpfc: Fix frequency of Release WQE CQEs
093feb209 scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing
26faa84a2 scsi: lpfc: Fix issue_lip if link is disabled
90059d0cd netlabel: If PF_INET6, check sk_buff ip header version
ba0c7ae12 audit: return on memory error to avoid null pointer dereference
11d549e72 clk: samsung: exynos3250: Fix PLL rates
f114cce5b clk: samsung: exynos5250: Fix PLL rates
a5314e0de clk: samsung: exynos5260: Fix PLL rates
531722228 clk: samsung: s3c2410: Fix PLL rates
225f6c4c7 media: cx25821: prevent out-of-bounds read on array card
e9973931f udf: Provide saner default for invalid uid / gid
5771618d5 PCI: Add function 1 DMA alias quirk for Marvell 88SE9220
8bdc529a7 serial: arc_uart: Fix out-of-bounds access through DT alias
e70f6af6d serial: fsl_lpuart: Fix out-of-bounds access through DT alias
3f7945cbd serial: imx: Fix out-of-bounds access through serial port index
580bcda86 serial: samsung: Fix out-of-bounds access through serial port index
8984c7441 serial: xuartps: Fix out-of-bounds access through DT alias
75d852e56 rtc: tx4939: avoid unintended sign extension on a 24 bit shift
3c31faa6d staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr
9215e5a5a media: em28xx: USB bulk packet size fix
f8c61fea8 dmaengine: pl330: fix a race condition in case of threaded irqs
0256494d8 media: s3c-camif: fix out-of-bounds array access
fdf0b9264 media: cx23885: Set subdev host data to clk_freq pointer
681e8cc46 media: cx23885: Override 888 ImpactVCBe crystal frequency
a5f46bbec ALSA: vmaster: Propagate slave error
40c1020f0 usb: gadget: composite: fix incorrect handling of OS desc requests
10bedea01 usb: gadget: udc: change comparison to bitshift when dealing with a mask
0fdfc3f54 cdrom: do not call check_disk_change() inside cdrom_open()
67fa45618 hwmon: (pmbus/adm1275) Accept negative page register values
68f70a8a9 hwmon: (pmbus/max8688) Accept negative page register values
92a1e6abe perf/core: Fix perf_output_read_group()
e1acc9f8b powerpc: Add missing prototype for arch_irq_work_raise()
a7289f6f3 usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS
6858abef2 usb: dwc2: Fix interval type issue
d36edd465 PCI: Restore config space on runtime resume despite being unbound
a1ff9f152 MIPS: ath79: Fix AR724X_PLL_REG_PCIE_CONFIG offset
7b9894483 xhci: zero usb device slot_id member when disabling and freeing a xhci slot
87f5b4f4b i2c: mv64xxx: Apply errata delay only in standard mode
c81492260 ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c
43f9785ba ACPICA: Events: add a return on failure from acpi_hw_register_read
7afa3b113 bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set
b895aea67 zorro: Set up z->dev.dma_mask for the DMA API
f60da70ad usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields
c688b28e9 arm: dts: socfpga: fix GIC PPI warning
bc3c40420 virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS
477c19344 ima: Fallback to the builtin hash algorithm
00cef0273 ath10k: Fix kernel panic while using worker (ath10k_sta_rc_update_wk)
ff98be440 net/mlx5: Protect from command bit overflow
adef5f75f tools/thermal: tmon: fix for segfault
675944019 powerpc/perf: Fix kernel address leak via sampling registers
9d2d68f23 powerpc/perf: Prevent kernel address leak to userspace via BHRB buffer
6631ce183 hwmon: (nct6775) Fix writing pwmX_mode
8482ee536 parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
2231cc411 m68k: set dma and coherent masks for platform FEC ethernets
1699271ab powerpc/mpic: Check if cpu_possible() in mpic_physmask()
c893df8b4 ACPI: acpi_pad: Fix memory leak in power saving threads
6ba54321a xen/acpi: off by one in read_acpi_id()
84901fa44 btrfs: fix lockdep splat in btrfs_alloc_subvolume_writers
0ad62f3d2 Btrfs: fix copy_items() return value when logging an inode
860f7a0e5 btrfs: tests/qgroup: Fix wrong tree backref level
bcc363153 sparc64: Make atomic_xchg() an inline function rather than a macro.
3f2e6156e KVM: VMX: raise internal error for exception during invalid protected mode state
e42acd54e sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning
a0270cd17 btrfs: Fix possible softlock on single core machines
7253c7778 Btrfs: fix NULL pointer dereference in log_dir_items
b56cd693a Btrfs: bail out on error during replay_dir_deletes
1d79b1d25 mm: fix races between address_space dereference and free in page_evicatable
824c81922 mm/ksm: fix interaction with THP
4d6ceac4c dp83640: Ensure against premature access to PHY registers after reset
dd38f46b2 scsi: aacraid: Insure command thread is not recursively stopped
0fb0e2558 Force log to disk before reading the AGF during a fstrim
ab01cffce sr: get/drop reference to device in revalidate and check_events
c8199e338 swap: divide-by-zero when zero length swap file on ssd
b4b8334a0 fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl table
af794b799 sh: fix debug trap failure to process signals before return to user
8035424c9 net: mvneta: fix enable of all initialized RXQs
dbbe95b03 net: Fix untag for vlan packets without ethernet header
65bdc3442 llc: properly handle dev_queue_xmit() return value
e42c5ccd2 net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
4582e6d3e net: qmi_wwan: add BroadMobi BM806U 2020:2033
d6d9306ee batman-adv: fix packet loss for broadcasted DHCP packets to a server
d0fb1d220 batman-adv: fix multicast-via-unicast transmission with AP isolation
b85067583 selftests: ftrace: Add a testcase for probepoint
b87af3ab9 Linux 3.18.110
b233cc9c1 x86/kexec: Avoid double free_page() upon do_kexec_load() failure
f9322eb90 hfsplus: stop workqueue when fill_super() failed
a77831e13 cfg80211: limit wiphy names to 128 bytes
58b7ce6f9 scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
badf15c8a scsi: libsas: defer ata device eh commands to libata
f7a4463d5 ext2: fix a block leak
856116420 tcp: purge write queue in tcp_connect_init()
332d1b933 net: test tailroom before appending to linear skb
21bcf304a ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions
e5f28fe3c tick/broadcast: Use for_each_cpu() specially on UP kernels
8414385f8 ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr
56bd8525f efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32' definition for mixed mode
4ef825915 powerpc/powernv: Fix NVRAM sleep in invalid context when crashing
f7b727325 tracing/x86/xen: Remove zero data size trace events trace_xen_mmu_flush_tlb{_all}
dc6498128 powerpc: Don't preempt_disable() in show_cpuinfo()
8bfbeb811 ALSA: control: fix a redundant-copy issue
4caf3f00f ALSA: usb: mixer: volume quirk for CM102-A+/102S+
41585e864 usbip: usbip_host: fix bad unlock balance during stub_probe()
d1641e51d usbip: usbip_host: fix NULL-ptr deref and use-after-free errors
d0f35e23d usbip: fix error handling in stub_probe()
3d355e270 usbip: usbip_host: run rebind from exit when module is removed
55c999094 usbip: usbip_host: delete device from busid_table after rebind
72f8ba768 usbip: usbip_host: refine probe and disconnect debug msgs to be useful
9535063c6 kernel/exit.c: avoid undefined behaviour when calling wait4()
46736d5c6 pipe: cap initial pipe capacity according to pipe-max-size limit
8ef1995c4 l2tp: revert "l2tp: fix missing print session offset info"
50a8b06f3 Revert "ARM: dts: imx6qdl-wandboard: Fix audio channel swap"
a92d8572a lockd: lost rollback of set_grace_period() in lockd_down_net()
5adf47be5 qmi_wwan: do not steal interfaces from class drivers
6723603d0 sctp: delay the authentication for the duplicated cookie-echo chunk
c0b135948 sctp: fix the issue that the cookie-ack with auth can't get processed
7081fa7b4 tcp: ignore Fast Open on repair mode
954db9a11 bonding: do not allow rlb updates to invalid mac
3293c85bb tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent().
defbbf4c8 sctp: use the old asoc when making the cookie-ack chunk in dupcook_d
2e7d9d72b r8169: fix powering up RTL8168h
cd38252da net: support compat 64-bit time in {s,g}etsockopt
8beff8dcb net_sched: fq: take care of throttled flows before reuse
0a754eaa3 net/mlx4_en: Verify coalescing parameters are in range
7ac9e8fa3 net: ethernet: sun: niu set correct packet size in skb
018c802a6 llc: better deal with too small mtu
fb1048128 ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg
7eaa94998 dccp: fix tasklet usage
32037ab33 bridge: check iface upper dev when setting master via ioctl
683e95207 8139too: Use disable_irq_nosync() in rtl8139_poll_controller()
7eac0d47b Linux 3.18.109
3c320b050 tracing/uprobe_event: Fix strncpy corner case
3d9c108ed can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()
30041c833 tracing: Fix regex_match_front() to not over compare the test string
e49607020 libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs
ee3950082 rfkill: gpio: fix memory leak in probe error path
a24bce47b tcp: fix TCP_REPAIR_QUEUE bound checking
d55b31c33 perf: Remove superfluous allocation error check
03e5211d3 soreuseport: initialise timewait reuseport field
fbbbfa569 net: fix uninit-value in __hw_addr_add_ex()
471a441b0 net: initialize skb->peeked when cloning
dd0306f6f net: fix rtnh_ok()
24e7995f9 netlink: fix uninit-value in netlink_sendmsg
7c6b9b50e usb: musb: host: fix potential NULL pointer dereference
98db87df4 USB: serial: visor: handle potential invalid device configuration
613ac788b NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2
fe7384278 RDMA/mlx5: Protect from shift operand overflow
b73892f87 ALSA: aloop: Add missing cable lock to ctl API callbacks
a69e60889 ALSA: aloop: Mark paused device as inactive
2937092a2 ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()
f92cb237e ALSA: pcm: Check PCM state at xfern compat ioctl
a4e89eff9 perf session: Fix undeclared 'oe'
2e9cbae49 perf/core: Fix the perf_cpu_time_max_percent check
a88e99b14 percpu: include linux/sched.h for cond_resched()
6d05aadb6 Linux 3.18.108
36af635cc Revert "perf tests: Decompress kernel module before objdump"
bdf3b718b libceph: validate con->state at the top of try_write()
c829ba0e5 ASoC: fsl_esai: Fix divisor calculation failure at lower ratio
c55d64904 scsi: sd: Defer spinning up drive while SANITIZE is in progress
b2497363f kobject: don't use WARN for registration failures
2365af7db mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.
6ad4bee75 mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
51f8a19af mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
2616aadf1 ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
cd85ad112 ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr
31473a9e8 tty: Use __GFP_NOFAIL for tty_ldisc_get()
3f44674dd tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set
ffebfe63a tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
d2bbfac82 virtio_console: free buffers after reset
86e4c0979 virtio: add ability to iterate over vqs
f59e0c3c5 ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
9dfbd45c4 USB: Increment wakeup count on remote wakeup.
5815b85d4 usb: core: Add quirk for HP v222w 16GB Mini
a67a3e7cd USB: serial: cp210x: add ID for NI USB serial console
915224d50 USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster
6246535bd usbip: vhci_hcd: Fix usb device and sockfd leaks
617d7a47b usbip: usbip_host: fix to hold parent lock for device_attach() calls
2cb5c553e ext4: fix bitmap position validation
0643dbdb5 ext4: add validity checks for bitmap block numbers
d0800f61b ext4: set h_journal if there is a failure starting a reserved handle
754ca08ef Linux 3.18.107
8e8a40578 cdrom: information leak in cdrom_ioctl_media_changed()
2127751e2 scsi: mptsas: Disable WRITE SAME
f4dd54821 ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
e2917cf23 llc: delete timers synchronously in llc_sk_free()
14670e490 net: af_packet: fix race in PACKET_{R|T}X_RING
c4ded0914 tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
617b89aab packet: fix bitfield update race
bae70a5f9 llc: fix NULL pointer deref for SOCK_ZAPPED
a5db62f62 llc: hold llc_sap before release_sock()
8b467810a pppoe: check sockaddr length in pppoe_connect()
a0475be87 team: fix netconsole setup over team
5ac746d50 team: avoid adding twice the same option to the event list
7e04fc83d tcp: don't read out-of-bounds opsize
115af4416 l2tp: check sockaddr length in pppol2tp_connect()
1f6945bbb KEYS: DNS: limit the length of option strings
a7c083702 bonding: do not set slave_dev npinfo before slave_enable_netpoll in bond_enslave
f47bd1b56 jbd2: fix use after free in kjournald2()
3e8f97bf9 mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
19f50d844 perf: Return proper values for user stack errors
ab3fc66b3 ext4: don't update checksum of new initialized bitmaps
802ec698e ext4: bugfix for mmaped pages in mpage_release_unused_pages()
5781ac24b ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()
48bb69923 x86/tsc: Prevent 32bit truncation in calc_hpet_ref()
a1a9d95d3 cifs: do not allow creating sockets except with SMB1 posix exensions
915b8f498 Linux 3.18.106
04b35f0c9 fanotify: fix logic of events on child
daf60c66b autofs: mount point create should honour passed in mode
c29b983a5 Don't leak MNT_INTERNAL away from internal mounts
d5975c5bb rpc_pipefs: fix double-dput()
d44291735 hypfs_kill_super(): deal with failed allocations
2e05f940f jffs2_kill_sb(): deal with failed allocations
eaf2bca68 powerpc/lib: Fix off-by-one in alternate feature patching
6bbb8018b MIPS: memset.S: Fix clobber of v1 in last_fixup
e518b1ea3 MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
db4e16215 MIPS: memset.S: EVA & fault support for small_memset
29a095a08 HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
cd8c5937a ALSA: rawmidi: Fix missing input substream checks in compat ioctls
f5ded53d9 drm/radeon: Fix PCIe lane width calculation
628597956 ext4: don't allow r/w mounts if metadata blocks overlap the superblock
bf1b17715 ext4: fail ext4_iget for root directory if unallocated
c9c4ad4d4 ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
45ee7eb68 ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
a653caa0c ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
a20304a59 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
422cc8083 ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
ad93d1325 ALSA: oss: consolidate kmalloc/memset 0 call to kzalloc
191881355 watchdog: f71808e_wdt: Fix WD_EN register read
7559e149d thermal: imx: Fix race condition in imx_thermal_probe()
3201e7ec1 clk: mvebu: armada-38x: add support for missing clocks
f9b08f46c clk: mvebu: armada-38x: add support for 1866MHz variants
8d2242de7 mmc: jz4740: Fix race condition in IRQ mask update
374b5cb5e jbd2: if the journal is aborted then don't allow update of the log tail
b4d09fec3 random: use a tighter cap in credit_entropy_bits_safe()
f0522f31a thunderbolt: Resume control channel after hibernation image is created
78af862b2 ASoC: ssm2602: Replace reg_default_raw with reg_default
6a3b6e7d2 powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
30a3acbc6 powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
f46c99158 powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
515bf6232 powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()
46f9006e2 HID: i2c-hid: fix size check and type usage
d0e3d32b5 usb: dwc3: pci: Properly cleanup resource
eb62f3d23 USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
d97424ac6 ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
456374e60 xen-netfront: Fix hang on device removal
e0e3def03 ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
1daf93b8c usb: musb: gadget: misplaced out of bounds check
b586f6984 resource: fix integer overflow at reallocation
8b85ff3d8 fs/reiserfs/journal.c: add missing resierfs_warning() arg
5aae810c2 ubi: Reject MLC NAND
1c9fcf71e ubi: Fix error for write access
aee5ff839 ubifs: Check ubifs_wbuf_sync() return code
51509ce03 slip: Check if rstate is initialized before uncompressing
5e859bf5a s390/ipl: ensure loadparm valid flag is set
c205d6bff s390/qdio: don't merge ERROR output buffers
b9f078285 s390/qdio: don't retry EQBS after CCQ 96
f8a1c5b50 parisc: Fix out of array access in match_pci_device()
0647dbf68 media: v4l2-compat-ioctl32: don't oops on overlay
78db2bbfa Linux 3.18.105
1117cb497 Revert "xhci: plat: Register shutdown for xhci_plat"
ff82de4d7 ipv6: the entire IPv6 header chain must fit the first fragment
f15ab256b net sched actions: fix dumping which requires several messages to user space
e10f44b15 r8169: fix setting driver_data after register_netdev
44c05b356 ip6_tunnel: better validate user provided tunnel names
ff54063c7 vti6: better validate user provided tunnel names
53d960544 ip6_gre: better validate user provided tunnel names
9ebe7bd41 ipv6: sit: better validate user provided tunnel names
1c708641e ip_tunnel: better validate user provided tunnel names
f377efac0 net: fool proof dev_valid_name()
8666081f2 bonding: process the err returned by dev_set_allmulti properly in bond_enslave
0036076b3 bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave
01af3f60a bonding: fix the err path for dev hwaddr sync in bond_enslave
4bc596d0b vhost: correctly remove wait queue during poll failure
840343919 sky2: Increase D3 delay to sky2 stops working after suspend
42e996ef0 sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
42481f7ae sctp: do not leak kernel memory to user space
1c6453b28 pptp: remove a buggy dst release in pptp_connect()
eaf9594d1 netlink: make sure nladdr has correct size in netlink_connect()
dab02a248 net: fix possible out-of-bound read in skb_network_protocol()
714f4e552 futex: Remove requirement for lock_page() in get_futex_key()
77dcc4b90 random: use lockless method of accessing and updating f->reg_idx
bd63ed219 virtio_net: check return value of skb_to_sgvec in one more location
13bbd09ee virtio_net: check return value of skb_to_sgvec always
f2ee82df5 rxrpc: check return value of skb_to_sgvec always
f0fcb83da ipsec: check return value of skb_to_sgvec always
ede3b044f EDAC, mv64x60: Fix an error handling path
bddb76d85 tty: n_gsm: Allow ADM response in addition to UA for control dlci
108c448df scsi: libsas: initialize sas_phy status according to response of DISCOVER
8603b7ca5 scsi: libsas: fix error when getting phy events
c7323e939 scsi: libsas: fix memory leak in sas_smp_get_phy_events()
a73020b1a bcache: segregate flash only volume write streams
f180aca35 bcache: stop writeback thread after detaching
e1acea744 vxlan: dont migrate permanent fdb entries during learn
b51f16e31 ACPICA: Disassembler: Abort on an invalid/unknown AML opcode
525e1c229 ACPICA: Events: Add runtime stub support for event APIs
a6013c303 Bluetooth: Send HCI Set Event Mask Page 2 command only when needed
51b503fbb iio: magnetometer: st_magn_spi: fix spi_device_id table
7638610f9 sparc64: ldc abort during vds iso boot
6b229267f sctp: fix recursive locking warning in sctp_do_peeloff
9bc4f815b bnx2x: Allow vfs to disable txvlan offload
7b3cbf961 xen: avoid type warning in xchg_xen_ulong
091b3b4ba perf tests: Decompress kernel module before objdump
78b2f6fc1 net: emac: fix reset timeout with AR8035 phy
4430b27d8 MIPS: kprobes: flush_insn_slot should flush only if probe initialised
a80b4705a MIPS: mm: fixed mappings: correct initialisation
88abd409a perf/core: Correct event creation with PERF_FORMAT_GROUP
85fcf68b0 e1000e: Undo e1000e_pm_freeze if __e1000_shutdown fails
dd1c55ea4 net: phy: avoid genphy_aneg_done() for PHYs without clause 22 support
99e6a55fe mceusb: sporadic RX truncation corruption fix
7ca4ba25a cx25840: fix unchecked return values
7860df195 e1000e: fix race condition around skb_tstamp_tx()
7cfbe9ba8 tags: honor COMPILED_SOURCE with apart output directory
731c55b81 perf report: Ensure the perf DSO mapping matches what libdw sees
d8a6af587 net/mlx4: Fix the check in attaching steering rules
4c115eaa4 skbuff: return -EMSGSIZE in skb_to_sgvec to prevent overflow
b499ce80d bio-integrity: Do not allocate integrity context for bio w/o data
e56a2fd0a Fix serial console on SNI RM400 machines
a3de0436c drm/omap: fix tiled buffer stride calculations
8fe9dcbad mISDN: Fix a sleep-in-atomic bug
4bd1ca48c qlcnic: Fix a sleep-in-atomic bug in qlcnic_82xx_hw_write_wx_2M and qlcnic_82xx_hw_read_wx_2M
005f22582 perf trace: Add mmap alias for s390
434a18bf1 powerpc/spufs: Fix coredump of SPU contexts
8853077bd KVM: SVM: do not zero out segment attributes if segment is unusable or not present
9a288ca3f net: freescale: fix potential null pointer dereference
d70b9c586 rtc: interface: Validate alarm-time before handling rollover
ae9940a9d arm64: futex: Fix undefined behaviour with FUTEX_OP_OPARG_SHIFT usage
1afb2e8c6 powerpc/[booke|4xx]: Don't clobber TCR[WP] when setting TCR[DIE]
4bcc9b4b3 ovl: filter trusted xattr for non-admin
0a9936458 hdlcdrv: Fix divide by zero in hdlcdrv_ioctl
e62c857c5 wl1251: check return from call to wl1251_acx_arp_ip_filter
b94c1767c vfb: fix video mode and line_length being set when loaded
ccfa1529f scsi: libiscsi: Allow sd_shutdown on bad transport
e60a32a14 l2tp: fix missing print session offset info
fd595a85c net: llc: add lock_sock in llc_ui_bind to avoid a race condition
865b856ed KVM: nVMX: Fix handling of lmsw instruction
9776027b4 bonding: Don't update slave->link until ready to commit
b80f8b7d3 net: move somaxconn init from sysctl code
0c14ecf3e ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff()
d3d9fa5e0 fix race in drivers/char/random.c:get_reg()
aef4c08f7 scsi: bnx2fc: fix race condition in bnx2fc_get_host_stats()
3f2968010 Linux 3.18.103
b07a637f9 Revert "ARM: dts: am335x-pepper: Fix the audio CODEC's reset pin"
fd96f5328 Revert "ARM: dts: omap3-n900: Fix the audio CODEC's reset pin"
2afca42b7 Revert "PCI/MSI: Stop disabling MSI/MSI-X in pci_device_shutdown()"
ca240c0e0 md/raid10: reset the 'first' at the end of loop
a8642e307 ARM: dts: dra7: Add power hold and power controller properties to palmas
047ade50b Documentation: pinctrl: palmas: Add ti,palmas-powerhold-override property definition
3307b7be1 vt: change SGR 21 to follow the standards
9b6f9e6fb Input: i8042 - enable MUX on Sony VAIO VGN-CS series to fix touchpad
7cbe0f9b5 Input: i8042 - add Lenovo ThinkPad L460 to i8042 reset list
ddc867c1e fs/proc: Stop trying to report thread stacks
57b796481 proc: revert /proc/<pid>/maps [stack:TID] annotation
fe0111391 crypto: x86/cast5-avx - fix ECB encryption when long sg follows short one
289156b88 crypto: ahash - Fix early termination in hash walk
bf6bb814e parport_pc: Add support for WCH CH382L PCI-E single parallel port card.
d22df065d media: usbtv: prevent double free in error case
89b1fb2ce mei: remove dev_err message on an unsupported ioctl
cbd80224e USB: serial: cp210x: add ELDAT Easywave RX09 id
febce02f0 USB: serial: ftdi_sio: add support for Harman FirmwareHubEmulator
fcd722f91 USB: serial: ftdi_sio: add RT Systems VX-8 cable
30fb2960e media: v4l2-compat-ioctl32: initialize a reserved field
6a2185e29 media: v4l2-compat-ioctl32: use compat_u64 for video standard
fe1d92846 media: media/v4l2-ctrls: volatiles should not generate CH_VALUE
5f5fe19a8 media: v4l2-ctrls: fix sparse warning
5829f6608 media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic
89ef0f431 media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors
9e73a907c media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type
4cbb719aa media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32
2f3b72f4a media: v4l2-compat-ioctl32: Copy v4l2_window->global_alpha
4de0aa9aa media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs
72bdd7e09 media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer
2a13e9ce9 media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32
ac35609a8 media: v4l2-compat-ioctl32.c: avoid sizeof(type)
8d0f174d7 media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32
6438cbe87 media: v4l2-compat-ioctl32.c: fix the indentation
e4746977e media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF
1024f43f8 vb2: V4L2_BUF_FLAG_DONE is set after DQBUF
d5d863690 media: v4l2-ioctl.c: don't copy back the result for -ENOTTY
236962016 scsi: virtio_scsi: always read VPD pages for multiqueue too
39c292e2f Bluetooth: Fix missing encryption refresh on Security Request
42b41149e netfilter: x_tables: add and use xt_check_proc_name
63d1e53df netfilter: bridge: ebt_among: add more missing match size checks
6be3251da xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
5ca716eed net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
5520490d2 xfrm_user: uncoditionally validate esn replay attribute struct
502990185 kprobes/x86: Fix to set RWX bits correctly before releasing trampoline
2883c6681 xhci: Fix ring leak in failure path of xhci_alloc_virt_device()
15075ddaa Revert "led: core: Fix brightness setting when setting delay_off=0"
7d14bc73d usb: gadget: f_hid: fix: Prevent accessing released memory
fee92f396 usb: gadget: align buffer size when allocating for OUT endpoint
7757f7309 usb: gadget: fix usb_ep_align_maybe endianness and new usb_ep_align
ab34ca160 usb: gadget: change len to size_t on alloc_ep_req()
70fa9b508 usb: gadget: define free_ep_req as universal function
25eac84ca partitions/msdos: Unable to mount UFS 44bsd partitions
8f7db030a perf/hwbp: Simplify the perf-hwbp code, fix documentation
46b7dc047 ALSA: pcm: potential uninitialized return values
a61083601 ALSA: pcm: Use dma_bytes as size parameter in dma_mmap_coherent()
4c4921fcf mtd: jedec_probe: Fix crash in jedec_read_mfr()
f4d8124a4 net: fec: Fix unbalanced PM runtime calls
60aa3ac5c s390/qeth: on channel error, reject further cmd requests
61a3becbb s390/qeth: lock read device while queueing next buffer
6bec10f3e s390/qeth: when thread completes, wake up all waiters
c6050863b s390/qeth: free netdevice when removing a card
08c5adee2 team: Fix double free in error path
112517ee8 skbuff: Fix not waking applications when errors are enqueued
4544f23db net: Only honor ifindex in IP_PKTINFO if non-0
b22ad56cc netlink: avoid a double skb free in genlmsg_mcast()
a6ca1eddd net/iucv: Free memory obtained by kzalloc
aab60f194 net: ethernet: arc: Fix a potential memory leak if an optional regulator is deferred
2e017ead9 l2tp: do not accept arbitrary sockets
c2b32840e ipv6: fix access to non-linear packet in ndisc_fill_redirect_hdr_option()
e717aef0e dccp: check sk for closed state in dccp_sendmsg()
6ab380698 Revert "genirq: Use irqd_get_trigger_type to compare the trigger type for shared IRQs"
d9a6055e2 scsi: sg: don't return bogus Sg_requests
e7dc809e8 kvm/x86: fix icebp instruction handling
b1da147c2 tty: vt: fix up tabstops properly
49636e341 can: cc770: Fix use after free in cc770_tx_interrupt()
be889c45a can: cc770: Fix queue stall & dropped RTR reply
bcddd27eb can: cc770: Fix stalls on rt-linux, remove redundant IRQ ack
43f8ff29c staging: ncpfs: memory corruption in ncp_read_kernel()
23c8c1543 tracing: probeevent: Fix to support minus offset from symbol
9764536dc Linux 3.18.102
eb5394496 RDMA/ucma: Fix access to non-initialized CM_ID object
236ab41ff clk: si5351: Rename internal plls to avoid name collisions
9a967fd2d pinctrl: Really force states during suspend/resume
8abf72232 drm/omap: DMM: Check for DMM readiness after successful transaction commit
7b6d24e43 vgacon: Set VGA struct resource types
0353b3376 RDMA/cma: Use correct size when writing netlink stats
6bfd5a3a3 IB/ipoib: Avoid memory leak if the SA returns a different DGID
a86d90de6 mmc: avoid removing non-removable hosts during suspend
5e3b1d037 media: [RESEND] media: dvb-frontends: Add delay to Si2168 restart
4716cf97d media: bt8xx: Fix err 'bt878_probe()'
1fa04de1a drm/msm: fix leak in failed get_pages
c4eee23a7 cifs: small underflow in cnvrtDosUnixTm()
6f9612c99 sm501fb: don't return zero on failure path in sm501fb_start()
654c7e21f video: fbdev: udlfb: Fix buffer on stack
7aadba03e ia64: fix module loading for gcc-5.4
c846fc165 md/raid10: skip spare disk as 'first' disk
b42455078 power: supply: pda_power: move from timer to delayed_work
045901c13 bnx2x: Align RX buffers
21d4b929d ipmi/watchdog: fix wdog hang on panic waiting for ipmi response
b69c4a124 ARM: DRA7: clockdomain: Change the CLKTRCTRL of CM_PCIE_CLKSTCTRL to SW_WKUP
c9d6765b5 mfd: palmas: Reset the POWERHOLD mux during power off
354ae15a5 mac80211: don't parse encrypted management frames in ieee80211_frame_acked
00a4087f7 Btrfs: send, fix file hole not being preserved due to inline extent
fcafccbd2 rndis_wlan: add return value validation
868a3686c scsi: mac_esp: Replace bogus memory barrier with spinlock
2805557d1 qlcnic: fix unchecked return value
452503393 wan: pc300too: abort path on failure
fc0808f0c mmc: host: omap_hsmmc: checking for NULL instead of IS_ERR()
c84d2e72f Fix driver usage of 128B WQEs when WQ_CREATE is V1.
21bdd5759 HSI: ssi_protocol: double free in ssip_pn_xmit()
bff38ff05 IB/ipoib: Update broadcast object if PKey value was changed in index 0
2ead2134a ALSA: hda - Fix headset microphone detection for ASUS N551 and N751
ae7579e53 e1000e: fix timing for 82579 Gigabit Ethernet controller
3a5294f03 tcp: remove poll() flakes with FastOpen
0a4063b03 KVM: PPC: Book3S PR: Exit KVM on failed mapping
dec444b63 scsi: virtio_scsi: Always try to read VPD pages
be5f85e3f ath: Fix updating radar flags for coutry code India
65e796250 spi: dw: Disable clock after unregistering the host
eba5af302 media/dvb-core: Race condition when writing to CAM
f566bb949 net: ipv6: send unsolicited NA on admin up
e69880c86 i2c: i2c-scmi: add a MS HID
093c265af genirq: Use irqd_get_trigger_type to compare the trigger type for shared IRQs
fad89533e cpufreq/sh: Replace racy task affinity logic
2d2cfeb58 ACPI/processor: Replace racy task affinity logic
177bea46f Input: ar1021_i2c - fix too long name in driver's device table
50655ac3b x86: i8259: export legacy_pic symbol
911e850bc platform/x86: asus-nb-wmi: Add wapf4 quirk for the X302UA
44ec71c0c Linux 3.18.101
a5efa51a8 scsi: sg: only check for dxfer_len greater than 256M
99c2db0ea scsi: sg: fix static checker warning in sg_is_valid_dxfer
103660de0 scsi: sg: fix SG_DXFER_FROM_DEV transfers
b043e4d40 fs/aio: Use RCU accessors for kioctx_table->table[]
9e7d69c26 fs/aio: Add explicit RCU grace period when freeing kioctx
e4353660c lock_parent() needs to recheck if dentry got __dentry_kill'ed under it
b62e31c1c ALSA: seq: Clear client entry before deleting else at closing
92d0346b5 ALSA: seq: Fix possible UAF in snd_seq_check_queue()
8257ab7d6 ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
81d9b3666 ima: relax requiring a file signature for new files with zero length
ba1cae0f2 rcutorture/configinit: Fix build directory error message
7adccfcc7 ASoC: nuc900: Fix a loop timeout test
b065d8cd9 mac80211: remove BUG() when interface type is invalid
4d04a02d7 veth: set peer GSO values
780de7270 media: cpia2: Fix a couple off by one bugs
77bbff898 scsi: devinfo: apply to HP XP the same flags as Hitachi VSP
7aa551688 spi: sun6i: disable/unprepare clocks on remove
9ed1f97d0 tools/usbip: fixes build with musl libc toolchain
9d8df5594 ARM: dts: omap3-n900: Fix the audio CODEC's reset pin
2d8c5aa6d ARM: dts: am335x-pepper: Fix the audio CODEC's reset pin
e5ba9171c mtd: nand: fix interpretation of NAND_CMD_NONE in nand_command[_lp]()
adc1ec6cd net: xfrm: allow clearing socket xfrm policies.
26b342055 sched: Stop resched_cpu() from sending IPIs to offline CPUs
0c53c557f HID: elo: clear BTN_LEFT mapping
531650570 wil6210: fix memory access violation in wil_memcpy_from/toio_32
534c79680 kprobes/x86: Set kprobes pages read-only
9dd399c0f kprobes/x86: Fix kprobe-booster not to boost far call instructions
fa55ef3f8 scsi: sg: close race condition in sg_remove_sfp_usercontext()
a52bc55dc scsi: sg: check for valid direction before starting the request
496fff910 perf session: Don't rely on evlist in pipe mode
95b33b99c perf inject: Copy events when reordering events in pipe mode
6b1a88fbd usb: gadget: dummy_hcd: Fix wrong power status bit clear/reset in dummy_hub_control()
c6d4216de regulator: isl9305: fix array size
9797e57d2 MIPS: BPF: Quit clobbering callee saved registers in JIT code.
b1cbc9031 drm/radeon: Fail fb creation from imported dma-bufs.
db0669185 video: ARM CLCD: fix dma allocation size
6028fc34f iommu/iova: Fix underflow bug in __alloc_and_insert_iova_range
f9eab3e82 apparmor: Make path_max parameter readonly
e7ede6c2e fm10k: correctly check if interface is removed
b74fb8c98 reiserfs: Make cancel_old_flush() reliable
6b7c30eb3 net/faraday: Add missing include of of.h
227fd0d59 powerpc: Avoid taking a data miss on every userspace instruction miss
c78b7263f ARM: dts: r8a7791: Correct parent of SSI[0-9] clocks
ddab481b5 ARM: dts: r8a7790: Correct parent of SSI[0-9] clocks
eaf272302 braille-console: Fix value returned by _braille_console_setup
7cf6102fe blk-throttle: make sure expire time isn't too big
bbb325e7e mm: Fix false-positive VM_BUG_ON() in page_cache_{get,add}_speculative()
65c161cb5 tcp: sysctl: Fix a race to avoid unexpected 0 window from space
4ae1886a0 spi: omap2-mcspi: poll OMAP2_MCSPI_CHSTAT_RXS for PIO transfer
1680be158 sched: act_csum: don't mangle TCP and UDP GSO packets
92bddcee7 timers, sched_clock: Update timeout for clock wrap
016f92f24 media: i2c/soc_camera: fix ov6650 sensor getting wrong clock
89390b199 scsi: ipr: Fix missed EH wakeup
2bca684a6 of: fix of_device_get_modalias returned length when truncating buffers
756e89e23 batman-adv: handle race condition for claims between gateways
3b95754fa ARM: dts: Adjust moxart IRQ controller and flags
20617945e HID: clamp input to logical range if no null state
acc107682 ath10k: disallow DFS simulation if DFS channel is not enabled
514b0fe56 drm: Defer disabling the vblank IRQ until the next interrupt (for instant-off)
0d3a8543e drivers: net: xgene: Fix hardware checksum setting
c5978a681 perf tools: Make perf_event__synthesize_mmap_events() scale
989dcfa49 selinux: check for address length in selinux_socket_bind()
058645e2f PCI/MSI: Stop disabling MSI/MSI-X in pci_device_shutdown()
843d4286d HID: reject input outside logical range only if null state is set
0ca7c402c Input: tsc2007 - check for presence and power down tsc2007 during probe
Linux version 3.18.122-gd4cb702317d8 (android-
build@wprg1.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Mon Oct 8 22:37:28 UTC 2018
Bug: 115649896
Change-Id: If9f3af2256ac088483d0dbad35af809fd56636e8
Source-Branch: android-msm-marlin-3.18-pi-qpr2
Signed-off-by: Petri Gynther <pgynther@google.com>
|
|
857a9c8f9 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
2ab2a86eb msm: ADSPRPC: Assign memory to VMID_SSC_Q6
c4a94d8fe Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-qpr1
5807bce1c Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
b4d590393 ion: invalidate the pool pointers after free
1c048f532 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-security-next
c278ec373 Release 4.4.25.051
62bce4105 qcacld-2.0: Sanity check for ssid length in limLookupNaddHashEntry
011472def qcacld-2.0: Merge extcapie before get dot11f payload size
cf77615ce qcacld-2.0: Clear the bits in Ext Cap IE if AP not support
725f2b146 qcacld-2.0: Use variable length for Ext Cap IE
23debc744 Revert "Revert "qcacld-2.0: Check ie_len against 255 in function get_container_ies_len""
70085c2ec Revert "Revert "qcacld-2.0: Check the length of IE's before appending""
45ed34937 Revert "Revert "qcacld-2.0: Fix potential OOB read in dot11f.c""
e3459e41f qcacld-2.0: Fix buffer overwrite in csrRoamCheckForLinkStatusChange
9a4b76110 qcacld-2.0: Use request manager to handle setting random MAC
816ecdae2 qcacld-2.0: Add check for vdev_id
eb9c9f936 qcacld-2.0: use hdd request manager for ocb set config
0afb00107 qcacld-2.0: Use hdd request manager for get tsf timer
3f71f763e qcacld-2.0: Use HDD request manager for get dcc stats
e6b37f266 qcacld-2.0: Use request manager for get temperature
85e78de2e qcacld-2.0: Use request manager for linkspeed
c10c6e7ad qcacld-2.0: Use request manager for enter bmps
38fbe10f9 qcacld-2.0: Use request manager to handle WE_SET_POWER requests.
181d4b01c qcacld-2.0: Use request manager for RSSI
2969942c1 qcacld-2.0: Use request manager for Class A stats
708bbb405 qcacld-2.0: Use request manager for get link status.
3a983da08 qcacld-2.0: Use request manager for station stats
fd2011ec9 qcacld-2.0: Use request manager for SNR
e2ee9430c qcacld-2.0: Use request manager for tsm metrics
0bf61aca7 qcacld-2.0: Use request manager for fw state.
27e6744ec qcacld-2.0: Use request manager for get_peer_rssi
8005d0750 qcacld-2.0: Introduce and enable HDD Request Manager infrastructure
Linux version 3.18.100-g857a9c8f (android-build@abfarm339) (gcc
version 4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Sep
7 22:27:15 UTC 2018
Bug: 70237718
Bug: 70638103
Bug: 72957155
Bug: 72957385
Bug: 110817575
Bug: 111126462
Bug: 111127063
Bug: 111127792
Bug: 111127854
Bug: 111127907
Bug: 111127908
Bug: 111127947
Bug: 111127985
Bug: 111127986
Bug: 111127988
Bug: 111128007
Bug: 111128638
Bug: 111128639
Bug: 111128835
Bug: 111128836
Bug: 111128839
Bug: 111128841
Bug: 111135102
Bug: 112247868
Bug: 112277186
Bug: 112277852
Bug: 112384410
Change-Id: I537b5037dec549476bb547593b6dbc8971306d0b
Source-Branch: android-msm-marlin-3.18-pi-qpr1
Signed-off-by: Siqi Lin <siqilin@google.com>
|
|
2513d2388ed1 charger: fix slower charging with NON-PD type-C charger
df62d3dc8956 usb: typec: fusb302: lazy acquire power supply objects
63ff89d8e0e6 Merge branch 'android-msm-marlin-3.18-pi-security-next' into android-msm-marlin-3.18-pi
43be8f8b6710 ANDROID: sdcardfs: Don't use OVERRIDE_CRED macro
753ee920f8dc ANDROID: sdcardfs: Change current->fs under lock
bc782cded239 cpufreq_stats: Reset cpufreq_task_stats right after dup_task_struct
703ca6bddbf3 Merge branch 'android-msm-marlin-3.18-pi' into android-msm-marlin-3.18-pi-security-next
a3ced9894032 Revert "msm: ADSPRPC: Assign memory to VMID_SSC_Q6"
962e81be0bf0 msm: ADSPRPC: Use msm_ion_do_cache_op to flush userspace buffers
Linux version 3.18.100-g2513d23 (android-build@abfarm318) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Aug 15
21:24:02 UTC 2018
Bug: 111081202
Bug: 111641492
Bug: 111642636
Bug: 112247868
Bug: 112260671
Bug: 112277889
Bug: 112529920
Change-Id: Ic65d2c817e0a95d8937f157f545c90ee032e0ce6
Source-Branch: android-msm-marlin-3.18-pi
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
161b7a2b7 Merge remote-tracking branch 'remotes/origin/android-msm-marlin-3.18-security-next' into android-msm-marlin-3.18
bfb692d21 Revert "arm64: errata: Calling enable functions for CPU errata too"
c445ef510 Revert "arm64: cpufeature: Pass capability structure to ->enable callback"
ed068033e Revert "arm64: Add skeleton to harden the branch predictor against aliasing attacks"
2ec58365c Revert "arm64: cpu_errata: Allow an erratum to be match for all revisions of a core"
734a0e81e Revert "drivers/firmware: Expose psci_get_version through psci_ops structure"
192dd7365 Revert "arm64: Implement branch predictor hardening for affected Cortex-A CPUs"
c21cb6ab0 Revert "arm64: cpu_errata: Add Kryo to Falkor 1003 errata"
25e6c82ef Revert "arm64: Implement branch predictor hardening for Falkor"
6e7e885bb Revert "arm64: Add BTAC/LinkStack sanitizations for Kryo"
036e9a199 Revert "arm64: cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75"
8da4c405a arm64/configs: marlin: increase log buffer to 1 MiB
f236b924e nf_conntrack: Null pointer check added prior deleting sip node
a52396c78 Merge branch 'android-msm-marlin-3.18-security-next' into android-msm-marlin-3.18
928bf4c10 qcacld-2.0: Modify addition of proper length to payload
a4102336d qcacld-2.0: Fix information leak issue during memcpy
d592ac35b msm: ipa: Fix to handle NULL pointer dereference
bc6d069fd arm64: cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75
4b532ed83 arm64: Add BTAC/LinkStack sanitizations for Kryo
99db809d2 arm64: Implement branch predictor hardening for Falkor
57d5741ed arm64: cpu_errata: Add Kryo to Falkor 1003 errata
1fc04374a arm64: Implement branch predictor hardening for affected Cortex-A CPUs
dde04deca drivers/firmware: Expose psci_get_version through psci_ops structure
118e7e0a1 arm64: cpu_errata: Allow an erratum to be match for all revisions of a core
116af8e87 arm64: Add skeleton to harden the branch predictor against aliasing attacks
c1a59ea9c arm64: cpufeature: Pass capability structure to ->enable callback
09ec05ace arm64: errata: Calling enable functions for CPU errata too
de15da298 net: ipc_router: Fix buffer overflow during memcpy
f0896368a qcacld-2.0: Fix OOB write in wma_passpoint_match_event_handler
2895d3721 qcacld-2.0: Fix UAF in WLAN HDD
a3a130c45 PM / devfreq: memlat: Remove kfree() on probe fails
7cf39fd94 NFC: llcp: Limit size of SDP URI
b4a4504f5 FROMLIST: diag: Synchronize msg mask read and write on a peripheral
0847da4e3 ANDROID: HID: debug: check length in hid_debug_events_read() before copy_to_user()
0a7c30d52 qcacld-2.0: Fix buffer overflow in ol_rx_in_order_indication_handler
0cf041b2a ASoC: msm: qdspv2: initialize variables before use
453812140 ASoC: msm: qdspv2: add spin lock to protect ac
6568e2639 msm: ADSPRPC: Assign memory to VMID_SSC_Q6
44003f41d voice_svc: Avoid double free in voice_svc driver
d121a7071 qcacld-2.0: Resolve possible OOB while posting SET PASSPOINT WMA event
20457601e qcacld-2.0: Fix UAF in the function wlan_hdd_execute_remain_on_channel
e43dd5247 BACKPORT: l2tp: prevent creation of sessions on terminated tunnels
7a420e2f9 BACKPORT: l2tp: initialise session's refcount before making it reachable
768347b35 BACKPORT: l2tp: fix duplicate session creation
ebc602ecc BACKPORT: l2tp: fix race in l2tp_recv_common()
355301015 Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
248fe681e msm: mdss: Fix for wrong length in copy_to_user
971db75c2 msm: mdss: check buffer size before writing to user buffer
161ff7099 diag: Protect the decrement of number of diag clients
5a186c48d drivers: qcom: lpm-stats: Fix undefined access error
fe5ab2bd8 crypto: ice: Fix NULL pointer exception in ice.
94970db92 msm: camera: Fix for Possible information leak issue
d44c90526 ASoC: msm-lsm-client: use kzalloc instead of kmalloc
cfe3642b4 FROMLIST: binder: fix proc->files use-after-free
6308db721 msm: ipa: rmnet: Make code changes with respect to CR#2046006
5ff974049 Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
Linux version 3.18.100-g161b7a2 (android-build@abfarm316) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jul 27
01:14:50 UTC 2018
Bug: 36367253
Bug: 38159931
Bug: 63528466
Bug: 65423852
Bug: 69164715
Bug: 71361580
Bug: 73083945
Bug: 73884889
Bug: 73885536
Bug: 73888283
Bug: 73889358
Bug: 77528410
Bug: 78238455
Bug: 79421260
Bug: 79421261
Bug: 79422277
Bug: 79422409
Bug: 79422410
Bug: 109741734
Bug: 109741735
Bug: 109741750
Bug: 109741777
Bug: 109741853
Bug: 109741886
Bug: 109741911
Bug: 109741922
Bug: 110817575
Bug: 110909816
Bug: 111529827
Bug: 111785512
Change-Id: I467e4ad91d40a5dede3d2f3535de2743cdd131d3
Source-Branch: android-msm-marlin-3.18
Signed-off-by: David Lin <dtwlin@google.com>
|
|
am: b9b628243e -s ours
Change-Id: I3243b3129d9320c9793b94e831d6653c616e6722
|
|
a76542552 scsi: ufs: call single_release to avoid memory leak
4c57f62a5 kernel: initialize and free cpufreq stats properly
64e5c5db5 kernel: Fix massive cpufreq stats memory leaks
Linux version 3.18.100-ga765425 (android-build@abfarm059) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Jun 12
23:27:18 UTC 2018
Bug: 110044919
Change-Id: I6cc5e2dffb54ead5f0d877d315f04e150a9f4068
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Wei Wang <wvw@google.com>
|
|
b5e2355af qcacld-2.0: wlan host driver upgrade to 4.4.25.050
ab88436b2 qcacld-2.0: Block tx path when recovery is set
6bd2af6e2 Merge android-msm-marlin-3.18-oc-mr1 into android-msm-marlin-3.18
8af09854c Revert "arm64/configs: Remove LIMITS_LITE_HW config"
Linux version 3.18.100-gb5e2355af217 (android-
build@vpee2.mtv.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Thu Jun 7 18:03:37 UTC 2018
Bug: 80160768
Bug: 80191244
Change-Id: Ia2205c23cdeeb4da8a1ecb5a2c162684fec6829b
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Kumar Anand <kumaranand@google.com>
|
|
8af09854c Revert "arm64/configs: Remove LIMITS_LITE_HW config"
0fb5f06f8 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
aaf257dde packet: hold bind lock when rebinding to fanout hook
970e4076f packet: in packet_do_bind, test fanout with bind_lock held
f902d6651 msm: mdss: Fix for wrong length in copy_to_user
4f9a0470e msm: mdss: check buffer size before writing to user buffer
15393eeb0 diag: Protect the decrement of number of diag clients
5c2e2b3e2 drivers: qcom: lpm-stats: Fix undefined access error
3b63e7c12 crypto: ice: Fix NULL pointer exception in ice.
208615813 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
7e74c4f5f msm: camera: Fix for Possible information leak issue
484591f5b ASoC: msm-lsm-client: use kzalloc instead of kmalloc
f5b04bed1 arm64/configs: Remove LIMITS_LITE_HW config
1e535e904 msm: ipa: rmnet: Make code changes with respect to CR#2046006
Linux version 3.18.70-g8af0985 (android-build@abfarm674) (gcc version
4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Jun
6 22:30:13 UTC 2018
Bug: 36367253
Bug: 73888283
Bug: 73889358
Bug: 77902350
Bug: 78238455
Bug: 79377438
Bug: 79421260
Bug: 79421261
Bug: 79422277
Bug: 79422409
Bug: 80191244
Change-Id: I786415ad33abdebe472a750988656840f52da5a6
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
|
|
6548e11a1 FROMLIST: binder: fix proc->files use-after-free
997816914 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18
0fb5f06f8 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
aaf257dde packet: hold bind lock when rebinding to fanout hook
970e4076f packet: in packet_do_bind, test fanout with bind_lock held
f902d6651 msm: mdss: Fix for wrong length in copy_to_user
4f9a0470e msm: mdss: check buffer size before writing to user buffer
15393eeb0 diag: Protect the decrement of number of diag clients
5c2e2b3e2 drivers: qcom: lpm-stats: Fix undefined access error
3b63e7c12 crypto: ice: Fix NULL pointer exception in ice.
208615813 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
7e74c4f5f msm: camera: Fix for Possible information leak issue
484591f5b ASoC: msm-lsm-client: use kzalloc instead of kmalloc
f5b04bed1 arm64/configs: Remove LIMITS_LITE_HW config
1e535e904 msm: ipa: rmnet: Make code changes with respect to CR#2046006
91a2acf27 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
d244684a2 futex: Remove requirement for lock_page() in get_futex_key()
99e871a0b msm: sensor: ois: add conditional check for ioctl
aaba082d0 UPSTREAM: scsi: sg: don't return bogus Sg_requests
689ad753d usb: gadget: f_hid: fix: Prevent accessing released memory
b238794b2 ASoC: msm: qdsp6v2: check for buffer size before read
0100918d3 qcacld-2.0: Fix integer underflow and buffer over-read in fwlog
591587523 qcacld-2.0: add validation check for APFIND event
d9f19d766 futex: Prevent overflow by strengthen input validation
b6d4c899b drivers: cpuidle: lpm-levels: Fix untrusted pointer dereference.
9fbff5f12 qcacld-2.0: Add sanity check for wmi TLV length
d1a2dde66 msm: adsprpc: Use unsigned integer for length values
dc15ec051 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18-oc-mr1-security-next
Linux version 3.18.100-g6548e11a16f3 (android-
build@wpix10.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed Jun 6 18:27:57 UTC 2018
Bug: 36367253
Bug: 38258851
Bug: 63165135
Bug: 69164715
Bug: 72956998
Bug: 73888283
Bug: 73889358
Bug: 74250718
Bug: 74447444
Bug: 75300370
Bug: 76106267
Bug: 77527719
Bug: 77528512
Bug: 77528653
Bug: 77528805
Bug: 77902350
Bug: 78238455
Bug: 79090045
Bug: 79365489
Bug: 79377438
Bug: 79421260
Bug: 79421261
Bug: 79422277
Bug: 79422409
Bug: 80022235
Bug: 80191244
Change-Id: I1daaa3f707a1b5bee814fd57af8cdd70bb3c473f
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
|
|
3ff7dc49fe3b arm64/configs: Remove LIMITS_LITE_HW config
Linux version 3.18.100-g3ff7dc4 (android-build@abfarm631) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Jun 5
09:05:10 UTC 2018
Bug: 80022235
Change-Id: Ib85321a0dae7983013241620309e348fdc868a78
Source-Branch: android-msm-marlin-3.18
Signed-off-by: TeYuan Wang <kamewang@google.com>
|
|
1c8c0b2e2 qcacld-2.0: wlan host driver upgrade to 4.4.25.049
18bbda163 qcacld-2.0: Remove redundant API sme_staInMiddleOfRoaming
Linux version 3.18.100-g1c8c0b2 (android-build@abfarm216) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Thu May 31
22:38:19 UTC 2018
Bug: 80256778
Change-Id: I03f9568ea386c605251d038309df50841a206519
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Ecco Park <eccopark@google.com>
|
|
4144ed486 scsi: ufs: fix LINERESET on hibern8 without power hole
ee0d2b4a9 tcpm: Ignore CC and vbus changes in PORT_RESET change
bbb7f29ae binder: Dump out refs_by_desc rbtree on failure
2242dac17 Merge branch 'android-msm-marlin-3.18-security-next' into android-msm-marlin-3.18
531b5fe00 msm: sensor: ois: add conditional check for ioctl
23c393089 msm: adsprpc: Use unsigned integer for length values
b5a21991b drivers: cpuidle: lpm-levels: Fix untrusted pointer dereference.
000bb814a usb: gadget: f_hid: fix: Prevent accessing released memory
d21f47251 UPSTREAM: scsi: sg: don't return bogus Sg_requests
5de1cc3a4 futex: Prevent overflow by strengthen input validation
9da6c7093 qcacld-2.0: Add sanity check for wmi TLV length
835dfb731 qcacld-2.0: Fix integer underflow and buffer over-read in fwlog
a32cd3c5a ASoC: msm: qdsp6v2: check for buffer size before read
32f25be07 qcacld-2.0: add validation check for APFIND event
aed5d55f3 Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
fed5ca86c Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
0a982102e Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
3a6e69a7c Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
8c78655fb Merge remote-tracking branch 'partner/android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
d1722c047 iovec: make sure the caller actually wants anything in memcpy_fromiovecend
3d7eca01e Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
07f1d0e85 FROMLIST: arm64: Avoid aligning normal memory pointers in __memcpy_{to,from}io
174ed32b0 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18
24e2d7905 ANDROID: binder: show high watermark of alloc->pages.
6d81ca49d ANDROID: binder: Add thread->process_todo flag.
d71dbda3b BACKPORT: xfrm: Clear sk_dst_cache when applying per-socket policy.
df171ac63 ANDROID: cpufreq: stats: Fix dead stats clearing timing
ca4284353 qcacld-2.0: wlan host driver upgrade to 4.4.25.047
12bbe17ca qcacld-2.0: Fix incorrect frame length of encrypted auth frame
8d756b0d3 qcacld-2.0: wlan host driver upgrade to 4.4.25.046
f35d6d3ad qcacld-2.0: Set length of challenge text sent by SAP to 128
d71769d97 qcacld-2.0: Fix incorrect length of encrypted auth frame
752854b11 qcacld-2.0: Fix incorrect processing of encrypted auth frame
f0546dbe7 fs: Improve eventpoll logging to stop indicting timerfd
7333e2417 usb: fusb: Do not block while setting current limit
0357a6320 BACKPORT: partial: mm, oom_reaper: do not mmput synchronously from the oom reaper context
f08c7cd65 UPSTREAM: time: move the timecounter/cyclecounter code into its own file.
e7bdbab98 UPSTREAM: arm64: fix missing asm/alternative.h include in kernel/module.c
476c4859a UPSTREAM: arm64: fix missing linux/bug.h include in asm/arch_timer.h
a21b68d70 UPSTREAM: arm64: fix missing asm/io.h include in kernel/smp_spin_table.c
d4fae5c26 UPSTREAM: arm64: fix missing asm/pgtable-hwdef.h include in asm/processor.h
af7e7afae ANDROID: binder: fix node sched policy calculation
9de756003 ANDROID: binder: init desired_prio.sched_policy before use it
86403e6eb ANDROID: binder: fix transaction leak.
4569cb907 ANDROID: binder: Add tracing for binder priority inheritance.
5f9ae0709 FROMLIST: binder: fix use-after-free in binder_transaction()
77f483c4b FROMLIST: android: binder: Don't get mm from task
7fb9a1981 FROMLIST: android: binder: Remove unused vma argument
e19c99281 FROMLIST: android: binder: Drop lru lock in isolate callback
aff4735f4 FROMLIST: binder: fix an ret value override
71ded4a85 FROMLIST: binder: fix memory corruption in binder_transaction binder
9d355b2ea FROMLIST: android: binder: Add page usage in binder stats
25cc128c7 FROMLIST: android: binder: Add shrinker tracepoints
ae1f12e10 FROMLIST: android: binder: Add global lru shrinker to binder
087a9573b FROMLIST: android: binder: Move buffer out of area shared with user space
bfed2626d FROMLIST: android: binder: Add allocator selftest
2871f05b8 FROMLIST: android: binder: Refactor prev and next buffer into a helper function
8918a2967 ANDROID: binder: don't queue async transactions to thread.
53e5abdff ANDROID: binder: don't enqueue death notifications to thread todo.
728e2df15 ANDROID: binder: call poll_wait() unconditionally.
9837537c3 ANDROID: binder: Don't BUG_ON(!spin_is_locked()).
c6c790c08 ANDROID: binder: don't check prio permissions on restore.
109684b70 Add BINDER_GET_NODE_DEBUG_INFO ioctl
1aedaaf18 ANDROID: binder: add RT inheritance flag to node.
3ad826c6c ANDROID: binder: improve priority inheritance.
e7d4cb9bf ANDROID: binder: add min sched_policy to node.
ab125494a ANDROID: binder: add support for RT prio inheritance.
1a7617d8d ANDROID: binder: push new transactions to waiting threads.
6bae6164c ANDROID: binder: remove proc waitqueue
69b672603 FROMLIST: binder: remove global binder lock
a985c14ba FROMLIST: binder: fix death race conditions
2ffc021a5 FROMLIST: binder: protect against stale pointers in print_binder_transaction
ec9e836bb FROMLIST: binder: protect binder_ref with outer lock
f52907d17 FROMLIST: binder: use inner lock to protect thread accounting
0e8ed5ebb FROMLIST: binder: protect transaction_stack with inner lock.
c5fd9f71a FROMLIST: binder: protect proc->threads with inner_lock
1d425d0e1 FROMLIST: binder: protect proc->nodes with inner lock
fd679932e FROMLIST: binder: add spinlock to protect binder_node
005ce88fd FROMLIST: binder: add spinlocks to protect todo lists
c35dfe821 FROMLIST: binder: use inner lock to sync work dq and node counts
20d961d8c FROMLIST: binder: introduce locking helper functions
fb2292dd3 FROMLIST: binder: use node->tmp_refs to ensure node safety
19b919c0c FROMLIST: binder: refactor binder ref inc/dec for thread safety
3b71daa96 FROMLIST: binder: make sure accesses to proc/thread are safe
b5f5b0f05 FROMLIST: binder: make sure target_node has strong ref
701e53517 FROMLIST: binder: guarantee txn complete / errors delivered in-order
289228f12 FROMLIST: binder: refactor binder_pop_transaction
89e97288e FROMLIST: binder: use atomic for transaction_log index
ad527c401 FROMLIST: binder: add more debug info when allocation fails.
ade17d5ed FROMLIST: binder: protect against two threads freeing buffer
11042bb28 FROMLIST: binder: remove dead code in binder_get_ref_for_node
e884d5ed7 FROMLIST: binder: don't modify thread->looper from other threads
81397a6f7 FROMLIST: binder: avoid race conditions when enqueuing txn
67d05ba09 FROMLIST: binder: refactor queue management in binder_thread_read
8136315df FROMLIST: binder: add log information for binder transaction failures
7ceb84f32 FROMLIST: binder: make binder_last_id an atomic
ba5004a2a FROMLIST: binder: change binder_stats to atomics
5e812bf53 FROMLIST: binder: add protection for non-perf cases
c387312d2 FROMLIST: binder: remove binder_debug_no_lock mechanism
eb3e2e973 FROMLIST: binder: move binder_alloc to separate file
342a030df Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
330f05bff Merge branch 'android-msm-marlin-3.18' into android-msm-marlin-3.18-security-next
Linux version 3.18.100-g4144ed4868ef (android-
build@wprm12.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Tue May 22 04:23:13 UTC 2018
Bug: 23525545
Bug: 28275695
Bug: 33250092
Bug: 34461621
Bug: 36007193
Bug: 36088202
Bug: 36095019
Bug: 36279469
Bug: 36406078
Bug: 36650912
Bug: 37218618
Bug: 37293077
Bug: 38042165
Bug: 38201220
Bug: 38258851
Bug: 62038227
Bug: 63041570
Bug: 63075553
Bug: 63079216
Bug: 63117588
Bug: 63165135
Bug: 63716230
Bug: 63866355
Bug: 63926541
Bug: 64073116
Bug: 64552728
Bug: 65196691
Bug: 65333488
Bug: 66899329
Bug: 67030205
Bug: 67754642
Bug: 68996141
Bug: 72956998
Bug: 73498666
Bug: 74402918
Bug: 74447444
Bug: 75300370
Bug: 76106267
Bug: 77527719
Bug: 77528512
Bug: 77528653
Bug: 77528805
Bug: 77551464
Bug: 78058462
Bug: 79090045
Bug: 79276122
Bug: 79365489
Bug: 79846307
Change-Id: I07e17ff79b373d97de4cf38269ce92c872270efd
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
|
|
am: d9d4c1a34d -s ours
Change-Id: I7f20baa725b8ef9caee41e22dbf31d7470556a54
|
|
91a2acf27c31 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
d244684a28c4 futex: Remove requirement for lock_page() in get_futex_key()
99e871a0bea3 msm: sensor: ois: add conditional check for ioctl
aaba082d0597 UPSTREAM: scsi: sg: don't return bogus Sg_requests
689ad753d78e usb: gadget: f_hid: fix: Prevent accessing released memory
b238794b2b2d ASoC: msm: qdsp6v2: check for buffer size before read
0100918d3fe4 qcacld-2.0: Fix integer underflow and buffer over-read in fwlog
59158752303c qcacld-2.0: add validation check for APFIND event
d9f19d766469 futex: Prevent overflow by strengthen input validation
b6d4c899bcb8 drivers: cpuidle: lpm-levels: Fix untrusted pointer dereference.
9fbff5f12740 qcacld-2.0: Add sanity check for wmi TLV length
d1a2dde662cb msm: adsprpc: Use unsigned integer for length values
dc15ec0517e1 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18-oc-mr1-security-next
Linux version 3.18.70-g91a2acf (android-build@abfarm690) (gcc version
4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri May
11 01:06:35 UTC 2018
Bug: 38258851
Bug: 63165135
Bug: 72956998
Bug: 74250718
Bug: 74447444
Bug: 75300370
Bug: 76106267
Bug: 77527719
Bug: 77528512
Bug: 77528653
Bug: 77528805
Bug: 79090045
Bug: 79365489
Change-Id: I80b3e2429587aab446dc8874a7b8d68371b4fadc
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Daniel Mentz <danielmentz@google.com>
|
|
am: d13f17e4d1 -s ours
Change-Id: Ia250a5e7a073e86afa020eefc9aae3d64ca56ef0
|
|
891f2c29fe4b Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18
3c08788b8c7f power: qpnp-fg: make CHARGE_FULL property writable by user
f4f23f24b71a Revert "ion: ensure CMO target is valid"
5ffd7349668c Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
a0ae6f0e9f74 qcacld-2.0: Add data_len check to avoid OOB access
fe22ed6ec9c3 drivers: htc_debug: Avoid possible buffer overflow in reboot_block driver
87dc0bb9e094 diag: Validate copying length against source buffer length
4e6d3a6b91c1 qcacld-2.0: Fix potential buffer overflow
eb630f73e79c msm: adsprpc: Fix race conditions on same buffer
61980fa79577 qcacld-2.0: Fix potential buffer overwrite in the htt_t2h_lp_msg_handler
ac75d0c216fd USB: core: prevent malicious bNumInterfaces overflow
1b940319a5e4 mm-camera2:isp2: Handle use after free buffer
f3caabdff711 qcacld-2.0: Move NBUF_UPDATE_TX_PKT_COUNT before freeing netbuf
af97a14389b3 msm: ADSPRPC: Use ID in response to get context pointer
a68d2bd279f1 msm: ADSPRPC: validate context pointer with magic number
a589cb7a3281 diag: dci: check signed values for negativity
154e958a9c8c diag: Add conditional check for len in dci_process_ctrl_status()
9d65e3a777fa ANDROID: Bluetooth: hidp: buffer overflow in hidp_process_report
a6fba7d93fcb msm: kgsl: Properly remove ref count on gpuobj_sync failure
af06b5bb14e8 KEYS: add missing permission check for request_key() destination
6da4492f1f3d crypto: hmac - require that the underlying hash algorithm is unkeyed
2aabc3282374 ion: ensure CMO target is valid
0aa2e60f2d2e KEYS: fix out-of-bounds read during ASN.1 parsing
d4bf16edebdc qcacld-2.0: Remove FW memory dump feature
4afaa191b6d1 msm: ADSPRPC: use access_ok to validate pointers
45ee7d900c68 ASoC: wcd_cpe_core: Add mutex lock for CPE session
fe0ec339353a ipv6: fix udpv6 sendmsg crash caused by too small MTU
7bd28b66977b ASN.1: fix out-of-bounds read when parsing indefinite length item
7ae7a9188870 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18-oc-mr1-security-next
Linux version 3.18.100-g891f2c2 (android-build@abfarm057) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Thu May 10
00:13:30 UTC 2018
Bug: 62536960
Bug: 63165064
Bug: 65023306
Bug: 65542521
Bug: 65853588
Bug: 69065862
Bug: 70399602
Bug: 70528036
Bug: 71363680
Bug: 71638332
Bug: 71751178
Bug: 71751622
Bug: 71752561
Bug: 72957321
Bug: 72957387
Bug: 72957546
Bug: 73827422
Bug: 74237168
Bug: 74237532
Bug: 74237606
Bug: 74237782
Bug: 76445910
Bug: 78883741
Bug: 79219092
Change-Id: I357aac86ecf68d69d536ac80706e1e8daf1d82c6
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
47e9b6f4cebc Revert "Revert "cpufreq: Fix race between policy initialization and cpufreq_cpu_get()""
409af03ebd43 build.config: Add debug kernel build configs
Linux version 3.18.100-g47e9b6f4cebc (android-
build@wphq5.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed May 9 17:08:31 UTC 2018
Bug: 72162757
Bug: 77298580
Change-Id: I754f613bbda67e77afd22573db4c851633c48514
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Ed Tam <etam@google.com>
|
|
f4f23f24b Revert "ion: ensure CMO target is valid"
5ffd73496 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
a0ae6f0e9 qcacld-2.0: Add data_len check to avoid OOB access
fe22ed6ec drivers: htc_debug: Avoid possible buffer overflow in reboot_block driver
87dc0bb9e diag: Validate copying length against source buffer length
4e6d3a6b9 qcacld-2.0: Fix potential buffer overflow
eb630f73e msm: adsprpc: Fix race conditions on same buffer
61980fa79 qcacld-2.0: Fix potential buffer overwrite in the htt_t2h_lp_msg_handler
ac75d0c21 USB: core: prevent malicious bNumInterfaces overflow
1b940319a mm-camera2:isp2: Handle use after free buffer
f3caabdff qcacld-2.0: Move NBUF_UPDATE_TX_PKT_COUNT before freeing netbuf
af97a1438 msm: ADSPRPC: Use ID in response to get context pointer
a68d2bd27 msm: ADSPRPC: validate context pointer with magic number
a589cb7a3 diag: dci: check signed values for negativity
154e958a9 diag: Add conditional check for len in dci_process_ctrl_status()
9d65e3a77 ANDROID: Bluetooth: hidp: buffer overflow in hidp_process_report
a6fba7d93 msm: kgsl: Properly remove ref count on gpuobj_sync failure
af06b5bb1 KEYS: add missing permission check for request_key() destination
6da4492f1 crypto: hmac - require that the underlying hash algorithm is unkeyed
2aabc3282 ion: ensure CMO target is valid
0aa2e60f2 KEYS: fix out-of-bounds read during ASN.1 parsing
d4bf16ede qcacld-2.0: Remove FW memory dump feature
4afaa191b msm: ADSPRPC: use access_ok to validate pointers
45ee7d900 ASoC: wcd_cpe_core: Add mutex lock for CPE session
fe0ec3393 ipv6: fix udpv6 sendmsg crash caused by too small MTU
7bd28b669 ASN.1: fix out-of-bounds read when parsing indefinite length item
7ae7a9188 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18-oc-mr1-security-next
Linux version 3.18.70-gf4f23f2 (android-build@abfarm797) (gcc version
4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon May
7 22:09:35 UTC 2018
Bug: 62536960
Bug: 63165064
Bug: 65023306
Bug: 65542521
Bug: 65853588
Bug: 69065862
Bug: 70399602
Bug: 70528036
Bug: 71363680
Bug: 71638332
Bug: 71751178
Bug: 71751622
Bug: 71752561
Bug: 72957321
Bug: 72957387
Bug: 72957546
Bug: 73827422
Bug: 74237168
Bug: 74237532
Bug: 74237606
Bug: 74237782
Bug: 76445910
Bug: 79219092
Change-Id: I379631c702dd1096ae27552b079a16b5551961fb
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Daniel Mentz <danielmentz@google.com>
|
|
f0e6eb38d67d build.config: enforce trace_printk check
8a3cbeea637b usb: typec: tcpm: Wait for CC debounce before PD excg
7e6d5eee6076 Enable CONFIG_DEBUG_SET_MODULE_RONX
Linux version 3.18.100-gf0e6eb38d67d (android-
build@vpeb14.mtv.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Fri May 4 05:10:38 UTC 2018
Bug: 63171186
Bug: 74078653
Bug: 78152252
Bug: 79166848
Change-Id: I1a1680b7a06dfcc46605a3fa47d297fe042bda88
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
c527028d1630 drivers: htc_debug: Avoid possible buffer overflow in reboot_block driver
f1108d07021e [media] uvcvideo: Disable hardware timestamps by default
c32ae4cadfcb usb: typec: maintain PD charging when USB composition switches
533f1e589a61 cpufreq: stats: use seq iterator for large uid-related files
42962c7978df cpufreq: stats: update uid data in acct_update_power
04b5827dccf7 proc: add null check in proc_uid_init
349cbc0a6c23 ASoC: msm: qdsp6v2: Add volume control for capture streams
8ce0154da643 block: replace io_schedule with io_schedule_timeout
2d6abfe4f48b power: battery: disable AICL for Type-C Charger
c434e86e8da0 htc_battery: Control stop/start charge level by charging_disabled
Linux version 3.18.100-gc527028d1630 (android-
build@wprf7.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed Apr 18 23:05:22 UTC 2018
Bug: 7532124
Bug: 36729538
Bug: 36730514
Bug: 65386843
Bug: 71363680
Bug: 71718257
Bug: 72134552
Bug: 72261912
Bug: 73328000
Bug: 75236413
Bug: 77968455
Change-Id: Ic3c03cce444d9b3cf7e4ee0665ab2f10b8dbdd5d
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
0ea05aabb Revert "xhci: plat: Register shutdown for xhci_plat"
81ebc0ada usb: tcpm: Correct the calculation of PD current
Linux version 3.18.100-g0ea05aabb521 (android-
build@vpeb8.mtv.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 13 00:29:05 UTC 2018
Bug: 74147717
Bug: 77361040
Change-Id: Ie9c0f90e1376f972f26806deee078c4268b4cbcb
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
|
|
dd686e498 FROMLIST: ALSA: usb-audio: fix memory leak on cval
f5a8f755c BACKPORT: ALSA: usb-audio: UAC2 jack detection
e63543162 BACKPORT: ALSA: usb-audio: fix uac control query argument
75079d809 pd_engine: Enable Rp pull up changes without causing disconnect
a741bf8c1 tcpm: set rp tp 1.5A once PD contract is negotiated
Linux version 3.18.100-gdd686e4 (android-build@abfarm416) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 6
18:58:12 UTC 2018
Bug: 70632415
Bug: 75024783
Change-Id: I911180602fe4388cf7d27c43e07c3cada82dee35
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
|
|
f92d3ca19 msm: vidc: Add Colorspace in sequence change event
Linux version 3.18.100-gf92d3ca19fba (android-
build@wphq10.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Wed Apr 4 23:28:01 UTC 2018
Bug: 69368099
Test: Built boot.img and booted up on Marlin.
Change-Id: Ibe82cd256a1636e1c9f15bda6d6000e3d04453f9
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Siyuan Zhou <siyuanzhou@google.com>
|
|
557c0d65cb27 CHROMIUM: usb: gadget: f_accessory: add .raw_request callback
480c39929928 nanohub: move reset usleep_range out of device probe
5dadf72556e3 arm64: configs: marlin: disable CONFIG_QPNP_LEGACY_CYCLE_COUNT
321d349d9b2a qpnp: fg+smbcharger: implement Linux cycle count
0743538b0ef8 power: qpnp-fg: expose bucket cycle count bins as device attribute
d5933077a098 htc_battery: add parameters to control stop/start charge level
883486cba374 ANDROID: initramfs: call free_initrd() when skipping init
480d3f2bdc20 usb: typec: Import tcpc configs from device tree
a9a708e23421 arm64: dts: Add tcpc configs for marlin/sailfish
8c1ce36d6dd0 dt-bindings: usb: Add typec bindings
299405a69a26 UPSTREAM: typec: tcpm: Only request matching pdos
006d302326a4 UPSTREAM: typec: tcpm: Validate source and sink caps
Linux version 3.18.100-g557c0d6 (android-build@abfarm094) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 28
19:23:31 UTC 2018
Bug: 29628726
Bug: 63940123
Bug: 64959743
Bug: 69681565
Bug: 69901741
Bug: 72769405
Bug: 72776338
Bug: 74618869
Bug: 75041071
Bug: 75302124
Change-Id: Id18999d018850c23fa672e750742bd6ba6bc6110
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Siqi Lin <siqilin@google.com>
|
|
am: 85cd8a7c6e -s ours
Change-Id: Ia21a692bd39b6971d13368eaea2201774368385c
|
|
c9ae525d9391 power: don't consider AICL result when using PD charger
Linux version 3.18.70-gc9ae525 (android-build@abfarm219) (gcc version
4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Mar
20 18:20:57 UTC 2018
Bug: 72851087
Change-Id: I7b769a12780db025e9b3a0788ab6194ac5ede1cf
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
fe19e8d9a3b5 v4l2-compat-ioctl32: fix wrong merge submit
f6d4ef5915a8 Merge 3.18.100 into android-msm-marlin-3.18
fbf47aba53cc PM: wakeup_reasons: Fix formatting for printk
91e503e1c7f5 UPSTREAM: mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON
a51afa5a3f6b soc: qcom: glink: Fix memory leak in driver probe
0fffc1367631 power: msm-core: Fix mutex not getting unlocked in error path
0e720bacbc97 net: ipc_router: Fix memory leaks when releasing a remote port
9ee2159dce2c msm: mdss: Don't cache the address of a stack variable in timings init
8969dc1da495 msm: camera: sensor: Fix memory leaks when sensor probe fails
2d964595b6ef msm: camera: isp: Fix memory leaks in vfe probe
5fcd9374919e Linux 3.18.100
d8930f132b54 fixup: sctp: verify size of a new chunk in _sctp_make_chunk()
502319ce9124 serial: 8250_pci: Add Brainboxes UC-260 4 port serial device
d6d68ab0ad44 usb: usbmon: Read text within supplied buffer size
c3d114a94f96 USB: usbmon: remove assignment from IS_ERR argument
5ad9d27c1244 usb: quirks: add control message delay for 1b1c:1b20
0a40db9bb696 staging: android: ashmem: Fix lockdep issue during llseek
8d5ac33dba6b uas: fix comparison for error code
6515f2dd23e3 tty/serial: atmel: add new version check for usart
7353f81f6cc4 serial: sh-sci: prevent lockup on full TTY buffers
12d839211d08 x86: Treat R_X86_64_PLT32 as R_X86_64_PC32
3be6583f0b6f x86/module: Detect and skip invalid relocations
cd0198dfa73c scripts: recordmcount: break hardlinks
f5b58c98186f ubi: Fix race condition between ubi volume creation and udev
ccab18a66fbe netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
af6d5e3da581 netfilter: bridge: ebt_among: add missing match size checks
c80a9f329cb3 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
3dbf839abb54 netfilter: IDLETIMER: be syzkaller friendly
89d957cafd83 netfilter: nat: cope with negative port range
653cfde0665c netfilter: x_tables: fix missing timer initialization in xt_LED
3ed4ce9ff89a ALSA: seq: More protection for concurrent write and ioctl races
6eebd4d93363 ALSA: seq: Don't allow resizing pool in use
bbf594868f37 x86/MCE: Serialize sysfs changes
8995b89422b1 Input: matrix_keypad - fix race when disabling interrupts
dd9c6a786562 MIPS: BMIPS: Do not mask IPIs during suspend
b6c2161780d4 scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
89dad4ea4735 Linux 3.18.99
91e5f485ec89 dm io: fix duplicate bio completion due to missing ref count
115236161833 fib_semantics: Don't match route with mismatching tclassid
8806e4d6db66 net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
5b77504ae152 sctp: verify size of a new chunk in _sctp_make_chunk()
003fdfcca8db s390/qeth: fix IPA command submission race
c504ccad37af s390/qeth: fix SETIP command handling
f1183f19ee56 sctp: fix dst refcnt leak in sctp_v6_get_dst()
6b709dae4841 udplite: fix partial checksum initialization
794953c9fb6b ppp: prevent unregistered channels from connecting to PPP units
1006f0b73225 netlink: ensure to loop over all netns in genlmsg_multicast_allns()
b3cb96f05984 net: fix race on decreasing number of TX queues
8b9a9e47db03 ipv6 sit: work around bogus gcc-8 -Wrestrict warning
fcc3a220c9fa hdlc_ppp: carrier detect ok, don't turn off negotiation
3d88e12c59f3 bridge: check brport attr show in brport_show
ee23d0448225 leds: do not overflow sysfs buffer in led_trigger_show
9561b28349a2 net: fec: introduce fec_ptp_stop and use in probe fail path
1f9a8e9ae4cb ARM: mvebu: Fix broken PL310_ERRATA_753970 selects
a82600ca014e cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()
b99b799e6266 ALSA: usb-audio: Add a quirck for B&W PX headphones
2c4b17404d80 tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus
b467c15b6bbf tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
7c017f897e60 Linux 3.18.98
62a101cde990 net: gianfar_ptp: move set_fipers() to spinlock protecting area
f895445fad01 sctp: make use of pre-calculated len
99a318ec9d85 xen/gntdev: Fix partial gntdev_mmap() cleanup
8e43167ca987 xen/gntdev: Fix off-by-one error when unmapping with holes
56cf3902c179 SolutionEngine771x: fix Ether platform data
eb8936ae670a mdio-sun4i: Fix a memory leak
8094b1a3fa73 xen-netfront: enable device after manual module load
4108c7767f28 drm/ttm: check the return value of kzalloc
154770b1dc1e e1000: fix disabling already-disabled warning
9d3948996ee2 xfs: quota: check result of register_shrinker()
ac086d5fe75a xfs: quota: fix missed destroy of qi_tree_lock
96dd20010179 s390/dasd: fix wrongly assigned configuration data
20f6d9c2af33 led: core: Fix brightness setting when setting delay_off=0
c85a6e7bdea9 bnx2x: Improve reliability in case of nested PCI errors
e93041fc495b tg3: Enable PHY reset in MTU change path for 5720
7862b4d6f8ac tg3: Add workaround to restrict 5762 MRRS to 2048
05caa7ec533d scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error
69712e5d5b31 net: arc_emac: fix arc_emac_rx() error paths
bfde9f19290e spi: atmel: fixed spin_lock usage inside atmel_spi_remove
7c7e39f79bad sget(): handle failures of register_shrinker()
a97c0dc1a45f ipv6: icmp6: Allow icmp messages to be looped back
9d293792bfdd mtd: nand: gpmi: Fix failure when a erased page has a bitflip at BBM
5ae0e9de0ac6 hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
5900ecf33c2f ipv6: Skip XFRM lookup if dst_entry in socket cache is valid
43a69271f55a Linux 3.18.97
8f4007a46b30 ASN.1: fix out-of-bounds read when parsing indefinite length item
5873f621b200 usb: gadget: f_fs: Process all descriptors during bind
0b10a48805f9 usb: dwc3: gadget: Set maxpacket size for ep0 IN
9e3e6fe2e8b5 arm64: Disable unhandled signal log messages by default
698d39dc3272 irqchip/gic-v3: Use wmb() instead of smb_wmb() in gic_raise_softirq()
871950f437a9 x86/oprofile: Fix bogus GCC-8 warning in nmi_setup()
007436bff749 iio: adis_lib: Initialize trigger before requesting interrupt
2433724adee7 iio: buffer: check if a buffer has been set up when poll is called
d8db7b0d7025 cfg80211: fix cfg80211_beacon_dup
7d31ba11742c scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info
95cfcdfb93a4 PCI: keystone: Fix interrupt-controller-node lookup
6265f8b11f6a netfilter: drop outermost socket lock in getsockopt()
f8f8e8c5bbed Linux 3.18.96
cebca8006e7b crypto: s5p-sss - Fix kernel Oops in AES-ECB mode
428eb673375a KVM: async_pf: Fix #DF due to inject "Page not Present" and "Page Ready" exceptions simultaneously
bbd6d0883747 hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
12652198b2c9 xen: XEN_ACPI_PROCESSOR is Dom0-only
0a48efda74ad x86/mm/kmmio: Fix mmiotrace for page unaligned addresses
83ccb5cf4443 mm/early_ioremap: Fix boot hang with earlyprintk=efi,keep
657da572d7cb dmaengine: jz4740: disable/unprepare clk if probe fails
ffd7525e4848 xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
d129a8e16c74 spi: sun4i: disable clocks in the remove function
f95b33d6a619 509: fix printing uninitialized stack memory when OID is empty
251efedb4eb2 btrfs: Fix possible off-by-one in btrfs_search_path_in_tree
ed635d8842d4 net_sched: red: Avoid illegal values
41daf46f1d93 net_sched: red: Avoid devision by zero
fd0c7c581848 gianfar: fix a flooded alignment reports because of padding issue.
7c7ee206277d s390/dasd: prevent prefix I/O error
e35225344d36 powerpc/perf: Fix oops when grouping different pmu events
9f1761d479d5 scripts/kernel-doc: Don't fail with status != 0 if error encountered with -none
b31bd4246ebd media: s5k6aa: describe some function parameters
3745fa31754b perf bench numa: Fixup discontiguous/sparse numa nodes
da0baafd68f3 perf top: Fix window dimensions change handling
0edf1fd1cdaa ARM: dts: am4372: Correct the interrupts_properties of McASP
6c73b9c4853a ARM: AM33xx: PRM: Remove am33xx_pwrdm_read_prev_pwrst function
1d1862d9dfeb usb: build drivers/usb/common/ when USB_SUPPORT is set
b9d788388bfd usbip: keep usbip_device sockfd state in sync with tcp_socket
fd29080c5613 dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
668c72b6a665 video: fbdev/mmp: add MODULE_LICENSE
265720b857ab ASoC: ux500: add MODULE_LICENSE tag
28eb4b7b1599 selinux: ensure the context is NUL terminated in security_context_to_sid_core()
e8ee445b6008 Provide a function to create a NUL-terminated string from unterminated data
48e014f330c3 net: avoid skb_warn_bad_offload on IS_ERR
e6c8571967ad netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
9532a5de3cc6 netfilter: on sockopt() acquire sock lock only in the required scope
3045eb391684 netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
eaae500a40c4 netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
ab24a3d5b937 netfilter: x_tables: fix int overflow in xt_alloc_table_info()
e1f5f1cdb5b0 crypto: x86/twofish-3way - Fix %rbp usage
cc865060870a selinux: skip bounded transition processing if the policy isn't loaded
a04a3d139ba8 xfrm: check id proto in validate_tmpl()
2796fe7d00e4 mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed.
2455cf4da92b media: r820t: fix r820t_write_reg for KASAN
d61961121a46 ARM: dts: s5pv210: add interrupt-parent for ohci
667768364865 ALSA: seq: Fix racy pool initializations
6a4499b0f8f5 Btrfs: fix crash due to not cleaning up tree log block's dirty bits
8fae1c38b61a Btrfs: fix deadlock in run_delalloc_nocow
5b7d39a5daf9 console/dummy: leave .con_font_get set to NULL
aacf60b6ef76 video: fbdev: atmel_lcdfb: fix display-timings lookup
cd3b45b77924 ext4: correct documentation for grpid mount option
5b2336f021d5 ext4: save error to disk in __ext4_grp_locked_error()
45d73fe10e5b drm/radeon: adjust tested variable
8e8992a93d66 ALSA: seq: Fix regression by incorrect ioctl_mutex usages
055fdc77edff arm: spear13xx: Fix spics gpio controller's warning
67df924c852c arm: spear13xx: Fix dmas cells
b943222b2081 arm: spear600: Add missing interrupt-parent of rtc
ae0dd9e49bd1 s390: fix handling of -1 in set{,fs}[gu]id16 syscalls
e91e3808f894 PM / devfreq: Propagate error from devfreq_add_device()
ebda13935a36 IB/mlx4: Fix incorrectly releasing steerable UD QPs when have only ETH ports
0c946219398a Linux 3.18.95
e8cccd3ddb6b mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user copy
0a0e3ffb0a14 ACPI: sbshc: remove raw pointer from printk() message
16f14ebe6131 pktcdvd: Fix pkt_setup_dev() error path
e715f11f9ea7 EDAC, octeon: Fix an uninitialized variable warning
6e7bf9002a82 xtensa: fix futex_atomic_cmpxchg_inatomic
e6f03ae6cbb4 alpha: fix reboot on Avanti platform
6eb7b54c6ec5 alpha: fix crash if pthread_create races with signal delivery
99a62e157e3d signal/sh: Ensure si_signo is initialized in do_divide_error
7a64cc59f32d signal/openrisc: Fix do_unaligned_access to send the proper signal
dd59ee6cbf47 kernel/async.c: revert "async: simplify lowest_in_progress()"
f874d19f2cbe media: cxusb, dib0700: ignore XC2028_I2C_FLUSH
fd2ebfa2de94 crypto: caam - fix endless loop when DECO acquire fails
6278069e9f93 crypto: cryptd - pass through absence of ->setkey()
5e52f5a43c4a crypto: hash - introduce crypto_hash_alg_has_setkey()
0b72648a13f1 kernfs: fix regression in kernfs_fop_write caused by wrong type
103fa74ffa52 NFS: commit direct writes even if they fail partially
c8ebc7dd51be NFS: Add a cond_resched() to nfs_commit_release_pages()
0dcc0912d394 mtd: nand: Fix nand_do_read_oob() return value
6cd23a0e51dd media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner
84882420c73f media: dvb-usb-v2: lmedm04: Improve logic checking of warm start
d2baa5e59786 dccp: CVE-2017-8824: use-after-free in DCCP code
c6afe2ab06b0 usbip: vhci: stop printing kernel pointer addresses in messages
f52839830f99 usbip: stub: stop printing kernel pointer addresses in messages
0dcd7547c4d1 usbip: prevent leaking socket pointer address in messages
a7db857299d6 usbip: vhci-hcd: Add USB3 SuperSpeed support
9ea2031f4d16 usb: usbip: Fix possible deadlocks reported by lockdep
4b490123f499 usbip: Fix potential format overflow in userspace tools
67ad0235bacc usbip: prevent vhci_hcd driver from leaking a socket pointer address
eebf31529012 usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input
385e124b45fe usbip: fix stub_rx: get_pipe() to validate endpoint number
28ef9653c185 posix-timer: Properly check sigevent->sigev_notify
9fdfac74246e CIFS: zero sensitive data when freeing
833692a73539 cifs: Fix autonegotiate security settings mismatch
23dd6b8717fb cifs: Fix missing put_xid in cifs_file_strict_mmap
796ab952d504 ipv4: Map neigh lookup keys in __ipv4_neigh_lookup_noref()
99a223bcec50 KEYS: encrypted: fix buffer overread in valid_master_desc()
1b50c4e9e71a ARM: exynos_defconfig: Enable NFSv4 client
60a86dc31125 ARM: exynos_defconfig: Enable options to mount a rootfs via NFS
e25c5a37fcde tcp: release sk_frag.page in tcp_disconnect
0d8e72014eca r8169: fix RTL8168EP take too long to complete driver initialization.
cafbcd523a70 qlcnic: fix deadlock bug
ec1e18fda7c6 net: igmp: add a missing rcu locking section
6598ee1deb37 ip6mr: fix stale iterator
8cec497214a1 vhost_net: stop device during reset owner
cde3537bd109 Linux 3.18.94
9c194a6a8ac2 um: Fix out-of-tree build
e69660008e38 ASoC: pcm512x: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
28ae79a51842 spi: imx: do not access registers while clocks disabled
669d070536f3 selinux: general protection fault in sock_has_perm
fc6fd81a9e56 usb: uas: unconditionally bring back host after reset
512b79f1410f usb: f_fs: Prevent gadget unbind if it is already unbound
f180fa08aa47 USB: serial: simple: add Motorola Tetra driver
466d964b7a19 usbip: list: don't list devices attached to vhci_hcd
96ea4192d4f8 usbip: prevent bind loops on devices attached to vhci_hcd
464bab184792 USB: serial: io_edgeport: fix possible sleep-in-atomic
d1cfbc6e3364 CDC-ACM: apply quirk for card reader
0a5e1547d135 USB: cdc-acm: Do not log urb submission errors on disconnect
af5850d18ef6 USB: serial: pl2303: new device id for Chilitag
c478e3e8e93e staging: rtl8188eu: Fix incorrect response to SIOCGIWESSID
5becc7c07bcc usb: gadget: don't dereference g until after it has been null checked
aba82d11275a media: usbtv: add a new usbid
0bac8214c01f scsi: ufs: ufshcd: fix potential NULL pointer dereference in ufshcd_config_vreg
33e592e7a793 quota: Check for register_shrinker() failure.
d5b5f8b30aee net: ethernet: xilinx: Mark XILINX_LL_TEMAC broken on 64-bit
d395c1bb7f92 hwmon: (pmbus) Use 64bit math for DIRECT format values
07397e4f9b4d nfsd: check for use of the closed special stateid
1f71aa238fcd nfsd: CLOSE SHOULD return the invalid special stateid for NFSv4.x (x>0)
f2dc0da2c281 xen-netfront: remove warning when unloading module
577a0df9a63f KVM: VMX: Fix rflags cache during vCPU reset
f3ca475ce752 mac80211: fix the update of path metric for RANN frame
ed996209f020 bcache: check return value of register_shrinker
f0705804d8ee KVM: X86: Fix operand/address-size during instruction decoding
6ca9bcfea80d KVM: x86: Don't re-execute instruction when not passing CR2 value
c786c16d615a KVM: x86: emulator: Return to user-mode on L1 CPL=0 emulation failure
f7c2ce3d42bc igb: Free IRQs when device is hotplugged
d7e2fda23eb9 gpio: iop: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
6aab3aa52366 ALSA: seq: Make ioctls race-free
524a6efbd123 loop: fix concurrent lo_open/lo_release
b1cf5261fedb um: Remove copy&paste code from init.h
db72a03c34b5 um: Stop abusing __KERNEL__
f79ad9c84ff5 um: link vmlinux with -no-pie
33fd368597ad Input: do not emit unneeded EV_SYN when suspending
90aaf2f25609 Linux 3.18.93
7303968d5396 hrtimer: Reset hrtimer cpu base proper on CPU hotplug
6c16fa957e84 ipv4: Make neigh lookup keys for loopback/point-to-point devices be INADDR_ANY
fd3030090c8d ipv6: fix udpv6 sendmsg crash caused by too small MTU
98fcfb3f64a0 net: Allow neigh contructor functions ability to modify the primary_key
1414a1ede0ea vmxnet3: repair memory leak
e34d42ce65b5 sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
8009d86cc944 sctp: do not allow the v4 socket to bind a v4mapped v6 address
0e4c26c86060 pppoe: take ->needed_headroom of lower device into account on xmit
d8dee18861fb net: qdisc_pkt_len_init() should be more robust
eaf3179d6151 tcp: __tcp_hdrlen() helper
483217b88c63 net: igmp: fix source address check for IGMPv3 reports
607506a8e7b0 dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state
cf1a60fdfadc net: tcp: close sock if net namespace is exiting
8e292f88f756 x86/microcode/intel: Extend BDW late-loading further with LLC size check
933e32f87f6e eventpoll.h: add missing epoll event masks
bdc0646c91cd scsi: libiscsi: fix shifting of DID_REQUEUE host byte
efa42537beb6 fs/fcntl: f_setown, avoid undefined behaviour
1f31381a6cc0 reiserfs: don't preallocate blocks for extended attributes
9ff49848ab5f reiserfs: fix race in prealloc discard
115e3505bbd6 netfilter: xt_osf: Add missing permission checks
f4ba1d0e4366 netfilter: nfnetlink_cthelper: Add missing permission checks
f1a49458d9ef netfilter: nf_conntrack_sip: extend request line validation
64f94c222f63 netfilter: restart search if moved to other chain
38a8f8f7f6c6 netfilter: nf_ct_expect: remove the redundant slash when policy name is empty
4003d8b836ab ipc: msg, make msgrcv work with LONG_MIN
fee959e947ff hwpoison, memcg: forcibly uncharge LRU pages
3e0f334aaf1f mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack
7a3974ca1195 can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once
16d977e9bbf4 can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once
6b6f9e3d0044 usbip: Fix implicit fallthrough warning
7b9da19c2ec9 x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels
66b64a935853 MIPS: AR7: ensure the port type's FCR value is used
0e88a123df05 arm64: KVM: Fix SMCCC handling of unimplemented SMC/HVC calls
7ed7a1ce7e03 dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6
2da34a807ad1 dm btree: fix serious bug in btree_split_beneath()
e89b22a8b329 ARM: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7
40dfccf9bf37 phy: work around 'phys' references to usb-nop-xceiv devices
b70f4ccbc41d Input: twl4030-vibra - fix sibling-node lookup
5ada5b876313 Input: twl4030-vibra - fix ERROR: Bad of_node_put() warning
12d0592008fd Input: twl6040-vibra - fix child-node lookup
e9765832134f Input: twl6040-vibra - fix DT node memory management
a499bc7e0351 Input: 88pm860x-ts - fix child-node lookup
d3c49810dc8d pipe: avoid round_pipe_size() nr_pages overflow on 32-bit
cf1feaf5e555 af_key: fix buffer overread in parse_exthdrs()
60319ec10213 af_key: fix buffer overread in verify_address_len()
82ddf73182bb ALSA: hda - Apply the existing quirk to iMac 14,1
cdbebd4716bc ALSA: pcm: Remove yet superfluous WARN_ON()
ad211e59c683 futex: Prevent overflow by strengthen input validation
7cb4b6064217 scsi: sg: disable SET_FORCE_LOW_DMA
3758d94e9513 gcov: disable for COMPILE_TEST
a5d35deca214 Linux 3.18.92
55492dc6122f e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
7c07fbcb384f uas: ignore UAS for Norelsys NS1068(X) chips
e1ed1d1e0af5 Bluetooth: Prevent stack info leak from the EFS element.
6dc42f889217 staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
f54053fa8608 usbip: remove kernel addresses from usb device and urb debug msgs
0edffa0be830 USB: fix usbmon BUG trigger
a52b2f87f76c usb: misc: usb3503: make sure reset is low for at least 100us
8b3193a1f8d1 USB: serial: cp210x: add new device ID ELV ALC 8xxx
7c56a67fe757 USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ
e27472ac7ec9 Revert "can: kvaser_usb: free buf in error paths"
7f244e55cb71 target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK
879eea20fd6a iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref
44cd2c5e9144 x86/microcode/intel: Extend BDW late-loading with a revision check
4cefa6f752ab crypto: algapi - fix NULL dereference in crypto_remove_spawns()
540eac0e594e net: stmmac: enable EEE in MII, GMII or RGMII only
7247c48a9a13 sh_eth: fix SH7757 GEther initialization
7469b22a4216 sh_eth: fix TSU resource handling
3396f2bef5ed RDS: null pointer dereference in rds_atomic_free_op
a7b25c9f6ea9 RDS: Heap OOB write in rds_message_alloc_sgs()
0982b64e77d9 8021q: fix a memory leak for VLAN 0 device
a74040812453 x86/acpi: Reduce code duplication in mp_override_legacy_irq()
48c270963471 ALSA: aloop: Fix racy hw constraints adjustment
1720189b6d20 ALSA: aloop: Fix inconsistent format due to incomplete rule
5517ed304acd ALSA: aloop: Release cable upon open error path
cb8ee4961860 ALSA: pcm: Allow aborting mutex lock at OSS read/write loops
220d72342a80 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
fbff9ddad427 ALSA: pcm: Add missing error checks in OSS emulation plugin builder
f8c035f6db23 ALSA: pcm: Remove incorrect snd_BUG_ON() usages
ae62a913c1c8 x86/acpi: Handle SCI interrupts above legacy space gracefully
17e27ff45ed9 kvm: vmx: Scrub hardware GPRs at VM-exit
2f9cf5cd5580 perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
c3b291e7fb8d MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET
1eaff733141a MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses
0cc4b3b0bb37 MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA
fd8a39fd186e MIPS: Consistently handle buffer counter with PTRACE_SETREGSET
80aaed846ef9 MIPS: Guard against any partial write attempt with PTRACE_SETREGSET
0313868ccbc3 MIPS: Factor out NT_PRFPREG regset access helpers
a314ae1825b7 IB/srpt: Disable RDMA access by the initiator
ce9c95f1f30a can: gs_usb: fix return value of the "set_bittiming" callback
2431a63ebd0f Input: elantech - add new icbody type 15
946519d82067 kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
64c64936d42b kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from !sig_kernel_only() signals
8deeda774d94 kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL
8881d834c333 fscache: Fix the default for fscache_maybe_release_page()
381d85f6ab95 crypto: n2 - cure use after free
7bf407cadd10 kernel/acct.c: fix the acct->needcheck check in check_free_space()
788ccf7552c8 Linux 3.18.91
95a9e2bf54b8 n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
6b3d91d5b507 usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201
2a8c1cf8f57b usb: add RESET_RESUME for ELSA MicroLink 56K
98372ee1e8d0 usb: Add device quirk for Logitech HD Pro Webcam C925e
07f841060653 USB: serial: option: add support for Telit ME910 PID 0x1101
000c7141a1fe net: ipv4: fix for a race condition in raw_sendmsg
986444eaddc5 sctp: Replace use of sockets_allocated with specified macro.
a11d92b0779d net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case
13550e44cf62 tg3: Fix rx hang on MTU change with 5717/5719
f07f65cdff98 tcp md5sig: Use skb's saddr when replying to an incoming segment
c0311793a848 net: qmi_wwan: add Sierra EM7565 1199:9091
5594e3eba3ee netlink: Add netns check on taps
70d931c38016 net: igmp: Use correct source address on IGMPv3 reports
ee26de88cb43 ipv6: mcast: better catch silly mtu values
c8b5bd50bfad ipv4: igmp: guard against silly MTU values
20a0462fffaf kbuild: add '-fno-stack-check' to kernel build options
c8d7e04ac14c ASoC: twl4030: fix child-node lookup
5beacbc73691 ring-buffer: Mask out the info bits when returning buffer page length
42c1b3e6f205 tracing: Fix crash when it fails to alloc ring buffer
f9e16c238bd6 tracing: Fix possible double free on failure of allocating trace buffer
973b645673b6 tracing: Remove extra zeroing out of the ring buffer page
d0473d5cca66 net: mvneta: clear interface link status on port disable
b907723a77bd powerpc/perf: Dereference BHRB entries safely
02952cd43e16 KVM: X86: Fix load RFLAGS w/o the fixed bit
96a44e59c94d parisc: Hide Diva-built-in serial aux and graphics card
59a2e05a53a6 PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()
f11d60dc210f ALSA: usb-audio: Fix the missing ctl name suffix at parsing SU
db66b2dc2c8b ALSA: rawmidi: Avoid racy info ioctl via ctl device
8651a4705a0a mfd: twl6040: Fix child-node lookup
d3cc4822354d mfd: twl4030-audio: Fix sibling-node lookup
19ddbcf647c7 crypto: mcryptd - protect the per-CPU queue with a lock
4aee80b3d1c9 ACPI: APEI / ERST: Fix missing error handling in erst_reader()
8da23652fa43 Linux 3.18.90
510f29192b55 fm10k: ensure we process SM mbx when processing VF mbx
a6af431eb789 scsi: lpfc: PLOGI failures during NPIV testing
6ea3e1c5114c scsi: lpfc: Fix secure firmware updates
ca6f17da0b13 PCI/AER: Report non-fatal errors only to the affected endpoint
6d117334cea2 igb: check memory allocation failure
9e2dfe98004a PCI: Create SR-IOV virtfn/physfn links before attaching driver
98c3d06cbff5 scsi: cxgb4i: fix Tx skb leak
ac8283db32cb PCI: Avoid bus reset if bridge itself is broken
8a58da6d17db net: phy: at803x: Change error to EINVAL for invalid MAC
4d3444fe2656 crypto: crypto4xx - increase context and scatter ring buffer elements
8e31e3e457c1 backlight: pwm_bl: Fix overflow condition
6a6c5199570a cpuidle: powernv: Pass correct drv->cpumask for registration
c1c9ad2e8f25 ARM: dma-mapping: disallow dma_get_sgtable() for non-kernel managed memory
f7ce6712521e xhci: plat: Register shutdown for xhci_plat
98482e926f7e isdn: kcapi: avoid uninitialized data
d8f3c88f1ff7 ARM: dts: am335x-evmsk: adjust mmc2 param to allow suspend
4c8bc54b2d41 netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register
6237e86d4d28 netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
cba690fe68c6 irda: vlsi_ir: fix check for DMA mapping errors
7570a653051a i40e: Do not enable NAPI on q_vectors that have no rings
cec966b21ae7 net: Do not allow negative values for busy_read and busy_poll sysctl interfaces
5e694f6fca10 s390/qeth: no ETH header for outbound AF_IUCV
de34e1a4d3e1 HID: xinmo: fix for out of range for THT 2P arcade controller.
a21b0e491956 hwmon: (asus_atk0110) fix uninitialized data access
7593d5f9c7eb ARM: dts: ti: fix PCI bus dtc warnings
06afa2da5165 KVM: x86: correct async page present tracepoint
3835e2fc38b4 scsi: lpfc: Fix PT2PT PRLI reject
e3298dc00fc4 netfilter: nfnl_cthelper: Fix memory leak
09bb6f008d02 netfilter: nfnl_cthelper: fix runtime expectation policy updates
cc77cb865cfe usb: gadget: udc: remove pointer dereference after free
af2dec74ed46 usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed
9829550de5aa net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4
6957a306cb57 crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex
40ce0aa9a77e r8152: fix the list rx_done may be used without initialization
9577b6c79531 cpuidle: Validate cpu_dev in cpuidle_add_sysfs()
1c21f19a9d56 ALSA: hda - add support for docking station for HP 820 G2
90960ab9f182 arm64: Initialise high_memory global variable earlier
1e6e21c74c7c Linux 3.18.89
29d2c6506bc3 usb: musb: da8xx: fix babble condition handling
07aa0bc0072e ath9k: fix tx99 potential info leak
2d7c1288825f macvlan: Only deliver one copy of the frame to the macvlan interface
58617c76ed62 udf: Avoid overflow when session starts at large offset
cae8f2343a45 scsi: bfa: integer overflow in debugfs
47e43e619077 scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry
57886e81b8bb raid5: Set R5_Expanded on parity devices as well as data.
9df8ffc3035a pinctrl: adi2: Fix Kconfig build problem
ba3e1b3553c5 tty fix oops when rmmod 8250
a36596b1ac58 PCI: Detach driver before procfs & sysfs teardown on device remove
a5045f7d1077 xfs: fix log block underflow during recovery cycle verification
d4ec687b9721 bcache: fix wrong cache_misses statistics
5df0ce4b14be bcache: explicitly destroy mutex while exiting
00dd6166c197 GFS2: Take inode off order_write list when setting jdata flag
9aa8bbc15ab1 thermal/drivers/step_wise: Fix temperature regulation misbehavior
4c1eff22ffb3 ppp: Destroy the mutex when cleanup
069848c7547b clk: tegra: Fix cclk_lp divisor register
340a510c65d9 mm: Handle 0 flags in _calc_vm_trans() macro
5ae69f4575f0 arm-ccn: perf: Prevent module unload while PMU is in use
8948ed2f5fe4 target/file: Do not return error for UNMAP if length is zero
e6da104cbddc target:fix condition return in core_pr_dump_initiator_port()
75d2d7e7906c iscsi-target: fix memory leak in lio_target_tiqn_addtpg()
8867d3f1bb32 target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()
55bae20a7382 powerpc/ipic: Fix status get and status clear
b1a66b1947e5 powerpc/opal: Fix EBUSY bug in acquiring tokens
b4c9f0c12835 powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo
0e8096628d11 PCI/PME: Handle invalid data when reading Root Status
044cc5ec17d9 video: fbdev: au1200fb: Return an error code if a memory allocation fails
16793c323d16 video: fbdev: au1200fb: Release some resources if a memory allocation fails
9a907ea5f7db video: udlfb: Fix read EDID timeout
b3146dbdd20d fbdev: controlfb: Add missing modes to fix out of bounds access
d523df492e12 target: Use system workqueue for ALUA transitions
f23c756da698 btrfs: add missing memset while reading compressed inline extents
7480adadb8ba NFSv4.1 respect server's max size in CREATE_SESSION
1062f3998ecb perf symbols: Fix symbols__fixup_end heuristic for corner cases
dea197784167 afs: Fix afs_kill_pages()
b1718fdda0f2 afs: Fix page leak in afs_write_begin()
b422c709f72b afs: Populate and use client modification time
916426b19350 afs: Fix the maths in afs_fs_store_data()
14a74dccf0f3 afs: Flush outstanding writes when an fd is closed
24a7a4f0f8dd afs: Adjust mode bits processing
15fbd461977a afs: Populate group ID from vnode status
28cd05a2efe2 afs: Fix missing put_page()
1e7f83cd53fe drm/radeon: reinstate oland workaround for sclk
8a0c5968d934 sched/deadline: Use deadline instead of period when calculating overflow
6bcc81fd8f24 drm/radeon/si: add dpm quirk for Oland
6debc3f440ad openrisc: fix issue handling 8 byte get_user calls
8111e1b213c4 net: Resend IGMP memberships upon peer notification.
1f08ebd8815e dmaengine: Fix array index out of bounds warning in __get_unmap_pool()
78dbf84bec78 net: wimax/i2400m: fix NULL-deref at probe
97a63f608dd5 Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list
c1ecb5aba022 NFSD: fix nfsd_reset_versions for NFSv4.
537546e6e440 NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)
f73422f3a6e8 net: bcmgenet: Power up the internal PHY before probing the MII
1a34a1137f76 net: bcmgenet: correct MIB access of UniMAC RUNT counters
bbfc83efb91c net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values
b5ed9b970a89 usb: phy: isp1301: Add OF device ID table
406e7e045fb8 mac80211: Fix addition of mesh configuration element
337cde8f5417 KEYS: Don't permit request_key() to construct a new keyring
bd154dc611b3 Don't leak a key reference if request_key() tries to use a revoked keyring
66d63dc137c9 ext4: fix crash when a directory's i_size is too small
d5ba16a80d96 xhci: Don't add a virt_dev to the devs array before it's fully allocated
f749066bec40 usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer
dd3ad5f60d52 USB: core: prevent malicious bNumInterfaces overflow
a342e5368eea USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID
5bcc2f7c8d3f autofs: fix careless error in recent commit
ebd52f8b6422 crypto: salsa20 - fix blkcipher_walk API usage
252b343a9789 crypto: hmac - require that the underlying hash algorithm is unkeyed
e6318e33ba94 Linux 3.18.88
3130d5160d78 usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
8492c95e430d arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
db23d45956bc audit: ensure that 'audit=1' actually enables audit for PID 1
bf24f2225c69 afs: Connect up the CB.ProbeUuid
4adf3c3c6323 IB/mlx5: Assign send CQ and recv CQ of UMR QP
2db29fb2d249 IB/mlx4: Increase maximal message size under UD QP
63ec9868ebe3 xfrm: Copy policy family in clone_policy
d22443f3dfee atm: horizon: Fix irq release error
5faa4be6f9b4 sctp: use the right sk after waking up from wait_buf sleep
e899383e43fe sctp: do not free asoc when it is already dead in sctp_sendmsg
fdea3b85d3a0 sparc64/mm: set fields in deferred pages
fa54e27792a8 sunrpc: Fix rpc_task_begin trace point
7e8df53aae06 NFS: Fix a typo in nfs_rename()
b9a72f359bef dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0
129287d4bb82 lib/genalloc.c: make the avail variable an atomic_long_t
9d834e290d02 route: update fnhe_expires for redirect when the fnhe exists
cf6924916a76 route: also update fnhe_genid when updating a route cache
326e406375da EDAC, i5000, i5400: Fix definition of NRECMEMB register
e78fac22bac1 EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
8364904c1045 axonram: Fix gendisk handling
5f5c998f31ab i2c: riic: fix restart condition
3d9f055c6995 crypto: s5p-sss - Fix completing crypto request in IRQ handler
c1351ce0b721 ipv6: reorder icmpv6_init() and ip6_mr_init()
fc4281753409 bnx2x: fix possible overrun of VFPF multicast addresses array
b263f04c208f spi_ks8995: fix "BUG: key accdaa28 not in .data!"
0faf52395fa2 arm: KVM: Survive unknown traps from guests
ab8447147ba0 KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
28657a1ae900 irqchip/crossbar: Fix incorrect type of register size
0cee435dc74d scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
3366c0d324f0 workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
8b79fa3b43e1 libata: drop WARN from protocol error in ata_sff_qc_issue()
4c09b39cd993 USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
3e9291731291 usb: gadget: configs: plug memory leak
99dcb707178e selftest/powerpc: Fix false failures for skipped tests
ab1d27b51272 Revert "s390/kbuild: enable modversions for symbols exported from asm"
ba44cfc88fa1 Revert "drm/armada: Fix compile fail"
18f0f8c1e866 net/packet: fix a race in packet_bind() and packet_notifier()
a3581a1b179f sit: update frag_off info
6d40c9bf5733 rds: Fix NULL pointer dereference in __rds_rdma_map
a8779c22fdd5 arm64: fpsimd: Prevent registers leaking from dead tasks
7389171fdc59 KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
140db397a144 arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
fc93b6293c41 media: dvb: i2c transfers over usb cannot be done from stack
620d5e915ec5 kdb: Fix handling of kallsyms_symbol_next() return value
8edcd25ef69f iommu/vt-d: Fix scatterlist offset handling
7a3638bbec14 ALSA: usb-audio: Add check return value for usb_string()
13de9b240ad9 ALSA: usb-audio: Fix out-of-bound error
a94c6d0bb9e0 ALSA: seq: Remove spurious WARN_ON() at timer check
14416b2c878b ALSA: pcm: prevent UAF in snd_pcm_info
346178f1aa5e x86/PCI: Make broadcom_postcore_init() check acpi_disabled
529614feec56 X.509: reject invalid BIT STRING for subjectPublicKey
228014b20bd8 KEYS: add missing permission check for request_key() destination
602a1c77f9f3 ASN.1: check for error from ASN1_OP_END__ACT actions
25ea12ec0370 efi: Move some sysfs files to be read-only by root
898fe40c6b72 isa: Prevent NULL dereference in isa_bus driver callbacks
843bf4aa1aad hv: kvp: Avoid reading past allocated blocks from KVP file
08fa6f2e23c5 virtio: release virtio index when fail to device_register
7983427599c4 can: usb_8dev: cancel urb on -EPIPE and -EPROTO
c0c6369d0f91 can: esd_usb2: cancel urb on -EPIPE and -EPROTO
2d2ac259c9a0 can: ems_usb: cancel urb on -EPIPE and -EPROTO
bead22ffc679 can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
29017a8bc720 can: kvaser_usb: ratelimit errors if incomplete messages are received
dc16a4dee968 can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
70d9dccf5015 can: kvaser_usb: free buf in error paths
2179863ede7c Linux 3.18.87
5b45ab61a856 usb: host: fix incorrect updating of offset
c051e2d3d8e8 USB: usbfs: Filter flags passed in from user space
a98161fdd244 USB: devio: Prevent integer overflow in proc_do_submiturb()
b8a9e8d2c808 USB: Increase usbfs transfer limit
9906ad70c51c usb: hub: Cycle HUB power when initialization fails
01d9d14f89e4 serial: 8250_pci: Add Amazon PCI serial device ID
e1ed329f60f6 usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub
94eeab3e1d01 uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices
d51a980a9677 ima: fix hash algorithm initialization
ce48aa52f90f net: fec: fix multicast filtering hardware setup
ccf653b185f9 mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers
42c53dc2ca8c tipc: fix cleanup at module unload
7c3f696de8d1 net: sctp: fix array overrun read on sctp_timer_tbl
741a5969398f NFSv4: Fix client recovery when server reboots multiple times
351f504358fc net/appletalk: Fix kernel memory disclosure
ae8e8f2b0f5f vti6: fix device register to report IFLA_INFO_KIND
2be09ca3fe9c ARM: OMAP1: DMA: Correct the number of logical channels
462b3549034f perf test attr: Fix ignored test case result
079e07453a78 sysrq : fix Show Regs call trace on ARM
4b72e3bb6bb1 EDAC, sb_edac: Fix missing break in switch
e95cdfbe08b7 spi: sh-msiof: Fix DMA transfer size check
826b2a0b10bf serial: 8250_fintek: Fix rs485 disablement on invalid ioctl()
fa541bf05f17 bcache: recover data from backing when data is clean
aa129cb1754d bcache: only permit to recovery read error when cache device is clean
1d2acf22c253 Linux 3.18.86
9742589ef2dd drm/i915: Prevent zero length "index" write
b858baba6773 drm/i915: Don't try indexed reads to alternate slave addresses
9ea40d143494 NFS: revalidate "." etc correctly on "open".
72427ea588e3 drm/panel: simple: Add missing panel_simple_unprepare() calls
165a3c7d786e eeprom: at24: check at24_read/write arguments
092b0115002b KVM: x86: inject exceptions produced by x86_decode_insn
ccabc053d5b8 KVM: x86: Exit to user-mode on #UD intercept when emulator requires
ab1f0096ab28 btrfs: clear space cache inode generation always
d5ec57c35ac4 mm/madvise.c: fix madvise() infinite loop under special circumstances
8b37803c5fc0 mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()
8586e1841344 ipsec: Fix aborted xfrm policy dump crash
142afbc6b2f3 netlink: add a start callback for starting a netlink dump
b42518053ffd Linux 3.18.85
d412e6b098fb xen: xenbus driver must not accept invalid transaction ids
3241a972aeec s390/kbuild: enable modversions for symbols exported from asm
d3e2563be927 ASoC: wm_adsp: Don't overrun firmware file buffer when reading region data
a387098fe030 btrfs: return the actual error value from from btrfs_uuid_tree_iterate
e72ebbefe1b2 netfilter: nf_tables: fix oob access
f243d9f3f4a0 netfilter: nft_queue: use raw_smp_processor_id()
efaa1a4a7250 staging: iio: cdc: fix improper return value
1171ebb0693c mac80211: Suppress NEW_PEER_CANDIDATE event if no room
9d825502c393 mac80211: Remove invalid flag operations in mesh TSF synchronization
ed3203658694 ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
d67ddde8a8dc drm/armada: Fix compile fail
aecff719d3ca net: 3com: typhoon: typhoon_init_one: fix incorrect return values
cbbe150dd940 net: 3com: typhoon: typhoon_init_one: make return values more specific
09101462f7b7 PCI: Apply _HPX settings only to relevant devices
952835ccd917 RDS: RDMA: return appropriate error on rdma map failures
53801d8f9ff2 e1000e: Separate signaling for link check/link up
c493ba2db0f2 e1000e: Fix return value test
239f6bb7dfd6 e1000e: Fix error path in link detection
6812311cfbeb iio: iio-trig-periodic-rtc: Free trigger resource correctly
88c17527a118 USB: fix buffer overflows with parsing CDC headers
e0d73be54e8c mtd: nand: Fix writing mtdoops to nand flash.
2bbd69104fe1 net/9p: Switch to wait_event_killable()
49fd514f5351 media: v4l2-ctrl: Fix flags field on Control events
0cbab0776bd7 media: rc: check for integer overflow
d4674227f40f media: Don't do DMA on stack for firmware upload in the AS102 driver
b91c86022411 powerpc/signal: Properly handle return value from uprobe_deny_signal()
c7ac1d7390e9 parisc: Fix validity check of pointer size argument in new CAS implementation
ebfaa7529584 ixgbe: Fix skb list corruption on Power systems
049cd7e4029b fm10k: Use smp_rmb rather than read_barrier_depends
777ee59c6960 i40evf: Use smp_rmb rather than read_barrier_depends
bc0a7c84883c ixgbevf: Use smp_rmb rather than read_barrier_depends
4fc9c3c79847 igbvf: Use smp_rmb rather than read_barrier_depends
5f068a663476 igb: Use smp_rmb rather than read_barrier_depends
f4e3b96ba8ba i40e: Use smp_rmb rather than read_barrier_depends
7a615c8566d7 time: Always make sure wall_to_monotonic isn't positive
b880bebed0d5 NFC: fix device-allocation error return
d7c44dae8d8c IB/srpt: Do not accept invalid initiator port names
9b4080c28dab clk: ti: dra7-atl-clock: fix child-node lookups
26b3a4046639 clk: ti: dra7-atl-clock: Fix of_node reference counting
5f8a3df04772 KVM: SVM: obey guest PAT
27cd63fee696 KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
eeb6715ffb90 iscsi-target: Fix non-immediate TMR reference leak
e4820a86b26e fs/9p: Compare qid.path in v9fs_test_inode
9f8eafa18a28 ALSA: timer: Remove kernel warning at compat ioctl error paths
2033ec9cc479 ALSA: usb-audio: Add sanity checks in v2 clock parsers
d1db6f6a2ccb ALSA: usb-audio: Fix potential out-of-bound access at parsing SU
7940c950ca94 ALSA: usb-audio: Add sanity checks to FE parser
9b3f0217e0b7 ext4: fix interaction between i_size, fallocate, and delalloc after a crash
6b9f616effa8 nfsd: deal with revoked delegations appropriately
c3014cd85e7a nfs: Fix ugly referral attributes
982a47b3ba76 NFS: Fix typo in nomigration mount option
491e4e3b1270 isofs: fix timestamps beyond 2027
001cefee48af bcache: check ca->alloc_thread initialized before wake up it
1f0e79c6f523 eCryptfs: use after free in ecryptfs_release_messaging()
e69699d4c6fc nilfs2: fix race condition that causes file system corruption
76b2a7f24267 autofs: don't fail mount for transient error
a170fea94397 MIPS: BCM47XX: Fix LED inversion for WRT54GSv1
778934f5837b MIPS: Fix an n32 core file generation regset support regression
84cc7b5d26c1 dm: fix race between dm_get_from_kobject() and __dm_destroy()
853d2670b8b6 dm bufio: fix integer overflow when limiting maximum cache size
b0464fa2a31c ALSA: hda: Add Raven PCI ID
f4f6d52542aa ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
a63a5859bc4a x86/decoder: Add new TEST instruction pattern
03a2209fe340 lib/mpi: call cond_resched() from mpi_powm() loop
1c3a4e61b11d sched: Make resched_cpu() unconditional
7982b5eddf5c ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER
45cc2b6efc84 s390/disassembler: increase show_code buffer size
7166ceea0a4e Linux 3.18.84
d73b3941f58e coda: fix 'kernel memory exposure attempt' in fsync
2722def0f527 ipmi: fix unsigned long underflow
f72e2ba19765 ocfs2: should wait dio before inode lock in ocfs2_setattr()
72df596704b8 ima: do not update security.ima if appraisal status is not INTEGRITY_PASS
28343f8b19c4 vlan: fix a use-after-free in vlan_device_event()
5c44a51d67e9 af_netlink: ensure that NLMSG_DONE never fails in dumps
e823c9037187 fealnx: Fix building error on MIPS
39c3fff9ef51 sctp: do not peel off an assoc from one netns to another one
5b2af5fff8fa netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed
475b9905b0c0 tcp: do not mangle skb->cb[] in tcp_make_synack()
b4b4a3b633cb net/sctp: Always set scope_id in sctp_inet6_skb_msgname
3f45934ed0bd ipv6/dccp: do not inherit ipv6_mc_list from parent
c35c375efa4e Linux 3.18.83
6d7a134fe3c2 USB: serial: garmin_gps: fix memory leak on probe errors
50cc53140018 USB: serial: garmin_gps: fix I/O after failed probe and remove
c0d6a6f83281 USB: serial: garmin_gps: fix memory leak on failed URB submit
a23a605121c2 USB: serial: qcserial: add pid/vid for Sierra Wireless EM7355 fw update
cbe3cdcf641b USB: Add delay-init quirk for Corsair K70 LUX keyboards
6a5d14427975 USB: usbfs: compute urb->actual_length for isochronous
8cf8ebdce459 uapi: fix linux/rds.h userspace compilation errors
12c50a1f5746 uapi: fix linux/rds.h userspace compilation error
fb75ce8dc581 Revert "uapi: fix linux/rds.h userspace compilation errors"
83c47200d062 Revert "crypto: xts - Add ECB dependency"
8a8eca870ee7 MIPS: Netlogic: Exclude netlogic,xlp-pic code from XLR builds
d7cad58e010f MIPS: init: Ensure reserved memory regions are not added to bootmem
623c6108c80d MIPS: End asm function prologue macros with .insn
96f99bb96d9d ixgbe: handle close/suspend race with netif_device_detach/present
e0c60f541839 ixgbe: fix AER error handling
31308442a25c gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap
c141816f7288 backlight: adp5520: Fix error handling in adp5520_bl_probe()
7f213c377aaf backlight: lcd: Fix race condition during register
637661fadb01 ALSA: vx: Fix possible transfer overflow
ad550021c292 ALSA: vx: Don't try to update capture stream before running
e7fc5d22fae5 scsi: lpfc: Correct issue leading to oops during link reset
c0e8131e652c scsi: lpfc: Correct host name in symbolic_name field
ee4961b9093f scsi: lpfc: FCoE VPort enable-disable does not bring up the VPort
70e2afb4c9d9 scsi: lpfc: Add missing memory barrier
d3750dd19128 staging: rtl8188eu: fix incorrect ERROR tags from logs
170c8c366ad4 igb: Fix hw_dbg logging in igb_update_flash_i210
3d208b5adcf3 igb: close/suspend race in netif_device_detach
c5536a15a696 igb: reset the PHY before reading the PHY ID
7d881e89d38c drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache
45dce99ab816 ata: SATA_MV should depend on HAS_DMA
88b9e58302cf ata: SATA_HIGHBANK should depend on HAS_DMA
674c5db9b8fc ata: ATA_BMDMA should depend on HAS_DMA
1fde17419845 ARM: dts: Fix omap3 off mode pull defines
daa36dd42767 ARM: OMAP2+: Fix init for multiple quirks for the same SoC
d487af849acc extcon: palmas: Check the parent instance to prevent the NULL
4273d0752535 iscsi-target: Fix iscsi_np reset hung task during parallel delete
49fc34138b88 media: dib0700: fix invalid dvb_detach argument
b02dac504efc media: imon: Fix null-ptr-deref in imon_probe
2f95dcc30a11 Linux 3.18.82
bc88a575f203 target/iscsi: Fix iSCSI task reassignment handling
86fa24082f80 security/keys: add CONFIG_KEYS_COMPAT to Kconfig
eb36c7de3dc1 ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err
53380d17dfa8 ipip: only increase err_count for some certain type icmp in ipip_err
6e69760c8c44 ipv6: flowlabel: do not leave opt->tot_len with garbage
e9a09040718d sctp: reset owner sk for data chunks on out queues when migrating a sock
0e14c4680810 tun: allow positive return values on dev_get_valid_name() call
5c39875a93d6 net/unix: don't show information about sockets from other namespaces
698b423e409f sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect
638c8339e05e tun: call dev_get_valid_name() before register_netdevice()
a5bec3f163ee l2tp: check ps->sock before running pppol2tp_session_ioctl()
54bcfd5d7152 tcp: fix tcp_mtu_probe() vs highest_sack
5b0a3512492f tun/tap: sanitize TUNSETSNDBUF input
84ea7fc42294 Revert "ARM: dts: imx53-qsb-common: fix FEC pinmux config"
c0f26c8f0562 Input: ims-psu - check if CDC union descriptor is sane
32530efaed51 usb: usbtest: fix NULL pointer dereference
241d7ab10370 mac80211: don't compare TKIP TX MIC key in reinstall prevention
32025b5c5860 mac80211: use constant time comparison with keys
6891c6fd2a50 mac80211: accept key reinstall without changing anything
41f612ae707e Revert "ceph: unlock dangling spinlock in try_flush_caps()"
37cdf969145f Linux 3.18.81
76bb85f25229 x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context
a69b239eb1f3 can: c_can: don't indicate triple sampling support for D_CAN
e242b094d3b3 rbd: use GFP_NOIO for parent stat and data requests
30651596c4b0 MIPS: AR7: Ensure that serial ports are properly set up
66bf9d410964 MIPS: Fix CM region target definitions
a1b7688279b9 MIPS: microMIPS: Fix incorrect mask in insn_table_MM
174d20a4a01f ALSA: seq: Avoid invalid lockdep class warning
2a5c83f5bab1 ALSA: seq: Fix OSS sysex delivery in OSS emulation
1530d28a893e ARM: 8720/1: ensure dump_instr() checks addr_limit
1f166fb65e89 KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
cb870a365af4 crypto: x86/sha1-mb - fix panic due to unaligned access
c64cc4117fec KEYS: trusted: fix writing past end of buffer in trusted_read()
cdd1a3fd76d5 KEYS: trusted: sanitize all key material
76fc35d849a1 IB/ipoib: Change list_del to list_del_init in the tx object
a20ddebf8eaa Input: mpr121 - set missing event capability
a25320c7f317 Input: mpr121 - handle multiple bits change of status register
9d913538108b IPsec: do not ignore crypto err in ah4 input
3bd646aed682 usb: hcd: initialize hcd->flags to 0 when rm hcd
7d699b09bc99 serial: sh-sci: Fix register offsets for the IRDA serial port
34ed694c9281 phy: increase size of MII_BUS_ID_SIZE and bus_id
815b4687d317 dt-bindings: Add vendor prefix for LEGO
2ae575c1b42b dt-bindings: Add LEGO MINDSTORMS EV3 compatible specification
2febf192ed4b iio: trigger: free trigger resource correctly
2c2a08631aea ARM: omap2plus_defconfig: Fix probe errors on UARTs 5 and 6
dddb90d818a5 drm: drm_minor_register(): Clean up debugfs on failure
2eb85ef18c65 ARM: dts: imx53-qsb-common: fix FEC pinmux config
990f27cc79f3 xen/netback: set default upper limit of tx/rx queues to 8
170783f94e80 video: fbdev: pmag-ba-fb: Remove bad `__init' annotation
943dc0b3ef9f Linux 3.18.80
f772276045d8 staging: r8712u: Fix Sparse warning in rtl871x_xmit.c
ed7d79ee9e5e xen: don't print error message in case of missing Xenstore entry
e24061ae703d bt8xx: fix memory leak
dd795459b42d s390/dasd: check for device error pointer within state change interrupts
4220879c089e staging: lustre: ptlrpc: skip lock if export failed
4e3492219704 staging: lustre: hsm: stack overrun in hai_dump_data_field
ffe4638c9609 platform/x86: intel_mid_thermal: Fix module autoload
5a2f613a97d9 xen/manage: correct return value check on xenbus_scanf()
e79412f61f0e cx231xx: Fix I2C on Internal Master 3 Bus
4d941aa300bf i2c: riic: correctly finish transfers
52f145db2870 ext4: do not use stripe_width if it is not set
f59fbdd36216 ext4: fix stripe-unaligned allocations
2c9c8c7a4499 staging: rtl8712u: Fix endian settings for structs describing network packets
8c0ddbd6ae04 mmc: s3cmci: include linux/interrupt.h for tasklet_struct
6c3c4c7373de x86/microcode/intel: Disable late loading on model 79
77336ca65ccf drm/msm: fix an integer overflow test
f449835963f4 drm/msm: Fix potential buffer overflow issue
163e8355bbe9 ocfs2: fstrim: Fix start offset of first cluster group during fstrim
e03cbe4026a4 ARM: 8715/1: add a private asm/unaligned.h
5814e7754a0a arm64: ensure __dump_instr() checks addr_limit
211b1914f59a ASoC: adau17x1: Workaround for noise bug in ADC
ef2518bac630 KEYS: fix out-of-bounds read during ASN.1 parsing
bcb91ec291c1 KEYS: return full count in keyring_read() if buffer is too small
e5c2a548f826 cifs: check MaxPathNameComponentLength != 0 before using it
e2943f47605b ALSA: seq: Fix nested rwsem annotation for lockdep splat
856849bd48ee ALSA: timer: Add missing mutex lock for compat ioctls
b6885d31d1c6 blk-mq: fix race between timeout and freeing request
4f823316dac3 Linux 3.18.79
5560a1cac111 ecryptfs: fix dereference of NULL user_key_payload
56621bc7d28c can: kvaser_usb: Correct return value in printout
7242605318a0 scsi: sg: Re-fix off by one in sg_fill_request_table()
16c847d66c10 scsi: zfcp: fix erp_action use-before-initialize in REC action trace
38dc93fa8402 assoc_array: Fix a buggy node-splitting case
9c73743447f2 Input: gtco - fix potential out-of-bound access
b7be20b0175f fuse: fix READDIRPLUS skipping an entry
458a78ab7eb1 spi: uapi: spidev: add missing ioctl header
aaa7d1a5d9f1 usb: xhci: Handle error condition in xhci_stop_device()
55d4aa12af57 ceph: unlock dangling spinlock in try_flush_caps()
b44ef85f9033 Linux 3.18.78
114dff8ef64e FS-Cache: fix dereference of NULL user_key_payload
38118617a584 af_packet: don't pass empty blocks for PACKET_V3
9a8835679e67 parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels
e967f7593831 parisc: Avoid trashing sr2 and sr3 in LWS code
9918b51157fd cls_api.c: Fix dumping of non-existing actions' stats.
98c4e5cae520 KEYS: don't let add_key() update an uninstantiated key
f6a2c3d4b0ce lib/digsig: fix dereference of NULL user_key_payload
400f063f4dbc KEYS: encrypted: fix dereference of NULL user_key_payload
20f5c5dc8381 bus: mbus: fix window size calculation for 4GB windows
c47889a4006e brcmsmac: make some local variables 'static const' to reduce stack size
d35801d437f5 i2c: ismt: Separate I2C block read from SMBus block read
e2c0ddbe64bd ALSA: hda: Remove superfluous '-' added by printk conversion
38b463456f98 ALSA: seq: Enable 'use' locking in all configurations
34b9ecf806f8 can: esd_usb2: Fix can_dlc value for received RTR, frames
405c43ceb0ae can: gs_usb: fix busy loop if no more TX context is available
e9aeba8003dc usb: hub: Allow reset retry for USB2 devices on connect bounce
6e500be96d0c usb: quirks: add quirk for WORLDE MINI MIDI keyboard
d3d493cf2567 usb: cdc_acm: Add quirk for Elatec TWN3
7238612a72e1 USB: serial: metro-usb: add MS7820 device id
7c1c88e160ed USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
d9fbd49c6dfa USB: devio: Revert "USB: devio: Don't corrupt user memory"
6f457819e834 Linux 3.18.77
3cde552980e9 Revert "tty: goldfish: Fix a parameter of a call to free_irq"
e524bfab417c target/iscsi: Fix unsolicited data seq_end_offset calculation
1405b8e763e6 uapi: fix linux/mroute6.h userspace compilation errors
d090846a538d uapi: fix linux/rds.h userspace compilation errors
ffc669a3af00 scsi: scsi_dh_emc: return success in clariion_std_inquiry()
b370a0378091 ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock
7cab72603623 crypto: xts - Add ECB dependency
bcd17067a231 net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs
2d9e4b59c8fa Btrfs: send, fix failure to rename top level inode due to name collision
21bf570719a5 iio: adc: xilinx: Fix error handling
9a5043741109 netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.
ef0423167be6 irqchip/crossbar: Fix incorrect type of local variables
5961adefd0f3 watchdog: kempld: fix gcc-4.3 build
981199076d96 locking/lockdep: Add nest_lock integrity test
4a8a916d932e Revert "bsg-lib: don't free job in bsg_prepare_job"
bc8a5a45208d net: Set sk_prot_creator when cloning sockets to the right proto
b0763909b453 packet: in packet_do_bind, test fanout with bind_lock held
5eaafe649af9 l2tp: fix race condition in l2tp_tunnel_delete
88db37f8e4de l2tp: Avoid schedule while atomic in exit_net
6132b4ff8fbd vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
ba554fc7dc2b isdn/i4l: fetch the ppp_write buffer in one shot
e4ffdf9ead59 packet: hold bind lock when rebinding to fanout hook
63692f8b33bd bpf/verifier: reject BPF_ALU64|BPF_END
db27397942aa sctp: potential read out of bounds in sctp_ulpevent_type_enabled()
1512129452b8 ext4: avoid deadlock when expanding inode size
9b7e3d75f8c3 drm/dp/mst: save vcpi with payloads
608c3080b009 x86/mm: Disable preemption during CR3 read+write
1e8e6b30d014 Linux 3.18.76
cbe4d8c077e7 Revert "usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write"
954e2ed41fec ALSA: seq: Fix missing NULL check at remove_events ioctl
8ae04f638496 USB: serial: console: fix use-after-free after failed setup
2d0ffe43f2b9 USB: serial: qcserial: add Dell DW5818, DW5819
740ffa11b45a USB: serial: option: add support for TP-Link LTE module
704e5f08e7af USB: serial: cp210x: add support for ELV TFD500
d7795bf6a9d8 fix unbalanced page refcounting in bio_map_user_iov
2159252e70e9 direct-io: Prevent NULL pointer access in submit_page_section
a2b295db33d4 usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options
c57f813cb880 ALSA: caiaq: Fix stray URB at probe error path
f12baf790258 ALSA: seq: Fix copy_from_user() call inside lock
035e6d0b5b19 ALSA: seq: Fix use-after-free at creating a port
9d263dba2528 ALSA: usb-audio: Kill stray URB at exiting
4207aada9b81 iommu/amd: Finish TLB flush in amd_iommu_unmap()
2b15a69dc20c usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet
e4a25d305457 KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
43c9d794871f crypto: shash - Fix zero-length shash ahash digest crash
f4cf5d75416a HID: usbhid: fix out-of-bounds bug
f74c7fb21ee5 CIFS: Reconnect expired SMB sessions
6d1c3f7ed291 ext4: in ext4_seek_{hole,data}, return -ENXIO for negative offsets
3e2bb7d281ed Linux 3.18.75
b7ff160a8ba4 ext4: fix fencepost in s_first_meta_bg validation
2ce649fdacd5 ext4: validate s_first_meta_bg at mount time
79012f0216a1 ext4: Don't clear SGID when inheriting ACLs
5ca606ad34f7 ext4: fix data corruption for mmap writes
7798893bcb2f fs/super.c: fix race between freeze_super() and thaw_super()
9d3562bbfd34 ext4: only call ext4_truncate when size <= isize
f5a35eb7a803 drm/i915/bios: ignore HDMI on port A
884d5129c355 HID: i2c-hid: allocate hid buffers for real worst case
389721fabce2 driver core: platform: Don't read past the end of "driver_override" buffer
e29b6128817a ALSA: usx2y: Suppress kernel warning at page allocation failures
c52be88a5d67 lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
fce8db2c2cbd uwb: ensure that endpoint is interrupt
4a8d50298909 uwb: properly check kthread_run return value
6fd03e48dc8a iio: adc: mcp320x: Fix oops on module unload
85a14a6de4f7 iio: ad7793: Fix the serial interface reset
e1087d24eff5 iio: core: Return error for failed read_reg
923f18a8aacd staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack.
440edb76708f iio: ad_sigma_delta: Implement a dedicated reset function
9a7370be51a4 xhci: fix finding correct bus_state structure for USB 3.1 hosts
0502bf54bd01 USB: fix out-of-bounds in usb_set_configuration
8c7124a5295a usb: Increase quirk delay for USB devices
8f0a7703ff9e USB: uas: fix bug in handling of alternate settings
d55567406fbd USB: devio: Don't corrupt user memory
36283d676804 USB: dummy-hcd: fix infinite-loop resubmission bug
f47d4026e5d7 USB: dummy-hcd: fix connection failures (wrong speed)
4b01fcab0516 usb: pci-quirks.c: Corrected timeout values used in handshake
ee44ff5445ae ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
be8077a03a27 usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction
98578949897f usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe
c57e55706abe usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives
59bf5c20792e USB: gadgetfs: fix copy_to_user while holding spinlock
c2b87de9b5bf USB: gadgetfs: Fix crash caused by inadequate synchronization
abb540b53976 usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write
ac0058305d83 Linux 3.18.74
703937f005ea mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
36c84b22ac8a crypto: algif_skcipher - Load TX SG list after waiting
9d5012da8b97 staging: nvec: remove duplicated const
9c4ae8f3e5f7 ttpci: address stringop overflow warning
0cd9a4647a23 ALSA: au88x0: avoid theoretical uninitialized access
e288325e93fb IB/qib: fix false-postive maybe-uninitialized warning
b8710e2d77f3 libata: transport: Remove circular dependency at free time
c9103723b7e4 xfs: remove kmem_zalloc_greedy
d0bd573a6543 md/raid10: submit bio directly to replacement disk
75a12b2fa80c rds: ib: add error handle
22126c602203 parisc: perf: Fix potential NULL pointer dereference
0a1b807cb2b6 netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
b05c24d64d4c exynos-gsc: Do not swap cb/cr for semi planar formats
c8cab6f202a1 netfilter: invoke synchronize_rcu after set the _hook_ to NULL
0fe19e5c6616 mmc: sdio: fix alignment issue in struct sdio_func
0ee6c8e78758 usb: plusb: Add support for PL-27A1
eafffc0aabc1 team: fix memory leaks
fbbb384f5208 net/packet: check length in getsockopt() called with PACKET_HDRLEN
1728786b2b59 net: core: Prevent from dereferencing null pointer when releasing SKB
4c963eff7d97 audit: log 32-bit socketcalls
40e63fb87a3f partitions/efi: Fix integer overflow in GPT size calculation
61e43da985aa USB: serial: mos7840: fix control-message error handling
920027fef719 USB: serial: mos7720: fix control-message error handling
7e4194e7e7f4 IB/ipoib: Replace list_del of the neigh->list with list_del_init
8d8a5bbc3976 IB/ipoib: rtnl_unlock can not come after free_netdev
6fc261c1e77d IB/ipoib: Fix deadlock over vlan_mutex
0961072120f3 tty: goldfish: Fix a parameter of a call to free_irq
8c28f3279141 ARM: 8635/1: nommu: allow enabling REMAP_VECTORS_TO_RAM
f905dad52252 hwmon: (gl520sm) Fix overflows and crash seen when writing into limit attributes
ff0377a98825 sh_eth: use correct name for ECMR_MPDE bit
9ff3b35e994d MIPS: Ensure bss section ends on a long-aligned address
23e5fd9c55ca RDS: RDMA: Fix the composite message user notification
523a387bb0c0 drm: bridge: add DT bindings for TI ths8135
ffc97d4dde1d Linux 3.18.73
376c6f62f8d4 fix xen_swiotlb_dma_mmap prototype
bc9f6868dfb5 swiotlb-xen: implement xen_swiotlb_dma_mmap callback
2d53f0b14066 video: fbdev: aty: do not leak uninitialized padding in clk to userspace
f23ec06d527c x86/fpu: Don't let userspace set bogus xcomp_bv
540125645c70 btrfs: prevent to set invalid default subvolid
0544aab81d35 PCI: Fix race condition with driver_override
6ad74630c016 kvm: nVMX: Don't allow L2 to access the hardware CR8
6528968794bc arm64: Make sure SPsel is always set
d9100405a20a bsg-lib: don't free job in bsg_prepare_job
65e3664fc608 nl80211: check for the required netlink attributes presence
9f119f5cc048 vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
64304f5ae2f3 SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
b3c1243ba1bc SMB: Validate negotiate (to protect against downgrade) even if signing off
b93becabbaf4 powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
6ea8051f42d9 KEYS: prevent KEYCTL_READ on negative key
e3b663ba2ddd KEYS: prevent creating a different user's keyrings
50f17a4b9141 KEYS: fix writing past end of user-supplied buffer in keyring_read()
2d9db72fb50e crypto: talitos - fix sha224
fec4cd33779f scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly
58061248504a tracing: Erase irqsoff trace with empty write
8923bf76c1ea tracing: Fix trace_pipe behavior for instance traces
9b9ce7484a5f KVM: PPC: Book3S: Fix race and leak in kvm_vm_ioctl_create_spapr_tce()
998173c7a119 mac80211: flush hw_roc_start work before cancelling the ROC
456bbdc86d18 cifs: release auth_key.response for reconnect.
0c317759e780 cifs: release cifs root_cred after exit_cifs
0e13335254d5 Linux 3.18.72
0aad447e99a0 bcache: fix bch_hprint crash and improve output
50aee960b0d1 bcache: fix for gc and write-back race
c04dc907e590 bcache: Correct return value for sysfs attach errors
0b312f81db41 bcache: correct cache_dirty_target in __update_writeback_rate()
615f8ab2ffcd bcache: Fix leak of bdev reference
cfa0386af092 bcache: initialize dirty stripes in flash_dev_run()
15ac0595018f media: uvcvideo: Prevent heap overflow when accessing mapped controls
6b3412ff9661 media: v4l2-compat-ioctl32: Fix timespec conversion
19b86cde5150 PCI: shpchp: Enable bridge bus mastering if MSI is enabled
13bbb8242ab2 ARC: Re-enable MMU upon Machine Check exception
88645cf3edc0 tracing: Apply trace_clock changes to instance max buffer
45a521cba610 ftrace: Fix selftest goto location on error
78d88643d218 scsi: qla2xxx: Fix an integer overflow in sysfs code
9793679d8dc9 scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
691e12db75fb scsi: sg: factor out sg_fill_request_table()
9f8cb7be5242 scsi: sg: off by one in sg_ioctl()
a19e985cac6d scsi: sg: use standard lists for sg_requests
53a5b214a406 scsi: sg: remove 'save_scat_len'
9f582840f9e5 scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
bb5d52954f27 scsi: zfcp: trace HBA FSF response by default on dismiss or timedout late response
2a30f9d54768 scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace records
277958c8e3c0 scsi: zfcp: fix missing trace records for early returns in TMF eh handlers
9799a4d5fc26 scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path
ad385a77e093 scsi: zfcp: fix queuecommand for scsi_eh commands when DIX enabled
2e41a42cf3d1 skd: Submit requests to firmware before triggering the doorbell
3070df32bfdf skd: Avoid that module unloading triggers a use-after-free
1074b91bdd4b md/bitmap: disable bitmap_resize for file-backed bitmaps.
617f119a64ce block: Relax a check in blk_start_queue()
87e47744e187 powerpc: Fix DAR reporting when alignment handler faults
ab1717dafd83 ext4: fix incorrect quotaoff if the quota feature is enabled
1d4ba7f963a9 crypto: AF_ALG - remove SGL terminator indicator when chaining
a6d09b8a6ee3 Input: i8042 - add Gigabyte P57 to the keyboard reset table
53c94358a14f ip6_gre: fix endianness errors in ip6gre_err
c8443922edb7 Revert "usb: musb: fix tx fifo flush handling again"
70768be91bcc f2fs: check hot_data for roll-forward recovery
4c97e1c4a67c ipv6: fix typo in fib6_net_exit()
fbca27ad2916 ipv6: fix memory leak with multiple tables during netns destruction
1722ca90e1b8 tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
39194a40eef5 Revert "net: phy: Correctly process PHY_HALTED in phy_stop_machine()"
fea532ea08ad qlge: avoid memcpy buffer overflow
51ef0b663c13 ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
60a8261b1257 Linux 3.18.71
b766f0849a52 xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
43d51814b7b3 ARM: 8692/1: mm: abort uaccess retries upon fatal signal
090aa4651522 Bluetooth: Properly check L2CAP config option output buffer length
bceac1033cd9 ALSA: msnd: Optimize / harden DSP and MIDI loops
8e7e643a6c6d locktorture: Fix potential memory leak with rw lock test
b66950d5233b btrfs: resume qgroup rescan on rw remount
19011e6ac194 scsi: sg: recheck MMAP_IO request length with lock held
57923c952ce8 scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
61b491f57cbd cs5536: add support for IDE controller variant
18f9ff5c8ad5 workqueue: Fix flag collision
e7023d138bb0 cma: fix calculation of aligned offset
fcd5675c40ab dlm: avoid double-free on error path in dlm_device_{register,unregister}
524386e8e90a Input: trackpoint - assume 3 buttons when buttons detection fails
2c97bb69c0d0 driver core: bus: Fix a potential double free
158333ad9be6 staging/rts5208: fix incorrect shift to extract upper nybble
d512a57678a6 USB: core: Avoid race of async_completed() w/ usbdev_release()
7d68769591b6 usb:xhci:Fix regression when ATI chipsets detected
f638d3131560 usb: Add device quirk for Logitech HD Pro Webcam C920-C
f396fe577f51 USB: serial: option: add support for D-Link DWM-157 C1
d70662e5a2e1 usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
Linux version 3.18.100-gfe19e8d9a3b5 (android-
build@vpeb5.mtv.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Thu Mar 22 17:33:39 UTC 2018
Bug: 68836198
Change-Id: Ie060f073e295e784f2d9648c5caf9a608d7fc59f
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
am: 2ba1629551 -s ours
Change-Id: Id2bf25dc770df653783d7e2f4e8806df439b5137
|
|
01c77aa87335 Merge 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18
c9ae525d9391 power: don't consider AICL result when using PD charger
875bb5339e88 diag: Synchronize threads to fix possible deadlock
6be89e0e6c17 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18
6a5133ffb1e9 Revert "qcacld-2.0: Fix potential OOB read in dot11f.c"
045045296360 Revert "qcacld-2.0: Check the length of IE's before appending"
5b6007bc9653 Revert "qcacld-2.0: Check ie_len against 255 in function get_container_ies_len"
6f7b531d1fb1 Split marlin and sailfish DTB into their own kernel images.
514a3ff917ea Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
89a5d5ff5902 qcacld-2.0: Fix potential buffer overwrite in wma_vdev_start_rsp_ind
744280f66bca qseecom: fix an app unloading issue when the app is blocked
6707da563c0a qcacld-2.0: Avoid possible stack overflow in hdd_ProcessGENIE API
3d8b040ba816 qcacld-2.0: Fix potential buffer overflow for TX_COMPL_IND
59dda3ccff99 qcacld-2.0: Fix Out-of-bound access in sapInterferenceRssiCount
2ad17edb1a83 qcacld-2.0: Dump the txrx stat req if the queue is not empty
5f4961679c4d qcacld-2.0: Fix memory leak for txrx_fw_stats cmd
9d26f2f8f093 qcacld-2.0: Avoid buffer overflow
554caeb91016 wil6210: missing length check in wmi_set_ie
0332bfa56447 drivers: qdsp6v2: Add mutex unlock to properly release lock
2298319f6e72 msm: msm_bus: Add mutex lock for floor vote data
d130d079bfd4 qcacld-2.0: Fix buffer overwrite due to ssid_len in WMA handlers
5332f0060e05 loop: fix concurrent lo_open/lo_release
b45b65539885 msm: mdss: adjust mdss_mdp_get_plane_sizes parameters init order
1f11025e6cb7 msm: ipa: Fix to unsigned integer underflow
c1024fa00777 qcacld-2.0: Fix potential buffer overwrite
a374bae16dee Input: gtco - fix potential out-of-bound access
d713557039d2 msm: sensor: actuator: fix out of bound read for region params
2eb4b77b8861 msm: sensor: actuator: add null pointer check for i2c array
bba8b0f4dc2b msm: sensor: actuator: avoid accessing out of bound memory
bfefdf06256e msm: mdss: fix check for igc read
ca6df26547e6 qcacld-2.0: Add mutex lock for proc handlers
4ee28a472aa7 qcacld-2.0: Race condition while using pkt log buffer
d06f00b041dd Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18-oc-mr1-security-next
abd44345f20f Merge android-msm-marlin-3.18-oc-mr1-security-next into android-msm-marlin-3.18-oc-mr1
2642c1fd82af msm: ipa3: add lock for num_q6_rule
82870752ae77 nl80211: Define policy for packet pattern attributes
2c8eb8657210 msm: ipa: add null terminator
356c2a87c458 netlink: Add netns check on taps
ae6e9bb3b175 qcacld-2.0: Add sanity check for vdev_id in wma_wow_wakeup_host_event
7722ced8f7ba qcacld-2.0: Add sanity check for vdev id to prevent OOB access
fbd5ba719a6c qcacld-2.0: Calculate buf_len properly for extscan hotlist event buffer
3516a8ac313f qcacld-2.0: Validate packet length, before processing PTT commands
f38a1dd23d5e BACKPORT: USB: core: harden cdc_parse_cdc_header
a2c467d4d8c9 PCI: Fix race condition with driver_override
5783091be560 UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()
08dc08be1fa2 BACKPORT:net: ipv4: fix for a race condition in raw_sendmsg
295e19dcd758 diag: dci: Add validity check for dci client's process descriptor
8c981c76b0de qcacld-2.0: Fix buffer overread in wma_extscan_hotlist_match_event_handler
150ceb50a083 qcacld-2.0: Fix Integer overflow in wma_tbttoffset_update_event_handler()
cc1c67e53c13 qcacld-2.0: Fix buffer overwrite in wma_extscan_rsp_handler
f5027a96e476 qcacld-2.0: Fix buffer overwrite in wma_sap_ofl_add_sta_handler
31d3768f464f qcacld-2.0: Check for valid vdev ID in SWBA event handler
0b63e938e86c ASoC: apr: Add validity check to APR port
295b7b7069f8 msm: ipa: Fix the handling of default IPA header
29e6ab086e19 qcacld-2.0: Fix buffer overrun in function ProcSetReqInternal
c32e93629511 qcacld-2.0: Fix potential buffer overflow in htt_t2h_lp_msg_handler
eccdffc2b3b7 qcacld-2.0: Fix potential buffer overflow in ol_rx_flush_handler
4fea5f5a9460 qcacld-2.0: Fix potential buffer overflow in process_tx_info
Linux version 3.18.70-g01c77aa87335 (android-
build@wprd10.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Tue Mar 20 18:29:48 UTC 2018
Bug: 33967002
Bug: 35470735
Bug: 37282867
Bug: 64403015
Bug: 65122765
Bug: 65853393
Bug: 68992477
Bug: 69052594
Bug: 69128924
Bug: 69916367
Bug: 70237689
Bug: 70242505
Bug: 70526974
Bug: 70640811
Bug: 70980949
Bug: 71500434
Bug: 71501666
Bug: 71501679
Bug: 71501686
Bug: 71501687
Bug: 71501691
Bug: 71501692
Bug: 71501694
Bug: 71501695
Bug: 72851087
Bug: 72867809
Bug: 72956801
Bug: 72956842
Bug: 72956920
Bug: 72956941
Bug: 72956997
Bug: 72957040
Bug: 72957136
Bug: 72957177
Bug: 72957178
Bug: 72957234
Bug: 72957235
Bug: 72957257
Bug: 72957269
Bug: 72957337
Bug: 72957505
Bug: 72957507
Bug: 72957611
Bug: 72957725
Bug: 73490084
Bug: 73498666
Bug: 73792209
Bug: 74402918
Bug: 74612426
Change-Id: Ia132f72ce0963e911264161f10d118f4fee887e6
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Thierry Strudel <tstrudel@google.com>
|
|
514a3ff91 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
89a5d5ff5 qcacld-2.0: Fix potential buffer overwrite in wma_vdev_start_rsp_ind
744280f66 qseecom: fix an app unloading issue when the app is blocked
6707da563 qcacld-2.0: Avoid possible stack overflow in hdd_ProcessGENIE API
3d8b040ba qcacld-2.0: Fix potential buffer overflow for TX_COMPL_IND
59dda3ccf qcacld-2.0: Fix Out-of-bound access in sapInterferenceRssiCount
2ad17edb1 qcacld-2.0: Dump the txrx stat req if the queue is not empty
5f4961679 qcacld-2.0: Fix memory leak for txrx_fw_stats cmd
9d26f2f8f qcacld-2.0: Avoid buffer overflow
554caeb91 wil6210: missing length check in wmi_set_ie
0332bfa56 drivers: qdsp6v2: Add mutex unlock to properly release lock
2298319f6 msm: msm_bus: Add mutex lock for floor vote data
d130d079b qcacld-2.0: Fix buffer overwrite due to ssid_len in WMA handlers
5332f0060 loop: fix concurrent lo_open/lo_release
b45b65539 msm: mdss: adjust mdss_mdp_get_plane_sizes parameters init order
1f11025e6 msm: ipa: Fix to unsigned integer underflow
c1024fa00 qcacld-2.0: Fix potential buffer overwrite
a374bae16 Input: gtco - fix potential out-of-bound access
d71355703 msm: sensor: actuator: fix out of bound read for region params
2eb4b77b8 msm: sensor: actuator: add null pointer check for i2c array
bba8b0f4d msm: sensor: actuator: avoid accessing out of bound memory
bfefdf062 msm: mdss: fix check for igc read
ca6df2654 qcacld-2.0: Add mutex lock for proc handlers
4ee28a472 qcacld-2.0: Race condition while using pkt log buffer
d06f00b04 Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18-oc-mr1-security-next
Linux version 3.18.70-g514a3ff917ea (android-
build@wprn12.hot.corp.google.com) (gcc version 4.9.x-google
20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Mar 15 22:25:14
UTC 2018
Bug: 35470735
Bug: 37282867
Bug: 65122765
Bug: 69916367
Bug: 70237689
Bug: 70242505
Bug: 71501679
Bug: 72867809
Bug: 72956801
Bug: 72956941
Bug: 72957040
Bug: 72957178
Bug: 72957234
Bug: 72957257
Bug: 72957337
Bug: 72957505
Bug: 72957507
Bug: 72957611
Bug: 72957725
Bug: 74402918
Bug: 74612426
Test: Built and flashed boot.img. Device booted up successfully.
Change-Id: Idb16b6feae6dd9e5dbe439456574a2bef9e1c5db
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Siyuan Zhou <siyuanzhou@google.com>
|
|
am: 58a1e1c496 -s ours
Change-Id: I2cd6c89d67295c08478554eda650e39322974026
|
|
abd44345f Merge android-msm-marlin-3.18-oc-mr1-security-next into android-msm-marlin-3.18-oc-mr1
2642c1fd8 msm: ipa3: add lock for num_q6_rule
82870752a nl80211: Define policy for packet pattern attributes
2c8eb8657 msm: ipa: add null terminator
356c2a87c netlink: Add netns check on taps
ae6e9bb3b qcacld-2.0: Add sanity check for vdev_id in wma_wow_wakeup_host_event
7722ced8f qcacld-2.0: Add sanity check for vdev id to prevent OOB access
fbd5ba719 qcacld-2.0: Calculate buf_len properly for extscan hotlist event buffer
3516a8ac3 qcacld-2.0: Validate packet length, before processing PTT commands
f38a1dd23 BACKPORT: USB: core: harden cdc_parse_cdc_header
a2c467d4d PCI: Fix race condition with driver_override
5783091be UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()
08dc08be1 BACKPORT:net: ipv4: fix for a race condition in raw_sendmsg
295e19dcd diag: dci: Add validity check for dci client's process descriptor
8c981c76b qcacld-2.0: Fix buffer overread in wma_extscan_hotlist_match_event_handler
150ceb50a qcacld-2.0: Fix Integer overflow in wma_tbttoffset_update_event_handler()
cc1c67e53 qcacld-2.0: Fix buffer overwrite in wma_extscan_rsp_handler
f5027a96e qcacld-2.0: Fix buffer overwrite in wma_sap_ofl_add_sta_handler
31d3768f4 qcacld-2.0: Check for valid vdev ID in SWBA event handler
0b63e938e ASoC: apr: Add validity check to APR port
295b7b706 msm: ipa: Fix the handling of default IPA header
29e6ab086 qcacld-2.0: Fix buffer overrun in function ProcSetReqInternal
c32e93629 qcacld-2.0: Fix potential buffer overflow in htt_t2h_lp_msg_handler
eccdffc2b qcacld-2.0: Fix potential buffer overflow in ol_rx_flush_handler
4fea5f5a9 qcacld-2.0: Fix potential buffer overflow in process_tx_info
Linux version 3.18.70-gabd44345f20f (android-
build@wpra10.hot.corp.google.com) (gcc version 4.9.x-google
20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 14 20:59:04
UTC 2018
Bug: 33967002
Bug: 64403015
Bug: 65853393
Bug: 68992477
Bug: 69052594
Bug: 69128924
Bug: 70526974
Bug: 70980949
Bug: 71500434
Bug: 71501666
Bug: 71501686
Bug: 71501687
Bug: 71501691
Bug: 71501692
Bug: 71501694
Bug: 71501695
Bug: 72956842
Bug: 72956920
Bug: 72956997
Bug: 72957136
Bug: 72957177
Bug: 72957235
Bug: 72957269
Bug: 73498666
Change-Id: Ia0e3a6251b25999f66b099c5a820187741f99b2e
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Siyuan Zhou <siyuanzhou@google.com>
|
|
64eef2bee Merge branch 'android-msm-marlin-3.18-oc-mr1' into android-msm-marlin-3.18
4bc112103 BACKPORT: ipv6: Skip XFRM lookup if dst_entry in socket cache is valid
c0dab243e arch/arm64/marlin_defconfig: set default readahead to 2048KB
4f45eff82 ANDROID: mm: add config for default readahead size
31e477211 msm: kgsl: Fix race condition in kgsl_cmdbatch_add_sync_fence()
82a254efe Revert "qcacld-2.0: Fix potential buffer overwrite"
b13e9af26 qcacld-2.0: wlan host driver upgrade to 4.4.25.048
ebd820267 qcacld-2.0: Update correct value for low power stats
63ec6a557 tty: fix data race on tty_buffer.commit
8098caa2d tty: fix data race in tty_buffer_flush
ed8831583 Merge branch 'android-msm-marlin-3.18-oc-mr1-security-next' into android-msm-marlin-3.18-oc-mr1
531339314 msm: ipa3: add lock for num_q6_rule
3cb048171 nl80211: Define policy for packet pattern attributes
4f6b7a6e9 msm: ipa: add null terminator
28b94c221 netlink: Add netns check on taps
176889300 qcacld-2.0: Add sanity check for vdev_id in wma_wow_wakeup_host_event
d0432e927 qcacld-2.0: Add sanity check for vdev id to prevent OOB access
c0b3ea689 qcacld-2.0: Calculate buf_len properly for extscan hotlist event buffer
dc7f34d74 qcacld-2.0: Validate packet length, before processing PTT commands
f0fb3cd54 BACKPORT: USB: core: harden cdc_parse_cdc_header
be8d903cd PCI: Fix race condition with driver_override
1d1137a62 qcacld-2.0: Fix potential buffer overwrite
1d7d3f5b2 qcacld-2.0: Check the length of IE's before appending
a574210f6 UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()
4862b712a BACKPORT:net: ipv4: fix for a race condition in raw_sendmsg
bb761cf09 diag: dci: Add validity check for dci client's process descriptor
212a5af3c qcacld-2.0: Fix buffer overread in wma_extscan_hotlist_match_event_handler
fa8b0d9d1 qcacld-2.0: Fix potential OOB read in dot11f.c
a6a127089 qcacld-2.0: Fix Integer overflow in wma_tbttoffset_update_event_handler()
aee852ac5 qcacld-2.0: Fix buffer overwrite in wma_extscan_rsp_handler
94a61d5d6 qcacld-2.0: Fix buffer overwrite in wma_sap_ofl_add_sta_handler
6dfd92e60 qcacld-2.0: Check for valid vdev ID in SWBA event handler
2c0995345 ASoC: apr: Add validity check to APR port
bd969fcf9 msm: ipa: Fix the handling of default IPA header
2e76a20e6 qcacld-2.0: Fix buffer overrun in function ProcSetReqInternal
b9cce536b qcacld-2.0: Fix potential buffer overflow in htt_t2h_lp_msg_handler
79f97f383 qcacld-2.0: Fix potential buffer overflow in ol_rx_flush_handler
dd2c60329 qcacld-2.0: Fix potential buffer overflow in process_tx_info
d13ac4f56 qcacld-2.0: Check ie_len against 255 in function get_container_ies_len
0b570a88e msm: vidc: Increase minimum input buffer count for VP9 decode
Linux version 3.18.70-g64eef2b (android-build@abfarm292) (gcc version
4.9.x 20150123 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 7
23:38:28 UTC 2018
Bug: 33967002
Bug: 62413151
Bug: 63589559
Bug: 64403015
Bug: 65175134
Bug: 65853393
Bug: 68948405
Bug: 68992477
Bug: 69052594
Bug: 69128924
Bug: 70237689
Bug: 70237718
Bug: 70526974
Bug: 70632436
Bug: 70980949
Bug: 71500434
Bug: 71501666
Bug: 71501686
Bug: 71501687
Bug: 71501691
Bug: 71501692
Bug: 71501694
Bug: 71501695
Bug: 72956842
Bug: 72956920
Bug: 72956997
Bug: 72957136
Bug: 72957155
Bug: 72957177
Bug: 72957235
Bug: 72957269
Bug: 72957385
Bug: 73498666
Test: Built and flashed bootimage on Marlin. Device boots up successfully.
Change-Id: Id55ce7b35c4dfa4fa922856623c9eaf86e98a086
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Siyuan Zhou <siyuanzhou@google.com>
|
|
am: 5e791dc783 -s ours
Change-Id: I93460ee522c77096c7c7d950a3daebbeceec92ee
|
|
am: f034e7c283
Change-Id: I17a9b2c4dcf0113a9f394f08394dddab8fe492a4
|
|
82a254efe Revert "qcacld-2.0: Fix potential buffer overwrite"
Linux version 3.18.70-g82a254efe3b6 (android-
build@vpee4.mtv.corp.google.com) (gcc version 4.9.x-google
20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Feb 28 21:12:05
UTC 2018
Bug: 73597588
Change-Id: Ic139d4d5ff8d566e4e34d4ab6eed5367a0a7a5cf
Source-Branch: android-msm-marlin-3.18-oc-mr1
Signed-off-by: Ahmed ElArabawy <arabawy@google.com>
|
|
90273737ebc3 ANDROID: usb: gadget: f_accessory: Also zero out rx_req on unbind
Linux version 3.18.70-g90273737ebc3 (android-
build@wpiy5.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Thu Feb 22 23:12:51 UTC 2018
Bug: 73769117
Change-Id: I4aec293890920e596e808bb811e32ce4fe95c3d7
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Siqi Lin <siqilin@google.com>
|
|
f6b7ca89cb22 ANDROID: usb: gadget: f_accessory: Fix double-free
01878b2c6563 Add AES-GCM support to marlin kernels
Linux version 3.18.70-gf6b7ca89cb22 (android-
build@wpiz13.hot.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Tue Feb 20 21:43:41 UTC 2018
Bug: 73247835
Bug: 73645054
Change-Id: I0f204f13dd7799e894841a2c236918f4b288a30d
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Siqi Lin <siqilin@google.com>
|
