summaryrefslogtreecommitdiff
path: root/Image.gz-dtb
AgeCommit message (Collapse)Author
2017-07-28bullhead: update kernel prebuiltJonathan Solnit
7c665d4f Revert "Revert "msm: sps: Fix race condition in SPS debugfs APIs"" f99fc6c8 Revert "Revert "dm ioctl: prevent stack leak in dm ioctl call"" 6a67fb64 Revert "Revert "UPSTREAM: ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT"" 8e2c2a71 Revert "Revert "BACKPORT: ALSA: timer: Fix race between read and ioctl"" e56ce2bc Revert "Revert "msm: sensor: Validationg function pointers before using them"" 75635320 Revert "Revert "BACKPORT: crypto: msm: Fix buffer overflow issue"" a13b9c4a Revert "Revert "msm: camera: isp: Avoid information leak in ISPIF"" c374e728 Revert "Revert "msm: camera: validate num_streams in stream_cfg_cmd before using it"" 66ca8c8e UPSTREAM: af_key: Fix sadb_x_ipsecrequest parsing 91ebeadf Merge branch 'android-msm-bullhead-3.10-oc' into android-msm-bullhead-3.10 1c037db2 ANDROID: sdcardfs: Remove unnecessary lock 5d870cd6 Make the VTI code compile. Linux version 3.10.73-g7c665d4f611a (android- build@wphr12.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Jul 25 20:56:14 UTC 2017 Bug: 33548839 Bug: 35644370 Bug: 36232584 Bug: 37239119 Bug: 37438302 Bug: 38027632 Bug: 62201221 Bug: 63173580 Bug: 63785372 Bug: 63963140 Change-Id: I8865c60c5b7ad82e4cd31ac1413f8875da1c3da4 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Jonathan Solnit <jsolnit@google.com>
2017-07-25bullhead: update kernel prebuiltJonathan Solnit
f712c050 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-oc 24ddad04 Merge branch 'android-msm-bullhead-3.10-nyc-mr2-security-next' into android-msm-bullhead-3.10-nyc-mr2 7d856b6c Revert "UPSTREAM: ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT" e44d5aa7 Revert "BACKPORT: ALSA: timer: Fix race between read and ioctl" e07d78c3 Revert "msm: sensor: Validationg function pointers before using them" 1023d214 Revert "BACKPORT: crypto: msm: Fix buffer overflow issue" d3968cec Revert "msm: camera: isp: Avoid information leak in ISPIF" 4b1c1817 Revert "msm: camera: validate num_streams in stream_cfg_cmd before using it" 375bc72c Revert "dm ioctl: prevent stack leak in dm ioctl call" 34347426 Revert "msm: sps: Fix race condition in SPS debugfs APIs" 78ce025a Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-oc 563799c3 Merge branch 'android-msm-bullhead-3.10-nyc-mr2-security-next' into android-msm-bullhead-3.10-nyc-mr2 6fb7c5fa msm: sensor: Validationg function pointers before using them ccab1068 UPSTREAM: mm: fix new crash in unmapped_area_topdown() b62291ed ASoC: msm: remove unused msm-compr-q6-v2 115a8814 msm: camera: Allow driver file to be opend only once. c3907635 soc: qcom: msm_bus: add mutex lock for cllist data 6b58aa8f BACKPORT: ipv6/dccp: do not inherit ipv6_mc_list from parent 31aaef07 UPSTREAM: ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT ceb09959 BACKPORT: ALSA: timer: Fix race between read and ioctl c4fbca81 BACKPORT: ext4: fix data exposure after a crash e8746255 BACKPORT: dccp/tcp: do not inherit mc_list from parent 067e855b msm: camera: isp: Handle array out of bounds 3905b093 UPSTREAM: tcp: avoid infinite loop in tcp_splice_read() 03d4c02c UPSTREAM: packet: fix races in fanout_add() 4c000367 BACKPORT: ip6_gre: fix ip6gre_err() invalid reads 443ed3de UPSTREAM: mm/mempolicy.c: fix error handling in set_mempolicy and mbind. f51a152a msm: ipa: fix security issues in ipa wan driver 9349ead0 msm: camera: isp: Avoid information leak in ISPIF 4d526dae BACKPORT: crypto: msm: Fix buffer overflow issue 83c470dc msm: camera: validate num_streams in stream_cfg_cmd before using it af787fde msm: camera: fix off-by-one overflow in msm_isp_get_bufq 47b3a105 Prevent potential double frees in sg driver 1d5b6ba1 dm ioctl: prevent stack leak in dm ioctl call 3968c7d5 msm: camera: Fix Use after free bug in msm_vb2.c. eee8b2ca msm: camera: Use mutex lock to avoid race condition 19d23397 msm: sps: Fix race condition in SPS debugfs APIs fae242db msm: pcie: add bounds check for debugfs register write 3a42f1b7 msm: camera: isp: fix for out of bound access array 5935a691 wcnss: fix the potential memory leak and heap overflow 25cd7841 BACKPORT: mm: larger stack guard gap, between vmas 56e2621b mm: Fix incorrect type conversion for size during dma allocation 9ffb3cdd ASoC: msm: qdsp6v2: extend validation of virtual address 825eeb85 qcacld-2.0: Avoid concurrent matrix max param overread d5d2c9ba qcacld-2.0: Fix out of bound read issue in get link properties 6a1d4a43 msm: camera: fix untrusted pointer for power down setting c74dbab5 msm:camera: correct stats query out of boundary 33191e11 Merge android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10-nyc-mr2-security-next Linux version 3.10.73-gf712c0503a8 (android- build@wphs7.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon Jul 24 16:41:25 UTC 2017 Bug: 33039685 Bug: 33548839 Bug: 34329758 Bug: 35099636 Bug: 35644370 Bug: 35644812 Bug: 36136563 Bug: 36232584 Bug: 36264696 Bug: 36490777 Bug: 36492827 Bug: 36815555 Bug: 37239119 Bug: 37438302 Bug: 37712167 Bug: 37751399 Bug: 37871211 Bug: 37897645 Bug: 37901268 Bug: 38027632 Bug: 38195131 Bug: 38195738 Bug: 38196031 Bug: 38413813 Bug: 38413975 Bug: 62198330 Bug: 62201221 Bug: 62299478 Bug: 62377236 Bug: 62378596 Bug: 62378684 Bug: 62379475 Bug: 62379525 Bug: 63173580 Change-Id: I5a750e54f06dda6401bac2e2e44cd8950a904b73 Source-Branch: android-msm-bullhead-3.10-oc Signed-off-by: Jonathan Solnit <jsolnit@google.com>
2017-06-15bullhead: update kernel prebuiltoreo-devTim Murray
dc40906c kgsl: convert some workqueues to use kthreads 1735e86b ANDROID: hid: uhid: implement refcount for open and close dd81fa62 ANDROID: arm64: add HWCAP2 flags to compat /proc/cpuinfo e57ff665 BACKPORT: arm64: Fix up /proc/cpuinfo 6427e828 mdss: move to a kthread for vsync_retire_work_handler 7331369c qcacld-2.0: wlan host driver upgrade to 4.4.23.020 845f1f65 qcacld-2.0: Make OEM response events wakeable Linux version 3.10.73-gdc40906c97ae (android- build@wphr6.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jun 16 00:04:10 UTC 2017 Bug: 27982275 Bug: 30115868 Bug: 30342017 Bug: 37948902 Bug: 38448648 Bug: 62616267 Change-Id: I4905c18f6a067055c39718badf3a4b7e197ca14e Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Tim Murray <timmurray@google.com>
2017-06-09bullhead: update kernel prebuiltStuart Scott
5f0f4893 Merge android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 abad7d75 Merge android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 d79f9df7 Merge android-msm-bullhead-3.10-nyc-mr2-security-next into android-msm-bullhead-3.10-nyc-mr2 a793531b msm: ipa: Fix for missing int overflow check in the refcount library c7942134 USB: f_qc_rndis: Prevent use-after-free for _rndis_qc 0fecf488 UPSTREAM: timerfd: Protect the might cancel mechanism proper e7a3029e ASoC: msm: qdspv2: add result check when audio process fail 73f1de47 msm: kgsl: Fix the race between context create and destroy 2b97ce29 BACKPORT: f2fs: sanity check checkpoint segno and blkoff 286a0406 qcdev: Check the digest length during the SHA operations b69c3038 UPSTREAM: f2fs: sanity check segment count 7717cb92 qcacld-2.0: Trim extn capability to max supported in change station 176a112d qcacld-2.0: Add lost AP sample size entry to nla policy 70f4192e Merge android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10-nyc-mr2-security-next 03898908 Merge additional July 2017 security updates. 730a3df1 UPSTREAM: net/packet: fix overflow in check for tp_reserve 427a1de2 UPSTREAM: net/packet: fix overflow in check for tp_frame_nr Linux version 3.10.73-g5f0f48937a2 (android- build@wphq2.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jun 9 17:55:25 UTC 2017 Bug: 35136547 Bug: 35467471 Bug: 35764875 Bug: 36266767 Bug: 36491445 Bug: 36588520 Bug: 36591162 Bug: 36725304 Bug: 36815012 Bug: 36817798 Bug: 36818198 Bug: 38138153 Bug: 62369032 Change-Id: Ie7dfc7d8414921dd35b3b3054b9ac4eccf868307 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Stuart Scott <stuartscott@google.com>
2017-05-30bullhead: update kernel prebuiltSiqi Lin
c71d030dd793 ANDROID: mnt: Fix next_descendent 1b476ba33066 qcacld-2.0: Reinitialization of BPF and llstats callbacks Linux version 3.10.73-gc71d030dd79 (android- build@vpec15.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue May 30 19:45:58 UTC 2017 Bug: 37741956 Bug: 62094374 Change-Id: Ic80e2777f27b35b8b305942744e7dcce350bf4a8 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Siqi Lin <siqilin@google.com>
2017-05-23bullhead: update kernel prebuiltDaniel Rosenberg
85c45e86 ANDROID: sdcardfs: Check for NULL in revalidate e659eb9e ANDROID: ASoC: msm: qdsp6v2: Fix memset argument order. 69ff3a22 Merge July 2017 security patches 0c2fbaa2 Merge July 2017 security updates. 35ac2733 BACKPORT: UPSTREAM: dccp: fix freeing skb too early for IPV6_RECVPKTINFO d68d3d4b UPSTREAM: char: Drop bogus dependency of DEVPORT on !M68K 0680be94 arm64: bullhead_defconfig: Unsetting DEVPORT from bullhead configurations. 3ff47dee Fixing an issue that caused DEVPORT to always be set. bbbe795c msm: kgsl: Fix kgsl memory allocation and free race condition b93b39c0 msm: mdss: fix race condition during mdp debugfs release 7b490924 msm: mdss: fix race condition in mdp debugfs ebd904e0 BACKPORT: udf: Check path length when reading symlink 2c2206a9 ashmem: remove cache maintenance support 7fe8350e Revert "proc: smaps: Allow smaps access for CAP_SYS_RESOURCE" 2ca85ce0 ipv4: keep skb->dst around in presence of IP options ad680914 msm: vidc: Allocate bus vote data during initialization 14cb5129 msm: camera: Add regulator enable and disable independent of CSID af70f73f BACKPORT: UPSTREAM: sg_start_req(): make sure that there's not too many elements in iovec 7fae3792 ANDROID: sdcardfs: Move top to its own struct 23d0b005 ANDROID: sdcardfs: fix sdcardfs_destroy_inode for the inode RCU approach f66049c4 UPSTREAM: net/packet: fix overflow in check for priv area size 94c12b06 BACKPORT: UPSTREAM: HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands 644ff453 qcacld-2.0: Race condition while using pkt log buffer 9ac4d21a msm: camera2: cpp: Fix out-of-bounds frame or command buffer access d3fd80f9 msm: camera: don't cut to 8bits for validating enum variable 66869221 soc: qcom: pil: Avoid possible buffer overflow during Modem boot ad5552c9 msm: camera: sensor: Add boundary check for cci master c3c82313 qcacld-2.0: Add bounday check for multicastAddr array 49943c4f ANDROID: make PF_KEY SHA256 use RFC-compliant truncation. 4cba2629 qcacld-2.0: wlan host driver upgrade to 4.4.23.019 879da0fc qcacld-2.0: Correct/Increase len size of oem data request 0155e7c1 ANDROID: Add untag hacks to inet_release function 49075b06 FROMLIST: msm: qdsp6v2: set pointer to NULL after free Linux version 3.10.73-g85c45e86cb1b (android- build@wphr5.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue May 23 22:07:31 UTC 2017 Bug: 32341313 Bug: 32938443 Bug: 33299365 Bug: 33301618 Bug: 33863407 Bug: 34112490 Bug: 34114242 Bug: 34126808 Bug: 34173755 Bug: 34203176 Bug: 34620535 Bug: 34624155 Bug: 34951864 Bug: 35400552 Bug: 35468665 Bug: 35784697 Bug: 35805460 Bug: 35841292 Bug: 35841297 Bug: 36251182 Bug: 36374484 Bug: 36468447 Bug: 36604779 Bug: 36725304 Bug: 37210310 Bug: 37275839 Bug: 37948902 Bug: 38045152 Bug: 38137577 Bug: 38177011 Bug: 38182308 Bug: 38500815 Bug: 38502532 Change-Id: I9ce03ad9b5fe842bffc523ba140f18fe3fa10350 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Daniel Rosenberg <drosen@google.com>
2017-05-09bullhead: update kernel prebuiltDaniel Rosenberg
03c66c0b ANDROID: sdcardfs: Don't iput if we didn't igrab Linux version 3.10.73-g03c66c0bb97 (android- build@wphr1.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed May 10 00:39:32 UTC 2017 Bug: 38117720 Change-Id: I1d1834c788cc9d08314c2bdb45ab21ea229e9619 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Daniel Rosenberg <drosen@google.com>
2017-05-03bullhead: update kernel prebuiltSiqi Lin
5467ca32a6f3 msm: ipa: use GFP_ATOMIC for DMA memory allocation during SSR Linux version 3.10.73-g5467ca32a6f3 (android- build@kpfj3.cbf.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed May 3 04:56:53 UTC 2017 Bug: 36779136 Change-Id: I9e90ecfd94b5bc536c2022c2e53b7b414e82c25b Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Siqi Lin <siqilin@google.com>
2017-04-27bullhead: update kernel prebuiltDaniel Rosenberg
ec387368 ANDROID: sdcardfs: Call lower fs's revalidate 9ca96310 ANDROID: sdcardfs: Avoid setting GIDs outside of valid ranges 652cc6b1 Revert "Revert "Android: sdcardfs: Don't do d_add for lower fs"" ec582463 ANDROID: sdcardfs: Use filesystem specific hash Linux version 3.10.73-gec3873689b7 (android- build@wphl6.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 28 00:16:49 UTC 2017 Bug: 35766959 Bug: 37231161 Bug: 37516160 Change-Id: I67707426aae22749ff156a66f0ce9b37db1c28c4 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Daniel Rosenberg <drosen@google.com>
2017-04-27bullhead: update kernel prebuiltNick Desaulniers
1463d3a5 ext4 crypto: Disables zeroing on truncation when there's no key d7847d93 BACKPORT: ext4/fscrypto: avoid RCU lookup in d_revalidate Linux version 3.10.73-g1463d3a56bd6 (android- build@kpfk3.cbf.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Apr 27 18:13:11 UTC 2017 Bug: 29001513 Bug: 35209576 Bug: 37690053 Change-Id: I22ea0bf40271d0c197b5740ba0fed1d88b72f157 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Nick Desaulniers <ndesaulniers@google.com>
2017-04-21bullhead: update kernel prebuiltSteve Pfetsch
6ddd277a8248 msm: kgsl: Allow draw context to perform only replay on recovery Linux version 3.10.73-g6ddd277a8248 (android- build@wphn1.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 21 17:48:20 UTC 2017 Bug: 34887800 Change-Id: I1cb4b438512fa32c411f161c815d8d35f29d3f1d Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Steve Pfetsch <spfetsch@google.com>
2017-04-20bullhead: update kernel prebuiltDaniel Rosenberg
3e02c42d Revert "Android: sdcardfs: Don't do d_add for lower fs" 6f578bf6 Android: sdcardfs: Don't complain in fixup_lower_ownership c6af2fc9 Android: sdcardfs: Don't do d_add for lower fs 249f889a ANDROID: sdcardfs: ->iget fixes 94f27129 Android: sdcardfs: Change cache GID value d7845008 usb: gadget: f_fs: Guard epfile->error Linux version 3.10.73-g3e02c42d6055 (android- build@wphn1.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Apr 20 20:46:12 UTC 2017 Bug: 35766959 Bug: 37193650 Bug: 37231161 Bug: 37423404 Bug: 37488099 Change-Id: I79f01ac15c46ab0d553f19c5e9a226548ee15878 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Daniel Rosenberg <drosen@google.com>
2017-04-12bullhead: update kernel prebuiltEcco Park
99b735b2 qcacld-2.0: Fix stripping of IEs in p2p scan 7fda5cfa ANDROID: sdcardfs: Directly pass lower file for mmap cc858912 ANDROID: sdcardfs: update module info a9c48b76 ANDROID: sdcardfs: use d_splice_alias f56c6477 ANDROID: sdcardfs: fix ->llseek to update upper and lower offset 81c966ff ANDROID: sdcardfs: copy lower inode attributes in ->ioctl 273e5417 ANDROID: sdcardfs: remove unnecessary call to do_munmap b0e8afaf qcacld-2.0: wlan host driver upgrade to 4.4.23.018 d245b6ea qcacld-2.0: Add BSSID entry even if mismatch is seen bd015ed7 Merge branch msm-lge/android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 dad64933 BACKPORT: ipv6 addrconf: implement RFC7559 router solicitation backoff 932ac95a Merge branch msm-lge/android-msm-bullhead-3.10-nyc-mr2-security-next into android-msm-bullhead-3.10-nyc-mr2 6e0f6edf FROMLIST: msm: IPA: add the check on intf query f8037c1f BACKPORT: msm: mdss: Fix invalid dma attachment during fb shutdown e4e7cff5 BACKPORT: msm: sensor: validating the flash initialization parameters 70e63222 input: touchscreen: validate bounds of intr_reg_num 5b9e100f ASoC: Add backend user count checking 002b719b msm: camera: sensor: Validate i2c_frq_mode in msm_cci_get_clk_rates b4e0e95c qseecom: add mutex around qseecom_set_client_mem_param 9f47238a msm: mdss: Fix integer overflow in cursor validaton b74e5f52 msm: camera: cpp: Fixing Heap overflow in output buffer 24847d2c ASoC: msm: acquire lock in ioctl 0da970f1 FROMLIST: drivers: soc: add size check bbdc6b6e qcacld-2.0: Update correct msg length in oemData_SendMBOemDataReq API 7baee3ec xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window Linux version 3.10.73-g99b735b2ee72 (android- build@vpeb5.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Apr 12 21:43:25 UTC 2017 Bug: 31796345 Bug: 33452365 Bug: 33751424 Bug: 34026243 Bug: 34125463 Bug: 34203184 Bug: 34327981 Bug: 34621613 Bug: 35047217 Bug: 35047780 Bug: 35048450 Bug: 35216793 Bug: 35472278 Bug: 35766959 Bug: 36251230 Bug: 36251984 Bug: 36494510 Bug: 36565222 Bug: 37156499 Bug: 37214129 Change-Id: I3be53c9c3206d5f88d87b8babb1ad5b6ac0655dc Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-04-10bullhead: update kernel prebuiltJerry Zhang
3e5882a9 UPSTREAM: usb: gadget: f_fs: add "no_disconnect" mode e29230a9 net: ipv6: Add sysctl for minimum prefix len acceptable in RIOs. Linux version 3.10.73-g3e5882a9c81d (android- build@wpds7.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Apr 7 23:27:35 UTC 2017 Bug: 33333670 Bug: 34873000 Bug: 36801389 Change-Id: If4a7c5859e4f92a5d46ab251c97d779027ec6595 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Jerry Zhang <zhangjerry@google.com>
2017-04-05bullhead: update prebuilt kernelEcco Park
98fc392c qcacld-2.0: Add radio_id change 64698c44 ANDROID: usb: gadget: f_accessory: Enabled Zero Length Packet (ZLP) for acc_write Linux version 3.10.73-g98fc392c07d (android-build@wphl1.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Apr 5 19:10:10 UTC 2017 (master) Bug: 32775496 Bug: 36821730 Change-Id: Ie8407afe8797dac64770792262435325fbdd2770 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-03-31bullhead: update prebuilt kernelNick Desaulniers
f955207f seccomp: always propagate NO_NEW_PRIVS on tsync f6a4c358 ANDROID: sdcardfs: Fix style issues in macros 1f516008 ANDROID: sdcardfs: Use seq_puts over seq_printf 3a2e0ec7 ANDROID: sdcardfs: Use to kstrout 6c6daf65 ANDROID: sdcardfs: Use pr_[...] instead of printk 2c1de024 ANDROID: sdcardfs: remove unneeded null check 43578194 ANDROID: sdcardfs: Fix style issues with comments 7a270dbe ANDROID: sdcardfs: Fix formatting cb9eaaa4 ANDROID: sdcardfs: correct order of descriptors 7f1c36bd fix the deadlock in xt_qtaguid when enable DDEBUG 8c18ed4e Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 368902fb Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 b8124753 xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window 5a19ee67 build: add defconfig testing 8d150aec arm64/configs: bullhead: make savedefconfig Linux version 3.10.73-gf955207fc045 (android-build@wped16.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Mar 30 18:44:46 UTC 2017 (master) Bug: 35331000 Bug: 36138302 Bug: 36559739 Bug: 36565222 Bug: 36656103 Change-Id: I97c93cd797b7cb1e08dabd2a86cbab36b4a48451 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Nick Desaulniers <ndesaulniers@google.com>
2017-03-21bullhead: update prebuilt kernelEcco Park
cd0befa2 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 6583c960 Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 053e6577 Merge branch 'android-msm-bullhead-3.10-nyc-mr1-security-next' into android-msm-bullhead-3.10-nyc-mr1 45e7b0e3 binder: use group leader instead of open thread e2ab755f android: binder: add padding to binder_fd_array_object. 9f2fdcd8 msm: mdss: install the rel_fence even if retire_fence is skipped ff7244e9 qcacld-2.0: Fix memory leak issue 2c3ba177 msm: mdss: Install sync fences after user copy 55a14351 FROMLIST: ASoC: wcd9330: Fix out of bounds for mad input value f09ac50f msm: mdss: prevent info leak in panel_debug_base_reg_write e5ebae17 BACKPORT: trace: resolve stack corruption due to string copy 37489e12 perf: Tighten (and fix) the grouping condition a491db80 Prevent heap overflow in uvc driver b293c931 crypto: msm: check length before copying to buf in _debug_stats_read 88e0b690 msm: crypto: set CLR_CNTXT bit for crypto operations 49b3cc4c FROMLIST: ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure 2f3cb45a tracing: do not leak kernel addresses d2aba230 power: qpnp-fg: Fix possible race condition in FG debugfs bdf2cc35 ALSA: pcm : Call kill_fasync() in stream lock 18d9c90c qcacld-2.0: Acquire lock to protect hdd_ctx in hdd_driver_memdump_read() 31c7336b qcacld-2.0: Trim operation classes to max supported in change station a8bf9eb1 slim-msm: Synchronize SSR callbacks ab542ff3 UPSTREAM: tracing: Fix trace_printk() to print when not using bprintk() 4e7f59e0 FROMLIST: drivers: soc: add mutex to prevent response being processed twice aa40b815 BACKPORT: msm: ADSPRPC: Check for buffer overflow condition b0446960 ASoC: msm: qdsp6v2: Add range checking in msm_dai_q6_set_channel_map 3b204eae qseecom: check buffer size when loading firmware images 982c558d ASoC: msm: qdsp6v2: return error when copy from userspace fails 2d379427 FROMLIST: ASoC: msm-cpe-lsm: cleanup ioctl functions 6dfd53ca soc: qcom: scm: check for size_t overflow. d6c0b77e UPSTREAM: msm: rndis_ipa: Remove rndis_ipa loopback functionality edaa39f4 msm: camera: sensor: Validate i2c_frq_mode in msm_cci_get_clk_rates 39455ed4 msm: camera: flash: Validate the power setting size 22b6df30 ASoC: soc: msm: initialize buffer to prevent kernel data leakage 390ef861 qseecom: improve input validatation for qseecom_send_service_cmd 6561f557 FROMLIST: ASoC: soc: prevent risk of buffer overflow c877b8c3 BACKPORT: BACKPORT: uio: fix potential use after free issue when accessing debug_buffer Linux version 3.10.73-gcd0befa (android-build@vpeb2.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Mar 21 22:25:56 UTC 2017 (master) Bug: 32094986 Bug: 32402303 Bug: 33300353 Bug: 33352393 Bug: 33621829 Bug: 33784446 Bug: 33845464 Bug: 33899710 Bug: 34030871 Bug: 34068036 Bug: 34088848 Bug: 34112914 Bug: 34230377 Bug: 34277115 Bug: 34327795 Bug: 34514463 Bug: 34515362 Bug: 35392791 Bug: 35393124 Bug: 35393841 Bug: 35394329 Bug: 35399404 Bug: 35399405 Bug: 35399704 Bug: 35399756 Bug: 35399801 Bug: 35400153 Bug: 35400457 Bug: 35400458 Bug: 35401052 Bug: 35707103 Bug: 36138302 Bug: 36430984 Bug: 36446902 Change-Id: I0e0c5baecfb2c076b24398a7ce06825b8d22129b Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-03-20bullhead: update prebuilt kernelEcco Park
3bcf2d99 Revert "msm: mdss: Install sync fences after user copy" Linux version 3.10.73-g3bcf2d9 (android-build@kpfk4.cbf.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Mar 21 00:31:08 UTC 2017 (master) Bug: 32402303 Bug: 36430984 Change-Id: I1cbb7dffe216dd918bbf1681b3d5adf597eafcaf Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-03-17bullhead: update prebuilt kernelDaniel Rosenberg
52322ca3 ANDROID: sdcardfs: Fix gid issue d98c557a ANDROID: sdcardfs: Use tabs instead of spaces in multiuser.h b5945fbb ANDROID: sdcardfs: Remove uninformative prints 05485b29 ANDROID: sdcardfs: move path_put outside of spinlock 86526fbf ANDROID: sdcardfs: Use case insensitive hash function cf8b5ea7 ANDROID: sdcardfs: declare MODULE_ALIAS_FS 3a17a00d ANDROID: sdcardfs: Get the blocksize from the lower fs da6317fb ANDROID: sdcardfs: Use d_invalidate instead of drop_recurisve 330704c3 ANDROID: sdcardfs: Switch to internal case insensitive compare 4a04790a ANDROID: sdcardfs: Use spin_lock_nested 9db3dd72 ANDROID: sdcardfs: Replace get/put with d_lock e184f317 ANDROID: sdcardfs: rate limit warning print 16d933aa ANDROID: sdcardfs: Fix case insensitive lookup Linux version 3.10.73-g52322ca (android-build@wpds10.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Mar 16 23:59:07 UTC 2017 (master) Bug: 34723223 Bug: 35331000 Bug: 35633782 Bug: 35643557 Bug: 35766959 Bug: 35848445 Bug: 36004503 Bug: 36007653 Bug: 36138424 Bug: 36160015 Change-Id: Iaa643ad32a0f0f80394ce69909b797faddb97525 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Daniel Rosenberg <drosen@google.com>
2017-03-15bullhead: update prebuilt kernelEcco Park
b6ad97c6 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 0c289272 Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 c6f0e29c msm: mdss: Install sync fences after user copy ecf7fbc1 qcacld-2.0: Fix memory leak issue 5c12b588 BACKPORT: BACKPORT: uio: fix potential use after free issue when accessing debug_buffer 73406e07 FROMLIST: ASoC: soc: prevent risk of buffer overflow 73738cfa qseecom: improve input validatation for qseecom_send_service_cmd 75d60221 ASoC: soc: msm: initialize buffer to prevent kernel data leakage 071e48b6 msm: camera: flash: Validate the power setting size 4c7ffa00 msm: camera: sensor: Validate i2c_frq_mode in msm_cci_get_clk_rates 6fbef1bf UPSTREAM: msm: rndis_ipa: Remove rndis_ipa loopback functionality a862b13b soc: qcom: scm: check for size_t overflow. 292c3381 FROMLIST: ASoC: msm-cpe-lsm: cleanup ioctl functions 5154e2f8 ASoC: msm: qdsp6v2: return error when copy from userspace fails 017ebf13 qseecom: check buffer size when loading firmware images 462054aa ASoC: msm: qdsp6v2: Add range checking in msm_dai_q6_set_channel_map 5b3d1652 BACKPORT: msm: ADSPRPC: Check for buffer overflow condition 08e4cc85 FROMLIST: drivers: soc: add mutex to prevent response being processed twice a4d7a2b9 UPSTREAM: tracing: Fix trace_printk() to print when not using bprintk() c3fc7bc9 slim-msm: Synchronize SSR callbacks af20304a qcacld-2.0: Trim operation classes to max supported in change station d3a15d8b qcacld-2.0: Acquire lock to protect hdd_ctx in hdd_driver_memdump_read() 7132eeaf ALSA: pcm : Call kill_fasync() in stream lock 1e40c460 power: qpnp-fg: Fix possible race condition in FG debugfs ad6bd622 tracing: do not leak kernel addresses 0576f572 FROMLIST: ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure e7f0747e msm: crypto: set CLR_CNTXT bit for crypto operations 0736c9cb crypto: msm: check length before copying to buf in _debug_stats_read 8c4bbcf2 Prevent heap overflow in uvc driver 5bbf5335 perf: Tighten (and fix) the grouping condition a279d83d BACKPORT: trace: resolve stack corruption due to string copy be170864 msm: mdss: prevent info leak in panel_debug_base_reg_write 111407f8 FROMLIST: ASoC: wcd9330: Fix out of bounds for mad input value Linux version 3.10.73-gb6ad97c (android-build@wped21.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Mar 16 04:07:37 UTC 2017 (master) Bug: 32094986 Bug: 32402303 Bug: 33300353 Bug: 33352393 Bug: 33621829 Bug: 33784446 Bug: 33845464 Bug: 33899710 Bug: 34030871 Bug: 34068036 Bug: 34088848 Bug: 34112914 Bug: 34230377 Bug: 34277115 Bug: 34327795 Bug: 34514463 Bug: 34515362 Bug: 35392791 Bug: 35393124 Bug: 35393841 Bug: 35394329 Bug: 35399404 Bug: 35399405 Bug: 35399704 Bug: 35399756 Bug: 35399801 Bug: 35400153 Bug: 35400457 Bug: 35400458 Bug: 35401052 Bug: 36138302 Change-Id: I8154c2ebcd6efbdb31d30f0c3658c26f47743ab3 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-03-15bullhead: update prebuilt kernelEcco Park
7ddc05de qcacld-2.0: wlan host driver upgrade to 4.4.23.017 0628b9b1 qcacld-2.0: Update correct msg length in oemData_SendMBOemDataReq API f9a04fc6 qcacld-2.0: Change the log level in limProcessMlmDisassocReqNtf b019cff0 qcacld-2.0: Print cmd in hostapd_ioctl 95a71ef5 qcacld-2.0: Remove BTC code to reduce driver size b7912b09 qcacld-2.0: Add support to use generic netlink sockets for userspace apps 40f8945b bullhead: Enable cnss_genl driver compilation d0e43cb5 Driver to create cld80211 nl family at bootup time Linux version 3.10.73-g7ddc05d (android-build@wped30.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 15 20:24:02 UTC 2017 (master) Bug: 32775496 Bug: 34469211 Bug: 35668243 Bug: 35893040 Change-Id: If1727eb8664e08ba6fd34705f0eb6d9015b0f644 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-03-08bullhead: update prebuilt kernelSiqi Lin
d8b8b990ee46 ASoC: msm-cpe-lsm: Fix out of bounds write in msm_cpe_lsm_ioctl_compat 03e7d8c86496 nanohub: fix out of bounds write in nanohub_spi_read cc1182d137c8 BACKPORT: commoncap: don't alloc the credential unless needed in cap_task_prctl Linux version 3.10.73-gd8b8b99 (android-build@wped26.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 8 21:53:44 UTC 2017 (master) Bug: 35074030 Bug: 35804737 Bug: 36003188 Change-Id: I79907480972f34aa6057df5c3519e6e06f3448c6 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Siqi Lin <siqilin@google.com>
2017-02-28bullhead: update prebuilt kernelSandeep Patil
b75a24e72ea8 Revert "devicetree: add early mount nodes in DT to mount system and vendor early" Linux version 3.10.73-gb75a24e (android-build@kpfj1.cbf.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Mar 1 01:52:00 UTC 2017 (master) Bug: 35841663 Bug: 35853788 Bug: 35831190 Test: Boot aosp_bullhead and bullhead-userdebug targets Test: sideloaded recovery Change-Id: Ic259b0a91953af3a3fc71d8b6fdb11cce85ae96f Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-02-27bullhead: update prebuilt kernelSandeep Patil
f6ac9adb8f3c devicetree: add early mount nodes in DT to mount system and vendor early 3d163376d469 defconfig: enable PROC_DEVICETREE for bullhead 898da5f684ac ANDROID: sdcardfs: support direct-IO (DIO) operations 20bc5d0042a3 ANDROID: sdcardfs: implement vm_ops->page_mkwrite Linux version 3.10.73-gf6ac9ad (android-build@wped16.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Feb 28 01:57:53 UTC 2017 (master) Bug: 27805372 Bug: 34133558 Bug: 35803310 Test: Boot tested angler-userdebug with early mount verified Change-Id: I9e2681ce160216883ca4ec3c663dcdfa1b0fdcaf Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-02-23bullhead: update prebuilt kernelJohn Dias
383afae4 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 9688bef0 usb: gadget: f_fs: move frees in epfile_release to before data_clear e5706784 Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 1b227bb1 ANDROID: ion: Protect kref from userspace manipulation 4989793c ASoC: msm: qdsp6v2: Fix out-of-bounds access in put functions 175e490f FROMLIST: msm: mdss: Correct the format specifiers in sscanf function 4b50125d FROMLIST: msm: ipa: fix ioctl input param validation 4ec51772 mdss: Validate cursor image size 825b236b FROMLIST: defconfig: msm: Disable CONFIG_CP_ACCESS64 47918a43 qcacld-2.0: Do not copy buffer to user-space if diag read fails a1363cb4 qcacld-2.0: Fix buffer overflow in WLANSAP_Set_WPARSNIes() f9a04380 FROMLIST: 9p: fix a potential acl leak 7f22e818 BACKPORT: posix_acl: Clear SGID bit when setting file permissions ddc398c5 qcacld-2.0: Avoid integer overflow in wma_enable_arp_ns_offload d583f12e sdcardfs: limit stacking depth de04c177 BACKPORT: fs: limit filesystem stacking depth f6432eda UPSTREAM: udp: properly support MSG_PEEK with truncated buffers a33fab25 FROMLIST: ASoC: msm: qdspv2: add mutex lock when access output buffer length 4c71366d crypto: msm: check integer overflow on total data len in qcedev.c be081a35 FROMLIST: qcrypto: protect potential integer overflow. b41c6bfa qseecom: whitelist support for kernel client and listener aa0fca3f qseecom: Change whitelist_support flag to false if TZ failed to check 9776ffdf qseecom: allocate sglistinfo buffer for kernel clients 903dbbab qseecom: support whitelist memory for qseecom_send_modfd_cmd Linux version 3.10.73-g383afae (android-build@wphl7.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Feb 24 01:58:22 UTC 2017 (master) Bug: 31268796 Bug: 32068683 Bug: 32074353 Bug: 32086742 Bug: 32458736 Bug: 32658595 Bug: 32761463 Bug: 32813456 Bug: 33353700 Bug: 33544431 Bug: 33649808 Bug: 34125463 Bug: 34276203 Bug: 34386696 Bug: 34389927 Bug: 34390017 Bug: 34977530 Bug: 35468008 Change-Id: If8c75aff8de2e2e571783d7cceb1567832cf3487 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: John Dias <joaodias@google.com>
2017-02-23bullhead: update prebuilt kernelSiqi Lin
948c662d5568 ANDROID: sdcardfs: Don't bother deleting freelist 2930341e07b2 ANDROID: sdcardfs: Add missing path_put 2d1b7811613b ANDROID: sdcardfs: Fix incorrect hash Linux version 3.10.73-g948c662 (android-build@vpba17.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Feb 23 18:37:02 UTC 2017 (master) Bug: 34691169 Bug: 35307857 Bug: 35666680 Change-Id: I43b653446793abea940273920e5e5f321d3436cf Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Siqi Lin <siqilin@google.com>
2017-02-16bullhead: update prebuilt kernelEcco Park
b6de176d qcacld-2.0: wlan host driver upgrade to 4.4.23.016 34a21338 qcacld-2.0: Fix buff ovfw in prb-req ie whitelisting 8ffb64c0 qcacld-2.0: Fix memory leak caused by IE white listing f17c5d84 qcacld-2.0: Disable ie whitelisting in connected state 2b471445 qcacld-2.0: Add support to include selective scan IEs only 4dc66cbc qcacld-2.0: Add support to randomize probe req SA and Seq number 2af5448d qcacld-2.0: Update firmware interface files 51b2a854 cfg80211: Define macro to indicate support for random mac address for scan 823815f0 cfg80211: allow drivers to support random MAC addresses for scan 3a3fbe37 cfg80211: refactor nl80211_start_sched_scan so it can be reused e0c238dc qcacld-2.0: wlan host driver upgrade to 4.4.23.015 af8dd23c qcacld-2.0: Remove WIPHY_VENDOR_CMD_NEED_RUNNING flag a474fad2 UPSTREAM: arm64: Allow hw watchpoint of length 3,5,6 and 7 51ab85d7 BACKPORT: arm64: hw_breakpoint: Handle inexact watchpoint addresses fdfc65f0 UPSTREAM: arm64: Allow hw watchpoint at varied offset from base address f7f849f7 BACKPORT: hw_breakpoint: Allow watchpoint of length 3,5,6 and 7 Linux version 3.10.73-gb6de176 (android-build@wpho8.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Feb 17 01:10:06 UTC 2017 (master) Bug: 30919905 Bug: 35113704 Bug: 35436707 Change-Id: I3a24fb143056f94336172b20b9e37de03569fbff Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2017-02-09bullhead: update prebuilt kernelJerry Zhang
60ac2b4a usb: gadget: f_fs: Increase EP_ALLOC ioctl number Linux version 3.10.73-g60ac2b4 (android-build@wpdu15.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Feb 9 23:29:05 UTC 2017 (master) Change-Id: I0632b72eff6df9748de55f0c36f49cc66cf414b0 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Jerry Zhang <zhangjerry@google.com>
2017-02-09bullhead: update prebuilt kernelDave Weinstein
c7494d35 ANDROID: Put KUSER_HELPERS disable behind config f8d78a6d ANDROID: sdcardfs: Switch strcasecmp for internal call 6d6e8282 ANDROID: sdcardfs: switch to full_name_hash and qstr df990874 ANDROID: sdcardfs: Add GID Derivation to sdcardfs f25953f4 ANDROID: sdcardfs: Remove redundant operation 7c2424f4 ANDROID: sdcardfs: add support for user permission isolation b311d4f2 ANDROID: sdcardfs: Refactor configfs interface 034a2205 ANDROID: sdcardfs: Allow non-owners to touch Linux version 3.10.73-gc7494d3 (android-build@wpdu5.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Feb 8 23:12:19 UTC 2017 (master) Bug: 11118565 Bug: 34262585 Bug: 34542611 Bug: 34815073 Bug: 34948874 Change-Id: I1eeb004cab96f798e7b3b4e6fb55cc12a6b6b36f Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Dave Weinstein <olorin@google.com>
2017-02-02bullhead: update prebuilt kernelJerry Zhang
855098ce usb: gadget: f_fs: Unlock before allocating endpoint buffer Linux version 3.10.73-g855098c (android-build@wphr5.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Feb 2 19:57:17 UTC 2017 (master) Bug: 34741015 Bug: 34822471 Change-Id: I29babbe7ec4ffb0cb0fa496bdf637041ff1e5539 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Jerry Zhang <zhangjerry@google.com>
2017-02-02bullhead: update prebuilt kernelPatrick Tjin
e61a629a msm: vidc: Check ion_handle for errors d2c3b3b6 Merge branch android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 0c0a72a0 ANDROID: Fixing incorrect return value on error b99b7884 ANDROID: Fix for building non-arm64 d899943e ANDROID: Support to disable arm32 Kuser_Helpers 446aa6a6 Revert "audio: mbhc fix" 78f3ee9b Revert "audio: mbhc fix" a848c65f Merge branch android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 d9dfd305 random32: include missing header file 5bb169b7 ARM64: Wire up getrandom. 1e6ffcb1 BACKPORT: ARM: wire up getrandom syscall 2513e973 BACKPORT: random: Wake up all getrandom(2) callers when pool is ready f4387cc4 BACKPORT: random: introduce getrandom(2) system call 71726ee8 BACKPORT: random32: add prandom_reseed_late() and call when nonblocking pool becomes initialized df074e79 BACKPORT: random32: add periodic reseeding Linux version 3.10.73-ge61a629 (android-build@vpec2.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Feb 2 17:51:30 UTC 2017 (master) Bug: 29621447 Bug: 33275862 Bug: 33689037 Bug: 33979347 Bug: 34749002 Change-Id: Ia95b79e83657f68383aedbb8c936e8a38728b903 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>
2017-01-23bullhead: update prebuilt kernelDave Weinstein
e085fb27 ANDROID: lib: vsprintf: default kptr_restrict to the maximum value ec1ff882 ANDROID: lib: vsprintf: physical address kernel pointer filtering options 19c833e0 ANDROID: lib: vsprintf: whitelist stack traces 2e956a2a ANDROID: lib: vsprintf: additional kernel pointer filtering options 6f4585f5 usb: gadget: f_fs: Don't change buf_len if alloc fails Linux version 3.10.73-ge085fb2 (android-build@wphp6.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon Jan 23 05:47:24 UTC 2017 (master) Bug: 30368199 Change-Id: I4efbbfdad9f879a9a1946ff18103b31e23a2cea6 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Dave Weinstein <olorin@google.com>
2017-01-18bullhead: update prebuilt kernelPatrick Tjin
1add38c3 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 f447a439 Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 d3d680c3 net: rmnet_data: Fix incorrect netlink handling 44e17a6f msm: ipa: Prevent multiple header deletion from user space e1fb1600 input: synaptics: put offset checks under mutex. 11d6e302 qcacld-2.0: Add buf len check in wlan_hdd_cfg80211_testmode 415ccacc Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 6e3f0c03 Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 e127a812 msm: crypto: fix issues on digest buf and copy_from_user in qcedev.c 9a102698 msm: camera: sensor: Validate eeprom_name string length bbdbff2d msm: cpp: Fix for buffer overflow in cpp. 1e621ebe msm: camera: fix bound check of offset to avoid overread overwrite c28a1353 ANDROID: ion: check for kref overflow 2c17909f mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] fbb9709f ASoC: msm-lsm-client: cleanup ioctl functions db1764fe msm: vidc: WARN_ON() reveals fuction addresses a117bb40 msm: cpp: Fix for integer overflow in cpp f3793a63 l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() 4b1a565b qcacld-2.0: Remove obsolete set/reset ssid hotlist 9c0740fc qcacld-2.0: Fix array out-of-bounds & integer underflow in _iw_set_genie 36f62e58 UPSTREAM: net: avoid signed overflows for SO_{SND|RCV}BUFFORCE a6ae373c UPSTREAM: packet: fix race condition in packet_set_ring caa81609 UPSTREAM: l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() 6789307c msm: ADSPRPC: Buffer length truncated while validation fc145062 msm: ADSPRPC: Buffer length to be copied is truncated 0527c847 net: ipc_router: Register services only on client port 03c32570 BACKPORT: msm-core: use get_user() API to read userspace data/settings 14139f66 msm: kgsl: Reserve a context ID slot but don't populate immediately 0847db05 msm: ipa: Update IPA rule temp buffer size f97a38bc bullhead: config: enable CONFIG_CRYPTO_SHA512 and savedefconfig 4ba200ad usb: gadget: f_fs: Free buffer on epfile cleanup Linux version 3.10.73-g1add38c (android-build@vpba1.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Jan 19 07:22:38 UTC 2017 (master) Bug: 31252965 Bug: 31695439 Bug: 31750232 Bug: 31824853 Bug: 31992382 Bug: 32073794 Bug: 32342399 Bug: 32709702 Bug: 32720522 Bug: 32873615 Bug: 32877245 Bug: 32919951 Bug: 32940193 Bug: 33002026 Bug: 33106520 Bug: 33139056 Bug: 33277611 Bug: 33358926 Bug: 33363517 Bug: 33401771 Bug: 33555878 Bug: 33745862 Bug: 33753815 Bug: 33979145 Bug: 34114242 Bug: 34128678 Change-Id: I9727d4d28e779b518a997206034113222cd3c4b4 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>
2017-01-12bullhead: update prebuilt kernelJerry Zhang
5d36c538 usb: gadget: f_fs: Modify endpoint_alloc, check size input b5d992cc usb: gadget: android: Acquire ffs_configs_lock before dev lock b5ea9943 ANDROID: fix uninitilized variable Linux version 3.10.73-g5d36c53 (android-build@wphq8.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Jan 11 18:42:39 UTC 2017 (master) Bug: 33353384 Bug: 34195545 Change-Id: Ib0fd23b63a2d1d1d910f25aff18dc811a584ec80 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Jerry Zhang <zhangjerry@google.com>
2017-01-09bullhead: update prebuilt kernelDaniel Rosenberg
8889caaa ANDROID: mnt: remount should propagate to slaves of slaves f490323b ANDROID: sdcardfs: Fix locking issue with permision fix up ea268d0f ANDROID: vfs: Missed updating truncate to truncate2 a85e9d88 BACKPORT: smarter propagate_mnt() 19ae5406 BACKPORT: don't bother with propagate_mnt() unless the target is shared c3797a00 sdcardfs: Change magic value e1189338 sdcardfs: Use per mount permissions 22e96f1d sdcardfs: Add gid and mask to private mount data 682e443f sdcardfs: User new permission2 functions 26920bdc vfs: Add setattr2 for filesystems with per mount permissions 11cf20bd vfs: Add permission2 for filesystems with per mount permissions b8042161 vfs: Allow filesystems to access their private mount data 70c8b04d mnt: Add filesystem private data to mount points 40a5282f sdcardfs: Move directory unlock before touch 28f82bb1 sdcardfs: fix external storage exporting incorrect uid c9783798 sdcardfs: Added top to sdcardfs_inode_info 4b3a2b99 sdcardfs: Switch package list to RCU 3b1c1cb7 sdcardfs: Fix locking for permission fix up ee67a8d4 sdcardfs: Check for other cases on path lookup cd1852d6 sdcardfs: override umask on mkdir and create fcb795b0 arm64: bullhead_defconfig: Unsetting DEVPORT from bullhead configurations. ce2919bf net: socket: don't set sk_uid to garbage value in ->setattr() 4cf0e346 Fixing an issue that caused DEVPORT to always be set. 9518b70e Merge branch android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 bc7f262b qcacld-2.0: wlan host driver upgrade to 4.4.23.014 256823c9 qcacld-2.0: Add recovery in pci resume failure case 9a6bf0c4 net: ipv4: Don't crash if passing a null sk to ip_rt_update_pmtu. 807911df net: inet: Support UID-based routing in IP protocols. a66ad98d net: core: add UID to flows, rules, and routes 90bd7a95 net: core: Add a UID field to struct sock. e813633e Revert "net: core: Support UID-based routing." cfe72727 Revert "Handle 'sk' being NULL in UID-based routing." 30b0ec75 tcp: fix more NULL deref after prequeue changes 2bf7c2a4 net: ipv6: make "ip -6 route get mark xyz" work. ab4be692 usb: gadget: f_fs: Add ioctl for allocating endpoint buffers. 899e4a62 usb: gadget: android: Add support for multiple ffs functions c932a946 usb: gadget: f_fs: Fixed condition race on endpoints, updated logging 2f6156c3 usb: gadget: f_fs: add ioctl returning ep descriptor 488f3bdc Merge branch android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 8d55f76c qcacld-2.0: wlan host driver upgrade to 4.4.23.013 657b3186 qcacld-2.0: Reduce log level in smeTraceDump 5414d8d8 qcacld-2.0: Fix memory leak issue 2431031b arm64/configs: enable RCU_BOOST Linux version 3.10.73-g8889caaa (android-build@vpec1.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon Jan 9 23:21:03 UTC 2017 (master) Bug: 16355602 Bug: 27992761 Bug: 28024488 Bug: 30954918 Bug: 31240601 Bug: 32633926 Bug: 33007108 Bug: 33301618 Bug: 33515548 Bug: 33731928 Change-Id: I9a53e0b46ec15e86dfd6ff3d48b313776689936c Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Daniel Rosenberg <drosen@google.com>
2016-12-08bullhead: update prebuilt kernelPatrick Tjin
8e84af9 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 71d1523 Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 fe160e5 input: synaptics_dsx: remove some sysfs nodes. 8fc2d90 qcacld-2.0: Avoid overflow of "set_bssid_hotlist" params f7fdce7 qseecom: remove entry from qseecom_registered_app_list 26e873d qcacld-2.0: Avoid overflow of "significant change" params 138c690 qcacld-2.0: Avoid overflow of roam subcmd params a7e9d41 qcacld-2.0: wlan host driver upgrade to 4.4.23.013s_1 5b3f9bb qcacld-2.0: Avoid overflow of passpoint network list 391b6ee qcacld-2.0: Validate "set passpoint list" network count 0160130 qcacld-2.0: Avoid overflow of EXTSCAN bucket list 983ad94 qcacld-2.0: Avoid overflow of EPNO network list 5dcbbf8 qcacld-2.0: Properly parse PNO vendor command 406bd25 fs/proc/array.c: make safe access to group_leader ff01d89 drivers: soc: add size checks and update log messages 62275da drivers: soc: Add buffer overflow check for svc send request b49118b Kconfig: msm: disable ultrasound driver 5800e41 BACKPORT: aio: mark AIO pseudo-fs noexec 75a9679 qcom: scm: remove printing input arguments a756dc0 UPSTREAM: capabilities: ambient capabilities 6ceb956 BACKPORT: security: fix typo in security_task_prctl Linux version 3.10.73-g8e84af9 (android-build@vpec1.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Dec 7 20:29:13 UTC 2016 (master) (02/2017) Bug: 31038224 Bug: 31495866 Bug: 31704078 Bug: 31711619 Bug: 31796345 Bug: 31804432 Bug: 31906415 Bug: 31906657 Bug: 32402310 Bug: 32450647 Bug: 32451104 Bug: 32451171 Bug: 32454494 Bug: 32553868 Bug: 32769717 Bug: 32872662 Bug: 32879283 Bug: 33252788 Bug: 33340301 Change-Id: Ibd27aa112e0b546bd25894e42c5ef10a268b2f69 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>
2016-11-17bullhead: update prebuilt kernelPatrick Tjin
ef07b32 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10 dc554ff Merge branch 'android-msm-bullhead-3.10-nyc-mr1' into android-msm-bullhead-3.10-nyc-mr2 d28c62a Merge branch 'android-msm-bullhead-3.10-nyc-bugfix' into android-msm-bullhead-3.10-nyc-mr1 1992492 ion: Fix use after free during ION_IOC_ALLOC 2c08185 qcacld-2.0: Add check to Validate SSID length c3ef29b qcacld-2.0: Fix hdd_ocb_config_new() signature 1fe7366 perf: don't leave group_entry on sibling list (use-after-free) ddf6234 UPSTREAM: ring-buffer: Prevent overflow of size in ring_buffer_resize() 3d654fa msm: kgsl: fix sync file error handling 8250bd6 BACKPORT: mm: avoid setting up anonymous pages into file mapping ac2afe0 input: synaptics_dsx: add update bounds checks. ef16a7d ALSA: info: Check for integer overflow in snd_info_entry_write() f858ef6 msm: ispif: Remove handling of SD_SHUTDOWN c16477d ASoC: msm: set pointers to NULL after kfree 11b2350 msm: sensor: Adding mutex for actuator power down operations 4f45afb input: ldaf: Initialize buffers before use. eaf4086 Merge branch android-msm-bullhead-3.10-nyc-mr2 into android-msm-bullhead-3.10 8d8b94b arm64/configs: bullhead: add CONFIG_QUOTA 5031372 msm: kgsl: Add accounting for memory mapped in userspace 991db66 UPSTREAM: procfs: fixes pthread cross-thread naming if !PR_DUMPABLE b05c022 qcacld-2.0: Use heap memory for station_info instead of stack 859474d binder: blacklist %p kptr_restrict 5853cef ion: blacklist %p kptr_restrict 9249851 msm: mdss: blacklist %p kptr_restrict 549fd60 qdsp6v2: blacklist %p kptr_restrict ac591d0 BACKPORT: perf: Fix event->ctx locking 214a14c perf: protect group_leader from races that cause ctx double-free 834c0fa drivers: video: Add bounds checking in fb_cmap_to_user 660acd9 msm: sensor: validate the i2c table index before use dfbe808 BACKPORT: msm: camera: Avoid exposing kernel addresses 52498d4 BACKPORT: msm: camera: cpp: Add validation for v4l2 ioctl arguments 7a4db54 UPSTREAM: mm: remove gup_flags FOLL_WRITE games from __get_user_pages() 5a3d8a9 input: synaptics: prevent sysfs races 6b9c864 input: synaptics: defer sysfs creation during init 94f4b81 input: synaptics: Add checks of user input data 6e5299d msm: crypto: Fix integer over flow check in qcrypto driver 90db558 UPSTREAM: perf: Fix race in swevent hash 3300b69 msm: vidc: use %pK instead of %p which respects kptr_restrict sysctl. 215b86e msm: kgsl: Change %p to %pK in debug messages 90c34e1 UPSTREAM: proc: prevent accessing /proc/<PID>/environ until it's ready 6ccc4c6 arm64/configs: bullhead: disable extra SCSI configs df6242b soc: qcom: smp2p: Fix kernel address leak e296c23 msm: msm_bus: fix stack overflow bug c7a0123 misc: qcom: qdsp6v2: initialize wma_config_32 746a7d5 msm: camera: cpp: Validate frame message before manipulating it. a08f9ac ASoC: msm: Add Buffer overflow check e1a128e Revert "Asoc:msm:Added Buffer overflow check" c390112 UPSTREAM: af_unix: Guard against other == sk in unix_dgram_sendmsg 3a44dcf misc: qcom: qdsp6v2: initialize config_32 4bb59b5 cgroup: prefer %pK to %p 6efbbb9 UPSTREAM: block: fix use-after-free in seq file 810a387 msm: camera: Restructure data handling to be more robust 6d5b06b msm: sensor: Avoid potential stack overflow 9aa7780 qcedev: Validate Source and Destination addresses aa11a47 ion: Disable ION_HEAP_TYPE_SYSTEM_CONTIG dbee064 input: synaptics: Validate offset and reg 2be1040 msm-core: debug: Update the number of supported pstates. 86a732e ASoC: msm: initialize the params array before using it ce6517e qseecom: Change format specifier %p to %pK f26a643 UPSTREAM: HID: core: prevent out-of-bound readings c56c177 BACKPORT: ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call 917dabc BACKPORT: ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk() c69bc1e BACKPORT: tty: Prevent ldisc drivers from re-using stale tty fields f7c90a3 UPSTREAM: tcp: fix use after free in tcp_xmit_retransmit_queue() abc46c7 BACKPORT: block: fix use-after-free in sys_ioprio_get() 76d746e qcacld-2.0: wlan host driver upgrade to 4.4.23.009 cd30625 qcacld-2.0: Optimize WoW Wakelock usage in Runtime PM 92b8bde qcacld-2.0: Add support for silent recovery in vos_trigger_recovery() a471aac qcacld-2.0: Use correct API to initiate SSR upon fatal event 2c43384 qcacld-2.0: Prevent NOC/Link Access in resume when Link is down bb8b6f1 qcacld-2.0: wlan host driver upgrade to 4.4.23.008 098785b qcacld-2.0: Do not probe MC thread when its suspended 89e5114 qcacld-2.0: Add recovery logic when wmi cmd buffer reach threshold 27e64cb qcacld2.0: Add log to print channel number and frequency bc2b10c qcacld-2.0: Process disassociate with invalid reason code fe34ce0 qcacld-2.0: wlan host driver upgrade to 4.4.23.007 a163690 qcacld-2.0: skip VOS_BUG if SSR is already in progress d02055e qcacld-2.0: Initialize Ramdump Global Pointer before self recovery 7058e51 qcacld-2.0: wlan host driver upgrade to 4.4.23.006 f37060a ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct c228551 ANDROID: binder: Add strong ref checks 1e203e9 qseecom: validate the inputs of __qseecom_send_modfd_resp 04f15d7 msm: mdss: Correct block id check for mdss_mdp_misr_table a3444e8 msm: crypto: Fix integer overflow check in qcedev driver ca7bcae msm: camera: sensor: Fix use after free condition a3d0376 msm: camera: restructure data handling to be more robust fa0fb5f arm64: dma-mapping: always clear allocated buffers d864943 input: synaptics: allocate heap memory for buffer 517600b msm: ipa: handle information leak on ADD_FLT_RULE_INDEX ioctl 2f7017c qcacld-2.0: Remove the support for setwpaie ioctl dcd7c8f UPSTREAM: arm64: perf: reject groups spanning multiple HW PMUs c3ab46c msm: ADSPRPC: Do not access user memory directly b884cbf binder: prevent kptr leak by using %pK format specifier 438d803 qcacld-2.0: Remove the support for iw_set_priv ioctl 1dc6ebe BACKPORT: tcp: make challenge acks less predictable 01afb44 UPSTREAM: net: Fix use after free in the recvmmsg exit path 5e6ea9e ASoC: msm: qdsp6v2: Add size check in audio cal ioctl c699ed4 msm: mdss: Fix to validate data copied from user space 8d496e9 ASoC: check for null function pointer for dummy device read/write 98daee8 ASoC: msm-lsm-client: free lsm client data in msm_lsm_close 55b6fa0 misc: qcom: qdsp6v2: Add missing initialization 1796f62 staging: android: Change %p to %pK in debug messages 9d3a4ad Merge branch 'android-msm-bullhead-3.10-nyc-security-next' into android-msm-bullhead-3.10-nyc 851412f net: ipc_router: Bind only a client port as control port ff43024 Merge branch 'android-msm-bullhead-3.10-nyc-security-next' into android-msm-bullhead-3.10-nyc Linux version 3.10.73-gef07b32 (android-build@vpee10.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Nov 17 18:42:14 UTC 2016 (master) Bug: 25862282 Bug: 27045580 Bug: 28032718 Bug: 28751152 Bug: 28838221 Bug: 28912263 Bug: 29119002 Bug: 29156684 Bug: 29157595 Bug: 29242387 Bug: 29323142 Bug: 29464815 Bug: 29508816 Bug: 29513227 Bug: 29795245 Bug: 29915601 Bug: 29941999 Bug: 29953313 Bug: 29982678 Bug: 29986876 Bug: 29999665 Bug: 30019716 Bug: 30034511 Bug: 30067360 Bug: 30074605 Bug: 30076504 Bug: 30102557 Bug: 30142668 Bug: 30143283 Bug: 30143904 Bug: 30148242 Bug: 30148243 Bug: 30149174 Bug: 30152182 Bug: 30228438 Bug: 30311977 Bug: 30312054 Bug: 30400942 Bug: 30407099 Bug: 30445380 Bug: 30445973 Bug: 30507021 Bug: 30515053 Bug: 30515201 Bug: 30537088 Bug: 30559423 Bug: 30593266 Bug: 30635019 Bug: 30740545 Bug: 30741851 Bug: 30768347 Bug: 30799828 Bug: 30809774 Bug: 30874196 Bug: 30902162 Bug: 30942273 Bug: 30946378 Bug: 30951112 Bug: 30951261 Bug: 30951599 Bug: 30951939 Bug: 30952077 Bug: 30952477 Bug: 30955111 Bug: 30970485 Bug: 31062353 Bug: 31095224 Bug: 31183296 Bug: 31225246 Bug: 31243641 Bug: 31252388 Bug: 31494725 Bug: 31495231 Bug: 31498159 Bug: 31498403 Bug: 31525965 Bug: 31568617 Bug: 31651010 Bug: 31750554 Bug: 31795790 Bug: 31799972 Bug: 31968442 Bug: 32125137 Bug: 32141528 Bug: 32402548 Bug: 32450563 Bug: 32460277 Bug: 32506333 Bug: 32506396 Bug: 32510733 Bug: 32659848 Change-Id: I0e26388ffefb6bb107349221f0f3c4e0195cc25c Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>
2016-11-03bullhead: update prebuilt kernelMartijn Coenen
02111bc arm64/configs: bullhead: enable hwbinder domain. ea754f6 android: binder: use copy_from_user_preempt_disabled 6ecfa657 android: binder: support for file-descriptor arrays. e044e40 android: binder: support for scatter-gather. f71aea5 android: binder: add extra size to allocator. b16a449 android: binder: refactor binder_transact() c72516e android: binder: support multiple /dev instances. 8d15919 android: binder: deal with contexts in debugfs. 089fe8e android: binder: support multiple context managers. 9eb81af android: binder: split flat_binder_object. e54305d Revert "Backport ioctl for getting descriptors." ca088fa Revert "Added support for multiple ffs functions in android.c" 6201de2 Revert "Fixed bug in f_fs.c where reuse of a condition caused a race." d6dfee6 Revert "Use vmalloc to allow for larger buffer sizes in ffs r/w." 1f19a27 Revert "Fix max_t arguments." 73ab712 Fix max_t arguments. 4bada81 Use vmalloc to allow for larger buffer sizes in ffs r/w. 1acdf27 Fixed bug in f_fs.c where reuse of a condition caused a race. 4664e70 Added support for multiple ffs functions in android.c c57495e Backport ioctl for getting descriptors. 01872d0 Merge branch android-msm-bullhead-3.10-security-next into android-msm-bullhead-3.10 4ad31ef net: ping: Fix stack buffer overflow in ping_common_sendmsg() e529c68 UPSTREAM: staging/android/ion : fix a race condition in the ion driver d07c5b4 UPSTREAM: KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring b10e05ff UPSTREAM: KEYS: Fix race between key destruction and finding a keyring by name bcec0d5 perf: protect group_leader from races that cause ctx double-free 9b3f92e BACKPORT: perf: Fix event->ctx locking 0305f39 input: synaptics: add bounds checks for firmware id 0aed34c ASoC: msm: lock read/write when add/free audio ion memory f6e995a ion: blacklist %p kptr_restrict bba6dc3 qdsp6v2: blacklist %p kptr_restrict 1da11c4 msm: mdss: blacklist %p kptr_restrict 50fe309 binder: blacklist %p kptr_restrict 813d274 netfilter: Change %p to %pK in debug messages dfcc0ff usb: gadget: f_mbim: Change %p to %pK in debug messages 6a044e2 drivers: video: Add bounds checking in fb_cmap_to_user 01e7af8 ASoC: check for null function pointer for dummy device read/write, take 2 1c8d8b7 msm: sensor: validate the i2c table index before use 5667cac UPSTREAM: arm64: make sys_call_table const b493844 ARM: make sure RO local relocations are part of kernel RO section 8a3a3dc BACKPORT: msm: camera: Avoid exposing kernel addresses 155336b BACKPORT: msm: camera: cpp: Add validation for v4l2 ioctl arguments Linux version 3.10.73-g02111bc (android-build@vped7.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Nov 3 08:41:36 UTC 2016 (master) Bug: 28838221 Bug: 29464815 Bug: 30148242 Bug: 30740545 Bug: 30955111 Bug: 31095224 Bug: 31252384 Bug: 31253168 Bug: 31349935 Bug: 31494725 Bug: 31495231 Bug: 31498403 Bug: 31568617 Bug: 31651010 Bug: 31660652 Bug: 31703084 Bug: 31796940 Bug: 31802656 Bug: 31911920 Test: Bullhead boots Change-Id: I0bc7a2d608757fc1d34082025d570244c6cf7e74 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Martijn Coenen <maco@google.com>
2016-10-20bullhead: update prebuilt kernelnougat-mr1-devPatrick Tjin
c33d1bd UPSTREAM: mm: remove gup_flags FOLL_WRITE games from __get_user_pages() Linux version 3.10.73-gc33d1bd (android-build@vpeb4.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Oct 21 04:43:24 UTC 2016 (master) Bug: 32141528 Change-Id: Ibcdbc530c4433594f651027c044e3ff9f5820608 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>
2016-10-06bullhead: update prebuilt kernelWei Wang
478382f arm64/configs: bullhead: remove kernel logger Linux version 3.10.73-g478382f (android-build@vpeb5.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Oct 6 23:26:24 UTC 2016 (master) Bug: 31941628 Change-Id: Ifba8dad14b4867b61efd162074e08ace51eb70f4 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Wei Wang <wvw@google.com>
2016-10-04bullhead: update prebuilt kernelThierry Strudel
d248903 fs: fuse: fix invalid write bypass Linux version 3.10.73-gd248903 (android-build@kpfk4.cbf.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Tue Oct 4 15:49:13 UTC 2016 (master) Bug: 31800123 Change-Id: If67e5e1ef9e6507e92c4fbdb659fdb56a63baef9 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Thierry Strudel <tstrudel@google.com>
2016-09-29bullhead: update prebuilt kernelEcco Park
13b0caf qcacld-2.0: wlan host driver upgrade to 4.4.23.012 276af94 qcacld-2.0: Add support to handle TDLS event in WOW mode Linux version 3.10.73-g13b0caf (android-build@vpec13.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Thu Sep 29 17:54:07 UTC 2016 (master) Bug: 31681053 Change-Id: I07c9ef1e5c22e9431f0a30116b67db960f1a61cd Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2016-09-28bullhead: update prebuilt kernelRobb Glasser
3f68220 ASoC: msm-cpe-lsm: use vzalloc for sound model and confidence levels 5120222 Add padding field to fuse_open_out Linux version 3.10.73-g3f68220 (android-build@vpeb11.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Sep 28 21:41:28 UTC 2016 (master) Bug: 30222859 Bug: 31044133 Change-Id: I241d72806850a6ddfb92b4b2d23409e817cddf48 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Robb Glasser <rglasser@google.com>
2016-09-26bullhead: update prebuilt kernelRobb Glasser
da84eb7 qseecom: Fix ion memory issue during unload app failure 3ff44bb qseecom: don't release ion share memory if scm_call unload TA failed 45255af qseecom: release ION memory if qseecom failed to unload app Linux version 3.10.73-gda84eb7 (android-build@wpiw14.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon Sep 26 21:25:58 UTC 2016 (master) Bug: 31220655 Change-Id: I375da884981b03136ceabdfed38d3e5426a424c2 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Robb Glasser <rglasser@google.com>
2016-09-22bullhead: update prebuilt kernelJohn Dias
d54f517 sched: fix task-priority when using SCHED_RESET_ON_FORK 558dc61 qcacld-2.0: wlan host driver upgrade to 4.4.23.011 84efeda qcacld-2.0: Validate multicast filter count d192cbc qcacld-2.0: Cache ARP/NS offload request at wma layer 3db8915 qcacld-2.0: Add proto tracing for ARP, NS and NA packets 507dd6d qcacld-2.0: Fix warning while stopping pmfcomeback timer for roam session c6f5b97 qcacld-2.0: Fix pmfComebackTimer during roaming Linux version 3.10.73-gd54f517 (android-build@wpiv13.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Sep 23 00:10:59 UTC 2016 (master) Bug: 27705114 Bug: 30017324 Bug: 30894488 Bug: 30989414 Bug: 31037507 Bug: 31358630 Change-Id: I44191aef686168ca0e4fcde7a009e6013997ca6b Source-Branch: android-msm-bullhead-3.10 Signed-off-by: John Dias <joaodias@google.com>
2016-09-21bullhead: update prebuilt kernelTim Murray
aecb635 lowmemorykiller: account for unevictable pages Linux version 3.10.73-gaecb635 (android-build@wpix8.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Sep 21 21:08:32 UTC 2016 (master) Bug: 31255977 Change-Id: I2f87b6720c947ddff592b265d318b76591f55c8e Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Tim Murray <timmurray@google.com>
2016-09-20bullhead: update prebuilt kernelEcco Park
9038ba8 qcacld-2.0: wlan host driver upgrade to 4.4.23.010 2c52c70 qcacld-2.0: Optimize packet trace dumping 0fc8e26c qcacld-2.0: Flush driver and firmware logs only for driver ring id d073706 qcacld-2.0: Add API to find IPv6 mcast packet 37a0dc9 qcacld-2.0: Correct wow wakeup counters abb415b qcacld-2.0: Add ipv4 and ipv6 packet checks d7af948 qcacld-2.0: Acquire read lock before accessing the address list 8b48dd2 qcacld-2.0: Optimize the spinlock usage in suspend callback 8b9f4b3 qcacld-2.0: Increment wow wakeup counter wow_ipv6_mcast_wake_up_count e7d9605 qcacld-2.0: Configure NSoffload request in case of active mode offload cca61fc6 qcacld-2.0: Dump more WoW wakeup packet info e4818bb qcacld-2.0: Active mode offload support c4c99de qcacld-2.0: Remove hardcoded value and set qpower appropriately 616e681 qcacld-2.0: make configurable rx wakelock duration befe37a qcacld-2.0: If BSS is unreachable remove it from scan cache 5492ad9 qcacld-2.0: Don't Tag Non-WoW packets as Runtime PM packets after wow suspend fa3546b qcacld-2.0: Set htc tx tag when call set vdev suspend dtim 6e0a9bf qcacld-2.0: Block interface down until pending scan request is aborted 265f203 qcacld-2.0: Stop memory tracking after trace_buffer free a52dc5f qcacld-2.0: Correctly handle the error conditions in the driver startup 8497c65 qcacld-2.0: Prevent use after free for packet trace buffer 15a4c2c qcacld-2.0: Fix mac address print issue in WOW RX API d9e2a60 qcacld-2.0: Correct compilation error for dhcp proto trace changes 9031d52 qcacld-2.0: Free Proto trace buffer after disconnection 4d8df36 qcacld-2.0: Clear MC filters when more than max available 4f95d43 qcacld-2.0: Increase the ethernet MC address list size 82fd00a qcacld-2.0: Add support to print local time in proto trace buffer eb0cd7c qcacld-2.0: Add capability based logic to mark first packet after wakeup d0f404a qcacld-2.0: CL 1524393 – update fw common interface files c3e7e6e qcacld-2.0: CL 1522096 – update fw common interface files db245d8 qcacld-2.0: CL 1521398 – update fw common interface files 5603ec6 qcacld-2.0: CL 1519524 – update fw common interface files a0a2f2b qcacld-2.0: CL 1517922 – update fw common interface files dbd477d qcacld-2.0: CL 1515730 – update fw common interface files 42dfa87 qcacld-2.0: CL 1515711 – update fw common interface files fb96acf qcacld-2.0: CL 1513397 – update fw common interface files 32f90e5 qcacld-2.0: CL 1511668 – update fw common interface files f5c1950 qcacld-2.0: CL 1509574 – update fw common interface files a2852d0 qcacld-2.0: CL 1509448 – update fw common interface files fc918cb qcacld-2.0: Add place holder enums for new feature 844aaed qcacld-2.0: CL 1507516 – update fw common interface files b65f95b qcacld-2.0: CL 1506155 – update fw common interface files c1d9d23 qcacld-2.0: CL 1489600 – update fw common interface files eede49c3 qcacld-2.0: CL 1501755 - update fw common interface files 585d50c qcacld-2.0: CL 1498085 - update fw common interface files ca8748b qcacld-2.0: CL 1496762 - update fw common interface files d8b1fb1 qcacld-2.0: Fix tlv length assignment in WMI int message f9df499 qcacld-2.0: Clear Link layer PEER stats during disconnection 0677f64 qcacld-2.0: Fix type mismatch and bitwise operation on different size 1b3da29 qcacld 2.0: Prevent Null pointer access during tdls exit 523f79f qcacld-2.0: Fix crash in wlan_hdd_tdls_check_power_save_prohibited 4aad3de qcacld 2.0: Prevent buffer overflow in QCSAP_IOCTL_VERSION c50b3a7 qcacld-2.0: Avoid pkt trace deinit in FTM and EEPING mode 932ee73 qcacld-2.0: Dump header info for first mgmt. packet after WOW wakeup 983adfd qcacld-2.0: Dump header info for first data packet after WOW wakeup 5257321 qcacld-2.0: Add APIs to get packet type and subtype 83f9e9b qcacld-2.0: Fix issue when DP trace feature is not enabled 8e3d7aa qcacld-2.0: Refactor DPTRACE to support new features 90d12b7 qcacld-2.0: Do runtime resume when a packet comes to fw paused tx queues 18dddd86 qcacld-2.0: API to do runtime pm active d50d116 qcacld-2.0: Update ICMP and ICMPV6 WOW wake up stats 6387ba6 qcacld-2.0: Fix the bug in populating the ll stats ca6a268 qcacld-2.0: Fix out of bound issue in wlan_logging_proc_sock_rx_msg b312793 qcacld-2.0: Fix out of bound access in csrScanSmeScanResponse 236c1bd qcacld-2.0: Fix a deadlock in proto trace a707007 qcacld-2.0: Resolve memory leakage in limAssocUtils.c 73f4846 qcacld-2.0: Resolve memory leakage in wma.c a0a10d0 qcacld-2.0: Record data in DP Trace ae834c4 qcacld-2.0: Add DP TRACE framework b6b6288 qcacld-2.0: Dump Snapshot of the driver for LL 2aae505 net: inet: diag: expose the socket mark to privileged processes. 6043451 net: diag: make udp_diag_destroy work for mapped addresses. 451f227 net: diag: support SOCK_DESTROY for UDP sockets c3636b6 net: diag: allow socket bytecode filters to match socket marks 81a04e8 net: diag: slightly refactor the inet_diag_bc_audit error checks. 2b8a6a4 net: diag: Add support to filter on device index Linux version 3.10.73-g9038ba8 (android-build@wpdt1.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Sep 21 00:16:51 UTC 2016 (master) Bug: 29404209 Bug: 30008590 Bug: 30092816 Bug: 30138831 Bug: 30252489 Bug: 30253865 Bug: 30293222 Bug: 30557396 Bug: 30784832 Bug: 31438853 Change-Id: I8751c3b262ce8784d5ce272fbda5869c3cad4c3b Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Ecco Park <eccopark@google.com>
2016-09-19bullhead: update prebuilt kernelPatrick Tjin
6353437 Merge branch 'android-msm-bullhead-3.10-security-next' into android-msm-bullhead-3.10 9830f36 msm: crypto: Fix integer over flow check in qcrypto driver 9ecc9d6 UPSTREAM: perf: Fix race in swevent hash ba1f3f7 msm: vidc: use %pK instead of %p which respects kptr_restrict sysctl. f9cc372 msm: kgsl: Change %p to %pK in debug messages 1b5fee1 UPSTREAM: proc: prevent accessing /proc/<PID>/environ until it's ready 9397e20 input: synaptics: prevent sysfs races 80dd426 input: synaptics: defer sysfs creation during init 99d8082 input: synaptics: Add checks of user input data 931dd77 pstore: drop pmsg bounce buffer 8be927c arm64/configs: bullhead: disable extra SCSI configs 3eb6104 soc: qcom: smp2p: Fix kernel address leak 634e5cc msm: msm_bus: fix stack overflow bug eed6ef8 misc: qcom: qdsp6v2: initialize wma_config_32 dc6397c msm: camera: cpp: Validate frame message before manipulating it. e06cd33 ASoC: msm: Add Buffer overflow check 93f82eb Revert "Asoc:msm:Added Buffer overflow check" f8e4b5e UPSTREAM: af_unix: Guard against other == sk in unix_dgram_sendmsg 57e166c misc: qcom: qdsp6v2: initialize config_32 33f6af4 cgroup: prefer %pK to %p 3d1222b UPSTREAM: block: fix use-after-free in seq file 2eefb63 msm: camera: Restructure data handling to be more robust b5ed98e qcedev: Validate Source and Destination addresses 6d09553 msm: sensor: Avoid potential stack overflow c0c306e ion: Disable ION_HEAP_TYPE_SYSTEM_CONTIG 97e2148 input: synaptics: Validate offset and reg 16cfbb7 msm-core: debug: Update the number of supported pstates. 38ddb94 ASoC: msm: initialize the params array before using it d471b05 qseecom: Change format specifier %p to %pK aea60d0 UPSTREAM: HID: core: prevent out-of-bound readings e2322fd BACKPORT: ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call 16ef227 BACKPORT: ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk() f1ad2f8 BACKPORT: tty: Prevent ldisc drivers from re-using stale tty fields 263c0ab UPSTREAM: tcp: fix use after free in tcp_xmit_retransmit_queue() fbf139b BACKPORT: block: fix use-after-free in sys_ioprio_get() Linux version 3.10.73-g6353437 (android-build@vpec12.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon Sep 19 22:15:47 UTC 2016 (master) Bug: 28751152 Bug: 29119002 Bug: 30034511 Bug: 30074605 Bug: 30076504 Bug: 30143904 Bug: 30149174 Bug: 30228438 Bug: 30311977 Bug: 30312054 Bug: 30400942 Bug: 30445973 Bug: 30515053 Bug: 30559423 Bug: 30593266 Bug: 30741851 Bug: 30799828 Bug: 30902162 Bug: 30942273 Bug: 30946378 Bug: 30951112 Bug: 30951261 Bug: 30951599 Bug: 30951939 Bug: 30952077 Bug: 30952477 Bug: 30970485 Bug: 31057326 Bug: 31183296 Bug: 31252388 Bug: 31498159 Change-Id: Ie79aeb9488c77a91574eada1608326f4ff0939b2 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>
2016-09-14bullhead: update prebuilt kernelShuzhen Wang
a0a1710 msm: camera: Update event_timestamp to be monotonic a20d461 fs:fuse: Disable shortcircuit when mmap is called on a file dd64d0d fs:fuse: Ensure update of fuse inode attributes in shortcircuit 702bb61 fuse: Add support for shortcircuited read/write for files 2f33172 Revert "fuse: Add support for fuse stacked I/O" 0d57846 sps: add spinlock protection for pipes_q being tainted b4dfc84 UPSTREAM: drivers/input/evdev.c: don't kfree() a vmalloc address 1d75eef UPSTREAM: Input: evdev - use kvfree() in evdev_release() 7691399 msm: sps: fix kernel panic Linux version 3.10.73-ga0a1710 (android-build@wpef29.hot.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Wed Sep 14 22:56:58 UTC 2016 (master) Bug: 30222859 Bug: 30471814 Bug: 30715337 Bug: 31119496 Bug: 31240180 Change-Id: I50a01602ad603deb0654414c2ddd2ed7e8c96a20 Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Shuzhen Wang <shuzhenwang@google.com>
2016-08-29bullhead: update prebuilt kernelPatrick Tjin
0dca21c ASoC: msm-cpe-lsm: Initialize the period_wait during driver open 54fd79f net: ipv6: Fix ping to link-local addresses. d6b53e8 ipv6: fix endianness error in icmpv6_err Linux version 3.10.73-g0dca21c (android-build@vpba18.mtv.corp.google.com) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Mon Aug 29 03:44:57 UTC 2016 (master) Bug: 28464507 Bug: 29370996 Change-Id: I19530423fccc163039674c156afddd7a997ff77c Source-Branch: android-msm-bullhead-3.10 Signed-off-by: Patrick Tjin <pattjin@google.com>