summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2018-07-13Merge "ANDROID: HID: debug: check length in hid_debug_events_read() before co...android-8.1.0_r0.100android-tegra-dragon-3.18-oreo-m4David Lin
2018-07-03ANDROID: HID: debug: check length in hid_debug_events_read() before copy_to_u...Daniel Rosenberg
2018-06-29NFC: llcp: Limit size of SDP URIKees Cook
2018-06-06Merge "netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets" into...android-8.1.0_r0.93Badhri Jagan Sridharan
2018-06-04netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsetsFlorian Westphal
2018-05-30packet: in packet_do_bind, test fanout with bind_lock heldWillem de Bruijn
2018-05-30packet: race condition in packet_bindFrancesco Ruggeri
2018-05-30packet: missing dev_put() in packet_do_bind()Lars Westerhoff
2018-05-30packet: hold bind lock when rebinding to fanout hookMaggie White
2018-05-11Merge "futex: Prevent overflow by strengthen input validation" into android-c...android-8.1.0_r0.74Badhri Jagan Sridharan
2018-05-11Merge "UPSTREAM: scsi: sg: don't return bogus Sg_requests" into android-chrom...Badhri Jagan Sridharan
2018-05-08UPSTREAM: scsi: sg: don't return bogus Sg_requestsJohannes Thumshirn
2018-04-30usb: gadget: f_hid: fix: Prevent accessing released memoryKrzysztof Opasiak
2018-04-29futex: Prevent overflow by strengthen input validationLi Jinyue
2018-04-16crypto: hmac - require that the underlying hash algorithm is unkeyedandroid-8.1.0_r0.63Eric Biggers
2018-04-16USB: core: prevent malicious bNumInterfaces overflowAlan Stern
2018-04-16KEYS: add missing permission check for request_key() destinationEric Biggers
2018-04-16Merge "ANDROID: Bluetooth: hidp: buffer overflow in hidp_process_report" into...Daniel Mentz
2018-04-16Merge "ipv6: fix udpv6 sendmsg crash caused by too small MTU" into android-ch...Daniel Mentz
2018-04-16Merge "ipv4, ipv6: ensure raw socket message is big enough to hold an IP head...Daniel Mentz
2018-04-16Merge "ANDROID: ion: Fix uninitialized variable" into android-chromeos-dragon...Daniel Mentz
2018-04-05ipv6: fix udpv6 sendmsg crash caused by too small MTUMike Maloney
2018-04-05ipv4, ipv6: ensure raw socket message is big enough to hold an IP headerAlexander Potapenko
2018-03-28ANDROID: Bluetooth: hidp: buffer overflow in hidp_process_reportMark Salyzyn
2018-03-09loop: fix concurrent lo_open/lo_releaseandroid-8.1.0_r0.57Linus Torvalds
2018-03-06Input: gtco - fix potential out-of-bound accessDmitry Torokhov
2018-02-15net: wireless: bcmdhd: remove obsoleted wl_cfgvendor_priv_string_handlerandroid-8.1.0_r0.43android-tegra-dragon-3.18-oreo-mr1Insun Song
2018-02-15Merge "net: wireless: bcmdhd: fix integer overflow in wl_get_assoc_ies" into ...Erik Staats
2018-02-15Merge "BACKPORT: USB: core: harden cdc_parse_cdc_header" into android-chromeo...Erik Staats
2018-02-15Merge "PCI: Fix race condition with driver_override" into android-chromeos-dr...Erik Staats
2018-02-15Merge "UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()"...Erik Staats
2018-02-14net: wireless: bcmdhd: fix integer overflow in wl_get_assoc_iesInsun Song
2018-02-13BACKPORT: net: ipv4: fix for a race condition in raw_sendmsgJonathan Solnit
2018-02-13BACKPORT: USB: core: harden cdc_parse_cdc_headerMarissa Wall
2018-02-13PCI: Fix race condition with driver_overrideNicolai Stange
2018-02-12UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()Eric Biggers
2018-01-11Merge "UPSTREAM: ALSA: usb-audio: Kill stray URB at exiting" into android-chr...android-8.1.0_r0.33android-tegra-dragon-3.18-oreo-mr1-s1Wei Wang
2018-01-11Merge "UPSTREAM: ALSA: usb-audio: Check out-of-bounds access by corrupted buf...Erik Staats
2018-01-09UPSTREAM: ALSA: usb-audio: Check out-of-bounds access by corrupted buffer des...Takashi Iwai
2018-01-09UPSTREAM: USB: fix out-of-bounds in usb_set_configurationJonathan Solnit
2018-01-08UPSTREAM: ALSA: usb-audio: Kill stray URB at exitingTakashi Iwai
2018-01-03ANDROID: sdcardfs: Add default_normal optionDaniel Rosenberg
2018-01-03ANDROID: sdcardfs: notify lower file of opensDaniel Rosenberg
2017-12-06ANDROID: qtaguid: Fix the UAF probelm with tag_ref_treeandroid-8.1.0_r0.23Chenbo Feng
2017-12-06ALSA: seq: Fix use-after-free at creating a portTakashi Iwai
2017-11-30iovec: make sure the caller actually wants anything in memcpy_fromiovecendPaul Lawrence
2017-11-09clocksource: arch_timer: make virtual counter access configurableandroid-8.1.0_r0.15Greg Hackmann
2017-11-09arm64: issue isb when trapping CNTVCT_EL0 accessGreg Hackmann
2017-11-09BACKPORT: arm64: Add CNTFRQ_EL0 trap handlerMarc Zyngier
2017-11-09BACKPORT: arm64: Add CNTVCT_EL0 trap handlerMarc Zyngier