marlin: update kernel prebuilt
fe19e8d9a3b5 v4l2-compat-ioctl32: fix wrong merge submit
f6d4ef5915a8 Merge 3.18.100 into android-msm-marlin-3.18
fbf47aba53cc PM: wakeup_reasons: Fix formatting for printk
91e503e1c7f5 UPSTREAM: mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON
a51afa5a3f6b soc: qcom: glink: Fix memory leak in driver probe
0fffc1367631 power: msm-core: Fix mutex not getting unlocked in error path
0e720bacbc97 net: ipc_router: Fix memory leaks when releasing a remote port
9ee2159dce2c msm: mdss: Don't cache the address of a stack variable in timings init
8969dc1da495 msm: camera: sensor: Fix memory leaks when sensor probe fails
2d964595b6ef msm: camera: isp: Fix memory leaks in vfe probe
5fcd9374919e Linux 3.18.100
d8930f132b54 fixup: sctp: verify size of a new chunk in _sctp_make_chunk()
502319ce9124 serial: 8250_pci: Add Brainboxes UC-260 4 port serial device
d6d68ab0ad44 usb: usbmon: Read text within supplied buffer size
c3d114a94f96 USB: usbmon: remove assignment from IS_ERR argument
5ad9d27c1244 usb: quirks: add control message delay for 1b1c:1b20
0a40db9bb696 staging: android: ashmem: Fix lockdep issue during llseek
8d5ac33dba6b uas: fix comparison for error code
6515f2dd23e3 tty/serial: atmel: add new version check for usart
7353f81f6cc4 serial: sh-sci: prevent lockup on full TTY buffers
12d839211d08 x86: Treat R_X86_64_PLT32 as R_X86_64_PC32
3be6583f0b6f x86/module: Detect and skip invalid relocations
cd0198dfa73c scripts: recordmcount: break hardlinks
f5b58c98186f ubi: Fix race condition between ubi volume creation and udev
ccab18a66fbe netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
af6d5e3da581 netfilter: bridge: ebt_among: add missing match size checks
c80a9f329cb3 netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
3dbf839abb54 netfilter: IDLETIMER: be syzkaller friendly
89d957cafd83 netfilter: nat: cope with negative port range
653cfde0665c netfilter: x_tables: fix missing timer initialization in xt_LED
3ed4ce9ff89a ALSA: seq: More protection for concurrent write and ioctl races
6eebd4d93363 ALSA: seq: Don't allow resizing pool in use
bbf594868f37 x86/MCE: Serialize sysfs changes
8995b89422b1 Input: matrix_keypad - fix race when disabling interrupts
dd9c6a786562 MIPS: BMIPS: Do not mask IPIs during suspend
b6c2161780d4 scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
89dad4ea4735 Linux 3.18.99
91e5f485ec89 dm io: fix duplicate bio completion due to missing ref count
115236161833 fib_semantics: Don't match route with mismatching tclassid
8806e4d6db66 net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
5b77504ae152 sctp: verify size of a new chunk in _sctp_make_chunk()
003fdfcca8db s390/qeth: fix IPA command submission race
c504ccad37af s390/qeth: fix SETIP command handling
f1183f19ee56 sctp: fix dst refcnt leak in sctp_v6_get_dst()
6b709dae4841 udplite: fix partial checksum initialization
794953c9fb6b ppp: prevent unregistered channels from connecting to PPP units
1006f0b73225 netlink: ensure to loop over all netns in genlmsg_multicast_allns()
b3cb96f05984 net: fix race on decreasing number of TX queues
8b9a9e47db03 ipv6 sit: work around bogus gcc-8 -Wrestrict warning
fcc3a220c9fa hdlc_ppp: carrier detect ok, don't turn off negotiation
3d88e12c59f3 bridge: check brport attr show in brport_show
ee23d0448225 leds: do not overflow sysfs buffer in led_trigger_show
9561b28349a2 net: fec: introduce fec_ptp_stop and use in probe fail path
1f9a8e9ae4cb ARM: mvebu: Fix broken PL310_ERRATA_753970 selects
a82600ca014e cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()
b99b799e6266 ALSA: usb-audio: Add a quirck for B&W PX headphones
2c4b17404d80 tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus
b467c15b6bbf tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
7c017f897e60 Linux 3.18.98
62a101cde990 net: gianfar_ptp: move set_fipers() to spinlock protecting area
f895445fad01 sctp: make use of pre-calculated len
99a318ec9d85 xen/gntdev: Fix partial gntdev_mmap() cleanup
8e43167ca987 xen/gntdev: Fix off-by-one error when unmapping with holes
56cf3902c179 SolutionEngine771x: fix Ether platform data
eb8936ae670a mdio-sun4i: Fix a memory leak
8094b1a3fa73 xen-netfront: enable device after manual module load
4108c7767f28 drm/ttm: check the return value of kzalloc
154770b1dc1e e1000: fix disabling already-disabled warning
9d3948996ee2 xfs: quota: check result of register_shrinker()
ac086d5fe75a xfs: quota: fix missed destroy of qi_tree_lock
96dd20010179 s390/dasd: fix wrongly assigned configuration data
20f6d9c2af33 led: core: Fix brightness setting when setting delay_off=0
c85a6e7bdea9 bnx2x: Improve reliability in case of nested PCI errors
e93041fc495b tg3: Enable PHY reset in MTU change path for 5720
7862b4d6f8ac tg3: Add workaround to restrict 5762 MRRS to 2048
05caa7ec533d scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error
69712e5d5b31 net: arc_emac: fix arc_emac_rx() error paths
bfde9f19290e spi: atmel: fixed spin_lock usage inside atmel_spi_remove
7c7e39f79bad sget(): handle failures of register_shrinker()
a97c0dc1a45f ipv6: icmp6: Allow icmp messages to be looped back
9d293792bfdd mtd: nand: gpmi: Fix failure when a erased page has a bitflip at BBM
5ae0e9de0ac6 hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
5900ecf33c2f ipv6: Skip XFRM lookup if dst_entry in socket cache is valid
43a69271f55a Linux 3.18.97
8f4007a46b30 ASN.1: fix out-of-bounds read when parsing indefinite length item
5873f621b200 usb: gadget: f_fs: Process all descriptors during bind
0b10a48805f9 usb: dwc3: gadget: Set maxpacket size for ep0 IN
9e3e6fe2e8b5 arm64: Disable unhandled signal log messages by default
698d39dc3272 irqchip/gic-v3: Use wmb() instead of smb_wmb() in gic_raise_softirq()
871950f437a9 x86/oprofile: Fix bogus GCC-8 warning in nmi_setup()
007436bff749 iio: adis_lib: Initialize trigger before requesting interrupt
2433724adee7 iio: buffer: check if a buffer has been set up when poll is called
d8db7b0d7025 cfg80211: fix cfg80211_beacon_dup
7d31ba11742c scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info
95cfcdfb93a4 PCI: keystone: Fix interrupt-controller-node lookup
6265f8b11f6a netfilter: drop outermost socket lock in getsockopt()
f8f8e8c5bbed Linux 3.18.96
cebca8006e7b crypto: s5p-sss - Fix kernel Oops in AES-ECB mode
428eb673375a KVM: async_pf: Fix #DF due to inject "Page not Present" and "Page Ready" exceptions simultaneously
bbd6d0883747 hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
12652198b2c9 xen: XEN_ACPI_PROCESSOR is Dom0-only
0a48efda74ad x86/mm/kmmio: Fix mmiotrace for page unaligned addresses
83ccb5cf4443 mm/early_ioremap: Fix boot hang with earlyprintk=efi,keep
657da572d7cb dmaengine: jz4740: disable/unprepare clk if probe fails
ffd7525e4848 xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
d129a8e16c74 spi: sun4i: disable clocks in the remove function
f95b33d6a619 509: fix printing uninitialized stack memory when OID is empty
251efedb4eb2 btrfs: Fix possible off-by-one in btrfs_search_path_in_tree
ed635d8842d4 net_sched: red: Avoid illegal values
41daf46f1d93 net_sched: red: Avoid devision by zero
fd0c7c581848 gianfar: fix a flooded alignment reports because of padding issue.
7c7ee206277d s390/dasd: prevent prefix I/O error
e35225344d36 powerpc/perf: Fix oops when grouping different pmu events
9f1761d479d5 scripts/kernel-doc: Don't fail with status != 0 if error encountered with -none
b31bd4246ebd media: s5k6aa: describe some function parameters
3745fa31754b perf bench numa: Fixup discontiguous/sparse numa nodes
da0baafd68f3 perf top: Fix window dimensions change handling
0edf1fd1cdaa ARM: dts: am4372: Correct the interrupts_properties of McASP
6c73b9c4853a ARM: AM33xx: PRM: Remove am33xx_pwrdm_read_prev_pwrst function
1d1862d9dfeb usb: build drivers/usb/common/ when USB_SUPPORT is set
b9d788388bfd usbip: keep usbip_device sockfd state in sync with tcp_socket
fd29080c5613 dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
668c72b6a665 video: fbdev/mmp: add MODULE_LICENSE
265720b857ab ASoC: ux500: add MODULE_LICENSE tag
28eb4b7b1599 selinux: ensure the context is NUL terminated in security_context_to_sid_core()
e8ee445b6008 Provide a function to create a NUL-terminated string from unterminated data
48e014f330c3 net: avoid skb_warn_bad_offload on IS_ERR
e6c8571967ad netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
9532a5de3cc6 netfilter: on sockopt() acquire sock lock only in the required scope
3045eb391684 netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
eaae500a40c4 netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
ab24a3d5b937 netfilter: x_tables: fix int overflow in xt_alloc_table_info()
e1f5f1cdb5b0 crypto: x86/twofish-3way - Fix %rbp usage
cc865060870a selinux: skip bounded transition processing if the policy isn't loaded
a04a3d139ba8 xfrm: check id proto in validate_tmpl()
2796fe7d00e4 mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed.
2455cf4da92b media: r820t: fix r820t_write_reg for KASAN
d61961121a46 ARM: dts: s5pv210: add interrupt-parent for ohci
667768364865 ALSA: seq: Fix racy pool initializations
6a4499b0f8f5 Btrfs: fix crash due to not cleaning up tree log block's dirty bits
8fae1c38b61a Btrfs: fix deadlock in run_delalloc_nocow
5b7d39a5daf9 console/dummy: leave .con_font_get set to NULL
aacf60b6ef76 video: fbdev: atmel_lcdfb: fix display-timings lookup
cd3b45b77924 ext4: correct documentation for grpid mount option
5b2336f021d5 ext4: save error to disk in __ext4_grp_locked_error()
45d73fe10e5b drm/radeon: adjust tested variable
8e8992a93d66 ALSA: seq: Fix regression by incorrect ioctl_mutex usages
055fdc77edff arm: spear13xx: Fix spics gpio controller's warning
67df924c852c arm: spear13xx: Fix dmas cells
b943222b2081 arm: spear600: Add missing interrupt-parent of rtc
ae0dd9e49bd1 s390: fix handling of -1 in set{,fs}[gu]id16 syscalls
e91e3808f894 PM / devfreq: Propagate error from devfreq_add_device()
ebda13935a36 IB/mlx4: Fix incorrectly releasing steerable UD QPs when have only ETH ports
0c946219398a Linux 3.18.95
e8cccd3ddb6b mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user copy
0a0e3ffb0a14 ACPI: sbshc: remove raw pointer from printk() message
16f14ebe6131 pktcdvd: Fix pkt_setup_dev() error path
e715f11f9ea7 EDAC, octeon: Fix an uninitialized variable warning
6e7bf9002a82 xtensa: fix futex_atomic_cmpxchg_inatomic
e6f03ae6cbb4 alpha: fix reboot on Avanti platform
6eb7b54c6ec5 alpha: fix crash if pthread_create races with signal delivery
99a62e157e3d signal/sh: Ensure si_signo is initialized in do_divide_error
7a64cc59f32d signal/openrisc: Fix do_unaligned_access to send the proper signal
dd59ee6cbf47 kernel/async.c: revert "async: simplify lowest_in_progress()"
f874d19f2cbe media: cxusb, dib0700: ignore XC2028_I2C_FLUSH
fd2ebfa2de94 crypto: caam - fix endless loop when DECO acquire fails
6278069e9f93 crypto: cryptd - pass through absence of ->setkey()
5e52f5a43c4a crypto: hash - introduce crypto_hash_alg_has_setkey()
0b72648a13f1 kernfs: fix regression in kernfs_fop_write caused by wrong type
103fa74ffa52 NFS: commit direct writes even if they fail partially
c8ebc7dd51be NFS: Add a cond_resched() to nfs_commit_release_pages()
0dcc0912d394 mtd: nand: Fix nand_do_read_oob() return value
6cd23a0e51dd media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner
84882420c73f media: dvb-usb-v2: lmedm04: Improve logic checking of warm start
d2baa5e59786 dccp: CVE-2017-8824: use-after-free in DCCP code
c6afe2ab06b0 usbip: vhci: stop printing kernel pointer addresses in messages
f52839830f99 usbip: stub: stop printing kernel pointer addresses in messages
0dcd7547c4d1 usbip: prevent leaking socket pointer address in messages
a7db857299d6 usbip: vhci-hcd: Add USB3 SuperSpeed support
9ea2031f4d16 usb: usbip: Fix possible deadlocks reported by lockdep
4b490123f499 usbip: Fix potential format overflow in userspace tools
67ad0235bacc usbip: prevent vhci_hcd driver from leaking a socket pointer address
eebf31529012 usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input
385e124b45fe usbip: fix stub_rx: get_pipe() to validate endpoint number
28ef9653c185 posix-timer: Properly check sigevent->sigev_notify
9fdfac74246e CIFS: zero sensitive data when freeing
833692a73539 cifs: Fix autonegotiate security settings mismatch
23dd6b8717fb cifs: Fix missing put_xid in cifs_file_strict_mmap
796ab952d504 ipv4: Map neigh lookup keys in __ipv4_neigh_lookup_noref()
99a223bcec50 KEYS: encrypted: fix buffer overread in valid_master_desc()
1b50c4e9e71a ARM: exynos_defconfig: Enable NFSv4 client
60a86dc31125 ARM: exynos_defconfig: Enable options to mount a rootfs via NFS
e25c5a37fcde tcp: release sk_frag.page in tcp_disconnect
0d8e72014eca r8169: fix RTL8168EP take too long to complete driver initialization.
cafbcd523a70 qlcnic: fix deadlock bug
ec1e18fda7c6 net: igmp: add a missing rcu locking section
6598ee1deb37 ip6mr: fix stale iterator
8cec497214a1 vhost_net: stop device during reset owner
cde3537bd109 Linux 3.18.94
9c194a6a8ac2 um: Fix out-of-tree build
e69660008e38 ASoC: pcm512x: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
28ae79a51842 spi: imx: do not access registers while clocks disabled
669d070536f3 selinux: general protection fault in sock_has_perm
fc6fd81a9e56 usb: uas: unconditionally bring back host after reset
512b79f1410f usb: f_fs: Prevent gadget unbind if it is already unbound
f180fa08aa47 USB: serial: simple: add Motorola Tetra driver
466d964b7a19 usbip: list: don't list devices attached to vhci_hcd
96ea4192d4f8 usbip: prevent bind loops on devices attached to vhci_hcd
464bab184792 USB: serial: io_edgeport: fix possible sleep-in-atomic
d1cfbc6e3364 CDC-ACM: apply quirk for card reader
0a5e1547d135 USB: cdc-acm: Do not log urb submission errors on disconnect
af5850d18ef6 USB: serial: pl2303: new device id for Chilitag
c478e3e8e93e staging: rtl8188eu: Fix incorrect response to SIOCGIWESSID
5becc7c07bcc usb: gadget: don't dereference g until after it has been null checked
aba82d11275a media: usbtv: add a new usbid
0bac8214c01f scsi: ufs: ufshcd: fix potential NULL pointer dereference in ufshcd_config_vreg
33e592e7a793 quota: Check for register_shrinker() failure.
d5b5f8b30aee net: ethernet: xilinx: Mark XILINX_LL_TEMAC broken on 64-bit
d395c1bb7f92 hwmon: (pmbus) Use 64bit math for DIRECT format values
07397e4f9b4d nfsd: check for use of the closed special stateid
1f71aa238fcd nfsd: CLOSE SHOULD return the invalid special stateid for NFSv4.x (x>0)
f2dc0da2c281 xen-netfront: remove warning when unloading module
577a0df9a63f KVM: VMX: Fix rflags cache during vCPU reset
f3ca475ce752 mac80211: fix the update of path metric for RANN frame
ed996209f020 bcache: check return value of register_shrinker
f0705804d8ee KVM: X86: Fix operand/address-size during instruction decoding
6ca9bcfea80d KVM: x86: Don't re-execute instruction when not passing CR2 value
c786c16d615a KVM: x86: emulator: Return to user-mode on L1 CPL=0 emulation failure
f7c2ce3d42bc igb: Free IRQs when device is hotplugged
d7e2fda23eb9 gpio: iop: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
6aab3aa52366 ALSA: seq: Make ioctls race-free
524a6efbd123 loop: fix concurrent lo_open/lo_release
b1cf5261fedb um: Remove copy&paste code from init.h
db72a03c34b5 um: Stop abusing __KERNEL__
f79ad9c84ff5 um: link vmlinux with -no-pie
33fd368597ad Input: do not emit unneeded EV_SYN when suspending
90aaf2f25609 Linux 3.18.93
7303968d5396 hrtimer: Reset hrtimer cpu base proper on CPU hotplug
6c16fa957e84 ipv4: Make neigh lookup keys for loopback/point-to-point devices be INADDR_ANY
fd3030090c8d ipv6: fix udpv6 sendmsg crash caused by too small MTU
98fcfb3f64a0 net: Allow neigh contructor functions ability to modify the primary_key
1414a1ede0ea vmxnet3: repair memory leak
e34d42ce65b5 sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
8009d86cc944 sctp: do not allow the v4 socket to bind a v4mapped v6 address
0e4c26c86060 pppoe: take ->needed_headroom of lower device into account on xmit
d8dee18861fb net: qdisc_pkt_len_init() should be more robust
eaf3179d6151 tcp: __tcp_hdrlen() helper
483217b88c63 net: igmp: fix source address check for IGMPv3 reports
607506a8e7b0 dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state
cf1a60fdfadc net: tcp: close sock if net namespace is exiting
8e292f88f756 x86/microcode/intel: Extend BDW late-loading further with LLC size check
933e32f87f6e eventpoll.h: add missing epoll event masks
bdc0646c91cd scsi: libiscsi: fix shifting of DID_REQUEUE host byte
efa42537beb6 fs/fcntl: f_setown, avoid undefined behaviour
1f31381a6cc0 reiserfs: don't preallocate blocks for extended attributes
9ff49848ab5f reiserfs: fix race in prealloc discard
115e3505bbd6 netfilter: xt_osf: Add missing permission checks
f4ba1d0e4366 netfilter: nfnetlink_cthelper: Add missing permission checks
f1a49458d9ef netfilter: nf_conntrack_sip: extend request line validation
64f94c222f63 netfilter: restart search if moved to other chain
38a8f8f7f6c6 netfilter: nf_ct_expect: remove the redundant slash when policy name is empty
4003d8b836ab ipc: msg, make msgrcv work with LONG_MIN
fee959e947ff hwpoison, memcg: forcibly uncharge LRU pages
3e0f334aaf1f mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack
7a3974ca1195 can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once
16d977e9bbf4 can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once
6b6f9e3d0044 usbip: Fix implicit fallthrough warning
7b9da19c2ec9 x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels
66b64a935853 MIPS: AR7: ensure the port type's FCR value is used
0e88a123df05 arm64: KVM: Fix SMCCC handling of unimplemented SMC/HVC calls
7ed7a1ce7e03 dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6
2da34a807ad1 dm btree: fix serious bug in btree_split_beneath()
e89b22a8b329 ARM: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7
40dfccf9bf37 phy: work around 'phys' references to usb-nop-xceiv devices
b70f4ccbc41d Input: twl4030-vibra - fix sibling-node lookup
5ada5b876313 Input: twl4030-vibra - fix ERROR: Bad of_node_put() warning
12d0592008fd Input: twl6040-vibra - fix child-node lookup
e9765832134f Input: twl6040-vibra - fix DT node memory management
a499bc7e0351 Input: 88pm860x-ts - fix child-node lookup
d3c49810dc8d pipe: avoid round_pipe_size() nr_pages overflow on 32-bit
cf1feaf5e555 af_key: fix buffer overread in parse_exthdrs()
60319ec10213 af_key: fix buffer overread in verify_address_len()
82ddf73182bb ALSA: hda - Apply the existing quirk to iMac 14,1
cdbebd4716bc ALSA: pcm: Remove yet superfluous WARN_ON()
ad211e59c683 futex: Prevent overflow by strengthen input validation
7cb4b6064217 scsi: sg: disable SET_FORCE_LOW_DMA
3758d94e9513 gcov: disable for COMPILE_TEST
a5d35deca214 Linux 3.18.92
55492dc6122f e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
7c07fbcb384f uas: ignore UAS for Norelsys NS1068(X) chips
e1ed1d1e0af5 Bluetooth: Prevent stack info leak from the EFS element.
6dc42f889217 staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
f54053fa8608 usbip: remove kernel addresses from usb device and urb debug msgs
0edffa0be830 USB: fix usbmon BUG trigger
a52b2f87f76c usb: misc: usb3503: make sure reset is low for at least 100us
8b3193a1f8d1 USB: serial: cp210x: add new device ID ELV ALC 8xxx
7c56a67fe757 USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ
e27472ac7ec9 Revert "can: kvaser_usb: free buf in error paths"
7f244e55cb71 target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK
879eea20fd6a iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref
44cd2c5e9144 x86/microcode/intel: Extend BDW late-loading with a revision check
4cefa6f752ab crypto: algapi - fix NULL dereference in crypto_remove_spawns()
540eac0e594e net: stmmac: enable EEE in MII, GMII or RGMII only
7247c48a9a13 sh_eth: fix SH7757 GEther initialization
7469b22a4216 sh_eth: fix TSU resource handling
3396f2bef5ed RDS: null pointer dereference in rds_atomic_free_op
a7b25c9f6ea9 RDS: Heap OOB write in rds_message_alloc_sgs()
0982b64e77d9 8021q: fix a memory leak for VLAN 0 device
a74040812453 x86/acpi: Reduce code duplication in mp_override_legacy_irq()
48c270963471 ALSA: aloop: Fix racy hw constraints adjustment
1720189b6d20 ALSA: aloop: Fix inconsistent format due to incomplete rule
5517ed304acd ALSA: aloop: Release cable upon open error path
cb8ee4961860 ALSA: pcm: Allow aborting mutex lock at OSS read/write loops
220d72342a80 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
fbff9ddad427 ALSA: pcm: Add missing error checks in OSS emulation plugin builder
f8c035f6db23 ALSA: pcm: Remove incorrect snd_BUG_ON() usages
ae62a913c1c8 x86/acpi: Handle SCI interrupts above legacy space gracefully
17e27ff45ed9 kvm: vmx: Scrub hardware GPRs at VM-exit
2f9cf5cd5580 perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
c3b291e7fb8d MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET
1eaff733141a MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses
0cc4b3b0bb37 MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA
fd8a39fd186e MIPS: Consistently handle buffer counter with PTRACE_SETREGSET
80aaed846ef9 MIPS: Guard against any partial write attempt with PTRACE_SETREGSET
0313868ccbc3 MIPS: Factor out NT_PRFPREG regset access helpers
a314ae1825b7 IB/srpt: Disable RDMA access by the initiator
ce9c95f1f30a can: gs_usb: fix return value of the "set_bittiming" callback
2431a63ebd0f Input: elantech - add new icbody type 15
946519d82067 kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
64c64936d42b kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from !sig_kernel_only() signals
8deeda774d94 kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL
8881d834c333 fscache: Fix the default for fscache_maybe_release_page()
381d85f6ab95 crypto: n2 - cure use after free
7bf407cadd10 kernel/acct.c: fix the acct->needcheck check in check_free_space()
788ccf7552c8 Linux 3.18.91
95a9e2bf54b8 n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
6b3d91d5b507 usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201
2a8c1cf8f57b usb: add RESET_RESUME for ELSA MicroLink 56K
98372ee1e8d0 usb: Add device quirk for Logitech HD Pro Webcam C925e
07f841060653 USB: serial: option: add support for Telit ME910 PID 0x1101
000c7141a1fe net: ipv4: fix for a race condition in raw_sendmsg
986444eaddc5 sctp: Replace use of sockets_allocated with specified macro.
a11d92b0779d net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case
13550e44cf62 tg3: Fix rx hang on MTU change with 5717/5719
f07f65cdff98 tcp md5sig: Use skb's saddr when replying to an incoming segment
c0311793a848 net: qmi_wwan: add Sierra EM7565 1199:9091
5594e3eba3ee netlink: Add netns check on taps
70d931c38016 net: igmp: Use correct source address on IGMPv3 reports
ee26de88cb43 ipv6: mcast: better catch silly mtu values
c8b5bd50bfad ipv4: igmp: guard against silly MTU values
20a0462fffaf kbuild: add '-fno-stack-check' to kernel build options
c8d7e04ac14c ASoC: twl4030: fix child-node lookup
5beacbc73691 ring-buffer: Mask out the info bits when returning buffer page length
42c1b3e6f205 tracing: Fix crash when it fails to alloc ring buffer
f9e16c238bd6 tracing: Fix possible double free on failure of allocating trace buffer
973b645673b6 tracing: Remove extra zeroing out of the ring buffer page
d0473d5cca66 net: mvneta: clear interface link status on port disable
b907723a77bd powerpc/perf: Dereference BHRB entries safely
02952cd43e16 KVM: X86: Fix load RFLAGS w/o the fixed bit
96a44e59c94d parisc: Hide Diva-built-in serial aux and graphics card
59a2e05a53a6 PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()
f11d60dc210f ALSA: usb-audio: Fix the missing ctl name suffix at parsing SU
db66b2dc2c8b ALSA: rawmidi: Avoid racy info ioctl via ctl device
8651a4705a0a mfd: twl6040: Fix child-node lookup
d3cc4822354d mfd: twl4030-audio: Fix sibling-node lookup
19ddbcf647c7 crypto: mcryptd - protect the per-CPU queue with a lock
4aee80b3d1c9 ACPI: APEI / ERST: Fix missing error handling in erst_reader()
8da23652fa43 Linux 3.18.90
510f29192b55 fm10k: ensure we process SM mbx when processing VF mbx
a6af431eb789 scsi: lpfc: PLOGI failures during NPIV testing
6ea3e1c5114c scsi: lpfc: Fix secure firmware updates
ca6f17da0b13 PCI/AER: Report non-fatal errors only to the affected endpoint
6d117334cea2 igb: check memory allocation failure
9e2dfe98004a PCI: Create SR-IOV virtfn/physfn links before attaching driver
98c3d06cbff5 scsi: cxgb4i: fix Tx skb leak
ac8283db32cb PCI: Avoid bus reset if bridge itself is broken
8a58da6d17db net: phy: at803x: Change error to EINVAL for invalid MAC
4d3444fe2656 crypto: crypto4xx - increase context and scatter ring buffer elements
8e31e3e457c1 backlight: pwm_bl: Fix overflow condition
6a6c5199570a cpuidle: powernv: Pass correct drv->cpumask for registration
c1c9ad2e8f25 ARM: dma-mapping: disallow dma_get_sgtable() for non-kernel managed memory
f7ce6712521e xhci: plat: Register shutdown for xhci_plat
98482e926f7e isdn: kcapi: avoid uninitialized data
d8f3c88f1ff7 ARM: dts: am335x-evmsk: adjust mmc2 param to allow suspend
4c8bc54b2d41 netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register
6237e86d4d28 netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
cba690fe68c6 irda: vlsi_ir: fix check for DMA mapping errors
7570a653051a i40e: Do not enable NAPI on q_vectors that have no rings
cec966b21ae7 net: Do not allow negative values for busy_read and busy_poll sysctl interfaces
5e694f6fca10 s390/qeth: no ETH header for outbound AF_IUCV
de34e1a4d3e1 HID: xinmo: fix for out of range for THT 2P arcade controller.
a21b0e491956 hwmon: (asus_atk0110) fix uninitialized data access
7593d5f9c7eb ARM: dts: ti: fix PCI bus dtc warnings
06afa2da5165 KVM: x86: correct async page present tracepoint
3835e2fc38b4 scsi: lpfc: Fix PT2PT PRLI reject
e3298dc00fc4 netfilter: nfnl_cthelper: Fix memory leak
09bb6f008d02 netfilter: nfnl_cthelper: fix runtime expectation policy updates
cc77cb865cfe usb: gadget: udc: remove pointer dereference after free
af2dec74ed46 usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed
9829550de5aa net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4
6957a306cb57 crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex
40ce0aa9a77e r8152: fix the list rx_done may be used without initialization
9577b6c79531 cpuidle: Validate cpu_dev in cpuidle_add_sysfs()
1c21f19a9d56 ALSA: hda - add support for docking station for HP 820 G2
90960ab9f182 arm64: Initialise high_memory global variable earlier
1e6e21c74c7c Linux 3.18.89
29d2c6506bc3 usb: musb: da8xx: fix babble condition handling
07aa0bc0072e ath9k: fix tx99 potential info leak
2d7c1288825f macvlan: Only deliver one copy of the frame to the macvlan interface
58617c76ed62 udf: Avoid overflow when session starts at large offset
cae8f2343a45 scsi: bfa: integer overflow in debugfs
47e43e619077 scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry
57886e81b8bb raid5: Set R5_Expanded on parity devices as well as data.
9df8ffc3035a pinctrl: adi2: Fix Kconfig build problem
ba3e1b3553c5 tty fix oops when rmmod 8250
a36596b1ac58 PCI: Detach driver before procfs & sysfs teardown on device remove
a5045f7d1077 xfs: fix log block underflow during recovery cycle verification
d4ec687b9721 bcache: fix wrong cache_misses statistics
5df0ce4b14be bcache: explicitly destroy mutex while exiting
00dd6166c197 GFS2: Take inode off order_write list when setting jdata flag
9aa8bbc15ab1 thermal/drivers/step_wise: Fix temperature regulation misbehavior
4c1eff22ffb3 ppp: Destroy the mutex when cleanup
069848c7547b clk: tegra: Fix cclk_lp divisor register
340a510c65d9 mm: Handle 0 flags in _calc_vm_trans() macro
5ae69f4575f0 arm-ccn: perf: Prevent module unload while PMU is in use
8948ed2f5fe4 target/file: Do not return error for UNMAP if length is zero
e6da104cbddc target:fix condition return in core_pr_dump_initiator_port()
75d2d7e7906c iscsi-target: fix memory leak in lio_target_tiqn_addtpg()
8867d3f1bb32 target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()
55bae20a7382 powerpc/ipic: Fix status get and status clear
b1a66b1947e5 powerpc/opal: Fix EBUSY bug in acquiring tokens
b4c9f0c12835 powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo
0e8096628d11 PCI/PME: Handle invalid data when reading Root Status
044cc5ec17d9 video: fbdev: au1200fb: Return an error code if a memory allocation fails
16793c323d16 video: fbdev: au1200fb: Release some resources if a memory allocation fails
9a907ea5f7db video: udlfb: Fix read EDID timeout
b3146dbdd20d fbdev: controlfb: Add missing modes to fix out of bounds access
d523df492e12 target: Use system workqueue for ALUA transitions
f23c756da698 btrfs: add missing memset while reading compressed inline extents
7480adadb8ba NFSv4.1 respect server's max size in CREATE_SESSION
1062f3998ecb perf symbols: Fix symbols__fixup_end heuristic for corner cases
dea197784167 afs: Fix afs_kill_pages()
b1718fdda0f2 afs: Fix page leak in afs_write_begin()
b422c709f72b afs: Populate and use client modification time
916426b19350 afs: Fix the maths in afs_fs_store_data()
14a74dccf0f3 afs: Flush outstanding writes when an fd is closed
24a7a4f0f8dd afs: Adjust mode bits processing
15fbd461977a afs: Populate group ID from vnode status
28cd05a2efe2 afs: Fix missing put_page()
1e7f83cd53fe drm/radeon: reinstate oland workaround for sclk
8a0c5968d934 sched/deadline: Use deadline instead of period when calculating overflow
6bcc81fd8f24 drm/radeon/si: add dpm quirk for Oland
6debc3f440ad openrisc: fix issue handling 8 byte get_user calls
8111e1b213c4 net: Resend IGMP memberships upon peer notification.
1f08ebd8815e dmaengine: Fix array index out of bounds warning in __get_unmap_pool()
78dbf84bec78 net: wimax/i2400m: fix NULL-deref at probe
97a63f608dd5 Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list
c1ecb5aba022 NFSD: fix nfsd_reset_versions for NFSv4.
537546e6e440 NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)
f73422f3a6e8 net: bcmgenet: Power up the internal PHY before probing the MII
1a34a1137f76 net: bcmgenet: correct MIB access of UniMAC RUNT counters
bbfc83efb91c net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values
b5ed9b970a89 usb: phy: isp1301: Add OF device ID table
406e7e045fb8 mac80211: Fix addition of mesh configuration element
337cde8f5417 KEYS: Don't permit request_key() to construct a new keyring
bd154dc611b3 Don't leak a key reference if request_key() tries to use a revoked keyring
66d63dc137c9 ext4: fix crash when a directory's i_size is too small
d5ba16a80d96 xhci: Don't add a virt_dev to the devs array before it's fully allocated
f749066bec40 usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer
dd3ad5f60d52 USB: core: prevent malicious bNumInterfaces overflow
a342e5368eea USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID
5bcc2f7c8d3f autofs: fix careless error in recent commit
ebd52f8b6422 crypto: salsa20 - fix blkcipher_walk API usage
252b343a9789 crypto: hmac - require that the underlying hash algorithm is unkeyed
e6318e33ba94 Linux 3.18.88
3130d5160d78 usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
8492c95e430d arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
db23d45956bc audit: ensure that 'audit=1' actually enables audit for PID 1
bf24f2225c69 afs: Connect up the CB.ProbeUuid
4adf3c3c6323 IB/mlx5: Assign send CQ and recv CQ of UMR QP
2db29fb2d249 IB/mlx4: Increase maximal message size under UD QP
63ec9868ebe3 xfrm: Copy policy family in clone_policy
d22443f3dfee atm: horizon: Fix irq release error
5faa4be6f9b4 sctp: use the right sk after waking up from wait_buf sleep
e899383e43fe sctp: do not free asoc when it is already dead in sctp_sendmsg
fdea3b85d3a0 sparc64/mm: set fields in deferred pages
fa54e27792a8 sunrpc: Fix rpc_task_begin trace point
7e8df53aae06 NFS: Fix a typo in nfs_rename()
b9a72f359bef dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0
129287d4bb82 lib/genalloc.c: make the avail variable an atomic_long_t
9d834e290d02 route: update fnhe_expires for redirect when the fnhe exists
cf6924916a76 route: also update fnhe_genid when updating a route cache
326e406375da EDAC, i5000, i5400: Fix definition of NRECMEMB register
e78fac22bac1 EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
8364904c1045 axonram: Fix gendisk handling
5f5c998f31ab i2c: riic: fix restart condition
3d9f055c6995 crypto: s5p-sss - Fix completing crypto request in IRQ handler
c1351ce0b721 ipv6: reorder icmpv6_init() and ip6_mr_init()
fc4281753409 bnx2x: fix possible overrun of VFPF multicast addresses array
b263f04c208f spi_ks8995: fix "BUG: key accdaa28 not in .data!"
0faf52395fa2 arm: KVM: Survive unknown traps from guests
ab8447147ba0 KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
28657a1ae900 irqchip/crossbar: Fix incorrect type of register size
0cee435dc74d scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
3366c0d324f0 workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
8b79fa3b43e1 libata: drop WARN from protocol error in ata_sff_qc_issue()
4c09b39cd993 USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
3e9291731291 usb: gadget: configs: plug memory leak
99dcb707178e selftest/powerpc: Fix false failures for skipped tests
ab1d27b51272 Revert "s390/kbuild: enable modversions for symbols exported from asm"
ba44cfc88fa1 Revert "drm/armada: Fix compile fail"
18f0f8c1e866 net/packet: fix a race in packet_bind() and packet_notifier()
a3581a1b179f sit: update frag_off info
6d40c9bf5733 rds: Fix NULL pointer dereference in __rds_rdma_map
a8779c22fdd5 arm64: fpsimd: Prevent registers leaking from dead tasks
7389171fdc59 KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
140db397a144 arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
fc93b6293c41 media: dvb: i2c transfers over usb cannot be done from stack
620d5e915ec5 kdb: Fix handling of kallsyms_symbol_next() return value
8edcd25ef69f iommu/vt-d: Fix scatterlist offset handling
7a3638bbec14 ALSA: usb-audio: Add check return value for usb_string()
13de9b240ad9 ALSA: usb-audio: Fix out-of-bound error
a94c6d0bb9e0 ALSA: seq: Remove spurious WARN_ON() at timer check
14416b2c878b ALSA: pcm: prevent UAF in snd_pcm_info
346178f1aa5e x86/PCI: Make broadcom_postcore_init() check acpi_disabled
529614feec56 X.509: reject invalid BIT STRING for subjectPublicKey
228014b20bd8 KEYS: add missing permission check for request_key() destination
602a1c77f9f3 ASN.1: check for error from ASN1_OP_END__ACT actions
25ea12ec0370 efi: Move some sysfs files to be read-only by root
898fe40c6b72 isa: Prevent NULL dereference in isa_bus driver callbacks
843bf4aa1aad hv: kvp: Avoid reading past allocated blocks from KVP file
08fa6f2e23c5 virtio: release virtio index when fail to device_register
7983427599c4 can: usb_8dev: cancel urb on -EPIPE and -EPROTO
c0c6369d0f91 can: esd_usb2: cancel urb on -EPIPE and -EPROTO
2d2ac259c9a0 can: ems_usb: cancel urb on -EPIPE and -EPROTO
bead22ffc679 can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
29017a8bc720 can: kvaser_usb: ratelimit errors if incomplete messages are received
dc16a4dee968 can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
70d9dccf5015 can: kvaser_usb: free buf in error paths
2179863ede7c Linux 3.18.87
5b45ab61a856 usb: host: fix incorrect updating of offset
c051e2d3d8e8 USB: usbfs: Filter flags passed in from user space
a98161fdd244 USB: devio: Prevent integer overflow in proc_do_submiturb()
b8a9e8d2c808 USB: Increase usbfs transfer limit
9906ad70c51c usb: hub: Cycle HUB power when initialization fails
01d9d14f89e4 serial: 8250_pci: Add Amazon PCI serial device ID
e1ed329f60f6 usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub
94eeab3e1d01 uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices
d51a980a9677 ima: fix hash algorithm initialization
ce48aa52f90f net: fec: fix multicast filtering hardware setup
ccf653b185f9 mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers
42c53dc2ca8c tipc: fix cleanup at module unload
7c3f696de8d1 net: sctp: fix array overrun read on sctp_timer_tbl
741a5969398f NFSv4: Fix client recovery when server reboots multiple times
351f504358fc net/appletalk: Fix kernel memory disclosure
ae8e8f2b0f5f vti6: fix device register to report IFLA_INFO_KIND
2be09ca3fe9c ARM: OMAP1: DMA: Correct the number of logical channels
462b3549034f perf test attr: Fix ignored test case result
079e07453a78 sysrq : fix Show Regs call trace on ARM
4b72e3bb6bb1 EDAC, sb_edac: Fix missing break in switch
e95cdfbe08b7 spi: sh-msiof: Fix DMA transfer size check
826b2a0b10bf serial: 8250_fintek: Fix rs485 disablement on invalid ioctl()
fa541bf05f17 bcache: recover data from backing when data is clean
aa129cb1754d bcache: only permit to recovery read error when cache device is clean
1d2acf22c253 Linux 3.18.86
9742589ef2dd drm/i915: Prevent zero length "index" write
b858baba6773 drm/i915: Don't try indexed reads to alternate slave addresses
9ea40d143494 NFS: revalidate "." etc correctly on "open".
72427ea588e3 drm/panel: simple: Add missing panel_simple_unprepare() calls
165a3c7d786e eeprom: at24: check at24_read/write arguments
092b0115002b KVM: x86: inject exceptions produced by x86_decode_insn
ccabc053d5b8 KVM: x86: Exit to user-mode on #UD intercept when emulator requires
ab1f0096ab28 btrfs: clear space cache inode generation always
d5ec57c35ac4 mm/madvise.c: fix madvise() infinite loop under special circumstances
8b37803c5fc0 mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()
8586e1841344 ipsec: Fix aborted xfrm policy dump crash
142afbc6b2f3 netlink: add a start callback for starting a netlink dump
b42518053ffd Linux 3.18.85
d412e6b098fb xen: xenbus driver must not accept invalid transaction ids
3241a972aeec s390/kbuild: enable modversions for symbols exported from asm
d3e2563be927 ASoC: wm_adsp: Don't overrun firmware file buffer when reading region data
a387098fe030 btrfs: return the actual error value from from btrfs_uuid_tree_iterate
e72ebbefe1b2 netfilter: nf_tables: fix oob access
f243d9f3f4a0 netfilter: nft_queue: use raw_smp_processor_id()
efaa1a4a7250 staging: iio: cdc: fix improper return value
1171ebb0693c mac80211: Suppress NEW_PEER_CANDIDATE event if no room
9d825502c393 mac80211: Remove invalid flag operations in mesh TSF synchronization
ed3203658694 ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
d67ddde8a8dc drm/armada: Fix compile fail
aecff719d3ca net: 3com: typhoon: typhoon_init_one: fix incorrect return values
cbbe150dd940 net: 3com: typhoon: typhoon_init_one: make return values more specific
09101462f7b7 PCI: Apply _HPX settings only to relevant devices
952835ccd917 RDS: RDMA: return appropriate error on rdma map failures
53801d8f9ff2 e1000e: Separate signaling for link check/link up
c493ba2db0f2 e1000e: Fix return value test
239f6bb7dfd6 e1000e: Fix error path in link detection
6812311cfbeb iio: iio-trig-periodic-rtc: Free trigger resource correctly
88c17527a118 USB: fix buffer overflows with parsing CDC headers
e0d73be54e8c mtd: nand: Fix writing mtdoops to nand flash.
2bbd69104fe1 net/9p: Switch to wait_event_killable()
49fd514f5351 media: v4l2-ctrl: Fix flags field on Control events
0cbab0776bd7 media: rc: check for integer overflow
d4674227f40f media: Don't do DMA on stack for firmware upload in the AS102 driver
b91c86022411 powerpc/signal: Properly handle return value from uprobe_deny_signal()
c7ac1d7390e9 parisc: Fix validity check of pointer size argument in new CAS implementation
ebfaa7529584 ixgbe: Fix skb list corruption on Power systems
049cd7e4029b fm10k: Use smp_rmb rather than read_barrier_depends
777ee59c6960 i40evf: Use smp_rmb rather than read_barrier_depends
bc0a7c84883c ixgbevf: Use smp_rmb rather than read_barrier_depends
4fc9c3c79847 igbvf: Use smp_rmb rather than read_barrier_depends
5f068a663476 igb: Use smp_rmb rather than read_barrier_depends
f4e3b96ba8ba i40e: Use smp_rmb rather than read_barrier_depends
7a615c8566d7 time: Always make sure wall_to_monotonic isn't positive
b880bebed0d5 NFC: fix device-allocation error return
d7c44dae8d8c IB/srpt: Do not accept invalid initiator port names
9b4080c28dab clk: ti: dra7-atl-clock: fix child-node lookups
26b3a4046639 clk: ti: dra7-atl-clock: Fix of_node reference counting
5f8a3df04772 KVM: SVM: obey guest PAT
27cd63fee696 KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
eeb6715ffb90 iscsi-target: Fix non-immediate TMR reference leak
e4820a86b26e fs/9p: Compare qid.path in v9fs_test_inode
9f8eafa18a28 ALSA: timer: Remove kernel warning at compat ioctl error paths
2033ec9cc479 ALSA: usb-audio: Add sanity checks in v2 clock parsers
d1db6f6a2ccb ALSA: usb-audio: Fix potential out-of-bound access at parsing SU
7940c950ca94 ALSA: usb-audio: Add sanity checks to FE parser
9b3f0217e0b7 ext4: fix interaction between i_size, fallocate, and delalloc after a crash
6b9f616effa8 nfsd: deal with revoked delegations appropriately
c3014cd85e7a nfs: Fix ugly referral attributes
982a47b3ba76 NFS: Fix typo in nomigration mount option
491e4e3b1270 isofs: fix timestamps beyond 2027
001cefee48af bcache: check ca->alloc_thread initialized before wake up it
1f0e79c6f523 eCryptfs: use after free in ecryptfs_release_messaging()
e69699d4c6fc nilfs2: fix race condition that causes file system corruption
76b2a7f24267 autofs: don't fail mount for transient error
a170fea94397 MIPS: BCM47XX: Fix LED inversion for WRT54GSv1
778934f5837b MIPS: Fix an n32 core file generation regset support regression
84cc7b5d26c1 dm: fix race between dm_get_from_kobject() and __dm_destroy()
853d2670b8b6 dm bufio: fix integer overflow when limiting maximum cache size
b0464fa2a31c ALSA: hda: Add Raven PCI ID
f4f6d52542aa ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
a63a5859bc4a x86/decoder: Add new TEST instruction pattern
03a2209fe340 lib/mpi: call cond_resched() from mpi_powm() loop
1c3a4e61b11d sched: Make resched_cpu() unconditional
7982b5eddf5c ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER
45cc2b6efc84 s390/disassembler: increase show_code buffer size
7166ceea0a4e Linux 3.18.84
d73b3941f58e coda: fix 'kernel memory exposure attempt' in fsync
2722def0f527 ipmi: fix unsigned long underflow
f72e2ba19765 ocfs2: should wait dio before inode lock in ocfs2_setattr()
72df596704b8 ima: do not update security.ima if appraisal status is not INTEGRITY_PASS
28343f8b19c4 vlan: fix a use-after-free in vlan_device_event()
5c44a51d67e9 af_netlink: ensure that NLMSG_DONE never fails in dumps
e823c9037187 fealnx: Fix building error on MIPS
39c3fff9ef51 sctp: do not peel off an assoc from one netns to another one
5b2af5fff8fa netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed
475b9905b0c0 tcp: do not mangle skb->cb[] in tcp_make_synack()
b4b4a3b633cb net/sctp: Always set scope_id in sctp_inet6_skb_msgname
3f45934ed0bd ipv6/dccp: do not inherit ipv6_mc_list from parent
c35c375efa4e Linux 3.18.83
6d7a134fe3c2 USB: serial: garmin_gps: fix memory leak on probe errors
50cc53140018 USB: serial: garmin_gps: fix I/O after failed probe and remove
c0d6a6f83281 USB: serial: garmin_gps: fix memory leak on failed URB submit
a23a605121c2 USB: serial: qcserial: add pid/vid for Sierra Wireless EM7355 fw update
cbe3cdcf641b USB: Add delay-init quirk for Corsair K70 LUX keyboards
6a5d14427975 USB: usbfs: compute urb->actual_length for isochronous
8cf8ebdce459 uapi: fix linux/rds.h userspace compilation errors
12c50a1f5746 uapi: fix linux/rds.h userspace compilation error
fb75ce8dc581 Revert "uapi: fix linux/rds.h userspace compilation errors"
83c47200d062 Revert "crypto: xts - Add ECB dependency"
8a8eca870ee7 MIPS: Netlogic: Exclude netlogic,xlp-pic code from XLR builds
d7cad58e010f MIPS: init: Ensure reserved memory regions are not added to bootmem
623c6108c80d MIPS: End asm function prologue macros with .insn
96f99bb96d9d ixgbe: handle close/suspend race with netif_device_detach/present
e0c60f541839 ixgbe: fix AER error handling
31308442a25c gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap
c141816f7288 backlight: adp5520: Fix error handling in adp5520_bl_probe()
7f213c377aaf backlight: lcd: Fix race condition during register
637661fadb01 ALSA: vx: Fix possible transfer overflow
ad550021c292 ALSA: vx: Don't try to update capture stream before running
e7fc5d22fae5 scsi: lpfc: Correct issue leading to oops during link reset
c0e8131e652c scsi: lpfc: Correct host name in symbolic_name field
ee4961b9093f scsi: lpfc: FCoE VPort enable-disable does not bring up the VPort
70e2afb4c9d9 scsi: lpfc: Add missing memory barrier
d3750dd19128 staging: rtl8188eu: fix incorrect ERROR tags from logs
170c8c366ad4 igb: Fix hw_dbg logging in igb_update_flash_i210
3d208b5adcf3 igb: close/suspend race in netif_device_detach
c5536a15a696 igb: reset the PHY before reading the PHY ID
7d881e89d38c drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache
45dce99ab816 ata: SATA_MV should depend on HAS_DMA
88b9e58302cf ata: SATA_HIGHBANK should depend on HAS_DMA
674c5db9b8fc ata: ATA_BMDMA should depend on HAS_DMA
1fde17419845 ARM: dts: Fix omap3 off mode pull defines
daa36dd42767 ARM: OMAP2+: Fix init for multiple quirks for the same SoC
d487af849acc extcon: palmas: Check the parent instance to prevent the NULL
4273d0752535 iscsi-target: Fix iscsi_np reset hung task during parallel delete
49fc34138b88 media: dib0700: fix invalid dvb_detach argument
b02dac504efc media: imon: Fix null-ptr-deref in imon_probe
2f95dcc30a11 Linux 3.18.82
bc88a575f203 target/iscsi: Fix iSCSI task reassignment handling
86fa24082f80 security/keys: add CONFIG_KEYS_COMPAT to Kconfig
eb36c7de3dc1 ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err
53380d17dfa8 ipip: only increase err_count for some certain type icmp in ipip_err
6e69760c8c44 ipv6: flowlabel: do not leave opt->tot_len with garbage
e9a09040718d sctp: reset owner sk for data chunks on out queues when migrating a sock
0e14c4680810 tun: allow positive return values on dev_get_valid_name() call
5c39875a93d6 net/unix: don't show information about sockets from other namespaces
698b423e409f sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect
638c8339e05e tun: call dev_get_valid_name() before register_netdevice()
a5bec3f163ee l2tp: check ps->sock before running pppol2tp_session_ioctl()
54bcfd5d7152 tcp: fix tcp_mtu_probe() vs highest_sack
5b0a3512492f tun/tap: sanitize TUNSETSNDBUF input
84ea7fc42294 Revert "ARM: dts: imx53-qsb-common: fix FEC pinmux config"
c0f26c8f0562 Input: ims-psu - check if CDC union descriptor is sane
32530efaed51 usb: usbtest: fix NULL pointer dereference
241d7ab10370 mac80211: don't compare TKIP TX MIC key in reinstall prevention
32025b5c5860 mac80211: use constant time comparison with keys
6891c6fd2a50 mac80211: accept key reinstall without changing anything
41f612ae707e Revert "ceph: unlock dangling spinlock in try_flush_caps()"
37cdf969145f Linux 3.18.81
76bb85f25229 x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context
a69b239eb1f3 can: c_can: don't indicate triple sampling support for D_CAN
e242b094d3b3 rbd: use GFP_NOIO for parent stat and data requests
30651596c4b0 MIPS: AR7: Ensure that serial ports are properly set up
66bf9d410964 MIPS: Fix CM region target definitions
a1b7688279b9 MIPS: microMIPS: Fix incorrect mask in insn_table_MM
174d20a4a01f ALSA: seq: Avoid invalid lockdep class warning
2a5c83f5bab1 ALSA: seq: Fix OSS sysex delivery in OSS emulation
1530d28a893e ARM: 8720/1: ensure dump_instr() checks addr_limit
1f166fb65e89 KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
cb870a365af4 crypto: x86/sha1-mb - fix panic due to unaligned access
c64cc4117fec KEYS: trusted: fix writing past end of buffer in trusted_read()
cdd1a3fd76d5 KEYS: trusted: sanitize all key material
76fc35d849a1 IB/ipoib: Change list_del to list_del_init in the tx object
a20ddebf8eaa Input: mpr121 - set missing event capability
a25320c7f317 Input: mpr121 - handle multiple bits change of status register
9d913538108b IPsec: do not ignore crypto err in ah4 input
3bd646aed682 usb: hcd: initialize hcd->flags to 0 when rm hcd
7d699b09bc99 serial: sh-sci: Fix register offsets for the IRDA serial port
34ed694c9281 phy: increase size of MII_BUS_ID_SIZE and bus_id
815b4687d317 dt-bindings: Add vendor prefix for LEGO
2ae575c1b42b dt-bindings: Add LEGO MINDSTORMS EV3 compatible specification
2febf192ed4b iio: trigger: free trigger resource correctly
2c2a08631aea ARM: omap2plus_defconfig: Fix probe errors on UARTs 5 and 6
dddb90d818a5 drm: drm_minor_register(): Clean up debugfs on failure
2eb85ef18c65 ARM: dts: imx53-qsb-common: fix FEC pinmux config
990f27cc79f3 xen/netback: set default upper limit of tx/rx queues to 8
170783f94e80 video: fbdev: pmag-ba-fb: Remove bad `__init' annotation
943dc0b3ef9f Linux 3.18.80
f772276045d8 staging: r8712u: Fix Sparse warning in rtl871x_xmit.c
ed7d79ee9e5e xen: don't print error message in case of missing Xenstore entry
e24061ae703d bt8xx: fix memory leak
dd795459b42d s390/dasd: check for device error pointer within state change interrupts
4220879c089e staging: lustre: ptlrpc: skip lock if export failed
4e3492219704 staging: lustre: hsm: stack overrun in hai_dump_data_field
ffe4638c9609 platform/x86: intel_mid_thermal: Fix module autoload
5a2f613a97d9 xen/manage: correct return value check on xenbus_scanf()
e79412f61f0e cx231xx: Fix I2C on Internal Master 3 Bus
4d941aa300bf i2c: riic: correctly finish transfers
52f145db2870 ext4: do not use stripe_width if it is not set
f59fbdd36216 ext4: fix stripe-unaligned allocations
2c9c8c7a4499 staging: rtl8712u: Fix endian settings for structs describing network packets
8c0ddbd6ae04 mmc: s3cmci: include linux/interrupt.h for tasklet_struct
6c3c4c7373de x86/microcode/intel: Disable late loading on model 79
77336ca65ccf drm/msm: fix an integer overflow test
f449835963f4 drm/msm: Fix potential buffer overflow issue
163e8355bbe9 ocfs2: fstrim: Fix start offset of first cluster group during fstrim
e03cbe4026a4 ARM: 8715/1: add a private asm/unaligned.h
5814e7754a0a arm64: ensure __dump_instr() checks addr_limit
211b1914f59a ASoC: adau17x1: Workaround for noise bug in ADC
ef2518bac630 KEYS: fix out-of-bounds read during ASN.1 parsing
bcb91ec291c1 KEYS: return full count in keyring_read() if buffer is too small
e5c2a548f826 cifs: check MaxPathNameComponentLength != 0 before using it
e2943f47605b ALSA: seq: Fix nested rwsem annotation for lockdep splat
856849bd48ee ALSA: timer: Add missing mutex lock for compat ioctls
b6885d31d1c6 blk-mq: fix race between timeout and freeing request
4f823316dac3 Linux 3.18.79
5560a1cac111 ecryptfs: fix dereference of NULL user_key_payload
56621bc7d28c can: kvaser_usb: Correct return value in printout
7242605318a0 scsi: sg: Re-fix off by one in sg_fill_request_table()
16c847d66c10 scsi: zfcp: fix erp_action use-before-initialize in REC action trace
38dc93fa8402 assoc_array: Fix a buggy node-splitting case
9c73743447f2 Input: gtco - fix potential out-of-bound access
b7be20b0175f fuse: fix READDIRPLUS skipping an entry
458a78ab7eb1 spi: uapi: spidev: add missing ioctl header
aaa7d1a5d9f1 usb: xhci: Handle error condition in xhci_stop_device()
55d4aa12af57 ceph: unlock dangling spinlock in try_flush_caps()
b44ef85f9033 Linux 3.18.78
114dff8ef64e FS-Cache: fix dereference of NULL user_key_payload
38118617a584 af_packet: don't pass empty blocks for PACKET_V3
9a8835679e67 parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels
e967f7593831 parisc: Avoid trashing sr2 and sr3 in LWS code
9918b51157fd cls_api.c: Fix dumping of non-existing actions' stats.
98c4e5cae520 KEYS: don't let add_key() update an uninstantiated key
f6a2c3d4b0ce lib/digsig: fix dereference of NULL user_key_payload
400f063f4dbc KEYS: encrypted: fix dereference of NULL user_key_payload
20f5c5dc8381 bus: mbus: fix window size calculation for 4GB windows
c47889a4006e brcmsmac: make some local variables 'static const' to reduce stack size
d35801d437f5 i2c: ismt: Separate I2C block read from SMBus block read
e2c0ddbe64bd ALSA: hda: Remove superfluous '-' added by printk conversion
38b463456f98 ALSA: seq: Enable 'use' locking in all configurations
34b9ecf806f8 can: esd_usb2: Fix can_dlc value for received RTR, frames
405c43ceb0ae can: gs_usb: fix busy loop if no more TX context is available
e9aeba8003dc usb: hub: Allow reset retry for USB2 devices on connect bounce
6e500be96d0c usb: quirks: add quirk for WORLDE MINI MIDI keyboard
d3d493cf2567 usb: cdc_acm: Add quirk for Elatec TWN3
7238612a72e1 USB: serial: metro-usb: add MS7820 device id
7c1c88e160ed USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
d9fbd49c6dfa USB: devio: Revert "USB: devio: Don't corrupt user memory"
6f457819e834 Linux 3.18.77
3cde552980e9 Revert "tty: goldfish: Fix a parameter of a call to free_irq"
e524bfab417c target/iscsi: Fix unsolicited data seq_end_offset calculation
1405b8e763e6 uapi: fix linux/mroute6.h userspace compilation errors
d090846a538d uapi: fix linux/rds.h userspace compilation errors
ffc669a3af00 scsi: scsi_dh_emc: return success in clariion_std_inquiry()
b370a0378091 ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock
7cab72603623 crypto: xts - Add ECB dependency
bcd17067a231 net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs
2d9e4b59c8fa Btrfs: send, fix failure to rename top level inode due to name collision
21bf570719a5 iio: adc: xilinx: Fix error handling
9a5043741109 netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.
ef0423167be6 irqchip/crossbar: Fix incorrect type of local variables
5961adefd0f3 watchdog: kempld: fix gcc-4.3 build
981199076d96 locking/lockdep: Add nest_lock integrity test
4a8a916d932e Revert "bsg-lib: don't free job in bsg_prepare_job"
bc8a5a45208d net: Set sk_prot_creator when cloning sockets to the right proto
b0763909b453 packet: in packet_do_bind, test fanout with bind_lock held
5eaafe649af9 l2tp: fix race condition in l2tp_tunnel_delete
88db37f8e4de l2tp: Avoid schedule while atomic in exit_net
6132b4ff8fbd vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
ba554fc7dc2b isdn/i4l: fetch the ppp_write buffer in one shot
e4ffdf9ead59 packet: hold bind lock when rebinding to fanout hook
63692f8b33bd bpf/verifier: reject BPF_ALU64|BPF_END
db27397942aa sctp: potential read out of bounds in sctp_ulpevent_type_enabled()
1512129452b8 ext4: avoid deadlock when expanding inode size
9b7e3d75f8c3 drm/dp/mst: save vcpi with payloads
608c3080b009 x86/mm: Disable preemption during CR3 read+write
1e8e6b30d014 Linux 3.18.76
cbe4d8c077e7 Revert "usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write"
954e2ed41fec ALSA: seq: Fix missing NULL check at remove_events ioctl
8ae04f638496 USB: serial: console: fix use-after-free after failed setup
2d0ffe43f2b9 USB: serial: qcserial: add Dell DW5818, DW5819
740ffa11b45a USB: serial: option: add support for TP-Link LTE module
704e5f08e7af USB: serial: cp210x: add support for ELV TFD500
d7795bf6a9d8 fix unbalanced page refcounting in bio_map_user_iov
2159252e70e9 direct-io: Prevent NULL pointer access in submit_page_section
a2b295db33d4 usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options
c57f813cb880 ALSA: caiaq: Fix stray URB at probe error path
f12baf790258 ALSA: seq: Fix copy_from_user() call inside lock
035e6d0b5b19 ALSA: seq: Fix use-after-free at creating a port
9d263dba2528 ALSA: usb-audio: Kill stray URB at exiting
4207aada9b81 iommu/amd: Finish TLB flush in amd_iommu_unmap()
2b15a69dc20c usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet
e4a25d305457 KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
43c9d794871f crypto: shash - Fix zero-length shash ahash digest crash
f4cf5d75416a HID: usbhid: fix out-of-bounds bug
f74c7fb21ee5 CIFS: Reconnect expired SMB sessions
6d1c3f7ed291 ext4: in ext4_seek_{hole,data}, return -ENXIO for negative offsets
3e2bb7d281ed Linux 3.18.75
b7ff160a8ba4 ext4: fix fencepost in s_first_meta_bg validation
2ce649fdacd5 ext4: validate s_first_meta_bg at mount time
79012f0216a1 ext4: Don't clear SGID when inheriting ACLs
5ca606ad34f7 ext4: fix data corruption for mmap writes
7798893bcb2f fs/super.c: fix race between freeze_super() and thaw_super()
9d3562bbfd34 ext4: only call ext4_truncate when size <= isize
f5a35eb7a803 drm/i915/bios: ignore HDMI on port A
884d5129c355 HID: i2c-hid: allocate hid buffers for real worst case
389721fabce2 driver core: platform: Don't read past the end of "driver_override" buffer
e29b6128817a ALSA: usx2y: Suppress kernel warning at page allocation failures
c52be88a5d67 lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
fce8db2c2cbd uwb: ensure that endpoint is interrupt
4a8d50298909 uwb: properly check kthread_run return value
6fd03e48dc8a iio: adc: mcp320x: Fix oops on module unload
85a14a6de4f7 iio: ad7793: Fix the serial interface reset
e1087d24eff5 iio: core: Return error for failed read_reg
923f18a8aacd staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack.
440edb76708f iio: ad_sigma_delta: Implement a dedicated reset function
9a7370be51a4 xhci: fix finding correct bus_state structure for USB 3.1 hosts
0502bf54bd01 USB: fix out-of-bounds in usb_set_configuration
8c7124a5295a usb: Increase quirk delay for USB devices
8f0a7703ff9e USB: uas: fix bug in handling of alternate settings
d55567406fbd USB: devio: Don't corrupt user memory
36283d676804 USB: dummy-hcd: fix infinite-loop resubmission bug
f47d4026e5d7 USB: dummy-hcd: fix connection failures (wrong speed)
4b01fcab0516 usb: pci-quirks.c: Corrected timeout values used in handshake
ee44ff5445ae ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
be8077a03a27 usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction
98578949897f usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe
c57e55706abe usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives
59bf5c20792e USB: gadgetfs: fix copy_to_user while holding spinlock
c2b87de9b5bf USB: gadgetfs: Fix crash caused by inadequate synchronization
abb540b53976 usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write
ac0058305d83 Linux 3.18.74
703937f005ea mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
36c84b22ac8a crypto: algif_skcipher - Load TX SG list after waiting
9d5012da8b97 staging: nvec: remove duplicated const
9c4ae8f3e5f7 ttpci: address stringop overflow warning
0cd9a4647a23 ALSA: au88x0: avoid theoretical uninitialized access
e288325e93fb IB/qib: fix false-postive maybe-uninitialized warning
b8710e2d77f3 libata: transport: Remove circular dependency at free time
c9103723b7e4 xfs: remove kmem_zalloc_greedy
d0bd573a6543 md/raid10: submit bio directly to replacement disk
75a12b2fa80c rds: ib: add error handle
22126c602203 parisc: perf: Fix potential NULL pointer dereference
0a1b807cb2b6 netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
b05c24d64d4c exynos-gsc: Do not swap cb/cr for semi planar formats
c8cab6f202a1 netfilter: invoke synchronize_rcu after set the _hook_ to NULL
0fe19e5c6616 mmc: sdio: fix alignment issue in struct sdio_func
0ee6c8e78758 usb: plusb: Add support for PL-27A1
eafffc0aabc1 team: fix memory leaks
fbbb384f5208 net/packet: check length in getsockopt() called with PACKET_HDRLEN
1728786b2b59 net: core: Prevent from dereferencing null pointer when releasing SKB
4c963eff7d97 audit: log 32-bit socketcalls
40e63fb87a3f partitions/efi: Fix integer overflow in GPT size calculation
61e43da985aa USB: serial: mos7840: fix control-message error handling
920027fef719 USB: serial: mos7720: fix control-message error handling
7e4194e7e7f4 IB/ipoib: Replace list_del of the neigh->list with list_del_init
8d8a5bbc3976 IB/ipoib: rtnl_unlock can not come after free_netdev
6fc261c1e77d IB/ipoib: Fix deadlock over vlan_mutex
0961072120f3 tty: goldfish: Fix a parameter of a call to free_irq
8c28f3279141 ARM: 8635/1: nommu: allow enabling REMAP_VECTORS_TO_RAM
f905dad52252 hwmon: (gl520sm) Fix overflows and crash seen when writing into limit attributes
ff0377a98825 sh_eth: use correct name for ECMR_MPDE bit
9ff3b35e994d MIPS: Ensure bss section ends on a long-aligned address
23e5fd9c55ca RDS: RDMA: Fix the composite message user notification
523a387bb0c0 drm: bridge: add DT bindings for TI ths8135
ffc97d4dde1d Linux 3.18.73
376c6f62f8d4 fix xen_swiotlb_dma_mmap prototype
bc9f6868dfb5 swiotlb-xen: implement xen_swiotlb_dma_mmap callback
2d53f0b14066 video: fbdev: aty: do not leak uninitialized padding in clk to userspace
f23ec06d527c x86/fpu: Don't let userspace set bogus xcomp_bv
540125645c70 btrfs: prevent to set invalid default subvolid
0544aab81d35 PCI: Fix race condition with driver_override
6ad74630c016 kvm: nVMX: Don't allow L2 to access the hardware CR8
6528968794bc arm64: Make sure SPsel is always set
d9100405a20a bsg-lib: don't free job in bsg_prepare_job
65e3664fc608 nl80211: check for the required netlink attributes presence
9f119f5cc048 vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
64304f5ae2f3 SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
b3c1243ba1bc SMB: Validate negotiate (to protect against downgrade) even if signing off
b93becabbaf4 powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
6ea8051f42d9 KEYS: prevent KEYCTL_READ on negative key
e3b663ba2ddd KEYS: prevent creating a different user's keyrings
50f17a4b9141 KEYS: fix writing past end of user-supplied buffer in keyring_read()
2d9db72fb50e crypto: talitos - fix sha224
fec4cd33779f scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly
58061248504a tracing: Erase irqsoff trace with empty write
8923bf76c1ea tracing: Fix trace_pipe behavior for instance traces
9b9ce7484a5f KVM: PPC: Book3S: Fix race and leak in kvm_vm_ioctl_create_spapr_tce()
998173c7a119 mac80211: flush hw_roc_start work before cancelling the ROC
456bbdc86d18 cifs: release auth_key.response for reconnect.
0c317759e780 cifs: release cifs root_cred after exit_cifs
0e13335254d5 Linux 3.18.72
0aad447e99a0 bcache: fix bch_hprint crash and improve output
50aee960b0d1 bcache: fix for gc and write-back race
c04dc907e590 bcache: Correct return value for sysfs attach errors
0b312f81db41 bcache: correct cache_dirty_target in __update_writeback_rate()
615f8ab2ffcd bcache: Fix leak of bdev reference
cfa0386af092 bcache: initialize dirty stripes in flash_dev_run()
15ac0595018f media: uvcvideo: Prevent heap overflow when accessing mapped controls
6b3412ff9661 media: v4l2-compat-ioctl32: Fix timespec conversion
19b86cde5150 PCI: shpchp: Enable bridge bus mastering if MSI is enabled
13bbb8242ab2 ARC: Re-enable MMU upon Machine Check exception
88645cf3edc0 tracing: Apply trace_clock changes to instance max buffer
45a521cba610 ftrace: Fix selftest goto location on error
78d88643d218 scsi: qla2xxx: Fix an integer overflow in sysfs code
9793679d8dc9 scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
691e12db75fb scsi: sg: factor out sg_fill_request_table()
9f8cb7be5242 scsi: sg: off by one in sg_ioctl()
a19e985cac6d scsi: sg: use standard lists for sg_requests
53a5b214a406 scsi: sg: remove 'save_scat_len'
9f582840f9e5 scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
bb5d52954f27 scsi: zfcp: trace HBA FSF response by default on dismiss or timedout late response
2a30f9d54768 scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace records
277958c8e3c0 scsi: zfcp: fix missing trace records for early returns in TMF eh handlers
9799a4d5fc26 scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path
ad385a77e093 scsi: zfcp: fix queuecommand for scsi_eh commands when DIX enabled
2e41a42cf3d1 skd: Submit requests to firmware before triggering the doorbell
3070df32bfdf skd: Avoid that module unloading triggers a use-after-free
1074b91bdd4b md/bitmap: disable bitmap_resize for file-backed bitmaps.
617f119a64ce block: Relax a check in blk_start_queue()
87e47744e187 powerpc: Fix DAR reporting when alignment handler faults
ab1717dafd83 ext4: fix incorrect quotaoff if the quota feature is enabled
1d4ba7f963a9 crypto: AF_ALG - remove SGL terminator indicator when chaining
a6d09b8a6ee3 Input: i8042 - add Gigabyte P57 to the keyboard reset table
53c94358a14f ip6_gre: fix endianness errors in ip6gre_err
c8443922edb7 Revert "usb: musb: fix tx fifo flush handling again"
70768be91bcc f2fs: check hot_data for roll-forward recovery
4c97e1c4a67c ipv6: fix typo in fib6_net_exit()
fbca27ad2916 ipv6: fix memory leak with multiple tables during netns destruction
1722ca90e1b8 tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
39194a40eef5 Revert "net: phy: Correctly process PHY_HALTED in phy_stop_machine()"
fea532ea08ad qlge: avoid memcpy buffer overflow
51ef0b663c13 ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
60a8261b1257 Linux 3.18.71
b766f0849a52 xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
43d51814b7b3 ARM: 8692/1: mm: abort uaccess retries upon fatal signal
090aa4651522 Bluetooth: Properly check L2CAP config option output buffer length
bceac1033cd9 ALSA: msnd: Optimize / harden DSP and MIDI loops
8e7e643a6c6d locktorture: Fix potential memory leak with rw lock test
b66950d5233b btrfs: resume qgroup rescan on rw remount
19011e6ac194 scsi: sg: recheck MMAP_IO request length with lock held
57923c952ce8 scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
61b491f57cbd cs5536: add support for IDE controller variant
18f9ff5c8ad5 workqueue: Fix flag collision
e7023d138bb0 cma: fix calculation of aligned offset
fcd5675c40ab dlm: avoid double-free on error path in dlm_device_{register,unregister}
524386e8e90a Input: trackpoint - assume 3 buttons when buttons detection fails
2c97bb69c0d0 driver core: bus: Fix a potential double free
158333ad9be6 staging/rts5208: fix incorrect shift to extract upper nybble
d512a57678a6 USB: core: Avoid race of async_completed() w/ usbdev_release()
7d68769591b6 usb:xhci:Fix regression when ATI chipsets detected
f638d3131560 usb: Add device quirk for Logitech HD Pro Webcam C920-C
f396fe577f51 USB: serial: option: add support for D-Link DWM-157 C1
d70662e5a2e1 usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
Linux version 3.18.100-gfe19e8d9a3b5 (android-
build@vpeb5.mtv.corp.google.com) (gcc version 4.9.x 20150123
(prerelease) (GCC) ) #1 SMP PREEMPT Thu Mar 22 17:33:39 UTC 2018
Bug: 68836198
Change-Id: Ie060f073e295e784f2d9648c5caf9a608d7fc59f
Source-Branch: android-msm-marlin-3.18
Signed-off-by: Thierry Strudel <tstrudel@google.com>
diff --git a/Image.gz-dtb.kasan b/Image.gz-dtb.kasan
index 0796093..2aa7ccb 100644
--- a/Image.gz-dtb.kasan
+++ b/Image.gz-dtb.kasan
Binary files differ
diff --git a/Image.lz4-dtb b/Image.lz4-dtb
index f7c1d46..8cd79c5 100644
--- a/Image.lz4-dtb
+++ b/Image.lz4-dtb
Binary files differ
