tree dc0047ecdf3b9ded3e13c530a879a7f1725e7530
parent 289e1c5419500d6b16623b29b1e69f00aba5dacc
author Mark Salyzyn <salyzyn@google.com> 1463416883 -0700
committer The Android Automerger <android-build@google.com> 1464373775 -0700

flounder: update kernel prebuild (Jul MR2) (DO NOT MERGE)

27fbd78 net: wireless: bcmdhd: security enhancement for BRCM ether type
1cd9d55 Replace %p with %pK to prevent leaking kernel address
6452ab2 tegra: camera race condition vulnerability
e44c039b video: tegra: host: fix out-of-bound access in case of overflow
7494d67 BACKPORT: USB: fix invalid memory access in hub_activate() (Part Deux)
facdf07 UPSTREAM: USB: fix invalid memory access in hub_activate()
463defb UPSTREAM: tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
e5fda4c video: tegra: host: Fix ch open error handling
6d1ed63 camera: tegra: Fix security vulnerability
3eb206a BACKPORT: f2fs: add a max block check for get_data_block_bmap
ad0def3 UPSTREAM: AIO: properly check iovec sizes
9137a22 camera: tegra: Fix stack overread
5a6ab9e video: adf: zero out mapping data on adf_buffer_map() failure

Right after commit
2700fb3 media: tegra: camera: sanity-check sizeof value ioctl parameter

Signed-off-by: Greg Hackmann <ghackmann@google.com>
Signed-off-by: Mark Salyzyn <salyzyn@google.com>
Bug: 26492805
Bug: 27436822
Bug: 27532522
Bug: 28026625
Bug: 28193342
Bug: 28271368
Bug: 28376656
Bug: 28409131
Bug: 28447556
Bug: 28522274
Bug: 28588279
Bug: 28712303
Bug: 28794373
Bug: 28810349
Change-Id: If7db3cbdac76295ad9659b8601651684f0b9d806