tree 45dc2e523b6fdd702a79c09bd8c1d2e79e67484a
parent 21daeec97d1e6833106c40fdf6c20e4fa8441f62
author Mark Salyzyn <salyzyn@google.com> 1479169031 -0800
committer android-merger <android-merger@vpba3.mtv.corp.google.com> 1480533167 -0800

flounder: update kernel prebuild (Jan 2017 NYC-MR1 Security)

f7e8d07 net: wireless: bcmdhd: fix use-after-free in _dhd_pno_get_for_batch()
c3c4f0a video: tegra: host: fix create fence error checks
717090a gpu: nvgpu: gk20a: wrap debug session as optional
78c92d7 net: wireless: bcmdhd: fix overrun in dhd_pno_set_cfg_gscan
22a5a2f input: synaptics_dsx: add update bounds checks.
99a3450 net: wireless: bcmdhd: fix buffer overrun in wl_cfgvendor_hotlist_cfg
8353016 net: wireless: bcmdhd: Fix up the BRCM wifi DHD code
f6bfb80 net: wireless: bcmdhd: fix buffer overrun in private command path
ab21147 net: wireless: bcmdhd: fix buffer overrun in anqpo config
d237fba nvmap_ioctl_pinop failure to initialize addr field
8aa87ee video: tegra: host: Add submit checks
5d5095d ALSA: info: Check for integer overflow in snd_info_entry_write()
38b7b94 perf: don't leave group_entry on sibling list (use-after-free)
2190da5 media: tegra: nvavp: Fix UAF issue.
e85b751 video: tegra: nvmap: fix nvmap create handle vulnerability
e7c1f64 tegra: information leak in GET_STATUS ioctl command
b6dea2e gpu: nvgpu: fix crash in gk20a_channel_release
11603a5 video: tegra: host: Protect channel ioctl
fd89df9 video: tegra: host: Prevent the race between channel open and close
ca04323 video: tegra: nvmap: Fix OOB vulnerability
4af032a net: wireless: bcmdhd: Heap over write in dhdmsgbuf_query_ioctl

last commit before this set is:
e912bb7 BACKPORT: mm: remove gup_flags FOLL_WRITE games from __get_user_pages()

Signed-off-by: Mark Salyzyn <salyzyn@google.com>
Bug: 32838767
Bug: 31801049
Bug: 31799885
Bug: 32370135
Bug: 32174590
Bug: 31525965
Bug: 31968442
Bug: 32474971
Bug: 32219255
Bug: 29000183
Bug: 32219453
Bug: 31668540
Bug: 31799834
Bug: 32510733
Bug: 32402548
Bug: 31798848
Bug: 32160775
Bug: 31351206
Bug: 31799206
Bug: 32225180
Bug: 31797770
Bug: 31993456
Bug: 31822524
Change-Id: I8266f01735312c7bc55f1c91ff3afd8ac0a54861
(cherry picked from commit 1f1c93dec3d1a056c750a47052e87500232b5628)