tree d522b8073b8e7d56aa0a4137e7e5c355666f4795
parent 1eb8ae1509af7f4bb9a4a803f4aaf30f74baa6a8
author Steve Pfetsch <spfetsch@google.com> 1507885449 -0700
committer Steve Pfetsch <spfetsch@google.com> 1507885449 -0700

bullhead: update kernel prebuilt [ DO NOT MERGE ANYWHERE ]

476e010d Merge branch 'android-msm-bullhead-3.10-oc-security-next' into android-msm-bullhead-3.10-oc
510c22e9 msm: gud: Remove gud driver
0cee9126 qseecom: Fix accessing userspace memory in kernel space
bee9a25f ANDROID: scsi: Add segment checking in sg_read
d49505d2 qcacld-2.0: Add bound check for numap to avoid integer overflow
2b1b24b8 msm: camera: Make use of mutex lock to avoid race condition
377b6758 ASoC: msm: qdsp6v2: clear address on error
c31ee5c0 coresight: tmc: Fix the unbalanced lock in tmc_read()
b73156e5 coresight: tmc: Fix use after free issue with tmc read
427e3e15 fbdev: msm: Allocate fd with O_CLOEXEC flag
98bd4639 msm: mdss: validate page id before reading from edid buffer
1b1d3381 msm: ipa: Add mutext protection when updating notify req cache
28ef4d7f qcacld-2.0: Check on IE length to avoid buffer over-read
6b4554b8 qcacld-2.0: Fix invalid buffer access in send mgmt tx
21bab4fe BACKPORT: dentry name snapshots
68e5a3c7 angler: remove 'reboot edl' interface for security.
505b8327 msm: sensor: Add mutex lock during ois power down operations
1ede4694 diag: Fix for possible dci stale entries
96a3947b diag: dci: Add protection while querying event status
ab177706 diag: dci: Add mutex protection while accessing client details
652f01eb diag: dci: Add protection while de-initializing clients
ab1e30ef ANDROID: usb: gadget: f_mtp: Return error if count is negative
a961645b UPSTREAM: ALSA: timer: Call notifier in the same spinlock
41455882 UPSTREAM: ALSA: timer: Fix race between stop and interrupt
7b2f2455 UPSTREAM: ALSA: timer: Fix link corruption due to double start or stop
babbb1fc UPSTREAM: ALSA: timer: Code cleanup
874d3848 BACKPORT: ALSA: timer: Fix race at concurrent reads
3fa00095 BACKPORT: ALSA: timer: Handle disconnection more safely
cbba392b UPSTREAM: ALSA: timer: Fix wrong instance passed to slave callbacks
b757637f UPSTREAM: ALSA: timer: Harden slave timer list handling
4a997f92 UPSTREAM: ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
1c00f5b5 BACKPORT: ALSA: timer: Fix race between read and ioctl
0a2954f1 msm: vidc: Squash the below changes
163a9936 v4l2: Refactor, fix security bug in compat ioctl32
240cee8f msm: camera: Avoid deadlock for vb2 operations using separate lock
e4e29ab1 ANDROID: ion: Fix uninitialized variable
3611c756 Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket
d2a946f6 Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket
67862abd Merge branch 'android-msm-bullhead-3.10-oc' into android-msm-bullhead-3.10-oc-security-next
2a6401ae Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-oc
0406b382 Merge branch 'android-msm-bullhead-3.10-nyc-mr2-security-next' into android-msm-bullhead-3.10-nyc-mr2
bb3c16f2 qcacld-2.0: Skip an IE if found more its max times in a frame
1ed090bc net: usb: rmnet_usb_ctrl:Make sure list_head operate atomically
5ba94b6f ASoC: msm: qdspv2: add mutex to prevent access same memory simultaneously
a50ca3ce qcacld-2.0: Update SIR_MAC_AUTH_CHALLENGE_LENGTH as per IEEE spec
d7285900 qcacld-2.0: Update limComputeCrc32 to pass uint16_t
adb96af5 qcacld-2.0: Add bound check before writing to channel list
a37be93b msm: mdss: hdmi: check up-bound of CEC frame size
0a893142 msm: camera2: cpp: Fix iommu_attach/detach compat_ioctl issue
0d0fdf2b qcacld-2.0: Add check for set_ft_ies buffer length
d9b19534 UPSTREAM: brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
8f5bc497 SoC: msm: audio-effects: return directly to avoid integer overflow
d78717de msm: kgsl: Protect the event->handle with spinlock
757f0b6b diag: Add proper synchronization checks to msg mask table
120d28ba qcacld-2.0: Remove code related to mmap functionality for pktlog
e1e0e57c BACKPORT: perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
a30bdf22 cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE
98f7c17d cfg80211: Check if PMKID attribute is of expected size
baebf455 msm: sensor: Fix crash when ioctl VIDIOC_MSM_SENSOR_INIT_CFG
fb88a914 msm: camera: Bound check for num_of_stream.
3ee7145e ALSA: pcm: prevent UAF in snd_pcm_info
47166c8e ANDROID: input: keychord: fix race condition bug
aca1f2ce BACKPORT: FROMLIST: pids: make task_tgid_nr_ns() safe
52557696 Merge branch 'android-msm-bullhead-3.10-oc' into android-msm-bullhead-3.10-oc-security-next
42e7fb17 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-nyc-mr2-security-next
a51b1600 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-oc
81f6559d Merge branch 'android-msm-bullhead-3.10-nyc-mr2-security-next' into android-msm-bullhead-3.10-nyc-mr2
856abd9a qcacld-2.0: Add an attribute to represent PNO/EPNO Request ID
a1589871 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-oc
bc13965d Merge branch 'android-msm-bullhead-3.10-nyc-mr2-security-next' into android-msm-bullhead-3.10-nyc-mr2
49eec96a qcacld-2.0: Avoid buffer overread when parsing PNO commands
a77634f8 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-oc
11d1008c Merge branch 'android-msm-bullhead-3.10-nyc-mr2-security-next' into android-msm-bullhead-3.10-nyc-mr2
c46874c8 msm: mdss: Buffer overflow while processing gamut table data
ed6814c1 qcacld-2.0: Avoid extscan bucket spec overread
42a28a93 qcacld-2.0: Validate vendor set roaming params command
68898d36 qcacld-2.0: Add get valid channels entry to NLA policy
5204ea3c qcacld-2.0: Avoid buffer overread when parsing PNO commands
6a165676 qcacld-2.0: Fix kernel memory corruption
d8669a00 msm: mdss: Increase fbmem buf ref count before use
8bb2e7a1 crypto: msm: Fix several race condition issues in crypto drivers
4d602a2d ASoC: msm: qdsp6v2: add size check to fix out of bounds issue
c18c5935 qcacld-2.0: Properly validate QCA_WLAN_VENDOR_ATTR_NDP_IFACE_STR
7dff4291 qcacld-2.0: Avoid overread when configuring MAC addresses
6d19d7d4 qcacld-2.0: Validate vendor command do_acs
9f5af495 qcacld-2.0: Apply policy to fine time measurement
0d355164 compat_qcedev: Fix accessing userspace memory in kernel space
181940e5 msm: camera: sensor:validating the flash initialization parameters
3fabdcba qcacld-2.0: Check target address boundary before access
4d723395 qcacld-2.0: Restrict max/min pktlog buffer size using pktlogconf tool
b4990c46 UPSTREAM: sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
9e08c4d3 qcacld-2.0: Fix Uninitialized memory issue
e77c27b2 Revert "Revert "msm: sps: Fix race condition in SPS debugfs APIs""
822958b5 qcacld-2.0: Drop assoc request if RSNIE/WPAIE parsing fail
3f786450 Merge branch 'android-msm-bullhead-3.10-oc' into android-msm-bullhead-3.10-oc-security-next
34a16271 Merge branch 'android-msm-bullhead-3.10-nyc-mr2' into android-msm-bullhead-3.10-nyc-mr2-security-next

Linux version 3.10.73-g476e010d8028 (android-
    build@wprf8.hot.corp.google.com) (gcc version 4.9.x-google
    20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Oct 13 03:22:04
    UTC 2017

Bug: 31495866
Bug: 33982955
Bug: 34170483
Bug: 34276203
Bug: 34329758
Bug: 34624167
Bug: 35138888
Bug: 36006779
Bug: 36006981
Bug: 36232584
Bug: 36492827
Bug: 36730104
Bug: 36815952
Bug: 36816726
Bug: 36817053
Bug: 36817548
Bug: 36818836
Bug: 36819059
Bug: 36895857
Bug: 37093119
Bug: 37240993
Bug: 37284397
Bug: 37429972
Bug: 37623773
Bug: 37687303
Bug: 37713609
Bug: 37720349
Bug: 37721426
Bug: 37893116
Bug: 37901413
Bug: 37949660
Bug: 62058746
Bug: 62084791
Bug: 62085265
Bug: 62201221
Bug: 62298712
Bug: 62378232
Bug: 62378962
Bug: 62456806
Bug: 62674846
Bug: 62827928
Bug: 62949902
Bug: 62952032
Bug: 63100473
Bug: 63173580
Bug: 63522505
Bug: 63689921
Bug: 63868020
Bug: 63868629
Bug: 63868933
Bug: 64258073
Bug: 64431967
Bug: 64431968
Bug: 64433362
Bug: 64438726
Bug: 64438727
Bug: 64438728
Bug: 64440043
Bug: 64441352
Bug: 64453105
Bug: 64453422
Bug: 64453423
Bug: 64693798
Bug: 64728950
Bug: 64728953
Bug: 65023233
Bug: 65468973
Bug: 65468975
Bug: 65468986
Bug: 65468993
Bug: 65558923
Bug: 67749279
Change-Id: I08f40b2064a410fbce4f7fadbe6a0a26e8bdde48
Source-Branch: android-msm-bullhead-3.10-oc
Signed-off-by: Steve Pfetsch <spfetsch@google.com>