shamu: update prebuilt kernel [ DO NOT MERGE ]

99eda76 ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct
11bbb5a ANDROID: binder: Add strong ref checks
e6af25b qseecom: validate the inputs of __qseecom_send_modfd_resp
00e7ae4 msm: mdss: Correct block id check for mdss_mdp_misr_table
c9c8402 msm: crypto: Fix integer overflow check in qcedev driver
cc2365a msm: camera: sensor: Fix use after free condition
2620fa0 msm: camera: restructure data handling to be more robust
146d91c arm64: dma-mapping: always clear allocated buffers
0033b0a binder: prevent kptr leak by using %pK format specifier
2cf6554 BACKPORT: tcp: make challenge acks less predictable
16317e3 UPSTREAM: net: Fix use after free in the recvmmsg exit path
f13192e ASoC: check for null function pointer for dummy device read/write
08f501d msm: mdss: Fix to validate data copied from user space
dd61ceb usb: gadget: f_usbnet: zero out CRC padding
272c67d staging: android: Change %p to %pK in debug messages

Linux version 3.10.40-g99eda76 (
(gcc version 4.8 (GCC) )
 #1 SMP PREEMPT Wed Aug 24 20:49:34 UTC 2016 ( mnc-mr2 )

Bug: 28838221
Bug: 29157595
Bug: 29513227
Bug: 29795245
Bug: 29914434
Bug: 29999665
Bug: 30019716
Bug: 30102557
Bug: 30143283
Bug: 30148243
Bug: 30445380
Bug: 30515201
Bug: 30768347
Bug: 30809774
Bug: 30874196
Change-Id: I43f9df2ac9dd71a49d38bf04de92b7b91f047701
Source-Branch: android-msm-shamu-3.10-mnc-mr2
Signed-off-by: Patrick Tjin <>
diff --git a/zImage-dtb b/zImage-dtb
index 2d253e2..01d6c52 100644
--- a/zImage-dtb
+++ b/zImage-dtb
Binary files differ