https://source.android.com/security/bulletin/2019-02-01
CVE-2018-10879
CVE-2019-2000
CVE-2019-2001

Fix for CVE-2019-1999 not publicly available yet
Merge 3.18.133 into android-3.18

Changes in 3.18.133
	sparc32: Fix inverted invalid_frame_pointer checks on sigreturns
	CIFS: Do not hide EINTR after sending network packets
	cifs: Fix potential OOB access of lock element array
	usb: cdc-acm: send ZLP for Telit 3G Intel based modems
	USB: storage: don't insert sane sense for SPC3+ when bad sense specified
	USB: storage: add quirk for SMI SM3350
	slab: alien caches must not be initialized if the allocation of the alien cache failed
	ACPI: power: Skip duplicate power resource references in _PRx
	i2c: dev: prevent adapter retries and timeout being set as minus value
	crypto: cts - fix crash on short inputs
	sunrpc: use-after-free in svc_process_common()
	tty/ldsem: Wake up readers after timed out down_write()
	can: gw: ensure DLC boundaries after CAN frame modification
	media: em28xx: Fix misplaced reset of dev->v4l::field_count
	ipv6: fix kernel-infoleak in ipv6_local_error()
	packet: Do not leak dev refcounts on error exit
	net: bridge: fix a bug on using a neighbour cache entry without checking its state
	crypto: authenc - fix parsing key with misaligned rta_len
	btrfs: wait on ordered extents on abort cleanup
	Yama: Check for pid death before checking ancestry
	scsi: sd: Fix cache_type_store()
	mfd: tps6586x: Handle interrupts on suspend
	Disable MSI also when pcie-octeon.pcie_disable on
	omap2fb: Fix stack memory disclosure
	media: vivid: fix error handling of kthread_run
	media: vivid: set min width/height to a value > 0
	media: vb2: vb2_mmap: move lock up
	sunrpc: handle ENOMEM in rpcb_getport_async
	selinux: fix GPF on invalid policy
	sctp: allocate sctp_sockaddr_entry with kzalloc
	block/loop: Use global lock for ioctl() operation.
	drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
	media: vb2: be sure to unlock mutex on errors
	r8169: Add support for new Realtek Ethernet
	MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
	jffs2: Fix use of uninitialized delayed_work, lockdep breakage
	pstore/ram: Do not treat empty buffers as valid
	powerpc/pseries/cpuidle: Fix preempt warning
	media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
	net: call sk_dst_reset when set SO_DONTROUTE
	scsi: target: use consistent left-aligned ASCII INQUIRY data
	clk: imx6q: reset exclusive gates on init
	kconfig: fix memory leak when EOF is encountered in quotation
	mmc: atmel-mci: do not assume idle after atmci_request_end
	perf svghelper: Fix unchecked usage of strncpy()
	perf parse-events: Fix unchecked usage of strncpy()
	dm kcopyd: Fix bug causing workqueue stalls
	dm snapshot: Fix excessive memory usage and workqueue stalls
	ALSA: bebob: fix model-id of unit for Apogee Ensemble
	sysfs: Disable lockdep for driver bind/unbind files
	ocfs2: fix panic due to unrecovered local alloc
	mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
	Linux 3.18.133

Change-Id: Iae1b5884ce164585bebcb670eb3f29a4493a66ad
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>