Merge "CDD: Clarify the requirement for kernel stack buffer overflow protections." into oreo-dev